tora_or_software[.]rar

resource
unpack001/TORA Operations Research Software/setup.exe
unpack002/COMCAT.DLL
unpack002/SETUP1.EXE
unpack002/ST6UNST.EXE
unpack002/VB6STKIT.DLL
unpack002/asycfilt.dll
unpack002/msvbvm60.dll
unpack002/oleaut32.dll
unpack002/olepro32.dll
unpack002/stdole2.tlb
unpack002/tora.exe

tora_or_software.rar

SHA256 b3be21ee725c02741b2c666a8064db8cffb8bdc9a6d5821f5daaf9d636ae4713
MD5 190c47ad6b3e060f7ba5eae3e4602c12
SHA1 ece5801a15160b6654fd4b0c0b8fb9736c00d7bb
SHA512 e2579f0fd583c484a9448abf8185d558d817264205abdc66ffd477cea47413a1f97257a1afcee2846c905b4f19e1c9fb4ac22711b27e6ae75afa631fced0617f
SSDEEP 49152:hw705LC0XloHp7LEYCiN0rO2xR9KIIJr/PoAQD9dK2OOM88C:+705LXKBLEDrO2xR9KII5YAO9dtOOMO
MD5 SHA1 SHA512 SSDEEP

TORA Operations Research Software/READ.ToraQuickGuide.txt

SHA256 68791be8c7697bac8a3f4234657a667b4bcb17fc2386c057a0d2fce241ac21d5
MD5 00ef4b55ee4bf2c688b36ca13a7d8c30
SHA1 afe4de26f00b710e76f1010166ccbe7037fa7c02
SHA512 43ff8ba724f1c1efc0cfd77a2b7e1bed6456dea90a90b9a9e9faa3eb1092be9ad09a924e15382dd7aaad3d307aa501a6afb50534bc524f5f23217c5ac85a7ecc
MD5 SHA1 SHA512

TORA Operations Research Software/ReadMe.txt

SHA256 d66465d50a1abbe45be67b54c511ab976c8b98f5776d29cbe73dda0074bf50cf
MD5 1fcfc11ca94fad521d22e9fb169e1c5f
SHA1 4b1e91f8e709fba5a86f77334af444e13f7fbf66
SHA512 7d61d4079c3626b09997781d01a9e6cc1ce2de7a96cc4d7c5d87329062f5bb6349f67f07c6f8abe97357dd874c9249ba25fd7d0dadfa358d536f12d0b9107565
MD5 SHA1 SHA512

TORA Operations Research Software/SETUP.LST

SHA256 274832c8ee77266af5bbad6552bba13a9d6db8fadadfd0b423555b30030442c6
MD5 f1b2cdbeb140f60882d961bc43a8df8f
SHA1 724774bcfd14fa2644bdd35b7a76fb02f24381a2
SHA512 6982afaf7ebc14ddf10c4f9e7ccd213b49bafa0ce70f7a491f85e8cf1cadc31fa0e8a3d0e1dfb090d97765d5c23f43b8a0e25c432fd25bb72aa4cfbaa6982b26
MD5 SHA1 SHA512

TORA Operations Research Software/setup.exe

IMPHASH e0645631469507a53fff2b011b90023d
SHA256 978123c86b1cbc981770fbd8bdfc58ef4030f8d9b3adf06b71b928cc0394c073
MD5 35561a7acb299a7278e8706fd6e01aa0
SHA1 41e1f323eb44cb474bf04567bed95f4767502131
SHA512 0d7784c6e9c175027f627b522cafedd87d0f85afb16fb86f9c91a7a045894621e0c9b50d785132e5d5d44c1d21cb76b669960d64212b34c07863039c9b6e499b
SSDEEP 3072:RqwmOGqM8OROAO5UTS7vdWcoWxg7YjcZJQgh9/J:Rq0M8OQAO5WSocVxgGcj/
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

78112

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

gdi32

GetStockObject SetTextColor CreateFontIndirectA DeleteObject GetDeviceCaps SetBkColor SelectObject GetTextMetricsA

shell32

SHGetPathFromIDListA SHGetSpecialFolderLocation SHGetMalloc

user32

MessageBoxA UpdateWindow UnregisterClassA GetWindowLongA PeekMessageA CharNextA DispatchMessageA DestroyWindow PostMessageA PackDDElParam CharPrevA SetWindowTextA BeginPaint GetClientRect EndPaint DrawTextA OffsetRect IsWindow PostQuitMessage FindWindowA GetSystemMetrics ShowCursor GetDC ShowWindow MoveWindow ReleaseDC BringWindowToTop GetMessageA TranslateMessage wvsprintfA SetFocus InvalidateRect LoadStringA LoadCursorA LoadIconA UnpackDDElParam ExitWindowsEx wsprintfA CreateWindowExA DefWindowProcA RegisterClassA SendMessageA

comdlg32

GetOpenFileNameA

advapi32

AdjustTokenPrivileges RegEnumKeyExA OpenProcessToken RegCloseKey LookupPrivilegeValueA RegSetValueExA RegCreateKeyA RegQueryInfoKeyA RegOpenKeyExA RegQueryValueExA

ole32

CoUninitialize OleInitialize OleUninitialize CoCreateInstance CoInitialize

oleaut32

SysAllocStringLen VariantChangeTypeEx VariantClear VariantTimeToSystemTime RegisterTypeLi LoadTypeLi

version

GetFileVersionInfoSizeA GetFileVersionInfoA VerQueryValueA VerInstallFileA

kernel32

OpenFile GlobalFree CloseHandle GetCPInfo SetFilePointer LCMapStringA GetCurrentProcessId LCMapStringW VirtualFree HeapCreate VirtualAlloc SetStdHandle GetStdHandle HeapDestroy SetEndOfFile GetCommandLineA SetHandleCount SetCurrentDirectoryA GetCurrentDirectoryA GetStartupInfoA GetLocalTime GetSystemTime SetEnvironmentVariableA HeapFree HeapAlloc GetTimeZoneInformation ExitProcess FileTimeToLocalFileTime TerminateProcess GetFileType FileTimeToSystemTime GetFileAttributesA RemoveDirectoryA GetVersion GetWindowsDirectoryA GetSystemDirectoryA GetVersionExA HeapReAlloc CreateFileA LocalFree SystemTimeToFileTime LocalFileTimeToFileTime CreateDirectoryA GetModuleHandleA GetDriveTypeA SetFileTime LoadLibraryA GetProcAddress GetExitCodeProcess FlushFileBuffers CompareStringW GetStringTypeW GetStringTypeA RtlUnwind GetEnvironmentStringsW GetEnvironmentStrings LocalAlloc GlobalDeleteAtom _lread _lwrite _lclose GetFileSize GetPrivateProfileStringA FreeEnvironmentStringsW FreeEnvironmentStringsA UnhandledExceptionFilter GetOEMCP GetACP lstrcatA lstrcpyA lstrlenA lstrcmpiA OutputDebugStringA SetFileAttributesA CopyFileA GetModuleFileNameA FindClose Sleep IsDBCSLeadByte WriteFile FindFirstFileA GetFullPathNameA FreeLibrary SetErrorMode LocalLock MoveFileExA GlobalAddAtomA CreateProcessA GlobalAlloc lstrcpynA GlobalUnlock GlobalLock GlobalFindAtomA CompareStringA GetShortPathNameA GetTempPathA MoveFileA DeleteFileA ReadFile GetTempFileNameA GetLastError GetCurrentProcess MultiByteToWideChar WideCharToMultiByte LocalUnlock

TORA Operations Research Software/test.txt

SHA256 c8bd6e8594dbaf8090cd57f766b13616ad3b3ba8756a06e6df09050c01b65066
MD5 566b68a78659cb70634199661311e564
SHA1 dff9da845b1adf740544177378355bd976879bc0
SHA512 15df6fbe255df164745f5d52cf18a7e07241deaf168c108e948a71a6816194440bbabcc821c62ad411261ff95872b1f2aad75c32e0de1a856bc0d6e21bffd8cc
MD5 SHA1 SHA512

TORA Operations Research Software/tora.CAB

SHA256 96ebc498a2c51c05c14660a62adb0e97b73b72aa26608008464bb5d291f7c55c
MD5 c13240f6e638b4065e72b0d67ce20d75
SHA1 f86f39c86c75c700481d031fc3c631102e57aad2
SHA512 92bd0856021de57f38ef557e8e395443aca0cc9a44fc5b60668358c76a15bda95c129fc9bd5b55479b01945dafa7d963bda409775f3afffa710da79624a8989f
SSDEEP 49152:Ft44Akm1leeLMyP580YQAy11qYTeFST4X7JmeKCxtR1ByCiRZ5Q4:Fl/0leeLMEGO1qYTzTMD/TyC044
MD5 SHA1 SHA512 SSDEEP

COMCAT.DLL

IMPHASH 5316dd1ba7417f578451f902c4b4f845
SHA256 96d04cdfaf4f4d7b8722b139a15074975d4c244302f78034b7be65df1a92fd03
MD5 3b180da2b50b954a55fe37afba58d428
SHA1 c2a409311853ad4608418e790621f04155e55000
SHA512 cf94ad749d91169078b8829288a2fc8de86ec2fe83d89dc27d54d03c73c0deca66b5d83abbeaa1ff09d0acac4c4352be6502945b5187ecde952cbb08037d07e8
SSDEEP 384:23Fob3slaN3oF1fHICOoMzMv/QTIBjDVquODJXsUW7ftWs6:Yo7s28JnOxzMv/QsBjRqugXspd
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED IMAGE_FILE_DLL

PDB paths

COMDLG32.OCX

IMPHASH 988f29c1eb8054253091352741683c76
SHA256 46f4fdb12c30742ff4607876d2f36cf432cdc7ec3d2c99097011448fc57e997c
MD5 d76f0eab36f83a31d411aeaf70da7396
SHA1 9bc145b54500fb6fbea9be61fbdd90f65fd1bc14
SHA512 9c22bc6b2e7dbcd344809085894b768cfa76e8512062c5bbf3caeaa2771c6b7ce128bd5a0b6e385a5da777d0d822a5b2191773cc0ddb05abe1fa935fa853d79d
SSDEEP 3072:VESIiWD8uq4hCqUt6mqD1gRshBgH/voqJrwo2CocrJbQN6N2TRqEydzXS0:VETz566VgRyOJ0oDxQRHf
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows:4 windows x86 arch:x86

PE Signature issue

Digest

N/A

Digest Algorithm

N/A

PE Digests Matches

Not matched

Trusted

Not trusted

Subject

OU=VeriSign Commercial Software Publishers CA,O=VeriSign\, Inc.,L=Internet

Serial Number

03:c7:8f:37:db:92:28:df:3c:bb:1a:ad:82:fa:67:10

Issuer

OU=VeriSign Commercial Software Publishers CA,O=VeriSign\, Inc.,L=Internet

Timespan

Apr 9, 1996 - Jan 7, 2004

Subject

OU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust Network

Serial Number

13:89:b4:d1:8a:e8:a7:c4:bd:35:c7:9b:8d:88:ca:1f:ca:53:56:91

Issuer

OU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust Network

Timespan

May 12, 1997 - Dec 31, 1999

Subject

OU=VeriSign Time Stamping Service+OU=VeriSign Trust Network+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign\, Inc.,L=Internet

Serial Number

bd:11:9a:da:43:ed:21:fb:46:58:84:89:ca:46:88:90:25:ee:14:60

Issuer

OU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust Network

Timespan

May 12, 1997 - Dec 31, 1999

Subject

CN=Microsoft Corporation,OU=VeriSign Commercial Software Publishers CA+OU=www.verisign.com/repository/RPA Incorp. by Ref.\,LIAB.LTD(c)98+OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Microsoft Corporation,O=VeriSign\, Inc.,L=Internet+L=Redmond,ST=Washington,C=US

Serial Number

55:0d:88:f5:3f:64:16:d7:0c:73:00:d8:45:92:16:34

Issuer

OU=VeriSign Commercial Software Publishers CA,O=VeriSign\, Inc.,L=Internet

Key Usages

KeyUsageDigitalSignature, KeyUsageKeyEncipherment

Timespan

Mar 19, 1999 - Apr 16, 2000

Minor OS version

0

Major OS version

4

Entry point

5296

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED IMAGE_FILE_DLL

PDB paths

kernel32

HeapReAlloc GetLastError LockResource GetWindowsDirectoryA InterlockedDecrement InterlockedIncrement IsDBCSLeadByte CompareStringA CompareStringW lstrcmpA GetLocaleInfoA GetVersion GetModuleFileNameA GetFileAttributesA IsBadWritePtr DisableThreadLibraryCalls GlobalAlloc lstrcmpiA LoadLibraryA GetProcAddress lstrcatA lstrlenA lstrcpyA WriteProfileStringA GlobalLock GlobalUnlock LoadResource FindResourceA lstrcpynA LeaveCriticalSection DeleteCriticalSection FreeLibrary HeapFree WideCharToMultiByte lstrlenW HeapAlloc GetProfileStringA EnterCriticalSection GetProcessHeap GetCurrentThreadId MultiByteToWideChar InitializeCriticalSection GlobalFree

user32

SetWindowRgn IntersectRect EqualRect PtInRect IsDialogMessageA IsChild GetKeyState CreateDialogIndirectParamA MessageBeep PostMessageA ClientToScreen wsprintfA SendMessageTimeoutA CharNextA GetActiveWindow GetWindowThreadProcessId LoadCursorA MessageBoxA GetWindowLongA GetWindowRect CreateWindowExA SetWindowLongA ShowWindow DialogBoxParamA EnableWindow GetDesktopWindow GetWindow IsWindowEnabled OffsetRect GetParent GetDlgItem SendMessageA SetFocus SetParent SetDlgItemInt EndPaint SetActiveWindow IsWindowVisible WinHelpA GetDlgItemInt EndDialog GetDlgItemTextA DestroyWindow SetDlgItemTextA GetWindowTextA GetNextDlgTabItem SendDlgItemMessageA RegisterClassA GetDC ReleaseDC LoadIconA DrawIcon DestroyIcon GetSystemMetrics RegisterWindowMessageA LoadStringA DefWindowProcA UnregisterClassA GetClientRect BeginPaint RegisterClipboardFormatA SetWindowPos MoveWindow

ole32

CreateOleAdviseHolder CoCreateInstance CoTaskMemAlloc CoTaskMemFree ReleaseStgMedium

advapi32

RegEnumKeyExA RegQueryValueA RegOpenKeyA RegQueryValueExA RegDeleteValueA RegDeleteKeyA RegOpenKeyExA RegCreateKeyExA RegSetValueExA RegCloseKey

oleaut32

LoadRegTypeLi OleCreatePropertyFrame SetErrorInfo UnRegisterTypeLi LoadTypeLi LoadTypeLibEx OleLoadPicture VariantChangeType RegisterTypeLi VariantInit GetErrorInfo VariantClear SysStringLen SysAllocStringLen OleTranslateColor SysFreeString SysAllocString CreateErrorInfo

comdlg32

CommDlgExtendedError PrintDlgA ChooseFontA ChooseColorA GetOpenFileNameA GetSaveFileNameA

gdi32

GetDIBits CreateCompatibleDC CreateBitmap GetSystemPaletteEntries StretchDIBits SetViewportOrgEx SetWindowExtEx SetWindowOrgEx SetMapMode LPtoDP SetViewportExtEx GetViewportExtEx CreateRectRgnIndirect GetWindowExtEx CreateDCA GetObjectA EnumFontFamiliesA DeleteDC DeleteObject GetDeviceCaps SelectObject

DBGRID32.OCX

IMPHASH 6a64e5b2d788fc5ccfe5529f5f992734
SHA256 6cc3e18193118e5d5e0d9a3c765ff2e649a99641b55a79abf1463ed5d46928db
MD5 ec2f4fce368dade257d89a1bde1de380
SHA1 7026e068eaaa6c46a29d1cbf50b057a1744d67ce
SHA512 cdf1d5e4d7270a7a582edaf16dfda3253d31df48b3af6e333c716b1459fce3b62c14f8b002e77daa07c5a075b05efd3ba3b7073c45b830d0a86d20f7d22f1f52
SSDEEP 6144:1RMh9f2cQ02j1bNHu/v/4jk0+zlOMKSHLO7GcrxXkbFmjKUUFoQ/8qY93lsrbB20:vwts08bNHd8lOMKSHLBSxXupY3sPB20
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows:4 windows x86 arch:x86

PE Signature issue

Digest

N/A

Digest Algorithm

N/A

PE Digests Matches

Not matched

Trusted

Not trusted

Minor OS version

0

Major OS version

4

Entry point

113104

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

IsBadWritePtr GetLastError SetFilePointer lstrlenA MultiByteToWideChar IsBadReadPtr IsBadCodePtr FlushFileBuffers CloseHandle EnterCriticalSection GetModuleFileNameA LoadLibraryA GetLocaleInfoA GetEnvironmentStringsW SetUnhandledExceptionFilter WriteFile FreeEnvironmentStringsA FreeEnvironmentStringsW GetEnvironmentStrings GetCPInfo GetOEMCP GetACP GetFileType GetStartupInfoA GetStdHandle HeapCreate SetHandleCount HeapDestroy HeapSize GetStringTypeW GetStringTypeA TerminateProcess HeapReAlloc GetCurrentProcess GetModuleHandleA ExitProcess GetVersion HeapAlloc GetProcAddress GetCommandLineA GlobalAlloc HeapFree RtlUnwind GlobalFree GlobalLock GlobalUnlock FreeLibrary MulDiv DeleteCriticalSection WideCharToMultiByte GetPrivateProfileIntA InitializeCriticalSection LockResource FindResourceA LoadResource GetWindowsDirectoryA FreeResource lstrcmpA LCMapStringA CompareStringA LCMapStringW SetStdHandle lstrcpyA GetFileAttributesA ReadFile SetEndOfFile CreateFileA GetLocaleInfoW CompareStringW LeaveCriticalSection IsDBCSLeadByte GetTickCount SizeofResource GetUserDefaultLCID OutputDebugStringA

ole32

CreateDataAdviseHolder CoCreateInstance CreateILockBytesOnHGlobal CreateStreamOnHGlobal OleCreateDefaultHandler StgCreateDocfileOnILockBytes CoGetMalloc StgCreateDocfile CoTaskMemAlloc StringFromIID CreateOleAdviseHolder

oleaut32

VariantClear VariantInit SysStringByteLen GetErrorInfo OleCreatePropertyFrame SysAllocStringByteLen SafeArrayAccessData SafeArrayUnaccessData DispGetIDsOfNames SafeArrayCreate SysAllocString VariantChangeType SysStringLen VariantCopyInd SysFreeString VariantCopy OleTranslateColor SafeArrayPutElement SafeArrayGetLBound LoadRegTypeLi SafeArrayGetElement SafeArrayGetUBound SafeArrayGetDim OleCreateFontIndirect OleCreatePictureIndirect SafeArrayDestroy

gdi32

CloseMetaFile SetWindowOrgEx SetMapMode SetWindowExtEx StretchBlt SetViewportOrgEx CreateMetaFileA SetViewportExtEx CreateCompatibleBitmap GetStockObject SaveDC LPtoDP RestoreDC GetTextMetricsA CreateFontIndirectA GetTextExtentPointA MoveToEx IntersectClipRect LineTo GetViewportOrgEx CreatePen SetBkMode CreateHatchBrush SetROP2 Rectangle PatBlt GetROP2 GetDeviceCaps CreateCompatibleDC CreateDCA SelectObject DeleteDC BitBlt SetBkColor CreateSolidBrush GetObjectA DeleteObject GetBkMode SetTextColor GetTextFaceA GetNearestColor GetTextColor GetBkColor SetBrushOrgEx CreateBitmapIndirect GetTextExtentPoint32A ExtTextOutA UnrealizeObject

user32

ClientToScreen AppendMenuA CreatePopupMenu SetWindowTextA EnableWindow InvalidateRect SendDlgItemMessageA RegisterClipboardFormatA FrameRect GetKeyState GetFocus SetFocus CreateWindowExA GetClassLongA SetWindowLongA GetSystemMetrics SendMessageA CallWindowProcA PostMessageA MessageBeep MessageBoxA PeekMessageA DispatchMessageA GetDC ReleaseDC SetDlgItemTextA LoadBitmapA GetDlgItem GetWindowRect ScreenToClient EndDialog DefWindowProcA DialogBoxParamA LoadStringA wsprintfA CharNextA TrackPopupMenu DestroyCursor RegisterClassA SetCursor IsDlgButtonChecked RegisterWindowMessageA DestroyMenu LoadCursorA EnableMenuItem wvsprintfA IsClipboardFormatAvailable CloseClipboard SetClipboardData EmptyClipboard OpenClipboard GetClipboardData DestroyWindow ShowWindow MoveWindow IsWindow CopyRect IntersectRect SetScrollPos SetWindowPos GetWindowLongA InflateRect GetParent GetClassInfoA GetClassNameA GetDialogBaseUnits CreateDialogIndirectParamA IsDialogMessageA GetWindow CheckDlgButton GetWindowTextLengthA ClipCursor GetClipCursor GetCursorPos UnregisterClassA GetSysColor GetScrollRange GetClientRect PtInRect GetScrollPos ScrollWindowEx SetScrollRange FillRect IsWindowVisible EndPaint BeginPaint SetCapture GetDesktopWindow ShowCaret DrawFocusRect HideCaret DrawTextA IsRectEmpty ShowScrollBar GetUpdateRect SubtractRect SetCursorPos ReleaseCapture

advapi32

RegOpenKeyA RegDeleteKeyA RegEnumKeyA RegCreateKeyA RegSetValueA RegCloseKey

Name

.text

Size

356KB

Virtual Size

356KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

27KB

Virtual Size

27KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

11KB

Virtual Size

22KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

6KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

84KB

Virtual Size

84KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

21KB

Virtual Size

20KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

MSFLXGRD.OCX

IMPHASH 138f160cfefa07306f399d9bfa41ad11
SHA256 4e592240b745546c15e95e26b2547cec86352a49ee1ef79b3e3d28df8b5a0e70
MD5 07bae8106a135df779abc46ec603ea09
SHA1 be98c98a35da6ced57b7fc3c2fc933efa84b4273
SHA512 6ab494ea9e1c633969d5fe6c14411ec20f7073e464e2738c545deefbdc5fb84fb26ff3e9641236cf1afb4d90633437cd312ff5c665c0c8f462c101a957fffbeb
SSDEEP 6144:vMV3LOqB4GvoBOCzYRpHGbBFYe0SwX6ktCfh13cBvT:vMzaGKOCzYRANKX6kQB67
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows:4 windows x86 arch:x86

PE Signature issue

Digest

N/A

Digest Algorithm

N/A

PE Digests Matches

Not matched

Trusted

Not trusted

Subject

OU=VeriSign Commercial Software Publishers CA,O=VeriSign\, Inc.,L=Internet

Serial Number

03:c7:8f:37:db:92:28:df:3c:bb:1a:ad:82:fa:67:10

Issuer

OU=VeriSign Commercial Software Publishers CA,O=VeriSign\, Inc.,L=Internet

Timespan

Apr 9, 1996 - Jan 7, 2004

Subject

OU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust Network

Serial Number

13:89:b4:d1:8a:e8:a7:c4:bd:35:c7:9b:8d:88:ca:1f:ca:53:56:91

Issuer

OU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust Network

Timespan

May 12, 1997 - Dec 31, 1999

Subject

OU=VeriSign Time Stamping Service+OU=VeriSign Trust Network+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign\, Inc.,L=Internet

Serial Number

bd:11:9a:da:43:ed:21:fb:46:58:84:89:ca:46:88:90:25:ee:14:60

Issuer

OU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust Network

Timespan

May 12, 1997 - Dec 31, 1999

Subject

CN=Microsoft Corporation,OU=VeriSign Commercial Software Publishers CA+OU=www.verisign.com/repository/RPA Incorp. by Ref.\,LIAB.LTD(c)98+OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Microsoft Corporation,O=VeriSign\, Inc.,L=Internet+L=Redmond,ST=Washington,C=US

Serial Number

55:0d:88:f5:3f:64:16:d7:0c:73:00:d8:45:92:16:34

Issuer

OU=VeriSign Commercial Software Publishers CA,O=VeriSign\, Inc.,L=Internet

Key Usages

KeyUsageDigitalSignature, KeyUsageKeyEncipherment

Timespan

Mar 19, 1999 - Apr 16, 2000

Minor OS version

0

Major OS version

4

Entry point

5128

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED IMAGE_FILE_DLL

PDB paths

kernel32

VirtualAlloc GetStringTypeA GetStringTypeW GlobalFree LCMapStringA LCMapStringW GlobalLock GlobalSize GetVersionExA WriteFile GetEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsW FreeEnvironmentStringsA GetOEMCP GetACP GetCPInfo VirtualFree HeapCreate HeapDestroy GetStartupInfoA GetFileType GetStdHandle SetHandleCount GetCurrentProcess TerminateProcess ExitProcess GetCommandLineA GetFileAttributesA GetVersion DisableThreadLibraryCalls FindResourceA LoadResource LockResource GetLastError GetProcAddress GetLocaleInfoA LoadLibraryA GetWindowsDirectoryA HeapReAlloc GetModuleFileNameA InterlockedDecrement MultiByteToWideChar GetProfileStringA FreeLibrary DeleteCriticalSection InitializeCriticalSection lstrcmpiA lstrcpynA InterlockedIncrement GlobalUnlock GlobalAlloc lstrcmpA HeapAlloc lstrcatA HeapFree WideCharToMultiByte lstrlenW lstrcpyA lstrlenA MulDiv GetProcessHeap LeaveCriticalSection EnterCriticalSection lstrcpyW IsDBCSLeadByte InterlockedExchange

user32

GetDlgItemInt IsDlgButtonChecked RegisterWindowMessageA PeekMessageA SetFocus GetFocus GetSysColor GetSystemMetrics FillRect PeekMessageW PostMessageW SetWindowPos GetDlgItem SendDlgItemMessageA InvalidateRect GetActiveWindow DialogBoxParamA EndDialog GetWindowRect SetDlgItemInt MoveWindow SetDlgItemTextA GetDlgItemTextA GetClipboardFormatNameA MapWindowPoints SetCursorPos RegisterClipboardFormatA UnregisterClassA CreateDialogIndirectParamA IsChild IsWindowEnabled GetNextDlgTabItem IsDialogMessageA WinHelpA ShowWindow SetWindowRgn IntersectRect EqualRect GetParent ClientToScreen GetWindow BeginPaint EndPaint SendMessageA MessageBeep wsprintfA DestroyWindow GetWindowLongA SetWindowLongA DrawTextA DrawTextExA CheckDlgButton ReleaseCapture KillTimer DrawFocusRect SetTimer SetCapture SetCursor DefWindowProcA EnableWindow GetCursorPos ScreenToClient PtInRect PostMessageA DrawEdge FrameRect InflateRect LoadCursorA RegisterClassA GetDC ReleaseDC CharNextA GetKeyState SetRect UpdateWindow IsWindow GetScrollRange ScrollWindow OffsetRect SetScrollRange GetClientRect SetScrollPos CreateWindowExA IsWindowVisible LoadStringA MessageBoxA SetParent

ole32

CreateOleAdviseHolder ReleaseStgMedium DoDragDrop RegisterDragDrop RevokeDragDrop CoCreateInstance OleLoadFromStream OleSaveToStream CoTaskMemFree CoTaskMemRealloc CoTaskMemAlloc

advapi32

RegEnumKeyExA RegQueryValueA RegOpenKeyA RegQueryValueExA RegDeleteValueA RegDeleteKeyA RegOpenKeyExA RegCreateKeyExA RegSetValueExA RegCloseKey

oleaut32

SafeArrayCopy SafeArrayPutElement SafeArrayGetElement SafeArrayCreate SafeArrayDestroy SafeArrayGetLBound SafeArrayGetUBound SafeArrayAccessData SafeArrayUnaccessData VariantCopyInd VariantCopy LoadTypeLibEx UnRegisterTypeLi RegisterTypeLi CreateErrorInfo SetErrorInfo LoadTypeLi LoadRegTypeLi OleCreatePropertyFrame VariantClear SysAllocString GetErrorInfo SysAllocStringLen SysStringLen VariantInit VariantChangeType OleCreatePictureIndirect SysFreeString OleTranslateColor SafeArrayRedim OleCreateFontIndirect

gdi32

SetViewportOrgEx GetWindowExtEx GetViewportExtEx LPtoDP SetWindowOrgEx GetNearestColor CreatePalette GetBitmapBits CreateDIBitmap SelectPalette RealizePalette GetDIBits GetPaletteEntries CopyEnhMetaFileA CopyMetaFileA CreateDCA CreatePen DeleteObject CreateSolidBrush SelectObject GetObjectA DeleteDC StretchBlt GetStockObject CreateCompatibleBitmap CreateCompatibleDC GetTextMetricsA RestoreDC ExcludeClipRect SaveDC LineTo MoveToEx SetTextColor SetBkMode GetCurrentPositionEx SetViewportExtEx SetWindowExtEx DPtoLP SetMapMode GetTextColor CreateBitmap EnumFontFamiliesExA GetDeviceCaps GetTextExtentPoint32A CreateFontIndirectA CreateRectRgnIndirect

SETUP1.EXE

IMPHASH 4d509ffe740b37c7b6ce748642da3704
SHA256 6a15b76e1526e1fd6ebaecacc59c3e954d0feb0b566c81538ea6dad2edcffe16
MD5 e40041e0ca436c712332edaa9db7df08
SHA1 deb8ead922f4f1acbadebf0db998f6ba2dc53db0
SHA512 1111be364c3d81dc919d1e7ba7bd141cda6555844d889f00a2b2cb0ee5c19bd0b122ae4b574a3cdfa268668eebec43fa265b44e1b8fa28faaa335824647b8bc2
SSDEEP 6144:0uOQemROOMqMA8K3eEGOCUgtLD2J9dh4bYTJ6QKq:3O2OmMQGp2J9+
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

16032

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

__vbaVarTextTstLe __vbaVarSub __vbaStrI2 _CIcos _adj_fptan __vbaVarMove __vbaStrI4 __vbaVarVargNofree __vbaFreeVar __vbaLineInputStr __vbaGosubReturn ord588 __vbaStrVarMove __vbaLenBstr ord589 ord697 __vbaFreeVarList _adj_fdiv_m64 __vbaFreeObjList ord516 _adj_fprem1 __vbaRecAnsiToUni ord518 ord519 __vbaCopyBytes __vbaResume __vbaStrCat __vbaLsetFixstr ord660 __vbaVarTextTstEq __vbaSetSystemError __vbaRecDestruct __vbaNameFile __vbaHresultCheckObj __vbaLenVar _adj_fdiv_m32 ord667 __vbaAryDestruct __vbaLateMemSt ord669 __vbaForEachCollObj __vbaBoolStr __vbaExitProc __vbaFileCloseAll ord595 __vbaCyAdd __vbaOnError __vbaObjSet _adj_fdiv_m16i ord597 __vbaObjSetAddref _adj_fdivr_m16i ord598 __vbaStrFixstr __vbaBoolVar ord520 __vbaForEachCollVar __vbaStrTextCmp ord523 __vbaBoolVarNull _CIsin ord631 __vbaErase __vbaVarCmpGt __vbaLateMemStAd __vbaNextEachCollObj ord632 ord525 __vbaVarZero __vbaChkstk __vbaGosubFree __vbaFileClose ord526 EVENT_SINK_AddRef ord527 ord528 __vbaGenerateBoundsError __vbaStrCmp __vbaCyI2 ord529 __vbaCyI4 __vbaObjVar __vbaNextEachCollVar __vbaPrintObj __vbaI2I4 DllFunctionCall __vbaVarOr __vbaVarLateMemSt __vbaLbound __vbaRedimPreserve _adj_fpatan __vbaR4Var __vbaLateIdCallLd __vbaRedim __vbaRecUniToAnsi EVENT_SINK_Release __vbaNew ord600 __vbaVarTextTstNe __vbaUI1I2 _CIsqrt __vbaVarAnd EVENT_SINK_QueryInterface __vbaFpCmpCy __vbaVarTextCmpEq __vbaVarMul __vbaExceptHandler __vbaPrintFile __vbaStrToUnicode ord606 _adj_fprem _adj_fdivr_m64 __vbaGosub ord607 __vbaI2Str __vbaVarDiv ord530 ord608 ord531 __vbaFPException __vbaInStrVar ord532 ord717 __vbaStrVarVal __vbaUbound ord533 ord534 __vbaVarCat __vbaDateVar __vbaI2Var ord644 ord537 ord645 _CIlog ord646 __vbaErrorOverflow __vbaFileOpen ord647 ord648 __vbaInStr __vbaNew2 ord571 __vbaCyMulI2 _adj_fdiv_m32i ord572 _adj_fdivr_m32i ord573 __vbaStrCopy ord681 __vbaFreeStrList ord576 __vbaDerefAry1 __vbaVarTextTstGt _adj_fdivr_m32 __vbaPowerR8 ord577 _adj_fdiv_r ord578 ord685 ord100 ord579 __vbaI4Var __vbaAryLock __vbaLateMemCall __vbaVarAdd __vbaVarDup __vbaStrToAnsi ord613 __vbaFpI2 ord616 __vbaFpI4 __vbaVarCopy __vbaVarLateMemCallLd ord617 __vbaLateMemCallLd _CIatan ord618 __vbaStrMove __vbaCastObj __vbaStrVarCopy ord619 ord650 _allmul __vbaLenVarB __vbaLateIdSt ord651 __vbaVarTextCmpNe _CItan ord546 __vbaAryUnlock __vbaFPInt _CIexp __vbaMidStmtBstr ord580 __vbaFreeStr __vbaFreeObj ord581

ST6UNST.EXE

IMPHASH 2c2a74fe0776f6aac245ba9e8eeec7c6
SHA256 7e60c894a8cead6880fd3ed040504d02304a0b961304e40741340e31f5fa973d
MD5 996f83e516552ca3b51445bb994a6d38
SHA1 56fc6ba49195dedf735e6ce1b03ab36d72334f66
SHA512 5868100fdb274dbad44ea0996aa4ed0a930cce5c61ce55631869bd19ee09feb8a957bf2a4a87ba563f48bb65807dae5b2363c042d451843e9598b10f6c334d2f
SSDEEP 1536:hKTg6tZkYVxqdE5NLt3mZCSRCxDka6tg7N4G:IsixsE5b3mZCwC1AtgZ4G
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

32960

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateFileA ReadFile LocalFree SetFilePointer LocalAlloc GlobalDeleteAtom Sleep GlobalAddAtomA GlobalFree GlobalAlloc IsDBCSLeadByte GlobalLock GlobalFindAtomA CompareStringA WideCharToMultiByte WriteFile CloseHandle GetWindowsDirectoryA OpenProcess GetVersion FreeLibrary RemoveDirectoryA GetLastError DeleteFileA FindFirstFileA FindClose lstrlenA lstrcpyA lstrcatA lstrcmpA lstrcpynA MultiByteToWideChar CreateProcessA WaitForSingleObject SetErrorMode GetCurrentDirectoryA OutputDebugStringA LoadLibraryA GetProcAddress GetFileAttributesA GlobalUnlock VirtualAlloc IsBadWritePtr IsBadReadPtr SetUnhandledExceptionFilter VirtualFree HeapCreate HeapDestroy GetFileType GetStdHandle SetHandleCount GetEnvironmentStringsW GetEnvironmentStrings IsBadCodePtr FreeEnvironmentStringsW FreeEnvironmentStringsA lstrcmpiA GetModuleFileNameA UnhandledExceptionFilter GetOEMCP GetACP GetCPInfo HeapAlloc HeapFree GetCommandLineA GetStartupInfoA GetModuleHandleA GetCurrentProcess TerminateProcess ExitProcess SetCurrentDirectoryA SetEnvironmentVariableA RtlUnwind LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW

user32

PackDDElParam SendMessageA DispatchMessageA DefWindowProcA CharNextA DestroyWindow UnregisterClassA CreateWindowExA RegisterClassA wsprintfA UnpackDDElParam LoadStringA LoadIconA LoadCursorA MessageBoxA wvsprintfA TranslateMessage GetMessageA SetCursor ShowCursor SetDlgItemTextA SetWindowLongA EndDialog GetDlgItem SetFocus DialogBoxParamA UpdateWindow SetWindowTextA InvalidateRect CharUpperA CharPrevA BeginPaint GetClientRect DrawTextA SetRect EndPaint PostQuitMessage GetSystemMenu EnableMenuItem CreateDialogParamA GetWindowRect GetSystemMetrics SetWindowPos ShowWindow PostMessageA PeekMessageA FillRect SetClassLongA

gdi32

CreateSolidBrush SetROP2 Rectangle SelectObject SetTextColor SetBkMode GetStockObject GetTextMetricsA ExtTextOutA CreateFontIndirectA DeleteObject

advapi32

RegOpenKeyA RegEnumValueA RegEnumKeyA RegDeleteKeyA RegCloseKey RegDeleteValueA RegQueryValueExA RegSetValueExA RegCreateKeyA

shell32

SHGetMalloc SHGetSpecialFolderLocation SHGetPathFromIDListA

ole32

OleInitialize OleUninitialize

oleaut32

LoadTypeLi

VB6STKIT.DLL

IMPHASH 9f4b76d42cbc350286ec870347345155
SHA256 df6e2f111773adec3b33dcb0b31e2a4d21ef7d51740706335f411e2c999c0e6b
MD5 cff867572b44212b01b711c1fa009537
SHA1 3978c9f7a3d77c0bdff4353949e2143757eebc79
SHA512 1b77ef24b1efb4939e4625deb1f8ebccc3c2edbb49b412dadb8a3c293a265c77ea84d8eb725d3af5bb84d9c040a91debe5890f57ed8750147e91f30c1a0630c4
SSDEEP 3072:c6v5KkE3OEc4dUN5KgzIED1LAOWOa+dSogCh:csKkE+Ec4dU/KXEDunOaC
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

47264

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

user32

TranslateMessage CharNextA wsprintfA CharPrevA LoadStringA PeekMessageA MessageBoxA DispatchMessageA

advapi32

RegOpenKeyExA RegQueryValueExA RegCloseKey

shell32

SHGetMalloc SHGetPathFromIDListA SHGetSpecialFolderLocation

ole32

CoCreateInstance StringFromGUID2 OleInitialize OleUninitialize

oleaut32

RegisterTypeLi LoadTypeLi

kernel32

GetFileAttributesA CompareStringW GetStringTypeW DeleteFileA GetStringTypeA GetLocaleInfoA GetTimeZoneInformation LCMapStringW GetEnvironmentStringsW LCMapStringA FreeEnvironmentStringsW FreeEnvironmentStringsA GetEnvironmentStrings GetACP GetCPInfo HeapReAlloc GetLocaleInfoW FlushFileBuffers SetEnvironmentVariableA GetOEMCP GetVersion GetLastError lstrcatA lstrcpyA lstrcmpiA lstrlenA CopyFileA OpenFile Sleep lstrcpynA WriteFile CloseHandle SetFilePointer CreateFileA FreeLibrary GetProcAddress LoadLibraryA SetCurrentDirectoryA GetCurrentDirectoryA SetErrorMode LocalFree LocalUnlock LocalLock LocalAlloc SetFileTime GetFileTime GetWindowsDirectoryA MultiByteToWideChar CompareStringA WideCharToMultiByte GetModuleFileNameA VirtualAlloc HeapCreate VirtualFree TlsSetValue GetExitCodeProcess WaitForSingleObject CreateProcessA FindClose FindFirstFileA GetFileType SetFileAttributesA FileTimeToSystemTime FileTimeToLocalFileTime GetDriveTypeA ExitProcess TerminateProcess GetCurrentProcess HeapAlloc HeapFree ReadFile GetCommandLineA GetCurrentThreadId DeleteCriticalSection TlsAlloc TlsFree SetLastError TlsGetValue SetEndOfFile SetHandleCount GetStdHandle GetStartupInfoA GetFullPathNameA LeaveCriticalSection EnterCriticalSection InitializeCriticalSection SetStdHandle InterlockedDecrement InterlockedIncrement HeapDestroy

asycfilt.dll

IMPHASH 5deee9ef803f3882a12b5c1690dcfb3e
SHA256 e701cb227daa19c9b91ecf9975a12351bc4d73454b894695a6c5f74f65b9b77a
MD5 0bc326cd99125724987ceec7405496b6
SHA1 cfd440400244c182fd064508e873d62529d285f3
SHA512 efcad7817908ae1d503e7c1797e190b8b541cda62eb063aba4c96c0e7012803a3f2070cee597122974b84ad6c26c1c5508c57839df07a3fb140b817ef6fa7994
SSDEEP 1536:3+N9Jz5cgH8fVTikHij8fdShRDGD5XlOB7RegH0zNKl7Q+:c9Jzsfc46hRDm5XgBTUzNKlk+
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

62267

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

asycfilt.pdb

msvbvm60.dll

IMPHASH 5d13f1b45437e48acf7175e1471cd9aa
SHA256 fa75a67b0d6a8829993397c3a893c182641a8c4806bb1e46553dbad7f7aaf5d4
MD5 e949eee7d1be07e32267fe10d9992c38
SHA1 a4241fd4850a6e2fa36ef788a34283a23b85fbbb
SHA512 22a789ff7fa41eb739c11a7a9e24f7db86b477650d0c89d937811ebb8a044093019c0728429c9880ee4d76d9bdcaa1d6dbd95ed7b623db619eba0f715586a35c
SSDEEP 24576:Rc4BJ69cQtOv6iAPEF/HNBqXTG7UOB4JWE3tF+tGpzhkFGz8Jb6:RZX6HtOvOXTG7UNJWE3tFvzj4W
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

6888

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

ExitThread FlushFileBuffers CreateDirectoryA RemoveDirectoryA CreateThread MoveFileA LockFile UnlockFile TerminateProcess RaiseException GetCPInfo lstrlenA GetOEMCP SetHandleCount GetStdHandle FreeEnvironmentStringsA FreeEnvironmentStringsW GetEnvironmentStrings GetEnvironmentStringsW SetStdHandle GetStringTypeW lstrcpynA _lclose SetEnvironmentVariableA GetTimeZoneInformation GetLocaleInfoA lstrcmpiA GetLastError GetModuleHandleA GetSystemDefaultLangID FormatMessageA HeapCreate GetWindowsDirectoryA GetPrivateProfileStringA lstrcatA CreateFileA ReadFile CloseHandle LeaveCriticalSection EnterCriticalSection InitializeCriticalSection DeleteCriticalSection InterlockedIncrement InterlockedDecrement IsDBCSLeadByte IsBadReadPtr TlsGetValue lstrcpyA DeleteFileA lstrcmpA GetCurrentThreadId GetVersionExA HeapAlloc HeapFree LCMapStringW GetStringTypeA GetModuleFileNameW GetUserDefaultLangID GetComputerNameA SetFileAttributesA FileTimeToLocalFileTime FileTimeToSystemTime GetFileTime SetFileTime GetLocalTime SetLocalTime RtlUnwind CreateProcessW IsValidCodePage FormatMessageW GetStartupInfoA UnhandledExceptionFilter ExitProcess SetCurrentDirectoryA GetStringTypeExA GetVolumeInformationA FindFirstFileA FindNextFileA FindClose VirtualFree GetSystemInfo VirtualAlloc VirtualProtect FlushInstructionCache GetShortPathNameA WinExec lstrlenW lstrcpyW WriteFile SetEndOfFile SetFilePointer GetSystemTime SystemTimeToFileTime WaitForMultipleObjects ReleaseMutex CreateMutexA GetCurrentProcess DuplicateHandle ResumeThread GetCommandLineA TlsSetValue TlsFree TlsAlloc GetVersion CompareStringW lstrcmpiW MulDiv CreateProcessA GetExitCodeProcess LoadLibraryExA WaitForSingleObject ResetEvent SetEvent CreateEventA GetCurrentProcessId GetTickCount GetEnvironmentVariableA FreeResource GetSystemDefaultLCID GetPrivateProfileIntA IsBadCodePtr GetUserDefaultLCID GetSystemDirectoryA LoadLibraryA GetProcAddress Sleep GlobalDeleteAtom HeapDestroy SetErrorMode GlobalAddAtomA ReleaseSemaphore LCMapStringA CreateSemaphoreA VirtualQuery MultiByteToWideChar GetProfileStringA WideCharToMultiByte HeapReAlloc GetDriveTypeA CompareStringA GetFileAttributesA GetCurrentDirectoryA GetModuleFileNameA SetLastError GetFullPathNameA SearchPathA GetFileType GlobalUnlock GlobalFree FindResourceA LoadResource SizeofResource GlobalAlloc GlobalSize GlobalHandle GlobalReAlloc GlobalLock _lwrite _lread LockResource GetTempPathA GetTempFileNameA _llseek FreeLibrary HeapSize GetACP

user32

DdeAbandonTransaction DdeGetLastError DdeCreateDataHandle DdeCmpStringHandles SetCursorPos EnumClipboardFormats DestroyCursor GetAsyncKeyState WaitForInputIdle GetForegroundWindow VkKeyScanW SetWindowsHookExW keybd_event CharUpperBuffW CharUpperBuffA CharLowerBuffW FindWindowW FindWindowA MessageBoxIndirectA DialogBoxParamA EnumThreadWindows GetLastActivePopup SetActiveWindow GetClassInfoExA LoadIconA FrameRect CreateDialogParamA IsDialogMessageA EnableMenuItem ShowCursor OemToCharA CharToOemBuffA GetWindowTextA EndDialog DrawTextA SendDlgItemMessageA SetDlgItemTextA GetWindowPlacement GetSystemMetrics LoadBitmapA TranslateMessage DispatchMessageA MsgWaitForMultipleObjects WaitMessage PostQuitMessage UnhookWindowsHookEx RegisterClipboardFormatA CreateCursor CreateIcon PostMessageW PeekMessageW GetPropA RemovePropA SetPropA SetForegroundWindow ClipCursor CallWindowProcA DefFrameProcA GetKeyState GetDlgItem IsWindow UnregisterClassA RegisterClassA AdjustWindowRect GetTabbedTextExtentA TabbedTextOutA FillRect CharToOemA MessageBoxA wsprintfA WinHelpA GetDesktopWindow SetRect GetWindowDC DestroyIcon GetClassInfoA AdjustWindowRectEx GetMenuItemCount RemoveMenu GetMenuStringA GetMenuState DdeClientTransaction DdeGetData CharPrevA CharNextA GetUpdateRgn GetUpdateRect PtInRect ChildWindowFromPointEx ReleaseCapture SetCapture InflateRect GetWindowRect ClientToScreen MoveWindow IsWindowEnabled IsChild SetParent IsIconic IsZoomed DefMDIChildProcA MessageBeep PeekMessageA PostMessageA LoadStringA AppendMenuA DestroyMenu CreatePopupMenu GetMessageTime GetMessagePos DrawFocusRect CopyAcceleratorTableA GetWindowRgn CharUpperA TranslateMDISysAccel SubtractRect IsRectEmpty InvalidateRgn InvalidateRect CopyRect GetDCEx IntersectRect LoadAcceleratorsA BringWindowToTop GetWindowThreadProcessId AttachThreadInput EqualRect EnableWindow SetFocus SendMessageA SetWindowsHookExA GetClassNameA LoadCursorA SetCursor SetWindowLongA GetWindow GetFocus GetKeyboardLayout GetSystemMenu CallNextHookEx GetParent DestroyWindow SetWindowTextA SetWindowPos UpdateWindow CreateWindowExA SystemParametersInfoA GetCapture WindowFromPoint ScreenToClient SetTimer IsWindowVisible ShowWindow KillTimer GetDC ReleaseDC MapWindowPoints GetCursorPos GetCursor OffsetRect GetIconInfo DefWindowProcA BeginPaint GetClientRect EndPaint GetSysColor GetActiveWindow GetWindowLongA DdeConnect DdePostAdvise DdeDisconnect DdeCreateStringHandleA DdeSetUserHandle DdeNameService DdeFreeStringHandle DdeUninitialize DdeInitializeA DdeFreeDataHandle DdeQueryConvInfo DdeQueryStringA DrawFrameControl SetScrollRange SetScrollPos IsClipboardFormatAvailable LockWindowUpdate CharLowerBuffA OpenClipboard SetClipboardData GetClipboardData GetCaretBlinkTime EmptyClipboard CloseClipboard CreateCaret SetCaretPos GetWindowTextLengthA DestroyCaret ShowCaret HideCaret DrawTextExA GetScrollPos GetClipboardFormatNameA CreateAcceleratorTableA SetWindowRgn ToAscii GetScrollInfo DestroyAcceleratorTable SetMenuItemInfoA SetScrollInfo GetMenuItemInfoA GetQueueStatus SetKeyboardState GetKeyboardState TrackPopupMenu GetDoubleClickTime SetWindowContextHelpId DeleteMenu SetMenuDefaultItem DrawMenuBar GetMenuItemID InsertMenuA GetSubMenu CreateMenu GetMenu SetMenu BeginDeferWindowPos ModifyMenuA CheckMenuItem PostThreadMessageA EndDeferWindowPos DeferWindowPos VkKeyScanA CharLowerA IsCharAlphaA DrawIcon GetCaretPos RegisterClassExA LoadImageA ShowScrollBar

gdi32

UnrealizeObject CreatePen SetBkColor SetTextColor CreatePatternBrush CreateSolidBrush DeleteObject CreateBitmap ExtTextOutA SelectObject SetBkMode GetBitmapBits GetObjectA GetTextExtentPointA CreateFontIndirectA CombineRgn SetRectRgn CreateRectRgn CreateRectRgnIndirect ExtSelectClipRgn OffsetRgn PtInRegion CreatePalette SelectPalette SelectClipRgn OffsetWindowOrgEx IntersectClipRect DeleteDC BitBlt SetViewportOrgEx CreateCompatibleDC CreateCompatibleBitmap RestoreDC RealizePalette SetROP2 SaveDC GetClipBox SetWindowOrgEx ExcludeClipRect CreateHalftonePalette GetTextMetricsA PatBlt EnumFontsA TranslateCharsetInfo GetROP2 SetBrushOrgEx GetDeviceCaps GetObjectType CreatePenIndirect CreateBrushIndirect Rectangle GetStockObject Arc LineTo MoveToEx Pie Ellipse SetStretchBltMode GetPixel GetTextExtentPoint32A SetPixelV StretchDIBits GetCurrentObject TextOutA GetBkColor StretchBlt CreateDIBitmap CloseMetaFile SetWindowExtEx CreateMetaFileA EndDoc AbortDoc StartPage EndPage StartDocA CreateDCA ResetDCA Escape ScaleViewportExtEx SetViewportExtEx SetMapMode DeleteMetaFile PlayMetaFile SetAbortProc DeleteEnhMetaFile PlayEnhMetaFile CreateICA GetEnhMetaFileHeader ScaleWindowExtEx GetWindowOrgEx GetPaletteEntries CreateDIBSection CloseEnhMetaFile CreateEnhMetaFileA LPtoDP EqualRgn ExtCreateRegion GetDIBits SetTextAlign GetWindowExtEx GetViewportExtEx CopyMetaFileA CopyEnhMetaFileA PathToRegion EndPath BeginPath WidenPath GetTextColor GetMapMode SetDIBColorTable RoundRect CreateEllipticRgnIndirect CreateRoundRectRgn GetSystemPaletteEntries GetNearestColor CreateHatchBrush

advapi32

ReportEventA RegQueryValueExA RegCloseKey RegOpenKeyExA RegOpenKeyA SetSecurityDescriptorDacl InitializeSecurityDescriptor RegQueryValueA RegDeleteKeyA RegEnumKeyA RegSetValueExA RegCreateKeyA RegSetValueA RegDeleteValueA RegisterEventSourceA DeregisterEventSource RegQueryInfoKeyA RegEnumKeyExA AdjustTokenPrivileges LookupPrivilegeValueA OpenProcessToken RegSetValueExW RegOpenKeyW RegDeleteKeyW RegDeleteValueW RegEnumKeyW RegEnumValueW RegEnumValueA RegQueryValueExW RegCreateKeyW

ole32

OleCreateLinkToFile CoTaskMemFree BindMoniker CoLockObjectExternal RegisterDragDrop RevokeDragDrop DoDragDrop CreateILockBytesOnHGlobal OleFlushClipboard OleIsCurrentClipboard OleCreateMenuDescriptor OleDestroyMenuDescriptor OleTranslateAccelerator CreateDataAdviseHolder CreateOleAdviseHolder CoRegisterClassObject CoRevokeClassObject CLSIDFromString OleDoAutoConvert OleRegGetUserType OleSaveToStream ReadClassStg ReadClassStm OleConvertIStorageToOLESTREAM OleConvertOLESTREAMToIStorage StgIsStorageILockBytes StgOpenStorageOnILockBytes StgCreateDocfileOnILockBytes OleCreateFromData OleCreateLinkFromData OleGetIconOfClass OleGetClipboard OleSetClipboard OleCreateLink CoTaskMemAlloc OleGetAutoConvert OleCreateFromFile CoMarshalInterface CoUnmarshalInterface CreateStreamOnHGlobal StringFromCLSID StringFromGUID2 CLSIDFromProgID ProgIDFromCLSID CoGetClassObject CoCreateInstance MkParseDisplayName CoIsOle1Class OleQueryLinkFromData OleQueryCreateFromData GetClassFile CreateBindCtx OleDuplicateData ReleaseStgMedium OleSetMenuDescriptor CoRegisterMessageFilter OleUninitialize OleInitialize CoGetMalloc OleRegGetMiscStatus CoCreateGuid IIDFromString CoFreeUnusedLibraries CoDisconnectObject IsAccelerator OleIsRunning OleRun OleLockRunning StgCreateDocfile WriteClassStg OleSave StgOpenStorage OleLoad

oleaut32

OleCreatePropertyFrame OleTranslateColor SysStringLen VariantClear SysAllocString VariantInit OleCreateFontIndirect OleCreatePictureIndirect SysFreeString OaBuildVersion SysAllocStringLen SysAllocStringByteLen SetErrorInfo CreateErrorInfo VariantChangeType DispGetParam LoadTypeLi GetErrorInfo LoadRegTypeLi RegisterTypeLi SysStringByteLen UnRegisterTypeLi LHashValOfNameSys LoadTypeLibEx SafeArrayAccessData SafeArrayGetElemsize SafeArrayUnaccessData SafeArrayCreate OleLoadPicture SafeArrayGetDim VariantCopy VariantCopyInd SafeArrayDestroy VariantChangeTypeEx CreateDispTypeInfo SafeArrayDestroyData DispInvoke SafeArrayGetUBound DispGetIDsOfNames SafeArrayGetElement SafeArrayPutElement SafeArrayGetLBound SafeArrayCopy OleIconToCursor SafeArrayRedim SafeArrayAllocDescriptor SafeArrayDestroyDescriptor RevokeActiveObject SafeArrayLock SafeArrayUnlock SafeArrayAllocData SysReAllocStringLen GetActiveObject VarDateFromStr VarCyFromI4 VarR8FromStr VarBstrFromI4 VarBstrFromR4 VarBstrFromI2 VarBstrFromDate VarBstrFromCy VarBstrFromR8 VarI4FromStr VarI4FromR8 VarI2FromStr VarCyFromStr VarR4FromStr LHashValOfNameSysA SysReAllocString

BASIC_CLASS_AddRef BASIC_CLASS_GetIDsOfNames BASIC_CLASS_Invoke BASIC_CLASS_QueryInterface BASIC_CLASS_Release BASIC_DISPINTERFACE_GetTICount BASIC_DISPINTERFACE_GetTypeInfo CopyRecord CreateIExprSrvObj DLLGetDocumentation DllCanUnloadNow DllFunctionCall DllGetClassObject DllRegisterServer DllUnregisterServer EVENT_SINK2_AddRef EVENT_SINK2_Release EVENT_SINK_AddRef EVENT_SINK_GetIDsOfNames EVENT_SINK_Invoke EVENT_SINK_QueryInterface EVENT_SINK_Release EbCreateContext EbDestroyContext EbGetErrorInfo EbGetHandleOfExecutingProject EbGetObjConnectionCounts EbGetVBAObject EbIsProjectOnStack EbLibraryLoad EbLibraryUnload EbLoadRunTime EbResetProject EbResetProjectNormal EbSetContextWorkerThread GetMem1 GetMem2 GetMem4 GetMem8 GetMemEvent GetMemNewObj GetMemObj GetMemStr GetMemVar IID_IVbaHost MethCallEngine ProcCallEngine PutMem1 PutMem2 PutMem4 PutMem8 PutMemEvent PutMemNewObj PutMemObj PutMemStr PutMemVar SetMemEvent SetMemNewObj SetMemObj SetMemVar ThunRTMain TipCreateInstanceEx TipCreateInstanceProject2 TipGetAddressOfPredeclaredInstance TipInvokeMethod TipInvokeMethod2 TipSetOption TipUnloadInstance TipUnloadProject UserDllMain VBDllCanUnloadNow VBDllGetClassObject VBDllRegisterServer VBDllUnRegisterServer VarPtr Zombie_AddRef Zombie_GetIDsOfNames Zombie_GetTypeInfo Zombie_GetTypeInfoCount Zombie_Invoke Zombie_QueryInterface Zombie_Release _CIatan _CIcos _CIexp _CIlog _CIsin _CIsqrt _CItan __vbaAptOffset __vbaAryConstruct __vbaAryConstruct2 __vbaAryCopy __vbaAryDestruct __vbaAryLock __vbaAryMove __vbaAryRebase1Var __vbaAryRecCopy __vbaAryRecMove __vbaAryUnlock __vbaAryVar __vbaAryVarVarg __vbaBoolErrVar __vbaBoolStr __vbaBoolVar __vbaBoolVarNull __vbaCVarAryUdt __vbaCastObj __vbaCastObjVar __vbaCheckType __vbaCheckTypeVar __vbaChkstk __vbaCopyBytes __vbaCopyBytesZero __vbaCyAbs __vbaCyAdd __vbaCyErrVar __vbaCyFix __vbaCyForInit __vbaCyForNext __vbaCyI2 __vbaCyI4 __vbaCyInt __vbaCyMul __vbaCyMulI2 __vbaCySgn __vbaCyStr __vbaCySub __vbaCyUI1 __vbaCyVar __vbaDateR4 __vbaDateR8 __vbaDateStr __vbaDateVar __vbaDerefAry __vbaDerefAry1 __vbaEnd __vbaErase __vbaEraseKeepData __vbaEraseNoPop __vbaError __vbaErrorOverflow __vbaExceptHandler __vbaExitEachAry __vbaExitEachColl __vbaExitEachVar __vbaExitProc __vbaFPException __vbaFPFix __vbaFPInt __vbaFailedFriend __vbaFileClose __vbaFileCloseAll __vbaFileLock __vbaFileOpen __vbaFileSeek __vbaFixstrConstruct __vbaForEachAry __vbaForEachCollAd __vbaForEachCollObj __vbaForEachCollVar __vbaForEachVar __vbaFpCDblR4 __vbaFpCDblR8 __vbaFpCSngR4 __vbaFpCSngR8 __vbaFpCmpCy __vbaFpCy __vbaFpI2 __vbaFpI4 __vbaFpR4 __vbaFpR8 __vbaFpUI1 __vbaFreeObj __vbaFreeObjList __vbaFreeStr __vbaFreeStrList __vbaFreeVar __vbaFreeVarList __vbaFreeVarg __vbaGenerateBoundsError __vbaGet3 __vbaGet4 __vbaGetFxStr3 __vbaGetFxStr4 __vbaGetOwner3 __vbaGetOwner4 __vbaGosub __vbaGosubFree __vbaGosubReturn __vbaHresultCheck __vbaHresultCheckNonvirt __vbaHresultCheckObj __vbaI2Abs __vbaI2Cy __vbaI2ErrVar __vbaI2ForNextCheck __vbaI2I4 __vbaI2Sgn __vbaI2Str __vbaI2Var __vbaI4Abs __vbaI4Cy __vbaI4ErrVar __vbaI4ForNextCheck __vbaI4Sgn __vbaI4Str __vbaI4Var __vbaInStr __vbaInStrB __vbaInStrVar __vbaInStrVarB __vbaInputFile __vbaLateIdCall __vbaLateIdCallLd __vbaLateIdCallSt __vbaLateIdNamedCall __vbaLateIdNamedCallLd __vbaLateIdNamedCallSt __vbaLateIdNamedStAd __vbaLateIdSt __vbaLateIdStAd __vbaLateMemCall __vbaLateMemCallLd __vbaLateMemCallSt __vbaLateMemNamedCall __vbaLateMemNamedCallLd __vbaLateMemNamedCallSt __vbaLateMemNamedStAd __vbaLateMemSt __vbaLateMemStAd __vbaLbound __vbaLdZeroAry __vbaLenBstr __vbaLenBstrB __vbaLenVar __vbaLenVarB __vbaLineInputStr __vbaLineInputVar __vbaLsetFixstr __vbaLsetFixstrFree __vbaMidStmtBstr __vbaMidStmtBstrB __vbaMidStmtVar __vbaMidStmtVarB __vbaNameFile __vbaNew __vbaNew2 __vbaNextEachAry __vbaNextEachCollAd __vbaNextEachCollObj __vbaNextEachCollVar __vbaNextEachVar __vbaObjAddref __vbaObjIs __vbaObjSet __vbaObjSetAddref __vbaObjVar __vbaOnError __vbaOnGoCheck __vbaPowerR8 __vbaPrintFile __vbaPrintObj __vbaPut3 __vbaPut4 __vbaPutFxStr3 __vbaPutFxStr4 __vbaPutOwner3 __vbaPutOwner4 __vbaR4Cy __vbaR4ErrVar __vbaR4ForNextCheck __vbaR4Sgn __vbaR4Str __vbaR4Var __vbaR8Cy __vbaR8ErrVar __vbaR8FixI2 __vbaR8FixI4 __vbaR8ForNextCheck __vbaR8IntI2 __vbaR8IntI4 __vbaR8Sgn __vbaR8Str __vbaR8Var __vbaRaiseEvent __vbaRecAnsiToUni __vbaRecAssign __vbaRecDestruct __vbaRecDestructAnsi __vbaRecUniToAnsi __vbaRedim __vbaRedimPreserve __vbaRedimPreserveVar __vbaRedimPreserveVar2 __vbaRedimVar __vbaRedimVar2 __vbaRefVarAry __vbaResume __vbaRsetFixstr __vbaRsetFixstrFree __vbaSetSystemError __vbaStopExe __vbaStr2Vec __vbaStrAryToAnsi __vbaStrAryToUnicode __vbaStrBool __vbaStrCat __vbaStrCmp __vbaStrComp __vbaStrCompVar __vbaStrCopy __vbaStrCy __vbaStrDate __vbaStrErrVarCopy __vbaStrFixstr __vbaStrI2 __vbaStrI4 __vbaStrLike __vbaStrMove __vbaStrR4 __vbaStrR8 __vbaStrTextCmp __vbaStrTextLike __vbaStrToAnsi __vbaStrToUnicode __vbaStrUI1 __vbaStrVarCopy __vbaStrVarMove __vbaStrVarVal __vbaUI1Cy __vbaUI1ErrVar __vbaUI1I2 __vbaUI1I4 __vbaUI1Sgn __vbaUI1Str __vbaUI1Var __vbaUbound __vbaUdtVar __vbaUnkVar __vbaVar2Vec __vbaVarAbs __vbaVarAdd __vbaVarAnd __vbaVarCat __vbaVarCmpEq __vbaVarCmpGe __vbaVarCmpGt __vbaVarCmpLe __vbaVarCmpLt __vbaVarCmpNe __vbaVarCopy __vbaVarDateVar __vbaVarDiv __vbaVarDup __vbaVarEqv __vbaVarErrI4 __vbaVarFix __vbaVarForInit __vbaVarForNext __vbaVarIdiv __vbaVarImp __vbaVarIndexLoad __vbaVarIndexLoadRef __vbaVarIndexLoadRefLock __vbaVarIndexStore __vbaVarIndexStoreObj __vbaVarInt __vbaVarLateMemCallLd __vbaVarLateMemCallLdRf __vbaVarLateMemCallSt __vbaVarLateMemSt __vbaVarLateMemStAd __vbaVarLike __vbaVarLikeVar __vbaVarMod __vbaVarMove __vbaVarMul __vbaVarNeg __vbaVarNot __vbaVarOr __vbaVarPow __vbaVarSetObj __vbaVarSetObjAddref __vbaVarSetUnk __vbaVarSetUnkAddref __vbaVarSetVar __vbaVarSetVarAddref __vbaVarSub __vbaVarTextCmpEq __vbaVarTextCmpGe __vbaVarTextCmpGt __vbaVarTextCmpLe __vbaVarTextCmpLt __vbaVarTextCmpNe __vbaVarTextLike __vbaVarTextLikeVar __vbaVarTextTstEq __vbaVarTextTstGe __vbaVarTextTstGt __vbaVarTextTstLe __vbaVarTextTstLt __vbaVarTextTstNe __vbaVarTstEq __vbaVarTstGe __vbaVarTstGt __vbaVarTstLe __vbaVarTstLt __vbaVarTstNe __vbaVarVargNofree __vbaVarXor __vbaVarZero __vbaVargObj __vbaVargObjAddref __vbaVargParmRef __vbaVargUnk __vbaVargUnkAddref __vbaVargVar __vbaVargVarCopy __vbaVargVarMove __vbaVargVarRef __vbaVerifyVarObj __vbaWriteFile _adj_fdiv_m16i _adj_fdiv_m32 _adj_fdiv_m32i _adj_fdiv_m64 _adj_fdiv_r _adj_fdivr_m16i _adj_fdivr_m32 _adj_fdivr_m32i _adj_fdivr_m64 _adj_fpatan _adj_fprem _adj_fprem1 _adj_fptan _allmul rtBoolFromErrVar rtBstrFromErrVar rtCyFromErrVar rtDecFromVar rtI2FromErrVar rtI4FromErrVar rtR4FromErrVar rtR8FromErrVar rtUI1FromErrVar rtcAbsVar rtcAnsiValueBstr rtcAppActivate rtcAppleScript rtcArray rtcAtn rtcBeep rtcBstrFromAnsi rtcBstrFromByte rtcBstrFromChar rtcBstrFromError rtcBstrFromFormatVar rtcByteValueBstr rtcCVErrFromVar rtcCallByName rtcChangeDir rtcChangeDrive rtcCharValueBstr rtcChoose rtcCommandBstr rtcCommandVar rtcCompareBstr rtcCos rtcCreateObject rtcCreateObject2 rtcCurrentDir rtcCurrentDirBstr rtcDDB rtcDateAdd rtcDateDiff rtcDateFromVar rtcDatePart rtcDeleteSetting rtcDir rtcDoEvents rtcEndOfFile rtcEnvironBstr rtcEnvironVar rtcErrObj rtcExp rtcFV rtcFileAttributes rtcFileCopy rtcFileDateTime rtcFileLen rtcFileLength rtcFileLocation rtcFileReset rtcFileSeek rtcFileWidth rtcFilter rtcFixVar rtcFormatCurrency rtcFormatDateTime rtcFormatNumber rtcFormatPercent rtcFreeFile rtcGetAllSettings rtcGetCurrentCalendar rtcGetDateBstr rtcGetDateValue rtcGetDateVar rtcGetDayOfMonth rtcGetDayOfWeek rtcGetErl rtcGetFileAttr rtcGetHostLCID rtcGetHourOfDay rtcGetMinuteOfHour rtcGetMonthOfYear rtcGetObject rtcGetPresentDate rtcGetSecondOfMinute rtcGetSetting rtcGetTimeBstr rtcGetTimeValue rtcGetTimeVar rtcGetTimer rtcGetYear rtcHexBstrFromVar rtcHexVarFromVar rtcIMEStatus rtcIPMT rtcIRR rtcImmediateIf rtcInStr rtcInStrChar rtcInStrRev rtcInputBox rtcInputCharCount rtcInputCharCountVar rtcInputCount rtcInputCountVar rtcIntVar rtcIsArray rtcIsDate rtcIsEmpty rtcIsError rtcIsMissing rtcIsNull rtcIsNumeric rtcIsObject rtcJoin rtcKillFiles rtcLeftBstr rtcLeftCharBstr rtcLeftCharVar rtcLeftTrimBstr rtcLeftTrimVar rtcLeftVar rtcLenCharVar rtcLenVar rtcLog rtcLowerCaseBstr rtcLowerCaseVar rtcMIRR rtcMacId rtcMakeDir rtcMidBstr rtcMidCharBstr rtcMidCharVar rtcMidVar rtcMonthName rtcMsgBox rtcNPV rtcNPer rtcOctBstrFromVar rtcOctVarFromVar rtcPMT rtcPPMT rtcPV rtcPackDate rtcPackTime rtcPartition rtcQBColor rtcR8ValFromBstr rtcRandomNext rtcRandomize rtcRate rtcRemoveDir rtcReplace rtcRgb rtcRightBstr rtcRightCharBstr rtcRightCharVar rtcRightTrimBstr rtcRightTrimVar rtcRightVar rtcRound rtcSLN rtcSYD rtcSaveSetting rtcSendKeys rtcSetCurrentCalendar rtcSetDateBstr rtcSetDateVar rtcSetFileAttr rtcSetTimeBstr rtcSetTimeVar rtcSgnVar rtcShell rtcSin rtcSpaceBstr rtcSpaceVar rtcSplit rtcSqr rtcStrConvVar rtcStrConvVar2 rtcStrFromVar rtcStrReverse rtcStringBstr rtcStringVar rtcSwitch rtcTan rtcTrimBstr rtcTrimVar rtcTypeName rtcUpperCaseBstr rtcUpperCaseVar rtcVarBstrFromAnsi rtcVarBstrFromByte rtcVarBstrFromChar rtcVarDateFromVar rtcVarFromError rtcVarFromFormatVar rtcVarFromVar rtcVarStrFromVar rtcVarType rtcWeekdayName

oleaut32.dll

IMPHASH eb67fb08582adcae9c93b174f0c98aa8
SHA256 4397d0fe3ef2cdb85dd811b8743c7700bd4e6d8d3365dcba5286aa10adb2c24a
MD5 b3742dee858b243e77c73d2b8f7c8223
SHA1 7a132127eb3efeca8f6bc3f20e49b5011b5ae5df
SHA512 277f8f2750a562d5f8168c608928d232a3755662628bf7bb9ed17819786a0e7234534f5e028f4e1e0a2bec0468be5c12c56770c60713f06ac96422581fe26774
SSDEEP 12288:DtppNnzQAuSIeoGuodbAR/Cv7MVDGKVAE0wKKae2M0TK:DnpxzQAWe9/dbq/Cv7MVpWwKKaY0TK
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

5464

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

oleaut32.pdb

msvcrt

??1type_info@@UAE@XZ malloc _initterm _clearfp _errno strncpy strchr _stat getenv wcstoul _ultow remove _ultoa free calloc _abnormal_termination _CxxThrowException _wcslwr wcsncat wcsrchr strrchr __CxxFrameHandler _CIfmod wcsncpy strtoul memmove iswspace _wcsnicmp wcscpy wcsncmp wcschr _itoa atol atoi _strcmpi _strnicmp _CIpow ceil floor _stricmp _ui64tow _i64toa swprintf _i64tow _ftol modf wcslen _wtoi _wcsicmp wcscmp _itow ?terminate@@YAXXZ _adjust_fdiv _except_handler3

user32

GetSysColor WinHelpW EnableWindow GetMessageA DispatchMessageA PostQuitMessage GetActiveWindow SetActiveWindow SetFocus wsprintfW wsprintfA GetTopWindow IsWindowUnicode GetClientRect GetDialogBaseUnits GetKeyState GetDlgItem GetFocus SendMessageW GetParent CharLowerA GetWindowTextA RegisterClipboardFormatA SetWindowLongW DestroyIcon CopyImage CopyIcon GetIconInfo GetSystemMetrics DrawIcon CreateCursor CreateIcon ReleaseDC GetDC RegisterWindowMessageA PostMessageW GetMessageW TranslateMessage DispatchMessageW GetClassInfoW RegisterClassW DefWindowProcW IsWindow GetWindowLongW DestroyWindow CreateWindowExW CharNextA

gdi32

SaveDC CreateFontIndirectA GetTextExtentPointA Escape CreateDIBSection CreateDIBitmap CreateHalftonePalette IntersectClipRect GetWindowOrgEx OffsetViewportOrgEx PlayEnhMetaFile EnumMetaFile RestoreDC DeleteEnhMetaFile DeleteMetaFile PlayMetaFileRecord SetBitmapBits SetDIBits CreatePalette GetEnhMetaFileBits GetMetaFileBitsEx GetPaletteEntries CreateCompatibleDC BitBlt DeleteDC CreateCompatibleBitmap GetBitmapBits SetEnhMetaFileBits SetStretchBltMode SetBkColor SetTextColor SetMapMode SetWindowOrgEx SetWindowExtEx SetViewportOrgEx SetViewportExtEx GetWinMetaFileBits GetCurrentObject GetObjectType GetStockObject SelectPalette RealizePalette StretchBlt GetDIBits StretchDIBits GetEnhMetaFileHeader GetObjectW GetBitmapDimensionEx SetMetaFileBitsEx CreateBitmap PatBlt DeleteObject CreateFontIndirectW GetDeviceCaps SelectObject GetTextFaceW GetTextMetricsW EnumFontFamiliesExW

kernel32

FreeLibrary Sleep SetThreadPriority WaitForMultipleObjects TerminateThread CompareStringW CompareStringA GetLocaleInfoW GetStringTypeExW GetStringTypeExA LCMapStringW LCMapStringA LoadLibraryA GetDateFormatA GetTimeFormatA GetDateFormatW GetTimeFormatW GetCurrentThread GetCurrentProcess CloseHandle InterlockedExchange IsBadReadPtr IsBadWritePtr GetLocalTime GetSystemDirectoryA CreateEventW WaitForSingleObject CreateThread OutputDebugStringA GetVersionExW GetVersion GlobalFree GlobalUnlock GlobalLock GlobalAlloc GlobalSize GlobalHandle MulDiv GlobalReAlloc LockResource IsDBCSLeadByte LoadResource FindResourceW _lclose _lread _lwrite _llseek InitializeCriticalSectionAndSpinCount DeleteCriticalSection lstrlenW GlobalDeleteAtom GlobalAddAtomW DebugBreak TlsAlloc InterlockedCompareExchange TlsFree TlsSetValue CreateFileA CreateFileW lstrcmpiA LoadLibraryW SearchPathA GetFullPathNameA SetLastError SearchPathW GetFullPathNameW UnmapViewOfFile MapViewOfFile GetSystemInfo CreateFileMappingA GetFileSize GetDriveTypeW GetDriveTypeA SetErrorMode QueryPerformanceCounter GetTickCount GetCurrentThreadId GetCurrentProcessId SetUnhandledExceptionFilter GetSystemTimeAsFileTime TerminateProcess UnhandledExceptionFilter SetEvent GetLastError GetProcAddress GetModuleHandleA TlsGetValue GetSystemDefaultLCID GetUserDefaultLCID GetLocaleInfoA InterlockedIncrement HeapAlloc GetProcessHeap HeapFree InterlockedDecrement LeaveCriticalSection EnterCriticalSection GetNumberFormatW MultiByteToWideChar GetNumberFormatA WideCharToMultiByte GetCurrencyFormatW GetCurrencyFormatA

advapi32

RegFlushKey RegCreateKeyA RegSetValueExA RegOpenKeyA RegQueryValueA RegEnumValueA RegEnumKeyExA RegOpenKeyExA RegEnumKeyW RegCreateKeyW RegQueryValueExW RegSetValueExW RegDeleteKeyA RegQueryInfoKeyA RegCloseKey RegQueryValueW RegSetValueA RegOpenKeyW RegEnumKeyA RegNotifyChangeKeyValue RegQueryValueExA

ole32

CoUnmarshalInterface CoReleaseMarshalData ReleaseStgMedium StgCreateDocfileOnILockBytes CreateILockBytesOnHGlobal CreateStreamOnHGlobal CoCreateInstance StgCreateDocfile CreateBindCtx ReadClassStg WriteFmtUserTypeStg WriteClassStg MkParseDisplayName HWND_UserFree HWND_UserUnmarshal HWND_UserMarshal HWND_UserSize CoUnmarshalHresult CoMarshalHresult CLSIDFromString CoSetState CoGetMalloc CoGetClassObject StringFromGUID2 CreateItemMoniker GetRunningObjectTable CoMarshalInterface

rpcrt4

NdrClientCall2

BSTR_UserFree BSTR_UserMarshal BSTR_UserSize BSTR_UserUnmarshal BstrFromVector ClearCustData CreateDispTypeInfo CreateErrorInfo CreateStdDispatch CreateTypeLib CreateTypeLib2 DispCallFunc DispGetIDsOfNames DispGetParam DispInvoke DllCanUnloadNow DllGetClassObject DllRegisterServer DllUnregisterServer DosDateTimeToVariantTime GetActiveObject GetAltMonthNames GetErrorInfo GetRecordInfoFromGuids GetRecordInfoFromTypeInfo GetVarConversionLocaleSetting LHashValOfNameSys LHashValOfNameSysA LPSAFEARRAY_Marshal LPSAFEARRAY_Size LPSAFEARRAY_Unmarshal LPSAFEARRAY_UserFree LPSAFEARRAY_UserMarshal LPSAFEARRAY_UserSize LPSAFEARRAY_UserUnmarshal LoadRegTypeLib LoadTypeLib LoadTypeLibEx OACreateTypeLib2 OaBuildVersion OleCreateFontIndirect OleCreatePictureIndirect OleCreatePropertyFrame OleCreatePropertyFrameIndirect OleIconToCursor OleLoadPicture OleLoadPictureEx OleLoadPictureFile OleLoadPictureFileEx OleLoadPicturePath OleSavePictureFile OleTranslateColor QueryPathOfRegTypeLib RegisterActiveObject RegisterTypeLib RegisterTypeLibForUser RevokeActiveObject SafeArrayAccessData SafeArrayAllocData SafeArrayAllocDescriptor SafeArrayAllocDescriptorEx SafeArrayCopy SafeArrayCopyData SafeArrayCreate SafeArrayCreateEx SafeArrayCreateVector SafeArrayCreateVectorEx SafeArrayDestroy SafeArrayDestroyData SafeArrayDestroyDescriptor SafeArrayGetDim SafeArrayGetElement SafeArrayGetElemsize SafeArrayGetIID SafeArrayGetLBound SafeArrayGetRecordInfo SafeArrayGetUBound SafeArrayGetVartype SafeArrayLock SafeArrayPtrOfIndex SafeArrayPutElement SafeArrayRedim SafeArraySetIID SafeArraySetRecordInfo SafeArrayUnaccessData SafeArrayUnlock SetErrorInfo SetOaNoCache SetVarConversionLocaleSetting SysAllocString SysAllocStringByteLen SysAllocStringLen SysFreeString SysReAllocString SysReAllocStringLen SysStringByteLen SysStringLen SystemTimeToVariantTime UnRegisterTypeLib UnRegisterTypeLibForUser VARIANT_UserFree VARIANT_UserMarshal VARIANT_UserSize VARIANT_UserUnmarshal VarAbs VarAdd VarAnd VarBoolFromCy VarBoolFromDate VarBoolFromDec VarBoolFromDisp VarBoolFromI1 VarBoolFromI2 VarBoolFromI4 VarBoolFromI8 VarBoolFromR4 VarBoolFromR8 VarBoolFromStr VarBoolFromUI1 VarBoolFromUI2 VarBoolFromUI4 VarBoolFromUI8 VarBstrCat VarBstrCmp VarBstrFromBool VarBstrFromCy VarBstrFromDate VarBstrFromDec VarBstrFromDisp VarBstrFromI1 VarBstrFromI2 VarBstrFromI4 VarBstrFromI8 VarBstrFromR4 VarBstrFromR8 VarBstrFromUI1 VarBstrFromUI2 VarBstrFromUI4 VarBstrFromUI8 VarCat VarCmp VarCyAbs VarCyAdd VarCyCmp VarCyCmpR8 VarCyFix VarCyFromBool VarCyFromDate VarCyFromDec VarCyFromDisp VarCyFromI1 VarCyFromI2 VarCyFromI4 VarCyFromI8 VarCyFromR4 VarCyFromR8 VarCyFromStr VarCyFromUI1 VarCyFromUI2 VarCyFromUI4 VarCyFromUI8 VarCyInt VarCyMul VarCyMulI4 VarCyMulI8 VarCyNeg VarCyRound VarCySub VarDateFromBool VarDateFromCy VarDateFromDec VarDateFromDisp VarDateFromI1 VarDateFromI2 VarDateFromI4 VarDateFromI8 VarDateFromR4 VarDateFromR8 VarDateFromStr VarDateFromUI1 VarDateFromUI2 VarDateFromUI4 VarDateFromUI8 VarDateFromUdate VarDateFromUdateEx VarDecAbs VarDecAdd VarDecCmp VarDecCmpR8 VarDecDiv VarDecFix VarDecFromBool VarDecFromCy VarDecFromDate VarDecFromDisp VarDecFromI1 VarDecFromI2 VarDecFromI4 VarDecFromI8 VarDecFromR4 VarDecFromR8 VarDecFromStr VarDecFromUI1 VarDecFromUI2 VarDecFromUI4 VarDecFromUI8 VarDecInt VarDecMul VarDecNeg VarDecRound VarDecSub VarDiv VarEqv VarFix VarFormat VarFormatCurrency VarFormatDateTime VarFormatFromTokens VarFormatNumber VarFormatPercent VarI1FromBool VarI1FromCy VarI1FromDate VarI1FromDec VarI1FromDisp VarI1FromI2 VarI1FromI4 VarI1FromI8 VarI1FromR4 VarI1FromR8 VarI1FromStr VarI1FromUI1 VarI1FromUI2 VarI1FromUI4 VarI1FromUI8 VarI2FromBool VarI2FromCy VarI2FromDate VarI2FromDec VarI2FromDisp VarI2FromI1 VarI2FromI4 VarI2FromI8 VarI2FromR4 VarI2FromR8 VarI2FromStr VarI2FromUI1 VarI2FromUI2 VarI2FromUI4 VarI2FromUI8 VarI4FromBool VarI4FromCy VarI4FromDate VarI4FromDec VarI4FromDisp VarI4FromI1 VarI4FromI2 VarI4FromI8 VarI4FromR4 VarI4FromR8 VarI4FromStr VarI4FromUI1 VarI4FromUI2 VarI4FromUI4 VarI4FromUI8 VarI8FromBool VarI8FromCy VarI8FromDate VarI8FromDec VarI8FromDisp VarI8FromI1 VarI8FromI2 VarI8FromR4 VarI8FromR8 VarI8FromStr VarI8FromUI1 VarI8FromUI2 VarI8FromUI4 VarI8FromUI8 VarIdiv VarImp VarInt VarMod VarMonthName VarMul VarNeg VarNot VarNumFromParseNum VarOr VarParseNumFromStr VarPow VarR4CmpR8 VarR4FromBool VarR4FromCy VarR4FromDate VarR4FromDec VarR4FromDisp VarR4FromI1 VarR4FromI2 VarR4FromI4 VarR4FromI8 VarR4FromR8 VarR4FromStr VarR4FromUI1 VarR4FromUI2 VarR4FromUI4 VarR4FromUI8 VarR8FromBool VarR8FromCy VarR8FromDate VarR8FromDec VarR8FromDisp VarR8FromI1 VarR8FromI2 VarR8FromI4 VarR8FromI8 VarR8FromR4 VarR8FromStr VarR8FromUI1 VarR8FromUI2 VarR8FromUI4 VarR8FromUI8 VarR8Pow VarR8Round VarRound VarSub VarTokenizeFormatString VarUI1FromBool VarUI1FromCy VarUI1FromDate VarUI1FromDec VarUI1FromDisp VarUI1FromI1 VarUI1FromI2 VarUI1FromI4 VarUI1FromI8 VarUI1FromR4 VarUI1FromR8 VarUI1FromStr VarUI1FromUI2 VarUI1FromUI4 VarUI1FromUI8 VarUI2FromBool VarUI2FromCy VarUI2FromDate VarUI2FromDec VarUI2FromDisp VarUI2FromI1 VarUI2FromI2 VarUI2FromI4 VarUI2FromI8 VarUI2FromR4 VarUI2FromR8 VarUI2FromStr VarUI2FromUI1 VarUI2FromUI4 VarUI2FromUI8 VarUI4FromBool VarUI4FromCy VarUI4FromDate VarUI4FromDec VarUI4FromDisp VarUI4FromI1 VarUI4FromI2 VarUI4FromI4 VarUI4FromI8 VarUI4FromR4 VarUI4FromR8 VarUI4FromStr VarUI4FromUI1 VarUI4FromUI2 VarUI4FromUI8 VarUI8FromBool VarUI8FromCy VarUI8FromDate VarUI8FromDec VarUI8FromDisp VarUI8FromI1 VarUI8FromI2 VarUI8FromI8 VarUI8FromR4 VarUI8FromR8 VarUI8FromStr VarUI8FromUI1 VarUI8FromUI2 VarUI8FromUI4 VarUdateFromDate VarWeekdayName VarXor VariantChangeType VariantChangeTypeEx VariantClear VariantCopy VariantCopyInd VariantInit VariantTimeToDosDateTime VariantTimeToSystemTime VectorFromBstr

olepro32.dll

IMPHASH bfbea1910cdffc9fc4cb569cbd816073
SHA256 54d7ee1e4b43d2590b3b9b4a412717bfecfcce46f9dda68dba4695f135faa7b5
MD5 b48d3193dd1474dcbcc32bf4779ac698
SHA1 4a39d43aea0766c159a32c311c9eb2e06dbf8c03
SHA512 fdb0691dfb26d43708f8f12f6b75e2097570ba27a0040e0f8ecac30ef9307dedcf425cbec671a0178916675503542a7fa670fb5515ec231509d5aabd0047debb
SSDEEP 1536:nIjsab9WEkUEAzs11+/nnJZL7aWsuN4kQfWNtMNwTs:Ij99WXmsbUnnL7Sy4kwWTts
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

61048

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

olepro32.pdb

user32

CreateIcon GetSysColor WinHelpW IsWindow EnableWindow GetMessageA GetMessageW TranslateMessage DispatchMessageW DispatchMessageA PostMessageW PostQuitMessage GetActiveWindow SetActiveWindow SetFocus DestroyWindow CreateCursor wsprintfA GetTopWindow IsWindowUnicode GetClientRect GetDialogBaseUnits GetDC ReleaseDC GetKeyState GetWindowLongW CharNextA GetWindowTextA CharLowerA GetParent SendMessageW GetFocus GetDlgItem DrawIcon GetSystemMetrics SetWindowLongW GetIconInfo CopyIcon CopyImage DestroyIcon RegisterClipboardFormatA wsprintfW

gdi32

GetWindowOrgEx IntersectClipRect SaveDC EnumFontFamiliesExW GetTextFaceW CreateHalftonePalette Escape CreateDIBSection CreateDIBitmap OffsetViewportOrgEx PlayEnhMetaFile EnumMetaFile RestoreDC DeleteEnhMetaFile DeleteMetaFile PlayMetaFileRecord SetBitmapBits SetDIBits CreatePalette GetEnhMetaFileBits GetMetaFileBitsEx CreateCompatibleDC BitBlt DeleteDC CreateCompatibleBitmap GetBitmapBits SetEnhMetaFileBits SetStretchBltMode SetBkColor SetTextColor SetMapMode SetWindowOrgEx SetWindowExtEx SetViewportOrgEx CreateFontIndirectW CreateFontIndirectA GetDeviceCaps DeleteObject GetTextExtentPointA GetTextMetricsW SelectObject GetPaletteEntries PatBlt CreateBitmap SetMetaFileBitsEx GetBitmapDimensionEx GetObjectW GetEnhMetaFileHeader StretchDIBits GetDIBits StretchBlt RealizePalette SelectPalette GetStockObject GetObjectType GetCurrentObject GetWinMetaFileBits SetViewportExtEx

kernel32

MultiByteToWideChar IsDBCSLeadByte FreeLibrary MulDiv LockResource LoadResource FindResourceW InterlockedIncrement InterlockedDecrement GlobalFree GlobalUnlock GlobalLock GlobalAlloc GlobalSize GlobalHandle GlobalReAlloc LeaveCriticalSection EnterCriticalSection lstrlenW InitializeCriticalSectionAndSpinCount DeleteCriticalSection GlobalDeleteAtom GlobalAddAtomW QueryPerformanceCounter GetTickCount GetCurrentThreadId GetCurrentProcessId GetSystemTimeAsFileTime TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter WideCharToMultiByte GetProcAddress GetModuleHandleA GetVersion GetSystemDirectoryA GetLastError LoadLibraryA

advapi32

RegOpenKeyA RegOpenKeyW RegCreateKeyA RegSetValueA RegQueryValueW RegFlushKey RegCloseKey

msvcrt

free _initterm malloc _adjust_fdiv ??1type_info@@UAE@XZ ?terminate@@YAXXZ wcslen wcscpy wcsrchr ??3@YAXPAX@Z wcsncat ??2@YAPAXI@Z __CxxFrameHandler _except_handler3 _CIfmod calloc _CxxThrowException _wcslwr wcscmp _wcsicmp _ftol wcsncpy

ole32

StgCreateDocfile StringFromGUID2 CreateStreamOnHGlobal CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes ReleaseStgMedium CoCreateInstance CoGetMalloc

oleaut32

LoadTypeLi VariantInit VariantClear SysFreeString SysAllocString VariantChangeType

stdole2.tlb

SHA256 e2b26b1ad2d439dded0799d195ca918a03ccf22146690577e2704f871c098426
MD5 0857394e30de11ca0cd9497e310d6469
SHA1 ba35fba3e44040e7b891fa814dceff94d1c1b114
SHA512 05309e02b7c427f379f3235d2d7398d53ee35b3f1f9d7f28ad72607c82e0af6163a2def42734666f7e1fd0b67395031632aff9c9af36fb30c0175fad145f1185
SSDEEP 192:pMrSEiGPWF0Y3wAQgiQJdDg5rDLWQrNBm5C7BTNcJL8Bz8QFWocqGWcp:pM/uFrR+X6QNn1pcJI5WocqGWcp
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

tora.exe

IMPHASH ecadc5958871d327275aac31c2e98dbb
SHA256 9a6e4f75fb820d8bf63d770a9c79f4717d1fc48ffba76940fc4dafa2320881fe
MD5 2346349fc8e8e6db23c35fb0f87f6bf5
SHA1 3622e640ea66838282ef9b56596452fbb3e3e20e
SHA512 1cf5739e153d13c0a916adafad4e1fe282094eb4688bd194c0453c13a04c0a3e6c8b044650c3d0695a98fb077209ea9c391cedeecc2be43ab542485cc1684078
SSDEEP 24576:tq1PSCgmkTUFb1XZDa7rRirAVKZhxvzAw8CXZ4VRRDixAAnlmr:8gmeUb1XZyrcUV41eRuyp
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

10868

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

__vbaVarSub __vbaVarTstGt __vbaStrI2 _CIcos _adj_fptan __vbaStrI4 __vbaVarMove ord586 __vbaVarVargNofree __vbaFreeVar __vbaLateIdCall ord588 __vbaLenBstr __vbaStrVarMove ord589 __vbaFreeVarList _adj_fdiv_m64 __vbaFreeObjList __vbaR8Sgn _adj_fprem1 ord519 __vbaI2Abs __vbaStrCat __vbaWriteFile ord660 __vbaLsetFixstr __vbaHresultCheckObj __vbaLenVar _adj_fdiv_m32 __vbaAryDestruct __vbaLateMemSt __vbaExitProc __vbaVarForInit __vbaI4Abs __vbaOnError ord595 __vbaObjSet _adj_fdiv_m16i __vbaObjSetAddref _adj_fdivr_m16i __vbaFpR4 __vbaStrFixstr ord521 __vbaFPFix ord523 __vbaVarTstLt __vbaFpR8 __vbaBoolVarNull _CIsin __vbaErase ord631 ord525 __vbaVarCmpGt __vbaChkstk __vbaFileClose EVENT_SINK_AddRef __vbaGenerateBoundsError __vbaStrCmp __vbaAryConstruct2 __vbaVarTstEq __vbaObjVar __vbaI2I4 __vbaPrintObj __vbaVarLateMemSt __vbaVarOr __vbaCastObjVar __vbaStrR4 __vbaRedimPreserve _adj_fpatan __vbaR4Var __vbaLateIdCallLd __vbaRedim __vbaStrR8 EVENT_SINK_Release _CIsqrt __vbaLateIdCallSt EVENT_SINK_QueryInterface __vbaVarMul __vbaExceptHandler __vbaPrintFile __vbaInputFile ord606 _adj_fprem _adj_fdivr_m64 ord607 __vbaI2Str ord608 __vbaFPException __vbaInStrVar __vbaUbound __vbaStrVarVal __vbaR4ForNextCheck ord534 __vbaVarCat ord535 __vbaCheckType __vbaI2Var ord536 _CIlog __vbaErrorOverflow __vbaFileOpen ord648 __vbaInStr __vbaNew2 _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy ord681 __vbaVarCmpLt __vbaFreeStrList _adj_fdivr_m32 __vbaPowerR8 __vbaR8Var _adj_fdiv_r ord685 ord100 __vbaVarTstNe __vbaI4Var __vbaLateMemCall __vbaAryLock __vbaVarAdd __vbaVarDup ord613 ord614 __vbaFpI2 __vbaVarCopy ord616 __vbaFpI4 __vbaR8IntI2 ord617 __vbaLateMemCallLd _CIatan __vbaCastObj ord618 __vbaStrMove __vbaR8IntI4 _allmul __vbaLateIdSt _CItan ord546 __vbaFPInt __vbaAryUnlock __vbaVarForNext _CIexp __vbaFreeObj __vbaFreeStr ord581

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer