MOU USI-INDSR, TAIWAN.zip
- SHA256 f53fd0626404a129dcddb8ee7589387dd7bda7999814e0df46c670af6b3da5f5
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
MOU USI-INDSR, TAIWAN/Memorandum of Understanding between USI India and INDSR Taiwan.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
MOU USI-INDSR, TAIWAN/Memorandum of Understanding between USI India and INDSR Taiwan.exe
Resource
win11-20260513-en
windows11-21h2-x64
8 signatures
150 seconds
Behavioral task
behavioral3
Sample
MOU USI-INDSR_ TAIWAN/SolidPDFCreator.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral4
Sample
MOU USI-INDSR_ TAIWAN/SolidPDFCreator.dll
Resource
win11-20260513-en
windows11-21h2-x64
2 signatures
150 seconds
General
- Target MOU USI-INDSR, TAIWAN.zip
- Size 3.1MB
- Sample260612-th96eshx4x
- SHA256 f53fd0626404a129dcddb8ee7589387dd7bda7999814e0df46c670af6b3da5f5
- MD5 b267acd1b7c15b18178ae9fd4974f3f4
- SHA1 8aeba3c711eaa0116807c66390284dfa572d2cc7
- SHA512 f6b3daa7dca039fd0d3879bf9570404d55eee2ad0d2b0e891a4eb16261c3fddc2b031f0e03f8d1c87c3f79d44811fc1a503d8d69cc149f5f9f42c39169f5785d
- SSDEEP 98304:kJgyONYo5CjaEKz/wJ+IN+LbgkNLJWra/h:kJj2VDwJ+5LbhNLJCUh
- TLSH T11FE533B4E680AC47CFC4BDD6B30D3D68EE2F9E4A21CB94594121F52204C6ADD929DF62
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/MOU USI-INDSR, TAIWAN/SolidPDFCreator.dll - Untrusted Codesign Signers 1 IoCs
Codesigned file was signed by an untrusted entity.
resource unpack001/MOU USI-INDSR, TAIWAN/Memorandum of Understanding between USI India and INDSR Taiwan .exe
File Explorer
-
MOU USI-INDSR, TAIWAN.zip.zip 3.1MB
-
MOU USI-INDSR, TAIWAN/Memorandum of Understanding between USI India and INDSR Taiwan .exe.exe 1.5MB
-
MOU USI-INDSR, TAIWAN/SolidPDFCreator.dll.dll 2.4MB
MOU USI-INDSR, TAIWAN/Memorandum of Understanding between USI India and INDSR Taiwan .exe
- IMPHASH 536df46542e9ea959e0a18b5ee644036
- SHA256 fcf4efa82d477c924d42cc6b71aa672ab2381ca256769925ae34dabe2e77e025
- MD5 c04c947efdfdd9ce24617903b6746a83
- SHA1 43d646eda4166261eb1433c7599bf5cc9129a4f1
- SHA512 5d2f4d4caaff0d04c64ccfe094be9ed683d8e408668d0dba3c9c59c5557258657d889078d4cc1fd106d53a3779fd59b8b7c18160a6a73803f20836d678454542
- SSDEEP 49152:tXnulPRNaHAPM1ICw3qHZDlrqdWRyZNtoXwU7sk+TBV99yhW4iHp8p0:5uHNagPGICw3qHZhrW1ZPoXakyV99yhu
- TLSH T13A758E3276A1947AC23B3630855A93F9F3B69D308E35024B36905E3E2F355D2592E72F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
3a:64:30:e2:23:59:e6:74:c0:00:0d:d5:9f:d3:34:68:46:25:e4:a4
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Solid Documents,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Solid Documents,L=Port Nelson,ST=Nelson,C=NZ
Chains
Jun 3, 2014
CN=Solid Documents,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Solid Documents,L=Port Nelson,ST=Nelson,C=NZ
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Subject
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Serial Number
7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 21, 2012 - Dec 30, 2020
Subject
CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US
Serial Number
0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Issuer
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 18, 2012 - Dec 29, 2020
Subject
CN=Solid Documents,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Solid Documents,L=Port Nelson,ST=Nelson,C=NZ
Serial Number
41:8b:8d:cb:d9:33:92:34:17:32:ae:f9:13:52:5d:31
Issuer
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 23, 2013 - Nov 22, 2014
Subject
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Serial Number
52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 8, 2010 - Feb 7, 2020
Minor OS version
1
Major OS version
5
Entry point
1058613
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
C:\AutoBuildCC\build\SolidPDFCreator\weekly_build\DocBuilder\SolidApplications\SolidPrinter\SolidPDFCreator\Release_PDF_CREATE_Win32\SolidPDFCreator.pdb
solidpdfcreator
?ParseCommandLine@CSPApp@@QAEXPB_W@Z
?SupportInfo@CSPApp@@QAEXXZ
?HelpPage@CSPApp@@QAEXXZ
?DeleteJob@CSPApp@@QAEXK@Z
AfsSetMainWnd
?GetSPApp@@YAAAVCSPApp@@XZ
kernel32
GetConsoleCP
GetConsoleMode
WriteConsoleW
SetEnvironmentVariableA
SizeofResource
LockResource
LoadResource
FindResourceW
Sleep
SetLastError
GetLastError
MulDiv
lstrlenW
LocalFree
FormatMessageW
GlobalUnlock
GlobalLock
GlobalAlloc
GlobalSize
CopyFileW
GlobalFree
InterlockedExchange
LoadLibraryExW
GetLocaleInfoW
FreeLibrary
GetProcAddress
GetModuleHandleW
lstrcmpW
WideCharToMultiByte
MultiByteToWideChar
DeactivateActCtx
LoadLibraryW
ActivateActCtx
GetSystemDefaultUILanguage
ConvertDefaultLocale
GetUserDefaultUILanguage
GetModuleFileNameW
GetCurrentThreadId
GetCurrentThread
GlobalDeleteAtom
lstrcmpA
CloseHandle
SetThreadPriority
ResumeThread
GetTimeZoneInformation
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
TerminateProcess
IsDebuggerPresent
UnhandledExceptionFilter
IsProcessorFeaturePresent
QueryPerformanceCounter
HeapCreate
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetStdHandle
SetUnhandledExceptionFilter
GetFileType
SetStdHandle
VirtualQuery
GetSystemInfo
VirtualAlloc
GetSystemTimeAsFileTime
HeapSize
HeapQueryInformation
HeapReAlloc
CreateThread
ExitThread
ExitProcess
HeapFree
HeapAlloc
DecodePointer
EncodePointer
RtlUnwind
RaiseException
GetStartupInfoW
HeapSetInformation
GetCommandLineW
FindResourceExW
VirtualProtect
GetNumberFormatW
GetWindowsDirectoryW
SearchPathW
LCMapStringW
GetStringTypeW
WaitForSingleObject
GetProfileIntW
GetTickCount
WritePrivateProfileStringW
GetPrivateProfileStringW
GlobalAddAtomW
GetFileTime
GetFileSizeEx
GetFileAttributesW
FileTimeToLocalFileTime
GetFileAttributesExW
GetTempPathW
GetTempFileNameW
SetErrorMode
FileTimeToSystemTime
lstrlenA
GlobalGetAtomNameW
GetFullPathNameW
GetVolumeInformationW
FindFirstFileW
FindClose
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileW
lstrcmpiW
GetThreadLocale
GlobalFindAtomW
InitializeCriticalSectionAndSpinCount
DeleteFileW
GlobalFlags
GetVersionExW
lstrcpyW
GetSystemDirectoryW
GetCurrentDirectoryW
CompareStringW
InterlockedIncrement
InterlockedDecrement
ReleaseActCtx
CreateActCtxW
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
FreeResource
GetCurrentProcessId
GetPrivateProfileIntW
user32
GetWindowRgn
DestroyCursor
DrawIcon
HideCaret
InvertRect
SubtractRect
MapVirtualKeyExW
GetKeyNameTextW
IsCharLowerW
GetIconInfo
GetDoubleClickTime
CharUpperBuffW
CopyIcon
EmptyClipboard
CloseClipboard
SetClipboardData
OpenClipboard
GetMenuDefaultItem
GetUpdateRect
FrameRect
IsClipboardFormatAvailable
SetMenuDefaultItem
PostThreadMessageW
CreateMenu
IsMenu
UpdateLayeredWindow
EnableScrollBar
UnionRect
MonitorFromPoint
TranslateMDISysAccel
DrawMenuBar
DefMDIChildProcW
DefFrameProcW
RegisterClipboardFormatW
CreateDialogIndirectParamW
EndDialog
CopyImage
UnpackDDElParam
ReuseDDElParam
LoadImageW
InsertMenuItemW
TranslateAcceleratorW
LockWindowUpdate
BringWindowToTop
SetCursorPos
CreateAcceleratorTableW
LoadAcceleratorsW
GetKeyboardState
GetKeyboardLayout
MapVirtualKeyW
ToUnicodeEx
DrawFocusRect
DrawFrameControl
DrawEdge
DrawIconEx
DrawStateW
GetSystemMenu
LoadMenuW
SetClassLongW
GetAsyncKeyState
NotifyWinEvent
CreatePopupMenu
DestroyAcceleratorTable
SetParent
SetWindowRgn
IsZoomed
DestroyMenu
GetMenuItemInfoW
InflateRect
UnregisterClassW
MessageBeep
GetNextDlgTabItem
GetNextDlgGroupItem
InvalidateRgn
IntersectRect
SetRect
IsRectEmpty
OffsetRect
CharNextW
CharUpperW
DestroyIcon
IsIconic
ShowWindow
MoveWindow
IsDialogMessageW
CheckDlgButton
RegisterWindowMessageW
LoadIconW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetClassLongW
SetPropW
GetPropW
RemovePropW
IsWindow
SetFocus
GetWindowTextLengthW
GetForegroundWindow
SetActiveWindow
BeginDeferWindowPos
EndDeferWindowPos
GetDlgItem
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
MonitorFromWindow
ScrollWindow
TrackPopupMenu
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
ShowScrollBar
RedrawWindow
CreateWindowExW
GetClassInfoExW
RegisterClassW
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetWindowPlacement
CallWindowProcW
GetMenu
SetWindowLongW
WaitMessage
ReleaseCapture
GetCapture
WindowFromPoint
SetCapture
KillTimer
SetTimer
InvalidateRect
UpdateWindow
GetDesktopWindow
RealChildWindowFromPoint
GetDlgCtrlID
GetWindowRect
GetClassNameW
PtInRect
GetWindowTextW
SetWindowTextW
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
ScreenToClient
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
FillRect
GetClassInfoW
DefWindowProcW
MapWindowPoints
GetClientRect
SetLayeredWindowAttributes
EnumDisplayMonitors
SystemParametersInfoW
GetMonitorInfoW
SetRectEmpty
CopyRect
DeleteMenu
LoadCursorW
GetSystemMetrics
GetDC
ReleaseDC
GetSysColor
GetSysColorBrush
UnhookWindowsHookEx
GetWindow
SetWindowContextHelpId
MapDialogRect
SetWindowPos
GetWindowThreadProcessId
GetWindowLongW
GetLastActivePopup
IsWindowEnabled
EnableWindow
MessageBoxW
ShowOwnedPopups
SetCursor
SetWindowsHookExW
CallNextHookEx
GetMessageW
TranslateMessage
DispatchMessageW
GetActiveWindow
IsWindowVisible
GetKeyState
PeekMessageW
GetCursorPos
ValidateRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
GetFocus
GetParent
SendMessageW
ModifyMenuW
EnableMenuItem
CheckMenuItem
PostMessageW
PostQuitMessage
GetMenuState
GetMenuStringW
AppendMenuW
GetMenuItemID
InsertMenuW
GetMenuItemCount
GetSubMenu
RemoveMenu
CopyAcceleratorTableW
gdi32
GetPixel
PtVisible
RectVisible
TextOutW
ExtTextOutW
Escape
SelectObject
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
DeleteDC
SelectPalette
GetObjectType
CreateHatchBrush
GetBkColor
GetTextColor
GetRgnBox
GetTextExtentPoint32W
CreateDIBSection
CreateRoundRectRgn
CreatePolygonRgn
CombineRgn
PatBlt
GetWindowExtEx
Polyline
Ellipse
Polygon
SetRectRgn
GetMapMode
DPtoLP
SetDIBColorTable
RealizePalette
StretchBlt
SetPixel
Rectangle
CreatePalette
GetPaletteEntries
GetNearestPaletteIndex
GetSystemPaletteEntries
LPtoDP
GetWindowOrgEx
GetViewportOrgEx
PtInRegion
FillRgn
FrameRgn
GetBoundsRect
ExtFloodFill
SetPaletteEntries
EnumFontFamiliesExW
GetTextFaceW
SetPixelV
CreateEllipticRgn
GetViewportExtEx
CreateRectRgn
SelectClipRgn
SetLayout
GetLayout
SetTextAlign
MoveToEx
LineTo
IntersectClipRect
SetTextColor
SetROP2
SetPolyFillMode
SetBkMode
SetBkColor
RestoreDC
SaveDC
DeleteObject
GetTextCharsetInfo
EnumFontFamiliesW
GetTextMetricsW
BitBlt
ExcludeClipRect
GetClipBox
SetMapMode
GetDeviceCaps
CopyMetaFileW
CreateDCW
CreateBitmap
CreateDIBitmap
GetStockObject
OffsetRgn
CreatePen
CreateCompatibleDC
CreateRectRgnIndirect
CreateCompatibleBitmap
GetObjectW
CreateFontIndirectW
CreatePatternBrush
CreateSolidBrush
msimg32
TransparentBlt
AlphaBlend
comdlg32
GetFileTitleW
winspool.drv
ClosePrinter
OpenPrinterW
DocumentPropertiesW
advapi32
RegQueryValueExW
RegOpenKeyExW
RegCreateKeyExW
RegSetValueExW
RegDeleteValueW
RegDeleteKeyW
RegEnumKeyW
RegQueryValueW
RegCloseKey
RegEnumKeyExW
RegEnumValueW
shell32
SHGetFileInfoW
ShellExecuteW
DragFinish
DragQueryFileW
SHAppBarMessage
SHGetDesktopFolder
SHGetPathFromIDListW
SHGetSpecialFolderLocation
SHBrowseForFolderW
comctl32
ord17
ImageList_GetIconSize
shlwapi
PathFindFileNameW
PathStripToRootW
PathIsUNCW
PathRemoveFileSpecW
PathFindExtensionW
ole32
DoDragDrop
OleFlushClipboard
OleIsCurrentClipboard
CreateStreamOnHGlobal
OleLockRunning
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CoInitializeEx
CreateILockBytesOnHGlobal
CoGetClassObject
CoCreateInstance
CLSIDFromString
CLSIDFromProgID
CoCreateGuid
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium
RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop
OleGetClipboard
StgCreateDocfileOnILockBytes
CoTaskMemFree
CoInitialize
CoUninitialize
CoRegisterMessageFilter
StgOpenStorageOnILockBytes
CoRevokeClassObject
oleaut32
OleCreateFontIndirect
VarBstrFromDate
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroy
VariantCopy
VariantInit
VariantChangeType
VariantClear
SysStringLen
SysAllocStringLen
SysAllocString
SysFreeString
oledlg
OleUIBusyW
gdiplus
GdipGetImageGraphicsContext
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipCloneImage
GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateFromHDC
GdiplusShutdown
GdiplusStartup
GdipCreateBitmapFromHBITMAP
GdipDisposeImage
GdipDeleteGraphics
GdipAlloc
GdipFree
GdipDrawImageI
oleacc
LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject
imm32
ImmGetOpenStatus
ImmReleaseContext
ImmGetContext
winmm
PlaySoundW
Name
.text
Size
1.1MB
Virtual Size
1.1MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
277KB
Virtual Size
276KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
25KB
Virtual Size
54KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
53KB
Virtual Size
53KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=132, productName=VS2008 SP1 build 30729, version=30729,
count=15, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=34, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=43, id=158, productName=VS2010 SP1 build 40219, version=40219,
count=179, id=170, productName=VS2010 SP1 build 40219, version=40219,
count=3, id=156, productName=VS2010 SP1 build 40219, version=40219,
count=757, id=1, productName=Unmarked objects,
count=380, id=171, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=154, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=157, productName=VS2010 SP1 build 40219, version=40219,
MOU USI-INDSR, TAIWAN/SolidPDFCreator.dll
- IMPHASH abdf309354079c85470658074aab02a7
- SHA256 a43084f5af861f44c75c5273c779cb26d506cab6b51c33746626da504148a4ec
- MD5 7e7b30071565773d480578537ee3b0e6
- SHA1 bca1e295acaacbb19c7e3a7868746f6b772b7b71
- SHA512 8a39da6354721827295d77614bf60741210e96b2494596dcf7c864e699096890b0ea89fb2a3fd3c10022b68573e3689334503ac20d1e21f34d661204768b596f
- SSDEEP 49152:VQKfaknyDEOVbH6Ygzu0wJuZIPVnJ+II/VC+N3JWi98yDpyS:PfaknyDEgyzpwJqI7+ntC+N3JW9yN9
- TLSH T15AC53365A280D443CEC13AFFB31E3D78D90E8EB923DAD452C3B2F41504946D5929DFAA
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
15373
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
c:\Users\john\Desktop\cursor_project\SolidPDFCreator-V4\Release\SolidPDFCreator.pdb
kernel32
lstrcpynW
MultiByteToWideChar
GetLocalTime
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
CloseHandle
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
GetModuleHandleW
GetProcAddress
IsDebuggerPresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
LocalFree
InitializeSListHead
ole32
CoCreateInstance
CoUninitialize
CoInitializeEx
oleaut32
SysAllocString
VariantInit
SysFreeString
VariantClear
msvcp140
?_Xout_of_range@std@@YAXPBD@Z
?_Xbad_alloc@std@@YAXXZ
?_Xlength_error@std@@YAXPBD@Z
vcruntime140
memcpy
memmove
_CxxThrowException
memset
__vcrt_InitializeCriticalSectionEx
_except_handler4_common
__std_exception_copy
__std_exception_destroy
__std_type_info_destroy_list
__CxxFrameHandler3
api-ms-win-crt-filesystem-l1-1-0
_waccess
_wmkdir
api-ms-win-crt-stdio-l1-1-0
_wfopen_s
__stdio_common_vswprintf_s
fwrite
fclose
api-ms-win-crt-runtime-l1-1-0
_cexit
_crt_atexit
_execute_onexit_table
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_initterm
_initterm_e
_invalid_parameter_noinfo_noreturn
_register_onexit_function
api-ms-win-crt-heap-l1-1-0
_callnewh
malloc
free
?DeleteJob@CSPApp@@QAEXK@Z
?GetSPApp@@YAAAVCSPApp@@XZ
?HelpPage@CSPApp@@QAEXXZ
?ParseCommandLine@CSPApp@@QAEXPB_W@Z
?SupportInfo@CSPApp@@QAEXXZ
AfsSetMainWnd
Name
.text
Size
13KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
2.4MB
Virtual Size
2.4MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.gfids
Size
512B
Virtual Size
92B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.tls
Size
512B
Virtual Size
9B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=8, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=4, id=259, version=24123,
count=11, id=260, version=24123,
count=1, id=208, version=65501,
count=23, id=261, version=24123,
count=4, id=257, version=24123,
count=7, id=203, version=65501,
count=74, id=1, productName=Unmarked objects,
count=4, id=265, version=24215,
count=1, id=256, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,