cfd42feb7373030544be91d35fdf5431657db4348b71c3ee5269a9af9238915b
- SHA256 cfd42feb7373030544be91d35fdf5431657db4348b71c3ee5269a9af9238915b
Overview
overview
7Static
static
5ماكرو....3.exe
windows10-2004-x64
3ماكرو....3.exe
windows11-ltsc_2024-x64
3$PLUGINSDI...md.dll
windows10-2004-x64
3$PLUGINSDI...md.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3$PLUGINSDI...ns.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...er.dll
windows10-2004-x64
3$PLUGINSDI...er.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...gs.dll
windows10-2004-x64
3$PLUGINSDI...gs.dll
windows11-ltsc_2024-x64
3BugTrapU-x64.dll
windows10-2004-x64
1BugTrapU-x64.dll
windows11-ltsc_2024-x64
1XMouseButt...ol.exe
windows10-2004-x64
1XMouseButt...ol.exe
windows11-ltsc_2024-x64
1XMouseButtonHook.dll
windows10-2004-x64
1XMouseButtonHook.dll
windows11-ltsc_2024-x64
1uninstaller.exe
windows10-2004-x64
7uninstaller.exe
windows11-ltsc_2024-x64
7$PLUGINSDI...md.dll
windows10-2004-x64
3$PLUGINSDI...md.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows11-ltsc_2024-x64
3ماكرو...up.exe
windows10-2004-x64
6ماكرو...up.exe
windows11-ltsc_2024-x64
7Behavioral task
behavioral1
Sample
ماكرو vinko/1-XMouseButtonControlSetup.2.20.3.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
ماكرو vinko/1-XMouseButtonControlSetup.2.20.3.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral3
Sample
$PLUGINSDIR/ExecCmd.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral4
Sample
$PLUGINSDIR/ExecCmd.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
Behavioral task
behavioral5
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral6
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
Behavioral task
behavioral7
Sample
$PLUGINSDIR/ShellExecAsUser.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral8
Sample
$PLUGINSDIR/ShellExecAsUser.dll
Resource
win11ltsc2024-20260710-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
Behavioral task
behavioral9
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral10
Sample
$PLUGINSDIR/System.dll
Resource
win11ltsc2024-20260710-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
Behavioral task
behavioral11
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral12
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
Behavioral task
behavioral13
Sample
BugTrapU-x64.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral14
Sample
BugTrapU-x64.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
Behavioral task
behavioral15
Sample
XMouseButtonControl.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral16
Sample
XMouseButtonControl.exe
Resource
win11ltsc2024-20260710-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
Behavioral task
behavioral17
Sample
XMouseButtonHook.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral18
Sample
XMouseButtonHook.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
Behavioral task
behavioral19
Sample
uninstaller.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
7 signatures
150 seconds
Behavioral task
behavioral20
Sample
uninstaller.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
7 signatures
150 seconds
Behavioral task
behavioral21
Sample
$PLUGINSDIR/ExecCmd.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral22
Sample
$PLUGINSDIR/ExecCmd.dll
Resource
win11ltsc2024-20260710-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
Behavioral task
behavioral23
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral24
Sample
$PLUGINSDIR/System.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
Behavioral task
behavioral25
Sample
ماكرو vinko/AutoHotkey_2.0.11_setup.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
8 signatures
150 seconds
Behavioral task
behavioral26
Sample
ماكرو vinko/AutoHotkey_2.0.11_setup.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
14 signatures
150 seconds
General
- Target cfd42feb7373030544be91d35fdf5431657db4348b71c3ee5269a9af9238915b
- Size 5.7MB
- Sample260712-e328zscy8j
- SHA256 cfd42feb7373030544be91d35fdf5431657db4348b71c3ee5269a9af9238915b
- MD5 e710815864d9657214a4d7974f90d2c1
- SHA1 5e74fd08d5df091f068622955850d96c2acaa82e
- SHA512 eb451029c0e14f9bcd8f41c3d8fee08df9ed0f1f01f9e21907a9993729fa49eb71f94ecda909cb09e0dad661e4cb11ad4fb5931c609bda3f7ff3e1340a70417d
- SSDEEP 98304:y4vLzCCor7AHzmG/SVogFyi/rj/cFEXCZLxH4SGq+8QbN5FABMtG26aas0Ol9wqY:TLmC1HhdgoZNH4SGR8Qx5Gl26aas0ORY
- TLSH T1EC56337C77DC7BC043D815567FE4F82E60967B20F2008A63A38ADA05B1EC66645FE58B
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
-
resource yara_rule static1/unpack001/ماكرو vinko/AutoHotkey_2.0.11_setup.exe upx - Insecure Codesign Algorithm 4 IoCs
File was codesigned using an insecure algorithm.
resource unpack001/ماكرو vinko/1-XMouseButtonControlSetup.2.20.3.exe unpack002/XMouseButtonControl.exe unpack002/XMouseButtonHook.dll unpack002/uninstaller.exe - Unsigned PE 9 IoCs
Checks for missing Authenticode signature.
resource unpack002/$PLUGINSDIR/ExecCmd.dll unpack002/$PLUGINSDIR/InstallOptions.dll unpack002/$PLUGINSDIR/ShellExecAsUser.dll unpack002/$PLUGINSDIR/System.dll unpack002/$PLUGINSDIR/nsDialogs.dll unpack002/BugTrapU-x64.dll unpack003/$PLUGINSDIR/ExecCmd.dll unpack003/$PLUGINSDIR/System.dll unpack001/ماكرو vinko/AutoHotkey_2.0.11_setup.exe - NSIS installer 4 IoCs
resource yara_rule static1/unpack001/ماكرو vinko/1-XMouseButtonControlSetup.2.20.3.exe nsis_installer_1 static1/unpack001/ماكرو vinko/1-XMouseButtonControlSetup.2.20.3.exe nsis_installer_2 static1/unpack002/uninstaller.exe nsis_installer_1 static1/unpack002/uninstaller.exe nsis_installer_2
File Explorer
-
cfd42feb7373030544be91d35fdf5431657db4348b71c3ee5269a9af9238915b.zip 5.7MB
-
ماكرو vinko/1-XMouseButtonControlSetup.2.20.3.exe.exe 2.9MB
-
$PLUGINSDIR/ExecCmd.dll.dll 4KB
-
$PLUGINSDIR/InstallOptions.dll.dll 14KB
-
$PLUGINSDIR/ShellExecAsUser.dll.dll 7KB
-
$PLUGINSDIR/System.dll.dll 10KB
-
$PLUGINSDIR/ioSpecial.ini211B
-
$PLUGINSDIR/modern-wizard.bmp25KB
-
$PLUGINSDIR/nsDialogs.dll.dll 9KB
-
BugTrapU-x64.dll.dll 364KB
-
XMouseButtonControl.exe.exe 1.7MB
-
XMouseButtonHook.dll.dll 1.0MB
-
uninstaller.exe.exe 74KB
-
$PLUGINSDIR/ExecCmd.dll.dll 4KB
-
$PLUGINSDIR/System.dll.dll 10KB
-
ماكرو vinko/AutoHotkey_2.0.11_setup.exe.exe 2.9MB
-
ماكرو vinko/Bomba.xmbcp41KB
-
ماكرو vinko/f.ahk10B
ماكرو vinko/1-XMouseButtonControlSetup.2.20.3.exe
- IMPHASH b1a57b635b23ffd553b3fd1e0960b2bd
- SHA256 f4707a78b51cbb82504db6cc2b3627d33a66beee7ea20d77472ae7e03d55ec39
- MD5 da0b2a67c217fa874916fa525fdf1d0d
- SHA1 25e482881a70959ce7e13dd144c5496469377144
- SHA512 17f7c32cb678c906af7062accd6a7ea905656ba77f7d8c5e7ef9f447a4674149b7dafcd6833b357fe686038d444429a5a55961300cc5869fb2c16d12a20fc80c
- SSDEEP 49152:c4datIRE8srTjl5NOV5UwmQn/gP0EFZheG9ZrFdwliPEoubUOV3/mSDXM4fyBqQX:c4dhRE8srVKnfmc/gP0EFSGzrFdwliP5
- TLSH T152E53369BB88EEA2C0F71B761AE8E5B96277772072008F136317C919B1B61C6077F057
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
-
NSIS installer
Digest
1f:e9:3c:63:b4:fa:94:59:df:04:19:36:c3:53:0f:5e:28:c5:3c:1a
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
CN=Open Source Developer\, Phillip Gibbons,O=Open Source Developer,ST=Berkshire,C=GB,1.2.840.113549.1.9.1=#0c127068696c406869676872657a2e636f2e756b
Chains
Apr 22, 2023
CN=Open Source Developer\, Phillip Gibbons,O=Open Source Developer,ST=Berkshire,C=GB,1.2.840.113549.1.9.1=#0c127068696c406869676872657a2e636f2e756b
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
CN=Open Source Developer\, Phillip Gibbons,O=Open Source Developer,ST=Berkshire,C=GB,1.2.840.113549.1.9.1=#0c127068696c406869676872657a2e636f2e756b
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Subject
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Serial Number
1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27
Issuer
CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
May 31, 2021 - Sep 17, 2029
Subject
CN=Open Source Developer\, Phillip Gibbons,O=Open Source Developer,ST=Berkshire,C=GB,1.2.840.113549.1.9.1=#0c127068696c406869676872657a2e636f2e756b
Serial Number
3d:a5:ca:7c:85:af:e6:68:8f:93:68:ae:a4:98:59:23
Issuer
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 4, 2023 - Apr 3, 2024
Subject
CN=Certum Timestamp 2022,O=Asseco Data Systems S.A.,C=PL
Serial Number
2b:d4:ae:70:b9:d0:63:5b:2a:e9:84:c8:d6:74:aa:30
Issuer
CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 28, 2022 - Jul 27, 2033
Subject
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
Serial Number
99:a3:80:0a:26:55:3b:65:ab:dc:6e:84:a6:b3:ea:39
Issuer
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 19, 2021 - May 18, 2036
Subject
CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL
Serial Number
e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87
Issuer
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 19, 2021 - May 18, 2036
Minor OS version
0
Major OS version
4
Entry point
12908
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
GetTickCount
GetShortPathNameA
GetFullPathNameA
MoveFileA
SetCurrentDirectoryA
GetFileAttributesA
SetFileAttributesA
CompareFileTime
SearchPathA
CreateFileA
GetFileSize
GetModuleFileNameA
GetCurrentProcess
CopyFileA
ExitProcess
GetWindowsDirectoryA
Sleep
lstrcmpiA
lstrlenA
GetVersion
SetErrorMode
lstrcpynA
GetDiskFreeSpaceA
GlobalUnlock
GlobalLock
CreateThread
GetLastError
CreateDirectoryA
CreateProcessA
RemoveDirectoryA
GetTempFileNameA
lstrcatA
GetSystemDirectoryA
WaitForSingleObject
SetFileTime
CloseHandle
GlobalFree
lstrcmpA
ExpandEnvironmentStringsA
GetExitCodeProcess
GlobalAlloc
GetCommandLineA
GetTempPathA
GetProcAddress
FindFirstFileA
FindNextFileA
DeleteFileA
SetFilePointer
ReadFile
FindClose
GetPrivateProfileStringA
WritePrivateProfileStringA
WriteFile
MulDiv
MultiByteToWideChar
LoadLibraryExA
GetModuleHandleA
FreeLibrary
user32
SetCursor
GetWindowRect
EnableMenuItem
GetSystemMenu
SetClassLongA
IsWindowEnabled
SetWindowPos
GetSysColor
EndDialog
ScreenToClient
LoadCursorA
CheckDlgButton
GetMessagePos
LoadBitmapA
CallWindowProcA
IsWindowVisible
CloseClipboard
SetForegroundWindow
GetWindowLongA
RegisterClassA
TrackPopupMenu
AppendMenuA
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextA
GetDlgItemTextA
MessageBoxIndirectA
CharPrevA
DispatchMessageA
PeekMessageA
GetDC
EnableWindow
InvalidateRect
SendMessageA
DefWindowProcA
BeginPaint
GetClientRect
FillRect
DrawTextA
SystemParametersInfoA
CreateWindowExA
GetClassInfoA
DialogBoxParamA
CharNextA
ExitWindowsEx
SetTimer
PostQuitMessage
SetWindowLongA
SendMessageTimeoutA
LoadImageA
wsprintfA
GetDlgItem
FindWindowExA
IsWindow
SetClipboardData
EmptyClipboard
OpenClipboard
EndPaint
CreateDialogParamA
DestroyWindow
ShowWindow
SetWindowTextA
gdi32
SelectObject
SetBkMode
CreateFontIndirectA
SetTextColor
DeleteObject
GetDeviceCaps
CreateBrushIndirect
SetBkColor
shell32
SHGetSpecialFolderLocation
SHGetPathFromIDListA
SHBrowseForFolderA
SHGetFileInfoA
SHFileOperationA
ShellExecuteA
advapi32
RegDeleteValueA
SetFileSecurityA
RegOpenKeyExA
RegDeleteKeyA
RegEnumValueA
RegCloseKey
RegCreateKeyExA
RegSetValueExA
RegQueryValueExA
RegEnumKeyA
comctl32
ImageList_AddMasked
ImageList_Destroy
ImageList_Create
ord17
ole32
OleUninitialize
OleInitialize
CoTaskMemFree
CoCreateInstance
Name
.text
Size
23KB
Virtual Size
23KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1KB
Virtual Size
108KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.ndata
Size
Virtual Size
52KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
24KB
Virtual Size
24KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=2, id=95, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=152, id=1, productName=Unmarked objects,
count=15, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=10, id=48, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
$PLUGINSDIR/ExecCmd.dll
- IMPHASH bf44c9fb48bb8c36b3e2527e7252350d
- SHA256 1f4bd9c9376fe1b6913baeca7fb6df6467126f27c9c2fe038206567232a0e244
- MD5 b9380b0bea8854fd9f93cc1fda0dfeac
- SHA1 edb8d58074e098f7b5f0d158abedc7fc53638618
- SHA512 45c3ab0f2bce53b75e72e43bac747dc0618342a3f498be8e2eb62a6db0b137fcdb1735da83051b14824996b5287109aa831e5859d6f21f0ed21b76b3d335418c
- SSDEEP 48:ifXNtGNjFizsU35iej7luiwa28mDJmDKUOMQH0glay/Aa4r/:5Fef5iej5txKJKenlV4r/
- TLSH T16E91947B63D85AF3D194077234C784D777BED4280355812A080BBA881D56EE3ECBC213
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
5433
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
FreeLibrary
OpenProcess
CloseHandle
GetProcAddress
LoadLibraryA
GetVersionExA
GlobalFree
TerminateProcess
GetExitCodeProcess
WaitForSingleObject
Sleep
CreateProcessA
GlobalAlloc
GetExitCodeThread
lstrcpyA
lstrcpynA
CreateThread
lstrcatA
GetEnvironmentVariableA
lstrcmpiA
user32
SendMessageA
EnumWindows
WaitForInputIdle
wsprintfA
GetWindowThreadProcessId
exec
wait
Name
.text
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1024B
Virtual Size
802B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
142B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
512B
Virtual Size
200B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=25, id=1, productName=Unmarked objects,
count=5, id=19, version=8034,
count=1, id=10, version=8966,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
$PLUGINSDIR/InstallOptions.dll
- IMPHASH 738dc9bb91549f627cf1953c2000e1d6
- SHA256 8f24c6cf0b06d18f3c07e7bfca4e92afce71834663746cfaa9ddf52a25d5c586
- MD5 d753362649aecd60ff434adf171a4e7f
- SHA1 3b752ad064e06e21822c8958ae22e9a6bb8cf3d0
- SHA512 41bf41add275867553fa3bd8835cd7e2a2a362a2d5670ccbfad23700448bad9fe0f577fb6ee9d4eb81dfc10d463b325b8a873fe5912eb580936d4ad96587aa6d
- SSDEEP 192:3Gs+dH4+oQOTgDbzuNfrigyULWsXXZF/01JJijnK72dwF7dBEnbok:3GvdH4qMebzPY2Vijn+BEnbo
- TLSH T1F0623B51638888F3DBD6013EB4523707AB595126B4925DE2CB271FCA6D3B18E3EB2346
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
10696
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
GetCurrentDirectoryA
MultiByteToWideChar
SetCurrentDirectoryA
GetPrivateProfileStringA
GetPrivateProfileIntA
GetModuleHandleA
lstrcmpiA
lstrcatA
lstrcpynA
WritePrivateProfileStringA
lstrlenA
lstrcpyA
GlobalFree
GlobalAlloc
GlobalUnlock
GlobalLock
user32
GetDlgCtrlID
CloseClipboard
GetClipboardData
MapWindowPoints
LoadCursorA
GetClientRect
SetWindowRgn
LoadIconA
GetWindowLongA
SetWindowLongA
CreateWindowExA
MapDialogRect
SetWindowPos
GetWindowRect
CreateDialogParamA
ShowWindow
SetCursor
PtInRect
EnableWindow
GetDlgItem
DestroyIcon
DestroyWindow
DispatchMessageA
TranslateMessage
GetMessageA
IsDialogMessageA
DrawFocusRect
CallWindowProcA
PostMessageA
MessageBoxA
CharNextA
wsprintfA
GetWindowTextA
SetWindowTextA
SendMessageA
EnableMenuItem
DrawTextA
GetSystemMenu
OpenClipboard
LoadImageA
gdi32
SetTextColor
DeleteObject
CombineRgn
CreateRectRgn
GetDIBits
SelectObject
CreateCompatibleDC
GetObjectA
shell32
SHGetPathFromIDListA
ShellExecuteA
SHBrowseForFolderA
SHGetDesktopFolder
comdlg32
GetOpenFileNameA
GetSaveFileNameA
CommDlgExtendedError
ole32
CoTaskMemFree
dialog
initDialog
show
Name
.text
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
512B
Virtual Size
152B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=72, id=1, productName=Unmarked objects,
count=13, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=1, id=48, version=9044,
count=1, id=49, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
$PLUGINSDIR/ShellExecAsUser.dll
- IMPHASH fb89301642ac2a39aefdd3cc2610ed81
- SHA256 27d61cacd2995f498ba971b3b2c53330bc0e9900c9d23e57b2927aadfdee8115
- MD5 86a81b9ab7de83aa01024593a03d1872
- SHA1 8fd7c645e6e2cb1f1bcb97b3b5f85ce1660b66be
- SHA512 cc37bd5d74d185077bdf6c4a974fb29922e3177e2c5971c664f46c057aad1236e6f3f856c5d82f1d677c29896f0e3e71283ef04f886db58abae151cb27c827ac
- SSDEEP 96:GFZf6PnleKYcBVGKLyhkrw0qyz/sRXQVgKXohw8FFtkqCp:Gnf6IKTAKLyGOCqQomItQ
- TLSH T167E1097A56D288A1E11E07746A975E7B13AD6A1203B00431CB471FCE2DF5456F42FA4E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
6561
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
GetCurrentProcess
CloseHandle
WaitForSingleObject
OutputDebugStringA
MultiByteToWideChar
lstrlenA
GetModuleHandleA
lstrcmpA
SetEvent
GlobalFree
lstrcpyA
GetProcAddress
CreateEventA
GetVersionExA
user32
CreateWindowExA
PostMessageA
GetMessageA
SetWindowLongA
RegisterClassExA
TranslateMessage
DispatchMessageA
DefWindowProcA
DestroyWindow
GetWindowLongA
PostQuitMessage
wsprintfA
advapi32
GetTokenInformation
OpenProcessToken
shell32
ShellExecuteA
ole32
CoInitialize
CoUninitialize
CoCreateInstance
oleaut32
SysAllocString
VariantClear
SysAllocStringLen
SysFreeString
shlwapi
ord176
msvcrt
malloc
_initterm
free
_beginthreadex
??2@YAPAXI@Z
??3@YAXPAX@Z
memset
_adjust_fdiv
ShellExecAsUser
Name
.text
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1024B
Virtual Size
732B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
512B
Virtual Size
426B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=14, version=7299,
count=4, id=10, version=8047,
count=2, id=4, version=8047,
count=2, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=95, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=49, id=1, productName=Unmarked objects,
count=13, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=1, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=1, id=10, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
$PLUGINSDIR/System.dll
- IMPHASH f2ac1ab587d5531d5f1bf76c094aef4c
- SHA256 bb6df93369b498eaa638b0bcdc4bb89f45e9b02ca12d28bcedf4629ea7f5e0f1
- MD5 56a321bd011112ec5d8a32b2f6fd3231
- SHA1 df20e3a35a1636de64df5290ae5e4e7572447f78
- SHA512 5354890cbc53ce51081a78c64ba9c4c8c4dc9e01141798c1e916e19c5776dac7c82989fad0f08c73e81aaba332dad81205f90d0663119af45550b97b338b9cc3
- SSDEEP 192:uv+cJZE61KRWJQO6tFiUdK7ckK4k7l1XRBm0w+NiHi1GSJ:uf6rtFRduQ1W+fG8
- TLSH T127225C5893E0C1F3D6A0853C18A73A772729712445A18FE3CFA35841AE196D7BC7E336
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
10512
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
MultiByteToWideChar
GlobalFree
GlobalSize
GetLastError
lstrcpyA
lstrcpynA
FreeLibrary
lstrcatA
GetProcAddress
LoadLibraryA
GetModuleHandleA
GlobalAlloc
lstrlenA
WideCharToMultiByte
VirtualAlloc
VirtualProtect
user32
wsprintfA
ole32
StringFromGUID2
CLSIDFromString
Alloc
Call
Copy
Free
Get
Int64Op
Store
Name
.text
Size
7KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1024B
Virtual Size
784B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
100B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
512B
Virtual Size
510B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=6, id=14, version=7299,
count=19, id=1, productName=Unmarked objects,
count=7, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=1, id=42, version=8803,
count=4, id=48, version=9044,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
$PLUGINSDIR/ioSpecial.ini
- SHA256 d95aed234f932a1c48a2b1b0d98c60ca31f962310c03158e2884ab4ddd3ea1e0
- MD5 e2d5070bc28db1ac745613689ff86067
- SHA1 282e080b4cf847174c5c11e4f9157b8c338ecb19
- SHA512 a50ca2014869629135b54e848f03cb4983ad8029cd811300d02b0fc54de0436185f418fea4d3db888eb0f3170e33a59d486aa885f024ab29e630e9bc0ae1a2de
- TLSH T1D3D0C9C9501A802944208642A97A2FA263E03E210B1725FAF5724C87EB4CDE79C9D682
- MD5 SHA1 SHA512 TLSH
$PLUGINSDIR/modern-wizard.bmp
- SHA256 3ad2dc318056d0a2024af1804ea741146cfc18cc404649a44610cbf8b2056cf2
- MD5 cbe40fd2b1ec96daedc65da172d90022
- SHA1 366c216220aa4329dff6c485fd0e9b0f4f0a7944
- SHA512 62990cb16e37b6b4eff6ab03571c3a82dcaa21a1d393c3cb01d81f62287777fb0b4b27f8852b5fa71bc975feab5baa486d33f2c58660210e115de7e2bd34ea63
- SSDEEP 24:Qwika6aSaaDaVYoG6abuJsnZs5GhI11BayNXPcDrSsUWcSphsWwlEWqCl6aHAX2x:Qoi47a5G8SddzKFIcsOz3Xz
- TLSH T139C29757DE6B6EA4BE0804EF1A0694931C71FE211AB0CD0561D2B767B4FC93B19A0B3C
- MD5 SHA1 SHA512 SSDEEP TLSH
$PLUGINSDIR/nsDialogs.dll
- IMPHASH f03b2bab186574d8892d3d73fa9fd3fd
- SHA256 4cd17f660560934a001fc8e6fdcea50383b78ca129fb236623a9666fcbd13061
- MD5 f832e4279c8ff9029b94027803e10e1b
- SHA1 134ff09f9c70999da35e73f57b70522dc817e681
- SHA512 bf92b61aa267e3935f0ea7f47d8d96f09f016e648c2a7e7dcd5ecc47da864e824c592098c1e39526b643bd126c5c99d68a7040411a4cf68857df629f24d4107d
- SSDEEP 96:ytJ6tC4jcY5rKhkfL9SYdKkcxM2DjDf3GEfKvBKav+Yx4yndY7ndS27gA:yyj6QS8HREf+BYYxbdqn420
- TLSH T19212F9675A0011B3E9A3223D306A2E3F977C9325D0527C03C677AE562BF031A7D3A355
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
7410
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
GetFileAttributesA
lstrcmpiA
MulDiv
lstrlenA
lstrcpyA
GetCurrentDirectoryA
HeapFree
HeapAlloc
HeapReAlloc
GlobalFree
lstrcpynA
GlobalAlloc
SetCurrentDirectoryA
GetProcessHeap
user32
DestroyWindow
CallWindowProcA
SetCursor
LoadCursorA
GetPropA
CharPrevA
MapWindowPoints
GetWindowLongA
DrawTextA
GetClientRect
GetDlgItem
SetWindowLongA
SetWindowPos
CreateDialogParamA
MapDialogRect
GetWindowRect
SetPropA
CreateWindowExA
IsWindow
SetTimer
KillTimer
DispatchMessageA
TranslateMessage
GetMessageA
IsDialogMessageA
ShowWindow
wsprintfA
CharNextA
SendMessageA
RemovePropA
DrawFocusRect
GetWindowTextA
gdi32
SetTextColor
shell32
SHBrowseForFolderA
SHGetPathFromIDListA
comdlg32
GetSaveFileNameA
GetOpenFileNameA
CommDlgExtendedError
ole32
CoTaskMemFree
Create
CreateControl
CreateItem
CreateTimer
GetUserData
KillTimer
OnBack
OnChange
OnClick
OnNotify
SelectFileDialog
SelectFolderDialog
SetRTL
SetUserData
Show
Name
.text
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
512B
Virtual Size
152B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1024B
Virtual Size
572B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=53, id=1, productName=Unmarked objects,
count=13, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=5, id=48, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
BugTrapU-x64.dll
- IMPHASH bce0ab64d2b0769ad1d26a0d18fc1cdd
- SHA256 0ab8481b44e7d2f0d57b444689aef75b61024487a5cf188c2fc6b8de919b040a
- MD5 80d5f32b3fc515402b9e1fe958dedf81
- SHA1 a80ffd7907e0de2ee4e13c592b888fe00551b7e0
- SHA512 1589246cd480326ca22c2acb1129a3a90edf13b75031343061f0f4ed51580dfb890862162a65957be9026381bb24475fec6ddcb86692c5961a24b18461e5f1f0
- SSDEEP 6144:tv+VkJpn803Q9eg3rX9FudjTLNjGGtOCiKTBObg:tvfJp8aQ9eg3rX9Fudjx5Tk
- TLSH T167845B0A73E404A6F5B7923CCAF38646E6717C1517A09BCF2364479A2F33BD0953A726
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
177740
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\projects\bugtrap\bin\BugTrapU-x64.pdb
ws2_32
gethostbyname
inet_ntoa
WSASocketW
WSASend
WSAGetOverlappedResult
WSAEventSelect
WSAEnumNetworkEvents
WSAGetLastError
shutdown
setsockopt
inet_addr
htons
connect
closesocket
WSACleanup
WSAStartup
gethostname
comctl32
InitCommonControlsEx
ImageList_LoadImageW
ImageList_Destroy
shlwapi
PathRemoveBackslashW
PathRemoveExtensionW
PathSkipRootW
PathFindNextComponentW
PathIsURLW
PathAddExtensionW
PathIsRootW
PathRemoveFileSpecW
UrlIsW
PathCreateFromUrlW
PathAppendW
StrTrimW
StrTrimA
PathIsRelativeW
PathCombineW
PathFindFileNameW
version
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
wininet
HttpEndRequestW
HttpSendRequestExW
HttpOpenRequestW
InternetSetStatusCallbackW
InternetAttemptConnect
InternetWriteFile
InternetConnectW
InternetCloseHandle
InternetOpenW
InternetCrackUrlW
InternetGetLastResponseInfoW
kernel32
GetStartupInfoW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
Sleep
InitializeCriticalSectionAndSpinCount
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
SetLastError
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
HeapSize
GetModuleFileNameW
CreateFileW
WriteFile
CloseHandle
CopyFileW
FindClose
FindFirstFileW
FindNextFileW
RaiseException
SetEvent
WaitForSingleObject
MultiByteToWideChar
GetFileSize
ReadFile
SetFilePointer
GetStringTypeA
MulDiv
FreeLibrary
GetProcAddress
LoadLibraryW
GetProfileIntW
WideCharToMultiByte
GetLastError
GetCurrentProcessId
OpenProcess
GetVersionExW
GetModuleHandleW
DeleteCriticalSection
GetStdHandle
IsProcessorFeaturePresent
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
WriteConsoleW
SetEndOfFile
GetLocalTime
VirtualProtect
VirtualQuery
GetModuleHandleA
RtlCaptureContext
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetCommandLineW
GetCurrentDirectoryW
DeleteFileW
GetFileAttributesW
GetCurrentProcess
GetCurrentThread
GetCurrentThreadId
SuspendThread
ResumeThread
GetThreadContext
GlobalMemoryStatusEx
GetSystemInfo
ReadProcessMemory
LocalAlloc
LocalFree
FormatMessageW
GetComputerNameW
SystemTimeToFileTime
GetDateFormatW
GetTimeFormatW
SetUnhandledExceptionFilter
CreateEventW
TerminateProcess
CreateProcessW
DisableThreadLibraryCalls
GetUserDefaultLangID
GetTempPathW
ResetEvent
GetExitCodeThread
LocalReAlloc
WaitForMultipleObjects
CreateDirectoryW
RemoveDirectoryW
GetTickCount
GetStringTypeW
GetWindowsDirectoryW
IsDBCSLeadByte
IsDebuggerPresent
HeapAlloc
EncodePointer
DecodePointer
HeapFree
CreateThread
ExitThread
LoadLibraryExW
RtlUnwindEx
GetCommandLineA
GetSystemTimeAsFileTime
ExitProcess
GetModuleHandleExW
AreFileApisANSI
GetProcessHeap
GetFileType
GetModuleFileNameA
QueryPerformanceCounter
GetConsoleMode
ReadConsoleW
SetFilePointerEx
GetConsoleCP
LCMapStringW
HeapReAlloc
SetStdHandle
OutputDebugStringW
FlushFileBuffers
user32
GetCapture
SetCapture
ReleaseCapture
DrawFocusRect
PtInRect
GetDialogBaseUnits
SetScrollPos
IsWindowVisible
IsZoomed
DrawEdge
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
MapWindowPoints
TabbedTextOutW
GetTabbedTextExtentW
EnumDisplayDevicesW
SendMessageTimeoutW
GetActiveWindow
GetSystemMenu
AppendMenuW
GetForegroundWindow
GetWindowThreadProcessId
DrawTextW
GetWindow
GetClassLongPtrW
LoadCursorW
DestroyIcon
DrawIconEx
CopyIcon
GetMessageW
GetFocus
ScreenToClient
GetWindowRect
CreateDialogParamW
SetWindowPos
MessageBoxW
SetForegroundWindow
LoadImageW
SetWindowLongW
GetWindowLongW
CheckRadioButton
ShowWindow
UpdateWindow
IsWindowEnabled
EnableWindow
DialogBoxParamW
DestroyWindow
CreateWindowExW
GetClientRect
InvalidateRect
GetSystemMetrics
LoadStringW
GetSysColor
SetWindowTextW
GetDlgCtrlID
GetWindowTextLengthW
SendMessageW
GetParent
GetWindowTextW
SetFocus
SetDlgItemTextW
GetDlgItem
EndDialog
IsChild
GetMessagePos
SystemParametersInfoW
GetScrollInfo
SetScrollInfo
GetScrollPos
ScrollWindowEx
ReleaseDC
GetDC
GetKeyState
GetWindowLongPtrW
IsRectEmpty
FillRect
GetSysColorBrush
RedrawWindow
EndPaint
BeginPaint
KillTimer
SetTimer
DefWindowProcW
SetWindowLongPtrW
PostQuitMessage
PostMessageW
LoadIconW
DispatchMessageW
SetCursor
gdi32
CreateDCW
GetDeviceCaps
GetTextExtentPoint32W
TextOutW
MoveToEx
GetObjectW
GetDIBits
CreateFontIndirectW
PatBlt
StretchBlt
GetTextMetricsW
SetTextColor
LineTo
SetViewportOrgEx
SelectObject
GetClipBox
DeleteDC
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
DeleteObject
SetBkColor
comdlg32
GetSaveFileNameW
advapi32
RegEnumValueW
RegEnumKeyExW
GetTokenInformation
AdjustTokenPrivileges
OpenProcessToken
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
GetUserNameW
shell32
ExtractIconExW
SHGetSpecialFolderPathW
SHGetFileInfoW
ShellExecuteW
ole32
StringFromGUID2
oleaut32
GetErrorInfo
SysFreeString
BT_AddLogFile
BT_AddRegFile
BT_AppLogEntry
BT_AppLogEntryF
BT_AppLogEntryV
BT_CallCppFilter
BT_CallNetFilter
BT_CallSehFilter
BT_ClearLog
BT_ClearLogFiles
BT_CloseLogFile
BT_CppFilter
BT_DeleteLogFile
BT_ExportRegistryKey
BT_FlushLogFile
BT_GetActivityType
BT_GetAppName
BT_GetAppVersion
BT_GetCustomActivityHandler
BT_GetDialogMessage
BT_GetDumpType
BT_GetExitMode
BT_GetFlags
BT_GetLogEchoMode
BT_GetLogFileEntry
BT_GetLogFileName
BT_GetLogFilesCount
BT_GetLogFlags
BT_GetLogLevel
BT_GetLogSizeInBytes
BT_GetLogSizeInEntries
BT_GetMailProfile
BT_GetModule
BT_GetNotificationEMail
BT_GetPostErrHandler
BT_GetPreErrHandler
BT_GetReportFilePath
BT_GetReportFormat
BT_GetSupportEMail
BT_GetSupportHost
BT_GetSupportPort
BT_GetSupportURL
BT_GetUserMessage
BT_InsLogEntry
BT_InsLogEntryF
BT_InsLogEntryV
BT_InstallSehFilter
BT_InterceptSUEF
BT_MailSnapshot
BT_MailSnapshotEx
BT_NetFilter
BT_OpenLogFile
BT_ReadVersionInfo
BT_SaveSnapshot
BT_SaveSnapshotEx
BT_SehFilter
BT_SendSnapshot
BT_SendSnapshotEx
BT_SetActivityType
BT_SetAppName
BT_SetAppVersion
BT_SetCustomActivityHandler
BT_SetDialogMessage
BT_SetDumpType
BT_SetExitMode
BT_SetFlags
BT_SetLogEchoMode
BT_SetLogFlags
BT_SetLogLevel
BT_SetLogSizeInBytes
BT_SetLogSizeInEntries
BT_SetMailProfile
BT_SetModule
BT_SetNotificationEMail
BT_SetPostErrHandler
BT_SetPreErrHandler
BT_SetReportFilePath
BT_SetReportFormat
BT_SetSupportEMail
BT_SetSupportHost
BT_SetSupportPort
BT_SetSupportServer
BT_SetSupportURL
BT_SetUserMessage
BT_SetUserMessageFromCode
BT_UninstallSehFilter
Name
.text
Size
230KB
Virtual Size
230KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
72KB
Virtual Size
72KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
6KB
Virtual Size
25KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
12KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
40KB
Virtual Size
39KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=199, version=41118,
count=135, id=224, version=20806,
count=10, id=223, version=20806,
count=8, id=224, productName=VS2013 UPD5 build 40629, version=40629,
count=27, id=203, version=65501,
count=309, id=1, productName=Unmarked objects,
count=41, id=225, version=20806,
count=49, id=225, productName=VS2013 UPD5 build 40629, version=40629,
count=1, id=220, productName=VS2013 UPD5 build 40629, version=40629,
count=1, id=219, productName=VS2013 build 21005, version=21005,
count=1, id=151,
count=1, id=222, productName=VS2013 UPD5 build 40629, version=40629,
XMouseButtonControl.exe
- IMPHASH 78068da28a70bd960404623a154b1bcd
- SHA256 ffad1bc9436e0462ba1bdd7cee9c2a57fe30c713de6b16d305eda6b55186bad5
- MD5 347d755a100f7afd7d1390c267781a26
- SHA1 1853fb306c88eb1eedc58fc034da2b82af82706c
- SHA512 8a8acc1955c2adc7c6bf7c7725d29c9cae1ae71463338536db84666dbac28c409b9e84bf6fe79eb8359f79c95e2b91dde2c1f153d7729ff89ce86a484ff5bf3e
- SSDEEP 24576:oCjUQS2x5RD/Zt2fqbsM/m07BQ+30LNvYS79XzDTG12HDLIUij35Xty+6:oCAHMRD/OG30LNvYS79SwjLBiFXty
- TLSH T1A185594667AC80D1E1B6C638C9B28552E6727C561FB9CBDF0260561F2F33BD08E79722
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
Digest
e3:ea:1b:0b:79:ec:27:7c:ad:47:b4:62:63:9d:17:c3:91:6d:91:24
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
CN=Open Source Developer\, Phillip Gibbons,O=Open Source Developer,ST=Berkshire,C=GB,1.2.840.113549.1.9.1=#0c127068696c406869676872657a2e636f2e756b
Chains
Apr 22, 2023
CN=Open Source Developer\, Phillip Gibbons,O=Open Source Developer,ST=Berkshire,C=GB,1.2.840.113549.1.9.1=#0c127068696c406869676872657a2e636f2e756b
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
CN=Open Source Developer\, Phillip Gibbons,O=Open Source Developer,ST=Berkshire,C=GB,1.2.840.113549.1.9.1=#0c127068696c406869676872657a2e636f2e756b
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Subject
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Serial Number
1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27
Issuer
CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
May 31, 2021 - Sep 17, 2029
Subject
CN=Open Source Developer\, Phillip Gibbons,O=Open Source Developer,ST=Berkshire,C=GB,1.2.840.113549.1.9.1=#0c127068696c406869676872657a2e636f2e756b
Serial Number
3d:a5:ca:7c:85:af:e6:68:8f:93:68:ae:a4:98:59:23
Issuer
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 4, 2023 - Apr 3, 2024
Subject
CN=Certum Timestamp 2022,O=Asseco Data Systems S.A.,C=PL
Serial Number
2b:d4:ae:70:b9:d0:63:5b:2a:e9:84:c8:d6:74:aa:30
Issuer
CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 28, 2022 - Jul 27, 2033
Subject
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
Serial Number
99:a3:80:0a:26:55:3b:65:ab:dc:6e:84:a6:b3:ea:39
Issuer
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 19, 2021 - May 18, 2036
Subject
CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL
Serial Number
e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87
Issuer
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 19, 2021 - May 18, 2036
Minor OS version
2
Major OS version
5
Entry point
698848
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
E:\My Documents\Visual Studio 2015\Projects\XMBC\XMouseButtonControl.root\XMBC\Bin\x64\Release\XMouseButtonControlFull.pdb
psapi
GetModuleFileNameExW
EnumProcessModules
EnumProcesses
dnsapi
DnsFree
DnsQuery_W
wininet
InternetOpenW
InternetOpenUrlW
InternetCloseHandle
DeleteUrlCacheEntryW
InternetReadFile
bugtrapu-x64
BT_CppFilter
BT_CallCppFilter
BT_SehFilter
BT_SetUserMessage
xmousebuttonhook
?GetName@CIcon@@QEAAPEB_WXZ
?GetPosition@CIcon@@QEAA?AUtagPOINT@@XZ
?IsGadget@CIcon@@QEAA_NXZ
?WindowHandle@CIcon@@QEAAPEAUHWND__@@XZ
?SaveIcons@CIconSettings@@QEAAHXZ
??0CGenericThreadLock@@QEAA@PEAU_RTL_CRITICAL_SECTION@@PEB_W_N@Z
??1CGenericThreadLock@@QEAA@XZ
?GetLayerModifierKeys@CSettings@@QEAAPEAVCLayerModifierKeys@@XZ
?GetActions@CApplicationSettings@@QEAA?AW4_ACTIONS@@HH_N@Z
?GetLayerDisabled@CApplicationSettings@@QEAA_NH@Z
?GetLayerDisabledNextPrev@CApplicationSettings@@QEAA_NH_N@Z
?GetAutoSwitchLayer@CApplicationSettings@@QEAAHH@Z
?GetRevertLayer1@CApplicationSettings@@QEAA_NH@Z
?SetActions@CApplicationSettings@@QEAAXHHW4_ACTIONS@@@Z
?SetLayerName@CApplicationSettings@@QEAAXPEB_WH@Z
?SetActionDescription@CApplicationSettings@@QEAAXHHPEB_W@Z
?SetKeystrokes@CApplicationSettings@@QEAAXHHPEB_WHH_N111@Z
?SetLaunchApp@CApplicationSettings@@QEAAXHHPEB_W@Z
?SetMovement2Scroll@CApplicationSettings@@QEAAXHHPEAVCMovement2Scroll@@@Z
?SetChords@CApplicationSettings@@QEAAXHHPEAVCXMBCChords@@@Z
?SetTimedClicks@CApplicationSettings@@QEAAXHHPEAVCXMBCTimedClicks@@@Z
?SetAutoSwitchLayer@CApplicationSettings@@QEAAXHH@Z
?SetAutoSwitchTime@CApplicationSettings@@QEAAXHN@Z
?SetRevertLayer1@CApplicationSettings@@QEAAXH_N@Z
?SetLayerDisabledNextPrev@CApplicationSettings@@QEAAXH_N@Z
?SetLayerDisabled@CApplicationSettings@@QEAAXH_N@Z
?GetLayerName@CApplicationSettings@@QEAAPEA_WH@Z
?GetActionData@CApplicationSettings@@QEAAPEAVCActionData@@HH@Z
?GetAutoSwitchTime@CApplicationSettings@@QEAANH@Z
?RandomiseDelay@CApplicationSettings@@QEAA_NHH@Z
?BlockMouseActive@CApplicationSettings@@QEAA_NHH@Z
?BlockMouse@CApplicationSettings@@QEAA_NHH@Z
?SendKeyWhenActive@CApplicationSettings@@QEAA_NHH@Z
?SendKeyRepeat@CApplicationSettings@@QEAAHHH@Z
?SendKeyAction@CApplicationSettings@@QEAAHHH@Z
?GetKeystrokes@CApplicationSettings@@QEAAPEA_WHH@Z
?GetLaunchApp@CApplicationSettings@@QEAAPEA_WHH@Z
?CopyChords@CApplicationSettings@@QEAAXHHPEAVCXMBCChords@@@Z
?GetChords@CApplicationSettings@@QEAAPEAVCXMBCChords@@HH@Z
?CopyTimedClicks@CApplicationSettings@@QEAAXHHPEAVCXMBCTimedClicks@@@Z
?GetTimedClicks@CApplicationSettings@@QEAAPEAVCXMBCTimedClicks@@HH@Z
??0CApplicationSettings@@QEAA@PEAVCSettings@@_NH@Z
??1CApplicationSettings@@UEAA@XZ
?ChordedAction@CActionData@@SAPEAV1@AEAVCXMBCChords@@@Z
?TimedClicksAction@CActionData@@SAPEAV1@AEAVCXMBCTimedClicks@@@Z
?LogOSDebug@CLogger@@SAXKPEB_WZZ
?ForceSPIMessage@CApplicationSettings@@QEAA_NXZ
?InvertedScrolling@CApplicationSettings@@QEAA_NXZ
?InvertedHorzScrolling@CApplicationSettings@@QEAA_NXZ
?ScrollPages@CApplicationSettings@@QEAA_NXZ
?ScrollLines@CApplicationSettings@@QEAAHXZ
?AdvScrollMethod@CApplicationSettings@@QEAAHXZ
?AdvScrollVertical@CApplicationSettings@@QEAAHXZ
?AdvScrollHorizontal@CApplicationSettings@@QEAAHXZ
?SetAdvScrollMethod@CApplicationSettings@@QEAAXH@Z
?SetAdvScrollVertical@CApplicationSettings@@QEAAXH@Z
?SetAdvScrollHorizontal@CApplicationSettings@@QEAAXH@Z
?SetInvertScrolling@CApplicationSettings@@QEAAX_N@Z
?SetInvertHorzScrolling@CApplicationSettings@@QEAAX_N@Z
?SetScrollPages@CApplicationSettings@@QEAAX_N@Z
?SetScrollLines@CApplicationSettings@@QEAAXH@Z
?SetForceSPIMessage@CApplicationSettings@@QEAAX_N@Z
??0CSettings@@QEAA@_NVCMouseInfo@@@Z
?GetStartupMouseInfo@@YAAEBVCMouseInfo@@XZ
??1CSettings@@UEAA@XZ
?SetSetupWindow@@YAXPEAUHWND__@@@Z
?GetShortName@CApplicationSettings@@QEAAHPEA_WH@Z
?IsEnabled@CApplicationSettings@@QEAA_NXZ
?GetSettingsFile@@YAHPEA_W_K_NAEA_N@Z
?CreateFolder@@YA_NPEB_W@Z
?Load@CSettings@@QEAA_NPEB_WAEA_N_N@Z
?GetCaption@CApplicationSettings@@QEAAPEB_WXZ
?GetClass@CApplicationSettings@@QEAAPEB_WXZ
?GetParentClass@CApplicationSettings@@QEAAPEB_WXZ
?IsCustomWindow@CApplicationSettings@@QEAA_NXZ
?GetMatchType@CApplicationSettings@@QEAAHXZ
?GetUseWindowArea@CApplicationSettings@@QEAA_NXZ
?GetWindowMask@CApplicationSettings@@QEAA?AW4WINDOWMASK@@XZ
?GetFullName@CApplicationSettings@@QEAAPEB_WXZ
?SetApplication@CApplicationSettings@@QEAAXPEB_W@Z
?SetDescription@CApplicationSettings@@QEAAXPEB_W@Z
?SetNoParentFlag@CApplicationSettings@@QEAAX_N@Z
?SetRegExMatching@CApplicationSettings@@QEAAX_N@Z
?GetLogFile@@YAHPEA_W_K_N@Z
?SetDefaultLogFolder@@YA_NPEB_W@Z
?GetDefaultLogFolder@@YA_NPEA_WK@Z
?SetDisableLayerModifier@CApplicationSettings@@QEAAX_N@Z
?SetDisableMouseOver@CApplicationSettings@@QEAAX_N@Z
?SetClipMouse@CApplicationSettings@@QEAAX_N@Z
?SetIgnoreHScroll@CApplicationSettings@@QEAAX_N@Z
?SetIgnoreVScroll@CApplicationSettings@@QEAAX_N@Z
?SetAxisLocking@CApplicationSettings@@QEAAX_N@Z
?SetProfileChangeScript@CApplicationSettings@@QEAAXPEB_W@Z
?EnableProfileScript@CApplicationSettings@@QEAAX_N@Z
?ChangeCursor@CApplicationSettings@@QEAAX_N@Z
?SetMouseSpeed@CApplicationSettings@@QEAAXH@Z
?Index@CIcon@@QEAAIXZ
?OverrideMouseSpeed@CApplicationSettings@@QEAAX_N@Z
?ActivateOnHover@CApplicationSettings@@QEAAX_N@Z
?SetDisableScrollUnderCursor@CApplicationSettings@@QEAAX_N@Z
?SetSwapButtons@CApplicationSettings@@QEAAXW4swapbuttons@@@Z
?SetIgnoreHScrollTime@CApplicationSettings@@QEAAXH@Z
?SetIgnoreVScrollTime@CApplicationSettings@@QEAAXH@Z
?GetProfileChangeScript@CApplicationSettings@@QEAAPEB_WXZ
?IsProfileScriptEnabled@CApplicationSettings@@QEAA_NXZ
?ChangeCursor@CApplicationSettings@@QEAA_NXZ
?GetMouseSpeed@CApplicationSettings@@QEAAHXZ
?ActivateOnHover@CApplicationSettings@@QEAA_NXZ
?GetDisableLayerModifier@CApplicationSettings@@QEAA_NXZ
?AxisLocking@CApplicationSettings@@QEAA_NXZ
?GetDisableMouseOver@CApplicationSettings@@QEAA_NXZ
?IsDefault@CApplicationSettings@@QEAA_NXZ
?GetIgnoreHScrollTime@CApplicationSettings@@QEAAHXZ
?GetIgnoreVScrollTime@CApplicationSettings@@QEAAHXZ
?GetIgnoreHScroll@CApplicationSettings@@QEAA_NXZ
?GetIgnoreVScroll@CApplicationSettings@@QEAA_NXZ
?GetDisableScrollUnderCursor@CApplicationSettings@@QEAA_NXZ
?EnhancePointerPrecision@CApplicationSettings@@QEAA_NXZ
?OverrideMouseSpeed@CApplicationSettings@@QEAA_NXZ
?ClipMouse@CApplicationSettings@@QEAA_NXZ
?SetCursor@CApplicationSettings@@QEAAXPEB_W@Z
?GetCursor@CApplicationSettings@@QEAAPEB_WXZ
?SwapButtons@CApplicationSettings@@QEAA?AW4swapbuttons@@XZ
??1CIcon@@UEAA@XZ
?SetSensitivityX@CMovement2Scroll@@QEAAXH@Z
?SetSensitivityY@CMovement2Scroll@@QEAAXH@Z
?SetAxisLock@CMovement2Scroll@@QEAAXH@Z
?SetStickyBlock@CMovement2Scroll@@QEAAX_N@Z
?SetSticky@CMovement2Scroll@@QEAAX_N@Z
?SetInvertHorizontal@CMovement2Scroll@@QEAAX_N@Z
?SetInvertVertical@CMovement2Scroll@@QEAAX_N@Z
?SetBlockMouse@CMovement2Scroll@@QEAAX_N@Z
?GetActionData@CMovement2Scroll@@QEAAPEAVCActionData@@XZ
?getSensitivityX@CMovement2Scroll@@QEAAHXZ
?getSensitivityY@CMovement2Scroll@@QEAAHXZ
?InvertHorizontal@CMovement2Scroll@@QEAA_NXZ
?InvertVertical@CMovement2Scroll@@QEAA_NXZ
?GetAxisLocked@CMovement2Scroll@@QEAAHXZ
?IsStickyBlock@CMovement2Scroll@@QEAA_NXZ
?IsSticky@CMovement2Scroll@@QEAA_NXZ
?IsButtonBlocked@CMovement2Scroll@@QEAA_NXZ
?SetModifier@CHotkey@@QEAAHG@Z
?SetVirtualKey@CHotkey@@QEAAHG@Z
?IsExtended@CHotkey@@QEAA_NXZ
?GetHotkey@CLayerModifierKeys@@QEAAPEAVCHotkey@@W4ModifierKeys@@@Z
?SetLanguage@CSettings@@QEAAXPEB_W@Z
?GetLanguage@CSettings@@QEAAPEB_WXZ
?SetHotkey@CHotkey@@QEAAHK@Z
?GetVirtualKey@CHotkey@@QEAAGXZ
?GetModifier@CHotkey@@QEAAGXZ
?GetHotkey@CHotKeys@@QEAAPEAVCHotkey@@W4GlobalHotkeys@@@Z
?MaxLayers@CSettings@@QEAA?BHXZ
?GetDescription@CApplicationSettings@@QEAAPEB_WXZ
?GetApplication@CApplicationSettings@@QEAAPEB_WXZ
?GetApplication@CSettings@@QEAAPEAVCApplicationSettings@@H@Z
?GetApplicationCount@CSettings@@QEAAHXZ
?GetDefaultApp@CSettings@@QEAAPEAVCApplicationSettings@@XZ
?NewAction@CActionData@@SAPEAV1@H@Z
?Clear@CActionData@@QEAAXXZ
?GetTimedClicks@CActionData@@QEAAPEAVCXMBCTimedClicks@@XZ
?GetLaunchApp@CXMBCChord@@QEAAPEB_WXZ
?SendKeyAction@CXMBCChord@@QEAAHXZ
?GetKeys@CXMBCChord@@QEAAPEB_WXZ
?GetChords@CActionData@@QEAAPEAVCXMBCChords@@XZ
?GetApplication@CActionData@@QEAAPEA_WXZ
?SetActionData@CXMBCTimedClick@@QEAAXPEAVCActionData@@@Z
?SetEnabled@CXMBCTimedClicks@@QEAAXH_N@Z
?SetReleaseOnUp@CXMBCTimedClicks@@QEAAX_N@Z
?SetAbort2OnMouseMove@CXMBCTimedClicks@@QEAAX_N@Z
?SetAbortOnMouseMove@CXMBCTimedClicks@@QEAAX_N@Z
?SetTime@CXMBCTimedClicks@@QEAAXHH@Z
?SetDescription@CXMBCTimedClicks@@QEAAXPEB_W@Z
?GetTime@CXMBCTimedClicks@@QEAAHH@Z
?GetDescription@CXMBCTimedClicks@@QEAAPEA_WXZ
?GetActionData@CXMBCTimedClick@@QEAAPEAVCActionData@@XZ
?GetTimedClick@CXMBCTimedClicks@@QEAAPEAVCXMBCTimedClick@@H@Z
?GetAction@CXMBCTimedClick@@QEAA?AW4_ACTIONS@@XZ
?GetEnabled@CXMBCTimedClicks@@QEAA_NH@Z
?GetReleaseOnUp@CXMBCTimedClicks@@QEAA_NXZ
?GetAbort2OnMouseMove@CXMBCTimedClicks@@QEAA_NXZ
?GetAbortOnMouseMove@CXMBCTimedClicks@@QEAA_NXZ
?Initialise@CXMBCTimedClicks@@QEAAXW4MouseButtons@@_N@Z
??4CXMBCTimedClicks@@QEAAXPEAV0@@Z
??1CXMBCTimedClicks@@UEAA@XZ
??0CXMBCTimedClicks@@QEAA@XZ
??1CMovement2Scroll@@QEAA@XZ
?SetMovement2Scroll@CActionData@@QEAAXPEAVCMovement2Scroll@@@Z
?GetMovement2Scroll@CActionData@@QEAAPEAVCMovement2Scroll@@XZ
?Copy@CMovement2Scroll@@QEAAXPEAV1@@Z
?SetMatchType@CApplicationSettings@@QEAAXH@Z
?SetWindowMask@CApplicationSettings@@QEAAXW4WINDOWMASK@@@Z
?SetUseWindowArea@CApplicationSettings@@QEAAX_N@Z
?SetWindowArea@CApplicationSettings@@QEAAXUtagRECT@@@Z
?GetIcon@CIconSettings@@QEAAPEAVCIcon@@H@Z
?GetCount@CIconSettings@@QEAAHXZ
?EnhancePointerPrecision@CApplicationSettings@@QEAAX_N@Z
?LoadIcons@CIconSettings@@QEAAHXZ
??0CMovement2Scroll@@QEAA@XZ
?OpenFolderAction@CActionData@@SAPEAV1@PEB_W@Z
?AppAction@CActionData@@SAPEAV1@PEB_W@Z
?KeyAction@CActionData@@SAPEAV1@PEB_WHHH_N1110@Z
?GetDescription@CActionData@@QEAAPEA_WXZ
?RandomiseDelay@CActionData@@QEAA_NXZ
?BlockMouseActive@CActionData@@QEAA_NXZ
?BlockMouse@CActionData@@QEAA_NXZ
?Active@CActionData@@QEAA_NXZ
?KeyRepeat@CActionData@@QEAAHXZ
?KeyAction@CActionData@@QEAAHXZ
?GetKeys@CActionData@@QEAAPEA_WXZ
?SetUnblockTime@CXMBCChords@@QEAAXH@Z
?SetUnblockAfterMovement@CXMBCChords@@QEAAX_N@Z
?SetUnblockAfterDelay@CXMBCChords@@QEAAX_N@Z
?SetDelayUntilChordKnown@CXMBCChords@@QEAAX_N@Z
?SetDescription@CXMBCChords@@QEAAXPEB_W@Z
?SetActionData@CXMBCChord@@QEAAXPEAVCActionData@@@Z
?AddApplication@CSettings@@QEAA_NPEAVCApplicationSettings@@@Z
?NoParent@CApplicationSettings@@QEAA_NXZ
?RegExMatching@CApplicationSettings@@QEAA_NXZ
?GetWindowArea@CApplicationSettings@@QEAA?AUtagRECT@@XZ
?Copy@CApplicationSettings@@QEAAXPEAV1@@Z
?RemoveApplication@CSettings@@QEAA_NPEAVCApplicationSettings@@@Z
?SetDebug@@YAX_NPEB_W@Z
?UpdateSettings@@YA_NXZ
?SetDefaultApp@CSettings@@QEAAXPEAVCApplicationSettings@@@Z
?ClearApplications@CSettings@@QEAAXXZ
?Save@CSettings@@QEAA_NPEB_W@Z
?SavePersistantSettings@@YA_NXZ
?SetEnableFlag@CApplicationSettings@@QEAAX_N@Z
?FlushLog@CLogger@@SAXXZ
?Import@CSettings@@QEAAHPEB_WPEAUHWND__@@0PEAPEAVCApplicationSettings@@@Z
?GetDescription@CXMBCChords@@QEAAPEA_WXZ
?GetActionData@CXMBCChord@@QEAAPEAVCActionData@@XZ
?GetChord@CXMBCChords@@QEAAPEAVCXMBCChord@@W4MouseButtons@@@Z
?GetAction@CXMBCChord@@QEAA?AW4_ACTIONS@@XZ
?UnblockAfterMovement@CXMBCChords@@QEAA_NXZ
?UnblockTime@CXMBCChords@@QEAAHXZ
?UnblockAfterDelay@CXMBCChords@@QEAA_NXZ
?DelayUntilChordKnown@CXMBCChords@@QEAA_NXZ
??4CXMBCChords@@QEAAXPEAV0@@Z
?Export@CSettings@@QEAA_NPEAVCApplicationSettings@@PEB_W@Z
?GetFilename@CSettings@@QEAAPEB_WXZ
?SetSettingsFile@@YAHPEB_W@Z
?GetDefaultSettingsFile@@YAHPEA_W_K@Z
?LoadIcons@CIconSettings@@QEAAHPEB_W@Z
?SaveIcons@CIconSettings@@QEAAHPEB_W@Z
??0CVolumeManager@@QEAA@_NPEB_WK@Z
??1CVolumeManager@@UEAA@XZ
?SetParent@CVolumeManager@@QEAAXPEAUHWND__@@@Z
?ReInitialise@CVolumeManager@@QEAAXXZ
?RemoveListedIcons@CIconSettings@@QEAAHXZ
?AddIcon@CIconSettings@@QEAAHPEAVCIcon@@@Z
??0CIcon@@QEAA@IPEB_WUtagPOINT@@PEAUHWND__@@_N@Z
?ClearIcons@CIconSettings@@QEAAHXZ
?GetDebug@@YA_NXZ
??1CIconSettings@@UEAA@XZ
??0CIconSettings@@QEAA@XZ
?GetHotKeys@CSettings@@QEAAPEAVCHotKeys@@XZ
?SetThreadName@@YAXKPEBD@Z
?SetMaxLayers@CSettings@@QEAA_NH@Z
?RealWindowFromPoint@@YAPEAUHWND__@@AEBUtagPOINT@@@Z
?SetFindHook@@YA_NPEAUHWND__@@@Z
?LeftClickCycleLayer@@YA_NXZ
?NextLayer@@YAXXZ
?PreviousLayer@@YAXXZ
?RemoveFindHook@@YA_NXZ
?GetProfileWindow@@YAPEAUHWND__@@XZ
?WindowFromPointEx@@YAPEAUHWND__@@UtagPOINT@@H@Z
?GetPhysCursorPos@@YAHPEAUtagPOINT@@@Z
?SetActionData@CMovement2Scroll@@QEAAXPEAVCActionData@@@Z
?MaxLayers@@YAHXZ
?CheckVersionEnabled@@YA_NXZ
?CheckVersionDays@@YAHXZ
?GetLastUpdateCheck@@YAHXZ
?LogDebug@CLogger@@SAXPEB_WZZ
?LogMessage@CLogger@@SAXPEB_WZZ
?CheckBetaVersionEnabled@@YA_NXZ
?SetLastUpdateCheck@@YAXH@Z
?GetSettingsFolder@@YAHPEA_W_K@Z
?GetEXEFolder@@YAHPEA_W_K@Z
?get_ResetStickyOnAnyButton@CSettings@@QEAA_NXZ
?get_ResetStickyOnAnyKey@CSettings@@QEAA_NXZ
?get_ResetStickyOnLayerChange@CSettings@@QEAA_NXZ
?get_EnableDebounce@CSettings@@QEAA_NXZ
?get_DebounceTime@CSettings@@QEAAHXZ
?get_DebounceFromUp@CSettings@@QEAA_NXZ
?put_ResetStickyOnAnyButton@CSettings@@QEAAX_N@Z
?put_ResetStickyOnAnyKey@CSettings@@QEAAX_N@Z
?put_ResetStickyOnLayerChange@CSettings@@QEAAX_N@Z
?put_EnableDebounce@CSettings@@QEAAX_N@Z
?put_DebounceTime@CSettings@@QEAAXH@Z
?put_DebounceFromUp@CSettings@@QEAAX_N@Z
?LogOSMessage@CLogger@@SAXKPEB_WZZ
?GetOSVersion@@YA?AW4_ActionOSVersion@@XZ
??1CBrightness@@QEAA@XZ
??0CBrightness@@QEAA@PEAUHWND__@@@Z
?GetAlwaysShowOSD@@YA_NXZ
?SetBrightness@CBrightness@@QEAA_NH@Z
?Action@CActionData@@QEAA?AW4_ACTIONS@@XZ
?LogThreadDebug@CLogger@@SAXPEB_WZZ
??0CXMBCChords@@QEAA@XZ
??1CXMBCChords@@UEAA@XZ
?SetVolume@CVolumeManager@@QEAA_NM@Z
?Notifiction@CVolumeManager@@UEAAXW4VolumeAction@@@Z
??0ExceptionHandlerInstaller@@QEAA@XZ
??1ExceptionHandlerInstaller@@UEAA@XZ
??0InvalidParameterInstaller@@QEAA@_N@Z
??1InvalidParameterInstaller@@QEAA@XZ
?DebugOutput@CLogger@@SAXPEB_WZZ
?DisableLogging@CLogger@@SAX_N@Z
?SetPortable@@YAX_N@Z
?AddFiles@ExceptionHandlerInstaller@@SAXXZ
?DisableBanner@CLogger@@SAXXZ
?GetProcessIntegrityLevel@@YAHKPEAX@Z
?GetHooktimeoutValue@@YAKXZ
??0CCheckCert@@QEAA@XZ
??1CCheckCert@@QEAA@XZ
?VerifyCert@CCheckCert@@QEAA_NPEB_W@Z
?GetOfficeMouse@@YA_NXZ
?SetOfficeMouse@@YAX_N@Z
?GetShowIcon@@YA_NXZ
?IsDesktopLocked@@YA_NXZ
?SetMouseHook@@YA_NXZ
?RemoveMouseHook@@YA_N_N@Z
?GetLanguageFile@@YA_NPEA_WH@Z
?SetHookVolumeOSDWindow@@YAXPEAUHWND__@@@Z
?SetHookBrightnessOSDWindow@@YAXPEAUHWND__@@@Z
?GetLock@CLogger@@SA_NXZ
?ReleaseLock@CLogger@@SAXXZ
?SetHookMainWindow@@YAXPEAUHWND__@@@Z
?GetHooked@@YA_NXZ
?NotificatcionsEnabled@@YA_NXZ
?IsXMBCDisabled@@YA_N_N@Z
?GetEnableOSD@@YA_NXZ
?GetLayername@@YAPEB_WH@Z
?SetCurrentLayer@@YAXH_N00@Z
?GetReinstallOnResume@@YA_NXZ
?DisplayChanged@@YAXXZ
?UpdateCursors@@YAXXZ
?UpdateSPIThread@@YAXXZ
?GetUseWhenDisabled@CHotkey@@QEAAHXZ
?GetHotkeys@@YAPEAVCHotKeys@@XZ
?GetCycleCursorSpeed@@YAHXZ
?CycleCursorSpeed@@YAXXZ
?HookToggleXAxisLock@@YAXXZ
?HookToggleYAxisLock@@YAXXZ
?HookToggleXAxisInvert@@YAXXZ
?HookToggleYAxisInvert@@YAXXZ
?GetCurrentLayer@@YAHXZ
kernel32
OutputDebugStringW
GetStringTypeW
LCMapStringW
GetCPInfo
RtlPcToFileHeader
RtlUnwindEx
ExitThread
FreeLibraryAndExitThread
GetCommandLineA
GetCommandLineW
HeapQueryInformation
VirtualAlloc
VirtualQuery
GetStdHandle
ExitProcess
GetFileType
IsValidLocale
EnumSystemLocalesW
GetTimeZoneInformation
GetDriveTypeW
FindFirstFileExW
IsValidCodePage
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
SetEnvironmentVariableW
SetStdHandle
GetConsoleCP
GetConsoleMode
SetFilePointerEx
ReadConsoleW
GetStartupInfoW
WriteConsoleW
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
WaitForSingleObjectEx
GetUserDefaultLCID
SetErrorMode
DuplicateHandle
UnlockFile
SetFilePointer
SetEndOfFile
LockFile
GetVolumeInformationW
GetFullPathNameW
GetFileSize
FlushFileBuffers
GetCurrentDirectoryW
FindResourceExW
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
CompareStringW
GetThreadLocale
LocalReAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
GlobalFlags
GetFileTime
GetFileSizeEx
GetFileAttributesExW
GetPrivateProfileIntW
SystemTimeToTzSpecificLocalTime
lstrcmpA
VirtualProtect
LoadLibraryExW
GetSystemDirectoryW
EncodePointer
FormatMessageW
MulDiv
GetCurrentProcessId
GlobalUnlock
GlobalLock
FreeResource
QueryActCtxW
FindActCtxSectionStringW
DeactivateActCtx
ActivateActCtx
CreateActCtxW
GetModuleHandleExW
SetLastError
OutputDebugStringA
GetACP
CopyFileW
MoveFileW
LocalFree
CreateNamedPipeW
LocalAlloc
ReadFile
ConnectNamedPipe
SetThreadPriority
GetCurrentThread
GetSystemInfo
GetProcessId
GetModuleFileNameW
WriteFile
WaitNamedPipeW
CreateFileW
DisconnectNamedPipe
GlobalFree
GlobalAlloc
CreateThread
GetProcessHeap
HeapDestroy
DecodePointer
HeapAlloc
RaiseException
HeapReAlloc
HeapSize
HeapFree
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
InitializeCriticalSectionAndSpinCount
WritePrivateProfileStringW
GetPrivateProfileStringW
WriteProcessMemory
ReadProcessMemory
VirtualFreeEx
VirtualAllocEx
OpenProcess
GetCurrentProcess
GlobalDeleteAtom
GlobalFindAtomW
GlobalAddAtomW
OpenMutexW
CreateMutexW
ReleaseMutex
lstrcmpW
GetModuleHandleW
FileTimeToSystemTime
FileTimeToLocalFileTime
ResetEvent
TerminateThread
SetEvent
ResumeThread
GetExitCodeThread
CloseHandle
CreateEventW
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetTickCount
WaitForSingleObject
FindFirstFileW
FindClose
FindNextFileW
FreeLibrary
GetProcAddress
LoadLibraryW
GetVersionExW
GetCurrentThreadId
lstrcpynW
WideCharToMultiByte
Sleep
DeleteFileW
GetFileAttributesW
GetTempPathW
GetLastError
MultiByteToWideChar
FindResourceW
LoadResource
LockResource
SizeofResource
user32
CharUpperW
GetNextDlgGroupItem
InvalidateRgn
CopyAcceleratorTableW
CharNextW
RealChildWindowFromPoint
RegisterClipboardFormatW
PostQuitMessage
SetWindowContextHelpId
DestroyMenu
NotifyWinEvent
WindowFromPoint
MapDialogRect
SetMenuItemInfoW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
IsDialogMessageW
SetDlgItemTextW
MonitorFromWindow
WinHelpW
GetClassLongPtrW
MapWindowPoints
AdjustWindowRectEx
RemovePropW
GetPropW
SetPropW
GetScrollPos
ValidateRect
TrackPopupMenuEx
TrackPopupMenu
SetMenu
GetMenu
IsIconic
IsChild
IsMenu
GetClassInfoW
RegisterClassW
CallWindowProcW
GetMessageTime
GetMessagePos
PeekMessageW
EndPaint
BeginPaint
TabbedTextOutW
GrayStringW
GetMenuStringW
GetLastActivePopup
GetActiveWindow
GetNextDlgTabItem
CreateDialogIndirectParamW
DestroyWindow
SendDlgItemMessageA
GetForegroundWindow
SetCursorPos
GetDoubleClickTime
CheckMenuItem
RemoveMenu
SetActiveWindow
DrawEdge
CreateIconIndirect
GetSystemMenu
GetWindowLongPtrW
EndDialog
GetDlgItem
SetWindowLongPtrW
DialogBoxParamW
DialogBoxIndirectParamW
ShowScrollBar
RegisterWindowMessageW
EnableWindow
MessageBoxW
GetTopWindow
GetWindow
PostMessageW
SendMessageW
GetWindowThreadProcessId
IsWindowVisible
LoadIconW
GetClientRect
FindWindowExW
GetWindowTextW
EnumDesktopWindows
IsWindow
GetWindowRect
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
GetSystemMetrics
GetComboBoxInfo
MoveWindow
GetCapture
GetWindowLongW
SetWindowLongW
DrawStateW
InflateRect
OffsetRect
GetSysColor
GetFocus
FrameRect
GetCursorPos
ScreenToClient
RedrawWindow
InvalidateRect
UpdateWindow
GetParent
GetMonitorInfoW
MonitorFromPoint
CopyRect
SystemParametersInfoW
SetWindowRgn
DestroyIcon
FillRect
GetSysColorBrush
DrawTextExW
DrawIconEx
GetClassNameW
IsRectEmpty
PtInRect
SetRectEmpty
ReleaseCapture
SetFocus
SetCapture
GetDlgCtrlID
EqualRect
GetKeyState
IntersectRect
LoadImageW
SetCursor
LoadCursorW
CallNextHookEx
SetWindowsHookExW
UnhookWindowsHookEx
AnimateWindow
GetIconInfo
KillTimer
SetTimer
GetDC
ReleaseDC
ClientToScreen
GetClassInfoExW
DefWindowProcW
RegisterClassExW
SetParent
GetDesktopWindow
SetRect
DrawFocusRect
GetWindowTextLengthW
SetWindowTextW
IsWindowEnabled
LoadMenuW
GetSubMenu
GetMenuItemCount
GetMenuItemID
ModifyMenuW
EnableMenuItem
GetAsyncKeyState
LoadBitmapW
GetCursor
CreatePopupMenu
AppendMenuW
ShowWindow
GetWindowDC
wsprintfW
RegisterHotKey
UnregisterHotKey
GetMessageW
TranslateMessage
DispatchMessageW
PostThreadMessageW
UnregisterClassW
CreateWindowExW
MessageBeep
SetWindowPos
GetThreadDesktop
FindWindowW
SetLayeredWindowAttributes
DrawTextW
GetAncestor
SetForegroundWindow
LockWindowUpdate
GetScrollBarInfo
gdi32
EnumFontFamiliesExW
GetDIBits
CreateFontW
CreateDIBSection
PatBlt
SetBkMode
Ellipse
DeleteDC
CreateBitmap
SetTextColor
SetBkColor
GetClipBox
Rectangle
CreatePen
GetDeviceCaps
GetTextMetricsW
SelectObject
GetTextExtentPoint32W
CreateCompatibleBitmap
CreateCompatibleDC
SetPixel
SelectClipRgn
SelectClipPath
CreateSolidBrush
GetCurrentObject
GetStockObject
CreateFontIndirectW
DeleteObject
EndPath
BeginPath
CreateRoundRectRgn
CreateRectRgnIndirect
GetObjectW
SetDIBits
OffsetViewportOrgEx
GetRgnBox
GetTextColor
GetBkColor
GetMapMode
ScaleWindowExtEx
ScaleViewportExtEx
BitBlt
SetWindowOrgEx
SetWindowExtEx
SetViewportOrgEx
SetViewportExtEx
ExtTextOutW
TextOutW
MoveToEx
GetLayout
SetLayout
SetMapMode
ExtSelectClipRgn
SaveDC
RestoreDC
RectVisible
PtVisible
LineTo
GetWindowExtEx
GetViewportExtEx
Escape
msimg32
GradientFill
TransparentBlt
winspool.drv
DocumentPropertiesW
OpenPrinterW
ClosePrinter
advapi32
GetUserNameW
SetSecurityDescriptorDacl
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
RegCreateKeyExW
RegDeleteKeyW
RegDeleteValueW
RegSetValueExW
RegEnumKeyW
RegQueryValueW
RegEnumValueW
InitializeSecurityDescriptor
shell32
ShellExecuteW
ExtractIconExW
SHBrowseForFolderW
SHGetPathFromIDListW
SHGetMalloc
Shell_NotifyIconW
ord680
SHGetFolderPathW
FindExecutableW
comctl32
ImageList_ReplaceIcon
ImageList_GetIconSize
_TrackMouseEvent
ImageList_GetIcon
InitCommonControlsEx
ord17
shlwapi
PathFileExistsW
PathRemoveFileSpecW
PathFindExtensionW
PathFindFileNameW
PathIsUNCW
PathStripToRootW
uxtheme
EnableThemeDialogTexture
IsThemeActive
OpenThemeData
CloseThemeData
SetWindowTheme
GetThemePartSize
IsAppThemed
DrawThemeBackground
ole32
CoUninitialize
CoTaskMemFree
CoInitialize
CoRegisterMessageFilter
OleIsCurrentClipboard
OleFlushClipboard
CoRevokeClassObject
CreateILockBytesOnHGlobal
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CoGetClassObject
OleUninitialize
OleInitialize
CoFreeUnusedLibraries
CoCreateGuid
CLSIDFromProgID
CLSIDFromString
CoCreateInstance
CoInitializeEx
CoTaskMemAlloc
CoInitializeSecurity
oleaut32
OleCreateFontIndirect
VariantCopy
SafeArrayDestroy
VariantTimeToSystemTime
SystemTimeToVariantTime
SysStringLen
SysAllocString
VariantChangeType
VariantClear
VariantInit
SysAllocStringLen
SysFreeString
oledlg
OleUIBusyW
urlmon
URLDownloadToFileW
oleacc
CreateStdAccessibleObject
LresultFromObject
Name
.text
Size
923KB
Virtual Size
923KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
524KB
Virtual Size
523KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
22KB
Virtual Size
46KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
46KB
Virtual Size
45KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.gfids
Size
11KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.giats
Size
512B
Virtual Size
4B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.tls
Size
512B
Virtual Size
9B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
132KB
Virtual Size
132KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
25KB
Virtual Size
25KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=11, id=241, version=40116,
count=170, id=243, version=40116,
count=25, id=242, version=40116,
count=2, id=261, version=23013,
count=12, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=132, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=135, version=30729,
count=39, id=260, version=24123,
count=10, id=259, version=24123,
count=171, id=261, version=24123,
count=2, id=257, productName=VS2015 UPD3.1 build 24215, version=24215,
count=2, id=221, productName=VS2013 UPD5 build 40629, version=40629,
count=39, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=1047, id=1, productName=Unmarked objects,
count=59, id=265, version=24215,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=1, id=151,
count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,
XMouseButtonHook.dll
- IMPHASH 2dd384dd31de6ee5189cc562165796de
- SHA256 1090fa6d4b30b5f44eb8890369bfc9f43b2b14835365d715441200ea5f48e9aa
- MD5 76af470de86002efe1ee3e13ebdae4e8
- SHA1 f0433daefae7668a7bd1d95c284fc8b214fab9d3
- SHA512 084213813df262b7d80ed4fc1858b9f616387b27faf0e11e93a65099fc1bb6d5dd01bb1d56f81522371c1f5117b7c6844a7c43f19c6de6477cadcf6687e65d07
- SSDEEP 24576:nsv71VUAAi9Boxbyv6MPV4DLIe+S4151swMPOML0MW:q1VIi9B+yLiDj+SONMPOML0MW
- TLSH T13435272667F94059F4B3DA7A8DB78112D6B2BC552F70C7DF0250A61E1E33BD08939B22
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
Digest
32:38:7a:55:08:5f:f7:cb:63:bc:41:9f:de:c2:36:57:d2:0c:31:03
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
CN=Open Source Developer\, Phillip Gibbons,O=Open Source Developer,ST=Berkshire,C=GB,1.2.840.113549.1.9.1=#0c127068696c406869676872657a2e636f2e756b
Chains
Apr 22, 2023
CN=Open Source Developer\, Phillip Gibbons,O=Open Source Developer,ST=Berkshire,C=GB,1.2.840.113549.1.9.1=#0c127068696c406869676872657a2e636f2e756b
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
CN=Open Source Developer\, Phillip Gibbons,O=Open Source Developer,ST=Berkshire,C=GB,1.2.840.113549.1.9.1=#0c127068696c406869676872657a2e636f2e756b
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Subject
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Serial Number
1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27
Issuer
CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
May 31, 2021 - Sep 17, 2029
Subject
CN=Open Source Developer\, Phillip Gibbons,O=Open Source Developer,ST=Berkshire,C=GB,1.2.840.113549.1.9.1=#0c127068696c406869676872657a2e636f2e756b
Serial Number
3d:a5:ca:7c:85:af:e6:68:8f:93:68:ae:a4:98:59:23
Issuer
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 4, 2023 - Apr 3, 2024
Subject
CN=Certum Timestamp 2022,O=Asseco Data Systems S.A.,C=PL
Serial Number
2b:d4:ae:70:b9:d0:63:5b:2a:e9:84:c8:d6:74:aa:30
Issuer
CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 28, 2022 - Jul 27, 2033
Subject
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
Serial Number
99:a3:80:0a:26:55:3b:65:ab:dc:6e:84:a6:b3:ea:39
Issuer
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 19, 2021 - May 18, 2036
Subject
CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL
Serial Number
e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87
Issuer
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 19, 2021 - May 18, 2036
Minor OS version
2
Major OS version
5
Entry point
439404
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
E:\My Documents\Visual Studio 2015\Projects\XMBC\XMouseButtonControl.root\XMBC\Bin\x64\Release\XMouseButtonHookFull.pdb
psapi
EnumProcesses
EnumProcessModules
GetModuleFileNameExW
GetProcessImageFileNameW
bugtrapu-x64
BT_SetSupportServer
BT_SetSupportURL
BT_SetFlags
BT_SetPreErrHandler
BT_SetPostErrHandler
BT_UninstallSehFilter
BT_SetSupportEMail
BT_SetAppVersion
BT_SetAppName
BT_InstallSehFilter
BT_AddLogFile
BT_CallCppFilter
BT_SetNotificationEMail
msimg32
TransparentBlt
kernel32
WideCharToMultiByte
QueryPerformanceFrequency
QueryPerformanceCounter
Sleep
CreateEventW
SetEvent
WaitForSingleObject
TerminateThread
GetExitCodeThread
SetLastError
GetCurrentThread
SetThreadPriority
GlobalAlloc
GlobalLock
GlobalUnlock
RaiseException
DecodePointer
GetModuleHandleW
GetVersionExW
GetCurrentProcess
GetProcessId
GetModuleFileNameW
OpenProcess
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
SetPriorityClass
ExitProcess
GetTempPathW
FindFirstFileW
FindClose
GetFileAttributesW
CreateDirectoryW
DeleteTimerQueueTimer
CreateTimerQueueTimer
LocalAlloc
TerminateProcess
GetSystemDirectoryW
CloseHandle
SetEndOfFile
ReadFile
SetFilePointerEx
WriteConsoleW
SetStdHandle
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
IsValidCodePage
FindNextFileA
FindFirstFileExA
GetProcessHeap
ReadConsoleW
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetConsoleMode
GetConsoleCP
HeapSize
GetFileType
GetStdHandle
GetACP
GetModuleFileNameA
HeapReAlloc
HeapAlloc
HeapFree
GetModuleHandleExW
FreeLibraryAndExitThread
ResumeThread
ExitThread
CreateThread
InterlockedFlushSList
LoadLibraryExW
RtlUnwindEx
RtlPcToFileHeader
InitializeSListHead
GetCurrentProcessId
GetStartupInfoW
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
WaitForSingleObjectEx
ResetEvent
IsDebuggerPresent
GetSystemTimeAsFileTime
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
GetLocaleInfoW
LCMapStringW
GetFileSizeEx
CompareStringW
GetCPInfo
EncodePointer
GetStringTypeW
MultiByteToWideChar
CreateFileW
LocalFree
FormatMessageW
WriteFile
SetFilePointer
GetTickCount
TryEnterCriticalSection
GetLocalTime
FlushFileBuffers
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
OutputDebugStringW
InitializeCriticalSection
GetComputerNameW
GetCurrentThreadId
FreeLibrary
GetProcAddress
LoadLibraryW
GetLastError
InitializeCriticalSectionAndSpinCount
user32
AllowSetForegroundWindow
LockSetForegroundWindow
AttachThreadInput
SwitchToThisWindow
FindWindowW
GetFocus
LoadKeyboardLayoutW
GetKeyboardLayoutList
SetCapture
ReleaseCapture
IsChild
SetForegroundWindow
EnumDisplayMonitors
MessageBeep
GetClipboardData
SystemParametersInfoW
GetAncestor
GetClassNameW
RegisterWindowMessageW
PostMessageW
DestroyCursor
GetMonitorInfoW
SetWindowsHookExW
UnhookWindowsHookEx
ClipCursor
UnionRect
GetScrollInfo
LoadImageW
CopyIcon
GetDC
GetSystemMetrics
ReleaseDC
GetWindowLongPtrW
LockWorkStation
ActivateKeyboardLayout
GetWindowTextW
GetGUIThreadInfo
GetAsyncKeyState
CallNextHookEx
UnloadKeyboardLayout
GetDoubleClickTime
SetWindowPos
GetWindow
GetWindowThreadProcessId
EnumChildWindows
GetWindowLongW
GetParent
IsWindowVisible
PtInRect
IsWindow
MonitorFromPoint
GetDesktopWindow
WindowFromPoint
ChildWindowFromPointEx
ScreenToClient
CopyImage
SetTimer
DispatchMessageW
TranslateMessage
KillTimer
VkKeyScanW
OemKeyScan
VkKeyScanExW
GetKeyboardLayout
CharToOemW
GetKeyState
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
SendMessageW
ShowWindow
FindWindowExW
MessageBoxW
GetMessageW
MapVirtualKeyW
MapVirtualKeyExW
SendInput
GetWindowRect
ClientToScreen
GetForegroundWindow
SetCursorPos
GetCursorPos
PostThreadMessageW
LoadCursorW
SetSystemCursor
DestroyIcon
CreateIconIndirect
DrawIconEx
GetIconInfo
FillRect
SendMessageTimeoutW
gdi32
GetDeviceCaps
CreateBitmap
GetDIBits
DeleteDC
CreatePen
Ellipse
Rectangle
GetTextExtentPointW
SetBkColor
RoundRect
DeleteObject
CreateDIBSection
CreateCompatibleDC
SelectObject
CreateSolidBrush
SetBkMode
GetObjectW
SetTextColor
CreateFontIndirectW
TextOutW
advapi32
GetSidSubAuthorityCount
GetSidSubAuthority
GetTokenInformation
OpenProcessToken
RegOpenKeyExW
RegCloseKey
RegCreateKeyExW
RegQueryValueExW
RegDeleteValueW
RegSetValueExW
GetUserNameW
shell32
ShellExecuteExW
ole32
CoUninitialize
CoInitializeEx
CoSetProxyBlanket
CoCreateInstance
CoCreateGuid
oleaut32
VariantClear
SysFreeString
SysAllocString
VariantInit
shlwapi
PathFileExistsW
winmm
timeEndPeriod
timeKillEvent
timeSetEvent
timeGetDevCaps
??0CActionData@@AEAA@XZ
??0CActionData@@QEAA@AEBV0@@Z
??0CApplicationSettings@@QEAA@AEBV0@@Z
??0CApplicationSettings@@QEAA@PEAVCSettings@@_NH@Z
??0CAudioNotificationClient@@QEAA@AEBV0@@Z
??0CAudioNotificationClient@@QEAA@PEB_W@Z
??0CAudioThreadLock@@QEAA@PEB_W@Z
??0CBrightness@@QEAA@PEAUHWND__@@@Z
??0CCheckCert@@QEAA@XZ
??0CGenericThreadLock@@QEAA@PEAU_RTL_CRITICAL_SECTION@@PEB_W_N@Z
??0CHotKeys@@QEAA@AEBV0@@Z
??0CHotKeys@@QEAA@XZ
??0CHotkey@@QEAA@AEBV0@@Z
??0CHotkey@@QEAA@H@Z
??0CIcon@@QEAA@AEBV0@@Z
??0CIcon@@QEAA@IPEB_WHHPEAUHWND__@@_N@Z
??0CIcon@@QEAA@IPEB_WUtagPOINT@@PEAUHWND__@@_N@Z
??0CIconSettings@@QEAA@AEBV0@@Z
??0CIconSettings@@QEAA@XZ
??0CInternalVolumeNotification@@QEAA@$$QEAV0@@Z
??0CInternalVolumeNotification@@QEAA@AEBV0@@Z
??0CInternalVolumeNotification@@QEAA@XZ
??0CLayerModifierKeys@@QEAA@AEBV0@@Z
??0CLayerModifierKeys@@QEAA@XZ
??0CLockAxis@@QEAA@AEBV0@@Z
??0CLockAxis@@QEAA@XZ
??0CMouseInfo@@QEAA@QEAH@Z
??0CMouseInfo@@QEAA@XZ
??0CMovement2Scroll@@QEAA@PEAV0@@Z
??0CMovement2Scroll@@QEAA@W4_ACTIONS@@@Z
??0CMovement2Scroll@@QEAA@XZ
??0CMyRegKey@@QEAA@PEB_WPEAUHKEY__@@K@Z
??0CSettings@@QEAA@AEBV0@@Z
??0CSettings@@QEAA@_NVCMouseInfo@@@Z
??0CThreadLock@@QEAA@PEB_W@Z
??0CVolumeManager@@QEAA@AEBV0@@Z
??0CVolumeManager@@QEAA@_NPEB_WK@Z
??0CVolumeNotification@@QEAA@AEBV0@@Z
??0CVolumeNotification@@QEAA@PEAUHWND__@@PEB_W@Z
??0CXMBCChord@@QEAA@AEBV0@@Z
??0CXMBCChord@@QEAA@XZ
??0CXMBCChords@@QEAA@AEAV0@@Z
??0CXMBCChords@@QEAA@XZ
??0CXMBCTimedClick@@QEAA@AEBV0@@Z
??0CXMBCTimedClick@@QEAA@XZ
??0CXMBCTimedClicks@@QEAA@AEAV0@@Z
??0CXMBCTimedClicks@@QEAA@XZ
??0ExceptionHandlerInstaller@@QEAA@AEBV0@@Z
??0ExceptionHandlerInstaller@@QEAA@XZ
??0InvalidParameterInstaller@@QEAA@_N@Z
??1CActionData@@UEAA@XZ
??1CApplicationSettings@@UEAA@XZ
??1CAudioNotificationClient@@AEAA@XZ
??1CAudioThreadLock@@QEAA@XZ
??1CBrightness@@QEAA@XZ
??1CCheckCert@@QEAA@XZ
??1CGenericThreadLock@@QEAA@XZ
??1CHotKeys@@UEAA@XZ
??1CHotkey@@UEAA@XZ
??1CIcon@@UEAA@XZ
??1CIconSettings@@UEAA@XZ
??1CLayerModifierKeys@@UEAA@XZ
??1CLockAxis@@UEAA@XZ
??1CMovement2Scroll@@QEAA@XZ
??1CMyRegKey@@QEAA@XZ
??1CSettings@@UEAA@XZ
??1CThreadLock@@QEAA@XZ
??1CVolumeManager@@UEAA@XZ
??1CVolumeNotification@@UEAA@XZ
??1CXMBCChord@@UEAA@XZ
??1CXMBCChords@@UEAA@XZ
??1CXMBCTimedClick@@UEAA@XZ
??1CXMBCTimedClicks@@UEAA@XZ
??1ExceptionHandlerInstaller@@UEAA@XZ
??1InvalidParameterInstaller@@QEAA@XZ
??4CActionData@@QEAAAEAV0@AEBV0@@Z
??4CApplicationSettings@@QEAAAEAV0@AEBV0@@Z
??4CAudioNotificationClient@@QEAAAEAV0@AEBV0@@Z
??4CAudioThreadLock@@QEAAAEAV0@AEBV0@@Z
??4CBrightness@@QEAAAEAV0@AEBV0@@Z
??4CCheckCert@@QEAAAEAV0@AEBV0@@Z
??4CGenericThreadLock@@QEAAAEAV0@AEBV0@@Z
??4CHotKeys@@QEAAAEAV0@AEBV0@@Z
??4CHotkey@@QEAAAEAV0@AEBV0@@Z
??4CIcon@@QEAAAEAV0@AEBV0@@Z
??4CIconSettings@@QEAAAEAV0@AEBV0@@Z
??4CInternalVolumeNotification@@QEAAAEAV0@$$QEAV0@@Z
??4CInternalVolumeNotification@@QEAAAEAV0@AEBV0@@Z
??4CLayerModifierKeys@@QEAAAEAV0@AEBV0@@Z
??4CLockAxis@@QEAAAEAV0@AEBV0@@Z
??4CLogger@@QEAAAEAV0@$$QEAV0@@Z
??4CLogger@@QEAAAEAV0@AEBV0@@Z
??4CMouseInfo@@QEAAAEAV0@$$QEAV0@@Z
??4CMouseInfo@@QEAAAEAV0@AEBV0@@Z
??4CMovement2Scroll@@QEAAAEAV0@AEBV0@@Z
??4CMyRegKey@@QEAAAEAV0@AEBV0@@Z
??4CSettings@@QEAAAEAV0@AEBV0@@Z
??4CThreadLock@@QEAAAEAV0@AEBV0@@Z
??4CVolumeManager@@QEAAAEAV0@AEBV0@@Z
??4CVolumeNotification@@QEAAAEAV0@AEBV0@@Z
??4CXMBCChord@@QEAAXAEAV0@@Z
??4CXMBCChord@@QEAAXPEAV0@@Z
??4CXMBCChords@@QEAAAEAV0@AEAV0@@Z
??4CXMBCChords@@QEAAXPEAV0@@Z
??4CXMBCTimedClick@@QEAAXAEAV0@@Z
??4CXMBCTimedClick@@QEAAXPEAV0@@Z
??4CXMBCTimedClicks@@QEAAAEAV0@AEAV0@@Z
??4CXMBCTimedClicks@@QEAAXPEAV0@@Z
??4ExceptionHandlerInstaller@@QEAAAEAV0@AEBV0@@Z
??4InvalidParameterInstaller@@QEAAAEAV0@AEBV0@@Z
??_7CActionData@@6B@
??_7CApplicationSettings@@6B@
??_7CAudioNotificationClient@@6B@
??_7CHotKeys@@6B@
??_7CHotkey@@6B@
??_7CIcon@@6B@
??_7CIconSettings@@6B@
??_7CInternalVolumeNotification@@6B@
??_7CLayerModifierKeys@@6B@
??_7CLockAxis@@6B@
??_7CSettings@@6B@
??_7CVolumeManager@@6B@
??_7CVolumeNotification@@6B@
??_7CXMBCChord@@6B@
??_7CXMBCChords@@6B@
??_7CXMBCTimedClick@@6B@
??_7CXMBCTimedClicks@@6B@
??_7ExceptionHandlerInstaller@@6B@
??_FInvalidParameterInstaller@@QEAAXXZ
?Abort@CXMBCTimedClicks@@QEAAXUtagPOINT@@_N@Z
?Action@CActionData@@QEAA?AW4_ACTIONS@@XZ
?ActivateOnHover@CApplicationSettings@@QEAAX_N@Z
?ActivateOnHover@CApplicationSettings@@QEAA_NXZ
?Active@CActionData@@QEAA_NXZ
?AddApplication@CSettings@@QEAA_NPEAVCApplicationSettings@@@Z
?AddCallback@CAudioNotificationClient@@QEAAXPEAVCInternalVolumeNotification@@@Z
?AddFiles@ExceptionHandlerInstaller@@SAXXZ
?AddIcon@CIconSettings@@QEAAHPEAVCIcon@@@Z
?AddRef@CAudioNotificationClient@@UEAAKXZ
?AddRef@CVolumeNotification@@UEAAKXZ
?AdvScrollHorizontal@CApplicationSettings@@QEAAHXZ
?AdvScrollMethod@CApplicationSettings@@QEAAHXZ
?AdvScrollVertical@CApplicationSettings@@QEAAHXZ
?AppAction@CActionData@@SAPEAV1@PEB_W@Z
?AxisLocking@CApplicationSettings@@QEAA_NXZ
?BlockMouse@CActionData@@QEAA_NXZ
?BlockMouse@CApplicationSettings@@QEAA_NHH@Z
?BlockMouse@CXMBCChord@@QEAA_NXZ
?BlockMouse@CXMBCTimedClick@@QEAA_NXZ
?BlockMouseActive@CActionData@@QEAA_NXZ
?BlockMouseActive@CApplicationSettings@@QEAA_NHH@Z
?BlockMouseActive@CXMBCChord@@QEAA_NXZ
?BlockMouseActive@CXMBCTimedClick@@QEAA_NXZ
?CalculateKeystrokesWaitHoldTime@CApplicationSettings@@SAHPEB_WH@Z
?CancelChord@CXMBCChord@@QEAAXXZ
?ChangeCursor@CApplicationSettings@@QEAAX_N@Z
?ChangeCursor@CApplicationSettings@@QEAA_NXZ
?ChangeCursor@CLockAxis@@QEAAXPEAVCSPIThread@@PEAUHICON__@@H@Z
?ChangeCursor@CLockAxis@@QEAAXPEAVCSPIThread@@PEAVCApplicationSettings@@H_N2@Z
?ChangeVolume@CVolumeManager@@QEAA_NM@Z
?CheckAbort@CXMBCTimedClicks@@QEAAXUtagPOINT@@@Z
?CheckBetaVersionEnabled@@YA_NXZ
?CheckVersionDays@@YAHXZ
?CheckVersionEnabled@@YA_NXZ
?ChordCancelled@CXMBCChord@@QEAA_NXZ
?ChordedAction@CActionData@@SAPEAV1@AEAVCXMBCChords@@@Z
?ChordingOccurred@CXMBCChord@@QEAA_NXZ
?Clear@CActionData@@QEAAXXZ
?ClearApplications@CSettings@@QEAAXXZ
?ClearChordedFlag@CXMBCChord@@QEAAXXZ
?ClearIcons@CIconSettings@@QEAAHXZ
?ClearString@CApplicationSettings@@SAXAEAPEA_W@Z
?ClipMouse@CApplicationSettings@@QEAA_NXZ
?CloseLogFile@CLogger@@SAX_N@Z
?Copy@CApplicationSettings@@QEAAXPEAV1@@Z
?Copy@CMovement2Scroll@@QEAAXPEAV1@@Z
?CopyChords@CApplicationSettings@@QEAAXHHPEAVCXMBCChords@@@Z
?CopyMovement2Scrolls@CApplicationSettings@@QEAAXHHPEAVCMovement2Scroll@@@Z
?CopyString@CApplicationSettings@@SAPEA_WAEAPEA_WPEB_W_N@Z
?CopyTimedClicks@CApplicationSettings@@QEAAXHHPEAVCXMBCTimedClicks@@@Z
?CreateFolder@@YA_NPEB_W@Z
?CreateKey@CMyRegKey@@QEAAHPEB_WPEAUHKEY__@@@Z
?CustomAction@CActionData@@SAPEAV1@HPEB_WHHH_N11100PEAVCXMBCChords@@PEAVCMovement2Scroll@@PEAVCXMBCTimedClicks@@@Z
?CycleCursorSpeed@@YAXXZ
?DebugEnabled@CLogger@@SA_NXZ
?DebugOutput@CLogger@@SAXPEB_WZZ
?DefaultRepeat@CApplicationSettings@@SAKXZ
?DelayUntilChordKnown@CXMBCChords@@QEAA_NXZ
?DeleteApplications@CSettings@@AEAAX_N@Z
?DeleteCS@CAudioThreadLock@@SAXXZ
?DeleteCS@CThreadLock@@SAXXZ
?DeleteValue@CMyRegKey@@QEAAHPEB_W@Z
?DestroyCursors@CLockAxis@@QEAAXXZ
?DisableBanner@CLogger@@SAXXZ
?DisableLogging@CLogger@@SAX_N@Z
?DisplayChanged@@YAXXZ
?Down@CBrightness@@QEAAXAEBUtagPOINT@@@Z
?EnableDebug@CLogger@@SAX_N@Z
?EnableProfileScript@CApplicationSettings@@QEAAX_N@Z
?EnhancePointerPrecision@CApplicationSettings@@QEAAX_N@Z
?EnhancePointerPrecision@CApplicationSettings@@QEAA_NXZ
?EnhancePointerPrecision@CMouseInfo@@QEAA_NXZ
?EnterCS@CAudioThreadLock@@SA_NPEB_W@Z
?EnterCS@CThreadLock@@SA_NPEB_W@Z
?ExecuteTimer@CXMBCTimedClicks@@QEAAXXZ
?Export@CSettings@@QEAA_NPEAVCApplicationSettings@@PEB_W@Z
?FlushLog@CLogger@@SAXXZ
?ForceSPIMessage@CApplicationSettings@@QEAA_NXZ
?GetAbort2OnMouseMove@CXMBCTimedClicks@@QEAA_NXZ
?GetAbortOnMouseMove@CXMBCTimedClicks@@QEAA_NXZ
?GetAborted@CXMBCTimedClicks@@QEAA_NXZ
?GetAction@CXMBCChord@@QEAA?AW4_ACTIONS@@XZ
?GetAction@CXMBCTimedClick@@QEAA?AW4_ACTIONS@@XZ
?GetActionData@CApplicationSettings@@QEAAPEAVCActionData@@HH@Z
?GetActionData@CMovement2Scroll@@QEAAPEAVCActionData@@XZ
?GetActionData@CXMBCChord@@QEAAPEAVCActionData@@XZ
?GetActionData@CXMBCTimedClick@@QEAAPEAVCActionData@@XZ
?GetActionDescription@CApplicationSettings@@QEAAPEA_WHH@Z
?GetActionString@CApplicationSettings@@AEAA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@W4MouseButtons@@H@Z
?GetActions@CApplicationSettings@@QEAA?AW4_ACTIONS@@HH_N@Z
?GetAlwaysShowOSD@@YA_NXZ
?GetApplication@CActionData@@QEAAPEA_WXZ
?GetApplication@CApplicationSettings@@QEAAPEB_WXZ
?GetApplication@CSettings@@QEAAPEAVCApplicationSettings@@H@Z
?GetApplication@CSettings@@QEAAPEAVCApplicationSettings@@PEB_W@Z
?GetApplicationCount@CSettings@@QEAAHXZ
?GetApplications@CSettings@@QEAAPEAV?$list@PEAVCApplicationSettings@@V?$allocator@PEAVCApplicationSettings@@@std@@@std@@XZ
?GetAutoSwitchLayer@CApplicationSettings@@QEAAHH@Z
?GetAutoSwitchTime@CApplicationSettings@@QEAANH@Z
?GetAxisLocked@CMovement2Scroll@@QEAAHXZ
?GetBrightness@CBrightness@@AEAAHXZ
?GetButtonUpCount@CMovement2Scroll@@QEAAHXZ
?GetCaption@CApplicationSettings@@QEAAPEB_WXZ
?GetChord@CXMBCChords@@QEAAPEAVCXMBCChord@@W4MouseButtons@@@Z
?GetChordButton@CApplicationSettings@@QEAA?AW4MouseButtons@@H@Z
?GetChordSourceButton@CXMBCChord@@QEAA?AW4MouseButtons@@XZ
?GetChordUsed@CXMBCChord@@QEAA_NXZ
?GetChordedButton@CXMBCChord@@QEAA?AW4MouseButtons@@XZ
?GetChords@CActionData@@QEAAPEAVCXMBCChords@@XZ
?GetChords@CApplicationSettings@@QEAAPEAVCXMBCChords@@HH@Z
?GetClass@CApplicationSettings@@QEAAPEB_WXZ
?GetClickAction@CXMBCTimedClicks@@QEAAPEAVCXMBCTimedClick@@XZ
?GetCount@CIconSettings@@QEAAHXZ
?GetCurrentChords@CXMBCChord@@QEAAPEAVCXMBCChords@@XZ
?GetCurrentLayer@@YAHXZ
?GetCurrentProcessName@@YAHPEA_WAEAH@Z
?GetCursor@CApplicationSettings@@QEAAPEB_WXZ
?GetCustomApplications@CSettings@@QEAAPEAV?$list@PEAVCApplicationSettings@@V?$allocator@PEAVCApplicationSettings@@@std@@@std@@XZ
?GetCycleCursorSpeed@@YAHXZ
?GetDebug@@YA_NXZ
?GetDefaultApp@CSettings@@QEAAPEAVCApplicationSettings@@XZ
?GetDefaultLogFolder@@YA_NPEA_WK@Z
?GetDefaultSettingsFile@@YAHPEA_W_K@Z
?GetDescription@CActionData@@QEAAPEA_WXZ
?GetDescription@CApplicationSettings@@QEAAPEB_WXZ
?GetDescription@CXMBCChords@@QEAAPEA_WXZ
?GetDescription@CXMBCTimedClicks@@QEAAPEA_WXZ
?GetDisableLayerModifier@CApplicationSettings@@QEAA_NXZ
?GetDisableMouseOver@CApplicationSettings@@QEAA_NXZ
?GetDisableScrollUnderCursor@CApplicationSettings@@QEAA_NXZ
?GetEXEFolder@@YAHPEA_W_K@Z
?GetEnableOSD@@YA_NXZ
?GetEnabled@CXMBCTimedClicks@@QEAA_NH@Z
?GetFilename@CSettings@@QEAAPEB_WXZ
?GetFullName@CApplicationSettings@@QEAAPEB_WXZ
?GetHooked@@YA_NXZ
?GetHooktimeoutValue@@YAKXZ
?GetHotKeys@CSettings@@QEAAPEAVCHotKeys@@XZ
?GetHotkey@CHotKeys@@QEAAPEAVCHotkey@@W4GlobalHotkeys@@@Z
?GetHotkey@CHotkey@@QEAAKXZ
?GetHotkey@CLayerModifierKeys@@QEAAPEAVCHotkey@@W4ModifierKeys@@@Z
?GetHotkeys@@YAPEAVCHotKeys@@XZ
?GetIcon@CIconSettings@@QEAAPEAVCIcon@@H@Z
?GetIgnoreHScroll@CApplicationSettings@@QEAA_NXZ
?GetIgnoreHScrollTime@CApplicationSettings@@QEAAHXZ
?GetIgnoreVScroll@CApplicationSettings@@QEAA_NXZ
?GetIgnoreVScrollTime@CApplicationSettings@@QEAAHXZ
?GetIndex@CApplicationSettings@@QEAAHXZ
?GetKey@CApplicationSettings@@QEAA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ
?GetKeys@CActionData@@QEAAPEA_WXZ
?GetKeys@CXMBCChord@@QEAAPEB_WXZ
?GetKeys@CXMBCTimedClick@@QEAAPEB_WXZ
?GetKeystrokes@CApplicationSettings@@QEAAPEA_WHH@Z
?GetKeystrokesWaitHoldTime@CActionData@@QEAAHH@Z
?GetKeystrokesWaitHoldTime@CApplicationSettings@@QEAAHHHH@Z
?GetLanguage@CSettings@@QEAAPEB_WXZ
?GetLanguageFile@@YA_NPEA_WH@Z
?GetLastUpdateCheck@@YAHXZ
?GetLaunchApp@CApplicationSettings@@QEAAPEA_WHH@Z
?GetLaunchApp@CXMBCChord@@QEAAPEB_WXZ
?GetLaunchApp@CXMBCTimedClick@@QEAAPEB_WXZ
?GetLayerDisabled@CApplicationSettings@@QEAA_NH@Z
?GetLayerDisabledNextPrev@CApplicationSettings@@QEAA_NH_N@Z
?GetLayerModifierKeys@CSettings@@QEAAPEAVCLayerModifierKeys@@XZ
?GetLayerName@CApplicationSettings@@QEAAPEA_WH@Z
?GetLayername@@YAPEB_WH@Z
?GetLock@CLogger@@SA_NXZ
?GetLogFile@@YAHPEA_W_K_N@Z
?GetLogFolder@@YAHPEA_W_K_N@Z
?GetLogicalCursorPos@@YAHPEAUHWND__@@PEAUtagPOINT@@@Z
?GetMatchType@CApplicationSettings@@QEAAHXZ
?GetModifier@CHotkey@@QEAAGXZ
?GetMouseButton@CMovement2Scroll@@QEAA?AW4MouseButtons@@XZ
?GetMouseInfo@CMouseInfo@@QEAAXAEAY02H@Z
?GetMouseSpeed@CApplicationSettings@@QEAAHXZ
?GetMouseSpeed@CMouseInfo@@QEAAHXZ
?GetMovement2Scroll@CActionData@@QEAAPEAVCMovement2Scroll@@XZ
?GetMovement2Scroll@CApplicationSettings@@QEAAPEAVCMovement2Scroll@@HH@Z
?GetName@CIcon@@QEAAPEB_WXZ
?GetOSVersion@@YA?AW4_ActionOSVersion@@XZ
?GetOfficeMouse@@YA_NXZ
?GetParentClass@CApplicationSettings@@QEAAPEB_WXZ
?GetPhysCursorPos@@YAHPEAUtagPOINT@@@Z
?GetPortable@@YA_NXZ
?GetPosition@CIcon@@QEAA?AUtagPOINT@@XZ
?GetProcessIntegrityLevel@@YAHKPEAX@Z
?GetProcessedDown@CXMBCTimedClick@@QEAA_NXZ
?GetProcessedUp@CXMBCTimedClick@@QEAA_NXZ
?GetProfileChangeScript@CApplicationSettings@@QEAAPEB_WXZ
?GetProfileWindow@@YAPEAUHWND__@@XZ
?GetReinstallOnResume@@YA_NXZ
?GetReleaseOnUp@CXMBCTimedClicks@@QEAA_NXZ
?GetResetKeys@CApplicationSettings@@QEAA_NHH@Z
?GetRevertLayer1@CApplicationSettings@@QEAA_NH@Z
?GetSettings@@YAPEAVCSettings@@XZ
?GetSettingsFile@@YAHPEA_W_K_NAEA_N@Z
?GetSettingsFolder@@YAHPEA_W_K@Z
?GetShortName@CApplicationSettings@@QEAAHPEA_WH@Z
?GetShowIcon@@YA_NXZ
?GetStartupMouseInfo@@YAAEBVCMouseInfo@@XZ
?GetStuckKeys@CApplicationSettings@@QEAAPEB_WHH@Z
?GetTime@CXMBCTimedClicks@@QEAAHH@Z
?GetTimedClick@CXMBCTimedClicks@@QEAAPEAVCXMBCTimedClick@@H@Z
?GetTimedClicks@CActionData@@QEAAPEAVCXMBCTimedClicks@@XZ
?GetTimedClicks@CApplicationSettings@@QEAAPEAVCXMBCTimedClicks@@HH@Z
?GetUseWhenDisabled@CHotkey@@QEAAHXZ
?GetUseWindowArea@CApplicationSettings@@QEAA_NXZ
?GetValue@CMyRegKey@@QEAAHPEB_WPEAK@Z
?GetValue@CMyRegKey@@QEAAHPEB_WPEAKPEAPEAE1@Z
?GetValue@CMyRegKey@@QEAAHPEB_WPEA_WK@Z
?GetVirtualKey@CHotkey@@QEAAGXZ
?GetVolume@CVolumeManager@@QEAAMXZ
?GetWin81CursorPos@@YAHPEAUtagPOINT@@@Z
?GetWindowArea@CApplicationSettings@@QEAA?AUtagRECT@@XZ
?GetWindowMask@CApplicationSettings@@QEAA?AW4WINDOWMASK@@XZ
?HookToggleXAxisInvert@@YAXXZ
?HookToggleXAxisLock@@YAXXZ
?HookToggleYAxisInvert@@YAXXZ
?HookToggleYAxisLock@@YAXXZ
?IPHandler@InvalidParameterInstaller@@CAXPEB_W00I_K@Z
?Import@CSettings@@QEAAHPEB_WPEAUHWND__@@0PEAPEAVCApplicationSettings@@@Z
?IncButtonUpCount@CMovement2Scroll@@QEAAXXZ
?Index@CIcon@@QEAAIXZ
?Init@CLockAxis@@QEAAXXZ
?InitCursors@CLockAxis@@QEAAXPEAUHINSTANCE__@@@Z
?InitGlobalCS@CAudioThreadLock@@SAXXZ
?InitGlobalCS@CThreadLock@@SAXXZ
?InitScalingFunctions@@YAXXZ
?Initialise@CLogger@@SAXXZ
?Initialise@CVolumeManager@@AEAAXXZ
?Initialise@CXMBCTimedClick@@QEAAXW4MouseButtons@@H_N@Z
?Initialise@CXMBCTimedClicks@@QEAAXW4MouseButtons@@_N@Z
?InternalLockXY@CLockAxis@@QEAAXXZ
?InternalUnlockXY@CLockAxis@@QEAAXXZ
?InvertHorizontal@CMovement2Scroll@@QEAA_NXZ
?InvertVertical@CMovement2Scroll@@QEAA_NXZ
?InvertX@CLockAxis@@QEAAXXZ
?InvertXY@CLockAxis@@QEAAXXZ
?InvertY@CLockAxis@@QEAAXXZ
?InvertedHorzScrolling@CApplicationSettings@@QEAA_NXZ
?InvertedScrolling@CApplicationSettings@@QEAA_NXZ
?IsButtonBlocked@CMovement2Scroll@@QEAA_NXZ
?IsCustomWindow@CApplicationSettings@@QEAA_NXZ
?IsDefault@CApplicationSettings@@QEAA_NXZ
?IsDesktopLocked@@YA_NXZ
?IsEnabled@CApplicationSettings@@QEAA_NXZ
?IsExtended@CHotkey@@QEAA_NXZ
?IsGadget@CIcon@@QEAA_NXZ
?IsInverted@CLockAxis@@QEAA_NXZ
?IsProfileScriptEnabled@CApplicationSettings@@QEAA_NXZ
?IsSticky@CMovement2Scroll@@QEAA_NXZ
?IsStickyBlock@CMovement2Scroll@@QEAA_NXZ
?IsValid@CMyRegKey@@QEAAHXZ
?IsXInverted@CLockAxis@@QEAA_NXZ
?IsXMBCDisabled@@YA_N_N@Z
?IsYInverted@CLockAxis@@QEAA_NXZ
?KeyAction@CActionData@@QEAAHXZ
?KeyAction@CActionData@@SAPEAV1@PEB_WHHH_N1110@Z
?KeyExists@CMyRegKey@@QEAAHPEB_W@Z
?KeyRepeat@CActionData@@QEAAHXZ
?KillTimerThreadTimers@@YAXXZ
?LastMTSMoved@CMovement2Scroll@@QEAA_NXZ
?LeaveCS@CAudioThreadLock@@SAXXZ
?LeaveCS@CThreadLock@@SAXXZ
?LeftClickCycleLayer@@YA_NXZ
?Load@CApplicationSettings@@QEAA_NAEAVxml_node@pugi@@HAEA_NAEAH@Z
?Load@CMovement2Scroll@@QEAA_NAEAVxml_node@pugi@@H@Z
?Load@CSettings@@QEAA_NPEB_WAEA_N_N@Z
?Load@CXMBCChord@@QEAA_NAEAVxml_node@pugi@@H@Z
?Load@CXMBCChords@@QEAA_N_NAEAVxml_node@pugi@@H@Z
?Load@CXMBCTimedClick@@QEAA_NW4MouseButtons@@H_NAEAVxml_node@pugi@@H@Z
?Load@CXMBCTimedClicks@@QEAA_NW4MouseButtons@@_NAEAVxml_node@pugi@@H@Z
?LoadDefault@CApplicationSettings@@QEAA_NAEAVxml_node@pugi@@HAEAH@Z
?LoadIcons@CIconSettings@@QEAAHPEB_W@Z
?LoadIcons@CIconSettings@@QEAAHXZ
?LockCycle@CLockAxis@@QEAAXPEAVCSPIThread@@HPEAVCSettings@@PEAVCApplicationSettings@@_N@Z
?LockToAxis@CLockAxis@@QEAAXPEAVCSPIThread@@H_N@Z
?LockX@CLockAxis@@QEAAXPEAVCSPIThread@@H_N1@Z
?LockXY@CLockAxis@@QEAAXPEAVCSPIThread@@H_N@Z
?LockY@CLockAxis@@QEAAXPEAVCSPIThread@@H_N1@Z
?Locked@CLockAxis@@QEAA_NXZ
?LockedToAxis@CLockAxis@@QEAA_NXZ
?LockedX@CLockAxis@@QEAA_NXZ
?LockedY@CLockAxis@@QEAA_NXZ
?Log@CApplicationSettings@@QEAAXPEB_W@Z
?LogDebug@CLogger@@SAXPEB_WZZ
?LogMessage@CLogger@@SAXPEB_WZZ
?LogOSDebug@CLogger@@SAXKPEB_WZZ
?LogOSMessage@CLogger@@SAXKPEB_WZZ
?LogThreadDebug@CLogger@@SAXPEB_WZZ
?LoggingDisabled@CLogger@@SA_NXZ
?MatchCaption@CApplicationSettings@@QEAA_NV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?MatchClass@CApplicationSettings@@QEAA_NV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?MatchParentClass@CApplicationSettings@@QEAA_NV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?MatchProcess@CApplicationSettings@@QEAA_NV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?MatchProcess@CApplicationSettings@@QEAA_NV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PEAUHWND__@@@Z
?MaxLayers@@YAHXZ
?MaxLayers@CSettings@@QEAA?BHXZ
?NewAction@CActionData@@SAPEAV1@H@Z
?NextLayer@@YAXXZ
?NoParent@CApplicationSettings@@QEAA_NXZ
?NotificatcionsEnabled@@YA_NXZ
?Notifiction@CVolumeManager@@UEAAXW4VolumeAction@@@Z
?OSD_SHOW_WINDOW@CBrightness@@0IA
?OnDefaultDeviceChanged@CAudioNotificationClient@@UEAAJW4__MIDL___MIDL_itf_mmdeviceapi_0000_0000_0001@@W4__MIDL___MIDL_itf_mmdeviceapi_0000_0000_0002@@PEB_W@Z
?OnDeviceAdded@CAudioNotificationClient@@UEAAJPEB_W@Z
?OnDeviceRemoved@CAudioNotificationClient@@UEAAJPEB_W@Z
?OnDeviceStateChanged@CAudioNotificationClient@@UEAAJPEB_WK@Z
?OnNotify@CVolumeNotification@@UEAAJPEAUAUDIO_VOLUME_NOTIFICATION_DATA@@@Z
?OnPropertyValueChanged@CAudioNotificationClient@@UEAAJPEB_WU_tagpropertykey@@@Z
?OpenFolderAction@CActionData@@SAPEAV1@PEB_W@Z
?OpenLogFile@CLogger@@CA_NXZ
?OverrideMouseSpeed@CApplicationSettings@@QEAAX_N@Z
?OverrideMouseSpeed@CApplicationSettings@@QEAA_NXZ
?PreviousLayer@@YAXXZ
?QueryInterface@CAudioNotificationClient@@UEAAJAEBU_GUID@@PEAPEAX@Z
?QueryInterface@CVolumeNotification@@UEAAJAEBU_GUID@@PEAPEAX@Z
?RandomiseDelay@CActionData@@QEAA_NXZ
?RandomiseDelay@CApplicationSettings@@QEAA_NHH@Z
?RandomiseDelay@CXMBCChord@@QEAA_NXZ
?RandomiseDelay@CXMBCTimedClick@@QEAA_NXZ
?ReInitialise@CVolumeManager@@QEAAXXZ
?RealWindowFromPoint@@YAPEAUHWND__@@AEBUtagPOINT@@@Z
?RealWindowFromPoint_SkipLocked@@YAPEAUHWND__@@AEBUtagPOINT@@_N@Z
?RegExMatching@CApplicationSettings@@QEAA_NXZ
?Release@CAudioNotificationClient@@UEAAKXZ
?Release@CVolumeNotification@@UEAAKXZ
?ReleaseChord@CXMBCChord@@QEAAXXZ
?ReleaseLock@CLogger@@SAXXZ
?RemoveApplication@CSettings@@QEAA_NPEAVCApplicationSettings@@@Z
?RemoveCallback@CAudioNotificationClient@@QEAAXPEAVCInternalVolumeNotification@@@Z
?RemoveFindHook@@YA_NXZ
?RemoveHooks@@YAXXZ
?RemoveListedIcons@CIconSettings@@QEAAHXZ
?RemoveMouseHook@@YA_N_N@Z
?Reset@CXMBCTimedClicks@@QEAAXXZ
?ResetCursor@CLockAxis@@QEAAXPEAVCSPIThread@@@Z
?ResetGlobalCS@CAudioThreadLock@@SAXXZ
?ResetGlobalCS@CThreadLock@@SAXXZ
?Save@CApplicationSettings@@QEAA_NAEAVxml_node@pugi@@@Z
?Save@CMovement2Scroll@@QEAAXAEAVxml_node@pugi@@@Z
?Save@CSettings@@QEAA_NPEB_W@Z
?Save@CXMBCChord@@QEAAXAEAVxml_node@pugi@@@Z
?Save@CXMBCChords@@QEAAX_NAEAVxml_node@pugi@@@Z
?Save@CXMBCTimedClick@@QEAAXAEAVxml_node@pugi@@@Z
?Save@CXMBCTimedClicks@@QEAAX_NAEAVxml_node@pugi@@@Z
?SaveDefault@CApplicationSettings@@QEAA_NAEAVxml_node@pugi@@@Z
?SaveIcons@CIconSettings@@QEAAHPEB_W@Z
?SaveIcons@CIconSettings@@QEAAHXZ
?SavePersistantSettings@@YA_NXZ
?ScaleWin81CursorPos@@YAHPEAUtagPOINT@@@Z
?ScrollLines@CApplicationSettings@@QEAAHXZ
?ScrollPages@CApplicationSettings@@QEAA_NXZ
?SendKeyAction@CApplicationSettings@@QEAAHHH@Z
?SendKeyAction@CXMBCChord@@QEAAHXZ
?SendKeyAction@CXMBCTimedClick@@QEAAHXZ
?SendKeyRepeat@CApplicationSettings@@QEAAHHH@Z
?SendKeyRepeat@CXMBCChord@@QEAAHXZ
?SendKeyRepeat@CXMBCTimedClick@@QEAAHXZ
?SendKeyWhenActive@CApplicationSettings@@QEAA_NHH@Z
?SendKeyWhenActive@CXMBCChord@@QEAA_NXZ
?SendKeyWhenActive@CXMBCTimedClick@@QEAA_NXZ
?SetAbort2OnMouseMove@CXMBCTimedClicks@@QEAAX_N@Z
?SetAbortOnMouseMove@CXMBCTimedClicks@@QEAAX_N@Z
?SetAction@CXMBCChord@@QEAAXW4_ACTIONS@@@Z
?SetAction@CXMBCTimedClick@@QEAAXW4_ACTIONS@@@Z
?SetActionData@CMovement2Scroll@@QEAAXPEAVCActionData@@@Z
?SetActionData@CXMBCChord@@QEAAXPEAVCActionData@@@Z
?SetActionData@CXMBCTimedClick@@QEAAXPEAVCActionData@@@Z
?SetActionDescription@CApplicationSettings@@QEAAXHHPEB_W@Z
?SetActions@CApplicationSettings@@QEAAXHHW4_ACTIONS@@@Z
?SetAdvScrollHorizontal@CApplicationSettings@@QEAAXH@Z
?SetAdvScrollMethod@CApplicationSettings@@QEAAXH@Z
?SetAdvScrollVertical@CApplicationSettings@@QEAAXH@Z
?SetApplication@CApplicationSettings@@QEAAXPEB_W@Z
?SetAutoSwitchLayer@CApplicationSettings@@QEAAXHH@Z
?SetAutoSwitchTime@CApplicationSettings@@QEAAXHN@Z
?SetAxisLock@CMovement2Scroll@@QEAAXH@Z
?SetAxisLocking@CApplicationSettings@@QEAAX_N@Z
?SetBlockMouse@CMovement2Scroll@@QEAAX_N@Z
?SetBlockMouse@CXMBCChord@@QEAAX_N@Z
?SetBlockMouse@CXMBCTimedClick@@QEAAX_N@Z
?SetBlockMouseActive@CXMBCChord@@QEAAX_N@Z
?SetBlockMouseActive@CXMBCTimedClick@@QEAAX_N@Z
?SetBrightness@CBrightness@@QEAA_NH@Z
?SetChord@CXMBCChords@@QEAAXW4MouseButtons@@AEAVCXMBCChord@@@Z
?SetChordButton@CApplicationSettings@@QEAAXW4MouseButtons@@H@Z
?SetChordSourceButton@CXMBCChord@@QEAAXW4MouseButtons@@@Z
?SetChordUsed@CXMBCChord@@QEAAXXZ
?SetChordedButton@CXMBCChord@@QEAAXW4MouseButtons@@@Z
?SetChords@CApplicationSettings@@QEAAXHHPEAVCXMBCChords@@@Z
?SetClipMouse@CApplicationSettings@@QEAAX_N@Z
?SetCurrentChords@CXMBCChord@@QEAAXPEAVCXMBCChords@@@Z
?SetCurrentLayer@@YAXH_N00@Z
?SetCursor@CApplicationSettings@@QEAAXPEB_W@Z
?SetDebug@@YAX_NPEB_W@Z
?SetDefaultApp@CSettings@@QEAAXPEAVCApplicationSettings@@@Z
?SetDefaultLogFolder@@YA_NPEB_W@Z
?SetDelayUntilChordKnown@CXMBCChords@@QEAAX_N@Z
?SetDescription@CApplicationSettings@@QEAAXPEB_W@Z
?SetDescription@CXMBCChords@@QEAAXPEB_W@Z
?SetDescription@CXMBCTimedClicks@@QEAAXPEB_W@Z
?SetDisableLayerModifier@CApplicationSettings@@QEAAX_N@Z
?SetDisableMouseOver@CApplicationSettings@@QEAAX_N@Z
?SetDisableScrollUnderCursor@CApplicationSettings@@QEAAX_N@Z
?SetEnableFlag@CApplicationSettings@@QEAAX_N@Z
?SetEnabled@CXMBCTimedClicks@@QEAAXH_N@Z
?SetEnhancePointerPrecision@CMouseInfo@@QEAAX_N@Z
?SetFindHook@@YA_NPEAUHWND__@@@Z
?SetForceSPIMessage@CApplicationSettings@@QEAAX_N@Z
?SetHookBrightnessOSDWindow@@YAXPEAUHWND__@@@Z
?SetHookMainWindow@@YAXPEAUHWND__@@@Z
?SetHookVolumeOSDWindow@@YAXPEAUHWND__@@@Z
?SetHotkey@CHotkey@@QEAAHK@Z
?SetIgnoreHScroll@CApplicationSettings@@QEAAX_N@Z
?SetIgnoreHScrollTime@CApplicationSettings@@QEAAXH@Z
?SetIgnoreVScroll@CApplicationSettings@@QEAAX_N@Z
?SetIgnoreVScrollTime@CApplicationSettings@@QEAAXH@Z
?SetInvertHorizontal@CMovement2Scroll@@QEAAX_N@Z
?SetInvertHorzScrolling@CApplicationSettings@@QEAAX_N@Z
?SetInvertScrolling@CApplicationSettings@@QEAAX_N@Z
?SetInvertVertical@CMovement2Scroll@@QEAAX_N@Z
?SetKeys@CMovement2Scroll@@QEAAXPEB_W@Z
?SetKeys@CXMBCChord@@QEAAXPEB_W@Z
?SetKeys@CXMBCTimedClick@@QEAAXPEB_W@Z
?SetKeystrokes@CApplicationSettings@@QEAAXHHPEB_WHH_N111@Z
?SetKeystrokes@CApplicationSettings@@QEAAXHHPEB_WHH_N111H@Z
?SetLanguage@CSettings@@QEAAXPEB_W@Z
?SetLastMTS@CMovement2Scroll@@QEAAX_N@Z
?SetLastUpdateCheck@@YAXH@Z
?SetLaunchApp@CApplicationSettings@@QEAAXHHPEB_W@Z
?SetLaunchApp@CMovement2Scroll@@QEAAXPEB_W@Z
?SetLaunchApp@CXMBCChord@@QEAAXPEB_W@Z
?SetLaunchApp@CXMBCTimedClick@@QEAAXPEB_W@Z
?SetLayerDisabled@CApplicationSettings@@QEAAXH_N@Z
?SetLayerDisabledNextPrev@CApplicationSettings@@QEAAXH_N@Z
?SetLayerName@CApplicationSettings@@QEAAXPEB_WH@Z
?SetMatchType@CApplicationSettings@@QEAAXH@Z
?SetMaxLayers@CSettings@@QEAA_NH@Z
?SetModifier@CHotkey@@QEAAHG@Z
?SetMouseButton@CMovement2Scroll@@QEAAXW4MouseButtons@@@Z
?SetMouseHook@@YA_NXZ
?SetMouseSpeed@CApplicationSettings@@QEAAXH@Z
?SetMouseSpeed@CMouseInfo@@QEAAX_K@Z
?SetMovement2Scroll@CActionData@@QEAAXPEAVCMovement2Scroll@@@Z
?SetMovement2Scroll@CApplicationSettings@@QEAAXHHPEAVCMovement2Scroll@@@Z
?SetMovement2Scroll@CXMBCChord@@QEAAXPEAVCMovement2Scroll@@@Z
?SetMovement2Scroll@CXMBCTimedClick@@QEAAXPEAVCMovement2Scroll@@@Z
?SetNoParentFlag@CApplicationSettings@@QEAAX_N@Z
?SetOSD@CBrightness@@QEAAXPEAUHWND__@@@Z
?SetOfficeMouse@@YAX_N@Z
?SetParent@CAudioNotificationClient@@QEAAXPEAUHWND__@@@Z
?SetParent@CVolumeManager@@QEAAXPEAUHWND__@@@Z
?SetParent@CVolumeNotification@@QEAAXPEAUHWND__@@@Z
?SetPortable@@YAX_N@Z
?SetPressed@CXMBCTimedClicks@@QEAAXP6AXPEAV1@PEAVCXMBCTimedClick@@K@ZP6AX01KUtagPOINT@@@ZW4MouseButtons@@H_NPEAUHWND__@@3PEAVCApplicationSettings@@PEAVCSPIThread@@@Z
?SetProcessedDown@CXMBCTimedClick@@QEAAX_N@Z
?SetProcessedUp@CXMBCTimedClick@@QEAAX_N@Z
?SetProfileChangeScript@CApplicationSettings@@QEAAXPEB_W@Z
?SetRandomiseDelay@CXMBCChord@@QEAAX_N@Z
?SetRandomiseDelay@CXMBCTimedClick@@QEAAX_N@Z
?SetRegExMatching@CApplicationSettings@@QEAAX_N@Z
?SetReleaseOnUp@CXMBCTimedClicks@@QEAAX_N@Z
?SetResetKeys@CApplicationSettings@@QEAAXHH_N@Z
?SetRevertLayer1@CApplicationSettings@@QEAAXH_N@Z
?SetScrollLines@CApplicationSettings@@QEAAXH@Z
?SetScrollPages@CApplicationSettings@@QEAAX_N@Z
?SetSendKeyAction@CXMBCChord@@QEAAXH@Z
?SetSendKeyAction@CXMBCTimedClick@@QEAAXH@Z
?SetSendKeyRepeat@CXMBCChord@@QEAAXH@Z
?SetSendKeyRepeat@CXMBCTimedClick@@QEAAXH@Z
?SetSendKeyWhenActive@CXMBCChord@@QEAAX_N@Z
?SetSendKeyWhenActive@CXMBCTimedClick@@QEAAX_N@Z
?SetSensitivityX@CMovement2Scroll@@QEAAXH@Z
?SetSensitivityY@CMovement2Scroll@@QEAAXH@Z
?SetSettingsFile@@YAHPEB_W@Z
?SetSetupWindow@@YAXPEAUHWND__@@@Z
?SetSticky@CMovement2Scroll@@QEAAX_N@Z
?SetStickyBlock@CMovement2Scroll@@QEAAX_N@Z
?SetStuckKeys@CApplicationSettings@@QEAAXHHPEB_W@Z
?SetSwapButtons@CApplicationSettings@@QEAAXW4swapbuttons@@@Z
?SetThreadName@@YAXKPEBD@Z
?SetTime@CXMBCTimedClicks@@QEAAXHH@Z
?SetTimedClick@CXMBCTimedClicks@@QEAAXHAEAVCXMBCTimedClick@@@Z
?SetTimedClicks@CApplicationSettings@@QEAAXHHPEAVCXMBCTimedClicks@@@Z
?SetUnblockAfterDelay@CXMBCChords@@QEAAX_N@Z
?SetUnblockAfterMovement@CXMBCChords@@QEAAX_N@Z
?SetUnblockMPixels@CXMBCChords@@QEAAXH@Z
?SetUnblockTime@CXMBCChords@@QEAAXH@Z
?SetUseWindowArea@CApplicationSettings@@QEAAX_N@Z
?SetValue@CMyRegKey@@QEAAHPEB_W0@Z
?SetValue@CMyRegKey@@QEAAHPEB_WK@Z
?SetVirtualKey@CHotkey@@QEAAHG@Z
?SetVolume@CVolumeManager@@QEAA_NM@Z
?SetWindowArea@CApplicationSettings@@QEAAXUtagRECT@@@Z
?SetWindowMask@CApplicationSettings@@QEAAXW4WINDOWMASK@@@Z
?Settings@CApplicationSettings@@QEAAPEAVCSettings@@XZ
?Shutdown@CLogger@@SAXXZ
?SwapButtons@CApplicationSettings@@QEAA?AW4swapbuttons@@XZ
?TerminateHandler@ExceptionHandlerInstaller@@SAXXZ
?TestCrash@@YAXXZ
?ThreadDebugging@CLogger@@SAX_N@Z
?TimedClickFeedbackTimer@CXMBCTimedClicks@@SAXPEAUHWND__@@IIK@Z
?TimedClickTimer@CXMBCTimedClicks@@SAXPEAUHWND__@@IIK@Z
?TimedClicksAction@CActionData@@SAPEAV1@AEAVCXMBCTimedClicks@@@Z
?ToggleMute@CVolumeManager@@QEAA_NXZ
?TryEnterCS@CAudioThreadLock@@SA_NPEB_W@Z
?TryEnterCS@CThreadLock@@SA_NPEB_W@Z
?UnblockAfterDelay@CXMBCChords@@QEAA_NXZ
?UnblockAfterMovement@CXMBCChords@@QEAA_NXZ
?UnblockMPixels@CXMBCChords@@QEAAHXZ
?UnblockTime@CXMBCChords@@QEAAHXZ
?Uninitialise@CVolumeManager@@AEAAXXZ
?UninvertX@CLockAxis@@QEAAXXZ
?UninvertXY@CLockAxis@@QEAAXXZ
?UninvertY@CLockAxis@@QEAAXXZ
?Unlock@CLockAxis@@QEAAXPEAVCSPIThread@@HPEAVCSettings@@PEAVCApplicationSettings@@_N@Z
?UnlockX@CLockAxis@@QEAAXPEAVCSPIThread@@HPEAVCSettings@@PEAVCApplicationSettings@@_N@Z
?UnlockXY@CLockAxis@@QEAAXPEAVCSPIThread@@HPEAVCSettings@@PEAVCApplicationSettings@@_N@Z
?UnlockY@CLockAxis@@QEAAXPEAVCSPIThread@@HPEAVCSettings@@PEAVCApplicationSettings@@_N@Z
?Up@CBrightness@@QEAAXAEBUtagPOINT@@@Z
?UpdateCursors@@YAXXZ
?UpdateSPIThread@@YAXXZ
?UpdateSettings@@YA_NXZ
?UpgradeAction@CApplicationSettings@@AEAAXHHW4_ACTIONS@@@Z
?ValueExists@CMyRegKey@@QEAAHPEB_WK@Z
?VerifyCert@CCheckCert@@QEAA_NPEB_W@Z
?WindowFromPhysPoint@@YAPEAUHWND__@@AEBUtagPOINT@@@Z
?WindowFromPointEx@@YAPEAUHWND__@@UtagPOINT@@H@Z
?WindowHandle@CIcon@@QEAAPEAUHWND__@@XZ
?XLocked@CLockAxis@@QEAA_NH@Z
?XPos@CLockAxis@@QEAAHXZ
?YLocked@CLockAxis@@QEAA_NH@Z
?YPos@CLockAxis@@QEAAHXZ
?_InternalLogDebug@CLogger@@SAXPEB_W@Z
?csLogMutex@CLogger@@0U_RTL_CRITICAL_SECTION@@A
?g_GlobalCS@CAudioThreadLock@@0U_RTL_CRITICAL_SECTION@@A
?g_GlobalCS@CThreadLock@@0U_RTL_CRITICAL_SECTION@@A
?getSensitivityX@CMovement2Scroll@@QEAAHXZ
?getSensitivityY@CMovement2Scroll@@QEAAHXZ
?get_DebounceFromUp@CSettings@@QEAA_NXZ
?get_DebounceTime@CSettings@@QEAAHXZ
?get_EnableDebounce@CSettings@@QEAA_NXZ
?get_MouseJigglerTickTimeout@CSettings@@QEAAKXZ
?get_ResetStickyOnAnyButton@CSettings@@QEAA_NXZ
?get_ResetStickyOnAnyKey@CSettings@@QEAA_NXZ
?get_ResetStickyOnLayerChange@CSettings@@QEAA_NXZ
?get_SearchURL@CSettings@@QEAAPEB_WXZ
?m_bDead@CLogger@@0_NA
?m_bDebugging@CLogger@@0_NA
?m_bDisableBanner@CLogger@@0_NA
?m_bDisableLogging@CLogger@@0_NA
?m_bThreadDebugging@CLogger@@0_NA
?m_hLogFile@CLogger@@0PEAXEA
?m_sdwOwner@CAudioThreadLock@@0KA
?m_sdwOwner@CThreadLock@@0KA
?m_sdwTimer@CAudioThreadLock@@0KA
?m_sdwTimer@CThreadLock@@0KA
?m_snEntryCount@CAudioThreadLock@@0HA
?m_snEntryCount@CThreadLock@@0HA
?m_stcName@CAudioThreadLock@@0PA_WA
?m_stcName@CGenericThreadLock@@0PA_WA
?m_stcName@CThreadLock@@0PA_WA
?put_DebounceFromUp@CSettings@@QEAAX_N@Z
?put_DebounceTime@CSettings@@QEAAXH@Z
?put_EnableDebounce@CSettings@@QEAAX_N@Z
?put_ResetStickyOnAnyButton@CSettings@@QEAAX_N@Z
?put_ResetStickyOnAnyKey@CSettings@@QEAAX_N@Z
?put_ResetStickyOnLayerChange@CSettings@@QEAAX_N@Z
Name
.text
Size
590KB
Virtual Size
589KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
365KB
Virtual Size
364KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
27KB
Virtual Size
27KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.gfids
Size
1024B
Virtual Size
604B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.tls
Size
512B
Virtual Size
9B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
49KB
Virtual Size
49KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=10, id=241, version=40116,
count=157, id=243, version=40116,
count=32, id=242, version=40116,
count=1, id=135, version=30729,
count=8, id=259, version=24123,
count=2, id=261, version=23013,
count=56, id=261, version=24123,
count=37, id=260, version=24123,
count=1, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=221, productName=VS2013 UPD5 build 40629, version=40629,
count=23, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=294, id=1, productName=Unmarked objects,
count=41, id=265, version=24215,
count=1, id=256, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=1, id=151,
count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,
uninstaller.exe
- IMPHASH b1a57b635b23ffd553b3fd1e0960b2bd
- SHA256 b7c4b2721eaaca04055303864a419cc6cf8dec529ca02e66e117c6ac5ae64508
- MD5 ab1e9228a6aeac220164da299bbb945c
- SHA1 5ff3b6ee5229241586d7259fb60f2e42690af367
- SHA512 47799b9dac198ddbca930d31a1714437316f37081c2f24459d222fd8cf3cc7f0f97d5fcfc42ab7343f813d1e47ead4cac4f3a9535ac22d060adadeb570f4d43c
- SSDEEP 1536:NRPYqa5pic6jXFdL2KiMcrgCKdO/LeAyNLsZnYiVgwkL7:/PA6jXFN2Mcr/tTeAtZYiVnkf
- TLSH T11473CF2629C0C8F3C95B4B719EFADBBAFFB695400510A65713600FAA2E223D2DF1515B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
-
NSIS installer
Digest
22:2b:05:5c:5e:04:e8:11:86:c5:05:e4:53:b1:7d:02:3a:47:3a:c3
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
CN=Open Source Developer\, Phillip Gibbons,O=Open Source Developer,ST=Berkshire,C=GB,1.2.840.113549.1.9.1=#0c127068696c406869676872657a2e636f2e756b
Chains
Apr 22, 2023
CN=Open Source Developer\, Phillip Gibbons,O=Open Source Developer,ST=Berkshire,C=GB,1.2.840.113549.1.9.1=#0c127068696c406869676872657a2e636f2e756b
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
CN=Open Source Developer\, Phillip Gibbons,O=Open Source Developer,ST=Berkshire,C=GB,1.2.840.113549.1.9.1=#0c127068696c406869676872657a2e636f2e756b
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Subject
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Serial Number
1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27
Issuer
CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
May 31, 2021 - Sep 17, 2029
Subject
CN=Open Source Developer\, Phillip Gibbons,O=Open Source Developer,ST=Berkshire,C=GB,1.2.840.113549.1.9.1=#0c127068696c406869676872657a2e636f2e756b
Serial Number
3d:a5:ca:7c:85:af:e6:68:8f:93:68:ae:a4:98:59:23
Issuer
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 4, 2023 - Apr 3, 2024
Subject
CN=Certum Timestamp 2022,O=Asseco Data Systems S.A.,C=PL
Serial Number
2b:d4:ae:70:b9:d0:63:5b:2a:e9:84:c8:d6:74:aa:30
Issuer
CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 28, 2022 - Jul 27, 2033
Subject
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
Serial Number
99:a3:80:0a:26:55:3b:65:ab:dc:6e:84:a6:b3:ea:39
Issuer
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 19, 2021 - May 18, 2036
Subject
CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL
Serial Number
e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87
Issuer
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 19, 2021 - May 18, 2036
Minor OS version
0
Major OS version
4
Entry point
12908
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
GetTickCount
GetShortPathNameA
GetFullPathNameA
MoveFileA
SetCurrentDirectoryA
GetFileAttributesA
SetFileAttributesA
CompareFileTime
SearchPathA
CreateFileA
GetFileSize
GetModuleFileNameA
GetCurrentProcess
CopyFileA
ExitProcess
GetWindowsDirectoryA
Sleep
lstrcmpiA
lstrlenA
GetVersion
SetErrorMode
lstrcpynA
GetDiskFreeSpaceA
GlobalUnlock
GlobalLock
CreateThread
GetLastError
CreateDirectoryA
CreateProcessA
RemoveDirectoryA
GetTempFileNameA
lstrcatA
GetSystemDirectoryA
WaitForSingleObject
SetFileTime
CloseHandle
GlobalFree
lstrcmpA
ExpandEnvironmentStringsA
GetExitCodeProcess
GlobalAlloc
GetCommandLineA
GetTempPathA
GetProcAddress
FindFirstFileA
FindNextFileA
DeleteFileA
SetFilePointer
ReadFile
FindClose
GetPrivateProfileStringA
WritePrivateProfileStringA
WriteFile
MulDiv
MultiByteToWideChar
LoadLibraryExA
GetModuleHandleA
FreeLibrary
user32
SetCursor
GetWindowRect
EnableMenuItem
GetSystemMenu
SetClassLongA
IsWindowEnabled
SetWindowPos
GetSysColor
EndDialog
ScreenToClient
LoadCursorA
CheckDlgButton
GetMessagePos
LoadBitmapA
CallWindowProcA
IsWindowVisible
CloseClipboard
SetForegroundWindow
GetWindowLongA
RegisterClassA
TrackPopupMenu
AppendMenuA
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextA
GetDlgItemTextA
MessageBoxIndirectA
CharPrevA
DispatchMessageA
PeekMessageA
GetDC
EnableWindow
InvalidateRect
SendMessageA
DefWindowProcA
BeginPaint
GetClientRect
FillRect
DrawTextA
SystemParametersInfoA
CreateWindowExA
GetClassInfoA
DialogBoxParamA
CharNextA
ExitWindowsEx
SetTimer
PostQuitMessage
SetWindowLongA
SendMessageTimeoutA
LoadImageA
wsprintfA
GetDlgItem
FindWindowExA
IsWindow
SetClipboardData
EmptyClipboard
OpenClipboard
EndPaint
CreateDialogParamA
DestroyWindow
ShowWindow
SetWindowTextA
gdi32
SelectObject
SetBkMode
CreateFontIndirectA
SetTextColor
DeleteObject
GetDeviceCaps
CreateBrushIndirect
SetBkColor
shell32
SHGetSpecialFolderLocation
SHGetPathFromIDListA
SHBrowseForFolderA
SHGetFileInfoA
SHFileOperationA
ShellExecuteA
advapi32
RegDeleteValueA
SetFileSecurityA
RegOpenKeyExA
RegDeleteKeyA
RegEnumValueA
RegCloseKey
RegCreateKeyExA
RegSetValueExA
RegQueryValueExA
RegEnumKeyA
comctl32
ImageList_AddMasked
ImageList_Destroy
ImageList_Create
ord17
ole32
OleUninitialize
OleInitialize
CoTaskMemFree
CoCreateInstance
Name
.text
Size
23KB
Virtual Size
23KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1KB
Virtual Size
108KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.ndata
Size
Virtual Size
52KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
24KB
Virtual Size
24KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=2, id=95, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=152, id=1, productName=Unmarked objects,
count=15, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=10, id=48, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
$PLUGINSDIR/ExecCmd.dll
- IMPHASH bf44c9fb48bb8c36b3e2527e7252350d
- SHA256 1f4bd9c9376fe1b6913baeca7fb6df6467126f27c9c2fe038206567232a0e244
- MD5 b9380b0bea8854fd9f93cc1fda0dfeac
- SHA1 edb8d58074e098f7b5f0d158abedc7fc53638618
- SHA512 45c3ab0f2bce53b75e72e43bac747dc0618342a3f498be8e2eb62a6db0b137fcdb1735da83051b14824996b5287109aa831e5859d6f21f0ed21b76b3d335418c
- SSDEEP 48:ifXNtGNjFizsU35iej7luiwa28mDJmDKUOMQH0glay/Aa4r/:5Fef5iej5txKJKenlV4r/
- TLSH T16E91947B63D85AF3D194077234C784D777BED4280355812A080BBA881D56EE3ECBC213
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
5433
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
FreeLibrary
OpenProcess
CloseHandle
GetProcAddress
LoadLibraryA
GetVersionExA
GlobalFree
TerminateProcess
GetExitCodeProcess
WaitForSingleObject
Sleep
CreateProcessA
GlobalAlloc
GetExitCodeThread
lstrcpyA
lstrcpynA
CreateThread
lstrcatA
GetEnvironmentVariableA
lstrcmpiA
user32
SendMessageA
EnumWindows
WaitForInputIdle
wsprintfA
GetWindowThreadProcessId
exec
wait
Name
.text
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1024B
Virtual Size
802B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
142B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
512B
Virtual Size
200B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=25, id=1, productName=Unmarked objects,
count=5, id=19, version=8034,
count=1, id=10, version=8966,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
$PLUGINSDIR/System.dll
- IMPHASH f2ac1ab587d5531d5f1bf76c094aef4c
- SHA256 bb6df93369b498eaa638b0bcdc4bb89f45e9b02ca12d28bcedf4629ea7f5e0f1
- MD5 56a321bd011112ec5d8a32b2f6fd3231
- SHA1 df20e3a35a1636de64df5290ae5e4e7572447f78
- SHA512 5354890cbc53ce51081a78c64ba9c4c8c4dc9e01141798c1e916e19c5776dac7c82989fad0f08c73e81aaba332dad81205f90d0663119af45550b97b338b9cc3
- SSDEEP 192:uv+cJZE61KRWJQO6tFiUdK7ckK4k7l1XRBm0w+NiHi1GSJ:uf6rtFRduQ1W+fG8
- TLSH T127225C5893E0C1F3D6A0853C18A73A772729712445A18FE3CFA35841AE196D7BC7E336
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
10512
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
MultiByteToWideChar
GlobalFree
GlobalSize
GetLastError
lstrcpyA
lstrcpynA
FreeLibrary
lstrcatA
GetProcAddress
LoadLibraryA
GetModuleHandleA
GlobalAlloc
lstrlenA
WideCharToMultiByte
VirtualAlloc
VirtualProtect
user32
wsprintfA
ole32
StringFromGUID2
CLSIDFromString
Alloc
Call
Copy
Free
Get
Int64Op
Store
Name
.text
Size
7KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1024B
Virtual Size
784B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
100B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
512B
Virtual Size
510B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=6, id=14, version=7299,
count=19, id=1, productName=Unmarked objects,
count=7, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=1, id=42, version=8803,
count=4, id=48, version=9044,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
ماكرو vinko/AutoHotkey_2.0.11_setup.exe
- SHA256 510a833bdd0f896cc398eaae4ff475f5b7cfe37649efbf647b50d21e442394b9
- MD5 7e178522e49fb3c45d441d176ee9fe01
- SHA1 2a3e882103232c1355e2a6a8f1d9bc7cc23134cd
- SHA512 0606b1fa92f93315aa19e4c4a331ff64312953c051760bf1b56e43100aa0ad3fc5329c70a07fd3d15bce6ca7673a356feec0e97418b18b35cd2a3877a1561097
- SSDEEP 49152:XPN5fLCz5lmru2QacbgOaUwX9Uc8mQU9LZ4rXdmJ4hZhV57LfgR2GVZbH:XPN5T2zmru2QacsOuX9iOl4rXdmJ4Hh8
- TLSH T10ED533E436D47684C3DC14799ABABC0FA084BC10E61986B773C4E82D7ACEB6C64E455F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
5471472
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
Name
UPX0
Size
Virtual Size
2.4MB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
UPX1
Size
2.8MB
Virtual Size
2.8MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
36KB
Virtual Size
40KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=14, id=259, version=30795,
count=44, id=261, version=32533,
count=21, id=260, version=32533,
count=25, id=259, version=32533,
count=27, id=260, version=30795,
count=160, id=261, version=30795,
count=1, id=262, version=30795,
count=33, id=257, version=30795,
count=484, id=1, productName=Unmarked objects,
count=1, id=259, version=32822,
count=66, id=265, version=32822,
count=1, id=255, version=32822,
count=1, id=258, version=32822,
ماكرو vinko/Bomba.xmbcp
- SHA256 c983a6269ac2c9e10cb69253d89d0b7592399d3895bd1b24748d246eb0dd56a0
- MD5 9f2afba0b2ad4db42766daa82a92b404
- SHA1 85fd893a03ddb4b5a65f6164af78636ca58a7dc3
- SHA512 61fa536aba8e5d99276012c967ecf1e8e48481a8a307eedab83f73f6912e3fd715f2238e4a05de1e9360b4a5b04873ea675e5a8d357afd2b38e5e86068fd7004
- SSDEEP 96:xeKgmN5uqkUupWUrqaU1k0JMyABA2Ke8I2Ke882Ke8XQ2Ke8/s2Ke8DU2Ke8k2K9:jg67ufMk3AWw
- TLSH T11E132817A260BC7F074E520737B590A55568169FD22403EAF03391753DAEAE31DE2AF3
- MD5 SHA1 SHA512 SSDEEP TLSH
ماكرو vinko/f.ahk
- SHA256 a642cc67b3ff8d348134d887aeaf60be25878335ff007c0ba11fff19ceb59f00
- MD5 de9301db34ccad615532f6319aebc5dd
- SHA1 211f896173368541f070d6f4a2762a0f06a491cb
- SHA512 f6c631ba39adaba5f20bdcd35b57c22ab37584e6e293d9d1ca8921968d70af523248b2db764bc0e61a37b0ac55793b5ce3a929dd21e6d92d9f16c98fe4132e90
- MD5 SHA1 SHA512