09092026_0347_08092026__0225503FiscalGXRGSL_skaoay_FERACarg.vbs.zip
- SHA256 f9981ad6fe78627a96f6b43ef8e2018f2daf443424d986fabce97f90bf01346b
Password
infected
Overview
overview
9Static
static
3_0225503Fi...rg.vbs
windows10-2004-x64
9_0225503Fi...rg.vbs
windows11-ltsc_2024-x64
9~/csdmfc/x...u2.pdf
windows10-2004-x64
3~/csdmfc/x...u2.pdf
windows11-ltsc_2024-x64
3~/csdmfc/x...d1.pdf
windows10-2004-x64
3~/csdmfc/x...d1.pdf
windows11-ltsc_2024-x64
3~/iyxqnn2.dll
windows10-2004-x64
3~/iyxqnn2.dll
windows11-ltsc_2024-x64
3~/obmc1.dll
windows10-2004-x64
3~/obmc1.dll
windows11-ltsc_2024-x64
3Behavioral task
behavioral1
Sample
_0225503FiscalGXRGSL_skaoay_FERACarg.vbs
Resource
win10v2004-20260513-en
windows10-2004-x64
11 signatures
300 seconds
Behavioral task
behavioral2
Sample
_0225503FiscalGXRGSL_skaoay_FERACarg.vbs
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
13 signatures
300 seconds
Behavioral task
behavioral3
Sample
~/csdmfc/xfqqce/zqhi/lafk/fudu2.pdf
Resource
win10v2004-20260513-en
windows10-2004-x64
7 signatures
300 seconds
Behavioral task
behavioral4
Sample
~/csdmfc/xfqqce/zqhi/lafk/fudu2.pdf
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
7 signatures
300 seconds
Behavioral task
behavioral5
Sample
~/csdmfc/xfqqce/zqhi/lafk/youvd1.pdf
Resource
win10v2004-20260513-en
windows10-2004-x64
7 signatures
300 seconds
Behavioral task
behavioral6
Sample
~/csdmfc/xfqqce/zqhi/lafk/youvd1.pdf
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
7 signatures
300 seconds
Behavioral task
behavioral7
Sample
~/iyxqnn2.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
300 seconds
Behavioral task
behavioral8
Sample
~/iyxqnn2.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
2 signatures
300 seconds
Behavioral task
behavioral9
Sample
~/obmc1.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
300 seconds
Behavioral task
behavioral10
Sample
~/obmc1.dll
Resource
win11ltsc2024-20260710-en
windows11-ltsc_2024-x64
2 signatures
300 seconds
General
- Target 09092026_0347_08092026__0225503FiscalGXRGSL_skaoay_FERACarg.vbs.zip
- Size 2.7MB
- Sample260909-eca2ta1dph
- SHA256 f9981ad6fe78627a96f6b43ef8e2018f2daf443424d986fabce97f90bf01346b
- MD5 e2b017d9bc17fb022e184024c0254728
- SHA1 678e64d15cece622f4c5597a1ba3be2aacb7cbc6
- SHA512 b1a9d4216613912c949a93a61d46f7d2f67864cb9a839a706556ecc45dfa9d1b530ed5f7624d15a7a74af953cad483f36d1ee59bb33e26f1f18454b281d97c7d
- SSDEEP 49152:3fGNT25KfTYTS0fM1jmPmZwS7yRCEIoDH0Kqawu7zR/2XuWg7fLCQEi9:3fzKfTYpVJ4EpjMawER/mc7fuBE
- TLSH T1C8D5337DBC997508B720D370B75A868C8DC083C9E619869E2F1D604DCB0AFB5AF7168D
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
File Explorer
-
09092026_0347_08092026__0225503FiscalGXRGSL_skaoay_FERACarg.vbs.zip.zip 2.7MB
-
_0225503FiscalGXRGSL_skaoay_FERACarg.vbs3.8MB
-
~/csdmfc/xfqqce/zqhi/lafk/fudu2.pdf.pdf 30KB
-
~/csdmfc/xfqqce/zqhi/lafk/youvd1.pdf.pdf 10KB
-
~/iyxqnn2.xml.dll 38KB
-
~/obmc1.xml.dll 38KB
_0225503FiscalGXRGSL_skaoay_FERACarg.vbs
- SHA256 386ec9fbad1de49f272c3ec34d085f060aaa3f9e49cc0cbb33b9d151ee71456c
- MD5 2464e216388366d05d83a8f046d794c7
- SHA1 bd25590f374b181054465c7fd59f8b06dd617cd9
- SHA512 958522ce52309bde894b7b8b8c7a41932ddc6b19f545a322866f452f051ba8502f62f338530b9456a5c6272ebd2ddcc58e9ae9d4c1d7ba8a0b00ca138c6b67ee
- SSDEEP 49152:+eIYuO3l3u5UsoJ4EwnzbFY3ar5XJkeIVqfKEL2k1GX67x8s:+2s
- TLSH T1DB061236E6A5050B09E1476AF04A2173BF7FC423874D82A6CC8DF22939DB49FC17E5A4
- MD5 SHA1 SHA512 SSDEEP TLSH
~/csdmfc/xfqqce/zqhi/lafk/fudu2.pdf
- SHA256 d0d35d4867fabb3036c92f1ba72565b55424668ea6541fa8f3c06a164652cb5b
- MD5 14fe56d2825d9540424f4834442a5eec
- SHA1 6a586e30ce42b761720bff7b6a4258baefda87eb
- SHA512 1c064ec5bcc335ba715a2413d9c07ad932e5347dbc9fc39c84f0f1e0a2277ec5abbf9bd91f845525c012932c5b3a605fcc91d0eb84dcc08144d48658bf864ed8
- SSDEEP 384:pHkou43a4Bar3uqW70bW6EIy4jrG70ClGNNGmuGkvJ9dmUWMNv5itbFoIdcV8fXB:OVhW14jq70RNkGwJ8
- TLSH T1FED2930DF245BAA0D46147E15F383679653F73296CCA5A905DA3C72BEA018EB3B7CC42
- MD5 SHA1 SHA512 SSDEEP TLSH
Password
infected
Extracted URLs
-
file http://bardahl.com.ar
~/csdmfc/xfqqce/zqhi/lafk/youvd1.pdf
- SHA256 c085ee00e47a11fa266ce884948ad3f14c7502e83779bc3c0c130deb96922caf
- MD5 66045b311330ea9d0423a08e7753663a
- SHA1 b6cd07d0559c35e203d1313a291e9071ebd1ed3d
- SHA512 1826e80c6f48016132a27e06403e0cd5446efdd53f3d13bc88fb15313fafb25d842c72e6efbe1b91b28995e9b7aed9f12b7f09fb4d35b8c2496c1e2c3d9d87e9
- SSDEEP 192:wIMwfv9OIEbTmLCLRLPUEUAZWovdLl6S29gNfRKPH1yFf7VpbPUD1i7t+U0Tr+CF:wIM89OIEbS2JUELZWo1Ll6S29gN5KPHn
- TLSH T1D6320916B9456CFCD55683C22F65789ADA2FF63030C494817CED8C078B40E52FD5F946
- MD5 SHA1 SHA512 SSDEEP TLSH
Password
infected
~/iyxqnn2.xml
- IMPHASH 22282896b7052384f5c0332b5666c4c5
- SHA256 a5b88f84fb563b4c97faea5074f94ff8991ab04bc879c96fda32039f73876d34
- MD5 e3b3357c99116495ea512e11aafcf658
- SHA1 301bc26d07455b97fb3fd8ec4108b49bedf28518
- SHA512 9a403cb9bb63a246fa51cd4f75eec4454cd35ad428771544712d89dcdeb5a1c85a5521f90749db4c731e2276bf968bfb88744da26c8842ebc92ba79dd20bde68
- SSDEEP 384:lsbtFMFjxdLsDTMtHKMYGjJqoRnPV5TiUdK7W9RY/5CYJL+mcXfeM+:qtOFFdLsD6KM3jJqmndyW7Y/5rLJT
- TLSH T1E103728735304EE1EDC00D7A91E65E734C7CD2284BAB90D7A6B601962E413E63E3B79D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Password
infected
PE Signature issue
Digest
4f:57:16:48:ba:4e:bc:7c:d4:27:e1:f4:23:df:5f:18:a4:32:a1:f4
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Adobe Systems Incorporated,OU=Information Systems+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Chains
Dec 20, 2011
CN=Adobe Systems Incorporated,OU=Information Systems+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Subject
CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US
Serial Number
38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Issuer
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jun 15, 2007 - Jun 14, 2012
Subject
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Serial Number
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2013
Subject
CN=Adobe Systems Incorporated,OU=Information Systems+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Serial Number
15:e5:ac:0a:48:70:63:71:8e:39:da:52:30:1a:04:88
Issuer
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Dec 15, 2010 - Dec 14, 2012
Subject
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Serial Number
52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 8, 2010 - Feb 7, 2020
Minor OS version
1
Major OS version
5
Entry point
16046
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
C:\coretech\source\zeppelin\adobepsl\photoshop\Targets\Win32\Objs\QuickTimeGlueRelease\QuickTimeGlue.pdb
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
kernel32
CloseHandle
GlobalFree
GlobalAlloc
FreeLibrary
GetModuleFileNameA
GetProcAddress
QueryPerformanceCounter
GetLastError
WaitForSingleObject
CreateMutexA
GetCurrentProcessId
GetSystemDirectoryA
GetModuleHandleA
LoadLibraryA
DisableThreadLibraryCalls
IsDebuggerPresent
GetTickCount
GetCurrentThreadId
ReleaseMutex
GetSystemTimeAsFileTime
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
SetUnhandledExceptionFilter
InterlockedExchange
DecodePointer
EncodePointer
user32
wsprintfA
advapi32
RegQueryValueExA
RegCloseKey
RegOpenKeyExA
msvcr100
memset
_access
strncpy
_malloc_crt
free
_encoded_null
_initterm
_initterm_e
_amsg_exit
__CppXcptFilter
_crt_debugger_hook
__clean_type_info_names_internal
_unlock
__dllonexit
_lock
_onexit
_except_handler4_common
memcpy
QTAddEmptyTrackToMovie
QTAddImageDescriptionExtension
QTAddMediaSample
QTBeginMediaEdits
QTCDSequenceEnd
QTCFRelease
QTCFStringCreateWithCharacters
QTCloseComponent
QTCloseMovieFile
QTCompressSequenceBegin
QTCompressSequenceFrame
QTCopyPixMapPixels
QTCopyTrackSettings
QTCountImageDescriptionExtensionType
QTCreateMovieFile
QTCreatePortAssociation
QTDestroyPortAssociation
QTDisposeCTable
QTDisposeGWorld
QTDisposeHandle
QTDisposeMovie
QTDisposeMovieController
QTEndMediaEdits
QTEnterMovies
QTExitMovies
QTFindNextComponent
QTGestalt
QTGetCodecInfo
QTGetComponentInfo
QTGetGWorldDevice
QTGetGWorldPixMap
QTGetHandleSize
QTGetImageDescClutID
QTGetImageDescSampleDepth
QTGetImageDescriptionCTable
QTGetImageDescriptionExtension
QTGetMaxCompressionSize
QTGetMediaDuration
QTGetMediaHandler
QTGetMediaHandlerDescription
QTGetMediaNextInterestingTime
QTGetMediaSampleCount
QTGetMediaSampleDescription
QTGetMediaSampleDescriptionCount
QTGetMediaTimeScale
QTGetMovieBox
QTGetMovieDuration
QTGetMovieGWorld
QTGetMovieIndTrackType
QTGetMovieNextInterestingTime
QTGetMoviePreferredRate
QTGetMovieTimeBase
QTGetMovieTimeScale
QTGetMovieTrackCount
QTGetPAR_HSpacing
QTGetPAR_VSpacing
QTGetPixBaseAddr
QTGetPixMapBounds
QTGetPixelsState
QTGetPort
QTGetStringFromHandle
QTGetTrackEnabled
QTGetTrackMedia
QTGoToBeginningOfMovie
QTHLock
QTHUnlock
QTICMImageDescriptionGetProperty
QTInitializeBridge
QTInitializeQTML
QTInsertMediaIntoTrack
QTInsertTrackSegment
QTIsCTableGrayscale
QTLockPixels
QTMCDoAction
QTMCDoActionGoToTime
QTMCDoActionPlay
QTMCDoActionSetVolume
QTMCEnableEditing
QTMCGetCurrentTime
QTMCIdle
QTMCMovieChanged
QTMacSetPort
QTMakeImageDescriptionForPixMap
QTMediaGetPublicInfo
QTMediaGetPublicInfoEncodedFrameRate
QTMediaHasCharacteristic
QTMovieExportAddDataSource
QTMovieExportDoUserDialog
QTMovieExportFromProceduresToDataRef
QTMovieExportGetFileNameExtension
QTMovieExportGetSettingsAsAtomContainer
QTMovieExportSetProgressProc
QTMovieExportSetSettingsFromAtomContainer
QTMoviesTask
QTNewHandle
QTNewMovieController
QTNewMovieFromDataRef
QTNewMovieFromFile
QTNewMovieTrack
QTNewTrackMedia
QTOpenComponent
QTOpenDefaultComponent
QTOpenMovieFile
QTPrerollMovie
QTQTDisposeAtomContainer
QTQTFindChildByID
QTQTGetAtomDataPtr
QTQTGetPixMapHandleGammaLevel
QTQTGetPixMapHandleRowBytes
QTQTNewDataReferenceFromFullPathCFString
QTQTNewGWorld
QTQTSetAtomData
QTQTSetPixMapHandleGammaLevel
QTQTSetPixMapHandleRequestedGammaLevel
QTSetMediaSampleDescription
QTSetMovieBox
QTSetMovieGWorld
QTSetMoviePlayHints
QTSetMovieSelection
QTSetMovieTimeScale
QTSetMovieTimeValue
QTSetPAR_Spacing
QTSetTrackEnabled
QTTerminateQTML
QTUnlockPixels
QTUpdateMovieResource
Name
.text
Size
13KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
6KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
912B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
512B
Virtual Size
436B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
11KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=156, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=152, version=20115,
count=1, id=158, productName=VS2010 SP1 build 40219, version=40219,
count=12, id=170, productName=VS2010 SP1 build 40219, version=40219,
count=6, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=67, id=1, productName=Unmarked objects,
count=3, id=93, version=2179,
count=10, id=95, productName=VS2003 (.NET) SP1 build 6030, version=6030,
count=7, id=171, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=155, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=157, productName=VS2010 SP1 build 40219, version=40219,
~/obmc1.xml
- IMPHASH 22282896b7052384f5c0332b5666c4c5
- SHA256 a5b88f84fb563b4c97faea5074f94ff8991ab04bc879c96fda32039f73876d34
- MD5 e3b3357c99116495ea512e11aafcf658
- SHA1 301bc26d07455b97fb3fd8ec4108b49bedf28518
- SHA512 9a403cb9bb63a246fa51cd4f75eec4454cd35ad428771544712d89dcdeb5a1c85a5521f90749db4c731e2276bf968bfb88744da26c8842ebc92ba79dd20bde68
- SSDEEP 384:lsbtFMFjxdLsDTMtHKMYGjJqoRnPV5TiUdK7W9RY/5CYJL+mcXfeM+:qtOFFdLsD6KM3jJqmndyW7Y/5rLJT
- TLSH T1E103728735304EE1EDC00D7A91E65E734C7CD2284BAB90D7A6B601962E413E63E3B79D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Password
infected
PE Signature issue
Digest
4f:57:16:48:ba:4e:bc:7c:d4:27:e1:f4:23:df:5f:18:a4:32:a1:f4
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Adobe Systems Incorporated,OU=Information Systems+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Chains
Dec 20, 2011
CN=Adobe Systems Incorporated,OU=Information Systems+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Subject
CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US
Serial Number
38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Issuer
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jun 15, 2007 - Jun 14, 2012
Subject
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Serial Number
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2013
Subject
CN=Adobe Systems Incorporated,OU=Information Systems+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Serial Number
15:e5:ac:0a:48:70:63:71:8e:39:da:52:30:1a:04:88
Issuer
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Dec 15, 2010 - Dec 14, 2012
Subject
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Serial Number
52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 8, 2010 - Feb 7, 2020
Minor OS version
1
Major OS version
5
Entry point
16046
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
C:\coretech\source\zeppelin\adobepsl\photoshop\Targets\Win32\Objs\QuickTimeGlueRelease\QuickTimeGlue.pdb
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
kernel32
CloseHandle
GlobalFree
GlobalAlloc
FreeLibrary
GetModuleFileNameA
GetProcAddress
QueryPerformanceCounter
GetLastError
WaitForSingleObject
CreateMutexA
GetCurrentProcessId
GetSystemDirectoryA
GetModuleHandleA
LoadLibraryA
DisableThreadLibraryCalls
IsDebuggerPresent
GetTickCount
GetCurrentThreadId
ReleaseMutex
GetSystemTimeAsFileTime
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
SetUnhandledExceptionFilter
InterlockedExchange
DecodePointer
EncodePointer
user32
wsprintfA
advapi32
RegQueryValueExA
RegCloseKey
RegOpenKeyExA
msvcr100
memset
_access
strncpy
_malloc_crt
free
_encoded_null
_initterm
_initterm_e
_amsg_exit
__CppXcptFilter
_crt_debugger_hook
__clean_type_info_names_internal
_unlock
__dllonexit
_lock
_onexit
_except_handler4_common
memcpy
QTAddEmptyTrackToMovie
QTAddImageDescriptionExtension
QTAddMediaSample
QTBeginMediaEdits
QTCDSequenceEnd
QTCFRelease
QTCFStringCreateWithCharacters
QTCloseComponent
QTCloseMovieFile
QTCompressSequenceBegin
QTCompressSequenceFrame
QTCopyPixMapPixels
QTCopyTrackSettings
QTCountImageDescriptionExtensionType
QTCreateMovieFile
QTCreatePortAssociation
QTDestroyPortAssociation
QTDisposeCTable
QTDisposeGWorld
QTDisposeHandle
QTDisposeMovie
QTDisposeMovieController
QTEndMediaEdits
QTEnterMovies
QTExitMovies
QTFindNextComponent
QTGestalt
QTGetCodecInfo
QTGetComponentInfo
QTGetGWorldDevice
QTGetGWorldPixMap
QTGetHandleSize
QTGetImageDescClutID
QTGetImageDescSampleDepth
QTGetImageDescriptionCTable
QTGetImageDescriptionExtension
QTGetMaxCompressionSize
QTGetMediaDuration
QTGetMediaHandler
QTGetMediaHandlerDescription
QTGetMediaNextInterestingTime
QTGetMediaSampleCount
QTGetMediaSampleDescription
QTGetMediaSampleDescriptionCount
QTGetMediaTimeScale
QTGetMovieBox
QTGetMovieDuration
QTGetMovieGWorld
QTGetMovieIndTrackType
QTGetMovieNextInterestingTime
QTGetMoviePreferredRate
QTGetMovieTimeBase
QTGetMovieTimeScale
QTGetMovieTrackCount
QTGetPAR_HSpacing
QTGetPAR_VSpacing
QTGetPixBaseAddr
QTGetPixMapBounds
QTGetPixelsState
QTGetPort
QTGetStringFromHandle
QTGetTrackEnabled
QTGetTrackMedia
QTGoToBeginningOfMovie
QTHLock
QTHUnlock
QTICMImageDescriptionGetProperty
QTInitializeBridge
QTInitializeQTML
QTInsertMediaIntoTrack
QTInsertTrackSegment
QTIsCTableGrayscale
QTLockPixels
QTMCDoAction
QTMCDoActionGoToTime
QTMCDoActionPlay
QTMCDoActionSetVolume
QTMCEnableEditing
QTMCGetCurrentTime
QTMCIdle
QTMCMovieChanged
QTMacSetPort
QTMakeImageDescriptionForPixMap
QTMediaGetPublicInfo
QTMediaGetPublicInfoEncodedFrameRate
QTMediaHasCharacteristic
QTMovieExportAddDataSource
QTMovieExportDoUserDialog
QTMovieExportFromProceduresToDataRef
QTMovieExportGetFileNameExtension
QTMovieExportGetSettingsAsAtomContainer
QTMovieExportSetProgressProc
QTMovieExportSetSettingsFromAtomContainer
QTMoviesTask
QTNewHandle
QTNewMovieController
QTNewMovieFromDataRef
QTNewMovieFromFile
QTNewMovieTrack
QTNewTrackMedia
QTOpenComponent
QTOpenDefaultComponent
QTOpenMovieFile
QTPrerollMovie
QTQTDisposeAtomContainer
QTQTFindChildByID
QTQTGetAtomDataPtr
QTQTGetPixMapHandleGammaLevel
QTQTGetPixMapHandleRowBytes
QTQTNewDataReferenceFromFullPathCFString
QTQTNewGWorld
QTQTSetAtomData
QTQTSetPixMapHandleGammaLevel
QTQTSetPixMapHandleRequestedGammaLevel
QTSetMediaSampleDescription
QTSetMovieBox
QTSetMovieGWorld
QTSetMoviePlayHints
QTSetMovieSelection
QTSetMovieTimeScale
QTSetMovieTimeValue
QTSetPAR_Spacing
QTSetTrackEnabled
QTTerminateQTML
QTUnlockPixels
QTUpdateMovieResource
Name
.text
Size
13KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
6KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
912B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
512B
Virtual Size
436B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
11KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=156, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=152, version=20115,
count=1, id=158, productName=VS2010 SP1 build 40219, version=40219,
count=12, id=170, productName=VS2010 SP1 build 40219, version=40219,
count=6, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=67, id=1, productName=Unmarked objects,
count=3, id=93, version=2179,
count=10, id=95, productName=VS2003 (.NET) SP1 build 6030, version=6030,
count=7, id=171, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=155, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=157, productName=VS2010 SP1 build 40219, version=40219,