uswzxomkx_Password_9bazM42Q7NtCiSopRi[.]zip

Sharing

Copy URL Twitter E-mail

General

Target
uswzxomkx_Password_9bazM42Q7NtCiSopRi.zip
Size 9.1MB
Sample261003-vm2waatake
SHA256 2e57cc374948b919921298487fcab93ec85966db1aedb5d0a3088ec12bc48db2
MD5 6b7986f628ae86ba3c610a3db6e20db3
SHA1 aae5449b7bc546dbd597ba82705d96d4a0d4be5c
SHA512 6b65957b52a07117997ceb2be323123a097205407058f2b54168af8c9cbb12e6232b4d5aab7f57ce897bedfdf5884743c2d8800ed4378fe893c2d834d1897856
SSDEEP 196608:1IWVw86IlylwI7WJGPi2x7R2fyfi0xDAeHbTn6GhuA2HM:172FI8lwJJGPBxAfyfvz6lA2HM
TLSH
T14CA633C96BD6491955A070FBAFCBDDECA44BF2F89424A8D4BFD05400BDBCCB98C845A1
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/OLEACC.dll

File Explorer

uswzxomkx_Password_9bazM42Q7NtCiSopRi.zip

.zip 9.1MB
OLEACC.dll

.dll 4.0MB
Rainbow_Six_Siege_Hack.exe

.exe 20.0MB

uswzxomkx_Password_9bazM42Q7NtCiSopRi.zip

SHA256 2e57cc374948b919921298487fcab93ec85966db1aedb5d0a3088ec12bc48db2
MD5 6b7986f628ae86ba3c610a3db6e20db3
SHA1 aae5449b7bc546dbd597ba82705d96d4a0d4be5c
SHA512 6b65957b52a07117997ceb2be323123a097205407058f2b54168af8c9cbb12e6232b4d5aab7f57ce897bedfdf5884743c2d8800ed4378fe893c2d834d1897856
SSDEEP 196608:1IWVw86IlylwI7WJGPi2x7R2fyfi0xDAeHbTn6GhuA2HM:172FI8lwJJGPBxAfyfvz6lA2HM
TLSH
T14CA633C96BD6491955A070FBAFCBDDECA44BF2F89424A8D4BFD05400BDBCCB98C845A1
MD5 SHA1 SHA512 SSDEEP TLSH

Password

9bazM42Q7NtCiSopRi

OLEACC.dll

IMPHASH 5f05946a58fd396d42a4ae31242e5a4a
SHA256 8a7c2825c8063a0eb10865649cb93a7a15f9cbf243a1c46dc79a86d076833f6b
MD5 2e5139291112915a073db94e2f0dae6c
SHA1 938e3517703eb11a5cb21c5e5928017c418f22e6
SHA512 f7ac62c5882e6610165ba850a8cf10a87dc0e7a8badf24c4a04fe7237ab9c38fa4e7cde55cb5be2eb48e5ad8bccb98fc9ac36531adb16df1076fa7e1b9bf3bee
SSDEEP 98304:OaoUGW5WOnIttgWr3WeK5JJFMsm5d+StEUzBD3D/Y5F:aUGWIOnEgWrQJFnm7VEO
TLSH
T19816E16111C040F5F1ABD630C295E63F916A368A5B9CAFD702F87F2827236D56D3AB07
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Password

9bazM42Q7NtCiSopRi

Minor OS version

Major OS version

Entry point

513008

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

kernel32

FormatMessageW lstrlenW FileTimeToSystemTime GetTimeZoneInformation GetLocaleInfoW WriteConsoleW CloseHandle CreateFileW AddRefActCtxWorker ReadConsoleW DisableThreadLibraryCalls SetFilePointerEx GetFileSizeEx GetConsoleMode GetConsoleOutputCP WriteFile SwitchToThread SetStdHandle HeapReAlloc HeapSize GetStringTypeW SetConsoleCtrlHandler LocalReAlloc AddRefActCtx GetSystemTimeAsFileTime ReadFile GetCurrentThreadId ExitProcess GetCurrentProcessId GetCurrentProcess GetProcessHeap GetFileType GetStdHandle EnumSystemLocalesW GetUserDefaultLCID IsValidLocale LCMapStringW CompareStringW GetTimeFormatW GetDateFormatW GetBinaryTypeW ActivateActCtx IsThreadAFiber HeapFree HeapAlloc FlushFileBuffers AcquireSRWLockExclusive InitializeSListHead SetUnhandledExceptionFilter GetStartupInfoW AddConsoleAliasA RtlPcToFileHeader RaiseException RtlUnwindEx RtlLookupFunctionEntry InterlockedPushEntrySList InterlockedFlushSList GetLastError SetLastError FlsAlloc FlsGetValue FlsSetValue FlsFree EncodePointer EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection TerminateProcess FreeLibrary AdjustCalendarDate CallNamedPipeA GetModuleFileNameW IsProcessorFeaturePresent GetCurrentThread RtlCaptureContext RtlVirtualUnwind BaseFormatTimeOut UnhandledExceptionFilter FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW GetTempPathW RtlUnwind

user32

SetWindowTextW PostMessageW ShowWindow SetWindowPos LoadIconW GetWindowThreadProcessId EndDialog EnumWindows GetClientRect GetWindowTextW GetClassNameW RedrawWindow InvalidateRect EndPaint CharUpperW

gdi32

DeleteDC CreateSolidBrush CreateCompatibleDC DeleteObject

advapi32

RegOpenKeyExW RegQueryValueExW RegCloseKey

shell32

SHGetFolderPathW CheckEscapesW SHGetKnownFolderPath

ole32

CoTaskMemFree CoInitializeEx

version

GetFileVersionInfoW

shlwapi

PathFindFileNameW PathFileExistsW

comctl32

ImageList_Create ImageList_ReplaceIcon ImageList_GetIconSize

Name

.text

Size

951KB

Virtual Size

950KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

195KB

Virtual Size

195KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

12KB

Virtual Size

82KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

30KB

Virtual Size

29KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

2.9MB

Virtual Size

2.9MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Rainbow_Six_Siege_Hack.exe

IMPHASH 87edbdfe442c3b8bd4ef4cf9789d4db7
SHA256 4b840844ce458265427c1d9f11917bd94b84561ae7add3252e56cfb8f567e305
MD5 183edf6dd1ef070eb3d386090354acaf
SHA1 832e66d84888acdab6232662f19c2b33bd4990e6
SHA512 9a21f13264d293579a15e48d999313d04966d9504b9578434594986f1a859e1f68a11bab56d6816db3abefc53ab109629de97229770ab8122cc1cfd7bc0373c8
SSDEEP 196608:DrBXt5LXCuz9eL5FUtX48nvhbTWxszcRNdBMKSrXegGW9nsAy:nFt5LXCuz9eL5FUtX48nvoaQYtnsAy
TLSH
T11B27290567F98194F1F797349AB28787DA76BC416B34C68F0250620E1E73AE0DE7A732
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x64 arch:x64

Password

9bazM42Q7NtCiSopRi

Digest

26:8b:86:36:a7:9e:47:9c:dc:4d:ab:e5:96:43:4e:ec:27:e2:19:c6:bb:ff:ef:12:1e:7d:7e:8f:ab:35:bf:fb

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=PANDORATV Co.\,Ltd,O=PANDORATV Co.\,Ltd,L=Seongnam-si,ST=Gyeonggi-do,C=KR

Chains

Aug 22, 2025

CN=PANDORATV Co.\,Ltd,O=PANDORATV Co.\,Ltd,L=Seongnam-si,ST=Gyeonggi-do,C=KR

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Subject

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:03:a1:b7:08:f8:54:ab:06:72:10:d9:04:47

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

CN=PANDORATV Co.\,Ltd,O=PANDORATV Co.\,Ltd,L=Seongnam-si,ST=Gyeonggi-do,C=KR

Serial Number

34:49:da:f0:f2:43:ff:72:72:9a:17:60

Issuer

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jun 13, 2025 - Jun 13, 2028

Subject

CN=Globalsign TSA for CodeSign1 - R6,O=GlobalSign nv-sa,C=BE

Serial Number

01:00:0b:20:05:b3:94:07:62:db:3e:36:79:94:9b:a9

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Apr 11, 2025 - Dec 10, 2034

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Dec 10, 2014 - Dec 10, 2034

Minor OS version

Major OS version

Entry point

8420256

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

D:\PandoraTV\Project\KMP\KMP64x\SRC\bin\KMPlayer_x64\KMPlayer64.pdb

dwmapi

DwmExtendFrameIntoClientArea

gdiplus

GdiplusShutdown GdipDisposeImage GdipFree GdipAlloc GdipCloneImage GdipCreateBitmapFromHBITMAP GdipCreateBitmapFromScan0 GdipGetImageEncoders GdipGetImageEncodersSize GdiplusStartup GdipDrawImageI GdipDeleteGraphics GdipGetImageGraphicsContext GdipBitmapUnlockBits GdipBitmapLockBits GdipGetImagePalette GdipGetImagePaletteSize GdipGetImageWidth GdipGetImageHeight GdipGetImagePixelFormat GdipCreateBitmapFromFile GdipCreateBitmapFromStream GdipSaveImageToStream GdipSaveImageToFile GdipDrawImageRectI GdipSetInterpolationMode GdipCreateFromHDC

uxtheme

EndBufferedPaint GetCurrentThemeName OpenThemeData IsThemeBackgroundPartiallyTransparent ord61 GetThemeSysColor CloseThemeData DrawThemeBackground DrawThemeText BeginBufferedPaint BufferedPaintSetAlpha GetWindowTheme GetThemeColor SetWindowTheme GetThemePartSize IsAppThemed DrawThemeParentBackground

winmm

waveOutGetVolume timeGetTime timeSetEvent timeKillEvent timeBeginPeriod timeEndPeriod PlaySoundW timeGetDevCaps mixerSetControlDetails waveOutSetVolume

kernel32

GetFileSize LockFile UnlockFile lstrcmpiW GetStringTypeExW GetThreadLocale lstrcmpA GetProfileIntW GetPrivateProfileIntW GetPrivateProfileStringW WritePrivateProfileStringW VerSetConditionMask VerifyVersionInfoW FindResourceExW TlsAlloc TlsGetValue TlsSetValue TlsFree GlobalReAlloc GlobalHandle LocalReAlloc GetSystemDefaultUILanguage GlobalFlags SetErrorMode GetWindowsDirectoryW SearchPathW WaitForSingleObjectEx RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter IsProcessorFeaturePresent InitializeSListHead GetSystemTimeAsFileTime GetStartupInfoW QueryActCtxW QueryDepthSList InterlockedPopEntrySList GetModuleHandleA GetThreadTimes CreateActCtxW UnregisterWait RegisterWaitForSingleObject SetThreadAffinityMask GetNumaHighestNodeNumber DeleteTimerQueueTimer ChangeTimerQueueTimer CreateTimerQueueTimer GetLogicalProcessorInformation SwitchToThread SignalObjectAndWait CreateTimerQueue WriteConsoleW SetEnvironmentVariableA FindFirstFileExW GetConsoleCP GetOEMCP IsValidCodePage ReadConsoleW EnumSystemLocalesW IsValidLocale HeapQueryInformation SetStdHandle ExitProcess GetCommandLineW GetCommandLineA FreeLibraryAndExitThread ExitThread RtlUnwindEx InterlockedFlushSList InterlockedPushEntrySList LCMapStringW SizeofResource LockResource LoadResource FindActCtxSectionStringW DeactivateActCtx UnregisterWaitEx ActivateActCtx GlobalFindAtomW GetModuleHandleExW EncodePointer GlobalSize OpenThread SetThreadContext GetThreadContext CreateToolhelp32Snapshot OutputDebugStringW GetStringTypeW TryEnterCriticalSection Thread32First Thread32Next HeapCreate LoadLibraryA GetTimeZoneInformation SuspendThread GetProcessAffinityMask GetShortPathNameW GetLongPathNameW RemoveDirectoryW CreateHardLinkW MoveFileW SetFileAttributesW GetSystemDirectoryW GetConsoleMode TzSpecificLocalTimeToSystemTime GetFileType GetFileTime SetFileTime FlushFileBuffers SetEndOfFile SetFilePointer IsDBCSLeadByte GetCPInfo CompareStringW FoldStringW AreFileApisANSI DebugBreak IsDBCSLeadByteEx LocalAlloc IsBadWritePtr IsBadReadPtr GlobalGetAtomNameW FormatMessageW FlushInstructionCache QueryPerformanceCounter QueryPerformanceFrequency lstrlenW SetThreadPriority GetCurrentThread GetThreadPriority VirtualFree VirtualAlloc ReleaseSemaphore CreateSemaphoreW WaitForMultipleObjects GetNumberFormatW SetLastError GetVersionExW GetFileAttributesW LoadLibraryExA VirtualQuery VirtualProtect GetSystemInfo OutputDebugStringA GetSystemTime SystemTimeToFileTime FileTimeToLocalFileTime LocalFileTimeToFileTime FormatMessageA FreeEnvironmentStringsW GetEnvironmentStringsW DuplicateHandle CreateThread GetVolumeInformationW RtlPcToFileHeader QueueUserWorkItem GetExitCodeThread FindResourceW GetProcAddress GetModuleHandleW MultiByteToWideChar GetTempFileNameW DecodePointer RaiseException UnmapViewOfFile MapViewOfFile CreateFileMappingW GetUserDefaultUILanguage ReadDirectoryChangesW GetOverlappedResult CancelIo GetACP GetTimeFormatW GetDateFormatW SystemTimeToTzSpecificLocalTime FileTimeToSystemTime GetFileAttributesExW GlobalDeleteAtom GlobalAddAtomW ResumeThread ReleaseMutex CreateMutexW SetCurrentDirectoryW HeapSetInformation SetDllDirectoryW DeviceIoControl CreateFileA WriteProcessMemory ReadProcessMemory IsDebuggerPresent CopyFileW SleepEx FreeResource lstrcmpW GetModuleFileNameW ResetEvent GetDriveTypeW GlobalAlloc GetLocaleInfoA LocalFree GetCurrentDirectoryW FindNextFileW GetDiskFreeSpaceExW FindClose FindFirstFileW SetSystemPowerState SetThreadExecutionState GetLocaleInfoW TerminateThread WriteFile GetTickCount SetEvent CreateEventW CreateDirectoryW GetLocalTime GetCurrentProcessId CreateFileW SetFilePointerEx GetFileSizeEx InitializeCriticalSection LoadLibraryExW GetCurrentThreadId AddVectoredExceptionHandler RemoveVectoredExceptionHandler GetProcessHeap HeapAlloc HeapFree HeapReAlloc HeapSize HeapDestroy WideCharToMultiByte GetUserDefaultLCID GetTempPathW MulDiv lstrcpyW EnterCriticalSection LeaveCriticalSection LoadLibraryW FreeLibrary GetLastError GetFullPathNameW GetCurrentProcess SetPriorityClass DeleteCriticalSection Sleep DeleteFileW CloseHandle TerminateProcess GetExitCodeProcess ReadFile PeekNamedPipe CreateProcessW GetStdHandle CreatePipe WaitForSingleObject InitializeCriticalSectionAndSpinCount GlobalFree GlobalUnlock GlobalLock

user32

IsDialogMessageW IsDlgButtonChecked CheckRadioButton CheckDlgButton SetDlgItemTextW GetDlgItemInt SetDlgItemInt IsWindowEnabled GetNextDlgTabItem WinHelpW SetScrollInfo GetLastActivePopup GetWindowTextLengthW GetWindowTextW ShowScrollBar GetScrollRange SetScrollRange GetScrollPos SetScrollPos ScrollWindow ValidateRect SetMenu SetFocus IsChild GetClassInfoExW GetClassInfoW GetMenuState GetMenuStringW GetIconInfo GetDCEx SetWindowRgn GetScrollInfo GetClassLongPtrW GetWindowRgn EndDeferWindowPos DeferWindowPos BeginDeferWindowPos InvertRect CreateDialogIndirectParamW EndDialog DialogBoxParamW CharUpperW CharLowerW CharToOemBuffW CharToOemA OemToCharBuffA CharLowerBuffW DestroyWindow RegisterClassW GetAsyncKeyState GetQueueStatus DestroyMenu TrackPopupMenu GetMessageW GetMessagePos UnregisterClassW SendNotifyMessageW EnumDisplayDevicesW SetWindowTextW GetMenu SetLayeredWindowAttributes GetDlgCtrlID TranslateMessage GrayStringW DrawTextExW TabbedTextOutW GetDlgItemTextW MoveWindow FindWindowExW CreateWindowExW IntersectRect UnregisterHotKey RegisterHotKey RegisterRawInputDevices SetMenuItemBitmaps GetRawInputDeviceList GetRawInputData SetWindowPlacement GetWindowPlacement ShowWindow AllowSetForegroundWindow DefWindowProcW LockWindowUpdate ChangeDisplaySettingsExA MsgWaitForMultipleObjectsEx SetClassLongPtrW GetDoubleClickTime TrackMouseEvent EnumDisplayMonitors RedrawWindow SetPropW GetWindowLongPtrW GetClassNameW GetWindowDC CallWindowProcW GetMenuInfo RemovePropW SetWindowLongPtrW GetPropW CallNextHookEx DispatchMessageW GetMessageTime GetWindowThreadProcessId SetWindowsHookExW UnhookWindowsHookEx EndPaint BeginPaint GetClipboardData GetPriorityClipboardFormat SetParent MonitorFromRect DestroyIcon FindWindowW MsgWaitForMultipleObjects DrawMenuBar CheckMenuItem AppendMenuW RemoveMenu CreatePopupMenu ChangeDisplaySettingsExW EnumDisplaySettingsW IsMenu MessageBeep CheckMenuRadioItem SetWindowLongW SetRectEmpty InsertMenuW DeleteMenu EnableMenuItem SetMenuInfo SetMenuItemInfoW GetMenuItemInfoW GetMenuItemID GetMenuItemCount LockWorkStation ExitWindowsEx SystemParametersInfoW GetMenuCheckMarkDimensions LoadBitmapW SendDlgItemMessageA WaitMessage MapDialogRect CharNextW IsClipboardFormatAvailable BringWindowToTop LoadAcceleratorsW TranslateAcceleratorW InsertMenuItemW GetMenuBarInfo UnpackDDElParam ReuseDDElParam GetSystemMenu SetWindowContextHelpId ShowOwnedPopups CopyImage RealChildWindowFromPoint CopyAcceleratorTableW InvalidateRgn GetNextDlgGroupItem GetActiveWindow GetTopWindow GetForegroundWindow MonitorFromPoint GetMonitorInfoW GetWindowLongW AdjustWindowRectEx GetMenuItemRect GetSubMenu SetForegroundWindow IsIconic PostThreadMessageW ChangeWindowMessageFilter EqualRect LoadMenuW RegisterWindowMessageW PostQuitMessage GetFocus GetAncestor DrawStateW DrawFocusRect DrawIconEx ToUnicodeEx GetKeyboardState NotifyWinEvent SetCursorPos GetMenuDefaultItem EnableScrollBar HideCaret CopyIcon DrawIcon SetMenuDefaultItem ModifyMenuW CharUpperBuffW UpdateLayeredWindow DefFrameProcW DefMDIChildProcW TranslateMDISysAccel GetUpdateRect SubtractRect CreateMenu GetComboBoxInfo DestroyCursor GetRawInputDeviceInfoW IsZoomed IsCharLowerW GetKeyboardLayout MapVirtualKeyExW GetKeyNameTextW MapVirtualKeyW RegisterClipboardFormatW GetKeyState GetSysColorBrush GetCursorPos DrawFrameControl OffsetRect WindowFromPoint FrameRect FillRect CopyRect MonitorFromWindow SetTimer KillTimer PeekMessageW UpdateWindow SetActiveWindow GetDesktopWindow SetRect UnionRect GetSysColor GetDlgItem LoadIconW GetSystemMetrics InflateRect GetWindowRect SetWindowPos DrawTextW IsRectEmpty DrawEdge ReleaseCapture SetCapture GetCapture ScreenToClient ClientToScreen SetCursor ReleaseDC GetDC InvalidateRect PtInRect MessageBoxW IsWindow PostMessageW MapWindowPoints GetClientRect IsWindowVisible GetWindow LoadCursorW wsprintfW CreateAcceleratorTableW DestroyAcceleratorTable CloseClipboard SetClipboardData EmptyClipboard GetParent OpenClipboard LoadImageW SendMessageW EnableWindow OemToCharA

gdi32

CreatePatternBrush GetClipBox GetObjectType IntersectClipRect RestoreDC SaveDC SelectPalette SetLayout GetLayout SetPolyFillMode SetROP2 SetTextAlign SetWindowExtEx SetWindowOrgEx OffsetWindowOrgEx ScaleViewportExtEx ScaleWindowExtEx AddFontResourceW GetTextCharsetInfo GetRgnBox CreateEllipticRgn Ellipse Polygon Polyline CreateRoundRectRgn CreatePalette GetNearestPaletteIndex GetPaletteEntries GetSystemPaletteEntries RealizePalette SetPixel RoundRect ExtFloodFill SetPaletteEntries GetBoundsRect PtInRegion GetViewportOrgEx CreateHatchBrush SetPixelV GetTextFaceW GetICMProfileW GetCurrentObject TranslateCharsetInfo EnumFontFamiliesExW AddFontMemResourceEx CreateFontW RemoveFontMemResourceEx CombineRgn CreateRectRgn EnumFontFamiliesW GetTextMetricsW GetTextColor ExtSelectClipRgn CreateBitmapIndirect Escape ExtTextOutW TextOutW RectVisible PtVisible GetBkColor DPtoLP GetViewportExtEx GetWindowExtEx GetMapMode LPtoDP SetViewportExtEx SetViewportOrgEx CreateDCW ExcludeClipRect SetBkColor FrameRgn CreateRectRgnIndirect CreateCompatibleBitmap CreateBitmap LineTo MoveToEx CreateSolidBrush GetDeviceCaps DeleteObject GetObjectW CreateCompatibleDC StretchBlt BitBlt GetStockObject CreateFontIndirectW SelectObject CreateDIBSection CopyMetaFileW PatBlt CreatePolygonRgn GetPixel GetWindowOrgEx FillRgn SetRectRgn OffsetRgn GdiFlush OffsetViewportOrgEx SelectClipRgn AbortPath GetPath EndPath CloseFigure BeginPath SetMapMode DeleteDC SetStretchBltMode Rectangle SetBkMode SetTextColor GetTextExtentPoint32W CreateDIBitmap SetDIBColorTable CreatePen

msimg32

GradientFill AlphaBlend TransparentBlt

winspool.drv

OpenPrinterW ClosePrinter DocumentPropertiesW

advapi32

RegSetValueA RegOpenKeyExW RegQueryValueExW RegCreateKeyExA RegCreateKeyExW RegDeleteKeyA RegDeleteKeyW RegEnumKeyW SetFileSecurityW FreeSid CheckTokenMembership AllocateAndInitializeSid AdjustTokenPrivileges LookupPrivilegeValueW OpenProcessToken CryptDecrypt CryptDestroyKey CryptEncrypt CryptDeriveKey CryptReleaseContext CryptDestroyHash CryptGetHashParam CryptHashData CryptCreateHash CryptAcquireContextW RegCloseKey RegSetValueW RegQueryValueW RegQueryValueA RegOpenKeyW RegOpenKeyA RegCreateKeyW RegCreateKeyA RegFlushKey RegSetValueExW RegSetValueExA RegQueryValueExA RegQueryInfoKeyW RegQueryInfoKeyA RegOpenKeyExA RegEnumValueW RegEnumValueA RegEnumKeyExW RegEnumKeyExA RegDeleteValueW RegDeleteValueA

shell32

ShellExecuteW ExtractIconW SHChangeNotify DragQueryFileW DragFinish DragAcceptFiles Shell_NotifyIconW SHBrowseForFolderW SHGetPathFromIDListW SHAddToRecentDocs ExtractIconExW SHGetFolderPathW SHParseDisplayName SHOpenFolderAndSelectItems SHFileOperationW SHGetSpecialFolderLocation SHGetFileInfoW SHGetDesktopFolder SHAppBarMessage ShellExecuteExW

comctl32

ImageList_Remove ImageList_GetImageCount ImageList_ReplaceIcon ImageList_GetIcon FlatSB_ShowScrollBar FlatSB_EnableScrollBar InitializeFlatSB ImageList_AddMasked ImageList_Draw ImageList_Add ImageList_EndDrag ImageList_DragLeave ImageList_DragShowNolock ImageList_DragMove ImageList_DragEnter ImageList_BeginDrag _TrackMouseEvent ImageList_GetImageInfo

shlwapi

PathStripToRootW StrFormatByteSizeW PathSkipRootW PathStripPathW PathFindExtensionW PathFileExistsW PathCombineW PathRenameExtensionW PathRemoveFileSpecW PathRemoveExtensionW PathMakePrettyW PathIsDirectoryW PathAddExtensionW PathAddBackslashW StrCmpLogicalW SHCopyKeyW StrRetToStrW PathRelativePathToW PathCanonicalizeW PathAppendW PathRemoveBackslashW PathIsRelativeW PathIsPrefixW PathFindFileNameW PathIsUNCW UrlUnescapeW PathIsURLW StrFormatKBSizeW

ole32

CreateStreamOnHGlobal OleLoadFromStream OleSaveToStream OleFlushClipboard OleIsCurrentClipboard OleInitialize OleUninitialize StringFromGUID2 DoDragDrop OleLockRunning CoUninitialize CoInitialize CoWaitForMultipleHandles CreateItemMoniker GetRunningObjectTable CLSIDFromString MkParseDisplayName CreateBindCtx PropVariantClear OleDestroyMenuDescriptor CoTaskMemAlloc CoTaskMemFree OleTranslateAccelerator IsAccelerator CoRevokeClassObject CoRegisterMessageFilter StringFromCLSID CreateILockBytesOnHGlobal StgOpenStorageOnILockBytes StgCreateDocfileOnILockBytes CoGetClassObject CoDisconnectObject CLSIDFromProgID CoCreateGuid OleGetClipboard RevokeDragDrop RegisterDragDrop CoLockObjectExternal ReleaseStgMedium OleDuplicateData CoFreeUnusedLibraries CoInitializeEx OleCreateMenuDescriptor CoCreateInstance

oleaut32

VariantTimeToSystemTime VariantCopy SafeArrayDestroy LoadTypeLi OleCreateFontIndirect SysAllocStringLen SysStringByteLen SysAllocStringByteLen OleCreatePropertyFrame VariantChangeType SafeArrayUnaccessData SafeArrayAccessData VariantClear VariantInit SysAllocString VarBstrCmp SysFreeString VarBstrFromDate SystemTimeToVariantTime SysStringLen

oledlg

OleUIBusyW

ws2_32

WSACleanup WSASetLastError WSAGetLastError WSAAsyncSelect select WSAStartup accept listen shutdown recvfrom recv ntohs gethostbyname socket sendto bind send inet_ntoa inet_addr htons htonl getsockname getpeername connect closesocket

wininet

HttpQueryInfoW InternetSetStatusCallbackW InternetQueryDataAvailable InternetQueryOptionW InternetSetOptionW InternetConnectW HttpOpenRequestW HttpSendRequestW InternetErrorDlg InternetReadFileExW InternetCrackUrlW InternetSetFilePointer HttpEndRequestW HttpSendRequestExW HttpAddRequestHeadersW InternetGetLastResponseInfoW InternetWriteFile InternetGetConnectedState InternetOpenW InternetCloseHandle InternetReadFile InternetOpenUrlW InternetCanonicalizeUrlW

oleacc

LresultFromObject CreateStdAccessibleObject AccessibleObjectFromWindow

imm32

ImmReleaseContext ImmGetContext ImmGetOpenStatus

version

GetFileVersionInfoW VerQueryValueW GetFileVersionInfoSizeW

Name

.text

Size

8.8MB

Virtual Size

8.8MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

2.9MB

Virtual Size

2.9MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

123KB

Virtual Size

495KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

356KB

Virtual Size

356KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.gfids

Size

113KB

Virtual Size

112KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.giats

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

_RDATA

Size

5KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

7.6MB

Virtual Size

7.6MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

134KB

Virtual Size

134KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

generic

count=34, id=241, version=40116,

count=211, id=243, version=40116,

count=59, id=242, version=40116,

count=1, id=135, version=30729,

count=2, id=261, version=23013,

count=43, id=260, version=24123,

count=15, id=259, version=24123,

count=1, id=109, productName=VS2005 build 50727, version=50727,

count=3, productName=Unmarked objects (old),

count=1, id=136, version=30729,

count=1, id=173, version=30319,

count=2, id=132, productName=VS2008 SP1 build 30729, version=30729,

count=14, id=131, productName=VS2008 SP1 build 30729, version=30729,

count=45, id=147, productName=VS2008 SP1 build 30729, version=30729,

count=1115, id=1, productName=Unmarked objects,

count=452, id=261, version=24123,

count=759, id=265, version=24210,

count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,

count=2, id=151,

count=1, id=258, productName=VS2015 Update 3 [14.0] build 24210, version=24210,