Static | ZeroBOX

PE Compile Time

2009-07-14 09:33:54

PDB Path

osk.pdb

PE Imphash

415314d0031f15135fbc02f2ca18bb2f

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00001000 0x0002f95a 0x0002fa00 6.25217453017
.data 0x00031000 0x00002910 0x00001400 2.90076948046
.pdata 0x00034000 0x00001c80 0x00001e00 5.24642357404
.rsrc 0x00036000 0x00075000 0x00074600 4.86139641172
.reloc 0x000ab000 0x00000f82 0x00001000 3.77274771239

Resources

Name Offset Size Language Sub-language File type
MUI 0x000367e4 0x00000118 LANG_ENGLISH SUBLANG_ENGLISH_US data
UIFILE 0x000368fc 0x00000181 LANG_ENGLISH SUBLANG_ENGLISH_US ASCII text, with CRLF line terminators
WAVE 0x0005f294 0x000174b8 LANG_ENGLISH SUBLANG_ENGLISH_US RIFF (little-endian) data, WAVE audio, Microsoft PCM, 16 bit, stereo 44100 Hz
WAVE 0x0005f294 0x000174b8 LANG_ENGLISH SUBLANG_ENGLISH_US RIFF (little-endian) data, WAVE audio, Microsoft PCM, 16 bit, stereo 44100 Hz
WAVE 0x0005f294 0x000174b8 LANG_ENGLISH SUBLANG_ENGLISH_US RIFF (little-endian) data, WAVE audio, Microsoft PCM, 16 bit, stereo 44100 Hz
WAVE 0x0005f294 0x000174b8 LANG_ENGLISH SUBLANG_ENGLISH_US RIFF (little-endian) data, WAVE audio, Microsoft PCM, 16 bit, stereo 44100 Hz
WEVT_TEMPLATE 0x0007674c 0x000004b2 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_BITMAP 0x00076c00 0x00000e38 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000a9fbc 0x00000468 LANG_ENGLISH SUBLANG_ENGLISH_US GLS_BINARY_LSB_FIRST
RT_ICON 0x000a9fbc 0x00000468 LANG_ENGLISH SUBLANG_ENGLISH_US GLS_BINARY_LSB_FIRST
RT_ICON 0x000a9fbc 0x00000468 LANG_ENGLISH SUBLANG_ENGLISH_US GLS_BINARY_LSB_FIRST
RT_ICON 0x000a9fbc 0x00000468 LANG_ENGLISH SUBLANG_ENGLISH_US GLS_BINARY_LSB_FIRST
RT_ICON 0x000a9fbc 0x00000468 LANG_ENGLISH SUBLANG_ENGLISH_US GLS_BINARY_LSB_FIRST
RT_ICON 0x000a9fbc 0x00000468 LANG_ENGLISH SUBLANG_ENGLISH_US GLS_BINARY_LSB_FIRST
RT_ICON 0x000a9fbc 0x00000468 LANG_ENGLISH SUBLANG_ENGLISH_US GLS_BINARY_LSB_FIRST
RT_ICON 0x000a9fbc 0x00000468 LANG_ENGLISH SUBLANG_ENGLISH_US GLS_BINARY_LSB_FIRST
RT_ICON 0x000a9fbc 0x00000468 LANG_ENGLISH SUBLANG_ENGLISH_US GLS_BINARY_LSB_FIRST
RT_ICON 0x000a9fbc 0x00000468 LANG_ENGLISH SUBLANG_ENGLISH_US GLS_BINARY_LSB_FIRST
RT_ICON 0x000a9fbc 0x00000468 LANG_ENGLISH SUBLANG_ENGLISH_US GLS_BINARY_LSB_FIRST
RT_ICON 0x000a9fbc 0x00000468 LANG_ENGLISH SUBLANG_ENGLISH_US GLS_BINARY_LSB_FIRST
RT_ICON 0x000a9fbc 0x00000468 LANG_ENGLISH SUBLANG_ENGLISH_US GLS_BINARY_LSB_FIRST
RT_ICON 0x000a9fbc 0x00000468 LANG_ENGLISH SUBLANG_ENGLISH_US GLS_BINARY_LSB_FIRST
RT_ICON 0x000a9fbc 0x00000468 LANG_ENGLISH SUBLANG_ENGLISH_US GLS_BINARY_LSB_FIRST
RT_ICON 0x000a9fbc 0x00000468 LANG_ENGLISH SUBLANG_ENGLISH_US GLS_BINARY_LSB_FIRST
RT_ICON 0x000a9fbc 0x00000468 LANG_ENGLISH SUBLANG_ENGLISH_US GLS_BINARY_LSB_FIRST
RT_ICON 0x000a9fbc 0x00000468 LANG_ENGLISH SUBLANG_ENGLISH_US GLS_BINARY_LSB_FIRST
RT_ICON 0x000a9fbc 0x00000468 LANG_ENGLISH SUBLANG_ENGLISH_US GLS_BINARY_LSB_FIRST
RT_ICON 0x000a9fbc 0x00000468 LANG_ENGLISH SUBLANG_ENGLISH_US GLS_BINARY_LSB_FIRST
RT_ICON 0x000a9fbc 0x00000468 LANG_ENGLISH SUBLANG_ENGLISH_US GLS_BINARY_LSB_FIRST
RT_ICON 0x000a9fbc 0x00000468 LANG_ENGLISH SUBLANG_ENGLISH_US GLS_BINARY_LSB_FIRST
RT_ICON 0x000a9fbc 0x00000468 LANG_ENGLISH SUBLANG_ENGLISH_US GLS_BINARY_LSB_FIRST
RT_ICON 0x000a9fbc 0x00000468 LANG_ENGLISH SUBLANG_ENGLISH_US GLS_BINARY_LSB_FIRST
RT_ICON 0x000a9fbc 0x00000468 LANG_ENGLISH SUBLANG_ENGLISH_US GLS_BINARY_LSB_FIRST
RT_ICON 0x000a9fbc 0x00000468 LANG_ENGLISH SUBLANG_ENGLISH_US GLS_BINARY_LSB_FIRST
RT_ICON 0x000a9fbc 0x00000468 LANG_ENGLISH SUBLANG_ENGLISH_US GLS_BINARY_LSB_FIRST
RT_ICON 0x000a9fbc 0x00000468 LANG_ENGLISH SUBLANG_ENGLISH_US GLS_BINARY_LSB_FIRST
RT_GROUP_ICON 0x000aa424 0x0000018e LANG_ENGLISH SUBLANG_ENGLISH_US data

Imports

Library ADVAPI32.dll:
0x100001000 EventWrite
0x100001008 GetTraceEnableFlags
0x100001010 EventUnregister
0x100001018 GetTraceLoggerHandle
0x100001020 UnregisterTraceGuids
0x100001028 EventRegister
0x100001030 GetTraceEnableLevel
0x100001038 RegisterTraceGuidsW
0x100001040 TraceMessage
0x100001048 RegCreateKeyExW
0x100001050 RegCloseKey
0x100001058 RegSetValueExW
0x100001060 RegQueryValueExW
0x100001068 RegOpenKeyExW
0x100001070 RegDeleteValueW
0x100001078 RegGetValueW
0x100001080 AllocateAndInitializeSid
0x100001088 FreeSid
0x100001090 CheckTokenMembership
Library KERNEL32.dll:
0x100001188 FreeLibrary
0x100001190 WaitForSingleObject
0x100001198 SetEvent
0x1000011a0 LoadLibraryW
0x1000011a8 Sleep
0x1000011b0 GetProcAddress
0x1000011b8 CreateEventW
0x1000011c0 CreateThread
0x1000011c8 GetSystemDefaultLangID
0x1000011d0 GetStringTypeExW
0x1000011d8 GetCurrentProcess
0x1000011e0 IsProcessInJob
0x1000011e8 LoadLibraryExA
0x1000011f0 DelayLoadFailureHook
0x1000011f8 GlobalAddAtomW
0x100001200 GetModuleFileNameW
0x100001208 GlobalDeleteAtom
0x100001220 HeapSize
0x100001228 HeapReAlloc
0x100001230 HeapDestroy
0x100001238 GetVersionExA
0x100001240 GetCurrentProcessId
0x100001248 GetLastError
0x100001250 LockResource
0x100001258 LocaleNameToLCID
0x100001260 ProcessIdToSessionId
0x100001268 RaiseException
0x100001270 lstrlenW
0x100001280 MulDiv
0x100001288 GetLocaleInfoEx
0x100001290 ResolveLocaleName
0x100001298 GetTickCount
0x1000012a0 LoadLibraryExW
0x1000012a8 LoadResource
0x1000012b0 FindResourceExW
0x1000012b8 LCIDToLocaleName
0x1000012c0 FreeResource
0x1000012c8 GetProcessHeap
0x1000012d0 HeapAlloc
0x1000012d8 GetTickCount64
0x1000012e0 CloseHandle
0x1000012f0 HeapSetInformation
0x1000012f8 GlobalAlloc
0x100001300 GlobalLock
0x100001308 GlobalUnlock
0x100001310 GlobalFree
0x100001318 GetAtomNameW
0x100001320 DeleteCriticalSection
0x100001330 EncodePointer
0x100001338 DecodePointer
0x100001340 GetUserGeoID
0x100001348 DebugBreak
0x100001350 EnterCriticalSection
0x100001358 LeaveCriticalSection
0x100001360 CompareStringOrdinal
0x100001368 GetLocaleInfoW
0x100001370 HeapFree
0x100001378 FindResourceW
0x100001380 SizeofResource
0x100001388 DeactivateActCtx
0x100001390 ActivateActCtx
0x100001398 ReleaseActCtx
0x1000013a0 CreateActCtxW
0x1000013a8 UnhandledExceptionFilter
0x1000013b0 TerminateProcess
0x1000013b8 GetSystemTimeAsFileTime
0x1000013c0 GetCurrentThreadId
0x1000013c8 QueryPerformanceCounter
0x1000013d0 GetModuleHandleW
0x1000013e0 GetStartupInfoW
0x1000013e8 CreateMutexW
Library GDI32.dll:
0x1000010b0 DeleteDC
0x1000010b8 TextOutW
0x1000010c0 DeleteObject
0x1000010c8 SelectObject
0x1000010d0 CreateFontIndirectW
0x1000010d8 PatBlt
0x1000010e0 SetBkMode
0x1000010e8 SetTextAlign
0x1000010f0 SetTextColor
0x1000010f8 BitBlt
0x100001100 RestoreDC
0x100001108 SelectClipRgn
0x100001110 SaveDC
0x100001118 OffsetRgn
0x100001120 CreateRoundRectRgn
0x100001128 SetStretchBltMode
0x100001130 GetStretchBltMode
0x100001138 SetPixel
0x100001140 CombineRgn
0x100001148 CreateDIBSection
0x100001150 CreateCompatibleDC
0x100001158 StretchBlt
0x100001160 GetObjectW
0x100001168 GetStockObject
0x100001170 GetDeviceCaps
0x100001178 GdiAlphaBlend
Library USER32.dll:
0x1000014a8 UnregisterClassA
0x1000014b0 RedrawWindow
0x1000014b8 OffsetRect
0x1000014c0 SetRectEmpty
0x1000014c8 IsRectEmpty
0x1000014d0 InvalidateRect
0x1000014d8 CharUpperBuffW
0x1000014e0 IsIconic
0x1000014e8 SetForegroundWindow
0x1000014f0 FindWindowW
0x1000014f8 TranslateMessage
0x100001500 IsDialogMessageW
0x100001508 SetWindowPos
0x100001510 PeekMessageW
0x100001518 LoadStringW
0x100001520 DispatchMessageW
0x100001528 SystemParametersInfoW
0x100001530 KillTimer
0x100001538 LoadImageW
0x100001540 ScreenToClient
0x100001548 SetTimer
0x100001550 GetWindowThreadProcessId
0x100001558 GetPropW
0x100001560 MapWindowPoints
0x100001568 UnhookWindowsHookEx
0x100001570 SetWindowsHookExW
0x100001578 GetSysColor
0x100001580 MapVirtualKeyExW
0x100001588 ReleaseDC
0x100001590 GetClassNameW
0x100001598 GetWindowLongW
0x1000015a0 GetKeyboardLayout
0x1000015a8 SetWinEventHook
0x1000015b0 GetCursorInfo
0x1000015b8 GetCursorPos
0x1000015c0 CreateWindowExW
0x1000015c8 SendMessageW
0x1000015d0 DestroyWindow
0x1000015d8 ShowWindow
0x1000015e0 GetMessageW
0x1000015e8 GetWindowMinimizeRect
0x1000015f0 CreateDialogParamW
0x1000015f8 GetGUIThreadInfo
0x100001600 GetForegroundWindow
0x100001608 GetKeyState
0x100001610 PostQuitMessage
0x100001620 RegisterClassW
0x100001628 DefWindowProcW
0x100001630 DialogBoxParamW
0x100001638 GetWindowLongPtrW
0x100001640 SetFocus
0x100001648 GetDlgItem
0x100001650 EndDialog
0x100001658 SendDlgItemMessageW
0x100001660 CheckDlgButton
0x100001668 MessageBoxW
0x100001670 SetWindowLongPtrW
0x100001678 SetDlgItemTextW
0x100001680 EnableWindow
0x100001688 SetWindowPlacement
0x100001690 RemovePropW
0x100001698 GetWindowRect
0x1000016a0 MonitorFromPoint
0x1000016a8 SendInput
0x1000016b0 GetMessageExtraInfo
0x1000016b8 GetDoubleClickTime
0x1000016c0 SetPropW
0x1000016c8 LoadIconW
0x1000016d0 SetClassLongPtrW
0x1000016d8 IsWindow
0x1000016e0 AdjustWindowRectEx
0x1000016e8 GetSystemMetrics
0x1000016f0 AllowSetForegroundWindow
0x1000016f8 PostMessageW
0x100001700 GetParent
0x100001708 LoadCursorW
0x100001710 CallNextHookEx
0x100001718 UnhookWinEvent
0x100001720 GetClientRect
0x100001728 PtInRect
0x100001730 GetDC
0x100001738 WindowFromPhysicalPoint
Library msvcrt.dll:
0x100001830 __CxxFrameHandler3
0x100001838 memcmp
0x100001840 _wtoi
0x100001848 _itow
0x100001850 wcstok_s
0x100001858 wcstol
0x100001860 memcpy
0x100001868 floorf
0x100001870 _wcsicmp
0x100001878 _purecall
0x100001880 malloc
0x100001888 _CxxThrowException
0x100001890 memset
0x100001898 ?terminate@@YAXXZ
0x1000018a0 _unlock
0x1000018a8 __dllonexit
0x1000018b0 _lock
0x1000018b8 _onexit
0x1000018c0 ??3@YAXPEAX@Z
0x1000018c8 wcstoul
0x1000018d0 ??_V@YAXPEAX@Z
0x1000018d8 _vsnwprintf
0x1000018e0 memcpy_s
0x1000018e8 ??2@YAPEAX_K@Z
0x1000018f0 memmove_s
0x1000018f8 ??_U@YAPEAX_K@Z
0x100001900 free
0x100001908 calloc
0x100001910 wcsstr
0x100001918 __wgetmainargs
0x100001920 __C_specific_handler
0x100001928 _XcptFilter
0x100001930 __set_app_type
0x100001938 _fmode
0x100001940 _commode
0x100001948 _exit
0x100001950 _cexit
0x100001958 __setusermatherr
0x100001960 _amsg_exit
0x100001968 _initterm
0x100001970 _wcmdln
0x100001978 exit
Library dwmapi.dll:
0x100001770 DwmIsCompositionEnabled
0x100001778 DwmSetWindowAttribute
Library gdiplus.dll:
0x100001790 GdipDisposeImage
0x100001798 GdipFillRectangleI
0x1000017a0 GdipDrawLineI
0x1000017a8 GdiplusStartup
0x1000017b0 GdiplusShutdown
0x1000017b8 GdipDrawImageRectI
0x1000017c0 GdipCloneImage
0x1000017c8 GdipCreateHatchBrush
0x1000017d0 GdipCloneBrush
0x1000017d8 GdipCreateFromHDC
0x1000017e0 GdipSetPenColor
0x1000017e8 GdipCreateSolidFill
0x1000017f0 GdipDeleteGraphics
0x1000017f8 GdipDeletePen
0x100001800 GdipCreatePen1
0x100001808 GdipSetSolidFillColor
0x100001810 GdipDeleteBrush
0x100001818 GdipAlloc
0x100001820 GdipFree
Library ntdll.dll:
0x100001988 WinSqmIsOptedIn
0x100001990 WinSqmSetDWORD
0x100001998 RtlVirtualUnwind
0x1000019a0 RtlLookupFunctionEntry
0x1000019a8 RtlCaptureContext
0x1000019b0 WinSqmIncrementDWORD
Library ole32.dll:
0x1000019c0 CoTaskMemFree
0x1000019c8 CoTaskMemAlloc
0x1000019d0 CreateStreamOnHGlobal
0x1000019d8 CoCreateInstance
0x1000019e0 CoUninitialize
0x1000019e8 CoInitialize
Library OLEACC.dll:
Library SHLWAPI.dll:
0x100001498 PathFindFileNameW
Library WMsgAPI.dll:
0x100001758 WmsgSendMessage
Library DUser.dll:
0x1000010a0 InvalidateGadget
Library UxTheme.dll:
0x100001748 IsThemeActive

!This program cannot be run in DOS mode.
`.data
.pdata
@.reloc
ADVAPI32.dll
ntdll.DLL
KERNEL32.dll
GDI32.dll
USER32.dll
msvcrt.dll
MSSWCH.dll
dwmapi.dll
gdiplus.dll
ole32.dll
OLEACC.dll
OLEAUT32.dll
SHLWAPI.dll
WMsgAPI.dll
DUser.dll
UxTheme.dll
YNWINMM.dll
DUI70.dll
Delete
NoRemove
ForceRemove
305.1i
@RSDSB
osk.pdb
t$ WATAUAVAWH
D9t$ht
A_A^A]A\_
\$0< A
UVWATAUH
`A]A\_^]
L$ SUVWH
x ATAUAVH
A^A]A\
x ATAUAVH
A^A]A\
WATAUH
WATAUH
A]A\_
\$ UVWATAUH
A]A\_^]
|E9t$8
UVWATAUAVAWH
d$8D+d$0D
PA_A^A]A\_^]
H9\$Xty
H9D$(u
WATAUAVAWH
0A_A^A]A\_
@SUVWATAUAVH
A^A]A\_^][
tHH9\$HuAH
9D$`tYH;
tKH9kxtEH
H9Y8tfH!X
WATAUH
D$,+L$ +D$$
0A]A\_
SUVWATAUAVAWH
HA_A^A]A\_^][
fD;a^t
L9c0t&H
D9d$pH
p WATAUH
+D$,D3
x3;k`t
0A]A\_
D$$+D$,3
xk;sht&;sTr!D
;{lt;;{Xr6D
b9{dt]@:
09{`t+@:
D$8+D$03
t$ WATAUH
A]A\_
UVWATAUH
u=Hck D
~-H;s s
`A]A\_^]
|$ ATH
p WATAUH
l$@D+l$tA
D$XD+\$T+D$PH
x ATAUAVH
A^A]A\H
KxH9s8uAH
t,9p(~'A
@8t$@u
@8t$@u
K@H;K(u
C|@8|$@u
{pH9C@u
H;K u"H
I(H9K@u
\$ UVWH
WATAVH
WATAUH
H9{(tgI
@SUVWH
8_^][H
WATAUAVAWH
A_A^A]A\_
x ATAUAVH
A^A]A\
9 wsf9
LcA<E3
u*9Q<|%
WATAUH
A]A\_
tE8\$Pu
@SUVWATAUAVH
A^A]A\_^][
UVWATAUAVAWH
`A_A^A]A\_^]
\$ UVWATAUAVAWH
A_A^A]A\_^]
WATAUAVAWH
0A_A^A]A\_
WATAUH
A]A\_
I90tPH
x ATAUAVH
\$(!|$ M
0A^A]A\
UVWATAUAVAWH
@A_A^A]A\_^]
@WATAUH
@A]A\_
WATAUH
0A]A\_
WATAUH
0A]A\_
WATAUH
0A]A\_
@VWATH
!t$P95V
UVWATAUAVAWH
H!|$8H
@A_A^A]A\_^]
VWATAUAVH
H9\$Pu
A^A]A\_^
WATAUH
A]A\_
WATAUH
WATAUH
A]A\_
{@H;S(s
h VWATH
9|$Hv3D
fA9(t.L
UVWATAUAVAWH
`A_A^A]A\_^]H
l$ VWATH
@WATAUH
@A]A\_
UVWATAUAVAWH
A_A^A]A\_^]
{@H;S(s
SVWATAUAVAWH
pA_A^A]A\_^[
WATAUAVAWH
A_A^A]A\_
UVWATAUAVAWH
t$hHcD$dH
T$P+T$\H
t$hHcL$dH;
A_A^A]A\_^]
WATAUAVAWH
A_A^A]A\_
t$ WATAUAVAWH
A_A^A]A\_
UVWATAUH
A]A\_^]
UVWATAUAVAWH
9D$<uBE;
A_A^A]A\_^]
!|$hH!|$`L
WATAUH
@A]A\_
VWATAUAVH
A^A]A\_^
@VWATH
UVWATAUAVAWH
t$$H!p
`A_A^A]A\_^]
L$ SUVWATAUAVAWH
HA_A^A]A\_^][
LcT$PIc
HcL$XM
WATAUAVAWH
Lcd$pMc
A_A^A]A\_
UVWATAUAVAWH
0A_A^A]A\_^]
HcL$XHcT$`H
HcL$hH
WATAUH
;D$`|j;D$h}dH
A]A\_
x ATAUAVH
D9,7~*E3
A^A]A\
WATAUAVAWH
A_A^A]A\_
x ATAUAVH
@A^A]A\
@SUVWATAUAVAWH
XA_A^A]A\_^][
@SUVATH
XA\^][
WATAUAVAWH
0A_A^A]A\_
@SUVWATAUAVAWH
A_A^A]A\_^][
SUVWATAUAVAWH
8A_A^A]A\_^][
UVWATAUAVAWH
`A_A^A]A\_^]
H!|$@H
WATAUH
A]A\_
u'H!t$HH
x ATAUAVH
A^A]A\
UVWATAUH
|VH9]8t
A]A\_^]
@WATAUH
@A]A\_
VWATAUAVH
A^A]A\_^
{@H;S(s
WATAUH
@A]A\_
@SUVWATAUAVAWH
HcT$HH
|$`L;c t:H
D8c*t!
d$pD9%
A_A^A]A\_^][
L$ VWATAUAVAW
l$HA_A^A]A\_^
UVWATAUAVAWH
D8l$`uH
A_A^A]A\_^]
WATAUH
A]A\_
D9T$(t=
D9T$(t
WATAUH
@A]A\_
@VWATH
@WATAUH
@A]A\_
WATAUH
WATAUH
A]A\_
UVWATAUAVAWH
A_A^A]A\_^]
WATAVH
0A^A\_
t$ WATAUAVAWH
A_A^A]A\_
@WATAUH
AVAUWVSH
[^_A]A^
A^A]A\_^
WATAUH
@VWATH
t$ WATAUAVAWH
A_A^A]A\_
WATAUAVAWH
A_A^A]A\_
@VWATH
@WATAUH
@A]A\_
WATAUH
WATAUAVAWH
A_A^A]A\_
{ ATAUAVH
A^A]A\
x ATAUAVH
A^A]A\
l$ VWATAUAWH
L!l$XM
t*H!|$`H
A_A]A\_^
WATAVH
0A^A\_
x ATAUAWH
"H9y8u
A_A]A\
WATAVH
WATAUH
@WATAUH
@A]A\_
@VWATH
WATAUH
9y@~(3
x`;{@}[H
x:;^Xu
SVWATH
8A\_^[
WATAUH
0A]A\_
PlaySoundW
InitThread
UnInitThread
?EndDefer@Element@DirectUI@@QEAAXK@Z
UnInitProcessPriv
InitProcessPriv
?Host@NativeHWNDHost@DirectUI@@QEAAXPEAVElement@2@@Z
?CreateElement@DUIXmlParser@DirectUI@@QEAAJPEBGPEAVElement@2@1PEAKPEAPEAV32@@Z
?SetXMLFromResource@DUIXmlParser@DirectUI@@QEAAJIPEAUHINSTANCE__@@0@Z
?Destroy@DUIXmlParser@DirectUI@@QEAAXXZ
?Create@DUIXmlParser@DirectUI@@SAJPEAPEAV12@P6APEAVValue@2@PEBGPEAX@Z2P6AX11H2@Z2@Z
?Create@FillLayout@DirectUI@@SAJPEAPEAVLayout@2@@Z
?HandleUiaEventListener@Element@DirectUI@@UEAAXPEAUEvent@2@@Z
?HandleUiaPropertyChangingListener@Element@DirectUI@@UEAAXPEBUPropertyInfo@2@@Z
?HandleUiaPropertyListener@Element@DirectUI@@UEAAXPEBUPropertyInfo@2@HPEAVValue@2@1@Z
?HandleUiaDestroyListener@Element@DirectUI@@UEAAXXZ
?GetElementProviderImpl@Element@DirectUI@@UEAAJPEAVInvokeHelper@2@PEAPEAVElementProvider@2@@Z
?DefaultAction@Element@DirectUI@@UEAAJXZ
?DoubleBuffered@Element@DirectUI@@QEAAX_N@Z
?OnUnHosted@Element@DirectUI@@MEAAXPEAV12@@Z
?OnHosted@Element@DirectUI@@MEAAXPEAV12@@Z
?_SelfLayoutUpdateDesiredSize@Element@DirectUI@@MEAA?AUtagSIZE@@HHPEAVSurface@2@@Z
?_SelfLayoutDoLayout@Element@DirectUI@@MEAAXHH@Z
?MessageCallback@Element@DirectUI@@UEAAIPEAUtagGMSG@@@Z
?SetKeyFocus@Element@DirectUI@@UEAAXXZ
?EnsureVisible@Element@DirectUI@@UEAA_NHHHH@Z
?GetAdjacent@Element@DirectUI@@UEAAPEAV12@PEAV12@HPEBUNavReference@2@K@Z
?Remove@Element@DirectUI@@UEAAJPEAPEAV12@I@Z
?Insert@Element@DirectUI@@UEAAJPEAPEAV12@II@Z
?Add@Element@DirectUI@@UEAAJPEAPEAV12@I@Z
?GetContentSize@Element@DirectUI@@UEAA?AUtagSIZE@@HHPEAVSurface@2@@Z
?Paint@Element@DirectUI@@UEAAXPEAUHDC__@@PEBUtagRECT@@1PEAU4@2@Z
?OnMouseFocusMoved@Element@DirectUI@@UEAAXPEAV12@0@Z
?OnKeyFocusMoved@Element@DirectUI@@UEAAXPEAV12@0@Z
?OnPropertyChanged@Element@DirectUI@@UEAAXPEAUPropertyInfo@2@HPEAVValue@2@1@Z
?OnPropertyChanging@Element@DirectUI@@UEAA_NPEAUPropertyInfo@2@HPEAVValue@2@1@Z
?OnPropertyChanging@Element@DirectUI@@UEAA_NPEBUPropertyInfo@2@HPEAVValue@2@1@Z
?GetContentStringAsDisplayed@Element@DirectUI@@UEAAPEBGPEAPEAVValue@2@@Z
?StartDefer@Element@DirectUI@@QEAAXPEAK@Z
?Destroy@Element@DirectUI@@QEAAJ_N@Z
?Destroy@Layout@DirectUI@@QEAAXXZ
?Initialize@HWNDElement@DirectUI@@QEAAJPEAUHWND__@@_NIPEAVElement@2@PEAK@Z
??1HWNDElement@DirectUI@@UEAA@XZ
??0HWNDElement@DirectUI@@QEAA@XZ
?GetAccessibleImpl@HWNDElement@DirectUI@@UEAAJPEAPEAUIAccessible@@@Z
?Register@HWNDElement@DirectUI@@SAJXZ
?ThemeChange@HWNDElement@DirectUI@@SA?AVUID@@XZ
?WndProc@HWNDElement@DirectUI@@UEAA_JPEAUHWND__@@I_K_J@Z
?ElementFromPoint@HWNDElement@DirectUI@@QEAAPEAVElement@2@PEAUtagPOINT@@@Z
?RemoveTooltip@HWNDElement@DirectUI@@UEAAXPEAVElement@2@@Z
?ActivateTooltip@HWNDElement@DirectUI@@UEAAXPEAVElement@2@K@Z
?UpdateTooltip@HWNDElement@DirectUI@@UEAAXPEAVElement@2@@Z
?OnCompositionChanged@HWNDElement@DirectUI@@UEAAXXZ
?OnWmThemeChanged@HWNDElement@DirectUI@@UEAAX_K_J@Z
?OnGetDlgCode@HWNDElement@DirectUI@@UEAAXPEAUtagMSG@@PEA_J@Z
?OnNoChildWithShortcutFound@HWNDElement@DirectUI@@UEAAXPEAUKeyboardEvent@2@@Z
?OnInput@HWNDElement@DirectUI@@UEAAXPEAUInputEvent@2@@Z
?OnThemeChanged@HWNDElement@DirectUI@@UEAAXPEAUThemeChangedEvent@2@@Z
?OnEvent@HWNDElement@DirectUI@@UEAAXPEAUEvent@2@@Z
?OnDestroy@HWNDElement@DirectUI@@UEAAXXZ
?OnGroupChanged@HWNDElement@DirectUI@@UEAAXH_N@Z
?OnPropertyChanged@HWNDElement@DirectUI@@UEAAXPEBUPropertyInfo@2@HPEAVValue@2@1@Z
?GetClassInfoW@HWNDElement@DirectUI@@UEAAPEAUIClassInfo@2@XZ
?GetHWND@HWNDElement@DirectUI@@UEAAPEAUHWND__@@XZ
?CanSetFocus@HWNDElement@DirectUI@@UEAA_NXZ
?SetAccessible@Element@DirectUI@@QEAAJ_N@Z
?SetLayout@Element@DirectUI@@QEAAJPEAVLayout@2@@Z
?SetVisible@Element@DirectUI@@QEAAJ_N@Z
?GetKeyFocused@Element@DirectUI@@UEAA_NXZ
?QueryInterface@Element@DirectUI@@UEAAJAEBU_GUID@@PEAPEAX@Z
?IsContentProtected@Element@DirectUI@@UEAA_NXZ
?IsRTLReading@Element@DirectUI@@UEAA_NXZ
?FindDescendent@Element@DirectUI@@QEAAPEAV12@G@Z
?Remove@Element@DirectUI@@QEAAJPEAV12@@Z
StrToID
?SetY@Element@DirectUI@@QEAAJH@Z
?SetX@Element@DirectUI@@QEAAJH@Z
?SetHeight@Element@DirectUI@@QEAAJH@Z
?SetWidth@Element@DirectUI@@QEAAJH@Z
??1NativeHWNDHost@DirectUI@@UEAA@XZ
?Initialize@NativeHWNDHost@DirectUI@@QEAAJPEBG0PEAUHWND__@@PEAUHICON__@@HHHHHHPEAUHINSTANCE__@@I@Z
??0NativeHWNDHost@DirectUI@@QEAA@XZ
?Destroy@NativeHWNDHost@DirectUI@@QEAAXXZ
?SetContentString@Element@DirectUI@@QEAAJPEBG@Z
?SetFontWeight@Element@DirectUI@@QEAAJH@Z
?SetValue@Element@DirectUI@@QEAAJP6APEBUPropertyInfo@2@XZHPEAVValue@2@@Z
?ForegroundProp@Element@DirectUI@@SAPEBUPropertyInfo@2@XZ
?GetUnset@Value@DirectUI@@SAPEAV12@XZ
?SetForegroundColor@Element@DirectUI@@QEAAJK@Z
?GetClassInfoPtr@HWNDElement@DirectUI@@SAPEAUIClassInfo@2@XZ
?GetClassInfoPtr@Element@DirectUI@@SAPEAUIClassInfo@2@XZ
??0ClassInfoBase@DirectUI@@QEAA@XZ
?AddRef@ClassInfoBase@DirectUI@@UEAAXXZ
?Release@ClassInfoBase@DirectUI@@UEAAHXZ
?EnumPropertyInfo@ClassInfoBase@DirectUI@@UEAAPEBUPropertyInfo@2@I@Z
?GetByClassIndex@ClassInfoBase@DirectUI@@UEAAPEBUPropertyInfo@2@I@Z
?GetPICount@ClassInfoBase@DirectUI@@UEBAIXZ
?GetGlobalIndex@ClassInfoBase@DirectUI@@UEBAIXZ
?GetName@ClassInfoBase@DirectUI@@UEBAPEBGXZ
?IsValidProperty@ClassInfoBase@DirectUI@@UEBA_NPEBUPropertyInfo@2@@Z
?IsSubclassOf@ClassInfoBase@DirectUI@@UEBA_NPEAUIClassInfo@2@@Z
?GetModule@ClassInfoBase@DirectUI@@UEBAPEAUHINSTANCE__@@XZ
?IsGlobal@ClassInfoBase@DirectUI@@UEBA_NXZ
?AddChild@ClassInfoBase@DirectUI@@UEAAXXZ
?RemoveChild@ClassInfoBase@DirectUI@@UEAAXXZ
?GetChildren@ClassInfoBase@DirectUI@@UEBAHXZ
?AssertPIZeroRef@ClassInfoBase@DirectUI@@UEBAXXZ
??1ClassInfoBase@DirectUI@@UEAA@XZ
?GetRoot@Element@DirectUI@@QEAAPEAV12@XZ
?GetHeight@Element@DirectUI@@QEAAHXZ
?GetY@Element@DirectUI@@QEAAHXZ
?GetWidth@Element@DirectUI@@QEAAHXZ
?GetX@Element@DirectUI@@QEAAHXZ
?SetAccName@Element@DirectUI@@QEAAJPEBG@Z
?GetValue@Element@DirectUI@@QEAAPEAVValue@2@P6APEBUPropertyInfo@2@XZHPEAUUpdateCache@2@@Z
?ClassProp@Element@DirectUI@@SAPEBUPropertyInfo@2@XZ
?Release@Value@DirectUI@@QEAAXXZ
?GetContentString@Element@DirectUI@@QEAAPEBGPEAPEAVValue@2@@Z
?Initialize@ClassInfoBase@DirectUI@@QEAAJPEAUHINSTANCE__@@PEBG_NPEBQEBUPropertyInfo@2@I@Z
?ContentProp@Element@DirectUI@@SAPEBUPropertyInfo@2@XZ
?CreateGraphic@Value@DirectUI@@SAPEAV12@PEBGGGPEAUHINSTANCE__@@_N2@Z
?GetChildren@Element@DirectUI@@QEAAPEAV?$DynamicArray@PEAVElement@DirectUI@@$0A@@2@PEAPEAVValue@2@@Z
??1CritSecLock@DirectUI@@QEAA@XZ
?Register@ClassInfoBase@DirectUI@@QEAAJXZ
?ClassExist@ClassInfoBase@DirectUI@@SA_NPEAPEAUIClassInfo@2@PEBQEBUPropertyInfo@2@IPEAU32@PEAUHINSTANCE__@@PEBG_N@Z
?GetFactoryLock@Element@DirectUI@@SAPEAU_RTL_CRITICAL_SECTION@@XZ
?Register@Element@DirectUI@@SAJXZ
?SetPressed@Button@DirectUI@@QEAAJ_N@Z
?OnInput@Element@DirectUI@@UEAAXPEAUInputEvent@2@@Z
?SetLayoutPos@Element@DirectUI@@QEAAJH@Z
??0Element@DirectUI@@QEAA@XZ
?OnPropertyChanged@Element@DirectUI@@UEAAXPEBUPropertyInfo@2@HPEAVValue@2@1@Z
?OnGroupChanged@Element@DirectUI@@UEAAXH_N@Z
?OnDestroy@Element@DirectUI@@UEAAXXZ
?UpdateTooltip@Element@DirectUI@@MEAAXPEAV12@@Z
?ActivateTooltip@Element@DirectUI@@MEAAXPEAV12@K@Z
?RemoveTooltip@Element@DirectUI@@MEAAXPEAV12@@Z
?GetAccessibleImpl@Element@DirectUI@@UEAAJPEAPEAUIAccessible@@@Z
??1Element@DirectUI@@UEAA@XZ
?Initialize@Element@DirectUI@@QEAAJIPEAV12@PEAK@Z
?SetActive@Element@DirectUI@@QEAAJH@Z
?OnEvent@Element@DirectUI@@UEAAXPEAUEvent@2@@Z
EnableAnimations
DisableAnimations
?ExtentProp@Element@DirectUI@@SAPEBUPropertyInfo@2@XZ
?LocationProp@Element@DirectUI@@SAPEBUPropertyInfo@2@XZ
?SetAlpha@Element@DirectUI@@QEAAJH@Z
?BackgroundProp@Element@DirectUI@@SAPEBUPropertyInfo@2@XZ
?CreateColor@Value@DirectUI@@SAPEAV12@KKE@Z
?SetAccDesc@Element@DirectUI@@QEAAJPEBG@Z
?SetTooltip@Element@DirectUI@@QEAAJ_N@Z
?AccNameProp@Element@DirectUI@@SAPEBUPropertyInfo@2@XZ
?GetAccRole@Element@DirectUI@@QEAAHXZ
?SetBackgroundColor@Element@DirectUI@@QEAAJK@Z
?SheetProp@Element@DirectUI@@SAPEBUPropertyInfo@2@XZ
?AddRef@Value@DirectUI@@QEAAXXZ
?GetSheet@DUIXmlParser@DirectUI@@QEAAJPEBGPEAPEAVValue@2@@Z
?SetID@Element@DirectUI@@QEAAJPEBG@Z
?SetAccRole@Element@DirectUI@@QEAAJH@Z
?Add@Element@DirectUI@@QEAAJPEAV12@@Z
?PaintContent@Element@DirectUI@@QEAAXPEAUHDC__@@PEBUtagRECT@@@Z
?GetIntZero@Value@DirectUI@@SAPEAV12@XZ
?GetValue@Element@DirectUI@@QEAAPEAVValue@2@PEBUPropertyInfo@2@HPEAUUpdateCache@2@@Z
?SetCaptured@Button@DirectUI@@QEAAJ_N@Z
?GetCaptured@Button@DirectUI@@QEAA_NXZ
?GetPressed@Button@DirectUI@@QEAA_NXZ
??0Button@DirectUI@@QEAA@XZ
?OnPropertyChanged@Button@DirectUI@@UEAAXPEBUPropertyInfo@2@HPEAVValue@2@1@Z
?OnInput@Button@DirectUI@@UEAAXPEAUInputEvent@2@@Z
?DefaultAction@Button@DirectUI@@UEAAJXZ
?OnLostDialogFocus@Button@DirectUI@@UEAA_NPEAVDialogElement@2@@Z
?OnReceivedDialogFocus@Button@DirectUI@@UEAA_NPEAVDialogElement@2@@Z
??1Button@DirectUI@@UEAA@XZ
?GetClassInfoPtr@Button@DirectUI@@SAPEAUIClassInfo@2@XZ
ColorFromEnumI
?Initialize@Button@DirectUI@@QEAAJIPEAVElement@2@PEAK@Z
?Register@Button@DirectUI@@SAJXZ
?GetFontWeight@Element@DirectUI@@QEAAHXZ
?SetValue@Element@DirectUI@@QEAAJPEBUPropertyInfo@2@HPEAVValue@2@@Z
?CreateInt@Value@DirectUI@@SAPEAV12@H@Z
?SetFrameDuration@AnimationStrip@DirectUI@@QEAAJH@Z
?SetFrameWidth@AnimationStrip@DirectUI@@QEAAJH@Z
?PostEvent@Element@DirectUI@@QEAAXPEAUEvent@2@@Z
?CreateGraphic@Value@DirectUI@@SAPEAV12@PEAUHBITMAP__@@EI_N11@Z
ProcessAlphaBitmapI
?SetPlay@AnimationStrip@DirectUI@@QEAAJ_N@Z
?SetFrameIndex@AnimationStrip@DirectUI@@QEAAJH@Z
?GetClassInfoPtr@AnimationStrip@DirectUI@@SAPEAUIClassInfo@2@XZ
??0AnimationStrip@DirectUI@@QEAA@XZ
?OnDestroy@AnimationStrip@DirectUI@@MEAAXXZ
?Paint@AnimationStrip@DirectUI@@MEAAXPEAUHDC__@@PEBUtagRECT@@1PEAU4@2@Z
??1AnimationStrip@DirectUI@@UEAA@XZ
?OnPropertyChanged@AnimationStrip@DirectUI@@MEAAXPEBUPropertyInfo@2@HPEAVValue@2@1@Z
?IsEqual@Value@DirectUI@@QEAA_NPEAV12@@Z
?GetBoolTrue@Value@DirectUI@@SAPEAV12@XZ
?PlayProp@AnimationStrip@DirectUI@@SAPEBUPropertyInfo@2@XZ
?FireEvent@Element@DirectUI@@QEAAXPEAUEvent@2@_N1@Z
?GetFrameIndex@AnimationStrip@DirectUI@@QEAAHXZ
?GetPlay@AnimationStrip@DirectUI@@QEAA_NXZ
?FrameIndexProp@AnimationStrip@DirectUI@@SAPEBUPropertyInfo@2@XZ
?Initialize@AnimationStrip@DirectUI@@QEAAJIPEAVElement@2@PEAK@Z
?Register@AnimationStrip@DirectUI@@SAJXZ
EventWrite
GetTraceEnableFlags
EventUnregister
GetTraceLoggerHandle
UnregisterTraceGuids
EventRegister
GetTraceEnableLevel
RegisterTraceGuidsW
TraceMessage
RegCreateKeyExW
RegCloseKey
RegSetValueExW
RegQueryValueExW
RegOpenKeyExW
RegDeleteValueW
RegGetValueW
AllocateAndInitializeSid
FreeSid
CheckTokenMembership
ADVAPI32.dll
CreateMutexW
RegisterApplicationRestart
GetLastError
HeapSetInformation
SetProcessShutdownParameters
CloseHandle
GetTickCount64
HeapAlloc
GetProcessHeap
FreeResource
LCIDToLocaleName
FindResourceExW
LoadResource
LoadLibraryExW
GetTickCount
ResolveLocaleName
GetLocaleInfoEx
MulDiv
GetUserPreferredUILanguages
lstrlenW
RaiseException
ProcessIdToSessionId
LocaleNameToLCID
LockResource
GetCurrentProcessId
ExpandEnvironmentStringsW
GlobalDeleteAtom
GetModuleFileNameW
GlobalAddAtomW
FreeLibrary
WaitForSingleObject
SetEvent
LoadLibraryW
GetProcAddress
CreateEventW
CreateThread
GetSystemDefaultLangID
GetStringTypeExW
GetCurrentProcess
IsProcessInJob
LoadLibraryExA
DelayLoadFailureHook
KERNEL32.dll
GetDeviceCaps
GetStockObject
GDI32.dll
DispatchMessageW
ShowWindow
LoadStringW
PeekMessageW
IsDialogMessageW
TranslateMessage
FindWindowW
SetForegroundWindow
IsIconic
GetMessageW
DestroyWindow
SendMessageW
CreateWindowExW
GetCursorPos
SetWindowPos
SystemParametersInfoW
KillTimer
LoadImageW
ScreenToClient
SetTimer
GetWindowThreadProcessId
GetPropW
MapWindowPoints
UnhookWindowsHookEx
SetWindowsHookExW
GetSysColor
MapVirtualKeyExW
ReleaseDC
GetClassNameW
GetWindowLongW
GetKeyboardLayout
SetWinEventHook
GetCursorInfo
GetGUIThreadInfo
GetForegroundWindow
WindowFromPhysicalPoint
PtInRect
GetClientRect
UnhookWinEvent
CallNextHookEx
LoadCursorW
GetParent
PostMessageW
AllowSetForegroundWindow
GetSystemMetrics
AdjustWindowRectEx
IsWindow
SetClassLongPtrW
LoadIconW
SetPropW
GetDoubleClickTime
GetMessageExtraInfo
SendInput
MonitorFromPoint
GetWindowRect
RemovePropW
SetWindowPlacement
EnableWindow
SetDlgItemTextW
SetWindowLongPtrW
MessageBoxW
CheckDlgButton
SendDlgItemMessageW
EndDialog
GetDlgItem
SetFocus
GetWindowLongPtrW
DialogBoxParamW
DefWindowProcW
RegisterClassW
ChangeWindowMessageFilterEx
PostQuitMessage
GetKeyState
USER32.dll
??3@YAXPEAX@Z
??_U@YAPEAX_K@Z
wcstoul
??_V@YAXPEAX@Z
_vsnwprintf
memcpy_s
??2@YAPEAX_K@Z
memmove_s
calloc
wcsstr
__wgetmainargs
__C_specific_handler
_XcptFilter
_cexit
_wcmdln
_initterm
_amsg_exit
__setusermatherr
_commode
_fmode
__set_app_type
msvcrt.dll
?terminate@@YAXXZ
_unlock
__dllonexit
_onexit
MSSWCH.dll
DwmSetWindowAttribute
DwmExtendFrameIntoClientArea
DwmIsCompositionEnabled
dwmapi.dll
GdiplusShutdown
GdiplusStartup
gdiplus.dll
WinSqmIncrementDWORD
WinSqmIsOptedIn
WinSqmSetDWORD
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
ntdll.dll
CoUninitialize
CoInitialize
CoCreateInstance
ole32.dll
AccessibleObjectFromWindow
OLEACC.dll
OLEAUT32.dll
PathFindFileNameW
SHLWAPI.dll
GetWindowMinimizeRect
CreateDialogParamW
WmsgSendMessage
WMsgAPI.dll
InvalidateGadget
DUser.dll
GetStartupInfoW
SetUnhandledExceptionFilter
GetModuleHandleW
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
CreateActCtxW
ReleaseActCtx
ActivateActCtx
DeactivateActCtx
SizeofResource
FindResourceW
HeapFree
GetLocaleInfoW
CompareStringOrdinal
LeaveCriticalSection
EnterCriticalSection
DebugBreak
GetUserGeoID
DecodePointer
EncodePointer
InitializeCriticalSection
DeleteCriticalSection
GetAtomNameW
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
GdiAlphaBlend
TextOutW
DeleteObject
SelectObject
CreateFontIndirectW
PatBlt
SetBkMode
SetTextAlign
SetTextColor
BitBlt
RestoreDC
SelectClipRgn
SaveDC
OffsetRgn
CreateRoundRectRgn
SetStretchBltMode
GetStretchBltMode
SetPixel
CombineRgn
CreateDIBSection
CreateCompatibleDC
StretchBlt
DeleteDC
GetObjectW
CharUpperBuffW
InvalidateRect
IsRectEmpty
SetRectEmpty
OffsetRect
RedrawWindow
memset
_CxxThrowException
malloc
__CxxFrameHandler3
memcmp
wcstok_s
wcstol
memcpy
floorf
_wcsicmp
_purecall
GdipFree
GdipAlloc
GdipDeleteBrush
GdipSetSolidFillColor
GdipCreatePen1
GdipDeletePen
GdipDeleteGraphics
GdipCreateSolidFill
GdipSetPenColor
GdipCreateFromHDC
GdipDrawLineI
GdipFillRectangleI
GdipCloneBrush
GdipDisposeImage
GdipCreateBitmapFromStream
GdipDrawImageRectI
GdipCloneImage
GdipCreateHatchBrush
CoTaskMemFree
CoTaskMemAlloc
CreateStreamOnHGlobal
IsThemeActive
UxTheme.dll
UnregisterClassA
GetVersionExA
HeapDestroy
HeapReAlloc
HeapSize
`llh2''bh&ae_b]ga_`o&[ge'klk'aeY_]&bh_
NajlmYd9ddg[
DgY\DaZjYjq9
e]e[hq
Afl]jf]lGh]f9
@LLHJ=9<
Afl]jf]lGh]fMjd9
Afl]jf]lJ]Y\>ad]
Afl]jf]l;dgk]@Yf\d]
oafaf]l&\dd
ekn[jl&\dd
>v])K<
<duixml>
<element resid="main" layout="filllayout()">
<element id="atom(SoftKeyboardPred)" layoutpos="absolute"/>
<element id="atom(SoftKeyboardNumPad)" layoutpos="absolute"/>
<element id="atom(SoftKeyboardMain)" layoutpos="absolute"/>
<element id="atom(SoftKeyboardAux)" layoutpos="absolute"/>
<element id="atom(SoftKeyboardMenu)" layoutpos="absolute"/>
</element>
</duixml>
WAVEfmt
INFOICRD
2008-02-22
Steve Ball
Sony Sound Forge 9.0
WAVEfmt
INFOICRD
2008-02-22
Steve Ball
Sony Sound Forge 9.0
WAVEfmt
INFOICRD
2008-02-22
Steve Ball
Sony Sound Forge 9.0
WAVEfmt
xxwxxx
wwwwxxp
xwwwqwwx
wwwwpvwx
xxwwww
xwwwwwwx
LDDFDx
xxwwwxx
DLDlle
wTLDDD
LDDLltLtle
wDDDDDDDLdD
wEDDDDDDDFLdLG
|\l|||
xwwDDDDDDDDLd
Ll||||l||
xDDDDDDDDDDdDD
||||l|||g
DDFDdDDDDlDLFLlD
xDDDDDFDDdDDDLDD
wwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwv|~
lflflflf
~v~|~wg
hhgnv~
wxwxxw
DDLDDD
tDFLLLL
xxxxxxxp
xxwwww
xxxwwxw
wDDDDDLDFLD
tDDDDDD
xtDDDDDLFD
DlLlLLL|g
DlFLll
DDDTlDD
FTdDEF
dDdlll|
DDTeFDDDDD
LTt\l||g
xwwwwwwwwwwwwwwwwwwww
xxwwwwwwwwwwwwwwvwF|
lflfffflg
|flflflf
ffvgfvgfvgl|gfv
DDLlLd
xxwwwwx
wwwxxxx
ulLDDLlF
wuDDDDD
wwDDDDDLD
Dll\||||
DDDDDDFDD
uDeFDdlD
wwwwwwwwvwwwwwwwwwwwvw
f|vv|g
xwwwwwwwggggh
wxwxwp
wxwwwww
LLlLLllll
@DFDDDDDD
wwwwwwwwwwwwwwwwwwwwt
fffffffflff
lf~llf
|llllllln
wwwwxx
wwwwww
DLL||v
tDDDDDDDlFG
tDDDDD
DLLegx
xwxwwww
DDDDDF
!"!"""
22272727278,b
"$"2$""926667798:7:.Z
$"666999999:9::9::<8U
6;6;99;9;;<;<<<<<V<:9
6H;;UUUUUU<VVVVVVVY?7
MMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMM5UUYVYYYYYYY]Y]Y:
M5ZYY[Y[Y[[______?
moooooooooooooooooooomlloppmppmppmppppppppppppppppmppppmnml
M5Z[[\[`_`_`_```_?
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
5[\\``d`d`ddddddX
G\cddddddududueu]
Gcuuuuuuwuwuwwwwac
Icwuwuwwwwxxxxxxed
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
{lllmnlllplllplllnlllnllllnlllplllnlllnlllnlllnnlllnllllllll
%%&&&())))1x
'''((++////0>
'''+(++++000^
''''++//+001a
''''++++////1a
zxvuts
'''+'++//0**0=auss
''''(('',29HQ
f3()-....
()--.??GC?
&&)--..?@@@GCC
&''-+..??@@@GGGCm
&&''-+-..??@@CGKKGI\
&'')---.0DDDBBJJGKKIR
&&&'''//020DDBJJJKKKKMF
&&&'''//22DDDBMFJJMMQKOF
&&&'''+227DLLLLMMOMMQMQQO
$
%&&'&'++77L7LLNONOOOQQQQQR
# $$$*
%%&&''++-777NNNONOSOSSTTTTY
#####$$$
&&&')99999RRRSSST_T___Y
"5588=89XYY_[_````_{
>X[[````a`aaw
>Z^`yayaaaayx
W]yyyyy
cbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbc
bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbc
bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbc
bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbc
bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbc
&&'++.??AGHHPP
&''+-.?@@GHHPP
&&'+,,?@@GHPPP
%&''+,??@AGHHPP
%&'',,.?@AHHPPQ
&&'++.??@JOX]{
*49>Wlt
#)))+++V
(***.../.11,U
#0500066AAAA>G
*66DAGEEGEEHEE
0UGGIIHHKNNNOF
((DUU`MMbbbbbbbF
xxwwZZYYYXXXXXXXXYXXXYXXXXXXXYXXYYXXYXXXXXTbeeeeehhhO
Xgiiiooootd
vvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvv
Xlttttttt{nz
Xtyy{{{}|}u{
vvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvv
vvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvv
vvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvv
vvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvv
xxxwwwYYYYXYXYXYX
$$$<<<===O
778899::p
!""788;??@~
!""87;99::m
7,>Gafr
R%3Q\_
q1#%%()>>>
###%(()??CC>}
## %((>>??EDFF
##$%(*)AABBEEGDEa
###$%*++AABBJEOGTGN
####./4444IJOOTTTL
!,,,1134NPRVVRQ
-:NXYddd^
-:Weefgf`
jjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjj
w8;_hhiihc
jjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjj
jjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjj
jjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjj
kjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjl
#$$')>?CDSSS
#$$')>?CDSSU
#$$')>?CDSS
#$'')>?CDSS
#$$')>CCDSS
##$'')?BGP`c
-13<ov
%%'''"U
$&&*****--)D
$,,,,555AAAAF
,677BBFFFGJGC
7DKKKLLNPPQQH
'KaadddeeefhhO
)aggggkklloooi
{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{
{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{
{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{
{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{
{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{
8899<<==@
889<<<=>R
889<<==>m
8889<<==>z
899<<==?
888:<<;;>p
",E\s~
j\*$)///l
#$//@FDFf
#$+1@AELLL`
#$+/@@AGMOQO]
!$&+055HGSMQQQR
!!&$177RRSSUXXUT
xttttutttttttttttutttttttttttx
vttttttttttttttttttttttttttttt
uttttttttttttttttttttttttttttt
xttttttttttttttttttttttttttttv
##/@ADNVWa
=#$+1ELNVWs
[&&1?EKQXY
9:>bep
'++,001>^
/22FHHICY
HXKZZ[\L]
ggggggggggggggggggggg
ggggggggggggggggggggg
ggggggggggggggggggggg
ggggggggggggggggggggg
$4;<?@
!$4<<?B
#457?8M
`ll`LJ
m^WYcl~sA0#~e
!"--,zed
 4<<:91und
BBBBBBBBBBBBBBB
BBBBBBBBBBBBBBB
BBBBBBBBBBBBBBB
,MGeY>
`a4dss
.^Xbyy
.%Ir1W
60-`Z^tm
x<FD8<<
NMk-S_
h0SR9
TiReX^HXZ
!Zb,L|
%2v:6D
SZ@aTx
.jVVW(
Y|ouv`W&
!|D&D%
[v,N01
a\x[Y{-
1Be`S%
1lmmUEA"<
j$`QLY[
PJqxxH
988dsSy
S8mJ@I
g>#eQ<
gDbM'y
N=206
X^^fmm
NIR7@D
Y\Zfyy
"uE`=
YZYfiq
`MUwO%)
v'cq]B
y?O8G^Z
e0o5t8
C[9`@4]
P[0l 7
'''1;;
8NHhQJ
tjDNL*
9u-D>O
GIDATll
`g2a.A
@[09:!
188XZ^^
a``` N
@w.A]_ko
[VWW155
,--azz
e9R{x]
:\uAOBJ
HqEXZZ2|
qqqckkk(
wwwLyyy
&677Q^__~DDDf
iii5\\\
;;;_uuu
"""#WWYS~~~
iil7ttw`
KKM+OORS
pprAxx{w
'''Booo
LLNJssw
555%MMPIvvyu
MMO?]]`n
1eeelttx
uwwwXttt*ttt
E899a99:ZnnnZ
#FFFtyyy
@@B0ooq
JJL5jjlf
??A0[[^L}}
pps7tuxf
M++,K0001
222-[[Z
JJLP||
?>@8__ajxy|
??A1rtwaty}
comctl32.dll
.com|.net|.edu
.com|.net|.org|.edu|.gov
www.|mail.|web.
http://|https://|ftp://|\\|file://
TopLevelDomainsEmailData
TopLevelDomainsData
SubdomainsData
ProtocolsData
TopLevelDomainsEmail
TopLevelDomains
Subdomains
Protocols
langid
layout
keydef
Keyboards
Keyboard
Unicode
VKCode
AppEvent
ScanCode
Locking
Sticky
Normal
quaternary
tertiary
secondary
primary
extended
payload
payloadType
repeat
modifierName
modifierType
accessibilityName
modifier
baseDefinition
KeyDefinitions
InnerQuad_4
InnerQuad_3
InnerQuad_2
InnerQuad_1
InnerKey
ParentKey
LOCALE_SDECIMAL
WebGeo
InnerKeyImage
ParentKey20
InnerKeyImageRes
CKeyboardLayout
KBControlSym
EmptyColSym
BlankRemainder
BaseKey
BaseKeyOverlapWeb
DEFAULT
KBControlOSKPred
KBControlOSKMenu
KBControlAux
SOFTWARE\Microsoft\TabletTip\1.7\
RowWeb
HiddenLCType
EmptyCol
HiddenRowForScanCode%d
HiddenRowForResId%d
103LAlt
Longhorn
QuickEA
HighContrastWhite
HighContrastBlack
Classic
OSKNumPad
OSKPred
OSKMenu
Symbols
Numbers
Keypad
AuxPad
KeypadStyle
KeyboardStyle
SKB_MSG_KEYUP
SKB_MSG_KEYDOWN
SmallerLabel
TogglePrimaryLabelColor
SecondaryLabelColor
PrimaryLabelColor
CKeyBoardInnerKey
KBControlOSKNumPad
KBControlQui
KBControlWeb
KeyType
Modifier
CKeyBoardKey
CKeyBoardLKey
BITMAP4
NumLoops
CKeyAnimation
Delete
NoRemove
ForceRemove
OSKRunning
OSKMainClass
tooltips_class32
StartMenuTag
\osknumpad
\oskpred
\oskmenu
\auxpad
Software\Microsoft\Windows NT\CurrentVersion\AccessibilityTemp
msswch.dll
msswchx
Software\Microsoft\Osk
Setting
Stepping
Software\Microsoft\Osk
WindowLeft
WindowTop
WindowWidth
WindowHeight
ClickSound
HoverPeriod
ScanInterval
UseDevice
UseMouse
ScanKey
UseTextPrediction
InsertSpace
ShowNumPad
Software\Microsoft\Windows\CurrentVersion\RunOnce
FSDefinitions\
%CommonProgramFiles%\Microsoft Shared\Ink\
SoftKeyboardMain
SoftKeyboardAux
SoftKeyboardNumPad
SoftKeyboardPred
KBControl
SoftKeyboardMenu
TabSKB.dll
TipResX.dll
DirectUIHWND
ConsoleWindowClass
ACCESSIBILITY_TOPMOST
mshelp://windows/?id=82664e6e-f8a1-4c38-bd37-a097e95b2bed
pageNoMouseOrKeyboard
Microsoft.EaseOfAccessCenter
UIFILE
WEVT_TEMPLATE
UIFILE
WEVT_TEMPLATE
((44::99--
##EEhh
hhJJ00
99UUggoohhXX??%%
..::==66##
77PP[[XXDD##
::YYggbbBB
JJUU==77GGHH&&
DDrr<<
^__a))
&&11&&
-.9:4466pp
HHomPP
j^KaaYj 0
U:aXQUml
^_egHHUS
xx||BB--XY
JJ99bb
orlrHPry
16QSu|
H)oUpe
9-YAgA
[v<EGAUP
[X:7:j[pX
7S)(^B
?SG_V_uu
X0pGe+X
jjo\sQj.U
X7pHj<P%(
+#-#0&
J"U+J(6
A(N7Q9B)4
H(K(K0:1+#
=.H1A(:+4(#
4":+6%
3"<(6#%
9)7-:-6%1
46&A)E"0
=?PSSM?73)0
"()3#0 9.:01(
4(A%B 6
-) %"&
&&(0"#
&&001-&&
4.3B%N
N7SEE:&
.(.(&
-6"(
+0G03
764<"1
("-&#"
1-1K6Y6G%
&+:A<H&9
" .=)J
##&&&##
--0-"
#&)#% 
\%p-j+M
0"E:rM
|-|+sBp9\
3-lG{G
B14AH__xl
903:3<
E"Er_u
1X:pGuUmVpM
&&?)MV+U1G
e"\?HJ<)?
mxy3U&J
G09+B3XN&M
Q"j1Q19
"J-X0<
UP-GB_&U
sbQ\7N4
b)\&l&
+y+x:Q-0))
0PENHBMGV&<"JGsb
"+J3[_l
EU&%&3
0:9M%:
13:??J^s|
suAJ<A"
9AGNHJE9[APJ:9A:
0N1U")&
N)[7l<eHQ<[+-
B<P4m7r?bJ_VM:J
&"4?0A9H?G9<#
#3Nbjgg
gj_JE4
{H77-%9
0#"0JVPbE_EmQp^eB
_mGP)?)H
3:J3?)N7dQles:?
b{^se{[b[UeVd?d1:
3NV[d^m:E9m4\9?&:
1<&7%B0N+30
)%%1""
-73?9EG7-E
-&B::4
&<"H&V
3)4#<-931"G%4)
?7BB1A-?9:?<07
""#1#3"&
)"0&+#:-<01&AE0H
-#&"40&0+1:%:)0)#
%3G7NBMA?1A-90+%1
#%-&1)?0+
1&9&E%<1
""+-9+?#74&7")
%)&&1+7--
###+#%
#)0+7339))
%-97-#
<"?%A)0%&#)+#)
:#G0U9M430)0%+
4#A3G:A7:1<4%)
7%7+3)+"%#
0"3%-&&%)%&%
++&-#
+"%""%""
xxedMJ0+
HGvv
64??6701:<be
.)NK\\XY=A
#7=Y_|
)EKmo
:v<VAA{E
EsVd\(D
B A1P.o.U(+
rUK71%
DJ(VEg^
u~?V3B"
S?sdy|
:vBhQaVblv
v(dGe_h_?=
0&_DpaUS4AGKd31
s~gho~b
+6-&6"U+h1g+p(
u|yXrb
-|1D+&+)4
[=bJ~h
.<[Ur_ljl
ghKY7Q(H
g+g6uS
E~1o#l-l<eJo^y
pvohoE^(Q&VS
urX\JP=H<P7Y7gE
oulPlDbGaBm?~=~N{l
buJ[?<)
76YQ|e
v~u|ybhPaSjVsUuKhSp_{YlV_\SbEU11
7m+K &
)"E9sK
Hp<_.P"7 %.
A%VEle{
=pBjM_eXrHj+m u
P a6pUjho{|
- AUYue
4).3B
N<e[|r
r{^jUXKB< %
."B4VNlh
% H<l\
V|^|\|\
mrrhmhbd_^XK93#"
(#&(?3<=(B-M3U<dNx_
duHb9S
)4DK_^xh
{yox[jBS4K#E
-"74BDNKQPAM9N<P<PAVG^Sjbvg~o
~ruY\BE 4
0&A4J<QJga|v
yvjhaXSKDHAB?=A1=-00(#&
4(931:7:<:4B0B4J?VEVB[M_UeYrhpmppvylvdpde[^[^\UYDS=D69&)
9":A%A3=EH_NjHhHmJgPbbpmvyx
euadPS??:#0
- 4#63A7J7PBUEQHPNMXNbYd^ph{uy~v
vussghd^^UUJME<:6..%
 &(01A<MKYQeXol~y
rxgpepdh^_YNDE7D=.7
%#94=:396=3A.?.B1K=UD[HgUy[{bxs~
s|[lDV1D#6
%=9JMSXVYabhpareujyhuer\lYd[^QXKSHN?G7?16--4.:191:33+%
).=:EEHNU[V_Va^gblhsu
uspljeX^KUBK7B.<(1
3-A<?:A?QUgmy
~~v{rxll\XSNKKAB44##
--96DAQKYQ[X^e^gX\UYNXJUMXHSGNKMDB7:6:633+-(#% "
&%-0)0(.+3.=9HBNMVV^V_bgjjlhpjmjplpjdb^VUQGKAD69(.
""34AAMMSUQVVYX[Y[VVSSY\[^XXUXHN<?-0#
)-463076:A4=.:+60401.066??JK[XjgvrppgmhobjXaP[MSHJ4:"%
)#13?GS\agejjss~
x~vxedSSHK<=36(-
m~M[AE97.+%#
"%+60:07:=AB<<9:99736.1+--(.#&
# # " 
xxedMJ0+
HGvv
64??6701:<be
.)NK\\XY=A
#7=Y_|
)EKmo
:v<VAA{E
EsVd\(D
B A1P.o.U(+
rUK71%
DJ(VEg^
u~?V3B"
S?sdy|
:vBhQaVblv
v(dGe_h_?=
0&_DpaUS4AGKd31
s~gho~b
+6-&6"U+h1g+p(
u|yXrb
-|1D+&+)4
[=bJ~h
.<[Ur_ljl
ghKY7Q(H
g+g6uS
E~1o#l-l<eJo^y
pvohoE^(Q&VS
urX\JP=H<P7Y7gE
oulPlDbGaBm?~=~N{l
buJ[?<)
76YQ|e
v~u|ybhPaSjVsUuKhSp_{YlV_\SbEU11
7m+K &
)"E9sK
Hp<_.P"7 %.
A%VEle{
=pBjM_eXrHj+m u
P a6pUjho{|
- AUYue
4).3B
N<e[|r
r{^jUXKB< %
."B4VNlh
% H<l\
V|^|\|\
mrrhmhbd_^XK93#"
(#&(?3<=(B-M3U<dNx_
duHb9S
)4DK_^xh
{yox[jBS4K#E
-"74BDNKQPAM9N<P<PAVG^Sjbvg~o
~ruY\BE 4
0&A4J<QJga|v
yvjhaXSKDHAB?=A1=-00(#&
4(931:7:<:4B0B4J?VEVB[M_UeYrhpmppvylvdpde[^[^\UYDS=D69&)
9":A%A3=EH_NjHhHmJgPbbpmvyx
euadPS??:#0
- 4#63A7J7PBUEQHPNMXNbYd^ph{uy~v
vussghd^^UUJME<:6..%
 &(01A<MKYQeXol~y
rxgpepdh^_YNDE7D=.7
%#94=:396=3A.?.B1K=UD[HgUy[{bxs~
s|[lDV1D#6
%=9JMSXVYabhpareujyhuer\lYd[^QXKSHN?G7?16--4.:191:33+%
).=:EEHNU[V_Va^gblhsu
uspljeX^KUBK7B.<(1
3-A<?:A?QUgmy
~~v{rxll\XSNKKAB44##
--96DAQKYQ[X^e^gX\UYNXJUMXHSGNKMDB7:6:633+-(#% "
&%-0)0(.+3.=9HBNMVV^V_bgjjlhpjmjplpjdb^VUQGKAD69(.
""34AAMMSUQVVYX[Y[VVSSY\[^XXUXHN<?-0#
)-463076:A4=.:+60401.066??JK[XjgvrppgmhobjXaP[MSHJ4:"%
)#13?GS\agejjss~
x~vxedSSHK<=36(-
m~M[AE97.+%#
"%+60:07:=AB<<9:99736.1+--(.#&
3#A.D4?63-
61UPvr
hmNP33
<.YPohvpphaXGA+#
73DEDJ:A)0
&<EUa^jXbDJ#%
==\^hlehGJ
~sujA4
SV-1%
M^XgAK:BMQPU(1
ehgj01
%0.9+
).19+3-6hp
BHmpPU
pdPee_o&4
V6aPSMpe
UYbe "
PQxySV
ehlmMNYV
oxpx4:
"EKruMP
NN::da
)%=D^b
< hPl_~u
G:dNpM
Kj-9:9KK
d[B:Djdo_
DX6-jG
_<b)G
EYKdXass
\9yQp9e%&
YAub^hSoKh-U
S7lGe7K
A 7 %
3 .(0&1"&
:"J0K1<"-
JN)N)N3<4+&
3#E6P9H0B1<0((
37%=.:(%
?)G6D9D7<-6#)
6?+B3M4N+7
34GHKB:-0"-
1(7-1%
) 7+D)E%9
##%-%"%&
. (# &
)%0-0)#%
6+3=#J
K9PGB<#
-)-)(" (
974< 1
# (%
"%#
+94S Q
3-3M9\9J)%
%(9=:G&7
.")( &
##&&&##
.030%#
"&)-()%%#"
Microsoft-Windows-osk/Diagnostic
win:Start
win:Stop
win:Informational
LaunchApp
LaunchOptionsDlg
SwitchMode
ShowPredictions
PerfInstrumentation
PerfDiagnostics
Antivirus Signature
Bkav Clean
Lionic Clean
Elastic malicious (moderate confidence)
MicroWorld-eScan Trojan.GenericKD.67246050
FireEye Trojan.GenericKD.67246050
CAT-QuickHeal Clean
ALYac Clean
Cylance unsafe
VIPRE Trojan.GenericKD.67246050
Sangfor Clean
K7AntiVirus Clean
BitDefender Trojan.GenericKD.67246050
K7GW Clean
Cybereason Clean
BitDefenderTheta Clean
VirIT Clean
Cyren Clean
Symantec ML.Attribute.HighConfidence
tehtris Clean
ESET-NOD32 a variant of Win64/TrojanDownloader.Agent.ACM
APEX Malicious
Paloalto Clean
ClamAV Clean
Kaspersky UDS:Trojan.Win32.Badur
Alibaba Clean
NANO-Antivirus Clean
ViRobot Clean
Rising Downloader.Agent!8.B23 (TFE:5:y9pCLMsyKnL)
TACHYON Clean
Emsisoft Trojan.GenericKD.67246050 (B)
Baidu Clean
F-Secure Trojan.TR/Dldr.Agent.dqohm
DrWeb Clean
Zillya Clean
TrendMicro Clean
McAfee-GW-Edition RDN/Generic Downloader.x
Trapmine Clean
CMC Clean
Sophos Mal/Generic-S
Ikarus Trojan-Downloader.Win64.Agent
GData Win64.Trojan.Agent.QMB8W2
Jiangmin Clean
Webroot Clean
Google Detected
Avira TR/Dldr.Agent.dqohm
Antiy-AVL Clean
Gridinsoft Clean
Xcitium Clean
Arcabit Trojan.Generic.D40217E2
SUPERAntiSpyware Clean
ZoneAlarm UDS:Trojan.Win32.Badur
Microsoft Trojan:Win32/Casdet!rfn
Cynet Clean
AhnLab-V3 Clean
Acronis Clean
McAfee RDN/Generic Downloader.x
MAX malware (ai score=84)
DeepInstinct MALICIOUS
VBA32 Clean
Malwarebytes Generic.Malware/Suspicious
Panda Clean
Zoner Clean
TrendMicro-HouseCall Clean
Tencent Win64.Trojan-Downloader.Oader.Cdhl
Yandex Clean
SentinelOne Clean
MaxSecure Clean
Fortinet W64/Agent.ZX!tr
AVG Win64:Trojan-gen
Avast Win64:Trojan-gen
CrowdStrike Clean
No IRMA results available.