API tools faq
paste
paladin316

Exes_ea527aef9e189c0f5dc37c33da2a8a03_exe_2019-06-28_07_30.json

paladin316
Jun 28th, 2019
2,156
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 18.64 KB | None | 0 0
raw download clone embed print report
  1.  
  2. [*] MalFamily: ""
  3.  
  4. [*] MalScore: 0.3
  5.  
  6. [*] File Name: "Exes_ea527aef9e189c0f5dc37c33da2a8a03.exe"
  7. [*] File Size: 7590
  8. [*] File Type: "HTML document, ASCII text, with very long lines"
  9. [*] SHA256: "931fe5fe318bbde5e4af2291e3a025e0f643013ea9dc12d94cff04169949843d"
  10. [*] MD5: "ea527aef9e189c0f5dc37c33da2a8a03"
  11. [*] SHA1: "d6a63b8bdc16f9176f9679c7a2d58bb155c54bc6"
  12. [*] SHA512: "f92341d7a99f84a1f95efc17d7fc9755b71712c3311807b71bd84ec01386deed0a089faeaa9702ce46e5728d2ee16e1d3193b88763a9d97fa601b39e5eb51dec"
  13. [*] CRC32: "BC9A5EC3"
  14. [*] SSDEEP: "192:ElVZHCkA26xd3Q4JRveuTtMy47R/Ga0kVhFuPwf8Pn9wHHyJ+V:EJvVGaRF8I84"
  15.  
  16. [*] Process Execution: [
  17. "iexplore.exe",
  18. "iexplore.exe"
  19. ]
  20.  
  21. [*] Signatures Detected: [
  22. {
  23. "Description": "Performs some HTTP requests",
  24. "Details": [
  25. {
  26. "url": "http://www.bing.com/favicon.ico"
  27. }
  28. ]
  29. }
  30. ]
  31.  
  32. [*] Started Service: []
  33.  
  34. [*] Executed Commands: []
  35.  
  36. [*] Mutexes: [
  37. "Local\\WininetStartupMutex",
  38. "Local\\c:!users!user!appdata!local!microsoft!feeds cache!",
  39. "Local\\ZonesCounterMutex",
  40. "Local\\!BrowserEmulation!SharedMemory!Mutex",
  41. "Local\\!IETld!Mutex",
  42. "CicLoadWinStaWinSta0",
  43. "Local\\MSCTF.CtfMonitorInstMutexDefault1",
  44. "_!SHMSFTHISTORY!_",
  45. "Local\\c:!users!user!appdata!local!microsoft!windows!history!history.ie5!mshist012019062820190629!"
  46. ]
  47.  
  48. [*] Modified Files: [
  49. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Feeds Cache\\index.dat",
  50. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012019062820190629\\index.dat"
  51. ]
  52.  
  53. [*] Deleted Files: [
  54. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012019052620190527\\index.dat",
  55. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012019052620190527\\"
  56. ]
  57.  
  58. [*] Modified Registry Keys: [
  59. "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Ext\\Stats\\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}\\iexplore\\Type",
  60. "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Ext\\Stats\\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}\\iexplore\\Count",
  61. "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Ext\\Stats\\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}\\iexplore\\Time",
  62. "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Ext\\Stats\\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}\\iexplore\\LoadTime",
  63. "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Ext\\Stats\\{B4F3A835-0E21-4959-BA22-42B3008E02FF}\\iexplore\\Type",
  64. "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Ext\\Stats\\{B4F3A835-0E21-4959-BA22-42B3008E02FF}\\iexplore\\Count",
  65. "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Ext\\Stats\\{B4F3A835-0E21-4959-BA22-42B3008E02FF}\\iexplore\\Time",
  66. "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Ext\\Stats\\{B4F3A835-0E21-4959-BA22-42B3008E02FF}\\iexplore\\LoadTime",
  67. "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Ext\\Stats\\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}\\iexplore\\Type",
  68. "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Ext\\Stats\\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}\\iexplore\\Count",
  69. "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Ext\\Stats\\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}\\iexplore\\Time",
  70. "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Ext\\Stats\\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}\\iexplore\\LoadTime",
  71. "HKEY_CLASSES_ROOT\\.mhtml\\OpenWithList\\WINWORD.EXE",
  72. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Internet Explorer\\Default MHTML Editor\\Last",
  73. "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Extensible Cache\\MSHist012019062820190629",
  74. "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Extensible Cache\\MSHist012019062820190629\\CachePath",
  75. "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Extensible Cache\\MSHist012019062820190629\\CachePrefix",
  76. "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Extensible Cache\\MSHist012019062820190629\\CacheLimit",
  77. "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Extensible Cache\\MSHist012019062820190629\\CacheOptions",
  78. "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Extensible Cache\\MSHist012019062820190629\\CacheRepair"
  79. ]
  80.  
  81. [*] Deleted Registry Keys: []
  82.  
  83. [*] DNS Communications: [
  84. {
  85. "type": "A",
  86. "request": "use.fontawesome.com",
  87. "answers": [
  88. {
  89. "data": "23.111.9.35",
  90. "type": "A"
  91. },
  92. {
  93. "data": "fontawesome-cdn.fonticons.netdna-cdn.com",
  94. "type": "CNAME"
  95. }
  96. ]
  97. },
  98. {
  99. "type": "A",
  100. "request": "www.bing.com",
  101. "answers": [
  102. {
  103. "data": "dual-a-0001.a-msedge.net",
  104. "type": "CNAME"
  105. },
  106. {
  107. "data": "a-0001.a-afdentry.net.trafficmanager.net",
  108. "type": "CNAME"
  109. },
  110. {
  111. "data": "204.79.197.200",
  112. "type": "A"
  113. },
  114. {
  115. "data": "13.107.21.200",
  116. "type": "A"
  117. }
  118. ]
  119. }
  120. ]
  121.  
  122. [*] Domains: [
  123. {
  124. "ip": "23.111.9.35",
  125. "domain": "use.fontawesome.com"
  126. },
  127. {
  128. "ip": "13.107.21.200",
  129. "domain": "www.bing.com"
  130. }
  131. ]
  132.  
  133. [*] Network Communication - ICMP: []
  134.  
  135. [*] Network Communication - HTTP: [
  136. {
  137. "count": 1,
  138. "body": "",
  139. "uri": "http://www.bing.com/favicon.ico",
  140. "user-agent": "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; InfoPath.3)",
  141. "method": "GET",
  142. "host": "www.bing.com",
  143. "version": "1.1",
  144. "path": "/favicon.ico",
  145. "data": "GET /favicon.ico HTTP/1.1\r\nAccept: */*\r\nAccept-Encoding: gzip, deflate\r\nUser-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; InfoPath.3)\r\nHost: www.bing.com\r\nConnection: Keep-Alive\r\nCookie: MUID=055643067C21678412144E247D39664A; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=5262DC06BBB54635AC9D8A0AD382875E&dmnchg=1; SRCHUSR=DOB=20190317\r\n\r\n",
  146. "port": 80
  147. }
  148. ]
  149.  
  150. [*] Network Communication - SMTP: []
  151.  
  152. [*] Network Communication - Hosts: []
  153.  
  154. [*] Network Communication - IRC: []
  155.  
  156. [*] Static Analysis: {}
  157.  
  158. [*] Resolved APIs: [
  159. "advapi32.dll.EventWrite",
  160. "advapi32.dll.EventRegister",
  161. "advapi32.dll.EventUnregister",
  162. "kernel32.dll.InitializeSRWLock",
  163. "kernel32.dll.AcquireSRWLockExclusive",
  164. "kernel32.dll.AcquireSRWLockShared",
  165. "kernel32.dll.ReleaseSRWLockExclusive",
  166. "kernel32.dll.ReleaseSRWLockShared",
  167. "kernel32.dll.SetProcessDEPPolicy",
  168. "user32.dll.SetProcessDPIAware",
  169. "shell32.dll.SetCurrentProcessExplicitAppUserModelID",
  170. "user32.dll.GetShellWindow",
  171. "user32.dll.GetWindowThreadProcessId",
  172. "kernel32.dll.SortGetHandle",
  173. "kernel32.dll.SortCloseHandle",
  174. "ieframe.dll.#251",
  175. "kernel32.dll.WerSetFlags",
  176. "comctl32.dll.PropertySheetW",
  177. "comctl32.dll.PropertySheetA",
  178. "comdlg32.dll.PageSetupDlgW",
  179. "comdlg32.dll.PrintDlgW",
  180. "ieshims.dll.IEShims_Initialize",
  181. "kernel32.dll.VirtualProtect",
  182. "user32.dll.SetWindowsHookExW",
  183. "user32.dll.FindWindowExA",
  184. "kernel32.dll.WaitForSingleObject",
  185. "kernel32.dll.CreateProcessW",
  186. "kernel32.dll.CreateProcessA",
  187. "advapi32.dll.RegQueryValueA",
  188. "ntdll.dll.LdrRegisterDllNotification",
  189. "ole32.dll.CoGetApartmentType",
  190. "ole32.dll.CoTaskMemFree",
  191. "comctl32.dll.#236",
  192. "oleaut32.dll.#6",
  193. "ole32.dll.CoTaskMemAlloc",
  194. "ole32.dll.CoGetMalloc",
  195. "cryptbase.dll.SystemFunction036",
  196. "uxtheme.dll.ThemeInitApiHook",
  197. "user32.dll.IsProcessDPIAware",
  198. "kernel32.dll.WerRegisterMemoryBlock",
  199. "kernel32.dll.WerUnregisterMemoryBlock",
  200. "user32.dll.RegisterWindowMessageW",
  201. "rpcrt4.dll.RpcServerUseProtseqW",
  202. "rpcrt4.dll.RpcServerRegisterIfEx",
  203. "rpcrtremote.dll.I_RpcExtInitializeExtensionPoint",
  204. "rpcrt4.dll.RpcServerInqBindings",
  205. "rpcrt4.dll.RpcEpRegisterW",
  206. "rpcrt4.dll.RpcServerListen",
  207. "shell32.dll.SHGetInstanceExplorer",
  208. "user32.dll.RegisterClassExW",
  209. "user32.dll.CreateWindowExW",
  210. "user32.dll.DefWindowProcW",
  211. "user32.dll.SetWindowLongW",
  212. "ole32.dll.CoInitializeEx",
  213. "user32.dll.MsgWaitForMultipleObjectsEx",
  214. "dwmapi.dll.DwmIsCompositionEnabled",
  215. "urlmon.dll.#400",
  216. "shell32.dll.SHGetFolderPathW",
  217. "advapi32.dll.TraceMessage",
  218. "advapi32.dll.TraceMessageVa",
  219. "kernel32.dll.IsWow64Process",
  220. "sqmapi.dll.SqmGetSession",
  221. "sqmapi.dll.SqmEndSession",
  222. "sqmapi.dll.SqmStartSession",
  223. "sqmapi.dll.SqmStartUpload",
  224. "sqmapi.dll.SqmWaitForUploadComplete",
  225. "sqmapi.dll.SqmSet",
  226. "sqmapi.dll.SqmSetBool",
  227. "sqmapi.dll.SqmSetBits",
  228. "sqmapi.dll.SqmSetString",
  229. "sqmapi.dll.SqmIncrement",
  230. "sqmapi.dll.SqmSetIfMax",
  231. "sqmapi.dll.SqmSetIfMin",
  232. "sqmapi.dll.SqmAddToAverage",
  233. "sqmapi.dll.SqmAddToStreamDWord",
  234. "sqmapi.dll.SqmAddToStreamString",
  235. "sqmapi.dll.SqmSetAppId",
  236. "sqmapi.dll.SqmSetAppVersion",
  237. "sqmapi.dll.SqmSetMachineId",
  238. "sqmapi.dll.SqmSetUserId",
  239. "sqmapi.dll.SqmCreateNewId",
  240. "sqmapi.dll.SqmReadSharedMachineId",
  241. "sqmapi.dll.SqmReadSharedUserId",
  242. "sqmapi.dll.SqmWriteSharedMachineId",
  243. "sqmapi.dll.SqmWriteSharedUserId",
  244. "sqmapi.dll.SqmIsWindowsOptedIn",
  245. "advapi32.dll.OpenThreadToken",
  246. "ole32.dll.CreateBindCtx",
  247. "ole32.dll.CoRegisterInitializeSpy",
  248. "comctl32.dll.#320",
  249. "comctl32.dll.#324",
  250. "comctl32.dll.#323",
  251. "comctl32.dll.#328",
  252. "comctl32.dll.#334",
  253. "advapi32.dll.RegEnumKeyW",
  254. "oleaut32.dll.#2",
  255. "ole32.dll.CoCreateInstance",
  256. "advapi32.dll.InitializeSecurityDescriptor",
  257. "advapi32.dll.SetEntriesInAclW",
  258. "ntmarta.dll.GetMartaExtensionInterface",
  259. "advapi32.dll.SetSecurityDescriptorDacl",
  260. "advapi32.dll.IsTextUnicode",
  261. "comctl32.dll.#332",
  262. "comctl32.dll.#338",
  263. "comctl32.dll.#339",
  264. "shell32.dll.#102",
  265. "ole32.dll.CoUninitialize",
  266. "setupapi.dll.CM_Get_Device_Interface_List_Size_ExW",
  267. "sechost.dll.ConvertSidToStringSidW",
  268. "profapi.dll.#104",
  269. "propsys.dll.PSCreateMemoryPropertyStore",
  270. "setupapi.dll.CM_Get_Device_Interface_List_ExW",
  271. "propsys.dll.PSPropertyBag_WriteStr",
  272. "ole32.dll.PropVariantClear",
  273. "oleaut32.dll.#9",
  274. "propsys.dll.PSPropertyBag_WriteGUID",
  275. "propsys.dll.PSPropertyBag_ReadGUID",
  276. "comctl32.dll.#386",
  277. "rpcrt4.dll.RpcStringBindingComposeW",
  278. "rpcrt4.dll.RpcBindingFromStringBindingW",
  279. "rpcrt4.dll.RpcBindingSetAuthInfoExW",
  280. "rpcrt4.dll.RpcStringFreeW",
  281. "rpcrt4.dll.NdrClientCall2",
  282. "user32.dll.PostMessageW",
  283. "user32.dll.PeekMessageW",
  284. "user32.dll.TranslateMessage",
  285. "user32.dll.DispatchMessageW",
  286. "user32.dll.GetWindowLongW",
  287. "wininet.dll.InternetSetOptionW",
  288. "rpcrt4.dll.RpcBindingFree",
  289. "ole32.dll.CoUnmarshalInterface",
  290. "sechost.dll.LookupAccountNameLocalW",
  291. "advapi32.dll.LookupAccountSidW",
  292. "sechost.dll.LookupAccountSidLocalW",
  293. "cryptsp.dll.CryptAcquireContextW",
  294. "cryptsp.dll.CryptGenRandom",
  295. "ole32.dll.NdrOleInitializeExtension",
  296. "ole32.dll.CoGetClassObject",
  297. "ole32.dll.CoGetMarshalSizeMax",
  298. "ole32.dll.CoMarshalInterface",
  299. "ole32.dll.StringFromIID",
  300. "ole32.dll.CoGetPSClsid",
  301. "ole32.dll.CoReleaseMarshalData",
  302. "ole32.dll.DcomChannelSetHResult",
  303. "ieproxy.dll.DllGetClassObject",
  304. "ieproxy.dll.DllCanUnloadNow",
  305. "shell32.dll.SHChangeNotifyRegisterThread",
  306. "comctl32.dll.#4",
  307. "ieshims.dll.IEShims_SetRedirectRegistryForThread",
  308. "rpcrt4.dll.RpcBindingToStringBindingW",
  309. "rpcrt4.dll.RpcStringBindingParseW",
  310. "rpcrt4.dll.I_RpcBindingInqLocalClientPID",
  311. "comctl32.dll.ImageList_Destroy",
  312. "rpcrt4.dll.RpcServerInqCallAttributesW",
  313. "rpcrt4.dll.RpcImpersonateClient",
  314. "rpcrt4.dll.RpcRevertToSelf",
  315. "comctl32.dll.ImageList_LoadImageW",
  316. "rpcrt4.dll.NdrServerCall2",
  317. "rpcrt4.dll.RpcBindingInqObject",
  318. "comctl32.dll.ImageList_Add",
  319. "wininet.dll.GetUrlCacheEntryInfoExW",
  320. "mlang.dll.#112",
  321. "wininet.dll.GetUrlCacheEntryInfoExA",
  322. "uxtheme.dll.OpenThemeData",
  323. "uxtheme.dll.GetThemeMargins",
  324. "uxtheme.dll.GetThemePartSize",
  325. "uxtheme.dll.GetThemeTextMetrics",
  326. "uxtheme.dll.GetThemeBool",
  327. "comctl32.dll.#410",
  328. "uxtheme.dll.IsAppThemed",
  329. "uxtheme.dll.SetWindowTheme",
  330. "uxtheme.dll.CloseThemeData",
  331. "wininet.dll.InternetQueryOptionA",
  332. "gdi32.dll.GetLayout",
  333. "gdi32.dll.GdiRealizationInfo",
  334. "gdi32.dll.FontIsLinked",
  335. "advapi32.dll.RegOpenKeyExW",
  336. "advapi32.dll.RegQueryInfoKeyW",
  337. "gdi32.dll.GetTextFaceAliasW",
  338. "advapi32.dll.RegEnumValueW",
  339. "advapi32.dll.RegCloseKey",
  340. "advapi32.dll.RegQueryValueExW",
  341. "gdi32.dll.GetFontAssocStatus",
  342. "advapi32.dll.RegQueryValueExA",
  343. "advapi32.dll.RegEnumKeyExW",
  344. "uxtheme.dll.GetThemeBackgroundExtent",
  345. "ole32.dll.CoInitialize",
  346. "ole32.dll.RegisterDragDrop",
  347. "uxtheme.dll.IsThemeActive",
  348. "gdi32.dll.GetTextExtentExPointWPri",
  349. "urlmon.dll.#104",
  350. "apphelp.dll.ApphelpCheckShellObject",
  351. "user32.dll.LoadCursorW",
  352. "user32.dll.GetClassInfoExW",
  353. "kernel32.dll.QueryActCtxW",
  354. "kernel32.dll.ActivateActCtx",
  355. "kernel32.dll.FindActCtxSectionStringW",
  356. "kernel32.dll.DeactivateActCtx",
  357. "user32.dll.CallWindowProcW",
  358. "urlmon.dll.CreateUri",
  359. "urlmon.dll.CreateIUriBuilder",
  360. "wininet.dll.GetUrlCacheEntryInfoW",
  361. "sxs.dll.SxsOleAut32RedirectTypeLibrary",
  362. "advapi32.dll.RegOpenKeyW",
  363. "advapi32.dll.RegQueryValueW",
  364. "sxs.dll.SxsOleAut32MapConfiguredClsidToReferenceClsid",
  365. "comctl32.dll.ImageList_Create",
  366. "comctl32.dll.#8",
  367. "comctl32.dll.ImageList_AddMasked",
  368. "uxtheme.dll.GetThemeTextExtent",
  369. "uxtheme.dll.GetThemeFont",
  370. "comctl32.dll.LoadIconWithScaleDown",
  371. "comctl32.dll.ImageList_ReplaceIcon",
  372. "uxtheme.dll.GetThemeInt",
  373. "urlmon.dll.CreateURLMonikerEx",
  374. "urlmon.dll.CreateAsyncBindCtxEx",
  375. "urlmon.dll.RegisterBindStatusCallback",
  376. "urlmon.dll.CreateFormatEnumerator",
  377. "urlmon.dll.UrlMkGetSessionOption",
  378. "urlmon.dll.CoInternetCreateSecurityManager",
  379. "urlmon.dll.CoInternetIsFeatureEnabled",
  380. "oleaut32.dll.#7",
  381. "oleaut32.dll.#8",
  382. "ieframe.dll.#302",
  383. "urlmon.dll.RegisterFormatEnumerator",
  384. "urlmon.dll.RevokeBindStatusCallback",
  385. "urlmon.dll.#101",
  386. "version.dll.GetFileVersionInfoSizeW",
  387. "version.dll.GetFileVersionInfoW",
  388. "version.dll.VerQueryValueW",
  389. "oleaut32.dll.DllGetClassObject",
  390. "oleaut32.dll.DllCanUnloadNow",
  391. "user32.dll.ChangeWindowMessageFilter",
  392. "dwmapi.dll.DwmSetWindowAttribute",
  393. "oleaut32.dll.#500",
  394. "oleaut32.dll.VariantClear",
  395. "ieframe.dll.#234",
  396. "user32.dll.IsWindow",
  397. "user32.dll.SendMessageW",
  398. "uxtheme.dll.DrawThemeBackground",
  399. "uxtheme.dll.DrawThemeText",
  400. "uxtheme.dll.BufferedPaintInit",
  401. "uxtheme.dll.BufferedPaintRenderAnimation",
  402. "uxtheme.dll.GetThemeTransitionDuration",
  403. "uxtheme.dll.BeginBufferedAnimation",
  404. "uxtheme.dll.IsThemeBackgroundPartiallyTransparent",
  405. "uxtheme.dll.DrawThemeParentBackground",
  406. "uxtheme.dll.GetThemeBackgroundContentRect",
  407. "comctl32.dll.ImageList_Draw",
  408. "uxtheme.dll.EndBufferedAnimation",
  409. "gdi32.dll.GdiIsMetaPrintDC",
  410. "ole32.dll.CoRevokeInitializeSpy",
  411. "imm32.dll.ImmGetContext",
  412. "uxtheme.dll.DrawThemeParentBackgroundEx",
  413. "uxtheme.dll.GetThemeEnumValue",
  414. "uxtheme.dll.BeginBufferedPaint",
  415. "uxtheme.dll.EndBufferedPaint",
  416. "wininet.dll.SetUrlCacheEntryInfoA",
  417. "urlmon.dll.#441",
  418. "oleacc.dll.LresultFromObject",
  419. "user32.dll.GetGUIThreadInfo",
  420. "user32.dll.GetCursorInfo",
  421. "user32.dll.GetWindowInfo",
  422. "user32.dll.GetTitleBarInfo",
  423. "user32.dll.GetScrollBarInfo",
  424. "user32.dll.GetComboBoxInfo",
  425. "user32.dll.GetAncestor",
  426. "user32.dll.RealChildWindowFromPoint",
  427. "user32.dll.RealGetWindowClassW",
  428. "user32.dll.GetAltTabInfoW",
  429. "user32.dll.GetListBoxInfo",
  430. "user32.dll.GetMenuBarInfo",
  431. "user32.dll.SendInput",
  432. "user32.dll.BlockInput",
  433. "user32.dll.LogicalToPhysicalPoint",
  434. "user32.dll.PhysicalToLogicalPoint",
  435. "user32.dll.WindowFromPhysicalPoint",
  436. "user32.dll.GetPhysicalCursorPos",
  437. "kernel32.dll.GetModuleFileNameW",
  438. "kernel32.dll.VirtualAllocEx",
  439. "kernel32.dll.VirtualFreeEx",
  440. "ntdll.dll.NtQueryInformationProcess",
  441. "ntdll.dll.NtAllocateVirtualMemory",
  442. "ntdll.dll.NtFreeVirtualMemory",
  443. "oleacc.dll.ObjectFromLresult",
  444. "msimtf.dll.MsimtfIsWindowFiltered",
  445. "shlwapi.dll.PathGetDriveNumberW",
  446. "shlwapi.dll.PathCanonicalizeW",
  447. "shlwapi.dll.PathIsRootW",
  448. "urlmon.dll.#335",
  449. "oleaut32.dll.#19",
  450. "oleaut32.dll.#17",
  451. "oleaut32.dll.#20",
  452. "oleaut32.dll.#23",
  453. "oleaut32.dll.#22",
  454. "oleaut32.dll.#147",
  455. "oleaut32.dll.#4",
  456. "propsys.dll.#430",
  457. "advapi32.dll.RegGetValueW",
  458. "propsys.dll.InitPropVariantFromStringAsVector",
  459. "propsys.dll.PSCoerceToCanonicalValue",
  460. "oleaut32.dll.BSTR_UserSize",
  461. "oleaut32.dll.BSTR_UserMarshal",
  462. "oleaut32.dll.BSTR_UserUnmarshal",
  463. "oleaut32.dll.BSTR_UserFree",
  464. "oleaut32.dll.VARIANT_UserSize",
  465. "oleaut32.dll.VARIANT_UserMarshal",
  466. "propsys.dll.PropVariantToStringAlloc",
  467. "oleaut32.dll.VARIANT_UserUnmarshal",
  468. "oleaut32.dll.VARIANT_UserFree",
  469. "oleaut32.dll.LPSAFEARRAY_UserSize",
  470. "oleaut32.dll.LPSAFEARRAY_UserMarshal",
  471. "oleaut32.dll.LPSAFEARRAY_UserUnmarshal",
  472. "oleaut32.dll.LPSAFEARRAY_UserFree",
  473. "msi.dll.#70",
  474. "urlmon.dll.#330",
  475. "wininet.dll.GetUrlCacheEntryInfoA",
  476. "urlmon.dll.CoInternetQueryInfo",
  477. "wininet.dll.CommitUrlCacheEntryA",
  478. "wininet.dll.FindFirstUrlCacheContainerA",
  479. "wininet.dll.FindNextUrlCacheContainerA",
  480. "wininet.dll.FindCloseUrlCache",
  481. "wininet.dll.CreateUrlCacheContainerA",
  482. "wininet.dll.DeleteUrlCacheContainerA",
  483. "wininet.dll.FindFirstUrlCacheEntryA",
  484. "wininet.dll.DeleteUrlCacheEntryW",
  485. "wininet.dll.FindNextUrlCacheEntryA",
  486. "urlmon.dll.IntlPercentEncodeNormalize",
  487. "wininet.dll.CommitUrlCacheEntryW",
  488. "urlmon.dll.#414",
  489. "dwmapi.dll.DwmInvalidateIconicBitmaps",
  490. "imm32.dll.ImmGetCompositionWindow",
  491. "imm32.dll.ImmGetCandidateWindow",
  492. "uxtheme.dll.GetThemeColor",
  493. "comctl32.dll.#17",
  494. "comctl32.dll.DllGetVersion",
  495. "uxtheme.dll.GetThemeBackgroundRegion"
  496. ]
  497.  
  498. [*] Static Analysis: {}
Advertisement
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!