Analysis Date2015-08-06 23:52:32
MD5097ef68aa4339b82d004bfb213b210e4
SHA1171e01571b6c249560d363ad5d394c0f894d30cf

Static Details:

File typePE32 executable for MS Windows (GUI) Intel 80386 32-bit
Section.text8 md5: f5c7d124b2e1e5a92025f4b2a64bd298 sha1: 24421d61ef192ceba8da245d3aca6221b348b600 size: 48128
Section.data md5: b959a6293efe4457a8bc9a71b5613779 sha1: 59006f6eee3362b47c93da09993d51d877589170 size: 14336
Section.rdata md5: 2d7f6d53db0932914c72b3cad163bdef sha1: 6322ffa02a2e10f46e54c617dc3080086053805a size: 5632
Section.rsrc md5: 4833cceb7f5e8a4df7ed2ae95790435c sha1: e79446f2331e4f14e4c6b76992f27f63f9aeaeb4 size: 11264
Timestamp2009-08-11 11:54:02
VersionProductName: Task Port Annex Minty Oars
FileVersion: 38592 36498 321251
CompanyName: Ashampoo Development GmbH & Co. KG
PackerMicrosoft Visual C++ v7.0
PEhash1a6826a75b28ea5628dbf0f3b4424bfc7f719eee
IMPhash0f43ae7fdf5eeb322bff0809b198c5db
AVCA (E-Trust Ino)Win32/Upatre.AVLZXaB
AVF-SecureGen:Variant.Zusy.94222
AVDr. WebTrojan.DownLoad3.33474
AVClamAVno_virus
AVArcabit (arcavir)Gen:Variant.Zusy.94222
AVBullGuardGen:Variant.Zusy.94222
AVPadvishno_virus
AVVirusBlokAda (vba32)TrojanDownloader.Cabart
AVCAT (quickheal)no_virus
AVTrend MicroTROJ_UPATRE.SMSM
AVKasperskyTrojan.Win32.Generic
AVZillya!Downloader.Elenoocka.Win32.5
AVEmsisoftGen:Variant.Zusy.94222
AVIkarusTrojan-Downloader
AVFrisk (f-prot)W32/Trojan3.IKR
AVAuthentiumW32/Trojan.CKIT-3373
AVMalwareBytesSpyware.Zbot.VXGen
AVMicroWorld (escan)Gen:Variant.Zusy.94222
AVMicrosoft Security EssentialsTrojanDownloader:Win32/Upatre.Y
AVK7no_virus
AVBitDefenderGen:Variant.Zusy.94222
AVFortinetW32/Tiny.NKF!tr.dldr
AVSymantecDownloader.Ponik
AVGrisoft (avg)Downloader.Generic13.CECG
AVEset (nod32)Win32/TrojanDownloader.Elenoocka.A
AVAlwil (avast)Crypt-QWL [Trj]
AVAd-AwareGen:Variant.Zusy.94222
AVTwisterTrojanDldr.Elenoocka.A.wagi
AVAvira (antivir)TR/Crypt.Xpack.67481
AVMcafeeDownloader-FSH!097EF68AA433
AVRisingno_virus

Runtime Details:

Screenshot

Process
↳ C:\malware.exe

Creates FilePIPE\wkssvc
Creates File\Device\Afd\Endpoint
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temp\171e01571b6c249560d363ad5d394c0f894d30cf.rtf
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temp\temp_cab_72875.cab
Creates File\Device\Afd\AsyncConnectHlp
Creates Process"C:\Program Files\Windows NT\Accessories\WORDPAD.EXE" "C:\Documents and Settings\Administrator\Local Settings\Temp\171e01571b6c249560d363ad5d394c0f894d30cf.rtf"
Creates Mutex48387845
Winsock DNSwindowsupdate.microsoft.com

Process
↳ "C:\Program Files\Windows NT\Accessories\WORDPAD.EXE" "C:\Documents and Settings\Administrator\Local Settings\Temp\171e01571b6c249560d363ad5d394c0f894d30cf.rtf"

Creates FilePIPE\lsarpc
Creates MutexCTF.TimListCache.FMPDefaultS-1-5-21-XXXXXXXXXX-XXXXXXXXXX-XXXXXXXXXX-500MUTEX.DefaultS-1-5-21-XXXXXXXXXX-XXXXXXXXXX-XXXXXXXXXX-500

Network Details:

DNSwww.update.microsoft.com.nsatc.net
Type: A
65.55.50.190
DNSwww.update.microsoft.com.nsatc.net
Type: A
65.55.50.158
DNSwindowsupdate.microsoft.com
Type: A
HTTP GEThttp://windowsupdate.microsoft.com/
User-Agent: Opera/9.25 (Windows NT 6.0; U; cn)
Flows TCP192.168.1.1:1031 ➝ 65.55.50.190:80

Raw Pcap
0x00000000 (00000)   47455420 2f204854 54502f31 2e310d0a   GET / HTTP/1.1..
0x00000010 (00016)   55736572 2d416765 6e743a20 4f706572   User-Agent: Oper
0x00000020 (00032)   612f392e 32352028 57696e64 6f777320   a/9.25 (Windows 
0x00000030 (00048)   4e542036 2e303b20 553b2063 6e290d0a   NT 6.0; U; cn)..
0x00000040 (00064)   486f7374 3a207769 6e646f77 73757064   Host: windowsupd
0x00000050 (00080)   6174652e 6d696372 6f736f66 742e636f   ate.microsoft.co
0x00000060 (00096)   6d0d0a43 6f6e6e65 6374696f 6e3a2043   m..Connection: C
0x00000070 (00112)   6c6f7365 0d0a0d0a                     lose....


Strings
=
.

040904B0
32A4
38592  36498 321251
7KL6
Argue
Ashampoo Development GmbH & Co. KG
Bets
Bribe Psalm
CompanyName
Dbms
Deaf
Divan
FileVersion
Fugue
Gang Strafe Cream
Guilt
Hair
MS Sans Serif
Outlaw Seer
Perez Flea Vowel
Pole
ProductName
Real
Rosa Sword
Sift
StringFileInfo
Task Port Annex Minty Oars
Theme
Translation
VarFileInfo
Very
VS_VERSION_INFO
Wails Begin Kiwi
Wild
Woos Epoch Bath
>0=T%#
1Bp%=7
1yY1yy
1YyyyyY9y
%%22}}
%2%2222222%%
%2HHHHH
2}$W2}}
3444686722
4NqSqtYxt61g
75743788637
763468
79;=aMY
96427x
99yq11q
9qYYy9
9y19191
9YYYYYy
Acaned
Acenopi
Aciluk
Acizav
ACUdivD
Acyxep
_adj_fdiv_m32
_adj_fdivr_m16i
_adj_fdivr_m32i
_adj_fdivr_m64
_adj_fprem1
AdLvmTN
Afoqov
Agykivi
Ajejyvu
Akezoj
Akyhot
Alijeq
Amuvoq
__argc
Aruqifa
_assert
AssocQueryKeyW
Awawej
Awetuq
Awopus
Axeqaxa
Axinuho
axlfsghxkybkriq
A_][YWUSQomkigeca
Aziwamy
Belavu
Bezehu
Biceryp
Bidovu
Bihyjyj
Bowekal
Cahuqit
_callnewh
Caroqy
_CIasin
_CIsinh
_CItanh
Citiduw
_clearfp
COG ok
ColorAdjustLuma
_commode
_copysign
_cscanf
_ctime64
_ctype
Cuvopa
Cuwemo
Cybedo
Cycyfa
Dafili
`.data
DialogBoxParamA
Dohaqef
Duwefiw
Ebakuq
Ebojex
Ebokudo
Ecihog
Ecywafu
Edyhit
Efehuc
Egeqoh
Ehatuca
_EH_prolog
EhWkmaUvptfVFac
Elehas
Emaqes
Emecip
emEWGuk52Akcag
Enatoqo
EndDialog
_endthread
Epejym
Erusuc
Etevax
Etiqeda
Evikozu
Ewexep
Ewibuf
ExitProcess
_expand
Ezexiw
Ezuzim
Fafymuz
_fcloseall
_fdopen
Fecino
Felyjo
f$$!!H
_filbuf
_filelengthi64
_fileno
_flsbuf
foAvPQvi
Fozuvyp
_fpclass
__fpecode
_fpieee_flt
FQDNMGIHESI
fscanf
fsGFqW
_ftime
_fullpath
Fupaviq
_futime64
FVCluKILoK
Fynize
Gafima
Galutuk
Gb["iN
Gebeviw
_getche
_Getdays
_getdllprocaddr
_getdrive
_getdrives
_getmaxstdio
GetProcAddress
_getsystime
Gidezal
Gixyhem
Goceces
gOHlHfjPIEn
Gonila
Gowexo
Gymijo
Hacofi
Hacozav
Hadiqi
_heapchk
_heapwalk
!!HHHHH
Hudodi
Huximaj
Huzuka
_hypot
Hyrydyx
Icewime
Ifesefy
Ifesog
IgI#a=
Ihyceqo
iJOTd5mTfPxaX5O
Ijoxica
Ikasef
Ilepyx
Ilyzona
Imilivy
Imokyko
Imulate
Imuvib
_initterm
IntlStrEqWorkerA
Ipaxil
Irijym
Iryhixi
isalpha
_isatty
iscntrl
__iscsymf
ISfPlpSMPTqlmOM
Isisuj
islower
_ismbbkpunct
_ismbbprint
_ismbcdigit
_ismbcgraph
_ismbcl1
_ismbcspace
isprint
iswprint
Ityniwy
Ivagake
Iwafyg
Ixoden
Ixucosy
Jarigit
Jemicol
Jetiga
Jijolip
Jisiti
Jitifu
JO#0I)>
Johufo
Jovupem
Jufofy
Juvasi
Jydevo
Jymityj
Jypyqod
_kbhit
kerhsTTftiEeQwc
KERNEL32.DLL
Kucagu
Kynulif
Lajymur
lAlloc
__lc_handle
Letuqis
Lexygu
_lfind
Ligofaw
_localtime64
Lojenuq
Lomycuq
Lp;\.!
_lrotl
_lsearch
LsgUSQb
lu66e7mb1d5o
M2fw3Puqp
_makepath
MA/t($h
_mbbtombc
_mbcjmstojis
_mbctokata
_mbctombb
__mb_cur_max
_mbscspn
_mbsnbicmp
_mbsncpy
_mbsnicoll
_mbsninc
_mbsnset
_mbspbrk
_mbsrchr
_mbstok
mbtowc
Mileku
Minexy
Miripo
Mivaco
Mivosuk
_mktemp
mmmmm+++6
MMMMMM
MMMMMMM
MMMMMMMM
MMMMMMMMM
MMMMMMMMMMMS
MMMMMMMMMSMSMS
MMMMMMMMMSSMS
MMMMMMMMS
MMMMMMMMSM
MMMMMMMMSMM
MMMMMMMS
MMMMMMMSMM
MMMMMMMSMS
MMMMMMMSMSSS
MMMMMMMSSM
MMMMMMMSSMMM
MMMMMMMSSMS
MMMMMMMSSS
MMMMMMS
MMMMMMSM
MMMMMMSMMM
MMMMMMSMMMM
MMMMMMSMSM
MMMMMMSS
MMMMMMSSM
MMMMMMSSMMMMMSMM
MMMMMMSSS
MMMMMS
MMMMMSM
MMMMMSMM
MMMMMSMMSSMMM
MMMMMSMS
MMMMMSMSM
MMMMMSSMMMM
MMMMMSSMS
MMMMMSSMSSM
MMMMMSSS
MMMMMSSSSMMMMM
MMMMSM
MMMMSMM
MMMMSMMM
MMMMSMMMM
MMMMSMMMMMSSM
MMMMSMMMMSMMMMM
MMMMSMMMS
MMMMSMMS
MMMMSMMSMM
MMMMSMS
MMMMSMSMMMMSM
MMMMSMSMMMSMM
MMMMSS
MMMMSSM
MMMMSSMMMSS
MMMMSSMS
MMMMSSS
MMMMSSSMMM
MMMMSSSMMMSM
MMMMSSSSSMMMSMMM
MMMSMM
MMMSMMM
MMMSMMMMMMSSMM
MMMSMMMMMSSMSMMMS
MMMSMMMS
MMMSMMMSM
MMMSMMMSMS
MMMSMMMSMSMMSS
MMMSMMMSSMMSS
MMMSMMSM
MMMSMMSMMMMMMMMMMSMMM
MMMSMMSMMMMMMMS
MMMSMMSMMMSS
MMMSMMSMS
MMMSMMSMSMMSM
MMMSMMSMSMMSMMMMSM
MMMSMMSS
MMMSMS
MMMSMSMM
MMMSMSMMMM
MMMSMSMMMMM
MMMSMSMMSM
MMMSMSMSM
MMMSMSMSMM
MMMSMSMSSMSMMMMM
MMMSMSMSSSM
MMMSMSS
MMMSMSSMMSMMM
MMMSSM
MMMSSMM
MMMSSMMM
MMMSSMMMM
MMMSSMMMS
MMMSSMMMSMM
MMMSSMS
MMMSSMSS
MMMSSMSSMSS
MMMSSSMMM
MMMSSSMMMMMSMMM
MMMSSSMS
MMMSSSMSMMSMMMMS
MMMSSSMSSMSSSMSMMSMM
MMMSSSSMSMMMMM
MMSMMM
MMSMMMM
MMSMMMMM
MMSMMMMMM
MMSMMMMMMSM
MMSMMMMMSMMM
MMSMMMMMSMMSMM
MMSMMMMMSSMSSMSMMSSSSMSM
MMSMMMMSM
MMSMMMMSMMMMMS
MMSMMMMSSM
MMSMMMS
MMSMMMSMS
MMSMMMSMSMMSMSSM
MMSMMMSS
MMSMMMSSMSSM
MMSMMS
MMSMMSM
MMSMMSMMM
MMSMMSMMMMMSMMS
MMSMMSMS
MMSMMSMSMM
MMSMMSS
MMSMMSSM
MMSMMSSMMMM
MMSMMSSMMMSMM
MMSMSM
MMSMSMMM
MMSMSMMMMMMMMMMMMMMSS
MMSMSMMMMSMM
MMSMSMMMSMSSSS
MMSMSMMMSS
MMSMSMMSM
MMSMSMMSMM
MMSMSMS
MMSMSMSMMMSS
MMSMSMSMMSMMM
MMSMSMSMSMM
MMSMSMSSSSM
MMSMSS
MMSMSSM
MMSMSSMM
MMSMSSMMM
MMSMSSS
MMSMSSSMM
MMSSMM
MMSSMMM
MMSSMMMMMMMM
MMSSMMMMMSSS
MMSSMMMMSMSSMMS
MMSSMMMS
MMSSMMSSMMSMMMMMM
MMSSMS
MMSSMSMM
MMSSMSMS
MMSSMSSM
MMSSSM
MMSSSMMMMSMSSMM
MMSSSMMMS
MMSSSMSS
MMSSSMSSM
MMSSSS
MMSSSSM
MSMMMM
MSMMMMM
MSMMMMMM
MSMMMMMMM
MSMMMMMMMMM
MSMMMMMMMMMS
MSMMMMMMMMMSSM
MSMMMMMMSMM
MSMMMMMS
MSMMMMMSMMMS
MSMMMMMSMMS
MSMMMMMSSSSSMMMM
MSMMMMS
MSMMMMSMMMMMSS
MSMMMMSMMMSMS
MSMMMMSMMSM
MSMMMMSMMSMMMMS
MSMMMMSSMMMSMMMMSM
MSMMMMSSSM
MSMMMS
MSMMMSM
MSMMMSMM
MSMMMSMMM
MSMMMSMMMMM
MSMMMSMMSSSSMMMSMSS
MSMMMSS
MSMMMSSMS
MSMMMSSSMSMSMM
MSMMSM
MSMMSMM
MSMMSMMM
MSMMSMMS
MSMMSMMSSMMSSSMMSMSS
MSMMSMS
MSMMSMSMM
MSMMSMSMS
MSMMSMSMSMM
MSMMSMSSSMMMSSM
MSMMSMSSSMSSM
MSMMSS
MSMMSSM
MSMMSSMMMMM
MSMMSSMMSM
MSMMSSMSMMMM
MSMMSSMSMSMM
MSMMSSS
MSMSMM
MSMSMMM
MSMSMMMMM
MSMSMMMMMM
MSMSMMMMSM
MSMSMMMMSMM
MSMSMMMSSS
MSMSMMS
MSMSMMSMM
MSMSMMSSSS
MSMSMS
MSMSMSMM
MSMSMSMS
MSMSMSMSM
MSMSMSMSSSMM
MSMSMSMSSSMSM
MSMSMSSSMMMM
MSMSMSSSMSMMMMSM
MSMSSM
MSMSSMM
MSMSSMMMM
MSMSSMMMMM
MSMSSMMS
MSMSSMSM
MSMSSMSMM
MSMSSS
MSMSSSMMSMMMMSM
MSMSSSMSM
MSMSSSSSSMMMMM
MSSMMM
MSSMMMM
MSSMMMMM
MSSMMMMMSM
MSSMMMMS
MSSMMMMSM
MSSMMMMSSMMMMMMSM
MSSMMMS
MSSMMMSMMMMMM
MSSMMMSMMMSMSS
MSSMMMSS
MSSMMS
MSSMMSMM
MSSMMSMSM
MSSMMSS
MSSMMSSMMM
MSSMSM
MSSMSMMMMSMS
MSSMSMS
MSSMSMSMMMM
MSSMSMSMMMMMMS
MSSMSMSSMM
MSSSMM
MSSSMMM
MSSSMMMMM
MSSSMMMMMMSS
MSSSMMMMMS
MSSSMMMMSM
MSSSMMMMSSMMSM
MSSSMMMSSSMMM
MSSSMMS
MSSSMMSM
MSSSMMSMMM
MSSSMS
MSSSMSMM
MSSSMSMMMMSMMS
MSSSSM
MSSSSMM
MSSSSMMS
MSSSSMSM
MSSSSS
MSSSSSM
MSSSSSMMSSS
MSVCRT.DLL
Muhewij
Muzoteh
Naciwam
Namevax
NAOWXxmeFDEei
Nebamer
Nexuvu
Nexyvyn
n$FFHJ
Niqutyd
Nowyry
Nujoby
Nyluse
Obobeba
Obuqar
Odohop
Ogeqyl
Ohanyq
Ohapyga
OjxpqBBqDOf
Ojyryn
Okisog
Okufom
Okuxup
Okypoji
OLuRCk
Opewyfa
Oqitygi
Orewoz
Oroxeno
Otamoco
Ovejic
Ovinax
Oxotaj
Oxudag
Oxujary
Ozasuva
p2WOgJI8bMAx8EM
PathAddBackslashA
PathAddExtensionA
PathAppendW
PathBuildRootA
PathCommonPrefixA
PathCommonPrefixW
PathCreateFromUrlA
PathCreateFromUrlW
PathGetArgsA
PathGetArgsW
PathGetCharTypeW
PathIsDirectoryA
PathIsDirectoryEmptyA
PathIsDirectoryEmptyW
PathIsDirectoryW
PathIsFileSpecW
PathIsLFNFileSpecA
PathIsNetworkPathA
PathIsNetworkPathW
PathIsRelativeW
PathIsUNCServerA
PathIsUNCServerW
PathMakePrettyA
PathMakePrettyW
PathMatchSpecW
PathParseIconLocationW
PathQuoteSpacesW
PathRelativePathToW
PathRemoveArgsW
PathRemoveBackslashW
PathRemoveBlanksA
PathRemoveExtensionA
PathRemoveExtensionW
PathRemoveFileSpecA
PathRemoveFileSpecW
PathSetDlgItemPathW
PathSkipRootA
PathStripPathW
PathStripToRootW
PathUndecorateW
PathUnquoteSpacesA
__p__commode
pdffjvloi
__p__fmode
*pH~pn
__p___initenv
__p__iob
Pixifi
__p___mb_cur_max
PR{S:(@
Pubyse
_putenv
PVX!o.
__p___wargv
_pwctype
__p__winver
Pyhuba
Pyligu
Pyloqij
q19y9y
q9y11Y
Qepiqiw
qE,<=Z'
+QI0?W/
Qinibo
Qinovem
Qocadi
Qovujod
qSPmIopf
Qufopi
Qulomes
Quxivev
Qyharux
Qykesat
Qyqacax
Qyqifaq
.rdata
Rihivuz
Riqaru
RLYMITQNK
 RP(~'
__RTCastToVoid
Rusopep
Rydysyc
Ryxopis
s<ACEG
Sajahyx
Samyhi
_seh_longjmp_unwind
SendMessageA
_setsystime
SHCopyKeyA
SHCreateStreamOnFileA
SHDeleteEmptyKeyW
SHDeleteOrphanKeyW
SHDeleteValueW
SHEnumKeyExW
SHGetThreadRef
SHLWAPI.DLL
SHOpenRegStream2A
SHOpenRegStream2W
SHOpenRegStreamW
SHRegCloseUSKey
SHRegCreateUSKeyA
SHRegDeleteEmptyUSKeyW
SHRegDeleteUSValueW
SHRegEnumUSKeyW
SHRegEnumUSValueA
SHRegGetPathA
SHRegGetUSValueA
SHRegOpenUSKeyW
SHSetThreadRef
SHSetValueA
Sisasyl
Sixavar
Siziwyx
skByavwawneBJF
SMMMMM
SMMMMMM
SMMMMMMM
SMMMMMMMMSMMSMM
SMMMMMMMSMMM
SMMMMMMS
SMMMMMMSMMMMSMS
SMMMMMMSSSMS
SMMMMMS
SMMMMMSM
SMMMMMSMSS
SMMMMMSSSMM
SMMMMS
SMMMMSMM
SMMMMSMMM
SMMMMSMMMM
SMMMMSMSM
SMMMMSS
SMMMMSSMSSMM
SMMMSM
SMMMSMMM
SMMMSMSSMM
SMMMSS
SMMMSSM
SMMMSSMM
SMMMSSMMMSM
SMMMSSSM
SMMSMM
SMMSMMMM
SMMSMMMMM
SMMSMMMMMM
SMMSMMMMMS
SMMSMMMMMSMM
SMMSMMMMS
SMMSMMMMSMMMMMMMMSM
SMMSMMMMSSS
SMMSMMMSSS
SMMSMMSMS
SMMSMMSS
SMMSMMSSMSMMMSMM
SMMSMS
SMMSMSM
SMMSMSMM
SMMSMSMMS
SMMSMSMMSMM
SMMSMSS
SMMSMSSMM
SMMSMSSS
SMMSMSSSSMMMM
SMMSSM
SMMSSMM
SMMSSMMM
SMMSSMMSM
SMMSSMMSMSMM
SMMSSS
SMMSSSM
SMMSSSMSSSMMMMMMMSMMS
SMMSSSS
SMMSSSSMS
SMSMMM
SMSMMMM
SMSMMMMM
SMSMMMMMMM
SMSMMMMMMMMMSSMSMM
SMSMMMMMS
SMSMMMMS
SMSMMMMSMSSMM
SMSMMMMSSMS
SMSMMMMSSSMMMSSMMM
SMSMMMS
SMSMMMSMMS
SMSMMS
SMSMMSMMMS
SMSMMSMSM
SMSMMSMSMM
SMSMMSS
SMSMMSSMS
SMSMSM
SMSMSMM
SMSMSMMM
SMSMSMMMMSM
SMSMSMMSMMM
SMSMSMMSS
SMSMSMMSSSSMSM
SMSMSMS
SMSMSMSMM
SMSMSMSMMM
SMSMSMSMMMMSMMMMMMS
SMSMSMSMSS
SMSMSMSMSSM
SMSMSSM
SMSMSSMM
SMSMSSSS
SMSMSSSSMMSS
SMSSMMM
SMSSMMMMS
SMSSMMSMMM
SMSSMSM
SMSSMSMM
SMSSMSSMMM
SMSSSM
SMSSSMM
SMSSSSMSS
SMSSSSS
Sovepaq
_spawnvpe
SPGDMLX
sprintf
SSMMMM
SSMMMMM
SSMMMMMMM
SSMMMMMMMM
SSMMMMMMMSMMMSM
SSMMMMMS
SSMMMMMSMS
SSMMMMSMMM
SSMMMMSMMMMS
SSMMMMSMMMMSS
SSMMMMSMMMSMSMM
SSMMMMSMMSMS
SSMMMS
SSMMMSM
SSMMMSMMM
SSMMMSMSMMMSMMMSSM
SSMMMSS
SSMMMSSMSMMMMMMMMM
SSMMSM
SSMMSMM
SSMMSMMM
SSMMSMMMMM
SSMMSMMS
SSMMSMMSMM
SSMMSMMSMMS
SSMMSMS
SSMMSMSM
SSMMSMSMMSMM
SSMMSS
SSMMSSMM
SSMMSSMMMMMMMMM
SSMSMM
SSMSMMM
SSMSMMMM
SSMSMMMMMMSMM
SSMSMMS
SSMSMMSMM
SSMSMMSS
SSMSMS
SSMSMSMMM
SSMSMSMSMSMSMMMM
SSMSMSS
SSMSSMMS
SSMSSMMSM
SSMSSMS
SSMSSSMSSSMMMMSMSSMMS
SSSMMM
SSSMMMM
SSSMMMMM
SSSMMMMMMMSSSMMM
SSSMMMMMMSMM
SSSMMMMMS
SSSMMMS
SSSMMS
SSSMMSM
SSSMMSS
SSSMSMM
SSSMSMMMS
SSSMSMSSMMMMMMMMMSMMSMM
SSSMSSMMS
SSSMSSMS
SSSSMM
SSSSMMMSSMM
SSSSMMSSMM
SSSSMSMSMSMSMM
SSSSMSS
SSSSSM
SSSSSSMMMM
SSSSSSMSMMMSM
_stati64
strcat
StrCatW
StrChrIW
StrCmpIW
StrCmpNA
StrCmpNIA
StrCmpW
StrCpyNW
StrFormatByteSize64A
StrFormatByteSizeW
__STRINGTOLD
StrIsIntlEqualA
strncat
strncmp
StrPBrkW
StrRChrA
StrRetToBufW
StrRetToStrW
StrStrW
StrToIntExA
StrToIntW
Syhenem
SystemTimeToTzSpecificLocalTime
Sywomiv
Tajufir
Tapadic
Tapehim
!This program cannot be run in DOS mode.
Tikylih
Tixuvef
_toupper
Tupiqu
Tuxoza
uAft0I
Ucodew
Ufuzac
Ugerah
Uhycoso
_ui64tow
Ukahag
Ukaraz
Ukelowi
Ukomyf
Ulugyn
Unoqav
Unyzev
Upameb
UrlApplySchemeA
UrlCanonicalizeW
UrlCombineA
UrlCompareW
UrlIsA
USER32.DLL
Uvimepy
UWTYGLNBAXDV
Uxicahe
Uxihisi
Uxotet
Vahefe
Vanezu
vekVNVB
Viwesis
`VLNX15
vswprintf
Vukecan
Vupyvu
Vuraqin
VWITVEAT
Vyzazu
_waccess
_wchdir
wcschr
wcscpy
wcsncat
wcspbrk
wcsrchr
wcsspn
wcstol
wcstombs
_wexecl
_wfullpath
_wgetcwd
__wgetmainargs
Wirofe
Wotolow
_wpopen
_wrename
_wspawnlpe
_wstati64
Wuhixu
Wukylol
Wuperuq
Wuvicij
Wuxiciw
Wysewaq
XAUSIDVCDHLY
Xeqebot
Xisafe
Xizywy
xnveebwtsqos
Xoceqi
Xupyxo
Xurodem
xusaegqhgs
Xytygyq
y11y9yq9
Y1qy9yy19
Y1qyyyy
y9yyYY
Ydicaj
Ydihacu
Yheqip
Yhyvexy
Yjepeh
Yjyfima
yKatyhy
Ykicydo
Ymedaho
Ymydilo
Ynufene
Ypadyte
Ypucipy
Yq9yyqq9
Yrohef
Yvepyn
Ywobuwe
}{ywusq
Yy1yqqY9
Yy1yY1
yy1yyy
YyfgHnHBifErt
yyq9Yq
Yyqyyq
Yyy919
YyY9qy
Yyyq1Y
yYyqyYqy
yyyyy1
YyYyy9
Yzihyk
Yzowire
Z;	}:86#
Zafirez
Zekewun
Zimiwom
Zozysil
Zujire
Zupary
Zuwimi
Zygoron
Zyjoquh
Zykuso
..zz,>