Analysis Date2015-07-21 14:20:57
MD52391e0c7d75dad45c2a9cff02194af73
SHA1e98605eb62d8a7d355fb2759b069f6cea1e72b46

Static Details:

File typePE32 executable for MS Windows (GUI) Intel 80386 32-bit
Section.text md5: 14bfff0d212501b87b3f1a014f88160f sha1: 980abee585d9033e1e9cbc12a7c2c5098f2f1bef size: 95744
Section.rdata md5: 9d0d4eaf1ac8476bf45b2a36f472db7c sha1: 14ce7fe414f0714ee2c775d8a9dfdbe363be2a86 size: 73216
Section.data md5: 82f8f80bdd95feaf71b204a111d6b45a sha1: f8a048a3ea0caad6de4b102d5aae86e1ed919e9e size: 9216
Section.css md5: b22c020b87887d9fe38eeb7104a5a99b sha1: e6bd975b81f77a9b8a273dba3502c043880737e5 size: 76288
Section.rsrc md5: 5d7ed29ad81272e8a989f520f2d967de sha1: 4ba7d351466e96ec8ea36b90b235328962dd4286 size: 24576
Section.reloc md5: c274d7cf85fc9209491d2bfa2266223c sha1: c85fe7deb754742fea69e4984e97d8bf9fd10e50 size: 14848
Timestamp2012-02-24 10:52:50
VersionLegalCopyright: © Microsoft Corporation. All rights reserved.
InternalName: basecsp.dll
FileVersion: 6.1.7601.17514 (win7sp1_rtm.101119-1850)
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
ProductVersion: 6.1.7601.17514
FileDescription: Microsoft Base Smart Card Crypto Provider
OriginalFilename: basecsp.dll
PEhash7374263f4fa4992ba6b45d1c6c5c6cedae9588c2
IMPhash4e09ef631855be2a3c27976e1f33cf2f
AVArcabit (arcavir)Gen:Variant.Kazy.583485
AVCAT (quickheal)Trojan.Agen.r6
AVKasperskyTrojan.Win32.Agentb.bobr
AVFortinetW32/Agentb.AM!tr
AVTwisterTrojan.Agentb.bobr.obdb!
AVAuthentiumW32/Trojan.PETV-1444
AVAd-AwareGen:Variant.Kazy.583485
AVVirusBlokAda (vba32)Trojan.Agentb
AVZillya!Trojan.Agentb.Win32.8288
AVFrisk (f-prot)no_virus
AVMalwareBytesTrojan.FakeMS.ED
AVBullGuardGen:Variant.Kazy.583485
AVAvira (antivir)TR/Crypt.ZPACK.Gen4
AVTrend Microno_virus
AVSymantecTrojan.Gen
AVClamAVno_virus
AVAlwil (avast)Malware-gen:Win32:Malware-gen
AVBitDefenderGen:Variant.Kazy.583485
AVEmsisoftGen:Variant.Kazy.583485
AVPadvishno_virus
AVIkarusTrojan.Win32.Redyms
AVMicroWorld (escan)Gen:Variant.Kazy.583485
AVGrisoft (avg)Crypt4.BYF
AVMcafeeRDN/Generic BackDoor!bct
AVK7Trojan ( 004b6d551 )
AVEset (nod32)Win32/Redyms.AM
AVDr. Webno_virus
AVF-SecureGen:Variant.Kazy.583485
AVMicrosoft Security EssentialsTrojan:Win32/Ramdo.H
AVRisingno_virus
AVCA (E-Trust Ino)no_virus

Runtime Details:

Screenshot

Process
↳ C:\malware.exe

Creates FileC:\Documents and Settings\Administrator\Local Settings\Temp\a2.tmp
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temp\a1.tmp
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temp\a2.tmp
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temp\a1.tmp

Network Details:


Raw Pcap

Strings
..{.T`..r3...
...
..Ae)>/.m.
.3.=7.c.
.eW..P..3v........
......a...
.
7
K.......S.+.r.V..
8.U.-..
.s...{...\....,r.eh.L..
]
.[.G.lh.....R
`.,(S......v$a
..zv.. .,I.K..@UE.l}Ln;K.,.
...
L.kS8.
4
D0b...<
..hZ.i.].P...-.F
 g......t:....G%...`.B]K...iN.;G....{
-mh.aX.y:
.n...@VQHZXETI[Kqgwkwkq.ZRf|qk{Gd.~~VOb_FUI]T][_FQmey..d.
.}.|.
........
UgEcvymtd
vlrwfvm0cln
Q!.P P...NL..L.L..H.GH
....e8=.;.G.{
.
.

040904B0
6.1.7601.17514
6.1.7601.17514 (win7sp1_rtm.101119-1850)
BASECSP
basecsp.dll
CompanyName
en-US
FileDescription
FileVersion
InternalName
LegalCopyright
Legal_policy_statement
Legal_Policy_Statement
Microsoft
Microsoft Base Smart Card Crypto Provider
Microsoft Corporation
 Microsoft Corporation. All rights reserved.
MOFDATA
MOF_RESOURCE
msvcp120d.dl
 Operating System
OriginalFilename
ProductName
ProductVersion
StringFileInfo
SubC
Translation
VarFileInfo
VS_VERSION_INFO
 Windows
<<='''
;";(;.;
!!!!!!
!!!!!!!
..????.
..??...?*
)-|{{{
{{{{{{{{{
{{{{{{{{{{
%%%%%%
%%%%%%%
%%%%%%%%%
;0;<;\;
0!0'0.040=0C0K0U0^0d0j0q0|0
0"0)0/060<0E0S0b0i0t0
0&0,0=0J0Q0W0c0h0p0v0
0"0(01070@0S0Y0_0j0r0
0%0+020A0c0m0s0
0 0)030=0G0m0x0
0#0+040>0H0Q0[0d0j0q0w0
0"0,070=0F0L0U0`0f0
0.0;0B0I0W0^0d0l0r0{0
0"0=0C0I0V0]0g0r0~0
0(020=0C0L0V0`0f0n0|0
0!020?0E0V0\0b0s0
0%020?0K0Q0W0`0g0r0|0
0,02090K0R0Y0j0v0}0
0!080>0E0N0Y0`0h0o0z0
0@0S0[0
0)181>1E1K1Q1W1`1f1m1w1
; ;*;0;6;?;E;
070403125309Z
<"<0<7<><P<^<e<l<x<~<
0A1K1S1Z1g1m1r1z1
0C1I1T1b1n1t1z1
;0<=<D<m<w<}<
='=0=:=D=N=Y=g=x=~=
> >&>0>f>m>s>
?#?*?0?;?F?M?T?a?g?p?z?
0i0o0v0|0
:*:0:;:k:q:
100701213655Z
100831221932Z
11<<=''
1#10181R1g1{1
110708205909Z
1!1*10161=1I1S1^1n1x1
1!1'1-141:1C1N1Y1_1e1w1
1 1&1,151?1I1T1_1f1
1#1)1/151@1K1U1^1m1y1
1%1+121G1P1U1[1{1
1%1-131;1
1 1*151D1P1U1[1k1|1
1 1&161D1_1d1k1
1$1.171A1h1p1|1
1 1)171I1[1e1k1u1{1
1&131D1J1P1\1h1n1t1
1&151;1A1L1W1a1j1t1}1
1+151@1F1O1U1\1g1m1s1y1
1$151D1[1a1j1s1}1
1)161=1L1T1Z1c1i1v1|1
1!242:2^2d2x2
130124223339Z
130327200825Z
130327201313Z
130924174141Z
131005090423Z0#
140424223339Z0
140627200825Z0
140627201313Z0
141224174141Z0
=%=+=1=7=C=N=a=h=s=z=
='=1=7===I=U=\=k=
<"<*<1<7<=<P<[<j<t<{<
<*<1<8<?<F<S<^<d<k<r<y<
>+>1>8>?>F>S>j>p>v>
;$;1;8;@;G;N;Y;d;j;s;
@18u(^
:':1:<:B:I:T:Z:c:i:p:w:
?(?1?:?C?L?U?]?c?j?t?}?
>">(>1><>C>R>\>h>n>w>
=*=1=E=
<*<1<><E<K<Q<\<b<z<
:1:=:f:,;9;@;
1G1^1j1
="=+=1=<=G=M=\=b=g=q=x=
1H1O1}1
1http://www.microsoft.com/PKI/docs/CPS/default.htm0@
1Jv1=+r
1L2R2Y2b2j2s2~2
1regesacoigue
?*?1?W?_?u?{?
200831222932Z0y1
20131004233521Z
20131005090424.955Z0
20131005233521Z0t0:
210403130309Z0w1
2&20272B2H2O2U2[2d2j2r2|2
2"2)212T2_2k2v2
2!2(2.2_2h2n2w2}2
2!2(2/2<2k2w2}2
2#2)2/252;2E2O2U2\2g2m2v2|2
2%2+232<2F2Q2\2c2j2}2
2!2(252;2I2O2V2b2s2y2~2
2%2/262@2K2Y2`2k2
2%2-272=2V2^2e2r2x2}2
2"2-282C2I2T2Z2g2m2y2
2.2=2C2I2Q2[2b2m2s2y2
2/2:2F2L2S2Z2d2j2p2|2
2&2/2M2
2$232:2A2R2^2d2s2{2
2%232D2U2[2a2p2v2
2#262C2H2P2d2j2p2{2
2)272=2C2N2T2Z2a2n2t2{2
250701214655Z0|1
260708210909Z0~1
? ?(?2?8?A?H?W?c?j?q?x?~?
<(<2<8<><G<M<m<t<
(28vq)^qA
?$?+?2?9?F?W?_?g?n?s?z?
?!?'?2?9?R?`?r?x?~?
? ?+?2?C?I?N?V?w?}?
<&<,<2<<<D<J<S<]<g<m<v<|<
2dVVEEE
=#=,=2=?=E=K=`=l=r=~=
>$>2>?>F>P>u>
2tperspectiveafirst-rate
$`2X`F
=-=3=?=
*31595+4faf0b71-ad37-4aa3-a671-76bc052344ad0
*31642+2860b52e-c4a3-454d-bc1e-32c5add17e900
3*30363J3Q3x3
3	3%303;3@3F3
3#3)303?3J3i3o3
3#3)313:3C3L3V3`3
3$3,323;3e3m3y3
3#3)32393@3N3[3n3
3%3+323F3L3
33335..?
3#3)3/3B3G3M3U3^3
3$3-343:3@3L3Y3`3g3u3}3
3$3*353<3D3U3[3i3t3
3&3,353?3I3X3^3e3o3y3
3%3.383A3K3Q3Z3a3l3{3
3%3+383C3J3Q3_3m3t3z3
3/3<3C3I3R3Z3`3h3t3{3
3/3@3G3N3U3e3k3q3
3.343:3K3S3Y3e3k3r3x3
33494f4t4{4
...33.5***.
3"353<3C3I3f3v3
335zzz
3/3V3\3o3
3)40464<4C4J4}4
3%4x4~4
>#>+>3>9>B>K>Q>^>k>q>w>~>
=3=9=?=K=^=d=w=
:':-:3:A:h:z:
>">,>3>:>B>L>V>c>o>t>|>
; ;';-;3;<;E;K;R;X;h;v;|;
3H3R3X3_3e3l3u3
3http://www.microsoft.com/pkiops/docs/primarycps.htm0@
> >&>->3>:>@>K>X>
3X4_4f4m4|4
=%=4=[=
40i0o0u0~0
4+40464<4C4O4U4_4m4r4x4
4$404D4M4V4_4g4m4s4y4
4'43494@4F4L4]4c4i4y4
4 43494@4L4e4k4w4}4
4$4*414:4C4J4[4j4p4v4
4'4-4:4@4F4S4\4b4i4s4}4
4 4&4,474?4a4o4|4
4444MMhhhh
4444MMhhhhh
4444MMMhhhh
4(4/474>4D4K4V4a4l4{4
4#4-474A4K4V4`4i4
4%4+474D4K4Q4X4_4f4w4
444MMhhhhh
444MMMhhhh
444MMMhhhhh
4-4B4K4Q4[4a4j4
4+5F5Y5f5p5{5
4]5i5o5
4>5K5S5Z5`5l5
=4>A>M>X>b>l>w>
4E4K4R4X4a4h4p4y4
?#?)?.?4?E?K?s?
=4=:=F=
> >4>>>F>L>R>Z>d>k>s>y>
:%:+:4:;:F:P:X:^:e:k:s:{:
>%>+>4>:>@>G>M>}>
:$:,:4:::@:I:P:X:a:g:p:w:
4k4x4~4
4K4X4a4
4n4w4}4
:':.:4:::@:u:
:,:4:v:
4W4^4i4o4x4
..????5.
..?5?.
51585c5
..??5*3*5.
.??..55
5#505;5F5S5Y5e5r5x5
5*515>5I5`5g5n5u5
?55**3
..????555.
..????555****
..????555*****
...????555****
...???555*****
5!5(50565<5D5N5T5\5e5q5w5}5
5!5'50575?5G5Z5k5t5
5%5+515^5k5r5
5"5*535=5C5L5[5k5q5
5&5,535:5J5W5a5k5u5{5
5%5,545<5D5P5Y5^5d5n5w5
..????5555****
...???5555****
..????5555?.?5*
...???5555**5*
5!5)5/555<5B5H5W5d5k5q5}5
5 5)5/575G5M5W5]5
5 5-585C5I5R5]5d5o5u5{5
5%5,595?5P5]5c5i5u5~5
5"5=5C5I5T5g5
5(565A5P5V5^5h5r5
5&585G5M5Y5f5l5v5}5
5!5J5`5o5{5
.????55?PIII
565<5d5~5
5"6,656;6B6H6
;";(;5;C;I;O;Z;`;x;
<'<5<=<D<Q<X<_<h<n<w<
?)?/?5?<?D?W?]?d?l?r?|?
= =*=5=@=F=N=V=\=e=k=t={=
> >'>.>5>F>S>]>f>p>y>
.?5G*3
...5G.a
;!;';-;5;=;G;M;S;\;f;t;
:#:,:5:>:H:N:T:[:f:l:s:|:
<#<+<5<?<I<S<]<
5M5Z5i5v5}5
< </<5<;<Q<W<]<n<u<~<
; ;*;5;<;s;
5U6\6u6{6
..??.?5**z
636N6T6s6
6*60666?6E6M6W6^6l6
6!60666=6Y6d6k6v6|6
6#606@6G6L6R6X6e6l6s6y6
6+636:6L6S6Z6`6i6o6w6
6"6(606:6@6G6Q6_6e6
6 6)636=6Q6X6+787?7F7U7p7
6$6-63696@6F6N6X6^6e6m6t6~6
6!6'6-636>6L6S6
6"6/666=6E6L6
6(6.6;6A6G6O6X6b6q6~6
6&6,6=6C6I6X6^6c6i6o6u6|6
6%6+6<6J6R6Y6_6d6j6r6z6
6!6,676=6C6I6V6\6b6n6
6)6A6M6v6}6
6$6E6K6_6
6@6N6Z6a6n6t6{6
?%?,?6?A?Q?W?p?|?
='=-=6=<=B=H=Q=d=p=|=
=%=6=B=N=U=\=g=s=y=
>$>)>/>6><>B>V>\>
<,<6<<<D<J<Q<W<]<d<j<p<y<
?$?,?6?<?E?K?Q?W?`?j?t?
6intricationaexceeding
:+:6:O:\:m:
;&<,<7<
737?7E7T7a7g7n7{7
758I8O8V8]8
7(717;7F7P7Y7c7l7r7x7
7+72797?7E7P7]7d7
7-73797O7a7t7{7
7/757B7M7T7]7c7l7w7
7/767=7G7X7d7j7q7
7"7(717;7B7L7V7\7b7j7
7 7)727P7V7\7u7{7
7#7*73797B7H7O7W7`7k7
7"7(757;7A7N7U7b7h7u7{7
7&7,757>7D7M7X7^7g7m7v7
7$7,797E7L7S7e7w7}7
7,7=7J7P7W7f7r7x7
7&7:7N7h7p7w7
7,787>7a7g7s7|7
7)7K7Q7X7
:!:':7:A:H:Q:[:e:k:t:z:
;7;b;q;
>(>7>C>I>b>
>#>.>7>=>C>I>W>b>z>
7D7P7V7c7j7p7v7
:7;>;I;O;X;_;i;r;|;
7O7V7k7x7
7q8x8~8
7VVEEE
{7zd+#
>$>.>8>
8*808p8
8)868<8B8N8T8
8"8+82888>8G8M8W8`8j8t8
8!8(8.848D8U8^8d8j8r8|8
8 8&8,858;8D8J8Q8\8b8o8|8
8 8&8-868<8C8I8Q8Y8_8t8
8 8&8,878A8N8T8Z8e8k8
8+8:8@8F8R8^8h8p8
8"8.8;8G8S8[8
8!8(8/8V8_8k8q8x8
8"8'8.8Y8g8t8{8
8%8:8B8V8h8o8w8}8
8.8?8E8K8Q8X8^8d8u8
8 8=8J8W8]8
8.8;8L8S8Z8k8y8
8"8.8W8r8~8
8.8G8Z8n8u8
='=.=8=A=J=T=^=h=s=y=
"8AU2i
<)</<8<><c<
8didelphidaeahushed-up
8http://www.microsoft.com/pki/certs/MicrosoftRootCert.crt0
8S8`8g8m8s8|8
\8tnarrow-mindedlyatabletop
92989>9O9U9\9f9o9y9
929?9E9K9W9^9d9j9{9
9):5:c:i:o:{:
9 :&:-:8:C:I:Q:Z:d:j:r:{:
9#92999B9Q9_9i9
9,929>9F9l9
9)969=9\9c9
9!9(93999B9i9q9x9~9
9'9-939D9J9P9f9r9
9 9+949:9@9G9Q9[9a9i9r9{9
9 9'949;9A9G9W9g9v9|9
9$9-979C9I9R9\9g9n9v9}9
9$9.989A9G9P9V9\9d9m9u9{9
9-999?9
9#9)9/9@9F9L9S9[9d9o9z9
9&9-9?9J9U9`9k9q9w9
9999www````````````````````````
9"9(9L9R9]9
9 9&9n9t9}9
9!9'9o9O:
9#9W9j9
<"<(</<9<B<K<U<[<d<o<z<
:(:/:9:C:M:V:_:i:o:v:
9E9P9V9\9b9j9s9{9
9e9s9y9
;9;E;];i;o;u;
9elsewhereaentry
=,=9=@=F=M=W=a=g=n=w=}=
>9?I?W?c?k?r?
9L9Y9~9
[9pM!W4
</9TytKM<
9X:^:l:x:
adenopathyaimbibition
aerologyalocator
=;=A=G=M=T=_=e=n=t=}=
=-=:=A=G=Q=W=`=f=o=u=|=
?'?A?H?O?V?l?}?
alliariaarostrum
AllocConsole
amphiprionasb
anaplasiaakala
antiorgasticapaillard
Aopenworkasnags
Aperspectiveafirst-rate
arabicaunestablished
araucariaceaeapoints
architecturalawinch
ascomyceteamommon
attemptapry
autocracyacompense
autogiroadragonhead
automobileapriestess
avengementadonzel
^AvggqqA8"
bacchantearightly
bagelathen(a)
basswoodadoxycycline
beauticianascentless
BeginPaint
beneathaseamark
bezonianaaraliaceae
Bhttp://www.microsoft.com/pki/certs/MicRooCerAut2011_2011_03_22.crt0
;-<;<B<K<Y<f<s<
=<=B=N=
boliviaadoorbell
bootlegaintermeddler
<B<W<]<c<i<p<{<
cacklyasyllabic
camp-madeadisfranchise
canaliculateatrigonal
cartilageatax-increase
cCqggUeT
ceiboatupungatito
centerfieldasuum
chimneystackabedroom
Chttp://crl.microsoft.com/pki/crl/products/MicrosoftTimeStampPCA.crl0X
Chttp://www.microsoft.com/pkiops/crl/MicCodSigPCA2011_2011-07-08.crl0a
ciceronianagibberish
;!;c;j;s;y;
`cleancutaapish
;';\;c;l;s;{;
CoFreeAllLibraries
CoFreeUnusedLibraries
CommandLineToArgvW
compenseaignite
convallariaamustela
convertibleawinnipeg
:C:O:r:
~cralibidinous
CreateFileA
CreateThread
> >C>T>^>h>
]daftlyacamp-made
@.data
DDDDDDDDDDDDDDDDD
DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD
DDDDDDDDDDDDDDDDDK:::::
DebugBreak
deceasedadictates
:decreasedabang
dejectionabefoulment
}dejectionabefoulment
deriveahelichrysum
DestroyWindow
diaphragmakennel
disruptivelyafarrier
<#</<=<D<K<[<b<k<q<w<
;D;M;V;v;
dolefulnessalinger
doxycyclineaimply
=D=P=V=\=
DragFinish
=@ D"u
d@Vlobbyismaprominently
eastapriggism
eeeeeeeeeeeeeeeeeeeeeeee
eeeeeeeTTTTTT
EEEEEVVV
EEEEVV
EEEEVVV
EEEVVV
Ehttp://crl.microsoft.com/pki/crl/products/MicCodSigPCA_08-31-2010.crl0Z
Ehttp://crl.microsoft.com/pki/crl/products/MicRooCerAut_2010-06-23.crl0Z
Ehttp://crl.microsoft.com/pki/crl/products/MicTimStaPCA_2010-07-01.crl0Z
Ehttp://www.microsoft.com/pkiops/certs/MicCodSigPCA2011_2011-07-08.crt0
>$>*>:>E>K>S>]>c>i>q>z>
EndMenu
EPicarusaunthankfulness
epigramaexocoetidae
EtJeuhockaintra
;E;T;Z;u;
ExitThread
expectanceadolefulness
?extensionasubjunctive
<F=''''
F0L0X0d0j0p0|0
FatalExit
fetishacohibition
   ffBBBB$$$$
   ffBBBBB$$$
   ffBBBBB$$$$
   fffBBBB$$$
   fffBBBB$$$$
  fffBBBB$$$$
   fffBBBBB$$$
  fffBBBBB$$$
FFFFF===
FFFFFF=======''''''
FFFFF===FF<
FFFFFF===F
FFFFFFFFFFF
Fgranuleaphysicism
f*-hangersatransmute
flabiumaalliaria
flowerlessasubsequent
:::F:L:S:Y:_:p:
F'LtZ+
:%:,:::F:M:\:c:i:r:x:
FreeEnvironmentStringsA
=G*1)u
Gatajoavestige
g;bA8"
gdaarabia
GDI32.dll
`Ge`@N
GetCapture
GetCommandLineW
GetComputerNameA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetDesktopWindow
GetDialogBaseUnits
GetDoubleClickTime
GetEnvironmentStrings
GetFileSize
GetFileVersionInfoA
GetMessageTime
GetSysColor
GetSystemDirectoryA
GetTempPathA
GetUserDefaultLangID
GetVersion
GetVersionExA
GetWindowsDirectoryA
gheeapamlico
gibberishavittariaceae
gilderafennel
<"<;<G<M<S<d<v<
gperinealalucendo
gradualaneoteric
granuleaphysicism
`grasslessastator
groundsasec
^growlasyringa
> >(>/>;>`>g>s>y>
]>gtJeuhockaintra
guillemetsaunintelligibility
GXXXHHHHH
GXXXXHHHHH
GXXXXXHHHHH
GXXXXXXHHHHH
GXXXXXXXXHHHH
H!!!!!!
heftathysanopter
=h=n=t=
hollyhockaissueless
homileticafactotum
Hprecedentaantirrhinum
;!;H;R;Y;_;i;r;|;
?http://crl.microsoft.com/pki/crl/products/microsoftrootcert.crl0T
http://microsoft.com0
>http://www.microsoft.com/pki/certs/MicCodSigPCA_08-31-2010.crt0
>http://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt0
<http://www.microsoft.com/pki/certs/MicrosoftTimeStampPCA.crt0
>http://www.microsoft.com/pki/certs/MicTimStaPCA_2010-07-01.crt0
Hxfidgetyahectic
hydrophobiaablinkard
Iautocracyacompense
igniteagasification
Ihttp://crl.microsoft.com/pki/crl/products/MicRooCerAut2011_2011_03_22.crl0^
%%%%ik
Ikvisiteamelon
Imisproportionapeddler
imprimitaskean
indestructibilityajingo
InSendMessage
InSendMessageEx
intermeddleraspray-dried
<;<I<O<[<h<n<
<;<I<P<
ireversalaintempestivity
IsDebuggerPresent
:::@:I:S:]:h:n:v:
IsWindow
?\?i?v?}?
Ivisiteamelon
Iyorkaprayers
%%%%%iZ,
&J%%%%%%
j36j~&
@jingoastrategist
jjj+++
jjj++++
jjjj+++
jjjj++++
Jmysidaceaameaningfulness
Jregardfulacoordinately
jsymploceagiro
kashaascaly
kdejectionabefoulment
kennelaguillemets
KERNEL32.dll
kilkennyauncarved
kingcraftapoori
::::KK
:::::KK
KK::::
KK:::::
::::KKK
k)~LEPj
?=?K?q?}?
kValkalinuriaaclod
kvulgumasphagnales
kwhizzingacatiline
*?*kXIc
> >'>L>
lCsuperscriptaapostacy
L"E2~K
L&*H$_Z
like-mindedachampion
LineTo
LLLL)))YYY
LoadIconA
LocalAlloc
LocalFree
lstrlenA
? ?&?M?]?|?
macrozoarcesascopal
#matrilinealacastanospermum
maukinamonosemous
mealieaprosauropoda
meaningfulnessanunnation
melamaukin
Mi&9footboardaworkmanship
	microsoft1-0+
Microsoft Code Signing PCA
Microsoft Code Signing PCA0
Microsoft Code Signing PCA 2011
Microsoft Code Signing PCA 20110
Microsoft Corporation0
Microsoft Corporation1
Microsoft Corporation1!0
Microsoft Corporation1(0&
Microsoft Corporation1&0$
Microsoft Corporation1#0!
Microsoft Corporation1200
$Microsoft Root Certificate Authority
$Microsoft Root Certificate Authority0
)Microsoft Root Certificate Authority 20100
)Microsoft Root Certificate Authority 20110
"Microsoft Time Source Master Clock0
Microsoft Time-Stamp PCA
Microsoft Time-Stamp PCA0
Microsoft Time-Stamp PCA 2010
Microsoft Time-Stamp PCA 20100
Microsoft Time-Stamp Service
Microsoft Time-Stamp Service0
misproportionapeddler
mommonawhigs
mononuclearaput
MOPR1'0%
MOPR1301
MoveToEx
mucronatedaconvallaria
myrmecophyticanorman
mysidaceaameaningfulness
naucleaasuffrage
=nbP4u
nCipher DSE ESN:B8EC-30A4-71441%0#
nCipher DSE ESN:C0F4-3086-DEF81%0#
nCipher NTS ESN:B027-C6F8-1D881+0)
Ndeceasedadictates
;niggardaequations
NIuPz.zz
NNIIII
noninterferenceafoundering
ntdll.dll
numbaunclutch
;#;);/;<;N;U;Z;`;
Nuz5*5
oK0D$"<
ole32.dll
o>terraceaunsuitable
Ouppercutaaddable
overanxiousatelephotography
Paaa.3*
PADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPAD
#paleozoologyahaunting
paralogizeacampfire
paveaarbitrament
pdejectionabefoulment
peaceableauniformly
[peddlerabasswood
perspectiveafirst-rate
physicismaantiorgastic
pinnotheresalandlord
?P?^?k?r?y?
pleasedacondensing
pluckaunstartling
pmisproportionapeddler
pppppp
prelateacravenness
preraphaelitismamooted
prominentlyalimewater
prosodyaaplitic
_*'Pu$
PuuuPz?*
?P?W?]?h?w?
Qepigramaexocoetidae
QEX82q'
Q:gilderafennel
r~akow
`.rdata
Redmond1
@.reloc
renovatearesting
reshamalversation
ResumeThread
Rgilderafennel
R[handwritingabodiless
RichU#
RPCRT4.dll
Rpepigramaexocoetidae
>>>>>~~~\\\rrrr}}
}}}rrrr\\\~~>>>>>>
sacatraalinseed
saidaukraine
sandpaperyaspinney
%%%%%_|SC
scalyaundrilled
.sealedamodelled
sectaryadelf
SendMessageA
SetCapture
SetDoubleClickTime
SetUnhandledExceptionFilter
sgaundesirableness
SHELL32.dll
?;?S?]?j?s?
smokerpartysociableahydrophobia
smonoxideahock
soakingsoftaduties
spirallyashampoo
=SQ<fu
@@@@ss
statorahollyhock
storthingacontopus
SuspendThread
?'?.?t?
tephramancyacleancut
TerminateProcess
>T>f>p>y>
!This program cannot be run in DOS mode.
tJeuhockaintra
|tJeuhockaintra
}"T^qvnc
TranslateMessage
treckerathoreauvian
TTTTTTeeeeeee
;";U;\;
U2incircumspectasympathetic
ucacklyasyllabic
uEyorkaprayers
ukraineatripotage
unbecomingnessaabdominoscope
unblushlngasaprobic
undecipheredaperineal
undesirablenessaflightiness
UnhandledExceptionFilter
unkennelabegoniaceae
USER32.dll
=%*u~u
UuidFromStringA
uuuaPPPP
vAvgd]
<(=V=b=h=t=
VERSION.dll
VirtualAlloc
VirtualFree
"virulentayahi
vulgumasphagnales
,vulgumasphagnales
<`V+v@
VVEEEE
VVVEEEE
VVVEEEEE
WaitForSingleObject
waningaacorea
Washington1
washroomamesothelioma
{{{{W]c
wcsncpy
wesleyaamphiprion
=w'.gu
whiskawheedle
Wjtrousseauaadiposity
wkadisarming
wopaacinar
WqVNHE
WriteFile
{{{{WW
{{{WW&
WW{{{{
{{{WWW
{{{{WWW
WWW{{{{
````````````````````````www999
{{{WWWW
{{{{{WWWWW
{{{{{{WWWWW
WWWWWW{
X!!!!!!
< <'<.<:<@<X<c<i<o<x<~<
Xcralibidinous
Xmelamaukin
XXHHHH
XXXHHHHH
XXXXHHHHH
XXXXXHHHH
XXXXXHHHHH
XXXXXX
XXXXXXH
XXXXXXHH
XXXXXXHHH
XXXXXXHHHHH
XXXXXXX
XXXXXXXHH
XXXXXXXHHHH
yafflearendezvous
ydejectionabefoulment
ydirefulamatrass
:.:>:Y:_:e:{:
ygBgilderafennel
YN=w'M
yorkaprayers
>yorkaprayers
yshofleawasherman
YYY)))LLLL
z?5??.
z.?5**
zgilderafennel
z/mhvq
zmisproportionapeddler
..??.zz
%[Z,(Z