oyo2009 - 2009-9-8 15:55:00
样本，还有可疑DLL。狗屎。
附件: 您所在的用户组无法下载或查看附件
附件: 您所在的用户组无法下载或查看附件 附件: 您所在的用户组无法下载或查看附件 附件: 您所在的用户组无法下载或查看附件 文件 WinMail.exe 接收于 2009.09.10 01:21:08 (UTC)
当前状态: 完成
结果: 1/41 (2.44%)
[img=14,14]https://www.virustotal.com/img/compress-icon.png[/img] 格式化文本
打印结果 [img=14,14]https://www.virustotal.com/img/print-icon.png[/img]
| 反病毒引擎 | 版本 | 最后更新 | 扫描结果 |
| a-squared | 4.5.0.24 | 2009.09.10 | - | AhnLab-V3 | 5.0.0.2 | 2009.09.09 | - |
| AntiVir | 7.9.1.14 | 2009.09.09 | - | Antiy-AVL | 2.0.3.7 | 2009.09.09 | - |
| Authentium | 5.1.2.4 | 2009.09.09 | - | Avast | 4.8.1351.0 | 2009.09.09 | - |
| AVG | 8.5.0.412 | 2009.09.10 | - | BitDefender | 7.2 | 2009.09.10 | - |
| CAT-QuickHeal | 10.00 | 2009.09.09 | - | ClamAV | 0.94.1 | 2009.09.10 | - |
| Comodo | 2268 | 2009.09.10 | - | DrWeb | 5.0.0.12182 | 2009.09.10 | - |
| eSafe | 7.0.17.0 | 2009.09.09 | - | eTrust-Vet | 31.6.6728 | 2009.09.09 | - |
| F-Prot | 4.5.1.85 | 2009.09.09 | - | F-Secure | 8.0.14470.0 | 2009.09.10 | - |
| Fortinet | 3.120.0.0 | 2009.09.10 | - | GData | 19 | 2009.09.10 | - |
| Ikarus | T3.1.1.72.0 | 2009.09.10 | - | Jiangmin | 11.0.800 | 2009.09.09 | - |
| K7AntiVirus | 7.10.840 | 2009.09.09 | - | Kaspersky | 7.0.0.125 | 2009.09.10 | - |
| McAfee | 5736 | 2009.09.09 | - | McAfee+Artemis | 5736 | 2009.09.09 | - |
| McAfee-GW-Edition | 6.8.5 | 2009.09.09 | Heuristic.BehavesLike.Win32.Virus.I | Microsoft | 1.5005 | 2009.09.10 | - |
| NOD32 | 4412 | 2009.09.10 | - | Norman | 6.01.09 | 2009.09.09 | - |
| nProtect | 2009.1.8.0 | 2009.09.09 | - | Panda | 10.0.2.2 | 2009.09.09 | - |
| PCTools | 4.4.2.0 | 2009.09.09 | - | Prevx | 3.0 | 2009.09.10 | - |
| Rising | 21.46.24.00 | 2009.09.09 | - | Sophos | 4.45.0 | 2009.09.10 | - |
| Sunbelt | 3.2.1858.2 | 2009.09.10 | - | Symantec | 1.4.4.12 | 2009.09.10 | - |
| TheHacker | 6.3.4.3.399 | 2009.09.09 | - | TrendMicro | 8.950.0.1094 | 2009.09.09 | - |
| VBA32 | 3.12.10.10 | 2009.09.09 | - | ViRobot | 2009.9.9.1925 | 2009.09.09 | - |
| VirusBuster | 4.6.5.0 | 2009.09.09 | - |
| 附加信息 |
| File size: 397312 bytes | MD5...: 7e6ea9cb72b5de84a5d700bed877e5f9 |
| SHA1..: 85b6aa429350333343db149eb2198e7fc38c3e4f | SHA256: 8261b7c2a776f59baefabeeaf8e9425cb0f4d3700ef63caa7095398368ed3c6e |
| ssdeep: 6144:ymCXOFm/RN8T2z9lwr1R6XdU9qRRN8T2z9lwr1R6XdU9q23ts1m8QXLbyOg 4H:ymCn/RN8T2v2sXdpRN8T2v2sXd41M | PEiD..: - |
| PEInfo: PE Structure information ( base data ) entrypointaddress.: 0x5981 timedatestamp.....: 0x47918ed8 (Sat Jan 19 05:47:04 2008) machinetype.......: 0x14c (I386) ( 5 sections ) name viradd virsiz rawdsiz ntrpy md5 .text 0x1000 0x5f8a 0x6000 6.07 200624c7a91ad4d689bcdbb9a8bfe5c7 .data 0x7000 0x418 0x200 0.69 e44a48b864e361ffed4fb98d1036b46d .tls 0x8000 0x9 0x200 0.00 bf619eac0cdf3f68d496ea9344137e8b .rsrc 0x9000 0x59bd8 0x59c00 6.80 c3f901eba381fcbc9edb9985072fdde7 .reloc 0x63000 0xa98 0xc00 3.01 23900d239de18248641951843cf86073 ( 9 imports ) > ADVAPI32.dll: TraceEvent, GetTraceEnableFlags, GetTraceEnableLevel, GetTraceLoggerHandle, RegisterTraceGuidsA, UnregisterTraceGuids, RegCloseKey, RegSetValueW, RegOpenKeyExW, RegCreateKeyExW, RegSetValueExW, RegQueryValueExW, RegDeleteKeyW > KERNEL32.dll: FreeLibrary, LoadLibraryA, lstrlenW, GetFileAttributesW, GetFileAttributesA, GetLastError, ReleaseMutex, CloseHandle, WaitForSingleObject, CreateMutexW, GetCurrentProcess, GetModuleHandleA, ExpandEnvironmentStringsW, GetExitCodeProcess, CreateProcessW, GetModuleHandleW, HeapSetInformation, GetVersionExA, SetFileAttributesW, DeleteFileW, FindFirstFileExW, FindClose, FindNextFileW, FindFirstFileW, SetCurrentDirectoryW, GetCurrentDirectoryW, GetShortPathNameW, CreateDirectoryW, InterlockedCompareExchange, GetTickCount, QueryPerformanceCounter, SetUnhandledExceptionFilter, GetStartupInfoW, Sleep, InterlockedExchange, GetCurrentProcessId, GetSystemTimeAsFileTime, TerminateProcess, UnhandledExceptionFilter, GetProcAddress, SetConsoleCtrlHandler, GetCurrentThreadId > USER32.dll: SetWindowsHookExA, GetGUIThreadInfo, IsChild, UnhookWindowsHookEx, GetLastActivePopup, GetPropW, GetParent, CallNextHookEx, SendMessageW, IsDialogMessageW, SetPropW, FindWindowW, GetWindowThreadProcessId, AllowSetForegroundWindow, SetForegroundWindow, SendMessageTimeoutA, MessageBoxW, LoadStringW > msvcrt.dll: _vsnwprintf, _controlfp, _except_handler4_common, _terminate@@YAXXZ, __set_app_type, __p__fmode, __p__commode, _adjust_fdiv, __setusermatherr, _amsg_exit, _initterm, _wcmdln, exit, _XcptFilter, _exit, _cexit, __wgetmainargs, memset > MSOERT2.dll: CopyRegistry > COMCTL32.dll: - > ole32.dll: CoUninitialize, CoFreeAllLibraries, CoTaskMemFree, CoInitializeEx, CoCreateInstance, OleInitialize, CoFreeUnusedLibraries, CoFreeUnusedLibrariesEx, OleUninitialize > SHELL32.dll: SHCreateItemFromParsingName, SHGetSpecialFolderPathW, SHSetLocalizedName, SHGetSpecialFolderLocation, SHChangeNotify > SHLWAPI.dll: -, PathFindFileNameW, PathCombineW, SHRegGetPathW, SHRegGetValueA, StrStrIW, SHDeleteValueW, SHRegGetBoolUSValueA, PathRemoveBlanksW, PathRemoveFileSpecW, PathAddExtensionW, PathAppendW, -, StrCmpW, StrCmpNIW, SHDeleteKeyW, SHSetValueW, SHRegGetValueW, StrCmpIW, SHGetValueW ( 0 exports ) | RDS...: NSRL Reference Data Set - |
| pdfid.: - | trid..: Win32 Executable Generic (42.3%) Win32 Dynamic Link Library (generic) (37.6%) Generic Win/DOS Executable (9.9%) DOS Executable Generic (9.9%) Autodesk FLIC Image File (extensions: flc, fli, cel) (0.0%) |
文件 explorer.exe 接收于 2009.09.10 01:48:11 (UTC)
当前状态: 完成
结果: 0/41 (0%)
[img=14,14]https://www.virustotal.com/img/compress-icon.png[/img] 格式化文本
打印结果 [img=14,14]https://www.virustotal.com/img/print-icon.png[/img]
| 反病毒引擎 | 版本 | 最后更新 | 扫描结果 |
| a-squared | 4.5.0.24 | 2009.09.10 | - | AhnLab-V3 | 5.0.0.2 | 2009.09.09 | - |
| AntiVir | 7.9.1.14 | 2009.09.09 | - | Antiy-AVL | 2.0.3.7 | 2009.09.09 | - |
| Authentium | 5.1.2.4 | 2009.09.09 | - | Avast | 4.8.1351.0 | 2009.09.09 | - |
| AVG | 8.5.0.412 | 2009.09.10 | - | BitDefender | 7.2 | 2009.09.10 | - |
| CAT-QuickHeal | 10.00 | 2009.09.09 | - | ClamAV | 0.94.1 | 2009.09.10 | - |
| Comodo | 2268 | 2009.09.10 | - | DrWeb | 5.0.0.12182 | 2009.09.10 | - |
| eSafe | 7.0.17.0 | 2009.09.09 | - | eTrust-Vet | 31.6.6728 | 2009.09.09 | - |
| F-Prot | 4.5.1.85 | 2009.09.09 | - | F-Secure | 8.0.14470.0 | 2009.09.10 | - |
| Fortinet | 3.120.0.0 | 2009.09.10 | - | GData | 19 | 2009.09.10 | - |
| Ikarus | T3.1.1.72.0 | 2009.09.10 | - | Jiangmin | 11.0.800 | 2009.09.09 | - |
| K7AntiVirus | 7.10.840 | 2009.09.09 | - | Kaspersky | 7.0.0.125 | 2009.09.10 | - |
| McAfee | 5736 | 2009.09.09 | - | McAfee+Artemis | 5736 | 2009.09.09 | - |
| McAfee-GW-Edition | 6.8.5 | 2009.09.09 | - | Microsoft | 1.5005 | 2009.09.10 | - |
| NOD32 | 4412 | 2009.09.10 | - | Norman | 6.01.09 | 2009.09.09 | - |
| nProtect | 2009.1.8.0 | 2009.09.09 | - | Panda | 10.0.2.2 | 2009.09.09 | - |
| PCTools | 4.4.2.0 | 2009.09.09 | - | Prevx | 3.0 | 2009.09.10 | - |
| Rising | 21.46.24.00 | 2009.09.09 | - | Sophos | 4.45.0 | 2009.09.10 | - |
| Sunbelt | 3.2.1858.2 | 2009.09.10 | - | Symantec | 1.4.4.12 | 2009.09.10 | - |
| TheHacker | 6.3.4.3.399 | 2009.09.09 | - | TrendMicro | 8.950.0.1094 | 2009.09.09 | - |
| VBA32 | 3.12.10.10 | 2009.09.09 | - | ViRobot | 2009.9.9.1925 | 2009.09.09 | - |
| VirusBuster | 4.6.5.0 | 2009.09.09 | - |
| 附加信息 |
| File size: 2927104 bytes | MD5...: 4f554999d7d5f05daaebba7b5ba1089d |
| SHA1..: e509a42554cc0e5888ac8bf494d3c02223238609 | SHA256: 178d20aaecbd408dffda71ae4d70ad61c278229b4cd7dcd7b854a9a8404ca657 |
| ssdeep: 24576:RJxr/smirDRnW+7pGYCW5uXSA7jTeFadRsxKb/g/J/ulZ:R3DsmiZLC8A7 /eFw33l | PEiD..: - |
| PEInfo: PE Structure information ( base data ) entrypointaddress.: 0x271b3 timedatestamp.....: 0x4907e242 (Wed Oct 29 04:10:42 2008) machinetype.......: 0x14c (I386) ( 4 sections ) name viradd virsiz rawdsiz ntrpy md5 .text 0x1000 0x6bea5 0x6c000 6.42 01efa0ddb451b63dd0bfb396b1d576ab .data 0x6d000 0x215c 0x2000 0.84 7f3a4ccfbf6b5dd627231a22b6ee6f12 .rsrc 0x70000 0x2566a0 0x256800 7.04 bc9643f9701a6c8da708d2bd5b751ff2 .reloc 0x2c7000 0x5a34 0x5c00 6.74 a246e27f509144adabfb479ba70f67ce ( 19 imports ) > ADVAPI32.dll: RegCloseKey, RegCreateKeyW, RegGetValueW, RegOpenKeyExW, GetTraceEnableFlags, GetTraceEnableLevel, GetTraceLoggerHandle, RegisterTraceGuidsW, UnregisterTraceGuids, RegCreateKeyExW, RegSetValueExW, RegQueryValueExW, EventWrite, EventEnabled, GetLengthSid, GetTokenInformation, OpenProcessToken, EventUnregister, EventRegister, GetUserNameW, RegDeleteValueW, RegEnumKeyExW, RegQueryInfoKeyW, TraceMessage, RegOpenKeyW, RegEnumKeyW, RegEnumValueW, CloseServiceHandle, OpenServiceW, OpenSCManagerW, QueryServiceStatus, CheckTokenMembership, ConvertStringSecurityDescriptorToSecurityDescriptorW, OpenThreadToken, ConvertSidToStringSidW, StartServiceW, CreateWellKnownSid > KERNEL32.dll: GetSystemTime, GetFileAttributesW, FindClose, FindNextFileW, FindFirstFileW, GetLocalTime, GetDateFormatW, GetTimeFormatW, GetLocaleInfoW, FlushInstructionCache, RaiseException, GetSystemWindowsDirectoryW, SetLastError, ReadFile, GetFileSize, CreateFileW, InterlockedCompareExchange, LoadLibraryA, SystemTimeToFileTime, ExpandEnvironmentStringsW, GlobalGetAtomNameW, MultiByteToWideChar, GetEnvironmentVariableW, GetCurrentProcessId, GetModuleHandleW, lstrlenW, OpenEventW, SetEvent, GetBinaryTypeW, EnterCriticalSection, LeaveCriticalSection, GetSystemTimeAsFileTime, CompareFileTime, GlobalFree, GetTickCount, MulDiv, GetUserDefaultLangID, GetPrivateProfileIntW, GetCurrentThread, GetThreadPriority, GetCurrentThreadId, SetThreadPriority, CompareStringOrdinal, lstrcmpiW, HeapSetInformation, SetErrorMode, CreateMutexW, ReleaseMutex, GetTimeZoneInformation, SetFilePointer, SetProcessShutdownParameters, GetSystemDirectoryW, CreateEventW, SetTermsrvAppInstallMode, RegisterApplicationRestart, ExitProcess, GetModuleFileNameW, GetPrivateProfileStringW, HeapDestroy, InitializeCriticalSection, DeleteCriticalSection, GetCurrentProcess, GetProcessHeap, HeapAlloc, QueryPerformanceFrequency, GetFileAttributesExW, QueueUserWorkItem, GetLongPathNameW, GetProcessTimes, TerminateThread, GetProcessId, CreateIoCompletionPort, GetQueuedCompletionStatus, GetWindowsDirectoryW, FormatMessageW, QueryFullProcessImageNameW, GlobalAlloc, DuplicateHandle, GetCurrentDirectoryW, WideCharToMultiByte, WriteFile, DeactivateActCtx, ActivateActCtx, ReleaseActCtx, CreateActCtxW, FindResourceExW, LoadResource, LockResource, GetUserDefaultUILanguage, LoadLibraryW, GetProcAddress, FreeLibrary, WaitForSingleObject, CreateProcessW, GetCommandLineW, GetStartupInfoW, CreateThread, AssignProcessToJobObject, ResumeThread, Sleep, QueryInformationJobObject, LocalAlloc, LocalFree, CloseHandle, OpenProcess, SetPriorityClass, GetPriorityClass, CreateJobObjectW, SetInformationJobObject, GetLastError, InterlockedDecrement, InterlockedIncrement, HeapFree, UnhandledExceptionFilter, TerminateProcess, QueryPerformanceCounter, GetModuleHandleA, SetUnhandledExceptionFilter, InterlockedExchange, VirtualAlloc, VirtualFree, DelayLoadFailureHook > GDI32.dll: GetStockObject, CombineRgn, GetLayout, CreatePatternBrush, OffsetViewportOrgEx, GdiAlphaBlend, GetTextExtentPoint32W, ExtTextOutW, SetWindowOrgEx, GetPixel, PatBlt, CreateRectRgn, GetClipRgn, IntersectClipRect, GetViewportOrgEx, SetViewportOrgEx, SelectClipRgn, GetBkColor, CreateCompatibleBitmap, OffsetWindowOrgEx, SetBkColor, GetTextExtentPointW, GetClipBox, CreateDIBSection, CreateRectRgnIndirect, SetTextColor, SetBkMode, GetTextMetricsW, CreateFontIndirectW, CreateSolidBrush, GetObjectW, DeleteObject, CreateCompatibleDC, SelectObject, BitBlt, DeleteDC, GetDeviceCaps > USER32.dll: GetDlgItem, LoadCursorW, RegisterClassW, IsChild, SetTimer, MonitorFromRect, SetWindowTextW, SetClassLongW, GetClassInfoW, GetClassLongW, KillTimer, GetClassInfoExW, IsWindowEnabled, GetShellWindow, GetIconInfo, SetScrollInfo, GetLastActivePopup, GetSystemMenu, IsIconic, IsZoomed, EnableMenuItem, IsWindowVisible, IsWindow, MonitorFromWindow, GetMonitorInfoW, GetWindowInfo, BeginDeferWindowPos, DeferWindowPos, EndDeferWindowPos, SetFocus, SetForegroundWindow, LoadMenuW, SetMenuInfo, SetMenuDefaultItem, GetSubMenu, TrackPopupMenuEx, LoadImageW, InsertMenuItemW, DestroyIcon, DeleteMenu, GetMenuItemInfoW, SetMenuItemInfoW, CharUpperBuffW, PostQuitMessage, LoadStringW, ShutdownBlockReasonCreate, GetWindowLongA, SetWindowLongW, UnregisterDeviceNotification, RegisterDeviceNotificationW, RegisterWindowMessageW, SetWindowPos, RegisterClassExW, GetDesktopWindow, UpdateWindow, InvalidateRect, BeginPaint, LoadBitmapW, SetLayeredWindowAttributes, EndPaint, ShowWindow, DefWindowProcW, MoveWindow, DestroyWindow, UnregisterClassW, SetProcessDPIAware, PeekMessageW, CreateWindowExW, DialogBoxParamW, MsgWaitForMultipleObjects, GetKeyboardLayout, ActivateKeyboardLayout, IsProcessDPIAware, PrintWindow, GetDCEx, GetPropW, GetNextDlgGroupItem, GetNextDlgTabItem, GetDlgCtrlID, ChildWindowFromPointEx, GetCapture, GetGUIThreadInfo, SetWindowLongA, CharUpperW, GetWindowDC, RegisterClipboardFormatW, UnhookWinEvent, SetWinEventHook, ReleaseCapture, GetUserObjectInformationW, GetProcessWindowStation, FlashWindowEx, GetForegroundWindow, PostMessageW, CreatePopupMenu, GetWindowThreadProcessId, MsgWaitForMultipleObjectsEx, CharPrevW, CharNextW, DispatchMessageW, TranslateMessage, GetMessageW, EqualRect, UnionRect, MapWindowPoints, GetClientRect, EnumWindows, EndTask, SetThreadDesktop, GetThreadDesktop, GetMenuItemID, IsHungAppWindow, DrawTextW, GetSysColor, TrackPopupMenu, SendMessageCallbackW, DeregisterShellHookWindow, EndDialog, IsDlgButtonChecked, LoadIconW, GetSysColorBrush, CloseDesktop, OpenInputDesktop, SetActiveWindow, IsRectEmpty, GetAsyncKeyState, RegisterShellHookWindow, FillRect, GetCursorPos, SetPropW, CopyRect, LockSetForegroundWindow, MonitorFromPoint, InflateRect, GetClassNameW, SubtractRect, RedrawWindow, EnumDisplayMonitors, OffsetRect, IntersectRect, SetWindowRgn, GetMenuState, GhostWindowFromHungWindow, HungWindowFromGhostWindow, GetWindowPlacement, RemovePropW, SendMessageTimeoutW, UnregisterHotKey, RegisterHotKey, InsertMenuW, ModifyMenuW, ClientToScreen, ScreenToClient, GetMenuItemCount, GetFocus, GetScrollInfo, InternalGetWindowText, GetKeyState, ChangeDisplaySettingsW, GetWindowLongW, EnumChildWindows, SendMessageW, GetWindow, GetWindowRect, PtInRect, SetCursor, ChildWindowFromPoint, SetCursorPos, GetMessagePos, LoadAcceleratorsW, WaitMessage, TranslateAcceleratorW, GetWindowRgnBox, GetActiveWindow, MessageBeep, SetWindowPlacement, SetRect, SendNotifyMessageW, UpdateLayeredWindow, GetLastInputInfo, SendDlgItemMessageW, AllowSetForegroundWindow, RemoveMenu, SetParent, CallWindowProcW, EnableWindow, GetDlgItemInt, SetDlgItemInt, CheckDlgButton, CopyIcon, DrawFocusRect, NotifyWinEvent, ExitWindowsEx, DrawEdge, WindowFromPoint, GetDoubleClickTime, SetCapture, TrackMouseEvent, LockWorkStation, AppendMenuW, GetParent, SetScrollPos, SetRectEmpty, AdjustWindowRectEx, BringWindowToTop, CascadeWindows, GetSystemMetrics, SystemParametersInfoW, FindWindowW, ReleaseDC, GetDC, DestroyMenu, GetMenuDefaultItem, TileWindows, GetAncestor, SwitchToThisWindow, CheckMenuItem, ShowWindowAsync > msvcrt.dll: memset, _unlock, _ftol2_sse, _except_handler4_common, __set_app_type, memcpy, free, memmove, realloc, __dllonexit, _lock, _onexit, _terminate@@YAXXZ, _controlfp, _vsnwprintf, malloc, __wgetmainargs, _cexit, _exit, __p__fmode, _XcptFilter, exit, _wcmdln, _initterm, _amsg_exit, __setusermatherr, _adjust_fdiv, __p__commode > ntdll.dll: NtOpenThreadToken, NtOpenProcessToken, RtlGetProductInfo, NtQueryInformationToken, NtClose, NtQueryInformationProcess, NtSetInformationProcess, WinSqmAddToStream, NtSetSystemInformation > SHLWAPI.dll: PathGetDriveNumberW, -, -, PathRemoveFileSpecW, -, -, SHRegGetUSValueW, -, StrDupW, PathQuoteSpacesW, -, -, -, -, StrChrIW, -, -, -, SHRegOpenUSKeyW, SHRegQueryUSValueW, StrCmpW, AssocQueryStringW, -, -, -, -, -, AssocQueryKeyW, PathParseIconLocationW, PathIsPrefixW, -, PathRemoveExtensionW, SHOpenRegStream2W, PathFileExistsW, -, -, -, -, PathFindExtensionW, SHQueryInfoKeyW, -, -, -, -, -, -, -, -, SHDeleteKeyW, PathAppendW, SHDeleteValueW, -, -, -, PathRemoveArgsW, PathRemoveBlanksW, StrCmpNIW, PathFindFileNameW, -, SHSetValueW, SHGetValueW, SHCreateThreadRef, SHSetThreadRef, -, -, PathCombineW, SHRegGetValueW, StrToIntW, -, -, -, PathGetArgsW, StrChrW, -, -, -, -, SHStrDupW, -, -, -, -, -, StrRetToBufW, -, -, -, -, -, -, StrRetToStrW, -, -, StrStrIW, -, -, PathMatchSpecW, PathIsRootW, PathIsNetworkPathW, SHQueryValueExW, AssocCreate, StrCmpIW, -, -, -, StrCmpNW, -, -, StrPBrkW, -, -, -, PathStripToRootW, -, PathIsDirectoryW, - > SHELL32.dll: -, -, -, -, -, -, -, -, SHGetDesktopFolder, -, SHBindToFolderIDListParent, -, -, -, -, -, -, SHGetIDListFromObject, -, -, -, -, -, -, SHCreateShellItemArrayFromIDLists, -, -, SHCreateItemFromIDList, SHCreateShellItemArrayFromShellItem, -, -, SHBindToFolderIDListParentEx, SHChangeNotify, SHAddToRecentDocs, DuplicateIcon, -, -, -, ShellExecuteW, -, -, SHGetPathFromIDListA, SHUpdateRecycleBinIcon, SHGetKnownFolderIDList, SHGetFolderPathEx, SHFileOperationW, -, -, -, -, -, -, SHGetPathFromIDListW, -, -, -, -, -, -, -, -, -, ExtractIconExW, -, -, -, -, SHGetSpecialFolderLocation, -, -, SHBindToParent, Shell_NotifyIconW, SHGetFolderPathAndSubDirW, Shell_GetCachedImageIndexW, SHGetFolderPathW, -, SHEvaluateSystemCommandTemplate, -, -, -, -, -, -, -, -, -, -, -, SHBindToObject, -, ShellExecuteExW, -, -, SHGetSpecialFolderPathW, -, SHParseDisplayName, -, SHGetFolderLocation, -, -, -, -, - > ole32.dll: CoTaskMemFree, CoCreateInstance, CoRegisterClassObject, CoRevokeClassObject, CoGetClassObject, OleInitialize, OleUninitialize, CoGetObject, StringFromGUID2, CoUninitialize, CoInitialize, RevokeDragDrop, RegisterDragDrop, CoRegisterMessageFilter, CoMarshalInterThreadInterfaceInStream, CoGetInterfaceAndReleaseStream, CoTaskMemAlloc, CoCreateFreeThreadedMarshaler, DoDragDrop, CoInitializeEx, CreateBindCtx, CoFreeUnusedLibraries, PropVariantClear > OLEAUT32.dll: -, -, -, -, -, - > SHDOCVW.dll: -, - > UxTheme.dll: IsCompositionActive, IsAppThemed, GetThemeMargins, GetThemeRect, IsThemePartDefined, GetThemeBackgroundRegion, DrawThemeTextEx, GetThemeFont, GetThemeColor, GetThemeBool, GetThemeInt, SetWindowTheme, DrawThemeText, GetThemeTextExtent, DrawThemeBackground, CloseThemeData, OpenThemeData, DrawThemeParentBackground, GetThemePartSize, GetThemeMetric, GetThemeBackgroundContentRect > POWRPROF.dll: GetPwrCapabilities > dwmapi.dll: DwmIsCompositionEnabled, -, DwmSetWindowAttribute, DwmEnableBlurBehindWindow, DwmQueryThumbnailSourceSize, DwmGetColorizationColor, DwmUpdateThumbnailProperties, DwmRegisterThumbnail, DwmUnregisterThumbnail > gdiplus.dll: GdiplusShutdown, GdipCloneImage, GdipDrawImageRectI, GdipSetInterpolationMode, GdiplusStartup, GdipCreateFromHDC, GdipCreateBitmapFromStreamICM, GdipCreateBitmapFromStream, GdipGetImageHeight, GdipGetImageWidth, GdipDisposeImage, GdipLoadImageFromFileICM, GdipLoadImageFromFile, GdipDeleteGraphics, GdipFree, GdipAlloc, GdipSetCompositingMode > slc.dll: SLGetWindowsInformationDWORD > RPCRT4.dll: RpcBindingFree, RpcStringFreeW, RpcBindingFromStringBindingW, NdrClientCall2, RpcStringBindingComposeW, I_RpcExceptionFilter, RpcBindingSetAuthInfoExW > PROPSYS.dll: PSGetPropertyKeyFromName, PSPropertyKeyFromString, PSGetPropertyDescription, PSGetNameFromPropertyKey, VariantToBooleanWithDefault, VariantToInt32WithDefault, VariantToStringWithDefault, PSCreateMemoryPropertyStore, VariantToStringAlloc, PropVariantToStringAlloc > BROWSEUI.dll: -, - ( 0 exports ) | RDS...: NSRL Reference Data Set - |
| pdfid.: - | trid..: Win32 Executable Generic (42.3%) Win32 Dynamic Link Library (generic) (37.6%) Generic Win/DOS Executable (9.9%) DOS Executable Generic (9.9%) Autodesk FLIC Image File (extensions: flc, fli, cel) (0.0%) |
| ThreatExpert info: <a href='http://www.threatexpert.com/report.aspx?md5=4f554999d7d5f05daaebba7b5ba1089d' target='_blank'>http://www.threatexpert.com/report.aspx?md5=4f554999d7d5f05daaebba7b5ba1089d<;/a> |
附件: 您所在的用户组无法下载或查看附件