× Cookies are disabled! This site requires cookies to be enabled to work properly
SHA256: a75fd68dc39ba54733fba875d6d346a01b58cef27458951cdab4b0f295e2e207
File name: ws.dll
Detection ratio: 0 / 46
Analysis date: 2013-06-21 05:06:40 UTC ( 4 years, 8 months ago )
Antivirus Result Update
Yandex 20130620
AhnLab-V3 20130620
AntiVir 20130621
Antiy-AVL 20130621
Avast 20130621
AVG 20130621
BitDefender 20130621
ByteHero 20130613
CAT-QuickHeal 20130620
ClamAV 20130621
Commtouch 20130620
Comodo 20130621
DrWeb 20130621
Emsisoft 20130621
eSafe 20130620
ESET-NOD32 20130620
F-Prot 20130620
F-Secure 20130621
Fortinet 20130621
GData 20130621
Ikarus 20130621
Jiangmin 20130621
K7AntiVirus 20130620
K7GW 20130620
Kaspersky 20130620
Kingsoft 20130506
Malwarebytes 20130620
McAfee 20130621
McAfee-GW-Edition 20130621
Microsoft 20130621
eScan 20130621
NANO-Antivirus 20130621
Norman 20130620
nProtect 20130621
Panda 20130620
PCTools 20130521
Rising 20130619
Sophos AV 20130621
SUPERAntiSpyware 20130620
Symantec 20130621
TheHacker 20130620
TotalDefense 20130620
TrendMicro 20130621
TrendMicro-HouseCall 20130621
VBA32 20130620
VIPRE 20130621
ViRobot 20130621
The file being studied is a Portable Executable file! More specifically, it is a Win32 DLL file.
Authenticode signature block and FileVersionInfo properties
Copyright
Copyright © '1C' 1996-2012

Publisher 1C Company
Product 1C:Enterprise 8.2
Version 8.2.17.143
Original name ws.dll
Internal name ws
File version 8.2.17.143
Description ws
Comments 1C:Enterprise 8.2 WS component
Signature verification Signed file, verified signature
Signing date 12:37 PM 11/14/2012
Signers
[+] 1C Company
Status Certificate out of its validity period
Issuer None
Valid from 1:00 AM 2/9/2010
Valid to 12:59 AM 4/15/2013
Valid usage Code Signing
Algorithm SHA1
Thumbprint B29881D991017300EB0658C86B7997BFD291382B
Serial number 2F 6D 30 BB 1E 99 96 AA B8 88 CC A6 2D EE A6 E5
[+] VeriSign Class 3 Code Signing 2009-2 CA
Status Valid
Issuer None
Valid from 1:00 AM 5/21/2009
Valid to 12:59 AM 5/21/2019
Valid usage Client Auth, Code Signing
Algorithm SHA1
Thumbprint 12D4872BC3EF019E7E0B6F132480AE29DB5B1CA3
Serial number 65 52 26 E1 B2 2E 18 E1 59 0F 29 85 AC 22 E7 5C
[+] VeriSign Class 3 Public Primary Certification Authority (PCA3 G1 SHA1)
Status Valid
Issuer None
Valid from 1:00 AM 1/29/1996
Valid to 12:59 AM 8/3/2028
Valid usage Server Auth, Client Auth, Email Protection, Code Signing
Algorithm SHA1
Thumbprint A1DB6393916F17E4185509400415C70240B0AE6B
Serial number 3C 91 31 CB 1F F6 D0 1B 0E 9A B8 D0 44 BF 12 BE
Counter signers
[+] Symantec Time Stamping Services Signer - G3
Status Certificate out of its validity period
Issuer None
Valid from 1:00 AM 5/1/2012
Valid to 12:59 AM 1/1/2013
Valid usage Timestamp Signing
Algorithm SHA1
Thumbrint 8FD99D63FB3AFBD534A4F6E31DACD27F59504021
Serial number 79 A2 A5 85 F9 D1 15 42 13 D9 B8 3E F6 B6 8D ED
[+] VeriSign Time Stamping Services CA
Status Valid
Issuer None
Valid from 1:00 AM 12/4/2003
Valid to 12:59 AM 12/4/2013
Valid usage Timestamp Signing
Algorithm SHA1
Thumbrint F46AC0C6EFBB8C6A14F55F09E2D37DF4C0DE012D
Serial number 47 BF 19 95 DF 8D 52 46 43 F7 DB 6D 48 0D 31 A4
[+] Thawte Timestamping CA
Status Valid
Issuer None
Valid from 1:00 AM 1/1/1997
Valid to 12:59 AM 1/1/2021
Valid usage Timestamp Signing
Algorithm MD5
Thumbrint BE36A4562FB2EE05DBB3D32323ADF445084ED656
Serial number 00
PE header basic information
Target machine Intel 386 or later processors and compatible processors
Compilation timestamp 2012-11-14 10:40:10
Entry Point 0x00054A29
Number of sections 5
PE sections
PE imports
RegCreateKeyExW
RegDeleteValueW
RegCloseKey
RegSetValueExW
RegQueryInfoKeyW
RegEnumKeyExW
RegOpenKeyExW
RegDeleteKeyW
GetLastError
EnterCriticalSection
GetModuleFileNameW
FreeLibrary
QueryPerformanceCounter
IsDebuggerPresent
GetTickCount
lstrcmpiW
lstrlenW
DeleteCriticalSection
GetCurrentProcess
SizeofResource
GetCurrentProcessId
UnhandledExceptionFilter
LoadLibraryExW
MultiByteToWideChar
InterlockedCompareExchange
RaiseException
InterlockedExchange
SetUnhandledExceptionFilter
GetSystemTimeAsFileTime
GetModuleHandleW
TerminateProcess
InitializeCriticalSection
LoadResource
FindResourceW
InterlockedDecrement
Sleep
GetCurrentThreadId
LeaveCriticalSection
InterlockedIncrement
_malloc_crt
_purecall
malloc
?what@exception@std@@UBEPBDXZ
??0exception@std@@QAE@ABQBDH@Z
memset
__dllonexit
wcsncpy_s
__clean_type_info_names_internal
_recalloc
_except_handler3
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_lock
_onexit
_encode_pointer
_decode_pointer
_adjust_fdiv
_amsg_exit
_CxxThrowException
_unlock
_crt_debugger_hook
free
__CxxFrameHandler3
_except_handler4_common
memcpy
??0exception@std@@QAE@ABV01@@Z
??1exception@std@@UAE@XZ
memcpy_s
_initterm_e
memmove
_encoded_null
__CppXcptFilter
wcsstr
_initterm
Ord(277)
CharNextW
??0Value@core@@QAE@V?$__move_source@VValue@core@@@stlp_std@@@Z
?getMethodName@IContextExtImplBase@core@@UAGPB_WHH@Z
??0TypeDomainPattern@core@@QAE@ABU_GUID@@@Z
??1_ContextDefCached@core@@QAE@XZ
?getIType@ValueImplBase@core@@UAGPAVIType@2@XZ
??0Numeric@core@@QAE@I@Z
?lock@IMutexImpl@core@@UAGXXZ
?equal_nocase@core@@YA_NABV?$basic_string@_WV?$char_traits@_W@stlp_std@@V?$allocator@_W@2@@stlp_std@@0@Z
?releaseWriterLock@IRWMutexSimpleImpl@core@@UAGXXZ
?open@InputFileStream@core@@QAEXPAVIFile@2@ABV?$basic_string@_WV?$char_traits@_W@stlp_std@@V?$allocator@_W@2@@stlp_std@@_NPB_W@Z
?hash_nocase@core@@YAJABV?$basic_string@_WV?$char_traits@_W@stlp_std@@V?$allocator@_W@2@@stlp_std@@@Z
?getPropName@IContextExtImplBase@core@@UAGPB_WHH@Z
?getDate@ObjectValueCore@core@@UAG_NAAVDate@2@@Z
?findMethod@_ContextDefCached@core@@QAEHPAVIContextDefBase@2@ABV?$basic_string@_WV?$char_traits@_W@stlp_std@@V?$allocator@_W@2@@stlp_std@@@Z
??0Exception@core@@IAE@ABU_GUID@@PB_WPAVIExceptionObject@1@@Z
??0Value@core@@QAE@PAUIUnknown@@@Z
??0_ContextDefCached@core@@QAE@W4ContextDefCachedRules@1@@Z
?isPropWritable@IContextExtImplBase@core@@UAG_NH@Z
??0Value@core@@QAE@XZ
?getPropName@EnumValFactoryTypeBase@core@@UAGPB_WHH@Z
?getTypeString@EnumValFactoryTypeBase@core@@UAGPB_WH@Z
?unlock@IMutexImpl@core@@UAGXXZ
?isEqual@EnumValValueBase@core@@UAG_NPAVIValue@2@@Z
?hash@core@@YAJABV?$basic_string@_WV?$char_traits@_W@stlp_std@@V?$allocator@_W@2@@stlp_std@@@Z
?cleanup@SCOM_Module@core@@QAEXXZ
?string_tokenize@core@@YA?AV?$vector@V?$basic_string@_WV?$char_traits@_W@stlp_std@@V?$allocator@_W@2@@stlp_std@@V?$allocator@V?$basic_string@_WV?$char_traits@_W@stlp_std@@V?$allocator@_W@2@@stlp_std@@@2@@stlp_std@@PB_W000@Z
?deserialize@Exception@core@@QAEXPAVIInPersistenceStorage@2@@Z
?getString@EnumValValueBase@core@@UAG_NAAV?$basic_string@_WV?$char_traits@_W@stlp_std@@V?$allocator@_W@2@@stlp_std@@@Z
?property_type_mismatch@core@@YAXXZ
?getNParams@EnumValFactoryTypeBase@core@@UAGHH@Z
?assign@GenericValue@core@@QAEX_N@Z
?getNParams@IContextExtImplBase@core@@UAGHH@Z
?part@URL@core@@QBE?AV?$basic_string@_WV?$char_traits@_W@stlp_std@@V?$allocator@_W@2@@stlp_std@@HH@Z
?parameter_type_mismatch@core@@YAXI@Z
?acquireWriterLock@IRWMutexSimpleImpl@core@@UAGXXZ
?setPropVal@ContextCore@core@@UAG_NHABVGenericValue@2@@Z
?getNParams@ContextDefCore@core@@EAGHH@Z
?string_split@core@@YA?AV?$vector@V?$basic_string@_WV?$char_traits@_W@stlp_std@@V?$allocator@_W@2@@stlp_std@@V?$allocator@V?$basic_string@_WV?$char_traits@_W@stlp_std@@V?$allocator@_W@2@@stlp_std@@@2@@stlp_std@@PB_W000@Z
?findProp@IContextExtImplBase@core@@UAGHABV?$basic_string@_WV?$char_traits@_W@stlp_std@@V?$allocator@_W@2@@stlp_std@@@Z
?getNMethods@EnumValFactoryTypeBase@core@@UAGHXZ
?serialize@Exception@core@@QBEXPAVIOutPersistenceStorage@2@@Z
?getMethodName@ContextDefCore@core@@EAGPB_WHH@Z
?getDataPtr@EnumValValueBase@core@@UAGPAXXZ
?equal@core@@YA_NABV?$basic_string@_WV?$char_traits@_W@stlp_std@@V?$allocator@_W@2@@stlp_std@@0@Z
?isParamIn@IContextExtImplBase@core@@UAG_NHH@Z
??BNumeric@core@@QBE_JXZ
??1ParamsWString@core@@UAE@XZ
?system@Locale@core@@SA?AV12@XZ
?call@ContextCore@core@@UAG_NHPAVGenericValue@2@AAV?$vector@PAVGenericValue@core@@V?$allocator@PAVGenericValue@core@@@stlp_std@@@stlp_std@@@Z
?cleanup@SCOM_ResourceBundle@core@@QAEXXZ
?isParamIn@ContextDefCore@core@@EAG_NHH@Z
??1Value@core@@QAE@XZ
?load_wstring@core@@YA?AV?$basic_string@_WV?$char_traits@_W@stlp_std@@V?$allocator@_W@2@@stlp_std@@PAVSCOM_ResourceBundle@1@PBD@Z
?getParamDefValue@EnumValFactoryTypeBase@core@@UAG_NHHPAVGenericValue@2@@Z
??0URL@core@@QAE@XZ
?clone@EnumValueIterator@core@@UAG_NAAV?$InterfacePtr@VIEnumValue@core@@@2@@Z
?hashCode@ObjectValueCore@core@@UAGJXZ
??1IMutexImpl@core@@QAE@XZ
?getNProps@ContextDefCore@core@@EAGHXZ
?termString@EnumValItem@core@@QBEPB_WH@Z
?isCOMType@ObjectTypeCore@core@@UAG_NXZ
?paramsCount@ParamsWString@core@@QBEIXZ
??1IRWMutexSimpleImpl@core@@QAE@XZ
??0Numeric@core@@QAE@H@Z
?open@OutputFileStream@core@@QAEXPAVIFile@2@ABV?$basic_string@_WV?$char_traits@_W@stlp_std@@V?$allocator@_W@2@@stlp_std@@_NPB_W@Z
?kV8ResScheme@core@@3QB_WB
??0EnumValItem@core@@QAE@HQAPB_W@Z
?kUTF8Encoding@core@@3QB_WB
?encode@URLEncoder@core@@SA?AV?$basic_string@_WV?$char_traits@_W@stlp_std@@V?$allocator@_W@2@@stlp_std@@ABV34@VConverter@2@@Z
?getString@GenericValue@core@@QBE_NAAV?$basic_string@_WV?$char_traits@_W@stlp_std@@V?$allocator@_W@2@@stlp_std@@@Z
?normalize@URL@core@@QBE?AV12@XZ
?read_stream@core@@YA?AV?$basic_string@_WV?$char_traits@_W@stlp_std@@V?$allocator@_W@2@@stlp_std@@PAVIReader@1@I@Z
?ctor_parameter_type_mismatch@core@@YAXI@Z
??0Value@core@@QAE@PAVIValue@1@@Z
??0URL@core@@QAE@ABV?$basic_string@_WV?$char_traits@_W@stlp_std@@V?$allocator@_W@2@@stlp_std@@0_N@Z
??0EnumValFactoryTypeBase@core@@QAE@PBU_GUID@@@Z
?findProp@_ContextDefCached@core@@QAEHPAVIContextDefBase@2@ABV?$basic_string@_WV?$char_traits@_W@stlp_std@@V?$allocator@_W@2@@stlp_std@@@Z
?getParamDefValue@IContextExtImplBase@core@@UAG_NHHPAVGenericValue@2@@Z
?skip@EnumValueIterator@core@@UAG_NI@Z
??0ParamsWString@core@@QAE@ABV?$basic_string@_WV?$char_traits@_W@stlp_std@@V?$allocator@_W@2@@stlp_std@@@Z
?assign@GenericValue@core@@QAEXPAUIUnknown@@@Z
?revokeAll@SCOM_Module@core@@QAEXPAVSCOM_Process@2@PAVSCOM_ClassRegistrar@2@@Z
?is_space@core@@YA_N_W@Z
?clear@GenericValue@core@@QAEXXZ
?utf8@Converter@core@@SAABV12@XZ
?create_temp_file@core@@YA?AV?$InterfacePtr@VIFileEx@core@@@1@I@Z
?__initEnumValFactoryType@EnumValFactoryTypeBase@core@@IAEXPB_W0@Z
?string_len@core@@YAIPB_W@Z
?getNumeric@GenericValue@core@@QBE_NAAVNumeric@2@@Z
?getDataPtr@ObjectValueCore@core@@UAGPAXXZ
?call@IContextExtImplBase@core@@UAG_NHPAVGenericValue@2@AAV?$vector@PAVGenericValue@core@@V?$allocator@PAVGenericValue@core@@@stlp_std@@@stlp_std@@@Z
?initialize@SCOM_Module@core@@QAEXXZ
?hasCtor@EnumValTypeBase@core@@UAG_NI@Z
?collect_error_bad_index@core@@YA?AV?$basic_string@_WV?$char_traits@_W@stlp_std@@V?$allocator@_W@2@@stlp_std@@XZ
?getTypeCode@ObjectTypeCore@core@@UAG?AW4Code@Type@2@XZ
??0URL@core@@QAE@ABV01@@Z
?kCollectTermCount@core@@3PAPB_WA
?enumValFactory@EnumValTypeBase@core@@UAG?AV?$InterfacePtr@VIEnumValFactory@core@@@2@XZ
?names@ParamsWString@core@@QBEXAAV?$vector@V?$basic_string@_WV?$char_traits@_W@stlp_std@@V?$allocator@_W@2@@stlp_std@@V?$allocator@V?$basic_string@_WV?$char_traits@_W@stlp_std@@V?$allocator@_W@2@@stlp_std@@@2@@stlp_std@@@Z
?createIValue@EnumValFactoryTypeBase@core@@UAG?AV?$InterfacePtr@VIValue@core@@@2@XZ
?acquireReaderLock@IRWMutexSimpleImpl@core@@UAGXXZ
?isValueMutable@EnumValTypeBase@core@@UAG_NXZ
?getIContextDef@IContextExtImplBase@core@@UAGPAVIContextDef@2@XZ
?hasRetVal@EnumValFactoryTypeBase@core@@UAG_NH@Z
?getNProps@IContextExtImplBase@core@@UAGHXZ
?implementCombine@URL@core@@IBE?AV12@ABV12@_N@Z
?isPropWritable@EnumValFactoryTypeBase@core@@UAG_NH@Z
?getNProps@EnumValFactoryTypeBase@core@@UAGHXZ
?next@EnumValueIterator@core@@UAG_NAAVGenericValue@2@@Z
??1Type@core@@QAE@XZ
?serialize@EnumValValueBase@core@@UAGXPAVIOutPersistenceStorage@2@@Z
?isPropReadable@IContextExtImplBase@core@@UAG_NH@Z
?getPropVal@IContextExtImplBase@core@@UAG_NHAAVGenericValue@2@@Z
?copy_file@core@@YA_KPAVIFile@1@0_K@Z
?hasRetVal@ContextDefCore@core@@EAG_NH@Z
?isParamIn@EnumValFactoryTypeBase@core@@UAG_NHH@Z
?param@ParamsWString@core@@QBE?AV?$basic_string@_WV?$char_traits@_W@stlp_std@@V?$allocator@_W@2@@stlp_std@@ABV34@@Z
?compare@Numeric@core@@QBEHABV12@@Z
?releaseReaderLock@IRWMutexSimpleImpl@core@@UAGXXZ
?createIValue@EnumValTypeBase@core@@UAG?AV?$InterfacePtr@VIValue@core@@@2@XZ
??1TypeDomainPattern@core@@QAE@XZ
??0FileException@core@@QAE@W4Error@01@ABVURL@1@PAVIExceptionObject@1@@Z
?hasRetVal@IContextExtImplBase@core@@UAG_NH@Z
??0SCOM_ResourceBundle@core@@QAE@PBD@Z
?getNMethods@ContextDefCore@core@@EAGHXZ
?setPropVal@IContextExtImplBase@core@@UAG_NHABVGenericValue@2@@Z
?registerAll@SCOM_Module@core@@QAEXPAVSCOM_Process@2@PAVSCOM_ClassRegistrar@2@@Z
?initPropsCache@_ContextDefCached@core@@QAEXPAVIContextDefBase@2@@Z
??4TypeDomainPattern@core@@QAEAAV01@ABV01@@Z
?isValueMutable@ObjectTypeCore@core@@UAG_NXZ
?findMethod@EnumValFactoryTypeBase@core@@UAGHABV?$basic_string@_WV?$char_traits@_W@stlp_std@@V?$allocator@_W@2@@stlp_std@@@Z
?name@Locale@core@@QBEPB_WXZ
?ctor@ObjectTypeCore@core@@UAG?AV?$InterfacePtr@VIValue@core@@@2@AAV?$vector@PAVGenericValue@core@@V?$allocator@PAVGenericValue@core@@@stlp_std@@@stlp_std@@@Z
?assign@GenericValue@core@@QAEXI@Z
?object@Exception@core@@QBE?AV?$InterfacePtr@VIExceptionObject@core@@@2@XZ
?getBoolean@ObjectValueCore@core@@UAG_NAA_N@Z
?assign@GenericValue@core@@QAEXH@Z
?kWindowsLineSeparator@core@@3QB_WB
?getString@ObjectTypeCore@core@@UAGXAAV?$basic_string@_WV?$char_traits@_W@stlp_std@@V?$allocator@_W@2@@stlp_std@@@Z
?isParamOut@IContextExtImplBase@core@@UAG_NHH@Z
?hashCode@EnumValValueBase@core@@UAGJXZ
?getPropName@ContextDefCore@core@@EAGPB_WHH@Z
?isParamOut@ContextDefCore@core@@EAG_NHH@Z
??0IRWMutexSimpleImpl@core@@QAE@XZ
?getParamDefValue@ContextDefCore@core@@EAG_NHHPAVGenericValue@2@@Z
?isDefaultValue@EnumValValueBase@core@@UAG_NXZ
?term_string@core@@YAPB_WQBQB_WH@Z
??0Value@core@@QAE@ABV01@@Z
?assign@GenericValue@core@@QAEXABV?$basic_string@_WV?$char_traits@_W@stlp_std@@V?$allocator@_W@2@@stlp_std@@@Z
?widen@core@@YA?AV?$basic_string@_WV?$char_traits@_W@stlp_std@@V?$allocator@_W@2@@stlp_std@@PBD@Z
??0URL@core@@QAE@ABV?$basic_string@_WV?$char_traits@_W@stlp_std@@V?$allocator@_W@2@@stlp_std@@_N@Z
?kUUIDNull@core@@3U_GUID@@B
?findProp@EnumValFactoryTypeBase@core@@UAGHABV?$basic_string@_WV?$char_traits@_W@stlp_std@@V?$allocator@_W@2@@stlp_std@@@Z
?isParamOut@EnumValFactoryTypeBase@core@@UAG_NHH@Z
?isPropReadable@ContextDefCore@core@@EAG_NH@Z
?isPropWritable@ContextDefCore@core@@EAG_NH@Z
?initMethodsCache@_ContextDefCached@core@@QAEXPAVIContextDefBase@2@@Z
?deserialize@EnumValTypeBase@core@@UAG?AV?$InterfacePtr@VIValue@core@@@2@PAVIInPersistenceStorage@2@@Z
?string_ito@core@@YA?AV?$basic_string@_WV?$char_traits@_W@stlp_std@@V?$allocator@_W@2@@stlp_std@@HH@Z
?kCollectTermGet@core@@3PAPB_WA
?isEqual@ObjectValueCore@core@@UAG_NPAVIValue@2@@Z
?escape@URL@core@@SA?AV?$basic_string@_WV?$char_traits@_W@stlp_std@@V?$allocator@_W@2@@stlp_std@@ABV34@0@Z
??0Exception@core@@IAE@ABU_GUID@@ABV?$basic_string@_WV?$char_traits@_W@stlp_std@@V?$allocator@_W@2@@stlp_std@@PAVIExceptionObject@1@@Z
?getString@ValueImplBase@core@@UAG_NAAV?$basic_string@_WV?$char_traits@_W@stlp_std@@V?$allocator@_W@2@@stlp_std@@@Z
?getNumeric@ObjectValueCore@core@@UAG_NAAVNumeric@2@@Z
??0IMutexImpl@core@@QAE@XZ
?getMethodName@EnumValFactoryTypeBase@core@@UAGPB_WHH@Z
??1SCOM_ResourceBundle@core@@QAE@XZ
?string_toi@core@@YAHPB_WPAPA_W@Z
?isValueMutable@EnumValFactoryTypeBase@core@@UAG_NXZ
?current_process@core@@YAPAVSCOM_Process@1@XZ
?to_lower@core@@YA?AV?$basic_string@_WV?$char_traits@_W@stlp_std@@V?$allocator@_W@2@@stlp_std@@PB_W0@Z
?getNMethods@IContextExtImplBase@core@@UAGHXZ
?isPropReadable@EnumValFactoryTypeBase@core@@UAG_NH@Z
?findMethod@IContextExtImplBase@core@@UAGHABV?$basic_string@_WV?$char_traits@_W@stlp_std@@V?$allocator@_W@2@@stlp_std@@@Z
?hasCtor@ObjectTypeCore@core@@UAG_NI@Z
CoTaskMemFree
CoTaskMemRealloc
CoCreateInstance
CoTaskMemAlloc
?__splice_after@?$_Sl_global@_N@priv@stlp_std@@SAXPAU_Slist_node_base@23@00@Z
?move@?$char_traits@_W@stlp_std@@SAPA_WPA_WPB_WI@Z
?allocate@?$allocator@_W@stlp_std@@QAEPA_WIPBX@Z
?_Rebalance@?$_Rb_global@_N@priv@stlp_std@@SAXPAU_Rb_tree_node_base@23@AAPAU423@@Z
?copy@?$char_traits@_W@stlp_std@@SAPA_WPA_WPB_WI@Z
??0?$vector@PAU_Slist_node_base@priv@stlp_std@@V?$allocator@PAU_Slist_node_base@priv@stlp_std@@@3@@stlp_std@@QAE@ABV?$allocator@PAU_Slist_node_base@priv@stlp_std@@@1@@Z
?_S_next_size@?$_Stl_prime@_N@priv@stlp_std@@SAII@Z
?__stl_new@stlp_std@@YAPAXI@Z
?_M_decrement@?$_Rb_global@_N@priv@stlp_std@@SAPAU_Rb_tree_node_base@23@PAU423@@Z
?swap@?$vector@PAU_Slist_node_base@priv@stlp_std@@V?$allocator@PAU_Slist_node_base@priv@stlp_std@@@3@@stlp_std@@QAEXAAV12@@Z
??1?$allocator@_W@stlp_std@@QAE@XZ
?_S_prev_sizes@?$_Stl_prime@_N@priv@stlp_std@@SAXIAAPBI0@Z
??1?$vector@PAU_Slist_node_base@priv@stlp_std@@V?$allocator@PAU_Slist_node_base@priv@stlp_std@@@3@@stlp_std@@QAE@XZ
??0?$vector@PAU_Slist_node_base@priv@stlp_std@@V?$allocator@PAU_Slist_node_base@priv@stlp_std@@@3@@stlp_std@@QAE@IABQAU_Slist_node_base@priv@1@ABV?$allocator@PAU_Slist_node_base@priv@stlp_std@@@1@@Z
?resize@?$vector@PAU_Slist_node_base@priv@stlp_std@@V?$allocator@PAU_Slist_node_base@priv@stlp_std@@@3@@stlp_std@@QAEXIABQAU_Slist_node_base@priv@2@@Z
?__previous@?$_Sl_global@_N@priv@stlp_std@@SAPAU_Slist_node_base@23@PAU423@PBU423@@Z
??1?$allocator@PAU_Slist_node_base@priv@stlp_std@@@stlp_std@@QAE@XZ
?assign@?$char_traits@_W@stlp_std@@SAPA_WPA_WI_W@Z
?assign@?$vector@PAU_Slist_node_base@priv@stlp_std@@V?$allocator@PAU_Slist_node_base@priv@stlp_std@@@3@@stlp_std@@QAEXIABQAU_Slist_node_base@priv@2@@Z
?__stl_delete@stlp_std@@YAXPAX@Z
?__stl_throw_length_error@stlp_std@@YAXPBD@Z
?reserve@?$vector@PAU_Slist_node_base@priv@stlp_std@@V?$allocator@PAU_Slist_node_base@priv@stlp_std@@@3@@stlp_std@@QAEXI@Z
?get_allocator@?$vector@PAU_Slist_node_base@priv@stlp_std@@V?$allocator@PAU_Slist_node_base@priv@stlp_std@@@3@@stlp_std@@QBE?AV?$allocator@PAU_Slist_node_base@priv@stlp_std@@@2@XZ
?_M_increment@?$_Rb_global@_N@priv@stlp_std@@SAPAU_Rb_tree_node_base@23@PAU423@@Z
?size@?$vector@PAU_Slist_node_base@priv@stlp_std@@V?$allocator@PAU_Slist_node_base@priv@stlp_std@@@3@@stlp_std@@QBEIXZ
?compare@?$char_traits@_W@stlp_std@@SAHPB_W0I@Z
PE exports
Number of PE resources by type
RT_MANIFEST 1
RT_VERSION 1
Number of PE resources by language
RUSSIAN 1
ENGLISH US 1
PE resources
Compressed bundles
File identification
MD5 5a1e32e8fc4cf11c20b26fde3f3f11d2
SHA1 14cc4880ee97d631bc7cabba66490c36a9fd0b59
SHA256 a75fd68dc39ba54733fba875d6d346a01b58cef27458951cdab4b0f295e2e207
ssdeep
6144:uTHL3Cs8omZuIdKvJuv+sUVBq8mCifRNBpLoxRVXGrzNXmTO5OPFaOt9fNsekRTs:YLXE54BBI/JRgRVXsOqekRTeNktq

File size 543.8 KB ( 556888 bytes )
File type Win32 DLL
Magic literal
PE32 executable for MS Windows (DLL) (GUI) Intel 80386 32-bit

TrID Win32 Dynamic Link Library (generic) (43.5%)
Win32 Executable (generic) (29.8%)
Generic Win/DOS Executable (13.2%)
DOS Executable Generic (13.2%)
Autodesk FLIC Image File (extensions: flc, fli, cel) (0.0%)
Tags
pedll signed

VirusTotal metadata
First submission 2013-06-21 05:06:40 UTC ( 4 years, 8 months ago )
Last submission 2013-06-21 05:06:40 UTC ( 4 years, 8 months ago )
File names ws
ws.dll
No comments. No VirusTotal Community member has commented on this item yet, be the first one to do so!

Leave your comment...

?
Post comment

You have not signed in. Only registered users can leave comments, sign in and have a voice!

No votes. No one has voted on this item yet, be the first one to do so!