├── README.md ├── hashes ├── advapi32.dll.txt ├── advpack.dll.txt ├── comctl32.dll.txt ├── comdlg32.dll.txt ├── dnsapi.dll.txt ├── gdi32.dll.txt ├── kernel32.dll.txt ├── msvcrt.dll.txt ├── netapi32.dll.txt ├── ntdll.dll.txt ├── ntoskrnl.exe.txt ├── oleaut32.dll.txt ├── psapi.dll.txt ├── shell32.dll.txt ├── shlwapi.dll.txt ├── urlmon.dll.txt ├── user32.dll.txt ├── winhttp.dll.txt ├── wininet.dll.txt ├── ws2_32.dll.txt └── wship6.dll.txt └── shellcode_hashes.sqlite /README.md: -------------------------------------------------------------------------------- 1 | # shellcode_hashes 2 | A collection of shellcode hashes 3 | -------------------------------------------------------------------------------- /hashes/comdlg32.dll.txt: -------------------------------------------------------------------------------- 1 | 0x3A6AD31E,ChooseColorA,comdlg32.dll,ror11AddHash32 2 | 0x12741568,ChooseColorA,comdlg32.dll,rol7XorHash32 3 | 0x0D1B50F1,ChooseColorA,comdlg32.dll,hash_Carbanak 4 | 0xCCB4929C,ChooseColorA,comdlg32.dll,ror13AddHash32Sub1 5 | 0xED8C0997,ChooseColorA,comdlg32.dll,rol7AddHash32 6 | 0x000CE2E2,ChooseColorA,comdlg32.dll,sll1AddHash32 7 | 0xFA6CFCB6,ChooseColorA,comdlg32.dll,ror9AddHash32 8 | 0xCCB4929D,ChooseColorA,comdlg32.dll,ror13AddHash32 9 | 0x88C67D77,ChooseColorA,comdlg32.dll,rol3XorEax 10 | 0xF0561D32,ChooseColorA,comdlg32.dll,rol5AddHash32 11 | 0xB93C0549,ChooseColorA,comdlg32.dll,shl7shr19Hash32 12 | 0x48DAE8B5,ChooseColorA,comdlg32.dll,ror13AddHash32AddDll 13 | 0x6490FAE1,ChooseColorA,comdlg32.dll,mult21AddHash32 14 | 0x9E59A0D5,ChooseColorA,comdlg32.dll,poisonIvyHash 15 | 0xBD33BF66,ChooseColorA,comdlg32.dll,add1505Shl5Hash32 16 | 0x325F0621,ChooseColorA,comdlg32.dll,crc32 17 | 0x0151571A,ChooseColorA,comdlg32.dll,ror7AddHash32 18 | 0xB0BC3596,ChooseColorA,comdlg32.dll,hash_ror13AddUpperDllnameHash32 19 | 0xCBC75108,ChooseColorA,comdlg32.dll,rol7AddXor2Hash32 20 | 0x94EE65A4,ChooseColorA,comdlg32.dll,ror13AddWithNullHash32 21 | 0xA11B5F5D,ChooseColorA,comdlg32.dll,fnv1Xor67f 22 | 0xEEE2639C,ChooseColorA,comdlg32.dll,addRor4WithNullHash32 23 | 0x1E1F04A2,ChooseColorA,comdlg32.dll,dualaccModFFF1Hash 24 | 0x3A6AD334,ChooseColorW,comdlg32.dll,ror11AddHash32 25 | 0x1274157E,ChooseColorW,comdlg32.dll,rol7XorHash32 26 | 0x0D1B50E7,ChooseColorW,comdlg32.dll,hash_Carbanak 27 | 0xCCB492B2,ChooseColorW,comdlg32.dll,ror13AddHash32Sub1 28 | 0xED8C09AD,ChooseColorW,comdlg32.dll,rol7AddHash32 29 | 0x000CE30E,ChooseColorW,comdlg32.dll,sll1AddHash32 30 | 0xFA6CFCCC,ChooseColorW,comdlg32.dll,ror9AddHash32 31 | 0xCCB492B3,ChooseColorW,comdlg32.dll,ror13AddHash32 32 | 0x88C67DC7,ChooseColorW,comdlg32.dll,rol3XorEax 33 | 0xF0561D48,ChooseColorW,comdlg32.dll,rol5AddHash32 34 | 0xB93C055F,ChooseColorW,comdlg32.dll,shl7shr19Hash32 35 | 0x498AE8B5,ChooseColorW,comdlg32.dll,ror13AddHash32AddDll 36 | 0x6490FAF7,ChooseColorW,comdlg32.dll,mult21AddHash32 37 | 0x82C11502,ChooseColorW,comdlg32.dll,poisonIvyHash 38 | 0xBD33BF7C,ChooseColorW,comdlg32.dll,add1505Shl5Hash32 39 | 0xC68BB370,ChooseColorW,comdlg32.dll,crc32 40 | 0x01515730,ChooseColorW,comdlg32.dll,ror7AddHash32 41 | 0xB0BC35AC,ChooseColorW,comdlg32.dll,hash_ror13AddUpperDllnameHash32 42 | 0xCBC7511A,ChooseColorW,comdlg32.dll,rol7AddXor2Hash32 43 | 0x959E65A4,ChooseColorW,comdlg32.dll,ror13AddWithNullHash32 44 | 0x8B1B30FF,ChooseColorW,comdlg32.dll,fnv1Xor67f 45 | 0x04E2639C,ChooseColorW,comdlg32.dll,addRor4WithNullHash32 46 | 0x1E3504B8,ChooseColorW,comdlg32.dll,dualaccModFFF1Hash 47 | 0x5766F1A2,ChooseFontA,comdlg32.dll,ror11AddHash32 48 | 0x02246599,ChooseFontA,comdlg32.dll,rol7XorHash32 49 | 0x09D6B3E1,ChooseFontA,comdlg32.dll,hash_Carbanak 50 | 0x9273C9E4,ChooseFontA,comdlg32.dll,ror13AddHash32Sub1 51 | 0xDDDB9A61,ChooseFontA,comdlg32.dll,rol7AddHash32 52 | 0x00067172,ChooseFontA,comdlg32.dll,sll1AddHash32 53 | 0x0C796BC4,ChooseFontA,comdlg32.dll,ror9AddHash32 54 | 0x9273C9E5,ChooseFontA,comdlg32.dll,ror13AddHash32 55 | 0xF73566B8,ChooseFontA,comdlg32.dll,rol3XorEax 56 | 0x8FB2B956,ChooseFontA,comdlg32.dll,rol5AddHash32 57 | 0xA972F5B8,ChooseFontA,comdlg32.dll,shl7shr19Hash32 58 | 0x031916AF,ChooseFontA,comdlg32.dll,ror13AddHash32AddDll 59 | 0x03427919,ChooseFontA,comdlg32.dll,mult21AddHash32 60 | 0x2D5807BE,ChooseFontA,comdlg32.dll,poisonIvyHash 61 | 0xEEAC40FE,ChooseFontA,comdlg32.dll,add1505Shl5Hash32 62 | 0x558243D9,ChooseFontA,comdlg32.dll,crc32 63 | 0xB2B36C7F,ChooseFontA,comdlg32.dll,ror7AddHash32 64 | 0x767B6CDE,ChooseFontA,comdlg32.dll,hash_ror13AddUpperDllnameHash32 65 | 0xBB9712F4,ChooseFontA,comdlg32.dll,rol7AddXor2Hash32 66 | 0x4F2C939E,ChooseFontA,comdlg32.dll,ror13AddWithNullHash32 67 | 0xF069A0FB,ChooseFontA,comdlg32.dll,fnv1Xor67f 68 | 0xAD783CCA,ChooseFontA,comdlg32.dll,addRor4WithNullHash32 69 | 0x196B043A,ChooseFontA,comdlg32.dll,dualaccModFFF1Hash 70 | 0x5766F1B8,ChooseFontW,comdlg32.dll,ror11AddHash32 71 | 0x0224658F,ChooseFontW,comdlg32.dll,rol7XorHash32 72 | 0x09D6B3F7,ChooseFontW,comdlg32.dll,hash_Carbanak 73 | 0x9273C9FA,ChooseFontW,comdlg32.dll,ror13AddHash32Sub1 74 | 0xDDDB9A77,ChooseFontW,comdlg32.dll,rol7AddHash32 75 | 0x0006719E,ChooseFontW,comdlg32.dll,sll1AddHash32 76 | 0x0C796BDA,ChooseFontW,comdlg32.dll,ror9AddHash32 77 | 0x9273C9FB,ChooseFontW,comdlg32.dll,ror13AddHash32 78 | 0xF7356608,ChooseFontW,comdlg32.dll,rol3XorEax 79 | 0x8FB2B96C,ChooseFontW,comdlg32.dll,rol5AddHash32 80 | 0xA972F5AE,ChooseFontW,comdlg32.dll,shl7shr19Hash32 81 | 0x03C916AF,ChooseFontW,comdlg32.dll,ror13AddHash32AddDll 82 | 0x0342792F,ChooseFontW,comdlg32.dll,mult21AddHash32 83 | 0x31C0B269,ChooseFontW,comdlg32.dll,poisonIvyHash 84 | 0xEEAC4114,ChooseFontW,comdlg32.dll,add1505Shl5Hash32 85 | 0xA156F688,ChooseFontW,comdlg32.dll,crc32 86 | 0xB2B36C95,ChooseFontW,comdlg32.dll,ror7AddHash32 87 | 0x767B6CF4,ChooseFontW,comdlg32.dll,hash_ror13AddUpperDllnameHash32 88 | 0xBB971306,ChooseFontW,comdlg32.dll,rol7AddXor2Hash32 89 | 0x4FDC939E,ChooseFontW,comdlg32.dll,ror13AddWithNullHash32 90 | 0xFE69BAF1,ChooseFontW,comdlg32.dll,fnv1Xor67f 91 | 0xC3783CCA,ChooseFontW,comdlg32.dll,addRor4WithNullHash32 92 | 0x19810450,ChooseFontW,comdlg32.dll,dualaccModFFF1Hash 93 | 0x247FE379,CommDlgExtendedError,comdlg32.dll,ror11AddHash32 94 | 0x7A27BC2C,CommDlgExtendedError,comdlg32.dll,rol7XorHash32 95 | 0x01378BD2,CommDlgExtendedError,comdlg32.dll,hash_Carbanak 96 | 0x27B2DF82,CommDlgExtendedError,comdlg32.dll,ror13AddHash32Sub1 97 | 0x8072FE78,CommDlgExtendedError,comdlg32.dll,rol7AddHash32 98 | 0x0D04B970,CommDlgExtendedError,comdlg32.dll,sll1AddHash32 99 | 0x4E1130DA,CommDlgExtendedError,comdlg32.dll,ror9AddHash32 100 | 0x27B2DF83,CommDlgExtendedError,comdlg32.dll,ror13AddHash32 101 | 0x13F864CB,CommDlgExtendedError,comdlg32.dll,rol3XorEax 102 | 0xE4772381,CommDlgExtendedError,comdlg32.dll,rol5AddHash32 103 | 0x04DA5967,CommDlgExtendedError,comdlg32.dll,shl7shr19Hash32 104 | 0xB005C0A7,CommDlgExtendedError,comdlg32.dll,ror13AddHash32AddDll 105 | 0xFB6A20BE,CommDlgExtendedError,comdlg32.dll,mult21AddHash32 106 | 0xF5F79258,CommDlgExtendedError,comdlg32.dll,poisonIvyHash 107 | 0xA1379A43,CommDlgExtendedError,comdlg32.dll,add1505Shl5Hash32 108 | 0xF73C7F71,CommDlgExtendedError,comdlg32.dll,crc32 109 | 0x87703C54,CommDlgExtendedError,comdlg32.dll,ror7AddHash32 110 | 0x0BBA827C,CommDlgExtendedError,comdlg32.dll,hash_ror13AddUpperDllnameHash32 111 | 0x0F58C9CF,CommDlgExtendedError,comdlg32.dll,rol7AddXor2Hash32 112 | 0xFC193D96,CommDlgExtendedError,comdlg32.dll,ror13AddWithNullHash32 113 | 0x37D0E570,CommDlgExtendedError,comdlg32.dll,fnv1Xor67f 114 | 0xD267568B,CommDlgExtendedError,comdlg32.dll,addRor4WithNullHash32 115 | 0x509907DF,CommDlgExtendedError,comdlg32.dll,dualaccModFFF1Hash 116 | 0x99BE9E58,DllCanUnloadNow,comdlg32.dll,ror11AddHash32 117 | 0x2F867DED,DllCanUnloadNow,comdlg32.dll,rol7XorHash32 118 | 0x03D006E7,DllCanUnloadNow,comdlg32.dll,hash_Carbanak 119 | 0x18B8B8C7,DllCanUnloadNow,comdlg32.dll,ror13AddHash32Sub1 120 | 0xD939E4FF,DllCanUnloadNow,comdlg32.dll,rol7AddHash32 121 | 0x0067323A,DllCanUnloadNow,comdlg32.dll,sll1AddHash32 122 | 0x0707B732,DllCanUnloadNow,comdlg32.dll,ror9AddHash32 123 | 0x18B8B8C8,DllCanUnloadNow,comdlg32.dll,ror13AddHash32 124 | 0xAF49597A,DllCanUnloadNow,comdlg32.dll,rol3XorEax 125 | 0xC75570C1,DllCanUnloadNow,comdlg32.dll,rol5AddHash32 126 | 0x2B8E6E1B,DllCanUnloadNow,comdlg32.dll,shl7shr19Hash32 127 | 0x7A2D48D6,DllCanUnloadNow,comdlg32.dll,ror13AddHash32AddDll 128 | 0xA3B2AA65,DllCanUnloadNow,comdlg32.dll,mult21AddHash32 129 | 0xC007BC85,DllCanUnloadNow,comdlg32.dll,poisonIvyHash 130 | 0x3CD7DCCA,DllCanUnloadNow,comdlg32.dll,add1505Shl5Hash32 131 | 0xB2BA5859,DllCanUnloadNow,comdlg32.dll,crc32 132 | 0x60914A04,DllCanUnloadNow,comdlg32.dll,ror7AddHash32 133 | 0xFCC05BC1,DllCanUnloadNow,comdlg32.dll,hash_ror13AddUpperDllnameHash32 134 | 0x0B952C75,DllCanUnloadNow,comdlg32.dll,rol7AddXor2Hash32 135 | 0xC640C5C5,DllCanUnloadNow,comdlg32.dll,ror13AddWithNullHash32 136 | 0xC78064D3,DllCanUnloadNow,comdlg32.dll,fnv1Xor67f 137 | 0xAA894B67,DllCanUnloadNow,comdlg32.dll,addRor4WithNullHash32 138 | 0x2CB905C6,DllCanUnloadNow,comdlg32.dll,dualaccModFFF1Hash 139 | 0x07F8E8DD,DllGetClassObject,comdlg32.dll,ror11AddHash32 140 | 0x72A4F6CE,DllGetClassObject,comdlg32.dll,rol7XorHash32 141 | 0x0C9C13D4,DllGetClassObject,comdlg32.dll,hash_Carbanak 142 | 0x1E9B5EAA,DllGetClassObject,comdlg32.dll,ror13AddHash32Sub1 143 | 0xCDE4AB1A,DllGetClassObject,comdlg32.dll,rol7AddHash32 144 | 0x019E0ABC,DllGetClassObject,comdlg32.dll,sll1AddHash32 145 | 0x13DF6520,DllGetClassObject,comdlg32.dll,ror9AddHash32 146 | 0x1E9B5EAB,DllGetClassObject,comdlg32.dll,ror13AddHash32 147 | 0xE1EE5E78,DllGetClassObject,comdlg32.dll,rol3XorEax 148 | 0xEFB8011D,DllGetClassObject,comdlg32.dll,rol5AddHash32 149 | 0x76590D38,DllGetClassObject,comdlg32.dll,shl7shr19Hash32 150 | 0xA94577EB,DllGetClassObject,comdlg32.dll,ror13AddHash32AddDll 151 | 0x2C4F8949,DllGetClassObject,comdlg32.dll,mult21AddHash32 152 | 0x6C49E74F,DllGetClassObject,comdlg32.dll,poisonIvyHash 153 | 0xA38AE8EE,DllGetClassObject,comdlg32.dll,add1505Shl5Hash32 154 | 0x4018D272,DllGetClassObject,comdlg32.dll,crc32 155 | 0x0A7B9173,DllGetClassObject,comdlg32.dll,ror7AddHash32 156 | 0x02A301A4,DllGetClassObject,comdlg32.dll,hash_ror13AddUpperDllnameHash32 157 | 0x9FC36595,DllGetClassObject,comdlg32.dll,rol7AddXor2Hash32 158 | 0xF558F4DA,DllGetClassObject,comdlg32.dll,ror13AddWithNullHash32 159 | 0x03F5884B,DllGetClassObject,comdlg32.dll,fnv1Xor67f 160 | 0x0695B04D,DllGetClassObject,comdlg32.dll,addRor4WithNullHash32 161 | 0x3930068A,DllGetClassObject,comdlg32.dll,dualaccModFFF1Hash 162 | 0x170AEE8F,FindTextA,comdlg32.dll,ror11AddHash32 163 | 0x0A6D8164,FindTextA,comdlg32.dll,rol7XorHash32 164 | 0x049A8281,FindTextA,comdlg32.dll,hash_Carbanak 165 | 0x155D6B93,FindTextA,comdlg32.dll,ror13AddHash32Sub1 166 | 0x9391F566,FindTextA,comdlg32.dll,rol7AddHash32 167 | 0x0001A022,FindTextA,comdlg32.dll,sll1AddHash32 168 | 0xC33FC5B8,FindTextA,comdlg32.dll,ror9AddHash32 169 | 0x155D6B94,FindTextA,comdlg32.dll,ror13AddHash32 170 | 0x214EAAE4,FindTextA,comdlg32.dll,rol3XorEax 171 | 0x4D74B825,FindTextA,comdlg32.dll,rol5AddHash32 172 | 0xA13B2C3F,FindTextA,comdlg32.dll,shl7shr19Hash32 173 | 0x108D2DFC,FindTextA,comdlg32.dll,ror13AddHash32AddDll 174 | 0xC3FAAAA7,FindTextA,comdlg32.dll,mult21AddHash32 175 | 0xE8AA7676,FindTextA,comdlg32.dll,poisonIvyHash 176 | 0xB617354C,FindTextA,comdlg32.dll,add1505Shl5Hash32 177 | 0x1DC83561,FindTextA,comdlg32.dll,crc32 178 | 0x8597F38E,FindTextA,comdlg32.dll,ror7AddHash32 179 | 0xF9650E8D,FindTextA,comdlg32.dll,hash_ror13AddUpperDllnameHash32 180 | 0xB1D66E78,FindTextA,comdlg32.dll,rol7AddXor2Hash32 181 | 0x5CA0AAEB,FindTextA,comdlg32.dll,ror13AddWithNullHash32 182 | 0x0E013A4F,FindTextA,comdlg32.dll,fnv1Xor67f 183 | 0x1EBEAAB4,FindTextA,comdlg32.dll,addRor4WithNullHash32 184 | 0x10EA0368,FindTextA,comdlg32.dll,dualaccModFFF1Hash 185 | 0x170AEEA5,FindTextW,comdlg32.dll,ror11AddHash32 186 | 0x0A6D8172,FindTextW,comdlg32.dll,rol7XorHash32 187 | 0x049A8297,FindTextW,comdlg32.dll,hash_Carbanak 188 | 0x155D6BA9,FindTextW,comdlg32.dll,ror13AddHash32Sub1 189 | 0x9391F57C,FindTextW,comdlg32.dll,rol7AddHash32 190 | 0x0001A04E,FindTextW,comdlg32.dll,sll1AddHash32 191 | 0xC33FC5CE,FindTextW,comdlg32.dll,ror9AddHash32 192 | 0x155D6BAA,FindTextW,comdlg32.dll,ror13AddHash32 193 | 0x214EAA54,FindTextW,comdlg32.dll,rol3XorEax 194 | 0x4D74B83B,FindTextW,comdlg32.dll,rol5AddHash32 195 | 0xA13B2C29,FindTextW,comdlg32.dll,shl7shr19Hash32 196 | 0x113D2DFC,FindTextW,comdlg32.dll,ror13AddHash32AddDll 197 | 0xC3FAAABD,FindTextW,comdlg32.dll,mult21AddHash32 198 | 0xF432C3A1,FindTextW,comdlg32.dll,poisonIvyHash 199 | 0xB6173562,FindTextW,comdlg32.dll,add1505Shl5Hash32 200 | 0xE91C8030,FindTextW,comdlg32.dll,crc32 201 | 0x8597F3A4,FindTextW,comdlg32.dll,ror7AddHash32 202 | 0xF9650EA3,FindTextW,comdlg32.dll,hash_ror13AddUpperDllnameHash32 203 | 0xB1D66E8A,FindTextW,comdlg32.dll,rol7AddXor2Hash32 204 | 0x5D50AAEB,FindTextW,comdlg32.dll,ror13AddWithNullHash32 205 | 0x04012A0D,FindTextW,comdlg32.dll,fnv1Xor67f 206 | 0x34BEAAB4,FindTextW,comdlg32.dll,addRor4WithNullHash32 207 | 0x1100037E,FindTextW,comdlg32.dll,dualaccModFFF1Hash 208 | 0x8862F421,GetFileTitleA,comdlg32.dll,ror11AddHash32 209 | 0xF33E1944,GetFileTitleA,comdlg32.dll,rol7XorHash32 210 | 0x077882F1,GetFileTitleA,comdlg32.dll,hash_Carbanak 211 | 0x568EED78,GetFileTitleA,comdlg32.dll,ror13AddHash32Sub1 212 | 0x0CF1868B,GetFileTitleA,comdlg32.dll,rol7AddHash32 213 | 0x001A0F96,GetFileTitleA,comdlg32.dll,sll1AddHash32 214 | 0xD2CFC0AC,GetFileTitleA,comdlg32.dll,ror9AddHash32 215 | 0x568EED79,GetFileTitleA,comdlg32.dll,ror13AddHash32 216 | 0x26EA3B3C,GetFileTitleA,comdlg32.dll,rol3XorEax 217 | 0x9324E95F,GetFileTitleA,comdlg32.dll,rol5AddHash32 218 | 0x57360965,GetFileTitleA,comdlg32.dll,shl7shr19Hash32 219 | 0x1FB73788,GetFileTitleA,comdlg32.dll,ror13AddHash32AddDll 220 | 0x796E4163,GetFileTitleA,comdlg32.dll,mult21AddHash32 221 | 0xD2B13D44,GetFileTitleA,comdlg32.dll,poisonIvyHash 222 | 0xE6699688,GetFileTitleA,comdlg32.dll,add1505Shl5Hash32 223 | 0xB3D2C900,GetFileTitleA,comdlg32.dll,crc32 224 | 0x3856806A,GetFileTitleA,comdlg32.dll,ror7AddHash32 225 | 0x3A969072,GetFileTitleA,comdlg32.dll,hash_ror13AddUpperDllnameHash32 226 | 0x2F16501C,GetFileTitleA,comdlg32.dll,rol7AddXor2Hash32 227 | 0x6BCAB477,GetFileTitleA,comdlg32.dll,ror13AddWithNullHash32 228 | 0x5E6BF453,GetFileTitleA,comdlg32.dll,fnv1Xor67f 229 | 0x648D45AC,GetFileTitleA,comdlg32.dll,addRor4WithNullHash32 230 | 0x221404E4,GetFileTitleA,comdlg32.dll,dualaccModFFF1Hash 231 | 0x8862F437,GetFileTitleW,comdlg32.dll,ror11AddHash32 232 | 0xF33E1952,GetFileTitleW,comdlg32.dll,rol7XorHash32 233 | 0x077882C7,GetFileTitleW,comdlg32.dll,hash_Carbanak 234 | 0x568EED8E,GetFileTitleW,comdlg32.dll,ror13AddHash32Sub1 235 | 0x0CF186A1,GetFileTitleW,comdlg32.dll,rol7AddHash32 236 | 0x001A0FC2,GetFileTitleW,comdlg32.dll,sll1AddHash32 237 | 0xD2CFC0C2,GetFileTitleW,comdlg32.dll,ror9AddHash32 238 | 0x568EED8F,GetFileTitleW,comdlg32.dll,ror13AddHash32 239 | 0x26EA3B8C,GetFileTitleW,comdlg32.dll,rol3XorEax 240 | 0x9324E975,GetFileTitleW,comdlg32.dll,rol5AddHash32 241 | 0x57360973,GetFileTitleW,comdlg32.dll,shl7shr19Hash32 242 | 0x20673788,GetFileTitleW,comdlg32.dll,ror13AddHash32AddDll 243 | 0x796E4179,GetFileTitleW,comdlg32.dll,mult21AddHash32 244 | 0xCE298893,GetFileTitleW,comdlg32.dll,poisonIvyHash 245 | 0xE669969E,GetFileTitleW,comdlg32.dll,add1505Shl5Hash32 246 | 0x47067C51,GetFileTitleW,comdlg32.dll,crc32 247 | 0x38568080,GetFileTitleW,comdlg32.dll,ror7AddHash32 248 | 0x3A969088,GetFileTitleW,comdlg32.dll,hash_ror13AddUpperDllnameHash32 249 | 0x2F16502E,GetFileTitleW,comdlg32.dll,rol7AddXor2Hash32 250 | 0x6C7AB477,GetFileTitleW,comdlg32.dll,ror13AddWithNullHash32 251 | 0x6C6C0E49,GetFileTitleW,comdlg32.dll,fnv1Xor67f 252 | 0x7A8D45AC,GetFileTitleW,comdlg32.dll,addRor4WithNullHash32 253 | 0x222A04FA,GetFileTitleW,comdlg32.dll,dualaccModFFF1Hash 254 | 0x7F4715E1,GetOpenFileNameA,comdlg32.dll,ror11AddHash32 255 | 0x0E16570D,GetOpenFileNameA,comdlg32.dll,rol7XorHash32 256 | 0x04F493E1,GetOpenFileNameA,comdlg32.dll,hash_Carbanak 257 | 0xE7C211E5,GetOpenFileNameA,comdlg32.dll,ror13AddHash32Sub1 258 | 0xD80DCEFC,GetOpenFileNameA,comdlg32.dll,rol7AddHash32 259 | 0x00D1DDCE,GetOpenFileNameA,comdlg32.dll,sll1AddHash32 260 | 0xEEEFB81A,GetOpenFileNameA,comdlg32.dll,ror9AddHash32 261 | 0xE7C211E6,GetOpenFileNameA,comdlg32.dll,ror13AddHash32 262 | 0x7D2AD4D2,GetOpenFileNameA,comdlg32.dll,rol3XorEax 263 | 0xF8B69C71,GetOpenFileNameA,comdlg32.dll,rol5AddHash32 264 | 0x0A1FACFB,GetOpenFileNameA,comdlg32.dll,shl7shr19Hash32 265 | 0x4323C121,GetOpenFileNameA,comdlg32.dll,ror13AddHash32AddDll 266 | 0x15DCF814,GetOpenFileNameA,comdlg32.dll,mult21AddHash32 267 | 0xA61565E7,GetOpenFileNameA,comdlg32.dll,poisonIvyHash 268 | 0xD3A87719,GetOpenFileNameA,comdlg32.dll,add1505Shl5Hash32 269 | 0xA658F083,GetOpenFileNameA,comdlg32.dll,crc32 270 | 0x81F0D2A5,GetOpenFileNameA,comdlg32.dll,ror7AddHash32 271 | 0xCBC9B4DF,GetOpenFileNameA,comdlg32.dll,hash_ror13AddUpperDllnameHash32 272 | 0xC6329495,GetOpenFileNameA,comdlg32.dll,rol7AddXor2Hash32 273 | 0x8F373E10,GetOpenFileNameA,comdlg32.dll,ror13AddWithNullHash32 274 | 0x16629CEA,GetOpenFileNameA,comdlg32.dll,fnv1Xor67f 275 | 0x84FFBA5C,GetOpenFileNameA,comdlg32.dll,addRor4WithNullHash32 276 | 0x331505F5,GetOpenFileNameA,comdlg32.dll,dualaccModFFF1Hash 277 | 0x7F4715F7,GetOpenFileNameW,comdlg32.dll,ror11AddHash32 278 | 0x0E16571B,GetOpenFileNameW,comdlg32.dll,rol7XorHash32 279 | 0x04F493D7,GetOpenFileNameW,comdlg32.dll,hash_Carbanak 280 | 0xE7C211FB,GetOpenFileNameW,comdlg32.dll,ror13AddHash32Sub1 281 | 0xD80DCF12,GetOpenFileNameW,comdlg32.dll,rol7AddHash32 282 | 0x00D1DDFA,GetOpenFileNameW,comdlg32.dll,sll1AddHash32 283 | 0xEEEFB830,GetOpenFileNameW,comdlg32.dll,ror9AddHash32 284 | 0xE7C211FC,GetOpenFileNameW,comdlg32.dll,ror13AddHash32 285 | 0x7D2AD462,GetOpenFileNameW,comdlg32.dll,rol3XorEax 286 | 0xF8B69C87,GetOpenFileNameW,comdlg32.dll,rol5AddHash32 287 | 0x0A1FACED,GetOpenFileNameW,comdlg32.dll,shl7shr19Hash32 288 | 0x43D3C121,GetOpenFileNameW,comdlg32.dll,ror13AddHash32AddDll 289 | 0x15DCF82A,GetOpenFileNameW,comdlg32.dll,mult21AddHash32 290 | 0xBA8DD030,GetOpenFileNameW,comdlg32.dll,poisonIvyHash 291 | 0xD3A8772F,GetOpenFileNameW,comdlg32.dll,add1505Shl5Hash32 292 | 0x528C45D2,GetOpenFileNameW,comdlg32.dll,crc32 293 | 0x81F0D2BB,GetOpenFileNameW,comdlg32.dll,ror7AddHash32 294 | 0xCBC9B4F5,GetOpenFileNameW,comdlg32.dll,hash_ror13AddUpperDllnameHash32 295 | 0xC63294A7,GetOpenFileNameW,comdlg32.dll,rol7AddXor2Hash32 296 | 0x8FE73E10,GetOpenFileNameW,comdlg32.dll,ror13AddWithNullHash32 297 | 0x0062718C,GetOpenFileNameW,comdlg32.dll,fnv1Xor67f 298 | 0x9AFFBA5C,GetOpenFileNameW,comdlg32.dll,addRor4WithNullHash32 299 | 0x332B060B,GetOpenFileNameW,comdlg32.dll,dualaccModFFF1Hash 300 | 0x9F8B0E60,GetSaveFileNameA,comdlg32.dll,ror11AddHash32 301 | 0x8FD473C8,GetSaveFileNameA,comdlg32.dll,rol7XorHash32 302 | 0x0B2C43E1,GetSaveFileNameA,comdlg32.dll,hash_Carbanak 303 | 0x27A3CA2A,GetSaveFileNameA,comdlg32.dll,ror13AddHash32Sub1 304 | 0x584BF338,GetSaveFileNameA,comdlg32.dll,rol7AddHash32 305 | 0x00D1D1CE,GetSaveFileNameA,comdlg32.dll,sll1AddHash32 306 | 0x0F2B3C59,GetSaveFileNameA,comdlg32.dll,ror9AddHash32 307 | 0x27A3CA2B,GetSaveFileNameA,comdlg32.dll,ror13AddHash32 308 | 0xB45BA98E,GetSaveFileNameA,comdlg32.dll,rol3XorEax 309 | 0x31797C72,GetSaveFileNameA,comdlg32.dll,rol5AddHash32 310 | 0x8BDD883E,GetSaveFileNameA,comdlg32.dll,shl7shr19Hash32 311 | 0x0545C02F,GetSaveFileNameA,comdlg32.dll,ror13AddHash32AddDll 312 | 0x2BDF9491,GetSaveFileNameA,comdlg32.dll,mult21AddHash32 313 | 0xDB640FB1,GetSaveFileNameA,comdlg32.dll,poisonIvyHash 314 | 0xE9AB1396,GetSaveFileNameA,comdlg32.dll,add1505Shl5Hash32 315 | 0xD0AC170C,GetSaveFileNameA,comdlg32.dll,crc32 316 | 0xC5791293,GetSaveFileNameA,comdlg32.dll,ror7AddHash32 317 | 0x0BAB6D24,GetSaveFileNameA,comdlg32.dll,hash_ror13AddUpperDllnameHash32 318 | 0x4670B7D3,GetSaveFileNameA,comdlg32.dll,rol7AddXor2Hash32 319 | 0x51593D1E,GetSaveFileNameA,comdlg32.dll,ror13AddWithNullHash32 320 | 0xBA862F65,GetSaveFileNameA,comdlg32.dll,fnv1Xor67f 321 | 0x837FBE5C,GetSaveFileNameA,comdlg32.dll,addRor4WithNullHash32 322 | 0x32F605F2,GetSaveFileNameA,comdlg32.dll,dualaccModFFF1Hash 323 | 0x9F8B0E76,GetSaveFileNameW,comdlg32.dll,ror11AddHash32 324 | 0x8FD473DE,GetSaveFileNameW,comdlg32.dll,rol7XorHash32 325 | 0x0B2C43D7,GetSaveFileNameW,comdlg32.dll,hash_Carbanak 326 | 0x27A3CA40,GetSaveFileNameW,comdlg32.dll,ror13AddHash32Sub1 327 | 0x584BF34E,GetSaveFileNameW,comdlg32.dll,rol7AddHash32 328 | 0x00D1D1FA,GetSaveFileNameW,comdlg32.dll,sll1AddHash32 329 | 0x0F2B3C6F,GetSaveFileNameW,comdlg32.dll,ror9AddHash32 330 | 0x27A3CA41,GetSaveFileNameW,comdlg32.dll,ror13AddHash32 331 | 0xB45BA93E,GetSaveFileNameW,comdlg32.dll,rol3XorEax 332 | 0x31797C88,GetSaveFileNameW,comdlg32.dll,rol5AddHash32 333 | 0x8BDD8828,GetSaveFileNameW,comdlg32.dll,shl7shr19Hash32 334 | 0x05F5C02F,GetSaveFileNameW,comdlg32.dll,ror13AddHash32AddDll 335 | 0x2BDF94A7,GetSaveFileNameW,comdlg32.dll,mult21AddHash32 336 | 0xC7FCBA66,GetSaveFileNameW,comdlg32.dll,poisonIvyHash 337 | 0xE9AB13AC,GetSaveFileNameW,comdlg32.dll,add1505Shl5Hash32 338 | 0x2478A25D,GetSaveFileNameW,comdlg32.dll,crc32 339 | 0xC57912A9,GetSaveFileNameW,comdlg32.dll,ror7AddHash32 340 | 0x0BAB6D3A,GetSaveFileNameW,comdlg32.dll,hash_ror13AddUpperDllnameHash32 341 | 0x4670B7E5,GetSaveFileNameW,comdlg32.dll,rol7AddXor2Hash32 342 | 0x52093D1E,GetSaveFileNameW,comdlg32.dll,ror13AddWithNullHash32 343 | 0xA4860007,GetSaveFileNameW,comdlg32.dll,fnv1Xor67f 344 | 0x997FBE5C,GetSaveFileNameW,comdlg32.dll,addRor4WithNullHash32 345 | 0x330C0608,GetSaveFileNameW,comdlg32.dll,dualaccModFFF1Hash 346 | 0x27BCF1DA,LoadAlterBitmap,comdlg32.dll,ror11AddHash32 347 | 0x944C2BA3,LoadAlterBitmap,comdlg32.dll,rol7XorHash32 348 | 0x0118DA10,LoadAlterBitmap,comdlg32.dll,hash_Carbanak 349 | 0xD9234E91,LoadAlterBitmap,comdlg32.dll,ror13AddHash32Sub1 350 | 0x9183CCB0,LoadAlterBitmap,comdlg32.dll,rol7AddHash32 351 | 0x006A90AC,LoadAlterBitmap,comdlg32.dll,sll1AddHash32 352 | 0xBCF6A13D,LoadAlterBitmap,comdlg32.dll,ror9AddHash32 353 | 0xD9234E92,LoadAlterBitmap,comdlg32.dll,ror13AddHash32 354 | 0xE442940A,LoadAlterBitmap,comdlg32.dll,rol3XorEax 355 | 0x4DDDCBB9,LoadAlterBitmap,comdlg32.dll,rol5AddHash32 356 | 0x90443855,LoadAlterBitmap,comdlg32.dll,shl7shr19Hash32 357 | 0x28834C2B,LoadAlterBitmap,comdlg32.dll,ror13AddHash32AddDll 358 | 0xD48D2375,LoadAlterBitmap,comdlg32.dll,mult21AddHash32 359 | 0x05B935F8,LoadAlterBitmap,comdlg32.dll,poisonIvyHash 360 | 0x6DB255DA,LoadAlterBitmap,comdlg32.dll,add1505Shl5Hash32 361 | 0xB6089BE1,LoadAlterBitmap,comdlg32.dll,crc32 362 | 0x2790B9D5,LoadAlterBitmap,comdlg32.dll,ror7AddHash32 363 | 0xBD2AF18B,LoadAlterBitmap,comdlg32.dll,hash_ror13AddUpperDllnameHash32 364 | 0xA3E8862B,LoadAlterBitmap,comdlg32.dll,rol7AddXor2Hash32 365 | 0x7496C91A,LoadAlterBitmap,comdlg32.dll,ror13AddWithNullHash32 366 | 0x1B1B258B,LoadAlterBitmap,comdlg32.dll,fnv1Xor67f 367 | 0x318B55C4,LoadAlterBitmap,comdlg32.dll,addRor4WithNullHash32 368 | 0x2D7105D6,LoadAlterBitmap,comdlg32.dll,dualaccModFFF1Hash 369 | 0xB8A71E11,PageSetupDlgA,comdlg32.dll,ror11AddHash32 370 | 0xDE5CD99C,PageSetupDlgA,comdlg32.dll,rol7XorHash32 371 | 0x0DB91B21,PageSetupDlgA,comdlg32.dll,hash_Carbanak 372 | 0x20D45535,PageSetupDlgA,comdlg32.dll,ror13AddHash32Sub1 373 | 0xE1734162,PageSetupDlgA,comdlg32.dll,rol7AddHash32 374 | 0x001A983E,PageSetupDlgA,comdlg32.dll,sll1AddHash32 375 | 0xAF77735E,PageSetupDlgA,comdlg32.dll,ror9AddHash32 376 | 0x20D45536,PageSetupDlgA,comdlg32.dll,ror13AddHash32 377 | 0x2D18702D,PageSetupDlgA,comdlg32.dll,rol3XorEax 378 | 0x234CB36C,PageSetupDlgA,comdlg32.dll,rol5AddHash32 379 | 0x7A54C9BD,PageSetupDlgA,comdlg32.dll,shl7shr19Hash32 380 | 0x5D9D89B3,PageSetupDlgA,comdlg32.dll,ror13AddHash32AddDll 381 | 0x8F141D86,PageSetupDlgA,comdlg32.dll,mult21AddHash32 382 | 0xF95A8F28,PageSetupDlgA,comdlg32.dll,poisonIvyHash 383 | 0xFC0F72AB,PageSetupDlgA,comdlg32.dll,add1505Shl5Hash32 384 | 0xEC3A37BA,PageSetupDlgA,comdlg32.dll,crc32 385 | 0x2BF1FB1C,PageSetupDlgA,comdlg32.dll,ror7AddHash32 386 | 0x04DBF82F,PageSetupDlgA,comdlg32.dll,hash_ror13AddUpperDllnameHash32 387 | 0xFFD807F5,PageSetupDlgA,comdlg32.dll,rol7AddXor2Hash32 388 | 0xA9B106A2,PageSetupDlgA,comdlg32.dll,ror13AddWithNullHash32 389 | 0x0C3B18E0,PageSetupDlgA,comdlg32.dll,fnv1Xor67f 390 | 0xF08E17CA,PageSetupDlgA,comdlg32.dll,addRor4WithNullHash32 391 | 0x229804E7,PageSetupDlgA,comdlg32.dll,dualaccModFFF1Hash 392 | 0xB8A71E27,PageSetupDlgW,comdlg32.dll,ror11AddHash32 393 | 0xDE5CD98A,PageSetupDlgW,comdlg32.dll,rol7XorHash32 394 | 0x0DB91B57,PageSetupDlgW,comdlg32.dll,hash_Carbanak 395 | 0x20D4554B,PageSetupDlgW,comdlg32.dll,ror13AddHash32Sub1 396 | 0xE1734178,PageSetupDlgW,comdlg32.dll,rol7AddHash32 397 | 0x001A986A,PageSetupDlgW,comdlg32.dll,sll1AddHash32 398 | 0xAF777374,PageSetupDlgW,comdlg32.dll,ror9AddHash32 399 | 0x20D4554C,PageSetupDlgW,comdlg32.dll,ror13AddHash32 400 | 0x2D18709D,PageSetupDlgW,comdlg32.dll,rol3XorEax 401 | 0x234CB382,PageSetupDlgW,comdlg32.dll,rol5AddHash32 402 | 0x7A54C9AB,PageSetupDlgW,comdlg32.dll,shl7shr19Hash32 403 | 0x5E4D89B3,PageSetupDlgW,comdlg32.dll,ror13AddHash32AddDll 404 | 0x8F141D9C,PageSetupDlgW,comdlg32.dll,mult21AddHash32 405 | 0xE5C23AFF,PageSetupDlgW,comdlg32.dll,poisonIvyHash 406 | 0xFC0F72C1,PageSetupDlgW,comdlg32.dll,add1505Shl5Hash32 407 | 0x18EE82EB,PageSetupDlgW,comdlg32.dll,crc32 408 | 0x2BF1FB32,PageSetupDlgW,comdlg32.dll,ror7AddHash32 409 | 0x04DBF845,PageSetupDlgW,comdlg32.dll,hash_ror13AddUpperDllnameHash32 410 | 0xFFD80807,PageSetupDlgW,comdlg32.dll,rol7AddXor2Hash32 411 | 0xAA6106A2,PageSetupDlgW,comdlg32.dll,ror13AddWithNullHash32 412 | 0x1A3B32D6,PageSetupDlgW,comdlg32.dll,fnv1Xor67f 413 | 0x068E17CA,PageSetupDlgW,comdlg32.dll,addRor4WithNullHash32 414 | 0x22AE04FD,PageSetupDlgW,comdlg32.dll,dualaccModFFF1Hash 415 | 0x57B2DC7D,PrintDlgA,comdlg32.dll,ror11AddHash32 416 | 0x187E94B6,PrintDlgA,comdlg32.dll,rol7XorHash32 417 | 0x00590521,PrintDlgA,comdlg32.dll,hash_Carbanak 418 | 0xDCE369B7,PrintDlgA,comdlg32.dll,ror13AddHash32Sub1 419 | 0x9980DB38,PrintDlgA,comdlg32.dll,rol7AddHash32 420 | 0x0001BC7E,PrintDlgA,comdlg32.dll,sll1AddHash32 421 | 0xC70CADAC,PrintDlgA,comdlg32.dll,ror9AddHash32 422 | 0xDCE369B8,PrintDlgA,comdlg32.dll,ror13AddHash32 423 | 0x913CBCF5,PrintDlgA,comdlg32.dll,rol3XorEax 424 | 0x236410CC,PrintDlgA,comdlg32.dll,rol5AddHash32 425 | 0xB32839ED,PrintDlgA,comdlg32.dll,shl7shr19Hash32 426 | 0x01B36A2C,PrintDlgA,comdlg32.dll,ror13AddHash32AddDll 427 | 0x37C8BA05,PrintDlgA,comdlg32.dll,mult21AddHash32 428 | 0x782CD341,PrintDlgA,comdlg32.dll,poisonIvyHash 429 | 0x29E544AA,PrintDlgA,comdlg32.dll,add1505Shl5Hash32 430 | 0x2470936E,PrintDlgA,comdlg32.dll,crc32 431 | 0xAA2B778F,PrintDlgA,comdlg32.dll,ror7AddHash32 432 | 0xC0EB0CB1,PrintDlgA,comdlg32.dll,hash_ror13AddUpperDllnameHash32 433 | 0xBBBD622A,PrintDlgA,comdlg32.dll,rol7AddXor2Hash32 434 | 0x4DC6E71B,PrintDlgA,comdlg32.dll,ror13AddWithNullHash32 435 | 0x66AF8CDB,PrintDlgA,comdlg32.dll,fnv1Xor67f 436 | 0xB7E0BB50,PrintDlgA,comdlg32.dll,addRor4WithNullHash32 437 | 0x11830366,PrintDlgA,comdlg32.dll,dualaccModFFF1Hash 438 | 0xDA72059F,PrintDlgExA,comdlg32.dll,ror11AddHash32 439 | 0xA52CBA5E,PrintDlgExA,comdlg32.dll,rol7XorHash32 440 | 0x09052C91,PrintDlgExA,comdlg32.dll,hash_Carbanak 441 | 0x3C9A6F77,PrintDlgExA,comdlg32.dll,ror13AddHash32Sub1 442 | 0x36CF62A1,PrintDlgExA,comdlg32.dll,rol7AddHash32 443 | 0x0006F4BA,PrintDlgExA,comdlg32.dll,sll1AddHash32 444 | 0x676C3204,PrintDlgExA,comdlg32.dll,ror9AddHash32 445 | 0x3C9A6F78,PrintDlgExA,comdlg32.dll,ror13AddHash32 446 | 0x6CD5A98D,PrintDlgExA,comdlg32.dll,rol3XorEax 447 | 0x90434FCE,PrintDlgExA,comdlg32.dll,rol5AddHash32 448 | 0x0E7A2A7F,PrintDlgExA,comdlg32.dll,shl7shr19Hash32 449 | 0x2FAE67E4,PrintDlgExA,comdlg32.dll,ror13AddHash32AddDll 450 | 0x4CDF7002,PrintDlgExA,comdlg32.dll,mult21AddHash32 451 | 0x8B834702,PrintDlgExA,comdlg32.dll,poisonIvyHash 452 | 0x384937E7,PrintDlgExA,comdlg32.dll,add1505Shl5Hash32 453 | 0x3295987C,PrintDlgExA,comdlg32.dll,crc32 454 | 0xCE4EA8EF,PrintDlgExA,comdlg32.dll,ror7AddHash32 455 | 0x20A21271,PrintDlgExA,comdlg32.dll,hash_ror13AddUpperDllnameHash32 456 | 0x588BEC32,PrintDlgExA,comdlg32.dll,rol7AddXor2Hash32 457 | 0x7BC1E4D3,PrintDlgExA,comdlg32.dll,ror13AddWithNullHash32 458 | 0xA8340B8C,PrintDlgExA,comdlg32.dll,fnv1Xor67f 459 | 0x993BE0BB,PrintDlgExA,comdlg32.dll,addRor4WithNullHash32 460 | 0x198C0423,PrintDlgExA,comdlg32.dll,dualaccModFFF1Hash 461 | 0xDA7205B5,PrintDlgExW,comdlg32.dll,ror11AddHash32 462 | 0xA52CBA48,PrintDlgExW,comdlg32.dll,rol7XorHash32 463 | 0x09052C87,PrintDlgExW,comdlg32.dll,hash_Carbanak 464 | 0x3C9A6F8D,PrintDlgExW,comdlg32.dll,ror13AddHash32Sub1 465 | 0x36CF62B7,PrintDlgExW,comdlg32.dll,rol7AddHash32 466 | 0x0006F4E6,PrintDlgExW,comdlg32.dll,sll1AddHash32 467 | 0x676C321A,PrintDlgExW,comdlg32.dll,ror9AddHash32 468 | 0x3C9A6F8E,PrintDlgExW,comdlg32.dll,ror13AddHash32 469 | 0x6CD5A93D,PrintDlgExW,comdlg32.dll,rol3XorEax 470 | 0x90434FE4,PrintDlgExW,comdlg32.dll,rol5AddHash32 471 | 0x0E7A2A69,PrintDlgExW,comdlg32.dll,shl7shr19Hash32 472 | 0x305E67E4,PrintDlgExW,comdlg32.dll,ror13AddHash32AddDll 473 | 0x4CDF7018,PrintDlgExW,comdlg32.dll,mult21AddHash32 474 | 0x971BF2D5,PrintDlgExW,comdlg32.dll,poisonIvyHash 475 | 0x384937FD,PrintDlgExW,comdlg32.dll,add1505Shl5Hash32 476 | 0xC6412D2D,PrintDlgExW,comdlg32.dll,crc32 477 | 0xCE4EA905,PrintDlgExW,comdlg32.dll,ror7AddHash32 478 | 0x20A21287,PrintDlgExW,comdlg32.dll,hash_ror13AddUpperDllnameHash32 479 | 0x588BEC44,PrintDlgExW,comdlg32.dll,rol7AddXor2Hash32 480 | 0x7C71E4D3,PrintDlgExW,comdlg32.dll,ror13AddWithNullHash32 481 | 0xBE3436EA,PrintDlgExW,comdlg32.dll,fnv1Xor67f 482 | 0xAF3BE0BB,PrintDlgExW,comdlg32.dll,addRor4WithNullHash32 483 | 0x19A20439,PrintDlgExW,comdlg32.dll,dualaccModFFF1Hash 484 | 0x57B2DC93,PrintDlgW,comdlg32.dll,ror11AddHash32 485 | 0x187E94A0,PrintDlgW,comdlg32.dll,rol7XorHash32 486 | 0x00590557,PrintDlgW,comdlg32.dll,hash_Carbanak 487 | 0xDCE369CD,PrintDlgW,comdlg32.dll,ror13AddHash32Sub1 488 | 0x9980DB4E,PrintDlgW,comdlg32.dll,rol7AddHash32 489 | 0x0001BCAA,PrintDlgW,comdlg32.dll,sll1AddHash32 490 | 0xC70CADC2,PrintDlgW,comdlg32.dll,ror9AddHash32 491 | 0xDCE369CE,PrintDlgW,comdlg32.dll,ror13AddHash32 492 | 0x913CBC45,PrintDlgW,comdlg32.dll,rol3XorEax 493 | 0x236410E2,PrintDlgW,comdlg32.dll,rol5AddHash32 494 | 0xB32839FB,PrintDlgW,comdlg32.dll,shl7shr19Hash32 495 | 0x02636A2C,PrintDlgW,comdlg32.dll,ror13AddHash32AddDll 496 | 0x37C8BA1B,PrintDlgW,comdlg32.dll,mult21AddHash32 497 | 0x64B46696,PrintDlgW,comdlg32.dll,poisonIvyHash 498 | 0x29E544C0,PrintDlgW,comdlg32.dll,add1505Shl5Hash32 499 | 0xD0A4263F,PrintDlgW,comdlg32.dll,crc32 500 | 0xAA2B77A5,PrintDlgW,comdlg32.dll,ror7AddHash32 501 | 0xC0EB0CC7,PrintDlgW,comdlg32.dll,hash_ror13AddUpperDllnameHash32 502 | 0xBBBD623C,PrintDlgW,comdlg32.dll,rol7AddXor2Hash32 503 | 0x4E76E71B,PrintDlgW,comdlg32.dll,ror13AddWithNullHash32 504 | 0x74AFA6D1,PrintDlgW,comdlg32.dll,fnv1Xor67f 505 | 0xCDE0BB50,PrintDlgW,comdlg32.dll,addRor4WithNullHash32 506 | 0x1199037C,PrintDlgW,comdlg32.dll,dualaccModFFF1Hash 507 | 0x585F3F9A,ReplaceTextA,comdlg32.dll,ror11AddHash32 508 | 0x2077EC14,ReplaceTextA,comdlg32.dll,rol7XorHash32 509 | 0x0C26BDF1,ReplaceTextA,comdlg32.dll,hash_Carbanak 510 | 0xFBD8EAAC,ReplaceTextA,comdlg32.dll,ror13AddHash32Sub1 511 | 0xB98C22E6,ReplaceTextA,comdlg32.dll,rol7AddHash32 512 | 0x000DA6E2,ReplaceTextA,comdlg32.dll,sll1AddHash32 513 | 0x297FB2F3,ReplaceTextA,comdlg32.dll,ror9AddHash32 514 | 0xFBD8EAAD,ReplaceTextA,comdlg32.dll,ror13AddHash32 515 | 0x975D645A,ReplaceTextA,comdlg32.dll,rol3XorEax 516 | 0xBA16DDE2,ReplaceTextA,comdlg32.dll,rol5AddHash32 517 | 0x8B3FFC35,ReplaceTextA,comdlg32.dll,shl7shr19Hash32 518 | 0x095C61D8,ReplaceTextA,comdlg32.dll,ror13AddHash32AddDll 519 | 0x70204042,ReplaceTextA,comdlg32.dll,mult21AddHash32 520 | 0xFD84BC37,ReplaceTextA,comdlg32.dll,poisonIvyHash 521 | 0xC8C304C7,ReplaceTextA,comdlg32.dll,add1505Shl5Hash32 522 | 0xE92F3D3C,ReplaceTextA,comdlg32.dll,crc32 523 | 0x39641A70,ReplaceTextA,comdlg32.dll,ror7AddHash32 524 | 0xDFE08DA6,ReplaceTextA,comdlg32.dll,hash_ror13AddUpperDllnameHash32 525 | 0xDBD05C79,ReplaceTextA,comdlg32.dll,rol7AddXor2Hash32 526 | 0x556FDEC7,ReplaceTextA,comdlg32.dll,ror13AddWithNullHash32 527 | 0x91F6F1C0,ReplaceTextA,comdlg32.dll,fnv1Xor67f 528 | 0xCC18CAB9,ReplaceTextA,comdlg32.dll,addRor4WithNullHash32 529 | 0x1E4B04A3,ReplaceTextA,comdlg32.dll,dualaccModFFF1Hash 530 | 0x585F3FB0,ReplaceTextW,comdlg32.dll,ror11AddHash32 531 | 0x2077EC02,ReplaceTextW,comdlg32.dll,rol7XorHash32 532 | 0x0C26BDE7,ReplaceTextW,comdlg32.dll,hash_Carbanak 533 | 0xFBD8EAC2,ReplaceTextW,comdlg32.dll,ror13AddHash32Sub1 534 | 0xB98C22FC,ReplaceTextW,comdlg32.dll,rol7AddHash32 535 | 0x000DA70E,ReplaceTextW,comdlg32.dll,sll1AddHash32 536 | 0x297FB309,ReplaceTextW,comdlg32.dll,ror9AddHash32 537 | 0xFBD8EAC3,ReplaceTextW,comdlg32.dll,ror13AddHash32 538 | 0x975D64EA,ReplaceTextW,comdlg32.dll,rol3XorEax 539 | 0xBA16DDF8,ReplaceTextW,comdlg32.dll,rol5AddHash32 540 | 0x8B3FFC23,ReplaceTextW,comdlg32.dll,shl7shr19Hash32 541 | 0x0A0C61D8,ReplaceTextW,comdlg32.dll,ror13AddHash32AddDll 542 | 0x70204058,ReplaceTextW,comdlg32.dll,mult21AddHash32 543 | 0xE11C09E0,ReplaceTextW,comdlg32.dll,poisonIvyHash 544 | 0xC8C304DD,ReplaceTextW,comdlg32.dll,add1505Shl5Hash32 545 | 0x1DFB886D,ReplaceTextW,comdlg32.dll,crc32 546 | 0x39641A86,ReplaceTextW,comdlg32.dll,ror7AddHash32 547 | 0xDFE08DBC,ReplaceTextW,comdlg32.dll,hash_ror13AddUpperDllnameHash32 548 | 0xDBD05C8B,ReplaceTextW,comdlg32.dll,rol7AddXor2Hash32 549 | 0x561FDEC7,ReplaceTextW,comdlg32.dll,ror13AddWithNullHash32 550 | 0x9FF70BB6,ReplaceTextW,comdlg32.dll,fnv1Xor67f 551 | 0xE218CAB9,ReplaceTextW,comdlg32.dll,addRor4WithNullHash32 552 | 0x1E6104B9,ReplaceTextW,comdlg32.dll,dualaccModFFF1Hash 553 | 0x35C8DAAB,Ssync_ANSI_UNICODE_Struct_For_WOW,comdlg32.dll,ror11AddHash32 554 | 0xCEECE66C,Ssync_ANSI_UNICODE_Struct_For_WOW,comdlg32.dll,rol7XorHash32 555 | 0x077A9C87,Ssync_ANSI_UNICODE_Struct_For_WOW,comdlg32.dll,hash_Carbanak 556 | 0x149E1EA3,Ssync_ANSI_UNICODE_Struct_For_WOW,comdlg32.dll,ror13AddHash32Sub1 557 | 0xFEC39F9A,Ssync_ANSI_UNICODE_Struct_For_WOW,comdlg32.dll,rol7AddHash32 558 | 0xD689E652,Ssync_ANSI_UNICODE_Struct_For_WOW,comdlg32.dll,sll1AddHash32 559 | 0x58AF45AF,Ssync_ANSI_UNICODE_Struct_For_WOW,comdlg32.dll,ror9AddHash32 560 | 0x149E1EA4,Ssync_ANSI_UNICODE_Struct_For_WOW,comdlg32.dll,ror13AddHash32 561 | 0x0B73A4A6,Ssync_ANSI_UNICODE_Struct_For_WOW,comdlg32.dll,rol3XorEax 562 | 0x42DACD99,Ssync_ANSI_UNICODE_Struct_For_WOW,comdlg32.dll,rol5AddHash32 563 | 0x31131967,Ssync_ANSI_UNICODE_Struct_For_WOW,comdlg32.dll,shl7shr19Hash32 564 | 0xA90D2801,Ssync_ANSI_UNICODE_Struct_For_WOW,comdlg32.dll,ror13AddHash32AddDll 565 | 0x3E1F0266,Ssync_ANSI_UNICODE_Struct_For_WOW,comdlg32.dll,mult21AddHash32 566 | 0x358E489A,Ssync_ANSI_UNICODE_Struct_For_WOW,comdlg32.dll,poisonIvyHash 567 | 0x4CA70C0B,Ssync_ANSI_UNICODE_Struct_For_WOW,comdlg32.dll,add1505Shl5Hash32 568 | 0x348A100E,Ssync_ANSI_UNICODE_Struct_For_WOW,comdlg32.dll,crc32 569 | 0xA9D11689,Ssync_ANSI_UNICODE_Struct_For_WOW,comdlg32.dll,ror7AddHash32 570 | 0xF8A5C19D,Ssync_ANSI_UNICODE_Struct_For_WOW,comdlg32.dll,hash_ror13AddUpperDllnameHash32 571 | 0x0437A921,Ssync_ANSI_UNICODE_Struct_For_WOW,comdlg32.dll,rol7AddXor2Hash32 572 | 0xF520A4F0,Ssync_ANSI_UNICODE_Struct_For_WOW,comdlg32.dll,ror13AddWithNullHash32 573 | 0x44166E10,Ssync_ANSI_UNICODE_Struct_For_WOW,comdlg32.dll,fnv1Xor67f 574 | 0xAA3820E3,Ssync_ANSI_UNICODE_Struct_For_WOW,comdlg32.dll,addRor4WithNullHash32 575 | 0xC6DC0BC7,Ssync_ANSI_UNICODE_Struct_For_WOW,comdlg32.dll,dualaccModFFF1Hash 576 | 0xF9729FD3,WantArrows,comdlg32.dll,ror11AddHash32 577 | 0xCF8629D7,WantArrows,comdlg32.dll,rol7XorHash32 578 | 0x088C6EB3,WantArrows,comdlg32.dll,hash_Carbanak 579 | 0xCA920213,WantArrows,comdlg32.dll,ror13AddHash32Sub1 580 | 0x1039CE2E,WantArrows,comdlg32.dll,rol7AddHash32 581 | 0x000379DA,WantArrows,comdlg32.dll,sll1AddHash32 582 | 0xBED11F96,WantArrows,comdlg32.dll,ror9AddHash32 583 | 0xCA920214,WantArrows,comdlg32.dll,ror13AddHash32 584 | 0x6C3106D9,WantArrows,comdlg32.dll,rol3XorEax 585 | 0x89660FE0,WantArrows,comdlg32.dll,rol5AddHash32 586 | 0x64D084F6,WantArrows,comdlg32.dll,shl7shr19Hash32 587 | 0xC492D7A1,WantArrows,comdlg32.dll,ror13AddHash32AddDll 588 | 0x8859C938,WantArrows,comdlg32.dll,mult21AddHash32 589 | 0xA9F10144,WantArrows,comdlg32.dll,poisonIvyHash 590 | 0xBE07A87D,WantArrows,comdlg32.dll,add1505Shl5Hash32 591 | 0x42C567CA,WantArrows,comdlg32.dll,crc32 592 | 0x2CF6F94A,WantArrows,comdlg32.dll,ror7AddHash32 593 | 0xAE99A50D,WantArrows,comdlg32.dll,hash_ror13AddUpperDllnameHash32 594 | 0xF1F5553A,WantArrows,comdlg32.dll,rol7AddXor2Hash32 595 | 0x10A65490,WantArrows,comdlg32.dll,ror13AddWithNullHash32 596 | 0x39B3A932,WantArrows,comdlg32.dll,fnv1Xor67f 597 | 0xC156968B,WantArrows,comdlg32.dll,addRor4WithNullHash32 598 | 0x15AB0419,WantArrows,comdlg32.dll,dualaccModFFF1Hash 599 | 0xD906BCCF,dwLBSubclass,comdlg32.dll,ror11AddHash32 600 | 0x7F333303,dwLBSubclass,comdlg32.dll,rol7XorHash32 601 | 0x0D362F03,dwLBSubclass,comdlg32.dll,hash_Carbanak 602 | 0xE03CB361,dwLBSubclass,comdlg32.dll,ror13AddHash32Sub1 603 | 0x804CEEEF,dwLBSubclass,comdlg32.dll,rol7AddHash32 604 | 0x000D4ADA,dwLBSubclass,comdlg32.dll,sll1AddHash32 605 | 0x2ED0406C,dwLBSubclass,comdlg32.dll,ror9AddHash32 606 | 0xE03CB362,dwLBSubclass,comdlg32.dll,ror13AddHash32 607 | 0x5D8E59EC,dwLBSubclass,comdlg32.dll,rol3XorEax 608 | 0x3E4D5789,dwLBSubclass,comdlg32.dll,rol5AddHash32 609 | 0xD47B2322,dwLBSubclass,comdlg32.dll,shl7shr19Hash32 610 | 0x4F0384F6,dwLBSubclass,comdlg32.dll,ror13AddHash32AddDll 611 | 0x0BECA8A9,dwLBSubclass,comdlg32.dll,mult21AddHash32 612 | 0x672AF6ED,dwLBSubclass,comdlg32.dll,poisonIvyHash 613 | 0x648F6D2E,dwLBSubclass,comdlg32.dll,add1505Shl5Hash32 614 | 0xF8D651BD,dwLBSubclass,comdlg32.dll,crc32 615 | 0x2411294A,dwLBSubclass,comdlg32.dll,ror7AddHash32 616 | 0xC444565B,dwLBSubclass,comdlg32.dll,hash_ror13AddUpperDllnameHash32 617 | 0x5E89B55E,dwLBSubclass,comdlg32.dll,rol7AddXor2Hash32 618 | 0x9B1701E5,dwLBSubclass,comdlg32.dll,ror13AddWithNullHash32 619 | 0x21DFB413,dwLBSubclass,comdlg32.dll,fnv1Xor67f 620 | 0xF1C5699A,dwLBSubclass,comdlg32.dll,addRor4WithNullHash32 621 | 0x1D5504AA,dwLBSubclass,comdlg32.dll,dualaccModFFF1Hash 622 | 0x3906C5D0,dwOKSubclass,comdlg32.dll,ror11AddHash32 623 | 0xF6333302,dwOKSubclass,comdlg32.dll,rol7XorHash32 624 | 0x0D366803,dwOKSubclass,comdlg32.dll,hash_Carbanak 625 | 0xE93CCB61,dwOKSubclass,comdlg32.dll,ror13AddHash32Sub1 626 | 0x094CEEF1,dwOKSubclass,comdlg32.dll,rol7AddHash32 627 | 0x000D68DA,dwOKSubclass,comdlg32.dll,sll1AddHash32 628 | 0x37D1C06C,dwOKSubclass,comdlg32.dll,ror9AddHash32 629 | 0xE93CCB62,dwOKSubclass,comdlg32.dll,ror13AddHash32 630 | 0xD58E1BFB,dwOKSubclass,comdlg32.dll,rol3XorEax 631 | 0x3E4DC089,dwOKSubclass,comdlg32.dll,rol5AddHash32 632 | 0x5D7B2323,dwOKSubclass,comdlg32.dll,shl7shr19Hash32 633 | 0x0F03CCF7,dwOKSubclass,comdlg32.dll,ror13AddHash32AddDll 634 | 0x306C5515,dwOKSubclass,comdlg32.dll,mult21AddHash32 635 | 0x02DDBB26,dwOKSubclass,comdlg32.dll,poisonIvyHash 636 | 0x890F199A,dwOKSubclass,comdlg32.dll,add1505Shl5Hash32 637 | 0xBF425CE5,dwOKSubclass,comdlg32.dll,crc32 638 | 0x24113250,dwOKSubclass,comdlg32.dll,ror7AddHash32 639 | 0xCD446E5B,dwOKSubclass,comdlg32.dll,hash_ror13AddUpperDllnameHash32 640 | 0xE789B55D,dwOKSubclass,comdlg32.dll,rol7AddXor2Hash32 641 | 0x5B1749E6,dwOKSubclass,comdlg32.dll,ror13AddWithNullHash32 642 | 0x3471F483,dwOKSubclass,comdlg32.dll,fnv1Xor67f 643 | 0xFAF5699A,dwOKSubclass,comdlg32.dll,addRor4WithNullHash32 644 | 0x1DC404B6,dwOKSubclass,comdlg32.dll,dualaccModFFF1Hash 645 | -------------------------------------------------------------------------------- /hashes/psapi.dll.txt: -------------------------------------------------------------------------------- 1 | 0x39D0D914,EmptyWorkingSet,psapi.dll,ror11AddHash32 2 | 0x6C1FC2C6,EmptyWorkingSet,psapi.dll,rol7XorHash32 3 | 0x065A6314,EmptyWorkingSet,psapi.dll,hash_Carbanak 4 | 0x3946D6C7,EmptyWorkingSet,psapi.dll,ror13AddHash32Sub1 5 | 0x4BE941C6,EmptyWorkingSet,psapi.dll,rol7AddHash32 6 | 0x006A5E04,EmptyWorkingSet,psapi.dll,sll1AddHash32 7 | 0x0C0D81A2,EmptyWorkingSet,psapi.dll,ror9AddHash32 8 | 0x3946D6C8,EmptyWorkingSet,psapi.dll,ror13AddHash32 9 | 0x8E611EF4,EmptyWorkingSet,psapi.dll,rol3XorEax 10 | 0xD5043DE0,EmptyWorkingSet,psapi.dll,rol5AddHash32 11 | 0x6817D130,EmptyWorkingSet,psapi.dll,shl7shr19Hash32 12 | 0x96D5E57C,EmptyWorkingSet,psapi.dll,ror13AddHash32AddDll 13 | 0x6DA7E03C,EmptyWorkingSet,psapi.dll,mult21AddHash32 14 | 0xD6E550B4,EmptyWorkingSet,psapi.dll,poisonIvyHash 15 | 0x06CD12A1,EmptyWorkingSet,psapi.dll,add1505Shl5Hash32 16 | 0x3C992C86,EmptyWorkingSet,psapi.dll,crc32 17 | 0x2DEFBCC3,EmptyWorkingSet,psapi.dll,ror7AddHash32 18 | 0xE8AF829C,EmptyWorkingSet,psapi.dll,hash_ror13AddUpperDllnameHash32 19 | 0x39C4FB5F,EmptyWorkingSet,psapi.dll,rol7AddXor2Hash32 20 | 0xB641CA36,EmptyWorkingSet,psapi.dll,ror13AddWithNullHash32 21 | 0xDE20DE9C,EmptyWorkingSet,psapi.dll,fnv1Xor67f 22 | 0x0E999C17,EmptyWorkingSet,psapi.dll,addRor4WithNullHash32 23 | 0x309C061D,EmptyWorkingSet,psapi.dll,dualaccModFFF1Hash 24 | 0xEAF22B93,EnumDeviceDrivers,psapi.dll,ror11AddHash32 25 | 0x111B0A86,EnumDeviceDrivers,psapi.dll,rol7XorHash32 26 | 0x01106913,EnumDeviceDrivers,psapi.dll,hash_Carbanak 27 | 0xCB3AD6F7,EnumDeviceDrivers,psapi.dll,ror13AddHash32Sub1 28 | 0xEF372895,EnumDeviceDrivers,psapi.dll,rol7AddHash32 29 | 0x01A777D6,EnumDeviceDrivers,psapi.dll,sll1AddHash32 30 | 0xB0676765,EnumDeviceDrivers,psapi.dll,ror9AddHash32 31 | 0xCB3AD6F8,EnumDeviceDrivers,psapi.dll,ror13AddHash32 32 | 0x94978488,EnumDeviceDrivers,psapi.dll,rol3XorEax 33 | 0x5F7AB70B,EnumDeviceDrivers,psapi.dll,rol5AddHash32 34 | 0x15E6F170,EnumDeviceDrivers,psapi.dll,shl7shr19Hash32 35 | 0x985A751C,EnumDeviceDrivers,psapi.dll,ror13AddHash32AddDll 36 | 0xFA0CBD44,EnumDeviceDrivers,psapi.dll,mult21AddHash32 37 | 0x477719F6,EnumDeviceDrivers,psapi.dll,poisonIvyHash 38 | 0x71481CE9,EnumDeviceDrivers,psapi.dll,add1505Shl5Hash32 39 | 0xCABCF9C8,EnumDeviceDrivers,psapi.dll,crc32 40 | 0x893BE8A3,EnumDeviceDrivers,psapi.dll,ror7AddHash32 41 | 0x7AA382CC,EnumDeviceDrivers,psapi.dll,hash_ror13AddUpperDllnameHash32 42 | 0x1D1DEB0D,EnumDeviceDrivers,psapi.dll,rol7AddXor2Hash32 43 | 0xB7C659D6,EnumDeviceDrivers,psapi.dll,ror13AddWithNullHash32 44 | 0xCCDB22FA,EnumDeviceDrivers,psapi.dll,fnv1Xor67f 45 | 0x49895BA6,EnumDeviceDrivers,psapi.dll,addRor4WithNullHash32 46 | 0x3B4906C5,EnumDeviceDrivers,psapi.dll,dualaccModFFF1Hash 47 | 0x3A68BC21,EnumPageFilesA,psapi.dll,ror11AddHash32 48 | 0xD2B8549D,EnumPageFilesA,psapi.dll,rol7XorHash32 49 | 0x0C0E4F61,EnumPageFilesA,psapi.dll,hash_Carbanak 50 | 0xA19F3D7F,EnumPageFilesA,psapi.dll,ror13AddHash32Sub1 51 | 0x2E57CB62,EnumPageFilesA,psapi.dll,rol7AddHash32 52 | 0x00350696,EnumPageFilesA,psapi.dll,sll1AddHash32 53 | 0xD3D525E4,EnumPageFilesA,psapi.dll,ror9AddHash32 54 | 0xA19F3D80,EnumPageFilesA,psapi.dll,ror13AddHash32 55 | 0xE7ED497D,EnumPageFilesA,psapi.dll,rol3XorEax 56 | 0xEF060783,EnumPageFilesA,psapi.dll,rol5AddHash32 57 | 0xD6B044BB,EnumPageFilesA,psapi.dll,shl7shr19Hash32 58 | 0xCC99283F,EnumPageFilesA,psapi.dll,ror13AddHash32AddDll 59 | 0xB97560C6,EnumPageFilesA,psapi.dll,mult21AddHash32 60 | 0x799265F0,EnumPageFilesA,psapi.dll,poisonIvyHash 61 | 0xC5DB5A8B,EnumPageFilesA,psapi.dll,add1505Shl5Hash32 62 | 0x41B7242F,EnumPageFilesA,psapi.dll,crc32 63 | 0x78BA311C,EnumPageFilesA,psapi.dll,ror7AddHash32 64 | 0x5107E954,EnumPageFilesA,psapi.dll,hash_ror13AddUpperDllnameHash32 65 | 0x607492D5,EnumPageFilesA,psapi.dll,rol7AddXor2Hash32 66 | 0xEC050CF9,EnumPageFilesA,psapi.dll,ror13AddWithNullHash32 67 | 0x138C8746,EnumPageFilesA,psapi.dll,fnv1Xor67f 68 | 0x1F0FF01B,EnumPageFilesA,psapi.dll,addRor4WithNullHash32 69 | 0x27D00547,EnumPageFilesA,psapi.dll,dualaccModFFF1Hash 70 | 0x3A68BC37,EnumPageFilesW,psapi.dll,ror11AddHash32 71 | 0xD2B8548B,EnumPageFilesW,psapi.dll,rol7XorHash32 72 | 0x0C0E4F97,EnumPageFilesW,psapi.dll,hash_Carbanak 73 | 0xA19F3D95,EnumPageFilesW,psapi.dll,ror13AddHash32Sub1 74 | 0x2E57CB78,EnumPageFilesW,psapi.dll,rol7AddHash32 75 | 0x003506C2,EnumPageFilesW,psapi.dll,sll1AddHash32 76 | 0xD3D525FA,EnumPageFilesW,psapi.dll,ror9AddHash32 77 | 0xA19F3D96,EnumPageFilesW,psapi.dll,ror13AddHash32 78 | 0xE7ED49CD,EnumPageFilesW,psapi.dll,rol3XorEax 79 | 0xEF060799,EnumPageFilesW,psapi.dll,rol5AddHash32 80 | 0xD6B044AD,EnumPageFilesW,psapi.dll,shl7shr19Hash32 81 | 0xCD49283F,EnumPageFilesW,psapi.dll,ror13AddHash32AddDll 82 | 0xB97560DC,EnumPageFilesW,psapi.dll,mult21AddHash32 83 | 0x650AD027,EnumPageFilesW,psapi.dll,poisonIvyHash 84 | 0xC5DB5AA1,EnumPageFilesW,psapi.dll,add1505Shl5Hash32 85 | 0xB563917E,EnumPageFilesW,psapi.dll,crc32 86 | 0x78BA3132,EnumPageFilesW,psapi.dll,ror7AddHash32 87 | 0x5107E96A,EnumPageFilesW,psapi.dll,hash_ror13AddUpperDllnameHash32 88 | 0x607492E7,EnumPageFilesW,psapi.dll,rol7AddXor2Hash32 89 | 0xECB50CF9,EnumPageFilesW,psapi.dll,ror13AddWithNullHash32 90 | 0x258C9BF0,EnumPageFilesW,psapi.dll,fnv1Xor67f 91 | 0x350FF01B,EnumPageFilesW,psapi.dll,addRor4WithNullHash32 92 | 0x27E6055D,EnumPageFilesW,psapi.dll,dualaccModFFF1Hash 93 | 0x41155D38,EnumProcessModules,psapi.dll,ror11AddHash32 94 | 0x189F16C9,EnumProcessModules,psapi.dll,rol7XorHash32 95 | 0x0FC7CAD3,EnumProcessModules,psapi.dll,hash_Carbanak 96 | 0x6AB34F7A,EnumProcessModules,psapi.dll,ror13AddHash32Sub1 97 | 0xECBF4F1A,EnumProcessModules,psapi.dll,rol7AddHash32 98 | 0x035320EA,EnumProcessModules,psapi.dll,sll1AddHash32 99 | 0xBAD78102,EnumProcessModules,psapi.dll,ror9AddHash32 100 | 0x6AB34F7B,EnumProcessModules,psapi.dll,ror13AddHash32 101 | 0x148D3C52,EnumProcessModules,psapi.dll,rol3XorEax 102 | 0x86A717A6,EnumProcessModules,psapi.dll,rol5AddHash32 103 | 0x6662ED3F,EnumProcessModules,psapi.dll,shl7shr19Hash32 104 | 0x5C6F70E0,EnumProcessModules,psapi.dll,ror13AddHash32AddDll 105 | 0x47374B4D,EnumProcessModules,psapi.dll,mult21AddHash32 106 | 0xA7B6E43B,EnumProcessModules,psapi.dll,poisonIvyHash 107 | 0xA5DE9F92,EnumProcessModules,psapi.dll,add1505Shl5Hash32 108 | 0xDEA82AC2,EnumProcessModules,psapi.dll,crc32 109 | 0xC99B56A8,EnumProcessModules,psapi.dll,ror7AddHash32 110 | 0x1A1BFB4F,EnumProcessModules,psapi.dll,hash_ror13AddUpperDllnameHash32 111 | 0x1BD99B92,EnumProcessModules,psapi.dll,rol7AddXor2Hash32 112 | 0x7BDB559A,EnumProcessModules,psapi.dll,ror13AddWithNullHash32 113 | 0xC6EBF9DD,EnumProcessModules,psapi.dll,fnv1Xor67f 114 | 0xD5BE22B8,EnumProcessModules,psapi.dll,addRor4WithNullHash32 115 | 0x441F074E,EnumProcessModules,psapi.dll,dualaccModFFF1Hash 116 | 0x5E14E17C,EnumProcessModulesEx,psapi.dll,ror11AddHash32 117 | 0xC5B264DF,EnumProcessModulesEx,psapi.dll,rol7XorHash32 118 | 0x07CAD808,EnumProcessModulesEx,psapi.dll,hash_Carbanak 119 | 0xAEFBDF51,EnumProcessModulesEx,psapi.dll,ror13AddHash32Sub1 120 | 0xD3C6DE27,EnumProcessModulesEx,psapi.dll,rol7AddHash32 121 | 0x0D4C862C,EnumProcessModulesEx,psapi.dll,sll1AddHash32 122 | 0x02C0AF2E,EnumProcessModulesEx,psapi.dll,ror9AddHash32 123 | 0xAEFBDF52,EnumProcessModulesEx,psapi.dll,ror13AddHash32 124 | 0x1189EE26,EnumProcessModulesEx,psapi.dll,rol3XorEax 125 | 0x9C5EA332,EnumProcessModulesEx,psapi.dll,rol5AddHash32 126 | 0xBB4F8194,EnumProcessModulesEx,psapi.dll,shl7shr19Hash32 127 | 0xDB299324,EnumProcessModulesEx,psapi.dll,ror13AddHash32AddDll 128 | 0xF2375BEA,EnumProcessModulesEx,psapi.dll,mult21AddHash32 129 | 0x4BBBC0C5,EnumProcessModulesEx,psapi.dll,poisonIvyHash 130 | 0x9804D56F,EnumProcessModulesEx,psapi.dll,add1505Shl5Hash32 131 | 0xB07EF203,EnumProcessModulesEx,psapi.dll,crc32 132 | 0xE4A326E5,EnumProcessModulesEx,psapi.dll,ror7AddHash32 133 | 0x5E648B26,EnumProcessModulesEx,psapi.dll,hash_ror13AddUpperDllnameHash32 134 | 0x66E4AAF0,EnumProcessModulesEx,psapi.dll,rol7AddXor2Hash32 135 | 0xFA9577DE,EnumProcessModulesEx,psapi.dll,ror13AddWithNullHash32 136 | 0x908E6598,EnumProcessModulesEx,psapi.dll,fnv1Xor67f 137 | 0x3525BE22,EnumProcessModulesEx,psapi.dll,addRor4WithNullHash32 138 | 0x53BD080B,EnumProcessModulesEx,psapi.dll,dualaccModFFF1Hash 139 | 0x485719DA,EnumProcesses,psapi.dll,ror11AddHash32 140 | 0x8AC4909B,EnumProcesses,psapi.dll,rol7XorHash32 141 | 0x09C08E13,EnumProcesses,psapi.dll,hash_Carbanak 142 | 0xFBC9E811,EnumProcesses,psapi.dll,ror13AddHash32Sub1 143 | 0x33C08F88,EnumProcesses,psapi.dll,rol7AddHash32 144 | 0x001A9822,EnumProcesses,psapi.dll,sll1AddHash32 145 | 0x9A3D290B,EnumProcesses,psapi.dll,ror9AddHash32 146 | 0xFBC9E812,EnumProcesses,psapi.dll,ror13AddHash32 147 | 0x93EB1DB4,EnumProcesses,psapi.dll,rol3XorEax 148 | 0x156D4CC4,EnumProcesses,psapi.dll,rol5AddHash32 149 | 0x2ECC80BA,EnumProcesses,psapi.dll,shl7shr19Hash32 150 | 0x212BF995,EnumProcesses,psapi.dll,ror13AddHash32AddDll 151 | 0x04162CCC,EnumProcesses,psapi.dll,mult21AddHash32 152 | 0xC606BA60,EnumProcesses,psapi.dll,poisonIvyHash 153 | 0x711181F1,EnumProcesses,psapi.dll,add1505Shl5Hash32 154 | 0x0509A21C,EnumProcesses,psapi.dll,crc32 155 | 0x1F3D3FAC,EnumProcesses,psapi.dll,ror7AddHash32 156 | 0xAB3293E6,EnumProcesses,psapi.dll,hash_ror13AddUpperDllnameHash32 157 | 0x559BC8F7,EnumProcesses,psapi.dll,rol7AddXor2Hash32 158 | 0x4097DE4F,EnumProcesses,psapi.dll,ror13AddWithNullHash32 159 | 0x1511C9BE,EnumProcesses,psapi.dll,fnv1Xor67f 160 | 0xF106C0A6,EnumProcesses,psapi.dll,addRor4WithNullHash32 161 | 0x2415054D,EnumProcesses,psapi.dll,dualaccModFFF1Hash 162 | 0x0FB1E041,GetDeviceDriverBaseNameA,psapi.dll,ror11AddHash32 163 | 0x1B21E3B5,GetDeviceDriverBaseNameA,psapi.dll,rol7XorHash32 164 | 0x018D1A41,GetDeviceDriverBaseNameA,psapi.dll,hash_Carbanak 165 | 0x09E77D6A,GetDeviceDriverBaseNameA,psapi.dll,ror13AddHash32Sub1 166 | 0x122633C8,GetDeviceDriverBaseNameA,psapi.dll,rol7AddHash32 167 | 0xD038814E,GetDeviceDriverBaseNameA,psapi.dll,sll1AddHash32 168 | 0x0A273BC7,GetDeviceDriverBaseNameA,psapi.dll,ror9AddHash32 169 | 0x09E77D6B,GetDeviceDriverBaseNameA,psapi.dll,ror13AddHash32 170 | 0x59C49FC7,GetDeviceDriverBaseNameA,psapi.dll,rol3XorEax 171 | 0xC38D2C65,GetDeviceDriverBaseNameA,psapi.dll,rol5AddHash32 172 | 0xB2734715,GetDeviceDriverBaseNameA,psapi.dll,shl7shr19Hash32 173 | 0xCBEC6A81,GetDeviceDriverBaseNameA,psapi.dll,ror13AddHash32AddDll 174 | 0x8CA14359,GetDeviceDriverBaseNameA,psapi.dll,mult21AddHash32 175 | 0x09D3BCC8,GetDeviceDriverBaseNameA,psapi.dll,poisonIvyHash 176 | 0xE7E9F75E,GetDeviceDriverBaseNameA,psapi.dll,add1505Shl5Hash32 177 | 0x6A9A932A,GetDeviceDriverBaseNameA,psapi.dll,crc32 178 | 0xFF90DBA3,GetDeviceDriverBaseNameA,psapi.dll,ror7AddHash32 179 | 0xB950293F,GetDeviceDriverBaseNameA,psapi.dll,hash_ror13AddUpperDllnameHash32 180 | 0x6998919C,GetDeviceDriverBaseNameA,psapi.dll,rol7AddXor2Hash32 181 | 0xEB584F3B,GetDeviceDriverBaseNameA,psapi.dll,ror13AddWithNullHash32 182 | 0x7C9878AF,GetDeviceDriverBaseNameA,psapi.dll,fnv1Xor67f 183 | 0xBB4CB0CD,GetDeviceDriverBaseNameA,psapi.dll,addRor4WithNullHash32 184 | 0x7263091A,GetDeviceDriverBaseNameA,psapi.dll,dualaccModFFF1Hash 185 | 0x0FB1E057,GetDeviceDriverBaseNameW,psapi.dll,ror11AddHash32 186 | 0x1B21E3A3,GetDeviceDriverBaseNameW,psapi.dll,rol7XorHash32 187 | 0x018D1A77,GetDeviceDriverBaseNameW,psapi.dll,hash_Carbanak 188 | 0x09E77D80,GetDeviceDriverBaseNameW,psapi.dll,ror13AddHash32Sub1 189 | 0x122633DE,GetDeviceDriverBaseNameW,psapi.dll,rol7AddHash32 190 | 0xD038817A,GetDeviceDriverBaseNameW,psapi.dll,sll1AddHash32 191 | 0x0A273BDD,GetDeviceDriverBaseNameW,psapi.dll,ror9AddHash32 192 | 0x09E77D81,GetDeviceDriverBaseNameW,psapi.dll,ror13AddHash32 193 | 0x59C49F77,GetDeviceDriverBaseNameW,psapi.dll,rol3XorEax 194 | 0xC38D2C7B,GetDeviceDriverBaseNameW,psapi.dll,rol5AddHash32 195 | 0xB2734703,GetDeviceDriverBaseNameW,psapi.dll,shl7shr19Hash32 196 | 0xCC9C6A81,GetDeviceDriverBaseNameW,psapi.dll,ror13AddHash32AddDll 197 | 0x8CA1436F,GetDeviceDriverBaseNameW,psapi.dll,mult21AddHash32 198 | 0x154B091F,GetDeviceDriverBaseNameW,psapi.dll,poisonIvyHash 199 | 0xE7E9F774,GetDeviceDriverBaseNameW,psapi.dll,add1505Shl5Hash32 200 | 0x9E4E267B,GetDeviceDriverBaseNameW,psapi.dll,crc32 201 | 0xFF90DBB9,GetDeviceDriverBaseNameW,psapi.dll,ror7AddHash32 202 | 0xB9502955,GetDeviceDriverBaseNameW,psapi.dll,hash_ror13AddUpperDllnameHash32 203 | 0x699891AE,GetDeviceDriverBaseNameW,psapi.dll,rol7AddXor2Hash32 204 | 0xEC084F3B,GetDeviceDriverBaseNameW,psapi.dll,ror13AddWithNullHash32 205 | 0x7298696D,GetDeviceDriverBaseNameW,psapi.dll,fnv1Xor67f 206 | 0xD14CB0CD,GetDeviceDriverBaseNameW,psapi.dll,addRor4WithNullHash32 207 | 0x72790930,GetDeviceDriverBaseNameW,psapi.dll,dualaccModFFF1Hash 208 | 0x4FF1E43F,GetDeviceDriverFileNameA,psapi.dll,ror11AddHash32 209 | 0x1F319FB5,GetDeviceDriverFileNameA,psapi.dll,rol7XorHash32 210 | 0x0A8D1E21,GetDeviceDriverFileNameA,psapi.dll,hash_Carbanak 211 | 0x0DCB7E6A,GetDeviceDriverFileNameA,psapi.dll,ror13AddHash32Sub1 212 | 0x163617C8,GetDeviceDriverFileNameA,psapi.dll,rol7AddHash32 213 | 0xD0388DCE,GetDeviceDriverFileNameA,psapi.dll,sll1AddHash32 214 | 0x0E271FD7,GetDeviceDriverFileNameA,psapi.dll,ror9AddHash32 215 | 0x0DCB7E6B,GetDeviceDriverFileNameA,psapi.dll,ror13AddHash32 216 | 0x8E64AA2D,GetDeviceDriverFileNameA,psapi.dll,rol3XorEax 217 | 0x038D30A4,GetDeviceDriverFileNameA,psapi.dll,rol5AddHash32 218 | 0xB6633B15,GetDeviceDriverFileNameA,psapi.dll,shl7shr19Hash32 219 | 0xD3EC89A1,GetDeviceDriverFileNameA,psapi.dll,ror13AddHash32AddDll 220 | 0xA5CA051E,GetDeviceDriverFileNameA,psapi.dll,mult21AddHash32 221 | 0x1E7B9D2D,GetDeviceDriverFileNameA,psapi.dll,poisonIvyHash 222 | 0x0112B923,GetDeviceDriverFileNameA,psapi.dll,add1505Shl5Hash32 223 | 0x750535B4,GetDeviceDriverFileNameA,psapi.dll,crc32 224 | 0xFDD4DFA3,GetDeviceDriverFileNameA,psapi.dll,ror7AddHash32 225 | 0xBD342A3F,GetDeviceDriverFileNameA,psapi.dll,hash_ror13AddUpperDllnameHash32 226 | 0x6DA8859C,GetDeviceDriverFileNameA,psapi.dll,rol7AddXor2Hash32 227 | 0xF3586E5B,GetDeviceDriverFileNameA,psapi.dll,ror13AddWithNullHash32 228 | 0xC6076536,GetDeviceDriverFileNameA,psapi.dll,fnv1Xor67f 229 | 0x3F4CB0C6,GetDeviceDriverFileNameA,psapi.dll,addRor4WithNullHash32 230 | 0x7296091F,GetDeviceDriverFileNameA,psapi.dll,dualaccModFFF1Hash 231 | 0x4FF1E455,GetDeviceDriverFileNameW,psapi.dll,ror11AddHash32 232 | 0x1F319FA3,GetDeviceDriverFileNameW,psapi.dll,rol7XorHash32 233 | 0x0A8D1E17,GetDeviceDriverFileNameW,psapi.dll,hash_Carbanak 234 | 0x0DCB7E80,GetDeviceDriverFileNameW,psapi.dll,ror13AddHash32Sub1 235 | 0x163617DE,GetDeviceDriverFileNameW,psapi.dll,rol7AddHash32 236 | 0xD0388DFA,GetDeviceDriverFileNameW,psapi.dll,sll1AddHash32 237 | 0x0E271FED,GetDeviceDriverFileNameW,psapi.dll,ror9AddHash32 238 | 0x0DCB7E81,GetDeviceDriverFileNameW,psapi.dll,ror13AddHash32 239 | 0x8E64AA9D,GetDeviceDriverFileNameW,psapi.dll,rol3XorEax 240 | 0x038D30BA,GetDeviceDriverFileNameW,psapi.dll,rol5AddHash32 241 | 0xB6633B03,GetDeviceDriverFileNameW,psapi.dll,shl7shr19Hash32 242 | 0xD49C89A1,GetDeviceDriverFileNameW,psapi.dll,ror13AddHash32AddDll 243 | 0xA5CA0534,GetDeviceDriverFileNameW,psapi.dll,mult21AddHash32 244 | 0x02E328FA,GetDeviceDriverFileNameW,psapi.dll,poisonIvyHash 245 | 0x0112B939,GetDeviceDriverFileNameW,psapi.dll,add1505Shl5Hash32 246 | 0x81D180E5,GetDeviceDriverFileNameW,psapi.dll,crc32 247 | 0xFDD4DFB9,GetDeviceDriverFileNameW,psapi.dll,ror7AddHash32 248 | 0xBD342A55,GetDeviceDriverFileNameW,psapi.dll,hash_ror13AddUpperDllnameHash32 249 | 0x6DA885AE,GetDeviceDriverFileNameW,psapi.dll,rol7AddXor2Hash32 250 | 0xF4086E5B,GetDeviceDriverFileNameW,psapi.dll,ror13AddWithNullHash32 251 | 0xB8074B40,GetDeviceDriverFileNameW,psapi.dll,fnv1Xor67f 252 | 0x554CB0C6,GetDeviceDriverFileNameW,psapi.dll,addRor4WithNullHash32 253 | 0x72AC0935,GetDeviceDriverFileNameW,psapi.dll,dualaccModFFF1Hash 254 | 0xB78618C3,GetMappedFileNameA,psapi.dll,ror11AddHash32 255 | 0x860331A8,GetMappedFileNameA,psapi.dll,rol7XorHash32 256 | 0x01337C11,GetMappedFileNameA,psapi.dll,hash_Carbanak 257 | 0x7EA66633,GetMappedFileNameA,psapi.dll,ror13AddHash32Sub1 258 | 0x66032897,GetMappedFileNameA,psapi.dll,rol7AddHash32 259 | 0x034415CE,GetMappedFileNameA,psapi.dll,sll1AddHash32 260 | 0x4B5F433B,GetMappedFileNameA,psapi.dll,ror9AddHash32 261 | 0x7EA66634,GetMappedFileNameA,psapi.dll,ror13AddHash32 262 | 0xCA198CA2,GetMappedFileNameA,psapi.dll,rol3XorEax 263 | 0x11FBBE4E,GetMappedFileNameA,psapi.dll,rol5AddHash32 264 | 0xF8FECA5E,GetMappedFileNameA,psapi.dll,shl7shr19Hash32 265 | 0x12381079,GetMappedFileNameA,psapi.dll,ror13AddHash32AddDll 266 | 0x91AE3F79,GetMappedFileNameA,psapi.dll,mult21AddHash32 267 | 0xD7B90ED2,GetMappedFileNameA,psapi.dll,poisonIvyHash 268 | 0xF05593BE,GetMappedFileNameA,psapi.dll,add1505Shl5Hash32 269 | 0xBBB64CC7,GetMappedFileNameA,psapi.dll,crc32 270 | 0x98D86E2B,GetMappedFileNameA,psapi.dll,ror7AddHash32 271 | 0x2E0F1208,GetMappedFileNameA,psapi.dll,hash_ror13AddUpperDllnameHash32 272 | 0x5369F632,GetMappedFileNameA,psapi.dll,rol7AddXor2Hash32 273 | 0x31A3F533,GetMappedFileNameA,psapi.dll,ror13AddWithNullHash32 274 | 0x7497B3BF,GetMappedFileNameA,psapi.dll,fnv1Xor67f 275 | 0xBDCFDB27,GetMappedFileNameA,psapi.dll,addRor4WithNullHash32 276 | 0x407106BA,GetMappedFileNameA,psapi.dll,dualaccModFFF1Hash 277 | 0xB78618D9,GetMappedFileNameW,psapi.dll,ror11AddHash32 278 | 0x860331BE,GetMappedFileNameW,psapi.dll,rol7XorHash32 279 | 0x01337C27,GetMappedFileNameW,psapi.dll,hash_Carbanak 280 | 0x7EA66649,GetMappedFileNameW,psapi.dll,ror13AddHash32Sub1 281 | 0x660328AD,GetMappedFileNameW,psapi.dll,rol7AddHash32 282 | 0x034415FA,GetMappedFileNameW,psapi.dll,sll1AddHash32 283 | 0x4B5F4351,GetMappedFileNameW,psapi.dll,ror9AddHash32 284 | 0x7EA6664A,GetMappedFileNameW,psapi.dll,ror13AddHash32 285 | 0xCA198C12,GetMappedFileNameW,psapi.dll,rol3XorEax 286 | 0x11FBBE64,GetMappedFileNameW,psapi.dll,rol5AddHash32 287 | 0xF8FECA48,GetMappedFileNameW,psapi.dll,shl7shr19Hash32 288 | 0x12E81079,GetMappedFileNameW,psapi.dll,ror13AddHash32AddDll 289 | 0x91AE3F8F,GetMappedFileNameW,psapi.dll,mult21AddHash32 290 | 0xCB21BB05,GetMappedFileNameW,psapi.dll,poisonIvyHash 291 | 0xF05593D4,GetMappedFileNameW,psapi.dll,add1505Shl5Hash32 292 | 0x4F62F996,GetMappedFileNameW,psapi.dll,crc32 293 | 0x98D86E41,GetMappedFileNameW,psapi.dll,ror7AddHash32 294 | 0x2E0F121E,GetMappedFileNameW,psapi.dll,hash_ror13AddUpperDllnameHash32 295 | 0x5369F644,GetMappedFileNameW,psapi.dll,rol7AddXor2Hash32 296 | 0x3253F533,GetMappedFileNameW,psapi.dll,ror13AddWithNullHash32 297 | 0x8A97DE1D,GetMappedFileNameW,psapi.dll,fnv1Xor67f 298 | 0xD3CFDB27,GetMappedFileNameW,psapi.dll,addRor4WithNullHash32 299 | 0x408706D0,GetMappedFileNameW,psapi.dll,dualaccModFFF1Hash 300 | 0xD77E1744,GetModuleBaseNameA,psapi.dll,ror11AddHash32 301 | 0x7353EFE8,GetModuleBaseNameA,psapi.dll,rol7XorHash32 302 | 0x06FA8F41,GetModuleBaseNameA,psapi.dll,hash_Carbanak 303 | 0x41CC6C75,GetModuleBaseNameA,psapi.dll,ror13AddHash32Sub1 304 | 0x5133E658,GetModuleBaseNameA,psapi.dll,rol7AddHash32 305 | 0x0346954E,GetModuleBaseNameA,psapi.dll,sll1AddHash32 306 | 0xE6A050EB,GetModuleBaseNameA,psapi.dll,ror9AddHash32 307 | 0x41CC6C76,GetModuleBaseNameA,psapi.dll,ror13AddHash32 308 | 0x76C3CD72,GetModuleBaseNameA,psapi.dll,rol3XorEax 309 | 0x1497DA2B,GetModuleBaseNameA,psapi.dll,rol5AddHash32 310 | 0x0DAE141E,GetModuleBaseNameA,psapi.dll,shl7shr19Hash32 311 | 0x444629A9,GetModuleBaseNameA,psapi.dll,ror13AddHash32AddDll 312 | 0x9BE88B43,GetModuleBaseNameA,psapi.dll,mult21AddHash32 313 | 0x1374D277,GetModuleBaseNameA,psapi.dll,poisonIvyHash 314 | 0xFA8FDF88,GetModuleBaseNameA,psapi.dll,add1505Shl5Hash32 315 | 0x1720513E,GetModuleBaseNameA,psapi.dll,crc32 316 | 0xB6BBABED,GetModuleBaseNameA,psapi.dll,ror7AddHash32 317 | 0xF135184A,GetModuleBaseNameA,psapi.dll,hash_ror13AddUpperDllnameHash32 318 | 0x1E9AA3F3,GetModuleBaseNameA,psapi.dll,rol7AddXor2Hash32 319 | 0x63B20E63,GetModuleBaseNameA,psapi.dll,ror13AddWithNullHash32 320 | 0xADFC20EB,GetModuleBaseNameA,psapi.dll,fnv1Xor67f 321 | 0x39F6100D,GetModuleBaseNameA,psapi.dll,addRor4WithNullHash32 322 | 0x40F906C4,GetModuleBaseNameA,psapi.dll,dualaccModFFF1Hash 323 | 0xD77E175A,GetModuleBaseNameW,psapi.dll,ror11AddHash32 324 | 0x7353EFFE,GetModuleBaseNameW,psapi.dll,rol7XorHash32 325 | 0x06FA8F77,GetModuleBaseNameW,psapi.dll,hash_Carbanak 326 | 0x41CC6C8B,GetModuleBaseNameW,psapi.dll,ror13AddHash32Sub1 327 | 0x5133E66E,GetModuleBaseNameW,psapi.dll,rol7AddHash32 328 | 0x0346957A,GetModuleBaseNameW,psapi.dll,sll1AddHash32 329 | 0xE6A05101,GetModuleBaseNameW,psapi.dll,ror9AddHash32 330 | 0x41CC6C8C,GetModuleBaseNameW,psapi.dll,ror13AddHash32 331 | 0x76C3CDC2,GetModuleBaseNameW,psapi.dll,rol3XorEax 332 | 0x1497DA41,GetModuleBaseNameW,psapi.dll,rol5AddHash32 333 | 0x0DAE1408,GetModuleBaseNameW,psapi.dll,shl7shr19Hash32 334 | 0x44F629A9,GetModuleBaseNameW,psapi.dll,ror13AddHash32AddDll 335 | 0x9BE88B59,GetModuleBaseNameW,psapi.dll,mult21AddHash32 336 | 0x0FEC67A0,GetModuleBaseNameW,psapi.dll,poisonIvyHash 337 | 0xFA8FDF9E,GetModuleBaseNameW,psapi.dll,add1505Shl5Hash32 338 | 0xE3F4E46F,GetModuleBaseNameW,psapi.dll,crc32 339 | 0xB6BBAC03,GetModuleBaseNameW,psapi.dll,ror7AddHash32 340 | 0xF1351860,GetModuleBaseNameW,psapi.dll,hash_ror13AddUpperDllnameHash32 341 | 0x1E9AA405,GetModuleBaseNameW,psapi.dll,rol7AddXor2Hash32 342 | 0x64620E63,GetModuleBaseNameW,psapi.dll,ror13AddWithNullHash32 343 | 0x9BFC0C41,GetModuleBaseNameW,psapi.dll,fnv1Xor67f 344 | 0x4FF6100D,GetModuleBaseNameW,psapi.dll,addRor4WithNullHash32 345 | 0x410F06DA,GetModuleBaseNameW,psapi.dll,dualaccModFFF1Hash 346 | 0x076D1CA0,GetModuleFileNameExA,psapi.dll,ror11AddHash32 347 | 0xE4FB2191,GetModuleFileNameExA,psapi.dll,rol7XorHash32 348 | 0x0A8B2131,GetModuleFileNameExA,psapi.dll,hash_Carbanak 349 | 0x6FDB5ED1,GetModuleFileNameExA,psapi.dll,ror13AddHash32Sub1 350 | 0xF2975191,GetModuleFileNameExA,psapi.dll,rol7AddHash32 351 | 0x0D1A89FA,GetModuleFileNameExA,psapi.dll,sll1AddHash32 352 | 0x493FFAE9,GetModuleFileNameExA,psapi.dll,ror9AddHash32 353 | 0x6FDB5ED2,GetModuleFileNameExA,psapi.dll,ror13AddHash32 354 | 0x3BB47B31,GetModuleFileNameExA,psapi.dll,rol3XorEax 355 | 0x5F79C493,GetModuleFileNameExA,psapi.dll,rol5AddHash32 356 | 0x9A06C4DA,GetModuleFileNameExA,psapi.dll,shl7shr19Hash32 357 | 0xD7279A20,GetModuleFileNameExA,psapi.dll,ror13AddHash32AddDll 358 | 0x3E98CFC5,GetModuleFileNameExA,psapi.dll,mult21AddHash32 359 | 0x1AF88DE6,GetModuleFileNameExA,psapi.dll,poisonIvyHash 360 | 0xE466494A,GetModuleFileNameExA,psapi.dll,add1505Shl5Hash32 361 | 0x2D33EB32,GetModuleFileNameExA,psapi.dll,crc32 362 | 0xAFC6D440,GetModuleFileNameExA,psapi.dll,ror7AddHash32 363 | 0x1F440AA6,GetModuleFileNameExA,psapi.dll,hash_ror13AddUpperDllnameHash32 364 | 0xA5FE05ED,GetModuleFileNameExA,psapi.dll,rol7AddXor2Hash32 365 | 0xF6937EDA,GetModuleFileNameExA,psapi.dll,ror13AddWithNullHash32 366 | 0x919B3A21,GetModuleFileNameExA,psapi.dll,fnv1Xor67f 367 | 0x5041F610,GetModuleFileNameExA,psapi.dll,addRor4WithNullHash32 368 | 0x4FFB0786,GetModuleFileNameExA,psapi.dll,dualaccModFFF1Hash 369 | 0x076D1CB6,GetModuleFileNameExW,psapi.dll,ror11AddHash32 370 | 0xE4FB2187,GetModuleFileNameExW,psapi.dll,rol7XorHash32 371 | 0x0A8B2127,GetModuleFileNameExW,psapi.dll,hash_Carbanak 372 | 0x6FDB5EE7,GetModuleFileNameExW,psapi.dll,ror13AddHash32Sub1 373 | 0xF29751A7,GetModuleFileNameExW,psapi.dll,rol7AddHash32 374 | 0x0D1A8A26,GetModuleFileNameExW,psapi.dll,sll1AddHash32 375 | 0x493FFAFF,GetModuleFileNameExW,psapi.dll,ror9AddHash32 376 | 0x6FDB5EE8,GetModuleFileNameExW,psapi.dll,ror13AddHash32 377 | 0x3BB47B81,GetModuleFileNameExW,psapi.dll,rol3XorEax 378 | 0x5F79C4A9,GetModuleFileNameExW,psapi.dll,rol5AddHash32 379 | 0x9A06C4CC,GetModuleFileNameExW,psapi.dll,shl7shr19Hash32 380 | 0xD7D79A20,GetModuleFileNameExW,psapi.dll,ror13AddHash32AddDll 381 | 0x3E98CFDB,GetModuleFileNameExW,psapi.dll,mult21AddHash32 382 | 0x06603831,GetModuleFileNameExW,psapi.dll,poisonIvyHash 383 | 0xE4664960,GetModuleFileNameExW,psapi.dll,add1505Shl5Hash32 384 | 0xD9E75E63,GetModuleFileNameExW,psapi.dll,crc32 385 | 0xAFC6D456,GetModuleFileNameExW,psapi.dll,ror7AddHash32 386 | 0x1F440ABC,GetModuleFileNameExW,psapi.dll,hash_ror13AddUpperDllnameHash32 387 | 0xA5FE05FF,GetModuleFileNameExW,psapi.dll,rol7AddXor2Hash32 388 | 0xF7437EDA,GetModuleFileNameExW,psapi.dll,ror13AddWithNullHash32 389 | 0xA39B5ECB,GetModuleFileNameExW,psapi.dll,fnv1Xor67f 390 | 0x6641F610,GetModuleFileNameExW,psapi.dll,addRor4WithNullHash32 391 | 0x5011079C,GetModuleFileNameExW,psapi.dll,dualaccModFFF1Hash 392 | 0x25E9BEDE,GetModuleInformation,psapi.dll,ror11AddHash32 393 | 0xACC4D99D,GetModuleInformation,psapi.dll,rol7XorHash32 394 | 0x0734BC4E,GetModuleInformation,psapi.dll,hash_Carbanak 395 | 0x4822D145,GetModuleInformation,psapi.dll,ror13AddHash32Sub1 396 | 0xAE94DE60,GetModuleInformation,psapi.dll,rol7AddHash32 397 | 0x0D1AB880,GetModuleInformation,psapi.dll,sll1AddHash32 398 | 0x7F2C0DC9,GetModuleInformation,psapi.dll,ror9AddHash32 399 | 0x4822D146,GetModuleInformation,psapi.dll,ror13AddHash32 400 | 0x41FA194A,GetModuleInformation,psapi.dll,rol3XorEax 401 | 0x76CE6DF9,GetModuleInformation,psapi.dll,rol5AddHash32 402 | 0xD2393CD6,GetModuleInformation,psapi.dll,shl7shr19Hash32 403 | 0x6AC65C5C,GetModuleInformation,psapi.dll,ror13AddHash32AddDll 404 | 0x50E98E6C,GetModuleInformation,psapi.dll,mult21AddHash32 405 | 0x1D4AD252,GetModuleInformation,psapi.dll,poisonIvyHash 406 | 0xF6B707F1,GetModuleInformation,psapi.dll,add1505Shl5Hash32 407 | 0xF2A84636,GetModuleInformation,psapi.dll,crc32 408 | 0x335C45B9,GetModuleInformation,psapi.dll,ror7AddHash32 409 | 0xF78B7D1A,GetModuleInformation,psapi.dll,hash_ror13AddUpperDllnameHash32 410 | 0x5DF391B6,GetModuleInformation,psapi.dll,rol7AddXor2Hash32 411 | 0x8A324116,GetModuleInformation,psapi.dll,ror13AddWithNullHash32 412 | 0x91A52FC8,GetModuleInformation,psapi.dll,fnv1Xor67f 413 | 0x1619DAF4,GetModuleInformation,psapi.dll,addRor4WithNullHash32 414 | 0x5233080D,GetModuleInformation,psapi.dll,dualaccModFFF1Hash 415 | 0x19063BA8,GetPerformanceInfo,psapi.dll,ror11AddHash32 416 | 0x38313ACB,GetPerformanceInfo,psapi.dll,rol7XorHash32 417 | 0x08B3E10F,GetPerformanceInfo,psapi.dll,hash_Carbanak 418 | 0xF7A451C2,GetPerformanceInfo,psapi.dll,ror13AddHash32Sub1 419 | 0x1A1233CA,GetPerformanceInfo,psapi.dll,rol7AddHash32 420 | 0x0346C3D6,GetPerformanceInfo,psapi.dll,sll1AddHash32 421 | 0xA2F6AAE5,GetPerformanceInfo,psapi.dll,ror9AddHash32 422 | 0xF7A451C3,GetPerformanceInfo,psapi.dll,ror13AddHash32 423 | 0xDD2A2E0C,GetPerformanceInfo,psapi.dll,rol3XorEax 424 | 0xAA89AA24,GetPerformanceInfo,psapi.dll,rol5AddHash32 425 | 0x46CCC13D,GetPerformanceInfo,psapi.dll,shl7shr19Hash32 426 | 0x6EB3D868,GetPerformanceInfo,psapi.dll,ror13AddHash32AddDll 427 | 0x7FB8A83E,GetPerformanceInfo,psapi.dll,mult21AddHash32 428 | 0x41EEADE6,GetPerformanceInfo,psapi.dll,poisonIvyHash 429 | 0xDE5FFC83,GetPerformanceInfo,psapi.dll,add1505Shl5Hash32 430 | 0xE5BDF68D,GetPerformanceInfo,psapi.dll,crc32 431 | 0x4307F766,GetPerformanceInfo,psapi.dll,ror7AddHash32 432 | 0xA70CFD97,GetPerformanceInfo,psapi.dll,hash_ror13AddUpperDllnameHash32 433 | 0x4B376E3F,GetPerformanceInfo,psapi.dll,rol7AddXor2Hash32 434 | 0x8E1FBD22,GetPerformanceInfo,psapi.dll,ror13AddWithNullHash32 435 | 0xBA7CDA90,GetPerformanceInfo,psapi.dll,fnv1Xor67f 436 | 0x83D7D34B,GetPerformanceInfo,psapi.dll,addRor4WithNullHash32 437 | 0x42D9071F,GetPerformanceInfo,psapi.dll,dualaccModFFF1Hash 438 | 0x43B0657E,GetProcessImageFileNameA,psapi.dll,ror11AddHash32 439 | 0x02741105,GetProcessImageFileNameA,psapi.dll,rol7XorHash32 440 | 0x00B9EF01,GetProcessImageFileNameA,psapi.dll,hash_Carbanak 441 | 0xF763EC7C,GetProcessImageFileNameA,psapi.dll,ror13AddHash32Sub1 442 | 0x8B76569A,GetProcessImageFileNameA,psapi.dll,rol7AddHash32 443 | 0xD24ED9CE,GetProcessImageFileNameA,psapi.dll,sll1AddHash32 444 | 0xCC02160E,GetProcessImageFileNameA,psapi.dll,ror9AddHash32 445 | 0xF763EC7D,GetProcessImageFileNameA,psapi.dll,ror13AddHash32 446 | 0x3F41DCC5,GetProcessImageFileNameA,psapi.dll,rol3XorEax 447 | 0x9C560CD8,GetProcessImageFileNameA,psapi.dll,rol5AddHash32 448 | 0xAB26B5A5,GetProcessImageFileNameA,psapi.dll,shl7shr19Hash32 449 | 0x4483D665,GetProcessImageFileNameA,psapi.dll,ror13AddHash32AddDll 450 | 0xC30AD064,GetProcessImageFileNameA,psapi.dll,mult21AddHash32 451 | 0xB7C4C57A,GetProcessImageFileNameA,psapi.dll,poisonIvyHash 452 | 0x1E538469,GetProcessImageFileNameA,psapi.dll,add1505Shl5Hash32 453 | 0x76F33158,GetProcessImageFileNameA,psapi.dll,crc32 454 | 0x34EF0E5A,GetProcessImageFileNameA,psapi.dll,ror7AddHash32 455 | 0xA6CC9851,GetProcessImageFileNameA,psapi.dll,hash_ror13AddUpperDllnameHash32 456 | 0x00ED3AE1,GetProcessImageFileNameA,psapi.dll,rol7AddXor2Hash32 457 | 0x63EFBB1F,GetProcessImageFileNameA,psapi.dll,ror13AddWithNullHash32 458 | 0x94405FF0,GetProcessImageFileNameA,psapi.dll,fnv1Xor67f 459 | 0x1F265C66,GetProcessImageFileNameA,psapi.dll,addRor4WithNullHash32 460 | 0x73F60925,GetProcessImageFileNameA,psapi.dll,dualaccModFFF1Hash 461 | 0x43B06594,GetProcessImageFileNameW,psapi.dll,ror11AddHash32 462 | 0x02741113,GetProcessImageFileNameW,psapi.dll,rol7XorHash32 463 | 0x00B9EF37,GetProcessImageFileNameW,psapi.dll,hash_Carbanak 464 | 0xF763EC92,GetProcessImageFileNameW,psapi.dll,ror13AddHash32Sub1 465 | 0x8B7656B0,GetProcessImageFileNameW,psapi.dll,rol7AddHash32 466 | 0xD24ED9FA,GetProcessImageFileNameW,psapi.dll,sll1AddHash32 467 | 0xCC021624,GetProcessImageFileNameW,psapi.dll,ror9AddHash32 468 | 0xF763EC93,GetProcessImageFileNameW,psapi.dll,ror13AddHash32 469 | 0x3F41DC75,GetProcessImageFileNameW,psapi.dll,rol3XorEax 470 | 0x9C560CEE,GetProcessImageFileNameW,psapi.dll,rol5AddHash32 471 | 0xAB26B5B3,GetProcessImageFileNameW,psapi.dll,shl7shr19Hash32 472 | 0x4533D665,GetProcessImageFileNameW,psapi.dll,ror13AddHash32AddDll 473 | 0xC30AD07A,GetProcessImageFileNameW,psapi.dll,mult21AddHash32 474 | 0xAB5C70AD,GetProcessImageFileNameW,psapi.dll,poisonIvyHash 475 | 0x1E53847F,GetProcessImageFileNameW,psapi.dll,add1505Shl5Hash32 476 | 0x82278409,GetProcessImageFileNameW,psapi.dll,crc32 477 | 0x34EF0E70,GetProcessImageFileNameW,psapi.dll,ror7AddHash32 478 | 0xA6CC9867,GetProcessImageFileNameW,psapi.dll,hash_ror13AddUpperDllnameHash32 479 | 0x00ED3AF3,GetProcessImageFileNameW,psapi.dll,rol7AddXor2Hash32 480 | 0x649FBB1F,GetProcessImageFileNameW,psapi.dll,ror13AddWithNullHash32 481 | 0x82403B46,GetProcessImageFileNameW,psapi.dll,fnv1Xor67f 482 | 0x35265C66,GetProcessImageFileNameW,psapi.dll,addRor4WithNullHash32 483 | 0x740C093B,GetProcessImageFileNameW,psapi.dll,dualaccModFFF1Hash 484 | 0x6EC0E584,GetProcessMemoryInfo,psapi.dll,ror11AddHash32 485 | 0x18EE9D58,GetProcessMemoryInfo,psapi.dll,rol7XorHash32 486 | 0x06AC6F4F,GetProcessMemoryInfo,psapi.dll,hash_Carbanak 487 | 0x47EE75E3,GetProcessMemoryInfo,psapi.dll,ror13AddHash32Sub1 488 | 0x17C6DEA6,GetProcessMemoryInfo,psapi.dll,rol7AddHash32 489 | 0x0D250296,GetProcessMemoryInfo,psapi.dll,sll1AddHash32 490 | 0xBF573715,GetProcessMemoryInfo,psapi.dll,ror9AddHash32 491 | 0x47EE75E4,GetProcessMemoryInfo,psapi.dll,ror13AddHash32 492 | 0x76E6E711,GetProcessMemoryInfo,psapi.dll,rol3XorEax 493 | 0x59DFFA65,GetProcessMemoryInfo,psapi.dll,rol5AddHash32 494 | 0x66137813,GetProcessMemoryInfo,psapi.dll,shl7shr19Hash32 495 | 0x8FB65AB9,GetProcessMemoryInfo,psapi.dll,ror13AddHash32AddDll 496 | 0xBE88F644,GetProcessMemoryInfo,psapi.dll,mult21AddHash32 497 | 0x2CFA3FD4,GetProcessMemoryInfo,psapi.dll,poisonIvyHash 498 | 0x64566FC9,GetProcessMemoryInfo,psapi.dll,add1505Shl5Hash32 499 | 0x2CCB2F98,GetProcessMemoryInfo,psapi.dll,crc32 500 | 0x2AA07BBC,GetProcessMemoryInfo,psapi.dll,ror7AddHash32 501 | 0xF75721B8,GetProcessMemoryInfo,psapi.dll,hash_ror13AddUpperDllnameHash32 502 | 0xAB2C10CD,GetProcessMemoryInfo,psapi.dll,rol7AddXor2Hash32 503 | 0xAF223F73,GetProcessMemoryInfo,psapi.dll,ror13AddWithNullHash32 504 | 0xE65FB4FC,GetProcessMemoryInfo,psapi.dll,fnv1Xor67f 505 | 0x25B70B3C,GetProcessMemoryInfo,psapi.dll,addRor4WithNullHash32 506 | 0x52CA0805,GetProcessMemoryInfo,psapi.dll,dualaccModFFF1Hash 507 | 0x57DEE749,GetWsChanges,psapi.dll,ror11AddHash32 508 | 0x4A3604CF,GetWsChanges,psapi.dll,rol7XorHash32 509 | 0x0D3CD3B3,GetWsChanges,psapi.dll,hash_Carbanak 510 | 0x77CBD8E0,GetWsChanges,psapi.dll,ror13AddHash32Sub1 511 | 0x75C9FBB3,GetWsChanges,psapi.dll,rol7AddHash32 512 | 0x000D2D32,GetWsChanges,psapi.dll,sll1AddHash32 513 | 0x7D14F468,GetWsChanges,psapi.dll,ror9AddHash32 514 | 0x77CBD8E1,GetWsChanges,psapi.dll,ror13AddHash32 515 | 0x3DFD2470,GetWsChanges,psapi.dll,rol3XorEax 516 | 0xBB6B83BC,GetWsChanges,psapi.dll,rol5AddHash32 517 | 0xE17E14EE,GetWsChanges,psapi.dll,shl7shr19Hash32 518 | 0xA79FD9A4,GetWsChanges,psapi.dll,ror13AddHash32AddDll 519 | 0xDCE8FA03,GetWsChanges,psapi.dll,mult21AddHash32 520 | 0xB578B722,GetWsChanges,psapi.dll,poisonIvyHash 521 | 0x358BBE88,GetWsChanges,psapi.dll,add1505Shl5Hash32 522 | 0xA712639B,GetWsChanges,psapi.dll,crc32 523 | 0x72D14E7A,GetWsChanges,psapi.dll,ror7AddHash32 524 | 0x273484B5,GetWsChanges,psapi.dll,hash_ror13AddUpperDllnameHash32 525 | 0x93853542,GetWsChanges,psapi.dll,rol7AddXor2Hash32 526 | 0xC70BBE5E,GetWsChanges,psapi.dll,ror13AddWithNullHash32 527 | 0x8B855651,GetWsChanges,psapi.dll,fnv1Xor67f 528 | 0xF757B7CA,GetWsChanges,psapi.dll,addRor4WithNullHash32 529 | 0x1D3A04A4,GetWsChanges,psapi.dll,dualaccModFFF1Hash 530 | 0x843D25D7,GetWsChangesEx,psapi.dll,ror11AddHash32 531 | 0x8133F075,GetWsChangesEx,psapi.dll,rol7XorHash32 532 | 0x0CD3BAF8,GetWsChangesEx,psapi.dll,hash_Carbanak 533 | 0xF51E38D4,GetWsChangesEx,psapi.dll,ror13AddHash32Sub1 534 | 0x7EED006A,GetWsChangesEx,psapi.dll,rol7AddHash32 535 | 0x0034B74C,GetWsChangesEx,psapi.dll,sll1AddHash32 536 | 0x5F9A1FBD,GetWsChangesEx,psapi.dll,ror9AddHash32 537 | 0xF51E38D5,GetWsChangesEx,psapi.dll,ror13AddHash32 538 | 0x8D8FE69E,GetWsChangesEx,psapi.dll,rol3XorEax 539 | 0xAE0EFC05,GetWsChangesEx,psapi.dll,rol5AddHash32 540 | 0x853BE053,GetWsChangesEx,psapi.dll,shl7shr19Hash32 541 | 0xA743C437,GetWsChangesEx,psapi.dll,ror13AddHash32AddDll 542 | 0xBB0F9020,GetWsChangesEx,psapi.dll,mult21AddHash32 543 | 0x22D97B5D,GetWsChangesEx,psapi.dll,poisonIvyHash 544 | 0xC77589E5,GetWsChangesEx,psapi.dll,add1505Shl5Hash32 545 | 0xD4079490,GetWsChangesEx,psapi.dll,crc32 546 | 0xC3E9CBBD,GetWsChangesEx,psapi.dll,ror7AddHash32 547 | 0xA486E4A9,GetWsChangesEx,psapi.dll,hash_ror13AddUpperDllnameHash32 548 | 0x4D50C8DB,GetWsChangesEx,psapi.dll,rol7AddXor2Hash32 549 | 0xC6AFA8F1,GetWsChangesEx,psapi.dll,ror13AddWithNullHash32 550 | 0xDCD65054,GetWsChangesEx,psapi.dll,fnv1Xor67f 551 | 0x474757B7,GetWsChangesEx,psapi.dll,addRor4WithNullHash32 552 | 0x27840561,GetWsChangesEx,psapi.dll,dualaccModFFF1Hash 553 | 0x0BA21328,InitializeProcessForWsWatch,psapi.dll,ror11AddHash32 554 | 0x0A2F53FE,InitializeProcessForWsWatch,psapi.dll,rol7XorHash32 555 | 0x02229A18,InitializeProcessForWsWatch,psapi.dll,hash_Carbanak 556 | 0x45778E33,InitializeProcessForWsWatch,psapi.dll,ror13AddHash32Sub1 557 | 0x76D82B50,InitializeProcessForWsWatch,psapi.dll,rol7AddHash32 558 | 0xADF1032C,InitializeProcessForWsWatch,psapi.dll,sll1AddHash32 559 | 0xA34BFEDC,InitializeProcessForWsWatch,psapi.dll,ror9AddHash32 560 | 0x45778E34,InitializeProcessForWsWatch,psapi.dll,ror13AddHash32 561 | 0x9D61677C,InitializeProcessForWsWatch,psapi.dll,rol3XorEax 562 | 0xD8A64623,InitializeProcessForWsWatch,psapi.dll,rol5AddHash32 563 | 0x9E07035E,InitializeProcessForWsWatch,psapi.dll,shl7shr19Hash32 564 | 0x52364702,InitializeProcessForWsWatch,psapi.dll,ror13AddHash32AddDll 565 | 0x29B12A59,InitializeProcessForWsWatch,psapi.dll,mult21AddHash32 566 | 0x1C4798ED,InitializeProcessForWsWatch,psapi.dll,poisonIvyHash 567 | 0x82B01C3E,InitializeProcessForWsWatch,psapi.dll,add1505Shl5Hash32 568 | 0x2493FF77,InitializeProcessForWsWatch,psapi.dll,crc32 569 | 0xBF650456,InitializeProcessForWsWatch,psapi.dll,ror7AddHash32 570 | 0xF4E03A08,InitializeProcessForWsWatch,psapi.dll,hash_ror13AddUpperDllnameHash32 571 | 0xCEC57FFC,InitializeProcessForWsWatch,psapi.dll,rol7AddXor2Hash32 572 | 0x71A22BBC,InitializeProcessForWsWatch,psapi.dll,ror13AddWithNullHash32 573 | 0x7A2FB0E3,InitializeProcessForWsWatch,psapi.dll,fnv1Xor67f 574 | 0x275EFCB4,InitializeProcessForWsWatch,psapi.dll,addRor4WithNullHash32 575 | 0x97F00ADA,InitializeProcessForWsWatch,psapi.dll,dualaccModFFF1Hash 576 | 0x89E0DB13,QueryWorkingSet,psapi.dll,ror11AddHash32 577 | 0xAD4F0296,QueryWorkingSet,psapi.dll,rol7XorHash32 578 | 0x0D7A5784,QueryWorkingSet,psapi.dll,hash_Carbanak 579 | 0x3D430617,QueryWorkingSet,psapi.dll,ror13AddHash32Sub1 580 | 0x8B3901F6,QueryWorkingSet,psapi.dll,rol7AddHash32 581 | 0x0070DE04,QueryWorkingSet,psapi.dll,sll1AddHash32 582 | 0xCB5DC1D1,QueryWorkingSet,psapi.dll,ror9AddHash32 583 | 0x3D430618,QueryWorkingSet,psapi.dll,ror13AddHash32 584 | 0x60ED0B92,QueryWorkingSet,psapi.dll,rol3XorEax 585 | 0x240440F0,QueryWorkingSet,psapi.dll,rol5AddHash32 586 | 0xA9471160,QueryWorkingSet,psapi.dll,shl7shr19Hash32 587 | 0x1156055E,QueryWorkingSet,psapi.dll,ror13AddHash32AddDll 588 | 0x2406AF03,QueryWorkingSet,psapi.dll,mult21AddHash32 589 | 0x2DECFCB9,QueryWorkingSet,psapi.dll,poisonIvyHash 590 | 0xBD2BE168,QueryWorkingSet,psapi.dll,add1505Shl5Hash32 591 | 0xE17944D9,QueryWorkingSet,psapi.dll,crc32 592 | 0x2DDF0DC6,QueryWorkingSet,psapi.dll,ror7AddHash32 593 | 0xECABB1EC,QueryWorkingSet,psapi.dll,hash_ror13AddUpperDllnameHash32 594 | 0x79143B8F,QueryWorkingSet,psapi.dll,rol7AddXor2Hash32 595 | 0x30C1EA18,QueryWorkingSet,psapi.dll,ror13AddWithNullHash32 596 | 0x64D1919D,QueryWorkingSet,psapi.dll,fnv1Xor67f 597 | 0x0E9A60A3,QueryWorkingSet,psapi.dll,addRor4WithNullHash32 598 | 0x31190624,QueryWorkingSet,psapi.dll,dualaccModFFF1Hash 599 | 0x8C0C4E9F,QueryWorkingSetEx,psapi.dll,ror11AddHash32 600 | 0xC0A589AB,QueryWorkingSetEx,psapi.dll,rol7XorHash32 601 | 0x0A5785B8,QueryWorkingSetEx,psapi.dll,hash_Carbanak 602 | 0x52E98686,QueryWorkingSetEx,psapi.dll,ror13AddHash32Sub1 603 | 0x407DC5C6,QueryWorkingSetEx,psapi.dll,rol7AddHash32 604 | 0x01C37A94,QueryWorkingSetEx,psapi.dll,sll1AddHash32 605 | 0x92F4734F,QueryWorkingSetEx,psapi.dll,ror9AddHash32 606 | 0x52E98687,QueryWorkingSetEx,psapi.dll,ror13AddHash32 607 | 0xC9BDDE18,QueryWorkingSetEx,psapi.dll,rol3XorEax 608 | 0x1103C9A8,QueryWorkingSetEx,psapi.dll,rol5AddHash32 609 | 0xC458725D,QueryWorkingSetEx,psapi.dll,shl7shr19Hash32 610 | 0x14CEB292,QueryWorkingSetEx,psapi.dll,ror13AddHash32AddDll 611 | 0x406E8520,QueryWorkingSetEx,psapi.dll,mult21AddHash32 612 | 0x51622800,QueryWorkingSetEx,psapi.dll,poisonIvyHash 613 | 0xB7A9E4C5,QueryWorkingSetEx,psapi.dll,add1505Shl5Hash32 614 | 0xB3424A17,QueryWorkingSetEx,psapi.dll,crc32 615 | 0xC118B7F4,QueryWorkingSetEx,psapi.dll,ror7AddHash32 616 | 0x0252325B,QueryWorkingSetEx,psapi.dll,hash_ror13AddUpperDllnameHash32 617 | 0x0EE4023F,QueryWorkingSetEx,psapi.dll,rol7AddXor2Hash32 618 | 0x343A974C,QueryWorkingSetEx,psapi.dll,ror13AddWithNullHash32 619 | 0xED8A5E58,QueryWorkingSetEx,psapi.dll,fnv1Xor67f 620 | 0x1F5E9A60,QueryWorkingSetEx,psapi.dll,addRor4WithNullHash32 621 | 0x3E6306E1,QueryWorkingSetEx,psapi.dll,dualaccModFFF1Hash 622 | -------------------------------------------------------------------------------- /hashes/winhttp.dll.txt: -------------------------------------------------------------------------------- 1 | 0x99BE9E58,DllCanUnloadNow,winhttp.dll,ror11AddHash32 2 | 0x2F867DED,DllCanUnloadNow,winhttp.dll,rol7XorHash32 3 | 0x03D006E7,DllCanUnloadNow,winhttp.dll,hash_Carbanak 4 | 0x18B8B8C7,DllCanUnloadNow,winhttp.dll,ror13AddHash32Sub1 5 | 0xD939E4FF,DllCanUnloadNow,winhttp.dll,rol7AddHash32 6 | 0x0067323A,DllCanUnloadNow,winhttp.dll,sll1AddHash32 7 | 0x0707B732,DllCanUnloadNow,winhttp.dll,ror9AddHash32 8 | 0x18B8B8C8,DllCanUnloadNow,winhttp.dll,ror13AddHash32 9 | 0xAF49597A,DllCanUnloadNow,winhttp.dll,rol3XorEax 10 | 0xC75570C1,DllCanUnloadNow,winhttp.dll,rol5AddHash32 11 | 0x2B8E6E1B,DllCanUnloadNow,winhttp.dll,shl7shr19Hash32 12 | 0x13E75CB6,DllCanUnloadNow,winhttp.dll,ror13AddHash32AddDll 13 | 0xA3B2AA65,DllCanUnloadNow,winhttp.dll,mult21AddHash32 14 | 0xC007BC85,DllCanUnloadNow,winhttp.dll,poisonIvyHash 15 | 0x3CD7DCCA,DllCanUnloadNow,winhttp.dll,add1505Shl5Hash32 16 | 0xB2BA5859,DllCanUnloadNow,winhttp.dll,crc32 17 | 0x60914A04,DllCanUnloadNow,winhttp.dll,ror7AddHash32 18 | 0x86701B54,DllCanUnloadNow,winhttp.dll,hash_ror13AddUpperDllnameHash32 19 | 0x0B952C75,DllCanUnloadNow,winhttp.dll,rol7AddXor2Hash32 20 | 0xC640C5C5,DllCanUnloadNow,winhttp.dll,ror13AddWithNullHash32 21 | 0xC78064D3,DllCanUnloadNow,winhttp.dll,fnv1Xor67f 22 | 0xAA894B67,DllCanUnloadNow,winhttp.dll,addRor4WithNullHash32 23 | 0x2CB905C6,DllCanUnloadNow,winhttp.dll,dualaccModFFF1Hash 24 | 0x07F8E8DD,DllGetClassObject,winhttp.dll,ror11AddHash32 25 | 0x72A4F6CE,DllGetClassObject,winhttp.dll,rol7XorHash32 26 | 0x0C9C13D4,DllGetClassObject,winhttp.dll,hash_Carbanak 27 | 0x1E9B5EAA,DllGetClassObject,winhttp.dll,ror13AddHash32Sub1 28 | 0xCDE4AB1A,DllGetClassObject,winhttp.dll,rol7AddHash32 29 | 0x019E0ABC,DllGetClassObject,winhttp.dll,sll1AddHash32 30 | 0x13DF6520,DllGetClassObject,winhttp.dll,ror9AddHash32 31 | 0x1E9B5EAB,DllGetClassObject,winhttp.dll,ror13AddHash32 32 | 0xE1EE5E78,DllGetClassObject,winhttp.dll,rol3XorEax 33 | 0xEFB8011D,DllGetClassObject,winhttp.dll,rol5AddHash32 34 | 0x76590D38,DllGetClassObject,winhttp.dll,shl7shr19Hash32 35 | 0x42FF8BCB,DllGetClassObject,winhttp.dll,ror13AddHash32AddDll 36 | 0x2C4F8949,DllGetClassObject,winhttp.dll,mult21AddHash32 37 | 0x6C49E74F,DllGetClassObject,winhttp.dll,poisonIvyHash 38 | 0xA38AE8EE,DllGetClassObject,winhttp.dll,add1505Shl5Hash32 39 | 0x4018D272,DllGetClassObject,winhttp.dll,crc32 40 | 0x0A7B9173,DllGetClassObject,winhttp.dll,ror7AddHash32 41 | 0x8C52C137,DllGetClassObject,winhttp.dll,hash_ror13AddUpperDllnameHash32 42 | 0x9FC36595,DllGetClassObject,winhttp.dll,rol7AddXor2Hash32 43 | 0xF558F4DA,DllGetClassObject,winhttp.dll,ror13AddWithNullHash32 44 | 0x03F5884B,DllGetClassObject,winhttp.dll,fnv1Xor67f 45 | 0x0695B04D,DllGetClassObject,winhttp.dll,addRor4WithNullHash32 46 | 0x3930068A,DllGetClassObject,winhttp.dll,dualaccModFFF1Hash 47 | 0x1682A27E,Private1,winhttp.dll,ror11AddHash32 48 | 0x6C9CF9FE,Private1,winhttp.dll,rol7XorHash32 49 | 0x090C8FF1,Private1,winhttp.dll,hash_Carbanak 50 | 0x46F78765,Private1,winhttp.dll,ror13AddHash32Sub1 51 | 0x6CDEFE00,Private1,winhttp.dll,rol7AddHash32 52 | 0x0000DE26,Private1,winhttp.dll,sll1AddHash32 53 | 0x95E6D4F8,Private1,winhttp.dll,ror9AddHash32 54 | 0x46F78766,Private1,winhttp.dll,ror13AddHash32 55 | 0x4B216829,Private1,winhttp.dll,rol3XorEax 56 | 0x59925F6E,Private1,winhttp.dll,rol5AddHash32 57 | 0x33CA54A5,Private1,winhttp.dll,shl7shr19Hash32 58 | 0x88D8CEAD,Private1,winhttp.dll,ror13AddHash32AddDll 59 | 0x197DB52C,Private1,winhttp.dll,mult21AddHash32 60 | 0x71354390,Private1,winhttp.dll,poisonIvyHash 61 | 0x9530FF31,Private1,winhttp.dll,add1505Shl5Hash32 62 | 0x8BAC6962,Private1,winhttp.dll,crc32 63 | 0x087B0F9F,Private1,winhttp.dll,ror7AddHash32 64 | 0xB4AEE9F2,Private1,winhttp.dll,hash_ror13AddUpperDllnameHash32 65 | 0x4D237712,Private1,winhttp.dll,rol7AddXor2Hash32 66 | 0x3B3237BC,Private1,winhttp.dll,ror13AddWithNullHash32 67 | 0x3E133D58,Private1,winhttp.dll,fnv1Xor67f 68 | 0x37CA8D07,Private1,winhttp.dll,addRor4WithNullHash32 69 | 0x0E45030D,Private1,winhttp.dll,dualaccModFFF1Hash 70 | 0xD5E0676F,SvchostPushServiceGlobals,winhttp.dll,ror11AddHash32 71 | 0x26FE7E93,SvchostPushServiceGlobals,winhttp.dll,rol7XorHash32 72 | 0x031C16C3,SvchostPushServiceGlobals,winhttp.dll,hash_Carbanak 73 | 0x52564118,SvchostPushServiceGlobals,winhttp.dll,ror13AddHash32Sub1 74 | 0x363F2D9C,SvchostPushServiceGlobals,winhttp.dll,rol7AddHash32 75 | 0xC3B8671E,SvchostPushServiceGlobals,winhttp.dll,sll1AddHash32 76 | 0x54C90F12,SvchostPushServiceGlobals,winhttp.dll,ror9AddHash32 77 | 0x52564119,SvchostPushServiceGlobals,winhttp.dll,ror13AddHash32 78 | 0x4CEFCF49,SvchostPushServiceGlobals,winhttp.dll,rol3XorEax 79 | 0xDB4A6205,SvchostPushServiceGlobals,winhttp.dll,rol5AddHash32 80 | 0x8FAC2E33,SvchostPushServiceGlobals,winhttp.dll,shl7shr19Hash32 81 | 0x567129A3,SvchostPushServiceGlobals,winhttp.dll,ror13AddHash32AddDll 82 | 0x940D8FBF,SvchostPushServiceGlobals,winhttp.dll,mult21AddHash32 83 | 0xFCCEE385,SvchostPushServiceGlobals,winhttp.dll,poisonIvyHash 84 | 0x586CC464,SvchostPushServiceGlobals,winhttp.dll,add1505Shl5Hash32 85 | 0x7801897D,SvchostPushServiceGlobals,winhttp.dll,crc32 86 | 0x7303108E,SvchostPushServiceGlobals,winhttp.dll,ror7AddHash32 87 | 0xC00DA3A5,SvchostPushServiceGlobals,winhttp.dll,hash_ror13AddUpperDllnameHash32 88 | 0x7D353FEF,SvchostPushServiceGlobals,winhttp.dll,rol7AddXor2Hash32 89 | 0x08CA92B2,SvchostPushServiceGlobals,winhttp.dll,ror13AddWithNullHash32 90 | 0xF24EC049,SvchostPushServiceGlobals,winhttp.dll,fnv1Xor67f 91 | 0x819FB577,SvchostPushServiceGlobals,winhttp.dll,addRor4WithNullHash32 92 | 0x83E50A20,SvchostPushServiceGlobals,winhttp.dll,dualaccModFFF1Hash 93 | 0xD7007887,WinHttpAddRequestHeaders,winhttp.dll,ror11AddHash32 94 | 0xE61B208F,WinHttpAddRequestHeaders,winhttp.dll,rol7XorHash32 95 | 0x0C9BE023,WinHttpAddRequestHeaders,winhttp.dll,hash_Carbanak 96 | 0x51F5E408,WinHttpAddRequestHeaders,winhttp.dll,ror13AddHash32Sub1 97 | 0x869732F3,WinHttpAddRequestHeaders,winhttp.dll,rol7AddHash32 98 | 0xE22F2B76,WinHttpAddRequestHeaders,winhttp.dll,sll1AddHash32 99 | 0x613B584F,WinHttpAddRequestHeaders,winhttp.dll,ror9AddHash32 100 | 0x51F5E409,WinHttpAddRequestHeaders,winhttp.dll,ror13AddHash32 101 | 0x5DF78B76,WinHttpAddRequestHeaders,winhttp.dll,rol3XorEax 102 | 0x3BBC13CC,WinHttpAddRequestHeaders,winhttp.dll,rol5AddHash32 103 | 0x4F49842F,WinHttpAddRequestHeaders,winhttp.dll,shl7shr19Hash32 104 | 0x6DF126A0,WinHttpAddRequestHeaders,winhttp.dll,ror13AddHash32AddDll 105 | 0x9237173C,WinHttpAddRequestHeaders,winhttp.dll,mult21AddHash32 106 | 0x1A6A7DD4,WinHttpAddRequestHeaders,winhttp.dll,poisonIvyHash 107 | 0xED7FCB41,WinHttpAddRequestHeaders,winhttp.dll,add1505Shl5Hash32 108 | 0xBFC3D932,WinHttpAddRequestHeaders,winhttp.dll,crc32 109 | 0xC62FB0F4,WinHttpAddRequestHeaders,winhttp.dll,ror7AddHash32 110 | 0xBFAD4695,WinHttpAddRequestHeaders,winhttp.dll,hash_ror13AddUpperDllnameHash32 111 | 0x1DEE1EC7,WinHttpAddRequestHeaders,winhttp.dll,rol7AddXor2Hash32 112 | 0x204A8FAF,WinHttpAddRequestHeaders,winhttp.dll,ror13AddWithNullHash32 113 | 0x6F2E86AA,WinHttpAddRequestHeaders,winhttp.dll,fnv1Xor67f 114 | 0x2CC2A067,WinHttpAddRequestHeaders,winhttp.dll,addRor4WithNullHash32 115 | 0x74E2097D,WinHttpAddRequestHeaders,winhttp.dll,dualaccModFFF1Hash 116 | 0xD4750362,WinHttpAutoProxySvcMain,winhttp.dll,ror11AddHash32 117 | 0x028F4D24,WinHttpAutoProxySvcMain,winhttp.dll,rol7XorHash32 118 | 0x0555D67E,WinHttpAutoProxySvcMain,winhttp.dll,hash_Carbanak 119 | 0xEEE4C020,WinHttpAutoProxySvcMain,winhttp.dll,ror13AddHash32Sub1 120 | 0x73654E52,WinHttpAutoProxySvcMain,winhttp.dll,rol7AddHash32 121 | 0x712484B8,WinHttpAutoProxySvcMain,winhttp.dll,sll1AddHash32 122 | 0xCEEBF2CB,WinHttpAutoProxySvcMain,winhttp.dll,ror9AddHash32 123 | 0xEEE4C021,WinHttpAutoProxySvcMain,winhttp.dll,ror13AddHash32 124 | 0xD482F626,WinHttpAutoProxySvcMain,winhttp.dll,rol3XorEax 125 | 0xAB372CA0,WinHttpAutoProxySvcMain,winhttp.dll,rol5AddHash32 126 | 0xABDDE86C,WinHttpAutoProxySvcMain,winhttp.dll,shl7shr19Hash32 127 | 0x4EB60E17,WinHttpAutoProxySvcMain,winhttp.dll,ror13AddHash32AddDll 128 | 0x572B223A,WinHttpAutoProxySvcMain,winhttp.dll,mult21AddHash32 129 | 0x0115AD0D,WinHttpAutoProxySvcMain,winhttp.dll,poisonIvyHash 130 | 0x887AE99F,WinHttpAutoProxySvcMain,winhttp.dll,add1505Shl5Hash32 131 | 0xC1B67B67,WinHttpAutoProxySvcMain,winhttp.dll,crc32 132 | 0x1AE885BD,WinHttpAutoProxySvcMain,winhttp.dll,ror7AddHash32 133 | 0x5C9C22AD,WinHttpAutoProxySvcMain,winhttp.dll,hash_ror13AddUpperDllnameHash32 134 | 0xDE9BEB07,WinHttpAutoProxySvcMain,winhttp.dll,rol7AddXor2Hash32 135 | 0x010F7726,WinHttpAutoProxySvcMain,winhttp.dll,ror13AddWithNullHash32 136 | 0x54DF2CF2,WinHttpAutoProxySvcMain,winhttp.dll,fnv1Xor67f 137 | 0x0B05955A,WinHttpAutoProxySvcMain,winhttp.dll,addRor4WithNullHash32 138 | 0x6E39093B,WinHttpAutoProxySvcMain,winhttp.dll,dualaccModFFF1Hash 139 | 0xEEEAC890,WinHttpCheckPlatform,winhttp.dll,ror11AddHash32 140 | 0x540FB03A,WinHttpCheckPlatform,winhttp.dll,rol7XorHash32 141 | 0x0B4F085D,WinHttpCheckPlatform,winhttp.dll,hash_Carbanak 142 | 0xCFA50425,WinHttpCheckPlatform,winhttp.dll,ror13AddHash32Sub1 143 | 0x3403BABC,WinHttpCheckPlatform,winhttp.dll,rol7AddHash32 144 | 0x0E23433A,WinHttpCheckPlatform,winhttp.dll,sll1AddHash32 145 | 0x1EB2D00D,WinHttpCheckPlatform,winhttp.dll,ror9AddHash32 146 | 0xCFA50426,WinHttpCheckPlatform,winhttp.dll,ror13AddHash32 147 | 0x4BDCAAD7,WinHttpCheckPlatform,winhttp.dll,rol3XorEax 148 | 0x6121565A,WinHttpCheckPlatform,winhttp.dll,rol5AddHash32 149 | 0x2AF25571,WinHttpCheckPlatform,winhttp.dll,shl7shr19Hash32 150 | 0x6EDD1419,WinHttpCheckPlatform,winhttp.dll,ror13AddHash32AddDll 151 | 0xB57AD111,WinHttpCheckPlatform,winhttp.dll,mult21AddHash32 152 | 0x8B5960B8,WinHttpCheckPlatform,winhttp.dll,poisonIvyHash 153 | 0x5B484A96,WinHttpCheckPlatform,winhttp.dll,add1505Shl5Hash32 154 | 0xE8B2227C,WinHttpCheckPlatform,winhttp.dll,crc32 155 | 0xAA74BF45,WinHttpCheckPlatform,winhttp.dll,ror7AddHash32 156 | 0x3D5C66B2,WinHttpCheckPlatform,winhttp.dll,hash_ror13AddUpperDllnameHash32 157 | 0xE0A98615,WinHttpCheckPlatform,winhttp.dll,rol7AddXor2Hash32 158 | 0x21367D28,WinHttpCheckPlatform,winhttp.dll,ror13AddWithNullHash32 159 | 0x70E2672B,WinHttpCheckPlatform,winhttp.dll,fnv1Xor67f 160 | 0x646004EC,WinHttpCheckPlatform,winhttp.dll,addRor4WithNullHash32 161 | 0x51CE07F2,WinHttpCheckPlatform,winhttp.dll,dualaccModFFF1Hash 162 | 0x8987E4AD,WinHttpCloseHandle,winhttp.dll,ror11AddHash32 163 | 0xFE996DF6,WinHttpCloseHandle,winhttp.dll,rol7XorHash32 164 | 0x074E5405,WinHttpCloseHandle,winhttp.dll,hash_Carbanak 165 | 0x0B47C200,WinHttpCloseHandle,winhttp.dll,ror13AddHash32Sub1 166 | 0x60F8BAC5,WinHttpCloseHandle,winhttp.dll,rol7AddHash32 167 | 0x0388FE1A,WinHttpCloseHandle,winhttp.dll,sll1AddHash32 168 | 0x9B3D8080,WinHttpCloseHandle,winhttp.dll,ror9AddHash32 169 | 0x0B47C201,WinHttpCloseHandle,winhttp.dll,ror13AddHash32 170 | 0x75A74D10,WinHttpCloseHandle,winhttp.dll,rol3XorEax 171 | 0x5AAF1386,WinHttpCloseHandle,winhttp.dll,rol5AddHash32 172 | 0x80649600,WinHttpCloseHandle,winhttp.dll,shl7shr19Hash32 173 | 0x5DAEF12F,WinHttpCloseHandle,winhttp.dll,ror13AddHash32AddDll 174 | 0xD77AB890,WinHttpCloseHandle,winhttp.dll,mult21AddHash32 175 | 0x68B8F071,WinHttpCloseHandle,winhttp.dll,poisonIvyHash 176 | 0x36220CD5,WinHttpCloseHandle,winhttp.dll,add1505Shl5Hash32 177 | 0x6A29F9F4,WinHttpCloseHandle,winhttp.dll,crc32 178 | 0x39FE62EA,WinHttpCloseHandle,winhttp.dll,ror7AddHash32 179 | 0x78FF248D,WinHttpCloseHandle,winhttp.dll,hash_ror13AddUpperDllnameHash32 180 | 0x8DD77F60,WinHttpCloseHandle,winhttp.dll,rol7AddXor2Hash32 181 | 0x10085A3E,WinHttpCloseHandle,winhttp.dll,ror13AddWithNullHash32 182 | 0xD2053CE6,WinHttpCloseHandle,winhttp.dll,fnv1Xor67f 183 | 0x5095B16B,WinHttpCloseHandle,winhttp.dll,addRor4WithNullHash32 184 | 0x42CE0711,WinHttpCloseHandle,winhttp.dll,dualaccModFFF1Hash 185 | 0xE8911DD0,WinHttpConnect,winhttp.dll,ror11AddHash32 186 | 0x27A5ACB2,WinHttpConnect,winhttp.dll,rol7XorHash32 187 | 0x0A8CF504,WinHttpConnect,winhttp.dll,hash_Carbanak 188 | 0x008AAE8E,WinHttpConnect,winhttp.dll,ror13AddHash32Sub1 189 | 0x215853B0,WinHttpConnect,winhttp.dll,rol7AddHash32 190 | 0x00388F7C,WinHttpConnect,winhttp.dll,sll1AddHash32 191 | 0x4FDF2529,WinHttpConnect,winhttp.dll,ror9AddHash32 192 | 0x008AAE8F,WinHttpConnect,winhttp.dll,ror13AddHash32 193 | 0x5CE79F1F,WinHttpConnect,winhttp.dll,rol3XorEax 194 | 0x6D47991A,WinHttpConnect,winhttp.dll,rol5AddHash32 195 | 0x23ADBC94,WinHttpConnect,winhttp.dll,shl7shr19Hash32 196 | 0xC21E9B46,WinHttpConnect,winhttp.dll,ror13AddHash32AddDll 197 | 0x65DCC7B8,WinHttpConnect,winhttp.dll,mult21AddHash32 198 | 0xA06AD8BE,WinHttpConnect,winhttp.dll,poisonIvyHash 199 | 0x7242C17D,WinHttpConnect,winhttp.dll,add1505Shl5Hash32 200 | 0x6F50B6C6,WinHttpConnect,winhttp.dll,crc32 201 | 0xDC06872B,WinHttpConnect,winhttp.dll,ror7AddHash32 202 | 0x6E42111B,WinHttpConnect,winhttp.dll,hash_ror13AddUpperDllnameHash32 203 | 0xF33C8B22,WinHttpConnect,winhttp.dll,rol7AddXor2Hash32 204 | 0x74780455,WinHttpConnect,winhttp.dll,ror13AddWithNullHash32 205 | 0xB0B51C32,WinHttpConnect,winhttp.dll,fnv1Xor67f 206 | 0xE61B93AA,WinHttpConnect,winhttp.dll,addRor4WithNullHash32 207 | 0x29370599,WinHttpConnect,winhttp.dll,dualaccModFFF1Hash 208 | 0x792CC093,WinHttpCrackUrl,winhttp.dll,ror11AddHash32 209 | 0x031BAE07,WinHttpCrackUrl,winhttp.dll,rol7XorHash32 210 | 0x0A83E62C,WinHttpCrackUrl,winhttp.dll,hash_Carbanak 211 | 0x0073513A,WinHttpCrackUrl,winhttp.dll,ror13AddHash32Sub1 212 | 0xFCE66313,WinHttpCrackUrl,winhttp.dll,rol7AddHash32 213 | 0x00711D98,WinHttpCrackUrl,winhttp.dll,sll1AddHash32 214 | 0xE33C7CBD,WinHttpCrackUrl,winhttp.dll,ror9AddHash32 215 | 0x0073513B,WinHttpCrackUrl,winhttp.dll,ror13AddHash32 216 | 0xE4CCE75B,WinHttpCrackUrl,winhttp.dll,rol3XorEax 217 | 0x4E45EB7A,WinHttpCrackUrl,winhttp.dll,rol5AddHash32 218 | 0x0713BDF1,WinHttpCrackUrl,winhttp.dll,shl7shr19Hash32 219 | 0xD77E9A8B,WinHttpCrackUrl,winhttp.dll,ror13AddHash32AddDll 220 | 0xE94D6625,WinHttpCrackUrl,winhttp.dll,mult21AddHash32 221 | 0xF4A61D16,WinHttpCrackUrl,winhttp.dll,poisonIvyHash 222 | 0x8272988A,WinHttpCrackUrl,winhttp.dll,add1505Shl5Hash32 223 | 0x7DC23730,WinHttpCrackUrl,winhttp.dll,crc32 224 | 0xB4403CC8,WinHttpCrackUrl,winhttp.dll,ror7AddHash32 225 | 0x6E2AB3C7,WinHttpCrackUrl,winhttp.dll,hash_ror13AddUpperDllnameHash32 226 | 0xEE831A9E,WinHttpCrackUrl,winhttp.dll,rol7AddXor2Hash32 227 | 0x89D8039A,WinHttpCrackUrl,winhttp.dll,ror13AddWithNullHash32 228 | 0xA7F143C9,WinHttpCrackUrl,winhttp.dll,fnv1Xor67f 229 | 0x1A340D6D,WinHttpCrackUrl,winhttp.dll,addRor4WithNullHash32 230 | 0x2EB605E6,WinHttpCrackUrl,winhttp.dll,dualaccModFFF1Hash 231 | 0x13BEAE0D,WinHttpCreateUrl,winhttp.dll,ror11AddHash32 232 | 0x7BDEDCFC,WinHttpCreateUrl,winhttp.dll,rol7XorHash32 233 | 0x0434062C,WinHttpCreateUrl,winhttp.dll,hash_Carbanak 234 | 0xAA188CC4,WinHttpCreateUrl,winhttp.dll,ror13AddHash32Sub1 235 | 0x052A5D5B,WinHttpCreateUrl,winhttp.dll,rol7AddHash32 236 | 0x00E23DD8,WinHttpCreateUrl,winhttp.dll,sll1AddHash32 237 | 0xF1DA70AA,WinHttpCreateUrl,winhttp.dll,ror9AddHash32 238 | 0xAA188CC5,WinHttpCreateUrl,winhttp.dll,ror13AddHash32 239 | 0xCED1BFFE,WinHttpCreateUrl,winhttp.dll,rol3XorEax 240 | 0xC554FC76,WinHttpCreateUrl,winhttp.dll,rol5AddHash32 241 | 0x7FD7270A,WinHttpCreateUrl,winhttp.dll,shl7shr19Hash32 242 | 0xB3D3E7B5,WinHttpCreateUrl,winhttp.dll,ror13AddHash32AddDll 243 | 0x42E3F4F5,WinHttpCreateUrl,winhttp.dll,mult21AddHash32 244 | 0x8443D68C,WinHttpCreateUrl,winhttp.dll,poisonIvyHash 245 | 0x00AF73FA,WinHttpCreateUrl,winhttp.dll,add1505Shl5Hash32 246 | 0xF2FD2235,WinHttpCreateUrl,winhttp.dll,crc32 247 | 0x5DF50175,WinHttpCreateUrl,winhttp.dll,ror7AddHash32 248 | 0x17CFEF51,WinHttpCreateUrl,winhttp.dll,hash_ror13AddUpperDllnameHash32 249 | 0x138720F6,WinHttpCreateUrl,winhttp.dll,rol7AddXor2Hash32 250 | 0x662D50C4,WinHttpCreateUrl,winhttp.dll,ror13AddWithNullHash32 251 | 0xF777FBE5,WinHttpCreateUrl,winhttp.dll,fnv1Xor67f 252 | 0x3DE749BA,WinHttpCreateUrl,winhttp.dll,addRor4WithNullHash32 253 | 0x353A0656,WinHttpCreateUrl,winhttp.dll,dualaccModFFF1Hash 254 | 0x5D5FEA4A,WinHttpDetectAutoProxyConfigUrl,winhttp.dll,ror11AddHash32 255 | 0x7331B7C5,WinHttpDetectAutoProxyConfigUrl,winhttp.dll,rol7XorHash32 256 | 0x0F8312FC,WinHttpDetectAutoProxyConfigUrl,winhttp.dll,hash_Carbanak 257 | 0x385FADC3,WinHttpDetectAutoProxyConfigUrl,winhttp.dll,ror13AddHash32Sub1 258 | 0xBF39388D,WinHttpDetectAutoProxyConfigUrl,winhttp.dll,rol7AddHash32 259 | 0x1D41F358,WinHttpDetectAutoProxyConfigUrl,winhttp.dll,sll1AddHash32 260 | 0xE66F1157,WinHttpDetectAutoProxyConfigUrl,winhttp.dll,ror9AddHash32 261 | 0x385FADC4,WinHttpDetectAutoProxyConfigUrl,winhttp.dll,ror13AddHash32 262 | 0x4F474F46,WinHttpDetectAutoProxyConfigUrl,winhttp.dll,rol3XorEax 263 | 0x0DA03A0A,WinHttpDetectAutoProxyConfigUrl,winhttp.dll,rol5AddHash32 264 | 0x64CE483B,WinHttpDetectAutoProxyConfigUrl,winhttp.dll,shl7shr19Hash32 265 | 0xBBC859EE,WinHttpDetectAutoProxyConfigUrl,winhttp.dll,ror13AddHash32AddDll 266 | 0x233285CB,WinHttpDetectAutoProxyConfigUrl,winhttp.dll,mult21AddHash32 267 | 0xE9377F73,WinHttpDetectAutoProxyConfigUrl,winhttp.dll,poisonIvyHash 268 | 0xE471E230,WinHttpDetectAutoProxyConfigUrl,winhttp.dll,add1505Shl5Hash32 269 | 0x5BB03620,WinHttpDetectAutoProxyConfigUrl,winhttp.dll,crc32 270 | 0x1B81DC96,WinHttpDetectAutoProxyConfigUrl,winhttp.dll,ror7AddHash32 271 | 0xA6171050,WinHttpDetectAutoProxyConfigUrl,winhttp.dll,hash_ror13AddUpperDllnameHash32 272 | 0xB660A59D,WinHttpDetectAutoProxyConfigUrl,winhttp.dll,rol7AddXor2Hash32 273 | 0x6E21C2FD,WinHttpDetectAutoProxyConfigUrl,winhttp.dll,ror13AddWithNullHash32 274 | 0xE71CC0B1,WinHttpDetectAutoProxyConfigUrl,winhttp.dll,fnv1Xor67f 275 | 0x0ECBD6DB,WinHttpDetectAutoProxyConfigUrl,winhttp.dll,addRor4WithNullHash32 276 | 0xC4D50C6C,WinHttpDetectAutoProxyConfigUrl,winhttp.dll,dualaccModFFF1Hash 277 | 0xE64FFABE,WinHttpGetDefaultProxyConfiguration,winhttp.dll,ror11AddHash32 278 | 0x60A9CE98,WinHttpGetDefaultProxyConfiguration,winhttp.dll,rol7XorHash32 279 | 0x0E035A2E,WinHttpGetDefaultProxyConfiguration,winhttp.dll,hash_Carbanak 280 | 0xE8637D01,WinHttpGetDefaultProxyConfiguration,winhttp.dll,ror13AddHash32Sub1 281 | 0xA38E697B,WinHttpGetDefaultProxyConfiguration,winhttp.dll,rol7AddHash32 282 | 0xFCC74140,WinHttpGetDefaultProxyConfiguration,winhttp.dll,sll1AddHash32 283 | 0x0D060004,WinHttpGetDefaultProxyConfiguration,winhttp.dll,ror9AddHash32 284 | 0xE8637D02,WinHttpGetDefaultProxyConfiguration,winhttp.dll,ror13AddHash32 285 | 0x40931EFF,WinHttpGetDefaultProxyConfiguration,winhttp.dll,rol3XorEax 286 | 0x93394DD5,WinHttpGetDefaultProxyConfiguration,winhttp.dll,rol5AddHash32 287 | 0x9F6B4B93,WinHttpGetDefaultProxyConfiguration,winhttp.dll,shl7shr19Hash32 288 | 0x35BDDA0C,WinHttpGetDefaultProxyConfiguration,winhttp.dll,ror13AddHash32AddDll 289 | 0xEC31D1CD,WinHttpGetDefaultProxyConfiguration,winhttp.dll,mult21AddHash32 290 | 0x47DFC550,WinHttpGetDefaultProxyConfiguration,winhttp.dll,poisonIvyHash 291 | 0xBCE2D8B2,WinHttpGetDefaultProxyConfiguration,winhttp.dll,add1505Shl5Hash32 292 | 0x62605FC8,WinHttpGetDefaultProxyConfiguration,winhttp.dll,crc32 293 | 0x3EC965CD,WinHttpGetDefaultProxyConfiguration,winhttp.dll,ror7AddHash32 294 | 0x561ADF8E,WinHttpGetDefaultProxyConfiguration,winhttp.dll,hash_ror13AddUpperDllnameHash32 295 | 0x13415F53,WinHttpGetDefaultProxyConfiguration,winhttp.dll,rol7AddXor2Hash32 296 | 0xE817431B,WinHttpGetDefaultProxyConfiguration,winhttp.dll,ror13AddWithNullHash32 297 | 0x639E8A09,WinHttpGetDefaultProxyConfiguration,winhttp.dll,fnv1Xor67f 298 | 0x3A30F5DE,WinHttpGetDefaultProxyConfiguration,winhttp.dll,addRor4WithNullHash32 299 | 0xFA0D0E2E,WinHttpGetDefaultProxyConfiguration,winhttp.dll,dualaccModFFF1Hash 300 | 0x923310CC,WinHttpGetIEProxyConfigForCurrentUser,winhttp.dll,ror11AddHash32 301 | 0xC09D3450,WinHttpGetIEProxyConfigForCurrentUser,winhttp.dll,rol7XorHash32 302 | 0x05177072,WinHttpGetIEProxyConfigForCurrentUser,winhttp.dll,hash_Carbanak 303 | 0xA206024B,WinHttpGetIEProxyConfigForCurrentUser,winhttp.dll,ror13AddHash32Sub1 304 | 0x252FFB3D,WinHttpGetIEProxyConfigForCurrentUser,winhttp.dll,rol7AddHash32 305 | 0x3F9DABE0,WinHttpGetIEProxyConfigForCurrentUser,winhttp.dll,sll1AddHash32 306 | 0xE7183954,WinHttpGetIEProxyConfigForCurrentUser,winhttp.dll,ror9AddHash32 307 | 0xA206024C,WinHttpGetIEProxyConfigForCurrentUser,winhttp.dll,ror13AddHash32 308 | 0xC743327C,WinHttpGetIEProxyConfigForCurrentUser,winhttp.dll,rol3XorEax 309 | 0x4D985567,WinHttpGetIEProxyConfigForCurrentUser,winhttp.dll,rol5AddHash32 310 | 0x61DFB154,WinHttpGetIEProxyConfigForCurrentUser,winhttp.dll,shl7shr19Hash32 311 | 0x600BA721,WinHttpGetIEProxyConfigForCurrentUser,winhttp.dll,ror13AddHash32AddDll 312 | 0x48B246DD,WinHttpGetIEProxyConfigForCurrentUser,winhttp.dll,mult21AddHash32 313 | 0x1711BABB,WinHttpGetIEProxyConfigForCurrentUser,winhttp.dll,poisonIvyHash 314 | 0x09C09B02,WinHttpGetIEProxyConfigForCurrentUser,winhttp.dll,add1505Shl5Hash32 315 | 0xA96E88B8,WinHttpGetIEProxyConfigForCurrentUser,winhttp.dll,crc32 316 | 0x04A7C4C8,WinHttpGetIEProxyConfigForCurrentUser,winhttp.dll,ror7AddHash32 317 | 0x0FBD64D8,WinHttpGetIEProxyConfigForCurrentUser,winhttp.dll,hash_ror13AddUpperDllnameHash32 318 | 0xCF21DA81,WinHttpGetIEProxyConfigForCurrentUser,winhttp.dll,rol7AddXor2Hash32 319 | 0x12651030,WinHttpGetIEProxyConfigForCurrentUser,winhttp.dll,ror13AddWithNullHash32 320 | 0xAFA5B0B5,WinHttpGetIEProxyConfigForCurrentUser,winhttp.dll,fnv1Xor67f 321 | 0x2A499ED7,WinHttpGetIEProxyConfigForCurrentUser,winhttp.dll,addRor4WithNullHash32 322 | 0x10F30E9E,WinHttpGetIEProxyConfigForCurrentUser,winhttp.dll,dualaccModFFF1Hash 323 | 0x4369344D,WinHttpGetProxyForUrl,winhttp.dll,ror11AddHash32 324 | 0x0B8B9F9A,WinHttpGetProxyForUrl,winhttp.dll,rol7XorHash32 325 | 0x03BA00AC,WinHttpGetProxyForUrl,winhttp.dll,hash_Carbanak 326 | 0x88DD3F87,WinHttpGetProxyForUrl,winhttp.dll,ror13AddHash32Sub1 327 | 0x51205ADA,WinHttpGetProxyForUrl,winhttp.dll,rol7AddHash32 328 | 0x1C48AF48,WinHttpGetProxyForUrl,winhttp.dll,sll1AddHash32 329 | 0x966C158E,WinHttpGetProxyForUrl,winhttp.dll,ror9AddHash32 330 | 0x88DD3F88,WinHttpGetProxyForUrl,winhttp.dll,ror13AddHash32 331 | 0xE9329495,WinHttpGetProxyForUrl,winhttp.dll,rol3XorEax 332 | 0x9FF0D7C5,WinHttpGetProxyForUrl,winhttp.dll,rol5AddHash32 333 | 0x75793AD1,WinHttpGetProxyForUrl,winhttp.dll,shl7shr19Hash32 334 | 0x49EADDDA,WinHttpGetProxyForUrl,winhttp.dll,ror13AddHash32AddDll 335 | 0x7357D02A,WinHttpGetProxyForUrl,winhttp.dll,mult21AddHash32 336 | 0x51F6F839,WinHttpGetProxyForUrl,winhttp.dll,poisonIvyHash 337 | 0xD2D47A4F,WinHttpGetProxyForUrl,winhttp.dll,add1505Shl5Hash32 338 | 0x27927317,WinHttpGetProxyForUrl,winhttp.dll,crc32 339 | 0x8F5EF202,WinHttpGetProxyForUrl,winhttp.dll,ror7AddHash32 340 | 0xF694A214,WinHttpGetProxyForUrl,winhttp.dll,hash_ror13AddUpperDllnameHash32 341 | 0xA0070692,WinHttpGetProxyForUrl,winhttp.dll,rol7AddXor2Hash32 342 | 0xFC4446E9,WinHttpGetProxyForUrl,winhttp.dll,ror13AddWithNullHash32 343 | 0xBF71BDEE,WinHttpGetProxyForUrl,winhttp.dll,fnv1Xor67f 344 | 0x11D723C7,WinHttpGetProxyForUrl,winhttp.dll,addRor4WithNullHash32 345 | 0x5B5D086B,WinHttpGetProxyForUrl,winhttp.dll,dualaccModFFF1Hash 346 | 0xB73F16BF,WinHttpOpen,winhttp.dll,ror11AddHash32 347 | 0xE76DF4BD,WinHttpOpen,winhttp.dll,rol7XorHash32 348 | 0x0BEB644E,WinHttpOpen,winhttp.dll,hash_Carbanak 349 | 0xD1026DBD,WinHttpOpen,winhttp.dll,ror13AddHash32Sub1 350 | 0xF88E1C89,WinHttpOpen,winhttp.dll,rol7AddHash32 351 | 0x000711E0,WinHttpOpen,winhttp.dll,sll1AddHash32 352 | 0xA47270A5,WinHttpOpen,winhttp.dll,ror9AddHash32 353 | 0xD1026DBE,WinHttpOpen,winhttp.dll,ror13AddHash32 354 | 0x1BD3204B,WinHttpOpen,winhttp.dll,rol3XorEax 355 | 0xF092DD6B,WinHttpOpen,winhttp.dll,rol5AddHash32 356 | 0x4C3B649C,WinHttpOpen,winhttp.dll,shl7shr19Hash32 357 | 0xBB9D1F04,WinHttpOpen,winhttp.dll,ror13AddHash32AddDll 358 | 0x72E57200,WinHttpOpen,winhttp.dll,mult21AddHash32 359 | 0x8D2A0EF8,WinHttpOpen,winhttp.dll,poisonIvyHash 360 | 0x5E4F39E5,WinHttpOpen,winhttp.dll,add1505Shl5Hash32 361 | 0x2D697D39,WinHttpOpen,winhttp.dll,crc32 362 | 0xC4E6EE50,WinHttpOpen,winhttp.dll,ror7AddHash32 363 | 0x3EB9D04A,WinHttpOpen,winhttp.dll,hash_ror13AddUpperDllnameHash32 364 | 0x1652A519,WinHttpOpen,winhttp.dll,rol7AddXor2Hash32 365 | 0x6DF68813,WinHttpOpen,winhttp.dll,ror13AddWithNullHash32 366 | 0xAEBC85DA,WinHttpOpen,winhttp.dll,fnv1Xor67f 367 | 0x68AC67B8,WinHttpOpen,winhttp.dll,addRor4WithNullHash32 368 | 0x19D80461,WinHttpOpen,winhttp.dll,dualaccModFFF1Hash 369 | 0xCB7018BB,WinHttpOpenRequest,winhttp.dll,ror11AddHash32 370 | 0xF7C3FC00,WinHttpOpenRequest,winhttp.dll,rol7XorHash32 371 | 0x067EF924,WinHttpOpenRequest,winhttp.dll,hash_Carbanak 372 | 0x8F34E1C0,WinHttpOpenRequest,winhttp.dll,ror13AddHash32Sub1 373 | 0x57CEB63F,WinHttpOpenRequest,winhttp.dll,rol7AddHash32 374 | 0x03895D8C,WinHttpOpenRequest,winhttp.dll,sll1AddHash32 375 | 0x95A77866,WinHttpOpenRequest,winhttp.dll,ror9AddHash32 376 | 0x8F34E1C1,WinHttpOpenRequest,winhttp.dll,ror13AddHash32 377 | 0xFB92BE93,WinHttpOpenRequest,winhttp.dll,rol3XorEax 378 | 0xD5E30E48,WinHttpOpenRequest,winhttp.dll,rol5AddHash32 379 | 0x893E07F6,WinHttpOpenRequest,winhttp.dll,shl7shr19Hash32 380 | 0x5BB31098,WinHttpOpenRequest,winhttp.dll,ror13AddHash32AddDll 381 | 0x8C106589,WinHttpOpenRequest,winhttp.dll,mult21AddHash32 382 | 0x4A68D81B,WinHttpOpenRequest,winhttp.dll,poisonIvyHash 383 | 0xEAB7B9CE,WinHttpOpenRequest,winhttp.dll,add1505Shl5Hash32 384 | 0xB8172A42,WinHttpOpenRequest,winhttp.dll,crc32 385 | 0x13401205,WinHttpOpenRequest,winhttp.dll,ror7AddHash32 386 | 0xFCEC444D,WinHttpOpenRequest,winhttp.dll,hash_ror13AddUpperDllnameHash32 387 | 0x892D68DA,WinHttpOpenRequest,winhttp.dll,rol7AddXor2Hash32 388 | 0x0E0C79A7,WinHttpOpenRequest,winhttp.dll,ror13AddWithNullHash32 389 | 0x1552D90D,WinHttpOpenRequest,winhttp.dll,fnv1Xor67f 390 | 0xF5633328,WinHttpOpenRequest,winhttp.dll,addRor4WithNullHash32 391 | 0x43AD074A,WinHttpOpenRequest,winhttp.dll,dualaccModFFF1Hash 392 | 0x42DB1DF5,WinHttpQueryAuthSchemes,winhttp.dll,ror11AddHash32 393 | 0x327B475C,WinHttpQueryAuthSchemes,winhttp.dll,rol7XorHash32 394 | 0x0BAE0023,WinHttpQueryAuthSchemes,winhttp.dll,hash_Carbanak 395 | 0x53974122,WinHttpQueryAuthSchemes,winhttp.dll,ror13AddHash32Sub1 396 | 0x4A7B7F82,WinHttpQueryAuthSchemes,winhttp.dll,rol7AddHash32 397 | 0x71312772,WinHttpQueryAuthSchemes,winhttp.dll,sll1AddHash32 398 | 0x58897174,WinHttpQueryAuthSchemes,winhttp.dll,ror9AddHash32 399 | 0x53974123,WinHttpQueryAuthSchemes,winhttp.dll,ror13AddHash32 400 | 0x3AD6AED8,WinHttpQueryAuthSchemes,winhttp.dll,rol3XorEax 401 | 0xC950977F,WinHttpQueryAuthSchemes,winhttp.dll,rol5AddHash32 402 | 0x9B29E214,WinHttpQueryAuthSchemes,winhttp.dll,shl7shr19Hash32 403 | 0x56C133AB,WinHttpQueryAuthSchemes,winhttp.dll,ror13AddHash32AddDll 404 | 0x4A16D17E,WinHttpQueryAuthSchemes,winhttp.dll,mult21AddHash32 405 | 0x9227BE55,WinHttpQueryAuthSchemes,winhttp.dll,poisonIvyHash 406 | 0x7B6698E3,WinHttpQueryAuthSchemes,winhttp.dll,add1505Shl5Hash32 407 | 0xFA5ABEEA,WinHttpQueryAuthSchemes,winhttp.dll,crc32 408 | 0xF858F03A,WinHttpQueryAuthSchemes,winhttp.dll,ror7AddHash32 409 | 0xC14EA3AF,WinHttpQueryAuthSchemes,winhttp.dll,hash_ror13AddUpperDllnameHash32 410 | 0xF5B21D39,WinHttpQueryAuthSchemes,winhttp.dll,rol7AddXor2Hash32 411 | 0x091A9CBA,WinHttpQueryAuthSchemes,winhttp.dll,ror13AddWithNullHash32 412 | 0xF2945708,WinHttpQueryAuthSchemes,winhttp.dll,fnv1Xor67f 413 | 0xFC13AA3A,WinHttpQueryAuthSchemes,winhttp.dll,addRor4WithNullHash32 414 | 0x6E17093F,WinHttpQueryAuthSchemes,winhttp.dll,dualaccModFFF1Hash 415 | 0x0A7F7D6C,WinHttpQueryDataAvailable,winhttp.dll,ror11AddHash32 416 | 0x532BDE9F,WinHttpQueryDataAvailable,winhttp.dll,rol7XorHash32 417 | 0x070113D5,WinHttpQueryDataAvailable,winhttp.dll,hash_Carbanak 418 | 0xCEEBFF8A,WinHttpQueryDataAvailable,winhttp.dll,ror13AddHash32Sub1 419 | 0x3DAFED20,WinHttpQueryDataAvailable,winhttp.dll,rol7AddHash32 420 | 0xC4C38FDA,WinHttpQueryDataAvailable,winhttp.dll,sll1AddHash32 421 | 0xF0A53A2A,WinHttpQueryDataAvailable,winhttp.dll,ror9AddHash32 422 | 0xCEEBFF8B,WinHttpQueryDataAvailable,winhttp.dll,ror13AddHash32 423 | 0xA0B359B5,WinHttpQueryDataAvailable,winhttp.dll,rol3XorEax 424 | 0xB04AD7A0,WinHttpQueryDataAvailable,winhttp.dll,rol5AddHash32 425 | 0xFA798E3F,WinHttpQueryDataAvailable,winhttp.dll,shl7shr19Hash32 426 | 0x4A050E50,WinHttpQueryDataAvailable,winhttp.dll,ror13AddHash32AddDll 427 | 0x706C51DF,WinHttpQueryDataAvailable,winhttp.dll,mult21AddHash32 428 | 0xB341E46B,WinHttpQueryDataAvailable,winhttp.dll,poisonIvyHash 429 | 0x34CB8684,WinHttpQueryDataAvailable,winhttp.dll,add1505Shl5Hash32 430 | 0x28F435DE,WinHttpQueryDataAvailable,winhttp.dll,crc32 431 | 0x16515FAC,WinHttpQueryDataAvailable,winhttp.dll,ror7AddHash32 432 | 0x3CA36217,WinHttpQueryDataAvailable,winhttp.dll,hash_ror13AddUpperDllnameHash32 433 | 0xE91DD8EF,WinHttpQueryDataAvailable,winhttp.dll,rol7AddXor2Hash32 434 | 0xFC5E775F,WinHttpQueryDataAvailable,winhttp.dll,ror13AddWithNullHash32 435 | 0x26088C99,WinHttpQueryDataAvailable,winhttp.dll,fnv1Xor67f 436 | 0xC43995E5,WinHttpQueryDataAvailable,winhttp.dll,addRor4WithNullHash32 437 | 0x805809E0,WinHttpQueryDataAvailable,winhttp.dll,dualaccModFFF1Hash 438 | 0x5745236E,WinHttpQueryHeaders,winhttp.dll,ror11AddHash32 439 | 0xBD8EF6E9,WinHttpQueryHeaders,winhttp.dll,rol7XorHash32 440 | 0x053E9EA3,WinHttpQueryHeaders,winhttp.dll,hash_Carbanak 441 | 0x4F8B3B74,WinHttpQueryHeaders,winhttp.dll,ror13AddHash32Sub1 442 | 0xAB856BFD,WinHttpQueryHeaders,winhttp.dll,rol7AddHash32 443 | 0x07130E76,WinHttpQueryHeaders,winhttp.dll,sll1AddHash32 444 | 0x35E6E19C,WinHttpQueryHeaders,winhttp.dll,ror9AddHash32 445 | 0x4F8B3B75,WinHttpQueryHeaders,winhttp.dll,ror13AddHash32 446 | 0x0670CAF2,WinHttpQueryHeaders,winhttp.dll,rol3XorEax 447 | 0x6435167E,WinHttpQueryHeaders,winhttp.dll,rol5AddHash32 448 | 0xC3730D22,WinHttpQueryHeaders,winhttp.dll,shl7shr19Hash32 449 | 0x2951134A,WinHttpQueryHeaders,winhttp.dll,ror13AddHash32AddDll 450 | 0x050B12C0,WinHttpQueryHeaders,winhttp.dll,mult21AddHash32 451 | 0x92711678,WinHttpQueryHeaders,winhttp.dll,poisonIvyHash 452 | 0x389CEFA5,WinHttpQueryHeaders,winhttp.dll,add1505Shl5Hash32 453 | 0xACF293EA,WinHttpQueryHeaders,winhttp.dll,crc32 454 | 0x92D1FB55,WinHttpQueryHeaders,winhttp.dll,ror7AddHash32 455 | 0xBD429E01,WinHttpQueryHeaders,winhttp.dll,hash_ror13AddUpperDllnameHash32 456 | 0x5AE83794,WinHttpQueryHeaders,winhttp.dll,rol7AddXor2Hash32 457 | 0xDBAA7C59,WinHttpQueryHeaders,winhttp.dll,ror13AddWithNullHash32 458 | 0x437AA4F0,WinHttpQueryHeaders,winhttp.dll,fnv1Xor67f 459 | 0x663D2E57,WinHttpQueryHeaders,winhttp.dll,addRor4WithNullHash32 460 | 0x4B6C07A1,WinHttpQueryHeaders,winhttp.dll,dualaccModFFF1Hash 461 | 0xAB07FCBF,WinHttpQueryOption,winhttp.dll,ror11AddHash32 462 | 0x67D858C8,WinHttpQueryOption,winhttp.dll,rol7XorHash32 463 | 0x04DF3D7E,WinHttpQueryOption,winhttp.dll,hash_Carbanak 464 | 0x0DB0FB30,WinHttpQueryOption,winhttp.dll,ror13AddHash32Sub1 465 | 0xC7B8500B,WinHttpQueryOption,winhttp.dll,rol7AddHash32 466 | 0x03898B60,WinHttpQueryOption,winhttp.dll,sll1AddHash32 467 | 0x82FB94C8,WinHttpQueryOption,winhttp.dll,ror9AddHash32 468 | 0x0DB0FB31,WinHttpQueryOption,winhttp.dll,ror13AddHash32 469 | 0xF16D9338,WinHttpQueryOption,winhttp.dll,rol3XorEax 470 | 0x69DB3DEC,WinHttpQueryOption,winhttp.dll,rol5AddHash32 471 | 0x1925A33E,WinHttpQueryOption,winhttp.dll,shl7shr19Hash32 472 | 0x272F0478,WinHttpQueryOption,winhttp.dll,ror13AddHash32AddDll 473 | 0xE2C1285D,WinHttpQueryOption,winhttp.dll,mult21AddHash32 474 | 0x42C8066E,WinHttpQueryOption,winhttp.dll,poisonIvyHash 475 | 0x41687CA2,WinHttpQueryOption,winhttp.dll,add1505Shl5Hash32 476 | 0x75F4720F,WinHttpQueryOption,winhttp.dll,crc32 477 | 0x5D1209F6,WinHttpQueryOption,winhttp.dll,ror7AddHash32 478 | 0x7B685DBD,WinHttpQueryOption,winhttp.dll,hash_ror13AddUpperDllnameHash32 479 | 0xF9171382,WinHttpQueryOption,winhttp.dll,rol7AddXor2Hash32 480 | 0xD9886D87,WinHttpQueryOption,winhttp.dll,ror13AddWithNullHash32 481 | 0x864D0805,WinHttpQueryOption,winhttp.dll,fnv1Xor67f 482 | 0x306920EF,WinHttpQueryOption,winhttp.dll,addRor4WithNullHash32 483 | 0x4497075E,WinHttpQueryOption,winhttp.dll,dualaccModFFF1Hash 484 | 0xB9F4F071,WinHttpReadData,winhttp.dll,ror11AddHash32 485 | 0x76D4F10A,WinHttpReadData,winhttp.dll,rol7XorHash32 486 | 0x09834321,WinHttpReadData,winhttp.dll,hash_Carbanak 487 | 0xB24F660E,WinHttpReadData,winhttp.dll,ror13AddHash32Sub1 488 | 0x08273009,WinHttpReadData,winhttp.dll,rol7AddHash32 489 | 0x0071251A,WinHttpReadData,winhttp.dll,sll1AddHash32 490 | 0xF43F43F0,WinHttpReadData,winhttp.dll,ror9AddHash32 491 | 0xB24F660F,WinHttpReadData,winhttp.dll,ror13AddHash32 492 | 0xB76EC420,WinHttpReadData,winhttp.dll,rol3XorEax 493 | 0x0E429C24,WinHttpReadData,winhttp.dll,rol5AddHash32 494 | 0x72DCE2FC,WinHttpReadData,winhttp.dll,shl7shr19Hash32 495 | 0x7E24296C,WinHttpReadData,winhttp.dll,ror13AddHash32AddDll 496 | 0xD870B284,WinHttpReadData,winhttp.dll,mult21AddHash32 497 | 0xA99D9672,WinHttpReadData,winhttp.dll,poisonIvyHash 498 | 0x7195E4E9,WinHttpReadData,winhttp.dll,add1505Shl5Hash32 499 | 0x2E5251CA,WinHttpReadData,winhttp.dll,crc32 500 | 0xB53684CD,WinHttpReadData,winhttp.dll,ror7AddHash32 501 | 0x2006C89B,WinHttpReadData,winhttp.dll,hash_ror13AddUpperDllnameHash32 502 | 0x3A43F994,WinHttpReadData,winhttp.dll,rol7AddXor2Hash32 503 | 0x307D927B,WinHttpReadData,winhttp.dll,ror13AddWithNullHash32 504 | 0x943A5756,WinHttpReadData,winhttp.dll,fnv1Xor67f 505 | 0xFF5D9E61,WinHttpReadData,winhttp.dll,addRor4WithNullHash32 506 | 0x2E5905C5,WinHttpReadData,winhttp.dll,dualaccModFFF1Hash 507 | 0x190C5FE0,WinHttpReceiveResponse,winhttp.dll,ror11AddHash32 508 | 0x7EA8E898,WinHttpReceiveResponse,winhttp.dll,rol7XorHash32 509 | 0x0AB93785,WinHttpReceiveResponse,winhttp.dll,hash_Carbanak 510 | 0xDE22845D,WinHttpReceiveResponse,winhttp.dll,ror13AddHash32Sub1 511 | 0xDF118B1C,WinHttpReceiveResponse,winhttp.dll,rol7AddHash32 512 | 0x3893B636,WinHttpReceiveResponse,winhttp.dll,sll1AddHash32 513 | 0x36DE3350,WinHttpReceiveResponse,winhttp.dll,ror9AddHash32 514 | 0xDE22845E,WinHttpReceiveResponse,winhttp.dll,ror13AddHash32 515 | 0xAFDA35A1,WinHttpReceiveResponse,winhttp.dll,rol3XorEax 516 | 0xC064B887,WinHttpReceiveResponse,winhttp.dll,rol5AddHash32 517 | 0x07FA4DD3,WinHttpReceiveResponse,winhttp.dll,shl7shr19Hash32 518 | 0x709D8805,WinHttpReceiveResponse,winhttp.dll,ror13AddHash32AddDll 519 | 0xC55A5A60,WinHttpReceiveResponse,winhttp.dll,mult21AddHash32 520 | 0x16251E54,WinHttpReceiveResponse,winhttp.dll,poisonIvyHash 521 | 0x146C4925,WinHttpReceiveResponse,winhttp.dll,add1505Shl5Hash32 522 | 0x46BB61F9,WinHttpReceiveResponse,winhttp.dll,crc32 523 | 0x3762EB3A,WinHttpReceiveResponse,winhttp.dll,ror7AddHash32 524 | 0x4BD9E6EA,WinHttpReceiveResponse,winhttp.dll,hash_ror13AddUpperDllnameHash32 525 | 0x919F7646,WinHttpReceiveResponse,winhttp.dll,rol7AddXor2Hash32 526 | 0x22F6F114,WinHttpReceiveResponse,winhttp.dll,ror13AddWithNullHash32 527 | 0xEC3C865E,WinHttpReceiveResponse,winhttp.dll,fnv1Xor67f 528 | 0x64E35FB3,WinHttpReceiveResponse,winhttp.dll,addRor4WithNullHash32 529 | 0x644208E1,WinHttpReceiveResponse,winhttp.dll,dualaccModFFF1Hash 530 | 0x6B3021BA,WinHttpSendRequest,winhttp.dll,ror11AddHash32 531 | 0x7CD7FB0A,WinHttpSendRequest,winhttp.dll,rol7XorHash32 532 | 0x06711784,WinHttpSendRequest,winhttp.dll,hash_Carbanak 533 | 0x98348881,WinHttpSendRequest,winhttp.dll,ror13AddHash32Sub1 534 | 0xE0BAB739,WinHttpSendRequest,winhttp.dll,rol7AddHash32 535 | 0x0389598C,WinHttpSendRequest,winhttp.dll,sll1AddHash32 536 | 0x9EA1F952,WinHttpSendRequest,winhttp.dll,ror9AddHash32 537 | 0x98348882,WinHttpSendRequest,winhttp.dll,ror13AddHash32 538 | 0xA994E026,WinHttpSendRequest,winhttp.dll,rol3XorEax 539 | 0xD5F1B6F8,WinHttpSendRequest,winhttp.dll,rol5AddHash32 540 | 0x022A00FC,WinHttpSendRequest,winhttp.dll,shl7shr19Hash32 541 | 0x91BB5895,WinHttpSendRequest,winhttp.dll,ror13AddHash32AddDll 542 | 0x52DCA661,WinHttpSendRequest,winhttp.dll,mult21AddHash32 543 | 0xF1156186,WinHttpSendRequest,winhttp.dll,poisonIvyHash 544 | 0xB183FAA6,WinHttpSendRequest,winhttp.dll,add1505Shl5Hash32 545 | 0xCEE9B4F7,WinHttpSendRequest,winhttp.dll,crc32 546 | 0x233B1AEF,WinHttpSendRequest,winhttp.dll,ror7AddHash32 547 | 0x05EBEB0E,WinHttpSendRequest,winhttp.dll,hash_ror13AddUpperDllnameHash32 548 | 0x0E2169D5,WinHttpSendRequest,winhttp.dll,rol7AddXor2Hash32 549 | 0x4414C1A4,WinHttpSendRequest,winhttp.dll,ror13AddWithNullHash32 550 | 0xE0CFB31B,WinHttpSendRequest,winhttp.dll,fnv1Xor67f 551 | 0x6EA73327,WinHttpSendRequest,winhttp.dll,addRor4WithNullHash32 552 | 0x436C0742,WinHttpSendRequest,winhttp.dll,dualaccModFFF1Hash 553 | 0xC23DAA4A,WinHttpSetCredentials,winhttp.dll,ror11AddHash32 554 | 0x12DEE504,WinHttpSetCredentials,winhttp.dll,rol7XorHash32 555 | 0x062B9803,WinHttpSetCredentials,winhttp.dll,hash_Carbanak 556 | 0x325D901F,WinHttpSetCredentials,winhttp.dll,ror13AddHash32Sub1 557 | 0xF5DB05E1,WinHttpSetCredentials,winhttp.dll,rol7AddHash32 558 | 0x1C4B16AE,WinHttpSetCredentials,winhttp.dll,sll1AddHash32 559 | 0xDAAF210D,WinHttpSetCredentials,winhttp.dll,ror9AddHash32 560 | 0x325D9020,WinHttpSetCredentials,winhttp.dll,ror13AddHash32 561 | 0xD2238D2A,WinHttpSetCredentials,winhttp.dll,rol3XorEax 562 | 0xF0087C7F,WinHttpSetCredentials,winhttp.dll,rol5AddHash32 563 | 0x6C2C404F,WinHttpSetCredentials,winhttp.dll,shl7shr19Hash32 564 | 0xCEA829DD,WinHttpSetCredentials,winhttp.dll,ror13AddHash32AddDll 565 | 0xCCBB9B48,WinHttpSetCredentials,winhttp.dll,mult21AddHash32 566 | 0xB474F4F3,WinHttpSetCredentials,winhttp.dll,poisonIvyHash 567 | 0x2C38456D,WinHttpSetCredentials,winhttp.dll,add1505Shl5Hash32 568 | 0x7020B4DA,WinHttpSetCredentials,winhttp.dll,crc32 569 | 0x4A84A1DE,WinHttpSetCredentials,winhttp.dll,ror7AddHash32 570 | 0xA014F2AC,WinHttpSetCredentials,winhttp.dll,hash_ror13AddUpperDllnameHash32 571 | 0x8941B296,WinHttpSetCredentials,winhttp.dll,rol7AddXor2Hash32 572 | 0x810192EC,WinHttpSetCredentials,winhttp.dll,ror13AddWithNullHash32 573 | 0x695C7F70,WinHttpSetCredentials,winhttp.dll,fnv1Xor67f 574 | 0xDE759BF2,WinHttpSetCredentials,winhttp.dll,addRor4WithNullHash32 575 | 0x5AF40869,WinHttpSetCredentials,winhttp.dll,dualaccModFFF1Hash 576 | 0xEC4FFABE,WinHttpSetDefaultProxyConfiguration,winhttp.dll,ror11AddHash32 577 | 0xE0A9CE9A,WinHttpSetDefaultProxyConfiguration,winhttp.dll,rol7XorHash32 578 | 0x0EFC1A2E,WinHttpSetDefaultProxyConfiguration,winhttp.dll,hash_Carbanak 579 | 0xE8637D19,WinHttpSetDefaultProxyConfiguration,winhttp.dll,ror13AddHash32Sub1 580 | 0x238E697D,WinHttpSetDefaultProxyConfiguration,winhttp.dll,rol7AddHash32 581 | 0xBCC74140,WinHttpSetDefaultProxyConfiguration,winhttp.dll,sll1AddHash32 582 | 0x0D078004,WinHttpSetDefaultProxyConfiguration,winhttp.dll,ror9AddHash32 583 | 0xE8637D1A,WinHttpSetDefaultProxyConfiguration,winhttp.dll,ror13AddHash32 584 | 0xA7531942,WinHttpSetDefaultProxyConfiguration,winhttp.dll,rol3XorEax 585 | 0x933953D5,WinHttpSetDefaultProxyConfiguration,winhttp.dll,rol5AddHash32 586 | 0x1F6B4B91,WinHttpSetDefaultProxyConfiguration,winhttp.dll,shl7shr19Hash32 587 | 0x367DDA0C,WinHttpSetDefaultProxyConfiguration,winhttp.dll,ror13AddHash32AddDll 588 | 0x0B81CA59,WinHttpSetDefaultProxyConfiguration,winhttp.dll,mult21AddHash32 589 | 0x96792A84,WinHttpSetDefaultProxyConfiguration,winhttp.dll,poisonIvyHash 590 | 0xDC32D13E,WinHttpSetDefaultProxyConfiguration,winhttp.dll,add1505Shl5Hash32 591 | 0x7FE87A6C,WinHttpSetDefaultProxyConfiguration,winhttp.dll,crc32 592 | 0x3EC9662D,WinHttpSetDefaultProxyConfiguration,winhttp.dll,ror7AddHash32 593 | 0x561ADFA6,WinHttpSetDefaultProxyConfiguration,winhttp.dll,hash_ror13AddUpperDllnameHash32 594 | 0x93415F54,WinHttpSetDefaultProxyConfiguration,winhttp.dll,rol7AddXor2Hash32 595 | 0xE8D7431B,WinHttpSetDefaultProxyConfiguration,winhttp.dll,ror13AddWithNullHash32 596 | 0xD0634F15,WinHttpSetDefaultProxyConfiguration,winhttp.dll,fnv1Xor67f 597 | 0x3A30B5DE,WinHttpSetDefaultProxyConfiguration,winhttp.dll,addRor4WithNullHash32 598 | 0xFB5D0E3A,WinHttpSetDefaultProxyConfiguration,winhttp.dll,dualaccModFFF1Hash 599 | 0x52B6EA1A,WinHttpSetOption,winhttp.dll,ror11AddHash32 600 | 0x29DF970E,WinHttpSetOption,winhttp.dll,rol7XorHash32 601 | 0x08D917BE,WinHttpSetOption,winhttp.dll,hash_Carbanak 602 | 0xD83C501D,WinHttpSetOption,winhttp.dll,ror13AddHash32Sub1 603 | 0xD6F5974C,WinHttpSetOption,winhttp.dll,rol7AddHash32 604 | 0x00E25BE0,WinHttpSetOption,winhttp.dll,sll1AddHash32 605 | 0xBFCFAE72,WinHttpSetOption,winhttp.dll,ror9AddHash32 606 | 0xD83C501E,WinHttpSetOption,winhttp.dll,ror13AddHash32 607 | 0x0D876F15,WinHttpSetOption,winhttp.dll,rol3XorEax 608 | 0x611CDBB4,WinHttpSetOption,winhttp.dll,rol5AddHash32 609 | 0x2DD66CF8,WinHttpSetOption,winhttp.dll,shl7shr19Hash32 610 | 0xCE9D58D3,WinHttpSetOption,winhttp.dll,ror13AddHash32AddDll 611 | 0xE3C015F3,WinHttpSetOption,winhttp.dll,mult21AddHash32 612 | 0x1EFBE234,WinHttpSetOption,winhttp.dll,poisonIvyHash 613 | 0xA18B94F8,WinHttpSetOption,winhttp.dll,add1505Shl5Hash32 614 | 0xF57A2CB4,WinHttpSetOption,winhttp.dll,crc32 615 | 0x1BFF0935,WinHttpSetOption,winhttp.dll,ror7AddHash32 616 | 0x45F3B2AA,WinHttpSetOption,winhttp.dll,hash_ror13AddUpperDllnameHash32 617 | 0xE55A5AC3,WinHttpSetOption,winhttp.dll,rol7AddXor2Hash32 618 | 0x80F6C1E2,WinHttpSetOption,winhttp.dll,ror13AddWithNullHash32 619 | 0xA64F4485,WinHttpSetOption,winhttp.dll,fnv1Xor67f 620 | 0x7FCC34A9,WinHttpSetOption,winhttp.dll,addRor4WithNullHash32 621 | 0x35BF0674,WinHttpSetOption,winhttp.dll,dualaccModFFF1Hash 622 | 0x0C587288,WinHttpSetStatusCallback,winhttp.dll,ror11AddHash32 623 | 0x3FB48E57,WinHttpSetStatusCallback,winhttp.dll,rol7XorHash32 624 | 0x0420A61B,WinHttpSetStatusCallback,winhttp.dll,hash_Carbanak 625 | 0xAE554DD3,WinHttpSetStatusCallback,winhttp.dll,ror13AddHash32Sub1 626 | 0x3EF491AC,WinHttpSetStatusCallback,winhttp.dll,rol7AddHash32 627 | 0xE25D718A,WinHttpSetStatusCallback,winhttp.dll,sll1AddHash32 628 | 0x0CFCC3A4,WinHttpSetStatusCallback,winhttp.dll,ror9AddHash32 629 | 0xAE554DD4,WinHttpSetStatusCallback,winhttp.dll,ror13AddHash32 630 | 0x7C3632B4,WinHttpSetStatusCallback,winhttp.dll,rol3XorEax 631 | 0x727B0C65,WinHttpSetStatusCallback,winhttp.dll,rol5AddHash32 632 | 0x96E62AF7,WinHttpSetStatusCallback,winhttp.dll,shl7shr19Hash32 633 | 0xBC4C099B,WinHttpSetStatusCallback,winhttp.dll,ror13AddHash32AddDll 634 | 0x110D7A2B,WinHttpSetStatusCallback,winhttp.dll,mult21AddHash32 635 | 0x893C269C,WinHttpSetStatusCallback,winhttp.dll,poisonIvyHash 636 | 0x6C562E30,WinHttpSetStatusCallback,winhttp.dll,add1505Shl5Hash32 637 | 0xE0670CBF,WinHttpSetStatusCallback,winhttp.dll,crc32 638 | 0x8A5A11E1,WinHttpSetStatusCallback,winhttp.dll,ror7AddHash32 639 | 0x1C0CB060,WinHttpSetStatusCallback,winhttp.dll,hash_ror13AddUpperDllnameHash32 640 | 0xD5BF7D7F,WinHttpSetStatusCallback,winhttp.dll,rol7AddXor2Hash32 641 | 0x6EA572AA,WinHttpSetStatusCallback,winhttp.dll,ror13AddWithNullHash32 642 | 0x099C58D5,WinHttpSetStatusCallback,winhttp.dll,fnv1Xor67f 643 | 0x26CD9B0E,WinHttpSetStatusCallback,winhttp.dll,addRor4WithNullHash32 644 | 0x7708098C,WinHttpSetStatusCallback,winhttp.dll,dualaccModFFF1Hash 645 | 0x2A1077BC,WinHttpSetTimeouts,winhttp.dll,ror11AddHash32 646 | 0x25F314CC,WinHttpSetTimeouts,winhttp.dll,rol7XorHash32 647 | 0x02838AA3,WinHttpSetTimeouts,winhttp.dll,hash_Carbanak 648 | 0x9297CA84,WinHttpSetTimeouts,winhttp.dll,ror13AddHash32Sub1 649 | 0x25DF13F8,WinHttpSetTimeouts,winhttp.dll,rol7AddHash32 650 | 0x038971AE,WinHttpSetTimeouts,winhttp.dll,sll1AddHash32 651 | 0xE5665470,WinHttpSetTimeouts,winhttp.dll,ror9AddHash32 652 | 0x9297CA85,WinHttpSetTimeouts,winhttp.dll,ror13AddHash32 653 | 0x59AF093A,WinHttpSetTimeouts,winhttp.dll,rol3XorEax 654 | 0xA52EFC9D,WinHttpSetTimeouts,winhttp.dll,rol5AddHash32 655 | 0x5B0EEF3A,WinHttpSetTimeouts,winhttp.dll,shl7shr19Hash32 656 | 0xA1D32BAF,WinHttpSetTimeouts,winhttp.dll,ror13AddHash32AddDll 657 | 0x45F28C94,WinHttpSetTimeouts,winhttp.dll,mult21AddHash32 658 | 0xACE0A94A,WinHttpSetTimeouts,winhttp.dll,poisonIvyHash 659 | 0xA499E0D9,WinHttpSetTimeouts,winhttp.dll,add1505Shl5Hash32 660 | 0x533A7A0D,WinHttpSetTimeouts,winhttp.dll,crc32 661 | 0x2B32F02F,WinHttpSetTimeouts,winhttp.dll,ror7AddHash32 662 | 0x004F2D11,WinHttpSetTimeouts,winhttp.dll,hash_ror13AddUpperDllnameHash32 663 | 0x56C5D88F,WinHttpSetTimeouts,winhttp.dll,rol7AddXor2Hash32 664 | 0x542C94BE,WinHttpSetTimeouts,winhttp.dll,ror13AddWithNullHash32 665 | 0xC1F33BDC,WinHttpSetTimeouts,winhttp.dll,fnv1Xor67f 666 | 0x63C6C7BD,WinHttpSetTimeouts,winhttp.dll,addRor4WithNullHash32 667 | 0x43D00755,WinHttpSetTimeouts,winhttp.dll,dualaccModFFF1Hash 668 | 0xAA09CD8B,WinHttpTimeFromSystemTime,winhttp.dll,ror11AddHash32 669 | 0x847E9C7B,WinHttpTimeFromSystemTime,winhttp.dll,rol7XorHash32 670 | 0x0FCEDEA5,WinHttpTimeFromSystemTime,winhttp.dll,hash_Carbanak 671 | 0x13CF6FE0,WinHttpTimeFromSystemTime,winhttp.dll,ror13AddHash32Sub1 672 | 0xF061C783,WinHttpTimeFromSystemTime,winhttp.dll,rol7AddHash32 673 | 0xC4B736E6,WinHttpTimeFromSystemTime,winhttp.dll,sll1AddHash32 674 | 0x0BD2AC13,WinHttpTimeFromSystemTime,winhttp.dll,ror9AddHash32 675 | 0x13CF6FE1,WinHttpTimeFromSystemTime,winhttp.dll,ror13AddHash32 676 | 0x3F5E70E5,WinHttpTimeFromSystemTime,winhttp.dll,rol3XorEax 677 | 0x4F8B280A,WinHttpTimeFromSystemTime,winhttp.dll,rol5AddHash32 678 | 0x2D2CCCDB,WinHttpTimeFromSystemTime,winhttp.dll,shl7shr19Hash32 679 | 0xCCAF356C,WinHttpTimeFromSystemTime,winhttp.dll,ror13AddHash32AddDll 680 | 0x17B75C25,WinHttpTimeFromSystemTime,winhttp.dll,mult21AddHash32 681 | 0x24235A25,WinHttpTimeFromSystemTime,winhttp.dll,poisonIvyHash 682 | 0xDC1690CA,WinHttpTimeFromSystemTime,winhttp.dll,add1505Shl5Hash32 683 | 0x9893F3D5,WinHttpTimeFromSystemTime,winhttp.dll,crc32 684 | 0x45928F3C,WinHttpTimeFromSystemTime,winhttp.dll,ror7AddHash32 685 | 0x8186D26D,WinHttpTimeFromSystemTime,winhttp.dll,hash_ror13AddUpperDllnameHash32 686 | 0x7B903361,WinHttpTimeFromSystemTime,winhttp.dll,rol7AddXor2Hash32 687 | 0x7F089E7B,WinHttpTimeFromSystemTime,winhttp.dll,ror13AddWithNullHash32 688 | 0x1C73FE47,WinHttpTimeFromSystemTime,winhttp.dll,fnv1Xor67f 689 | 0x3F89C18B,WinHttpTimeFromSystemTime,winhttp.dll,addRor4WithNullHash32 690 | 0x810F0A06,WinHttpTimeFromSystemTime,winhttp.dll,dualaccModFFF1Hash 691 | 0x0D4B0162,WinHttpTimeToSystemTime,winhttp.dll,ror11AddHash32 692 | 0x28197E99,WinHttpTimeToSystemTime,winhttp.dll,rol7XorHash32 693 | 0x0BFDB255,WinHttpTimeToSystemTime,winhttp.dll,hash_Carbanak 694 | 0x1B1050B1,WinHttpTimeToSystemTime,winhttp.dll,ror13AddHash32Sub1 695 | 0xDC9C78C3,WinHttpTimeToSystemTime,winhttp.dll,rol7AddHash32 696 | 0x712EB6E6,WinHttpTimeToSystemTime,winhttp.dll,sll1AddHash32 697 | 0x16B83EA8,WinHttpTimeToSystemTime,winhttp.dll,ror9AddHash32 698 | 0x1B1050B2,WinHttpTimeToSystemTime,winhttp.dll,ror13AddHash32 699 | 0xDEC62EC9,WinHttpTimeToSystemTime,winhttp.dll,rol3XorEax 700 | 0x2BCBE2E1,WinHttpTimeToSystemTime,winhttp.dll,rol5AddHash32 701 | 0x814BDBD1,WinHttpTimeToSystemTime,winhttp.dll,shl7shr19Hash32 702 | 0xD3376F73,WinHttpTimeToSystemTime,winhttp.dll,ror13AddHash32AddDll 703 | 0x521FD4B4,WinHttpTimeToSystemTime,winhttp.dll,mult21AddHash32 704 | 0x9A6CF989,WinHttpTimeToSystemTime,winhttp.dll,poisonIvyHash 705 | 0x836F9C19,WinHttpTimeToSystemTime,winhttp.dll,add1505Shl5Hash32 706 | 0xDC204FA7,WinHttpTimeToSystemTime,winhttp.dll,crc32 707 | 0x08E51E37,WinHttpTimeToSystemTime,winhttp.dll,ror7AddHash32 708 | 0x88C7B33E,WinHttpTimeToSystemTime,winhttp.dll,hash_ror13AddUpperDllnameHash32 709 | 0x880B259D,WinHttpTimeToSystemTime,winhttp.dll,rol7AddXor2Hash32 710 | 0x8590D882,WinHttpTimeToSystemTime,winhttp.dll,ror13AddWithNullHash32 711 | 0xE15BD60E,WinHttpTimeToSystemTime,winhttp.dll,fnv1Xor67f 712 | 0xD18A53F0,WinHttpTimeToSystemTime,winhttp.dll,addRor4WithNullHash32 713 | 0x6D870935,WinHttpTimeToSystemTime,winhttp.dll,dualaccModFFF1Hash 714 | 0x930F17F2,WinHttpWriteData,winhttp.dll,ror11AddHash32 715 | 0x7BF3EF58,WinHttpWriteData,winhttp.dll,rol7XorHash32 716 | 0x0F171611,WinHttpWriteData,winhttp.dll,hash_Carbanak 717 | 0xFC379FC2,WinHttpWriteData,winhttp.dll,ror13AddHash32Sub1 718 | 0x250D6EE7,WinHttpWriteData,winhttp.dll,rol7AddHash32 719 | 0x00E269FA,WinHttpWriteData,winhttp.dll,sll1AddHash32 720 | 0x17757C7F,WinHttpWriteData,winhttp.dll,ror9AddHash32 721 | 0xFC379FC3,WinHttpWriteData,winhttp.dll,ror13AddHash32 722 | 0x67301FFA,WinHttpWriteData,winhttp.dll,rol3XorEax 723 | 0xEA54C0AC,WinHttpWriteData,winhttp.dll,rol5AddHash32 724 | 0x7FFA14AE,WinHttpWriteData,winhttp.dll,shl7shr19Hash32 725 | 0x4BC678AD,WinHttpWriteData,winhttp.dll,ror13AddHash32AddDll 726 | 0xBBB66B33,WinHttpWriteData,winhttp.dll,mult21AddHash32 727 | 0x320EEBBB,WinHttpWriteData,winhttp.dll,poisonIvyHash 728 | 0x7981EA38,WinHttpWriteData,winhttp.dll,add1505Shl5Hash32 729 | 0xD9ED280A,WinHttpWriteData,winhttp.dll,crc32 730 | 0xC3240C7C,WinHttpWriteData,winhttp.dll,ror7AddHash32 731 | 0x69EF024F,WinHttpWriteData,winhttp.dll,hash_ror13AddUpperDllnameHash32 732 | 0x336A3482,WinHttpWriteData,winhttp.dll,rol7AddXor2Hash32 733 | 0xFE1FE1BC,WinHttpWriteData,winhttp.dll,ror13AddWithNullHash32 734 | 0xB92BF197,WinHttpWriteData,winhttp.dll,fnv1Xor67f 735 | 0x47112BEE,WinHttpWriteData,winhttp.dll,addRor4WithNullHash32 736 | 0x35CA0654,WinHttpWriteData,winhttp.dll,dualaccModFFF1Hash 737 | -------------------------------------------------------------------------------- /hashes/wship6.dll.txt: -------------------------------------------------------------------------------- 1 | 0xBA5211F2,WSHAddressToString,wship6.dll,ror11AddHash32 2 | 0xB06E0186,WSHAddressToString,wship6.dll,rol7XorHash32 3 | 0x0AE0E157,WSHAddressToString,wship6.dll,hash_Carbanak 4 | 0x4F6F0A6B,WSHAddressToString,wship6.dll,ror13AddHash32Sub1 5 | 0x94262087,WSHAddressToString,wship6.dll,rol7AddHash32 6 | 0x038DDDAE,WSHAddressToString,wship6.dll,sll1AddHash32 7 | 0xC383F129,WSHAddressToString,wship6.dll,ror9AddHash32 8 | 0x4F6F0A6C,WSHAddressToString,wship6.dll,ror13AddHash32 9 | 0x5C9ACB7C,WSHAddressToString,wship6.dll,rol3XorEax 10 | 0xF352D8F1,WSHAddressToString,wship6.dll,rol5AddHash32 11 | 0xCE93FA70,WSHAddressToString,wship6.dll,shl7shr19Hash32 12 | 0x33FC1C67,WSHAddressToString,wship6.dll,ror13AddHash32AddDll 13 | 0xCF3873D2,WSHAddressToString,wship6.dll,mult21AddHash32 14 | 0xCF72DFED,WSHAddressToString,wship6.dll,poisonIvyHash 15 | 0x2DDFC817,WSHAddressToString,wship6.dll,add1505Shl5Hash32 16 | 0xC7200410,WSHAddressToString,wship6.dll,crc32 17 | 0x557C062A,WSHAddressToString,wship6.dll,ror7AddHash32 18 | 0x01F93CE0,WSHAddressToString,wship6.dll,hash_ror13AddUpperDllnameHash32 19 | 0xC1085BFC,WSHAddressToString,wship6.dll,rol7AddXor2Hash32 20 | 0x53627B78,WSHAddressToString,wship6.dll,ror13AddWithNullHash32 21 | 0xB25673A0,WSHAddressToString,wship6.dll,fnv1Xor67f 22 | 0xF14D1429,WSHAddressToString,wship6.dll,addRor4WithNullHash32 23 | 0x3EEB06F3,WSHAddressToString,wship6.dll,dualaccModFFF1Hash 24 | 0x02674095,WSHEnumProtocols,wship6.dll,ror11AddHash32 25 | 0x68C33BED,WSHEnumProtocols,wship6.dll,rol7XorHash32 26 | 0x0B0A8663,WSHEnumProtocols,wship6.dll,hash_Carbanak 27 | 0x6003D325,WSHEnumProtocols,wship6.dll,ror13AddHash32Sub1 28 | 0x11C042DF,WSHEnumProtocols,wship6.dll,rol7AddHash32 29 | 0x00E51C9E,WSHEnumProtocols,wship6.dll,sll1AddHash32 30 | 0xEC466858,WSHEnumProtocols,wship6.dll,ror9AddHash32 31 | 0x6003D326,WSHEnumProtocols,wship6.dll,ror13AddHash32 32 | 0x32B8037E,WSHEnumProtocols,wship6.dll,rol3XorEax 33 | 0x38080AF4,WSHEnumProtocols,wship6.dll,rol5AddHash32 34 | 0x6CCAC01B,WSHEnumProtocols,wship6.dll,shl7shr19Hash32 35 | 0x79CCA10D,WSHEnumProtocols,wship6.dll,ror13AddHash32AddDll 36 | 0xECB2A8AC,WSHEnumProtocols,wship6.dll,mult21AddHash32 37 | 0x2628BCB8,WSHEnumProtocols,wship6.dll,poisonIvyHash 38 | 0xAA7E27B1,WSHEnumProtocols,wship6.dll,add1505Shl5Hash32 39 | 0xFEE66416,WSHEnumProtocols,wship6.dll,crc32 40 | 0x38ACC963,WSHEnumProtocols,wship6.dll,ror7AddHash32 41 | 0x128E059A,WSHEnumProtocols,wship6.dll,hash_ror13AddUpperDllnameHash32 42 | 0x039B7866,WSHEnumProtocols,wship6.dll,rol7AddXor2Hash32 43 | 0x9933001E,WSHEnumProtocols,wship6.dll,ror13AddWithNullHash32 44 | 0xA3736ACA,WSHEnumProtocols,wship6.dll,fnv1Xor67f 45 | 0x6171BF8E,WSHEnumProtocols,wship6.dll,addRor4WithNullHash32 46 | 0x32AF064D,WSHEnumProtocols,wship6.dll,dualaccModFFF1Hash 47 | 0xFA705957,WSHGetProviderGuid,wship6.dll,ror11AddHash32 48 | 0xDAB76A63,WSHGetProviderGuid,wship6.dll,rol7XorHash32 49 | 0x06064AC4,WSHGetProviderGuid,wship6.dll,hash_Carbanak 50 | 0x3C56E914,WSHGetProviderGuid,wship6.dll,ror13AddHash32Sub1 51 | 0x7AEEB5EA,WSHGetProviderGuid,wship6.dll,rol7AddHash32 52 | 0x03934704,WSHGetProviderGuid,wship6.dll,sll1AddHash32 53 | 0x6594CB44,WSHGetProviderGuid,wship6.dll,ror9AddHash32 54 | 0x3C56E915,WSHGetProviderGuid,wship6.dll,ror13AddHash32 55 | 0xF37CF3C7,WSHGetProviderGuid,wship6.dll,rol3XorEax 56 | 0x46510D77,WSHGetProviderGuid,wship6.dll,rol5AddHash32 57 | 0xA44A9195,WSHGetProviderGuid,wship6.dll,shl7shr19Hash32 58 | 0x294383A6,WSHGetProviderGuid,wship6.dll,ror13AddHash32AddDll 59 | 0xA32AD686,WSHGetProviderGuid,wship6.dll,mult21AddHash32 60 | 0x685FE439,WSHGetProviderGuid,wship6.dll,poisonIvyHash 61 | 0x01D22ACB,WSHGetProviderGuid,wship6.dll,add1505Shl5Hash32 62 | 0x8D3DB1F4,WSHGetProviderGuid,wship6.dll,crc32 63 | 0x3BE63123,WSHGetProviderGuid,wship6.dll,ror7AddHash32 64 | 0xEEE11B89,WSHGetProviderGuid,wship6.dll,hash_ror13AddUpperDllnameHash32 65 | 0x67D18273,WSHGetProviderGuid,wship6.dll,rol7AddXor2Hash32 66 | 0x48A9E2B7,WSHGetProviderGuid,wship6.dll,ror13AddWithNullHash32 67 | 0xA2916BF0,WSHGetProviderGuid,wship6.dll,fnv1Xor67f 68 | 0x4FE15345,WSHGetProviderGuid,wship6.dll,addRor4WithNullHash32 69 | 0x3F3506E7,WSHGetProviderGuid,wship6.dll,dualaccModFFF1Hash 70 | 0xFB045DDD,WSHGetSockaddrType,wship6.dll,ror11AddHash32 71 | 0xC5C401AC,WSHGetSockaddrType,wship6.dll,rol7XorHash32 72 | 0x06D5ECD5,WSHGetSockaddrType,wship6.dll,hash_Carbanak 73 | 0x0B948914,WSHGetSockaddrType,wship6.dll,ror13AddHash32Sub1 74 | 0x7180189D,WSHGetSockaddrType,wship6.dll,rol7AddHash32 75 | 0x039311D2,WSHGetSockaddrType,wship6.dll,sll1AddHash32 76 | 0xBE07CC15,WSHGetSockaddrType,wship6.dll,ror9AddHash32 77 | 0x0B948915,WSHGetSockaddrType,wship6.dll,ror13AddHash32 78 | 0x9F61AE1A,WSHGetSockaddrType,wship6.dll,rol3XorEax 79 | 0x45CA1318,WSHGetSockaddrType,wship6.dll,rol5AddHash32 80 | 0xBB39FA5A,WSHGetSockaddrType,wship6.dll,shl7shr19Hash32 81 | 0x2941FD93,WSHGetSockaddrType,wship6.dll,ror13AddHash32AddDll 82 | 0x0FBA897F,WSHGetSockaddrType,wship6.dll,mult21AddHash32 83 | 0xE5BDAE82,WSHGetSockaddrType,wship6.dll,poisonIvyHash 84 | 0x6E61DDC4,WSHGetSockaddrType,wship6.dll,add1505Shl5Hash32 85 | 0x677AFFEB,WSHGetSockaddrType,wship6.dll,crc32 86 | 0x1E0A8E0C,WSHGetSockaddrType,wship6.dll,ror7AddHash32 87 | 0xBE1EBB89,WSHGetSockaddrType,wship6.dll,hash_ror13AddUpperDllnameHash32 88 | 0x5EE26526,WSHGetSockaddrType,wship6.dll,rol7AddXor2Hash32 89 | 0x48A85CA4,WSHGetSockaddrType,wship6.dll,ror13AddWithNullHash32 90 | 0x15DF701F,WSHGetSockaddrType,wship6.dll,fnv1Xor67f 91 | 0xB6925335,WSHGetSockaddrType,wship6.dll,addRor4WithNullHash32 92 | 0x3E6606E0,WSHGetSockaddrType,wship6.dll,dualaccModFFF1Hash 93 | 0x5BF18A9E,WSHGetSocketInformation,wship6.dll,ror11AddHash32 94 | 0x02D47980,WSHGetSocketInformation,wship6.dll,rol7XorHash32 95 | 0x0972C5FE,WSHGetSocketInformation,wship6.dll,hash_Carbanak 96 | 0xC3704E35,WSHGetSocketInformation,wship6.dll,ror13AddHash32Sub1 97 | 0xBCC93E5D,WSHGetSocketInformation,wship6.dll,rol7AddHash32 98 | 0x7263C880,WSHGetSocketInformation,wship6.dll,sll1AddHash32 99 | 0xBAC64060,WSHGetSocketInformation,wship6.dll,ror9AddHash32 100 | 0xC3704E36,WSHGetSocketInformation,wship6.dll,ror13AddHash32 101 | 0x460E0DB3,WSHGetSocketInformation,wship6.dll,rol3XorEax 102 | 0x0E6AD825,WSHGetSocketInformation,wship6.dll,rol5AddHash32 103 | 0xAB86DCC8,WSHGetSocketInformation,wship6.dll,shl7shr19Hash32 104 | 0x524FBC71,WSHGetSocketInformation,wship6.dll,ror13AddHash32AddDll 105 | 0x849FFCA1,WSHGetSocketInformation,wship6.dll,mult21AddHash32 106 | 0x32D17D41,WSHGetSocketInformation,wship6.dll,poisonIvyHash 107 | 0xB5EFC406,WSHGetSocketInformation,wship6.dll,add1505Shl5Hash32 108 | 0x067BD20A,WSHGetSocketInformation,wship6.dll,crc32 109 | 0xF8644A38,WSHGetSocketInformation,wship6.dll,ror7AddHash32 110 | 0x75FA80AA,WSHGetSocketInformation,wship6.dll,hash_ror13AddUpperDllnameHash32 111 | 0x441411A3,WSHGetSocketInformation,wship6.dll,rol7AddXor2Hash32 112 | 0x71B61B82,WSHGetSocketInformation,wship6.dll,ror13AddWithNullHash32 113 | 0xC8513D5F,WSHGetSocketInformation,wship6.dll,fnv1Xor67f 114 | 0x0C1A00EA,WSHGetSocketInformation,wship6.dll,addRor4WithNullHash32 115 | 0x67350902,WSHGetSocketInformation,wship6.dll,dualaccModFFF1Hash 116 | 0x09F7D6D3,WSHGetWSAProtocolInfo,wship6.dll,ror11AddHash32 117 | 0x821EB38A,WSHGetWSAProtocolInfo,wship6.dll,rol7XorHash32 118 | 0x05056F9F,WSHGetWSAProtocolInfo,wship6.dll,hash_Carbanak 119 | 0x374D6A7F,WSHGetWSAProtocolInfo,wship6.dll,ror13AddHash32Sub1 120 | 0x7E20C376,WSHGetWSAProtocolInfo,wship6.dll,rol7AddHash32 121 | 0x1C9C6A36,WSHGetWSAProtocolInfo,wship6.dll,sll1AddHash32 122 | 0x61A9DFED,WSHGetWSAProtocolInfo,wship6.dll,ror9AddHash32 123 | 0x374D6A80,WSHGetWSAProtocolInfo,wship6.dll,ror13AddHash32 124 | 0x9FC6B775,WSHGetWSAProtocolInfo,wship6.dll,rol3XorEax 125 | 0x880558C5,WSHGetWSAProtocolInfo,wship6.dll,rol5AddHash32 126 | 0xFCEC16C1,WSHGetWSAProtocolInfo,wship6.dll,shl7shr19Hash32 127 | 0x349B5B5A,WSHGetWSAProtocolInfo,wship6.dll,ror13AddHash32AddDll 128 | 0x4C4ACF3B,WSHGetWSAProtocolInfo,wship6.dll,mult21AddHash32 129 | 0xA51ECD3D,WSHGetWSAProtocolInfo,wship6.dll,poisonIvyHash 130 | 0xABC77960,WSHGetWSAProtocolInfo,wship6.dll,add1505Shl5Hash32 131 | 0x1B122601,WSHGetWSAProtocolInfo,wship6.dll,crc32 132 | 0x290BEDB6,WSHGetWSAProtocolInfo,wship6.dll,ror7AddHash32 133 | 0xE9D79CF4,WSHGetWSAProtocolInfo,wship6.dll,hash_ror13AddUpperDllnameHash32 134 | 0x0F7E5D9C,WSHGetWSAProtocolInfo,wship6.dll,rol7AddXor2Hash32 135 | 0x5401BA6B,WSHGetWSAProtocolInfo,wship6.dll,ror13AddWithNullHash32 136 | 0xEC46695F,WSHGetWSAProtocolInfo,wship6.dll,fnv1Xor67f 137 | 0x79E6C0D8,WSHGetWSAProtocolInfo,wship6.dll,addRor4WithNullHash32 138 | 0x528B07DC,WSHGetWSAProtocolInfo,wship6.dll,dualaccModFFF1Hash 139 | 0x5ABF1867,WSHGetWildcardSockaddr,wship6.dll,ror11AddHash32 140 | 0x4E9B63A3,WSHGetWildcardSockaddr,wship6.dll,rol7XorHash32 141 | 0x02D5EA32,WSHGetWildcardSockaddr,wship6.dll,hash_Carbanak 142 | 0x440E2194,WSHGetWildcardSockaddr,wship6.dll,ror13AddHash32Sub1 143 | 0x7CDF52C3,WSHGetWildcardSockaddr,wship6.dll,rol7AddHash32 144 | 0x3933A444,WSHGetWildcardSockaddr,wship6.dll,sll1AddHash32 145 | 0x2728A87A,WSHGetWildcardSockaddr,wship6.dll,ror9AddHash32 146 | 0x440E2195,WSHGetWildcardSockaddr,wship6.dll,ror13AddHash32 147 | 0x5707ABB7,WSHGetWildcardSockaddr,wship6.dll,rol3XorEax 148 | 0x290C4A1A,WSHGetWildcardSockaddr,wship6.dll,rol5AddHash32 149 | 0x37C9C6E8,WSHGetWildcardSockaddr,wship6.dll,shl7shr19Hash32 150 | 0xED43C160,WSHGetWildcardSockaddr,wship6.dll,ror13AddHash32AddDll 151 | 0xFB808CC7,WSHGetWildcardSockaddr,wship6.dll,mult21AddHash32 152 | 0x7238E79F,WSHGetWildcardSockaddr,wship6.dll,poisonIvyHash 153 | 0x4A927B8C,WSHGetWildcardSockaddr,wship6.dll,add1505Shl5Hash32 154 | 0x30EA6AE0,WSHGetWildcardSockaddr,wship6.dll,crc32 155 | 0x7DCAECCD,WSHGetWildcardSockaddr,wship6.dll,ror7AddHash32 156 | 0xF6985409,WSHGetWildcardSockaddr,wship6.dll,hash_ror13AddUpperDllnameHash32 157 | 0xF02D6877,WSHGetWildcardSockaddr,wship6.dll,rol7AddXor2Hash32 158 | 0x0CAA2071,WSHGetWildcardSockaddr,wship6.dll,ror13AddWithNullHash32 159 | 0x407F464D,WSHGetWildcardSockaddr,wship6.dll,fnv1Xor67f 160 | 0xEEBCF432,WSHGetWildcardSockaddr,wship6.dll,addRor4WithNullHash32 161 | 0x5D600868,WSHGetWildcardSockaddr,wship6.dll,dualaccModFFF1Hash 162 | 0x3F07A6CB,WSHGetWinsockMapping,wship6.dll,ror11AddHash32 163 | 0xB7175DB9,WSHGetWinsockMapping,wship6.dll,rol7XorHash32 164 | 0x0A12FBB7,WSHGetWinsockMapping,wship6.dll,hash_Carbanak 165 | 0x69142731,WSHGetWinsockMapping,wship6.dll,ror13AddHash32Sub1 166 | 0x94D76235,WSHGetWinsockMapping,wship6.dll,rol7AddHash32 167 | 0x0E4DAE8E,WSHGetWinsockMapping,wship6.dll,sll1AddHash32 168 | 0xF914FDF7,WSHGetWinsockMapping,wship6.dll,ror9AddHash32 169 | 0x69142732,WSHGetWinsockMapping,wship6.dll,ror13AddHash32 170 | 0x4CFE6FC8,WSHGetWinsockMapping,wship6.dll,rol3XorEax 171 | 0xA75E3E74,WSHGetWinsockMapping,wship6.dll,rol5AddHash32 172 | 0xC9EAB8F2,WSHGetWinsockMapping,wship6.dll,shl7shr19Hash32 173 | 0x1A2CE990,WSHGetWinsockMapping,wship6.dll,ror13AddHash32AddDll 174 | 0x760E1C3C,WSHGetWinsockMapping,wship6.dll,mult21AddHash32 175 | 0x8A0D977D,WSHGetWinsockMapping,wship6.dll,poisonIvyHash 176 | 0x1BDB95C1,WSHGetWinsockMapping,wship6.dll,add1505Shl5Hash32 177 | 0x6734E13D,WSHGetWinsockMapping,wship6.dll,crc32 178 | 0xCB5B979F,WSHGetWinsockMapping,wship6.dll,ror7AddHash32 179 | 0x1B9E59A6,WSHGetWinsockMapping,wship6.dll,hash_ror13AddUpperDllnameHash32 180 | 0x2431AC8A,WSHGetWinsockMapping,wship6.dll,rol7AddXor2Hash32 181 | 0x399348A1,WSHGetWinsockMapping,wship6.dll,ror13AddWithNullHash32 182 | 0xC901F424,WSHGetWinsockMapping,wship6.dll,fnv1Xor67f 183 | 0x1392243E,WSHGetWinsockMapping,wship6.dll,addRor4WithNullHash32 184 | 0x4E1407BD,WSHGetWinsockMapping,wship6.dll,dualaccModFFF1Hash 185 | 0x55CA1CB8,WSHIoctl,wship6.dll,ror11AddHash32 186 | 0x9D57B428,WSHIoctl,wship6.dll,rol7XorHash32 187 | 0x07D05F6C,WSHIoctl,wship6.dll,hash_Carbanak 188 | 0xE2F0B42F,WSHIoctl,wship6.dll,ror13AddHash32Sub1 189 | 0x9EA848B0,WSHIoctl,wship6.dll,rol7AddHash32 190 | 0x0000E450,WSHIoctl,wship6.dll,sll1AddHash32 191 | 0xCC5A1AFE,WSHIoctl,wship6.dll,ror9AddHash32 192 | 0xE2F0B430,WSHIoctl,wship6.dll,ror13AddHash32 193 | 0x62CB69F4,WSHIoctl,wship6.dll,rol3XorEax 194 | 0x54C91DB9,WSHIoctl,wship6.dll,rol5AddHash32 195 | 0xC2011973,WSHIoctl,wship6.dll,shl7shr19Hash32 196 | 0x8220B874,WSHIoctl,wship6.dll,ror13AddHash32AddDll 197 | 0xECDC07AD,WSHIoctl,wship6.dll,mult21AddHash32 198 | 0xDC61F0D8,WSHIoctl,wship6.dll,poisonIvyHash 199 | 0x688F51B2,WSHIoctl,wship6.dll,add1505Shl5Hash32 200 | 0xB8976708,WSHIoctl,wship6.dll,crc32 201 | 0xFE7AFD05,WSHIoctl,wship6.dll,ror7AddHash32 202 | 0x957AE6A4,WSHIoctl,wship6.dll,hash_ror13AddUpperDllnameHash32 203 | 0xBE63C1C2,WSHIoctl,wship6.dll,rol7AddXor2Hash32 204 | 0xA1871785,WSHIoctl,wship6.dll,ror13AddWithNullHash32 205 | 0x58893211,WSHIoctl,wship6.dll,fnv1Xor67f 206 | 0xE3AA3DD8,WSHIoctl,wship6.dll,addRor4WithNullHash32 207 | 0x0C5B02EE,WSHIoctl,wship6.dll,dualaccModFFF1Hash 208 | 0x36AEAEB2,WSHJoinLeaf,wship6.dll,ror11AddHash32 209 | 0x210CDA41,WSHJoinLeaf,wship6.dll,rol7XorHash32 210 | 0x05BF5666,WSHJoinLeaf,wship6.dll,hash_Carbanak 211 | 0x24CD9B30,WSHJoinLeaf,wship6.dll,ror13AddHash32Sub1 212 | 0xB22F461E,WSHJoinLeaf,wship6.dll,rol7AddHash32 213 | 0x000729B8,WSHJoinLeaf,wship6.dll,sll1AddHash32 214 | 0x5C0C9C41,WSHJoinLeaf,wship6.dll,ror9AddHash32 215 | 0x24CD9B31,WSHJoinLeaf,wship6.dll,ror13AddHash32 216 | 0x7DFE70BB,WSHJoinLeaf,wship6.dll,rol3XorEax 217 | 0x9A6E4AF2,WSHJoinLeaf,wship6.dll,rol5AddHash32 218 | 0x8A5A4A60,WSHJoinLeaf,wship6.dll,shl7shr19Hash32 219 | 0xBA22C75B,WSHJoinLeaf,wship6.dll,ror13AddHash32AddDll 220 | 0x0D55E89A,WSHJoinLeaf,wship6.dll,mult21AddHash32 221 | 0xDAE90A40,WSHJoinLeaf,wship6.dll,poisonIvyHash 222 | 0xF8BFB07F,WSHJoinLeaf,wship6.dll,add1505Shl5Hash32 223 | 0x86D8E04D,WSHJoinLeaf,wship6.dll,crc32 224 | 0x5B7BAFFB,WSHJoinLeaf,wship6.dll,ror7AddHash32 225 | 0xD757CDA5,WSHJoinLeaf,wship6.dll,hash_ror13AddUpperDllnameHash32 226 | 0x946BBEAB,WSHJoinLeaf,wship6.dll,rol7AddXor2Hash32 227 | 0xD989266C,WSHJoinLeaf,wship6.dll,ror13AddWithNullHash32 228 | 0xE0CEA77E,WSHJoinLeaf,wship6.dll,fnv1Xor67f 229 | 0x4A013503,WSHJoinLeaf,wship6.dll,addRor4WithNullHash32 230 | 0x170A03FB,WSHJoinLeaf,wship6.dll,dualaccModFFF1Hash 231 | 0x164A97C5,WSHNotify,wship6.dll,ror11AddHash32 232 | 0xA93D510F,WSHNotify,wship6.dll,rol7XorHash32 233 | 0x0D56F3A9,WSHNotify,wship6.dll,hash_Carbanak 234 | 0x43571540,WSHNotify,wship6.dll,ror13AddHash32Sub1 235 | 0x564195F0,WSHNotify,wship6.dll,rol7AddHash32 236 | 0x0001CB72,WSHNotify,wship6.dll,sll1AddHash32 237 | 0x7C8B6FA6,WSHNotify,wship6.dll,ror9AddHash32 238 | 0x43571541,WSHNotify,wship6.dll,ror13AddHash32 239 | 0xC36474D7,WSHNotify,wship6.dll,rol3XorEax 240 | 0xA32C0AE3,WSHNotify,wship6.dll,rol5AddHash32 241 | 0x026BFC54,WSHNotify,wship6.dll,shl7shr19Hash32 242 | 0x8AA3BBA7,WSHNotify,wship6.dll,ror13AddHash32AddDll 243 | 0x940FEBCB,WSHNotify,wship6.dll,mult21AddHash32 244 | 0x1CA869AC,WSHNotify,wship6.dll,poisonIvyHash 245 | 0x862C7670,WSHNotify,wship6.dll,add1505Shl5Hash32 246 | 0xCB62BE77,WSHNotify,wship6.dll,crc32 247 | 0x9FD17E73,WSHNotify,wship6.dll,ror7AddHash32 248 | 0xF5E147B5,WSHNotify,wship6.dll,hash_ror13AddUpperDllnameHash32 249 | 0x347E1CE2,WSHNotify,wship6.dll,rol7AddXor2Hash32 250 | 0xAA0A1AB8,WSHNotify,wship6.dll,ror13AddWithNullHash32 251 | 0x969D6873,WSHNotify,wship6.dll,fnv1Xor67f 252 | 0x06D0B42D,WSHNotify,wship6.dll,addRor4WithNullHash32 253 | 0x0FF7036C,WSHNotify,wship6.dll,dualaccModFFF1Hash 254 | 0x67DAEC50,WSHOpenSocket,wship6.dll,ror11AddHash32 255 | 0x09CB3A4D,WSHOpenSocket,wship6.dll,rol7XorHash32 256 | 0x0FF90734,WSHOpenSocket,wship6.dll,hash_Carbanak 257 | 0xBB8F957F,WSHOpenSocket,wship6.dll,ror13AddHash32Sub1 258 | 0xF2C11FBA,WSHOpenSocket,wship6.dll,rol7AddHash32 259 | 0x001CBEA4,WSHOpenSocket,wship6.dll,sll1AddHash32 260 | 0xFACC17AF,WSHOpenSocket,wship6.dll,ror9AddHash32 261 | 0xBB8F9580,WSHOpenSocket,wship6.dll,ror13AddHash32 262 | 0x53435A48,WSHOpenSocket,wship6.dll,rol3XorEax 263 | 0xC7CD8C5D,WSHOpenSocket,wship6.dll,rol5AddHash32 264 | 0xADC32A6C,WSHOpenSocket,wship6.dll,shl7shr19Hash32 265 | 0x8C9F7D6B,WSHOpenSocket,wship6.dll,ror13AddHash32AddDll 266 | 0xA326B72D,WSHOpenSocket,wship6.dll,mult21AddHash32 267 | 0xAD5B1AFB,WSHOpenSocket,wship6.dll,poisonIvyHash 268 | 0x10220C52,WSHOpenSocket,wship6.dll,add1505Shl5Hash32 269 | 0x33F8CD4C,WSHOpenSocket,wship6.dll,crc32 270 | 0x69FF800E,WSHOpenSocket,wship6.dll,ror7AddHash32 271 | 0x6E19C7F4,WSHOpenSocket,wship6.dll,hash_ror13AddUpperDllnameHash32 272 | 0xD464592B,WSHOpenSocket,wship6.dll,rol7AddXor2Hash32 273 | 0xAC05DC7C,WSHOpenSocket,wship6.dll,ror13AddWithNullHash32 274 | 0x325A7267,WSHOpenSocket,wship6.dll,fnv1Xor67f 275 | 0x3FEF2BA4,WSHOpenSocket,wship6.dll,addRor4WithNullHash32 276 | 0x20CC04EE,WSHOpenSocket,wship6.dll,dualaccModFFF1Hash 277 | 0x8A0CFB8F,WSHOpenSocket2,wship6.dll,ror11AddHash32 278 | 0xE59D26B6,WSHOpenSocket2,wship6.dll,rol7XorHash32 279 | 0x0F907382,WSHOpenSocket2,wship6.dll,hash_Carbanak 280 | 0xAC05DCAD,WSHOpenSocket2,wship6.dll,ror13AddHash32Sub1 281 | 0x608FDDAB,WSHOpenSocket2,wship6.dll,rol7AddHash32 282 | 0x00397E2C,WSHOpenSocket2,wship6.dll,sll1AddHash32 283 | 0xD7FD663D,WSHOpenSocket2,wship6.dll,ror9AddHash32 284 | 0xAC05DCAE,WSHOpenSocket2,wship6.dll,ror13AddHash32 285 | 0xC13173D2,WSHOpenSocket2,wship6.dll,rol3XorEax 286 | 0xF9B18BEA,WSHOpenSocket2,wship6.dll,rol5AddHash32 287 | 0xE1953690,WSHOpenSocket2,wship6.dll,shl7shr19Hash32 288 | 0xC60F011D,WSHOpenSocket2,wship6.dll,ror13AddHash32AddDll 289 | 0x07FD9CFF,WSHOpenSocket2,wship6.dll,mult21AddHash32 290 | 0x15B0CB72,WSHOpenSocket2,wship6.dll,poisonIvyHash 291 | 0x146396C4,WSHOpenSocket2,wship6.dll,add1505Shl5Hash32 292 | 0x658C4B7B,WSHOpenSocket2,wship6.dll,crc32 293 | 0x1CD3FF32,WSHOpenSocket2,wship6.dll,ror7AddHash32 294 | 0x5E900F22,WSHOpenSocket2,wship6.dll,hash_ror13AddUpperDllnameHash32 295 | 0x322C961A,WSHOpenSocket2,wship6.dll,rol7AddXor2Hash32 296 | 0xE575602E,WSHOpenSocket2,wship6.dll,ror13AddWithNullHash32 297 | 0x6E64D861,WSHOpenSocket2,wship6.dll,fnv1Xor67f 298 | 0x75FEF2BA,WSHOpenSocket2,wship6.dll,addRor4WithNullHash32 299 | 0x25EC0520,WSHOpenSocket2,wship6.dll,dualaccModFFF1Hash 300 | 0x5BF78A9E,WSHSetSocketInformation,wship6.dll,ror11AddHash32 301 | 0x02D47B00,WSHSetSocketInformation,wship6.dll,rol7XorHash32 302 | 0x0972C6BE,WSHSetSocketInformation,wship6.dll,hash_Carbanak 303 | 0xC3706635,WSHSetSocketInformation,wship6.dll,ror13AddHash32Sub1 304 | 0xBCC93FDD,WSHSetSocketInformation,wship6.dll,rol7AddHash32 305 | 0x7323C880,WSHSetSocketInformation,wship6.dll,sll1AddHash32 306 | 0xBC464060,WSHSetSocketInformation,wship6.dll,ror9AddHash32 307 | 0xC3706636,WSHSetSocketInformation,wship6.dll,ror13AddHash32 308 | 0x8611F1BC,WSHSetSocketInformation,wship6.dll,rol3XorEax 309 | 0x0E6AD82B,WSHSetSocketInformation,wship6.dll,rol5AddHash32 310 | 0xAB86DE48,WSHSetSocketInformation,wship6.dll,shl7shr19Hash32 311 | 0x124FBC72,WSHSetSocketInformation,wship6.dll,ror13AddHash32AddDll 312 | 0x1676292D,WSHSetSocketInformation,wship6.dll,mult21AddHash32 313 | 0x6BCC6B16,WSHSetSocketInformation,wship6.dll,poisonIvyHash 314 | 0x47C5F092,WSHSetSocketInformation,wship6.dll,add1505Shl5Hash32 315 | 0xA8509276,WSHSetSocketInformation,wship6.dll,crc32 316 | 0x58644A39,WSHSetSocketInformation,wship6.dll,ror7AddHash32 317 | 0x75FA98AA,WSHSetSocketInformation,wship6.dll,hash_ror13AddUpperDllnameHash32 318 | 0x44141323,WSHSetSocketInformation,wship6.dll,rol7AddXor2Hash32 319 | 0x31B61B83,WSHSetSocketInformation,wship6.dll,ror13AddWithNullHash32 320 | 0x5F5EC95B,WSHSetSocketInformation,wship6.dll,fnv1Xor67f 321 | 0x0C1BC0EA,WSHSetSocketInformation,wship6.dll,addRor4WithNullHash32 322 | 0x6825090E,WSHSetSocketInformation,wship6.dll,dualaccModFFF1Hash 323 | 0x9B0E04F2,WSHStringToAddress,wship6.dll,ror11AddHash32 324 | 0x1678D429,WSHStringToAddress,wship6.dll,rol7XorHash32 325 | 0x0AE89D23,WSHStringToAddress,wship6.dll,hash_Carbanak 326 | 0xF7CBF5C1,WSHStringToAddress,wship6.dll,ror13AddHash32Sub1 327 | 0xF6394E1C,WSHStringToAddress,wship6.dll,rol7AddHash32 328 | 0x039C15FA,WSHStringToAddress,wship6.dll,sll1AddHash32 329 | 0x8864BBF1,WSHStringToAddress,wship6.dll,ror9AddHash32 330 | 0xF7CBF5C2,WSHStringToAddress,wship6.dll,ror13AddHash32 331 | 0xF489118B,WSHStringToAddress,wship6.dll,rol3XorEax 332 | 0x6FF5300B,WSHStringToAddress,wship6.dll,rol5AddHash32 333 | 0x68852FDF,WSHStringToAddress,wship6.dll,shl7shr19Hash32 334 | 0x8EB15F4E,WSHStringToAddress,wship6.dll,ror13AddHash32AddDll 335 | 0x3E188812,WSHStringToAddress,wship6.dll,mult21AddHash32 336 | 0xBB19D1F0,WSHStringToAddress,wship6.dll,poisonIvyHash 337 | 0x9CBFDC57,WSHStringToAddress,wship6.dll,add1505Shl5Hash32 338 | 0x1DFC8393,WSHStringToAddress,wship6.dll,crc32 339 | 0x17B24825,WSHStringToAddress,wship6.dll,ror7AddHash32 340 | 0xAA562836,WSHStringToAddress,wship6.dll,hash_ror13AddUpperDllnameHash32 341 | 0x26D418A2,WSHStringToAddress,wship6.dll,rol7AddXor2Hash32 342 | 0xAE17BE5F,WSHStringToAddress,wship6.dll,ror13AddWithNullHash32 343 | 0xDAB010C0,WSHStringToAddress,wship6.dll,fnv1Xor67f 344 | 0x9DF1841F,WSHStringToAddress,wship6.dll,addRor4WithNullHash32 345 | 0x3FAD06F3,WSHStringToAddress,wship6.dll,dualaccModFFF1Hash 346 | -------------------------------------------------------------------------------- /shellcode_hashes.sqlite: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/malware-kitten/shellcode_hashes/78fd0cf7b2990aedda1c7b87ffb02f9c341e0856/shellcode_hashes.sqlite --------------------------------------------------------------------------------