e:\KINGSOFT_DUBA\Build\Build_Src\drivergenius_srv\dgsrv_1615_20201202_fb\product\win32\dbginfo\UsbPnp.pdb
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
bb1f022a2995a4de7f8700052c28d6f1cdef960d8d68b06ad0037f44b9fd234b.exe
Resource
win7-20240611-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
bb1f022a2995a4de7f8700052c28d6f1cdef960d8d68b06ad0037f44b9fd234b.exe
Resource
win10v2004-20240508-en
windows10-2004-x64
0 signatures
150 seconds
General
-
Target
bb1f022a2995a4de7f8700052c28d6f1cdef960d8d68b06ad0037f44b9fd234b
-
Size
2.1MB
-
MD5
42fb33fcaee0cf4adb36b9ceeb301e5d
-
SHA1
ec7c91b84debf703e44b5e2501fba9ed4fd82fc6
-
SHA256
bb1f022a2995a4de7f8700052c28d6f1cdef960d8d68b06ad0037f44b9fd234b
-
SHA512
a8abaf3dae3a9e92972a3c619b00993bb2211ae97779e3ed3c49a90d69573f65d7628d80609174d1a8a2280ed1f064d4f7292bb3ed370f0263a4ed250376bf2d
-
SSDEEP
49152:zV3adZeaq+UGR/Q6rq6KS/EBvSeTIoWcg:zVqdyGR/Qcq7BvIoWZ
Score
3/10
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bb1f022a2995a4de7f8700052c28d6f1cdef960d8d68b06ad0037f44b9fd234b
Files
-
bb1f022a2995a4de7f8700052c28d6f1cdef960d8d68b06ad0037f44b9fd234b.exe windows:4 windows x86 arch:x86
a60b1f4777233f9cd647ffccc933e515
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
sqlite3
sqlite3_get_table
sqlite3_free_table
sqlite3_close
sqlite3_open
kernel32
WaitForMultipleObjects
Sleep
TerminateThread
OpenMutexW
ReleaseMutex
ResetEvent
CreateThread
LoadLibraryExW
CreateDirectoryW
lstrcpynW
GetSystemTimeAsFileTime
GetTempPathW
DeleteFileW
GetCurrentProcessId
FatalAppExitW
SetUnhandledExceptionFilter
lstrcmpiW
WriteFile
SetFilePointer
CreateFileA
GetFileAttributesA
GetFileAttributesW
SetFileAttributesA
SetFileAttributesW
SetFilePointerEx
GetFileSizeEx
FindFirstFileA
FindNextFileA
GetFileAttributesExA
GetFileAttributesExW
DeleteFileA
CopyFileA
GetProcessId
RemoveDirectoryA
RemoveDirectoryW
MoveFileA
MoveFileW
MoveFileExA
MoveFileExW
GetCommandLineW
DeviceIoControl
GetDiskFreeSpaceW
IsBadWritePtr
ProcessIdToSessionId
lstrcmpA
GetSystemTime
TerminateProcess
SetEnvironmentVariableW
GetEnvironmentVariableW
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
LoadLibraryA
InterlockedCompareExchange
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
GetVersionExA
GetProcessHeap
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
HeapDestroy
GetTickCount
FreeLibrary
CopyFileW
CreateToolhelp32Snapshot
IsDebuggerPresent
Process32FirstW
Process32NextW
FindFirstFileW
UnhandledExceptionFilter
GetStartupInfoW
FileTimeToSystemTime
FileTimeToLocalFileTime
GetUserDefaultLangID
GetModuleFileNameW
SizeofResource
LockResource
LoadResource
FindResourceW
FindResourceExW
WritePrivateProfileStringW
GetPrivateProfileSectionW
GetPrivateProfileSectionNamesW
GetPrivateProfileStringW
WritePrivateProfileSectionW
GetPrivateProfileIntW
MultiByteToWideChar
CloseHandle
VirtualFreeEx
ReadProcessMemory
OutputDebugStringW
WriteProcessMemory
VirtualAllocEx
OpenProcess
GetProcAddress
GetModuleHandleW
GetVersionExW
GetSystemDirectoryW
RaiseException
GetLastError
EnterCriticalSection
LeaveCriticalSection
FlushInstructionCache
QueryPerformanceCounter
GetCurrentProcess
LoadLibraryW
WideCharToMultiByte
GetVersion
CreateEventW
lstrlenA
lstrlenW
GetCurrentThreadId
GetExitCodeProcess
WaitForSingleObject
CreateMutexW
SetEvent
OpenEventW
GetFileSize
CreateFileW
SetLastError
FreeResource
InitializeCriticalSection
DeleteCriticalSection
lstrcmpW
MulDiv
InterlockedIncrement
InterlockedDecrement
GlobalUnlock
GlobalLock
GlobalAlloc
ReadFile
GetLocalTime
FindClose
FindNextFileW
user32
DrawTextW
ClientToScreen
ScreenToClient
InvalidateRgn
UnregisterClassA
FindWindowExW
FindWindowW
SendMessageW
GetClassNameW
GetWindow
GetDesktopWindow
GetWindowThreadProcessId
SetWindowLongW
GetWindowLongW
CreateWindowExW
MoveWindow
SetWindowPos
GetWindowRect
GetClientRect
InvalidateRect
MapWindowPoints
SystemParametersInfoW
GetParent
GetClassInfoExW
wsprintfW
LoadCursorW
CopyRect
SetRect
GetDlgItem
RegisterClassExW
DefWindowProcW
RegisterWindowMessageW
DestroyWindow
DispatchMessageW
TranslateMessage
GetMessageW
IsWindow
PeekMessageW
ShowWindow
PostMessageW
GetSysColor
PtInRect
GetDC
ReleaseDC
UpdateLayeredWindow
GetCursorPos
DialogBoxParamW
SetWindowRgn
SetParent
EndDialog
WindowFromPoint
LoadBitmapW
EnumDisplayDevicesW
CreatePopupMenu
AppendMenuW
TrackPopupMenu
SetCursorPos
mouse_event
ExitWindowsEx
MessageBoxW
GetSystemMetrics
GetActiveWindow
EnableWindow
SetActiveWindow
SetForegroundWindow
GetForegroundWindow
GetAsyncKeyState
GetCursorInfo
GetKeyState
MonitorFromWindow
GetMonitorInfoW
PostThreadMessageW
IsWindowEnabled
SetTimer
UpdateWindow
OffsetRect
DrawIconEx
LoadIconW
LoadImageW
DrawFrameControl
GetDlgCtrlID
EqualRect
DestroyIcon
KillTimer
IsWindowVisible
RedrawWindow
SetCursor
InflateRect
GetWindowTextLengthW
GetWindowTextW
SetWindowTextW
CreateAcceleratorTableW
GetFocus
SetFocus
DestroyAcceleratorTable
BeginPaint
EndPaint
CallWindowProcW
FillRect
ReleaseCapture
IsChild
SetCapture
CharNextW
gdi32
CreateRoundRectRgn
CombineRgn
CreateBitmap
StretchBlt
GetTextExtentPoint32W
TextOutW
RestoreDC
SaveDC
LineTo
MoveToEx
GetClipRgn
CreateRectRgnIndirect
CreateRectRgn
CreatePen
RoundRect
SelectClipRgn
RectInRegion
ExtTextOutW
SetTextColor
SetBkMode
SetBkColor
CreateSolidBrush
GetDeviceCaps
BitBlt
DeleteDC
CreateCompatibleBitmap
SelectObject
CreateCompatibleDC
GetStockObject
GetObjectW
CreateFontIndirectW
DeleteObject
CreateDIBSection
Rectangle
advapi32
RegOpenCurrentUser
ImpersonateLoggedOnUser
RevertToSelf
RegSetValueExA
RegEnumValueW
RegEnumValueA
RegEnumKeyW
RegEnumKeyA
RegEnumKeyExA
RegDeleteValueA
RegDeleteKeyA
RegQueryValueExA
RegCreateKeyExA
RegCreateKeyW
RegCreateKeyA
RegOpenKeyExA
RegOpenKeyA
RegQueryInfoKeyW
RegDeleteValueW
RegDeleteKeyW
RegEnumKeyExW
RegSetValueExW
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
RegOpenKeyExW
RegQueryValueExW
RegOpenKeyW
RegCreateKeyExW
RegCloseKey
shell32
ShellExecuteExW
ShellExecuteW
Shell_NotifyIconW
SHAppBarMessage
ord680
SHGetMalloc
SHGetPathFromIDListW
SHGetSpecialFolderLocation
SHGetSpecialFolderPathW
SHFileOperationW
ole32
OleLockRunning
CLSIDFromProgID
CLSIDFromString
CoCreateInstance
StringFromGUID2
CoTaskMemAlloc
CreateStreamOnHGlobal
OleInitialize
OleUninitialize
CoUninitialize
CoInitialize
CoTaskMemRealloc
CoTaskMemFree
CoGetClassObject
oleaut32
VarUI4FromStr
DispCallFunc
VarBstrCmp
LoadTypeLi
LoadRegTypeLi
OleCreateFontIndirect
VariantClear
VariantInit
SysStringByteLen
SysAllocString
SysAllocStringLen
SysStringLen
SysFreeString
shlwapi
SHSetValueA
SHSetValueW
SHDeleteValueA
SHGetValueW
PathUnquoteSpacesW
PathRemoveArgsW
AssocCreate
PathFindExtensionW
SHGetValueA
PathFileExistsA
PathIsDirectoryW
PathIsDirectoryA
PathFindFileNameW
PathAppendW
PathRemoveFileSpecW
PathFileExistsW
StrToIntA
SHDeleteValueW
StrToIntW
SHEnumKeyExW
StrCpyW
PathCombineW
PathAddBackslashW
comctl32
_TrackMouseEvent
gdiplus
GdipAlloc
GdipDeleteBrush
GdipCreateFontFamilyFromName
GdipDeleteFontFamily
GdipDeleteFont
GdipDeleteGraphics
GdipFree
GdiplusStartup
GdipDrawImageRectI
GdipLoadImageFromStreamICM
GdipLoadImageFromStream
GdipSetStringFormatTrimming
GdipDeleteStringFormat
GdipCreateStringFormat
GdipCloneImage
GdipDisposeImage
GdipLoadImageFromFileICM
GdipLoadImageFromFile
GdipCloneBrush
GdiplusShutdown
GdipCreateFont
GdipGetImageWidth
GdipGetImageHeight
GdipCreateSolidFill
GdipCreateFromHDC
GdipDrawString
GdipDrawImageRectRectI
patchcore
ord393
ord260
ord397
ord376
ord257
ord326
ord395
pnpsup
curl_easy_cleanup
curl_slist_free_all
curl_easy_getinfo
curl_easy_perform
curl_easy_setopt
curl_slist_append
curl_easy_init
ord39
version
GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW
msvcr80
isalpha
isalnum
strncmp
strchr
_localtime64_s
_wtol
wcscpy_s
memcpy_s
abs
strncpy
_stricmp
_wcsnicmp
isspace
fseek
ftell
_vsnprintf_s
atof
sscanf_s
fprintf
fputc
ferror
fopen_s
_wfopen
fread
fclose
wcspbrk
swscanf_s
atol
memmove_s
swscanf
wcscspn
wcsspn
sqrt
wcscat_s
wcsncpy_s
swprintf_s
__RTDynamicCast
wcscat
_wcsupr
_wtof
_wcslwr
srand
rand
_wtoi64
_mbsstr
_mbsicmp
atoi
_mbschr
_wtoi
memcmp
sprintf
sscanf
sprintf_s
tolower
_controlfp_s
_invoke_watson
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
_wcmdln
exit
_XcptFilter
_exit
_cexit
__wgetmainargs
_amsg_exit
__clean_type_info_names_internal
?_name_internal_method@type_info@@QBEPBDPAU__type_info_node@@@Z
_decode_pointer
_onexit
_lock
_encode_pointer
_waccess
strcmp
_time64
malloc
vsprintf
_vscprintf
_recalloc
_invalid_parameter_noinfo
??0exception@std@@QAE@ABV01@@Z
_mbscmp
strlen
_localtime64
??0exception@std@@QAE@XZ
?what@exception@std@@UBEPBDXZ
??0exception@std@@QAE@ABQBD@Z
??1exception@std@@UAE@XZ
??2@YAPAXI@Z
__dllonexit
_unlock
_except_handler4_common
?terminate@@YAXXZ
??3@YAXPAX@Z
_vswprintf
_CxxThrowException
__CxxFrameHandler3
_vscwprintf
_mktime64
wcslen
memcpy
memmove
??_V@YAXPAX@Z
memset
??_U@YAPAXI@Z
_wcsdup
wcsncpy
_swprintf
wcscpy
_wcsicmp
_wcsrev
wcstol
wcstoul
wcstod
wcscmp
wcsstr
wcschr
free
calloc
iswspace
wcsrchr
_purecall
strpbrk
msvcp80
?uncaught_exception@std@@YA_NXZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?swap@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXAAV12@@Z
??$?M_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@0@Z
?allocate@?$allocator@_W@std@@QAEPA_WI@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@I_W@Z
??$?6_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YAAAV?$basic_ostream@_WU?$char_traits@_W@std@@@0@AAV10@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@_N@Z
?end@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z
?_Incref@facet@locale@std@@QAEXXZ
??1locale@std@@QAE@XZ
?begin@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE?AV?$_String_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@XZ
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHPBDH@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?length@?$char_traits@D@std@@SAIPBD@Z
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEG_W@Z
?begin@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
?npos@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@2IB
?find_first_not_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIABV12@I@Z
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEHPB_WH@Z
??_D?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
?str@?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
??$?6DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@K@Z
??0?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
?deallocate@?$allocator@_W@std@@QAEXPA_WI@Z
?_Tidy@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@IAEX_NI@Z
?append@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@I_W@Z
?reserve@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXI@Z
??_D?$basic_ostringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXXZ
?str@?$basic_ostringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
?imbue@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAE?AVlocale@2@ABV32@@Z
??0?$basic_ostringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@H@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
?end@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE?AV?$_String_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
??$?8_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@0@Z
??_D?$basic_ofstream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
??0?$basic_ofstream@_WU?$char_traits@_W@std@@@std@@QAE@PBDHH@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_WI@Z
??_D?$basic_ifstream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
??0?$basic_ifstream@_WU?$char_traits@_W@std@@@std@@QAE@PBDHH@Z
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?_Init@locale@std@@CAPAV_Locimp@12@XZ
??$?9_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@PB_W@Z
?substr@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV12@II@Z
?rfind@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEI_WI@Z
?find@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEI_WI@Z
??A?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAA_WI@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
?append@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@ABV12@@Z
?append@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@PB_W@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
?swap@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXAAV12@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD0@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
?reserve@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
??$getline@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@D@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ID@Z
?resize@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??$?9_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@0@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?clear@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
?sbumpc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEGXZ
?sgetc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEGXZ
?_Lock@_Mutex@std@@QAEXXZ
?_Unlock@_Mutex@std@@QAEXXZ
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@_W@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
psapi
GetProcessImageFileNameW
EnumProcesses
GetModuleFileNameExW
dbghelp
MiniDumpWriteDump
ws2_32
select
socket
inet_addr
htons
sendto
__WSAFDIsSet
recvfrom
ntohs
gethostbyname
inet_ntoa
WSACleanup
WSAStartup
WSAGetLastError
iphlpapi
IcmpSendEcho
IcmpCreateFile
IcmpCloseHandle
Sections
.text Size: 816KB - Virtual size: 813KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 320KB - Virtual size: 318KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 20KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 972KB - Virtual size: 972KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE