Overview
overview
7Static
static
3BiGet.exe
windows7-x64
7BiGet.exe
windows10-2004-x64
7$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3BiGetBand.dll
windows7-x64
6BiGetBand.dll
windows10-2004-x64
6BiGetCatch.dll
windows7-x64
1BiGetCatch.dll
windows10-2004-x64
1BiGetHelper.dll
windows7-x64
5BiGetHelper.dll
windows10-2004-x64
3BiGetLoader.exe
windows7-x64
6BiGetLoader.exe
windows10-2004-x64
6BiGetau.exe
windows7-x64
1BiGetau.exe
windows10-2004-x64
1BiNetPlay.ocx.dll
windows7-x64
1BiNetPlay.ocx.dll
windows10-2004-x64
1BigetTray.dll
windows7-x64
3BigetTray.dll
windows10-2004-x64
3KillProcess.exe
windows7-x64
1KillProcess.exe
windows10-2004-x64
1MediaPlayer.exe
windows7-x64
1MediaPlayer.exe
windows10-2004-x64
1NetCore.dll
windows7-x64
1NetCore.dll
windows10-2004-x64
3SearchShare.exe
windows7-x64
1SearchShare.exe
windows10-2004-x64
1Update.exe
windows7-x64
1Update.exe
windows10-2004-x64
1WebInstall.dll
windows7-x64
1WebInstall.dll
windows10-2004-x64
1nethelper.dll
windows7-x64
3nethelper.dll
windows10-2004-x64
3Static task
static1
Behavioral task
behavioral1
Sample
BiGet.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
BiGet.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20231129-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20240611-en
Behavioral task
behavioral5
Sample
BiGetBand.dll
Resource
win7-20240611-en
Behavioral task
behavioral6
Sample
BiGetBand.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral7
Sample
BiGetCatch.dll
Resource
win7-20240611-en
Behavioral task
behavioral8
Sample
BiGetCatch.dll
Resource
win10v2004-20240611-en
Behavioral task
behavioral9
Sample
BiGetHelper.dll
Resource
win7-20240220-en
Behavioral task
behavioral10
Sample
BiGetHelper.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral11
Sample
BiGetLoader.exe
Resource
win7-20240419-en
Behavioral task
behavioral12
Sample
BiGetLoader.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral13
Sample
BiGetau.exe
Resource
win7-20240221-en
Behavioral task
behavioral14
Sample
BiGetau.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral15
Sample
BiNetPlay.ocx.dll
Resource
win7-20231129-en
Behavioral task
behavioral16
Sample
BiNetPlay.ocx.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral17
Sample
BigetTray.dll
Resource
win7-20240611-en
Behavioral task
behavioral18
Sample
BigetTray.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral19
Sample
KillProcess.exe
Resource
win7-20240419-en
Behavioral task
behavioral20
Sample
KillProcess.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral21
Sample
MediaPlayer.exe
Resource
win7-20240221-en
Behavioral task
behavioral22
Sample
MediaPlayer.exe
Resource
win10v2004-20240611-en
Behavioral task
behavioral23
Sample
NetCore.dll
Resource
win7-20240221-en
Behavioral task
behavioral24
Sample
NetCore.dll
Resource
win10v2004-20240611-en
Behavioral task
behavioral25
Sample
SearchShare.exe
Resource
win7-20240611-en
Behavioral task
behavioral26
Sample
SearchShare.exe
Resource
win10v2004-20240611-en
Behavioral task
behavioral27
Sample
Update.exe
Resource
win7-20240508-en
Behavioral task
behavioral28
Sample
Update.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral29
Sample
WebInstall.dll
Resource
win7-20240508-en
Behavioral task
behavioral30
Sample
WebInstall.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral31
Sample
nethelper.dll
Resource
win7-20240611-en
Behavioral task
behavioral32
Sample
nethelper.dll
Resource
win10v2004-20240226-en
General
-
Target
1b757fa446c2c476e876ac6e24aef4fe_JaffaCakes118
-
Size
660KB
-
MD5
1b757fa446c2c476e876ac6e24aef4fe
-
SHA1
872a1423172ac315aaa4fbd99c0850178204971a
-
SHA256
9e80b3e5fb2e9eecb03fe359ec76773c369ee16578c7fb4551d056c7e01f0f9b
-
SHA512
4a4134903dc038793e8945001a5c9a46854bbbfe1dfa2aafba776fe32738091c7789bf7fc1fbe69f0b63ce7621ccbee4e54d3fcfe321f52929eac9e9baaa36e9
-
SSDEEP
12288:6gyqYgbbHAoim82mAMm0978OKiTHhL8R4Y8H5Q8u6aeIhcvNofmjJxaMmPfqCU8i:6980V6Q97nTCvlh0WmjXaMkZUp
Malware Config
Signatures
-
Unsigned PE 15 IoCs
Checks for missing Authenticode signature.
resource unpack002/$PLUGINSDIR/InstallOptions.dll unpack002/BiGetBand.dll.new unpack002/BiGetCatch.dll.new unpack002/BiGetHelper.dll unpack002/BiGetLoader.exe unpack002/BiGetau.exe unpack002/BiNetPlay.ocx.new unpack002/BigetTray.dll unpack002/KillProcess.exe unpack002/MediaPlayer.exe unpack002/NetCore.dll unpack002/SearchShare.exe unpack002/Update.exe unpack002/WebInstall.dll.new unpack002/nethelper.dll -
NSIS installer 1 IoCs
resource yara_rule static1/unpack001/BiGet.exe nsis_installer_1
Files
-
1b757fa446c2c476e876ac6e24aef4fe_JaffaCakes118.rar
-
BiGet.exe.exe windows:4 windows x86 arch:x86
1bed3305885b0ca596d9cbba22baf78a
Code Sign
70:ba:e4:1d:10:d9:29:34:b6:38:ca:7b:03:cc:ba:bfCertificate
IssuerOU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=USNot Before29/01/1996, 00:00Not After01/08/2028, 23:59SubjectOU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5Certificate
IssuerCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USNot Before15/06/2007, 00:00Not After14/06/2012, 23:59SubjectCN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate
IssuerCN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZANot Before04/12/2003, 00:00Not After03/12/2013, 23:59SubjectCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2Certificate
IssuerOU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=USNot Before16/07/2004, 00:00Not After15/07/2014, 23:59SubjectCN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
5c:fa:42:96:51:53:8d:2d:ba:fd:a2:b7:b7:0e:8f:2bCertificate
IssuerCN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=USNot Before16/03/2007, 00:00Not After15/03/2008, 23:59SubjectCN=Shenzhenshi BYNA Network Technology Co.\,Ltd.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=yun ying bu,O=Shenzhenshi BYNA Network Technology Co.\,Ltd.,L=Shenzhen,ST=Guangdong,C=CNExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
51:d7:b3:7d:25:39:e2:d3:ae:0c:dd:30:44:79:06:f3:18:df:e0:a7Signer
Actual PE Digest51:d7:b3:7d:25:39:e2:d3:ae:0c:dd:30:44:79:06:f3:18:df:e0:a7Digest Algorithmsha1PE Digest MatchestrueHeaders
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CompareFileTime
SearchPathA
GetShortPathNameA
GetFullPathNameA
MoveFileA
lstrcatA
SetCurrentDirectoryA
GetFileAttributesA
GetLastError
CreateDirectoryA
SetFileAttributesA
Sleep
CreateFileA
GetFileSize
GetModuleFileNameA
GetTickCount
GetCurrentProcess
CopyFileA
ExitProcess
lstrcpynA
SetFileTime
GetWindowsDirectoryA
GetTempPathA
GetUserDefaultLangID
GetDiskFreeSpaceA
GlobalUnlock
GlobalLock
GlobalAlloc
CreateThread
CreateProcessA
RemoveDirectoryA
GetTempFileNameA
SetEndOfFile
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
lstrcpyA
lstrlenA
GetSystemDirectoryA
CloseHandle
lstrcmpiA
GetEnvironmentVariableA
ExpandEnvironmentStringsA
GlobalFree
WaitForSingleObject
GetExitCodeProcess
SetErrorMode
GetModuleHandleA
LoadLibraryA
GetProcAddress
FreeLibrary
MultiByteToWideChar
WritePrivateProfileStringA
GetPrivateProfileStringA
MulDiv
WriteFile
ReadFile
SetFilePointer
FindClose
FindNextFileA
FindFirstFileA
DeleteFileA
GetCommandLineA
user32
SystemParametersInfoA
RegisterClassA
EndDialog
ScreenToClient
GetWindowRect
SetClassLongA
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongA
LoadCursorA
SetCursor
CheckDlgButton
GetAsyncKeyState
IsDlgButtonChecked
GetMessagePos
LoadBitmapA
CallWindowProcA
IsWindowVisible
CloseClipboard
CreateWindowExA
EmptyClipboard
OpenClipboard
TrackPopupMenu
AppendMenuA
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextA
GetDlgItemTextA
MessageBoxA
CharPrevA
wvsprintfA
SetTimer
SetWindowTextA
PostQuitMessage
SetForegroundWindow
ShowWindow
wsprintfA
SendMessageTimeoutA
FindWindowExA
GetDlgItem
GetClassInfoA
DialogBoxParamA
CharNextA
ExitWindowsEx
CreateDialogParamA
SetClipboardData
DestroyWindow
SetWindowLongA
LoadImageA
GetDC
EnableWindow
PeekMessageA
DispatchMessageA
InvalidateRect
SendMessageA
DefWindowProcA
BeginPaint
GetClientRect
FillRect
DrawTextA
EndPaint
IsWindow
gdi32
SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectA
SetBkMode
SetTextColor
SelectObject
shell32
SHGetMalloc
SHGetPathFromIDListA
SHBrowseForFolderA
ShellExecuteA
SHFileOperationA
SHGetSpecialFolderLocation
advapi32
RegQueryValueExA
RegSetValueExA
RegEnumKeyA
RegEnumValueA
RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegCreateKeyExA
comctl32
ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create
ole32
OleInitialize
OleUninitialize
CoCreateInstance
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
Sections
.text Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 262KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ndata Size: - Virtual size: 272KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
$PLUGINSDIR/InstallOptions.dll.dll windows:4 windows x86 arch:x86
9d433976e02d79532f0d635ee81d0b20
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
MultiByteToWideChar
GetModuleHandleA
GetPrivateProfileIntA
GlobalAlloc
GetPrivateProfileStringA
lstrcatA
lstrcpynA
WritePrivateProfileStringA
lstrlenA
lstrcpyA
GlobalFree
lstrcmpiA
user32
GetDlgCtrlID
GetClientRect
SetWindowRgn
LoadIconA
MapWindowPoints
SetWindowLongA
CreateWindowExA
MapDialogRect
SetWindowPos
GetWindowRect
CreateDialogParamA
ShowWindow
EnableWindow
GetDlgItem
DestroyIcon
DestroyWindow
DispatchMessageA
TranslateMessage
GetMessageA
IsDialogMessageA
PtInRect
LoadCursorA
SetCursor
DrawTextA
GetWindowLongA
DrawFocusRect
CallWindowProcA
PostMessageA
MessageBoxA
CharNextA
wsprintfA
GetWindowTextA
SetWindowTextA
SendMessageA
LoadImageA
gdi32
SetTextColor
CreateCompatibleDC
GetObjectA
GetDIBits
CreateRectRgn
CombineRgn
DeleteObject
SelectObject
shell32
SHGetMalloc
SHGetPathFromIDListA
SHBrowseForFolderA
SHGetDesktopFolder
ShellExecuteA
comdlg32
GetOpenFileNameA
GetSaveFileNameA
CommDlgExtendedError
Exports
Exports
dialog
initDialog
show
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 152B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 930B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
$PLUGINSDIR/ioSpecial.ini
-
$PLUGINSDIR/modern-wizard.bmp
-
BiGetBand.dll.new.dll regsvr32 windows:4 windows x86 arch:x86
397c568e523509c3e24d99062e96dbd7
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
wininet
InternetGetCookieA
kernel32
GetModuleFileNameA
GetFileAttributesA
lstrcpynA
GetVersionExA
lstrlenA
WideCharToMultiByte
GetLastError
SetFileAttributesA
DeleteFileA
CloseHandle
WriteFile
CreateFileA
Sleep
GetTickCount
CreateProcessA
InterlockedDecrement
GetProcAddress
LoadLibraryA
TerminateProcess
SetFilePointer
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
FlushFileBuffers
SetStdHandle
InitializeCriticalSection
LocalFree
HeapSize
GetLocaleInfoA
GetCPInfo
RaiseException
IsBadCodePtr
IsBadReadPtr
InterlockedExchange
GetOEMCP
GetACP
GetStringTypeW
GetStringTypeA
IsBadWritePtr
HeapReAlloc
UnhandledExceptionFilter
VirtualFree
HeapCreate
RtlUnwind
HeapDestroy
GetCurrentThreadId
GetCommandLineA
HeapAlloc
HeapFree
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
LCMapStringA
MultiByteToWideChar
LCMapStringW
TlsAlloc
SetLastError
TlsFree
TlsSetValue
TlsGetValue
GetModuleHandleA
SetUnhandledExceptionFilter
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
ExitProcess
GetCurrentProcess
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
user32
LoadImageA
FindWindowA
wsprintfA
SendMessageA
InsertMenuItemA
advapi32
RegQueryValueExA
RegDeleteKeyA
RegOpenKeyExA
RegDeleteValueA
RegSetValueExA
RegCreateKeyExA
RegCloseKey
shell32
ShellExecuteExA
DragQueryFileA
ole32
StringFromIID
StringFromCLSID
ReleaseStgMedium
CoTaskMemFree
oleaut32
VariantClear
SysFreeString
SysStringLen
SysAllocString
Exports
Exports
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Sections
.text Size: 60KB - Virtual size: 59KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
BiGetCatch.dll.new.dll regsvr32 windows:4 windows x86 arch:x86
9c2c2c8a048388bcd0eb86cc5b0d7d1b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
GetLastError
lstrlenA
lstrcmpiA
DisableThreadLibraryCalls
InterlockedIncrement
InterlockedDecrement
lstrcpynA
lstrcpyA
GetModuleFileNameA
lstrcatA
IsDBCSLeadByte
FreeLibrary
SizeofResource
LoadResource
RaiseException
LoadLibraryExA
GetModuleHandleA
GetProcAddress
LoadLibraryA
CreateProcessA
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
lstrlenW
WideCharToMultiByte
MultiByteToWideChar
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
FindResourceA
InterlockedExchange
GetCPInfo
GetOEMCP
IsBadCodePtr
IsBadReadPtr
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
WriteFile
UnhandledExceptionFilter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
HeapAlloc
HeapFree
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
RtlUnwind
HeapReAlloc
GetCurrentThreadId
GetCommandLineA
ExitProcess
HeapDestroy
HeapCreate
VirtualFree
IsBadWritePtr
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
TlsAlloc
SetLastError
TlsFree
TlsSetValue
TlsGetValue
HeapSize
SetHandleCount
user32
SendMessageTimeoutA
GetClassNameA
ChildWindowFromPoint
ChildWindowFromPointEx
GetWindowRect
IsWindow
RegisterWindowMessageA
CharNextA
GetCursorPos
WindowFromPoint
advapi32
RegQueryInfoKeyA
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
RegDeleteValueA
RegDeleteKeyA
RegEnumKeyExA
ole32
CoTaskMemFree
CoTaskMemRealloc
StringFromGUID2
CoInitialize
CoTaskMemAlloc
CoCreateInstance
oleaut32
LoadRegTypeLi
SysAllocString
SysAllocStringLen
VariantClear
VariantInit
SysStringLen
VarUI4FromStr
RegisterTypeLi
UnRegisterTypeLi
LoadTypeLi
SysFreeString
shlwapi
PathFindExtensionA
Exports
Exports
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Sections
.text Size: 44KB - Virtual size: 43KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
BiGetHelper.dll.dll windows:4 windows x86 arch:x86
b1c9f30585ebb06d1c6604ed1a43c44c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetSystemTimeAsFileTime
HeapAlloc
GetFileType
HeapFree
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetCommandLineA
ExitProcess
ExitThread
HeapReAlloc
HeapSize
SetUnhandledExceptionFilter
HeapDestroy
HeapCreate
VirtualFree
IsBadWritePtr
SetHandleCount
GetStdHandle
GetStartupInfoA
SetStdHandle
RtlUnwind
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
UnhandledExceptionFilter
QueryPerformanceCounter
GetCurrentProcessId
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetTimeZoneInformation
IsBadReadPtr
IsBadCodePtr
SetEnvironmentVariableA
FileTimeToLocalFileTime
GetFileTime
GetFileAttributesA
CreateFileA
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
WritePrivateProfileStringA
GetOEMCP
GetCPInfo
FileTimeToSystemTime
GlobalFlags
RaiseException
SetErrorMode
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
TlsGetValue
EnterCriticalSection
GlobalHandle
GlobalReAlloc
LeaveCriticalSection
LocalAlloc
GetCurrentThread
lstrcmpA
ConvertDefaultLocale
EnumResourceLanguagesA
FreeResource
GlobalFindAtomA
GlobalDeleteAtom
LoadLibraryA
FreeLibrary
lstrcmpW
GetModuleHandleA
GetProcAddress
GlobalGetAtomNameA
GlobalAddAtomA
SetLastError
GlobalFree
FindResourceA
LoadResource
LockResource
SizeofResource
MulDiv
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageA
lstrcpynA
LocalFree
CreateEventA
SuspendThread
SetEvent
GetCurrentThreadId
SetThreadPriority
CompareStringW
CompareStringA
lstrlenW
lstrcmpiA
GetVersion
GetLastError
WideCharToMultiByte
MultiByteToWideChar
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
InterlockedDecrement
InterlockedIncrement
GetModuleFileNameA
CreateThread
CreateWaitableTimerA
SetWaitableTimer
CancelWaitableTimer
GetTickCount
lstrlenA
GetSystemDirectoryA
lstrcpyA
lstrcatA
CreateProcessA
ResumeThread
TerminateThread
WaitForSingleObject
Sleep
TerminateProcess
CloseHandle
FreeEnvironmentStringsA
GetSystemTime
user32
SetWindowContextHelpId
MapDialogRect
CharNextA
InvalidateRgn
CopyAcceleratorTableA
SetRect
GetMenuItemInfoA
InflateRect
EndPaint
BeginPaint
GetWindowDC
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
GetDC
ReleaseDC
GetSysColorBrush
LoadCursorA
SetCapture
KillTimer
ClientToScreen
SetWindowRgn
DrawIcon
FillRect
IsRectEmpty
FindWindowA
ShowOwnedPopups
PostQuitMessage
CreateWindowExA
GetClassLongA
GetClassInfoExA
SetPropA
GetPropA
RemovePropA
GetForegroundWindow
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
MapWindowPoints
ScrollWindow
MessageBoxA
TrackPopupMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
ShowScrollBar
AdjustWindowRectEx
ScreenToClient
DeferWindowPos
GetScrollInfo
SetScrollInfo
RegisterClassA
UnregisterClassA
DefWindowProcA
CallWindowProcA
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
GetSystemMetrics
PtInRect
RegisterWindowMessageA
wsprintfA
LoadMenuA
DestroyMenu
GetClassNameA
GetSysColor
WinHelpA
EqualRect
GetMenu
UnpackDDElParam
ReuseDDElParam
LoadIconA
GetClassInfoA
SetCursor
GetCapture
ReleaseCapture
LoadAcceleratorsA
SetActiveWindow
InvalidateRect
UpdateWindow
IsIconic
InsertMenuItemA
PostThreadMessageA
GetClientRect
MsgWaitForMultipleObjectsEx
PeekMessageA
SetTimer
GetParent
EnableWindow
PostMessageA
CharUpperA
LoadBitmapA
GetMenuCheckMarkDimensions
CreatePopupMenu
IntersectRect
OffsetRect
SetRectEmpty
CopyRect
GetLastActivePopup
BringWindowToTop
SetMenu
IsWindow
GetDesktopWindow
GetWindow
TranslateAcceleratorA
GetWindowTextLengthA
GetWindowTextA
SetWindowPos
MessageBeep
GetNextDlgGroupItem
SetFocus
IsWindowEnabled
ShowWindow
MoveWindow
SetWindowLongA
GetDlgCtrlID
SetWindowTextA
GetWindowLongA
IsDialogMessageA
RegisterClipboardFormatA
CreateDialogIndirectParamA
GetNextDlgTabItem
EndDialog
CheckMenuItem
EnableMenuItem
GetMenuState
ModifyMenuA
SendMessageA
GetFocus
SetMenuItemBitmaps
ValidateRect
GetCursorPos
GetKeyState
IsWindowVisible
GetActiveWindow
DispatchMessageA
TranslateMessage
GetMessageA
CallNextHookEx
SetWindowsHookExA
GetSubMenu
GetMenuItemCount
GetMenuItemID
GetDlgItem
SendDlgItemMessageA
IsChild
gdi32
CreateSolidBrush
CreateFontIndirectA
GetTextExtentPoint32A
CreateRectRgnIndirect
GetMapMode
GetRgnBox
GetBkColor
GetTextColor
GetStockObject
CreatePatternBrush
DeleteDC
ExtSelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
ExtTextOutA
CreateBitmap
RectVisible
PtVisible
GetPixel
BitBlt
GetWindowExtEx
GetViewportExtEx
SetMapMode
SetBkMode
RestoreDC
SaveDC
DeleteObject
Ellipse
LPtoDP
CreateEllipticRgn
GetObjectA
SetBkColor
SetTextColor
GetClipBox
CreateCompatibleDC
CreateCompatibleBitmap
GetDeviceCaps
TextOutA
comdlg32
GetFileTitleA
winspool.drv
OpenPrinterA
DocumentPropertiesA
ClosePrinter
advapi32
RegOpenKeyA
RegQueryValueExA
RegOpenKeyExA
RegDeleteKeyA
RegEnumKeyA
RegQueryValueA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
shell32
DragQueryFileA
DragFinish
comctl32
ImageList_Draw
ImageList_GetImageInfo
ord17
ImageList_Destroy
shlwapi
PathFindFileNameA
PathStripToRootA
PathFindExtensionA
PathIsUNCA
oledlg
ord8
ole32
CLSIDFromString
CoInitialize
CoUninitialize
CoTaskMemAlloc
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CLSIDFromProgID
CoTaskMemFree
OleUninitialize
CoFreeUnusedLibraries
CoRegisterMessageFilter
OleFlushClipboard
OleIsCurrentClipboard
CoRevokeClassObject
OleInitialize
oleaut32
SysStringLen
SysAllocString
VariantClear
SysAllocStringByteLen
VariantChangeType
VariantInit
SysAllocStringLen
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetElemsize
SafeArrayGetDim
SafeArrayCreate
VariantCopy
SafeArrayDestroy
SystemTimeToVariantTime
OleCreateFontIndirect
SysFreeString
ws2_32
connect
closesocket
htons
ntohs
send
inet_addr
socket
WSAStartup
WSACleanup
recv
Exports
Exports
InitBiGetHelper
SetOnlineStatus
TerminateBiGetHelper
Sections
.text Size: 200KB - Virtual size: 199KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 56KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 36KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
BiGetLoader.exe.exe windows:4 windows x86 arch:x86
d0efb3718589d75ef3b93bc488f679ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ws2_32
WSAStartup
WSAGetLastError
socket
gethostbyname
htons
connect
send
recv
setsockopt
closesocket
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
kernel32
HeapReAlloc
MultiByteToWideChar
lstrcatA
lstrlenA
GetSystemDirectoryA
FreeLibrary
GetFileAttributesA
CloseHandle
ReadFile
SetFilePointer
GetFileSize
CreateFileA
GetVersionExA
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
GetProcAddress
LoadLibraryA
DeleteFileA
WriteFile
MoveFileA
Process32Next
TerminateProcess
OpenProcess
Process32First
IsBadWritePtr
Sleep
GetLastError
GetPrivateProfileStringA
GetTickCount
GetModuleFileNameA
WaitForSingleObject
CreateProcessA
lstrcpyA
CreateEventA
GetVersion
GetStringTypeW
GetStringTypeA
GetLocaleInfoA
GetSystemInfo
VirtualAlloc
VirtualProtect
VirtualFree
HeapCreate
HeapDestroy
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
SetStdHandle
FlushFileBuffers
InitializeCriticalSection
IsBadReadPtr
IsBadCodePtr
HeapSize
CreateToolhelp32Snapshot
GetStdHandle
SetUnhandledExceptionFilter
DeleteCriticalSection
VirtualQuery
InterlockedExchange
GetCPInfo
ExitProcess
RtlUnwind
GetModuleHandleA
GetCurrentProcess
RaiseException
GetStartupInfoA
GetCommandLineA
EnterCriticalSection
LeaveCriticalSection
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringA
WideCharToMultiByte
LCMapStringW
TlsAlloc
SetLastError
TlsFree
TlsSetValue
TlsGetValue
HeapFree
HeapAlloc
GetACP
GetOEMCP
user32
MessageBoxA
LoadStringA
RegisterClassExA
CreateWindowExA
ShowWindow
GetMessageA
TranslateMessage
DispatchMessageA
FindWindowA
SendMessageA
DefWindowProcA
PostMessageA
EndPaint
PostQuitMessage
FindWindowExA
BeginPaint
advapi32
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
ole32
CoInitializeEx
CoInitialize
CoInitializeSecurity
CoCreateInstance
oleaut32
VariantInit
VariantClear
SysAllocString
SysStringLen
SysFreeString
Sections
.text Size: 56KB - Virtual size: 53KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 44KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
BiGetau.exe.exe windows:4 windows x86 arch:x86
21aeed04f0b2829d955e779abf74fb57
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ws2_32
socket
gethostbyname
htons
connect
send
recv
setsockopt
closesocket
WSAStartup
kernel32
IsBadCodePtr
IsBadReadPtr
GetLastError
GetPrivateProfileStringA
FreeLibrary
GetProcAddress
LoadLibraryA
GetModuleFileNameA
GetTempFileNameA
CreateDirectoryA
GetFileAttributesA
SetEndOfFile
SetFilePointer
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
GetFileSize
CreateFileA
GetWindowsDirectoryA
CloseHandle
OpenFile
GetShortPathNameA
GetModuleHandleA
CreateProcessA
InitializeCriticalSection
Process32Next
TerminateProcess
OpenProcess
Process32First
CreateToolhelp32Snapshot
Sleep
GetCurrentProcessId
DeleteFileA
GetTickCount
GetLocalTime
GetVersion
FindClose
FindNextFileA
FindFirstFileA
MoveFileA
ReadFile
WriteFile
InterlockedExchange
GetOEMCP
GetACP
SetStdHandle
FlushFileBuffers
RemoveDirectoryA
ExitProcess
RtlUnwind
RaiseException
GetCurrentProcess
GetStartupInfoA
GetCommandLineA
GetVersionExA
HeapAlloc
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
TlsAlloc
SetLastError
GetCurrentThreadId
TlsFree
TlsSetValue
TlsGetValue
QueryPerformanceCounter
GetSystemTimeAsFileTime
HeapFree
SetUnhandledExceptionFilter
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
HeapSize
GetLocaleInfoA
GetCPInfo
VirtualProtect
GetSystemInfo
VirtualQuery
GetStringTypeA
GetStringTypeW
user32
MessageBoxA
FindWindowA
SendMessageA
FindWindowExA
PostMessageA
advapi32
RegOpenKeyExA
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyExA
RegSetValueExA
RegQueryValueExA
RegCloseKey
shell32
SHFileOperationA
Sections
.text Size: 48KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
BiNetPlay.ocx.new.dll regsvr32 windows:4 windows x86 arch:x86
3cdb9fa2c31eb9a717537f46ccc12da5
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
ws2_32
send
WSACleanup
connect
htonl
WSAStartup
recv
ntohl
closesocket
socket
WSAAsyncSelect
htons
winmm
mixerGetDevCapsA
mixerGetNumDevs
mixerGetLineControlsA
mixerGetLineInfoA
mixerSetControlDetails
mixerGetControlDetailsA
mixerClose
mixerOpen
mfc42
ord2648
ord2055
ord6376
ord3749
ord5065
ord1727
ord2446
ord2124
ord2982
ord3147
ord3259
ord4465
ord3136
ord3262
ord2985
ord3081
ord2976
ord3830
ord3831
ord3825
ord3079
ord4080
ord4627
ord4424
ord3716
ord800
ord790
ord860
ord540
ord825
ord4275
ord5277
ord2113
ord5261
ord755
ord2567
ord2414
ord283
ord4133
ord4297
ord2754
ord5794
ord470
ord5981
ord5290
ord3573
ord3626
ord3663
ord3706
ord1641
ord2864
ord2379
ord3402
ord567
ord6375
ord4486
ord2554
ord2512
ord5731
ord3922
ord1089
ord5199
ord2396
ord3346
ord5300
ord5302
ord4079
ord4698
ord5307
ord5289
ord5714
ord3401
ord4622
ord3670
ord815
ord2724
ord3952
ord561
ord1134
ord6354
ord1216
ord6467
ord1227
ord1168
ord823
ord1877
ord4249
ord2486
ord2687
ord2688
ord4006
ord6364
ord3326
ord6365
ord4472
ord5498
ord3278
ord3353
ord3681
ord446
ord743
ord1177
ord1226
ord1210
ord2439
ord1693
ord5618
ord994
ord4342
ord4687
ord4639
ord5674
ord2156
ord4856
ord4920
ord6002
ord2137
ord1963
ord5213
ord2953
ord3868
ord5150
ord4705
ord4707
ord2876
ord2998
ord5649
ord4113
ord4661
ord4660
ord4768
ord4650
ord4903
ord4548
ord4521
ord4594
ord4988
ord4925
ord4930
ord4935
ord4659
ord4909
ord4908
ord4668
ord4667
ord4666
ord4648
ord4689
ord5023
ord4654
ord4643
ord4354
ord4780
ord4649
ord4637
ord4636
ord5060
ord4584
ord4371
ord4361
ord4356
ord4739
ord4741
ord4738
ord4409
ord4603
ord4441
ord4992
ord4979
ord2488
ord3404
ord4539
ord2954
ord6370
ord2983
ord3148
ord3260
ord4466
ord2986
ord3080
ord4081
ord4624
ord5825
ord807
ord795
ord723
ord858
ord4129
ord5683
ord3946
ord554
ord423
ord434
ord2135
ord818
ord641
ord809
ord5333
ord5313
ord2541
ord4949
ord1601
ord6030
ord2614
ord1614
ord2116
ord6199
ord6111
ord6215
ord2639
ord2558
ord4459
ord3619
ord2915
ord1200
ord5033
ord4299
ord3452
ord535
ord4224
ord926
ord924
ord2642
ord537
ord5710
ord2086
ord3721
ord1131
ord2453
ord1642
ord384
ord5572
ord5575
ord2727
ord2730
ord2729
ord538
ord4771
ord4415
ord4791
ord2841
ord2448
ord5450
ord5834
ord6394
ord2044
ord2107
ord1892
ord4252
ord1212
ord4570
ord4672
ord4843
ord5011
ord5265
ord4376
ord4853
ord4998
ord4713
ord2514
ord6052
ord1775
ord6371
ord5286
ord4438
ord3279
ord4625
ord4425
ord746
ord449
ord2278
ord2370
ord2288
ord2301
ord2266
ord4033
ord433
ord1834
ord4750
ord5016
ord4375
ord4852
ord4710
ord5280
ord355
ord4229
ord5232
ord1180
ord1176
ord1568
ord5268
ord4834
ord4608
ord4716
ord4607
ord4635
ord5067
ord3597
ord556
ord324
ord4234
ord5882
ord3289
ord1088
ord2122
ord6880
ord5655
ord6625
ord955
ord4277
ord6662
ord4160
ord5875
ord2860
ord1146
ord4163
ord3295
ord6154
ord2530
ord4366
ord4056
ord5471
ord4121
ord2389
ord5086
ord1710
ord1715
ord5234
ord6369
ord5279
ord5064
ord2444
ord3395
ord3730
ord5248
ord1949
ord4034
ord4837
ord3798
ord4353
ord6374
ord5163
ord2385
ord5241
ord4407
ord1776
ord4078
ord6055
ord269
ord826
ord600
ord1578
ord1255
ord1253
ord1570
ord1197
ord1243
ord342
ord1182
ord1577
ord1575
ord1116
ord1132
ord5008
ord686
msvcrt
_initterm
free
_onexit
__dllonexit
_CxxThrowException
_open
_filelength
_close
memcmp
fseek
fread
_mbsnbcpy
??1type_info@@UAE@XZ
strncpy
memcpy
fopen
fclose
sprintf
strcmp
strcpy
_mbscmp
_mbslwr
_mbsstr
wcslen
wcsncpy
_ftol
_adjust_fdiv
strlen
malloc
__CxxFrameHandler
memset
kernel32
CreateFileA
GetLastError
CreateProcessA
CloseHandle
SetFilePointer
Sleep
GetTempPathA
WideCharToMultiByte
LocalFree
LocalAlloc
ReadFile
lstrcpynA
GetVersionExA
lstrlenA
GetCurrentThreadId
InterlockedDecrement
GetModuleFileNameA
CreateThread
user32
IsWindowVisible
UnhookWindowsHookEx
FindWindowA
CallNextHookEx
SetCursor
LoadCursorA
PtInRect
DestroyWindow
GetClassNameA
SetFocus
IsWindow
IsWindowEnabled
GetFocus
SetWindowPos
GetDlgCtrlID
OffsetRect
PostQuitMessage
LoadIconA
InvalidateRect
GetSystemMetrics
KillTimer
FindWindowExA
EnumChildWindows
GetMenu
GetWindowRect
SetWindowsHookExA
FillRect
FrameRect
SendMessageA
EnableWindow
GetParent
SetCapture
SetTimer
SetWindowLongA
GetDesktopWindow
GetWindow
GetWindowLongA
RedrawWindow
ScreenToClient
GetClientRect
PostMessageA
ReleaseCapture
GetSysColor
IsZoomed
gdi32
CreateFontIndirectA
CreateSolidBrush
FillRgn
CreateEllipticRgnIndirect
GetStockObject
comdlg32
GetOpenFileNameA
GetSaveFileNameA
advapi32
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
shell32
DragQueryFileA
DragFinish
SHGetFileInfoA
ShellExecuteA
comctl32
ImageList_GetIcon
ole32
CoCreateInstance
oleaut32
VariantClear
LoadRegTypeLi
SysAllocString
SysFreeString
msvcp60
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@XZ
Exports
Exports
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Sections
.text Size: 132KB - Virtual size: 128KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
BigetTray.dll.dll windows:4 windows x86 arch:x86
90926054501611fc4ac34709b9315ff3
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
ws2_32
inet_ntoa
kernel32
CreateProcessA
GetFileAttributesA
GetModuleFileNameA
DeleteFileA
GetLastError
OpenFile
MultiByteToWideChar
WideCharToMultiByte
GlobalUnlock
GlobalSize
GlobalLock
FindClose
FindNextFileA
FindFirstFileA
SetFileAttributesA
CloseHandle
WriteFile
CreateFileA
GetVersion
CreateDirectoryA
Sleep
CreateEventA
GetTickCount
GlobalAlloc
lstrcpyA
lstrlenA
CreateSemaphoreA
DeleteCriticalSection
TerminateThread
WaitForSingleObject
CreateThread
InitializeCriticalSection
GetProcAddress
LoadLibraryA
TerminateProcess
ReadFile
SetFilePointer
EnterCriticalSection
LeaveCriticalSection
SetEvent
ResetEvent
InterlockedExchange
UnhandledExceptionFilter
IsBadReadPtr
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
IsBadWritePtr
VirtualFree
HeapCreate
HeapDestroy
VirtualQuery
GetSystemInfo
VirtualAlloc
VirtualProtect
GetCPInfo
GetOEMCP
GetACP
LCMapStringW
LCMapStringA
HeapSize
GetCurrentProcess
HeapReAlloc
SetUnhandledExceptionFilter
GetModuleHandleA
TlsGetValue
TlsSetValue
TlsFree
SetLastError
TlsAlloc
GetCurrentProcessId
QueryPerformanceCounter
GetVersionExA
GetCommandLineA
GetCurrentThreadId
HeapAlloc
GetStringTypeA
HeapFree
GetSystemTimeAsFileTime
RaiseException
RtlUnwind
ExitProcess
GetStringTypeW
IsBadCodePtr
SetStdHandle
FlushFileBuffers
SetEndOfFile
GetLocaleInfoA
GetEnvironmentStringsW
user32
FindWindowExA
PostQuitMessage
DefWindowProcA
RegisterClassExA
LoadCursorA
LoadIconA
DispatchMessageA
TranslateMessage
PeekMessageA
MsgWaitForMultipleObjectsEx
EmptyClipboard
SetClipboardData
GetMessageA
LoadStringA
LoadImageA
TrackPopupMenuEx
PostThreadMessageA
RegisterWindowMessageA
AppendMenuA
DestroyMenu
CreateMenu
CreateWindowExA
CreateDialogParamA
SetTimer
DestroyWindow
SetForegroundWindow
SetActiveWindow
IsWindow
PostMessageA
ShowWindow
EnableWindow
KillTimer
OpenClipboard
GetClipboardData
CloseClipboard
ScreenToClient
MoveWindow
FindWindowA
BringWindowToTop
GetWindowLongA
GetParent
GetWindow
GetWindowRect
MonitorFromWindow
GetMonitorInfoA
GetClientRect
MapWindowPoints
SetWindowPos
MessageBoxA
SetWindowLongA
DialogBoxParamA
EndDialog
SetFocus
CreatePopupMenu
InsertMenuItemA
GetCursorPos
TrackPopupMenu
SetWindowTextA
GetDlgItem
SendMessageA
GetWindowTextA
GetDesktopWindow
GetForegroundWindow
gdi32
GetStockObject
comdlg32
CommDlgExtendedError
GetSaveFileNameA
GetOpenFileNameA
advapi32
RegCreateKeyExA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegDeleteValueA
RegCreateKeyA
shell32
ShellExecuteExA
Shell_NotifyIconA
SHBrowseForFolderA
SHGetPathFromIDListA
ShellExecuteA
ole32
CoInitializeSecurity
CoInitialize
CoCreateInstance
oleaut32
VariantInit
VariantClear
Exports
Exports
PutResponse
config
init
putNetcoreInterface
run
sendcommand
sendhttprequesttoprevinst
terminal
Sections
.text Size: 116KB - Virtual size: 114KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 24KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
KillProcess.exe.exe windows:4 windows x86 arch:x86
76602a2d5ca766a435741493153b5c9d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
e:\Projects\Biget220\KillProcess\Release\KillProcess.pdb
Imports
kernel32
GetProcAddress
GetModuleHandleA
GetCurrentProcessId
GetLastError
GetTempFileNameA
CreateDirectoryA
GetFileAttributesA
FreeLibrary
LoadLibraryA
GetModuleFileNameA
DeleteFileA
OpenProcess
TerminateProcess
WriteFile
SetFilePointer
CreateToolhelp32Snapshot
Process32First
Process32Next
Sleep
CloseHandle
ExitProcess
RtlUnwind
GetCurrentProcess
GetStartupInfoA
GetCommandLineA
GetVersionExA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetSystemTimeAsFileTime
HeapFree
HeapAlloc
TlsAlloc
SetLastError
TlsFree
TlsSetValue
TlsGetValue
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
InterlockedExchange
VirtualQuery
VirtualAlloc
HeapReAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
GetACP
GetOEMCP
GetCPInfo
InitializeCriticalSection
HeapSize
GetLocaleInfoA
VirtualProtect
GetSystemInfo
GetStringTypeA
GetStringTypeW
SetStdHandle
FlushFileBuffers
user32
PostMessageA
FindWindowExA
advapi32
RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
Sections
.text Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
MediaPlayer.exe.exe windows:4 windows x86 arch:x86
b337fff89bc4e6ad7d38b09629cdbed9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mfc42
ord825
ord6876
ord537
ord6283
ord2915
ord800
ord823
ord6282
msvcrt
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_onexit
_exit
__dllonexit
_controlfp
_except_handler3
_adjust_fdiv
__CxxFrameHandler
__set_app_type
__p__fmode
_CxxThrowException
__p__commode
_XcptFilter
??1type_info@@UAE@XZ
kernel32
lstrlenW
GetLastError
MultiByteToWideChar
LocalFree
GetStartupInfoA
GetModuleHandleA
InterlockedDecrement
OpenMutexA
lstrlenA
CreateMutexA
user32
IsWindow
GetClientRect
DispatchMessageA
TranslateMessage
TranslateAcceleratorA
MoveWindow
FindWindowExA
DestroyWindow
PostQuitMessage
PostMessageA
DefWindowProcA
GetDesktopWindow
GetWindowRect
CreateWindowExA
ShowWindow
UpdateWindow
LoadCursorA
RegisterClassExA
FindWindowA
SendMessageA
LoadStringA
LoadAcceleratorsA
GetMessageA
LoadIconA
gdi32
GetStockObject
ole32
CoUninitialize
CoInitialize
oleaut32
SysAllocString
VariantChangeType
CreateErrorInfo
VariantClear
SysStringByteLen
SysAllocStringByteLen
SysFreeString
VariantInit
atl
ord47
ord42
Sections
.text Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 692B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
NetCore.dll.dll windows:4 windows x86 arch:x86
74c2416cafa8acb4712309ede8860e70
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
ws2_32
ioctlsocket
WSAResetEvent
WSAWaitForMultipleEvents
WSACloseEvent
WSAEnumNetworkEvents
WSACreateEvent
inet_ntoa
select
__WSAFDIsSet
recvfrom
htonl
sendto
accept
ntohl
bind
listen
ntohs
connect
WSAGetLastError
WSAEventSelect
setsockopt
closesocket
socket
send
recv
inet_addr
htons
gethostname
gethostbyname
kernel32
CreateWaitableTimerA
GetLocaleInfoW
IsBadCodePtr
IsBadReadPtr
GetCurrentProcessId
QueryPerformanceCounter
IsValidCodePage
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetStringTypeW
GetStringTypeA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
SetStdHandle
GetStartupInfoA
GetStdHandle
SetHandleCount
UnhandledExceptionFilter
IsBadWritePtr
VirtualFree
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
InterlockedIncrement
GetFileAttributesA
lstrcpyA
GetTickCount
FindClose
FindFirstFileA
lstrlenA
LocalFree
FormatMessageA
GetModuleHandleA
DeleteFileA
GetVersionExA
GetModuleFileNameA
GetTempPathA
CopyFileA
FindNextFileA
CreateFileA
ReadFile
SetFilePointer
SetEndOfFile
WriteFile
InterlockedDecrement
CloseHandle
GetFileSize
WideCharToMultiByte
MoveFileA
FlushFileBuffers
Sleep
FreeLibrary
GetProcAddress
LoadLibraryA
InterlockedCompareExchange
InterlockedExchange
TerminateThread
WaitForSingleObject
SetEvent
SleepEx
InitializeCriticalSectionAndSpinCount
CreateEventA
GetLastError
CancelWaitableTimer
SetWaitableTimer
GetExitCodeThread
WaitForMultipleObjects
CreateProcessA
ResetEvent
InterlockedExchangeAdd
MultiByteToWideChar
HeapCreate
HeapDestroy
HeapSize
GetCurrentProcess
TerminateProcess
GetOEMCP
RtlUnwind
RaiseException
GetSystemTimeAsFileTime
CreateDirectoryA
HeapAlloc
HeapFree
HeapReAlloc
ExitThread
GetCurrentThreadId
CreateThread
GetFileType
GetCommandLineA
GetCPInfo
ExitProcess
LCMapStringA
LCMapStringW
TlsAlloc
SetLastError
TlsFree
TlsSetValue
TlsGetValue
SetUnhandledExceptionFilter
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetACP
user32
PeekMessageA
MsgWaitForMultipleObjectsEx
PostThreadMessageA
MessageBoxA
CharLowerA
Exports
Exports
PostCommand
SendCommand2
config
init
putBitrayInterface
run
sendcommand
terminal
Sections
.text Size: 368KB - Virtual size: 366KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 64KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 339KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 936B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 24KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
SearchShare.exe.exe windows:4 windows x86 arch:x86
d211ed38bb21b555faaac424688d9dfb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
e:\Projects\Biget220\searchshare\Release\SearchShare.pdb
Imports
kernel32
TerminateProcess
Sleep
GetLastError
GetPrivateProfileStringA
WriteFile
SetFilePointer
DeleteFileA
FindClose
FindNextFileA
GetModuleFileNameA
WideCharToMultiByte
MultiByteToWideChar
GetModuleHandleA
FlushFileBuffers
SetStdHandle
GetSystemInfo
VirtualProtect
LoadLibraryA
GetProcAddress
CreateFileA
GetFileSize
ReadFile
FindFirstFileA
CloseHandle
RtlUnwind
ExitProcess
RaiseException
GetStartupInfoA
GetCommandLineA
GetVersionExA
HeapAlloc
HeapFree
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringA
LCMapStringW
SetUnhandledExceptionFilter
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
HeapSize
IsBadReadPtr
IsBadCodePtr
GetStringTypeA
GetStringTypeW
GetACP
GetOEMCP
GetCPInfo
InterlockedExchange
VirtualQuery
GetLocaleInfoA
SetEndOfFile
user32
FindWindowA
SendMessageA
advapi32
RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
Sections
.text Size: 68KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
Update.exe.exe windows:4 windows x86 arch:x86
59ac27385d5d05e98bd4ba753c508d4f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mfc42
ord5302
ord2725
ord4079
ord4698
ord5307
ord5289
ord5714
ord2982
ord3147
ord3259
ord4465
ord3136
ord3262
ord2985
ord3081
ord2976
ord3830
ord3831
ord3825
ord3079
ord4080
ord4622
ord4424
ord3738
ord561
ord815
ord641
ord609
ord795
ord765
ord800
ord2514
ord2621
ord1134
ord1199
ord1247
ord5265
ord4376
ord4853
ord4998
ord4710
ord6052
ord4078
ord1775
ord4407
ord5241
ord2385
ord5163
ord6374
ord4353
ord5280
ord3798
ord5300
ord4441
ord2648
ord2055
ord6376
ord3749
ord5065
ord1727
ord5261
ord2446
ord2124
ord5277
ord4627
ord4425
ord3597
ord324
ord4234
ord3698
ord2575
ord4396
ord3574
ord6055
ord1776
ord5290
ord3402
ord3721
ord1146
ord1168
ord860
ord540
ord567
ord2370
ord2302
ord4224
ord6199
ord4160
ord2863
ord2379
ord755
ord470
ord858
ord922
ord537
ord668
ord2818
ord3178
ord4058
ord2781
ord2770
ord941
ord356
ord4394
ord3346
ord2396
ord5199
ord1089
ord3922
ord5731
ord2512
ord2554
ord4486
ord6375
ord4274
ord4673
ord825
ord4837
ord823
ord1576
msvcrt
__dllonexit
_onexit
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
strncpy
time
srand
rand
_strupr
sprintf
_write
_chsize
_close
_lseek
_open
__CxxFrameHandler
_setmbcp
_stricmp
tolower
strchr
strncmp
isspace
isalnum
isalpha
fputs
fgets
_purecall
memmove
fprintf
_atoi64
fopen
fseek
ftell
fread
fwrite
fclose
atoi
_ftol
_itoa
kernel32
InitializeCriticalSection
lstrcpyA
InterlockedIncrement
InterlockedDecrement
GetTickCount
CreateThread
GetModuleFileNameA
lstrcmpA
Sleep
lstrlenA
GetModuleHandleA
GetStartupInfoA
DeleteCriticalSection
user32
LoadIconA
PostQuitMessage
MessageBoxA
EnableWindow
PostMessageA
IsIconic
GetSystemMetrics
GetClientRect
DrawIcon
GetSystemMenu
AppendMenuA
SendMessageA
wsock32
htons
gethostbyname
msvcp60
??0_Lockit@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?_Xlen@std@@YAXXZ
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
??Mstd@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z
?max_size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?_Split@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?_Xran@std@@YAXXZ
?_Copy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
Sections
.text Size: 48KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
WebInstall.dll.new.dll regsvr32 windows:4 windows x86 arch:x86
2d2bed99b576da8b0542c382be7d4464
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
LoadLibraryExA
GetModuleHandleA
HeapAlloc
FlushInstructionCache
GetCurrentProcess
GetCurrentThreadId
lstrcmpA
LoadResource
SizeofResource
FreeLibrary
MulDiv
GlobalAlloc
GlobalLock
GlobalUnlock
IsDBCSLeadByte
lstrcatA
GetModuleFileNameA
lstrcpyA
InterlockedExchange
lstrcpynA
InterlockedDecrement
InterlockedIncrement
DisableThreadLibraryCalls
lstrcmpiA
HeapSize
DebugBreak
HeapReAlloc
ExitProcess
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
RtlUnwind
lstrlenA
GetProcessHeap
HeapFree
GetLastError
LeaveCriticalSection
EnterCriticalSection
lstrlenW
WideCharToMultiByte
MultiByteToWideChar
DeleteCriticalSection
InitializeCriticalSection
RaiseException
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
FindResourceA
user32
GetClassNameA
RedrawWindow
GetDlgItem
GetWindow
GetSysColor
GetDesktopWindow
InvalidateRgn
FillRect
SetCapture
ReleaseCapture
GetWindowTextLengthA
GetWindowTextA
SetWindowTextA
RegisterWindowMessageA
CreateAcceleratorTableA
BeginPaint
GetClientRect
EndPaint
RegisterClassExA
GetClassInfoExA
LoadCursorA
wsprintfA
CreateWindowExA
GetParent
GetFocus
IsChild
SetFocus
ShowWindow
InvalidateRect
IsWindow
SendMessageA
GetKeyState
CallWindowProcA
GetWindowLongA
SetWindowLongA
GetDC
ReleaseDC
IntersectRect
EqualRect
OffsetRect
SetWindowRgn
SetWindowPos
UnionRect
PtInRect
DefWindowProcA
DestroyWindow
CharNextA
UnregisterClassA
DestroyAcceleratorTable
MessageBoxA
gdi32
CreateSolidBrush
GetStockObject
GetObjectA
BitBlt
CreateCompatibleDC
LPtoDP
SelectObject
DeleteObject
CreateDCA
TextOutA
SetTextAlign
CreateRectRgnIndirect
DeleteMetaFile
CloseMetaFile
RestoreDC
SetWindowExtEx
SetWindowOrgEx
SaveDC
CreateMetaFileA
GetDeviceCaps
DeleteDC
SetViewportOrgEx
SetMapMode
CreateCompatibleBitmap
advapi32
RegDeleteValueA
RegEnumKeyExA
RegQueryInfoKeyA
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
RegDeleteKeyA
ole32
CLSIDFromString
CLSIDFromProgID
CoGetClassObject
OleLockRunning
OleUninitialize
OleInitialize
CreateStreamOnHGlobal
OleSaveToStream
WriteClassStm
OleLoadFromStream
CreateOleAdviseHolder
CreateDataAdviseHolder
OleRegGetMiscStatus
OleRegGetUserType
OleRegEnumVerbs
StringFromGUID2
CoTaskMemRealloc
CoTaskMemFree
CoTaskMemAlloc
CoCreateInstance
oleaut32
LoadRegTypeLi
VarBstrCat
SysAllocStringLen
OleCreateFontIndirect
OleCreatePropertyFrame
SysFreeString
SysAllocString
LoadTypeLi
UnRegisterTypeLi
RegisterTypeLi
VarUI4FromStr
VariantInit
VariantClear
SysStringByteLen
VariantChangeType
SysAllocStringByteLen
SysStringLen
shlwapi
PathFindExtensionA
Exports
Exports
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Sections
.text Size: 52KB - Virtual size: 49KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
nethelper.dat
-
nethelper.dll.dll windows:4 windows x86 arch:x86
6b0cc214b99f9db9cc6bebe69a4bd8f3
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
lstrlenA
GetCurrentThreadId
GetCommandLineA
GetVersionExA
ExitProcess
GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
TlsAlloc
SetLastError
GetLastError
TlsFree
TlsSetValue
TlsGetValue
HeapFree
HeapAlloc
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
UnhandledExceptionFilter
WriteFile
LeaveCriticalSection
EnterCriticalSection
GetACP
GetOEMCP
GetCPInfo
VirtualAlloc
HeapReAlloc
InitializeCriticalSection
RtlUnwind
InterlockedExchange
VirtualQuery
LoadLibraryA
HeapSize
GetLocaleInfoA
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
VirtualProtect
GetSystemInfo
Exports
Exports
GetFilterBuffer
GetFilterBufferLen
GetFilterVersion
Sections
.text Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
ots.dat
-
新云软件.url.url