c7779e5517c234740559dd3de8934a79165b2edbe50de2b867de7191be722fbe

Sharing

Copy URL Twitter E-mail

General

Target
c7779e5517c234740559dd3de8934a79165b2edbe50de2b867de7191be722fbe
Size 2.8MB
Sample240725-p3672sseqd
SHA256 c7779e5517c234740559dd3de8934a79165b2edbe50de2b867de7191be722fbe
MD5 84b54230612be88a2b3b8a50a7598951
SHA1 85d6e44b65358bc33659b689c931774f557be7ee
SHA512 6d53114fbf091e196cbe670e7041c4eabdc7fd12779953b4682ded62d6435c31a372f88a342c8e21de5fb58e3105e5fd33238e6b3a72bfe460e43e8f23256bc2
SSDEEP 49152:J/xfJsHBQOR1NZj41W3ZxB+e3P3OTtnEIXgaq6k1nFepkimJTOauIZD:J/xfJsHBQObNh4M3ZxB+e3P3OlEIX3Ry
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

c7779e5517c234740559dd3de8934a79165b2edbe50de2b867de7191be722fbe

.exe 2.8MB

c7779e5517c234740559dd3de8934a79165b2edbe50de2b867de7191be722fbe

IMPHASH 0aba6b2b28bba123d096610cb4724440
SHA256 c7779e5517c234740559dd3de8934a79165b2edbe50de2b867de7191be722fbe
MD5 84b54230612be88a2b3b8a50a7598951
SHA1 85d6e44b65358bc33659b689c931774f557be7ee
SHA512 6d53114fbf091e196cbe670e7041c4eabdc7fd12779953b4682ded62d6435c31a372f88a342c8e21de5fb58e3105e5fd33238e6b3a72bfe460e43e8f23256bc2
SSDEEP 49152:J/xfJsHBQOR1NZj41W3ZxB+e3P3OTtnEIXgaq6k1nFepkimJTOauIZD:J/xfJsHBQObNh4M3ZxB+e3P3OlEIX3Ry
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

N/A

Digest Algorithm

N/A

PE Digests Matches

Not matched

Trusted

Not trusted

Minor OS version

Major OS version

Entry point

2099413

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

E:\Project\Base\aliyunSVN\AILK\WadeSafe\10.x\NGBOSS\XINJ\10.7.6.30\Release\NGBOSS.pdb

kernel32

GetTempPathA ReadFile GetFileSize CreateFileA ExpandEnvironmentStringsA GetFileAttributesA Module32NextW GetLongPathNameA Module32FirstW CreateToolhelp32Snapshot SetFilePointer WriteFile VirtualQuery GlobalFree MulDiv GlobalAlloc ResetEvent CreateIoCompletionPort GetSystemInfo GetQueuedCompletionStatus QueryPerformanceFrequency GlobalMemoryStatusEx DeviceIoControl lstrlenA RaiseException DeleteCriticalSection InitializeCriticalSection WideCharToMultiByte FindFirstFileA GetLocalTime FileTimeToSystemTime DeleteFileA FindNextFileA FindClose FindResourceA SizeofResource LoadResource GetVersionExW GetComputerNameA SetConsoleTextAttribute GetWindowsDirectoryA GetStdHandle LoadLibraryExW OutputDebugStringA GetSystemTimeAsFileTime SetLastError InitializeCriticalSectionAndSpinCount InterlockedCompareExchange TlsAlloc TlsGetValue GetModuleFileNameA SystemTimeToFileTime GetModuleHandleA OpenProcess ReadProcessMemory WriteProcessMemory VirtualAllocEx InterlockedDecrement InterlockedExchangeAdd GetTickCount lstrlenW GetModuleHandleW CreateEventW CreateThread WaitForSingleObject SetEvent GetProcessHeap IsDebuggerPresent UnhandledExceptionFilter GetStartupInfoA InterlockedExchange FatalAppExitW IsBadReadPtr InterlockedIncrement HeapFree HeapAlloc HeapCreate HeapDestroy GetSystemTime GetEnvironmentVariableW ReadConsoleW ReadConsoleA SetConsoleMode GetConsoleMode FindFirstFileW FindNextFileW ConvertThreadToFiber ConvertFiberToThread LoadLibraryExA LoadLibraryA QueryFullProcessImageNameW EnterCriticalSection LeaveCriticalSection GlobalLock GlobalUnlock GetCurrentThread RtlCaptureContext GetModuleHandleExA GetModuleHandleExW FreeLibrary LocalAlloc GetConsoleScreenBufferInfo Sleep GetCommandLineW GetModuleFileNameW GetLastError GetSystemDirectoryA MultiByteToWideChar SetUnhandledExceptionFilter LoadLibraryW GetProcAddress VirtualProtect CreateFileW GetCurrentThreadId GetCurrentProcessId GetCurrentProcess LocalFree TerminateProcess GetFileType GetVersion CreateFiber SwitchToFiber DeleteFiber FormatMessageW QueryPerformanceCounter TlsFree TlsSetValue CloseHandle

user32

GetClientRect SwitchToThisWindow SetWindowPos GetSystemMetrics LoadImageW GetProcessWindowStation GetUserObjectInformationW UnregisterClassW DestroyWindow SystemParametersInfoW MessageBoxA GetClipboardData EnumWindows SendMessageTimeoutW FindWindowExW RegisterClassW GetAsyncKeyState GetDialogBaseUnits EnableWindow BringWindowToTop CreatePopupMenu SetWindowTextW GetWindowThreadProcessId GetWindowRect DrawIcon GetCursor GetWindowDC GetDesktopWindow AppendMenuW TrackPopupMenu MoveWindow RegisterWindowMessageW GetClassNameA EndPaint PostQuitMessage SetWindowLongW GetWindowLongW GetMessageW GetClassNameW SendMessageW GetKeyState TranslateMessage DispatchMessageW LoadIconW LoadCursorW GetCursorPos GetDC GetForegroundWindow BeginPaint CallWindowProcW InSendMessage GetParent AttachThreadInput GetDlgItem SetForegroundWindow SetFocus SetWindowsHookExW UpdateWindow ShowWindow MessageBoxW CallNextHookEx DefWindowProcW GetWindowTextA CreateWindowExW RegisterClassExW

gdi32

CreateCompatibleBitmap CreateSolidBrush Ellipse GetDeviceCaps CreateFontA SetBkMode DeleteObject GetObjectW GetStockObject CreateCompatibleDC SelectObject BitBlt DeleteDC

advapi32

GetNamedSecurityInfoA BuildExplicitAccessWithNameA SetEntriesInAclA SetNamedSecurityInfoA RegOpenKeyExA RegEnumKeyA RegOpenKeyA RegQueryValueExA RegDeleteKeyA GetUserNameA GetUserNameW RegCreateKeyA RegSetValueExA RegCloseKey CryptReleaseContext CryptGenRandom CryptAcquireContextW CryptEnumProvidersW CryptDestroyKey CryptGetProvParam CryptGetUserKey CryptExportKey CryptDestroyHash CryptSignHashW CryptSetHashParam CryptCreateHash CryptDecrypt DeregisterEventSource ReportEventW RegisterEventSourceW

shell32

ShellExecuteExA SHGetFolderPathW ShellExecuteA CommandLineToArgvW

ole32

CLSIDFromProgID CoInitialize CreateStreamOnHGlobal CoGetClassObject StringFromCLSID ProgIDFromCLSID CoTaskMemFree ReleaseStgMedium StgCreateDocfile OleCreate CoCreateInstance OleUninitialize OleInitialize CoUninitialize

oleaut32

CreateErrorInfo SetErrorInfo GetErrorInfo SysAllocString SysFreeString VariantClear SafeArrayDestroy SafeArrayAccessData SafeArrayCreate LoadTypeLibEx LoadRegTypeLi VariantChangeType SysAllocStringLen SysStringLen OleLoadPicture VariantCopy VariantInit

shlwapi

PathGetArgsW PathFileExistsA

msvcp90

?setw@std@@YA?AU?$_Smanip@H@1@H@Z ?_Myptr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@IBEPBDXZ ?str@?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ ??0?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@H@Z ??0?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@G@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@F@Z ?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEDD@Z ?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ ?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ ?data@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ ?clear@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ ??_D?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ ?rdstate@ios_base@std@@QBEHXZ ??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z ?_Lock@_Mutex@std@@QAEXXZ ?_Unlock@_Mutex@std@@QAEXXZ ?_Throw@std@@YAXABVexception@stdext@@@Z ?_Raise_handler@std@@3P6AXABVexception@stdext@@@ZA ??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_WI@Z ??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z ??0?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z ?str@?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ ??_D?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ ?empty@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE_NXZ ??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ ?c_str@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEPB_WXZ ??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ ??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ ??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ ?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@PAV32@@Z ?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD0@Z ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ ??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z ?pbackfail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHH@Z ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ ?underflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ ?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHPADH@Z ?_Xsgetn_s@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHPADIH@Z ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHPBDH@Z ?seekoff@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE?AV?$fpos@H@2@JHH@Z ?seekpos@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE?AV?$fpos@H@2@V32@H@Z ?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PADH@Z ?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ ?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@PBX@Z ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ ?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ ?uncaught_exception@std@@YA_NXZ ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z ?width@ios_base@std@@QAEHH@Z ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHPBDH@Z ?eq_int_type@?$char_traits@D@std@@SA_NABH0@Z ?eof@?$char_traits@D@std@@SAHXZ ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z ?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ ?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDXZ ?flags@ios_base@std@@QBEHXZ ?width@ios_base@std@@QBEHXZ ?length@?$char_traits@D@std@@SAIPBD@Z ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ ?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ ?good@ios_base@std@@QBE_NXZ ?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ ?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z ??$?6DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z ?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@@Z ?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD@Z ?size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ ??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z ??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z ??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z ??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z ??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ ??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z ??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z ??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z ??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z ??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z ??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z ??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z ??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEABDI@Z ?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ ?find_first_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z ?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z ?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z ?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z ?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z ??$?MDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z ?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z ?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z ?compare@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEHPBD@Z ?swap@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXAAV12@@Z ?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z ??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@D@Z ??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NPBDABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDI@Z ?empty@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE_NXZ ?replace@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@IIPBD@Z ??$?9DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@K@Z ?length@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIXZ ??_7?$basic_ostream@DU?$char_traits@D@std@@@std@@6B@

ws2_32

socket getaddrinfo __WSAFDIsSet setsockopt inet_ntoa accept WSACleanup WSASocketW WSASend gethostbyname connect htonl bind listen WSAAccept recv send ioctlsocket WSARecv WSAGetLastError closesocket shutdown WSAStartup inet_addr htons getpeername ntohs getsockname select freeaddrinfo getnameinfo getsockopt WSASetLastError

wininet

InternetGetCookieExA HttpQueryInfoA InternetConnectA HttpOpenRequestA HttpSendRequestA InternetOpenA InternetOpenUrlA InternetCloseHandle InternetReadFile HttpOpenRequestW InternetConnectW HttpAddRequestHeadersA FindFirstUrlCacheEntryW FindNextUrlCacheEntryW InternetSetOptionW DeleteUrlCacheEntryW

version

GetFileVersionInfoSizeA GetFileVersionInfoA VerQueryValueA GetFileVersionInfoSizeW GetFileVersionInfoW VerQueryValueW

iphlpapi

GetExtendedTcpTable GetAdaptersInfo

gdiplus

GdiplusShutdown GdipCloneImage GdipAlloc GdipFree GdipCreateBitmapFromScan0 GdipCreateBitmapFromHBITMAP GdipGetImageGraphicsContext GdipScaleWorldTransform GdipDrawImageI GdipDeleteGraphics GdipDisposeImage GdipSaveImageToStream GdipGetImageEncodersSize GdipGetImageEncoders GdiplusStartup

oleacc

ObjectFromLresult

dbghelp

SymFromAddr StackWalk SymFunctionTableAccess SymGetModuleBase MiniDumpWriteDump

msvcr90

?terminate@@YAXXZ ?_type_info_dtor_internal_method@type_info@@QAEXXZ _invoke_watson _controlfp_s _itoa _memicmp __set_app_type __p__fmode __p__commode _adjust_fdiv __setusermatherr _configthreadlocale _initterm_e _initterm _acmdln _ismbblead _XcptFilter _cexit __getmainargs _amsg_exit _decode_pointer _onexit __RTDynamicCast _lock _encode_pointer __dllonexit _unlock _except_handler4_common signal fputs _stat64i32 _gmtime64_s raise _exit _vsnwprintf wcsstr _strdup fgets _fileno _setmode ferror strcspn _strnicmp strspn qsort memmove _vsnprintf _getpid _fdopen _close getenv _write _wassert strtol _errno _popen fflush _access strerror_s _strupr _unlink _crt_debugger_hook _localtime64_s ?_open@@YAHPBDHH@Z _pclose strncat memmove_s _stricmp abort _atoi64 fabs floor pow vsprintf_s strtoul memchr __iob_func fprintf perror _time64 srand rand strncmp isalpha __isascii iscntrl ??3@YAXPAX@Z _swprintf __CxxFrameHandler3 memset strcpy printf memcmp sprintf_s swprintf_s memcpy _wcsicmp ??2@YAPAXI@Z wcscmp strcmp _invalid_parameter_noinfo _CxxThrowException ??0exception@std@@QAE@ABV01@@Z ??1exception@std@@UAE@XZ ??0exception@std@@QAE@XZ ??0exception@std@@QAE@ABQBD@Z ?what@exception@std@@UBEPBDXZ ??_V@YAXPAX@Z wcslen wcsncpy atoi strtok free strchr malloc strrchr wcsrchr fclose fwrite fopen strlen sscanf strstr wcstombs_s sprintf strcat isalnum memcpy_s feof fread _wfopen wcscat wcscpy _snwprintf strncpy wcstombs atol rewind ftell fseek exit realloc toupper tolower _purecall isspace islower isupper isxdigit ispunct isprint isgraph isdigit

crypt32

CertDuplicateCertificateContext CertEnumCertificatesInStore CertFindCertificateInStore CertGetCertificateContextProperty CryptStringToBinaryA CertCreateCertificateContext CertOpenStore CertFreeCertificateContext CertAddCertificateContextToStore CertCloseStore

psapi

GetModuleInformation EnumProcessModules

generic

count=7, id=150, version=20413,

count=14, id=149, productName=VS2008 build 21022, version=21022,

count=20, id=131, productName=VS2008 build 21022, version=21022,

count=2, id=158, productName=VS2010 build 30319, version=30319,

count=1, id=109, version=31008,

count=1, id=18, version=8444,

count=1, id=15, productName=VS2003 (.NET) build 3077, version=3077,

count=5, id=138, version=30729,

count=4, id=147, productName=VS2008 build 21022, version=21022,

count=25, id=132, productName=VS2008 build 21022, version=21022,

count=11, id=109, productName=VS2005 build 50727, version=50727,

count=35, id=123, productName=VS2005 build 50727, version=50727,

count=738, id=1, productName=Unmarked objects,

count=576, id=131, productName=VS2008 SP1 build 30729, version=30729,

count=136, id=132, productName=VS2008 SP1 build 30729, version=30729,

count=1, id=148, productName=VS2008 build 21022, version=21022,

count=1, id=145, productName=VS2008 SP1 build 30729, version=30729,