index_collator_extension
Static task
static1
Behavioral task
behavioral1
Sample
mongoperf.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
mongoperf.exe
Resource
win10v2004-20230703-en
General
-
Target
mongoperf.exe
-
Size
25.5MB
-
MD5
1c05ba9b8ae1b256998036fbe054bc0a
-
SHA1
23044232a407ab56e93c571bb0c68adad6809564
-
SHA256
323b0de0e6949f7280e644b42f2b79fa618e16f7bc11db9b8e3a297e1fd5509c
-
SHA512
ac2f4afee2748d11cf40228b866b094db6e66a9b6e931d6b29363ea1f433ecaa440cf41710a6049b4f71e1b9564e539bad1f5f3ef605c8d49f4fe6c04f10e75c
-
SSDEEP
393216:1Vc+lceVub5OzTgIHHPupYeCHNRB2J8w9R3RuWd6nYLIXKJcB:AQcfinYLIXKJc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource mongoperf.exe
Files
-
mongoperf.exe.exe windows x64
3bbae8779508736b79922d62e3577756
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
dbghelp
SymGetModuleInfo64
SymGetOptions
SymGetLineFromAddr64
StackWalk64
SymInitializeW
SymSetOptions
SymCleanup
SymFromAddr
iphlpapi
GetAdaptersAddresses
advapi32
OpenProcessToken
RegQueryValueExW
RegOpenKeyExW
LookupPrivilegeValueW
SystemFunction036
RegCloseKey
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
AdjustTokenPrivileges
bcrypt
BCryptOpenAlgorithmProvider
BCryptGenRandom
BCryptCloseAlgorithmProvider
crypt32
CertCloseStore
CertEnumCertificatesInStore
CertOpenStore
kernel32
FindFirstFileExW
WaitForSingleObjectEx
InitOnceExecuteOnce
SleepConditionVariableCS
WakeAllConditionVariable
InitializeConditionVariable
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
IsProcessorFeaturePresent
InitializeSListHead
OutputDebugStringW
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetLastError
LocalFree
FormatMessageW
LoadLibraryW
VirtualProtect
VirtualAlloc
VirtualFree
CreateFileW
FlushFileBuffers
SetEndOfFile
SetFilePointerEx
WriteFile
CloseHandle
ReadFile
SetFilePointer
GetSystemInfo
VirtualQuery
CreateFileMappingW
MapViewOfFileEx
FlushViewOfFile
UnmapViewOfFile
GetProcAddress
lstrcmpW
LoadLibraryA
InitializeCriticalSectionAndSpinCount
GetCurrentProcess
TerminateProcess
TlsGetValue
K32GetProcessMemoryInfo
QueryPerformanceCounter
QueryPerformanceFrequency
SetCriticalSectionSpinCount
GetSystemTimeAsFileTime
GetModuleHandleA
TlsSetValue
GetCurrentThreadId
GetCurrentProcessId
IsDebuggerPresent
TlsAlloc
SuspendThread
ResumeThread
GetThreadContext
SetThreadContext
GetVersionExW
SetEvent
ResetEvent
WaitForSingleObject
CreateEventW
Sleep
CreateFileA
MapViewOfFile
GetThreadLocale
GetLocaleInfoA
RaiseException
HeapDestroy
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
GetProcessHeap
InitializeCriticalSectionEx
WideCharToMultiByte
TlsFree
VerSetConditionMask
SetLastError
CreateIoCompletionPort
GetQueuedCompletionStatus
PostQueuedCompletionStatus
SleepEx
SetWaitableTimer
QueueUserAPC
TerminateThread
WaitForMultipleObjects
FormatMessageA
CreateWaitableTimerW
VerifyVersionInfoW
MultiByteToWideChar
FindResourceExW
LoadResource
LockResource
SizeofResource
FindResourceW
GetModuleHandleW
SetProcessWorkingSetSizeEx
VirtualLock
VirtualUnlock
GetProcessWorkingSetSize
GlobalMemoryStatusEx
GetSystemDirectoryA
GetLogicalProcessorInformation
GetNativeSystemInfo
SystemTimeToFileTime
GetStdHandle
WriteConsoleW
RtlCaptureContext
GetCurrentThread
GetModuleFileNameW
GetDiskFreeSpaceExW
GetFileSizeEx
SetUnhandledExceptionFilter
FreeLibrary
GetFileType
AreFileApisANSI
GetCurrentDirectoryW
CreateDirectoryW
DeleteFileW
FindClose
FindFirstFileW
FindNextFileW
GetFileAttributesW
GetFileAttributesExW
GetFullPathNameW
RemoveDirectoryW
DeviceIoControl
CopyFileW
MoveFileExW
SwitchToThread
GetEnvironmentVariableA
CreateToolhelp32Snapshot
Module32First
Module32Next
TryEnterCriticalSection
DebugBreak
GetModuleHandleExW
LockFile
UnlockFile
version
GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA
winmm
timeBeginPeriod
timeEndPeriod
timeGetDevCaps
ws2_32
closesocket
bind
accept
__WSAFDIsSet
getnameinfo
freeaddrinfo
getaddrinfo
WSAAddressToStringW
WSAGetLastError
WSASetLastError
connect
ioctlsocket
getsockname
getsockopt
htonl
htons
listen
inet_pton
inet_ntop
GetNameInfoW
FreeAddrInfoW
GetAddrInfoW
socket
send
recv
WSASocketW
ntohs
select
setsockopt
shutdown
gethostname
WSAStartup
WSACleanup
WSAIoctl
WSARecv
WSASend
libeay32
ord3212
ord2
ord962
ord333
ord2936
ord269
ord3109
ord2821
ord181
ord188
ord1214
ord679
ord543
ord544
ord567
ord576
ord754
ord639
ord680
ord2204
ord958
ord556
ord625
ord623
ord1969
ord2033
ord2596
ord3315
ord331
ord357
ord356
ord366
ord1870
ord363
ord362
ord1161
ord2075
ord2023
ord21
ord4507
ord4510
ord254
ord246
ord2291
ord223
ord95
ord76
ord78
ord93
ord1799
ord3253
ord196
ord908
ord909
ord229
ord253
ord222
ord3205
ord227
ord399
ord395
ord401
ord1958
ord566
ord1654
ord1653
ord1804
ord197
ord1800
ord66
ord89
ord109
ord52
ord1882
ord1802
ord281
ord202
ord624
ord641
ord657
ord578
ssleay32
ord16
ord243
ord231
ord5
ord60
ord61
ord73
ord15
ord291
ord138
ord143
ord151
ord158
ord150
ord141
ord155
ord183
ord96
ord341
ord343
ord350
ord314
ord315
ord313
ord172
ord171
ord170
ord110
ord112
ord111
ord164
ord118
ord117
ord58
ord6
ord45
ord108
ord78
ord43
ord35
ord48
ord75
ord22
ord21
ord74
ord222
ord83
ord180
ord8
ord12
ord157
ord116
msvcp140
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z
?imbue@ios_base@std@@QEAA?AVlocale@2@AEBV32@@Z
?_Getcat@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
??1?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MEAA@XZ
??0?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEAA@_K@Z
?do_get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MEBA?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AEAVios_base@2@AEAHAEAG@Z
?do_get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MEBA?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AEAVios_base@2@AEAHAEAI@Z
?do_get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MEBA?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AEAVios_base@2@AEAHAEAJ@Z
?do_get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MEBA?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AEAVios_base@2@AEAHAEAK@Z
?do_get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MEBA?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AEAVios_base@2@AEAHAEAM@Z
?do_get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MEBA?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AEAVios_base@2@AEAHAEAN@Z
?do_get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MEBA?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AEAVios_base@2@AEAHAEAO@Z
?do_get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MEBA?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AEAVios_base@2@AEAHAEAPEAX@Z
?do_get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MEBA?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AEAVios_base@2@AEAHAEA_J@Z
?do_get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MEBA?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AEAVios_base@2@AEAHAEA_K@Z
?do_get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MEBA?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AEAVios_base@2@AEAHAEA_N@Z
?id@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@2V0locale@2@A
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAA@XZ
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAG_W@Z
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAA_JPEB_W_J@Z
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXH_N@Z
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IEAA@XZ
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAXXZ
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@XZ
??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z
??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ
?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ
?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAXAEBVlocale@2@@Z
?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAPEAV12@PEA_W_J@Z
?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JXZ
?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAHXZ
?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAGXZ
?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEA_W_J@Z
?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEB_W_J@Z
?seekpos@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA?AV?$fpos@U_Mbstatet@@@2@V32@H@Z
?seekoff@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA?AV?$fpos@U_Mbstatet@@@2@_JHH@Z
?underflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?pbackfail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHH@Z
?overflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHH@Z
?set_new_handler@std@@YAP6AXXZP6AXXZ@Z
??1Init@ios_base@std@@QEAA@XZ
?_Init_ctor@Init@ios_base@std@@CAXPEAV123@@Z
??_D?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?_Xruntime_error@std@@YAXPEBD@Z
??0_Locinfo@std@@QEAA@HPEBD@Z
?_New_Locimp@_Locimp@locale@std@@CAPEAV123@_N@Z
?_Makeloc@_Locimp@locale@std@@CAPEAV123@AEBV_Locinfo@3@HPEAV123@PEBV23@@Z
??0?$codecvt@_WDU_Mbstatet@@@std@@QEAA@_K@Z
??1?$codecvt@_WDU_Mbstatet@@@std@@MEAA@XZ
?id@?$codecvt@_WDU_Mbstatet@@@std@@2V0locale@2@A
?in@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEA_W3AEAPEA_W@Z
?out@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEB_W1AEAPEB_WPEAD3AEAPEAD@Z
?_Getcat@?$codecvt@_WDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?tolower@?$ctype@D@std@@QEBAPEBDPEADPEBD@Z
?tolower@?$ctype@D@std@@QEBADD@Z
_Strxfrm
_Strcoll
_Getcoll
?id@?$collate@D@std@@2V0locale@2@A
?toupper@?$ctype@D@std@@QEBADD@Z
?_Xinvalid_argument@std@@YAXPEBD@Z
?_Winerror_message@std@@YAKKPEADK@Z
?_Winerror_map@std@@YAHH@Z
?id@?$ctype@D@std@@2V0locale@2@A
?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?narrow@?$ctype@D@std@@QEBADDD@Z
?widen@?$ctype@D@std@@QEBADD@Z
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
?id@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@2V0locale@2@A
?id@?$numpunct@D@std@@2V0locale@2@A
?_Incref@facet@locale@std@@UEAAXXZ
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
?_Getcat@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?put@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEBA?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AEAVios_base@2@DPEBUtm@@PEBD3@Z
?imbue@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAA?AVlocale@2@AEBV32@@Z
?getloc@ios_base@std@@QEBA?AVlocale@2@XZ
?classic@locale@std@@SAAEBV12@XZ
?_Locimp_Addfac@_Locimp@locale@std@@CAXPEAV123@PEAVfacet@23@_K@Z
?_New_Locimp@_Locimp@locale@std@@CAPEAV123@AEBV123@@Z
??1facet@locale@std@@MEAA@XZ
??0facet@locale@std@@IEAA@_K@Z
??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z
?_Gettrue@_Locinfo@std@@QEBAPEBDXZ
?_Getfalse@_Locinfo@std@@QEBAPEBDXZ
??1_Locinfo@std@@QEAA@XZ
??0_Locinfo@std@@QEAA@PEBD@Z
_Getcvt
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z
?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@V?$fpos@U_Mbstatet@@@2@@Z
?tellp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ
?exceptions@ios_base@std@@QEAAXH@Z
?seekp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@V?$fpos@U_Mbstatet@@@2@@Z
?setprecision@std@@YA?AU?$_Smanip@_J@1@_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@PEBX@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@G@Z
?_Random_device@std@@YAIXZ
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAH@Z
?_XGetLastError@std@@YAXXZ
?_Execute_once@std@@YAHAEAUonce_flag@1@P6AHPEAX1PEAPEAX@Z1@Z
?__ExceptionPtrRethrow@@YAXPEBX@Z
?__ExceptionPtrCurrentException@@YAXPEAX@Z
?__ExceptionPtrToBool@@YA_NPEBX@Z
?__ExceptionPtrAssign@@YAXPEAXPEBX@Z
?__ExceptionPtrCopy@@YAXPEAXPEBX@Z
?__ExceptionPtrDestroy@@YAXPEAX@Z
?__ExceptionPtrCreate@@YAXPEAX@Z
_Thrd_sleep
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z
?uncaught_exception@std@@YA_NXZ
?_Xbad_alloc@std@@YAXXZ
?_Xlength_error@std@@YAXPEBD@Z
?_Xout_of_range@std@@YAXPEBD@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
_Thrd_start
_Thrd_detach
_Mtx_init
_Mtx_destroy
_Mtx_lock
_Mtx_unlock
_Cnd_init
_Cnd_destroy
_Cnd_wait
_Cnd_signal
_Cnd_do_broadcast_at_thread_exit
?_Throw_C_error@std@@YAXH@Z
?_Throw_Cpp_error@std@@YAXH@Z
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?_BADOFF@std@@3_JB
?cin@std@@3V?$basic_istream@DU?$char_traits@D@std@@@1@A
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_J@Z
?_Xbad_function_call@std@@YAXXZ
_Mtx_init_in_situ
_Mtx_destroy_in_situ
?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@J@Z
?_Syserror_map@std@@YAPEBDH@Z
_Xtime_get_ticks
_Query_perf_counter
_Query_perf_frequency
_Mtx_current_owns
_Mtx_trylock
_Cnd_init_in_situ
_Cnd_destroy_in_situ
_Cnd_timedwait
_Thrd_join
_Thrd_id
_Cnd_broadcast
??0_Lockit@std@@QEAA@H@Z
??1_Lockit@std@@QEAA@XZ
??Bid@locale@std@@QEAA_KXZ
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?always_noconv@codecvt_base@std@@QEBA_NXZ
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z
vcruntime140
__C_specific_handler
__std_type_info_name
strstr
strrchr
__RTDynamicCast
__std_type_info_compare
__RTtypeid
memcmp
__std_exception_destroy
__std_exception_copy
memset
memcpy
__CxxFrameHandler3
_CxxThrowException
strchr
memmove
__std_terminate
_purecall
__vcrt_InitializeCriticalSectionEx
memchr
api-ms-win-crt-runtime-l1-1-0
_exit
_c_exit
__p___argv
__p___argc
_initterm_e
_initterm
__fpe_flt_rounds
_get_initial_narrow_environment
_set_invalid_parameter_handler
_set_app_type
_seh_filter_exe
_cexit
exit
_crt_atexit
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
strerror
_configure_narrow_argv
_clearfp
_statusfp
_strerror
_set_errno
_invalid_parameter_noinfo_noreturn
terminate
_errno
strerror_s
_set_abort_behavior
_register_thread_local_exe_atexit_callback
_invalid_parameter_noinfo
_beginthreadex
abort
api-ms-win-crt-heap-l1-1-0
_malloc_base
realloc
_msize
calloc
_aligned_malloc
_aligned_free
_set_new_mode
free
_callnewh
_free_base
malloc
api-ms-win-crt-utility-l1-1-0
rand
bsearch
qsort
api-ms-win-crt-math-l1-1-0
trunc
sin
atan2
log2
log1p
hypot
expm1
_copysign
ldexp
cbrt
atanh
asinh
__setusermatherr
tanh
sinh
frexp
round
log10
cosh
cos
_dsign
scalbn
llround
tan
exp
atan
asin
acos
remainder
ceil
pow
floorf
ceilf
fmod
sqrtf
sqrt
log
floor
acosh
_dtest
api-ms-win-crt-stdio-l1-1-0
_set_fmode
__stdio_common_vfprintf
fsetpos
fputs
fputc
fgetpos
fgetc
__acrt_iob_func
_fseeki64
fwrite
fflush
fclose
_get_stream_buffer_pointers
_write
_lseek
__stdio_common_vsprintf
_get_osfhandle
setvbuf
__stdio_common_vsscanf
__p__commode
ungetc
_setmaxstdio
_close
_wsopen_dispatch
fopen
_open
_read
__stdio_common_vsnprintf_s
api-ms-win-crt-filesystem-l1-1-0
_fstat64i32
_stat64i32
_unlock_file
_lock_file
remove
api-ms-win-crt-string-l1-1-0
toupper
strncpy
isdigit
isupper
strpbrk
wcsncmp
strnlen
strcmp
_strnicmp
_strdup
_stricmp
strncat
isalnum
isspace
strncmp
isxdigit
isprint
tolower
isalpha
wmemcpy_s
api-ms-win-crt-time-l1-1-0
_time64
_gmtime64_s
_ctime64_s
_get_timezone
strftime
_localtime64
_difftime64
_tzset
_localtime64_s
api-ms-win-crt-convert-l1-1-0
mbstowcs_s
wcstombs_s
_atoi64
strtod
_strtoui64
_strtoi64
strtoull
atoi
strtoul
strtol
strtoll
api-ms-win-crt-environment-l1-1-0
getenv
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
localeconv
Exports
Exports
Sections
.text Size: 14.7MB - Virtual size: 14.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 9.5MB - Virtual size: 9.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 466KB - Virtual size: 994KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 650KB - Virtual size: 649KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 1024B - Virtual size: 961B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfids Size: 512B - Virtual size: 72B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 51KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 133KB - Virtual size: 133KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ