Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
rc.dll
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
rc.dll
Resource
win10v2004-20231025-en
Target
654e185f4e4812ac6362558290112508609c9e4dceb5e8f85f9580fe36f3a0a1.zip.zip
Size
4.2MB
MD5
0ca76d944fa8a176bf8f9b0fb5c8bab2
SHA1
948587513b5f48b58fcb763fe34df6e963e98702
SHA256
c91eea42beef70c3cf22232e0d97391db50ad823a0055d062b62a373c9c2adb2
SHA512
8f45c28b63be454d87acd7fbb9eec7351803cbd420bd53b6df5043dab813ac41bf55cc02e4972ce723fc0cab2f0ec6d96d3bf703b787d27c1d383c76a5041726
SSDEEP
49152:vmo0aeWVniB+T4pi6cK7ODf79bh692A2B/I3U+MIFGiEaojfK3chxTqdvPhsdXV8:vmNReA7Mfx967gcUmFGEmfK3D9QXV9m
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
GetModuleInformation
EnumProcessModules
GetProcessImageFileNameW
GetModuleFileNameExW
GetProcessMemoryInfo
UuidToStringW
UuidFromStringW
RpcStringFreeW
UuidCreate
GetFileAttributesA
FlushViewOfFile
CreateFileA
LoadLibraryA
WaitForSingleObjectEx
DeleteFileA
HeapReAlloc
HeapAlloc
HeapCompact
HeapDestroy
UnlockFile
VirtualLock
LockFileEx
DeleteCriticalSection
GetProcessHeap
WideCharToMultiByte
GetSystemTime
CreateFileMappingW
MapViewOfFile
QueryPerformanceCounter
FlushFileBuffers
CompareFileTime
GetPhysicallyInstalledSystemMemory
VerSetConditionMask
VerifyVersionInfoW
GetExitCodeThread
lstrlenW
RaiseException
InitializeCriticalSectionEx
DecodePointer
GetFileInformationByHandleEx
GetModuleHandleExW
GetFinalPathNameByHandleW
GetFileInformationByHandle
GetVolumeInformationByHandleW
GetDriveTypeW
IsWow64Process
DeviceIoControl
CopyFileW
GlobalLock
GlobalUnlock
SetFileTime
LocalFileTimeToFileTime
TlsSetValue
TlsAlloc
TlsGetValue
GetSystemTimes
GetCurrentThread
GetThreadTimes
FindFirstFileA
SizeofResource
EnumResourceNamesW
FreeResource
LockResource
LoadResource
FindResourceW
FindResourceA
GetFullPathNameA
InitializeCriticalSection
LeaveCriticalSection
GetStringTypeW
WaitForMultipleObjects
GetModuleHandleW
SystemTimeToTzSpecificLocalTime
GetTempPathA
CreateTimerQueueTimer
DeleteTimerQueueTimer
GetExitCodeProcess
GetProcessTimes
Thread32Next
Thread32First
CreateToolhelp32Snapshot
ReadProcessMemory
GetSystemDefaultUILanguage
GetSystemInfo
ExpandEnvironmentStringsW
GetLongPathNameW
GetSystemTimeAsFileTime
SystemTimeToFileTime
MoveFileExW
Sleep
SetFileAttributesW
GetCurrentProcess
QueryDosDeviceW
GetCurrentThreadId
GetLocalTime
LocalFree
GetTickCount
CreateThread
TerminateThread
GetEnvironmentVariableW
RemoveDirectoryW
FindNextFileW
CreateDirectoryW
GetFileSize
ResetEvent
DeleteFileW
GetFileAttributesW
LockFile
CreateMutexW
OpenProcess
CreateFileW
QueryFullProcessImageNameW
SetEvent
GetTickCount64
CreateEventW
FindClose
FindFirstFileW
VirtualUnlock
CloseHandle
WaitForSingleObject
LoadLibraryExW
FormatMessageA
FreeLibrary
GetProcAddress
GetCurrentDirectoryW
OutputDebugStringW
GetLastError
GetModuleHandleA
LocalAlloc
GetModuleFileNameW
SetLastError
RtlUnwind
SetFilePointerEx
FindFirstFileExW
GetNativeSystemInfo
InitOnceBeginInitialize
InitOnceComplete
SleepConditionVariableSRW
CloseThreadpoolWork
GetDiskFreeSpaceA
MultiByteToWideChar
HeapSize
HeapValidate
FileTimeToSystemTime
UnmapViewOfFile
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
ReadConsoleInputW
SetConsoleMode
SetStdHandle
GetTimeZoneInformation
EnumSystemLocalesW
IsValidLocale
GetLocaleInfoW
CompareStringW
GetTimeFormatW
GetDateFormatW
GetConsoleOutputCP
SubmitThreadpoolWork
ReadConsoleW
GetConsoleMode
GetConsoleCP
SetConsoleCtrlHandler
WriteConsoleW
FreeLibraryAndExitThread
ExitThread
ExitProcess
TlsFree
InterlockedFlushSList
InterlockedPushEntrySList
RtlUnwindEx
GetStringTypeExA
GetUserDefaultLCID
LCMapStringA
LCMapStringW
IsDebuggerPresent
InitializeSListHead
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
InitializeCriticalSectionAndSpinCount
GetLocaleInfoEx
GetCPInfo
CompareStringEx
CreateThreadpoolWork
FreeLibraryWhenCallbackReturns
IsProcessorFeaturePresent
FlsFree
FlsSetValue
GetTempPathW
UnlockFileEx
ReadFile
SetEndOfFile
FlsGetValue
FlsAlloc
OutputDebugStringA
GetDiskFreeSpaceW
GetFullPathNameW
EnterCriticalSection
HeapFree
HeapCreate
TryEnterCriticalSection
AreFileApisANSI
FormatMessageW
LoadLibraryW
GetFileAttributesExW
SetFilePointer
ChangeTimerQueueTimer
WriteFile
GetCurrentProcessId
LCMapStringEx
EncodePointer
InitializeConditionVariable
WakeAllConditionVariable
WakeConditionVariable
K32EnumProcesses
K32EnumProcessModules
GetStartupInfoW
SleepConditionVariableCS
OpenThread
VirtualQueryEx
SuspendThread
GetWindowsDirectoryA
GetLongPathNameA
GetEnvironmentVariableA
GetSystemDirectoryA
SetFileAttributesA
GetPrivateProfileStringA
GetErrorMode
SetErrorMode
GetLogicalDrives
GetVolumeInformationA
GetDriveTypeA
GetFileSizeEx
GetStdHandle
GetFileType
GetVersion
GlobalMemoryStatus
FlushConsoleInputBuffer
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
QueryPerformanceFrequency
MoveFileExA
PeekNamedPipe
SleepEx
InitializeSRWLock
ReleaseSRWLockShared
AcquireSRWLockShared
RtlPcToFileHeader
wsprintfW
GetDesktopWindow
GetProcessWindowStation
GetUserObjectInformationW
LoadStringA
MessageBoxW
CryptEnumProvidersW
DuplicateTokenEx
CryptSignHashW
CryptExportKey
CryptGetUserKey
CryptGetProvParam
CreateProcessAsUserW
RegOpenKeyExA
RegEnumKeyExA
RegDeleteKeyExA
CryptSetHashParam
RegDeleteKeyA
RegEnumValueA
RegDeleteValueA
RegQueryValueExA
RegSetValueExA
AllocateAndInitializeSid
SetEntriesInAclW
SetNamedSecurityInfoA
FreeSid
SetEntriesInAclA
OpenThreadToken
DeregisterEventSource
RegisterEventSourceW
ReportEventW
RegQueryInfoKeyW
RegEnumKeyExW
RegEnumValueW
RegDeleteValueW
RegOpenCurrentUser
QueryServiceStatusEx
StartServiceW
CloseServiceHandle
OpenServiceW
OpenSCManagerW
IsValidSid
EnableTraceEx
ControlTraceW
StartTraceW
CryptReleaseContext
CryptGetHashParam
CloseTrace
ProcessTrace
OpenTraceW
CryptDecrypt
CryptDestroyKey
CryptDestroyHash
CryptHashData
CryptCreateHash
CryptAcquireContextW
GetLengthSid
GetTokenInformation
RegSetKeyValueW
IsTextUnicode
AdjustTokenPrivileges
LookupPrivilegeValueW
RegDeleteKeyW
RegCreateKeyExW
RegSetValueExW
RegGetValueW
RevertToSelf
ImpersonateLoggedOnUser
OpenProcessToken
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
SHGetKnownFolderPath
CommandLineToArgvW
SHFileOperationW
SHGetSpecialFolderPathA
ord165
SHGetFolderPathW
CoTaskMemFree
CoCreateInstance
CoInitialize
GetHGlobalFromStream
CreateStreamOnHGlobal
StgOpenStorage
CoInitializeEx
CoTaskMemAlloc
CoUninitialize
StgOpenStorageOnILockBytes
VariantInit
SysAllocString
SysFreeString
VariantClear
CryptCATAdminAcquireContext
CryptCATCatalogInfoFromContext
CryptCATAdminEnumCatalogFromHash
CryptCATAdminCalcHashFromFileHandle
WTHelperGetProvCertFromChain
CryptCATAdminReleaseContext
WTHelperProvDataFromStateData
WTHelperGetProvSignerFromChain
WinVerifyTrust
CryptCATAdminReleaseCatalogContext
WSAStartup
WSAGetLastError
ntohs
WSACleanup
socket
setsockopt
connect
closesocket
send
recv
shutdown
inet_ntop
inet_pton
htons
getsockopt
WSACloseEvent
WSACreateEvent
WSAEnumNetworkEvents
WSAEventSelect
WSAResetEvent
WSAWaitForMultipleEvents
WSASetLastError
WSAIoctl
__WSAFDIsSet
select
accept
bind
getsockname
htonl
listen
getaddrinfo
freeaddrinfo
recvfrom
sendto
getpeername
ioctlsocket
gethostname
VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW
GetUserProfileDirectoryA
GetProfilesDirectoryW
NetUserEnum
NetApiBufferFree
SfcIsFileProtected
PathFileExistsA
PathFileExistsW
SHCreateStreamOnFileEx
PathAppendW
StrStrIA
wnsprintfW
DnsQuery_W
DnsFree
DnsQuery_A
InternetGetConnectedStateExW
CertGetIntendedKeyUsage
CertGetEnhancedKeyUsage
CertEnumCertificatesInStore
CryptHashCertificate
CertGetNameStringW
CertFindCertificateInStore
CryptMsgGetParam
CryptQueryObject
CryptMsgClose
CertFreeCertificateContext
CertCreateCertificateContext
CertCloseStore
CertOpenSystemStoreA
CertDuplicateCertificateContext
CertOpenStore
CertGetCertificateContextProperty
BCryptGenRandom
ord217
ord60
ord301
ord200
ord30
ord46
ord211
ord79
ord35
ord33
ord32
ord27
ord26
ord22
ord143
ord50
ord41
??0?$singleton@V?$extended_type_info_typeid@V?$Col@N@arma@@@serialization@boost@@@serialization@boost@@IEAA@XZ
??0?$singleton@V?$extended_type_info_typeid@V?$DecisionTree@VGiniGain@tree@mlpack@@VBestBinaryNumericSplit@23@VAllCategoricalSplit@23@VMultipleRandomDimensionSelect@23@N$0A@@tree@mlpack@@@serialization@boost@@@serialization@boost@@IEAA@XZ
??0?$singleton@V?$extended_type_info_typeid@V?$RandomForest@VGiniGain@tree@mlpack@@VMultipleRandomDimensionSelect@23@VBestBinaryNumericSplit@23@VAllCategoricalSplit@23@N@tree@mlpack@@@serialization@boost@@@serialization@boost@@IEAA@XZ
??0?$singleton@V?$extended_type_info_typeid@V?$vector@PEAV?$DecisionTree@VGiniGain@tree@mlpack@@VBestBinaryNumericSplit@23@VAllCategoricalSplit@23@VMultipleRandomDimensionSelect@23@N$0A@@tree@mlpack@@V?$allocator@PEAV?$DecisionTree@VGiniGain@tree@mlpack@@VBestBinaryNumericSplit@23@VAllCategoricalSplit@23@VMultipleRandomDimensionSelect@23@N$0A@@tree@mlpack@@@std@@@std@@@serialization@boost@@@serialization@boost@@IEAA@XZ
??0?$singleton@V?$extended_type_info_typeid@V?$vector@V?$DecisionTree@VGiniGain@tree@mlpack@@VBestBinaryNumericSplit@23@VAllCategoricalSplit@23@VMultipleRandomDimensionSelect@23@N$0A@@tree@mlpack@@V?$allocator@V?$DecisionTree@VGiniGain@tree@mlpack@@VBestBinaryNumericSplit@23@VAllCategoricalSplit@23@VMultipleRandomDimensionSelect@23@N$0A@@tree@mlpack@@@std@@@std@@@serialization@boost@@@serialization@boost@@IEAA@XZ
?get_const_instance@?$singleton@V?$extended_type_info_typeid@V?$Col@N@arma@@@serialization@boost@@@serialization@boost@@SAAEBV?$extended_type_info_typeid@V?$Col@N@arma@@@23@XZ
?get_const_instance@?$singleton@V?$extended_type_info_typeid@V?$DecisionTree@VGiniGain@tree@mlpack@@VBestBinaryNumericSplit@23@VAllCategoricalSplit@23@VMultipleRandomDimensionSelect@23@N$0A@@tree@mlpack@@@serialization@boost@@@serialization@boost@@SAAEBV?$extended_type_info_typeid@V?$DecisionTree@VGiniGain@tree@mlpack@@VBestBinaryNumericSplit@23@VAllCategoricalSplit@23@VMultipleRandomDimensionSelect@23@N$0A@@tree@mlpack@@@23@XZ
?get_const_instance@?$singleton@V?$extended_type_info_typeid@V?$RandomForest@VGiniGain@tree@mlpack@@VMultipleRandomDimensionSelect@23@VBestBinaryNumericSplit@23@VAllCategoricalSplit@23@N@tree@mlpack@@@serialization@boost@@@serialization@boost@@SAAEBV?$extended_type_info_typeid@V?$RandomForest@VGiniGain@tree@mlpack@@VMultipleRandomDimensionSelect@23@VBestBinaryNumericSplit@23@VAllCategoricalSplit@23@N@tree@mlpack@@@23@XZ
?get_const_instance@?$singleton@V?$extended_type_info_typeid@V?$vector@PEAV?$DecisionTree@VGiniGain@tree@mlpack@@VBestBinaryNumericSplit@23@VAllCategoricalSplit@23@VMultipleRandomDimensionSelect@23@N$0A@@tree@mlpack@@V?$allocator@PEAV?$DecisionTree@VGiniGain@tree@mlpack@@VBestBinaryNumericSplit@23@VAllCategoricalSplit@23@VMultipleRandomDimensionSelect@23@N$0A@@tree@mlpack@@@std@@@std@@@serialization@boost@@@serialization@boost@@SAAEBV?$extended_type_info_typeid@V?$vector@PEAV?$DecisionTree@VGiniGain@tree@mlpack@@VBestBinaryNumericSplit@23@VAllCategoricalSplit@23@VMultipleRandomDimensionSelect@23@N$0A@@tree@mlpack@@V?$allocator@PEAV?$DecisionTree@VGiniGain@tree@mlpack@@VBestBinaryNumericSplit@23@VAllCategoricalSplit@23@VMultipleRandomDimensionSelect@23@N$0A@@tree@mlpack@@@std@@@std@@@23@XZ
?get_const_instance@?$singleton@V?$extended_type_info_typeid@V?$vector@V?$DecisionTree@VGiniGain@tree@mlpack@@VBestBinaryNumericSplit@23@VAllCategoricalSplit@23@VMultipleRandomDimensionSelect@23@N$0A@@tree@mlpack@@V?$allocator@V?$DecisionTree@VGiniGain@tree@mlpack@@VBestBinaryNumericSplit@23@VAllCategoricalSplit@23@VMultipleRandomDimensionSelect@23@N$0A@@tree@mlpack@@@std@@@std@@@serialization@boost@@@serialization@boost@@SAAEBV?$extended_type_info_typeid@V?$vector@V?$DecisionTree@VGiniGain@tree@mlpack@@VBestBinaryNumericSplit@23@VAllCategoricalSplit@23@VMultipleRandomDimensionSelect@23@N$0A@@tree@mlpack@@V?$allocator@V?$DecisionTree@VGiniGain@tree@mlpack@@VBestBinaryNumericSplit@23@VAllCategoricalSplit@23@VMultipleRandomDimensionSelect@23@N$0A@@tree@mlpack@@@std@@@std@@@23@XZ
?get_const_instance@?$singleton@V?$iserializer@Vtext_iarchive@archive@boost@@V?$Col@N@arma@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$iserializer@Vtext_iarchive@archive@boost@@V?$Col@N@arma@@@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$iserializer@Vtext_iarchive@archive@boost@@V?$DecisionTree@VGiniGain@tree@mlpack@@VBestBinaryNumericSplit@23@VAllCategoricalSplit@23@VMultipleRandomDimensionSelect@23@N$0A@@tree@mlpack@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$iserializer@Vtext_iarchive@archive@boost@@V?$DecisionTree@VGiniGain@tree@mlpack@@VBestBinaryNumericSplit@23@VAllCategoricalSplit@23@VMultipleRandomDimensionSelect@23@N$0A@@tree@mlpack@@@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$iserializer@Vtext_iarchive@archive@boost@@V?$RandomForest@VGiniGain@tree@mlpack@@VMultipleRandomDimensionSelect@23@VBestBinaryNumericSplit@23@VAllCategoricalSplit@23@N@tree@mlpack@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$iserializer@Vtext_iarchive@archive@boost@@V?$RandomForest@VGiniGain@tree@mlpack@@VMultipleRandomDimensionSelect@23@VBestBinaryNumericSplit@23@VAllCategoricalSplit@23@N@tree@mlpack@@@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$iserializer@Vtext_iarchive@archive@boost@@V?$vector@PEAV?$DecisionTree@VGiniGain@tree@mlpack@@VBestBinaryNumericSplit@23@VAllCategoricalSplit@23@VMultipleRandomDimensionSelect@23@N$0A@@tree@mlpack@@V?$allocator@PEAV?$DecisionTree@VGiniGain@tree@mlpack@@VBestBinaryNumericSplit@23@VAllCategoricalSplit@23@VMultipleRandomDimensionSelect@23@N$0A@@tree@mlpack@@@std@@@std@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$iserializer@Vtext_iarchive@archive@boost@@V?$vector@PEAV?$DecisionTree@VGiniGain@tree@mlpack@@VBestBinaryNumericSplit@23@VAllCategoricalSplit@23@VMultipleRandomDimensionSelect@23@N$0A@@tree@mlpack@@V?$allocator@PEAV?$DecisionTree@VGiniGain@tree@mlpack@@VBestBinaryNumericSplit@23@VAllCategoricalSplit@23@VMultipleRandomDimensionSelect@23@N$0A@@tree@mlpack@@@std@@@std@@@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$iserializer@Vtext_iarchive@archive@boost@@V?$vector@V?$DecisionTree@VGiniGain@tree@mlpack@@VBestBinaryNumericSplit@23@VAllCategoricalSplit@23@VMultipleRandomDimensionSelect@23@N$0A@@tree@mlpack@@V?$allocator@V?$DecisionTree@VGiniGain@tree@mlpack@@VBestBinaryNumericSplit@23@VAllCategoricalSplit@23@VMultipleRandomDimensionSelect@23@N$0A@@tree@mlpack@@@std@@@std@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$iserializer@Vtext_iarchive@archive@boost@@V?$vector@V?$DecisionTree@VGiniGain@tree@mlpack@@VBestBinaryNumericSplit@23@VAllCategoricalSplit@23@VMultipleRandomDimensionSelect@23@N$0A@@tree@mlpack@@V?$allocator@V?$DecisionTree@VGiniGain@tree@mlpack@@VBestBinaryNumericSplit@23@VAllCategoricalSplit@23@VMultipleRandomDimensionSelect@23@N$0A@@tree@mlpack@@@std@@@std@@@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$map@Vtext_iarchive@archive@boost@@@extra_detail@detail@archive@boost@@@serialization@boost@@SAAEBV?$map@Vtext_iarchive@archive@boost@@@extra_detail@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$multiset@PEBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PEBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@SAAEBV?$multiset@PEBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PEBVextended_type_info@serialization@boost@@@std@@@std@@XZ
?get_const_instance@?$singleton@V?$multiset@PEBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PEBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@std@@@std@@@serialization@boost@@SAAEBV?$multiset@PEBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PEBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@std@@@std@@XZ
?get_const_instance@?$singleton@V?$pointer_iserializer@Vtext_iarchive@archive@boost@@V?$DecisionTree@VGiniGain@tree@mlpack@@VBestBinaryNumericSplit@23@VAllCategoricalSplit@23@VMultipleRandomDimensionSelect@23@N$0A@@tree@mlpack@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$pointer_iserializer@Vtext_iarchive@archive@boost@@V?$DecisionTree@VGiniGain@tree@mlpack@@VBestBinaryNumericSplit@23@VAllCategoricalSplit@23@VMultipleRandomDimensionSelect@23@N$0A@@tree@mlpack@@@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$set@PEBVvoid_caster@void_cast_detail@serialization@boost@@Uvoid_caster_compare@234@V?$allocator@PEBVvoid_caster@void_cast_detail@serialization@boost@@@std@@@std@@@serialization@boost@@SAAEBV?$set@PEBVvoid_caster@void_cast_detail@serialization@boost@@Uvoid_caster_compare@234@V?$allocator@PEBVvoid_caster@void_cast_detail@serialization@boost@@@std@@@std@@XZ
?get_lock@singleton_module@serialization@boost@@AEAAAEA_NXZ
?get_mutable_instance@?$singleton@V?$iserializer@Vtext_iarchive@archive@boost@@V?$DecisionTree@VGiniGain@tree@mlpack@@VBestBinaryNumericSplit@23@VAllCategoricalSplit@23@VMultipleRandomDimensionSelect@23@N$0A@@tree@mlpack@@@detail@archive@boost@@@serialization@boost@@SAAEAV?$iserializer@Vtext_iarchive@archive@boost@@V?$DecisionTree@VGiniGain@tree@mlpack@@VBestBinaryNumericSplit@23@VAllCategoricalSplit@23@VMultipleRandomDimensionSelect@23@N$0A@@tree@mlpack@@@detail@archive@3@XZ
?get_mutable_instance@?$singleton@V?$map@Vtext_iarchive@archive@boost@@@extra_detail@detail@archive@boost@@@serialization@boost@@SAAEAV?$map@Vtext_iarchive@archive@boost@@@extra_detail@detail@archive@3@XZ
?get_mutable_instance@?$singleton@V?$multiset@PEBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PEBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@SAAEAV?$multiset@PEBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PEBVextended_type_info@serialization@boost@@@std@@@std@@XZ
?get_mutable_instance@?$singleton@V?$multiset@PEBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PEBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@std@@@std@@@serialization@boost@@SAAEAV?$multiset@PEBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PEBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@std@@@std@@XZ
?get_mutable_instance@?$singleton@V?$set@PEBVvoid_caster@void_cast_detail@serialization@boost@@Uvoid_caster_compare@234@V?$allocator@PEBVvoid_caster@void_cast_detail@serialization@boost@@@std@@@std@@@serialization@boost@@SAAEAV?$set@PEBVvoid_caster@void_cast_detail@serialization@boost@@Uvoid_caster_compare@234@V?$allocator@PEBVvoid_caster@void_cast_detail@serialization@boost@@@std@@@std@@XZ
?is_destroyed@?$singleton@V?$map@Vtext_iarchive@archive@boost@@@extra_detail@detail@archive@boost@@@serialization@boost@@SA_NXZ
?is_destroyed@?$singleton@V?$multiset@PEBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PEBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@SA_NXZ
?is_destroyed@?$singleton@V?$multiset@PEBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PEBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@std@@@std@@@serialization@boost@@SA_NXZ
?is_destroyed@?$singleton@V?$set@PEBVvoid_caster@void_cast_detail@serialization@boost@@Uvoid_caster_compare@234@V?$allocator@PEBVvoid_caster@void_cast_detail@serialization@boost@@@std@@@std@@@serialization@boost@@SA_NXZ
?is_locked@singleton_module@serialization@boost@@QEAA_NXZ
?load_object_data@?$iserializer@Vtext_iarchive@archive@boost@@V?$Col@N@arma@@@detail@archive@boost@@UEBAXAEAVbasic_iarchive@234@PEAXI@Z
?load_object_data@?$iserializer@Vtext_iarchive@archive@boost@@V?$DecisionTree@VGiniGain@tree@mlpack@@VBestBinaryNumericSplit@23@VAllCategoricalSplit@23@VMultipleRandomDimensionSelect@23@N$0A@@tree@mlpack@@@detail@archive@boost@@UEBAXAEAVbasic_iarchive@234@PEAXI@Z
?load_object_data@?$iserializer@Vtext_iarchive@archive@boost@@V?$RandomForest@VGiniGain@tree@mlpack@@VMultipleRandomDimensionSelect@23@VBestBinaryNumericSplit@23@VAllCategoricalSplit@23@N@tree@mlpack@@@detail@archive@boost@@UEBAXAEAVbasic_iarchive@234@PEAXI@Z
?load_object_data@?$iserializer@Vtext_iarchive@archive@boost@@V?$vector@PEAV?$DecisionTree@VGiniGain@tree@mlpack@@VBestBinaryNumericSplit@23@VAllCategoricalSplit@23@VMultipleRandomDimensionSelect@23@N$0A@@tree@mlpack@@V?$allocator@PEAV?$DecisionTree@VGiniGain@tree@mlpack@@VBestBinaryNumericSplit@23@VAllCategoricalSplit@23@VMultipleRandomDimensionSelect@23@N$0A@@tree@mlpack@@@std@@@std@@@detail@archive@boost@@UEBAXAEAVbasic_iarchive@234@PEAXI@Z
?load_object_data@?$iserializer@Vtext_iarchive@archive@boost@@V?$vector@V?$DecisionTree@VGiniGain@tree@mlpack@@VBestBinaryNumericSplit@23@VAllCategoricalSplit@23@VMultipleRandomDimensionSelect@23@N$0A@@tree@mlpack@@V?$allocator@V?$DecisionTree@VGiniGain@tree@mlpack@@VBestBinaryNumericSplit@23@VAllCategoricalSplit@23@VMultipleRandomDimensionSelect@23@N$0A@@tree@mlpack@@@std@@@std@@@detail@archive@boost@@UEBAXAEAVbasic_iarchive@234@PEAXI@Z
?load_object_ptr@?$pointer_iserializer@Vtext_iarchive@archive@boost@@V?$DecisionTree@VGiniGain@tree@mlpack@@VBestBinaryNumericSplit@23@VAllCategoricalSplit@23@VMultipleRandomDimensionSelect@23@N$0A@@tree@mlpack@@@detail@archive@boost@@EEBAXAEAVbasic_iarchive@234@PEAXI@Z
?lock@?1??get_lock@singleton_module@serialization@boost@@AEAAAEA_NXZ@4_NA
?lock@singleton_module@serialization@boost@@QEAAXXZ
?unlock@singleton_module@serialization@boost@@QEAAXXZ
CreateFactory
DeleteQuarantineItemByGuid
DeleteQuarantineRegGUIDFile
FINGERPRINT_premain
GetQuarantineListSize
RPAlloc
RPAllocCount
RPFree
RaptorAddExclusion
RaptorAddProcessByPID
RaptorAddProcessByPIDEx
RaptorDeleteDetectionItem
RaptorFlagMalicious
RaptorGetArtifact
RaptorGetCloudConnectionStatus
RaptorGetCloudConnectionStatusRT
RaptorGetDetectionItem
RaptorGetQuarItem
RaptorGetRemediatedItem
RaptorGetRemediatedItemFromPID
RaptorGetStaticReputation
RaptorGetStaticReputationEx
RaptorInitialize
RaptorPerformRemediation
RaptorRemediateProcessByPID
RaptorRemoveExclusion
RaptorRemoveProcessByPID
RaptorSetAPIVersion
RaptorSetCloudURL
RaptorSetLogLevel
RaptorSetLssvmSensitivityLevel
RaptorSetOfflineMode
RaptorSetProxySettings
RaptorSetup
RaptorStart
RaptorStop
RaptorUninitialize
RaptorUninitializeInternal
RaptorUninstall
RestoreQuarantineItemByGuid
RestoreRegistryItems
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ