privateloader | 2024-05-11_e4cfef88f34f47be8c4c0b8ccc0faa2d_magniber_revil

Sharing

Copy URL Twitter E-mail

General

Target
2024-05-11_e4cfef88f34f47be8c4c0b8ccc0faa2d_magniber_revil
Size 13.6MB
Sample240511-rv83saef45
SHA256 fccedd884be4b0e132cc422fbfe7e21adb41cd52305c70f1f020ed0d17abb4f5
MD5 e4cfef88f34f47be8c4c0b8ccc0faa2d
SHA1 0c2fdbcac749f3d052be6561a7bb676818c94fbb
SHA512 083fbc9e2fdd5e6c19dcb68daa68351747793793d911826edba148c8c9fefeb02ad2501874ca3b938ad2d9a0432609dfe7f719e4a90a27e9c9ded7e39d3ce46b
SSDEEP 393216:JjwDaujhWGVrqNQZdQ3/YdcBoMIB+6J0ZucBoMIB+rJwLZ:a2ujdbQ3kcBoMIB+6hcBoMIB+r6
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

privateloader

Malware Config

Signatures

Privateloader family
privateloader

File Explorer

2024-05-11_e4cfef88f34f47be8c4c0b8ccc0faa2d_magniber_revil

.exe 13.6MB

2024-05-11_e4cfef88f34f47be8c4c0b8ccc0faa2d_magniber_revil

IMPHASH a7d54faf69a1f23a2baf17ebd8c2d118
SHA256 fccedd884be4b0e132cc422fbfe7e21adb41cd52305c70f1f020ed0d17abb4f5
MD5 e4cfef88f34f47be8c4c0b8ccc0faa2d
SHA1 0c2fdbcac749f3d052be6561a7bb676818c94fbb
SHA512 083fbc9e2fdd5e6c19dcb68daa68351747793793d911826edba148c8c9fefeb02ad2501874ca3b938ad2d9a0432609dfe7f719e4a90a27e9c9ded7e39d3ce46b
SSDEEP 393216:JjwDaujhWGVrqNQZdQ3/YdcBoMIB+6J0ZucBoMIB+rJwLZ:a2ujdbQ3kcBoMIB+6hcBoMIB+r6
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Digest

31:dc:f4:c2:23:63:04:8c:e2:55:7f:90:d8:1b:6b:18:6c:b2:c7:fe:86:f4:de:1a:b0:66:43:ad:43:6c:c9:d9

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=LULU Software,O=LULU Software,L=Saint-Laurent,ST=Quebec,C=CA

Chains

Feb 23, 2019

CN=LULU Software,O=LULU Software,L=Saint-Laurent,ST=Quebec,C=CA

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Subject

CN=LULU Software,O=LULU Software,L=Saint-Laurent,ST=Quebec,C=CA

Serial Number

09:90:fb:6f:d4:13:03:58:16:e4:87:59:da:ee:71:f2

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 5, 2017 - Sep 24, 2019

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Dec 10, 2013 - Dec 9, 2023

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 12, 2016 - Jan 11, 2031

Subject

CN=Symantec SHA256 TimeStamping Signer - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

54:58:f2:aa:d7:41:d6:44:bc:84:a9:7b:a0:96:52:e6

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 2, 2017 - Apr 1, 2028

Minor OS version

Major OS version

Entry point

4787527

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\TemporaryBuilds\installer_builder_1\1\s\_bin\soda11\Win32\Soda_PDF_Desktop_11_Installer.pdb

wininet

InternetQueryOptionW HttpQueryInfoA HttpSendRequestA HttpSendRequestW InternetGetLastResponseInfoA InternetSetOptionA InternetConnectA InternetOpenA InternetCombineUrlA InternetErrorDlg InternetQueryOptionA HttpOpenRequestW InternetConnectW InternetSetOptionW InternetOpenW InternetCloseHandle HttpQueryInfoW HttpOpenRequestA InternetReadFile

wldap32

ord26 ord301 ord41 ord27 ord32 ord45 ord60 ord211 ord46 ord217 ord143 ord200 ord30 ord50 ord79 ord35 ord33 ord22

crypt32

CertFindCertificateInStore CertFreeCertificateContext CertOpenStore CertCloseStore CertEnumCertificatesInStore CertDuplicateCertificateContext CertGetNameStringW CertGetCertificateContextProperty

wintrust

WTHelperProvDataFromStateData WTHelperGetProvSignerFromChain WTHelperGetProvCertFromChain WinVerifyTrust

version

GetFileVersionInfoW VerQueryValueW GetFileVersionInfoSizeW

winhttp

WinHttpCloseHandle WinHttpGetProxyForUrl WinHttpGetIEProxyConfigForCurrentUser WinHttpOpen WinHttpSetTimeouts

msi

ord137 ord141 ord8 ord159 ord160 ord88 ord117 ord118 ord205 ord70 ord168 ord43 ord111 ord45 ord92 ord32

kernel32

TlsFree WaitForSingleObjectEx GetCurrentThreadId GetCurrentProcess LocalAlloc LocalFree GetDriveTypeW InitializeCriticalSection LeaveCriticalSection EnterCriticalSection GetCommandLineW GetModuleHandleW GetProcAddress CreateThread WaitForSingleObject CreateEventW GetCurrentProcessId GetModuleFileNameW GetFileSize HeapDestroy HeapReAlloc HeapSize TerminateProcess OutputDebugStringW SetUnhandledExceptionFilter GetTickCount GetDiskFreeSpaceExW GetLogicalDriveStringsW DeleteFileW SetFileAttributesW GetFullPathNameW GetVersionExW CopyFileW CreateProcessW FindFirstFileW FindNextFileW FindClose Sleep CreateMutexW ReleaseMutex ReleaseSemaphore CreateSemaphoreA WaitForMultipleObjectsEx LoadResource SizeofResource FindResourceW lstrcmpiW LoadLibraryExW FreeLibrary QueryPerformanceCounter QueryPerformanceFrequency CreateMutexA GetShortPathNameW GetUserDefaultLCID OpenProcess CreateToolhelp32Snapshot Module32FirstW Module32NextW IsWow64Process GetExitCodeProcess Process32FirstW Process32NextW GetModuleHandleA LockResource BeginUpdateResourceW UpdateResourceW EndUpdateResourceW GlobalAlloc GlobalLock GlobalUnlock GlobalFree GetModuleFileNameA DuplicateHandle FormatMessageW WaitForMultipleObjects TerminateThread QueueUserAPC PostQueuedCompletionStatus CreateIoCompletionPort SetWaitableTimer GetQueuedCompletionStatus InterlockedCompareExchange SetLastError VerSetConditionMask InterlockedExchange TlsGetValue TlsSetValue GetSystemInfo ProcessIdToSessionId MoveFileW GetTempPathW GetFileInformationByHandle GetLocalTime FileTimeToSystemTime MapViewOfFile UnmapViewOfFile CreateFileMappingW lstrcpynW SwitchToThread CreateFileMappingA MapViewOfFileEx CreateFileA FormatMessageA GlobalSize LoadLibraryA GetTempPathA GetTempFileNameA GetLocaleInfoA FindResourceA MulDiv ExitThread GetCPInfo SetThreadLocale GetNumberFormatW GetCurrencyFormatW GetSystemTime GetTimeZoneInformation GetLocaleInfoW GetDateFormatW GetThreadLocale GetVersionExA SetEndOfFile FlushViewOfFile RemoveDirectoryW GetCurrentThread GetThreadTimes SleepEx GetSystemDirectoryA VerifyVersionInfoA ExpandEnvironmentStringsA GetFileType GetStdHandle PeekNamedPipe GetConsoleScreenBufferInfo SetConsoleTextAttribute OutputDebugStringA GetWindowsDirectoryA GetComputerNameA GetSystemTimeAsFileTime GetEnvironmentVariableW GetConsoleMode ReadConsoleA ReadConsoleW SetConsoleMode GetModuleHandleExW SwitchToFiber DeleteFiber CreateFiber LoadLibraryW ConvertFiberToThread ConvertThreadToFiber InterlockedExchangeAdd TlsAlloc InterlockedDecrement IsProcessorFeaturePresent ResetEvent InitializeSListHead IsDebuggerPresent GetStartupInfoW GetStringTypeW GetExitCodeThread TryEnterCriticalSection EncodePointer LCMapStringW OpenEventA ResumeThread CreateWaitableTimerA GetFileAttributesExW SetFilePointerEx DeviceIoControl AreFileApisANSI GetStringTypeExW LCMapStringA GetStringTypeExA IsValidCodePage VirtualProtect IsDBCSLeadByteEx EnumSystemLocalesA FoldStringW GetTimeFormatW CreateProcessA RtlUnwind InterlockedPushEntrySList InterlockedFlushSList SetConsoleCtrlHandler VirtualAlloc ExitProcess SystemTimeToTzSpecificLocalTime FreeLibraryAndExitThread GetConsoleCP WriteConsoleW GetACP IsValidLocale EnumSystemLocalesW FlushFileBuffers SetStdHandle CreatePipe FindFirstFileExW GetOEMCP GetCommandLineA GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableA CreateTimerQueue SignalObjectAndWait SetThreadPriority GetThreadPriority GetLogicalProcessorInformation CreateTimerQueueTimer ChangeTimerQueueTimer DeleteTimerQueueTimer GetNumaHighestNodeNumber GetProcessAffinityMask SetThreadAffinityMask GetLastError SetEvent CreateEventA InterlockedIncrement HeapFree GetProcessHeap HeapAlloc SetFileTime WriteFile CreateDirectoryW GetFileAttributesW WideCharToMultiByte LocalFileTimeToFileTime MultiByteToWideChar GetCurrentDirectoryW SystemTimeToFileTime ReadFile CloseHandle SetFilePointer CreateFileW UnregisterWait VirtualFree InterlockedPopEntrySList QueryDepthSList UnregisterWaitEx GetStringTypeA DeleteCriticalSection InitializeCriticalSectionAndSpinCount DecodePointer CompareStringW RaiseException UnhandledExceptionFilter LoadLibraryExA VirtualQuery VerifyVersionInfoW RegisterWaitForSingleObject

user32

LoadCursorFromFileA LoadCursorA CallNextHookEx UnhookWindowsHookEx SetWindowsHookExA GetClassLongA SetWindowLongA GetWindowLongA OffsetRect FillRect GetSysColor WindowFromPoint ClientToScreen SetCursor InvalidateRect EndPaint BeginPaint ReleaseDC GetWindowDC IsWindowEnabled IsWindowUnicode KillTimer SetTimer ReleaseCapture SetCapture CreateCursor DestroyIcon GetScrollInfo SystemParametersInfoA NotifyWinEvent RegisterWindowMessageA RegisterClassA RegisterClassW UnregisterClassA RegisterClassExA GetDC GetCapture GetAsyncKeyState GetFocus SetFocus GetDlgCtrlID MoveWindow GetDoubleClickTime DefWindowProcA SendMessageA GetActiveWindow DispatchMessageA GetMessageA SetWindowRgn PtInRect InflateRect IntersectRect SetWindowPlacement AdjustWindowRectEx PostQuitMessage DispatchMessageW TranslateMessage GetMessageW SendMessageTimeoutA SetCaretPos DestroyCaret CreateCaret GetKeyboardLayout SetScrollInfo ScrollWindowEx ScrollDC EndDeferWindowPos DeferWindowPos BeginDeferWindowPos IsClipboardFormatAvailable EmptyClipboard OpenClipboard GetUserObjectInformationW GetProcessWindowStation MessageBeep GetKeyState GetMonitorInfoW MonitorFromWindow GetWindow MapWindowPoints GetClientRect EndDialog DialogBoxIndirectParamW SetParent GetCursorPos AppendMenuW DestroyMenu CreatePopupMenu SystemParametersInfoW SetWindowLongW GetWindowLongW SetWindowTextW UpdateWindow IsZoomed DestroyWindow CreateWindowExW GetClassInfoExW RegisterClassExW GetSystemMetrics LoadIconW CharUpperW IsIconic PostMessageA CharNextW FindWindowW SetForegroundWindow ShowWindow ScreenToClient IsChild PeekMessageA CreateWindowExA TrackPopupMenu EnableMenuItem GetSystemMenu MessageBoxW GetWindowRect PostThreadMessageW RegisterWindowMessageW GetParent EnumClipboardFormats CountClipboardFormats RegisterClipboardFormatW SetWindowPos SendMessageW GetDesktopWindow GetWindowThreadProcessId PostMessageW IsWindow UnregisterClassW wsprintfW GetClipboardData LoadStringA LoadStringW GetCaretBlinkTime DrawTextA DrawTextW InvertRect CreateIconFromResourceEx DrawIconEx GetIconInfo DrawEdge DrawFrameControl GetSysColorBrush SetClipboardData GetWindowPlacement CloseClipboard DefWindowProcW

gdi32

SetBrushOrgEx TextOutW TextOutA SetTextAlign SetPixel SetBkMode CreateDIBPatternBrushPt RectVisible PatBlt IntersectClipRect GetWindowOrgEx GetCharacterPlacementW GetFontLanguageInfo StretchBlt Rectangle GetTextExtentExPointW GetTextExtentPoint32W GetTextExtentPoint32A GetTextAlign GetPixel CreatePatternBrush CreatePen CreateHatchBrush CreateBitmap StretchDIBits GetGlyphOutlineW GetCurrentObject CreateFontA AddFontMemResourceEx SetStretchBltMode CreateDIBSection EnumFontFamiliesExA DeleteObject BitBlt GetDIBits CreateCompatibleBitmap CreateCompatibleDC CreateRectRgnIndirect CreateSolidBrush DeleteDC ExcludeClipRect GetClipBox GetMapMode GetStockObject GetViewportExtEx GetWindowExtEx RestoreDC SaveDC SelectObject SetBkColor SetMapMode SetLayout SetTextColor GetObjectA DPtoLP LPtoDP SetViewportExtEx SetViewportOrgEx SetWindowExtEx SetWindowOrgEx GetDeviceCaps GdiFlush GetTextMetricsA CreateRoundRectRgn GetKerningPairsA CombineRgn CreateRectRgn

comdlg32

GetOpenFileNameW GetSaveFileNameW

shell32

SHGetPathFromIDListW SHBrowseForFolderW ShellExecuteW SHGetSpecialFolderPathW Shell_NotifyIconW SHGetFileInfoW ord74 DragQueryFileW SHChangeNotify

ole32

CoInitialize CoCreateInstance OleRun CoRevokeClassObject CoResumeClassObjects CoReleaseServerProcess CoAddRefServerProcess CoUninitialize CoInitializeEx CLSIDFromString CoTaskMemAlloc CoTaskMemRealloc CoTaskMemFree StringFromGUID2 CoGetClassObject RegisterDragDrop RevokeDragDrop DoDragDrop ReleaseStgMedium CoCreateGuid CoRegisterClassObject

oleaut32

GetErrorInfo RegisterTypeLi UnRegisterTypeLi LoadRegTypeLi LoadTypeLi VarUI4FromStr SysStringLen SysAllocStringLen VariantClear VariantInit SysStringByteLen SysAllocStringByteLen SysFreeString SysAllocString

shlwapi

AssocQueryStringW UrlEscapeA PathCompactPathExW PathFileExistsW

ws2_32

sendto recvfrom WSAStartup WSACleanup WSAGetLastError socket __WSAFDIsSet select WSASetLastError recv listen send bind closesocket connect ioctlsocket getpeername freeaddrinfo getaddrinfo WSAIoctl shutdown setsockopt ntohs htons getsockopt getsockname getnameinfo accept ntohl htonl gethostname

dbghelp

MiniDumpWriteDump

psapi

GetModuleFileNameExW GetProcessImageFileNameW

oleacc

AccessibleObjectFromWindow LresultFromObject

winmm

PlaySoundA timeGetTime timeGetDevCaps timeSetEvent timeKillEvent

imm32

ImmGetCompositionStringW ImmAssociateContextEx ImmNotifyIME ImmIsIME ImmGetContext ImmReleaseContext ImmSetCandidateWindow

comctl32

ImageList_GetImageInfo ImageList_DrawEx ImageList_GetIconSize

urlmon

FindMimeFromData

??0?$oserializer@Vbinary_oarchive@archive@boost@@UtagRECT@@@detail@archive@boost@@QAE@XZ ??0?$oserializer@Vbinary_oarchive@archive@boost@@VPlacement@HtmlWindowPlacementStrategy@GuiFramework@@@detail@archive@boost@@QAE@XZ ??0?$singleton@V?$extended_type_info_typeid@UtagRECT@@@serialization@boost@@@serialization@boost@@QAE@XZ ??0?$singleton@V?$extended_type_info_typeid@VPlacement@HtmlWindowPlacementStrategy@GuiFramework@@@serialization@boost@@@serialization@boost@@QAE@XZ ??1?$singleton@V?$extended_type_info_typeid@UtagRECT@@@serialization@boost@@@serialization@boost@@QAE@XZ ??1?$singleton@V?$extended_type_info_typeid@VPlacement@HtmlWindowPlacementStrategy@GuiFramework@@@serialization@boost@@@serialization@boost@@QAE@XZ ?get_const_instance@?$singleton@V?$extended_type_info_typeid@UtagRECT@@@serialization@boost@@@serialization@boost@@SAABV?$extended_type_info_typeid@UtagRECT@@@23@XZ ?get_const_instance@?$singleton@V?$extended_type_info_typeid@VPlacement@HtmlWindowPlacementStrategy@GuiFramework@@@serialization@boost@@@serialization@boost@@SAABV?$extended_type_info_typeid@VPlacement@HtmlWindowPlacementStrategy@GuiFramework@@@23@XZ ?get_const_instance@?$singleton@V?$iserializer@Vbinary_iarchive@archive@boost@@UtagRECT@@@detail@archive@boost@@@serialization@boost@@SAABV?$iserializer@Vbinary_iarchive@archive@boost@@UtagRECT@@@detail@archive@3@XZ ?get_const_instance@?$singleton@V?$iserializer@Vbinary_iarchive@archive@boost@@VPlacement@HtmlWindowPlacementStrategy@GuiFramework@@@detail@archive@boost@@@serialization@boost@@SAABV?$iserializer@Vbinary_iarchive@archive@boost@@VPlacement@HtmlWindowPlacementStrategy@GuiFramework@@@detail@archive@3@XZ ?get_const_instance@?$singleton@V?$map@Vbinary_iarchive@archive@boost@@@extra_detail@detail@archive@boost@@@serialization@boost@@SAABV?$map@Vbinary_iarchive@archive@boost@@@extra_detail@detail@archive@3@XZ ?get_const_instance@?$singleton@V?$map@Vbinary_oarchive@archive@boost@@@extra_detail@detail@archive@boost@@@serialization@boost@@SAABV?$map@Vbinary_oarchive@archive@boost@@@extra_detail@detail@archive@3@XZ ?get_const_instance@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@SAABV?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@XZ ?get_const_instance@?$singleton@V?$multiset@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@std@@@std@@@serialization@boost@@SAABV?$multiset@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@std@@@std@@XZ ?get_const_instance@?$singleton@V?$oserializer@Vbinary_oarchive@archive@boost@@UtagRECT@@@detail@archive@boost@@@serialization@boost@@SAABV?$oserializer@Vbinary_oarchive@archive@boost@@UtagRECT@@@detail@archive@3@XZ ?get_const_instance@?$singleton@V?$oserializer@Vbinary_oarchive@archive@boost@@VPlacement@HtmlWindowPlacementStrategy@GuiFramework@@@detail@archive@boost@@@serialization@boost@@SAABV?$oserializer@Vbinary_oarchive@archive@boost@@VPlacement@HtmlWindowPlacementStrategy@GuiFramework@@@detail@archive@3@XZ ?get_lock@singleton_module@serialization@boost@@CAAA_NXZ ?get_mutable_instance@?$singleton@V?$map@Vbinary_iarchive@archive@boost@@@extra_detail@detail@archive@boost@@@serialization@boost@@SAAAV?$map@Vbinary_iarchive@archive@boost@@@extra_detail@detail@archive@3@XZ ?get_mutable_instance@?$singleton@V?$map@Vbinary_oarchive@archive@boost@@@extra_detail@detail@archive@boost@@@serialization@boost@@SAAAV?$map@Vbinary_oarchive@archive@boost@@@extra_detail@detail@archive@3@XZ ?get_mutable_instance@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@SAAAV?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@XZ ?get_mutable_instance@?$singleton@V?$multiset@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@std@@@std@@@serialization@boost@@SAAAV?$multiset@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@std@@@std@@XZ ?is_destroyed@?$singleton@V?$map@Vbinary_iarchive@archive@boost@@@extra_detail@detail@archive@boost@@@serialization@boost@@SA_NXZ ?is_destroyed@?$singleton@V?$map@Vbinary_oarchive@archive@boost@@@extra_detail@detail@archive@boost@@@serialization@boost@@SA_NXZ ?is_destroyed@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@SA_NXZ ?is_destroyed@?$singleton@V?$multiset@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@std@@@std@@@serialization@boost@@SA_NXZ ?is_locked@singleton_module@serialization@boost@@SA_NXZ ?load_object_data@?$iserializer@Vbinary_iarchive@archive@boost@@UtagRECT@@@detail@archive@boost@@UBEXAAVbasic_iarchive@234@PAXI@Z ?load_object_data@?$iserializer@Vbinary_iarchive@archive@boost@@VPlacement@HtmlWindowPlacementStrategy@GuiFramework@@@detail@archive@boost@@UBEXAAVbasic_iarchive@234@PAXI@Z ?lock@?1??get_lock@singleton_module@serialization@boost@@CAAA_NXZ@4_NA ?lock@singleton_module@serialization@boost@@SAXXZ ?save_object_data@?$oserializer@Vbinary_oarchive@archive@boost@@UtagRECT@@@detail@archive@boost@@UBEXAAVbasic_oarchive@234@PBX@Z ?save_object_data@?$oserializer@Vbinary_oarchive@archive@boost@@VPlacement@HtmlWindowPlacementStrategy@GuiFramework@@@detail@archive@boost@@UBEXAAVbasic_oarchive@234@PBX@Z ?unlock@singleton_module@serialization@boost@@SAXXZ

generic

count=45, id=241, version=40116,

count=208, id=243, version=40116,

count=36, id=242, version=40116,

count=10, id=199, version=41118,

count=29, id=259, productName=VS2017 v15.6.6 build 26131, version=26131,

count=40, id=260, productName=VS2017 v15.6.6 build 26131, version=26131,

count=213, id=261, productName=VS2017 v15.6.6 build 26131, version=26131,

count=10, id=131, productName=VS2008 SP1 build 30729, version=30729,

count=23, productName=Unmarked objects (old),

count=721, id=260, productName=VS2017 v15.7.3 build 26430, version=26430,

count=47, id=147, productName=VS2008 SP1 build 30729, version=30729,

count=742, id=1, productName=Unmarked objects,

count=210, id=261, productName=VS2017 v15.7.3 build 26430, version=26430,

count=140, id=264, version=26428,

count=1, id=256, productName=VS2017 v15.7.1 build 26428, version=26428,

count=1, id=255, productName=VS2017 v15.7.1 build 26428, version=26428,

count=1, id=151,

count=1, id=258, productName=VS2017 v15.7.1 build 26428, version=26428,