1c839d0c3b427c7a1f67149351392790N

Sharing

Copy URL Twitter E-mail

General

Target
1c839d0c3b427c7a1f67149351392790N
Size 5.4MB
Sample240911-mtc7hawapl
SHA256 93a8d2baaaaa7c1e2bd9a73fa37b14be0573d989e9e5a6ac972d9b2b96c84521
MD5 1c839d0c3b427c7a1f67149351392790
SHA1 6cb4f3bbf579c33b026eeefc2b5da01e6b892ab4
SHA512 efe5c71e8b0c6fadf76387f6f9180f9aaa4590ff2f2c885314804029ed2a3ff66284b8c9444ac931942236e7a01fb2c12e3dda394eca04cf309dc531c8fa78b0
SSDEEP 98304:11f9b8DBaTb9QjSAwzEKfAdrHF1ZqLS5Cd/m37RQ8FLOAkGkzdnEVomFHKnPx:pb8LjL7qLS5G/Ye8FLOyomFHKnPx
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

1c839d0c3b427c7a1f67149351392790N

.exe 5.4MB

1c839d0c3b427c7a1f67149351392790N

IMPHASH 78bb0d471277a5916ad8adb089c3fdd2
SHA256 93a8d2baaaaa7c1e2bd9a73fa37b14be0573d989e9e5a6ac972d9b2b96c84521
MD5 1c839d0c3b427c7a1f67149351392790
SHA1 6cb4f3bbf579c33b026eeefc2b5da01e6b892ab4
SHA512 efe5c71e8b0c6fadf76387f6f9180f9aaa4590ff2f2c885314804029ed2a3ff66284b8c9444ac931942236e7a01fb2c12e3dda394eca04cf309dc531c8fa78b0
SSDEEP 98304:11f9b8DBaTb9QjSAwzEKfAdrHF1ZqLS5Cd/m37RQ8FLOAkGkzdnEVomFHKnPx:pb8LjL7qLS5G/Ye8FLOyomFHKnPx
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Digest

f6:0e:53:5d:e9:86:bb:48:70:2c:84:e2:96:7c:88:cb:88:3f:16:0d:3b:29:16:9f:78:e9:65:2c:93:64:ca:a8

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=91350203MA8UXFF566,CN=Xiamen Source Spacetime Technology Co.\, Ltd.,O=Xiamen Source Spacetime Technology Co.\, Ltd.,ST=福建省,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Chains

Sep 4, 2024

CN=Sectigo Public Code Signing CA EV R36,O=Sectigo Limited,C=GB

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Serial Number

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

May 25, 2021 - Dec 31, 2028

Subject

CN=Sectigo Public Code Signing CA EV R36,O=Sectigo Limited,C=GB

Serial Number

33:d7:08:a8:91:40:53:19:e2:a5:bb:d3:39:b9:ad:6e

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Mar 22, 2021 - Mar 21, 2036

Subject

Serial Number

4d:ab:34:2d:80:4f:98:ba:af:71:c5:78:95:84:7a:32

Issuer

CN=Sectigo Public Code Signing CA EV R36,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Aug 31, 2023 - Aug 31, 2026

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Serial Number

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 15, 2024 - Apr 14, 2035

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Serial Number

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Mar 22, 2021 - Mar 21, 2036

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Serial Number

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Mar 22, 2021 - Jan 18, 2038

Minor OS version

Major OS version

Entry point

1556207

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

E:\hongzhenqian\Code\03_JisuBrowser_Yindao_Code\Release\JiSuSetup.pdb

kernel32

ChangeTimerQueueTimer CreateTimerQueueTimer GetLogicalProcessorInformation GetThreadPriority SignalObjectAndWait CreateTimerQueue WriteConsoleW SetEnvironmentVariableA FreeEnvironmentStringsW GetEnvironmentStringsW IsValidCodePage FindNextFileA FindFirstFileExA GetConsoleCP EnumSystemLocalesW IsValidLocale SetFilePointerEx SetConsoleCtrlHandler PeekNamedPipe GetDriveTypeW SetStdHandle HeapQueryInformation VirtualAlloc FreeLibraryAndExitThread ExitThread ExitProcess GetTimeZoneInformation GetVersionExW GetCommandLineA InterlockedFlushSList InterlockedPushEntrySList RtlUnwind ReadConsoleW ReadConsoleA SetConsoleMode GetConsoleMode GetNumaHighestNodeNumber ConvertThreadToFiber ConvertFiberToThread GetFileType GetStdHandle FindFirstFileW CreateFiber DeleteFiber SwitchToFiber GetModuleHandleExW GetSystemTime LCMapStringW CompareStringW GetStringTypeW GetTempPathW GetFullPathNameW GetFileAttributesExW FindNextFileW CreateFileW CreateDirectoryW GetCurrentDirectoryW QueryPerformanceFrequency SwitchToThread TryEnterCriticalSection OutputDebugStringW GetProcessAffinityMask SetThreadAffinityMask RegisterWaitForSingleObject UnregisterWait DeleteTimerQueueTimer GetEnvironmentVariableW VirtualFree ReleaseSemaphore InterlockedPopEntrySList QueryDepthSList UnregisterWaitEx InitializeSListHead GetSystemTimeAsFileTime QueryPerformanceCounter GetStartupInfoW IsDebuggerPresent IsProcessorFeaturePresent SetUnhandledExceptionFilter UnhandledExceptionFilter CreateEventW WaitForSingleObjectEx ResetEvent GetUserDefaultLCID GetTempFileNameA FindResourceExW SystemTimeToTzSpecificLocalTime GetFileTime GetFileSizeEx FileTimeToLocalFileTime SetErrorMode SearchPathA GetProfileIntA GetThreadTimes GetTempPathA SystemTimeToFileTime FileTimeToSystemTime GetACP GetCPInfo GetOEMCP VirtualProtect GetThreadLocale GetVolumeInformationA lstrcmpiA DuplicateHandle WriteFile UnlockFile SetFilePointer SetEndOfFile LockFile GetFullPathNameA FlushFileBuffers FindFirstFileA FindClose GetUserDefaultUILanguage GetSystemDefaultUILanguage GetLocaleInfoW GetCurrentDirectoryA GetFileSize GetFileAttributesA CreateFileA LocalReAlloc LocalAlloc GlobalHandle GlobalReAlloc TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSection GlobalFlags VerifyVersionInfoA lstrcpyA VerSetConditionMask CopyFileA GlobalSize GlobalGetAtomNameA GlobalFindAtomA lstrcmpW EncodePointer GlobalAddAtomA GetCurrentProcessId WritePrivateProfileStringA GetPrivateProfileStringA GetPrivateProfileIntA CompareStringA GlobalDeleteAtom LoadLibraryExW FreeLibrary GetCurrentThread LoadLibraryA GetModuleFileNameW SetLastError OutputDebugStringA ResumeThread SetThreadPriority GetCurrentThreadId SetEvent HeapFree MulDiv CreateMutexA FindResourceW LockResource FreeResource GlobalUnlock GlobalLock LoadResource GlobalFree GlobalAlloc FindResourceA SizeofResource GetExitCodeProcess VirtualQuery InterlockedIncrement CreateProcessA GetModuleHandleW GetProcAddress CreateThread GetSystemInfo CloseHandle MoveFileExA GetModuleHandleA lstrcmpA WaitForSingleObject TerminateProcess InterlockedDecrement GetCurrentProcess GetFileAttributesExA ReadFile LoadLibraryW GetVersionExA GetComputerNameW LocalFree GetSystemDirectoryW GetWindowsDirectoryA WideCharToMultiByte MultiByteToWideChar GetLocalTime MoveFileA GetModuleFileNameA GetTickCount DeleteFileA Sleep FormatMessageA FormatMessageW GetProcessHeap DeleteCriticalSection DecodePointer HeapAlloc RaiseException HeapReAlloc GetLastError HeapSize LeaveCriticalSection InitializeCriticalSectionAndSpinCount EnterCriticalSection GetCommandLineW

user32

LoadBitmapW SetMenuItemInfoA GetMenuCheckMarkDimensions SetMenuItemBitmaps GetIconInfo CopyIcon GetMenuDefaultItem UnregisterClassA EnableWindow InvalidateRect EnableMenuItem CheckMenuItem RemoveMenu InsertMenuA GetMenuState GetMenuStringA MapVirtualKeyA GetKeyNameTextA SetLayeredWindowAttributes MapDialogRect SetWindowContextHelpId GetDesktopWindow GetNextDlgTabItem EndDialog CreateDialogIndirectParamA IsDialogMessageA SetWindowTextA SendDlgItemMessageA CheckDlgButton MoveWindow SetRectEmpty LoadCursorA LoadCursorW EnumDisplayMonitors IntersectRect DestroyMenu GetMenuItemInfoA RealChildWindowFromPoint SetParent MonitorFromPoint OpenClipboard CloseClipboard SetClipboardData EmptyClipboard DestroyIcon LoadImageA LoadImageW CopyImage TrackMouseEvent ShowWindow GetMonitorInfoA IsZoomed CharUpperA GetAsyncKeyState SetCapture ReleaseCapture LoadMenuW DeleteMenu MessageBeep NotifyWinEvent WindowFromPoint GetWindowRgn PostMessageA ReleaseDC GetDC SendMessageA FillRect GetClientRect SystemParametersInfoA DrawTextExA IsRectEmpty TabbedTextOutA GrayStringA GetSysColor CopyRect DrawTextA MessageBoxW GetUserObjectInformationW GetProcessWindowStation OffsetRect RedrawWindow IsIconic KillTimer AppendMenuA LoadIconW SetTimer DrawIcon GetSystemMetrics GetSystemMenu GetWindowDC BeginPaint EndPaint SetRect ScreenToClient GetMessageA TranslateMessage DispatchMessageA PeekMessageA IsWindowVisible GetActiveWindow GetKeyState ValidateRect GetCursorPos SetWindowsHookExA CallNextHookEx RegisterWindowMessageA DrawEdge DrawFrameControl GetFocus DrawStateA SetWindowRgn GetWindowRect MapWindowPoints GetSysColorBrush DrawFocusRect InflateRect GetParent DrawIconEx PostQuitMessage ShowOwnedPopups SetCursor IsWindowEnabled MessageBoxA GetWindowLongA GetWindowThreadProcessId GetLastActivePopup GetMessagePos GetMessageTime DefWindowProcA CallWindowProcA RegisterClassA GetClassInfoA GetClassInfoExA CreateWindowExA IsWindow IsMenu IsChild DestroyWindow SetWindowPos GetWindowPlacement SetWindowPlacement BeginDeferWindowPos DeferWindowPos EndDeferWindowPos GetDlgItem GetDlgCtrlID SetFocus GetCapture GetMenu SetMenu GetSubMenu GetMenuItemID SetMenuDefaultItem ModifyMenuA DestroyAcceleratorTable SetClassLongA GetUpdateRect WaitMessage UpdateLayeredWindow CharNextA CopyAcceleratorTableA InvalidateRgn GetNextDlgGroupItem GetKeyboardLayout GetKeyboardState ToAsciiEx LoadAcceleratorsW CreateAcceleratorTableA SubtractRect RegisterClipboardFormatA CharUpperBuffA LoadAcceleratorsA TranslateAcceleratorA LoadMenuA InsertMenuItemA UnpackDDElParam ReuseDDElParam FrameRect IsClipboardFormatAvailable PostThreadMessageA IsCharLowerA MapVirtualKeyExA DrawMenuBar DefFrameProcA DefMDIChildProcA TranslateMDISysAccel GetComboBoxInfo CreateMenu EnableScrollBar GetMenuItemCount TrackPopupMenu UpdateWindow SetActiveWindow GetForegroundWindow SetForegroundWindow ScrollWindow SetScrollPos GetScrollPos SetScrollRange GetScrollRange ShowScrollBar SetPropA GetPropA RemovePropA GetWindowTextA GetWindowTextLengthA AdjustWindowRectEx EqualRect PtInRect SetWindowLongA GetClassLongA GetClassNameA GetTopWindow DestroyCursor InvertRect HideCaret GetWindow UnhookWindowsHookEx SetCursorPos UnionRect BringWindowToTop LockWindowUpdate CreatePopupMenu ClientToScreen GetDoubleClickTime LoadIconA SetScrollInfo GetScrollInfo WinHelpA MonitorFromWindow

gdi32

SetROP2 SetTextColor SetTextAlign MoveToEx SetViewportExtEx SetViewportOrgEx SetWindowExtEx SetWindowOrgEx OffsetViewportOrgEx OffsetWindowOrgEx ScaleViewportExtEx ScaleWindowExtEx CombineRgn CreateEllipticRgn CreateRectRgnIndirect Ellipse GetBkColor GetTextColor PatBlt CreatePolygonRgn Polygon Polyline GetTextMetricsA CopyMetaFileA CreateDCA CreateDIBitmap EnumFontFamiliesA GetTextCharsetInfo GetMapMode SetPolyFillMode DPtoLP SetPixel StretchBlt CreateDIBSection SetDIBColorTable CreateRoundRectRgn Rectangle GetRgnBox OffsetRgn RoundRect GetPaletteEntries GetNearestPaletteIndex GetSystemPaletteEntries EnumFontFamiliesExA LPtoDP ExtFloodFill SetPaletteEntries FillRgn FrameRgn GetBoundsRect PtInRegion SetPixelV GetTextFaceA GetLayout SetLayout SetMapMode DeleteDC GetDeviceCaps CreateFontIndirectA GetStockObject CreatePalette RealizePalette GetViewportOrgEx GetObjectA PtVisible Escape TextOutA CreateRectRgn GetWindowOrgEx RectVisible CreateCompatibleDC GetDIBColorTable GetTextExtentPoint32A ExtTextOutA CreateCompatibleBitmap BitBlt CreateBitmap CreateHatchBrush CreatePen CreatePatternBrush CreateSolidBrush DeleteObject ExcludeClipRect GetClipBox GetObjectType GetPixel GetViewportExtEx GetWindowExtEx IntersectClipRect LineTo OffsetClipRgn RestoreDC SaveDC SelectClipRgn ExtSelectClipRgn SelectObject SelectPalette SetBkColor SetBkMode SetRectRgn

msimg32

TransparentBlt AlphaBlend

winspool.drv

ClosePrinter OpenPrinterA DocumentPropertiesA

advapi32

RegSetValueExA RegQueryValueExA RegCloseKey LookupAccountNameW DeregisterEventSource RegisterEventSourceW ReportEventW CryptAcquireContextW CryptReleaseContext CryptDestroyKey CryptSetHashParam CryptGetProvParam CryptGetUserKey CryptExportKey CryptDecrypt CryptDestroyHash CryptSignHashW CryptEnumProvidersW CryptGenRandom CryptCreateHash ConvertSidToStringSidA RegOpenKeyExA RegEnumKeyExA RegEnumValueA RegQueryValueA RegEnumKeyA RegDeleteValueA RegDeleteKeyA RegCreateKeyExA

shell32

ShellExecuteA SHGetMalloc SHGetPathFromIDListA SHGetSpecialFolderLocation SHBrowseForFolderA DragFinish DragQueryFileA SHGetFileInfoA SHAppBarMessage SHGetDesktopFolder SHGetFolderPathA

comctl32

InitCommonControlsEx

shlwapi

PathFindExtensionA PathFindFileNameA PathIsUNCA PathStripToRootA PathRemoveFileSpecW StrFormatKBSizeA

uxtheme

GetThemeSysColor IsThemeBackgroundPartiallyTransparent GetThemePartSize GetWindowTheme DrawThemeText IsAppThemed DrawThemeParentBackground GetCurrentThemeName GetThemeColor DrawThemeBackground CloseThemeData OpenThemeData

ole32

IsAccelerator OleTranslateAccelerator OleDestroyMenuDescriptor OleCreateMenuDescriptor OleUninitialize OleInitialize CoFreeUnusedLibraries OleLockRunning RegisterDragDrop CoLockObjectExternal OleGetClipboard DoDragDrop OleIsCurrentClipboard OleFlushClipboard CreateILockBytesOnHGlobal StgOpenStorageOnILockBytes StgCreateDocfileOnILockBytes CoGetClassObject CoDisconnectObject ReleaseStgMedium OleDuplicateData CoTaskMemFree CoTaskMemAlloc CLSIDFromProgID CLSIDFromString CoInitialize CreateStreamOnHGlobal CoSetProxyBlanket CoCreateGuid CoInitializeEx CoCreateInstance CoUninitialize CoRevokeClassObject CoRegisterMessageFilter RevokeDragDrop

oleaut32

LoadTypeLi OleCreateFontIndirect VarBstrFromDate VariantCopy SafeArrayDestroy VariantTimeToSystemTime SystemTimeToVariantTime VariantChangeType VariantInit SysAllocStringLen SysAllocStringByteLen SysStringLen SafeArrayUnaccessData SafeArrayAccessData SysFreeString SysAllocString VariantClear

oledlg

ord8

gdiplus

GdipFree GdipCreateFromHDC GdipSetTextRenderingHint GdipDeleteGraphics GdipGetImageWidth GdipDrawImageRectRectI GdipLoadImageFromStream GdiplusStartup GdiplusShutdown GdipDrawImageI GdipDrawImageRectI GdipBitmapUnlockBits GdipBitmapLockBits GdipCreateBitmapFromScan0 GdipCreateBitmapFromStream GdipGetImagePaletteSize GdipGetImagePalette GdipGetImagePixelFormat GdipGetImageGraphicsContext GdipGetImageHeight GdipCloneImage GdipAlloc GdipDisposeImage GdipSetSmoothingMode GdipSetPixelOffsetMode GdipSetInterpolationMode GdipCreateBitmapFromHBITMAP

ws2_32

WSAStartup WSACleanup WSAGetLastError setsockopt getnameinfo ioctlsocket freeaddrinfo getsockopt recv WSASetLastError __WSAFDIsSet WSAStringToAddressA closesocket select shutdown WSASocketW getaddrinfo getpeername getsockname send socket ntohs connect

crypt32

CertFindCertificateInStore CertOpenStore CertGetCertificateContextProperty CertDuplicateCertificateContext CertFreeCertificateContext CertOpenSystemStoreW CertEnumCertificatesInStore CertCloseStore

version

VerQueryValueA GetFileVersionInfoA GetFileVersionInfoSizeA

winmm

PlaySoundA

oleacc

CreateStdAccessibleObject AccessibleObjectFromWindow LresultFromObject

imm32

ImmReleaseContext ImmGetOpenStatus ImmGetContext

??0Exception@Json@@QAE@ABV01@@Z ??0Exception@Json@@QAE@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ??0Factory@StreamWriter@Json@@QAE@ABV012@@Z ??0Factory@StreamWriter@Json@@QAE@XZ ??0FastWriter@Json@@QAE@ABV01@@Z ??0FastWriter@Json@@QAE@XZ ??0LogicError@Json@@QAE@$$QAV01@@Z ??0LogicError@Json@@QAE@ABV01@@Z ??0LogicError@Json@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ??0Path@Json@@QAE@$$QAV01@@Z ??0Path@Json@@QAE@ABV01@@Z ??0Path@Json@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABVPathArgument@1@1111@Z ??0PathArgument@Json@@QAE@$$QAV01@@Z ??0PathArgument@Json@@QAE@ABV01@@Z ??0PathArgument@Json@@QAE@I@Z ??0PathArgument@Json@@QAE@PBD@Z ??0PathArgument@Json@@QAE@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ??0PathArgument@Json@@QAE@XZ ??0RuntimeError@Json@@QAE@$$QAV01@@Z ??0RuntimeError@Json@@QAE@ABV01@@Z ??0RuntimeError@Json@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ??0StaticString@Json@@QAE@PBD@Z ??0StreamWriter@Json@@QAE@ABV01@@Z ??0StreamWriter@Json@@QAE@XZ ??0StreamWriterBuilder@Json@@QAE@ABV01@@Z ??0StreamWriterBuilder@Json@@QAE@XZ ??0StyledStreamWriter@Json@@QAE@ABV01@@Z ??0StyledStreamWriter@Json@@QAE@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ??0StyledWriter@Json@@QAE@ABV01@@Z ??0StyledWriter@Json@@QAE@XZ ??0Value@Json@@QAE@$$QAV01@@Z ??0Value@Json@@QAE@ABV01@@Z ??0Value@Json@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ??0Value@Json@@QAE@ABVStaticString@1@@Z ??0Value@Json@@QAE@H@Z ??0Value@Json@@QAE@I@Z ??0Value@Json@@QAE@N@Z ??0Value@Json@@QAE@PBD0@Z ??0Value@Json@@QAE@PBD@Z ??0Value@Json@@QAE@W4ValueType@1@@Z ??0Value@Json@@QAE@_J@Z ??0Value@Json@@QAE@_K@Z ??0Value@Json@@QAE@_N@Z ??0ValueConstIterator@Json@@AAE@ABV?$_Tree_iterator@V?$_Tree_val@U?$_Tree_simple_types@U?$pair@$$CBVCZString@Value@Json@@V23@@std@@@std@@@std@@@std@@@Z ??0ValueConstIterator@Json@@QAE@ABVValueIterator@1@@Z ??0ValueConstIterator@Json@@QAE@XZ ??0ValueIterator@Json@@AAE@ABV?$_Tree_iterator@V?$_Tree_val@U?$_Tree_simple_types@U?$pair@$$CBVCZString@Value@Json@@V23@@std@@@std@@@std@@@std@@@Z ??0ValueIterator@Json@@QAE@ABV01@@Z ??0ValueIterator@Json@@QAE@ABVValueConstIterator@1@@Z ??0ValueIterator@Json@@QAE@XZ ??0ValueIteratorBase@Json@@QAE@ABV?$_Tree_iterator@V?$_Tree_val@U?$_Tree_simple_types@U?$pair@$$CBVCZString@Value@Json@@V23@@std@@@std@@@std@@@std@@@Z ??0ValueIteratorBase@Json@@QAE@XZ ??0Writer@Json@@QAE@ABV01@@Z ??0Writer@Json@@QAE@XZ ??1Exception@Json@@UAE@XZ ??1Factory@StreamWriter@Json@@UAE@XZ ??1FastWriter@Json@@UAE@XZ ??1LogicError@Json@@UAE@XZ ??1Path@Json@@QAE@XZ ??1PathArgument@Json@@QAE@XZ ??1RuntimeError@Json@@UAE@XZ ??1StreamWriter@Json@@UAE@XZ ??1StreamWriterBuilder@Json@@UAE@XZ ??1StyledStreamWriter@Json@@QAE@XZ ??1StyledWriter@Json@@UAE@XZ ??1Value@Json@@QAE@XZ ??1Writer@Json@@UAE@XZ ??4Exception@Json@@QAEAAV01@ABV01@@Z ??4Factory@StreamWriter@Json@@QAEAAV012@ABV012@@Z ??4FastWriter@Json@@QAEAAV01@ABV01@@Z ??4LogicError@Json@@QAEAAV01@$$QAV01@@Z ??4LogicError@Json@@QAEAAV01@ABV01@@Z ??4Path@Json@@QAEAAV01@$$QAV01@@Z ??4Path@Json@@QAEAAV01@ABV01@@Z ??4PathArgument@Json@@QAEAAV01@$$QAV01@@Z ??4PathArgument@Json@@QAEAAV01@ABV01@@Z ??4RuntimeError@Json@@QAEAAV01@$$QAV01@@Z ??4RuntimeError@Json@@QAEAAV01@ABV01@@Z ??4StaticString@Json@@QAEAAV01@$$QAV01@@Z ??4StaticString@Json@@QAEAAV01@ABV01@@Z ??4StreamWriter@Json@@QAEAAV01@ABV01@@Z ??4StreamWriterBuilder@Json@@QAEAAV01@ABV01@@Z ??4StyledStreamWriter@Json@@QAEAAV01@ABV01@@Z ??4StyledWriter@Json@@QAEAAV01@ABV01@@Z ??4Value@Json@@QAEAAV01@$$QAV01@@Z ??4Value@Json@@QAEAAV01@ABV01@@Z ??4ValueConstIterator@Json@@QAEAAV01@$$QAV01@@Z ??4ValueConstIterator@Json@@QAEAAV01@ABV01@@Z ??4ValueConstIterator@Json@@QAEAAV01@ABVValueIteratorBase@1@@Z ??4ValueIterator@Json@@QAEAAV01@ABV01@@Z ??4ValueIteratorBase@Json@@QAEAAV01@$$QAV01@@Z ??4ValueIteratorBase@Json@@QAEAAV01@ABV01@@Z ??4Writer@Json@@QAEAAV01@ABV01@@Z ??6Json@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@std@@AAV12@ABVValue@0@@Z ??8Value@Json@@QBE_NABV01@@Z ??8ValueIteratorBase@Json@@QBE_NABV01@@Z ??9Value@Json@@QBE_NABV01@@Z ??9ValueIteratorBase@Json@@QBE_NABV01@@Z ??AStreamWriterBuilder@Json@@QAEAAVValue@1@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ??AValue@Json@@QAEAAV01@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ??AValue@Json@@QAEAAV01@ABVStaticString@1@@Z ??AValue@Json@@QAEAAV01@H@Z ??AValue@Json@@QAEAAV01@I@Z ??AValue@Json@@QAEAAV01@PBD@Z ??AValue@Json@@QBEABV01@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ??AValue@Json@@QBEABV01@H@Z ??AValue@Json@@QBEABV01@I@Z ??AValue@Json@@QBEABV01@PBD@Z ??BStaticString@Json@@QBEPBDXZ ??BValue@Json@@QBE_NXZ ??CValueConstIterator@Json@@QBEPBVValue@1@XZ ??CValueIterator@Json@@QBEPAVValue@1@XZ ??DValueConstIterator@Json@@QBEABVValue@1@XZ ??DValueIterator@Json@@QBEAAVValue@1@XZ ??EValueConstIterator@Json@@QAE?AV01@H@Z ??EValueConstIterator@Json@@QAEAAV01@XZ ??EValueIterator@Json@@QAE?AV01@H@Z ??EValueIterator@Json@@QAEAAV01@XZ ??FValueConstIterator@Json@@QAE?AV01@H@Z ??FValueConstIterator@Json@@QAEAAV01@XZ ??FValueIterator@Json@@QAE?AV01@H@Z ??FValueIterator@Json@@QAEAAV01@XZ ??GValueIteratorBase@Json@@QBEHABV01@@Z ??MValue@Json@@QBE_NABV01@@Z ??NValue@Json@@QBE_NABV01@@Z ??OValue@Json@@QBE_NABV01@@Z ??PValue@Json@@QBE_NABV01@@Z ??_7Exception@Json@@6B@ ??_7Factory@StreamWriter@Json@@6B@ ??_7FastWriter@Json@@6B@ ??_7LogicError@Json@@6B@ ??_7RuntimeError@Json@@6B@ ??_7StreamWriter@Json@@6B@ ??_7StreamWriterBuilder@Json@@6B@ ??_7StyledWriter@Json@@6B@ ??_7Writer@Json@@6B@ ??_FStyledStreamWriter@Json@@QAEXXZ ??_FValue@Json@@QAEXXZ ?addPathInArg@Path@Json@@AAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV?$vector@PBVPathArgument@Json@@V?$allocator@PBVPathArgument@Json@@@std@@@4@AAV?$_Vector_const_iterator@V?$_Vector_val@U?$_Simple_types@PBVPathArgument@Json@@@std@@@std@@@4@W4Kind@PathArgument@2@@Z ?append@Value@Json@@QAEAAV12@$$QAV12@@Z ?append@Value@Json@@QAEAAV12@ABV12@@Z ?asBool@Value@Json@@QBE_NXZ ?asCString@Value@Json@@QBEPBDXZ ?asDouble@Value@Json@@QBENXZ ?asFloat@Value@Json@@QBEMXZ ?asInt64@Value@Json@@QBE_JXZ ?asInt@Value@Json@@QBEHXZ ?asLargestInt@Value@Json@@QBE_JXZ ?asLargestUInt@Value@Json@@QBE_KXZ ?asString@Value@Json@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ ?asUInt64@Value@Json@@QBE_KXZ ?asUInt@Value@Json@@QBEIXZ ?begin@Value@Json@@QAE?AVValueIterator@2@XZ ?begin@Value@Json@@QBE?AVValueConstIterator@2@XZ ?c_str@StaticString@Json@@QBEPBDXZ ?clear@Value@Json@@QAEXXZ ?compare@Value@Json@@QBEHABV12@@Z ?computeDistance@ValueIteratorBase@Json@@IBEHABV12@@Z ?copy@Value@Json@@QAEXABV12@@Z ?copy@ValueIteratorBase@Json@@IAEXABV12@@Z ?copyPayload@Value@Json@@QAEXABV12@@Z ?decrement@ValueIteratorBase@Json@@IAEXXZ ?defaultRealPrecision@Value@Json@@2IB ?demand@Value@Json@@QAEPAV12@PBD0@Z ?deref@ValueIteratorBase@Json@@IAEAAVValue@2@XZ ?deref@ValueIteratorBase@Json@@IBEABVValue@2@XZ ?dropNullPlaceholders@FastWriter@Json@@QAEXXZ ?dupMeta@Value@Json@@AAEXABV12@@Z ?dupPayload@Value@Json@@AAEXABV12@@Z ?empty@Value@Json@@QBE_NXZ ?enableYAMLCompatibility@FastWriter@Json@@QAEXXZ ?end@Value@Json@@QAE?AVValueIterator@2@XZ ?end@Value@Json@@QBE?AVValueConstIterator@2@XZ ?find@Value@Json@@QBEPBV12@PBD0@Z ?get@Value@Json@@QBE?AV12@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV12@@Z ?get@Value@Json@@QBE?AV12@IABV12@@Z ?get@Value@Json@@QBE?AV12@PBD0ABV12@@Z ?get@Value@Json@@QBE?AV12@PBDABV12@@Z ?getComment@Value@Json@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@W4CommentPlacement@2@@Z ?getMemberNames@Value@Json@@QBE?AV?$vector@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@std@@XZ ?getOffsetLimit@Value@Json@@QBEHXZ ?getOffsetStart@Value@Json@@QBEHXZ ?getString@Value@Json@@QBE_NPAPBD0@Z ?hasComment@Value@Json@@QBE_NW4CommentPlacement@2@@Z ?hasCommentForValue@StyledStreamWriter@Json@@CA_NABVValue@2@@Z ?hasCommentForValue@StyledWriter@Json@@CA_NABVValue@2@@Z ?increment@ValueIteratorBase@Json@@IAEXXZ ?indent@StyledStreamWriter@Json@@AAEXXZ ?indent@StyledWriter@Json@@AAEXXZ ?index@ValueIteratorBase@Json@@QBEIXZ ?initBasic@Value@Json@@AAEXW4ValueType@2@_N@Z ?insert@Value@Json@@QAE_NI$$QAV12@@Z ?insert@Value@Json@@QAE_NIABV12@@Z ?invalidPath@Path@Json@@CAXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@H@Z ?isAllocated@Value@Json@@ABE_NXZ ?isArray@Value@Json@@QBE_NXZ ?isBool@Value@Json@@QBE_NXZ ?isConvertibleTo@Value@Json@@QBE_NW4ValueType@2@@Z ?isDouble@Value@Json@@QBE_NXZ ?isEqual@ValueIteratorBase@Json@@IBE_NABV12@@Z ?isInt64@Value@Json@@QBE_NXZ ?isInt@Value@Json@@QBE_NXZ ?isIntegral@Value@Json@@QBE_NXZ ?isMember@Value@Json@@QBE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ?isMember@Value@Json@@QBE_NPBD0@Z ?isMember@Value@Json@@QBE_NPBD@Z ?isMultilineArray@StyledStreamWriter@Json@@AAE_NABVValue@2@@Z ?isMultilineArray@StyledWriter@Json@@AAE_NABVValue@2@@Z ?isNull@Value@Json@@QBE_NXZ ?isNumeric@Value@Json@@QBE_NXZ ?isObject@Value@Json@@QBE_NXZ ?isString@Value@Json@@QBE_NXZ ?isUInt64@Value@Json@@QBE_NXZ ?isUInt@Value@Json@@QBE_NXZ ?isValidIndex@Value@Json@@QBE_NI@Z ?key@ValueIteratorBase@Json@@QBE?AVValue@2@XZ ?make@Path@Json@@QBEAAVValue@2@AAV32@@Z ?makePath@Path@Json@@AAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV?$vector@PBVPathArgument@Json@@V?$allocator@PBVPathArgument@Json@@@std@@@4@@Z ?maxInt64@Value@Json@@2_JB ?maxInt@Value@Json@@2HB ?maxLargestInt@Value@Json@@2_JB ?maxLargestUInt@Value@Json@@2_KB ?maxUInt64@Value@Json@@2_KB ?maxUInt64AsDouble@Value@Json@@2NB ?maxUInt@Value@Json@@2IB ?memberName@ValueIteratorBase@Json@@QBEPBDPAPBD@Z ?memberName@ValueIteratorBase@Json@@QBEPBDXZ ?minInt64@Value@Json@@2_JB ?minInt@Value@Json@@2HB ?minLargestInt@Value@Json@@2_JB ?name@ValueIteratorBase@Json@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ ?newStreamWriter@StreamWriterBuilder@Json@@UBEPAVStreamWriter@2@XZ ?null@Value@Json@@2ABV12@B ?nullRef@Value@Json@@2ABV12@B ?nullSingleton@Value@Json@@SAABV12@XZ ?omitEndingLineFeed@FastWriter@Json@@QAEXXZ ?pushValue@StyledStreamWriter@Json@@AAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ?pushValue@StyledWriter@Json@@AAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ?releasePayload@Value@Json@@AAEXXZ ?removeIndex@Value@Json@@QAE_NIPAV12@@Z ?removeMember@Value@Json@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ?removeMember@Value@Json@@QAEXPBD@Z ?removeMember@Value@Json@@QAE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PAV12@@Z ?removeMember@Value@Json@@QAE_NPBD0PAV12@@Z ?removeMember@Value@Json@@QAE_NPBDPAV12@@Z ?resize@Value@Json@@QAEXI@Z ?resolve@Path@Json@@QBE?AVValue@2@ABV32@0@Z ?resolve@Path@Json@@QBEABVValue@2@ABV32@@Z ?resolveReference@Value@Json@@AAEAAV12@PBD0@Z ?resolveReference@Value@Json@@AAEAAV12@PBD@Z ?setComment@Value@Json@@QAEXPBDIW4CommentPlacement@2@@Z ?setComment@Value@Json@@QAEXPBDW4CommentPlacement@2@@Z ?setComment@Value@Json@@QAEXV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@W4CommentPlacement@2@@Z ?setDefaults@StreamWriterBuilder@Json@@SAXPAVValue@2@@Z ?setIsAllocated@Value@Json@@AAEX_N@Z ?setOffsetLimit@Value@Json@@QAEXH@Z ?setOffsetStart@Value@Json@@QAEXH@Z ?setType@Value@Json@@AAEXW4ValueType@2@@Z ?size@Value@Json@@QBEIXZ ?swap@Value@Json@@QAEXAAV12@@Z ?swapPayload@Value@Json@@QAEXAAV12@@Z ?toStyledString@Value@Json@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ ?type@Value@Json@@QBE?AW4ValueType@2@XZ ?unindent@StyledStreamWriter@Json@@AAEXXZ ?unindent@StyledWriter@Json@@AAEXXZ ?validate@StreamWriterBuilder@Json@@QBE_NPAVValue@2@@Z ?valueToQuotedString@Json@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PBD@Z ?valueToString@Json@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@H@Z ?valueToString@Json@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@I@Z ?valueToString@Json@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@NIW4PrecisionType@1@@Z ?valueToString@Json@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@_J@Z ?valueToString@Json@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@_K@Z ?valueToString@Json@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@_N@Z ?what@Exception@Json@@UBEPBDXZ ?write@FastWriter@Json@@UAE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABVValue@2@@Z ?write@StyledStreamWriter@Json@@QAEXAAV?$basic_ostream@DU?$char_traits@D@std@@@std@@ABVValue@2@@Z ?write@StyledWriter@Json@@UAE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABVValue@2@@Z ?writeArrayValue@StyledStreamWriter@Json@@AAEXABVValue@2@@Z ?writeArrayValue@StyledWriter@Json@@AAEXABVValue@2@@Z ?writeCommentAfterValueOnSameLine@StyledStreamWriter@Json@@AAEXABVValue@2@@Z ?writeCommentAfterValueOnSameLine@StyledWriter@Json@@AAEXABVValue@2@@Z ?writeCommentBeforeValue@StyledStreamWriter@Json@@AAEXABVValue@2@@Z ?writeCommentBeforeValue@StyledWriter@Json@@AAEXABVValue@2@@Z ?writeIndent@StyledStreamWriter@Json@@AAEXXZ ?writeIndent@StyledWriter@Json@@AAEXXZ ?writeString@Json@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABVFactory@StreamWriter@1@ABVValue@1@@Z ?writeValue@FastWriter@Json@@AAEXABVValue@2@@Z ?writeValue@StyledStreamWriter@Json@@AAEXABVValue@2@@Z ?writeValue@StyledWriter@Json@@AAEXABVValue@2@@Z ?writeWithIndent@StyledStreamWriter@Json@@AAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ?writeWithIndent@StyledWriter@Json@@AAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z

generic

count=29, id=241, version=40116,

count=223, id=243, version=40116,

count=34, id=242, version=40116,

count=2, id=261, version=27048,

count=564, id=260, productName=VS2015 UPD3.1 build 24215, version=24215,

count=7, id=260, version=27048,

count=2, id=259, version=27048,

count=2, id=132, productName=VS2008 SP1 build 30729, version=30729,

count=18, id=131, productName=VS2008 SP1 build 30729, version=30729,

count=47, id=147, productName=VS2008 SP1 build 30729, version=30729,

count=955, id=1, productName=Unmarked objects,

count=39, id=260, version=26706,

count=27, id=259, version=26706,

count=452, id=261, version=26706,

count=22, id=265, version=27048,

count=1, id=256, version=27048,

count=1, id=255, version=27048,

count=1, id=151,

count=1, id=258, version=27048,