public-4.zip
- SHA256 21a489d0b368dd8e910b715400a832c7b1fa2f3b080a928b8ccffac5c10cb594
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
public/Fixes/connectionFix.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
public/Fixes/connectionFix.exe
Resource
win11-20260513-en
windows11-21h2-x64
3 signatures
150 seconds
Behavioral task
behavioral3
Sample
public/roblox/Install_Roblox.bat
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
public/roblox/Install_Roblox.bat
Resource
win11-20260513-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral5
Sample
public/snowfall.cc.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral6
Sample
public/snowfall.cc.exe
Resource
win11-20260513-en
windows11-21h2-x64
0 signatures
150 seconds
General
- Target public-4.zip
- Size 7.9MB
- Sample260604-hv7ehsay8x
- SHA256 21a489d0b368dd8e910b715400a832c7b1fa2f3b080a928b8ccffac5c10cb594
- MD5 379185659dafc46002e2dfb513009828
- SHA1 a817f11b71b255ade43d9bfd495e25fb03a7d824
- SHA512 49d1e331244e27e28e0f5bbce2102a4c611e8f28c8c588ab248552a17dd788656b4869ce6ab10963b0c209292922beae8f181cb94c19d3404e91ad966e931cd2
- SSDEEP 196608:xC+MPlnhSK2BlnsdgC+MPlnhSK2BlnsdFbaVGSWe4s:k+Mthb2BlQ+Mthb2BlI1SF4s
- TLSH T147863355246B7AFCB4F620475409A290553F80C6CF949FA9EEF5A912CBC89B1383FB1C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/public/Fixes/connectionFix.exe unpack001/public/snowfall.cc.exe
File Explorer
-
public-4.zip.zip 7.9MB
-
public/Fixes/connectionFix.exe.exe 21KB
-
public/configs/CleanScreenshots-1.json6KB
-
public/configs/CleanScreenshots-2.json6KB
-
public/roblox/Install_Roblox.bat951B
-
public/roblox/avatar.png.png 3.5MB
-
public/roblox/avatars/avatar.png.png 3.5MB
-
public/snowfall.cc.exe.exe 1.9MB
public/Fixes/connectionFix.exe
- IMPHASH 5265c0aa3714c73947634a79ed9a36e9
- SHA256 340ecb20720b5f00ede8f9aa46ab82a835d9b41e1ab96cad8e516912db60a5f5
- MD5 5f73432e5976137fd2b431853f44d7df
- SHA1 80ee9158d76b1722c1ff6ea724698628ae347918
- SHA512 074090de5ca03c16060ae745251dc67881504547fc2fd1f529142235202e8f55c3914791553c4ae584fc5b6ae28a8cd2ad9558dc72d0163009f0ff33ca2d396f
- SSDEEP 384:JE/wg4EDGmlywEYAdpPprHER/i8JpbG379k:o4EDGmy7YAdcli8fS37
- TLSH T1BFA23C57FB4608EAF26A927DC6E66A15F231B8085B32D6CF1781506F1E763C0A87EC41
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
9984
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\Users\Andrew\source\repos\connectionFix\x64\Release\connectionFix.pdb
kernel32
InitializeSListHead
GetStdHandle
SetConsoleTitleA
SetConsoleTextAttribute
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
GetModuleHandleW
SetUnhandledExceptionFilter
advapi32
AllocateAndInitializeSid
FreeSid
CheckTokenMembership
msvcp140
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAHXZ
?ignore@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@_JH@Z
?good@ios_base@std@@QEBA_NXZ
?uncaught_exceptions@std@@YAHXZ
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?cin@std@@3V?$basic_istream@DU?$char_traits@D@std@@@1@A
?_Xlength_error@std@@YAXPEBD@Z
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
vcruntime140_1
__CxxFrameHandler4
vcruntime140
memcpy
__C_specific_handler
__current_exception
__std_terminate
_CxxThrowException
__std_exception_copy
__current_exception_context
__std_exception_destroy
api-ms-win-crt-runtime-l1-1-0
_c_exit
_register_thread_local_exe_atexit_callback
__p___argc
_exit
exit
_initialize_onexit_table
_register_onexit_function
_crt_atexit
_initterm_e
_initterm
__p___argv
_get_initial_narrow_environment
_initialize_narrow_environment
_configure_narrow_argv
_set_app_type
_seh_filter_exe
terminate
_cexit
system
api-ms-win-crt-heap-l1-1-0
_set_new_mode
_callnewh
malloc
free
api-ms-win-crt-math-l1-1-0
__setusermatherr
api-ms-win-crt-stdio-l1-1-0
__p__commode
_set_fmode
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
api-ms-win-crt-string-l1-1-0
strlen
Name
.text
Size
9KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
432B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
1024B
Virtual Size
744B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
688B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
84B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=12, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=3, id=259, version=35721,
count=10, id=260, version=35721,
count=26, id=261, version=35721,
count=6, id=257, version=35721,
count=5, id=257, version=33145,
count=76, id=1, productName=Unmarked objects,
count=1, id=265, version=36244,
count=1, id=255, version=36244,
count=1, id=258, version=36244,
public/configs/CleanScreenshots-1.json
- SHA256 9acf001ae0ba3df8ba2083d8ada7b0bbd9eedc30003f77acc194ef499abdb064
- MD5 ce251d1d805f23c27e1477fe1f1e7e83
- SHA1 c647ce3549224f393518b17225c1b960a93ca8e0
- SHA512 6b3189d0ff0cced455a77b8aca78514baf38466fd17e9b745475d416203926f9d9ccb11488a2a7df9f973214d5e49dc58e02afcffe1286589d732afdc2230a86
- SSDEEP 96:zgGAfuhnVeWmUY/+ul5JNceGB1pySyn2qdSB92sG3:zWfuhV5Y/+uPhfSynDdSB92d
- TLSH T149D13553D1145CA9B099DD3E8C2DA2065B54E1074DAB3D18F54CC49C2F2E63EA2FDAD2
- MD5 SHA1 SHA512 SSDEEP TLSH
public/configs/CleanScreenshots-2.json
- SHA256 e5dae48abcdeffc97be44ce7db8017b614f38ded029fd8d1630540a5a6b58b5f
- MD5 78f778b530218786a6cca6201065e819
- SHA1 6935b6878b4752d488525c6a7c79d2b9e6ec903d
- SHA512 4a64eb463eb7b0f857a350c7ce732cfece945f18555a0c9dcddf63725f7232be3c956281b6abb6bfa5852e777bd4bebb005e3f20a19944b07179b5a7f946f892
- SSDEEP 96:ugGAfuhnVeWmUY/+ul5JNceGB1pySyn2qdS59NG3:uWfuhV5Y/+uPhfSynDdS598
- TLSH T1F4C13453D1145CA9B099CD3E8C2DA2075B54E1074DAB3D18F54CC49C2F2E23EA2FDAE2
- MD5 SHA1 SHA512 SSDEEP TLSH
public/roblox/Install_Roblox.bat
- SHA256 7f50550b0e69c22b9342cb0c55d95f8b22378432abd1718f36ee91d1b5be01be
- MD5 b4d2f5127949a8b950c1f60b6099c822
- SHA1 685ee331864d3ba60c35ca683de2e57d8855d4dc
- SHA512 76e47b95e2d0ffd18e7ffebc071e1f24f71ba10f3c7c12eae85904bc2555dd64c0a8c1136a1a4175585ed8e64aab71aa44b659c2d4e227b923b83dfeefd94891
- TLSH T14411E1EF8701407176B003CAD5BE96A4BA43604B081669E3F4EA303DBF07191139E6DB
- MD5 SHA1 SHA512 TLSH
public/roblox/avatar.png
- SHA256 05a653bdfee02d73eb45bc35f5ff90ea56e40bd8f4b62630da6b734fa0f4156b
- MD5 18d0783d875f88541e7e16091e98e518
- SHA1 4761c17b3a88705bf022f9e15f434cdfa194be2b
- SHA512 795f095882ec73a57f039a328bd38351d90913476427d25dd5bb42a7fe12fe82dffd1c2aead26b3fc9e1b80e7d817b6a2d6e16990a3eb5abe6863fe3570438a9
- SSDEEP 98304:IpJtDn1KwtdJcAeVLDP/OoBT5SxG+J5DaqX:IBL3dJcAeVPDQeqX
- TLSH T17DF5331BC195B6E1F4BF642B6081B480E35E40DAEF431614EF8E7662CAD18E0F57B726
- MD5 SHA1 SHA512 SSDEEP TLSH
public/roblox/avatars/avatar.png
- SHA256 05a653bdfee02d73eb45bc35f5ff90ea56e40bd8f4b62630da6b734fa0f4156b
- MD5 18d0783d875f88541e7e16091e98e518
- SHA1 4761c17b3a88705bf022f9e15f434cdfa194be2b
- SHA512 795f095882ec73a57f039a328bd38351d90913476427d25dd5bb42a7fe12fe82dffd1c2aead26b3fc9e1b80e7d817b6a2d6e16990a3eb5abe6863fe3570438a9
- SSDEEP 98304:IpJtDn1KwtdJcAeVLDP/OoBT5SxG+J5DaqX:IBL3dJcAeVPDQeqX
- TLSH T17DF5331BC195B6E1F4BF642B6081B480E35E40DAEF431614EF8E7662CAD18E0F57B726
- MD5 SHA1 SHA512 SSDEEP TLSH
public/snowfall.cc.exe
- IMPHASH a227e48126bfd77f5c6be4bee5b14a92
- SHA256 d11dae036eb0c3f5600f26ae3aae32411cb72b8e2cf75394812580b678a86c94
- MD5 0c4b0d16fcc940f330243e3e5f8c8078
- SHA1 18429c12d7f2e81abf0a504bb14213b3da8ba1e9
- SHA512 158d509e291a9ccb439e85703977e9bea743f352b51f56181659a6f5951e1ad3ae00663db5ad7f8708a1a7ee94bdf99355c1ed22f5e7a8c97ae9b55ea89ae178
- SSDEEP 49152:Cfi6R1zXBNGT1175VOFNXM9EzasWn8aqQ:T4u2M97
- TLSH T1F395AE46B2B900E8C0BBD039D657A61FE671380403385AEB63F04E565F67BE15F7AB12
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
1383684
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
d3d11
D3D11CreateDeviceAndSwapChain
winhttp
WinHttpSetTimeouts
WinHttpSendRequest
WinHttpQueryDataAvailable
WinHttpReceiveResponse
WinHttpOpen
WinHttpConnect
WinHttpQueryHeaders
WinHttpReadData
WinHttpOpenRequest
WinHttpCloseHandle
kernel32
VerSetConditionMask
FreeLibrary
QueryPerformanceCounter
GlobalAlloc
GlobalFree
GlobalLock
WideCharToMultiByte
GlobalUnlock
GetModuleFileNameA
Process32First
CreateToolhelp32Snapshot
Sleep
Process32Next
CloseHandle
GetLocalTime
GetTickCount
SetConsoleTextAttribute
GetStdHandle
SetConsoleMode
SetCurrentConsoleFontEx
GetConsoleMode
ExitProcess
GetConsoleWindow
SetThreadPriority
GetCurrentThread
ReadProcessMemory
WriteProcessMemory
GetTickCount64
VirtualProtectEx
VirtualQueryEx
OpenProcess
K32GetModuleFileNameExA
Process32NextW
Process32FirstW
GetCurrentProcess
Module32Next
GetProcessId
Module32First
DuplicateHandle
GetLastError
QueryFullProcessImageNameA
GetCurrentProcessId
CreateFileA
QueryPerformanceFrequency
ReadFile
HeapAlloc
HeapFree
MapViewOfFile
UnmapViewOfFile
CreateFileMappingA
FindNextFileW
GetFileAttributesExW
SetFileInformationByHandle
AreFileApisANSI
GetModuleHandleW
GetFileInformationByHandleEx
ReleaseSRWLockExclusive
ReleaseSRWLockShared
AcquireSRWLockExclusive
AcquireSRWLockShared
SleepConditionVariableSRW
GetCurrentThreadId
InitOnceComplete
InitOnceBeginInitialize
WakeAllConditionVariable
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetSystemTimeAsFileTime
InitializeSListHead
GetProcAddress
LoadLibraryA
MultiByteToWideChar
GetLocaleInfoA
FindFirstFileExW
FindFirstFileW
FindClose
CreateFileW
CreateDirectoryW
GetModuleHandleA
GetLocaleInfoEx
FormatMessageA
LocalFree
GetFileSizeEx
user32
GetWindowThreadProcessId
GetDesktopWindow
ShowCursor
IsWindow
keybd_event
MapVirtualKeyA
FindWindowA
SendInput
GetWindowTextA
SetWindowTextA
EnumWindows
DefWindowProcW
ReleaseDC
SetCursorPos
IsWindowUnicode
SetProcessDPIAware
GetClientRect
SetCursor
DispatchMessageA
GetWindowRect
DestroyWindow
CreateWindowExW
GetSystemMetrics
SetCapture
GetForegroundWindow
ReleaseCapture
PostQuitMessage
PeekMessageA
LoadIconA
TranslateMessage
UpdateWindow
SetLayeredWindowAttributes
OpenClipboard
MoveWindow
GetMonitorInfoA
CloseClipboard
SetWindowDisplayAffinity
SetWindowLongA
EmptyClipboard
GetAsyncKeyState
ShowWindow
RegisterClassExW
UnregisterClassW
GetClipboardData
SetClipboardData
GetKeyState
GetMessageExtraInfo
LoadCursorA
GetCursorPos
GetKeyboardLayout
TrackMouseEvent
ClientToScreen
GetCapture
ScreenToClient
MonitorFromWindow
GetDC
gdi32
GetDeviceCaps
CreateSolidBrush
advapi32
OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
shell32
ShellExecuteA
d3dcompiler_43
D3DCompile
msvcp140
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@_JH@Z
?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ
?always_noconv@codecvt_base@std@@QEBA_NXZ
?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z
?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?_CallInContext@_ContextCallback@details@Concurrency@@QEBAXV?$function@$$A6AXXZ@std@@_N@Z
?uncaught_exceptions@std@@YAHXZ
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?_Xbad_alloc@std@@YAXXZ
?_Xout_of_range@std@@YAXPEBD@Z
?_Xlength_error@std@@YAXPEBD@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
?good@ios_base@std@@QEBA_NXZ
??1_Lockit@std@@QEAA@XZ
??0_Lockit@std@@QEAA@H@Z
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?_Id_cnt@id@locale@std@@0HA
_Query_perf_frequency
?_Throw_Cpp_error@std@@YAXH@Z
?_Winerror_map@std@@YAHH@Z
?_Syserror_map@std@@YAPEBDH@Z
_Mtx_lock
_Query_perf_counter
_Mtx_unlock
_Cnd_do_broadcast_at_thread_exit
_Thrd_detach
?_Random_device@std@@YAIXZ
_Thrd_id
_Thrd_join
_Cnd_broadcast
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z
?__ExceptionPtrAssign@@YAXPEAXPEBX@Z
?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ
?_ReportUnobservedException@details@Concurrency@@YAXXZ
?_Schedule_chore@details@Concurrency@@YAHPEAU_Threadpool_chore@12@@Z
?_LogWorkItemCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogWorkItemStarted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogTaskExecutionCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogTaskCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogCancelTask@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogScheduleTask@_TaskEventLogger@details@Concurrency@@QEAAX_N@Z
?_Release_chore@details@Concurrency@@YAXPEAU_Threadpool_chore@12@@Z
?ReportUnhandledError@_ExceptionHolder@details@Concurrency@@AEAAXXZ
?_Capture@_ContextCallback@details@Concurrency@@AEAAXXZ
?_Reset@_ContextCallback@details@Concurrency@@AEAAXXZ
??Bios_base@std@@QEBA_NXZ
??0task_continuation_context@Concurrency@@AEAA@XZ
_Cnd_unregister_at_thread_exit
?__ExceptionPtrCreate@@YAXPEAX@Z
?__ExceptionPtrCopy@@YAXPEAXPEBX@Z
?_Xbad_function_call@std@@YAXXZ
?__ExceptionPtrToBool@@YA_NPEBX@Z
?__ExceptionPtrDestroy@@YAXPEAX@Z
?__ExceptionPtrCurrentException@@YAXPEAX@Z
?__ExceptionPtrRethrow@@YAXPEBX@Z
_Cnd_register_at_thread_exit
_Cnd_wait
?cin@std@@3V?$basic_istream@DU?$char_traits@D@std@@@1@A
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@AEAD@Z
?peek@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAHXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@G@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@PEBX@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
dwmapi
DwmExtendFrameIntoClientArea
imm32
ImmSetCompositionWindow
ImmReleaseContext
ImmGetContext
ImmSetCandidateWindow
winmm
timeBeginPeriod
vcruntime140_1
__CxxFrameHandler4
vcruntime140
memmove
_CxxThrowException
__intrinsic_setjmp
__current_exception_context
__current_exception
__C_specific_handler
memcmp
memchr
memset
strstr
memcpy
longjmp
strrchr
_purecall
__std_terminate
__std_exception_copy
__std_exception_destroy
api-ms-win-crt-heap-l1-1-0
free
_callnewh
malloc
realloc
_set_new_mode
api-ms-win-crt-runtime-l1-1-0
_beginthreadex
_register_thread_local_exe_atexit_callback
abort
_invoke_watson
_c_exit
terminate
system
_errno
__p___argv
__p___argc
_exit
_initterm_e
_initterm
_get_initial_narrow_environment
_set_app_type
_seh_filter_exe
_cexit
_crt_atexit
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
exit
api-ms-win-crt-math-l1-1-0
ldexp
_dclass
_fdclass
asinf
atan2f
ceilf
cosf
floorf
__setusermatherr
roundf
fmodf
log
sqrt
logf
_dsign
pow
powf
sinf
acosf
sqrtf
api-ms-win-crt-string-l1-1-0
strncmp
strcpy_s
tolower
strcmp
_stricmp
strncpy
wcscpy_s
api-ms-win-crt-convert-l1-1-0
atof
strtoull
strtod
strtoll
strtol
api-ms-win-crt-stdio-l1-1-0
_get_stream_buffer_pointers
_fseeki64
fsetpos
setvbuf
fgetpos
fflush
fputc
feof
fclose
fopen_s
fgetc
ferror
__p__commode
fseek
__acrt_iob_func
ftell
__stdio_common_vfprintf
ungetc
fwrite
_wfopen
__stdio_common_vsprintf_s
__stdio_common_vsprintf
fread
__stdio_common_vsscanf
_set_fmode
api-ms-win-crt-utility-l1-1-0
qsort
rand
srand
api-ms-win-crt-time-l1-1-0
_time64
api-ms-win-crt-filesystem-l1-1-0
_unlock_file
_lock_file
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
___lc_codepage_func
localeconv
Name
.text
Size
1.4MB
Virtual Size
1.3MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
318KB
Virtual Size
317KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
13KB
Virtual Size
29KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
57KB
Virtual Size
56KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
191KB
Virtual Size
191KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=22, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=253, version=35207,
count=10, id=260, version=35207,
count=36, id=261, version=35207,
count=6, id=259, version=35207,
count=8, id=257, version=35207,
count=2, id=156, version=21202,
count=27, id=260, version=32822,
count=21, id=257, version=33145,
count=498, id=1, productName=Unmarked objects,
count=71, id=265, version=35227,
count=1, id=255, version=35227,
count=1, id=151,
count=1, id=258, version=35227,