CCS-Project Retrac.zip
- SHA256 a4016c53095cfe4e657ce1bf83262e60e431326ca9c060693e875797aa0eecd9
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
CCS-Project Retrac/CCS-Driver.sys
Resource
win10v2004-20260513-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
CCS-Project Retrac/KDMapper.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral3
Sample
CCS-Project Retrac/KDMapper.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
7 signatures
150 seconds
Behavioral task
behavioral4
Sample
CCS-Project Retrac/PLS RENAME ME TO ANYTHING!.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral5
Sample
CCS-Project Retrac/PLS RENAME ME TO ANYTHING!.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
General
- Target CCS-Project Retrac.zip
- Size 1.1MB
- Sample260810-epaa2s1blh
- SHA256 a4016c53095cfe4e657ce1bf83262e60e431326ca9c060693e875797aa0eecd9
- MD5 17c5793012e7052d8d28ba4566f9656d
- SHA1 913770c05f03af64699a9e8750f3cbd24344e476
- SHA512 c0cb83c0eafd3cb237dd729f80b648c7cdfdb9195f475c1eda4373c10c7bda6a22da2fb72f643f90c631a57f7cc19ec873f9d08e888907ec774a0fa40c3de103
- SSDEEP 24576:RKwO4yEfbrSczkP57uCcpENqXFai62ihInRfw/u1u9sBP41SOM:ww1dHS+kPtvcpwjhIRRE9sBP41SOM
- TLSH T156353307EDFD5E7E18C6E2B9A97857097402DD98FAE3A810D4725042224FFF5CA6C62C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 3 IoCs
Checks for missing Authenticode signature.
resource unpack001/CCS-Project Retrac/CCS-Driver.sys unpack001/CCS-Project Retrac/KDMapper.exe unpack001/CCS-Project Retrac/PLS RENAME ME TO ANYTHING!.exe
File Explorer
-
CCS-Project Retrac.zip.zip 1.1MB
-
CCS-Project Retrac/CCS-Driver.sys.sys 13KB
-
CCS-Project Retrac/KDMapper.exe.exe 150KB
-
CCS-Project Retrac/PLS RENAME ME TO ANYTHING!.exe.exe 2.2MB
-
CCS-Project Retrac/READ ME.txt325B
CCS-Project Retrac/CCS-Driver.sys
- IMPHASH ddbe10444432d27deb7fa3f703614c29
- SHA256 8c67ffbf9b3eced7236a043d7a0b2f23c43049d6ab5669132b61a265e94188e4
- MD5 b3c17cca2d3a176529bf291fb081ce15
- SHA1 e63e6ab1aa2eb693e06e90f9b322c08dc7c1ed9a
- SHA512 14eb1ac0f974a0c7a02d8f19d89af40302aba2007861262e27d0dee2b900510c1c4ee9bdd1b19d71745aa80beba2e6539a1ea2393b8f9545a48d53bb149786a5
- SSDEEP 192:sin1l22SNUZC7Y5yYaFzz7wVESzYcrmZ7xElO7zHzp4kpT:HHNSC5yJFzI6O5rm3vtD
- TLSH T1EE52F802B75A04F5E26A913FE2A24B47E6EAF06213516FDF0875C2461F13FE47437642
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
4096
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\Users\U_Know_69\Downloads\Driver Src\build\driver\driver.pdb
ntoskrnl.exe
_stricmp
RtlInitUnicodeString
MmGetSystemRoutineAddress
RtlEqualUnicodeString
DbgPrint
DbgPrintEx
ExAllocatePool
ExFreePoolWithTag
IofCompleteRequest
IoCreateDevice
IoCreateSymbolicLink
IoDeleteDevice
IoDeleteSymbolicLink
ObfDereferenceObject
MmGetPhysicalMemoryRanges
MmGetVirtualForPhysical
MmIsAddressValid
KeStackAttachProcess
KeUnstackDetachProcess
PsLookupProcessByProcessId
RtlFindExportedRoutineByName
IoCreateDriver
PsGetProcessSectionBaseAddress
ZwQuerySystemInformation
strcmp
PsInitialSystemProcess
PsLoadedModuleList
Name
.text
Size
7KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
512B
Virtual Size
276B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
INIT
Size
1024B
Virtual Size
884B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
36B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=3, id=257, version=33145,
count=31, id=1, productName=Unmarked objects,
count=4, id=259, version=33145,
count=5, id=260, version=33145,
count=1, id=261, version=35219,
count=1, id=258, version=35219,
CCS-Project Retrac/KDMapper.exe
- IMPHASH fe1529edef766e6c0d25b8ae1722ece5
- SHA256 eb4e4fac05c3debb4945d0e291da99362f49832c69c24458e96776b7ae711775
- MD5 1c6cb4a8f2a46c28dda107b4082df269
- SHA1 ffc0e17a50ff7c18560f19d77d190eecfd40f591
- SHA512 e8c1e3cde49a16ed7c932c0cb54f1065c599623edda478ecda382e3b4d46ac2e90837762238f46f539d2b8dfa62ad5c4c3f1901d983416f8835ef6845f5d28d4
- SSDEEP 3072:UdbUjZEbbIDfVEz9kwUmJTQSaMm5/6o5WM9NIw:gUZEbbqfIScWlT8
- TLSH T1C4E31A1797A5106EE1B7D6B9CAB24911EB727C550B74D2CF135048BA0F32BD0BA3EB12
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
64844
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\Users\U_Know_69\Downloads\like & sub\kdmapper-master\kdmapper-master\x64\Release\kdmapper_Release.pdb
kernel32
CloseHandle
GetProcAddress
GetCurrentProcessId
CreateToolhelp32Snapshot
Process32NextW
Process32FirstW
GetModuleHandleA
GetTempPathW
FormatMessageA
GetLocaleInfoEx
GetCurrentThreadId
CreateFileW
VirtualAlloc
DeviceIoControl
SetUnhandledExceptionFilter
VirtualFree
FindClose
FindFirstFileW
GetFileAttributesExW
AreFileApisANSI
GetLastError
GetModuleHandleW
GetFileInformationByHandleEx
WideCharToMultiByte
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
WakeAllConditionVariable
SleepConditionVariableSRW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
LocalFree
user32
GetShellWindow
GetWindowThreadProcessId
advapi32
RegCloseKey
RegDeleteTreeW
RegCreateKeyW
RegOpenKeyW
RegSetKeyValueW
msvcp140
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@_K@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@PEBX@Z
?getloc@ios_base@std@@QEBA?AVlocale@2@XZ
?good@ios_base@std@@QEBA_NXZ
??7ios_base@std@@QEBA_NXZ
?put@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@_W@Z
?widen@?$ctype@_W@std@@QEBA_WD@Z
?always_noconv@codecvt_base@std@@QEBA_NXZ
?cin@std@@3V?$basic_istream@DU?$char_traits@D@std@@@1@A
?_Xbad_alloc@std@@YAXXZ
?_Winerror_map@std@@YAHH@Z
?_Syserror_map@std@@YAPEBDH@Z
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAHXZ
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@K@Z
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@I@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@J@Z
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@XZ
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAA_JPEB_W_J@Z
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAG_W@Z
?widen@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBA_WD@Z
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXH_N@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1_Lockit@std@@QEAA@XZ
??0_Lockit@std@@QEAA@H@Z
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?uncaught_exception@std@@YA_NXZ
?wcout@std@@3V?$basic_ostream@_WU?$char_traits@_W@std@@@1@A
?id@?$ctype@_W@std@@2V0locale@2@A
?_Id_cnt@id@locale@std@@0HA
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z
?_Xlength_error@std@@YAXPEBD@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAXXZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
?_Getcat@?$ctype@_W@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
ntdll
NtLoadDriver
NtUnloadDriver
NtQuerySystemInformation
RtlAdjustPrivilege
RtlInitUnicodeString
vcruntime140_1
__CxxFrameHandler4
vcruntime140
memcpy
memcmp
_CxxThrowException
__std_terminate
wcsstr
__std_exception_copy
__std_exception_destroy
memset
__current_exception_context
__current_exception
__C_specific_handler
memmove
api-ms-win-crt-stdio-l1-1-0
_fseeki64
fread
fsetpos
ungetc
_get_stream_buffer_pointers
fputc
setvbuf
fgetpos
fwrite
_set_fmode
__p__commode
fgetc
fflush
fclose
api-ms-win-crt-utility-l1-1-0
srand
rand
api-ms-win-crt-runtime-l1-1-0
_initialize_wide_environment
_invoke_watson
__p___wargv
_get_initial_wide_environment
_initterm
_configure_wide_argv
terminate
_c_exit
_seh_filter_exe
_cexit
_crt_atexit
_register_onexit_function
_initialize_onexit_table
__p___argc
abort
_register_thread_local_exe_atexit_callback
_initterm_e
_exit
exit
_set_app_type
api-ms-win-crt-filesystem-l1-1-0
_wremove
_unlock_file
_lock_file
api-ms-win-crt-string-l1-1-0
_stricmp
_wcsicmp
api-ms-win-crt-time-l1-1-0
_time64
api-ms-win-crt-heap-l1-1-0
malloc
_callnewh
free
_set_new_mode
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
___lc_codepage_func
api-ms-win-crt-math-l1-1-0
__setusermatherr
Name
.text
Size
64KB
Virtual Size
64KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
79KB
Virtual Size
78KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
488B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
268B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=18, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=4, id=259, version=35207,
count=10, id=260, version=35207,
count=35, id=261, version=35207,
count=6, id=257, version=35207,
count=9, id=257, version=33145,
count=235, id=1, productName=Unmarked objects,
count=7, id=265, version=35221,
count=1, id=255, version=35221,
count=1, id=258, version=35221,
CCS-Project Retrac/PLS RENAME ME TO ANYTHING!.exe
- IMPHASH 4b6e9fad3f83c2fd71f741f86173b611
- SHA256 c76a44b471502c2310df15251bc70e9b295a3bd9163694fe35b6cc3bc40a355f
- MD5 ec552ad9cc9957e4b45824c6f2ccc291
- SHA1 6a884783fb6cf480f544995d92551866e18e314d
- SHA512 30e9af43543082b00547cfcf3d6b5ed3959f48131e1acfe90ca5c22d337141f7c107a8b8cd276974a20da1795ac6a19ec9b9bb13be9726252e57ea8c8a798b20
- SSDEEP 49152:DIzgwIAgPtSVOn94SvrMuGhZyu6PlYyf+:7tSSMTe/tYyf+
- TLSH T1A7B5BF07F3829A5AD262597C89A2D3339776F8081F22D7CFB7C40A74A9D72D01E72785
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
340444
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\Users\U_Know_69\Desktop\Like & Sub\OGFN-Safe\CCS-Retrac\x64\Release\um.pdb
kernel32
GetCommandLineW
GetCurrentProcess
OpenProcess
CreateToolhelp32Snapshot
Sleep
GetLastError
Process32NextW
Process32FirstW
CreateThread
ExitProcess
lstrcmpiW
SetConsoleTitleW
GetStartupInfoW
InitializeSListHead
GetSystemTimeAsFileTime
GetModuleHandleW
IsDebuggerPresent
SleepConditionVariableSRW
WakeAllConditionVariable
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcessId
CloseHandle
MultiByteToWideChar
GetCurrentThreadId
CreateFileW
VirtualAlloc
DeviceIoControl
VirtualFree
QueryPerformanceCounter
FreeLibrary
GetProcAddress
QueryPerformanceFrequency
LoadLibraryA
GetModuleHandleA
GlobalUnlock
WideCharToMultiByte
GlobalLock
GlobalFree
GlobalAlloc
SetLastError
user32
GetCursorPos
OpenClipboard
CloseClipboard
EmptyClipboard
SetClipboardData
GetWindowThreadProcessId
GetWindow
GetWindowRect
DestroyWindow
SetWindowPos
GetSystemMetrics
ShowWindow
GetAsyncKeyState
DispatchMessageW
PeekMessageW
EnumWindows
DefWindowProcA
SetLayeredWindowAttributes
TranslateMessage
LoadIconW
SetWindowLongW
GetDesktopWindow
RegisterClassExA
UpdateWindow
GetKeyState
ScreenToClient
ClientToScreen
GetForegroundWindow
LoadCursorW
SetCursor
GetClipboardData
GetClientRect
SetCursorPos
advapi32
GetTokenInformation
LookupPrivilegeValueW
RevertToSelf
PrivilegeCheck
OpenProcessToken
DuplicateTokenEx
CreateProcessAsUserW
SetThreadToken
SetTokenInformation
d3d9
Direct3DCreate9Ex
imm32
ImmSetCandidateWindow
ImmSetCompositionWindow
ImmReleaseContext
ImmGetContext
dwmapi
DwmExtendFrameIntoClientArea
msvcp140
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
_Query_perf_frequency
?_Xbad_alloc@std@@YAXXZ
?_Xinvalid_argument@std@@YAXPEBD@Z
?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z
_Query_perf_counter
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
??Bios_base@std@@QEBA_NXZ
?always_noconv@codecvt_base@std@@QEBA_NXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@M@Z
?good@ios_base@std@@QEBA_NXZ
??1_Lockit@std@@QEAA@XZ
??0_Lockit@std@@QEAA@H@Z
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?uncaught_exception@std@@YA_NXZ
?_Id_cnt@id@locale@std@@0HA
?_Xout_of_range@std@@YAXPEBD@Z
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?_Xlength_error@std@@YAXPEBD@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
ntdll
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
vcruntime140_1
__CxxFrameHandler4
vcruntime140
memcpy
memmove
memcmp
memchr
__std_terminate
strstr
__std_exception_destroy
__std_exception_copy
wcsstr
__current_exception
__current_exception_context
__C_specific_handler
memset
_CxxThrowException
api-ms-win-crt-stdio-l1-1-0
fgetc
_wfopen
fgetpos
fputc
ftell
__stdio_common_vsprintf_s
fwrite
fclose
setvbuf
_set_fmode
__stdio_common_vfprintf
_get_stream_buffer_pointers
_fseeki64
fsetpos
ungetc
fflush
__p__commode
fread
__acrt_iob_func
__stdio_common_vsprintf
__stdio_common_vsscanf
fseek
api-ms-win-crt-utility-l1-1-0
rand
srand
qsort
api-ms-win-crt-string-l1-1-0
strncmp
_wcsicmp
strcmp
strcpy_s
tolower
strncpy
api-ms-win-crt-heap-l1-1-0
malloc
_callnewh
_set_new_mode
free
api-ms-win-crt-convert-l1-1-0
atof
strtol
strtof
api-ms-win-crt-runtime-l1-1-0
_set_app_type
_register_thread_local_exe_atexit_callback
_c_exit
__p___argv
exit
__p___argc
_exit
_initterm_e
_initterm
_get_initial_narrow_environment
system
_seh_filter_exe
_invoke_watson
_errno
_cexit
terminate
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_crt_atexit
api-ms-win-crt-filesystem-l1-1-0
_lock_file
_access
_unlock_file
_mkdir
api-ms-win-crt-time-l1-1-0
_time64
api-ms-win-crt-math-l1-1-0
asinf
fmodf
atan2f
ceilf
__setusermatherr
cosf
tanf
log
logf
pow
powf
sinf
sqrtf
acosf
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
Name
.text
Size
335KB
Virtual Size
334KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
111KB
Virtual Size
111KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1.8MB
Virtual Size
1.8MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
13KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
488B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1024B
Virtual Size
860B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=20, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=6, id=257, version=35207,
count=3, id=259, version=35207,
count=10, id=260, version=35207,
count=35, id=261, version=35207,
count=2, id=123, productName=VS2005 build 50727, version=50727,
count=15, id=257, version=33145,
count=326, id=1, productName=Unmarked objects,
count=14, id=265, version=35221,
count=1, id=255, version=35221,
count=1, id=258, version=35221,
CCS-Project Retrac/READ ME.txt
- SHA256 a9a6e5567dbef72b648eb933b49b399b5bf6b343622f2a1883af15025cee06d1
- MD5 c11b7fec8eb2edd2ed76c8c691daddf3
- SHA1 c09933e13bbe0008ca0487ce3de572df70cfc20a
- SHA512 44eda345a8b61336863570203d146f56101bffc6a969c4de25c111778afe62c7813071750b41b426bcc632ced7ad4ab5b1064eb9ec360cbf7b88664687418410
- TLSH T1F4E0C6836203D33023E0A08BA8EF29A4EA241C14A011C1A021DDA09A9334DFCC378BEB
- MD5 SHA1 SHA512 TLSH