v33377krk[.]rar | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
v33377krk.rar
Size 674KB
Sample260831-c91mmateph
SHA256 c81496a1c73930564086d4564ffc1dc8b502b2da3c9c2373ecf2ceba0b3d62fd
MD5 8fd0bdf08a85f7755f6bca8e60034237
SHA1 1904b8ea244bb970a97273343859a0af677836eb
SHA512 825f865c5fdf889c812022f8fbeb01a6206c3dc961f21096648b076db3d3713de20de15ec66f7cc5ccf58f7b8c8000116dd13e3df5e679821e24f6d0fc94477a
SSDEEP 12288:okCjAM7IMQeBcCdlfXD0EiTHwoD9MXI0ILqgIqY5tR7uOPG1eC3C1IfX:GX7IktPvD0EiTHj9MXu29r57Cy1If
TLSH
T17FE4335C0FADEF5AEDD88384DC0FC88CCB3D3270E869291A465E09B48F95B14AF1951E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/v33377krk/AdvHD.exe

File Explorer

v33377krk.rar

.rar 674KB
v33377krk/AdvHD.exe

.exe 1.9MB

v33377krk.rar

SHA256 c81496a1c73930564086d4564ffc1dc8b502b2da3c9c2373ecf2ceba0b3d62fd
MD5 8fd0bdf08a85f7755f6bca8e60034237
SHA1 1904b8ea244bb970a97273343859a0af677836eb
SHA512 825f865c5fdf889c812022f8fbeb01a6206c3dc961f21096648b076db3d3713de20de15ec66f7cc5ccf58f7b8c8000116dd13e3df5e679821e24f6d0fc94477a
SSDEEP 12288:okCjAM7IMQeBcCdlfXD0EiTHwoD9MXI0ILqgIqY5tR7uOPG1eC3C1IfX:GX7IktPvD0EiTHj9MXu29r57Cy1If
TLSH
T17FE4335C0FADEF5AEDD88384DC0FC88CCB3D3270E869291A465E09B48F95B14AF1951E
MD5 SHA1 SHA512 SSDEEP TLSH

v33377krk/AdvHD.exe

IMPHASH 352f24e16415239aa60b719d7d867d23
SHA256 1e7abd97964b883d43f1d66e7a9141648f41d1fba12bb1a46265bc8501ae2edd
MD5 9711bb37a8e8e160f7c965cc20e6b841
SHA1 5a0db20530e643395f9fe066f67bea7fa3b7cdd8
SHA512 4aec39f85fa7960f55c8f6429724015e16722ec00566c07287ca877eb49257818400554c72e6a9ed7d5162426d1fa6a2567f85f206d3ba2217af0158f664c550
SSDEEP 24576:2f//w8F0E/dRKPQbS2DHV+ae+As1GpKvITEKFsXmcrpdfzdgUV0S+j3EuKpvro2C:2fw8F0E/alN2XmcrpdfzdgUZ02E88
TLSH
T186956B12B547C075E98120F0556DBFBBE2785E3C1BB518C763C01EBA98709C36AB6F1A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

1244546

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

comctl32

ImageList_ReplaceIcon ImageList_Create ImageList_Destroy InitCommonControlsEx

winmm

mixerClose mixerSetControlDetails timeGetDevCaps mixerOpen mixerGetLineControlsW timeKillEvent timeSetEvent timeEndPeriod mixerGetLineInfoW mixerGetDevCapsW timeGetTime timeBeginPeriod mixerGetControlDetailsW

imm32

ImmSetOpenStatus ImmNotifyIME ImmGetCandidateListW ImmAssociateContext ImmGetContext ImmReleaseContext ImmGetConversionStatus ImmGetCompositionStringW ImmGetOpenStatus ImmDisableTextFrameService

d3d11

D3D11CreateDevice

dxgi

CreateDXGIFactory

d3d9

Direct3DCreate9

d3dx9_43

D3DXCreateBox D3DXCreateCubeTextureFromFileInMemory D3DXMatrixRotationZ D3DXMatrixInverse D3DXSaveSurfaceToFileInMemory D3DXVec3TransformCoord D3DXCreateTextureFromFileInMemory D3DXCreateTexture D3DXVec3Transform D3DXCreateSphere D3DXGetShaderOutputSemantics D3DXMatrixTranslation D3DXMatrixMultiply D3DXFillTextureTX D3DXMatrixScaling D3DXMatrixLookAtLH D3DXMatrixRotationYawPitchRoll D3DXCreateMatrixStack D3DXLoadMeshFromXInMemory D3DXMatrixPerspectiveFovLH D3DXVec4Transform D3DXMatrixRotationY D3DXCreateLine D3DXSaveSurfaceToFileW D3DXVec3Normalize D3DXCreateTextureFromFileInMemoryEx D3DXCreateEffect D3DXVec3CatmullRom D3DXCreateTextureShader

wininet

InternetQueryDataAvailable InternetQueryOptionW InternetReadFileExW InternetWriteFile InternetSetStatusCallbackW InternetSetOptionW InternetConnectW InternetCloseHandle HttpSendRequestExW InternetOpenW HttpQueryInfoW HttpEndRequestW HttpOpenRequestW

kernel32

SleepConditionVariableCS WakeConditionVariable InitializeConditionVariable GetTickCount GetThreadPriority SetThreadPriority GetCurrentThread lstrcmpW WaitForMultipleObjects FormatMessageA LoadLibraryExA GetModuleFileNameA InitializeSListHead GetSystemTimeAsFileTime GetCurrentThreadId GetStartupInfoW IsDebuggerPresent WaitForSingleObjectEx ResetEvent IsProcessorFeaturePresent TerminateProcess SetUnhandledExceptionFilter UnhandledExceptionFilter InitializeCriticalSectionEx GetLastError OutputDebugStringW ReleaseSemaphore GetFinalPathNameByHandleW WaitForSingleObject CreateFileW CloseHandle GetCurrentDirectoryW SetFilePointerEx CreateSemaphoreW LoadLibraryW FreeLibrary LocalFree GetCurrentProcess SetProcessAffinityMask GetProcessAffinityMask GetModuleFileNameW GetVersionExW Sleep GetProcAddress SetThreadExecutionState GetModuleHandleW FindFirstFileW FindNextFileW FindClose GetCurrentProcessId InitializeCriticalSection MulDiv EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionAndSpinCount ReadFile GetOverlappedResult LoadLibraryA SetFilePointer SetEndOfFile CreateEventW SetEvent GetFileSize GlobalAlloc GlobalLock lstrcpyW GlobalUnlock GetTimeFormatEx GetLocaleInfoEx GetDateFormatEx EnumSystemLocalesEx SetFileTime LocalFileTimeToFileTime FileTimeToSystemTime FileTimeToLocalFileTime GetFileTime GetCommandLineW CreateMutexW ReleaseMutex OpenProcess SetCurrentDirectoryW MultiByteToWideChar WideCharToMultiByte GetUserDefaultUILanguage VerSetConditionMask DeleteCriticalSection SizeofResource LockResource LoadResource FindResourceW DeleteFileW LoadLibraryExW QueryPerformanceFrequency QueryPerformanceCounter VerifyVersionInfoW

user32

LoadStringW GetCursorPos MsgWaitForMultipleObjects GetQueueStatus PostThreadMessageW LoadIconW FlashWindowEx IntersectRect SetForegroundWindow OpenClipboard CloseClipboard EmptyClipboard FindWindowW SetClipboardData GetKeyState GetWindowLongW CreateDialogParamW CheckMenuRadioItem GetMenu GetSystemMetrics MoveWindow SetFocus EndDialog SetTimer DestroyIcon SetDlgItemTextW SendDlgItemMessageW GetDlgItem KillTimer DialogBoxParamW EnableWindow GetMessageW DefWindowProcW AdjustWindowRectEx MonitorFromPoint GetWindowRect DestroyWindow GetDC SetWindowPos MessageBoxW SetActiveWindow CreateWindowExW SetCursorPos SetWindowTextW RegisterClassExW GetWindowPlacement LoadAcceleratorsW SendMessageW ShowWindow DispatchMessageW GetMonitorInfoW PeekMessageW ValidateRect LockWindowUpdate TranslateAcceleratorW TranslateMessage SetCapture wsprintfW SetWindowLongW GetClientRect PostQuitMessage SystemParametersInfoW RegisterWindowMessageW UpdateWindow ReleaseCapture ShowCursor IsIconic ReleaseDC PostMessageW CopyIcon ScreenToClient DestroyCursor ClientToScreen LoadCursorW SetCursor LoadImageW

gdi32

SetTextColor GetStockObject GetDeviceCaps SetBkMode DeleteObject CreateFontIndirectW DeleteDC CreateDCW GetTextCharset EnumFontFamiliesExW CreateSolidBrush GetGlyphOutlineW AddFontMemResourceEx SelectObject GetTextMetricsW

advapi32

CryptGetHashParam CryptDestroyHash CryptHashData RegCloseKey RegCreateKeyExW RegSetValueExW RegOpenKeyExW RegDeleteValueW RegQueryValueExW CryptReleaseContext CryptAcquireContextW CryptCreateHash

shell32

SHGetSpecialFolderPathW ShellExecuteW CommandLineToArgvW SHGetFolderPathW

ole32

CoInitializeEx CoTaskMemFree CoCreateInstance CoUninitialize CoTaskMemAlloc CoInitialize CoFreeUnusedLibraries

oleaut32

SysAllocString VariantCopy VariantInit VariantChangeType VariantClear

msvcp140

??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z ??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ ??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AA_K@Z ?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A ?_Fiopen@std@@YAPAU_iobuf@@PB_WHH@Z ?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z ?unshift@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PAD1AAPAD@Z ?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ ?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ ?in@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z ?out@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z ?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE_N_N@Z ??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z ?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z ??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ ?always_noconv@codecvt_base@std@@QBE_NXZ _Wcscoll ?_Init@locale@std@@CAPAV_Locimp@12@_N@Z ?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z ?id@?$collate@_W@std@@2V0locale@2@A _Wcsxfrm ?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ ??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z ??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ ?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z ?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ ?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z ?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ ?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ ?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ ??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z ??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ ?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z ?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ ?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@I@Z ?fill@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAE_W_W@Z ?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z ??Bid@locale@std@@QAEIXZ ?widen@?$ctype@_W@std@@QBE_WD@Z ?_Getcat@?$ctype@_W@std@@SAIPAPBVfacet@locale@2@PBV42@@Z ?getloc@ios_base@std@@QBE?AVlocale@2@XZ ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@M@Z ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@K@Z ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@J@Z ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z ?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@XZ ?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ ?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEG_W@Z ?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAE_JPB_W_J@Z ?setprecision@std@@YA?AU?$_Smanip@_J@1@_J@Z ?id@?$ctype@_W@std@@2V0locale@2@A ?uncaught_exception@std@@YA_NXZ ?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ ??0_Lockit@std@@QAE@H@Z ??1_Lockit@std@@QAE@XZ ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@H@Z ??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ ??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z ??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAH@Z ??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z ??1?$basic_istream@_WU?$char_traits@_W@std@@@std@@UAE@XZ ?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PAD_J@Z ?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@PBD_J@Z ??0?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z ??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ ?tolower@?$ctype@_W@std@@QBEPB_WPA_WPB_W@Z ?tolower@?$ctype@_W@std@@QBE_W_W@Z ?is@?$ctype@_W@std@@QBE_NF_W@Z ??1facet@locale@std@@MAE@XZ ??0facet@locale@std@@IAE@I@Z ?_Decref@facet@locale@std@@UAEPAV_Facet_base@3@XZ ?_Incref@facet@locale@std@@UAEXXZ ?_Getcoll@_Locinfo@std@@QBE?AU_Collvec@@XZ ??1_Locinfo@std@@QAE@XZ ??0_Locinfo@std@@QAE@PBD@Z ?_Random_device@std@@YAIXZ ?tellp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@U_Mbstatet@@@2@XZ ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@F@Z ?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@_JH@Z ?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@U_Mbstatet@@@2@XZ ?_Xbad_function_call@std@@YAXXZ ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@N@Z ?_Xinvalid_argument@std@@YAXPBD@Z ??0_Locinfo@std@@QAE@HPBD@Z ?_Throw_C_error@std@@YAXH@Z _Mtx_destroy_in_situ _Mtx_lock _Mtx_init_in_situ _Mtx_unlock ??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAM@Z ?_Xruntime_error@std@@YAXPBD@Z ?_Makeloc@_Locimp@locale@std@@CAPAV123@ABV_Locinfo@3@HPAV123@PBV23@@Z ?_New_Locimp@_Locimp@locale@std@@CAPAV123@ABV123@@Z ?global@locale@std@@SA?AV12@ABV12@@Z ??4?$_Yarn@D@std@@QAEAAV01@PBD@Z ?_Getname@_Locinfo@std@@QBEPBDXZ ?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z ??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UAE@XZ ?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEXABVlocale@2@@Z ?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEHXZ ?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEPAV12@PA_W_J@Z ?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPB_W_J@Z ?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPA_W_J@Z ?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEGXZ ?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JXZ ?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ ?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ ??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAE@XZ ??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z ??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IAE@XZ ?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ ?_Xbad_alloc@std@@YAXXZ ?_Xlength_error@std@@YAXPBD@Z ?_Xout_of_range@std@@YAXPBD@Z ?_Ipfx@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAE_N_N@Z ?snextc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEGXZ ?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z ?sbumpc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEGXZ ?sgetc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEGXZ ??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@XZ

shlwapi

StrStrIW PathFileExistsW

vcomp140

_vcomp_fork _vcomp_for_static_simple_init omp_set_num_threads omp_get_max_threads _vcomp_for_static_end

crypt32

CryptUnprotectData CryptProtectData CryptBinaryToStringW

emotedriver

?EmoteCreate@@YAPAVIEmoteDevice@@ABUInitParam@1@@Z

dwmapi

DwmSetWindowAttribute

vcruntime140

_CxxThrowException memset _except_handler4_common __current_exception_context __current_exception wcsstr strstr strchr _purecall __std_exception_copy __std_exception_destroy __std_terminate __CxxFrameHandler3 memcpy longjmp _setjmp3 strrchr memmove memchr __std_type_info_compare

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vswprintf __stdio_common_vfprintf _read _close _write _pipe __stdio_common_vswscanf fclose tmpfile ferror fread feof freopen tmpnam fgets __stdio_common_vswprintf_s _fseeki64 __stdio_common_vsprintf_s fread_s _popen _wfopen_s _get_stream_buffer_pointers fsetpos ungetc setvbuf ftell fgetpos fwrite fseek _pclose fgetc fflush fputc __stdio_common_vsnprintf_s _set_fmode __stdio_common_vsprintf _ftelli64 __p__commode clearerr __acrt_iob_func fopen getc

api-ms-win-crt-heap-l1-1-0

free calloc _aligned_malloc _aligned_free _set_new_mode _callnewh realloc malloc

api-ms-win-crt-runtime-l1-1-0

_controlfp_s _register_thread_local_exe_atexit_callback _c_exit _exit abort _errno _beginthreadex exit _initterm_e _initterm _get_narrow_winmain_command_line _endthreadex _set_app_type _seh_filter_exe _cexit _crt_atexit _register_onexit_function _initialize_onexit_table _initialize_narrow_environment _configure_narrow_argv _invalid_parameter_noinfo_noreturn terminate system _invalid_parameter_noinfo strerror

api-ms-win-crt-filesystem-l1-1-0

_lock_file _wremove _wfindfirst64i32 _wsplitpath_s _wmkdir rename remove _findclose _unlock_file

api-ms-win-crt-string-l1-1-0

strncat isgraph _wcsnicmp isalnum strncmp ispunct towupper strpbrk strspn isprint strncpy_s wcsncmp tolower strcoll isdigit islower isxdigit isspace toupper iscntrl iswprint _wcsicmp isupper isalpha wcscpy_s

api-ms-win-crt-math-l1-1-0

ceil _CIatan2 __setusermatherr _libm_sse2_sqrt_precise _libm_sse2_tan_precise _CIfmod log2f _libm_sse2_sin_precise _libm_sse2_pow_precise _libm_sse2_acos_precise _libm_sse2_atan_precise _libm_sse2_asin_precise ldexp _libm_sse2_cos_precise _libm_sse2_exp_precise frexp modf _libm_sse2_log10_precise _libm_sse2_log_precise floor

api-ms-win-crt-convert-l1-1-0

_wtoi wcstol atoi strtod

api-ms-win-crt-locale-l1-1-0

_configthreadlocale setlocale localeconv

api-ms-win-crt-utility-l1-1-0

rand srand qsort

api-ms-win-crt-time-l1-1-0

_gmtime64 _localtime64 _mktime64 strftime _time64 _difftime64 clock

api-ms-win-crt-environment-l1-1-0

getenv

generic

count=22, id=147, productName=VS2008 SP1 build 30729, version=30729,

count=2, id=257, productName=VS2019 v16.11.6 build 30137, version=30137,

count=1, id=253, version=30818,

count=6, id=257, productName=VS2022 v17.1.0 pre 1.0 build 30818, version=30818,

count=4, id=260, version=29395,

count=37, id=260, version=27031,

count=1, productName=Unmarked objects (old),

count=1, id=260, version=26715,

count=8, id=261, productName=VS2019 v16.8.0 build 29333, version=29333,

count=33, id=260, version=31104,

count=2, id=156, version=21202,

count=35, id=257, version=29395,

count=688, id=1, productName=Unmarked objects,

count=41, id=261, productName=VS2022 v17.1.0 pre 1.0 build 30818, version=30818,

count=12, id=260, productName=VS2022 v17.1.0 pre 1.0 build 30818, version=30818,

count=15, id=259, productName=VS2022 v17.1.0 pre 1.0 build 30818, version=30818,

count=170, id=265, version=31105,

count=1, id=255, version=31105,

count=1, id=151,

count=1, id=258, version=31105,