Reaktor_6[.]dll | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
Reaktor_6.dll
Size 48.9MB
Sample261003-r4ycmsdg46
SHA256 4126acfa1ad3acf54a09a3a47da84604a31fd364ef931aa3fea144f7743e9e0a
MD5 46252bbabe1c2101621be94f7c817e03
SHA1 1dd6e1db83d25bad9cabf4702e5ab44f6f84baf3
SHA512 876ab0433db1bca172e7b8bd83e79f2ec1ee6e9a30dea488589a279ea47f6b93ca34715cc6322a7fff4ef2a51bb297e4e2e13c152f63c3c8f548e4c4781b7ff1
SSDEEP 393216:9vEqp+X9YA+boZo72z1D0IbCIh6uHqp/4MN9e0WbrPsw5JUwo8JMvzeIVCKvZ/ai:VE8+X/+boZoCzDAGqRY6vEKv1aAB
TLSH
T116B77D01BB01D026C58210B4DD5ADBFA0866AF13CB6865C736CD3E6A7F327D24DBA647
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Malware Config

Signatures

Codesign digest Mismatch 1 IoCs

File was altered after it was signed.

resource
Reaktor_6.dll

File Explorer

Reaktor_6.dll

.dll 48.9MB

Reaktor_6.dll

IMPHASH 2eab54cad3645ae7be2cd4a1edf814d4
SHA256 4126acfa1ad3acf54a09a3a47da84604a31fd364ef931aa3fea144f7743e9e0a
MD5 46252bbabe1c2101621be94f7c817e03
SHA1 1dd6e1db83d25bad9cabf4702e5ab44f6f84baf3
SHA512 876ab0433db1bca172e7b8bd83e79f2ec1ee6e9a30dea488589a279ea47f6b93ca34715cc6322a7fff4ef2a51bb297e4e2e13c152f63c3c8f548e4c4781b7ff1
SSDEEP 393216:9vEqp+X9YA+boZo72z1D0IbCIh6uHqp/4MN9e0WbrPsw5JUwo8JMvzeIVCKvZ/ai:VE8+X/+boZoCzDAGqRY6vEKv1aAB
TLSH
T116B77D01BB01D026C58210B4DD5ADBFA0866AF13CB6865C736CD3E6A7F327D24DBA647
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Codesign digest Mismatch

File was altered after it was signed.

PE Signature issue

Digest

29:56:72:de:1c:72:1a:d2:0f:2b:e2:04:6a:95:67:e9:f3:6a:8d:00

Digest Algorithm

sha1

PE Digests Matches

Not matched

Trusted

Signing Certificate

CN=Native Instruments GmbH,O=Native Instruments GmbH,L=Berlin,C=DE

Chains

Jul 2, 2020

CN=Native Instruments GmbH,O=Native Instruments GmbH,L=Berlin,C=DE

CN=DigiCert SHA2 High Assurance Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=Native Instruments GmbH,O=Native Instruments GmbH,L=Berlin,C=DE

Serial Number

08:2d:6d:22:d7:f8:e3:5f:84:af:0e:8e:9e:75:d7:98

Issuer

CN=DigiCert SHA2 High Assurance Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 9, 2018 - Oct 3, 2021

Subject

CN=DigiCert SHA2 High Assurance Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0b:7e:10:90:3c:38:49:0f:fa:2f:67:9a:87:a1:a7:b9

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Oct 22, 2013 - Oct 22, 2028

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Serial Number

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 22, 2014 - Oct 22, 2024

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageServerAuth, ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning, ExtKeyUsageEmailProtection, ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Nov 10, 2006 - Nov 10, 2021

Minor OS version

Major OS version

Entry point

22318453

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\bamboo-build\RKT-MBN10-BUILDPC\build-reaktor-win32-Release\application\VST_synth\Reaktor 6.pdb

iphlpapi

if_indextoname GetIfTable GetAdaptersAddresses if_nametoindex

ws2_32

getnameinfo freeaddrinfo getaddrinfo WSAWaitForMultipleEvents WSAEnumNetworkEvents gethostname WSAIoctl WSAEventSelect WSACreateEvent WSACloseEvent WSAGetLastError socket setsockopt sendto send select recv ntohs listen inet_ntoa inet_addr htons htonl getsockopt getsockname getpeername ioctlsocket connect closesocket bind accept __WSAFDIsSet WSACleanup WSAStartup gethostbyname ntohl WSASetLastError recvfrom

winhttp

WinHttpGetDefaultProxyConfiguration WinHttpGetIEProxyConfigForCurrentUser WinHttpGetProxyForUrl WinHttpQueryHeaders WinHttpSetStatusCallback WinHttpWriteData WinHttpQueryAuthSchemes WinHttpSetCredentials WinHttpSendRequest WinHttpAddRequestHeaders WinHttpOpenRequest WinHttpSetTimeouts WinHttpSetOption WinHttpQueryOption WinHttpQueryDataAvailable WinHttpReceiveResponse WinHttpReadData WinHttpConnect WinHttpCloseHandle WinHttpOpen

crypt32

CryptUnprotectMemory

bcrypt

BCryptGenRandom BCryptDestroyHash BCryptFinishHash BCryptHashData BCryptOpenAlgorithmProvider BCryptGetProperty BCryptCloseAlgorithmProvider BCryptCreateHash

version

GetFileVersionInfoW GetFileVersionInfoSizeW VerQueryValueW VerQueryValueA

dbghelp

MiniDumpWriteDump

shlwapi

UrlUnescapeA PathIsDirectoryW UrlCreateFromPathW UrlCreateFromPathA UrlEscapeA PathCreateFromUrlW StrCmpLogicalW UrlIsA UrlIsW UrlUnescapeW

powrprof

GetPwrCapabilities CallNtPowerInformation

dxgi

CreateDXGIFactory

opengl32

glGetIntegerv wglDeleteContext wglCreateContext glGetError wglMakeCurrent

shell32

SHBrowseForFolderW ord74 SHGetMalloc ShellExecuteW SHGetPathFromIDListW SHFileOperationW SHGetFolderPathW SHGetKnownFolderPath DragQueryFileW ShellExecuteA SHAppBarMessage

kernel32

IsProcessorFeaturePresent SetUnhandledExceptionFilter UnhandledExceptionFilter InitializeSListHead InitOnceExecuteOnce ReadConsoleW ReadConsoleA SetConsoleMode GetConsoleMode TerminateProcess ConvertFiberToThread DeleteFiber GetEnvironmentVariableW OpenEventA CreateEventA GetUserDefaultLangID GetUserDefaultUILanguage GetACP GetTimeFormatW GetDateFormatW GetComputerNameW MoveFileExW MoveFileW CopyFileW FindResourceA SizeofResource LockResource GetCurrentThreadId GetStdHandle OutputDebugStringA Sleep GetCurrentProcessId GetDynamicTimeZoneInformation WriteConsoleA GetConsoleScreenBufferInfo SetConsoleTextAttribute GetSystemTimeAsFileTime InitializeCriticalSection EnterCriticalSection LeaveCriticalSection TryEnterCriticalSection DeleteCriticalSection GetTickCount64 FreeLibrary GetProcAddress LoadLibraryW MultiByteToWideChar WideCharToMultiByte VerSetConditionMask CloseHandle GetLastError SetLastError CreateIoCompletionPort GetQueuedCompletionStatus PostQueuedCompletionStatus InitializeCriticalSectionAndSpinCount SetEvent WaitForSingleObject SleepEx CreateMutexW CreateEventW SetWaitableTimer WaitForMultipleObjects QueueUserAPC TerminateThread TlsAlloc TlsGetValue TlsSetValue TlsFree LocalFree FormatMessageA FormatMessageW VerifyVersionInfoW CreateFileW GetFileType LoadLibraryA WriteConsoleW SetHandleInformation RaiseException QueryPerformanceCounter QueryPerformanceFrequency InitializeConditionVariable WakeAllConditionVariable SleepConditionVariableCS GetTickCount GetSystemTime SystemTimeToFileTime GetCurrentDirectoryW GlobalAlloc GlobalSize GlobalUnlock GlobalLock GlobalFree GetModuleFileNameW GetCurrentProcess IsWow64Process ResetEvent GetVolumeInformationW GetVolumeInformationA GlobalMemoryStatusEx GetSystemInfo GetSystemDirectoryW GetWindowsDirectoryW GetVersionExW GetUserDefaultLCID GetCurrentThread SetThreadPriority FlushFileBuffers MapViewOfFile CreateFileMappingW GetProcessHeap GetFileSize LockFileEx CreateFileMappingA UnlockFile HeapDestroy HeapCompact HeapAlloc HeapReAlloc DeleteFileW DeleteFileA GetVersionExA WaitForSingleObjectEx CreateFileA FlushViewOfFile OutputDebugStringW GetFileAttributesExW GetFileAttributesA GetDiskFreeSpaceA GetTempPathA HeapSize HeapValidate UnmapViewOfFile GetFileAttributesW GetTempPathW UnlockFileEx SetEndOfFile GetFullPathNameA SetFilePointer LockFile GetDiskFreeSpaceW WriteFile GetFullPathNameW HeapFree HeapCreate ReadFile AreFileApisANSI ExitProcess GetPhysicallyInstalledSystemMemory GetModuleHandleW GetModuleHandleA GetCurrentDirectoryA DuplicateHandle IsValidCodePage IsDBCSLeadByteEx CreateDirectoryW FindClose FindFirstFileW FindNextFileW GetDiskFreeSpaceExW GetDriveTypeW GetFileInformationByHandle GetLogicalDriveStringsW GetLongPathNameW RemoveDirectoryW SetFileAttributesW IsDebuggerPresent SetErrorMode DeviceIoControl ReleaseSemaphore ResumeThread GetWindowsDirectoryA VirtualAlloc VirtualProtect VirtualFree GetModuleHandleExW LoadResource

user32

GetWindowRect GetParent GetClassNameA GetFocus GetSystemMetrics SetWindowPos GetKeyState ToUnicode ScreenToClient SetWindowsHookExW UnhookWindowsHookEx CallNextHookEx SetTimer KillTimer CharUpperW CharLowerW TrackMouseEvent GetMessageW TranslateMessage DispatchMessageW SendMessageW PostMessageW DefWindowProcW PostQuitMessage CallWindowProcW RegisterClassW UnregisterClassW CreateWindowExW IsWindow DestroyWindow GetUserObjectInformationW GetProcessWindowStation MessageBeep MessageBoxW UnregisterDeviceNotification RegisterDeviceNotificationW RegisterRawInputDevices GetRawInputData GetAncestor EnumDisplayMonitors GetMonitorInfoW MonitorFromWindow SystemParametersInfoW LoadImageW LoadIconW LoadCursorW GetWindow EnumThreadWindows FindWindowW SetParent GetDesktopWindow SetWindowLongW GetWindowLongW FillRect GetSysColor ClientToScreen GetCursor GetCursorPos SetCursor SetCursorPos AdjustWindowRectEx GetClientRect GetWindowTextLengthW GetWindowTextW SetWindowTextW InvalidateRect EndPaint BeginPaint ReleaseDC GetDC SetForegroundWindow GetForegroundWindow UpdateWindow GetMenuItemInfoW InsertMenuItemW TrackPopupMenu DeleteMenu ModifyMenuW InsertMenuW GetMenuItemCount GetMenuItemID GetSubMenu EnableMenuItem CheckMenuItem DestroyMenu CreatePopupMenu GetSystemMenu DrawMenuBar GetMenuState SetMenu GetMenu ReleaseCapture SetCapture GetCapture MapVirtualKeyW GetAsyncKeyState SetFocus RegisterClipboardFormatA GetDialogBaseUnits GetDlgItem EndDialog DialogBoxIndirectParamW IsZoomed BringWindowToTop IsIconic IsWindowVisible SetWindowPlacement GetWindowPlacement UpdateLayeredWindow ShowWindow

gdi32

GetClipBox CreateCompatibleBitmap CreateCompatibleDC CreateSolidBrush SelectObject SetDIBitsToDevice StretchDIBits SetStretchBltMode CreateDIBSection GdiFlush ChoosePixelFormat SetPixelFormat DeleteDC DeleteObject

ole32

OleUninitialize RegisterDragDrop RevokeDragDrop OleInitialize CoTaskMemFree DoDragDrop CoCreateInstance OleGetClipboard ReleaseStgMedium CoUninitialize CoInitializeEx CoInitializeSecurity CoSetProxyBlanket StringFromGUID2 CoInitialize CoGetObject OleSetClipboard CoCreateGuid

oleaut32

SysAllocString SysFreeString VariantClear

comdlg32

ChooseColorW GetSaveFileNameW GetOpenFileNameW

advapi32

RegFlushKey InitializeSecurityDescriptor SetSecurityDescriptorDacl CryptAcquireContextA CryptGenRandom RegCloseKey RegOpenKeyExW RegQueryValueExW RegEnumKeyExA RegOpenKeyExA RegQueryValueExA OpenProcessToken GetTokenInformation RegCreateKeyExW RegEnumValueW ReportEventW RegisterEventSourceW DeregisterEventSource RegDeleteValueA RegDeleteKeyA RegCreateKeyExA RegSetValueExW RegSetValueExA

msvcp140

?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@XZ ?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ ?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ ?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEXABVlocale@2@@Z ?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEPAV12@PA_W_J@Z ?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEHXZ ?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEGXZ ?id@?$ctype@_W@std@@2V0locale@2@A ?__ExceptionPtrCompare@@YA_NPBX0@Z ?__ExceptionPtrCopyException@@YAXPAXPBX1@Z ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@G@Z ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@H@Z ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@I@Z ??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAH@Z ??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAI@Z ??4?$_Yarn@D@std@@QAEAAV01@PBD@Z ?_New_Locimp@_Locimp@locale@std@@CAPAV123@ABV123@@Z ?_Locimp_Addfac@_Locimp@locale@std@@CAXPAV123@PAVfacet@23@I@Z ?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ ??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ ??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z ?imbue@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAE?AVlocale@2@ABV32@@Z ?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAE_JPB_W_J@Z ?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEG_W@Z ?_Getcat@?$ctype@_W@std@@SAIPAPBVfacet@locale@2@PBV42@@Z ?widen@?$ctype@_W@std@@QBE_WD@Z ??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z ?narrow@?$ctype@D@std@@QBEDDD@Z ?widen@?$ctype@D@std@@QBEDD@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@PBX@Z ?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@V?$fpos@U_Mbstatet@@@2@@Z ?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PAD_J@Z ?tellp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@U_Mbstatet@@@2@XZ ?seekp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@_JH@Z ?seekp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@V?$fpos@U_Mbstatet@@@2@@Z ?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z ?tolower@?$ctype@D@std@@QBEPBDPADPBD@Z ?_Getcoll@_Locinfo@std@@QBE?AU_Collvec@@XZ _Strxfrm _Strcoll ?id@?$collate@D@std@@2V0locale@2@A ?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A ?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A ?id@?$codecvt@_WDU_Mbstatet@@@std@@2V0locale@2@A ?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JXZ ??1?$basic_istream@_WU?$char_traits@_W@std@@@std@@UAE@XZ ??0?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z ??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IAE@XZ ?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z ??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UAE@XZ ?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPB_W_J@Z ?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPA_W_J@Z ?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ ??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAE@XZ ??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@XZ ??1?$codecvt@_WDU_Mbstatet@@@std@@MAE@XZ ?_Getcat@?$codecvt@_WDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z ??0?$codecvt@_WDU_Mbstatet@@@std@@QAE@I@Z ?out@?$codecvt@_WDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PB_W1AAPB_WPAD3AAPAD@Z ?in@?$codecvt@_WDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPA_W3AAPA_W@Z ?_IsCurrentOriginSTA@_ContextCallback@details@Concurrency@@CA_NXZ ?_Assign@_ContextCallback@details@Concurrency@@AAEXPAX@Z ??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAI@Z ?_Winerror_message@std@@YAKKPADK@Z ?_Winerror_map@std@@YAHH@Z _Mtx_trylock ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_J@Z ?_Rethrow_future_exception@std@@YAXVexception_ptr@1@@Z ?_Throw_future_error@std@@YAXABVerror_code@1@@Z ?_LogWorkItemCompleted@_TaskEventLogger@details@Concurrency@@QAEXXZ ?_LogWorkItemStarted@_TaskEventLogger@details@Concurrency@@QAEXXZ ?_LogTaskExecutionCompleted@_TaskEventLogger@details@Concurrency@@QAEXXZ ?_LogTaskCompleted@_TaskEventLogger@details@Concurrency@@QAEXXZ ?_LogCancelTask@_TaskEventLogger@details@Concurrency@@QAEXXZ ?_LogScheduleTask@_TaskEventLogger@details@Concurrency@@QAEX_N@Z ??0task_continuation_context@Concurrency@@AAE@XZ ?ReportUnhandledError@_ExceptionHolder@details@Concurrency@@AAEXXZ ?_Capture@_ContextCallback@details@Concurrency@@AAEXXZ ?_Reset@_ContextCallback@details@Concurrency@@AAEXXZ ?_CallInContext@_ContextCallback@details@Concurrency@@QBEXV?$function@$$A6AXXZ@std@@_N@Z ?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ ?_ReportUnobservedException@details@Concurrency@@YAXXZ ?_Release_chore@details@Concurrency@@YAXPAU_Threadpool_chore@12@@Z ?_Schedule_chore@details@Concurrency@@YAHPAU_Threadpool_chore@12@@Z ?_XGetLastError@std@@YAXXZ _Cnd_unregister_at_thread_exit _Cnd_register_at_thread_exit _Cnd_broadcast _Thrd_detach ?__ExceptionPtrRethrow@@YAXPBX@Z ?__ExceptionPtrCurrentException@@YAXPAX@Z ?__ExceptionPtrToBool@@YA_NPBX@Z ?__ExceptionPtrAssign@@YAXPAXPBX@Z ?__ExceptionPtrCopy@@YAXPAXPBX@Z ?__ExceptionPtrDestroy@@YAXPAX@Z ?__ExceptionPtrCreate@@YAXPAX@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@G@Z ?_Throw_Cpp_error@std@@YAXH@Z _Cnd_do_broadcast_at_thread_exit _Cnd_signal _Cnd_timedwait _Cnd_wait _Cnd_destroy_in_situ _Cnd_init_in_situ _Cnd_destroy _Cnd_init _Mtx_current_owns _Mtx_destroy _Mtx_init _Thrd_join _Thrd_start ?_Random_device@std@@YAIXZ ?setprecision@std@@YA?AU?$_Smanip@_J@1@_J@Z ?_Fiopen@std@@YAPAU_iobuf@@PB_WHH@Z ?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@D@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z ??_D?$basic_istream@DU?$char_traits@D@std@@@std@@QAEXXZ ?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEHXZ ??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAN@Z ??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAH@Z ??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AA_N@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@N@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@K@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_N@Z ?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z ?imbue@?$basic_ios@DU?$char_traits@D@std@@@std@@QAE?AVlocale@2@ABV32@@Z ?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAPAD0PAH001@Z ?toupper@?$ctype@D@std@@QBEDD@Z ?id@?$numpunct@D@std@@2V0locale@2@A ?underflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ ?seekpos@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE?AV?$fpos@U_Mbstatet@@@2@V32@H@Z ?seekoff@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE?AV?$fpos@U_Mbstatet@@@2@_JHH@Z ?pbackfail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHH@Z ?_Incref@facet@locale@std@@UAEXXZ ?_Decref@facet@locale@std@@UAEPAV_Facet_base@3@XZ ??_D?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ ?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z ?pubsync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ ?pubimbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE?AVlocale@2@ABV32@@Z ?exceptions@ios_base@std@@QAEXH@Z ?_Syserror_map@std@@YAPBDH@Z ?_Execute_once@std@@YAHAAUonce_flag@1@P6GHPAX1PAPAX@Z1@Z ?classic@locale@std@@SAABV12@XZ ??1facet@locale@std@@MAE@XZ ??0facet@locale@std@@IAE@I@Z ?_Gettrue@_Locinfo@std@@QBEPBDXZ ?_Getfalse@_Locinfo@std@@QBEPBDXZ ??1_Locinfo@std@@QAE@XZ ??0_Locinfo@std@@QAE@PBD@Z ??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAM@Z ??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z ?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE_N_N@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@M@Z ?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ ?getloc@ios_base@std@@QBE?AVlocale@2@XZ ?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z _Thrd_id _Thrd_sleep _Query_perf_frequency _Query_perf_counter ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z ?uncaught_exception@std@@YA_NXZ ?id@?$ctype@D@std@@2V0locale@2@A ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z ?_Getcat@?$ctype@D@std@@SAIPAPBVfacet@locale@2@PBV42@@Z ?tolower@?$ctype@D@std@@QBEDD@Z ?_Init@locale@std@@CAPAV_Locimp@12@_N@Z ?_Throw_C_error@std@@YAXH@Z _Mtx_unlock _Mtx_lock _Mtx_destroy_in_situ _Mtx_init_in_situ _Thrd_yield ?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A ?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ ?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ ?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z ?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z ?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ ?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ _Xtime_get_ticks ?_Fiopen@std@@YAPAU_iobuf@@PBDHH@Z ?_Xbad_function_call@std@@YAXXZ ??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ ??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z ?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@U_Mbstatet@@@2@XZ ?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@_JH@Z ??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ ??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z ?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@PBD_J@Z ??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ ??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z ??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z ??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z ?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ ?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ ?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ ?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ ?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ ?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z ?unshift@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PAD1AAPAD@Z ?out@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z ?_Xbad_alloc@std@@YAXXZ ?_Xlength_error@std@@YAXPBD@Z ?_Getcvt@_Locinfo@std@@QBE?AU_Cvtvec@@XZ ??0_Lockit@std@@QAE@H@Z ??1_Lockit@std@@QAE@XZ ?_Xinvalid_argument@std@@YAXPBD@Z ?_Xout_of_range@std@@YAXPBD@Z ??Bid@locale@std@@QAEIXZ ?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ ?always_noconv@codecvt_base@std@@QBE_NXZ ?in@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z

concrt140

?_Release@_ReentrantBlockingLock@details@Concurrency@@QAEXXZ ??1_ReentrantBlockingLock@details@Concurrency@@QAE@XZ ?_Acquire@_ReentrantBlockingLock@details@Concurrency@@QAEXXZ ??0_ReentrantBlockingLock@details@Concurrency@@QAE@XZ

vcruntime140

_purecall __std_exception_copy _CxxThrowException __std_terminate memcpy memmove __CxxFrameHandler3 __std_exception_destroy memset __std_type_info_name memchr __std_type_info_compare __RTDynamicCast strrchr strstr _except_handler4_common strchr longjmp _setjmp3 __CxxLongjmpUnwind wcsstr __std_type_info_destroy_list

api-ms-win-crt-runtime-l1-1-0

raise strerror_s _initialize_narrow_environment _configure_narrow_argv _seh_filter_dll _invalid_parameter_noinfo_noreturn _invalid_parameter_noinfo abort _errno _register_onexit_function _control87 _clearfp _exit _endthreadex _initterm_e _initterm _cexit exit _get_errno strerror _beginthreadex signal _execute_onexit_table terminate fegetenv fesetenv _initialize_onexit_table _crt_atexit

api-ms-win-crt-heap-l1-1-0

realloc _aligned_free malloc _callnewh calloc free _aligned_malloc _msize

api-ms-win-crt-math-l1-1-0

roundf __libm_sse2_expf __libm_sse2_log10f ceil _CIpow floor _fdtest __libm_sse2_cos __libm_sse2_sin __libm_sse2_exp _CIfmod __libm_sse2_sinf __libm_sse2_acosf __libm_sse2_log __libm_sse2_atanf __libm_sse2_cosf __libm_sse2_atan __libm_sse2_pow _ldtest _dtest _ldsign _dsign lrint __libm_sse2_powf __libm_sse2_asin __libm_sse2_atan2 lroundf _dclass __libm_sse2_asinf _except1 __libm_sse2_logf __libm_sse2_log10 __libm_sse2_acos

api-ms-win-crt-convert-l1-1-0

_i64tow_s _ui64tow_s strtod strtol _strtod_l _i64toa_s _ui64toa_s _wtoi strtoll _wcstod_l strtof atoi strtoul

api-ms-win-crt-stdio-l1-1-0

_ftelli64 __stdio_common_vsprintf_s _setmode __stdio_common_vsnprintf_s ferror feof fopen fputs __stdio_common_vfprintf __stdio_common_vsprintf __stdio_common_vfscanf __stdio_common_vswprintf_s fseek _wfopen ungetc __stdio_common_vsnwprintf_s _fileno setvbuf fwrite _fseeki64 fsetpos fread __acrt_iob_func fputc fgetpos fgetc fflush fclose _get_stream_buffer_pointers _fsopen _fcloseall fgets _get_osfhandle __stdio_common_vsscanf ftell __stdio_common_vswprintf

api-ms-win-crt-filesystem-l1-1-0

_unlock_file _wfindfirst64 _stat64i32 _lock_file _wsplitpath remove _findclose

api-ms-win-crt-string-l1-1-0

_wcsicmp strnlen _isctype_l wcsnlen wcstok_s strcspn isalpha wcspbrk wcsncpy isprint strncmp _wcsnicmp _wcslwr _wcsupr isalnum isxdigit isspace toupper tolower isdigit ispunct iswspace _strnicmp _stricmp strspn strncpy isgraph strcmp

api-ms-win-crt-time-l1-1-0

_gmtime64_s _localtime64 _localtime64_s strftime _gmtime64 _time64 _mktime64 _ftime64

api-ms-win-crt-locale-l1-1-0

__pctype_func _create_locale localeconv _free_locale

api-ms-win-crt-environment-l1-1-0

getenv _wgetenv

api-ms-win-crt-utility-l1-1-0

rand srand qsort div bsearch

Name

.text

Size

22.1MB

Virtual Size

22.1MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

IPPCODE

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

21.0MB

Virtual Size

21.0MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3.6MB

Virtual Size

3.9MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

_RDATA

Size

39KB

Virtual Size

39KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1.0MB

Virtual Size

1.0MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1.1MB

Virtual Size

1.1MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

generic

count=22, id=147, productName=VS2008 SP1 build 30729, version=30729,

count=5, id=199, version=41118,

count=10, id=260, version=26706,

count=36, id=259, version=26706,

count=6, id=257, version=26706,

count=5, id=260, version=26213,

count=489, id=260, productName=VS2017 v15.9.7 build 27027, version=27027,

count=35, id=261, version=26706,

count=2, id=259, productName=VS2015 [14.0] build 23026, version=23026,

count=284, id=261, productName=VS2015 [14.0] build 23026, version=23026,

count=7, id=205, version=50522,

count=154, productName=Unmarked objects (old),

count=1, id=260, productName=VS2015 UPD3 build 24213, version=24213,

count=29, id=261, productName=VS2015 UPD3 build 24213, version=24213,

count=63, id=260, productName=VS2015 [14.0] build 23026, version=23026,

count=23, id=260, productName=VS2015 Update 3 [14.0] build 24210, version=24210,

count=3, id=262, version=26213,

count=41, id=257, version=26213,

count=1058, id=1, productName=Unmarked objects,

count=24, id=261, productName=VS2015 UPD1 build 23506, version=23506,

count=3, id=260, productName=VS2015 UPD1 build 23506, version=23506,

count=73, id=260, version=27032,

count=229, id=261, version=27032,

count=1, id=256, version=27032,

count=1, id=255, version=27032,

count=1, id=258, version=27032,