Static | ZeroBOX

PE Compile Time

2024-08-18 16:13:28

PE Imphash

f0ba1e2fafb46228d56b5d07719ed13d

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00001000 0x0005255a 0x00052600 6.56958781034
.rdata 0x00054000 0x0001189a 0x00011a00 5.0109059054
.data 0x00066000 0x0000667c 0x00003400 3.76061482711
.rsrc 0x0006d000 0x000001e0 0x00000200 4.71767883295
.reloc 0x0006e000 0x00004e90 0x00005000 6.58185209118

Resources

Name Offset Size Language Sub-language File type
RT_MANIFEST 0x0006d060 0x0000017d LANG_ENGLISH SUBLANG_ENGLISH_US XML 1.0 document text

Imports

Library KERNEL32.dll:
0x45404c CreateThread
0x454050 GetLocalTime
0x454054 GetThreadContext
0x454058 GetProcAddress
0x45405c VirtualAllocEx
0x454060 RemoveDirectoryA
0x454064 ReadProcessMemory
0x454068 GetSystemInfo
0x45406c CreateDirectoryA
0x454070 SetThreadContext
0x454074 SetEndOfFile
0x454078 DecodePointer
0x45407c ReadConsoleW
0x454080 HeapReAlloc
0x454084 HeapSize
0x454088 CloseHandle
0x45408c CreateFileA
0x454090 GetFileAttributesA
0x454094 GetLastError
0x454098 Sleep
0x45409c GetTempPathA
0x4540a4 GetModuleHandleA
0x4540a8 ResumeThread
0x4540ac GetComputerNameExW
0x4540b0 GetVersionExW
0x4540b4 CreateMutexA
0x4540b8 VirtualAlloc
0x4540bc WriteFile
0x4540c0 VirtualFree
0x4540c4 WriteProcessMemory
0x4540c8 GetModuleFileNameA
0x4540cc CreateProcessA
0x4540d0 ReadFile
0x4540d8 GetConsoleMode
0x4540dc GetConsoleCP
0x4540e0 FlushFileBuffers
0x4540e4 GetStringTypeW
0x4540e8 GetProcessHeap
0x4540f8 GetCPInfo
0x4540fc GetOEMCP
0x454100 GetACP
0x454104 IsValidCodePage
0x454108 FindNextFileW
0x45410c FindFirstFileExW
0x454110 FindClose
0x454114 SetFilePointerEx
0x454118 SetStdHandle
0x45411c GetFullPathNameW
0x454124 DeleteFileW
0x454128 LCMapStringW
0x45412c CompareStringW
0x454130 MultiByteToWideChar
0x454134 HeapAlloc
0x454138 HeapFree
0x45413c GetCommandLineW
0x454140 GetCommandLineA
0x454144 GetStdHandle
0x454150 PeekNamedPipe
0x454154 GetFileType
0x45415c GetDriveTypeW
0x454160 RaiseException
0x454164 GetCurrentThreadId
0x45416c QueueUserWorkItem
0x454170 GetModuleHandleExW
0x454174 FormatMessageW
0x454178 WideCharToMultiByte
0x45418c SetLastError
0x454194 CreateEventW
0x454198 SwitchToThread
0x45419c TlsAlloc
0x4541a0 TlsGetValue
0x4541a4 TlsSetValue
0x4541a8 TlsFree
0x4541b0 GetTickCount
0x4541b4 GetModuleHandleW
0x4541c0 SetEvent
0x4541c4 ResetEvent
0x4541d0 GetCurrentProcess
0x4541d4 TerminateProcess
0x4541d8 IsDebuggerPresent
0x4541dc GetStartupInfoW
0x4541e0 GetCurrentProcessId
0x4541e4 InitializeSListHead
0x4541e8 CreateTimerQueue
0x4541ec SignalObjectAndWait
0x4541f0 SetThreadPriority
0x4541f4 GetThreadPriority
0x454218 UnregisterWait
0x45421c EncodePointer
0x454220 GetCurrentThread
0x454224 GetThreadTimes
0x454228 FreeLibrary
0x454230 GetModuleFileNameW
0x454234 LoadLibraryExW
0x454238 VirtualProtect
0x45423c DuplicateHandle
0x454240 ReleaseSemaphore
0x454250 QueryDepthSList
0x454254 UnregisterWaitEx
0x454258 LoadLibraryW
0x45425c RtlUnwind
0x454260 ExitProcess
0x454264 CreateFileW
0x454268 WriteConsoleW
Library USER32.dll:
0x454284 GetSystemMetrics
0x454288 ReleaseDC
0x45428c GetDC
Library GDI32.dll:
0x454038 SelectObject
0x45403c CreateCompatibleDC
0x454040 DeleteObject
0x454044 BitBlt
Library ADVAPI32.dll:
0x454000 RegCloseKey
0x454004 RegQueryInfoKeyW
0x454008 RegGetValueA
0x45400c RegQueryValueExA
0x454014 GetSidSubAuthority
0x454018 GetUserNameA
0x45401c LookupAccountNameA
0x454020 RegSetValueExA
0x454024 RegOpenKeyExA
0x454028 RegEnumValueA
Library SHELL32.dll:
0x454270 SHGetFolderPathA
0x454274 ShellExecuteA
0x454278 None
0x45427c SHFileOperationA
Library ole32.dll:
0x454314 CoUninitialize
0x454318 CoCreateInstance
0x45431c CoInitialize
Library WININET.dll:
0x454294 HttpOpenRequestA
0x454298 InternetWriteFile
0x45429c InternetOpenUrlA
0x4542a0 InternetOpenW
0x4542a4 HttpEndRequestW
0x4542ac HttpSendRequestExA
0x4542b0 InternetOpenA
0x4542b4 InternetCloseHandle
0x4542b8 HttpSendRequestA
0x4542bc InternetConnectA
0x4542c0 InternetReadFile
Library gdiplus.dll:
0x4542f8 GdipDisposeImage
0x4542fc GdiplusStartup
0x454300 GdiplusShutdown
0x454308 GdipSaveImageToFile
Library WS2_32.dll:
0x4542c8 closesocket
0x4542cc inet_pton
0x4542d0 getaddrinfo
0x4542d4 WSAStartup
0x4542d8 send
0x4542dc socket
0x4542e0 connect
0x4542e4 recv
0x4542e8 htons
0x4542ec freeaddrinfo

!This program cannot be run in DOS mode.
`.rdata
@.data
@.reloc
u78Gdt
CM @PRj
D$$PhX
uhh02E
CM8QPQ
CMPQPQ
uN9Fpt
u<9Fpt
SVh|.B
SVWh(XE
t)h6>B
Wj4XPV
A(;A,v
O,9O(vV
+A Vj$
+AHVj(
FT9~Xt0
;{dv(2
@(;A(s
+A$tU3
G(9_Lu8
/SPPWhx
FYY;w(|
FY;w(|
9V(~?j
V<;V8}
YYF;w,|
G@WVPR
Q;FD~Z
4Q;FD~Z
C8;sx|
tWVWj>
9V(~?j
V<;V8}
tB;wPt
a;w0tV
:;w0tBj
);{0t3
FP;FL~
Q;FD~R
t]VWj>
}:;2|6
9pdt>V
Sk{$4kK(4
kG$4kW(4
BHkW($
t`hT]E
Q;FD~R
t]VWj>
FY;w(|
9V(~?j
V<;V8}
O`j@SV
FY;w(|
Q;FD~R
FYY;w(|
9V(~>j
V<;V8}
9V(~Bj
V<;V8}
Q;FD~R
|)huBC
F,H_[u
tO9xp~J
u28C`t
QQSVWd
t/h0dE
YYhL?F
URPQQhP
;t$,v-
UQPXY]Y[
SVWj03
WWWSHSh
WPWWWS
tGh oE
t3h,oE
t"h8oE
:u"f9z
F4_^[]
<ItC<Lt3<Tt#<h
A<lt'<tt
<at.<rt!<wt
<=upG8
[ShlrE
[ShtrE
[Sh|rE
QQSVj8j@
Wj0XPV
SPjdVQ
j(hHCF
zSSSSj
f9:t!V
tl=`gF
u kE$<
PPPPPPPP
PPPPPWS
PP9E u:PPVWP
D8(Ht'
bad exception
bad allocation
system
unknown error
bad function call
device or resource busy
invalid argument
no such process
not enough memory
operation not permitted
resource deadlock would occur
resource unavailable try again
address family not supported
address in use
address not available
already connected
argument list too long
argument out of domain
bad address
bad file descriptor
bad message
broken pipe
connection aborted
connection already in progress
connection refused
connection reset
cross device link
destination address required
directory not empty
executable format error
file exists
file too large
filename too long
function not supported
host unreachable
identifier removed
illegal byte sequence
inappropriate io control operation
interrupted
invalid seek
io error
is a directory
message size
network down
network reset
network unreachable
no buffer space
no child process
no link
no lock available
no message available
no message
no protocol option
no space on device
no stream resources
no such device or address
no such device
no such file or directory
not a directory
not a socket
not a stream
not connected
not supported
operation canceled
operation in progress
operation not supported
operation would block
owner dead
permission denied
protocol error
protocol not supported
read only file system
result out of range
state not recoverable
stream timeout
text file busy
timed out
too many files open in system
too many files open
too many links
too many symbolic link levels
value too large
wrong protocol type
FlsAlloc
FlsFree
FlsGetValue
FlsSetValue
InitializeCriticalSectionEx
InitOnceExecuteOnce
CreateEventExW
CreateSemaphoreW
CreateSemaphoreExW
CreateThreadpoolTimer
SetThreadpoolTimer
WaitForThreadpoolTimerCallbacks
CloseThreadpoolTimer
CreateThreadpoolWait
SetThreadpoolWait
CloseThreadpoolWait
FlushProcessWriteBuffers
FreeLibraryWhenCallbackReturns
GetCurrentProcessorNumber
CreateSymbolicLinkW
GetCurrentPackageId
GetTickCount64
GetFileInformationByHandleEx
SetFileInformationByHandle
GetSystemTimePreciseAsFileTime
InitializeConditionVariable
WakeConditionVariable
WakeAllConditionVariable
SleepConditionVariableCS
InitializeSRWLock
AcquireSRWLockExclusive
TryAcquireSRWLockExclusive
ReleaseSRWLockExclusive
SleepConditionVariableSRW
CreateThreadpoolWork
SubmitThreadpoolWork
CloseThreadpoolWork
CompareStringEx
GetLocaleInfoEx
LCMapStringEx
pEvents
Lock already taken
SetThreadGroupAffinity
GetThreadGroupAffinity
GetCurrentProcessorNumberEx
GetLogicalProcessorInformationEx
pScheduler
version
eventObject
ppVirtualProcessorRoots
SchedulerKind
MaxConcurrency
MinConcurrency
TargetOversubscriptionFactor
LocalContextCacheSize
ContextStackSize
ContextPriority
SchedulingProtocol
DynamicProgressFeedback
WinRTInitialization
MaxPolicyElementKey
Mbp?333333
pContext
pExecutionResource
RoInitialize
RoUninitialize
RegisterTraceGuidsW
UnregisterTraceGuids
TraceEvent
GetTraceLoggerHandle
GetTraceEnableLevel
GetTraceEnableFlags
pThreadProxy
switchState
Access violation - no RTTI data!
Bad dynamic_cast!
__based(
__cdecl
__pascal
__stdcall
__thiscall
__fastcall
__vectorcall
__clrcall
__eabi
__swift_1
__swift_2
__ptr64
__restrict
__unaligned
restrict(
delete
operator
`vftable'
`vbtable'
`vcall'
`typeof'
`local static guard'
`string'
`vbase destructor'
`vector deleting destructor'
`default constructor closure'
`scalar deleting destructor'
`vector constructor iterator'
`vector destructor iterator'
`vector vbase constructor iterator'
`virtual displacement map'
`eh vector constructor iterator'
`eh vector destructor iterator'
`eh vector vbase constructor iterator'
`copy constructor closure'
`udt returning'
`local vftable'
`local vftable constructor closure'
new[]
delete[]
`omni callsig'
`placement delete closure'
`placement delete[] closure'
`managed vector constructor iterator'
`managed vector destructor iterator'
`eh vector copy constructor iterator'
`eh vector vbase copy constructor iterator'
`dynamic initializer for '
`dynamic atexit destructor for '
`vector copy constructor iterator'
`vector vbase copy constructor iterator'
`managed vector copy constructor iterator'
`local static thread guard'
operator ""
operator co_await
operator<=>
Type Descriptor'
Base Class Descriptor at (
Base Class Array'
Class Hierarchy Descriptor'
Complete Object Locator'
`anonymous namespace'
CorExitProcess
`h````
xpxxxx
(null)
UTF-16LEUNICODE
AreFileApisANSI
LocaleNameToLCID
AppPolicyGetProcessTerminationMethod
Sunday
Monday
Tuesday
Wednesday
Thursday
Friday
Saturday
January
February
August
September
October
November
December
MM/dd/yy
dddd, MMMM dd, yyyy
HH:mm:ss
NAN(SNAN)
nan(snan)
NAN(IND)
nan(ind)
 !"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~
[aOni*{
~ $s%r
@b;zO]
v2!L.2
;1#INF
1#QNAN
1#SNAN
<8bunz8
l,kg<i
<@En[vP
_hypot
_nextafter
?5Wg4p
%S#[k=
"B <1=
Unknown exception
bad array new length
generic
Fail to schedule the chore!
This function cannot be called on a default constructed task
broken promise
future already retrieved
promise already satisfied
no state
future
invalid stoi argument
stoi argument out of range
b067ece422ccad1719e80d37e2b91ad1
8cadd6e0860cae4ed27301bc73d6a816
dc95fc
8f16fc30c8c4843c18303cac3062cfff
ZLWr2Y5o4UPBLpDr2O==
MPMhfVhkMyWxaZVgPVkr2J s
OrZWQS==
VnVhfJYm
KHWohS==
MHQohS==
NsTv2BpeDKezNj==
Tvoeg5ReCdX6ZT==
VP4CZHhuLbXeTZbf3kcw15RW1wen2mUleSI9U5Zr4dXwdIPh3lRm15X9YeWsJ28 0F==
VP4CZHhuLbXeTZbf3kcw15RW1wen2mUleSI9U5Zr4dXwdIPh3lRm15X9VOiu2Gbo0ME9ZZRe4 DVaJLo2AFD15pg3OKx
VSMdgpVU4r==
ZRWgMEcwzwLPRHbOyAcwA6wc
VP4CZHhuLbXeTZbf3kcw15RW1wen2mUleSI9U5Zr4dXwdIPh3lRm15X9YeWs
dcQq3IBlDqKi
VwEr35Na3OO=
VP4CZHhuLbXeTZbf3kcw15RW1wen2mUleSI9U5Zr4dXwdIPh3lRm15X9VOiu2Gbo0ME9Y4le3xyiRpZoPEZv2z==
KKQPVXNJLbaISXnBzO==
YtAsgC==
Vt4PZC==
ZSEh3E9d3xz Y5nl3A9h1Jp4
ZSEh3E9d3xy=
ZRslgE9d3xy=
ULAlfi==
bwMWgFsoCn==
bwMWgJQZCp =
MSAXeYZT
MQwohYhi3eOx
KcQqeZU2
dRchfIAsD 7mbJm=
bRQufoZlDqKwZJno
SRQWXoJT2O1nU6bv4EZqHZXifn==
VwEr35Na3LTjdJv9
RKUxY3U LTaodK4d3kY=
RMUlgoI=
TRAvgIZr4Tv7IHndOe==
SKIBZC==
VvAq3II LTXld0zl4Fo=
Sv4fhIcrzwfnYj==
NoTsZIcTPNzVZZDX3kpX4T==
RbgW3IZfQN7mZ0y=
Ub4uhIcn
VR4seIcs
RR4pf4Vo
WRgqVIZfQN7mZ0y=
NszuQBUUEae6OT==
RR4qhIZn5t3We0rhEgFq3ZpWeOCf3nTl0b4ufU5dPOTjOBre21ZrOJxuiK1rBS3j
MHVpPU4m
EFkzf49TQN72LXHl31Fs25dWeN sEiEccSEpPYVa5xG9IJVd2UY6xpJdhxFgEyEcbLshfoJmQK2k
J6VGU4cn5xXwdFRQ5VFiDltdgyCq1WQ8evgrfkcoPUTndFRv4FNiNZSJG81I
EFjpPU4mCJ2=
MHVJGi==
QSIfgl4q
Mbks3y==
RR4qhIZn5t3We0rhEgFe2KtoeNOf4Golc840PZhW5p3ob6zpBVZv1JNq2T iPWT=
VQgPZGZGOvP3cqzh2lVA15XWgd qK2YQYtIrfpVr3TzeQ5Zp3FZXO0BK2N2jNEQlcMwXhIZrKdHvZT==
RR4pgJZTQOLQYZRh
ZLEf3IZfQTjrapjo2U9s2KxugUSZ4ngUfMjsQVMsEuW4NC71BTb=
MMQqeYRoQxWv
VQgPZGZGOvP3cqzh2lVA15XWgd qK2YQYtIrfpVr3TzeVZVl4EZhKpdg3N aG0bEWuELXHBPJLTHT4m=
VQgPZGZGOvPxbqHu20BQO0IsQuGaK2Yoebgf3ZR6HdHBaZDA1VRt1Jx11w0nPGYl
Wbgg3YcCIr==
YsvsQFE=
SvQi2ZZl5wPndKHl2khwAo O3OOt2HYQbL4q
SvQi2ZZl5wPndKHl2khwAodO3OOt2HYQbL4q
VP4CZHhuLbXeTZbf3kcw15RW1wen2mUleSHcXnV6HUXAcpLq4D3i2qFlfT5=
VwEr3JZc5v7jbZK=
N9vtSS==
N9vuQi==
N9vtRi==
RSQugoZn5vL3aZng
dcQq3IBlDqKwZ08h
JcMdg4xk2NzuIFZiyAcm1Vse
J8viNkFT2N3nb6LWyBIdylQc3xWqyA==
K8TcVZli5tK=
J8viNkFrQN6i
JrTiMC==
Vv4Z3ZNs2xXubFVh5EY=
MLQ03YRU5xnxbqrr2Epg4Vtu3N2t4GYpbL9q3YU CL1rbJKcye==
dRcXhIVo5T6iL0CcBVUdBD==
dSL5gy==
dbAq3Icm
ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/
abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789
Keyboard Layout\Preload
00000419
00000422
00000423
0000043f
NtUnmapViewOfSection
ntdll.dll
invalid string position
list too long
vector too long
string too long
?456789:;<=
 !"#$%&'()*+,-./0123
0123456789ABCDEF
.text$di
.text$mn
.text$x
.text$yd
.idata$5
.00cfg
.CRT$XCA
.CRT$XCAA
.CRT$XCC
.CRT$XCU
.CRT$XCZ
.CRT$XIA
.CRT$XIAA
.CRT$XIAC
.CRT$XIC
.CRT$XIZ
.CRT$XLA
.CRT$XLZ
.CRT$XPA
.CRT$XPB
.CRT$XPX
.CRT$XPXA
.CRT$XPZ
.CRT$XTA
.CRT$XTZ
.rdata
.rdata$T
.rdata$r
.rdata$sxdata
.rdata$zzzdbg
.rtc$IAA
.rtc$IZZ
.rtc$TAA
.rtc$TZZ
.tls$ZZZ
.xdata$x
.idata$2
.idata$3
.idata$4
.idata$6
.data$r
.rsrc$01
.rsrc$02
ReadFile
GetModuleFileNameA
WriteProcessMemory
VirtualFree
WriteFile
VirtualAlloc
CreateMutexA
GetVersionExW
GetComputerNameExW
ResumeThread
GetModuleHandleA
SetCurrentDirectoryA
GetTempPathA
GetLastError
GetFileAttributesA
CreateFileA
CloseHandle
GetSystemInfo
CreateThread
GetLocalTime
GetThreadContext
GetProcAddress
VirtualAllocEx
RemoveDirectoryA
ReadProcessMemory
CreateProcessA
CreateDirectoryA
SetThreadContext
KERNEL32.dll
ReleaseDC
GetSystemMetrics
USER32.dll
DeleteObject
CreateCompatibleDC
SelectObject
CreateCompatibleBitmap
BitBlt
GDI32.dll
GetSidIdentifierAuthority
RegEnumValueA
RegOpenKeyExA
RegSetValueExA
LookupAccountNameA
GetUserNameA
GetSidSubAuthority
GetSidSubAuthorityCount
RegQueryValueExA
RegGetValueA
RegQueryInfoKeyW
RegCloseKey
ADVAPI32.dll
ShellExecuteA
SHGetFolderPathA
SHFileOperationA
SHELL32.dll
CoInitialize
CoUninitialize
CoCreateInstance
ole32.dll
HttpOpenRequestA
InternetWriteFile
InternetOpenUrlA
InternetOpenW
HttpEndRequestW
HttpAddRequestHeadersA
HttpSendRequestExA
InternetOpenA
InternetCloseHandle
HttpSendRequestA
InternetConnectA
InternetReadFile
WININET.dll
GdipSaveImageToFile
GdipGetImageEncodersSize
GdipDisposeImage
GdipCreateBitmapFromHBITMAP
GdipGetImageEncoders
GdiplusShutdown
GdiplusStartup
gdiplus.dll
freeaddrinfo
getaddrinfo
inet_pton
WS2_32.dll
RaiseException
GetCurrentThreadId
IsProcessorFeaturePresent
QueueUserWorkItem
GetModuleHandleExW
FormatMessageW
WideCharToMultiByte
EnterCriticalSection
LeaveCriticalSection
TryEnterCriticalSection
DeleteCriticalSection
SetLastError
InitializeCriticalSectionAndSpinCount
CreateEventW
SwitchToThread
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
GetTickCount
GetModuleHandleW
WaitForSingleObjectEx
QueryPerformanceCounter
SetEvent
ResetEvent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsDebuggerPresent
GetStartupInfoW
GetCurrentProcessId
InitializeSListHead
CreateTimerQueue
SignalObjectAndWait
SetThreadPriority
GetThreadPriority
GetLogicalProcessorInformation
CreateTimerQueueTimer
ChangeTimerQueueTimer
DeleteTimerQueueTimer
GetNumaHighestNodeNumber
GetProcessAffinityMask
SetThreadAffinityMask
RegisterWaitForSingleObject
UnregisterWait
EncodePointer
GetCurrentThread
GetThreadTimes
FreeLibrary
FreeLibraryAndExitThread
GetModuleFileNameW
LoadLibraryExW
VirtualProtect
DuplicateHandle
ReleaseSemaphore
InterlockedPopEntrySList
InterlockedPushEntrySList
InterlockedFlushSList
QueryDepthSList
UnregisterWaitEx
LoadLibraryW
RtlUnwind
ExitProcess
CreateFileW
GetDriveTypeW
GetFileInformationByHandle
GetFileType
PeekNamedPipe
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
GetStdHandle
GetCommandLineA
GetCommandLineW
HeapFree
HeapAlloc
MultiByteToWideChar
CompareStringW
LCMapStringW
DeleteFileW
GetCurrentDirectoryW
GetFullPathNameW
SetStdHandle
SetFilePointerEx
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetProcessHeap
GetStringTypeW
FlushFileBuffers
GetConsoleCP
GetConsoleMode
GetTimeZoneInformation
HeapSize
HeapReAlloc
ReadConsoleW
DecodePointer
SetEndOfFile
WriteConsoleW
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
.?AVbad_exception@std@@
.?AV_ExceptionPtr_normal@?A0x03848f66@@
.?AV?$_ExceptionPtr_static@Vbad_alloc@std@@@?A0x03848f66@@
.?AV?$_ExceptionPtr_static@Vbad_exception@std@@@?A0x03848f66@@
.?AVstl_condition_variable_interface@details@Concurrency@@
.?AVstl_condition_variable_vista@details@Concurrency@@
.?AVstl_condition_variable_win7@details@Concurrency@@
.?AVstl_condition_variable_concrt@details@Concurrency@@
.?AVfuture_error@std@@
.?AVlogic_error@std@@
.?AV_System_error_category@std@@
.?AVinvalid_argument@std@@
.?AVlength_error@std@@
.?AVout_of_range@std@@
.?AVbad_function_call@std@@
.?AVstl_critical_section_interface@details@Concurrency@@
.?AVstl_critical_section_vista@details@Concurrency@@
.?AVstl_critical_section_win7@details@Concurrency@@
.?AVstl_critical_section_concrt@details@Concurrency@@
.?AVtype_info@@
.?AVWaitBlock@details@Concurrency@@
.?AVSingleWaitBlock@details@Concurrency@@
.?AVMultiWaitBlock@details@Concurrency@@
.?AVWaitAllBlock@details@Concurrency@@
.?AVWaitAnyBlock@details@Concurrency@@
.?AVTimedSingleWaitBlock@details@Concurrency@@
.?AV?$_MallocaArrayHolder@PAVContext@Concurrency@@@details@Concurrency@@
.?AVimproper_lock@Concurrency@@
.?AVscheduler_resource_allocation_error@Concurrency@@
.?AUITopologyExecutionResource@Concurrency@@
.?AUITopologyNode@Concurrency@@
.?AUTopologyObject@GlobalCore@details@Concurrency@@
.?AUTopologyObject@GlobalNode@details@Concurrency@@
.?AVunsupported_os@Concurrency@@
.?AVResourceManager@details@Concurrency@@
.?AUIResourceManager@Concurrency@@
.?AVScheduleGroupBase@details@Concurrency@@
.?AVScheduleGroup@Concurrency@@
.?AVCacheLocalScheduleGroup@details@Concurrency@@
.?AVFairScheduleGroup@details@Concurrency@@
.?AU_Chore@details@Concurrency@@
.?AVScheduler@Concurrency@@
.?AVRealizedChore@details@Concurrency@@
.?AVCacheLocalScheduleGroupSegment@details@Concurrency@@
.?AVScheduleGroupSegmentBase@details@Concurrency@@
.?AVFairScheduleGroupSegment@details@Concurrency@@
.?AVscheduler_worker_creation_error@Concurrency@@
.?AVimproper_scheduler_reference@Concurrency@@
.?AVimproper_scheduler_attach@Concurrency@@
.?AVSchedulerBase@details@Concurrency@@
.?AVcontext_unblock_unbalanced@Concurrency@@
.?AVcontext_self_unblock@Concurrency@@
.?AVmissing_wait@Concurrency@@
.?AVinvalid_scheduler_policy_key@Concurrency@@
.?AVinvalid_scheduler_policy_value@Concurrency@@
.?AVinvalid_scheduler_policy_thread_specification@Concurrency@@
.?AVnested_scheduler_missing_detach@Concurrency@@
.?AVinvalid_oversubscribe_operation@Concurrency@@
.?AVContext@Concurrency@@
.?AVContextBase@details@Concurrency@@
.?AVCancellationTokenRegistration_TaskProc@details@Concurrency@@
.?AV?$_MallocaArrayHolder@PAVevent@Concurrency@@@details@Concurrency@@
.?AVExecutionResource@details@Concurrency@@
.?AUIExecutionResource@Concurrency@@
.?AVSchedulerProxy@details@Concurrency@@
.?AUISchedulerProxy@Concurrency@@
.?AVFreeThreadProxy@details@Concurrency@@
.?AVThreadProxy@details@Concurrency@@
.?AUIThreadProxy@Concurrency@@
.?AUIThreadProxyFactory@details@Concurrency@@
.?AVFreeThreadProxyFactory@details@Concurrency@@
.?AV?$ThreadProxyFactory@VFreeThreadProxy@details@Concurrency@@@details@Concurrency@@
.?AVVirtualProcessor@details@Concurrency@@
.?AVInternalContextBase@details@Concurrency@@
.?AUIExecutionContext@Concurrency@@
.?AVExternalContextBase@details@Concurrency@@
.?AVThreadInternalContext@details@Concurrency@@
.?AVThreadScheduler@details@Concurrency@@
.?AUIScheduler@Concurrency@@
.?AVVirtualProcessorRoot@details@Concurrency@@
.?AUIVirtualProcessorRoot@Concurrency@@
.?AVFreeVirtualProcessorRoot@details@Concurrency@@
.?AVThreadVirtualProcessor@details@Concurrency@@
.?AV__non_rtti_object@std@@
.?AVbad_typeid@std@@
.?AVbad_cast@std@@
.?AVruntime_error@std@@
.?AV?$_Func_impl_no_alloc@V<lambda_5e5ab22ea98f4361dbf159481d01f54d>@@X$$V@std@@
.?AVbad_alloc@std@@
.?AV?$_Ref_count_obj2@U_ExceptionHolder@details@Concurrency@@@std@@
.?AU?$_InitialTaskHandle@XV<lambda_9de88c4009318ef1202283857f94e673>@@U_TypeSelectorNoAsync@details@Concurrency@@@?$task@E@Concurrency@@
.?AV?$_Func_impl_no_alloc@V<lambda_0456396a71e3abd88ede77bdd2823d8e>@@X$$V@std@@
.?AV?$_Func_impl_no_alloc@V<lambda_9de88c4009318ef1202283857f94e673>@@X$$V@std@@
.?AVerror_category@std@@
.?AV?$_Associated_state@H@std@@
.?AV<lambda_7c33b2c4310ad8c6be497d7a2a561bb8>@@
.?AVsystem_error@std@@
.?AV?$_CancellationTokenCallback@V<lambda_3b8ab8d2629adf61a42ee3fe177a046b>@@@details@Concurrency@@
.?AV?$_Func_impl_no_alloc@V<lambda_eb87dfd73f857f44e1a351ea42ce2b34>@@E$$V@std@@
.?AV_Generic_error_category@std@@
.?AV?$_Func_impl_no_alloc@V?$_Fake_no_copy_callable_adapter@A6GXPAUConnexionDetails@@@ZAAPAU1@@std@@X$$V@std@@
.?AVtask_canceled@Concurrency@@
.?AV_DefaultPPLTaskScheduler@details@Concurrency@@
.?AV<lambda_0456396a71e3abd88ede77bdd2823d8e>@@
.?AV<lambda_5e5ab22ea98f4361dbf159481d01f54d>@@
.?AV?$_Func_impl_no_alloc@V<lambda_7c33b2c4310ad8c6be497d7a2a561bb8>@@X$$V@std@@
.?AU?$_Task_impl@E@details@Concurrency@@
.?AV?$_Func_base@X$$V@std@@
.?AV_Future_error_category@std@@
.?AV<lambda_9de88c4009318ef1202283857f94e673>@@
.?AV?$_Task_async_state@X@std@@
.?AU?$_PPLTaskHandle@EU?$_InitialTaskHandle@XV<lambda_9de88c4009318ef1202283857f94e673>@@U_TypeSelectorNoAsync@details@Concurrency@@@?$task@E@Concurrency@@U_TaskProcHandle@details@3@@details@Concurrency@@
.?AV_RefCounter@details@Concurrency@@
.?AV_Ref_count_base@std@@
.?AV?$_Ref_count_obj2@U?$_Task_impl@E@details@Concurrency@@@std@@
.?AV_Interruption_exception@details@Concurrency@@
.?AV?$_Func_base@E$$V@std@@
.?AV_System_error@std@@
.?AU_TaskProcHandle@details@Concurrency@@
.?AUscheduler_interface@Concurrency@@
.?AV?$_Packaged_state@$$A6AXXZ@std@@
.?AVinvalid_operation@Concurrency@@
.?AV?$_Fake_no_copy_callable_adapter@A6GXPAUConnexionDetails@@@ZAAPAU1@@std@@
.?AVexception@std@@
.?AV<lambda_eb87dfd73f857f44e1a351ea42ce2b34>@@
.?AV_CancellationTokenRegistration@details@Concurrency@@
.?AVbad_array_new_length@std@@
.?AU_Task_impl_base@details@Concurrency@@
<?xml version='1.0' encoding='UTF-8' standalone='yes'?>
<assembly xmlns='urn:schemas-microsoft-com:asm.v1' manifestVersion='1.0'>
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v3">
<security>
<requestedPrivileges>
<requestedExecutionLevel level='asInvoker' uiAccess='false' />
</requestedPrivileges>
</security>
</trustInfo>
</assembly>
0#0(020C0H0R0c0h0r0
1#1(121C1H1R1c1h1r1
2#2(222C2H2R2c2h2r2
3#3(323C3H3R3c3h3r3
4#4(424C4H4R4c4h4r4
5#5(525C5H5R5c5h5r5
6#6(626C6H6R6c6h6r6
7#7(727C7H7R7c7h7r7
8#8(828C8H8R8c8h8r8
9#9(929C9H9R9c9h9r9
:#:(:2:C:H:R:c:h:r:
;#;(;2;C;H;R;c;h;r;
<#<(<2<C<H<R<c<h<r<
=#=(=2=C=H=R=c=h=r=
>#>(>2>C>H>R>c>h>r>
?#?(?2?C?H?R?c?h?r?
0!03080B0Q0c0m0
1%111;1G1[1f1l1r112
2%3D3[3
4'5I5_5
;0;V;e;
<&<F<S<
>0>K>c>
?6?T?Z?
4$4(4,404A4j4o4v4}4
5w5V6e6
77>7d7m7~7
8#8+8D8I8#9*9f9x9
:6:<:C:
<<(<K<S<z<
7\7c7}7
:!:(:v:
<(<.<4<;<H<
3&3E3f5w5
969K9a9k9y9~9
:O:k:u:
:6;A;&<5<
>>&>0>:>E>`>y>
6<7G7f7
8+9L9j9|9
:^:j:{:
M0e0V1h1
5%5d5K6Z6
98:;.;m;T<c<
6B7R7^7n7x7
;);2;8;F;
<X<o<%>
1)2@2>3_3
4G4W4t4
4'5:5\5i5
646;6i6p6
6V7\7|7
838C8H8
9&929=9E9K9V9i9w9
:.:F:X:}:
0c0R1
4*4N4X4
;&;8;u;
4H5!6G697
4&484\4w4|4
5C6*7C7r7
>>9>x>
2K2Q2o2
5O6@7M9^:p:
;B=q=z>
2(2,2024282<2@2D2H2L2V2e2
>-?7?A?L?Y?
5,5E5S5
4H4R4\4g4t4'5
7!7+767C76;H;
7;7o86<E<
0'0B0]0
4&464T4s4
4I5^5v5
6%6V7e7&858n9
2F3U3s3!494f4u4q;6=H=
:Q;f;t;
<8=Y=f=t=|=
4&585d5k8
4;4K4n4
6,696P6Z6c6
;#;1;)<:<F<p<}<
=$=:=@=E=m=s=
*010{0
1(1<1N1y1
2 2/2<2
7787N7{7
9":9:N:m:
;;;[;j;r;
<#<0<E<Q<X<j<v<
=6=I=`=o=
20]0v0~0
1!1&1,12171=1C1H1N1T1Y1_1e1j1p1v1{1
2 2%2*21262<2B2G2M2S2X2^2d2i2o2u2z2
33$3*30353;3A3F3L3R3W3]3c3h3n3t3y3~3
4 4=4J4h4r4
5$565B5N5`5o5y5
6#646<6K6`6p6
7"737E7M7\7g7v7
7(9M9[9c9
:":':2:<:C:I:S:b:j:v:
;";(;1;8;C;I;P;^;g;r;y;
< <*<4<D<T<d<m<
=%=/=B=G=
>6>\>k>
11@1E1R1
8'8<8E8t8}8
9d9s9|9
9:E:N:T:\:a:t:
?&?7???H?W?
586Y6l6J7n7
4%41474=4O4X4d4~4
565N5X5q5
6#6)606G6O6Z6{6
737F7M7l7
8.8:8T8s8
909C9u9
:!:.:5:u:
>+>I>X>n>
?(?[?j?
586B6O6
8)898Y8
9-979K9w9
3D:h:u:
;c<m<v<
=T>g>t>
555@5J5Z5j5{5
<A<Y=c=
5-5o5|5
;4;?;I;V;`;k;~;
1z405:5L5k5
9*9<9J9O9U9x9}9
)0:0t0
3*3:3E3
5%5+5}5
5V6(7a7
8"8]8z8
9#9:9\9~9
=!>&>->;>P>\>
(020D0Q0c0m0
8#848N8k8
.0>0Y0r2
6,636^6m6{6
3/4M5h5
8 8$8(8,8\8y8
0"181R1
91:G:t:
3#363<3B3I3X3a3l3
7%7.7;7H7f7
9 9:9A9M9]9l9s9
9!:&:+:0:>:H:N:Y:c:i:o:u:
;.;:;P;h;t;
<%<8<B<T<s<x<
4N4+5G5N5y5
<F<e<~<
30!1U1i1p1
2'242I2O2s2
<!=Q=j=
363g3~3
3#4A4P4
749P9W9
969=9h9w9
3!3)313J3_3}3
304]4u4
5&5/5P5W5
&0-0Q0
6>6N6X6r6
6*787k7
?V?n?s?
5'5E5S5
787?7D7H7L7P7
>>$>(>,>0>
7H8X8_8o8
909;9I9O9`9q9{9
6 7%7L7h7
9;9R9`9l9x9
:!:&:+:F:S:\:a:f:
;;;K;c;
<1=D=M=Z=i=~=
?*?9?y?
5"5/5`5
6%6.6K6Y7
9Y;j;{;
P3d3v3
4E5I5M5Q5U5Y5]5a50:7:T:X:\:`:d:
5?5Y5h5v5
6&636A6O6Z6p6
7$737Q7i7
9^9l9u9
9):4:"<,<E<O<
=6>W>r>
0%101o1
10242<2H2b2
3*3/3H3Y3^3l3z3
415E5a5
9,:6:w:
=h>C?J?{?
020P0w0
0#181J1W1p1
1s2{2?3
7"757h7
:#:3:8:=:M:R:W:g:l:q:
;(;T;];
=0=?=J=O=T=r=
?8?B?b?l?
5!606>6[6c6
7A7H7Q7{7
848@8r8
?#?(?:?
:A;H;O;V;p;
<><f<V>
>"?n?w?{?
3%434?4P4^4i415
6k7r7|7
8X8j8|8
909Q9c9u9
;/<|<T=
9&919?9
:,:6:X:y:
<'=A=t=
0V0^0f0n0
1v1i2|2
444H4S4
;B<t= >T>
7=7h7{7
:(:,:2:8:>:D:k:
;!;(;1;:;J;[;e;o;y;
=Y=b=|=
V0a0h0n0}0
1>2H2^2o2
3-6"7*7a7h7b:
9U:g:y:
<a<=;=g=t=
2:2[2o2
4-4L4w4
4!5C5g5
<1<=<r>
?4?X?c?p?
3!3)3G3O3
6Q7b7s7
9F:K:]:{:
3$4B4j4
50u0-1l1
e0=1P2
94:%;J;z;
>">B>r>
"0H0n0
212L2g2
2!3D3y3
;*;E;h;
1G1Q1[1r1|1
222<2g2q2{2
2'313;3R3\3
4G4Q4[4r4|4
525<5g5q5{5
5'616;6R6\6
7G7Q7[7r7|7
828<8g8q8{8
8'919;9R9\9
:G:Q:[:r:|:
;2;<;g;q;{;
;'<1<;<R<\<
=G=Q=[=r=|=
>2><>g>q>{>
>'?1?;?R?\?
0G0Q0[0r0|0
121<1g1q1{1
1'212;2R2\2
3G3Q3[3r3|3
424<4g4q4{4
4'515;5R5\5
6G6Q6[6r6|6
727<7g7q7{7
7'818;8R8\8
9G9Q9[9r9|9
:2:<:g:q:{:
:';1;;;R;\;
<G<Q<[<r<|<
=2=<=g=q={=
='>1>;>R>\>
?G?Q?[?r?|?
020<0g0q0{0
0'111;1R1\1
2G2Q2[2r2|2
323<3g3q3{3
3'414;4R4\4
5G5Q5[5r5|5
626<6g6q6{6
6'717;7R7\7
8G8Q8[8r8|8
929<9g9q9{9
9':1:;:R:\:
;G;Q;[;r;|;
<2<<<g<q<{<
<'=1=;=R=\=
>G>Q>[>r>|>
?2?<?g?q?{?
'010;0R0\0
1G1Q1[1r1|1
222=2l2r2|2
3'323<3H3P3
4G4Q4[4r4|4
5=5G5Q5
$3,3034383<3@3D3H3L3P3T3X3\3`3d3h3l3p3t3x3|3
4 4$4(4,4044484<4@4D4H4L4P4T4X4\4`4d4h4l4p4t4x4|4
5 5$5(5,5054585<5@5D5H5L5P5T5X5\5`5d5h5l5p5t5x5|5
6 64686<6@6D6H6L6P6T6X6\6`6d6h6l6p6t6x6|6
7 7$7(7,70747P7T7X7\7`7d7h7l7p7t7x7|7
;$;,;4;<;D;L;T;\;d;l;t;|;
<$<,<4<<<D<L<T<\<d<l<t<|<
=$=,=4=<=D=L=
7 7$7(7,7074787<7@7D7H7L7P7T7X7\7`7d7h7l7p7t7x7|7
7L8P8T8X8\8`8d8h8l8p8t8x8|8
9 9$9(9,9094989<9@9D9H9L9P9T9X9\9`9d9h9l9p9t9x9|9
: :$:(:,:0:4:8:<:@:h:l:p:t:x:|:
; ;$;(;,;0;4;8;<;@;D;H;L;P;T;X;\;`;d;h;l;p;t;x;
=t=x=|=
(1,1014181<1@1D1H1L1P1T1X1\1`1d1h1l1p1t1x1|1
2 2$2(2,2024282<2@2D2H2L2P2T2X2\2`2d2h2l2p2t2x2|2
3 3$3(3,3034383<3@3D3H3L3P3T3X3\3`3d3h3l3p3t3x3|3
4 4$4(4,4044484<4@4D4H4L4P4T4
5 5(50585@5H5P5X5`5h5p5x5
6 6(60686@6H6P6X6`6h6p6x6
7 7(70787@7H7P7X7`7h7p7x7
8(>,>0>
2 2$2(242<2D2H2L2P2T2
8 8$8(8,8084888<8@8L8P8T8X8\8`8d8h8l8p8t8x8|8
8X<\<`<d<h<l<p<t<x<|<
6L7T7\7d7l7t7|7
8$8,848<8D8L8T8\8d8l8t8|8
9$9,949<9D9L9T9\9d9l9t9|9
:$:,:4:<:D:L:T:\:d:l:t:|:
;$;,;4;<;D;L;T;\;d;l;t;|;
<$<,<4<<<D<L<T<\<d<l<t<|<
=$=,=4=<=D=L=T=\=d=l=t=|=
>$>,>4><>D>L>T>\>d>
h8p8x8
9 9(90989@9H9P9X9`9h9p9x9
: :(:0:8:@:H:P:X:`:h:p:x:
; ;(;0;8;@;H;P;X;`;h;p;x;
< <(<0<8<@<H<P<X<`<h<p<x<
= =(=0=8=@=H=P=X=`=h=p=x=
> >(>0>8>@>H>P>X>`>h>p>x>
? ?(?0?8?@?H?P?X?`?h?p?x?
7$7,747<7D7L7T7\7d7l7t7|7
? ?$?(?,?0?4?8?<?@?D?H?L?`?d?h?l?p?t?x?|?
0 1$1(1,1014181<1@1D1H1L1P1T1X1\1`1d1h1l1p1t1x1|1
3(383<3L3P3T3\3t3
4 4(4@4P4T4d4h4l4t4
5$54585H5L5P5T5\5t5
6 6$64686<6@6H6`6p6t6
707@7D7T7X7\7d7|7
8$8(888<8D8\8l8p8
9$9<9L9P9`9d9h9l9t9
:,:<:@:P:T:\:t:
; ;(;@;P;T;\;t;
< <0<4<8<@<X<\<t<
=,=<=@=T=X=h=l=p=t=|=
>(>,><>@>H>`>p>t>
? ?$?<?L?P?d?h?x?|?
0 080H0L0\0`0d0l0
1 10141D1H1L1T1l1|1
2(2,20282P2`2d2t2x2|2
343D3H3X3\3d3|3
4$4(484<4@4D4L4d4t4x4
5$5(5<5@5P5T5X5`5x5|5
6(6,60686P6`6d6x6|6
7,70747H7L7\7`7p7t7|7
8$8(8@8P8T8d8h8x8|8
9 9$9(9,949L9\9`9p9t9
: :0:4:D:H:X:\:l:p:t:x:
;$;4;8;H;L;\;`;d;l;
<,<0<@<D<H<L<T<l<|<
=$=<=L=P=`=d=h=p=t=|=
>,>0>4>8>L>P>T>X>l>p>
?(?,?0?8?P?T?l?|?
0,0<0@0D0H0\0`0d0|0
1(181<1T1X1l1|1
2,2<2@2D2\2l2|2
3,30343<3@3H3`3p3
4(484<4L4P4h4x4|4
5$54585P5T5l5p5
6 =@=L=l=t=
>,>8>X>`>h>p>|>
?0?8?D?d?l?x?
0,040<0D0L0\0h0
1(141T1\1h1p1
2$2D2L2T2`2
3$3,343@3`3h3t3
4$4,444<4D4L4X4x4
5(5H5P5X5d5
6,646<6D6P6p6x6
707<7\7d7l7x7
848<8H8h8p8|8
9$9,949<9D9L9T9\9d9l9t9|9
:(:0:8:D:d:l:x:
;0;8;D;d;l;x;
<$<,<4<<<D<L<T<\<d<l<t<|<
=$=,=4=<=D=L=T=`=
>$>,>4><>D>L>T>\>d>l>t>|>
?$?,?4?<?D?P?p?|?
0$0,040<0D0L0T0\0d0l0t0
1$1,141<1D1L1T1`1
2 2(202@2d2l2t2|2
3$3,343<3D3L3T3\3d3l3t3|3
4$4,444<4D4L4T4\4d4l4t4|4
5,545<5D5L5T5\5d5l5t5|5
6$6,686\6d6l6t6|6
7$7,747<7D7L7T7\7d7l7t7|7
8$8,848<8D8L8T8\8d8l8t8|8
9$9,949<9D9L9T9\9d9l9t9|9
:$:,:4:<:D:L:T:\:d:l:t:|:
;$;,;4;<;D;L;T;\;d;l;t;
<$<,<4<<<D<L<T<\<d<l<t<|<
=$=,=4=<=D=L=T=\=d=l=t=|=
>$>,>4><>D>L>T>\>d>l>t>|>
?$?,?4?<?D?L?T?\?d?l?t?|?
0$0,040<0D0L0T0\0d0l0t0|0
1(10181@1H1X1|1
202<2\2h2
3,343<3D3P3p3|3
484D4d4l4t4
5 5(5D5T5`5
6$6,6D6L6d6x6
7$7,747@7`7l7
848@8`8l8
90989D9d9p9
:<:H:h:p:|:
;0;8;L;T;`;
<,<4<<<D<H<P<d<l<x<
=$=D=L=X=x=
>8>D>d>l>t>x>
?$?D?P?p?x?
0 0@0H0T0t0
1$181@1L1p1
2 2(2@2L2l2x2
3<3D3P3p3|3
40484H4T4t4|4
585D5d5p5
6 6(60686<6D6X6h6
7 7(70787<7D7X7`7h7t7
8 8(848T8\8h8
9 9@9L9l9x9
:4:@:`:h:t:
; ;4;<;D;L;P;X;l;t;|;
<8<X<`<h<p<x<
=8=D=d=p=
>$>`>h>p>
>$?(?D?H?P?X?`?d?h?p?
0 0(0,0<0`0l0t0
1 1@1\1`1
2 2@2`2
3 3@3`3
4 4@4`4
5 5(50585@5H5L5P5X5l5t5x5
6 646<6P6X6`6
X0`0h0p0x0
20242`7d7h7l7p7t7x7|7
9(9H9p9
8(8D8h8
Akernel32.dll
api-ms-win-core-synch-l1-2-0.dll
combase.dll
advapi32.dll
Eapi-ms-win-core-fibers-l1-1-1
api-ms-win-core-synch-l1-2-0
kernel32
api-ms-
mscoree.dll
(null)
Eapi-ms-win-core-datetime-l1-1-1
api-ms-win-core-file-l1-2-2
api-ms-win-core-localization-l1-2-1
api-ms-win-core-localization-obsolete-l1-2-0
api-ms-win-core-processthreads-l1-1-2
api-ms-win-core-string-l1-1-0
api-ms-win-core-sysinfo-l1-2-1
api-ms-win-core-winrt-l1-1-0
api-ms-win-core-xstate-l2-1-0
api-ms-win-rtcore-ntuser-window-l1-1-0
api-ms-win-security-systemfunctions-l1-1-0
ext-ms-win-ntuser-dialogbox-l1-1-0
ext-ms-win-ntuser-windowstation-l1-1-0
advapi32
api-ms-win-appmodel-runtime-l1-1-2
user32
ext-ms-
Sunday
Monday
Tuesday
Wednesday
Thursday
Friday
Saturday
January
February
August
September
October
November
December
MM/dd/yy
dddd, MMMM dd, yyyy
HH:mm:ss
((((( H
((((( H
(
Eja-JP
zh-CHS
az-AZ-Latn
uz-UZ-Latn
kok-IN
syr-SY
div-MV
quz-BO
sr-SP-Latn
az-AZ-Cyrl
uz-UZ-Cyrl
quz-EC
sr-SP-Cyrl
quz-PE
smj-NO
bs-BA-Latn
smj-SE
sr-BA-Latn
sma-NO
sr-BA-Cyrl
sma-SE
sms-FI
smn-FI
zh-CHT
az-az-cyrl
az-az-latn
bs-ba-latn
div-mv
kok-in
quz-bo
quz-ec
quz-pe
sma-no
sma-se
smj-no
smj-se
smn-fi
sms-fi
sr-ba-cyrl
sr-ba-latn
sr-sp-cyrl
sr-sp-latn
syr-sy
uz-uz-cyrl
uz-uz-latn
zh-chs
zh-cht
CONOUT$
image/jpeg
Antivirus Signature
Bkav W32.AIDetectMalware
Lionic Clean
Elastic Windows.Generic.Threat
ClamAV Win.Malware.Generic-10033391-0
CMC Clean
CAT-QuickHeal Clean
Skyhigh BehavesLike.Win32.Downloader.gh
ALYac Gen:Variant.Zusy.552096
Cylance Unsafe
Zillya Clean
Sangfor Trojan.Win32.Save.a
K7AntiVirus Trojan-Downloader ( 005790d31 )
Alibaba TrojanSpy:Win32/Amadey.ec5c772a
K7GW Trojan-Downloader ( 005790d31 )
huorong TrojanDownloader/Amadey.p
Baidu Win32.Trojan.Delf.in
VirIT Clean
Paloalto Clean
Symantec ML.Attribute.HighConfidence
tehtris Clean
ESET-NOD32 a variant of Win32/TrojanDownloader.Amadey.A
APEX Malicious
Avast Win32:BotX-gen [Trj]
Cynet Malicious (score: 100)
Kaspersky HEUR:Trojan-Spy.Win32.Stealer.gen
BitDefender Gen:Variant.Zusy.552096
NANO-Antivirus Clean
ViRobot Clean
MicroWorld-eScan Gen:Variant.Zusy.552096
Tencent Malware.Win32.Gencirc.11c63a0f
Sophos Generic ML PUA (PUA)
F-Secure Heuristic.HEUR/AGEN.1375090
DrWeb Trojan.MulDrop28.19665
VIPRE Gen:Variant.Zusy.552096
TrendMicro Clean
McAfeeD Real Protect-LS!E4F3ED3DAF21
Trapmine malicious.moderate.ml.score
CTX exe.unknown.zusy
Emsisoft Gen:Variant.Zusy.552096 (B)
Ikarus Trojan-Downloader.Win32.Amadey
FireEye Generic.mg.e4f3ed3daf213639
Jiangmin TrojanSpy.Stealer.akal
Webroot Clean
Varist W32/Stealer.HF.gen!Eldorado
Avira HEUR/AGEN.1375090
Fortinet W32/Amadey.A!tr.dldr
Antiy-AVL Clean
Kingsoft malware.kb.a.979
Gridinsoft Clean
Xcitium Clean
Arcabit Trojan.Zusy.D86CA0
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Trojan-Spy.Win32.Stealer.gen
Microsoft Trojan:Win32/Amadey!MTB
Google Detected
AhnLab-V3 Trojan/Win.Generic.R664066
Acronis Clean
McAfee Clean
TACHYON Clean
VBA32 BScope.TrojanDownloader.Deyma
Malwarebytes Trojan.Amadey
Panda Trj/GdSda.A
Zoner Clean
TrendMicro-HouseCall Clean
Rising Stealer.Agent!8.C2 (TFE:5:94ZIjYSVylS)
Yandex Clean
SentinelOne Static AI - Suspicious PE
MaxSecure Trojan.Malware.300983.susgen
GData Gen:Variant.Zusy.552096
AVG Win32:BotX-gen [Trj]
DeepInstinct MALICIOUS
alibabacloud Trojan[spy]:Win/Amadey.A
No IRMA results available.