7053ad4d9c216d6a737a2ccf35eee7cc

Sharing

Copy URL Twitter E-mail

General

Target

7053ad4d9c216d6a737a2ccf35eee7cc
Size

3.4MB
MD5

7053ad4d9c216d6a737a2ccf35eee7cc
SHA1

0a6b02956c8464673f4f93a82be03379b8625c1e
SHA256

0f544d83e821706b74ffedd5c286ca5d3bd70525e617b2640c3f20b09f5d2778
SHA512

0949798dd45b6747030f86b61b3e33e0f712667829cc48eb3f47b4e018547b2959ad4dde5ab1fbc59ae7c2847b77be4fd88071831f808c0e5faa470223562fb7
SSDEEP

49152:BrGtOv0y/f7NOB4d1bMmtZ2jrAdA+X8D98/69G72CWsvXKg4W0GiS9/zg29G:F7pZOmd+lYSL98V72JsH4WFb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/$PLUGINSDIR/System.dll

Files

7053ad4d9c216d6a737a2ccf35eee7cc
.exe windows:4 windows x86 arch:x86

1f23f452093b5c1ff091a2f9fb4fa3e9

Code Sign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2013, 12:00

Not After

22/10/2028, 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0f:bf:3b:b9:74:d5:e1:73:60:c6:94:ee:28:63:cd:81
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

19/12/2019, 00:00

Not After

09/02/2022, 12:00

Subject

CN=Corel Corporation,OU=Corel Corporation,O=Corel Corporation,L=Ottawa,ST=Ontario,C=CA

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

a0:a8:fb:24:17:1b:ac:d6:e7:f4:e2:d7:d3:72:d8:a0:51:6e:03:27
Signer

Actual PE Digest

a0:a8:fb:24:17:1b:ac:d6:e7:f4:e2:d7:d3:72:d8:a0:51:6e:03:27

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
SetFileAttributesW
Sleep
GetTickCount
CreateFileW
GetFileSize
GetModuleFileNameW
GetCurrentProcess
SetCurrentDirectoryW
GetFileAttributesW
SetEnvironmentVariableW
GetWindowsDirectoryW
GetTempPathW
GetCommandLineW
GetVersion
SetErrorMode
lstrlenW
lstrcpynW
CopyFileW
GetShortPathNameW
GlobalLock
CreateThread
GetLastError
CreateDirectoryW
CreateProcessW
RemoveDirectoryW
lstrcmpiA
GetTempFileNameW
WriteFile
lstrcpyA
MoveFileExW
lstrcatW
GetSystemDirectoryW
GetProcAddress
GetModuleHandleA
GetExitCodeProcess
WaitForSingleObject
lstrcmpiW
MoveFileW
GetFullPathNameW
SetFileTime
SearchPathW
CompareFileTime
lstrcmpW
CloseHandle
ExpandEnvironmentStringsW
GlobalFree
GlobalUnlock
GetDiskFreeSpaceW
GlobalAlloc
FindFirstFileW
FindNextFileW
DeleteFileW
SetFilePointer
ReadFile
FindClose
lstrlenA
MulDiv
MultiByteToWideChar
WideCharToMultiByte
GetPrivateProfileStringW
WritePrivateProfileStringW
FreeLibrary
LoadLibraryExW
GetModuleHandleW

user32

GetSystemMenu
SetClassLongW
EnableMenuItem
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongW
SetCursor
LoadCursorW
CheckDlgButton
GetMessagePos
LoadBitmapW
CallWindowProcW
IsWindowVisible
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
ScreenToClient
GetWindowRect
GetDlgItem
GetSystemMetrics
SetDlgItemTextW
GetDlgItemTextW
MessageBoxIndirectW
CharPrevW
CharNextA
wsprintfA
DispatchMessageW
PeekMessageW
ReleaseDC
EnableWindow
InvalidateRect
SendMessageW
DefWindowProcW
BeginPaint
GetClientRect
FillRect
DrawTextW
EndDialog
RegisterClassW
SystemParametersInfoW
CreateWindowExW
GetClassInfoW
DialogBoxParamW
CharNextW
ExitWindowsEx
DestroyWindow
GetDC
SetTimer
SetWindowTextW
LoadImageW
SetForegroundWindow
ShowWindow
IsWindow
SetWindowLongW
FindWindowExW
TrackPopupMenu
AppendMenuW
CreatePopupMenu
EndPaint
CreateDialogParamW
SendMessageTimeoutW
wsprintfW
PostQuitMessage

gdi32

SelectObject
SetBkMode
CreateFontIndirectW
SetTextColor
DeleteObject
GetDeviceCaps
CreateBrushIndirect
SetBkColor

shell32

SHGetSpecialFolderLocation
ShellExecuteExW
SHGetPathFromIDListW
SHBrowseForFolderW
SHGetFileInfoW
SHFileOperationW

advapi32

AdjustTokenPrivileges
RegCreateKeyExW
RegOpenKeyExW
SetFileSecurityW
OpenProcessToken
LookupPrivilegeValueW
RegEnumValueW
RegDeleteKeyW
RegDeleteValueW
RegCloseKey
RegSetValueExW
RegQueryValueExW
RegEnumKeyW

comctl32

ImageList_Create
ImageList_AddMasked
ImageList_Destroy
ord17

ole32

OleUninitialize
OleInitialize
CoTaskMemFree
CoCreateInstance

Sections

.text
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 76KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 129KB - Virtual size: 129KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$PLUGINSDIR/System.dll
.dll windows:4 windows x86 arch:x86

fc0224e99e736751432961db63a41b76

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetModuleHandleW
GlobalFree
GlobalSize
lstrcpynW
lstrcpyW
GetProcAddress
WideCharToMultiByte
VirtualFree
FreeLibrary
lstrlenW
LoadLibraryW
GlobalAlloc
MultiByteToWideChar
VirtualAlloc
VirtualProtect
GetLastError

user32

wsprintfW

ole32

StringFromGUID2
CLSIDFromString

Exports

Exports

Alloc
Call
Copy
Free
Get
Int64Op
Store
StrAlloc

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 867B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 120B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 638B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ReviverSoft Smart Monitor Service.exe
.exe windows:6 windows x64 arch:x64

a4f1b9062c2ba7543824a9d83dc6b8ca

Code Sign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2013, 12:00

Not After

22/10/2028, 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0f:bf:3b:b9:74:d5:e1:73:60:c6:94:ee:28:63:cd:81
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

19/12/2019, 00:00

Not After

09/02/2022, 12:00

Subject

CN=Corel Corporation,OU=Corel Corporation,O=Corel Corporation,L=Ottawa,ST=Ontario,C=CA

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

d8:72:01:4e:56:3b:2f:83:d5:7e:69:2f:83:bc:52:26:6a:a6:88:e2
Signer

Actual PE Digest

d8:72:01:4e:56:3b:2f:83:d5:7e:69:2f:83:bc:52:26:6a:a6:88:e2

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

WaitForSingleObject
GetCurrentProcessId
GetCurrentProcess
WaitForSingleObjectEx
DeleteFileW
InitializeCriticalSectionAndSpinCount
CreateEventW
OpenThread
ReleaseMutex
CreateMutexW
ExpandEnvironmentStringsW
GetFileAttributesExW
GetUserDefaultLangID
GetFileAttributesW
OpenEventA
ResetEvent
VerSetConditionMask
Process32NextW
SetEndOfFile
WriteConsoleW
CreateFileW
SetStdHandle
Process32FirstW
SetEnvironmentVariableW
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetOEMCP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
SetFilePointerEx
ReadConsoleW
ReadFile
GetConsoleMode
GetConsoleCP
FlushFileBuffers
GetTimeZoneInformation
CreateToolhelp32Snapshot
WaitForMultipleObjects
LocalAlloc
OpenProcess
ProcessIdToSessionId
TerminateProcess
SetLastError
MoveFileExW
GetTempPathW
GetTempFileNameW
TerminateThread
QueryPerformanceFrequency
QueryPerformanceCounter
SetThreadPriority
DecodePointer
WideCharToMultiByte
MultiByteToWideChar
FindResourceW
lstrcmpiW
LocalFree
SizeofResource
LockResource
LoadResource
LoadLibraryExW
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
FreeLibrary
FindResourceExW
GetCurrentThreadId
Sleep
CreateEventA
SetEvent
DeleteCriticalSection
InitializeCriticalSectionEx
LeaveCriticalSection
EnterCriticalSection
GetProcessHeap
GetCommandLineW
HeapSize
HeapFree
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetTimeFormatW
GetDateFormatW
GetFileType
GetACP
WriteFile
GetStdHandle
ExitProcess
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
CreateThread
VerifyVersionInfoW
GetTickCount
HeapReAlloc
HeapAlloc
HeapDestroy
GetLastError
RaiseException
CloseHandle
SetCurrentDirectoryW
InterlockedPushEntrySList
IsDebuggerPresent
OutputDebugStringW
GetStringTypeW
GetCPInfo
EncodePointer
SwitchToThread
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
CompareStringW
LCMapStringW
GetLocaleInfoW
ReleaseSemaphore
WaitForMultipleObjectsEx
SetWaitableTimer
ResumeThread
GetModuleHandleA
CreateWaitableTimerA
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
InitializeSListHead
GetStartupInfoW
RtlPcToFileHeader
RtlUnwindEx
RtlUnwind

user32

DispatchMessageW
PostThreadMessageW
TranslateMessage
GetMessageW
CharUpperW
CharNextW
MessageBoxW
LoadStringW

shell32

ShellExecuteW
SHGetFolderPathW
SHCreateDirectoryExW

ole32

CoTaskMemRealloc
CoTaskMemAlloc
CoInitializeSecurity
CoSetProxyBlanket
CoUninitialize
CoCreateInstance
CoReleaseServerProcess
CoAddRefServerProcess
CoInitializeEx
CoTaskMemFree

oleaut32

SysAllocStringLen
VariantInit
SysAllocString
SysFreeString
VarUI4FromStr
VariantClear

advapi32

CryptDestroyHash
CryptDestroyKey
CryptDeriveKey
DeregisterEventSource
RegisterEventSourceW
ReportEventW
QueryServiceConfigW
CryptHashData
CryptCreateHash
CryptGetHashParam
CryptReleaseContext
CryptAcquireContextW
LookupPrivilegeValueW
AdjustTokenPrivileges
ConvertSidToStringSidW
QueryServiceStatusEx
GetTokenInformation
OpenProcessToken
CreateProcessAsUserW
ConvertStringSidToSidW
UnlockServiceDatabase
StartServiceCtrlDispatcherW
SetServiceStatus
RegisterServiceCtrlHandlerW
OpenServiceW
OpenSCManagerW
LockServiceDatabase
DeleteService
CreateServiceW
ControlService
CloseServiceHandle
ChangeServiceConfig2W
ChangeServiceConfigW
RegSetValueExW
RegQueryValueExW
RegQueryInfoKeyW
RegOpenKeyExW
RegEnumKeyExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegCloseKey
LookupAccountSidW
CryptDecrypt

wtsapi32

WTSQueryUserToken
WTSWaitSystemEvent
WTSFreeMemory
WTSQuerySessionInformationW
WTSEnumerateSessionsW

userenv

CreateEnvironmentBlock
DestroyEnvironmentBlock

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

wintrust

WinVerifyTrust

crypt32

CertFindCertificateInStore
CertCloseStore
CryptMsgClose
CertFreeCertificateContext
CertGetNameStringW
CryptQueryObject
CryptMsgGetParam

winhttp

WinHttpCloseHandle
WinHttpQueryHeaders
WinHttpOpenRequest
WinHttpGetDefaultProxyConfiguration
WinHttpGetIEProxyConfigForCurrentUser
WinHttpSetOption
WinHttpConnect
WinHttpReadData
WinHttpSendRequest
WinHttpQueryDataAvailable
WinHttpOpen
WinHttpSetCredentials
WinHttpReceiveResponse
WinHttpQueryAuthSchemes

wininet

InternetQueryDataAvailable
HttpQueryInfoW
InternetSetOptionW
HttpSendRequestW
HttpOpenRequestW
InternetConnectW
InternetCloseHandle
InternetReadFile
InternetOpenW

Exports

Exports

??0?$oserializer@Vtext_oarchive@archive@boost@@V?$set@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@std@@@detail@archive@boost@@QEAA@XZ
??0?$oserializer@Vtext_oarchive@archive@boost@@VCSMSettingsStorage@PulseService@@@detail@archive@boost@@QEAA@XZ
??0?$singleton@V?$extended_type_info_typeid@V?$set@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@std@@@serialization@boost@@@serialization@boost@@IEAA@XZ
??0?$singleton@V?$extended_type_info_typeid@VCSMSettingsStorage@PulseService@@@serialization@boost@@@serialization@boost@@IEAA@XZ
?get_const_instance@?$singleton@V?$extended_type_info_typeid@V?$set@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@std@@@serialization@boost@@@serialization@boost@@SAAEBV?$extended_type_info_typeid@V?$set@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@std@@@23@XZ
?get_const_instance@?$singleton@V?$extended_type_info_typeid@VCSMSettingsStorage@PulseService@@@serialization@boost@@@serialization@boost@@SAAEBV?$extended_type_info_typeid@VCSMSettingsStorage@PulseService@@@23@XZ
?get_const_instance@?$singleton@V?$iserializer@Vtext_iarchive@archive@boost@@V?$set@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@std@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$iserializer@Vtext_iarchive@archive@boost@@V?$set@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@std@@@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$iserializer@Vtext_iarchive@archive@boost@@VCSMSettingsStorage@PulseService@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$iserializer@Vtext_iarchive@archive@boost@@VCSMSettingsStorage@PulseService@@@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$map@Vtext_iarchive@archive@boost@@@extra_detail@detail@archive@boost@@@serialization@boost@@SAAEBV?$map@Vtext_iarchive@archive@boost@@@extra_detail@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$map@Vtext_oarchive@archive@boost@@@extra_detail@detail@archive@boost@@@serialization@boost@@SAAEBV?$map@Vtext_oarchive@archive@boost@@@extra_detail@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$multiset@PEBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PEBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@SAAEBV?$multiset@PEBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PEBVextended_type_info@serialization@boost@@@std@@@std@@XZ
?get_const_instance@?$singleton@V?$multiset@PEBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PEBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@std@@@std@@@serialization@boost@@SAAEBV?$multiset@PEBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PEBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@std@@@std@@XZ
?get_const_instance@?$singleton@V?$oserializer@Vtext_oarchive@archive@boost@@V?$set@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@std@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$oserializer@Vtext_oarchive@archive@boost@@V?$set@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@std@@@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$oserializer@Vtext_oarchive@archive@boost@@VCSMSettingsStorage@PulseService@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$oserializer@Vtext_oarchive@archive@boost@@VCSMSettingsStorage@PulseService@@@detail@archive@3@XZ
?get_lock@singleton_module@serialization@boost@@AEAAAEA_NXZ
?get_mutable_instance@?$singleton@V?$map@Vtext_iarchive@archive@boost@@@extra_detail@detail@archive@boost@@@serialization@boost@@SAAEAV?$map@Vtext_iarchive@archive@boost@@@extra_detail@detail@archive@3@XZ
?get_mutable_instance@?$singleton@V?$map@Vtext_oarchive@archive@boost@@@extra_detail@detail@archive@boost@@@serialization@boost@@SAAEAV?$map@Vtext_oarchive@archive@boost@@@extra_detail@detail@archive@3@XZ
?get_mutable_instance@?$singleton@V?$multiset@PEBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PEBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@SAAEAV?$multiset@PEBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PEBVextended_type_info@serialization@boost@@@std@@@std@@XZ
?get_mutable_instance@?$singleton@V?$multiset@PEBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PEBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@std@@@std@@@serialization@boost@@SAAEAV?$multiset@PEBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PEBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@std@@@std@@XZ
?is_destroyed@?$singleton@V?$map@Vtext_iarchive@archive@boost@@@extra_detail@detail@archive@boost@@@serialization@boost@@SA_NXZ
?is_destroyed@?$singleton@V?$map@Vtext_oarchive@archive@boost@@@extra_detail@detail@archive@boost@@@serialization@boost@@SA_NXZ
?is_destroyed@?$singleton@V?$multiset@PEBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PEBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@SA_NXZ
?is_destroyed@?$singleton@V?$multiset@PEBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PEBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@std@@@std@@@serialization@boost@@SA_NXZ
?is_locked@singleton_module@serialization@boost@@QEAA_NXZ
?load_object_data@?$iserializer@Vtext_iarchive@archive@boost@@V?$set@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@std@@@detail@archive@boost@@UEBAXAEAVbasic_iarchive@234@PEAXI@Z
?load_object_data@?$iserializer@Vtext_iarchive@archive@boost@@VCSMSettingsStorage@PulseService@@@detail@archive@boost@@UEBAXAEAVbasic_iarchive@234@PEAXI@Z
?lock@?1??get_lock@singleton_module@serialization@boost@@AEAAAEA_NXZ@4_NA
?lock@singleton_module@serialization@boost@@QEAAXXZ
?save_object_data@?$oserializer@Vtext_oarchive@archive@boost@@V?$set@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@std@@@detail@archive@boost@@UEBAXAEAVbasic_oarchive@234@PEBX@Z
?save_object_data@?$oserializer@Vtext_oarchive@archive@boost@@VCSMSettingsStorage@PulseService@@@detail@archive@boost@@UEBAXAEAVbasic_oarchive@234@PEBX@Z
?unlock@singleton_module@serialization@boost@@QEAAXXZ

Sections

.text
Size: 951KB - Virtual size: 951KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 355KB - Virtual size: 354KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 60KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ReviverSoft Smart Monitor Service.mab
ReviverSoftSmartMonitor.exe
.exe windows:6 windows x64 arch:x64

7086987a810ba8dba09806183d9db5bd

Code Sign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2013, 12:00

Not After

22/10/2028, 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0f:bf:3b:b9:74:d5:e1:73:60:c6:94:ee:28:63:cd:81
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

19/12/2019, 00:00

Not After

09/02/2022, 12:00

Subject

CN=Corel Corporation,OU=Corel Corporation,O=Corel Corporation,L=Ottawa,ST=Ontario,C=CA

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

79:da:53:3f:84:0f:cd:18:ec:14:f6:16:7a:a1:13:f8:6a:4f:48:20
Signer

Actual PE Digest

79:da:53:3f:84:0f:cd:18:ec:14:f6:16:7a:a1:13:f8:6a:4f:48:20

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

GetLocalTime
GetVersionExA
RtlCaptureContext
GetEnvironmentVariableA
GetEnvironmentVariableW
GetCurrentDirectoryA
OutputDebugStringA
SuspendThread
ResumeThread
GetThreadContext
ReadProcessMemory
GetModuleFileNameA
CreateIoCompletionPort
GetQueuedCompletionStatus
InitializeCriticalSectionAndSpinCount
WaitForSingleObject
SleepEx
CreateEventW
SetWaitableTimer
QueueUserAPC
TerminateThread
TlsGetValue
TlsSetValue
GetSystemTimeAsFileTime
GlobalAlloc
GlobalReAlloc
GlobalLock
GlobalUnlock
WaitForMultipleObjects
lstrlenW
CreateWaitableTimerW
ReleaseSemaphore
WaitForMultipleObjectsEx
CreateSemaphoreA
DeleteFileW
GlobalFree
SetProcessWorkingSetSize
GetLocaleInfoW
DuplicateHandle
GetTempPathW
MoveFileW
QueryPerformanceCounter
QueryPerformanceFrequency
GetTickCount
GetFileAttributesExW
GetTempFileNameW
CreateProcessW
MulDiv
lstrcmpW
FlushFileBuffers
MapViewOfFile
CreateFileMappingW
FormatMessageA
GetSystemTime
SystemTimeToFileTime
GetFileSize
LockFileEx
CreateFileMappingA
UnlockFile
HeapCompact
GetSystemInfo
DeleteFileA
LoadLibraryA
FlushViewOfFile
OutputDebugStringW
GetFileAttributesA
GetDiskFreeSpaceA
GetTempPathA
HeapValidate
UnmapViewOfFile
UnlockFileEx
SetEndOfFile
GetFullPathNameA
SetFilePointer
LockFile
GetDiskFreeSpaceW
WriteFile
GetFullPathNameW
HeapCreate
ReadFile
AreFileApisANSI
InitializeCriticalSection
TryEnterCriticalSection
GetCurrentProcessId
OpenThread
OpenEventA
ResetEvent
GetModuleHandleA
CreateWaitableTimerA
SetUnhandledExceptionFilter
GetUserDefaultLocaleName
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
OpenProcess
ProcessIdToSessionId
GetExitCodeProcess
QueryDosDeviceW
GetLogicalDriveStringsW
WriteConsoleW
SetStdHandle
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
IsValidCodePage
FindFirstFileExW
GetTimeZoneInformation
ReadConsoleW
GetConsoleMode
GetConsoleCP
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetTimeFormatW
GetDateFormatW
GetFileType
GetACP
GetStdHandle
ExitProcess
FreeLibraryAndExitThread
ExitThread
CreateThread
RtlUnwindEx
RtlPcToFileHeader
GetStartupInfoW
IsProcessorFeaturePresent
TerminateProcess
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
SetFilePointerEx
RemoveDirectoryW
FindNextFileW
FindFirstFileW
FindClose
CreateDirectoryW
LCMapStringW
CompareStringW
GetCPInfo
SwitchToThread
GetStringTypeW
LoadLibraryExA
VirtualFree
VirtualAlloc
FlushInstructionCache
InterlockedPushEntrySList
CreateFileW
WaitForSingleObjectEx
FileTimeToSystemTime
LoadLibraryW
Sleep
ExpandEnvironmentStringsW
SetEnvironmentVariableW
VerifyVersionInfoW
DeviceIoControl
InterlockedPopEntrySList
InitializeSListHead
EncodePointer
IsDebuggerPresent
CreateFileA
VerSetConditionMask
LocalAlloc
RtlUnwind
GetModuleHandleExW
GetCurrentProcess
GetUserDefaultLangID
CreateMutexW
GetCurrentThread
DecodePointer
MultiByteToWideChar
WideCharToMultiByte
SetDllDirectoryW
FindResourceW
lstrcmpiW
FormatMessageW
LocalFree
SizeofResource
LockResource
LoadResource
LoadLibraryExW
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
FreeLibrary
FindResourceExW
TlsFree
TlsAlloc
GetCurrentThreadId
CreateEventA
SetEvent
DeleteCriticalSection
InitializeCriticalSectionEx
LeaveCriticalSection
EnterCriticalSection
PostQueuedCompletionStatus
GetProcessHeap
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
HeapDestroy
SetErrorMode
SetLastError
GetLastError
RaiseException
CloseHandle
SetFileAttributesW
GetFileAttributesW

user32

GetForegroundWindow
RegisterWindowMessageW
GetActiveWindow
TranslateMessage
DispatchMessageW
PeekMessageW
SendMessageW
UnregisterClassW
RegisterClassExW
GetClassInfoExW
CreateWindowExW
CharNextW
SetWindowLongPtrW
FindWindowW
LoadCursorW
DefWindowProcW
PostQuitMessage
CallWindowProcW
GetWindowLongPtrW
PostMessageW
DialogBoxIndirectParamW
EnumWindows
GetWindowThreadProcessId
ShowWindow
SetWindowPos
IsWindowVisible
EndDialog
SetTimer
KillTimer
SetWindowTextW
GetClientRect
GetWindowRect
MapWindowPoints
CopyRect
GetWindowLongW
GetParent
GetWindow
LoadIconW
DestroyIcon
LoadImageW
GetShellWindow
GetTopWindow
GetAncestor
GetMessageW
MonitorFromPoint
EnumChildWindows
GetClassNameW
GetDesktopWindow
SetWindowLongW
FillRect
GetSysColor
ScreenToClient
ClientToScreen
GetWindowTextLengthW
GetWindowTextW
RedrawWindow
InvalidateRgn
InvalidateRect
EndPaint
BeginPaint
ReleaseDC
GetDC
DestroyAcceleratorTable
CreateAcceleratorTableW
ReleaseCapture
SetCapture
GetKeyState
GetFocus
SetFocus
GetDlgItem
MoveWindow
DestroyWindow
IsChild
IsWindow
GetLastInputInfo
GetMonitorInfoW
MonitorFromWindow

gdi32

DeleteDC
BitBlt
SelectObject
GetStockObject
GetDeviceCaps
DeleteObject
CreateSolidBrush
CreateCompatibleDC
CreateCompatibleBitmap
GetObjectW

shell32

ShellExecuteW
SHCreateDirectoryExW
SHGetFolderPathW

ole32

CoGetClassObject
CreateStreamOnHGlobal
CoTaskMemRealloc
CoInitializeEx
CoUninitialize
CoUnmarshalInterface
CLSIDFromProgID
StringFromGUID2
OleInitialize
CoTaskMemAlloc
OleUninitialize
CoCreateInstance
OleLockRunning
CoInitializeSecurity
CoSetProxyBlanket
CLSIDFromString
CoMarshalInterface
CoTaskMemFree

oleaut32

SystemTimeToVariantTime
SysStringByteLen
OleCreateFontIndirect
DispCallFunc
LoadRegTypeLi
LoadTypeLi
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayCreate
SysStringLen
SysAllocStringLen
VariantChangeType
VariantCopy
VariantClear
VariantInit
SysFreeString
SysAllocString
VarUI4FromStr

advapi32

RegEnumKeyExW
RegDeleteKeyW
RegCreateKeyExW
RegCloseKey
LookupAccountSidW
FreeSid
CheckTokenMembership
AllocateAndInitializeSid
RegOpenKeyExW
RegQueryInfoKeyW
RegSetValueExW
ConvertStringSidToSidW
RegQueryValueExW
RegDeleteTreeW
CryptAcquireContextW
CryptReleaseContext
CryptDeriveKey
CryptDestroyKey
CryptEncrypt
CryptDecrypt
CryptCreateHash
CryptHashData
CryptDestroyHash
GetUserNameA
CryptGetHashParam
ChangeServiceConfigW
CloseServiceHandle
LockServiceDatabase
OpenSCManagerW
OpenServiceW
QueryServiceConfigW
UnlockServiceDatabase
RegDeleteValueW

shlwapi

PathFileExistsW
UrlEscapeW

wtsapi32

WTSFreeMemory
WTSQuerySessionInformationW

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW

ws2_32

WSACleanup
WSAStartup

wintrust

WinVerifyTrust

crypt32

CryptBinaryToStringW
CryptMsgClose
CryptMsgGetParam
CertCloseStore
CertFindCertificateInStore
CertFreeCertificateContext
CertGetNameStringW
CryptQueryObject

winhttp

WinHttpOpen
WinHttpCloseHandle
WinHttpConnect
WinHttpQueryDataAvailable
WinHttpSendRequest
WinHttpGetIEProxyConfigForCurrentUser
WinHttpGetDefaultProxyConfiguration
WinHttpOpenRequest
WinHttpSetOption
WinHttpQueryHeaders
WinHttpReceiveResponse
WinHttpQueryAuthSchemes
WinHttpSetCredentials
WinHttpReadData

wininet

HttpOpenRequestW
HttpSendRequestW
InternetOpenW
InternetGetConnectedState
InternetConnectW
InternetSetOptionW
HttpQueryInfoW
InternetQueryDataAvailable
InternetReadFile
InternetCloseHandle

urlmon

CoInternetSetFeatureEnabled

rpcrt4

UuidCreate
UuidToStringW
RpcStringFreeW

psapi

GetProcessImageFileNameW

bcrypt

BCryptCloseAlgorithmProvider
BCryptGenRandom
BCryptOpenAlgorithmProvider

Exports

Exports

??0?$oserializer@Vtext_oarchive@archive@boost@@UCLicenseKeySerializer@?A0x7812619f@@@detail@archive@boost@@QEAA@XZ
??0?$oserializer@Vtext_oarchive@archive@boost@@V?$vector@EV?$allocator@E@std@@@std@@@detail@archive@boost@@QEAA@XZ
??0?$oserializer@Vxml_woarchive@archive@boost@@UCParamAgentId@CSerializableItem@Queue@PulseCore@@@detail@archive@boost@@QEAA@XZ
??0?$oserializer@Vxml_woarchive@archive@boost@@UCParamAgentVersion@CSerializableItem@Queue@PulseCore@@@detail@archive@boost@@QEAA@XZ
??0?$oserializer@Vxml_woarchive@archive@boost@@UCParamAlertId@CSerializableItem@Queue@PulseCore@@@detail@archive@boost@@QEAA@XZ
??0?$oserializer@Vxml_woarchive@archive@boost@@UCParamAttempsCount@CStatictics@IQueueLimiter@Queue@PulseCore@@@detail@archive@boost@@QEAA@XZ
??0?$oserializer@Vxml_woarchive@archive@boost@@UCParamBuffer@CSerializableItem@Queue@PulseCore@@@detail@archive@boost@@QEAA@XZ
??0?$oserializer@Vxml_woarchive@archive@boost@@UCParamCreationTime@CSerializableItem@Queue@PulseCore@@@detail@archive@boost@@QEAA@XZ
??0?$oserializer@Vxml_woarchive@archive@boost@@UCParamMaxConcurrentAlerts@CQueueSettings@Settings@PulseCore@@@detail@archive@boost@@QEAA@XZ
??0?$oserializer@Vxml_woarchive@archive@boost@@UCParamMinimumAlertDelay@CQueueSettings@Settings@PulseCore@@@detail@archive@boost@@QEAA@XZ
??0?$oserializer@Vxml_woarchive@archive@boost@@UCParamPeriodAmountLimit@CQueueSettings@Settings@PulseCore@@@detail@archive@boost@@QEAA@XZ
??0?$oserializer@Vxml_woarchive@archive@boost@@UCParamPeriodDuration@CQueueSettings@Settings@PulseCore@@@detail@archive@boost@@QEAA@XZ
??0?$oserializer@Vxml_woarchive@archive@boost@@UCParamPeriodStartDate@CStatictics@IQueueLimiter@Queue@PulseCore@@@detail@archive@boost@@QEAA@XZ
??0?$oserializer@Vxml_woarchive@archive@boost@@UCParamPreviousAttemptDate@CStatictics@IQueueLimiter@Queue@PulseCore@@@detail@archive@boost@@QEAA@XZ
??0?$oserializer@Vxml_woarchive@archive@boost@@UCStatictics@IQueueLimiter@Queue@PulseCore@@@detail@archive@boost@@QEAA@XZ
??0?$oserializer@Vxml_woarchive@archive@boost@@UCStatistic@Scheduler@PulseCore@@@detail@archive@boost@@QEAA@XZ
??0?$oserializer@Vxml_woarchive@archive@boost@@V?$vector@VCSerializableItem@Queue@PulseCore@@V?$allocator@VCSerializableItem@Queue@PulseCore@@@std@@@std@@@detail@archive@boost@@QEAA@XZ
??0?$oserializer@Vxml_woarchive@archive@boost@@VCQueueSettings@Settings@PulseCore@@@detail@archive@boost@@QEAA@XZ
??0?$oserializer@Vxml_woarchive@archive@boost@@VCQueueStatictic@Queue@PulseCore@@@detail@archive@boost@@QEAA@XZ
??0?$oserializer@Vxml_woarchive@archive@boost@@VCSerializableItem@Queue@PulseCore@@@detail@archive@boost@@QEAA@XZ
??0?$oserializer@Vxml_woarchive@archive@boost@@VCSettingsImpl@Settings@PulseCore@@@detail@archive@boost@@QEAA@XZ
??0?$singleton@V?$extended_type_info_typeid@UCLicenseKeySerializer@?A0x7812619f@@@serialization@boost@@@serialization@boost@@IEAA@XZ
??0?$singleton@V?$extended_type_info_typeid@UCParamAgentId@CSerializableItem@Queue@PulseCore@@@serialization@boost@@@serialization@boost@@IEAA@XZ
??0?$singleton@V?$extended_type_info_typeid@UCParamAgentVersion@CSerializableItem@Queue@PulseCore@@@serialization@boost@@@serialization@boost@@IEAA@XZ
??0?$singleton@V?$extended_type_info_typeid@UCParamAlertId@CSerializableItem@Queue@PulseCore@@@serialization@boost@@@serialization@boost@@IEAA@XZ
??0?$singleton@V?$extended_type_info_typeid@UCParamAttempsCount@CStatictics@IQueueLimiter@Queue@PulseCore@@@serialization@boost@@@serialization@boost@@IEAA@XZ
??0?$singleton@V?$extended_type_info_typeid@UCParamBuffer@CSerializableItem@Queue@PulseCore@@@serialization@boost@@@serialization@boost@@IEAA@XZ
??0?$singleton@V?$extended_type_info_typeid@UCParamCreationTime@CSerializableItem@Queue@PulseCore@@@serialization@boost@@@serialization@boost@@IEAA@XZ
??0?$singleton@V?$extended_type_info_typeid@UCParamMaxConcurrentAlerts@CQueueSettings@Settings@PulseCore@@@serialization@boost@@@serialization@boost@@IEAA@XZ
??0?$singleton@V?$extended_type_info_typeid@UCParamMinimumAlertDelay@CQueueSettings@Settings@PulseCore@@@serialization@boost@@@serialization@boost@@IEAA@XZ
??0?$singleton@V?$extended_type_info_typeid@UCParamPeriodAmountLimit@CQueueSettings@Settings@PulseCore@@@serialization@boost@@@serialization@boost@@IEAA@XZ
??0?$singleton@V?$extended_type_info_typeid@UCParamPeriodDuration@CQueueSettings@Settings@PulseCore@@@serialization@boost@@@serialization@boost@@IEAA@XZ
??0?$singleton@V?$extended_type_info_typeid@UCParamPeriodStartDate@CStatictics@IQueueLimiter@Queue@PulseCore@@@serialization@boost@@@serialization@boost@@IEAA@XZ
??0?$singleton@V?$extended_type_info_typeid@UCParamPreviousAttemptDate@CStatictics@IQueueLimiter@Queue@PulseCore@@@serialization@boost@@@serialization@boost@@IEAA@XZ
??0?$singleton@V?$extended_type_info_typeid@UCStatictics@IQueueLimiter@Queue@PulseCore@@@serialization@boost@@@serialization@boost@@IEAA@XZ
??0?$singleton@V?$extended_type_info_typeid@UCStatistic@Scheduler@PulseCore@@@serialization@boost@@@serialization@boost@@IEAA@XZ
??0?$singleton@V?$extended_type_info_typeid@V?$vector@EV?$allocator@E@std@@@std@@@serialization@boost@@@serialization@boost@@IEAA@XZ
??0?$singleton@V?$extended_type_info_typeid@V?$vector@VCSerializableItem@Queue@PulseCore@@V?$allocator@VCSerializableItem@Queue@PulseCore@@@std@@@std@@@serialization@boost@@@serialization@boost@@IEAA@XZ
??0?$singleton@V?$extended_type_info_typeid@VCQueueSettings@Settings@PulseCore@@@serialization@boost@@@serialization@boost@@IEAA@XZ
??0?$singleton@V?$extended_type_info_typeid@VCQueueStatictic@Queue@PulseCore@@@serialization@boost@@@serialization@boost@@IEAA@XZ
??0?$singleton@V?$extended_type_info_typeid@VCSerializableItem@Queue@PulseCore@@@serialization@boost@@@serialization@boost@@IEAA@XZ
??0?$singleton@V?$extended_type_info_typeid@VCSettingsImpl@Settings@PulseCore@@@serialization@boost@@@serialization@boost@@IEAA@XZ
?get_const_instance@?$singleton@V?$extended_type_info_typeid@UCLicenseKeySerializer@?A0x7812619f@@@serialization@boost@@@serialization@boost@@SAAEBV?$extended_type_info_typeid@UCLicenseKeySerializer@?A0x7812619f@@@23@XZ
?get_const_instance@?$singleton@V?$extended_type_info_typeid@UCParamAgentId@CSerializableItem@Queue@PulseCore@@@serialization@boost@@@serialization@boost@@SAAEBV?$extended_type_info_typeid@UCParamAgentId@CSerializableItem@Queue@PulseCore@@@23@XZ
?get_const_instance@?$singleton@V?$extended_type_info_typeid@UCParamAgentVersion@CSerializableItem@Queue@PulseCore@@@serialization@boost@@@serialization@boost@@SAAEBV?$extended_type_info_typeid@UCParamAgentVersion@CSerializableItem@Queue@PulseCore@@@23@XZ
?get_const_instance@?$singleton@V?$extended_type_info_typeid@UCParamAlertId@CSerializableItem@Queue@PulseCore@@@serialization@boost@@@serialization@boost@@SAAEBV?$extended_type_info_typeid@UCParamAlertId@CSerializableItem@Queue@PulseCore@@@23@XZ
?get_const_instance@?$singleton@V?$extended_type_info_typeid@UCParamAttempsCount@CStatictics@IQueueLimiter@Queue@PulseCore@@@serialization@boost@@@serialization@boost@@SAAEBV?$extended_type_info_typeid@UCParamAttempsCount@CStatictics@IQueueLimiter@Queue@PulseCore@@@23@XZ
?get_const_instance@?$singleton@V?$extended_type_info_typeid@UCParamBuffer@CSerializableItem@Queue@PulseCore@@@serialization@boost@@@serialization@boost@@SAAEBV?$extended_type_info_typeid@UCParamBuffer@CSerializableItem@Queue@PulseCore@@@23@XZ
?get_const_instance@?$singleton@V?$extended_type_info_typeid@UCParamCreationTime@CSerializableItem@Queue@PulseCore@@@serialization@boost@@@serialization@boost@@SAAEBV?$extended_type_info_typeid@UCParamCreationTime@CSerializableItem@Queue@PulseCore@@@23@XZ
?get_const_instance@?$singleton@V?$extended_type_info_typeid@UCParamMaxConcurrentAlerts@CQueueSettings@Settings@PulseCore@@@serialization@boost@@@serialization@boost@@SAAEBV?$extended_type_info_typeid@UCParamMaxConcurrentAlerts@CQueueSettings@Settings@PulseCore@@@23@XZ
?get_const_instance@?$singleton@V?$extended_type_info_typeid@UCParamMinimumAlertDelay@CQueueSettings@Settings@PulseCore@@@serialization@boost@@@serialization@boost@@SAAEBV?$extended_type_info_typeid@UCParamMinimumAlertDelay@CQueueSettings@Settings@PulseCore@@@23@XZ
?get_const_instance@?$singleton@V?$extended_type_info_typeid@UCParamPeriodAmountLimit@CQueueSettings@Settings@PulseCore@@@serialization@boost@@@serialization@boost@@SAAEBV?$extended_type_info_typeid@UCParamPeriodAmountLimit@CQueueSettings@Settings@PulseCore@@@23@XZ
?get_const_instance@?$singleton@V?$extended_type_info_typeid@UCParamPeriodDuration@CQueueSettings@Settings@PulseCore@@@serialization@boost@@@serialization@boost@@SAAEBV?$extended_type_info_typeid@UCParamPeriodDuration@CQueueSettings@Settings@PulseCore@@@23@XZ
?get_const_instance@?$singleton@V?$extended_type_info_typeid@UCParamPeriodStartDate@CStatictics@IQueueLimiter@Queue@PulseCore@@@serialization@boost@@@serialization@boost@@SAAEBV?$extended_type_info_typeid@UCParamPeriodStartDate@CStatictics@IQueueLimiter@Queue@PulseCore@@@23@XZ
?get_const_instance@?$singleton@V?$extended_type_info_typeid@UCParamPreviousAttemptDate@CStatictics@IQueueLimiter@Queue@PulseCore@@@serialization@boost@@@serialization@boost@@SAAEBV?$extended_type_info_typeid@UCParamPreviousAttemptDate@CStatictics@IQueueLimiter@Queue@PulseCore@@@23@XZ
?get_const_instance@?$singleton@V?$extended_type_info_typeid@UCStatictics@IQueueLimiter@Queue@PulseCore@@@serialization@boost@@@serialization@boost@@SAAEBV?$extended_type_info_typeid@UCStatictics@IQueueLimiter@Queue@PulseCore@@@23@XZ
?get_const_instance@?$singleton@V?$extended_type_info_typeid@UCStatistic@Scheduler@PulseCore@@@serialization@boost@@@serialization@boost@@SAAEBV?$extended_type_info_typeid@UCStatistic@Scheduler@PulseCore@@@23@XZ
?get_const_instance@?$singleton@V?$extended_type_info_typeid@V?$vector@EV?$allocator@E@std@@@std@@@serialization@boost@@@serialization@boost@@SAAEBV?$extended_type_info_typeid@V?$vector@EV?$allocator@E@std@@@std@@@23@XZ
?get_const_instance@?$singleton@V?$extended_type_info_typeid@V?$vector@VCSerializableItem@Queue@PulseCore@@V?$allocator@VCSerializableItem@Queue@PulseCore@@@std@@@std@@@serialization@boost@@@serialization@boost@@SAAEBV?$extended_type_info_typeid@V?$vector@VCSerializableItem@Queue@PulseCore@@V?$allocator@VCSerializableItem@Queue@PulseCore@@@std@@@std@@@23@XZ
?get_const_instance@?$singleton@V?$extended_type_info_typeid@VCQueueSettings@Settings@PulseCore@@@serialization@boost@@@serialization@boost@@SAAEBV?$extended_type_info_typeid@VCQueueSettings@Settings@PulseCore@@@23@XZ
?get_const_instance@?$singleton@V?$extended_type_info_typeid@VCQueueStatictic@Queue@PulseCore@@@serialization@boost@@@serialization@boost@@SAAEBV?$extended_type_info_typeid@VCQueueStatictic@Queue@PulseCore@@@23@XZ
?get_const_instance@?$singleton@V?$extended_type_info_typeid@VCSerializableItem@Queue@PulseCore@@@serialization@boost@@@serialization@boost@@SAAEBV?$extended_type_info_typeid@VCSerializableItem@Queue@PulseCore@@@23@XZ
?get_const_instance@?$singleton@V?$extended_type_info_typeid@VCSettingsImpl@Settings@PulseCore@@@serialization@boost@@@serialization@boost@@SAAEBV?$extended_type_info_typeid@VCSettingsImpl@Settings@PulseCore@@@23@XZ
?get_const_instance@?$singleton@V?$iserializer@Vtext_iarchive@archive@boost@@UCLicenseKeySerializer@?A0x7812619f@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$iserializer@Vtext_iarchive@archive@boost@@UCLicenseKeySerializer@?A0x7812619f@@@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$iserializer@Vtext_iarchive@archive@boost@@V?$vector@EV?$allocator@E@std@@@std@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$iserializer@Vtext_iarchive@archive@boost@@V?$vector@EV?$allocator@E@std@@@std@@@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$iserializer@Vxml_wiarchive@archive@boost@@UCParamAgentId@CSerializableItem@Queue@PulseCore@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$iserializer@Vxml_wiarchive@archive@boost@@UCParamAgentId@CSerializableItem@Queue@PulseCore@@@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$iserializer@Vxml_wiarchive@archive@boost@@UCParamAgentVersion@CSerializableItem@Queue@PulseCore@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$iserializer@Vxml_wiarchive@archive@boost@@UCParamAgentVersion@CSerializableItem@Queue@PulseCore@@@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$iserializer@Vxml_wiarchive@archive@boost@@UCParamAlertId@CSerializableItem@Queue@PulseCore@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$iserializer@Vxml_wiarchive@archive@boost@@UCParamAlertId@CSerializableItem@Queue@PulseCore@@@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$iserializer@Vxml_wiarchive@archive@boost@@UCParamAttempsCount@CStatictics@IQueueLimiter@Queue@PulseCore@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$iserializer@Vxml_wiarchive@archive@boost@@UCParamAttempsCount@CStatictics@IQueueLimiter@Queue@PulseCore@@@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$iserializer@Vxml_wiarchive@archive@boost@@UCParamBuffer@CSerializableItem@Queue@PulseCore@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$iserializer@Vxml_wiarchive@archive@boost@@UCParamBuffer@CSerializableItem@Queue@PulseCore@@@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$iserializer@Vxml_wiarchive@archive@boost@@UCParamCreationTime@CSerializableItem@Queue@PulseCore@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$iserializer@Vxml_wiarchive@archive@boost@@UCParamCreationTime@CSerializableItem@Queue@PulseCore@@@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$iserializer@Vxml_wiarchive@archive@boost@@UCParamMaxConcurrentAlerts@CQueueSettings@Settings@PulseCore@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$iserializer@Vxml_wiarchive@archive@boost@@UCParamMaxConcurrentAlerts@CQueueSettings@Settings@PulseCore@@@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$iserializer@Vxml_wiarchive@archive@boost@@UCParamMinimumAlertDelay@CQueueSettings@Settings@PulseCore@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$iserializer@Vxml_wiarchive@archive@boost@@UCParamMinimumAlertDelay@CQueueSettings@Settings@PulseCore@@@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$iserializer@Vxml_wiarchive@archive@boost@@UCParamPeriodAmountLimit@CQueueSettings@Settings@PulseCore@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$iserializer@Vxml_wiarchive@archive@boost@@UCParamPeriodAmountLimit@CQueueSettings@Settings@PulseCore@@@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$iserializer@Vxml_wiarchive@archive@boost@@UCParamPeriodDuration@CQueueSettings@Settings@PulseCore@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$iserializer@Vxml_wiarchive@archive@boost@@UCParamPeriodDuration@CQueueSettings@Settings@PulseCore@@@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$iserializer@Vxml_wiarchive@archive@boost@@UCParamPeriodStartDate@CStatictics@IQueueLimiter@Queue@PulseCore@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$iserializer@Vxml_wiarchive@archive@boost@@UCParamPeriodStartDate@CStatictics@IQueueLimiter@Queue@PulseCore@@@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$iserializer@Vxml_wiarchive@archive@boost@@UCParamPreviousAttemptDate@CStatictics@IQueueLimiter@Queue@PulseCore@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$iserializer@Vxml_wiarchive@archive@boost@@UCParamPreviousAttemptDate@CStatictics@IQueueLimiter@Queue@PulseCore@@@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$iserializer@Vxml_wiarchive@archive@boost@@UCStatictics@IQueueLimiter@Queue@PulseCore@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$iserializer@Vxml_wiarchive@archive@boost@@UCStatictics@IQueueLimiter@Queue@PulseCore@@@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$iserializer@Vxml_wiarchive@archive@boost@@UCStatistic@Scheduler@PulseCore@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$iserializer@Vxml_wiarchive@archive@boost@@UCStatistic@Scheduler@PulseCore@@@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$iserializer@Vxml_wiarchive@archive@boost@@V?$vector@VCSerializableItem@Queue@PulseCore@@V?$allocator@VCSerializableItem@Queue@PulseCore@@@std@@@std@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$iserializer@Vxml_wiarchive@archive@boost@@V?$vector@VCSerializableItem@Queue@PulseCore@@V?$allocator@VCSerializableItem@Queue@PulseCore@@@std@@@std@@@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$iserializer@Vxml_wiarchive@archive@boost@@VCQueueSettings@Settings@PulseCore@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$iserializer@Vxml_wiarchive@archive@boost@@VCQueueSettings@Settings@PulseCore@@@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$iserializer@Vxml_wiarchive@archive@boost@@VCQueueStatictic@Queue@PulseCore@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$iserializer@Vxml_wiarchive@archive@boost@@VCQueueStatictic@Queue@PulseCore@@@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$iserializer@Vxml_wiarchive@archive@boost@@VCSerializableItem@Queue@PulseCore@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$iserializer@Vxml_wiarchive@archive@boost@@VCSerializableItem@Queue@PulseCore@@@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$iserializer@Vxml_wiarchive@archive@boost@@VCSettingsImpl@Settings@PulseCore@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$iserializer@Vxml_wiarchive@archive@boost@@VCSettingsImpl@Settings@PulseCore@@@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$map@Vtext_iarchive@archive@boost@@@extra_detail@detail@archive@boost@@@serialization@boost@@SAAEBV?$map@Vtext_iarchive@archive@boost@@@extra_detail@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$map@Vtext_oarchive@archive@boost@@@extra_detail@detail@archive@boost@@@serialization@boost@@SAAEBV?$map@Vtext_oarchive@archive@boost@@@extra_detail@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$map@Vxml_wiarchive@archive@boost@@@extra_detail@detail@archive@boost@@@serialization@boost@@SAAEBV?$map@Vxml_wiarchive@archive@boost@@@extra_detail@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$map@Vxml_woarchive@archive@boost@@@extra_detail@detail@archive@boost@@@serialization@boost@@SAAEBV?$map@Vxml_woarchive@archive@boost@@@extra_detail@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$multiset@PEBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PEBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@SAAEBV?$multiset@PEBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PEBVextended_type_info@serialization@boost@@@std@@@std@@XZ
?get_const_instance@?$singleton@V?$multiset@PEBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PEBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@std@@@std@@@serialization@boost@@SAAEBV?$multiset@PEBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PEBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@std@@@std@@XZ
?get_const_instance@?$singleton@V?$oserializer@Vtext_oarchive@archive@boost@@UCLicenseKeySerializer@?A0x7812619f@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$oserializer@Vtext_oarchive@archive@boost@@UCLicenseKeySerializer@?A0x7812619f@@@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$oserializer@Vtext_oarchive@archive@boost@@V?$vector@EV?$allocator@E@std@@@std@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$oserializer@Vtext_oarchive@archive@boost@@V?$vector@EV?$allocator@E@std@@@std@@@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$oserializer@Vxml_woarchive@archive@boost@@UCParamAgentId@CSerializableItem@Queue@PulseCore@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$oserializer@Vxml_woarchive@archive@boost@@UCParamAgentId@CSerializableItem@Queue@PulseCore@@@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$oserializer@Vxml_woarchive@archive@boost@@UCParamAgentVersion@CSerializableItem@Queue@PulseCore@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$oserializer@Vxml_woarchive@archive@boost@@UCParamAgentVersion@CSerializableItem@Queue@PulseCore@@@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$oserializer@Vxml_woarchive@archive@boost@@UCParamAlertId@CSerializableItem@Queue@PulseCore@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$oserializer@Vxml_woarchive@archive@boost@@UCParamAlertId@CSerializableItem@Queue@PulseCore@@@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$oserializer@Vxml_woarchive@archive@boost@@UCParamAttempsCount@CStatictics@IQueueLimiter@Queue@PulseCore@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$oserializer@Vxml_woarchive@archive@boost@@UCParamAttempsCount@CStatictics@IQueueLimiter@Queue@PulseCore@@@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$oserializer@Vxml_woarchive@archive@boost@@UCParamBuffer@CSerializableItem@Queue@PulseCore@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$oserializer@Vxml_woarchive@archive@boost@@UCParamBuffer@CSerializableItem@Queue@PulseCore@@@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$oserializer@Vxml_woarchive@archive@boost@@UCParamCreationTime@CSerializableItem@Queue@PulseCore@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$oserializer@Vxml_woarchive@archive@boost@@UCParamCreationTime@CSerializableItem@Queue@PulseCore@@@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$oserializer@Vxml_woarchive@archive@boost@@UCParamMaxConcurrentAlerts@CQueueSettings@Settings@PulseCore@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$oserializer@Vxml_woarchive@archive@boost@@UCParamMaxConcurrentAlerts@CQueueSettings@Settings@PulseCore@@@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$oserializer@Vxml_woarchive@archive@boost@@UCParamMinimumAlertDelay@CQueueSettings@Settings@PulseCore@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$oserializer@Vxml_woarchive@archive@boost@@UCParamMinimumAlertDelay@CQueueSettings@Settings@PulseCore@@@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$oserializer@Vxml_woarchive@archive@boost@@UCParamPeriodAmountLimit@CQueueSettings@Settings@PulseCore@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$oserializer@Vxml_woarchive@archive@boost@@UCParamPeriodAmountLimit@CQueueSettings@Settings@PulseCore@@@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$oserializer@Vxml_woarchive@archive@boost@@UCParamPeriodDuration@CQueueSettings@Settings@PulseCore@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$oserializer@Vxml_woarchive@archive@boost@@UCParamPeriodDuration@CQueueSettings@Settings@PulseCore@@@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$oserializer@Vxml_woarchive@archive@boost@@UCParamPeriodStartDate@CStatictics@IQueueLimiter@Queue@PulseCore@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$oserializer@Vxml_woarchive@archive@boost@@UCParamPeriodStartDate@CStatictics@IQueueLimiter@Queue@PulseCore@@@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$oserializer@Vxml_woarchive@archive@boost@@UCParamPreviousAttemptDate@CStatictics@IQueueLimiter@Queue@PulseCore@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$oserializer@Vxml_woarchive@archive@boost@@UCParamPreviousAttemptDate@CStatictics@IQueueLimiter@Queue@PulseCore@@@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$oserializer@Vxml_woarchive@archive@boost@@UCStatictics@IQueueLimiter@Queue@PulseCore@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$oserializer@Vxml_woarchive@archive@boost@@UCStatictics@IQueueLimiter@Queue@PulseCore@@@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$oserializer@Vxml_woarchive@archive@boost@@UCStatistic@Scheduler@PulseCore@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$oserializer@Vxml_woarchive@archive@boost@@UCStatistic@Scheduler@PulseCore@@@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$oserializer@Vxml_woarchive@archive@boost@@V?$vector@VCSerializableItem@Queue@PulseCore@@V?$allocator@VCSerializableItem@Queue@PulseCore@@@std@@@std@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$oserializer@Vxml_woarchive@archive@boost@@V?$vector@VCSerializableItem@Queue@PulseCore@@V?$allocator@VCSerializableItem@Queue@PulseCore@@@std@@@std@@@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$oserializer@Vxml_woarchive@archive@boost@@VCQueueSettings@Settings@PulseCore@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$oserializer@Vxml_woarchive@archive@boost@@VCQueueSettings@Settings@PulseCore@@@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$oserializer@Vxml_woarchive@archive@boost@@VCQueueStatictic@Queue@PulseCore@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$oserializer@Vxml_woarchive@archive@boost@@VCQueueStatictic@Queue@PulseCore@@@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$oserializer@Vxml_woarchive@archive@boost@@VCSerializableItem@Queue@PulseCore@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$oserializer@Vxml_woarchive@archive@boost@@VCSerializableItem@Queue@PulseCore@@@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$oserializer@Vxml_woarchive@archive@boost@@VCSettingsImpl@Settings@PulseCore@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$oserializer@Vxml_woarchive@archive@boost@@VCSettingsImpl@Settings@PulseCore@@@detail@archive@3@XZ
?get_lock@singleton_module@serialization@boost@@AEAAAEA_NXZ
?get_mutable_instance@?$singleton@V?$map@Vtext_iarchive@archive@boost@@@extra_detail@detail@archive@boost@@@serialization@boost@@SAAEAV?$map@Vtext_iarchive@archive@boost@@@extra_detail@detail@archive@3@XZ
?get_mutable_instance@?$singleton@V?$map@Vtext_oarchive@archive@boost@@@extra_detail@detail@archive@boost@@@serialization@boost@@SAAEAV?$map@Vtext_oarchive@archive@boost@@@extra_detail@detail@archive@3@XZ
?get_mutable_instance@?$singleton@V?$map@Vxml_wiarchive@archive@boost@@@extra_detail@detail@archive@boost@@@serialization@boost@@SAAEAV?$map@Vxml_wiarchive@archive@boost@@@extra_detail@detail@archive@3@XZ
?get_mutable_instance@?$singleton@V?$map@Vxml_woarchive@archive@boost@@@extra_detail@detail@archive@boost@@@serialization@boost@@SAAEAV?$map@Vxml_woarchive@archive@boost@@@extra_detail@detail@archive@3@XZ
?get_mutable_instance@?$singleton@V?$multiset@PEBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PEBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@SAAEAV?$multiset@PEBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PEBVextended_type_info@serialization@boost@@@std@@@std@@XZ
?get_mutable_instance@?$singleton@V?$multiset@PEBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PEBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@std@@@std@@@serialization@boost@@SAAEAV?$multiset@PEBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PEBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@std@@@std@@XZ
?is_destroyed@?$singleton@V?$map@Vtext_iarchive@archive@boost@@@extra_detail@detail@archive@boost@@@serialization@boost@@SA_NXZ
?is_destroyed@?$singleton@V?$map@Vtext_oarchive@archive@boost@@@extra_detail@detail@archive@boost@@@serialization@boost@@SA_NXZ
?is_destroyed@?$singleton@V?$map@Vxml_wiarchive@archive@boost@@@extra_detail@detail@archive@boost@@@serialization@boost@@SA_NXZ
?is_destroyed@?$singleton@V?$map@Vxml_woarchive@archive@boost@@@extra_detail@detail@archive@boost@@@serialization@boost@@SA_NXZ
?is_destroyed@?$singleton@V?$multiset@PEBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PEBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@SA_NXZ
?is_destroyed@?$singleton@V?$multiset@PEBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PEBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@std@@@std@@@serialization@boost@@SA_NXZ
?is_locked@singleton_module@serialization@boost@@QEAA_NXZ
?load_object_data@?$iserializer@Vtext_iarchive@archive@boost@@UCLicenseKeySerializer@?A0x7812619f@@@detail@archive@boost@@UEBAXAEAVbasic_iarchive@234@PEAXI@Z
?load_object_data@?$iserializer@Vtext_iarchive@archive@boost@@V?$vector@EV?$allocator@E@std@@@std@@@detail@archive@boost@@UEBAXAEAVbasic_iarchive@234@PEAXI@Z
?load_object_data@?$iserializer@Vxml_wiarchive@archive@boost@@UCParamAgentId@CSerializableItem@Queue@PulseCore@@@detail@archive@boost@@UEBAXAEAVbasic_iarchive@234@PEAXI@Z
?load_object_data@?$iserializer@Vxml_wiarchive@archive@boost@@UCParamAgentVersion@CSerializableItem@Queue@PulseCore@@@detail@archive@boost@@UEBAXAEAVbasic_iarchive@234@PEAXI@Z
?load_object_data@?$iserializer@Vxml_wiarchive@archive@boost@@UCParamAlertId@CSerializableItem@Queue@PulseCore@@@detail@archive@boost@@UEBAXAEAVbasic_iarchive@234@PEAXI@Z
?load_object_data@?$iserializer@Vxml_wiarchive@archive@boost@@UCParamAttempsCount@CStatictics@IQueueLimiter@Queue@PulseCore@@@detail@archive@boost@@UEBAXAEAVbasic_iarchive@234@PEAXI@Z
?load_object_data@?$iserializer@Vxml_wiarchive@archive@boost@@UCParamBuffer@CSerializableItem@Queue@PulseCore@@@detail@archive@boost@@UEBAXAEAVbasic_iarchive@234@PEAXI@Z
?load_object_data@?$iserializer@Vxml_wiarchive@archive@boost@@UCParamCreationTime@CSerializableItem@Queue@PulseCore@@@detail@archive@boost@@UEBAXAEAVbasic_iarchive@234@PEAXI@Z
?load_object_data@?$iserializer@Vxml_wiarchive@archive@boost@@UCParamMaxConcurrentAlerts@CQueueSettings@Settings@PulseCore@@@detail@archive@boost@@UEBAXAEAVbasic_iarchive@234@PEAXI@Z
?load_object_data@?$iserializer@Vxml_wiarchive@archive@boost@@UCParamMinimumAlertDelay@CQueueSettings@Settings@PulseCore@@@detail@archive@boost@@UEBAXAEAVbasic_iarchive@234@PEAXI@Z
?load_object_data@?$iserializer@Vxml_wiarchive@archive@boost@@UCParamPeriodAmountLimit@CQueueSettings@Settings@PulseCore@@@detail@archive@boost@@UEBAXAEAVbasic_iarchive@234@PEAXI@Z
?load_object_data@?$iserializer@Vxml_wiarchive@archive@boost@@UCParamPeriodDuration@CQueueSettings@Settings@PulseCore@@@detail@archive@boost@@UEBAXAEAVbasic_iarchive@234@PEAXI@Z
?load_object_data@?$iserializer@Vxml_wiarchive@archive@boost@@UCParamPeriodStartDate@CStatictics@IQueueLimiter@Queue@PulseCore@@@detail@archive@boost@@UEBAXAEAVbasic_iarchive@234@PEAXI@Z
?load_object_data@?$iserializer@Vxml_wiarchive@archive@boost@@UCParamPreviousAttemptDate@CStatictics@IQueueLimiter@Queue@PulseCore@@@detail@archive@boost@@UEBAXAEAVbasic_iarchive@234@PEAXI@Z
?load_object_data@?$iserializer@Vxml_wiarchive@archive@boost@@UCStatictics@IQueueLimiter@Queue@PulseCore@@@detail@archive@boost@@UEBAXAEAVbasic_iarchive@234@PEAXI@Z
?load_object_data@?$iserializer@Vxml_wiarchive@archive@boost@@UCStatistic@Scheduler@PulseCore@@@detail@archive@boost@@UEBAXAEAVbasic_iarchive@234@PEAXI@Z
?load_object_data@?$iserializer@Vxml_wiarchive@archive@boost@@V?$vector@VCSerializableItem@Queue@PulseCore@@V?$allocator@VCSerializableItem@Queue@PulseCore@@@std@@@std@@@detail@archive@boost@@UEBAXAEAVbasic_iarchive@234@PEAXI@Z
?load_object_data@?$iserializer@Vxml_wiarchive@archive@boost@@VCQueueSettings@Settings@PulseCore@@@detail@archive@boost@@UEBAXAEAVbasic_iarchive@234@PEAXI@Z
?load_object_data@?$iserializer@Vxml_wiarchive@archive@boost@@VCQueueStatictic@Queue@PulseCore@@@detail@archive@boost@@UEBAXAEAVbasic_iarchive@234@PEAXI@Z
?load_object_data@?$iserializer@Vxml_wiarchive@archive@boost@@VCSerializableItem@Queue@PulseCore@@@detail@archive@boost@@UEBAXAEAVbasic_iarchive@234@PEAXI@Z
?load_object_data@?$iserializer@Vxml_wiarchive@archive@boost@@VCSettingsImpl@Settings@PulseCore@@@detail@archive@boost@@UEBAXAEAVbasic_iarchive@234@PEAXI@Z
?lock@?1??get_lock@singleton_module@serialization@boost@@AEAAAEA_NXZ@4_NA
?lock@singleton_module@serialization@boost@@QEAAXXZ
?save_object_data@?$oserializer@Vtext_oarchive@archive@boost@@UCLicenseKeySerializer@?A0x7812619f@@@detail@archive@boost@@UEBAXAEAVbasic_oarchive@234@PEBX@Z
?save_object_data@?$oserializer@Vtext_oarchive@archive@boost@@V?$vector@EV?$allocator@E@std@@@std@@@detail@archive@boost@@UEBAXAEAVbasic_oarchive@234@PEBX@Z
?save_object_data@?$oserializer@Vxml_woarchive@archive@boost@@UCParamAgentId@CSerializableItem@Queue@PulseCore@@@detail@archive@boost@@UEBAXAEAVbasic_oarchive@234@PEBX@Z
?save_object_data@?$oserializer@Vxml_woarchive@archive@boost@@UCParamAgentVersion@CSerializableItem@Queue@PulseCore@@@detail@archive@boost@@UEBAXAEAVbasic_oarchive@234@PEBX@Z
?save_object_data@?$oserializer@Vxml_woarchive@archive@boost@@UCParamAlertId@CSerializableItem@Queue@PulseCore@@@detail@archive@boost@@UEBAXAEAVbasic_oarchive@234@PEBX@Z
?save_object_data@?$oserializer@Vxml_woarchive@archive@boost@@UCParamAttempsCount@CStatictics@IQueueLimiter@Queue@PulseCore@@@detail@archive@boost@@UEBAXAEAVbasic_oarchive@234@PEBX@Z
?save_object_data@?$oserializer@Vxml_woarchive@archive@boost@@UCParamBuffer@CSerializableItem@Queue@PulseCore@@@detail@archive@boost@@UEBAXAEAVbasic_oarchive@234@PEBX@Z
?save_object_data@?$oserializer@Vxml_woarchive@archive@boost@@UCParamCreationTime@CSerializableItem@Queue@PulseCore@@@detail@archive@boost@@UEBAXAEAVbasic_oarchive@234@PEBX@Z
?save_object_data@?$oserializer@Vxml_woarchive@archive@boost@@UCParamMaxConcurrentAlerts@CQueueSettings@Settings@PulseCore@@@detail@archive@boost@@UEBAXAEAVbasic_oarchive@234@PEBX@Z
?save_object_data@?$oserializer@Vxml_woarchive@archive@boost@@UCParamMinimumAlertDelay@CQueueSettings@Settings@PulseCore@@@detail@archive@boost@@UEBAXAEAVbasic_oarchive@234@PEBX@Z
?save_object_data@?$oserializer@Vxml_woarchive@archive@boost@@UCParamPeriodAmountLimit@CQueueSettings@Settings@PulseCore@@@detail@archive@boost@@UEBAXAEAVbasic_oarchive@234@PEBX@Z
?save_object_data@?$oserializer@Vxml_woarchive@archive@boost@@UCParamPeriodDuration@CQueueSettings@Settings@PulseCore@@@detail@archive@boost@@UEBAXAEAVbasic_oarchive@234@PEBX@Z
?save_object_data@?$oserializer@Vxml_woarchive@archive@boost@@UCParamPeriodStartDate@CStatictics@IQueueLimiter@Queue@PulseCore@@@detail@archive@boost@@UEBAXAEAVbasic_oarchive@234@PEBX@Z
?save_object_data@?$oserializer@Vxml_woarchive@archive@boost@@UCParamPreviousAttemptDate@CStatictics@IQueueLimiter@Queue@PulseCore@@@detail@archive@boost@@UEBAXAEAVbasic_oarchive@234@PEBX@Z
?save_object_data@?$oserializer@Vxml_woarchive@archive@boost@@UCStatictics@IQueueLimiter@Queue@PulseCore@@@detail@archive@boost@@UEBAXAEAVbasic_oarchive@234@PEBX@Z
?save_object_data@?$oserializer@Vxml_woarchive@archive@boost@@UCStatistic@Scheduler@PulseCore@@@detail@archive@boost@@UEBAXAEAVbasic_oarchive@234@PEBX@Z
?save_object_data@?$oserializer@Vxml_woarchive@archive@boost@@V?$vector@VCSerializableItem@Queue@PulseCore@@V?$allocator@VCSerializableItem@Queue@PulseCore@@@std@@@std@@@detail@archive@boost@@UEBAXAEAVbasic_oarchive@234@PEBX@Z
?save_object_data@?$oserializer@Vxml_woarchive@archive@boost@@VCQueueSettings@Settings@PulseCore@@@detail@archive@boost@@UEBAXAEAVbasic_oarchive@234@PEBX@Z
?save_object_data@?$oserializer@Vxml_woarchive@archive@boost@@VCQueueStatictic@Queue@PulseCore@@@detail@archive@boost@@UEBAXAEAVbasic_oarchive@234@PEBX@Z
?save_object_data@?$oserializer@Vxml_woarchive@archive@boost@@VCSerializableItem@Queue@PulseCore@@@detail@archive@boost@@UEBAXAEAVbasic_oarchive@234@PEBX@Z
?save_object_data@?$oserializer@Vxml_woarchive@archive@boost@@VCSettingsImpl@Settings@PulseCore@@@detail@archive@boost@@UEBAXAEAVbasic_oarchive@234@PEBX@Z
?unlock@singleton_module@serialization@boost@@QEAAXXZ

Sections

.text
Size: 3.9MB - Virtual size: 3.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 896KB - Virtual size: 895KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 164KB - Virtual size: 181KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 125KB - Virtual size: 125KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 128KB - Virtual size: 127KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ReviverSoftSmartMonitor.mab
Settings.exe
.exe windows:6 windows x64 arch:x64

a22c16abdd627faf8710faa9988a7bc0

Code Sign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2013, 12:00

Not After

22/10/2028, 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0f:bf:3b:b9:74:d5:e1:73:60:c6:94:ee:28:63:cd:81
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

19/12/2019, 00:00

Not After

09/02/2022, 12:00

Subject

CN=Corel Corporation,OU=Corel Corporation,O=Corel Corporation,L=Ottawa,ST=Ontario,C=CA

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0e:1e:c7:ea:db:85:2d:77:64:b0:03:df:59:26:79:61:bc:4d:4c:5e
Signer

Actual PE Digest

0e:1e:c7:ea:db:85:2d:77:64:b0:03:df:59:26:79:61:bc:4d:4c:5e

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

CreateEventA
VerifyVersionInfoW
WideCharToMultiByte
LocalAlloc
GetCurrentProcess
InitializeCriticalSectionAndSpinCount
WaitForSingleObjectEx
OpenThread
ReleaseMutex
CreateMutexW
ExpandEnvironmentStringsW
GetFileAttributesExW
GetUserDefaultLangID
GetFileAttributesW
GetCurrentProcessId
GetCurrentThreadId
CreateThread
CreateEventW
SetEndOfFile
CreateFileW
WriteConsoleW
SetStdHandle
SetEnvironmentVariableA
WaitForSingleObject
GetEnvironmentStringsW
GetCommandLineA
GetOEMCP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
SetFilePointerEx
ReadConsoleW
ReadFile
GetConsoleMode
GetConsoleCP
FlushFileBuffers
GetTimeZoneInformation
EnumSystemLocalesW
VerSetConditionMask
IsValidLocale
GetTimeFormatW
GetDateFormatW
GetFileType
SetEvent
SetCurrentDirectoryW
GetCommandLineW
WaitForMultipleObjects
LocalFree
TerminateProcess
Sleep
SetLastError
CloseHandle
DecodePointer
MultiByteToWideChar
FindResourceW
lstrcmpiW
SizeofResource
LockResource
LoadResource
LoadLibraryExW
RaiseException
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
FreeLibrary
FindResourceExW
DeleteCriticalSection
InitializeCriticalSectionEx
LeaveCriticalSection
EnterCriticalSection
GetACP
WriteFile
GetStdHandle
ExitProcess
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
InterlockedPushEntrySList
RtlUnwindEx
RtlPcToFileHeader
GetStartupInfoW
InitializeSListHead
IsProcessorFeaturePresent
GetUserDefaultLCID
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetProcessHeap
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
HeapDestroy
GetLastError
FreeEnvironmentStringsW
IsDebuggerPresent
OutputDebugStringW
GetStringTypeW
EncodePointer
SwitchToThread
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
CompareStringW
LCMapStringW
GetLocaleInfoW
GetCPInfo
QueryPerformanceCounter
QueryPerformanceFrequency
ResetEvent
ReleaseSemaphore
WaitForMultipleObjectsEx
OpenEventA
SetWaitableTimer
ResumeThread
GetModuleHandleA
CreateWaitableTimerA
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
RtlUnwind

user32

GetMessageW
TranslateMessage
DispatchMessageW
CharUpperW
CharNextW
PostThreadMessageW

shell32

SHGetFolderPathW
SHCreateDirectoryExW
ShellExecuteW

ole32

CoRevokeClassObject
CoResumeClassObjects
CoAddRefServerProcess
CoReleaseServerProcess
CoUninitialize
StringFromGUID2
CoInitialize
CoInitializeEx
CoInitializeSecurity
CoRegisterClassObject
CoTaskMemFree
CoTaskMemAlloc
CoCreateInstance
CoTaskMemRealloc
CoSetProxyBlanket

oleaut32

SysAllocString
SysFreeString
SysStringLen
LoadTypeLi
LoadRegTypeLi
RegisterTypeLi
UnRegisterTypeLi
VariantInit
VariantClear
VarUI4FromStr
SysAllocStringLen

advapi32

CryptDestroyKey
CryptDeriveKey
CryptReleaseContext
RegCloseKey
RegCreateKeyExW
ConvertStringSidToSidW
LookupAccountSidW
UnlockServiceDatabase
QueryServiceConfigW
LockServiceDatabase
CryptDestroyHash
CryptHashData
CryptCreateHash
CryptAcquireContextW
LookupPrivilegeValueW
AdjustTokenPrivileges
RegQueryValueExW
ConvertSidToStringSidW
StartServiceW
OpenServiceW
OpenSCManagerW
ControlService
CloseServiceHandle
ChangeServiceConfigW
GetTokenInformation
OpenProcessToken
CreateProcessAsUserW
RegSetValueExW
RegQueryInfoKeyW
RegOpenKeyExW
RegEnumKeyExW
RegDeleteValueW
RegDeleteKeyW
CryptDecrypt

wtsapi32

WTSQuerySessionInformationW
WTSFreeMemory
WTSEnumerateSessionsW
WTSQueryUserToken

userenv

CreateEnvironmentBlock
DestroyEnvironmentBlock

version

VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW

wintrust

WinVerifyTrust

crypt32

CryptMsgGetParam
CertCloseStore
CryptMsgClose
CertFreeCertificateContext
CertGetNameStringW
CryptQueryObject
CertFindCertificateInStore

Exports

Exports

??0?$oserializer@Vtext_oarchive@archive@boost@@V?$set@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@std@@@detail@archive@boost@@QEAA@XZ
??0?$oserializer@Vtext_oarchive@archive@boost@@VCSMSettingsStorage@PulseService@@@detail@archive@boost@@QEAA@XZ
??0?$singleton@V?$extended_type_info_typeid@V?$set@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@std@@@serialization@boost@@@serialization@boost@@IEAA@XZ
??0?$singleton@V?$extended_type_info_typeid@VCSMSettingsStorage@PulseService@@@serialization@boost@@@serialization@boost@@IEAA@XZ
?get_const_instance@?$singleton@V?$extended_type_info_typeid@V?$set@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@std@@@serialization@boost@@@serialization@boost@@SAAEBV?$extended_type_info_typeid@V?$set@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@std@@@23@XZ
?get_const_instance@?$singleton@V?$extended_type_info_typeid@VCSMSettingsStorage@PulseService@@@serialization@boost@@@serialization@boost@@SAAEBV?$extended_type_info_typeid@VCSMSettingsStorage@PulseService@@@23@XZ
?get_const_instance@?$singleton@V?$iserializer@Vtext_iarchive@archive@boost@@V?$set@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@std@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$iserializer@Vtext_iarchive@archive@boost@@V?$set@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@std@@@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$iserializer@Vtext_iarchive@archive@boost@@VCSMSettingsStorage@PulseService@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$iserializer@Vtext_iarchive@archive@boost@@VCSMSettingsStorage@PulseService@@@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$map@Vtext_iarchive@archive@boost@@@extra_detail@detail@archive@boost@@@serialization@boost@@SAAEBV?$map@Vtext_iarchive@archive@boost@@@extra_detail@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$map@Vtext_oarchive@archive@boost@@@extra_detail@detail@archive@boost@@@serialization@boost@@SAAEBV?$map@Vtext_oarchive@archive@boost@@@extra_detail@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$multiset@PEBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PEBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@SAAEBV?$multiset@PEBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PEBVextended_type_info@serialization@boost@@@std@@@std@@XZ
?get_const_instance@?$singleton@V?$multiset@PEBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PEBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@std@@@std@@@serialization@boost@@SAAEBV?$multiset@PEBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PEBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@std@@@std@@XZ
?get_const_instance@?$singleton@V?$oserializer@Vtext_oarchive@archive@boost@@V?$set@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@std@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$oserializer@Vtext_oarchive@archive@boost@@V?$set@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@std@@@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$oserializer@Vtext_oarchive@archive@boost@@VCSMSettingsStorage@PulseService@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$oserializer@Vtext_oarchive@archive@boost@@VCSMSettingsStorage@PulseService@@@detail@archive@3@XZ
?get_lock@singleton_module@serialization@boost@@AEAAAEA_NXZ
?get_mutable_instance@?$singleton@V?$map@Vtext_iarchive@archive@boost@@@extra_detail@detail@archive@boost@@@serialization@boost@@SAAEAV?$map@Vtext_iarchive@archive@boost@@@extra_detail@detail@archive@3@XZ
?get_mutable_instance@?$singleton@V?$map@Vtext_oarchive@archive@boost@@@extra_detail@detail@archive@boost@@@serialization@boost@@SAAEAV?$map@Vtext_oarchive@archive@boost@@@extra_detail@detail@archive@3@XZ
?get_mutable_instance@?$singleton@V?$multiset@PEBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PEBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@SAAEAV?$multiset@PEBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PEBVextended_type_info@serialization@boost@@@std@@@std@@XZ
?get_mutable_instance@?$singleton@V?$multiset@PEBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PEBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@std@@@std@@@serialization@boost@@SAAEAV?$multiset@PEBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PEBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@std@@@std@@XZ
?is_destroyed@?$singleton@V?$map@Vtext_iarchive@archive@boost@@@extra_detail@detail@archive@boost@@@serialization@boost@@SA_NXZ
?is_destroyed@?$singleton@V?$map@Vtext_oarchive@archive@boost@@@extra_detail@detail@archive@boost@@@serialization@boost@@SA_NXZ
?is_destroyed@?$singleton@V?$multiset@PEBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PEBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@SA_NXZ
?is_destroyed@?$singleton@V?$multiset@PEBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PEBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@std@@@std@@@serialization@boost@@SA_NXZ
?is_locked@singleton_module@serialization@boost@@QEAA_NXZ
?load_object_data@?$iserializer@Vtext_iarchive@archive@boost@@V?$set@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@std@@@detail@archive@boost@@UEBAXAEAVbasic_iarchive@234@PEAXI@Z
?load_object_data@?$iserializer@Vtext_iarchive@archive@boost@@VCSMSettingsStorage@PulseService@@@detail@archive@boost@@UEBAXAEAVbasic_iarchive@234@PEAXI@Z
?lock@?1??get_lock@singleton_module@serialization@boost@@AEAAAEA_NXZ@4_NA
?lock@singleton_module@serialization@boost@@QEAAXXZ
?save_object_data@?$oserializer@Vtext_oarchive@archive@boost@@V?$set@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@std@@@detail@archive@boost@@UEBAXAEAVbasic_oarchive@234@PEBX@Z
?save_object_data@?$oserializer@Vtext_oarchive@archive@boost@@VCSMSettingsStorage@PulseService@@@detail@archive@boost@@UEBAXAEAVbasic_oarchive@234@PEBX@Z
?unlock@singleton_module@serialization@boost@@QEAAXXZ

Sections

.text
Size: 706KB - Virtual size: 705KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 276KB - Virtual size: 276KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 22KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Settings.mab
apps

Sharing

General

Malware Config

Signatures

Files

1f23f452093b5c1ff091a2f9fb4fa3e9

Code Sign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08Certificate

Extended Key Usages

Key Usages

0f:bf:3b:b9:74:d5:e1:73:60:c6:94:ee:28:63:cd:81Certificate

Extended Key Usages

Key Usages

a0:a8:fb:24:17:1b:ac:d6:e7:f4:e2:d7:d3:72:d8:a0:51:6e:03:27Signer

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

Sections

.text Size: 25KB - Virtual size: 25KB

.rdata Size: 5KB - Virtual size: 4KB

.data Size: 1KB - Virtual size: 128KB

.ndata Size: - Virtual size: 76KB

.rsrc Size: 129KB - Virtual size: 129KB

fc0224e99e736751432961db63a41b76

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

ole32

Exports

Exports

Sections

.text Size: 8KB - Virtual size: 7KB

.rdata Size: 1024B - Virtual size: 867B

.data Size: 512B - Virtual size: 120B

.reloc Size: 1024B - Virtual size: 638B

a4f1b9062c2ba7543824a9d83dc6b8ca

Code Sign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08Certificate

Extended Key Usages

Key Usages

0f:bf:3b:b9:74:d5:e1:73:60:c6:94:ee:28:63:cd:81Certificate

Extended Key Usages

Key Usages

d8:72:01:4e:56:3b:2f:83:d5:7e:69:2f:83:bc:52:26:6a:a6:88:e2Signer

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

shell32

ole32

oleaut32

advapi32

wtsapi32

userenv

version

wintrust

crypt32

winhttp

wininet

Exports

Exports

Sections

.text Size: 951KB - Virtual size: 951KB

.rdata Size: 355KB - Virtual size: 354KB

.data Size: 60KB - Virtual size: 72KB

.pdata Size: 47KB - Virtual size: 47KB

.rsrc Size: 2KB - Virtual size: 2KB

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

0f:bf:3b:b9:74:d5:e1:73:60:c6:94:ee:28:63:cd:81
Certificate

a0:a8:fb:24:17:1b:ac:d6:e7:f4:e2:d7:d3:72:d8:a0:51:6e:03:27
Signer

.text
Size: 25KB - Virtual size: 25KB

.rdata
Size: 5KB - Virtual size: 4KB

.data
Size: 1KB - Virtual size: 128KB

.ndata
Size: - Virtual size: 76KB

.rsrc
Size: 129KB - Virtual size: 129KB

.text
Size: 8KB - Virtual size: 7KB

.rdata
Size: 1024B - Virtual size: 867B

.data
Size: 512B - Virtual size: 120B

.reloc
Size: 1024B - Virtual size: 638B

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

0f:bf:3b:b9:74:d5:e1:73:60:c6:94:ee:28:63:cd:81
Certificate

d8:72:01:4e:56:3b:2f:83:d5:7e:69:2f:83:bc:52:26:6a:a6:88:e2
Signer

.text
Size: 951KB - Virtual size: 951KB

.rdata
Size: 355KB - Virtual size: 354KB

.data
Size: 60KB - Virtual size: 72KB

.pdata
Size: 47KB - Virtual size: 47KB

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 8KB - Virtual size: 8KB

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

0f:bf:3b:b9:74:d5:e1:73:60:c6:94:ee:28:63:cd:81
Certificate

79:da:53:3f:84:0f:cd:18:ec:14:f6:16:7a:a1:13:f8:6a:4f:48:20
Signer

.text
Size: 3.9MB - Virtual size: 3.9MB

.rdata
Size: 896KB - Virtual size: 895KB

.data
Size: 164KB - Virtual size: 181KB

.pdata
Size: 125KB - Virtual size: 125KB

.rsrc
Size: 128KB - Virtual size: 127KB

.reloc
Size: 20KB - Virtual size: 20KB

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

0f:bf:3b:b9:74:d5:e1:73:60:c6:94:ee:28:63:cd:81
Certificate

0e:1e:c7:ea:db:85:2d:77:64:b0:03:df:59:26:79:61:bc:4d:4c:5e
Signer

.text
Size: 706KB - Virtual size: 705KB