190072

Sharing

Copy URL Twitter E-mail

General

Target
190072
Size 268KB
Sample260427-psc68aev3m
SHA256 20d53b3608ec178869659b2e4f462a56e528416f0a284f1bc8b41095327e6f87
MD5 26e96be2194f8f9c80a03eb0dac38831
SHA1 a0b090762d849dcd9692c50d0b51220cc847a9e1
SHA512 d23b02e16578008ca562c251f5a3cd4b5f4faca38a9a1c07456103feda2098184270e28f9ac06a7dbc0b1cc9506ab8478da8e75914f00224f5b9d52b715b9664
SSDEEP 6144:I7cBPwXNxYQnLqz9TjZJIshV2zrFx7sm7VQG:I7cBPw7RLqz5ZKsiz/l
TLSH
T133445C81B145CEB6EB4A243354A0D59D2C76FFA13FA9C293384AD7BE2CA3580DD31917
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

File Explorer

190072

.dll 268KB

IMPHASH 0bcd2cec283e82b71a25118f28480d75
SHA256 20d53b3608ec178869659b2e4f462a56e528416f0a284f1bc8b41095327e6f87
MD5 26e96be2194f8f9c80a03eb0dac38831
SHA1 a0b090762d849dcd9692c50d0b51220cc847a9e1
SHA512 d23b02e16578008ca562c251f5a3cd4b5f4faca38a9a1c07456103feda2098184270e28f9ac06a7dbc0b1cc9506ab8478da8e75914f00224f5b9d52b715b9664
SSDEEP 6144:I7cBPwXNxYQnLqz9TjZJIshV2zrFx7sm7VQG:I7cBPw7RLqz5ZKsiz/l
TLSH
T133445C81B145CEB6EB4A243354A0D59D2C76FFA13FA9C293384AD7BE2CA3580DD31917
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows

Digest

63:1d:a0:3d:a1:6f:36:a3:a0:01:44:91:84:7e:b3:68:bc:df:7d:55:f4:0c:eb:2f:1b:e3:0c:c6:93:f2:78:59

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Mar 18, 2016

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Digest

63:1d:a0:3d:a1:6f:36:a3:a0:01:44:91:84:7e:b3:68:bc:df:7d:55:f4:0c:eb:2f:1b:e3:0c:c6:93:f2:78:59

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Mar 18, 2016

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:ef:d8:87:2e:35:a3:82:8a:2f:00:00:00:00:00:ef

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Oct 28, 2015 - Jan 28, 2017

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0c:52:4c:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 6, 2010 - Jul 6, 2025

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:09:81:2a:00:00:00:00:00:02

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 1, 2010 - Jul 1, 2025

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7D2E-3782-B0F7,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:76:b6:10:e1:7c:87:23:3c:22:00:00:00:00:00:76

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 7, 2015 - Jan 7, 2017

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:66:65:c0:04:d0:b6:a5:56:84:00:00:00:00:00:66

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jan 6, 2016 - Apr 6, 2017

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:BBEC-30CA-2DBE,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:83:28:16:de:66:bc:b6:db:d8:00:00:00:00:00:83

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 28, 2015 - Jan 28, 2017

Minor OS version

Major OS version

Entry point

147489

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

concrt140.arm.pdb

msvcp140

?__ExceptionPtrRethrow@@YAXPBX@Z ?__ExceptionPtrCurrentException@@YAXPAX@Z ?__ExceptionPtrCopy@@YAXPAXPBX@Z ?__ExceptionPtrCreate@@YAXPAX@Z ?__ExceptionPtrDestroy@@YAXPAX@Z _Cnd_destroy_in_situ _Cnd_broadcast _Mtx_unlock _Cnd_wait _Mtx_init_in_situ _Mtx_lock _Mtx_destroy_in_situ ?_Throw_C_error@std@@YAXH@Z _Cnd_init_in_situ ?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ ?_Xbad_function_call@std@@YAXXZ

vcruntime140

__RTDynamicCast memcpy __std_exception_destroy __std_exception_copy _purecall __std_terminate __uncaught_exception _CxxThrowException __CxxFrameHandler3 __C_specific_handler __telemetry_main_invoke_trigger __telemetry_main_return_trigger memset __std_type_info_destroy_list

api-ms-win-crt-runtime-l1-1-0

_initialize_onexit_table terminate _initterm_e _initterm _invalid_parameter_noinfo_noreturn _cexit _seh_filter_dll _configure_narrow_argv _initialize_narrow_environment _register_onexit_function _execute_onexit_table _crt_atexit

api-ms-win-crt-heap-l1-1-0

malloc free _callnewh

api-ms-win-crt-string-l1-1-0

wcsncpy_s wcslen

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vswprintf_s __stdio_common_vfwprintf fflush __acrt_iob_func

kernel32

GetCurrentProcessorNumberEx VirtualFree VirtualProtect DeleteCriticalSection LeaveCriticalSection EnterCriticalSection TryEnterCriticalSection GetThreadGroupAffinity TlsFree DeleteTimerQueueTimer TlsGetValue SetThreadGroupAffinity SwitchToThread CreateThread GetThreadPriority TlsAlloc GetLogicalProcessorInformationEx ChangeTimerQueueTimer DisableThreadLibraryCalls GetSystemTimeAsFileTime GetCurrentProcessId QueryPerformanceCounter IsProcessorFeaturePresent GetModuleHandleA GetModuleFileNameW FreeLibraryAndExitThread FreeLibrary CloseThreadpoolWait SetThreadpoolWait CreateThreadpoolWait CloseThreadpoolTimer WaitForThreadpoolTimerCallbacks CreateThreadpoolTimer FreeLibraryWhenCallbackReturns GetThreadTimes OutputDebugStringW GetModuleHandleW LoadLibraryExW GetProcAddress LoadLibraryW EncodePointer SetLastError UnregisterWaitEx SetThreadpoolTimer ReleaseSemaphore CreateSemaphoreExW InitializeSListHead FlushProcessWriteBuffers GetProcessAffinityMask VirtualAlloc InterlockedFlushSList InterlockedPushEntrySList InterlockedPopEntrySList QueryDepthSList CreateTimerQueue GetCurrentThread GetCurrentProcess GetCurrentThreadId DuplicateHandle GetLastError SetEvent WaitForSingleObjectEx CloseHandle GetNumaHighestNodeNumber GetTickCount64 CreateTimerQueueTimer TlsSetValue CreateEventExW RegisterWaitForSingleObject UnregisterWait SignalObjectAndWait SetThreadPriority InitializeCriticalSectionEx Sleep SetProcessAffinityMask

api-ms-win-crt-math-l1-1-0

exp

??0?$_SpinWait@$00@details@Concurrency@@QAA@P6AXXZ@Z ??0?$_SpinWait@$0A@@details@Concurrency@@QAA@P6AXXZ@Z ??0SchedulerPolicy@Concurrency@@QAA@ABV01@@Z ??0SchedulerPolicy@Concurrency@@QAA@IZZ ??0SchedulerPolicy@Concurrency@@QAA@XZ ??0_Cancellation_beacon@details@Concurrency@@QAA@XZ ??0_Concurrent_queue_base_v4@details@Concurrency@@IAA@I@Z ??0_Concurrent_queue_iterator_base_v4@details@Concurrency@@IAA@ABV_Concurrent_queue_base_v4@12@@Z ??0_Condition_variable@details@Concurrency@@QAA@XZ ??0_Context@details@Concurrency@@QAA@PAVContext@2@@Z ??0_NonReentrantBlockingLock@details@Concurrency@@QAA@XZ ??0_NonReentrantPPLLock@details@Concurrency@@QAA@XZ ??0_ReaderWriterLock@details@Concurrency@@QAA@XZ ??0_ReentrantBlockingLock@details@Concurrency@@QAA@XZ ??0_ReentrantLock@details@Concurrency@@QAA@XZ ??0_ReentrantPPLLock@details@Concurrency@@QAA@XZ ??0_Runtime_object@details@Concurrency@@QAA@H@Z ??0_Runtime_object@details@Concurrency@@QAA@XZ ??0_Scheduler@details@Concurrency@@QAA@PAVScheduler@2@@Z ??0_Scoped_lock@_NonReentrantPPLLock@details@Concurrency@@QAA@AAV123@@Z ??0_Scoped_lock@_ReentrantPPLLock@details@Concurrency@@QAA@AAV123@@Z ??0_SpinLock@details@Concurrency@@QAA@ACJ@Z ??0_StructuredTaskCollection@details@Concurrency@@QAA@PAV_CancellationTokenState@12@@Z ??0_TaskCollection@details@Concurrency@@QAA@PAV_CancellationTokenState@12@@Z ??0_TaskCollection@details@Concurrency@@QAA@XZ ??0_Timer@details@Concurrency@@IAA@I_N@Z ??0agent@Concurrency@@QAA@AAVScheduleGroup@1@@Z ??0agent@Concurrency@@QAA@AAVScheduler@1@@Z ??0agent@Concurrency@@QAA@XZ ??0bad_target@Concurrency@@QAA@PBD@Z ??0bad_target@Concurrency@@QAA@XZ ??0context_self_unblock@Concurrency@@QAA@PBD@Z ??0context_self_unblock@Concurrency@@QAA@XZ ??0context_unblock_unbalanced@Concurrency@@QAA@PBD@Z ??0context_unblock_unbalanced@Concurrency@@QAA@XZ ??0critical_section@Concurrency@@QAA@XZ ??0default_scheduler_exists@Concurrency@@QAA@PBD@Z ??0default_scheduler_exists@Concurrency@@QAA@XZ ??0event@Concurrency@@QAA@XZ ??0improper_lock@Concurrency@@QAA@PBD@Z ??0improper_lock@Concurrency@@QAA@XZ ??0improper_scheduler_attach@Concurrency@@QAA@PBD@Z ??0improper_scheduler_attach@Concurrency@@QAA@XZ ??0improper_scheduler_detach@Concurrency@@QAA@PBD@Z ??0improper_scheduler_detach@Concurrency@@QAA@XZ ??0improper_scheduler_reference@Concurrency@@QAA@PBD@Z ??0improper_scheduler_reference@Concurrency@@QAA@XZ ??0invalid_link_target@Concurrency@@QAA@PBD@Z ??0invalid_link_target@Concurrency@@QAA@XZ ??0invalid_multiple_scheduling@Concurrency@@QAA@PBD@Z ??0invalid_multiple_scheduling@Concurrency@@QAA@XZ ??0invalid_oversubscribe_operation@Concurrency@@QAA@PBD@Z ??0invalid_oversubscribe_operation@Concurrency@@QAA@XZ ??0invalid_scheduler_policy_key@Concurrency@@QAA@PBD@Z ??0invalid_scheduler_policy_key@Concurrency@@QAA@XZ ??0invalid_scheduler_policy_thread_specification@Concurrency@@QAA@PBD@Z ??0invalid_scheduler_policy_thread_specification@Concurrency@@QAA@XZ ??0invalid_scheduler_policy_value@Concurrency@@QAA@PBD@Z ??0invalid_scheduler_policy_value@Concurrency@@QAA@XZ ??0message_not_found@Concurrency@@QAA@PBD@Z ??0message_not_found@Concurrency@@QAA@XZ ??0missing_wait@Concurrency@@QAA@PBD@Z ??0missing_wait@Concurrency@@QAA@XZ ??0nested_scheduler_missing_detach@Concurrency@@QAA@PBD@Z ??0nested_scheduler_missing_detach@Concurrency@@QAA@XZ ??0operation_timed_out@Concurrency@@QAA@PBD@Z ??0operation_timed_out@Concurrency@@QAA@XZ ??0reader_writer_lock@Concurrency@@QAA@XZ ??0scheduler_not_attached@Concurrency@@QAA@PBD@Z ??0scheduler_not_attached@Concurrency@@QAA@XZ ??0scheduler_resource_allocation_error@Concurrency@@QAA@J@Z ??0scheduler_resource_allocation_error@Concurrency@@QAA@PBDJ@Z ??0scheduler_worker_creation_error@Concurrency@@QAA@J@Z ??0scheduler_worker_creation_error@Concurrency@@QAA@PBDJ@Z ??0scoped_lock@critical_section@Concurrency@@QAA@AAV12@@Z ??0scoped_lock@reader_writer_lock@Concurrency@@QAA@AAV12@@Z ??0scoped_lock_read@reader_writer_lock@Concurrency@@QAA@AAV12@@Z ??0unsupported_os@Concurrency@@QAA@PBD@Z ??0unsupported_os@Concurrency@@QAA@XZ ??1SchedulerPolicy@Concurrency@@QAA@XZ ??1_Cancellation_beacon@details@Concurrency@@QAA@XZ ??1_Concurrent_queue_base_v4@details@Concurrency@@MAA@XZ ??1_Concurrent_queue_iterator_base_v4@details@Concurrency@@IAA@XZ ??1_Concurrent_vector_base_v4@details@Concurrency@@IAA@XZ ??1_Condition_variable@details@Concurrency@@QAA@XZ ??1_NonReentrantBlockingLock@details@Concurrency@@QAA@XZ ??1_ReentrantBlockingLock@details@Concurrency@@QAA@XZ ??1_Scoped_lock@_NonReentrantPPLLock@details@Concurrency@@QAA@XZ ??1_Scoped_lock@_ReentrantPPLLock@details@Concurrency@@QAA@XZ ??1_SpinLock@details@Concurrency@@QAA@XZ ??1_StructuredTaskCollection@details@Concurrency@@QAA@XZ ??1_TaskCollection@details@Concurrency@@QAA@XZ ??1_Timer@details@Concurrency@@MAA@XZ ??1agent@Concurrency@@UAA@XZ ??1critical_section@Concurrency@@QAA@XZ ??1event@Concurrency@@QAA@XZ ??1reader_writer_lock@Concurrency@@QAA@XZ ??1scoped_lock@critical_section@Concurrency@@QAA@XZ ??1scoped_lock@reader_writer_lock@Concurrency@@QAA@XZ ??1scoped_lock_read@reader_writer_lock@Concurrency@@QAA@XZ ??4?$_SpinWait@$00@details@Concurrency@@QAAAAV012@$$QAV012@@Z ??4?$_SpinWait@$00@details@Concurrency@@QAAAAV012@ABV012@@Z ??4?$_SpinWait@$0A@@details@Concurrency@@QAAAAV012@$$QAV012@@Z ??4?$_SpinWait@$0A@@details@Concurrency@@QAAAAV012@ABV012@@Z ??4SchedulerPolicy@Concurrency@@QAAAAV01@ABV01@@Z ??_F?$_SpinWait@$00@details@Concurrency@@QAAXXZ ??_F?$_SpinWait@$0A@@details@Concurrency@@QAAXXZ ??_F_Context@details@Concurrency@@QAAXXZ ??_F_Scheduler@details@Concurrency@@QAAXXZ ?AgentEventGuid@Concurrency@@3U_GUID@@B ?Alloc@Concurrency@@YAPAXI@Z ?Block@Context@Concurrency@@SAXXZ ?ChoreEventGuid@Concurrency@@3U_GUID@@B ?ConcRTEventGuid@Concurrency@@3U_GUID@@B ?ConcRT_ProviderGuid@Concurrency@@3U_GUID@@B ?ContextEventGuid@Concurrency@@3U_GUID@@B ?Create@CurrentScheduler@Concurrency@@SAXABVSchedulerPolicy@2@@Z ?Create@Scheduler@Concurrency@@SAPAV12@ABVSchedulerPolicy@2@@Z ?CreateResourceManager@Concurrency@@YAPAUIResourceManager@1@XZ ?CreateScheduleGroup@CurrentScheduler@Concurrency@@SAPAVScheduleGroup@2@AAVlocation@2@@Z ?CreateScheduleGroup@CurrentScheduler@Concurrency@@SAPAVScheduleGroup@2@XZ ?CurrentContext@Context@Concurrency@@SAPAV12@XZ ?Detach@CurrentScheduler@Concurrency@@SAXXZ ?DisableTracing@Concurrency@@YAJXZ ?EnableTracing@Concurrency@@YAJXZ ?Free@Concurrency@@YAXPAX@Z ?Get@CurrentScheduler@Concurrency@@SAPAVScheduler@2@XZ ?GetExecutionContextId@Concurrency@@YAIXZ ?GetNumberOfVirtualProcessors@CurrentScheduler@Concurrency@@SAIXZ ?GetOSVersion@Concurrency@@YA?AW4OSVersion@IResourceManager@1@XZ ?GetPolicy@CurrentScheduler@Concurrency@@SA?AVSchedulerPolicy@2@XZ ?GetPolicyValue@SchedulerPolicy@Concurrency@@QBAIW4PolicyElementKey@2@@Z ?GetProcessorCount@Concurrency@@YAIXZ ?GetProcessorNodeCount@Concurrency@@YAIXZ ?GetSchedulerId@Concurrency@@YAIXZ ?GetSharedTimerQueue@details@Concurrency@@YAPAXXZ ?Id@Context@Concurrency@@SAIXZ ?Id@CurrentScheduler@Concurrency@@SAIXZ ?IsAvailableLocation@CurrentScheduler@Concurrency@@SA_NABVlocation@2@@Z ?IsCurrentTaskCollectionCanceling@Context@Concurrency@@SA_NXZ ?LockEventGuid@Concurrency@@3U_GUID@@B ?Log2@details@Concurrency@@YAKI@Z ?NFS_Allocate@details@Concurrency@@YAPAXIIPAX@Z ?NFS_Free@details@Concurrency@@YAXPAX@Z ?NFS_GetLineSize@details@Concurrency@@YAIXZ ?Oversubscribe@Context@Concurrency@@SAX_N@Z ?PPLParallelForEventGuid@Concurrency@@3U_GUID@@B ?PPLParallelForeachEventGuid@Concurrency@@3U_GUID@@B ?PPLParallelInvokeEventGuid@Concurrency@@3U_GUID@@B ?RegisterShutdownEvent@CurrentScheduler@Concurrency@@SAXPAX@Z ?ResetDefaultSchedulerPolicy@Scheduler@Concurrency@@SAXXZ ?ResourceManagerEventGuid@Concurrency@@3U_GUID@@B ?ScheduleGroupEventGuid@Concurrency@@3U_GUID@@B ?ScheduleGroupId@Context@Concurrency@@SAIXZ ?ScheduleTask@CurrentScheduler@Concurrency@@SAXP6AXPAX@Z0@Z ?ScheduleTask@CurrentScheduler@Concurrency@@SAXP6AXPAX@Z0AAVlocation@2@@Z ?SchedulerEventGuid@Concurrency@@3U_GUID@@B ?SetConcurrencyLimits@SchedulerPolicy@Concurrency@@QAAXII@Z ?SetDefaultSchedulerPolicy@Scheduler@Concurrency@@SAXABVSchedulerPolicy@2@@Z ?SetPolicyValue@SchedulerPolicy@Concurrency@@QAAIW4PolicyElementKey@2@I@Z ?VirtualProcessorEventGuid@Concurrency@@3U_GUID@@B ?VirtualProcessorId@Context@Concurrency@@SAIXZ ?Yield@Context@Concurrency@@SAXXZ ?_Abort@_StructuredTaskCollection@details@Concurrency@@AAAXXZ ?_Acquire@_NonReentrantBlockingLock@details@Concurrency@@QAAXXZ ?_Acquire@_NonReentrantPPLLock@details@Concurrency@@QAAXPAX@Z ?_Acquire@_ReentrantBlockingLock@details@Concurrency@@QAAXXZ ?_Acquire@_ReentrantLock@details@Concurrency@@QAAXXZ ?_Acquire@_ReentrantPPLLock@details@Concurrency@@QAAXPAX@Z ?_AcquireRead@_ReaderWriterLock@details@Concurrency@@QAAXXZ ?_AcquireWrite@_ReaderWriterLock@details@Concurrency@@QAAXXZ ?_Advance@_Concurrent_queue_iterator_base_v4@details@Concurrency@@IAAXXZ ?_Assign@_Concurrent_queue_iterator_base_v4@details@Concurrency@@IAAXABV123@@Z ?_Byte_reverse_table@details@Concurrency@@3QBEB ?_Cancel@_StructuredTaskCollection@details@Concurrency@@QAAXXZ ?_Cancel@_TaskCollection@details@Concurrency@@QAAXXZ ?_CheckTaskCollection@_UnrealizedChore@details@Concurrency@@IAAXXZ ?_CleanupToken@_StructuredTaskCollection@details@Concurrency@@AAAXXZ ?_ConcRT_CoreAssert@details@Concurrency@@YAXPBD0H@Z ?_ConcRT_Trace@details@Concurrency@@YAXHPB_WZZ ?_Confirm_cancel@_Cancellation_beacon@details@Concurrency@@QAA_NXZ ?_CurrentContext@_Context@details@Concurrency@@SA?AV123@XZ ?_Current_node@location@Concurrency@@SA?AV12@XZ ?_Destroy@_AsyncTaskCollection@details@Concurrency@@EAAXXZ ?_DoYield@?$_SpinWait@$00@details@Concurrency@@IAAXXZ ?_DoYield@?$_SpinWait@$0A@@details@Concurrency@@IAAXXZ ?_Get@_CurrentScheduler@details@Concurrency@@SA?AV_Scheduler@23@XZ ?_GetCombinableSize@details@Concurrency@@YAIXZ ?_GetConcRTTraceInfo@Concurrency@@YAPBU_CONCRT_TRACE_INFO@details@1@XZ ?_GetConcurrency@details@Concurrency@@YAIXZ ?_GetCurrentInlineDepth@_StackGuard@details@Concurrency@@CAAAIXZ ?_GetNumberOfVirtualProcessors@_CurrentScheduler@details@Concurrency@@SAIXZ ?_GetScheduler@_Scheduler@details@Concurrency@@QAAPAVScheduler@3@XZ ?_Id@_CurrentScheduler@details@Concurrency@@SAIXZ ?_Internal_assign@_Concurrent_vector_base_v4@details@Concurrency@@IAAXABV123@IP6AXPAXI@ZP6AX1PBXI@Z4@Z ?_Internal_capacity@_Concurrent_vector_base_v4@details@Concurrency@@IBAIXZ ?_Internal_clear@_Concurrent_vector_base_v4@details@Concurrency@@IAAIP6AXPAXI@Z@Z ?_Internal_compact@_Concurrent_vector_base_v4@details@Concurrency@@IAAPAXIPAXP6AX0I@ZP6AX0PBXI@Z@Z ?_Internal_copy@_Concurrent_vector_base_v4@details@Concurrency@@IAAXABV123@IP6AXPAXPBXI@Z@Z ?_Internal_empty@_Concurrent_queue_base_v4@details@Concurrency@@IBA_NXZ ?_Internal_finish_clear@_Concurrent_queue_base_v4@details@Concurrency@@IAAXXZ ?_Internal_grow_by@_Concurrent_vector_base_v4@details@Concurrency@@IAAIIIP6AXPAXPBXI@Z1@Z ?_Internal_grow_to_at_least_with_result@_Concurrent_vector_base_v4@details@Concurrency@@IAAIIIP6AXPAXPBXI@Z1@Z ?_Internal_move_push@_Concurrent_queue_base_v4@details@Concurrency@@IAAXPAX@Z ?_Internal_pop_if_present@_Concurrent_queue_base_v4@details@Concurrency@@IAA_NPAX@Z ?_Internal_push@_Concurrent_queue_base_v4@details@Concurrency@@IAAXPBX@Z ?_Internal_push_back@_Concurrent_vector_base_v4@details@Concurrency@@IAAPAXIAAI@Z ?_Internal_reserve@_Concurrent_vector_base_v4@details@Concurrency@@IAAXIII@Z ?_Internal_resize@_Concurrent_vector_base_v4@details@Concurrency@@IAAXIIIP6AXPAXI@ZP6AX0PBXI@Z2@Z ?_Internal_size@_Concurrent_queue_base_v4@details@Concurrency@@IBAIXZ ?_Internal_swap@_Concurrent_queue_base_v4@details@Concurrency@@IAAXAAV123@@Z ?_Internal_swap@_Concurrent_vector_base_v4@details@Concurrency@@IAAXAAV123@@Z ?_Internal_throw_exception@_Concurrent_queue_base_v4@details@Concurrency@@IBAXXZ ?_Internal_throw_exception@_Concurrent_vector_base_v4@details@Concurrency@@IBAXI@Z ?_IsCanceling@_StructuredTaskCollection@details@Concurrency@@QAA_NXZ ?_IsCanceling@_TaskCollection@details@Concurrency@@QAA_NXZ ?_IsSynchronouslyBlocked@_Context@details@Concurrency@@QBA_NXZ ?_NewCollection@_AsyncTaskCollection@details@Concurrency@@SAPAV123@PAV_CancellationTokenState@23@@Z ?_NumberOfSpins@?$_SpinWait@$00@details@Concurrency@@IAAKXZ ?_NumberOfSpins@?$_SpinWait@$0A@@details@Concurrency@@IAAKXZ ?_Oversubscribe@_Context@details@Concurrency@@SAX_N@Z ?_Reference@_Scheduler@details@Concurrency@@QAAIXZ ?_Release@_NonReentrantBlockingLock@details@Concurrency@@QAAXXZ ?_Release@_NonReentrantPPLLock@details@Concurrency@@QAAXXZ ?_Release@_ReentrantBlockingLock@details@Concurrency@@QAAXXZ ?_Release@_ReentrantLock@details@Concurrency@@QAAXXZ ?_Release@_ReentrantPPLLock@details@Concurrency@@QAAXXZ ?_Release@_Scheduler@details@Concurrency@@QAAIXZ ?_ReleaseRead@_ReaderWriterLock@details@Concurrency@@QAAXXZ ?_ReleaseWrite@_ReaderWriterLock@details@Concurrency@@QAAXXZ ?_Reset@?$_SpinWait@$00@details@Concurrency@@IAAXXZ ?_Reset@?$_SpinWait@$0A@@details@Concurrency@@IAAXXZ ?_RunAndWait@_StructuredTaskCollection@details@Concurrency@@QAA?AW4_TaskCollectionStatus@23@PAV_UnrealizedChore@23@@Z ?_RunAndWait@_TaskCollection@details@Concurrency@@QAA?AW4_TaskCollectionStatus@23@PAV_UnrealizedChore@23@@Z ?_Schedule@_StructuredTaskCollection@details@Concurrency@@QAAXPAV_UnrealizedChore@23@@Z ?_Schedule@_StructuredTaskCollection@details@Concurrency@@QAAXPAV_UnrealizedChore@23@PAVlocation@3@@Z ?_Schedule@_TaskCollection@details@Concurrency@@QAAXPAV_UnrealizedChore@23@@Z ?_Schedule@_TaskCollection@details@Concurrency@@QAAXPAV_UnrealizedChore@23@PAVlocation@3@@Z ?_ScheduleTask@_CurrentScheduler@details@Concurrency@@SAXP6AXPAX@Z0@Z ?_Segment_index_of@_Concurrent_vector_base_v4@details@Concurrency@@KAII@Z ?_SetSpinCount@?$_SpinWait@$00@details@Concurrency@@QAAXI@Z ?_SetSpinCount@?$_SpinWait@$0A@@details@Concurrency@@QAAXI@Z ?_ShouldSpinAgain@?$_SpinWait@$00@details@Concurrency@@IAA_NXZ ?_ShouldSpinAgain@?$_SpinWait@$0A@@details@Concurrency@@IAA_NXZ ?_SpinOnce@?$_SpinWait@$00@details@Concurrency@@QAA_NXZ ?_SpinOnce@?$_SpinWait@$0A@@details@Concurrency@@QAA_NXZ ?_SpinYield@Context@Concurrency@@SAXXZ ?_Start@_Timer@details@Concurrency@@IAAXXZ ?_Stop@_Timer@details@Concurrency@@IAAXXZ ?_Trace_agents@Concurrency@@YAXW4Agents_EventType@1@_JZZ ?_Trace_ppl_function@Concurrency@@YAXABU_GUID@@EW4ConcRT_EventType@1@@Z ?_TryAcquire@_NonReentrantBlockingLock@details@Concurrency@@QAA_NXZ ?_TryAcquire@_ReentrantBlockingLock@details@Concurrency@@QAA_NXZ ?_TryAcquire@_ReentrantLock@details@Concurrency@@QAA_NXZ ?_TryAcquireWrite@_ReaderWriterLock@details@Concurrency@@QAA_NXZ ?_UnderlyingYield@details@Concurrency@@YAXXZ ?_Value@_SpinCount@details@Concurrency@@SAIXZ ?_Yield@_Context@details@Concurrency@@SAXXZ ?cancel@agent@Concurrency@@QAA_NXZ ?current@location@Concurrency@@SA?AV12@XZ ?done@agent@Concurrency@@IAA_NXZ ?from_numa_node@location@Concurrency@@SA?AV12@G@Z ?get_error_code@scheduler_resource_allocation_error@Concurrency@@QBAJXZ ?is_current_task_group_canceling@Concurrency@@YA_NXZ ?lock@critical_section@Concurrency@@QAAXXZ ?lock@reader_writer_lock@Concurrency@@QAAXXZ ?lock_read@reader_writer_lock@Concurrency@@QAAXXZ ?native_handle@critical_section@Concurrency@@QAAAAV12@XZ ?notify_all@_Condition_variable@details@Concurrency@@QAAXXZ ?notify_one@_Condition_variable@details@Concurrency@@QAAXXZ ?reset@event@Concurrency@@QAAXXZ ?set@event@Concurrency@@QAAXXZ ?set_task_execution_resources@Concurrency@@YAXGPAU_GROUP_AFFINITY@@@Z ?set_task_execution_resources@Concurrency@@YAXK@Z ?start@agent@Concurrency@@QAA_NXZ ?status@agent@Concurrency@@QAA?AW4agent_status@2@XZ ?status_port@agent@Concurrency@@QAAPAV?$ISource@W4agent_status@Concurrency@@@2@XZ ?try_lock@critical_section@Concurrency@@QAA_NXZ ?try_lock@reader_writer_lock@Concurrency@@QAA_NXZ ?try_lock_for@critical_section@Concurrency@@QAA_NI@Z ?try_lock_read@reader_writer_lock@Concurrency@@QAA_NXZ ?unlock@critical_section@Concurrency@@QAAXXZ ?unlock@reader_writer_lock@Concurrency@@QAAXXZ ?wait@Concurrency@@YAXI@Z ?wait@_Condition_variable@details@Concurrency@@QAAXAAVcritical_section@3@@Z ?wait@agent@Concurrency@@SA?AW4agent_status@2@PAV12@I@Z ?wait@event@Concurrency@@QAAII@Z ?wait_for@_Condition_variable@details@Concurrency@@QAA_NAAVcritical_section@3@I@Z ?wait_for_all@agent@Concurrency@@SAXIPAPAV12@PAW4agent_status@2@I@Z ?wait_for_multiple@event@Concurrency@@SAIPAPAV12@I_NI@Z ?wait_for_one@agent@Concurrency@@SAXIPAPAV12@AAW4agent_status@2@AAII@Z

Sharing

General

Malware Config

Signatures

File Explorer

190072

msvcp140

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-stdio-l1-1-0

kernel32

api-ms-win-crt-math-l1-1-0

generic