2026-09-01_1b200edebfc519bf2634503cd52c110f_akira_cobalt-strike_icedid_njrat_vidar

Sharing

Copy URL Twitter E-mail

General

Target
2026-09-01_1b200edebfc519bf2634503cd52c110f_akira_cobalt-strike_icedid_njrat_vidar
Size 1.8MB
Sample260903-sys2eawxgw
SHA256 f2f84aeb83c10d810118f88081dbe60606203098abff067db2fa1ec3d01e940d
MD5 1b200edebfc519bf2634503cd52c110f
SHA1 deae84a2f6da4cc422ecf5b0ce21b6729c629082
SHA512 ddd5dfcdfce00746e42f26d605e74f2f5cf91b0b8a158c1f93759994c473f25f0e09c8e015a37ca7b2c662302f3c3e5c57e1ddba58854501fb766cac02006045
SSDEEP 24576:dkI6e3Fnwyu8Us3VRO7DEVcTS9DJDT10xf1GhpgE7+dcDz/ZWct4K6z:d16e3FnwyuoOP0zgxf1Ghp5Dz/Bt76z
TLSH
T1C3957D1762AC01E9D1BED17DC9475907EBB2781A43715BDF02A086EB1F67AE08E3E710
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

File Explorer

2026-09-01_1b200edebfc519bf2634503cd52c110f_akira_cobalt-strike_icedid_njrat_vidar

.exe 1.8MB

2026-09-01_1b200edebfc519bf2634503cd52c110f_akira_cobalt-strike_icedid_njrat_vidar

IMPHASH 29d47052087c0ce4adc69ab322fa420b
SHA256 f2f84aeb83c10d810118f88081dbe60606203098abff067db2fa1ec3d01e940d
MD5 1b200edebfc519bf2634503cd52c110f
SHA1 deae84a2f6da4cc422ecf5b0ce21b6729c629082
SHA512 ddd5dfcdfce00746e42f26d605e74f2f5cf91b0b8a158c1f93759994c473f25f0e09c8e015a37ca7b2c662302f3c3e5c57e1ddba58854501fb766cac02006045
SSDEEP 24576:dkI6e3Fnwyu8Us3VRO7DEVcTS9DJDT10xf1GhpgE7+dcDz/ZWct4K6z:d16e3FnwyuoOP0zgxf1Ghp5Dz/Bt76z
TLSH
T1C3957D1762AC01E9D1BED17DC9475907EBB2781A43715BDF02A086EB1F67AE08E3E710
MD5 SHA1 SHA512 SSDEEP TLSH

Digest

ba:5c:3d:bd:0e:14:c0:d0:ad:1d:a4:df:8c:01:3c:b4:74:5c:e4:1b:02:2f:33:72:20:5e:d1:d4:fc:e1:27:70

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Intel(R) Rapid Storage Technology,O=Intel Corporation,L=Santa Clara,ST=CA,C=US

Chains

Jan 15, 2021

CN=Intel(R) Rapid Storage Technology,O=Intel Corporation,L=Santa Clara,ST=CA,C=US

CN=Intel External Issuing CA 7B,O=Intel Corporation,L=Santa Clara,ST=CA,C=US

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Subject

CN=Intel(R) Rapid Storage Technology,O=Intel Corporation,L=Santa Clara,ST=CA,C=US

Serial Number

56:00:00:0c:91:74:93:87:7e:9d:b3:ce:38:00:00:00:00:0c:91

Issuer

CN=Intel External Issuing CA 7B,O=Intel Corporation,L=Santa Clara,ST=CA,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Sep 23, 2020 - Jun 17, 2021

Subject

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

61:18:54:86:00:00:00:00:00:24

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Apr 11, 2011 - Apr 11, 2021

Subject

CN=Intel External Issuing CA 7B,O=Intel Corporation,L=Santa Clara,ST=CA,C=US

Serial Number

06:9b:5e:99:27:72:84:c8:76:7f:13:68:a7:de:b0:f3

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning, ExtKeyUsageEmailProtection, ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 28, 2015 - Jun 17, 2021

Subject

CN=QuoVadis Issuing CA G4,O=QuoVadis Limited,C=BM

Serial Number

69:b2:d1:cc:f0:2e:20:dc:c9:5c:62:89:4f:7f:9e:5f:5f:c0:57:bf

Issuer

CN=QuoVadis Root Certification Authority,OU=Root Certification Authority,O=QuoVadis Limited,C=BM

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

May 30, 2014 - Mar 17, 2021

Subject

CN=timestamp.intel.com,OU=Thales TSS ESN:0E37-9649-08C5,O=Intel Corporation,L=Santa Clara,ST=CA,C=US

Serial Number

3c:a5:d5:25:1f:75:29:a5:ba:3c:73:b4:49:6f:a2:c1:b0:c5:6c:9f

Issuer

CN=QuoVadis Issuing CA G4,O=QuoVadis Limited,C=BM

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Apr 20, 2018 - Mar 17, 2021

Minor OS version

Major OS version

Entry point

1240048

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

D:\qba2\workspace\7210\SSE_Storage_Middleware\RstMwService\output\Release\x64\RstMwService.pdb

kernel32

EnterCriticalSection LeaveCriticalSection CreateEventA GetExitCodeThread CreateFileA WriteFile InitOnceExecuteOnce InitializeSRWLock TryAcquireSRWLockExclusive GetCurrentThread LocalAlloc WaitForSingleObjectEx FileTimeToSystemTime GetSystemTime GetSystemTimeAsFileTime GetModuleHandleA FormatMessageW SystemTimeToFileTime GetTimeFormatEx GetDateFormatEx InitializeCriticalSectionAndSpinCount Sleep GetCurrentThreadId VerSetConditionMask VerifyVersionInfoA DeleteCriticalSection InitializeCriticalSectionEx GetProcessHeap HeapSize HeapFree lstrlenA GetDiskFreeSpaceExA GetCurrentProcessId HeapReAlloc HeapAlloc HeapDestroy ReleaseMutex DecodePointer TryEnterCriticalSection WTSGetActiveConsoleSessionId QueryPerformanceCounter InitializeSListHead OpenProcess GetPackageId GetPackagePath SleepConditionVariableSRW K32GetModuleBaseNameW K32GetModuleFileNameExW WakeAllConditionVariable AcquireSRWLockExclusive ReleaseSRWLockExclusive SetLastError DeviceIoControl ReadFile EncodePointer FreeLibrary LoadLibraryExW FlsFree FlsSetValue SetWaitableTimer CreateWaitableTimerA FlsGetValue FlsAlloc RtlUnwind GetFinalPathNameByHandleW OpenFileById CreateFileW GetProcAddress GetModuleHandleW InterlockedPushEntrySList RtlPcToFileHeader FindNextFileW GetModuleHandleExW GetModuleFileNameW RtlUnwindEx WriteConsoleW FindClose SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW ReadConsoleW FindFirstFileExW GetConsoleMode GetConsoleOutputCP OpenEventA OpenMutexA GetCurrentProcess InitializeConditionVariable WakeConditionVariable CreateSemaphoreA SleepConditionVariableCS QueryPerformanceFrequency GetSystemTimePreciseAsFileTime LCMapStringEx FlushFileBuffers SetStdHandle SetFilePointerEx GetFileSizeEx WideCharToMultiByte CreateMutexW WaitForMultipleObjects CompareStringEx LocalFree GetCommandLineA InitializeCriticalSection GetCommandLineW GetLastError CreateEventW ResetEvent CreateThread CloseHandle SetEvent GetTickCount GetFirmwareEnvironmentVariableW GetOEMCP GetACP IsValidCodePage MultiByteToWideChar GetStringTypeW GetCPInfo CreateMutexA WaitForSingleObject DeleteFileW RaiseException GetTimeZoneInformation GetStartupInfoW RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent GetSystemInfo VirtualAlloc VirtualProtect VirtualQuery ExitThread FreeLibraryAndExitThread TlsAlloc TlsGetValue TlsSetValue TlsFree CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW ExitProcess GetStdHandle GetFileType

advapi32

RegDeleteTreeW CloseServiceHandle OpenSCManagerW ControlService StartServiceCtrlDispatcherW UnregisterTraceGuids RegisterTraceGuidsW GetTraceEnableLevel GetTraceEnableFlags GetTraceLoggerHandle RegisterServiceCtrlHandlerW TraceMessage SetServiceStatus EnumDependentServicesW StartServiceW DeregisterEventSource RegisterEventSourceW AllocateAndInitializeSid FreeSid InitializeSecurityDescriptor SetSecurityDescriptorDacl ReportEventW ChangeServiceConfigW OpenServiceW QueryServiceStatusEx InitiateSystemShutdownA RegSetKeyValueW RegCreateKeyExW LookupPrivilegeValueA AdjustTokenPrivileges OpenProcessToken RevertToSelf SetEntriesInAclW ImpersonateLoggedOnUser RegQueryValueExW RegOpenKeyExW RegSetValueExW RegDeleteValueA RegCreateKeyExA RegSetValueExA OpenThreadToken CopySid EqualSid GetLengthSid GetSidLengthRequired GetSidSubAuthority GetSidSubAuthorityCount GetTokenInformation InitializeSid IsValidSid RegQueryValueExA RegOpenKeyExA RegCloseKey

wtsapi32

WTSFreeMemory WTSQueryUserToken WTSEnumerateSessionsW

api-ms-win-security-base-l1-2-2

DeriveCapabilitySidsFromName

rpcrt4

RpcBindingVectorFree RpcServerInqBindings RpcServerListen RpcServerRegisterIf3 RpcStringFreeW RpcStringBindingComposeW RpcBindingFromStringBindingW RpcServerUnregisterIf RpcServerUseProtseqEpW RpcMgmtStopServerListening RpcEpRegisterW RpcEpUnregister UuidToStringA I_RpcBindingInqLocalClientPID I_RpcGetCurrentCallHandle RpcImpersonateClient RpcRevertToSelfEx RpcStringFreeA NdrServerCallAll NdrClientCall3 RpcRevertToSelf NdrServerCall2

userenv

UnloadUserProfile

ole32

CoReleaseMarshalData StringFromGUID2 CoCreateGuid CoMarshalInterThreadInterfaceInStream CoInitializeEx CoUninitialize CoCreateInstance CoTaskMemFree CoGetInterfaceAndReleaseStream

api-ms-win-core-path-l1-1-0

PathCchAppend

wintrust

WinVerifyTrust

user32

GetSystemMetrics

setupapi

CM_Locate_DevNodeA CM_Get_Device_ID_ListW CM_Get_Device_ID_List_SizeW CM_Get_Device_Interface_ListA CM_Get_Device_Interface_List_SizeA CM_Locate_DevNodeW CM_Reenumerate_DevNode

api-ms-win-devices-config-l1-1-1

CM_Get_DevNode_PropertyW

oleaut32

VariantClear SysAllocString SysFreeString VariantInit

??0CConsolidatedError@@QEAA@AEBV0@@Z ??0CConsolidatedError@@QEAA@W4ISDI2_ERRORS@CConsolidatedErrorGenerated@@@Z ??0CConsolidatedError@@QEAA@XZ ??0GlobalLogger@@AEAA@XZ ??0ISIAccelerateAction@@QEAA@XZ ??0scoped_c_thread_locale@details@utility@@QEAA@XZ ??0value@json@web@@QEAA@$$QEAV012@@Z ??0value@json@web@@QEAA@AEBV012@@Z ??0value@json@web@@QEAA@H@Z ??0value@json@web@@QEAA@I@Z ??0value@json@web@@QEAA@N@Z ??0value@json@web@@QEAA@PEB_W@Z ??0value@json@web@@QEAA@PEB_W_N@Z ??0value@json@web@@QEAA@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z ??0value@json@web@@QEAA@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@_N@Z ??0value@json@web@@QEAA@XZ ??0value@json@web@@QEAA@_J@Z ??0value@json@web@@QEAA@_K@Z ??0value@json@web@@QEAA@_N@Z ??1CConsolidatedError@@QEAA@XZ ??1GlobalLogger@@QEAA@XZ ??1ISIAccelerateAction@@QEAA@XZ ??1scoped_c_thread_locale@details@utility@@QEAA@XZ ??4CConsolidatedError@@QEAAAEAV0@AEBV0@@Z ??4CConsolidatedErrorGenerated@@QEAAAEAV0@$$QEAV0@@Z ??4CConsolidatedErrorGenerated@@QEAAAEAV0@AEBV0@@Z ??4GlobalLogger@@AEAAAEAV0@$$QEAV0@@Z ??4value@json@web@@QEAAAEAV012@$$QEAV012@@Z ??4value@json@web@@QEAAAEAV012@AEBV012@@Z ??5json@web@@YAAEAV?$basic_istream@_WU?$char_traits@_W@std@@@std@@AEAV23@AEAVvalue@01@@Z ??6json@web@@YAAEAV?$basic_ostream@_WU?$char_traits@_W@std@@@std@@AEAV23@AEBVvalue@01@@Z ??8value@json@web@@QEBA_NAEBV012@@Z ??Avalue@json@web@@AEAAAEAV012@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ??Avalue@json@web@@QEAAAEAV012@AEBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z ??Avalue@json@web@@QEAAAEAV012@_K@Z ??BCConsolidatedError@@QEBA?AU_ISI_Error@@XZ ?AddDebugInformation@CConsolidatedError@@QEAAXPEBDZZ ?AddDebugInformation@CConsolidatedError@@QEAAXPEB_WZZ ?AddErrorMessage@CConsolidatedError@@QEAAXPEBDZZ ?AddErrorMessage@CConsolidatedError@@QEAAXPEB_WZZ ?CleanupIsiError@@YAXI@Z ?CleanupIsiError@@YAXPEAU_ISI_Error@@@Z ?ClearError@CConsolidatedError@@QEAAXXZ ?FreeStringResources@CConsolidatedError@@AEAAXXZ ?GetDebugInformation@CConsolidatedError@@QEBAKPEADH@Z ?GetDebugInformation@CConsolidatedError@@QEBAKPEA_WH@Z ?GetDebugInformation@CConsolidatedError@@QEBAPEBDXZ ?GetErrorCodeString@CConsolidatedError@@QEBAKPEADH@Z ?GetErrorCodeString@CConsolidatedError@@QEBAKPEA_WH@Z ?GetErrorCodeString@CConsolidatedError@@QEBAPEBDXZ ?GetErrorMessage@CConsolidatedError@@QEBAKPEADH@Z ?GetErrorMessage@CConsolidatedError@@QEBAKPEA_WH@Z ?GetErrorMessage@CConsolidatedError@@QEBAPEBDXZ ?GetSrtEolError@CConsolidatedError@@SA?AV1@XZ ?InternalAddDebugInformation@CConsolidatedError@@AEAAXPEBDPEAD@Z ?InternalAddErrorMessage@CConsolidatedError@@AEAAXPEBDPEAD@Z ?IsBusy@CConsolidatedError@@QEBA_NXZ ?IsError@CConsolidatedError@@QEBA_NXZ ?IsPending@CConsolidatedError@@QEBA_NXZ ?IsSuccessful@CConsolidatedError@@QEBA_NXZ ?MAX_ERROR_STRING_SIZE@CConsolidatedError@@2HB ?MapIsiStatus@CConsolidatedError@@AEBA?AW4ISDI2_ERRORS@CConsolidatedErrorGenerated@@W4_ISI_Status@@@Z ?NO_ID@GlobalLogger@@2_KB ?SMALL_STRING_SIZE@CConsolidatedError@@2HB ?SetError@CConsolidatedError@@QEAAXV1@@Z ?SetError@CConsolidatedError@@QEAAXW4ISDI2_ERRORS@CConsolidatedErrorGenerated@@PEBD1@Z ?SetError@CConsolidatedError@@QEAAXW4ISDI2_ERRORS@CConsolidatedErrorGenerated@@PEBD@Z ?SetError@CConsolidatedError@@QEAAXW4ISDI2_ERRORS@CConsolidatedErrorGenerated@@PEB_W1@Z ?SetError@CConsolidatedError@@QEAAXW4ISDI2_ERRORS@CConsolidatedErrorGenerated@@PEB_W@Z ?SetError@CConsolidatedError@@QEAAXW4ISDI2_ERROR_TYPE@1@KPEBD@Z ?SetError@CConsolidatedError@@QEAAXW4ISDI2_ERROR_TYPE@1@KPEB_W@Z ?SetError@CConsolidatedError@@QEAAXW4_ISI_Status@@PEBD1@Z ?SetError@CConsolidatedError@@QEAAXW4_ISI_Status@@PEB_W1@Z ?SetErrorCodeString@CConsolidatedError@@AEAAXXZ ?SetLoggingOff@GlobalLogger@@SAXXZ ?SetLoggingOn@GlobalLogger@@SAXXZ ?__autoclassinit2@CConsolidatedError@@QEAAX_K@Z ?__autoclassinit2@GlobalLogger@@QEAAX_K@Z ?_disableLogging@GlobalLogger@@0_NA ?array@value@json@web@@SA?AV123@V?$vector@Vvalue@json@web@@V?$allocator@Vvalue@json@web@@@std@@@std@@@Z ?array@value@json@web@@SA?AV123@XZ ?array@value@json@web@@SA?AV123@_K@Z ?as_array@value@json@web@@QEAAAEAVarray@23@XZ ?as_array@value@json@web@@QEBAAEBVarray@23@XZ ?as_bool@value@json@web@@QEBA_NXZ ?as_double@value@json@web@@QEBANXZ ?as_integer@value@json@web@@QEBAHXZ ?as_number@value@json@web@@QEBAAEBVnumber@23@XZ ?as_object@value@json@web@@QEAAAEAVobject@23@XZ ?as_object@value@json@web@@QEBAAEBVobject@23@XZ ?as_string@value@json@web@@QEBAAEBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ ?at@value@json@web@@QEAAAEAV123@AEBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z ?at@value@json@web@@QEAAAEAV123@_K@Z ?at@value@json@web@@QEBAAEBV123@AEBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z ?at@value@json@web@@QEBAAEBV123@_K@Z ?boolean@value@json@web@@SA?AV123@_N@Z ?c_locale@scoped_c_thread_locale@details@utility@@SAPEAU__crt_locale_pointers@@XZ ?checkIfDiskPairValid@ISIAccelerateAction@@UEAA?AU_ISI_Error@@IIAEAW4_ISI_NgsaDiskPairStatus@@@Z ?checkIfDiskValid@ISIAccelerateAction@@UEAA?AU_ISI_Error@@IW4_ISI_NgsaDiskConcatenationMember@@AEAW4_ISI_NgsaDiskValidForConcatenationStatus@@@Z ?clean@GlobalLogger@@QEAAX_K@Z ?configDiskAcceleration@ISIAccelerateAction@@UEAA?AU_ISI_Error@@IW4_ISI_NvcMode@@@Z ?configVolumeAcceleration@ISIAccelerateAction@@UEAA?AU_ISI_Error@@IW4_ISI_NvcMode@@@Z ?default_error_condition@windows_category_impl@details@utility@@UEBA?AVerror_condition@std@@H@Z ?doClearBlockCache@ISIAccelerateAction@@UEAA?AU_ISI_Error@@XZ ?doCreateCacheVolumeTask@ISIAccelerateAction@@UEAA?AU_ISI_Error@@I@Z ?doDisassociate@ISIAccelerateAction@@UEAA?AU_ISI_Error@@AEBU_ISI_VolumeInfo@@@Z ?doNgsaAutomation@ISIAccelerateAction@@UEAA?AU_ISI_Error@@AEAI@Z ?doNgsaDisableOneStep@ISIAccelerateAction@@UEAA?AU_ISI_Error@@XZ ?doNgsaEnableOneStep@ISIAccelerateAction@@UEAA?AU_ISI_Error@@XZ ?doNgsaStartTools@ISIAccelerateAction@@UEAA?AU_ISI_Error@@XZ ?doResetVolportPerformanceCounters@ISIAccelerateAction@@UEAA?AU_ISI_Error@@XZ ?doSeparateConcatenation@ISIAccelerateAction@@UEAA?AU_ISI_Error@@I@Z ?doSeparateConcatenation@ISIAccelerateAction@@UEAA?AU_ISI_Error@@XZ ?doSeparateConcatenationNoSync@ISIAccelerateAction@@QEAA?AU_ISI_Error@@XZ ?erase@value@json@web@@QEAAXAEBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z ?erase@value@json@web@@QEAAX_K@Z ?format@value@json@web@@AEBAXAEAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ?format@value@json@web@@AEBAXAEAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z ?from_string@datetime@utility@@SA?AV12@AEBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@W4date_format@12@@Z ?generate@nonce_generator@utility@@QEAA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ ?get@GlobalLogger@@SAAEAV1@XZ ?getError@GlobalLogger@@QEAA?AVCConsolidatedError@@_K_N@Z ?getLastError@GlobalLogger@@QEAA?AVCConsolidatedError@@_N@Z ?getLastId@GlobalLogger@@QEAA_KXZ ?getMaxCacheSize@ISIAccelerateAction@@SA_K_N@Z ?getMinCacheSize@ISIAccelerateAction@@SA_K_N@Z ?has_array_field@value@json@web@@QEBA_NAEBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z ?has_boolean_field@value@json@web@@QEBA_NAEBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z ?has_double_field@value@json@web@@QEBA_NAEBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z ?has_integer_field@value@json@web@@QEBA_NAEBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z ?has_number_field@value@json@web@@QEBA_NAEBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z ?has_object_field@value@json@web@@QEBA_NAEBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z ?has_string_field@value@json@web@@QEBA_NAEBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z ?is_double@value@json@web@@QEBA_NXZ ?is_int32@number@json@web@@QEBA_NXZ ?is_int64@number@json@web@@QEBA_NXZ ?is_integer@value@json@web@@QEBA_NXZ ?is_uint32@number@json@web@@QEBA_NXZ ?keep_object_element_order@json@web@@YAX_N@Z ?latin1_to_utf16@conversions@utility@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@4@@Z ?latin1_to_utf8@conversions@utility@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEBV34@@Z ?message@windows_category_impl@details@utility@@UEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@H@Z ?null@value@json@web@@SA?AV123@XZ ?number@value@json@web@@SA?AV123@H@Z ?number@value@json@web@@SA?AV123@I@Z ?number@value@json@web@@SA?AV123@N@Z ?number@value@json@web@@SA?AV123@_J@Z ?number@value@json@web@@SA?AV123@_K@Z ?object@value@json@web@@SA?AV123@V?$vector@U?$pair@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@Vvalue@json@web@@@std@@V?$allocator@U?$pair@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@Vvalue@json@web@@@std@@@2@@std@@_N@Z ?object@value@json@web@@SA?AV123@_N@Z ?parse@value@json@web@@SA?AV123@AEAV?$basic_istream@DU?$char_traits@D@std@@@std@@@Z ?parse@value@json@web@@SA?AV123@AEAV?$basic_istream@DU?$char_traits@D@std@@@std@@AEAVerror_code@5@@Z ?parse@value@json@web@@SA?AV123@AEAV?$basic_istream@_WU?$char_traits@_W@std@@@std@@@Z ?parse@value@json@web@@SA?AV123@AEAV?$basic_istream@_WU?$char_traits@_W@std@@@std@@AEAVerror_code@5@@Z ?parse@value@json@web@@SA?AV123@AEBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z ?parse@value@json@web@@SA?AV123@AEBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AEAVerror_code@5@@Z ?platform_category@details@utility@@YAAEBVerror_category@std@@XZ ?resetCacheToAvailable@ISIAccelerateAction@@UEAA?AU_ISI_Error@@I@Z ?seconds_to_xml_duration@timespan@utility@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$duration@_JU?$ratio@$00$00@std@@@chrono@4@@Z ?serialize@value@json@web@@QEBA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ ?serialize@value@json@web@@QEBAXAEAV?$basic_ostream@DU?$char_traits@D@std@@@std@@@Z ?serialize@value@json@web@@QEBAXAEAV?$basic_ostream@_WU?$char_traits@_W@std@@@std@@@Z ?setCacheVolSize@ISIAccelerateAction@@UEAAX_K@Z ?setError@GlobalLogger@@QEAA_KAEBVCConsolidatedError@@@Z ?setError@GlobalLogger@@QEAA_KAEBVCConsolidatedError@@AEAU_ISI_Error@@@Z ?setFastDisk@ISIAccelerateAction@@UEAAXI@Z ?setFcMode@ISIAccelerateAction@@UEAAXW4_ISI_NgsaFileCacheMode@@@Z ?setFileCacheSize@ISIAccelerateAction@@UEAAXI@Z ?setMigrationStart@ISIAccelerateAction@@UEAAX_K@Z ?setPreservePinningData@ISIAccelerateAction@@UEAAX_N@Z ?setSeparationSafe@ISIAccelerateAction@@UEAAX_N@Z ?setSlowDisk@ISIAccelerateAction@@UEAAXI@Z ?string@value@json@web@@CA?AV123@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ?string@value@json@web@@SA?AV123@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z ?string@value@json@web@@SA?AV123@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@_N@Z ?system_type_to_datetime@datetime@utility@@CA_NPEAX_KPEAV12@@Z ?to_string@datetime@utility@@QEBA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@W4date_format@12@@Z ?to_string@value@json@web@@QEBA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ ?to_string_t@conversions@utility@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@$$QEAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@4@@Z ?to_string_t@conversions@utility@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@4@@Z ?to_utf16string@conversions@utility@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@4@@Z ?to_utf8string@conversions@utility@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@4@@Z ?turnOffVolumeOrDiskAcceleration@ISIAccelerateAction@@UEAA?AU_ISI_Error@@I@Z ?type@value@json@web@@QEBA?AW4value_type@123@XZ ?usascii_to_utf16@conversions@utility@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@4@@Z ?utc_now@datetime@utility@@SA?AV12@XZ ?utf16_to_utf8@conversions@utility@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@4@@Z ?utf8_to_utf16@conversions@utility@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@4@@Z ?waitForNvcMode@ISIAccelerateAction@@UEAA?AU_ISI_Error@@IW4_ISI_NvcMode@@@Z ?windows_category@details@utility@@YAAEBVerror_category@std@@XZ ?xml_duration_to_seconds@timespan@utility@@YA?AV?$duration@_JU?$ratio@$00$00@std@@@chrono@std@@AEBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@5@@Z GetLPCId ISI_NgsaDiskPairStatusToDescription ISI_NgsaDiskValidForConcatenationStatusToDescription ISI_NgsaOperationStatusToDescription IsiAddDisksToArray IsiArraySetWriteCacheState IsiCacheVolumeCreateFromArray IsiCacheVolumeCreateFromDisks IsiDiskAssignStoragePool IsiDiskClaim IsiDiskClearMetadata IsiDiskDestroyCache IsiDiskMarkAsFailed IsiDiskMarkAsNormal IsiDiskMarkAsSpare IsiDiskMarkOffline IsiDiskMarkOnline IsiDiskResetSmartEvent IsiDiskSetCacheBufferFlushSetting IsiDiskSetCacheMode IsiDiskSetCacheSpindownPolicy IsiDiskSetSmartEvent IsiDiskSetWriteCachingPolicySetting IsiDiskUnlock IsiDiskUnmarkAsSpare IsiEventClose IsiEventSetUpForAllWithHandle IsiEventWaitWithHandle IsiExpandVolume IsiFinalize IsiGetArrayHandles IsiGetArrayHandlesByControllerHandle IsiGetArrayInfo IsiGetControllerHandles IsiGetControllerInfo IsiGetDiskIdentifyData IsiGetEndDeviceHandles IsiGetEndDeviceInfo IsiGetErrorDebugMessage IsiGetErrorMessage IsiGetIsRTD3HotEnabled IsiGetIsmArrays IsiGetIsmEndDevices IsiGetIsmVolumes IsiGetLastErrorDebugMessage IsiGetLastErrorMessage IsiGetMiddlewareVersionInfo IsiGetNgsaDiskPairHandles IsiGetNgsaDiskPairInfo IsiGetNgsaHandles IsiGetNgsaInfo IsiGetNgsaInfoEx IsiGetNvCachePolicyStatInfo IsiGetNvCacheStat2Info IsiGetNvCacheStatInfo IsiGetNvCacheUnifiedStats IsiGetNvcInfo IsiGetOptaneOptimizationInfo IsiGetPhyHandles IsiGetPhyInfo IsiGetRaidInfo IsiGetRaidInfoHandles IsiGetRaidLevelInfo IsiGetRdpDictEndDevices IsiGetSystemInfo IsiGetVolportPerformanceCounters IsiGetVolumeHandles IsiGetVolumeInfo IsiGetVolumeMigrationRange IsiGetZpoddInfo IsiInitialize IsiNvcDisassociate IsiROHISetState IsiRaidLevelModify IsiReadPatrolSetState IsiRefreshPartitionInfo IsiRescan IsiSessionClose IsiSessionOpen IsiSetIntelHybridDiskSubClassCode IsiSetLpmStatus IsiSetReadPatrolUnit IsiToggleCoalescerPolicy IsiUpdatePmInterfaceFields IsiVdsHandlerMakeSpaceForMetadataOnSystemDisk IsiVolumeCancelVerify IsiVolumeConvertIrrtToRaid1 IsiVolumeConvertRaid1ToIrrt IsiVolumeCreate IsiVolumeCreateFromDisks IsiVolumeDelete IsiVolumeDestroyCache IsiVolumeInitialize IsiVolumeIrrtCreate IsiVolumeIrrtMountPartner IsiVolumeIrrtSetAutomaticSync IsiVolumeIrrtSetManualSync IsiVolumeIrrtSwapDisks IsiVolumeIrrtSync IsiVolumeIrrtUnMountPartner IsiVolumeMarkAsNormal IsiVolumeRebuild IsiVolumeRename IsiVolumeSetBufferFlush IsiVolumeSetCacheMode IsiVolumeSetCachePolicy IsiVolumeSetCacheSpindownPolicy IsiVolumeSetExportPolicy IsiVolumeVerify

Name

.text

Size

1.3MB

Virtual Size

1.3MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

422KB

Virtual Size

422KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

42KB

Virtual Size

72KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

57KB

Virtual Size

57KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

11KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

generic

count=1, id=262, version=27412,

count=18, id=260, productName=VS2019 v16.2.3 build 27905, version=27905,

count=9, id=259, productName=VS2019 v16.2.3 build 27905, version=27905,

count=22, id=260, version=27412,

count=11, id=259, version=27412,

count=182, id=261, version=27412,

count=100, id=261, productName=VS2019 v16.2.3 build 27905, version=27905,

count=5, id=261, productName=VS2017 v15.4.5 build 25547, version=25547,

count=180, id=261, productName=VS2019 v16.3.2 build 28105, version=28105,

count=1, id=260, productName=VS2019 v16.3.2 build 28105, version=28105,

count=27, id=147, productName=VS2008 SP1 build 30729, version=30729,

count=2, id=257, version=27412,

count=289, id=1, productName=Unmarked objects,

count=32, id=265, version=28105,

count=1, id=256, productName=VS2019 v16.3.2 build 28105, version=28105,

count=1, id=255, productName=VS2019 v16.3.2 build 28105, version=28105,

count=1, id=151,

count=1, id=258, productName=VS2019 v16.3.2 build 28105, version=28105,