2026-09-09_0eb8ecfd4059931ac61627f6bea7b0f4_amadey_avoslocker_coinminer_elex_glassworm_luca-stealer_lynx_njrat_revil

Sharing

Copy URL Twitter E-mail

General

Target
2026-09-09_0eb8ecfd4059931ac61627f6bea7b0f4_amadey_avoslocker_coinminer_elex_glassworm_luca-stealer_lynx_njrat_revil
Size 2.8MB
Sample260910-ama3cavvhw
SHA256 53482e2be3d531a98b3adc032c4b210326f1fbe735e6b7e58748add9f8169994
MD5 0eb8ecfd4059931ac61627f6bea7b0f4
SHA1 fe48b31c467aa68bb1f7c4b0655777ddb4bf674e
SHA512 2129e97130cebdc58638de366b180e366af480bb431224bd7efd6e545d25e35cb6a708a33e10dc945f357d202ee1560379e8296988a4f118bf0aa355aca66243
SSDEEP 49152:LsQqp8Ay5PMpaOjPufBp3yyKB33Ma67NreT6scPEWcylvJbhMTqmtIuV:dquA8PQaOjPuZp3yyKB33Mx7NrpstfTb
TLSH
T116D5CF12BA82C072E59202B462FA6B7FCC399934573585C397D01E7589312E37B3E79E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-09_0eb8ecfd4059931ac61627f6bea7b0f4_amadey_avoslocker_coinminer_elex_glassworm_luca-stealer_lynx_njrat_revil

File Explorer

2026-09-09_0eb8ecfd4059931ac61627f6bea7b0f4_amadey_avoslocker_coinminer_elex_glassworm_luca-stealer_lynx_njrat_revil

.exe 2.8MB

2026-09-09_0eb8ecfd4059931ac61627f6bea7b0f4_amadey_avoslocker_coinminer_elex_glassworm_luca-stealer_lynx_njrat_revil

IMPHASH 3c9f80f2e71286e71d7f91cdd26c6049
SHA256 53482e2be3d531a98b3adc032c4b210326f1fbe735e6b7e58748add9f8169994
MD5 0eb8ecfd4059931ac61627f6bea7b0f4
SHA1 fe48b31c467aa68bb1f7c4b0655777ddb4bf674e
SHA512 2129e97130cebdc58638de366b180e366af480bb431224bd7efd6e545d25e35cb6a708a33e10dc945f357d202ee1560379e8296988a4f118bf0aa355aca66243
SSDEEP 49152:LsQqp8Ay5PMpaOjPufBp3yyKB33Ma67NreT6scPEWcylvJbhMTqmtIuV:dquA8PQaOjPuZp3yyKB33Mx7NrpstfTb
TLSH
T116D5CF12BA82C072E59202B462FA6B7FCC399934573585C397D01E7589312E37B3E79E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

1508045

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\youqu_job\SuperBrowser\wirevpnLauncher\code\AllUpdateServer\bin\Release\up7zupdate.pdb

ws2_32

getsockname getpeername htons ntohs connect closesocket getservbyname bind send recv WSASetLastError select __WSAFDIsSet socket WSAGetLastError WSACleanup shutdown htonl gethostbyname getsockopt setsockopt gethostname ioctlsocket sendto recvfrom listen accept freeaddrinfo getaddrinfo WSAIoctl WSAStartup

wldap32

ord27 ord26 ord22 ord33 ord32 ord79 ord200 ord301 ord41 ord50 ord143 ord60 ord211 ord46 ord35 ord217 ord30

kernel32

GetCurrentDirectoryW SystemTimeToFileTime WideCharToMultiByte GetCurrentProcess Sleep MoveFileExA DeleteFileA CreateThread GetProcAddress GetModuleHandleW GetACP FormatMessageW GetLastError FindFirstFileW FindNextFileW TerminateProcess GetModuleFileNameW CreatePipe FindClose WaitForSingleObject DeleteFileW MoveFileExW GetModuleFileNameA FindFirstFileExW GetConsoleScreenBufferInfo SetConsoleTextAttribute EnterCriticalSection GetFullPathNameW GetStdHandle OutputDebugStringA LeaveCriticalSection InitializeCriticalSection GetTempPathA GetWindowsDirectoryA DeleteCriticalSection GetComputerNameA GetCurrentThreadId RtlCaptureStackBackTrace GetSystemTimeAsFileTime SetLastError FormatMessageA InitializeCriticalSectionEx SleepEx GetTickCount64 WaitForSingleObjectEx ExpandEnvironmentStringsA GetFileType PeekNamedPipe WaitForMultipleObjects FreeLibrary VerSetConditionMask GetSystemDirectoryA GetModuleHandleA SetFilePointer VerifyVersionInfoA FlushConsoleInputBuffer QueryPerformanceCounter GetCurrentProcessId GetTickCount GlobalMemoryStatus GetSystemTime SetConsoleCtrlHandler FileTimeToSystemTime SystemTimeToTzSpecificLocalTime GetFileInformationByHandle CloseHandle GetConsoleMode GetConsoleOutputCP SetFileTime WriteFile ReadFile CreateDirectoryW LocalFileTimeToFileTime MultiByteToWideChar SetFilePointerEx GetConsoleCP ExitProcess GetCommandLineA GetCommandLineW ReadConsoleW HeapFree HeapAlloc GetFileSizeEx FlushFileBuffers CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetExitCodeProcess GetFileAttributesExW SetStdHandle SetEndOfFile GetTimeZoneInformation HeapReAlloc SetConsoleMode ReadConsoleInputW IsValidCodePage GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW GetProcessHeap CreateProcessW DuplicateHandle GetModuleHandleExW FreeLibraryAndExitThread ExitThread LoadLibraryExW TlsFree TlsSetValue TlsGetValue TlsAlloc GetFileAttributesW GetDriveTypeW CreateFileW RaiseException RtlUnwind InitializeSListHead GetStartupInfoW IsDebuggerPresent CreateEventW ResetEvent SetEvent InitializeCriticalSectionAndSpinCount IsProcessorFeaturePresent SetUnhandledExceptionFilter UnhandledExceptionFilter GetCPInfo HeapSize WriteConsoleW LoadLibraryA GetStringTypeW InitializeSRWLock ReleaseSRWLockExclusive AcquireSRWLockExclusive TryEnterCriticalSection GetExitCodeThread EncodePointer DecodePointer LocalFree LCMapStringEx

user32

GetProcessWindowStation GetUserObjectInformationW MessageBoxA

advapi32

DeregisterEventSource RegisterServiceCtrlHandlerW SetServiceStatus RegQueryValueExW RegSetValueExW CryptEnumProvidersA CryptSignHashA CryptDestroyHash CryptCreateHash CryptDecrypt CryptExportKey CryptGetUserKey CryptGetProvParam CryptSetHashParam CryptDestroyKey CryptReleaseContext CryptAcquireContextA ReportEventA RegisterEventSourceA StartServiceCtrlDispatcherW CreateServiceW QueryServiceStatus CloseServiceHandle OpenSCManagerW ChangeServiceConfig2W ControlService StartServiceW OpenServiceW RegCloseKey RegCreateKeyExW

shell32

SHCreateDirectoryExA SHFileOperationW

ole32

CoSetProxyBlanket CoInitializeEx OleRun CoCreateInstance CoUninitialize CoInitialize CoCreateGuid CoInitializeSecurity StringFromGUID2

oleaut32

VariantInit VariantClear SysFreeString SysAllocString GetErrorInfo

shlwapi

PathStripPathA PathFileExistsW PathRemoveFileSpecA

wininet

InternetCloseHandle HttpQueryInfoW InternetOpenW InternetOpenUrlW InternetReadFile

dbghelp

SymFromAddr SymSetOptions SymInitialize SymCleanup UnDecorateSymbolName

crypt32

CertOpenStore CertCloseStore CertEnumCertificatesInStore CertFindCertificateInStore CertDuplicateCertificateContext CertFreeCertificateContext CertGetCertificateContextProperty

??0CharReader@Json_c@@QAE@ABV01@@Z ??0CharReader@Json_c@@QAE@XZ ??0CharReaderBuilder@Json_c@@QAE@ABV01@@Z ??0CharReaderBuilder@Json_c@@QAE@XZ ??0Exception@Json_c@@QAE@ABV01@@Z ??0Exception@Json_c@@QAE@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ??0Factory@CharReader@Json_c@@QAE@ABV012@@Z ??0Factory@CharReader@Json_c@@QAE@XZ ??0Factory@StreamWriter@Json_c@@QAE@ABV012@@Z ??0Factory@StreamWriter@Json_c@@QAE@XZ ??0FastWriter@Json_c@@QAE@ABV01@@Z ??0FastWriter@Json_c@@QAE@XZ ??0Features@Json_c@@QAE@XZ ??0LogicError@Json_c@@QAE@$$QAV01@@Z ??0LogicError@Json_c@@QAE@ABV01@@Z ??0LogicError@Json_c@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ??0Path@Json_c@@QAE@$$QAV01@@Z ??0Path@Json_c@@QAE@ABV01@@Z ??0Path@Json_c@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABVPathArgument@1@1111@Z ??0PathArgument@Json_c@@QAE@$$QAV01@@Z ??0PathArgument@Json_c@@QAE@ABV01@@Z ??0PathArgument@Json_c@@QAE@I@Z ??0PathArgument@Json_c@@QAE@PBD@Z ??0PathArgument@Json_c@@QAE@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ??0PathArgument@Json_c@@QAE@XZ ??0Reader@Json_c@@QAE@$$QAV01@@Z ??0Reader@Json_c@@QAE@ABV01@@Z ??0Reader@Json_c@@QAE@ABVFeatures@1@@Z ??0Reader@Json_c@@QAE@XZ ??0RuntimeError@Json_c@@QAE@$$QAV01@@Z ??0RuntimeError@Json_c@@QAE@ABV01@@Z ??0RuntimeError@Json_c@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ??0StaticString@Json_c@@QAE@PBD@Z ??0StreamWriter@Json_c@@QAE@ABV01@@Z ??0StreamWriter@Json_c@@QAE@XZ ??0StreamWriterBuilder@Json_c@@QAE@ABV01@@Z ??0StreamWriterBuilder@Json_c@@QAE@XZ ??0StyledStreamWriter@Json_c@@QAE@ABV01@@Z ??0StyledStreamWriter@Json_c@@QAE@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ??0StyledWriter@Json_c@@QAE@ABV01@@Z ??0StyledWriter@Json_c@@QAE@XZ ??0Value@Json_c@@QAE@$$QAV01@@Z ??0Value@Json_c@@QAE@ABV01@@Z ??0Value@Json_c@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ??0Value@Json_c@@QAE@ABVStaticString@1@@Z ??0Value@Json_c@@QAE@H@Z ??0Value@Json_c@@QAE@I@Z ??0Value@Json_c@@QAE@N@Z ??0Value@Json_c@@QAE@PBD0@Z ??0Value@Json_c@@QAE@PBD@Z ??0Value@Json_c@@QAE@W4ValueType@1@@Z ??0Value@Json_c@@QAE@_J@Z ??0Value@Json_c@@QAE@_K@Z ??0Value@Json_c@@QAE@_N@Z ??0ValueConstIterator@Json_c@@AAE@ABV?$_Tree_iterator@V?$_Tree_val@U?$_Tree_simple_types@U?$pair@$$CBVCZString@Value@Json_c@@V23@@std@@@std@@@std@@@std@@@Z ??0ValueConstIterator@Json_c@@QAE@ABVValueIterator@1@@Z ??0ValueConstIterator@Json_c@@QAE@XZ ??0ValueIterator@Json_c@@AAE@ABV?$_Tree_iterator@V?$_Tree_val@U?$_Tree_simple_types@U?$pair@$$CBVCZString@Value@Json_c@@V23@@std@@@std@@@std@@@std@@@Z ??0ValueIterator@Json_c@@QAE@ABV01@@Z ??0ValueIterator@Json_c@@QAE@ABVValueConstIterator@1@@Z ??0ValueIterator@Json_c@@QAE@XZ ??0ValueIteratorBase@Json_c@@QAE@ABV?$_Tree_iterator@V?$_Tree_val@U?$_Tree_simple_types@U?$pair@$$CBVCZString@Value@Json_c@@V23@@std@@@std@@@std@@@std@@@Z ??0ValueIteratorBase@Json_c@@QAE@XZ ??0Writer@Json_c@@QAE@ABV01@@Z ??0Writer@Json_c@@QAE@XZ ??1CharReader@Json_c@@UAE@XZ ??1CharReaderBuilder@Json_c@@UAE@XZ ??1Exception@Json_c@@UAE@XZ ??1Factory@CharReader@Json_c@@UAE@XZ ??1Factory@StreamWriter@Json_c@@UAE@XZ ??1FastWriter@Json_c@@UAE@XZ ??1LogicError@Json_c@@UAE@XZ ??1Path@Json_c@@QAE@XZ ??1PathArgument@Json_c@@QAE@XZ ??1Reader@Json_c@@QAE@XZ ??1RuntimeError@Json_c@@UAE@XZ ??1StreamWriter@Json_c@@UAE@XZ ??1StreamWriterBuilder@Json_c@@UAE@XZ ??1StyledStreamWriter@Json_c@@QAE@XZ ??1StyledWriter@Json_c@@UAE@XZ ??1Value@Json_c@@QAE@XZ ??1Writer@Json_c@@UAE@XZ ??4CharReader@Json_c@@QAEAAV01@ABV01@@Z ??4CharReaderBuilder@Json_c@@QAEAAV01@ABV01@@Z ??4Exception@Json_c@@QAEAAV01@ABV01@@Z ??4Factory@CharReader@Json_c@@QAEAAV012@ABV012@@Z ??4Factory@StreamWriter@Json_c@@QAEAAV012@ABV012@@Z ??4FastWriter@Json_c@@QAEAAV01@ABV01@@Z ??4Features@Json_c@@QAEAAV01@$$QAV01@@Z ??4Features@Json_c@@QAEAAV01@ABV01@@Z ??4LogicError@Json_c@@QAEAAV01@$$QAV01@@Z ??4LogicError@Json_c@@QAEAAV01@ABV01@@Z ??4Path@Json_c@@QAEAAV01@$$QAV01@@Z ??4Path@Json_c@@QAEAAV01@ABV01@@Z ??4PathArgument@Json_c@@QAEAAV01@$$QAV01@@Z ??4PathArgument@Json_c@@QAEAAV01@ABV01@@Z ??4Reader@Json_c@@QAEAAV01@$$QAV01@@Z ??4Reader@Json_c@@QAEAAV01@ABV01@@Z ??4RuntimeError@Json_c@@QAEAAV01@$$QAV01@@Z ??4RuntimeError@Json_c@@QAEAAV01@ABV01@@Z ??4StaticString@Json_c@@QAEAAV01@$$QAV01@@Z ??4StaticString@Json_c@@QAEAAV01@ABV01@@Z ??4StreamWriter@Json_c@@QAEAAV01@ABV01@@Z ??4StreamWriterBuilder@Json_c@@QAEAAV01@ABV01@@Z ??4StyledStreamWriter@Json_c@@QAEAAV01@ABV01@@Z ??4StyledWriter@Json_c@@QAEAAV01@ABV01@@Z ??4Value@Json_c@@QAEAAV01@$$QAV01@@Z ??4Value@Json_c@@QAEAAV01@ABV01@@Z ??4ValueConstIterator@Json_c@@QAEAAV01@$$QAV01@@Z ??4ValueConstIterator@Json_c@@QAEAAV01@ABV01@@Z ??4ValueConstIterator@Json_c@@QAEAAV01@ABVValueIteratorBase@1@@Z ??4ValueIterator@Json_c@@QAEAAV01@ABV01@@Z ??4ValueIteratorBase@Json_c@@QAEAAV01@$$QAV01@@Z ??4ValueIteratorBase@Json_c@@QAEAAV01@ABV01@@Z ??4Writer@Json_c@@QAEAAV01@ABV01@@Z ??5Json_c@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@std@@AAV12@AAVValue@0@@Z ??6Json_c@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@std@@AAV12@ABVValue@0@@Z ??8Value@Json_c@@QBE_NABV01@@Z ??8ValueIteratorBase@Json_c@@QBE_NABV01@@Z ??9Value@Json_c@@QBE_NABV01@@Z ??9ValueIteratorBase@Json_c@@QBE_NABV01@@Z ??ACharReaderBuilder@Json_c@@QAEAAVValue@1@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ??AStreamWriterBuilder@Json_c@@QAEAAVValue@1@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ??AValue@Json_c@@QAEAAV01@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ??AValue@Json_c@@QAEAAV01@ABVStaticString@1@@Z ??AValue@Json_c@@QAEAAV01@H@Z ??AValue@Json_c@@QAEAAV01@I@Z ??AValue@Json_c@@QAEAAV01@PBD@Z ??AValue@Json_c@@QBEABV01@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ??AValue@Json_c@@QBEABV01@H@Z ??AValue@Json_c@@QBEABV01@I@Z ??AValue@Json_c@@QBEABV01@PBD@Z ??BStaticString@Json_c@@QBEPBDXZ ??BValue@Json_c@@QBE_NXZ ??CValueConstIterator@Json_c@@QBEPBVValue@1@XZ ??CValueIterator@Json_c@@QBEPAVValue@1@XZ ??DValueConstIterator@Json_c@@QBEABVValue@1@XZ ??DValueIterator@Json_c@@QBEAAVValue@1@XZ ??EValueConstIterator@Json_c@@QAE?AV01@H@Z ??EValueConstIterator@Json_c@@QAEAAV01@XZ ??EValueIterator@Json_c@@QAE?AV01@H@Z ??EValueIterator@Json_c@@QAEAAV01@XZ ??FValueConstIterator@Json_c@@QAE?AV01@H@Z ??FValueConstIterator@Json_c@@QAEAAV01@XZ ??FValueIterator@Json_c@@QAE?AV01@H@Z ??FValueIterator@Json_c@@QAEAAV01@XZ ??GValueIteratorBase@Json_c@@QBEHABV01@@Z ??MValue@Json_c@@QBE_NABV01@@Z ??NValue@Json_c@@QBE_NABV01@@Z ??OValue@Json_c@@QBE_NABV01@@Z ??PValue@Json_c@@QBE_NABV01@@Z ??_7CharReader@Json_c@@6B@ ??_7CharReaderBuilder@Json_c@@6B@ ??_7Exception@Json_c@@6B@ ??_7Factory@CharReader@Json_c@@6B@ ??_7Factory@StreamWriter@Json_c@@6B@ ??_7FastWriter@Json_c@@6B@ ??_7LogicError@Json_c@@6B@ ??_7RuntimeError@Json_c@@6B@ ??_7StreamWriter@Json_c@@6B@ ??_7StreamWriterBuilder@Json_c@@6B@ ??_7StyledWriter@Json_c@@6B@ ??_7Writer@Json_c@@6B@ ??_FStyledStreamWriter@Json_c@@QAEXXZ ??_FValue@Json_c@@QAEXXZ ?addComment@Reader@Json_c@@AAEXPBD0W4CommentPlacement@2@@Z ?addError@Reader@Json_c@@AAE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAVToken@12@PBD@Z ?addErrorAndRecover@Reader@Json_c@@AAE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAVToken@12@W4TokenType@12@@Z ?addPathInArg@Path@Json_c@@AAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV?$vector@PBVPathArgument@Json_c@@V?$allocator@PBVPathArgument@Json_c@@@std@@@4@AAV?$_Vector_const_iterator@V?$_Vector_val@U?$_Simple_types@PBVPathArgument@Json_c@@@std@@@std@@@4@W4Kind@PathArgument@2@@Z ?all@Features@Json_c@@SA?AV12@XZ ?append@Value@Json_c@@QAEAAV12@$$QAV12@@Z ?append@Value@Json_c@@QAEAAV12@ABV12@@Z ?asBool@Value@Json_c@@QBE_NXZ ?asCString@Value@Json_c@@QBEPBDXZ ?asDouble@Value@Json_c@@QBENXZ ?asFloat@Value@Json_c@@QBEMXZ ?asInt64@Value@Json_c@@QBE_JXZ ?asInt@Value@Json_c@@QBEHXZ ?asLargestInt@Value@Json_c@@QBE_JXZ ?asLargestUInt@Value@Json_c@@QBE_KXZ ?asString@Value@Json_c@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ ?asUInt64@Value@Json_c@@QBE_KXZ ?asUInt@Value@Json_c@@QBEIXZ ?begin@Value@Json_c@@QAE?AVValueIterator@2@XZ ?begin@Value@Json_c@@QBE?AVValueConstIterator@2@XZ ?c_str@StaticString@Json_c@@QBEPBDXZ ?clear@Value@Json_c@@QAEXXZ ?compare@Value@Json_c@@QBEHABV12@@Z ?computeDistance@ValueIteratorBase@Json_c@@IBEHABV12@@Z ?containsNewLine@Reader@Json_c@@CA_NPBD0@Z ?copy@Value@Json_c@@QAEXABV12@@Z ?copy@ValueIteratorBase@Json_c@@IAEXABV12@@Z ?copyPayload@Value@Json_c@@QAEXABV12@@Z ?currentValue@Reader@Json_c@@AAEAAVValue@2@XZ ?decodeDouble@Reader@Json_c@@AAE_NAAVToken@12@@Z ?decodeDouble@Reader@Json_c@@AAE_NAAVToken@12@AAVValue@2@@Z ?decodeNumber@Reader@Json_c@@AAE_NAAVToken@12@@Z ?decodeNumber@Reader@Json_c@@AAE_NAAVToken@12@AAVValue@2@@Z ?decodeString@Reader@Json_c@@AAE_NAAVToken@12@@Z ?decodeString@Reader@Json_c@@AAE_NAAVToken@12@AAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ?decodeUnicodeCodePoint@Reader@Json_c@@AAE_NAAVToken@12@AAPBDPBDAAI@Z ?decodeUnicodeEscapeSequence@Reader@Json_c@@AAE_NAAVToken@12@AAPBDPBDAAI@Z ?decrement@ValueIteratorBase@Json_c@@IAEXXZ ?defaultRealPrecision@Value@Json_c@@2IB ?demand@Value@Json_c@@QAEPAV12@PBD0@Z ?deref@ValueIteratorBase@Json_c@@IAEAAVValue@2@XZ ?deref@ValueIteratorBase@Json_c@@IBEABVValue@2@XZ ?dropNullPlaceholders@FastWriter@Json_c@@QAEXXZ ?dupMeta@Value@Json_c@@AAEXABV12@@Z ?dupPayload@Value@Json_c@@AAEXABV12@@Z ?empty@Value@Json_c@@QBE_NXZ ?enableYAMLCompatibility@FastWriter@Json_c@@QAEXXZ ?end@Value@Json_c@@QAE?AVValueIterator@2@XZ ?end@Value@Json_c@@QBE?AVValueConstIterator@2@XZ ?find@Value@Json_c@@QBEPBV12@PBD0@Z ?get@Value@Json_c@@QBE?AV12@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV12@@Z ?get@Value@Json_c@@QBE?AV12@IABV12@@Z ?get@Value@Json_c@@QBE?AV12@PBD0ABV12@@Z ?get@Value@Json_c@@QBE?AV12@PBDABV12@@Z ?getComment@Value@Json_c@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@W4CommentPlacement@2@@Z ?getFormatedErrorMessages@Reader@Json_c@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ ?getFormattedErrorMessages@Reader@Json_c@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ ?getLocationLineAndColumn@Reader@Json_c@@ABE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PBD@Z ?getLocationLineAndColumn@Reader@Json_c@@ABEXPBDAAH1@Z ?getMemberNames@Value@Json_c@@QBE?AV?$vector@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@std@@XZ ?getNextChar@Reader@Json_c@@AAEDXZ ?getOffsetLimit@Value@Json_c@@QBEHXZ ?getOffsetStart@Value@Json_c@@QBEHXZ ?getString@Value@Json_c@@QBE_NPAPBD0@Z ?getStructuredErrors@Reader@Json_c@@QBE?AV?$vector@UStructuredError@Reader@Json_c@@V?$allocator@UStructuredError@Reader@Json_c@@@std@@@std@@XZ ?good@Reader@Json_c@@QBE_NXZ ?hasComment@Value@Json_c@@QBE_NW4CommentPlacement@2@@Z ?hasCommentForValue@StyledStreamWriter@Json_c@@CA_NABVValue@2@@Z ?hasCommentForValue@StyledWriter@Json_c@@CA_NABVValue@2@@Z ?increment@ValueIteratorBase@Json_c@@IAEXXZ ?indent@StyledStreamWriter@Json_c@@AAEXXZ ?indent@StyledWriter@Json_c@@AAEXXZ ?index@ValueIteratorBase@Json_c@@QBEIXZ ?initBasic@Value@Json_c@@AAEXW4ValueType@2@_N@Z ?insert@Value@Json_c@@QAE_NI$$QAV12@@Z ?insert@Value@Json_c@@QAE_NIABV12@@Z ?invalidPath@Path@Json_c@@CAXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@H@Z ?isAllocated@Value@Json_c@@ABE_NXZ ?isArray@Value@Json_c@@QBE_NXZ ?isBool@Value@Json_c@@QBE_NXZ ?isConvertibleTo@Value@Json_c@@QBE_NW4ValueType@2@@Z ?isDouble@Value@Json_c@@QBE_NXZ ?isEqual@ValueIteratorBase@Json_c@@IBE_NABV12@@Z ?isInt64@Value@Json_c@@QBE_NXZ ?isInt@Value@Json_c@@QBE_NXZ ?isIntegral@Value@Json_c@@QBE_NXZ ?isMember@Value@Json_c@@QBE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ?isMember@Value@Json_c@@QBE_NPBD0@Z ?isMember@Value@Json_c@@QBE_NPBD@Z ?isMultilineArray@StyledStreamWriter@Json_c@@AAE_NABVValue@2@@Z ?isMultilineArray@StyledWriter@Json_c@@AAE_NABVValue@2@@Z ?isNull@Value@Json_c@@QBE_NXZ ?isNumeric@Value@Json_c@@QBE_NXZ ?isObject@Value@Json_c@@QBE_NXZ ?isString@Value@Json_c@@QBE_NXZ ?isUInt64@Value@Json_c@@QBE_NXZ ?isUInt@Value@Json_c@@QBE_NXZ ?isValidIndex@Value@Json_c@@QBE_NI@Z ?key@ValueIteratorBase@Json_c@@QBE?AVValue@2@XZ ?make@Path@Json_c@@QBEAAVValue@2@AAV32@@Z ?makePath@Path@Json_c@@AAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV?$vector@PBVPathArgument@Json_c@@V?$allocator@PBVPathArgument@Json_c@@@std@@@4@@Z ?match@Reader@Json_c@@AAE_NPBDH@Z ?maxInt64@Value@Json_c@@2_JB ?maxInt@Value@Json_c@@2HB ?maxLargestInt@Value@Json_c@@2_JB ?maxLargestUInt@Value@Json_c@@2_KB ?maxUInt64@Value@Json_c@@2_KB ?maxUInt64AsDouble@Value@Json_c@@2NB ?maxUInt@Value@Json_c@@2IB ?memberName@ValueIteratorBase@Json_c@@QBEPBDPAPBD@Z ?memberName@ValueIteratorBase@Json_c@@QBEPBDXZ ?minInt64@Value@Json_c@@2_JB ?minInt@Value@Json_c@@2HB ?minLargestInt@Value@Json_c@@2_JB ?name@ValueIteratorBase@Json_c@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ ?newCharReader@CharReaderBuilder@Json_c@@UBEPAVCharReader@2@XZ ?newStreamWriter@StreamWriterBuilder@Json_c@@UBEPAVStreamWriter@2@XZ ?normalizeEOL@Reader@Json_c@@CA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PBD0@Z ?null@Value@Json_c@@2ABV12@B ?nullRef@Value@Json_c@@2ABV12@B ?nullSingleton@Value@Json_c@@SAABV12@XZ ?omitEndingLineFeed@FastWriter@Json_c@@QAEXXZ ?parse@Reader@Json_c@@QAE_NAAV?$basic_istream@DU?$char_traits@D@std@@@std@@AAVValue@2@_N@Z ?parse@Reader@Json_c@@QAE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAVValue@2@_N@Z ?parse@Reader@Json_c@@QAE_NPBD0AAVValue@2@_N@Z ?parseFromStream@Json_c@@YA_NABVFactory@CharReader@1@AAV?$basic_istream@DU?$char_traits@D@std@@@std@@PAVValue@1@PAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@5@@Z ?pushError@Reader@Json_c@@QAE_NABVValue@2@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z ?pushError@Reader@Json_c@@QAE_NABVValue@2@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ?pushValue@StyledStreamWriter@Json_c@@AAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ?pushValue@StyledWriter@Json_c@@AAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ?readArray@Reader@Json_c@@AAE_NAAVToken@12@@Z ?readCStyleComment@Reader@Json_c@@AAE_NXZ ?readComment@Reader@Json_c@@AAE_NXZ ?readCppStyleComment@Reader@Json_c@@AAE_NXZ ?readNumber@Reader@Json_c@@AAEXXZ ?readObject@Reader@Json_c@@AAE_NAAVToken@12@@Z ?readString@Reader@Json_c@@AAE_NXZ ?readToken@Reader@Json_c@@AAE_NAAVToken@12@@Z ?readValue@Reader@Json_c@@AAE_NXZ ?recoverFromError@Reader@Json_c@@AAE_NW4TokenType@12@@Z ?releasePayload@Value@Json_c@@AAEXXZ ?removeIndex@Value@Json_c@@QAE_NIPAV12@@Z ?removeMember@Value@Json_c@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ?removeMember@Value@Json_c@@QAEXPBD@Z ?removeMember@Value@Json_c@@QAE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PAV12@@Z ?removeMember@Value@Json_c@@QAE_NPBD0PAV12@@Z ?removeMember@Value@Json_c@@QAE_NPBDPAV12@@Z ?resize@Value@Json_c@@QAEXI@Z ?resolve@Path@Json_c@@QBE?AVValue@2@ABV32@0@Z ?resolve@Path@Json_c@@QBEABVValue@2@ABV32@@Z ?resolveReference@Value@Json_c@@AAEAAV12@PBD0@Z ?resolveReference@Value@Json_c@@AAEAAV12@PBD@Z ?setComment@Value@Json_c@@QAEXPBDIW4CommentPlacement@2@@Z ?setComment@Value@Json_c@@QAEXPBDW4CommentPlacement@2@@Z ?setComment@Value@Json_c@@QAEXV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@W4CommentPlacement@2@@Z ?setDefaults@CharReaderBuilder@Json_c@@SAXPAVValue@2@@Z ?setDefaults@StreamWriterBuilder@Json_c@@SAXPAVValue@2@@Z ?setIsAllocated@Value@Json_c@@AAEX_N@Z ?setOffsetLimit@Value@Json_c@@QAEXH@Z ?setOffsetStart@Value@Json_c@@QAEXH@Z ?setType@Value@Json_c@@AAEXW4ValueType@2@@Z ?size@Value@Json_c@@QBEIXZ ?skipCommentTokens@Reader@Json_c@@AAEXAAVToken@12@@Z ?skipSpaces@Reader@Json_c@@AAEXXZ ?strictMode@CharReaderBuilder@Json_c@@SAXPAVValue@2@@Z ?strictMode@Features@Json_c@@SA?AV12@XZ ?swap@Value@Json_c@@QAEXAAV12@@Z ?swapPayload@Value@Json_c@@QAEXAAV12@@Z ?toStyledString@Value@Json_c@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ ?type@Value@Json_c@@QBE?AW4ValueType@2@XZ ?unindent@StyledStreamWriter@Json_c@@AAEXXZ ?unindent@StyledWriter@Json_c@@AAEXXZ ?validate@CharReaderBuilder@Json_c@@QBE_NPAVValue@2@@Z ?validate@StreamWriterBuilder@Json_c@@QBE_NPAVValue@2@@Z ?valueToQuotedString@Json_c@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PBD@Z ?valueToString@Json_c@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@H@Z ?valueToString@Json_c@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@I@Z ?valueToString@Json_c@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@NIW4PrecisionType@1@@Z ?valueToString@Json_c@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@_J@Z ?valueToString@Json_c@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@_K@Z ?valueToString@Json_c@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@_N@Z ?what@Exception@Json_c@@UBEPBDXZ ?write@FastWriter@Json_c@@UAE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABVValue@2@@Z ?write@StyledStreamWriter@Json_c@@QAEXAAV?$basic_ostream@DU?$char_traits@D@std@@@std@@ABVValue@2@@Z ?write@StyledWriter@Json_c@@UAE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABVValue@2@@Z ?writeArrayValue@StyledStreamWriter@Json_c@@AAEXABVValue@2@@Z ?writeArrayValue@StyledWriter@Json_c@@AAEXABVValue@2@@Z ?writeCommentAfterValueOnSameLine@StyledStreamWriter@Json_c@@AAEXABVValue@2@@Z ?writeCommentAfterValueOnSameLine@StyledWriter@Json_c@@AAEXABVValue@2@@Z ?writeCommentBeforeValue@StyledStreamWriter@Json_c@@AAEXABVValue@2@@Z ?writeCommentBeforeValue@StyledWriter@Json_c@@AAEXABVValue@2@@Z ?writeIndent@StyledStreamWriter@Json_c@@AAEXXZ ?writeIndent@StyledWriter@Json_c@@AAEXXZ ?writeString@Json_c@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABVFactory@StreamWriter@1@ABVValue@1@@Z ?writeValue@FastWriter@Json_c@@AAEXABVValue@2@@Z ?writeValue@StyledStreamWriter@Json_c@@AAEXABVValue@2@@Z ?writeValue@StyledWriter@Json_c@@AAEXABVValue@2@@Z ?writeWithIndent@StyledStreamWriter@Json_c@@AAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ?writeWithIndent@StyledWriter@Json_c@@AAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-09_0eb8ecfd4059931ac61627f6bea7b0f4_amadey_avoslocker_coinminer_elex_glassworm_luca-stealer_lynx_njrat_revil

ws2_32

wldap32

kernel32

user32

advapi32

shell32

ole32

oleaut32

shlwapi

wininet

dbghelp

crypt32

generic