2026-09-17_006b23655b70450d8a62f0891ccea5a8_amadey_elex_luca-stealer_medusalocker_njrat_remcos_rokrat

Sharing

Copy URL Twitter E-mail

General

Target
2026-09-17_006b23655b70450d8a62f0891ccea5a8_amadey_elex_luca-stealer_medusalocker_njrat_remcos_rokrat
Size 1.4MB
Sample260917-27f8msxvas
SHA256 abdcd89518c558e4c38df077e17aaa39f40fb33b69649ec5d03c4e0803454f91
MD5 006b23655b70450d8a62f0891ccea5a8
SHA1 9abf5d891c56d0cfcb567540518a483bc234d558
SHA512 680f9f6dae6c038f727fc1030afbff47534ede4a5cc6cb37dfc17ef931c90dc470100cf18f453891cd26d09d78a3d1e26b2162b215cec23860424a474b05ac61
SSDEEP 24576:Cjt1K4xWWBGeBfPs8w9dvcW4yZs4oo2oTWAuwC04Bhk5OdCN/j2GLl3iFSE33b9b:CRkCT57wxcuZThu24Bhk5RN/j2U4FH
TLSH
T10565CF10B6429137F47311B28EBC6AEE853CE960073939CBA3C85A7E5A785D27E33517
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-17_006b23655b70450d8a62f0891ccea5a8_amadey_elex_luca-stealer_medusalocker_njrat_remcos_rokrat

File Explorer

2026-09-17_006b23655b70450d8a62f0891ccea5a8_amadey_elex_luca-stealer_medusalocker_njrat_remcos_rokrat

.exe 1.4MB

2026-09-17_006b23655b70450d8a62f0891ccea5a8_amadey_elex_luca-stealer_medusalocker_njrat_remcos_rokrat

IMPHASH a1ed33313c504d4187cd01b282e1dfac
SHA256 abdcd89518c558e4c38df077e17aaa39f40fb33b69649ec5d03c4e0803454f91
MD5 006b23655b70450d8a62f0891ccea5a8
SHA1 9abf5d891c56d0cfcb567540518a483bc234d558
SHA512 680f9f6dae6c038f727fc1030afbff47534ede4a5cc6cb37dfc17ef931c90dc470100cf18f453891cd26d09d78a3d1e26b2162b215cec23860424a474b05ac61
SSDEEP 24576:Cjt1K4xWWBGeBfPs8w9dvcW4yZs4oo2oTWAuwC04Bhk5OdCN/j2GLl3iFSE33b9b:CRkCT57wxcuZThu24Bhk5RN/j2U4FH
TLSH
T10565CF10B6429137F47311B28EBC6AEE853CE960073939CBA3C85A7E5A785D27E33517
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

387334

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

E:\Branch\wegame_enviroment\dx_repair\dx_repair\Release\dx_repair.pdb

version

VerQueryValueW GetFileVersionInfoW GetFileVersionInfoSizeW

kernel32

HeapReAlloc RaiseException HeapAlloc DecodePointer HeapDestroy DeleteCriticalSection GetProcessHeap WideCharToMultiByte CreateDirectoryW SizeofResource TlsSetValue Wow64DisableWow64FsRedirection SetFileTime FindResourceA LocalAlloc CreateFileW GetFileAttributesW GetCurrentThreadId OpenFileMappingW UnmapViewOfFile GetModuleHandleA FreeResource SetFileAttributesW GetModuleHandleExA LocalFileTimeToFileTime Wow64RevertWow64FsRedirection GetFileAttributesExW LockResource DeleteFileW CloseHandle LoadLibraryW FindResourceExW LoadResource FindResourceW GetWindowsDirectoryW GetProcAddress LocalFree VerSetConditionMask FreeLibrary GetLastError lstrcpyW VerifyVersionInfoW TlsGetValue DosDateTimeToFileTime MapViewOfFile GetTickCount EnterCriticalSection GetFullPathNameW GetLongPathNameW ReleaseSemaphore WriteFile OutputDebugStringA InitializeCriticalSectionAndSpinCount LeaveCriticalSection WaitForSingleObject OutputDebugStringW TerminateThread SystemTimeToFileTime CreateSemaphoreW GetSystemTime CreateFileMappingW FlushFileBuffers SetEvent CreateThread ResetEvent GetCurrentProcessId CreateEventA InterlockedPopEntrySList VirtualFree MultiByteToWideChar HeapSize InitializeCriticalSectionEx GetModuleFileNameW VirtualProtect VirtualAlloc GetVersionExW GetThreadTimes UnregisterWait RegisterWaitForSingleObject SetThreadAffinityMask GetProcessAffinityMask GetNumaHighestNodeNumber DeleteTimerQueueTimer GetCommandLineW HeapFree TlsAlloc QueryDepthSList UnregisterWaitEx CopyFileW CreateEventW WaitForSingleObjectEx GetModuleHandleW UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW QueryPerformanceCounter GetSystemTimeAsFileTime InitializeSListHead FormatMessageW GetStringTypeW TryEnterCriticalSection QueryPerformanceFrequency FindClose FindFirstFileExW FindNextFileW SetEndOfFile SetFilePointerEx DuplicateHandle Sleep SwitchToThread GetCurrentThread SetLastError TlsFree EncodePointer GetCPInfo CompareStringW LCMapStringW GetLocaleInfoW RtlUnwind InterlockedPushEntrySList InterlockedFlushSList LoadLibraryExW ReadFile GetConsoleMode ReadConsoleW GetConsoleCP GetFileType ExitThread FreeLibraryAndExitThread GetModuleHandleExW ExitProcess GetModuleFileNameA GetStdHandle GetCommandLineA GetACP SetEnvironmentVariableA GetDateFormatW GetTimeFormatW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW SetStdHandle WriteConsoleW GetTimeZoneInformation FindFirstFileExA FindNextFileA IsValidCodePage GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW CreateTimerQueue SignalObjectAndWait SetThreadPriority GetThreadPriority GetLogicalProcessorInformation CreateTimerQueueTimer ChangeTimerQueueTimer

advapi32

CryptReleaseContext CryptAcquireContextA CryptGenRandom

shell32

SHFileOperationW SHCreateDirectoryExW

ole32

CoInitialize CoUninitialize

shlwapi

PathRemoveFileSpecW PathFileExistsW PathIsDirectoryW

crypt32

CryptMsgGetParam CryptMsgClose CryptQueryObject CertFindCertificateInStore CertFreeCertificateContext CertCloseStore CertGetNameStringW

??0Exception@Json@@QAE@ABV01@@Z ??0Exception@Json@@QAE@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ??0Factory@StreamWriter@Json@@QAE@ABV012@@Z ??0Factory@StreamWriter@Json@@QAE@XZ ??0FastWriter@Json@@QAE@ABV01@@Z ??0FastWriter@Json@@QAE@XZ ??0LogicError@Json@@QAE@$$QAV01@@Z ??0LogicError@Json@@QAE@ABV01@@Z ??0LogicError@Json@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ??0Path@Json@@QAE@$$QAV01@@Z ??0Path@Json@@QAE@ABV01@@Z ??0Path@Json@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABVPathArgument@1@1111@Z ??0PathArgument@Json@@QAE@$$QAV01@@Z ??0PathArgument@Json@@QAE@ABV01@@Z ??0PathArgument@Json@@QAE@I@Z ??0PathArgument@Json@@QAE@PBD@Z ??0PathArgument@Json@@QAE@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ??0PathArgument@Json@@QAE@XZ ??0RuntimeError@Json@@QAE@$$QAV01@@Z ??0RuntimeError@Json@@QAE@ABV01@@Z ??0RuntimeError@Json@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ??0StaticString@Json@@QAE@PBD@Z ??0StreamWriter@Json@@QAE@ABV01@@Z ??0StreamWriter@Json@@QAE@XZ ??0StreamWriterBuilder@Json@@QAE@ABV01@@Z ??0StreamWriterBuilder@Json@@QAE@XZ ??0StyledStreamWriter@Json@@QAE@ABV01@@Z ??0StyledStreamWriter@Json@@QAE@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ??0StyledWriter@Json@@QAE@ABV01@@Z ??0StyledWriter@Json@@QAE@XZ ??0Value@Json@@QAE@$$QAV01@@Z ??0Value@Json@@QAE@ABV01@@Z ??0Value@Json@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ??0Value@Json@@QAE@ABVStaticString@1@@Z ??0Value@Json@@QAE@H@Z ??0Value@Json@@QAE@I@Z ??0Value@Json@@QAE@N@Z ??0Value@Json@@QAE@PBD0@Z ??0Value@Json@@QAE@PBD@Z ??0Value@Json@@QAE@W4ValueType@1@@Z ??0Value@Json@@QAE@_J@Z ??0Value@Json@@QAE@_K@Z ??0Value@Json@@QAE@_N@Z ??0ValueConstIterator@Json@@AAE@ABV?$_Tree_iterator@V?$_Tree_val@U?$_Tree_simple_types@U?$pair@$$CBVCZString@Value@Json@@V23@@std@@@std@@@std@@@std@@@Z ??0ValueConstIterator@Json@@QAE@ABVValueIterator@1@@Z ??0ValueConstIterator@Json@@QAE@XZ ??0ValueIterator@Json@@AAE@ABV?$_Tree_iterator@V?$_Tree_val@U?$_Tree_simple_types@U?$pair@$$CBVCZString@Value@Json@@V23@@std@@@std@@@std@@@std@@@Z ??0ValueIterator@Json@@QAE@ABV01@@Z ??0ValueIterator@Json@@QAE@ABVValueConstIterator@1@@Z ??0ValueIterator@Json@@QAE@XZ ??0ValueIteratorBase@Json@@QAE@ABV?$_Tree_iterator@V?$_Tree_val@U?$_Tree_simple_types@U?$pair@$$CBVCZString@Value@Json@@V23@@std@@@std@@@std@@@std@@@Z ??0ValueIteratorBase@Json@@QAE@XZ ??0Writer@Json@@QAE@ABV01@@Z ??0Writer@Json@@QAE@XZ ??1Exception@Json@@UAE@XZ ??1Factory@StreamWriter@Json@@UAE@XZ ??1FastWriter@Json@@UAE@XZ ??1LogicError@Json@@UAE@XZ ??1Path@Json@@QAE@XZ ??1PathArgument@Json@@QAE@XZ ??1RuntimeError@Json@@UAE@XZ ??1StreamWriter@Json@@UAE@XZ ??1StreamWriterBuilder@Json@@UAE@XZ ??1StyledStreamWriter@Json@@QAE@XZ ??1StyledWriter@Json@@UAE@XZ ??1Value@Json@@QAE@XZ ??1Writer@Json@@UAE@XZ ??4Exception@Json@@QAEAAV01@ABV01@@Z ??4Factory@StreamWriter@Json@@QAEAAV012@ABV012@@Z ??4FastWriter@Json@@QAEAAV01@ABV01@@Z ??4LogicError@Json@@QAEAAV01@$$QAV01@@Z ??4LogicError@Json@@QAEAAV01@ABV01@@Z ??4Path@Json@@QAEAAV01@$$QAV01@@Z ??4Path@Json@@QAEAAV01@ABV01@@Z ??4PathArgument@Json@@QAEAAV01@$$QAV01@@Z ??4PathArgument@Json@@QAEAAV01@ABV01@@Z ??4RuntimeError@Json@@QAEAAV01@$$QAV01@@Z ??4RuntimeError@Json@@QAEAAV01@ABV01@@Z ??4StaticString@Json@@QAEAAV01@$$QAV01@@Z ??4StaticString@Json@@QAEAAV01@ABV01@@Z ??4StreamWriter@Json@@QAEAAV01@ABV01@@Z ??4StreamWriterBuilder@Json@@QAEAAV01@ABV01@@Z ??4StyledStreamWriter@Json@@QAEAAV01@ABV01@@Z ??4StyledWriter@Json@@QAEAAV01@ABV01@@Z ??4Value@Json@@QAEAAV01@$$QAV01@@Z ??4Value@Json@@QAEAAV01@ABV01@@Z ??4ValueConstIterator@Json@@QAEAAV01@$$QAV01@@Z ??4ValueConstIterator@Json@@QAEAAV01@ABV01@@Z ??4ValueConstIterator@Json@@QAEAAV01@ABVValueIteratorBase@1@@Z ??4ValueIterator@Json@@QAEAAV01@ABV01@@Z ??4ValueIteratorBase@Json@@QAEAAV01@$$QAV01@@Z ??4ValueIteratorBase@Json@@QAEAAV01@ABV01@@Z ??4Writer@Json@@QAEAAV01@ABV01@@Z ??6Json@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@std@@AAV12@ABVValue@0@@Z ??8Value@Json@@QBE_NABV01@@Z ??8ValueIteratorBase@Json@@QBE_NABV01@@Z ??9Value@Json@@QBE_NABV01@@Z ??9ValueIteratorBase@Json@@QBE_NABV01@@Z ??AStreamWriterBuilder@Json@@QAEAAVValue@1@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ??AValue@Json@@QAEAAV01@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ??AValue@Json@@QAEAAV01@ABVStaticString@1@@Z ??AValue@Json@@QAEAAV01@H@Z ??AValue@Json@@QAEAAV01@I@Z ??AValue@Json@@QAEAAV01@PBD@Z ??AValue@Json@@QBEABV01@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ??AValue@Json@@QBEABV01@H@Z ??AValue@Json@@QBEABV01@I@Z ??AValue@Json@@QBEABV01@PBD@Z ??BStaticString@Json@@QBEPBDXZ ??BValue@Json@@QBE_NXZ ??CValueConstIterator@Json@@QBEPBVValue@1@XZ ??CValueIterator@Json@@QBEPAVValue@1@XZ ??DValueConstIterator@Json@@QBEABVValue@1@XZ ??DValueIterator@Json@@QBEAAVValue@1@XZ ??EValueConstIterator@Json@@QAE?AV01@H@Z ??EValueConstIterator@Json@@QAEAAV01@XZ ??EValueIterator@Json@@QAE?AV01@H@Z ??EValueIterator@Json@@QAEAAV01@XZ ??FValueConstIterator@Json@@QAE?AV01@H@Z ??FValueConstIterator@Json@@QAEAAV01@XZ ??FValueIterator@Json@@QAE?AV01@H@Z ??FValueIterator@Json@@QAEAAV01@XZ ??GValueIteratorBase@Json@@QBEHABV01@@Z ??MValue@Json@@QBE_NABV01@@Z ??NValue@Json@@QBE_NABV01@@Z ??OValue@Json@@QBE_NABV01@@Z ??PValue@Json@@QBE_NABV01@@Z ??_7Exception@Json@@6B@ ??_7Factory@StreamWriter@Json@@6B@ ??_7FastWriter@Json@@6B@ ??_7LogicError@Json@@6B@ ??_7RuntimeError@Json@@6B@ ??_7StreamWriter@Json@@6B@ ??_7StreamWriterBuilder@Json@@6B@ ??_7StyledWriter@Json@@6B@ ??_7Writer@Json@@6B@ ??_FStyledStreamWriter@Json@@QAEXXZ ??_FValue@Json@@QAEXXZ ?addPathInArg@Path@Json@@AAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV?$vector@PBVPathArgument@Json@@V?$allocator@PBVPathArgument@Json@@@std@@@4@AAV?$_Vector_const_iterator@V?$_Vector_val@U?$_Simple_types@PBVPathArgument@Json@@@std@@@std@@@4@W4Kind@PathArgument@2@@Z ?append@Value@Json@@QAEAAV12@$$QAV12@@Z ?append@Value@Json@@QAEAAV12@ABV12@@Z ?asBool@Value@Json@@QBE_NXZ ?asCString@Value@Json@@QBEPBDXZ ?asDouble@Value@Json@@QBENXZ ?asFloat@Value@Json@@QBEMXZ ?asInt64@Value@Json@@QBE_JXZ ?asInt@Value@Json@@QBEHXZ ?asLargestInt@Value@Json@@QBE_JXZ ?asLargestUInt@Value@Json@@QBE_KXZ ?asString@Value@Json@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ ?asUInt64@Value@Json@@QBE_KXZ ?asUInt@Value@Json@@QBEIXZ ?begin@Value@Json@@QAE?AVValueIterator@2@XZ ?begin@Value@Json@@QBE?AVValueConstIterator@2@XZ ?c_str@StaticString@Json@@QBEPBDXZ ?clear@Value@Json@@QAEXXZ ?compare@Value@Json@@QBEHABV12@@Z ?computeDistance@ValueIteratorBase@Json@@IBEHABV12@@Z ?copy@Value@Json@@QAEXABV12@@Z ?copy@ValueIteratorBase@Json@@IAEXABV12@@Z ?copyPayload@Value@Json@@QAEXABV12@@Z ?decrement@ValueIteratorBase@Json@@IAEXXZ ?defaultRealPrecision@Value@Json@@2IB ?demand@Value@Json@@QAEPAV12@PBD0@Z ?deref@ValueIteratorBase@Json@@IAEAAVValue@2@XZ ?deref@ValueIteratorBase@Json@@IBEABVValue@2@XZ ?dropNullPlaceholders@FastWriter@Json@@QAEXXZ ?dupMeta@Value@Json@@AAEXABV12@@Z ?dupPayload@Value@Json@@AAEXABV12@@Z ?empty@Value@Json@@QBE_NXZ ?enableYAMLCompatibility@FastWriter@Json@@QAEXXZ ?end@Value@Json@@QAE?AVValueIterator@2@XZ ?end@Value@Json@@QBE?AVValueConstIterator@2@XZ ?find@Value@Json@@QBEPBV12@PBD0@Z ?get@Value@Json@@QBE?AV12@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV12@@Z ?get@Value@Json@@QBE?AV12@IABV12@@Z ?get@Value@Json@@QBE?AV12@PBD0ABV12@@Z ?get@Value@Json@@QBE?AV12@PBDABV12@@Z ?getComment@Value@Json@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@W4CommentPlacement@2@@Z ?getMemberNames@Value@Json@@QBE?AV?$vector@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@std@@XZ ?getOffsetLimit@Value@Json@@QBEHXZ ?getOffsetStart@Value@Json@@QBEHXZ ?getString@Value@Json@@QBE_NPAPBD0@Z ?hasComment@Value@Json@@QBE_NW4CommentPlacement@2@@Z ?hasCommentForValue@StyledStreamWriter@Json@@CA_NABVValue@2@@Z ?hasCommentForValue@StyledWriter@Json@@CA_NABVValue@2@@Z ?increment@ValueIteratorBase@Json@@IAEXXZ ?indent@StyledStreamWriter@Json@@AAEXXZ ?indent@StyledWriter@Json@@AAEXXZ ?index@ValueIteratorBase@Json@@QBEIXZ ?initBasic@Value@Json@@AAEXW4ValueType@2@_N@Z ?insert@Value@Json@@QAE_NI$$QAV12@@Z ?insert@Value@Json@@QAE_NIABV12@@Z ?invalidPath@Path@Json@@CAXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@H@Z ?isAllocated@Value@Json@@ABE_NXZ ?isArray@Value@Json@@QBE_NXZ ?isBool@Value@Json@@QBE_NXZ ?isConvertibleTo@Value@Json@@QBE_NW4ValueType@2@@Z ?isDouble@Value@Json@@QBE_NXZ ?isEqual@ValueIteratorBase@Json@@IBE_NABV12@@Z ?isInt64@Value@Json@@QBE_NXZ ?isInt@Value@Json@@QBE_NXZ ?isIntegral@Value@Json@@QBE_NXZ ?isMember@Value@Json@@QBE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ?isMember@Value@Json@@QBE_NPBD0@Z ?isMember@Value@Json@@QBE_NPBD@Z ?isMultilineArray@StyledStreamWriter@Json@@AAE_NABVValue@2@@Z ?isMultilineArray@StyledWriter@Json@@AAE_NABVValue@2@@Z ?isNull@Value@Json@@QBE_NXZ ?isNumeric@Value@Json@@QBE_NXZ ?isObject@Value@Json@@QBE_NXZ ?isString@Value@Json@@QBE_NXZ ?isUInt64@Value@Json@@QBE_NXZ ?isUInt@Value@Json@@QBE_NXZ ?isValidIndex@Value@Json@@QBE_NI@Z ?key@ValueIteratorBase@Json@@QBE?AVValue@2@XZ ?make@Path@Json@@QBEAAVValue@2@AAV32@@Z ?makePath@Path@Json@@AAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV?$vector@PBVPathArgument@Json@@V?$allocator@PBVPathArgument@Json@@@std@@@4@@Z ?maxInt64@Value@Json@@2_JB ?maxInt@Value@Json@@2HB ?maxLargestInt@Value@Json@@2_JB ?maxLargestUInt@Value@Json@@2_KB ?maxUInt64@Value@Json@@2_KB ?maxUInt64AsDouble@Value@Json@@2NB ?maxUInt@Value@Json@@2IB ?memberName@ValueIteratorBase@Json@@QBEPBDPAPBD@Z ?memberName@ValueIteratorBase@Json@@QBEPBDXZ ?minInt64@Value@Json@@2_JB ?minInt@Value@Json@@2HB ?minLargestInt@Value@Json@@2_JB ?name@ValueIteratorBase@Json@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ ?newStreamWriter@StreamWriterBuilder@Json@@UBEPAVStreamWriter@2@XZ ?null@Value@Json@@2ABV12@B ?nullRef@Value@Json@@2ABV12@B ?nullSingleton@Value@Json@@SAABV12@XZ ?omitEndingLineFeed@FastWriter@Json@@QAEXXZ ?pushValue@StyledStreamWriter@Json@@AAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ?pushValue@StyledWriter@Json@@AAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ?releasePayload@Value@Json@@AAEXXZ ?removeIndex@Value@Json@@QAE_NIPAV12@@Z ?removeMember@Value@Json@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ?removeMember@Value@Json@@QAEXPBD@Z ?removeMember@Value@Json@@QAE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PAV12@@Z ?removeMember@Value@Json@@QAE_NPBD0PAV12@@Z ?removeMember@Value@Json@@QAE_NPBDPAV12@@Z ?resize@Value@Json@@QAEXI@Z ?resolve@Path@Json@@QBE?AVValue@2@ABV32@0@Z ?resolve@Path@Json@@QBEABVValue@2@ABV32@@Z ?resolveReference@Value@Json@@AAEAAV12@PBD0@Z ?resolveReference@Value@Json@@AAEAAV12@PBD@Z ?setComment@Value@Json@@QAEXPBDIW4CommentPlacement@2@@Z ?setComment@Value@Json@@QAEXPBDW4CommentPlacement@2@@Z ?setComment@Value@Json@@QAEXV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@W4CommentPlacement@2@@Z ?setDefaults@StreamWriterBuilder@Json@@SAXPAVValue@2@@Z ?setIsAllocated@Value@Json@@AAEX_N@Z ?setOffsetLimit@Value@Json@@QAEXH@Z ?setOffsetStart@Value@Json@@QAEXH@Z ?setType@Value@Json@@AAEXW4ValueType@2@@Z ?size@Value@Json@@QBEIXZ ?swap@Value@Json@@QAEXAAV12@@Z ?swapPayload@Value@Json@@QAEXAAV12@@Z ?toStyledString@Value@Json@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ ?type@Value@Json@@QBE?AW4ValueType@2@XZ ?unindent@StyledStreamWriter@Json@@AAEXXZ ?unindent@StyledWriter@Json@@AAEXXZ ?validate@StreamWriterBuilder@Json@@QBE_NPAVValue@2@@Z ?valueToQuotedString@Json@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PBD@Z ?valueToString@Json@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@H@Z ?valueToString@Json@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@I@Z ?valueToString@Json@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@NIW4PrecisionType@1@@Z ?valueToString@Json@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@_J@Z ?valueToString@Json@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@_K@Z ?valueToString@Json@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@_N@Z ?what@Exception@Json@@UBEPBDXZ ?write@FastWriter@Json@@UAE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABVValue@2@@Z ?write@StyledStreamWriter@Json@@QAEXAAV?$basic_ostream@DU?$char_traits@D@std@@@std@@ABVValue@2@@Z ?write@StyledWriter@Json@@UAE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABVValue@2@@Z ?writeArrayValue@StyledStreamWriter@Json@@AAEXABVValue@2@@Z ?writeArrayValue@StyledWriter@Json@@AAEXABVValue@2@@Z ?writeCommentAfterValueOnSameLine@StyledStreamWriter@Json@@AAEXABVValue@2@@Z ?writeCommentAfterValueOnSameLine@StyledWriter@Json@@AAEXABVValue@2@@Z ?writeCommentBeforeValue@StyledStreamWriter@Json@@AAEXABVValue@2@@Z ?writeCommentBeforeValue@StyledWriter@Json@@AAEXABVValue@2@@Z ?writeIndent@StyledStreamWriter@Json@@AAEXXZ ?writeIndent@StyledWriter@Json@@AAEXXZ ?writeString@Json@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABVFactory@StreamWriter@1@ABVValue@1@@Z ?writeValue@FastWriter@Json@@AAEXABVValue@2@@Z ?writeValue@StyledStreamWriter@Json@@AAEXABVValue@2@@Z ?writeValue@StyledWriter@Json@@AAEXABVValue@2@@Z ?writeWithIndent@StyledStreamWriter@Json@@AAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ?writeWithIndent@StyledWriter@Json@@AAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-17_006b23655b70450d8a62f0891ccea5a8_amadey_elex_luca-stealer_medusalocker_njrat_remcos_rokrat

version

kernel32

advapi32

shell32

ole32

shlwapi

crypt32

generic