2026-10-25_c2376077d32c7e6ba30d80abed9fbaa5_amadey_elex_luca-stealer_medusalocker_njrat_remcos_rokrat

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-25_c2376077d32c7e6ba30d80abed9fbaa5_amadey_elex_luca-stealer_medusalocker_njrat_remcos_rokrat
Size 1.6MB
Sample261026-qlstrsw1ct
SHA256 d2c2e7a659a770d568bd38f5ad338fbcd32edd3e57c2819ed47fa6d6aecd8cff
MD5 c2376077d32c7e6ba30d80abed9fbaa5
SHA1 37973e2ce4984c9924d5e269ae509dc2c835eca4
SHA512 c2ed8fe9c08620d85e2bed0e80d3ee5924728aadb7712cae613e9c52833219b060f1e3b0767634c5e9c80efcec658b11d3c65bd4fb55d7fa10142c2602e26119
SSDEEP 49152:d4kCTa7wxcuZThu24Bhk5hUWaEtuMCpYWY+:d4kp04/3YT
TLSH
T17A75E020B5429137F87311B28EBD6AEE853CE521077939CB63C86A3E5A784D27E33517
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-25_c2376077d32c7e6ba30d80abed9fbaa5_amadey_elex_luca-stealer_medusalocker_njrat_remcos_rokrat

File Explorer

2026-10-25_c2376077d32c7e6ba30d80abed9fbaa5_amadey_elex_luca-stealer_medusalocker_njrat_remcos_rokrat

.exe 1.6MB

2026-10-25_c2376077d32c7e6ba30d80abed9fbaa5_amadey_elex_luca-stealer_medusalocker_njrat_remcos_rokrat

IMPHASH a1ed33313c504d4187cd01b282e1dfac
SHA256 d2c2e7a659a770d568bd38f5ad338fbcd32edd3e57c2819ed47fa6d6aecd8cff
MD5 c2376077d32c7e6ba30d80abed9fbaa5
SHA1 37973e2ce4984c9924d5e269ae509dc2c835eca4
SHA512 c2ed8fe9c08620d85e2bed0e80d3ee5924728aadb7712cae613e9c52833219b060f1e3b0767634c5e9c80efcec658b11d3c65bd4fb55d7fa10142c2602e26119
SSDEEP 49152:d4kCTa7wxcuZThu24Bhk5hUWaEtuMCpYWY+:d4kp04/3YT
TLSH
T17A75E020B5429137F87311B28EBD6AEE853CE521077939CB63C86A3E5A784D27E33517
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

387334

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

E:\Branch\wegame_enviroment\dx_repair\dx_repair\Release\dx_repair.pdb

version

VerQueryValueW GetFileVersionInfoW GetFileVersionInfoSizeW

kernel32

HeapReAlloc RaiseException HeapAlloc DecodePointer HeapDestroy DeleteCriticalSection GetProcessHeap WideCharToMultiByte CreateDirectoryW SizeofResource TlsSetValue Wow64DisableWow64FsRedirection SetFileTime FindResourceA LocalAlloc CreateFileW GetFileAttributesW GetCurrentThreadId OpenFileMappingW UnmapViewOfFile GetModuleHandleA FreeResource SetFileAttributesW GetModuleHandleExA LocalFileTimeToFileTime Wow64RevertWow64FsRedirection GetFileAttributesExW LockResource DeleteFileW CloseHandle LoadLibraryW FindResourceExW LoadResource FindResourceW GetWindowsDirectoryW GetProcAddress LocalFree VerSetConditionMask FreeLibrary GetLastError lstrcpyW VerifyVersionInfoW TlsGetValue DosDateTimeToFileTime MapViewOfFile GetTickCount EnterCriticalSection GetFullPathNameW GetLongPathNameW ReleaseSemaphore WriteFile OutputDebugStringA InitializeCriticalSectionAndSpinCount LeaveCriticalSection WaitForSingleObject OutputDebugStringW TerminateThread SystemTimeToFileTime CreateSemaphoreW GetSystemTime CreateFileMappingW FlushFileBuffers SetEvent CreateThread ResetEvent GetCurrentProcessId CreateEventA InterlockedPopEntrySList VirtualFree MultiByteToWideChar HeapSize InitializeCriticalSectionEx GetModuleFileNameW VirtualProtect VirtualAlloc GetVersionExW GetThreadTimes UnregisterWait RegisterWaitForSingleObject SetThreadAffinityMask GetProcessAffinityMask GetNumaHighestNodeNumber DeleteTimerQueueTimer GetCommandLineW HeapFree TlsAlloc QueryDepthSList UnregisterWaitEx CopyFileW CreateEventW WaitForSingleObjectEx GetModuleHandleW UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW QueryPerformanceCounter GetSystemTimeAsFileTime InitializeSListHead FormatMessageW GetStringTypeW TryEnterCriticalSection QueryPerformanceFrequency FindClose FindFirstFileExW FindNextFileW SetEndOfFile SetFilePointerEx DuplicateHandle Sleep SwitchToThread GetCurrentThread SetLastError TlsFree EncodePointer GetCPInfo CompareStringW LCMapStringW GetLocaleInfoW RtlUnwind InterlockedPushEntrySList InterlockedFlushSList LoadLibraryExW ReadFile GetConsoleMode ReadConsoleW GetConsoleCP GetFileType ExitThread FreeLibraryAndExitThread GetModuleHandleExW ExitProcess GetModuleFileNameA GetStdHandle GetCommandLineA GetACP SetEnvironmentVariableA GetDateFormatW GetTimeFormatW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW SetStdHandle WriteConsoleW GetTimeZoneInformation FindFirstFileExA FindNextFileA IsValidCodePage GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW CreateTimerQueue SignalObjectAndWait SetThreadPriority GetThreadPriority GetLogicalProcessorInformation CreateTimerQueueTimer ChangeTimerQueueTimer

advapi32

CryptReleaseContext CryptAcquireContextA CryptGenRandom

shell32

SHFileOperationW SHCreateDirectoryExW

ole32

CoInitialize CoUninitialize

shlwapi

PathRemoveFileSpecW PathFileExistsW PathIsDirectoryW

crypt32

CryptMsgGetParam CryptMsgClose CryptQueryObject CertFindCertificateInStore CertFreeCertificateContext CertCloseStore CertGetNameStringW

??0Exception@Json@@QAE@ABV01@@Z ??0Exception@Json@@QAE@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ??0Factory@StreamWriter@Json@@QAE@ABV012@@Z ??0Factory@StreamWriter@Json@@QAE@XZ ??0FastWriter@Json@@QAE@ABV01@@Z ??0FastWriter@Json@@QAE@XZ ??0LogicError@Json@@QAE@$$QAV01@@Z ??0LogicError@Json@@QAE@ABV01@@Z ??0LogicError@Json@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ??0Path@Json@@QAE@$$QAV01@@Z ??0Path@Json@@QAE@ABV01@@Z ??0Path@Json@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABVPathArgument@1@1111@Z ??0PathArgument@Json@@QAE@$$QAV01@@Z ??0PathArgument@Json@@QAE@ABV01@@Z ??0PathArgument@Json@@QAE@I@Z ??0PathArgument@Json@@QAE@PBD@Z ??0PathArgument@Json@@QAE@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ??0PathArgument@Json@@QAE@XZ ??0RuntimeError@Json@@QAE@$$QAV01@@Z ??0RuntimeError@Json@@QAE@ABV01@@Z ??0RuntimeError@Json@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ??0StaticString@Json@@QAE@PBD@Z ??0StreamWriter@Json@@QAE@ABV01@@Z ??0StreamWriter@Json@@QAE@XZ ??0StreamWriterBuilder@Json@@QAE@ABV01@@Z ??0StreamWriterBuilder@Json@@QAE@XZ ??0StyledStreamWriter@Json@@QAE@ABV01@@Z ??0StyledStreamWriter@Json@@QAE@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ??0StyledWriter@Json@@QAE@ABV01@@Z ??0StyledWriter@Json@@QAE@XZ ??0Value@Json@@QAE@$$QAV01@@Z ??0Value@Json@@QAE@ABV01@@Z ??0Value@Json@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ??0Value@Json@@QAE@ABVStaticString@1@@Z ??0Value@Json@@QAE@H@Z ??0Value@Json@@QAE@I@Z ??0Value@Json@@QAE@N@Z ??0Value@Json@@QAE@PBD0@Z ??0Value@Json@@QAE@PBD@Z ??0Value@Json@@QAE@W4ValueType@1@@Z ??0Value@Json@@QAE@_J@Z ??0Value@Json@@QAE@_K@Z ??0Value@Json@@QAE@_N@Z ??0ValueConstIterator@Json@@AAE@ABV?$_Tree_iterator@V?$_Tree_val@U?$_Tree_simple_types@U?$pair@$$CBVCZString@Value@Json@@V23@@std@@@std@@@std@@@std@@@Z ??0ValueConstIterator@Json@@QAE@ABVValueIterator@1@@Z ??0ValueConstIterator@Json@@QAE@XZ ??0ValueIterator@Json@@AAE@ABV?$_Tree_iterator@V?$_Tree_val@U?$_Tree_simple_types@U?$pair@$$CBVCZString@Value@Json@@V23@@std@@@std@@@std@@@std@@@Z ??0ValueIterator@Json@@QAE@ABV01@@Z ??0ValueIterator@Json@@QAE@ABVValueConstIterator@1@@Z ??0ValueIterator@Json@@QAE@XZ ??0ValueIteratorBase@Json@@QAE@ABV?$_Tree_iterator@V?$_Tree_val@U?$_Tree_simple_types@U?$pair@$$CBVCZString@Value@Json@@V23@@std@@@std@@@std@@@std@@@Z ??0ValueIteratorBase@Json@@QAE@XZ ??0Writer@Json@@QAE@ABV01@@Z ??0Writer@Json@@QAE@XZ ??1Exception@Json@@UAE@XZ ??1Factory@StreamWriter@Json@@UAE@XZ ??1FastWriter@Json@@UAE@XZ ??1LogicError@Json@@UAE@XZ ??1Path@Json@@QAE@XZ ??1PathArgument@Json@@QAE@XZ ??1RuntimeError@Json@@UAE@XZ ??1StreamWriter@Json@@UAE@XZ ??1StreamWriterBuilder@Json@@UAE@XZ ??1StyledStreamWriter@Json@@QAE@XZ ??1StyledWriter@Json@@UAE@XZ ??1Value@Json@@QAE@XZ ??1Writer@Json@@UAE@XZ ??4Exception@Json@@QAEAAV01@ABV01@@Z ??4Factory@StreamWriter@Json@@QAEAAV012@ABV012@@Z ??4FastWriter@Json@@QAEAAV01@ABV01@@Z ??4LogicError@Json@@QAEAAV01@$$QAV01@@Z ??4LogicError@Json@@QAEAAV01@ABV01@@Z ??4Path@Json@@QAEAAV01@$$QAV01@@Z ??4Path@Json@@QAEAAV01@ABV01@@Z ??4PathArgument@Json@@QAEAAV01@$$QAV01@@Z ??4PathArgument@Json@@QAEAAV01@ABV01@@Z ??4RuntimeError@Json@@QAEAAV01@$$QAV01@@Z ??4RuntimeError@Json@@QAEAAV01@ABV01@@Z ??4StaticString@Json@@QAEAAV01@$$QAV01@@Z ??4StaticString@Json@@QAEAAV01@ABV01@@Z ??4StreamWriter@Json@@QAEAAV01@ABV01@@Z ??4StreamWriterBuilder@Json@@QAEAAV01@ABV01@@Z ??4StyledStreamWriter@Json@@QAEAAV01@ABV01@@Z ??4StyledWriter@Json@@QAEAAV01@ABV01@@Z ??4Value@Json@@QAEAAV01@$$QAV01@@Z ??4Value@Json@@QAEAAV01@ABV01@@Z ??4ValueConstIterator@Json@@QAEAAV01@$$QAV01@@Z ??4ValueConstIterator@Json@@QAEAAV01@ABV01@@Z ??4ValueConstIterator@Json@@QAEAAV01@ABVValueIteratorBase@1@@Z ??4ValueIterator@Json@@QAEAAV01@ABV01@@Z ??4ValueIteratorBase@Json@@QAEAAV01@$$QAV01@@Z ??4ValueIteratorBase@Json@@QAEAAV01@ABV01@@Z ??4Writer@Json@@QAEAAV01@ABV01@@Z ??6Json@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@std@@AAV12@ABVValue@0@@Z ??8Value@Json@@QBE_NABV01@@Z ??8ValueIteratorBase@Json@@QBE_NABV01@@Z ??9Value@Json@@QBE_NABV01@@Z ??9ValueIteratorBase@Json@@QBE_NABV01@@Z ??AStreamWriterBuilder@Json@@QAEAAVValue@1@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ??AValue@Json@@QAEAAV01@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ??AValue@Json@@QAEAAV01@ABVStaticString@1@@Z ??AValue@Json@@QAEAAV01@H@Z ??AValue@Json@@QAEAAV01@I@Z ??AValue@Json@@QAEAAV01@PBD@Z ??AValue@Json@@QBEABV01@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ??AValue@Json@@QBEABV01@H@Z ??AValue@Json@@QBEABV01@I@Z ??AValue@Json@@QBEABV01@PBD@Z ??BStaticString@Json@@QBEPBDXZ ??BValue@Json@@QBE_NXZ ??CValueConstIterator@Json@@QBEPBVValue@1@XZ ??CValueIterator@Json@@QBEPAVValue@1@XZ ??DValueConstIterator@Json@@QBEABVValue@1@XZ ??DValueIterator@Json@@QBEAAVValue@1@XZ ??EValueConstIterator@Json@@QAE?AV01@H@Z ??EValueConstIterator@Json@@QAEAAV01@XZ ??EValueIterator@Json@@QAE?AV01@H@Z ??EValueIterator@Json@@QAEAAV01@XZ ??FValueConstIterator@Json@@QAE?AV01@H@Z ??FValueConstIterator@Json@@QAEAAV01@XZ ??FValueIterator@Json@@QAE?AV01@H@Z ??FValueIterator@Json@@QAEAAV01@XZ ??GValueIteratorBase@Json@@QBEHABV01@@Z ??MValue@Json@@QBE_NABV01@@Z ??NValue@Json@@QBE_NABV01@@Z ??OValue@Json@@QBE_NABV01@@Z ??PValue@Json@@QBE_NABV01@@Z ??_7Exception@Json@@6B@ ??_7Factory@StreamWriter@Json@@6B@ ??_7FastWriter@Json@@6B@ ??_7LogicError@Json@@6B@ ??_7RuntimeError@Json@@6B@ ??_7StreamWriter@Json@@6B@ ??_7StreamWriterBuilder@Json@@6B@ ??_7StyledWriter@Json@@6B@ ??_7Writer@Json@@6B@ ??_FStyledStreamWriter@Json@@QAEXXZ ??_FValue@Json@@QAEXXZ ?addPathInArg@Path@Json@@AAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV?$vector@PBVPathArgument@Json@@V?$allocator@PBVPathArgument@Json@@@std@@@4@AAV?$_Vector_const_iterator@V?$_Vector_val@U?$_Simple_types@PBVPathArgument@Json@@@std@@@std@@@4@W4Kind@PathArgument@2@@Z ?append@Value@Json@@QAEAAV12@$$QAV12@@Z ?append@Value@Json@@QAEAAV12@ABV12@@Z ?asBool@Value@Json@@QBE_NXZ ?asCString@Value@Json@@QBEPBDXZ ?asDouble@Value@Json@@QBENXZ ?asFloat@Value@Json@@QBEMXZ ?asInt64@Value@Json@@QBE_JXZ ?asInt@Value@Json@@QBEHXZ ?asLargestInt@Value@Json@@QBE_JXZ ?asLargestUInt@Value@Json@@QBE_KXZ ?asString@Value@Json@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ ?asUInt64@Value@Json@@QBE_KXZ ?asUInt@Value@Json@@QBEIXZ ?begin@Value@Json@@QAE?AVValueIterator@2@XZ ?begin@Value@Json@@QBE?AVValueConstIterator@2@XZ ?c_str@StaticString@Json@@QBEPBDXZ ?clear@Value@Json@@QAEXXZ ?compare@Value@Json@@QBEHABV12@@Z ?computeDistance@ValueIteratorBase@Json@@IBEHABV12@@Z ?copy@Value@Json@@QAEXABV12@@Z ?copy@ValueIteratorBase@Json@@IAEXABV12@@Z ?copyPayload@Value@Json@@QAEXABV12@@Z ?decrement@ValueIteratorBase@Json@@IAEXXZ ?defaultRealPrecision@Value@Json@@2IB ?demand@Value@Json@@QAEPAV12@PBD0@Z ?deref@ValueIteratorBase@Json@@IAEAAVValue@2@XZ ?deref@ValueIteratorBase@Json@@IBEABVValue@2@XZ ?dropNullPlaceholders@FastWriter@Json@@QAEXXZ ?dupMeta@Value@Json@@AAEXABV12@@Z ?dupPayload@Value@Json@@AAEXABV12@@Z ?empty@Value@Json@@QBE_NXZ ?enableYAMLCompatibility@FastWriter@Json@@QAEXXZ ?end@Value@Json@@QAE?AVValueIterator@2@XZ ?end@Value@Json@@QBE?AVValueConstIterator@2@XZ ?find@Value@Json@@QBEPBV12@PBD0@Z ?get@Value@Json@@QBE?AV12@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV12@@Z ?get@Value@Json@@QBE?AV12@IABV12@@Z ?get@Value@Json@@QBE?AV12@PBD0ABV12@@Z ?get@Value@Json@@QBE?AV12@PBDABV12@@Z ?getComment@Value@Json@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@W4CommentPlacement@2@@Z ?getMemberNames@Value@Json@@QBE?AV?$vector@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@std@@XZ ?getOffsetLimit@Value@Json@@QBEHXZ ?getOffsetStart@Value@Json@@QBEHXZ ?getString@Value@Json@@QBE_NPAPBD0@Z ?hasComment@Value@Json@@QBE_NW4CommentPlacement@2@@Z ?hasCommentForValue@StyledStreamWriter@Json@@CA_NABVValue@2@@Z ?hasCommentForValue@StyledWriter@Json@@CA_NABVValue@2@@Z ?increment@ValueIteratorBase@Json@@IAEXXZ ?indent@StyledStreamWriter@Json@@AAEXXZ ?indent@StyledWriter@Json@@AAEXXZ ?index@ValueIteratorBase@Json@@QBEIXZ ?initBasic@Value@Json@@AAEXW4ValueType@2@_N@Z ?insert@Value@Json@@QAE_NI$$QAV12@@Z ?insert@Value@Json@@QAE_NIABV12@@Z ?invalidPath@Path@Json@@CAXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@H@Z ?isAllocated@Value@Json@@ABE_NXZ ?isArray@Value@Json@@QBE_NXZ ?isBool@Value@Json@@QBE_NXZ ?isConvertibleTo@Value@Json@@QBE_NW4ValueType@2@@Z ?isDouble@Value@Json@@QBE_NXZ ?isEqual@ValueIteratorBase@Json@@IBE_NABV12@@Z ?isInt64@Value@Json@@QBE_NXZ ?isInt@Value@Json@@QBE_NXZ ?isIntegral@Value@Json@@QBE_NXZ ?isMember@Value@Json@@QBE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ?isMember@Value@Json@@QBE_NPBD0@Z ?isMember@Value@Json@@QBE_NPBD@Z ?isMultilineArray@StyledStreamWriter@Json@@AAE_NABVValue@2@@Z ?isMultilineArray@StyledWriter@Json@@AAE_NABVValue@2@@Z ?isNull@Value@Json@@QBE_NXZ ?isNumeric@Value@Json@@QBE_NXZ ?isObject@Value@Json@@QBE_NXZ ?isString@Value@Json@@QBE_NXZ ?isUInt64@Value@Json@@QBE_NXZ ?isUInt@Value@Json@@QBE_NXZ ?isValidIndex@Value@Json@@QBE_NI@Z ?key@ValueIteratorBase@Json@@QBE?AVValue@2@XZ ?make@Path@Json@@QBEAAVValue@2@AAV32@@Z ?makePath@Path@Json@@AAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV?$vector@PBVPathArgument@Json@@V?$allocator@PBVPathArgument@Json@@@std@@@4@@Z ?maxInt64@Value@Json@@2_JB ?maxInt@Value@Json@@2HB ?maxLargestInt@Value@Json@@2_JB ?maxLargestUInt@Value@Json@@2_KB ?maxUInt64@Value@Json@@2_KB ?maxUInt64AsDouble@Value@Json@@2NB ?maxUInt@Value@Json@@2IB ?memberName@ValueIteratorBase@Json@@QBEPBDPAPBD@Z ?memberName@ValueIteratorBase@Json@@QBEPBDXZ ?minInt64@Value@Json@@2_JB ?minInt@Value@Json@@2HB ?minLargestInt@Value@Json@@2_JB ?name@ValueIteratorBase@Json@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ ?newStreamWriter@StreamWriterBuilder@Json@@UBEPAVStreamWriter@2@XZ ?null@Value@Json@@2ABV12@B ?nullRef@Value@Json@@2ABV12@B ?nullSingleton@Value@Json@@SAABV12@XZ ?omitEndingLineFeed@FastWriter@Json@@QAEXXZ ?pushValue@StyledStreamWriter@Json@@AAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ?pushValue@StyledWriter@Json@@AAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ?releasePayload@Value@Json@@AAEXXZ ?removeIndex@Value@Json@@QAE_NIPAV12@@Z ?removeMember@Value@Json@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ?removeMember@Value@Json@@QAEXPBD@Z ?removeMember@Value@Json@@QAE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PAV12@@Z ?removeMember@Value@Json@@QAE_NPBD0PAV12@@Z ?removeMember@Value@Json@@QAE_NPBDPAV12@@Z ?resize@Value@Json@@QAEXI@Z ?resolve@Path@Json@@QBE?AVValue@2@ABV32@0@Z ?resolve@Path@Json@@QBEABVValue@2@ABV32@@Z ?resolveReference@Value@Json@@AAEAAV12@PBD0@Z ?resolveReference@Value@Json@@AAEAAV12@PBD@Z ?setComment@Value@Json@@QAEXPBDIW4CommentPlacement@2@@Z ?setComment@Value@Json@@QAEXPBDW4CommentPlacement@2@@Z ?setComment@Value@Json@@QAEXV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@W4CommentPlacement@2@@Z ?setDefaults@StreamWriterBuilder@Json@@SAXPAVValue@2@@Z ?setIsAllocated@Value@Json@@AAEX_N@Z ?setOffsetLimit@Value@Json@@QAEXH@Z ?setOffsetStart@Value@Json@@QAEXH@Z ?setType@Value@Json@@AAEXW4ValueType@2@@Z ?size@Value@Json@@QBEIXZ ?swap@Value@Json@@QAEXAAV12@@Z ?swapPayload@Value@Json@@QAEXAAV12@@Z ?toStyledString@Value@Json@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ ?type@Value@Json@@QBE?AW4ValueType@2@XZ ?unindent@StyledStreamWriter@Json@@AAEXXZ ?unindent@StyledWriter@Json@@AAEXXZ ?validate@StreamWriterBuilder@Json@@QBE_NPAVValue@2@@Z ?valueToQuotedString@Json@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PBD@Z ?valueToString@Json@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@H@Z ?valueToString@Json@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@I@Z ?valueToString@Json@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@NIW4PrecisionType@1@@Z ?valueToString@Json@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@_J@Z ?valueToString@Json@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@_K@Z ?valueToString@Json@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@_N@Z ?what@Exception@Json@@UBEPBDXZ ?write@FastWriter@Json@@UAE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABVValue@2@@Z ?write@StyledStreamWriter@Json@@QAEXAAV?$basic_ostream@DU?$char_traits@D@std@@@std@@ABVValue@2@@Z ?write@StyledWriter@Json@@UAE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABVValue@2@@Z ?writeArrayValue@StyledStreamWriter@Json@@AAEXABVValue@2@@Z ?writeArrayValue@StyledWriter@Json@@AAEXABVValue@2@@Z ?writeCommentAfterValueOnSameLine@StyledStreamWriter@Json@@AAEXABVValue@2@@Z ?writeCommentAfterValueOnSameLine@StyledWriter@Json@@AAEXABVValue@2@@Z ?writeCommentBeforeValue@StyledStreamWriter@Json@@AAEXABVValue@2@@Z ?writeCommentBeforeValue@StyledWriter@Json@@AAEXABVValue@2@@Z ?writeIndent@StyledStreamWriter@Json@@AAEXXZ ?writeIndent@StyledWriter@Json@@AAEXXZ ?writeString@Json@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABVFactory@StreamWriter@1@ABVValue@1@@Z ?writeValue@FastWriter@Json@@AAEXABVValue@2@@Z ?writeValue@StyledStreamWriter@Json@@AAEXABVValue@2@@Z ?writeValue@StyledWriter@Json@@AAEXABVValue@2@@Z ?writeWithIndent@StyledStreamWriter@Json@@AAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ?writeWithIndent@StyledWriter@Json@@AAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-25_c2376077d32c7e6ba30d80abed9fbaa5_amadey_elex_luca-stealer_medusalocker_njrat_remcos_rokrat

version

kernel32

advapi32

shell32

ole32

shlwapi

crypt32

generic