2026-11-01_ce92d1380a59b012da96e45594ee4076_amadey_avoslocker_darkgate_elex_glassworm_helldown_hijackloader_luca-stealer_lynx_magniber_metamorfo_njrat_remcos_smoke-loader

Sharing

Copy URL Twitter E-mail

General

Target
2026-11-01_ce92d1380a59b012da96e45594ee4076_amadey_avoslocker_darkgate_elex_glassworm_helldown_hijackloader_luca-stealer_lynx_magniber_metamorfo_njrat_remcos_smoke-loader
Size 13.3MB
Sample261102-j79wvaav8l
SHA256 3bfc6c0b2426e32c3dd8f0de4bcbb29814d085cb235a6a52c4e9142ba3a6275b
MD5 ce92d1380a59b012da96e45594ee4076
SHA1 15b7d07e64f582172119c6382b9d1f279cdd267f
SHA512 76a1e0a5e001f6eca5e42ab1165fc11c0464b7b159d512927ae7ea11bf41fc8256b91760545e96f0214bb0cf4ed2ddc89d89b0dd33f478a69dfe0b6411027b52
SSDEEP 196608:UsIZf69EaKTH8wgWfUQQcP1AojH6pePv6grqN0aUQGXe2RNhMaz:UsIZfGEaK3gWfjQcapeKgrqNt/GXd6az
TLSH
T138E6AD21BA41C03AD15202F0696DABBE413EDB784BB541DBB2DC1B7C2F715C26E32A57
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

File Explorer

2026-11-01_ce92d1380a59b012da96e45594ee4076_amadey_avoslocker_darkgate_elex_glassworm_helldown_hijackloader_luca-stealer_lynx_magniber_metamorfo_njrat_remcos_smoke-loader

.exe 13.3MB

2026-11-01_ce92d1380a59b012da96e45594ee4076_amadey_avoslocker_darkgate_elex_glassworm_helldown_hijackloader_luca-stealer_lynx_magniber_metamorfo_njrat_remcos_smoke-loader

IMPHASH a2f2ac7ac97cd7f270969159a8d233a0
SHA256 3bfc6c0b2426e32c3dd8f0de4bcbb29814d085cb235a6a52c4e9142ba3a6275b
MD5 ce92d1380a59b012da96e45594ee4076
SHA1 15b7d07e64f582172119c6382b9d1f279cdd267f
SHA512 76a1e0a5e001f6eca5e42ab1165fc11c0464b7b159d512927ae7ea11bf41fc8256b91760545e96f0214bb0cf4ed2ddc89d89b0dd33f478a69dfe0b6411027b52
SSDEEP 196608:UsIZf69EaKTH8wgWfUQQcP1AojH6pePv6grqN0aUQGXe2RNhMaz:UsIZfGEaK3gWfjQcapeKgrqNt/GXd6az
TLSH
T138E6AD21BA41C03AD15202F0696DABBE413EDB784BB541DBB2DC1B7C2F715C26E32A57
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Digest

7c:3a:51:0f:7d:46:ba:30:77:8f:4a:b4:13:a4:b2:63:2b:82:7a:b1:7e:f7:19:e9:81:3c:b7:7d:8d:cf:15:a1

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=727035-6,CN=Avanquest Software (7270356 Canada Inc),O=Avanquest Software (7270356 Canada Inc),L=Montreal,ST=Quebec,C=CA,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024341

Chains

Jun 10, 2023

CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US

CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US

CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US

CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US

Subject

Serial Number

4a:53:8c:28

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jul 7, 2009 - Dec 7, 2030

Subject

CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US

Serial Number

4e:40:e4:37:54:ed:e6:8c:00:00:00:00:51:d3:94:7f

Issuer

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning, ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2021 - Nov 7, 2030

Subject

CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US

Serial Number

35:af:b7:7b:9d:34:1f:6a:fc:8f:84:46:ab:31:35:2b

Issuer

CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

May 7, 2021 - Dec 29, 2040

Subject

Serial Number

11:03:be:35:d4:e1:07:3e:40:02:1f:eb:7b:5f:03:2d

Issuer

CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Nov 18, 2021 - Nov 18, 2023

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Serial Number

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 21, 2022 - Nov 21, 2033

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

Major OS version

Entry point

6991076

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

E:\TemporaryBuilds\azure-installer-pool-de-1\10\s\Installer\_bin\soda\Win32\SodaPDFDesktop14.pdb

msi

ord14 ord111 ord43 ord168 ord70 ord205 ord118 ord117 ord141 ord160 ord159 ord45 ord32 ord92 ord88 ord137 ord8

kernel32

GetEnvironmentVariableA GetSystemDirectoryW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineA GetOEMCP GetACP EnumSystemLocalesW IsValidLocale GetConsoleOutputCP SetStdHandle FreeLibraryAndExitThread ExitThread InterlockedPushEntrySList RtlUnwind HeapFree InitializeCriticalSectionEx HeapSize FormatMessageW GetLastError SetEvent HeapReAlloc CloseHandle HeapAlloc DecodePointer HeapDestroy LocalFree DeleteCriticalSection GetProcessHeap WideCharToMultiByte FormatMessageA CreateEventA GetCurrentProcess LocalAlloc GetTickCount QueryPerformanceCounter QueryPerformanceFrequency GetDriveTypeW InitializeCriticalSection LeaveCriticalSection EnterCriticalSection SetLastError GetCommandLineW GetUserDefaultLCID GetStringTypeExW LCMapStringW LoadLibraryA FreeLibrary GetProcAddress GetModuleHandleW Sleep WaitForSingleObject RaiseException GetCurrentThreadId CreateEventW CreateThread MultiByteToWideChar SizeofResource LockResource LoadResource FindResourceW TerminateProcess OutputDebugStringW GetCurrentProcessId GetFileSize ReadFile CreateFileW GetModuleFileNameW SetUnhandledExceptionFilter GetLogicalDriveStringsW GetStringTypeExA LCMapStringA GetFullPathNameW SetFileAttributesW DeleteFileW CopyFileW FindFirstFileW FindNextFileW FindClose WaitForSingleObjectEx CreateMutexW ReleaseMutex LoadLibraryW ReleaseSemaphore CreateSemaphoreA WaitForMultipleObjectsEx lstrcmpiW LoadLibraryExW CreateDirectoryW RemoveDirectoryW MoveFileExW BeginUpdateResourceW UpdateResourceW EndUpdateResourceW UpdateResourceA ProcessIdToSessionId GetModuleFileNameA LoadLibraryExA OpenProcess TlsAlloc InitializeCriticalSectionAndSpinCount WaitForMultipleObjects TerminateThread QueueUserAPC SleepEx PostQueuedCompletionStatus CreateIoCompletionPort SetWaitableTimer GetQueuedCompletionStatus VerSetConditionMask TlsGetValue TlsSetValue TlsFree DuplicateHandle GetSystemTime GetLocalTime FileTimeToSystemTime SystemTimeToFileTime GetTimeZoneInformation GetDateFormatW GetTimeFormatW GetLocaleInfoW ResetEvent CreateSemaphoreW ResumeThread GetComputerNameW CompareStringW CompareStringA GetNumberFormatW GetCurrencyFormatW GetSystemDefaultLCID MulDiv GetTempPathA GetTempFileNameA GlobalSize GlobalUnlock GlobalLock AllocConsole DebugBreak SetErrorMode GetModuleHandleA SetEndOfFile SetFilePointer CreateFileMappingW MapViewOfFile FlushViewOfFile UnmapViewOfFile ExitProcess GetFileAttributesW GlobalAlloc GlobalFree LocalSize lstrlenW GetCPInfo GetEnvironmentVariableW SetHandleInformation CancelIo RegisterWaitForSingleObject UnregisterWait GetFileType GetConsoleMode FlushFileBuffers WriteFile ConnectNamedPipe SetNamedPipeHandleState PeekNamedPipe CreateNamedPipeW WaitNamedPipeW GetNamedPipeHandleStateW SwitchToThread GetCurrentThread QueueUserWorkItem CreateNamedPipeA CreateFileA GetNumberOfConsoleInputEvents ReadConsoleInputW ReadConsoleW WriteConsoleW FillConsoleOutputCharacterW FillConsoleOutputAttribute GetConsoleCursorInfo SetConsoleCursorInfo GetConsoleScreenBufferInfo SetConsoleCursorPosition SetConsoleTextAttribute WriteConsoleInputW SetConsoleCtrlHandler GetCurrentDirectoryW GetExitCodeProcess CreateProcessW UnregisterWaitEx CreateJobObjectW AssignProcessToJobObject SetInformationJobObject GetFileInformationByHandle SetFilePointerEx SetFileTime DeviceIoControl CreateHardLinkW GetLongPathNameW GetShortPathNameW ReadDirectoryChangesW SetEnvironmentVariableW GetTempPathW GetSystemInfo CreateToolhelp32Snapshot Process32FirstW Process32NextW GetVolumeInformationW GetStdHandle GetStartupInfoW VirtualAlloc VirtualFree lstrcmpW SetThreadPriority GetThreadPriority GetVersionExW VirtualProtect VerifyVersionInfoW InitializeSListHead UnhandledExceptionFilter VirtualQuery GetSystemTimeAsFileTime IsValidCodePage CompareStringEx LCMapStringEx EncodePointer InitOnceComplete InitOnceBeginInitialize IsProcessorFeaturePresent GetModuleHandleExW CloseThreadpoolWork SubmitThreadpoolWork CreateThreadpoolWork FreeLibraryWhenCallbackReturns WakeConditionVariable InitializeConditionVariable GetExitCodeThread GetLocaleInfoEx CreateSymbolicLinkW GetFileInformationByHandleEx AreFileApisANSI SetFileInformationByHandle FindFirstFileExW TryAcquireSRWLockExclusive GetStringTypeW IsDebuggerPresent GetTickCount64 GetWindowsDirectoryW GetDiskFreeSpaceExW Module32NextW Module32FirstW K32GetModuleFileNameExW IsWow64Process CreateFileMappingA MapViewOfFileEx lstrcpynW GetFileTime GetFileSizeEx GetFileAttributesExW CreateWaitableTimerA OpenEventA SleepConditionVariableSRW WakeAllConditionVariable AcquireSRWLockShared AcquireSRWLockExclusive ReleaseSRWLockShared ReleaseSRWLockExclusive InitializeSRWLock FoldStringW EnumSystemLocalesA GetLocaleInfoA IsDBCSLeadByteEx SystemTimeToTzSpecificLocalTime

winspool.drv

ord203

userenv

CreateEnvironmentBlock DestroyEnvironmentBlock

gdiplus

GdiplusStartup GdiplusShutdown GdipDeleteFontFamily GdipGetEmHeight GdipGetCellAscent GdipGetLineSpacing GdipCreateFontFromDC GdipCreateFontFromLogfontA GdipDeleteFont GdipGetFamily GdipGetFontSize GdipCreateBitmapFromGraphics GdipCreateHBITMAPFromBitmap GdipDrawImageI GdipDrawDriverString GdipBeginContainer2 GdipSetClipRectI GdipSetClipRect GdipDrawImageRectRect GdipFillPath GdipFillPie GdipFillEllipse GdipFillRectanglesI GdipSetPageUnit GdipGetWorldTransform GdipFillRectangleI GdipFillRectangle GdipGraphicsClear GdipDrawPath GdipDrawPie GdipDrawEllipse GdipDrawRectangle GdipRestoreGraphics GdipTranslateWorldTransform GdipMultiplyWorldTransform GdipSetInterpolationMode GdipSetTextRenderingHint GdipSetPixelOffsetMode GdipGetSmoothingMode GdipSetSmoothingMode GdipSetCompositingQuality GdipDeleteGraphics GdipDrawArc GdipCreateFromHDC GdipSetImageAttributesColorMatrix GdipDisposeImageAttributes GdipCreateImageAttributes GdipBitmapUnlockBits GdipBitmapLockBits GdipSaveGraphics GdipGetImageHeight GdipGetImageWidth GdipGetImageGraphicsContext GdipDisposeImage GdipCloneImage GdipSetPenDashArray GdipSetPenDashOffset GdipSetPenDashStyle GdipSetPenMiterLimit GdipSetPenLineJoin GdipSetPenEndCap GdipSetPenStartCap GdipDeletePen GdipCreatePen2 GdipCreatePen1 GdipSetPathGradientTransform GdipSetPathGradientWrapMode GdipSetPathGradientPresetBlend GdipSetPathGradientCenterPoint GdipCreatePathGradientFromPath GdipMultiplyLineTransform GdipSetLineWrapMode GdipSetLinePresetBlend GdipCreateLineBrush GdipCreateSolidFill GdipCreateTexture GdipDeleteBrush GdipCloneBrush GdipGetMatrixElements GdipShearMatrix GdipRotateMatrix GdipScaleMatrix GdipTranslateMatrix GdipDeleteMatrix GdipCreateMatrix2 GdipCreateMatrix GdipIsVisiblePathPoint GdipGetPathWorldBounds GdipAddPathRectangleI GdipAddPathArcI GdipAddPathLineI GdipAddPathEllipse GdipAddPathBezier GdipAddPathArc GdipAddPathLine GdipClosePathFigure GdipStartPathFigure GdipSetPathFillMode GdipResetPath GdipDeletePath GdipClonePath GdipCreatePath GdipFree GdipAlloc GdipEndContainer GdipCreateBitmapFromScan0 GdipGetClipBoundsI GdipDrawLine GdipCreateFromHWND GdipTransformPoints

uxtheme

OpenThemeData CloseThemeData DrawThemeBackground SetWindowTheme IsThemeBackgroundPartiallyTransparent GetThemePartSize

usp10

ScriptItemize ScriptShape ScriptPlace ScriptApplyDigitSubstitution ScriptBreak ScriptFreeCache

??0?$codecvt_null@_W@archive@boost@@QAE@I@Z ??0?$singleton@V?$extended_type_info_typeid@UAppMdiData@?A0x9eef0608@@@serialization@boost@@@serialization@boost@@IAE@XZ ??0?$singleton@V?$extended_type_info_typeid@Vdate@gregorian@boost@@@serialization@boost@@@serialization@boost@@IAE@XZ ??0?$singleton@V?$extended_type_info_typeid@Vptime@posix_time@boost@@@serialization@boost@@@serialization@boost@@IAE@XZ ??0?$singleton@V?$extended_type_info_typeid@Vtime_duration@posix_time@boost@@@serialization@boost@@@serialization@boost@@IAE@XZ ??1?$codecvt_null@_W@archive@boost@@UAE@XZ ??_F?$codecvt_null@_W@archive@boost@@QAEXXZ ?do_always_noconv@?$codecvt_null@_W@archive@boost@@EBE_NXZ ?do_encoding@?$codecvt_null@_W@archive@boost@@EBEHXZ ?do_in@?$codecvt_null@_W@archive@boost@@EBEHAAU_Mbstatet@@PBD1AAPBDPA_W3AAPA_W@Z ?do_max_length@?$codecvt_null@_W@archive@boost@@EBEHXZ ?do_out@?$codecvt_null@_W@archive@boost@@EBEHAAU_Mbstatet@@PB_W1AAPB_WPAD3AAPAD@Z ?get_const_instance@?$singleton@V?$extended_type_info_typeid@UAppMdiData@?A0x9eef0608@@@serialization@boost@@@serialization@boost@@SAABV?$extended_type_info_typeid@UAppMdiData@?A0x9eef0608@@@23@XZ ?get_const_instance@?$singleton@V?$extended_type_info_typeid@Vdate@gregorian@boost@@@serialization@boost@@@serialization@boost@@SAABV?$extended_type_info_typeid@Vdate@gregorian@boost@@@23@XZ ?get_const_instance@?$singleton@V?$extended_type_info_typeid@Vptime@posix_time@boost@@@serialization@boost@@@serialization@boost@@SAABV?$extended_type_info_typeid@Vptime@posix_time@boost@@@23@XZ ?get_const_instance@?$singleton@V?$extended_type_info_typeid@Vtime_duration@posix_time@boost@@@serialization@boost@@@serialization@boost@@SAABV?$extended_type_info_typeid@Vtime_duration@posix_time@boost@@@23@XZ ?get_const_instance@?$singleton@V?$iserializer@Vxml_wiarchive@archive@boost@@UAppMdiData@?A0x9eef0608@@@detail@archive@boost@@@serialization@boost@@SAABV?$iserializer@Vxml_wiarchive@archive@boost@@UAppMdiData@?A0x9eef0608@@@detail@archive@3@XZ ?get_const_instance@?$singleton@V?$iserializer@Vxml_wiarchive@archive@boost@@Vdate@gregorian@3@@detail@archive@boost@@@serialization@boost@@SAABV?$iserializer@Vxml_wiarchive@archive@boost@@Vdate@gregorian@3@@detail@archive@3@XZ ?get_const_instance@?$singleton@V?$iserializer@Vxml_wiarchive@archive@boost@@Vptime@posix_time@3@@detail@archive@boost@@@serialization@boost@@SAABV?$iserializer@Vxml_wiarchive@archive@boost@@Vptime@posix_time@3@@detail@archive@3@XZ ?get_const_instance@?$singleton@V?$iserializer@Vxml_wiarchive@archive@boost@@Vtime_duration@posix_time@3@@detail@archive@boost@@@serialization@boost@@SAABV?$iserializer@Vxml_wiarchive@archive@boost@@Vtime_duration@posix_time@3@@detail@archive@3@XZ ?get_const_instance@?$singleton@V?$map@Vxml_wiarchive@archive@boost@@@extra_detail@detail@archive@boost@@@serialization@boost@@SAABV?$map@Vxml_wiarchive@archive@boost@@@extra_detail@detail@archive@3@XZ ?get_const_instance@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@SAABV?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@XZ ?get_const_instance@?$singleton@V?$multiset@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@std@@@std@@@serialization@boost@@SAABV?$multiset@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@std@@@std@@XZ ?get_lock@singleton_module@serialization@boost@@AAEAA_NXZ ?get_mutable_instance@?$singleton@V?$map@Vxml_wiarchive@archive@boost@@@extra_detail@detail@archive@boost@@@serialization@boost@@SAAAV?$map@Vxml_wiarchive@archive@boost@@@extra_detail@detail@archive@3@XZ ?get_mutable_instance@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@SAAAV?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@XZ ?get_mutable_instance@?$singleton@V?$multiset@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@std@@@std@@@serialization@boost@@SAAAV?$multiset@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@std@@@std@@XZ ?is_destroyed@?$singleton@V?$map@Vxml_wiarchive@archive@boost@@@extra_detail@detail@archive@boost@@@serialization@boost@@SA_NXZ ?is_destroyed@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@SA_NXZ ?is_destroyed@?$singleton@V?$multiset@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@std@@@std@@@serialization@boost@@SA_NXZ ?is_locked@singleton_module@serialization@boost@@QAE_NXZ ?load_object_data@?$iserializer@Vxml_wiarchive@archive@boost@@UAppMdiData@?A0x9eef0608@@@detail@archive@boost@@UBEXAAVbasic_iarchive@234@PAXI@Z ?load_object_data@?$iserializer@Vxml_wiarchive@archive@boost@@Vdate@gregorian@3@@detail@archive@boost@@UBEXAAVbasic_iarchive@234@PAXI@Z ?load_object_data@?$iserializer@Vxml_wiarchive@archive@boost@@Vptime@posix_time@3@@detail@archive@boost@@UBEXAAVbasic_iarchive@234@PAXI@Z ?load_object_data@?$iserializer@Vxml_wiarchive@archive@boost@@Vtime_duration@posix_time@3@@detail@archive@boost@@UBEXAAVbasic_iarchive@234@PAXI@Z ?lock@?1??get_lock@singleton_module@serialization@boost@@AAEAA_NXZ@4_NA ?lock@singleton_module@serialization@boost@@QAEXXZ ?unlock@singleton_module@serialization@boost@@QAEXXZ

Sharing

General

Malware Config

Signatures

File Explorer

2026-11-01_ce92d1380a59b012da96e45594ee4076_amadey_avoslocker_darkgate_elex_glassworm_helldown_hijackloader_luca-stealer_lynx_magniber_metamorfo_njrat_remcos_smoke-loader

msi

kernel32

winspool.drv

userenv

gdiplus

uxtheme

usp10

generic