PE Compile Time

2020-01-17 22:46:26

PDB Path

z:\task_1579288126\build\src\obj-firefox\toolkit\components\maintenanceservice\maintenanceservice.pdb

PE Imphash

33d31a4df5121c8c368d8b7a65733fa3

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00001000 0x000272d6 0x00027400 6.41709265623
.rdata 0x00029000 0x0000e3c4 0x0000e400 5.38188119489
.data 0x00038000 0x000023d6 0x00000e00 2.19796844176
.pdata 0x0003b000 0x00001bb4 0x00001c00 5.41998254433
.00cfg 0x0003d000 0x00000010 0x00000200 0.175526291656
.tls 0x0003e000 0x00000009 0x00000200 0.0203931352361
.rsrc 0x0003f000 0x000007b8 0x00000800 4.69810351972
.reloc 0x00040000 0x00170000 0x0016f000 3.97070454803

Resources

Name Offset Size Language Sub-language File type
RT_VERSION 0x0003f490 0x00000324 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_MANIFEST 0x0003f0a0 0x000003ef LANG_ENGLISH SUBLANG_ENGLISH_US XML 1.0 document, ASCII text

Imports

Library USER32.dll:
0x140034608 LoadStringA
0x140034610 wsprintfW
Library ADVAPI32.dll:
0x140034620 AdjustTokenPrivileges
0x140034628 AllocateAndInitializeSid
0x140034638 ChangeServiceConfig2W
0x140034640 ChangeServiceConfigW
0x140034648 CloseServiceHandle
0x140034650 ControlService
0x140034658 CreateServiceW
0x140034660 CreateWellKnownSid
0x140034668 CryptAcquireContextA
0x140034670 CryptCreateHash
0x140034678 CryptDestroyHash
0x140034680 CryptGetHashParam
0x140034688 CryptHashData
0x140034690 CryptReleaseContext
0x140034698 DeleteService
0x1400346a0 FreeSid
0x1400346b8 GetSecurityInfo
0x1400346c8 LookupAccountSidW
0x1400346d0 LookupPrivilegeValueA
0x1400346d8 OpenProcessToken
0x1400346e0 OpenSCManagerA
0x1400346e8 OpenSCManagerW
0x1400346f0 OpenServiceW
0x1400346f8 QueryServiceConfigW
0x140034708 QueryServiceStatus
0x140034710 QueryServiceStatusEx
0x140034718 RegCloseKey
0x140034720 RegEnumKeyExW
0x140034728 RegGetValueW
0x140034730 RegOpenKeyExW
0x140034738 RegQueryInfoKeyW
0x140034740 RegQueryValueExW
0x140034748 RegSetValueExW
0x140034758 SetEntriesInAclW
0x140034768 SetSecurityInfo
0x140034770 SetServiceObjectSecurity
0x140034778 SetServiceStatus
Library CRYPT32.dll:
0x140034790 CertCloseStore
0x1400347a8 CertGetNameStringA
0x1400347b0 CertGetNameStringW
0x1400347b8 CryptMsgClose
0x1400347c0 CryptMsgGetParam
0x1400347c8 CryptQueryObject
Library ole32.dll:
0x1400347d8 CoTaskMemFree
Library RPCRT4.dll:
0x1400347e8 RpcStringFreeW
0x1400347f0 UuidCreate
0x1400347f8 UuidToStringW
Library SHELL32.dll:
0x140034808 SHFileOperationW
0x140034810 SHGetKnownFolderPath
Library WINTRUST.dll:
0x140034820 WinVerifyTrust
Library SHLWAPI.dll:
0x140034830 PathAppendW
0x140034838 PathCanonicalizeW
0x140034840 PathIsUNCServerShareW
0x140034848 PathQuoteSpacesW
0x140034850 PathRemoveFileSpecW
0x140034858 PathStripPathW
0x140034860 PathStripToRootW
0x140034868 PathUnquoteSpacesW
Library VERSION.dll:
0x140034878 GetFileVersionInfoSizeW
0x140034880 GetFileVersionInfoW
0x140034888 VerQueryValueW
Library KERNEL32.dll:
0x140034898 CloseHandle
0x1400348a0 CompareStringW
0x1400348a8 CopyFileW
0x1400348b0 CreateDirectoryW
0x1400348b8 CreateEventW
0x1400348c0 CreateFileW
0x1400348c8 CreateProcessW
0x1400348d0 CreateThread
0x1400348d8 CreateToolhelp32Snapshot
0x1400348e0 DeleteCriticalSection
0x1400348e8 DeleteFileW
0x1400348f0 DeviceIoControl
0x1400348f8 EncodePointer
0x140034900 EnterCriticalSection
0x140034908 ExitProcess
0x140034910 FindClose
0x140034918 FindFirstFileExW
0x140034920 FindFirstFileW
0x140034928 FindNextFileW
0x140034930 FlushFileBuffers
0x140034938 FreeEnvironmentStringsW
0x140034940 FreeLibrary
0x140034948 GetACP
0x140034950 GetCPInfo
0x140034958 GetCommandLineA
0x140034960 GetCommandLineW
0x140034968 GetConsoleCP
0x140034970 GetConsoleMode
0x140034978 GetCurrentProcess
0x140034980 GetCurrentProcessId
0x140034988 GetCurrentThreadId
0x140034990 GetDriveTypeW
0x140034998 GetEnvironmentStringsW
0x1400349a0 GetExitCodeProcess
0x1400349a8 GetFileAttributesW
0x1400349b8 GetFileSize
0x1400349c0 GetFileType
0x1400349c8 GetFullPathNameW
0x1400349d0 GetLastError
0x1400349d8 GetModuleFileNameW
0x1400349e0 GetModuleHandleExW
0x1400349e8 GetModuleHandleW
0x1400349f0 GetOEMCP
0x1400349f8 GetProcAddress
0x140034a00 GetProcessHeap
0x140034a08 GetStartupInfoW
0x140034a10 GetStdHandle
0x140034a18 GetStringTypeW
0x140034a20 GetSystemTimeAsFileTime
0x140034a28 HeapAlloc
0x140034a30 HeapFree
0x140034a38 HeapReAlloc
0x140034a40 HeapSize
0x140034a50 InitializeSListHead
0x140034a58 IsDebuggerPresent
0x140034a68 IsValidCodePage
0x140034a70 LCMapStringW
0x140034a78 LeaveCriticalSection
0x140034a80 LoadLibraryExW
0x140034a88 LocalAlloc
0x140034a90 LocalFree
0x140034a98 MoveFileExW
0x140034aa0 MoveFileW
0x140034aa8 MultiByteToWideChar
0x140034ab0 Process32FirstW
0x140034ab8 Process32NextW
0x140034ac0 QueryPerformanceCounter
0x140034ac8 RaiseException
0x140034ad0 ReadConsoleW
0x140034ad8 ReadFile
0x140034ae0 ResetEvent
0x140034ae8 RtlCaptureContext
0x140034af0 RtlLookupFunctionEntry
0x140034af8 RtlPcToFileHeader
0x140034b00 RtlUnwind
0x140034b08 RtlUnwindEx
0x140034b10 RtlVirtualUnwind
0x140034b18 SetEndOfFile
0x140034b20 SetEnvironmentVariableW
0x140034b28 SetEvent
0x140034b30 SetFileAttributesW
0x140034b38 SetFilePointerEx
0x140034b40 SetLastError
0x140034b48 SetStdHandle
0x140034b58 Sleep
0x140034b60 TerminateProcess
0x140034b68 TlsAlloc
0x140034b70 TlsFree
0x140034b78 TlsGetValue
0x140034b80 TlsSetValue
0x140034b88 UnhandledExceptionFilter
0x140034b90 WaitForSingleObject
0x140034b98 WaitForSingleObjectEx
0x140034ba0 WideCharToMultiByte
0x140034ba8 WriteConsoleW
0x140034bb0 WriteFile
0x140034bb8 lstrcmpiW

!This program cannot be run in DOS mode.$
`.rdata
@.data
.pdata
@.00cfg
@.reloc
AWAVAUATVWUSH
[]_^A\A]A^A_
AVVWSH
H[_^A^
AWAVAUATVWUSH
L;d$8t
h[]_^A\A]A^A_
AWAVAUATVWUS
t[D9|$<uTH
t1D9|$<u*E
[]_^A\A]A^A_
AWAVVWUSH
[]_^A^A_
AWAVVWUSH
8[]_^A^A_
AWAVATVWSH
H[_^A\A^A_
AWAVVWUSH
([]_^A^A_
([]_^A^A_H
AWAVVWUSH
[]_^A^A_
AWAVAUATVWUS
[]_^A\A]A^A_
applying1
AWAVAUATVWUSPI
[]_^A\A]A^A_
AVVWUSH
[]_^A^
AWAVAUATVWUSH
[]_^A\A]A^A_
AVVWSH
([_^A^
AWAVAUATVWUSH
[]_^A\A]A^A_
AWAVVWSH
0[_^A^A_
AWAVATVWSH
h[_^A\A^A_
AWAVAUATVWUSH
[]_^A\A]A^A_
AWAVAUATVWUSH
h[]_^A\A]A^A_
AWAVAUATVWUSH
[]_^A\A]A^A_
AVVWUSH
@[]_^A^
@[]_^A^
AWAVATVWSH
H[_^A\A^A_
AWAVAUATVWUSH
L$8<=u
D9d$,s+A
H[]_^A\A]A^A_
AWAVAUATVWUSH
[]_^A\A]A^A_
AWAVAUATVWUSH
x[]_^A\A]A^A_
AVVWSH
8[_^A^
AVVWSH
8[_^A^
AWAVAUATVWUSH
[]_^A\A]A^A_
AVVWSH
([_^A^
AWAVVWSH
[_^A^A_
AWAVVWSH
[_^A^A_
AWAVAUATVWUSH
h[]_^A\A]A^A_
AWAVAUATVWUSH
[]_^A\A]A^A_
AVVWSH
u0HcH<H
H3E H3E
WATAUAVAWH
A_A^A]A\_
VWATAVAWH
A_A^A\_^
UVWATAUAVAWH
@A_A^A]A\_^]
H;xXu5
t<ffff
fA;8upI
fA;(t(fA98t
@USVWATAVAWH
D8d$Xt
A_A^A\_^[]
@USVWATAVAWH
D8d$Xt
A_A^A\_^[]
x ATAVAWH
A_A^A\
CA< t(<#t
fB9<@}eH
D$@H;G
<htn<jt^<lt6<tt&<wt
!,X< w
t$ WAVAWH
s4+sP+
0A_A^_
WAVAWH
A_A^_
D8t$8t
CA< t(<#t
<htn<jt^<lt6<tt&<wt
!,X< w
t$ WAVAWH
s(+{PL
0A_A^_
WAVAWH
A_A^_
|$ AVH
D$0H;G
t$ WATAUAVAWH
A_A^A]A\_
s(+sPH
WAVAWH
A_A^_
u3HcH<H
UVWAVAWH
0A_A^_^]
x ATAVAWH
A_A^A\
WATAUAVAWH
A_A^A]A\_
WAVAWH
0A_A^_
WAVAWH
fA94@u
fA94nu
0A_A^_
x ATAVAWH
A_A^A\
@8l$8t
@UAVAWH
D8t$8t
|$ AVH
L$ VWAVH
L$ UVWATAUAVAWH
0A_A^A]A\_^]
T$ D)s
t$ WATAUAVAW
A_A^A]A\_
UVWATAUAVAWH
A_A^A]A\_^]
t$ WATAUAVAWH
A_A^A]A\_
u HcA<H
LcA<E3
SVWATAUAVAWH
0A_A^A]A\_^[
@SVWATAUAVAWH
L!|$(L!
D$0HcH
pA_A^A]A\_^[
B(I9A(u
WATAUAVAWH
A_A^A]A\_
ri9O vdH
AUAVAWH
;I9}(tiH
0A_A^A]
UVWATAUAVAWH
A_A^A]A\_^]
VWATAVAWH
A_A^A\_^
UVWATAUAVAWH
A_A^A]A\_^]
WATAUAVAWH
A_A^A]A\_
WATAUAVAWH
A_A^A]A\_
fD9t$b
UVWATAUAVAWH
L$&8\$&t,8Y
@A_A^A]A\_^]
\$ VWATAUAVH
D!l$xA
@A^A]A\_^
UWATAVAWH
A_A^A\_]
VWATAVAWH
?D8d$8
t'D8d$8t
SD8d$8t
D8d$8t
A_A^A\_^
@8l$Ht
WATAUAVAWH
gfffffffH
D8l$ht
A_A^A]A\_
fffffff
@UATAUAVAWH
e0A_A^A]A\]
UVWATAUAVAWH
fA9<Bu
fC9<hu
A_A^A]A\_^]
WATAUAVAWH
0A_A^A]A\_
H9>u+A
\$ UVWAVAWH
A_A^_^]
f9|$^t&f
f9|$`t
fD94Fu
UVWATAUAVAWH
xWI96tRI
0A_A^A]A\_^]
WATAUAVAWH
fB94ht
xXI96tSI
fC94wu
0A_A^A]A\_
ATAVAWH
0A_A^A\
WATAUAVAWH
A_A^A]A\_
\$ UVWATAUAVAWH
H!D$ H
`A_A^A]A\_^]
UVWATAUAVAWH
fD94H}0L
A_A^A]A\_^]
VWATAVAW
A_A^A\_^
AUAVAWH
A_A^A]
UVWATAUAVAWH
@8t(8}nH
@8t(8}
@8t$HtrL
`A_A^A]A\_^]
x ATAVAWH
D88Ht;I
0A_A^A\
\$ UVWATAUAVAWH
DD8T$pu
D8T$pt
0A_A^A]A\_^]
@SUVWATAUAVAWH
8A_A^A]A\_^][
WATAUAVAWH
A_A^A]A\_
x AVAWE3
|$0A_A^
@UATAUAVAWH
H!T$0D
ue!T$(H!T$
A_A^A]A\]
WATAUAVAWH
A_A^A]A\_
@USVWATAUAVAWH
D+d$8H
D8l$ht
A_A^A]A\_^[]
ATAUAVH
L$ fff
L$ |+L;
A^A]A\
u(8J(t
UWATAVAWH
D8&t4H
A_A^A\_]
@8l$Ht
UATAUAVAWH
A_A^A]A\]
u~9t$Xt
s WAVAWH
0A_A^_
UVWAVAWH
@A_A^_^]
ffffff
fffffff
@USVWATAUAVAWH
e8A_A^A]A\_^[]
WAVAWH
A_A^_
USVWAVH
A^_^[]
`h````
xpxxxx
 !"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~
[aOni*{
~ $s%r
@b;zO]
v2!L.2
UUUUUU
UUUUUU
=imb;D
/>58d%
VM>cQ6
>jtm}S
)>6{1n
+f)>0'
;H9>&X
*StO9>T
n03>Pu
K~Je#>!
bp(=>?g
BC?>6t9^
K&>.yC
.xJ>Hf
y\PD>!
|b=})>
c [1>H'
uzKs@>
3>N;kU
kE>fvw
V6E>`"(5
?UUUUUU
?7zQ6$
Could not get the installation directory
The service was uninstalled successfully
The service was installed successfully
The service was upgraded successfully
Firefox
Didn't get an install dir for fix-update-directory-perms
Executing service command %ls
The MozillaMaintenance path is NOT correct. It was: %ls
Starting service with cmdline: %ls
Executing service command %ls, ID: %ls
The updaters do not match, updater will not run.
Path 1: %ls
Path 2: %ls
Error checking if the updaters are the same.
Path 1: %ls
Path 2: %ls
Strings
Could not write update.status could not copy updater error
Could not obtain version number from new path
Could not open update.status file
Could not read from update.status file
Could not get path for the secure update status file
SeSecurityPrivilege
SeIncreaseBasePriorityPrivilege
SeLockMemoryPrivilege
SeUnsolicitedInputPrivilege
SeMachineAccountPrivilege
SeCreatePermanentPrivilege
SeSystemEnvironmentPrivilege
SeSyncAgentPrivilege
SeAuditPrivilege
SeIncreaseWorkingSetPrivilege
SeProfileSingleProcessPrivilege
SeTrustedCredManAccessPrivilege
SeLoadDriverPrivilege
SeBackupPrivilege
SeTakeOwnershipPrivilege
SeRemoteShutdownPrivilege
SeShutdownPrivilege
SeEnableDelegationPrivilege
SeAssignPrimaryTokenPrivilege
SeCreateTokenPrivilege
SeRelabelPrivilege
SeCreateGlobalPrivilege
SeCreateSymbolicLinkPrivilege
SeUndockPrivilege
SeDebugPrivilege
SeImpersonatePrivilege
SeRestorePrivilege
SeTimeZonePrivilege
SeManageVolumePrivilege
SeSystemtimePrivilege
SeSystemProfilePrivilege
SeCreatePagefilePrivilege
SeTcbPrivilege
SeIncreaseQuotaPrivilege
Not enough command line arguments to execute a service command
Restarting install action: %d
Done waiting for service stop, last service state: %d
failed: %d
Unable to set the permissions on the update directory ('%S'): %d
Mozilla
MOZ_USING_SERVICE=
moz-updater.exe-4cdccec4-5ee0-4a06-9817-4cd899a9db49
MOZ_USING_SERVICE=1
Could not write update.status no updater identity.
The updater.exe application contains the Mozilla updater identity.
The updater.exe application does not contain the Mozilla updater identity.
The service description was updated successfully.
The new service binary was copied in by first moving the old one out of the way.
The maintenance service registry key does not exist.
Process was started... waiting on result.
The MozillaMaintenance service path is correct.
Not enough command line parameters specified. Updating update.status.
Deleting the old file path on the next reboot: %ls.
service command %ls complete with result: %ls.
Fixed service path to: %ls.
Service command not recognized: %ls.
The old temp service path was deleted: %ls.
Call to delete the old file path failed: %ls.
Disabled unneeded token privilege: %s.
Could not write update.status still applying on success error.
Could not write update.status still applying on failure error.
updater.ini file does not contain a maintenance service description.
The patch directory path subdirectory is not valid for this application.
The patch directory path length is not valid for this application.
The install directory path is not valid for this application.
The patch directory path is not valid for this application.
The working directory path is not valid for this application.
The new service binary was copied in.
Service binary path was less than 3, service will not be updated. This should never happen.
update.status is still applying and update was not successful.
update.status is still applying even though update was successful.
Fallback key present, skipping VerifyCertificateTrustForFile check and the certificate attribute registry matching check.
Installation directory and working directory must be the same for non-staged updates. Exiting.
The apply-to directory must be the same as or a child of the installation directory! Exiting.
updater.exe was compared successfully to the installation directory updater.exe.
Service command %ls complete.
Could not write update.status for previous failure.
Could not write update.status for GetInstallationDir failure.
Could not write update.status updater compare failure.
Unable to write to secure ID file.
Process finished but could not obtain return code.
User access was set successfully on the service.
The updater.exe identity string is not valid.
The old temp service path was not deleted.
The uninstaller version string could not be updated.
Install directory updater could not be determined.
The file "%ls" is signed and the signature was verified.
The new service binary could not be copied in. The service will not be upgraded.
Process finished with return code %d.
Starting update process as the service in session 0.
Sending stop request...
Waiting for service stop...
Uninstalling service...
Installing service...
Upgrading service if installed...
Installing service with force specified...
Could not delete service updater path: '%ls'.
Could not delete service updater INI path: '%ls'.
Passed in path: '%ls' (ignored); Install dir has: '%ls'; Using this path for updating: '%ls'.
Filesystem in path %ls is not supported (%d)
Could not disable token privilege value: %s. (%d)
Could not obtain token for current process, no privileges changed. (%d)
updater.exe module could not be loaded. (%d)
Error running update process. Updating update.status (%d)
Could not set object security. (%d)
Could not obtain issuer from registry. (%d)
Could not obtain name from registry. (%d)
Could not allocate SID memory. (%d)
Could not open subkey. (%d)
Could not query info key. (%d)
Could not open key. (%d)
Could not open fallback key. (%d)
Error sending stop request. (%d)
Could not convert description to wide string format. (%d)
Could not write pending state to update.status. (%d)
Could not start process due to certificate check error on updater.exe. Updating update.status. (%d)
Could not enum certs. (%d)
Could not lookup account Sid, will try Users. (%d)
Could not create process as current user, updaterPath: %ls; cmdLine: %ls. (%d)
Could not initialize security descriptor. (%d)
Could not allocate security descriptor. (%d)
Could not open service manager. (%d)
Unable to allocate memory for Signer Info. (%d)
updater.ini file does not exist, will not modify service description. (%d)
Could not append updater.ini filename when attempting to modify service description. (%d)
Could not obtain module filename when attempting to modify service description. (%d)
Could not remove file spec when attempting to modify service description. (%d)
Could not copy path to secure location. (%d)
Could not fix service path. This should never happen. (%d)
Could not set security ACE on service handle, the service will not be able to be started from unelevated processes. This error should never happen. (%d)
Could not reset security ACE on service handle. It might not be possible to start the service. This error should never happen. (%d)
Could not overwrite old service binary file. This should never happen, but if it does the next upgrade will fix it, the service is not a critical component that needs to be installed for upgrades to work. (%d)
Error on certificate trust check. (%d)
Error on certificate check. (%d)
Couldn't remove file spec when attempting to verify the working directory path. (%d)
Could not obtain module filename when attempting to use a secure updater path. (%d)
Couldn't remove file spec when attempting to use a secure updater path. (%d)
Couldn't append file spec when attempting to use a secure updater path. (%d)
Could not fix service path. (%d)
Could open service but could not query service config. (%d)
Could not determine buffer size for query service config. (%d)
Could not change service config. (%d)
Could not query service object security size. (%d)
Could not write update.status service update failure. (%d)
Unable to allocate memory for subject name. (%d)
Certificate did not match issuer or name. (%d)
Unable to allocate memory for issuer name. (%d)
Could not set no write sharing access on file. (%d)
Could not open service. (%d)
Could not uninstall service. (%d)
Could not install service. (%d)
Could not obtain module filename when attempting to install service. (%d)
Could not upgrade service. (%d)
Could not query file version info of old service. (%d)
Could not obtain file info of old service. (%d)
Could not create Windows service. This error should never happen since a service install should only be called when elevated. (%d)
CryptQueryObject failed. (%d)
RegisterServiceCtrlHandler failed. (%d)
StartServiceCtrlDispatcher failed. (%d)
CryptMsgGetParam failed. (%d)
CertGetNameString failed. (%d)
CertFindCertificateInStore failed. (%d)
Could not move old service file out of the way from: "%ls" to "%ls". Service will not be upgraded. (%d)
There was an error validating trust of the certificate for file "%ls". Returned: %d. (%d)
Couldn't remove file spec. (%d)
Couldn't append file spec. (%d)
Could not set security descriptor DACL. (%d)
Could not obtain DACL. (%d)
Could not set entries in ACL. (%d)
Could not create well known SID. (%d)
Could not copy updater.ini from: '%ls' to '%ls'. (%d)
Checking for Maintenance Service registry. key: '%ls'
File is already in the correct location, no action needed for upgrade. The path is: "%ls"
updater.exe was launched and run successfully!
*** Warning:
MozillaMaintenanceDescription
Sunday
Monday
Friday
August
__eabi
new[]
1#SNAN
1#QNAN
(null)
dddd, MMMM dd, yyyy
MM/dd/yy
February
January
Thursday
Tuesday
Wednesday
Saturday
InitializeCriticalSectionEx
LCMapStringEx
CompareStringEx
operator co_await
__restrict
CorExitProcess
HH:mm:ss
operator
October
November
September
December
Unknown exception
bad exception
bad allocation
__fastcall
__thiscall
__vectorcall
__clrcall
__stdcall
__cdecl
__pascal
bad array new length
FlsSetValue
FlsGetValue
delete
WakeAllConditionVariable
InitializeConditionVariable
FlsFree
AppPolicyGetProcessTerminationMethod
__unaligned
FlsAlloc
delete[]
SleepConditionVariableCS
LocaleNameToLCID
__ptr64
__swift_2
__swift_1
nan(snan)
nan(ind)
NAN(SNAN)
NAN(IND)
restrict(
__based(
Base Class Descriptor at (
Base Class Array'
Class Hierarchy Descriptor'
Type Descriptor'
`vector deleting destructor'
`scalar deleting destructor'
`vbase destructor'
`vector copy constructor iterator'
`eh vector copy constructor iterator'
`managed vector copy constructor iterator'
`vector vbase copy constructor iterator'
`eh vector vbase copy constructor iterator'
`vector constructor iterator'
`eh vector constructor iterator'
`managed vector constructor iterator'
`vector vbase constructor iterator'
`eh vector vbase constructor iterator'
`vector destructor iterator'
`eh vector destructor iterator'
`managed vector destructor iterator'
Complete Object Locator'
`virtual displacement map'
`vcall'
`string'
`udt returning'
`omni callsig'
`typeof'
`copy constructor closure'
`default constructor closure'
`local vftable constructor closure'
`placement delete closure'
`placement delete[] closure'
`vftable'
`local vftable'
`vbtable'
`local static thread guard'
`local static guard'
`dynamic atexit destructor for '
`dynamic initializer for '
operator ""
:y+LLD PDB.
z:\task_1579288126\build\src\obj-firefox\toolkit\components\maintenanceservice\maintenanceservice.pdb
LoadStringA
wsprintfW
AdjustTokenPrivileges
AllocateAndInitializeSid
BuildExplicitAccessWithNameW
ChangeServiceConfig2W
ChangeServiceConfigW
CloseServiceHandle
ControlService
CreateServiceW
CreateWellKnownSid
CryptAcquireContextA
CryptCreateHash
CryptDestroyHash
CryptGetHashParam
CryptHashData
CryptReleaseContext
DeleteService
FreeSid
GetEffectiveRightsFromAclW
GetSecurityDescriptorDacl
GetSecurityInfo
InitializeSecurityDescriptor
LookupAccountSidW
LookupPrivilegeValueA
OpenProcessToken
OpenSCManagerA
OpenSCManagerW
OpenServiceW
QueryServiceConfigW
QueryServiceObjectSecurity
QueryServiceStatus
QueryServiceStatusEx
RegCloseKey
RegEnumKeyExW
RegGetValueW
RegOpenKeyExW
RegQueryInfoKeyW
RegQueryValueExW
RegSetValueExW
RegisterServiceCtrlHandlerW
SetEntriesInAclW
SetSecurityDescriptorDacl
SetSecurityInfo
SetServiceObjectSecurity
SetServiceStatus
StartServiceCtrlDispatcherW
CertCloseStore
CertFindCertificateInStore
CertFreeCertificateContext
CertGetNameStringA
CertGetNameStringW
CryptMsgClose
CryptMsgGetParam
CryptQueryObject
CoTaskMemFree
RpcStringFreeW
UuidCreate
UuidToStringW
SHFileOperationW
SHGetKnownFolderPath
WinVerifyTrust
PathAppendW
PathCanonicalizeW
PathIsUNCServerShareW
PathQuoteSpacesW
PathRemoveFileSpecW
PathStripPathW
PathStripToRootW
PathUnquoteSpacesW
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
CloseHandle
CompareStringW
CopyFileW
CreateDirectoryW
CreateEventW
CreateFileW
CreateProcessW
CreateThread
CreateToolhelp32Snapshot
DeleteCriticalSection
DeleteFileW
DeviceIoControl
EncodePointer
EnterCriticalSection
ExitProcess
FindClose
FindFirstFileExW
FindFirstFileW
FindNextFileW
FlushFileBuffers
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetConsoleCP
GetConsoleMode
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetDriveTypeW
GetEnvironmentStringsW
GetExitCodeProcess
GetFileAttributesW
GetFileInformationByHandle
GetFileSize
GetFileType
GetFullPathNameW
GetLastError
GetModuleFileNameW
GetModuleHandleExW
GetModuleHandleW
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoW
GetStdHandle
GetStringTypeW
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
InitializeCriticalSectionAndSpinCount
InitializeSListHead
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
LCMapStringW
LeaveCriticalSection
LoadLibraryExW
LocalAlloc
LocalFree
MoveFileExW
MoveFileW
MultiByteToWideChar
Process32FirstW
Process32NextW
QueryPerformanceCounter
RaiseException
ReadConsoleW
ReadFile
ResetEvent
RtlCaptureContext
RtlLookupFunctionEntry
RtlPcToFileHeader
RtlUnwind
RtlUnwindEx
RtlVirtualUnwind
SetEndOfFile
SetEnvironmentVariableW
SetEvent
SetFileAttributesW
SetFilePointerEx
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
WaitForSingleObject
WaitForSingleObjectEx
WideCharToMultiByte
WriteConsoleW
WriteFile
lstrcmpiW
USER32.dll
ADVAPI32.dll
CRYPT32.dll
ole32.dll
RPCRT4.dll
SHELL32.dll
WINTRUST.dll
SHLWAPI.dll
VERSION.dll
KERNEL32.dll
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
.?AVbad_alloc@std@@
.?AVexception@std@@
.?AVbad_array_new_length@std@@
.?AVtype_info@@
.?AVbad_exception@std@@
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
<assemblyIdentity
version="1.0.0.0"
processorArchitecture="*"
name="MaintenanceService"
type="win32"
<description>MaintenanceService</description>
<ms_asmv3:trustInfo xmlns:ms_asmv3="urn:schemas-microsoft-com:asm.v3">
<ms_asmv3:security>
<ms_asmv3:requestedPrivileges>
<ms_asmv3:requestedExecutionLevel level="requireAdministrator" uiAccess="false" />
</ms_asmv3:requestedPrivileges>
</ms_asmv3:security>
</ms_asmv3:trustInfo>
<compatibility xmlns="urn:schemas-microsoft-com:compatibility.v1">
<application>
<supportedOS Id="{8e0f7a12-bfb3-4fe8-b9a5-48fd50a15a9a}"/>
<supportedOS Id="{1f676c76-80e1-4239-95bb-83d0f6d0da78}"/>
<supportedOS Id="{4a2f28e3-53b9-4441-ba9c-d69d4a4a6e38}"/>
<supportedOS Id="{35138b9a-5d96-4fbd-8e2d-a2440225f93a}"/>
</application>
</compatibility>
</assembly>
z}:0sJ
j["[,1
G3[[i)
>*cPZ}
`aK[t"tE
zu9T}~
zLr_q5Vf
[H6>?$
$C_)a$
TkcDsY'v
6!2'rr
N|G[^u
}_}Bc4a
82,~0^
c9$61Q1o
Rd|;_P
A>yt`y
C)'H_{
3.%7J4
{FQ"J-B
,]*~+r
6B=irqn
#{(K4`O
{V0>Bj
6~;vU.[
z|.(aek
8!U~K#
|~.0LX
U&4<'Xd
z JP'L
--u]BQ
q$}zz+
{+ppb-
^prK[+
ZB.x\vu"LM
WE~>BzHQvs
^\L_\v6
j&Q=ae@j
3AYGFn
fi?_Nk
w~-Z3(
cps+{zu
d5\r:7
|}!uQK
Yv[}7&
G2Uh^7
2E'4<(
NlUi!S]~%
p;8.%S
Gt[=o`h0
%e7r7DO
=hNVX!hYz>:
7bi[:G
1oop]?
ufDIPx
lF=xKP
!6]'[!
zVAlmF
NT)Lj*
-iDB<mL
:Q96NU
IP3Q{#}
%:rjf~
v"%bK4
AUeU&#s|
R_gD[_
ipO11G
x&%bq{A2
v'b%mJ
$>:)|C
.G+UU=,
t{(S'@
Cq.NSX
{W|cGa{
"Q<JmQ
N61<Vo
Cni*5q
.a[q6[~
RYw`e!
`UY~-$
Cv{TLPA
Ib!@Qz
B'=Ug0
VG1u*6
)B{=)C6c
$9"}S3
=Z)`Ez
ITMgk[R#
H{ZTWp
~#(W~=L]
L&Px@a
J>V{|;
|~D3=I
r$pUZB
/Lby~&
xHN LY
k-U/Uu
{]><~Q
#g2^L0
X@^8hv(
wDk~Q4N
^v9hoSJ
44~T'K!'
^1 x5)
g&s?jo
_=aWdwX
B&p,1M
F&<\[N
`Vb\67
zQ,1gu
w oCQ)
N\03_C`J
R}\,}9
inH:Tf
hSj"6O
OU6,*g
LeeHf3[
od9^I:%
5=P0EH
*+]<~p
[7gUV
?W'uEE
^}>xp,x
5X070[OUn
qE^sa;
Zaz,\8
@@`_jv
RZF@R%
[s@6&HY
v-KMz?
$@?n:W8
&XQc];F
bJuE=DJ
)NgE|
{e2#lZ"
6qW\Oi'Y_
FdQ!h{2}k\g
[=peQy
9mqz[J
t1>8Zh
;Q Pz?
t0LE-a
qqv }H
6,n5DI
{A=/K5
,;^L\;
VN;#R<&M
YzXm^T
gN]l&
=cuCK69
x\%Ys!Mh;
&K#9p?
O0<o(*R
r?6=SQU]r
l GOD/
r@Z>kp
sT113^
W[;SnTE
NHY98
Y[T5rp
^5w]!`
{0>K*?X
pv-mrT
j<v^nLH]G
85yK6
UnNbMA
qs%7xZ
{m8<{W{//
OVk$U6
Bcs%IY
Tk#b{;s
S+\Lpj
Tj&9y0
898tN0%s
{DZv&?
3>qemG)
]CXQY:
-|uLe7E
|"PVMy[
tZr9aP
x&{_pp
y;wwvkiF?l
=.Sl`S
}.lEL\
n7K!'<
VJjdI"*U
rM{=d/juO
(Q1'_t
N\UNKf
>~l~)
x^AWSVE
;'EF@9
CQH@@HcF5
J~~t?0
nKE|6/@
jep{Km
P3Qz`}
dCPX{T
;6)jP9
H},~_
%6pz{
Fn+]>u
KvkQkR(
| ?7vy
}je?3Z
I%?9p_
Xxb:7*
^-Jw8p
?dUz3u
cKDQzD
XQ]lgL[
vlHD&T
iX;|fX
q)ON4p
P!_eP8
cn'XWz#D
=]B;)t
.FpVPOa
|dR7+k+
G6r4v)
d/!<T(r
XCXGEn
jtQ{-I1
3&ew/<
Ym}+8j
T'50gwj
IF=lc.u
^D/[R,\
XKjY._.
gS@rlb
f wtG8?^
'Ys>nC
5(sWX"
WmrgC(R&
"\%{#z
T!Ti@p
|9R(?<G?
u0^-iEv5
Wm0dw7x
M$y#<X(^
-#)NV,
m3};>c
Z:AFR6
VUR5g<
9F[u9+g>s
H"tKmFn
j,h`7,
z"edYy
G+3!G
(v1zf\
uY~0bGuR>|@
z$~-{f
at=|;
F|"O2<_
Z\H13p
G$7ukK?G
Fdj,5&
wy WPgIH
eCOPI_
}c0*mA!V
,(Y_2[
J/&J_2
weH@|U
a\HcIUkd
s\_3"L
Q&#&*|G
,_br{!
bFJkM&
F <"+O
`/ibXg
tw9t1"
#uF?p$
=HuAIS
t}0tmgt
vl,h%R
,=eAzkT
GWRCku
18|\Ol
z0hnsS
r>onAW
b=05k
,+|k=4a
wmt+|=
Swb1GuNK
xpxTx=+
k@>Aj/E
G=(OTA
aC4eoH
h.)+".p
\fFkTt
y2Thb
i}lqt:FC
#YHM].+
eu )hB
Qd*)Yst
L]Qh:4
GdQpdK
ON$y1y
-[="2#
'S~4aE9
o5ka?Jh
FzhA}T
vPcwAMYXS^k
b?h4Ccq
uM#H)w
MTZ)a:yc.
Ny(loh1@
7O0qQD2
quYqt
Q<TzV.
5+`qi,
\1*Sao
TCL/vO
A&MBAh
#;-P/c
*kUB[/
PA9o/*
{*1`r2
BY|p%F
Mu=Svz6
Hcml'E
K1:}:X
1WpOuR6
6QZ8+#
:YZoln
DbF;"#
= _6xh
5K`'A`
cbn(Z(
.6S}Mk
]QjspO
cGLtLn
N[dG::q
VIg`F-
5iIW k(
5y,%|1
ic6ZQ
5-f~fM
F9=3-k
MZcb^$
.})f:d
&:& [q
?dkG"\T
@NYyBm
Pt^G![EW
:.v;==
GU-8;5
L^4F]Xna
iHw#s@
;A+<.:
?StC4V
Tnnh6t
3Bxl8q?8
qUu&8u
j@v49(
`HCQ|w
QyRxF[jS
ba`_^]\[
210/.-,
wt3;1E
nuC7`4
/vL)}\@
RZg'SC
}'cP8m
U1kZd@5#
aU8S#i{
U.IClk,_
HN)JGq
=f[)m-o
RVICk$
7s!tM0<
.UCK?|
}ksc**
o}5H'~
_J!x/`
R73{?3S
gSwz-k
<I,u|SQ
}rNH.Y
R<6]=8
_HL~qV
lAzU]+
48s`+,h\
W1P MC4
P2r7d`
0%js<*
=7Ki9U{
Jii|8[+
[{6>[L
?q/7ut
~R1YcZl
h17+r9z
Ro1zl]
|:"Ut#Y
&1aonP
Z hnH
)=J@869
]4*`GXyO
}37p-
XsjRYIL
E'N&k3
I$>]em
Os:cu1Sk/h
x':[o\$
%}QLHR
.J]z`l
kSe!<
v)v/v.>
{%jBMt
?FSTk+
fpL;CX)
[UiJab5K
uq+0s
&je9os
R(!? @
+?r1wv
+u*-0R
uNefK?
+|SAr:
vC~c`{
+%-{yl
Ef&Am\>T}
6Y~Hz~v
c&/ZFl
N|VGec
yU_Ofa
PyRWfo
!CkQ]B`
~;;hS=Q
{IO%]>_
kI72`$
=:Y!g8p
OJ|[7H
8`"]9@
a.w{M
rs~cv
}x*m|A
krZ9~9
%2"! a
X"uq[R{
f,W<,#
K$~}WM
n?v)lGK
G3ArdN
7r v,B
{Os&Vi
)[NU~{
84?1b"
oM]=7J
]Jt{K]
=}j!hu
.`e|V6$
q$1nEP
rB<N0d
*%o>X1
eHhU*#
f+}:W,n
10H2#G
_dyA>f
$F^B38
z=zO*v
"BkTfH(t
6xq[gU
.'W7=$/
S"EF}F
^ZEm4tZ
7%Weur
c&*<Fa
>B`p*I
pg%OH%R
{dgyie
{HRmn7
5f!'Mk/R
"YJg.W
P~_t{~
W{p6op
=']1VH;
KZzSl)^
*29g;,<
9@G${B
8.=XX8
\-Z`4
wDey(:
,@33n/
@[(Pm(I
|xM*\k
&X{\yz
BCZPU)
|m:VWi
fXh3r/
jaK7O,5
Bb@M!U
[,dKh
ec"jmN
Nm+0)o
%_bDI7F
i{a;m"
*cY+SY=Te}
\*^iLi
_7\'6M
\`Z8<
9"g>E;
7:UKo
:'d.tb
UVpIbFB
VR9ov;
JIj|vf)
5g#|)F
R!+ij?
rGSMUo
_>,J`}
x6AbG{)
xjGY[.
c`t@OnF
XP]_38
Z[n"q
2LD0V2
mHyQ{-
c@j)Kln
"\MM,N
R"fl2F
MQ`]Ue
8vE<va
-uLi+;5
T)KQ1d
}t\*ut
?X>]<x
6y91Q=
P6`T-\!
Yv*:;}
,EHATT-Ht
~j=T)yv
sp!`'F
_9n,T"
16|4"w
QYA $h
[z RM2
nvS *$
SjW0=Kq
_ aEbzO
^2kK+W
/^LGz2L
z$L8\p
(cBz].
>o-S+zviS!
vh0dh#
mG'+2G+
'$t#&J
y"A$4J
g{/yu{
!NM_NP_?J:Xw>
v/9b%o
?SsJA
'T'Ce/
=Qq]/%
=Rs_py
C}s_)T
;:U[Z
\T 6c9
;EI(@4
r[-0G1
buWId|
Hl;"*6
:BI=(H
^[D6abB
=YiL{&
s`PM6o
[1?Rp9+
6!f=v(
.OYK|BT
<WCND{
Bphsnu<
lY'h#E
?1)ib,
m_(4-T
gn.H)UL !
d-pG`4
``/Q9R
i/FC#`^
e;N(6h
}WkBu~z
]G^NNd
DasIHj
}m$ c\
+q_QzaT2
w]RGFK
=%Sf_k
:.RsA\K\
g_]/pw`&a
~}]%zhm
GK)\H
M/6@Ha
5u,v##
Xpm;H=
}L4m"Sj
3v:]!j
!_-g!l
ad^`sW<
}@Kq'/
$P~A$7
b?HS7E
]^so}}H
G.)t0+!
|?&<X=F
T=BX$D
fcL&T0
j/e&]\
uz:7hb%#
t$9slltiD
K@3.)&'t
0sn56D
FD0D^V
RF;_BA
%N)(jQ
< uc4vn
g-wMY>|oC
fk/g;p
(9J*"mZ;
^g`t.W
rwewVl
_(k.g>=
8BHawzo
&649-Y&
1,2)-a%
p}h1?EY
f;$p\@No
g|p,g'
ea5i%&
P6#i9u~
u>QP5ei
UjFK9?@5L
{]A=)4
>.u5?
CjC%fg
<P6,v^
`VnkK`
`2~R/O
<|x|S|
$&:?(r
-w~/gf
dOH~Flz
<;Kz6*
JHu:h~wq
\|YH::(!
{$Arg$
N01^G
t9H-#q>c
&cQu=,
`hEKpd
ubhGIo
&"\&+gA
frVg:(
GTH."f
8d,5!Z
'=y\S~s
7pG0<y
1`N{j)
AO!cFW
}R7=$&
vo13\N?
2hOz'
5xMT:
g1>O(3
>]NH3H?
?_:[W<m]
&$IP=A
WFR6W1
7/<=TX
V1%QEy
;.LB6HA{
uM=4Fu
Dzw=4Z
BXs2=+
A=LpYc
*6xy3~Y
UV+/wV
p&yL"]
r70Ml(`
m+Y4"9
Dq))n=z
{|b]d4
9\WnZcS
uURLEo[
@9w\=C
1ALD;~
lW-UNT
#"[]<V/
F"KPNU
<*lP:Q
K,uv]&[
>O.j1N
8D(Dg.
qo~}|{uN
wvutsr
WVUTSR
98765432
~:@Iv7X
TTOwq2CX
%g,@0W
yeNWtn
/g0lb;
9YGS}
'9- v!{SJ
-Y6LokT
p mR<
r3Fp-7
QUST6R
W#9~W@u/
~`:DLHs
vJw&9"i[3
ajW'z>
jG4h~OpN
C~1[S
6qQ}*NU{L
ty[x1|
V!TF^M|I2
e=sW=,?\2
P)0YP?
s+KFAC
tDP|S<
+r! gm{W
:HGt-9e)R
`|CI|L
RW6-2zC
P=Rw3o{K@
zJJPui
j<)3(1
VoVgV_
O_G_?_/_
G^?^7^/^
WYGY7YW
[U7I1/
~Mo^]Iok
OQ?Qll
GZ?Z7Z/Z
?J?W7W
/V'VV
gU_UDh
/U'UU
GT?T7T/
^:%w}z
s;P<07T
d]=U}{
t`[U-P
-fF+AO0
Ah"gz/
V=I1ydO
r-:9ak+
ImQ3HR
5#kq'l
>vHy5{
!g!lS;
~?<nhU_{8
cfh~*v
fc &X(
~oXO*[kK
nzT=h5
g!lS;
V=`GWyO
PQRSUVWAPAQARASATAUAVAWUH
p4)R-P
]A_A^A]A\A[AZAYAX_^][ZYXH
((((( H
((((( H
(
UTF-16LEUNICODE
\\\\\\\\
Mozilla
updates
%s.bak%u
check-cert
winsta0\Default
.status
Success
fix-update-directory-perms
UpdateLogs
SOFTWARE\%S\%S\TaskBarIDs
%s\%s\%s
issuer
DisplayVersion
uninstall
forceinstall
updater.ini
maintenanceservice-uninstall.log
maintenanceservice-install.log
maintenanceservice.log
maintenanceservice-%d.log
updater.exe
maintenanceservice_tmp.exe
maintenanceservice.exe
software-update
Failure
dummyparam.exe upgrade
MozillaMaintenance
Software\Microsoft\Windows\CurrentVersion\Uninstall\MozillaMaintenanceService
Mozilla Maintenance Service
/replace
%d.%d.%d.%d
SOFTWARE\Mozilla\MaintenanceService\
SOFTWARE\Mozilla\MaintenanceService\3932ecacee736d366d6436db0f55bce4
\updates\0
mozlock.
(null)
dddd, MMMM dd, yyyy
MM/dd/yy
syr-sy
February
January
Thursday
Tuesday
Wednesday
Saturday
Sunday
Monday
Friday
div-mv
August
zh-cht
HH:mm:ss
zh-chs
October
November
September
December
smj-no
sma-no
quz-bo
uz-uz-latn
az-az-latn
sr-sp-latn
bs-ba-latn
sr-ba-latn
uz-UZ-Latn
az-AZ-Latn
sr-SP-Latn
bs-BA-Latn
sr-BA-Latn
kok-in
uz-uz-cyrl
az-az-cyrl
sr-sp-cyrl
sr-ba-cyrl
uz-UZ-Cyrl
az-AZ-Cyrl
sr-SP-Cyrl
sr-BA-Cyrl
mscoree.dll
kernel32.dll
sms-fi
smn-fi
smj-se
sma-se
quz-pe
quz-ec
syr-SY
div-MV
zh-CHT
zh-CHS
smj-NO
sma-NO
quz-BO
kok-IN
sms-FI
smn-FI
smj-SE
sma-SE
quz-PE
quz-EC
user32
kernel32
advapi32
api-ms-win-core-file-l1-2-2
api-ms-win-core-sysinfo-l1-2-1
api-ms-win-core-fibers-l1-1-1
api-ms-win-core-synch-l1-2-0
api-ms-win-core-xstate-l2-1-0
api-ms-win-core-winrt-l1-1-0
api-ms-win-core-string-l1-1-0
ext-ms-
api-ms-
CONOUT$
api-ms-win-core-synch-l1-2-0.dll
api-ms-win-core-processthreads-l1-1-2
api-ms-win-appmodel-runtime-l1-1-2
api-ms-win-core-localization-l1-2-1
api-ms-win-core-datetime-l1-1-1
api-ms-win-core-localization-obsolete-l1-2-0
ext-ms-win-ntuser-dialogbox-l1-1-0
api-ms-win-rtcore-ntuser-window-l1-1-0
api-ms-win-security-systemfunctions-l1-1-0
ext-ms-win-ntuser-windowstation-l1-1-0
VS_VERSION_INFO
StringFileInfo
000004b0
Comments
LegalCopyright
License: MPL 2
CompanyName
Mozilla Foundation
FileDescription
FileVersion
72.0.2
ProductVersion
72.0.2
InternalName
LegalTrademarks
Mozilla
OriginalFilename
maintenanceservice.exe
ProductName
Firefox
BuildID
20200117190643
VarFileInfo
Translation
Antivirus Signature
Bkav W64.AIDetectMalware
Lionic Virus.Win32.Expiro.n!c
tehtris Clean
ClamAV Win.Malware.Expiro-9937504-0
CMC Clean
CAT-QuickHeal W32.Expiro.R3
Skyhigh BehavesLike.Win64.Generic.tt
ALYac Win64.Expiro.Gen.7
Cylance unsafe
Zillya Trojan.Kryplod.Win64.554
Sangfor Trojan.Win32.Save.a
K7AntiVirus Virus ( 0058d9c51 )
Alibaba Virus:Win64/Expiro.25b09cc7
K7GW Virus ( 0058d9c51 )
Cybereason Clean
Baidu Clean
VirIT Clean
Paloalto Clean
Symantec W64.Xpiro.J!dam
Elastic malicious (high confidence)
ESET-NOD32 a variant of Win64/Expiro.DP
APEX Malicious
Avast Win64:Expiro-AJ [Inf]
Cynet Malicious (score: 100)
Kaspersky Virus.Win64.Moiva.a
BitDefender Win64.Expiro.Gen.7
NANO-Antivirus Virus.Win64.Virut-Gen.bwpxnc
ViRobot Clean
MicroWorld-eScan Win64.Expiro.Gen.7
Tencent Virus.Win64.VirMoiva.a
TACHYON Virus/W64.Movia
Sophos W64/Moiva-B
F-Secure Malware.W32/Infector.Gen
DrWeb Win32.Expiro.158
VIPRE Win64.Expiro.Gen.7
TrendMicro Virus.Win64.EXPIRO.SMAJC
Trapmine Clean
FireEye Generic.mg.3d8f31daa9025f13
Emsisoft Win64.Expiro.Gen.7 (B)
SentinelOne Static AI - Malicious PE
GData Win64.Expiro.Gen.7
Jiangmin Clean
Webroot Clean
Varist W64/Expiro.AR.gen!Eldorado
Avira W32/Infector.Gen
Antiy-AVL Virus/Win32.Expiro.x
Kingsoft Clean
Xcitium Clean
Arcabit Win64.Expiro.Gen.7
SUPERAntiSpyware Clean
ZoneAlarm Virus.Win64.Moiva.a
Microsoft Virus:Win64/Expiro.DD!MTB
Google Detected
AhnLab-V3 Clean
Acronis suspicious
McAfee Artemis!3D8F31DAA902
MAX malware (ai score=88)
VBA32 Clean
Malwarebytes Neshta.Virus.FileInfector.DDS
Panda W64/Moyv.A
Zoner Clean
TrendMicro-HouseCall Clean
Rising Virus.Expiro!1.A140 (CLASSIC)
Yandex Clean
Ikarus Virus.Win64.Expiro
Fortinet W64/Expiro.CU
BitDefenderTheta Clean
AVG Win64:Expiro-AJ [Inf]
DeepInstinct MALICIOUS
CrowdStrike win/malicious_confidence_100% (W)
IRMA Signature
Trend Micro SProtect (Linux) Clean
Avast Core Security (Linux) Win64:Expiro-AJ [Inf]
C4S ClamAV (Linux) Win.Malware.Expiro-9937504-0
Trellix (Linux) Clean
Sophos Anti-Virus (Linux) W64/Moiva-B
Bitdefender Antivirus (Linux) Win64.Expiro.Gen.7
G Data Antivirus (Windows) Virus: Win64.Expiro.Gen.7 (Engine A)
WithSecure (Linux) Malware.W32/Infector.Gen
ESET Security (Windows) a variant of Win64/Expiro.DP virus
DrWeb Antivirus (Linux) Win32.Expiro.153
ClamAV (Linux) Win.Malware.Expiro-9937504-0
eScan Antivirus (Linux) Win64.Expiro.Gen.7(DB)
Kaspersky Standard (Windows) Virus.Win64.Moiva.a
Emsisoft Commandline Scanner (Windows) Win64.Expiro.Gen.7 (B)
Cuckoo

We're processing your submission... This could take a few seconds.