41dbfcca18129caecd4a958132d0346b6ca0c30bc8b06abf4e776bd2715e7244

HOSTILE

41dbfcca18129caecd4a958132d0346b6ca0c30bc8b06abf4e776bd2715e7244 · 92%

AI Go loader with shellcode injection and obfuscation

Mal-ecule

O₃(As₂CEr)H₂(FOs)Md₃(PtBi₂Si₃)

Size 4.4 MB download unavailable

First seen 3 days ago

Analyzed 2 days ago

Ecosystem windows

Source abuse.ch

Also detected by 1 source

Go dynamic x64 shellcode loader: ws-Setup-Complete.exe:0x3fd2

Go PE with opaque identity and raw API dispatch: ws-Setup-Complete.exe:0x1cae8b

Go PE signed by abused TLS server certificate: ws-Setup-Complete.exe:0x29b0ce

ws-Setup-Complete.exe pe

0x3f52	5890904c0fbcce4d0fafc1458b4c1008	X..L...M...E.L..
0x3f62	4139f975db488b4b604c01c1488d0411	A9.u.H.K`L..H...
0x3f72	488d4008904883c4285dc3660fd7d190	H.@..H..(].f....
0x3f82	4885d27541488944243848895c244089	H..uAH.D$8H.\$@.
0x3f92	7c245048894c24186689542416488d05	\|$PH.L$.f.T$.H..
0x3fa2	bc3e1500bb35000000e810850600488b	.>...5........H.
0x3fb2	442438488b4c24180fb7542416488b5c	D$8H.L$...T$.H.\
0x3fc2	24408b7c2450488b73589090480fbcd2	$@.\|$PH.sX..H...
0x3fd2	41b840000000490f44d0480faff24883	A.@...I.D.H...H.Go dynamic x64 shellcode loader
0x3fe2	c6084803742420893e488b7358480faf	..H.t$ .>H.sXH..
0x3ff2	f248037360488b5c2420488d341e488d	.H.s`H.\$ H.4.H.
0x4002	76089090880c1348ff004889f04883c4	v......H..H..H..
0x4012	285dc3488944240848895c241048894c	(].H.D$.H.\$.H.L
0x4022	2418897c2420e813d60600488b442408	$..\|$ .....H.D$.
0x4032	488b5c2410488b4c24188b7c2420e9bb	H.\$.H.L$..\|$ ..
0x4042	feffffcccccccccccccccccccccccccc	................
0x4052	cccccccccccccccccccccccccccc493b	..............I;
0x4062	66100f860e010000554889e54883ec28	f.......UH..H..(
0x4072	488b50104889542420488b3283e17f66	H.P.H.T$ H.2...f
0x4082	480f6ec1660f60c0f20f70c00066480f	H.n.f.`...p..fH.
0x4092	6ece660f74c1660fd7f0400fb6f6eb08	n.f.t.f...@.....
0x40a2	4c8d46ff904c21c64885f6742e4c8b43	L.F..L!.H..t.L.C
0x40b2	5890904c0fbcce4d0fafc14d8b4c1008	X..L...M...M.L..
0x40c2	4939f975db488b4b604c01c1488d0411	I9.u.H.K`L..H...
0x40d2	488d	H.

0x465a	894b0848891a488b4c2460488b415848	.K.H..H.L$`H.AXH
0x466a	8b542430480fafc2480341604883c008	.T$0H...H.A`H...
0x467a	4803442440904883c4485dc3488b5424	H.D$@.H..H].H.T$
0x468a	40488b1266480f6ec2660fd7d04885d2	@H..fH.n.f...H..
0x469a	7534668954241e488d05ba371500bb35	u4f.T$.H...7...5
0x46aa	000000e80e7e0600488b442458488b4c	.....~..H.D$XH.L
0x46ba	24200fb754241e488b5c2460488b7424	$ ..T$.H.\$`H.t$
0x46ca	78488b7c24704c8b43589090480fbcd2	xH.\|$pL.CX..H...
0x46da	41b940000000490f44d14c0fafc24983	A.@...I.D.L...I.Go dynamic x64 shellcode loader
0x46ea	c0084c0344244049897008833da41e2b	..L.D$@I.p..=..+
0x46fa	0000740f498b30e85aee060049893b49	..t.I.0.Z...I.;I
0x470a	897308498938488b7358480faff24803	.s.I.8H.sXH...H.
0x471a	7360488b5c2440488d341e488d760890	s`H.\$@H.4.H.v..
0x472a	90880c1348ff004889f04883c4485dc3	....H..H..H..H].
0x473a	488944240848895c241048894c241848	H.D$.H.\$.H.L$.H
0x474a	897c24204889742428e8e8ce0600488b	.\|$ H.t$(.....H.
0x475a	442408488b5c2410488b4c2418488b7c	D$.H.\$.H.L$.H.\|
0x476a	2420488b742428e9eafdffffcccccccc	$ H.t$(.........
0x477a	cccccccccccc493b66100f86a4000000	......I;f.......
0x478a	554889e54883ec20488944243048895c	UH..H.. H.D$0H.\
0x479a	243848894c244040887c2448488d05f3	$8H.L$@@.\|$HH...
0x47aa	bb1300e88e020100488b4c2440488948	........H.L$@H.H
0x47ba	080fb64c2448884806488b4c24384883	...L$H.H.H.L$8H.
0x47ca	f908ba08000000480f42ca4881f90004	.......H.B.H....
0x47da	0000	..

0x1cae0b	652e6e6577496e6c696e65556e77696e	e.newInlineUnwin
0x1cae1b	6465720073797363616c6c2e636f6d70	der.syscall.comp
0x1cae2b	696c6543616c6c6261636b0072756e74	ileCallback.runt
0x1cae3b	696d652e6362734c6f636b0072756e74	ime.cbsLock.runt
0x1cae4b	696d652e63616c6c6261636b61736d41	ime.callbackasmA
0x1cae5b	6464720072756e74696d652e63627355	ddr.runtime.cbsU
0x1cae6b	6e6c6f636b0073797363616c6c2e6c6f	nlock.syscall.lo
0x1cae7b	616473797374656d6c69627261727900	adsystemlibrary.
0x1cae8b	73797363616c6c2e53797363616c6c4e	syscall.SyscallNGo PE with opaque identity and raw API dispatch
0x1cae9b	0073797363616c6c2e6c6f61646c6962	.syscall.loadlib
0x1caeab	726172790073797363616c6c2e676574	rary.syscall.get
0x1caebb	70726f63616464726573730073797363	procaddress.sysc
0x1caecb	616c6c2e53797363616c6c0073797363	all.Syscall.sysc
0x1caedb	616c6c2e53797363616c6c3600737973	all.Syscall6.sys
0x1caeeb	63616c6c2e53797363616c6c39007469	call.Syscall9.ti
0x1caefb	6d652e72756e74696d654e6f77007469	me.runtimeNow.ti
0x1caf0b	6d652e72756e74696d654e616e6f0074	me.runtimeNano.t
0x1caf1b	696d652e536c6565700072756e74696d	ime.Sleep.runtim
0x1caf2b	652e77726974650072756e74696d652e	e.write.runtime.
0x1caf3b	7472616365416476616e63650072756e	traceAdvance.run
0x1caf4b	74696d652f74726163652e72756e7469	time/trace.runti
0x1caf5b	6d655f7472616365436c6f636b556e69	me_traceClockUni
0x1caf6b	74735065725365636f6e640072756e74	tsPerSecond.runt
0x1caf7b	696d652e63616c6c65727300696e7465	ime.callers.inte
0x1caf8b	726e616c2f72756e74696d652f6d6170	rnal/runtime/map
0x1caf9b	732e74797065537472696e670072756e	s.typeString.run
0x1cafab	74696d652e6d6170696e69746e6f6f70	time.mapinitnoop
0x1cafbb	00676f676f0063616c6c52657400676f	.gogo.callRet.go
0x1cafcb	736176655f73797374656d	save_system

0x1cdc34	292e4572726f720073797363616c6c2e	).Error.syscall.
0x1cdc44	282a444c4c4572726f72292e556e7772	(*DLLError).Unwr
0x1cdc54	61700073797363616c6c2e4c6f616444	ap.syscall.LoadD
0x1cdc64	4c4c0073797363616c6c2e5554463136	LL.syscall.UTF16
0x1cdc74	50747246726f6d537472696e67007379	PtrFromString.sy
0x1cdc84	7363616c6c2e282a444c4c292e46696e	scall.(*DLL).Fin
0x1cdc94	6450726f630073797363616c6c2e4279	dProc.syscall.By
0x1cdca4	746550747246726f6d537472696e6700	tePtrFromString.
0x1cdcb4	73797363616c6c2e282a50726f63292e	syscall.(*Proc).Go dynamic x64 shellcode loader
0x1cdcc4	43616c6c0073797363616c6c2e282a50	Call.syscall.(*P
0x1cdcd4	726f63292e416464720073797363616c	roc).Addr.syscal
0x1cdce4	6c2e282a4c617a79444c4c292e4c6f61	l.(*LazyDLL).Loa
0x1cdcf4	640073797363616c6c2e282a4c617a79	d.syscall.(*Lazy
0x1cdd04	444c4c292e4c6f61642e646566657277	DLL).Load.deferw
0x1cdd14	726170310073797363616c6c2e282a4c	rap1.syscall.(*LGo PE with opaque identity and raw API dispatch
0x1cdd24	617a7950726f63292e46696e64007379	azyProc).Find.sy
0x1cdd34	7363616c6c2e282a4c617a7950726f63	scall.(*LazyProc
0x1cdd44	292e46696e642e646566657277726170	).Find.deferwrap
0x1cdd54	310073797363616c6c2e282a4c617a79	1.syscall.(*Lazy
0x1cdd64	50726f63292e43616c6c007379736361	Proc).Call.sysca
0x1cdd74	6c6c2e282a4c617a7950726f63292e6d	ll.(*LazyProc).m
0x1cdd84	75737446696e640073797363616c6c2e	ustFind.syscall.
0x1cdd94	42797465536c69636546726f6d537472	ByteSliceFromStr
0x1cdda4	696e670073797363616c6c2e55544631	ing.syscall.UTF1
0x1cddb4	3646726f6d537472696e670073797363	6FromString.sysc
0x1cddc4	616c6c2e5554463136546f537472696e	all.UTF16ToStrin
0x1cddd4	670073797363616c6c2e4572726e6f2e	g.syscall.Errno.
0x1cdde4	4572726f720073796e63	Error.sync

0x25f150	801fd31fd61fef1ff21ffe1f10202720	............. '
0x25f160	30205e207020712074209c20a020c020	0 ^ p q t . . .
0x25f170	d020f02000218b219021262440244a24	. . .!.!.!&$@$J$
0x25f180	6024732b762bf32cf92c272d2d2d2d2d	`$s+v+.,.,'-----
0x25f190	302d672d6f2d702d7f2d962da02d5d2e	0-g-o-p-.-.-.-].
0x25f1a0	802ef32e002fd52ff02ffb2f01309630	....././././.0.0
0x25f1b0	9930ff300531e331f0318ca490a4c6a4	.0.0.1.1.1......
0x25f1c0	d0a42ba640a6f7a600a7caa7d0a7d9a7	..+.@...........Go local shellcode execution via Proc.Call
0x25f1d0	f2a72ca830a839a840a877a880a8c5a8	..,.0.9.@.w.....
0x25f1e0	cea8d9a8e0a853a95fa97ca980a9d9a9	......S._.\|.....
0x25f1f0	dea936aa40aa4daa50aa59aa5caac2aa	..6.@.M.P.Y.\...
0x25f200	dbaaf6aa01ab06ab09ab0eab11ab16ab	................
0x25f210	20ab6bab70abedabf0abf9ab00aca3d7	.k.p...........
0x25f220	b0d7c6d7cbd7fbd700f96dfa70fad9fa	..........m.p...
0x25f230	00fb06fb13fb17fb1dfbc2fbd3fb8ffd	................Go PE with opaque identity and raw API dispatch
0x25f240	92fdc7fdcffdcffdf0fd19fe20fe6bfe	............ .k.
0x25f250	70fefcfe01ffbeffc2ffc7ffcaffcfff	p...............
0x25f260	d2ffd7ffdaffdcffe0ffeefffcfffdff	................
0x25f270	00000000000000000000000000000000	................Go dynamic x64 shellcode loader
0x25f280	000001004d000100500001005d000100	....M...P...]...
0x25f290	80000100fa0001000001010002010100	................
0x25f2a0	0701010033010100370101009c010100	....3...7.......
0x25f2b0	a0010100a0010100d0010100fd010100	................
0x25f2c0	800201009c020100a0020100d0020100	................
0x25f2d0	e0020100fb0201000003010023030100	............#...
0x25f2e0	2d0301004a030100500301007a030100	-...J...P...z...
0x25f2f0	80030100c3030100c8030100d5030100	................
0x25f300	000401009d040100a0040100a9040100	................
0x25f310	b0040100d3040100d8040100fb040100	................
0x25f320	00050100270501003005010063050100	....'...0...c...
0x25f330	6f050100bc0501000006010036070100	o...........6...
0x25f340	40070100550701006007010067070100	@...U...`...g...
0x25f350	80070100ba0701000008010005080100	................
0x25f360	08080100380801003c0801003c080100	....8...<...<...
0x25f370	3f0801009e080100a7080100af080100	?...............
0x25f380	e0080100f5080100fb080100	............

Objectives

0x29b04e	746166697073656e6400676f3a6d6169	tafipsend.go:mai
0x29b05e	6e2e696e69747461736b7300676f3a72	n.inittasks.go:r
0x29b06e	756e74696d652e696e69747461736b73	untime.inittasks
0x29b07e	0072756e74696d652e6275696c645665	.runtime.buildVe
0x29b08e	7273696f6e2e7374720072756e74696d	rsion.str.runtim
0x29b09e	652e6d6f64696e666f2e737472007275	e.modinfo.str.ru
0x29b0ae	6e74696d652e747970656c696e6b0072	ntime.typelink.r
0x29b0be	756e74696d652e697461626c696e6b00	untime.itablink.
0x29b0ce	676f3a6275696c64696e666f00676f3a	go:buildinfo.go:
0x29b0de	6275696c64696e666f2e726566007275	buildinfo.ref.ru
0x29b0ee	6e74696d652e70636c6e746162007275	ntime.pclntab.ru
0x29b0fe	6e74696d652e66696e6466756e637461	ntime.findfuncta
0x29b10e	620072756e74696d652e726f64617461	b.runtime.rodata
0x29b11e	0072756e74696d652e65726f64617461	.runtime.erodata
0x29b12e	0072756e74696d652e74797065730072	.runtime.types.r
0x29b13e	756e74696d652e657479706573007275	untime.etypes.ru
0x29b14e	6e74696d652e6e6f7074726461746100	ntime.noptrdata.
0x29b15e	72756e74696d652e656e6f7074726461	runtime.enoptrda
0x29b16e	74610072756e74696d652e6461746100	ta.runtime.data.
0x29b17e	72756e74696d652e6564617461007275	runtime.edata.ru
0x29b18e	6e74696d652e6273730072756e74696d	ntime.bss.runtim
0x29b19e	652e656273730072756e74696d652e6e	e.ebss.runtime.n
0x29b1ae	6f7074726273730072756e74696d652e	optrbss.runtime.
0x29b1be	656e6f7074726273730072756e74696d	enoptrbss.runtim
0x29b1ce	652e636f7663747273007275	e.covctrs.ru

0x1cae0b	652e6e6577496e6c696e65556e77696e	e.newInlineUnwin
0x1cae1b	6465720073797363616c6c2e636f6d70	der.syscall.comp
0x1cae2b	696c6543616c6c6261636b0072756e74	ileCallback.runt
0x1cae3b	696d652e6362734c6f636b0072756e74	ime.cbsLock.runt
0x1cae4b	696d652e63616c6c6261636b61736d41	ime.callbackasmA
0x1cae5b	6464720072756e74696d652e63627355	ddr.runtime.cbsU
0x1cae6b	6e6c6f636b0073797363616c6c2e6c6f	nlock.syscall.lo
0x1cae7b	616473797374656d6c69627261727900	adsystemlibrary.
0x1cae8b	73797363616c6c2e53797363616c6c4e	syscall.SyscallN
0x1cae9b	0073797363616c6c2e6c6f61646c6962	.syscall.loadlib
0x1caeab	726172790073797363616c6c2e676574	rary.syscall.get
0x1caebb	70726f63616464726573730073797363	procaddress.sysc
0x1caecb	616c6c2e53797363616c6c0073797363	all.Syscall.sysc
0x1caedb	616c6c2e53797363616c6c3600737973	all.Syscall6.sys
0x1caeeb	63616c6c2e53797363616c6c39007469	call.Syscall9.ti
0x1caefb	6d652e72756e74696d654e6f77007469	me.runtimeNow.ti
0x1caf0b	6d652e72756e74696d654e616e6f0074	me.runtimeNano.t
0x1caf1b	696d652e536c6565700072756e74696d	ime.Sleep.runtim
0x1caf2b	652e77726974650072756e74696d652e	e.write.runtime.
0x1caf3b	7472616365416476616e63650072756e	traceAdvance.run
0x1caf4b	74696d652f74726163652e72756e7469	time/trace.runti
0x1caf5b	6d655f7472616365436c6f636b556e69	me_traceClockUni
0x1caf6b	74735065725365636f6e640072756e74	tsPerSecond.runt
0x1caf7b	696d652e63616c6c65727300696e7465	ime.callers.inte
0x1caf8b	726e616c2f72756e74696d652f6d6170	rnal/runtime/map
0x1caf9b	732e74797065537472696e670072756e	s.typeString.run
0x1cafab	74696d652e6d6170696e69746e6f6f70	time.mapinitnoop
0x1cafbb	00676f676f0063616c6c52657400676f	.gogo.callRet.go
0x1cafcb	736176655f73797374656d	save_system

0x1cae0b	652e6e6577496e6c696e65556e77696e	e.newInlineUnwin
0x1cae1b	6465720073797363616c6c2e636f6d70	der.syscall.comp
0x1cae2b	696c6543616c6c6261636b0072756e74	ileCallback.runt
0x1cae3b	696d652e6362734c6f636b0072756e74	ime.cbsLock.runt
0x1cae4b	696d652e63616c6c6261636b61736d41	ime.callbackasmA
0x1cae5b	6464720072756e74696d652e63627355	ddr.runtime.cbsU
0x1cae6b	6e6c6f636b0073797363616c6c2e6c6f	nlock.syscall.lo
0x1cae7b	616473797374656d6c69627261727900	adsystemlibrary.
0x1cae8b	73797363616c6c2e53797363616c6c4e	syscall.SyscallN
0x1cae9b	0073797363616c6c2e6c6f61646c6962	.syscall.loadlib
0x1caeab	726172790073797363616c6c2e676574	rary.syscall.get
0x1caebb	70726f63616464726573730073797363	procaddress.sysc
0x1caecb	616c6c2e53797363616c6c0073797363	all.Syscall.sysc
0x1caedb	616c6c2e53797363616c6c3600737973	all.Syscall6.sys
0x1caeeb	63616c6c2e53797363616c6c39007469	call.Syscall9.ti
0x1caefb	6d652e72756e74696d654e6f77007469	me.runtimeNow.ti
0x1caf0b	6d652e72756e74696d654e616e6f0074	me.runtimeNano.t
0x1caf1b	696d652e536c6565700072756e74696d	ime.Sleep.runtim
0x1caf2b	652e77726974650072756e74696d652e	e.write.runtime.
0x1caf3b	7472616365416476616e63650072756e	traceAdvance.run
0x1caf4b	74696d652f74726163652e72756e7469	time/trace.runti
0x1caf5b	6d655f7472616365436c6f636b556e69	me_traceClockUni
0x1caf6b	74735065725365636f6e640072756e74	tsPerSecond.runt
0x1caf7b	696d652e63616c6c65727300696e7465	ime.callers.inte
0x1caf8b	726e616c2f72756e74696d652f6d6170	rnal/runtime/map
0x1caf9b	732e74797065537472696e670072756e	s.typeString.run
0x1cafab	74696d652e6d6170696e69746e6f6f70	time.mapinitnoop
0x1cafbb	00676f676f0063616c6c52657400676f	.gogo.callRet.go
0x1cafcb	736176655f73797374656d	save_system

0x1cdc34	292e4572726f720073797363616c6c2e	).Error.syscall.
0x1cdc44	282a444c4c4572726f72292e556e7772	(*DLLError).Unwr
0x1cdc54	61700073797363616c6c2e4c6f616444	ap.syscall.LoadD
0x1cdc64	4c4c0073797363616c6c2e5554463136	LL.syscall.UTF16
0x1cdc74	50747246726f6d537472696e67007379	PtrFromString.sy
0x1cdc84	7363616c6c2e282a444c4c292e46696e	scall.(*DLL).Fin
0x1cdc94	6450726f630073797363616c6c2e4279	dProc.syscall.By
0x1cdca4	746550747246726f6d537472696e6700	tePtrFromString.
0x1cdcb4	73797363616c6c2e282a50726f63292e	syscall.(*Proc).
0x1cdcc4	43616c6c0073797363616c6c2e282a50	Call.syscall.(*P
0x1cdcd4	726f63292e416464720073797363616c	roc).Addr.syscal
0x1cdce4	6c2e282a4c617a79444c4c292e4c6f61	l.(*LazyDLL).Loa
0x1cdcf4	640073797363616c6c2e282a4c617a79	d.syscall.(*Lazy
0x1cdd04	444c4c292e4c6f61642e646566657277	DLL).Load.deferw
0x1cdd14	726170310073797363616c6c2e282a4c	rap1.syscall.(*L
0x1cdd24	617a7950726f63292e46696e64007379	azyProc).Find.sy
0x1cdd34	7363616c6c2e282a4c617a7950726f63	scall.(*LazyProc
0x1cdd44	292e46696e642e646566657277726170	).Find.deferwrap
0x1cdd54	310073797363616c6c2e282a4c617a79	1.syscall.(*Lazy
0x1cdd64	50726f63292e43616c6c007379736361	Proc).Call.sysca
0x1cdd74	6c6c2e282a4c617a7950726f63292e6d	ll.(*LazyProc).m
0x1cdd84	75737446696e640073797363616c6c2e	ustFind.syscall.
0x1cdd94	42797465536c69636546726f6d537472	ByteSliceFromStr
0x1cdda4	696e670073797363616c6c2e55544631	ing.syscall.UTF1
0x1cddb4	3646726f6d537472696e670073797363	6FromString.sysc
0x1cddc4	616c6c2e5554463136546f537472696e	all.UTF16ToStrin
0x1cddd4	670073797363616c6c2e4572726e6f2e	g.syscall.Errno.
0x1cdde4	4572726f720073796e63	Error.sync

0x25f150	801fd31fd61fef1ff21ffe1f10202720	............. '
0x25f160	30205e207020712074209c20a020c020	0 ^ p q t . . .
0x25f170	d020f02000218b219021262440244a24	. . .!.!.!&$@$J$
0x25f180	6024732b762bf32cf92c272d2d2d2d2d	`$s+v+.,.,'-----
0x25f190	302d672d6f2d702d7f2d962da02d5d2e	0-g-o-p-.-.-.-].
0x25f1a0	802ef32e002fd52ff02ffb2f01309630	....././././.0.0
0x25f1b0	9930ff300531e331f0318ca490a4c6a4	.0.0.1.1.1......
0x25f1c0	d0a42ba640a6f7a600a7caa7d0a7d9a7	..+.@...........
0x25f1d0	f2a72ca830a839a840a877a880a8c5a8	..,.0.9.@.w.....
0x25f1e0	cea8d9a8e0a853a95fa97ca980a9d9a9	......S._.\|.....
0x25f1f0	dea936aa40aa4daa50aa59aa5caac2aa	..6.@.M.P.Y.\...
0x25f200	dbaaf6aa01ab06ab09ab0eab11ab16ab	................
0x25f210	20ab6bab70abedabf0abf9ab00aca3d7	.k.p...........
0x25f220	b0d7c6d7cbd7fbd700f96dfa70fad9fa	..........m.p...
0x25f230	00fb06fb13fb17fb1dfbc2fbd3fb8ffd	................
0x25f240	92fdc7fdcffdcffdf0fd19fe20fe6bfe	............ .k.
0x25f250	70fefcfe01ffbeffc2ffc7ffcaffcfff	p...............
0x25f260	d2ffd7ffdaffdcffe0ffeefffcfffdff	................
0x25f270	00000000000000000000000000000000	................
0x25f280	000001004d000100500001005d000100	....M...P...]...
0x25f290	80000100fa0001000001010002010100	................
0x25f2a0	0701010033010100370101009c010100	....3...7.......
0x25f2b0	a0010100a0010100d0010100fd010100	................
0x25f2c0	800201009c020100a0020100d0020100	................
0x25f2d0	e0020100fb0201000003010023030100	............#...
0x25f2e0	2d0301004a030100500301007a030100	-...J...P...z...
0x25f2f0	80030100c3030100c8030100d5030100	................
0x25f300	000401009d040100a0040100a9040100	................
0x25f310	b0040100d3040100d8040100fb040100	................
0x25f320	00050100270501003005010063050100	....'...0...c...
0x25f330	6f050100bc0501000006010036070100	o...........6...
0x25f340	40070100550701006007010067070100	@...U...`...g...
0x25f350	80070100ba0701000008010005080100	................
0x25f360	08080100380801003c0801003c080100	....8...<...<...
0x25f370	3f0801009e080100a7080100af080100	?...............
0x25f380	e0080100f5080100fb080100	............

0x29b04e	746166697073656e6400676f3a6d6169	tafipsend.go:mai
0x29b05e	6e2e696e69747461736b7300676f3a72	n.inittasks.go:r
0x29b06e	756e74696d652e696e69747461736b73	untime.inittasks
0x29b07e	0072756e74696d652e6275696c645665	.runtime.buildVe
0x29b08e	7273696f6e2e7374720072756e74696d	rsion.str.runtim
0x29b09e	652e6d6f64696e666f2e737472007275	e.modinfo.str.ru
0x29b0ae	6e74696d652e747970656c696e6b0072	ntime.typelink.r
0x29b0be	756e74696d652e697461626c696e6b00	untime.itablink.
0x29b0ce	676f3a6275696c64696e666f00676f3a	go:buildinfo.go:
0x29b0de	6275696c64696e666f2e726566007275	buildinfo.ref.ru
0x29b0ee	6e74696d652e70636c6e746162007275	ntime.pclntab.ru
0x29b0fe	6e74696d652e66696e6466756e637461	ntime.findfuncta
0x29b10e	620072756e74696d652e726f64617461	b.runtime.rodata
0x29b11e	0072756e74696d652e65726f64617461	.runtime.erodata
0x29b12e	0072756e74696d652e74797065730072	.runtime.types.r
0x29b13e	756e74696d652e657479706573007275	untime.etypes.ru
0x29b14e	6e74696d652e6e6f7074726461746100	ntime.noptrdata.
0x29b15e	72756e74696d652e656e6f7074726461	runtime.enoptrda
0x29b16e	74610072756e74696d652e6461746100	ta.runtime.data.
0x29b17e	72756e74696d652e6564617461007275	runtime.edata.ru
0x29b18e	6e74696d652e6273730072756e74696d	ntime.bss.runtim
0x29b19e	652e656273730072756e74696d652e6e	e.ebss.runtime.n
0x29b1ae	6f7074726273730072756e74696d652e	optrbss.runtime.
0x29b1be	656e6f7074726273730072756e74696d	enoptrbss.runtim
0x29b1ce	652e636f7663747273007275	e.covctrs.ru

0x1cdc34	292e4572726f720073797363616c6c2e	).Error.syscall.
0x1cdc44	282a444c4c4572726f72292e556e7772	(*DLLError).Unwr
0x1cdc54	61700073797363616c6c2e4c6f616444	ap.syscall.LoadD
0x1cdc64	4c4c0073797363616c6c2e5554463136	LL.syscall.UTF16
0x1cdc74	50747246726f6d537472696e67007379	PtrFromString.sy
0x1cdc84	7363616c6c2e282a444c4c292e46696e	scall.(*DLL).Fin
0x1cdc94	6450726f630073797363616c6c2e4279	dProc.syscall.By
0x1cdca4	746550747246726f6d537472696e6700	tePtrFromString.
0x1cdcb4	73797363616c6c2e282a50726f63292e	syscall.(*Proc).
0x1cdcc4	43616c6c0073797363616c6c2e282a50	Call.syscall.(*P
0x1cdcd4	726f63292e416464720073797363616c	roc).Addr.syscal
0x1cdce4	6c2e282a4c617a79444c4c292e4c6f61	l.(*LazyDLL).Loa
0x1cdcf4	640073797363616c6c2e282a4c617a79	d.syscall.(*Lazy
0x1cdd04	444c4c292e4c6f61642e646566657277	DLL).Load.deferw
0x1cdd14	726170310073797363616c6c2e282a4c	rap1.syscall.(*L
0x1cdd24	617a7950726f63292e46696e64007379	azyProc).Find.sy
0x1cdd34	7363616c6c2e282a4c617a7950726f63	scall.(*LazyProc
0x1cdd44	292e46696e642e646566657277726170	).Find.deferwrap
0x1cdd54	310073797363616c6c2e282a4c617a79	1.syscall.(*Lazy
0x1cdd64	50726f63292e43616c6c007379736361	Proc).Call.sysca
0x1cdd74	6c6c2e282a4c617a7950726f63292e6d	ll.(*LazyProc).m
0x1cdd84	75737446696e640073797363616c6c2e	ustFind.syscall.
0x1cdd94	42797465536c69636546726f6d537472	ByteSliceFromStr
0x1cdda4	696e670073797363616c6c2e55544631	ing.syscall.UTF1
0x1cddb4	3646726f6d537472696e670073797363	6FromString.sysc
0x1cddc4	616c6c2e5554463136546f537472696e	all.UTF16ToStrin
0x1cddd4	670073797363616c6c2e4572726e6f2e	g.syscall.Errno.
0x1cdde4	4572726f720073796e63	Error.sync

0x3f52	5890904c0fbcce4d0fafc1458b4c1008	X..L...M...E.L..
0x3f62	4139f975db488b4b604c01c1488d0411	A9.u.H.K`L..H...
0x3f72	488d4008904883c4285dc3660fd7d190	H.@..H..(].f....
0x3f82	4885d27541488944243848895c244089	H..uAH.D$8H.\$@.
0x3f92	7c245048894c24186689542416488d05	\|$PH.L$.f.T$.H..
0x3fa2	bc3e1500bb35000000e810850600488b	.>...5........H.
0x3fb2	442438488b4c24180fb7542416488b5c	D$8H.L$...T$.H.\
0x3fc2	24408b7c2450488b73589090480fbcd2	$@.\|$PH.sX..H...
0x3fd2	41b840000000490f44d0480faff24883	A.@...I.D.H...H.
0x3fe2	c6084803742420893e488b7358480faf	..H.t$ .>H.sXH..
0x3ff2	f248037360488b5c2420488d341e488d	.H.s`H.\$ H.4.H.
0x4002	76089090880c1348ff004889f04883c4	v......H..H..H..
0x4012	285dc3488944240848895c241048894c	(].H.D$.H.\$.H.L
0x4022	2418897c2420e813d60600488b442408	$..\|$ .....H.D$.
0x4032	488b5c2410488b4c24188b7c2420e9bb	H.\$.H.L$..\|$ ..
0x4042	feffffcccccccccccccccccccccccccc	................
0x4052	cccccccccccccccccccccccccccc493b	..............I;
0x4062	66100f860e010000554889e54883ec28	f.......UH..H..(
0x4072	488b50104889542420488b3283e17f66	H.P.H.T$ H.2...f
0x4082	480f6ec1660f60c0f20f70c00066480f	H.n.f.`...p..fH.
0x4092	6ece660f74c1660fd7f0400fb6f6eb08	n.f.t.f...@.....
0x40a2	4c8d46ff904c21c64885f6742e4c8b43	L.F..L!.H..t.L.C
0x40b2	5890904c0fbcce4d0fafc14d8b4c1008	X..L...M...M.L..
0x40c2	4939f975db488b4b604c01c1488d0411	I9.u.H.K`L..H...
0x40d2	488d	H.

0x465a	894b0848891a488b4c2460488b415848	.K.H..H.L$`H.AXH
0x466a	8b542430480fafc2480341604883c008	.T$0H...H.A`H...
0x467a	4803442440904883c4485dc3488b5424	H.D$@.H..H].H.T$
0x468a	40488b1266480f6ec2660fd7d04885d2	@H..fH.n.f...H..
0x469a	7534668954241e488d05ba371500bb35	u4f.T$.H...7...5
0x46aa	000000e80e7e0600488b442458488b4c	.....~..H.D$XH.L
0x46ba	24200fb754241e488b5c2460488b7424	$ ..T$.H.\$`H.t$
0x46ca	78488b7c24704c8b43589090480fbcd2	xH.\|$pL.CX..H...
0x46da	41b940000000490f44d14c0fafc24983	A.@...I.D.L...I.
0x46ea	c0084c0344244049897008833da41e2b	..L.D$@I.p..=..+
0x46fa	0000740f498b30e85aee060049893b49	..t.I.0.Z...I.;I
0x470a	897308498938488b7358480faff24803	.s.I.8H.sXH...H.
0x471a	7360488b5c2440488d341e488d760890	s`H.\$@H.4.H.v..
0x472a	90880c1348ff004889f04883c4485dc3	....H..H..H..H].
0x473a	488944240848895c241048894c241848	H.D$.H.\$.H.L$.H
0x474a	897c24204889742428e8e8ce0600488b	.\|$ H.t$(.....H.
0x475a	442408488b5c2410488b4c2418488b7c	D$.H.\$.H.L$.H.\|
0x476a	2420488b742428e9eafdffffcccccccc	$ H.t$(.........
0x477a	cccccccccccc493b66100f86a4000000	......I;f.......
0x478a	554889e54883ec20488944243048895c	UH..H.. H.D$0H.\
0x479a	243848894c244040887c2448488d05f3	$8H.L$@@.\|$HH...
0x47aa	bb1300e88e020100488b4c2440488948	........H.L$@H.H
0x47ba	080fb64c2448884806488b4c24384883	...L$H.H.H.L$8H.
0x47ca	f908ba08000000480f42ca4881f90004	.......H.B.H....
0x47da	0000	..

0x1cae0b	652e6e6577496e6c696e65556e77696e	e.newInlineUnwin
0x1cae1b	6465720073797363616c6c2e636f6d70	der.syscall.comp
0x1cae2b	696c6543616c6c6261636b0072756e74	ileCallback.runt
0x1cae3b	696d652e6362734c6f636b0072756e74	ime.cbsLock.runt
0x1cae4b	696d652e63616c6c6261636b61736d41	ime.callbackasmA
0x1cae5b	6464720072756e74696d652e63627355	ddr.runtime.cbsU
0x1cae6b	6e6c6f636b0073797363616c6c2e6c6f	nlock.syscall.lo
0x1cae7b	616473797374656d6c69627261727900	adsystemlibrary.
0x1cae8b	73797363616c6c2e53797363616c6c4e	syscall.SyscallN
0x1cae9b	0073797363616c6c2e6c6f61646c6962	.syscall.loadlib
0x1caeab	726172790073797363616c6c2e676574	rary.syscall.get
0x1caebb	70726f63616464726573730073797363	procaddress.sysc
0x1caecb	616c6c2e53797363616c6c0073797363	all.Syscall.sysc
0x1caedb	616c6c2e53797363616c6c3600737973	all.Syscall6.sys
0x1caeeb	63616c6c2e53797363616c6c39007469	call.Syscall9.ti
0x1caefb	6d652e72756e74696d654e6f77007469	me.runtimeNow.ti
0x1caf0b	6d652e72756e74696d654e616e6f0074	me.runtimeNano.t
0x1caf1b	696d652e536c6565700072756e74696d	ime.Sleep.runtim
0x1caf2b	652e77726974650072756e74696d652e	e.write.runtime.
0x1caf3b	7472616365416476616e63650072756e	traceAdvance.run
0x1caf4b	74696d652f74726163652e72756e7469	time/trace.runti
0x1caf5b	6d655f7472616365436c6f636b556e69	me_traceClockUni
0x1caf6b	74735065725365636f6e640072756e74	tsPerSecond.runt
0x1caf7b	696d652e63616c6c65727300696e7465	ime.callers.inte
0x1caf8b	726e616c2f72756e74696d652f6d6170	rnal/runtime/map
0x1caf9b	732e74797065537472696e670072756e	s.typeString.run
0x1cafab	74696d652e6d6170696e69746e6f6f70	time.mapinitnoop
0x1cafbb	00676f676f0063616c6c52657400676f	.gogo.callRet.go
0x1cafcb	736176655f73797374656d	save_system

0x25f150	801fd31fd61fef1ff21ffe1f10202720	............. '
0x25f160	30205e207020712074209c20a020c020	0 ^ p q t . . .
0x25f170	d020f02000218b219021262440244a24	. . .!.!.!&$@$J$
0x25f180	6024732b762bf32cf92c272d2d2d2d2d	`$s+v+.,.,'-----
0x25f190	302d672d6f2d702d7f2d962da02d5d2e	0-g-o-p-.-.-.-].
0x25f1a0	802ef32e002fd52ff02ffb2f01309630	....././././.0.0
0x25f1b0	9930ff300531e331f0318ca490a4c6a4	.0.0.1.1.1......
0x25f1c0	d0a42ba640a6f7a600a7caa7d0a7d9a7	..+.@...........
0x25f1d0	f2a72ca830a839a840a877a880a8c5a8	..,.0.9.@.w.....
0x25f1e0	cea8d9a8e0a853a95fa97ca980a9d9a9	......S._.\|.....
0x25f1f0	dea936aa40aa4daa50aa59aa5caac2aa	..6.@.M.P.Y.\...
0x25f200	dbaaf6aa01ab06ab09ab0eab11ab16ab	................
0x25f210	20ab6bab70abedabf0abf9ab00aca3d7	.k.p...........
0x25f220	b0d7c6d7cbd7fbd700f96dfa70fad9fa	..........m.p...
0x25f230	00fb06fb13fb17fb1dfbc2fbd3fb8ffd	................
0x25f240	92fdc7fdcffdcffdf0fd19fe20fe6bfe	............ .k.
0x25f250	70fefcfe01ffbeffc2ffc7ffcaffcfff	p...............
0x25f260	d2ffd7ffdaffdcffe0ffeefffcfffdff	................
0x25f270	00000000000000000000000000000000	................
0x25f280	000001004d000100500001005d000100	....M...P...]...
0x25f290	80000100fa0001000001010002010100	................
0x25f2a0	0701010033010100370101009c010100	....3...7.......
0x25f2b0	a0010100a0010100d0010100fd010100	................
0x25f2c0	800201009c020100a0020100d0020100	................
0x25f2d0	e0020100fb0201000003010023030100	............#...
0x25f2e0	2d0301004a030100500301007a030100	-...J...P...z...
0x25f2f0	80030100c3030100c8030100d5030100	................
0x25f300	000401009d040100a0040100a9040100	................
0x25f310	b0040100d3040100d8040100fb040100	................
0x25f320	00050100270501003005010063050100	....'...0...c...
0x25f330	6f050100bc0501000006010036070100	o...........6...
0x25f340	40070100550701006007010067070100	@...U...`...g...
0x25f350	80070100ba0701000008010005080100	................
0x25f360	08080100380801003c0801003c080100	....8...<...<...
0x25f370	3f0801009e080100a7080100af080100	?...............
0x25f380	e0080100f5080100fb080100	............

0x1d5cda	6e6777766962616f7673736e70746500	ngwvibaovssnpte.
0x1d5cea	6d61696e2e6966736a626a7a6f62616e	main.ifsjbjzoban
0x1d5cfa	7572006d61696e2e706e6e776d787562	ur.main.pnnwmxub
0x1d5d0a	766e6b7363006d61696e2e6d786e656a	vnksc.main.mxnej
0x1d5d1a	666f7a640073797363616c6c2e282a4c	fozd.syscall.(*L
0x1d5d2a	617a79444c4c292e4e657750726f6300	azyDLL).NewProc.
0x1d5d3a	6d61696e2e4d746d7066786564697978	main.Mtmpfxediyx
0x1d5d4a	666669676670746567006d61696e2e4e	ffigfpteg.main.N
0x1d5d5a	76696c7078666468656776626579786e	vilpxfdhegvbeyxn
0x1d5d6a	006d61696e2e7277767a68646c626e6f	.main.rwvzhdlbno
0x1d5d7a	64636b746861006d6174682e53717274	dcktha.math.Sqrt
0x1d5d8a	006d61696e2e6b7269616d757375696c	.main.kriamusuil
0x1d5d9a	617a67646f006d61696e2e686872716e	azgdo.main.hhrqn
0x1d5daa	786b75726764666f6f6169006d617468	xkurgdfooai.math
0x1d5dba	2e4c6f67006d61696e2e6a6564746574	.Log.main.jedtet
0x1d5dca	716979736a6d7963006d6174682e4578	qiysjmyc.math.Ex
0x1d5dda	70006d61696e2e6f676273626f65797a	p.main.ogbsboeyz
0x1d5dea	6c716b676279626b006d61696e2e6774	lqkgbybk.main.gt
0x1d5dfa	757062716373757261686e6b716e6f76	upbqcsurahnkqnov
0x1d5e0a	65716c006d61696e2e78616d696c6a67	eql.main.xamiljg
0x1d5e1a	006d61696e2e656b6f7079696a6a6b78	.main.ekopyijjkx

0x2969d2	696e2e6977647079677163626178617a	in.iwdpygqcbaxaz
0x2969e2	66622e66756e6331006d61696e2e656e	fb.func1.main.en
0x2969f2	6d6f63756b6573716e7579726e7a7278	mocukesqnuyrnzrx
0x296a02	786365006d61696e2e79787773716674	xce.main.yxwsqft
0x296a12	6e71766e6d6e686a6f677869006d6169	nqvnmnhjogxi.mai
0x296a22	6e2e6d61696e00747970653a2e65712e	n.main.type:.eq.
0x296a32	6d61696e2e496c76757a697879727479	main.Ilvuzixyrty
0x296a42	7473636f6b74687800747970653a2e65	tscokthx.type:.e
0x296a52	712e6d61696e2e4b6b66757379707000	q.main.Kkfusypp.
0x296a62	676f3a74657874666970737374617274	go:textfipsstart
0x296a72	00676f3a7465787466697073656e6400	.go:textfipsend.
0x296a82	6d61696e2e2e696e69747461736b006d	main..inittask.m
0x296a92	61696e2e6c6c646b64636a626d796500	ain.lldkdcjbmye.
0x296aa2	6d61696e2e737974626d65726962006d	main.sytbmerib.m
0x296ab2	61696e2e2e747970654173736572742e	ain..typeAssert.
0x296ac2	300073797363616c6c2e2e696e697474	0.syscall..initt
0x296ad2	61736b0073797363616c6c2e6572726e	ask.syscall.errn
0x296ae2	6f4572726f7243616368650073797363	oErrorCache.sysc
0x296af2	616c6c2e537464696e0073797363616c	all.Stdin.syscal
0x296b02	6c2e5374646f7574	l.Stdout

0x25f150	801fd31fd61fef1ff21ffe1f10202720	............. '
0x25f160	30205e207020712074209c20a020c020	0 ^ p q t . . .
0x25f170	d020f02000218b219021262440244a24	. . .!.!.!&$@$J$
0x25f180	6024732b762bf32cf92c272d2d2d2d2d	`$s+v+.,.,'-----
0x25f190	302d672d6f2d702d7f2d962da02d5d2e	0-g-o-p-.-.-.-].
0x25f1a0	802ef32e002fd52ff02ffb2f01309630	....././././.0.0
0x25f1b0	9930ff300531e331f0318ca490a4c6a4	.0.0.1.1.1......
0x25f1c0	d0a42ba640a6f7a600a7caa7d0a7d9a7	..+.@...........
0x25f1d0	f2a72ca830a839a840a877a880a8c5a8	..,.0.9.@.w.....
0x25f1e0	cea8d9a8e0a853a95fa97ca980a9d9a9	......S._.\|.....
0x25f1f0	dea936aa40aa4daa50aa59aa5caac2aa	..6.@.M.P.Y.\...
0x25f200	dbaaf6aa01ab06ab09ab0eab11ab16ab	................
0x25f210	20ab6bab70abedabf0abf9ab00aca3d7	.k.p...........
0x25f220	b0d7c6d7cbd7fbd700f96dfa70fad9fa	..........m.p...
0x25f230	00fb06fb13fb17fb1dfbc2fbd3fb8ffd	................
0x25f240	92fdc7fdcffdcffdf0fd19fe20fe6bfe	............ .k.
0x25f250	70fefcfe01ffbeffc2ffc7ffcaffcfff	p...............
0x25f260	d2ffd7ffdaffdcffe0ffeefffcfffdff	................
0x25f270	00000000000000000000000000000000	................
0x25f280	000001004d000100500001005d000100	....M...P...]...
0x25f290	80000100fa0001000001010002010100	................
0x25f2a0	0701010033010100370101009c010100	....3...7.......
0x25f2b0	a0010100a0010100d0010100fd010100	................
0x25f2c0	800201009c020100a0020100d0020100	................
0x25f2d0	e0020100fb0201000003010023030100	............#...
0x25f2e0	2d0301004a030100500301007a030100	-...J...P...z...
0x25f2f0	80030100c3030100c8030100d5030100	................
0x25f300	000401009d040100a0040100a9040100	................
0x25f310	b0040100d3040100d8040100fb040100	................
0x25f320	00050100270501003005010063050100	....'...0...c...
0x25f330	6f050100bc0501000006010036070100	o...........6...
0x25f340	40070100550701006007010067070100	@...U...`...g...
0x25f350	80070100ba0701000008010005080100	................
0x25f360	08080100380801003c0801003c080100	....8...<...<...
0x25f370	3f0801009e080100a7080100af080100	?...............
0x25f380	e0080100f5080100fb080100	............

Micro-behaviors

0x1cae0b	652e6e6577496e6c696e65556e77696e	e.newInlineUnwin
0x1cae1b	6465720073797363616c6c2e636f6d70	der.syscall.comp
0x1cae2b	696c6543616c6c6261636b0072756e74	ileCallback.runt
0x1cae3b	696d652e6362734c6f636b0072756e74	ime.cbsLock.runt
0x1cae4b	696d652e63616c6c6261636b61736d41	ime.callbackasmA
0x1cae5b	6464720072756e74696d652e63627355	ddr.runtime.cbsU
0x1cae6b	6e6c6f636b0073797363616c6c2e6c6f	nlock.syscall.lo
0x1cae7b	616473797374656d6c69627261727900	adsystemlibrary.
0x1cae8b	73797363616c6c2e53797363616c6c4e	syscall.SyscallN
0x1cae9b	0073797363616c6c2e6c6f61646c6962	.syscall.loadlib
0x1caeab	726172790073797363616c6c2e676574	rary.syscall.get
0x1caebb	70726f63616464726573730073797363	procaddress.sysc
0x1caecb	616c6c2e53797363616c6c0073797363	all.Syscall.sysc
0x1caedb	616c6c2e53797363616c6c3600737973	all.Syscall6.sys
0x1caeeb	63616c6c2e53797363616c6c39007469	call.Syscall9.ti
0x1caefb	6d652e72756e74696d654e6f77007469	me.runtimeNow.ti
0x1caf0b	6d652e72756e74696d654e616e6f0074	me.runtimeNano.t
0x1caf1b	696d652e536c6565700072756e74696d	ime.Sleep.runtim
0x1caf2b	652e77726974650072756e74696d652e	e.write.runtime.
0x1caf3b	7472616365416476616e63650072756e	traceAdvance.run
0x1caf4b	74696d652f74726163652e72756e7469	time/trace.runti
0x1caf5b	6d655f7472616365436c6f636b556e69	me_traceClockUni
0x1caf6b	74735065725365636f6e640072756e74	tsPerSecond.runt
0x1caf7b	696d652e63616c6c65727300696e7465	ime.callers.inte
0x1caf8b	726e616c2f72756e74696d652f6d6170	rnal/runtime/map
0x1caf9b	732e74797065537472696e670072756e	s.typeString.run
0x1cafab	74696d652e6d6170696e69746e6f6f70	time.mapinitnoop
0x1cafbb	00676f676f0063616c6c52657400676f	.gogo.callRet.go
0x1cafcb	736176655f73797374656d	save_system

0x1cdc34	292e4572726f720073797363616c6c2e	).Error.syscall.
0x1cdc44	282a444c4c4572726f72292e556e7772	(*DLLError).Unwr
0x1cdc54	61700073797363616c6c2e4c6f616444	ap.syscall.LoadD
0x1cdc64	4c4c0073797363616c6c2e5554463136	LL.syscall.UTF16
0x1cdc74	50747246726f6d537472696e67007379	PtrFromString.sy
0x1cdc84	7363616c6c2e282a444c4c292e46696e	scall.(*DLL).Fin
0x1cdc94	6450726f630073797363616c6c2e4279	dProc.syscall.By
0x1cdca4	746550747246726f6d537472696e6700	tePtrFromString.
0x1cdcb4	73797363616c6c2e282a50726f63292e	syscall.(*Proc).
0x1cdcc4	43616c6c0073797363616c6c2e282a50	Call.syscall.(*P
0x1cdcd4	726f63292e416464720073797363616c	roc).Addr.syscal
0x1cdce4	6c2e282a4c617a79444c4c292e4c6f61	l.(*LazyDLL).Loa
0x1cdcf4	640073797363616c6c2e282a4c617a79	d.syscall.(*Lazy
0x1cdd04	444c4c292e4c6f61642e646566657277	DLL).Load.deferw
0x1cdd14	726170310073797363616c6c2e282a4c	rap1.syscall.(*L
0x1cdd24	617a7950726f63292e46696e64007379	azyProc).Find.sy
0x1cdd34	7363616c6c2e282a4c617a7950726f63	scall.(*LazyProc
0x1cdd44	292e46696e642e646566657277726170	).Find.deferwrap
0x1cdd54	310073797363616c6c2e282a4c617a79	1.syscall.(*Lazy
0x1cdd64	50726f63292e43616c6c007379736361	Proc).Call.sysca
0x1cdd74	6c6c2e282a4c617a7950726f63292e6d	ll.(*LazyProc).m
0x1cdd84	75737446696e640073797363616c6c2e	ustFind.syscall.
0x1cdd94	42797465536c69636546726f6d537472	ByteSliceFromStr
0x1cdda4	696e670073797363616c6c2e55544631	ing.syscall.UTF1
0x1cddb4	3646726f6d537472696e670073797363	6FromString.sysc
0x1cddc4	616c6c2e5554463136546f537472696e	all.UTF16ToStrin
0x1cddd4	670073797363616c6c2e4572726e6f2e	g.syscall.Errno.
0x1cdde4	4572726f720073796e63	Error.sync

0x25f150	801fd31fd61fef1ff21ffe1f10202720	............. '
0x25f160	30205e207020712074209c20a020c020	0 ^ p q t . . .
0x25f170	d020f02000218b219021262440244a24	. . .!.!.!&$@$J$
0x25f180	6024732b762bf32cf92c272d2d2d2d2d	`$s+v+.,.,'-----
0x25f190	302d672d6f2d702d7f2d962da02d5d2e	0-g-o-p-.-.-.-].
0x25f1a0	802ef32e002fd52ff02ffb2f01309630	....././././.0.0
0x25f1b0	9930ff300531e331f0318ca490a4c6a4	.0.0.1.1.1......
0x25f1c0	d0a42ba640a6f7a600a7caa7d0a7d9a7	..+.@...........
0x25f1d0	f2a72ca830a839a840a877a880a8c5a8	..,.0.9.@.w.....
0x25f1e0	cea8d9a8e0a853a95fa97ca980a9d9a9	......S._.\|.....
0x25f1f0	dea936aa40aa4daa50aa59aa5caac2aa	..6.@.M.P.Y.\...
0x25f200	dbaaf6aa01ab06ab09ab0eab11ab16ab	................
0x25f210	20ab6bab70abedabf0abf9ab00aca3d7	.k.p...........
0x25f220	b0d7c6d7cbd7fbd700f96dfa70fad9fa	..........m.p...
0x25f230	00fb06fb13fb17fb1dfbc2fbd3fb8ffd	................
0x25f240	92fdc7fdcffdcffdf0fd19fe20fe6bfe	............ .k.
0x25f250	70fefcfe01ffbeffc2ffc7ffcaffcfff	p...............
0x25f260	d2ffd7ffdaffdcffe0ffeefffcfffdff	................
0x25f270	00000000000000000000000000000000	................
0x25f280	000001004d000100500001005d000100	....M...P...]...
0x25f290	80000100fa0001000001010002010100	................
0x25f2a0	0701010033010100370101009c010100	....3...7.......
0x25f2b0	a0010100a0010100d0010100fd010100	................
0x25f2c0	800201009c020100a0020100d0020100	................
0x25f2d0	e0020100fb0201000003010023030100	............#...
0x25f2e0	2d0301004a030100500301007a030100	-...J...P...z...
0x25f2f0	80030100c3030100c8030100d5030100	................
0x25f300	000401009d040100a0040100a9040100	................
0x25f310	b0040100d3040100d8040100fb040100	................
0x25f320	00050100270501003005010063050100	....'...0...c...
0x25f330	6f050100bc0501000006010036070100	o...........6...
0x25f340	40070100550701006007010067070100	@...U...`...g...
0x25f350	80070100ba0701000008010005080100	................
0x25f360	08080100380801003c0801003c080100	....8...<...<...
0x25f370	3f0801009e080100a7080100af080100	?...............
0x25f380	e0080100f5080100fb080100	............

0x25f150	801fd31fd61fef1ff21ffe1f10202720	............. '
0x25f160	30205e207020712074209c20a020c020	0 ^ p q t . . .
0x25f170	d020f02000218b219021262440244a24	. . .!.!.!&$@$J$
0x25f180	6024732b762bf32cf92c272d2d2d2d2d	`$s+v+.,.,'-----
0x25f190	302d672d6f2d702d7f2d962da02d5d2e	0-g-o-p-.-.-.-].
0x25f1a0	802ef32e002fd52ff02ffb2f01309630	....././././.0.0
0x25f1b0	9930ff300531e331f0318ca490a4c6a4	.0.0.1.1.1......
0x25f1c0	d0a42ba640a6f7a600a7caa7d0a7d9a7	..+.@...........
0x25f1d0	f2a72ca830a839a840a877a880a8c5a8	..,.0.9.@.w.....
0x25f1e0	cea8d9a8e0a853a95fa97ca980a9d9a9	......S._.\|.....
0x25f1f0	dea936aa40aa4daa50aa59aa5caac2aa	..6.@.M.P.Y.\...
0x25f200	dbaaf6aa01ab06ab09ab0eab11ab16ab	................
0x25f210	20ab6bab70abedabf0abf9ab00aca3d7	.k.p...........
0x25f220	b0d7c6d7cbd7fbd700f96dfa70fad9fa	..........m.p...
0x25f230	00fb06fb13fb17fb1dfbc2fbd3fb8ffd	................
0x25f240	92fdc7fdcffdcffdf0fd19fe20fe6bfe	............ .k.
0x25f250	70fefcfe01ffbeffc2ffc7ffcaffcfff	p...............
0x25f260	d2ffd7ffdaffdcffe0ffeefffcfffdff	................
0x25f270	00000000000000000000000000000000	................
0x25f280	000001004d000100500001005d000100	....M...P...]...
0x25f290	80000100fa0001000001010002010100	................
0x25f2a0	0701010033010100370101009c010100	....3...7.......
0x25f2b0	a0010100a0010100d0010100fd010100	................
0x25f2c0	800201009c020100a0020100d0020100	................
0x25f2d0	e0020100fb0201000003010023030100	............#...
0x25f2e0	2d0301004a030100500301007a030100	-...J...P...z...
0x25f2f0	80030100c3030100c8030100d5030100	................
0x25f300	000401009d040100a0040100a9040100	................
0x25f310	b0040100d3040100d8040100fb040100	................
0x25f320	00050100270501003005010063050100	....'...0...c...
0x25f330	6f050100bc0501000006010036070100	o...........6...
0x25f340	40070100550701006007010067070100	@...U...`...g...
0x25f350	80070100ba0701000008010005080100	................
0x25f360	08080100380801003c0801003c080100	....8...<...<...
0x25f370	3f0801009e080100a7080100af080100	?...............
0x25f380	e0080100f5080100fb080100	............

0x25f150	801fd31fd61fef1ff21ffe1f10202720	............. '
0x25f160	30205e207020712074209c20a020c020	0 ^ p q t . . .
0x25f170	d020f02000218b219021262440244a24	. . .!.!.!&$@$J$
0x25f180	6024732b762bf32cf92c272d2d2d2d2d	`$s+v+.,.,'-----
0x25f190	302d672d6f2d702d7f2d962da02d5d2e	0-g-o-p-.-.-.-].
0x25f1a0	802ef32e002fd52ff02ffb2f01309630	....././././.0.0
0x25f1b0	9930ff300531e331f0318ca490a4c6a4	.0.0.1.1.1......
0x25f1c0	d0a42ba640a6f7a600a7caa7d0a7d9a7	..+.@...........
0x25f1d0	f2a72ca830a839a840a877a880a8c5a8	..,.0.9.@.w.....
0x25f1e0	cea8d9a8e0a853a95fa97ca980a9d9a9	......S._.\|.....
0x25f1f0	dea936aa40aa4daa50aa59aa5caac2aa	..6.@.M.P.Y.\...
0x25f200	dbaaf6aa01ab06ab09ab0eab11ab16ab	................
0x25f210	20ab6bab70abedabf0abf9ab00aca3d7	.k.p...........
0x25f220	b0d7c6d7cbd7fbd700f96dfa70fad9fa	..........m.p...
0x25f230	00fb06fb13fb17fb1dfbc2fbd3fb8ffd	................
0x25f240	92fdc7fdcffdcffdf0fd19fe20fe6bfe	............ .k.
0x25f250	70fefcfe01ffbeffc2ffc7ffcaffcfff	p...............
0x25f260	d2ffd7ffdaffdcffe0ffeefffcfffdff	................
0x25f270	00000000000000000000000000000000	................
0x25f280	000001004d000100500001005d000100	....M...P...]...
0x25f290	80000100fa0001000001010002010100	................
0x25f2a0	0701010033010100370101009c010100	....3...7.......
0x25f2b0	a0010100a0010100d0010100fd010100	................
0x25f2c0	800201009c020100a0020100d0020100	................
0x25f2d0	e0020100fb0201000003010023030100	............#...
0x25f2e0	2d0301004a030100500301007a030100	-...J...P...z...
0x25f2f0	80030100c3030100c8030100d5030100	................
0x25f300	000401009d040100a0040100a9040100	................
0x25f310	b0040100d3040100d8040100fb040100	................
0x25f320	00050100270501003005010063050100	....'...0...c...
0x25f330	6f050100bc0501000006010036070100	o...........6...
0x25f340	40070100550701006007010067070100	@...U...`...g...
0x25f350	80070100ba0701000008010005080100	................
0x25f360	08080100380801003c0801003c080100	....8...<...<...
0x25f370	3f0801009e080100a7080100af080100	?...............
0x25f380	e0080100f5080100fb080100	............

0x25f150	801fd31fd61fef1ff21ffe1f10202720	............. '
0x25f160	30205e207020712074209c20a020c020	0 ^ p q t . . .
0x25f170	d020f02000218b219021262440244a24	. . .!.!.!&$@$J$
0x25f180	6024732b762bf32cf92c272d2d2d2d2d	`$s+v+.,.,'-----
0x25f190	302d672d6f2d702d7f2d962da02d5d2e	0-g-o-p-.-.-.-].
0x25f1a0	802ef32e002fd52ff02ffb2f01309630	....././././.0.0
0x25f1b0	9930ff300531e331f0318ca490a4c6a4	.0.0.1.1.1......
0x25f1c0	d0a42ba640a6f7a600a7caa7d0a7d9a7	..+.@...........
0x25f1d0	f2a72ca830a839a840a877a880a8c5a8	..,.0.9.@.w.....
0x25f1e0	cea8d9a8e0a853a95fa97ca980a9d9a9	......S._.\|.....
0x25f1f0	dea936aa40aa4daa50aa59aa5caac2aa	..6.@.M.P.Y.\...
0x25f200	dbaaf6aa01ab06ab09ab0eab11ab16ab	................
0x25f210	20ab6bab70abedabf0abf9ab00aca3d7	.k.p...........
0x25f220	b0d7c6d7cbd7fbd700f96dfa70fad9fa	..........m.p...
0x25f230	00fb06fb13fb17fb1dfbc2fbd3fb8ffd	................
0x25f240	92fdc7fdcffdcffdf0fd19fe20fe6bfe	............ .k.
0x25f250	70fefcfe01ffbeffc2ffc7ffcaffcfff	p...............
0x25f260	d2ffd7ffdaffdcffe0ffeefffcfffdff	................
0x25f270	00000000000000000000000000000000	................
0x25f280	000001004d000100500001005d000100	....M...P...]...
0x25f290	80000100fa0001000001010002010100	................
0x25f2a0	0701010033010100370101009c010100	....3...7.......
0x25f2b0	a0010100a0010100d0010100fd010100	................
0x25f2c0	800201009c020100a0020100d0020100	................
0x25f2d0	e0020100fb0201000003010023030100	............#...
0x25f2e0	2d0301004a030100500301007a030100	-...J...P...z...
0x25f2f0	80030100c3030100c8030100d5030100	................
0x25f300	000401009d040100a0040100a9040100	................
0x25f310	b0040100d3040100d8040100fb040100	................
0x25f320	00050100270501003005010063050100	....'...0...c...
0x25f330	6f050100bc0501000006010036070100	o...........6...
0x25f340	40070100550701006007010067070100	@...U...`...g...
0x25f350	80070100ba0701000008010005080100	................
0x25f360	08080100380801003c0801003c080100	....8...<...<...
0x25f370	3f0801009e080100a7080100af080100	?...............
0x25f380	e0080100f5080100fb080100	............

0x25f150	801fd31fd61fef1ff21ffe1f10202720	............. '
0x25f160	30205e207020712074209c20a020c020	0 ^ p q t . . .
0x25f170	d020f02000218b219021262440244a24	. . .!.!.!&$@$J$
0x25f180	6024732b762bf32cf92c272d2d2d2d2d	`$s+v+.,.,'-----
0x25f190	302d672d6f2d702d7f2d962da02d5d2e	0-g-o-p-.-.-.-].
0x25f1a0	802ef32e002fd52ff02ffb2f01309630	....././././.0.0
0x25f1b0	9930ff300531e331f0318ca490a4c6a4	.0.0.1.1.1......
0x25f1c0	d0a42ba640a6f7a600a7caa7d0a7d9a7	..+.@...........
0x25f1d0	f2a72ca830a839a840a877a880a8c5a8	..,.0.9.@.w.....
0x25f1e0	cea8d9a8e0a853a95fa97ca980a9d9a9	......S._.\|.....
0x25f1f0	dea936aa40aa4daa50aa59aa5caac2aa	..6.@.M.P.Y.\...
0x25f200	dbaaf6aa01ab06ab09ab0eab11ab16ab	................
0x25f210	20ab6bab70abedabf0abf9ab00aca3d7	.k.p...........
0x25f220	b0d7c6d7cbd7fbd700f96dfa70fad9fa	..........m.p...
0x25f230	00fb06fb13fb17fb1dfbc2fbd3fb8ffd	................
0x25f240	92fdc7fdcffdcffdf0fd19fe20fe6bfe	............ .k.
0x25f250	70fefcfe01ffbeffc2ffc7ffcaffcfff	p...............
0x25f260	d2ffd7ffdaffdcffe0ffeefffcfffdff	................
0x25f270	00000000000000000000000000000000	................
0x25f280	000001004d000100500001005d000100	....M...P...]...
0x25f290	80000100fa0001000001010002010100	................
0x25f2a0	0701010033010100370101009c010100	....3...7.......
0x25f2b0	a0010100a0010100d0010100fd010100	................
0x25f2c0	800201009c020100a0020100d0020100	................
0x25f2d0	e0020100fb0201000003010023030100	............#...
0x25f2e0	2d0301004a030100500301007a030100	-...J...P...z...
0x25f2f0	80030100c3030100c8030100d5030100	................
0x25f300	000401009d040100a0040100a9040100	................
0x25f310	b0040100d3040100d8040100fb040100	................
0x25f320	00050100270501003005010063050100	....'...0...c...
0x25f330	6f050100bc0501000006010036070100	o...........6...
0x25f340	40070100550701006007010067070100	@...U...`...g...
0x25f350	80070100ba0701000008010005080100	................
0x25f360	08080100380801003c0801003c080100	....8...<...<...
0x25f370	3f0801009e080100a7080100af080100	?...............
0x25f380	e0080100f5080100fb080100	............

0x25f150	801fd31fd61fef1ff21ffe1f10202720	............. '
0x25f160	30205e207020712074209c20a020c020	0 ^ p q t . . .
0x25f170	d020f02000218b219021262440244a24	. . .!.!.!&$@$J$
0x25f180	6024732b762bf32cf92c272d2d2d2d2d	`$s+v+.,.,'-----
0x25f190	302d672d6f2d702d7f2d962da02d5d2e	0-g-o-p-.-.-.-].
0x25f1a0	802ef32e002fd52ff02ffb2f01309630	....././././.0.0
0x25f1b0	9930ff300531e331f0318ca490a4c6a4	.0.0.1.1.1......
0x25f1c0	d0a42ba640a6f7a600a7caa7d0a7d9a7	..+.@...........
0x25f1d0	f2a72ca830a839a840a877a880a8c5a8	..,.0.9.@.w.....
0x25f1e0	cea8d9a8e0a853a95fa97ca980a9d9a9	......S._.\|.....
0x25f1f0	dea936aa40aa4daa50aa59aa5caac2aa	..6.@.M.P.Y.\...
0x25f200	dbaaf6aa01ab06ab09ab0eab11ab16ab	................
0x25f210	20ab6bab70abedabf0abf9ab00aca3d7	.k.p...........
0x25f220	b0d7c6d7cbd7fbd700f96dfa70fad9fa	..........m.p...
0x25f230	00fb06fb13fb17fb1dfbc2fbd3fb8ffd	................
0x25f240	92fdc7fdcffdcffdf0fd19fe20fe6bfe	............ .k.
0x25f250	70fefcfe01ffbeffc2ffc7ffcaffcfff	p...............
0x25f260	d2ffd7ffdaffdcffe0ffeefffcfffdff	................
0x25f270	00000000000000000000000000000000	................
0x25f280	000001004d000100500001005d000100	....M...P...]...
0x25f290	80000100fa0001000001010002010100	................
0x25f2a0	0701010033010100370101009c010100	....3...7.......
0x25f2b0	a0010100a0010100d0010100fd010100	................
0x25f2c0	800201009c020100a0020100d0020100	................
0x25f2d0	e0020100fb0201000003010023030100	............#...
0x25f2e0	2d0301004a030100500301007a030100	-...J...P...z...
0x25f2f0	80030100c3030100c8030100d5030100	................
0x25f300	000401009d040100a0040100a9040100	................
0x25f310	b0040100d3040100d8040100fb040100	................
0x25f320	00050100270501003005010063050100	....'...0...c...
0x25f330	6f050100bc0501000006010036070100	o...........6...
0x25f340	40070100550701006007010067070100	@...U...`...g...
0x25f350	80070100ba0701000008010005080100	................
0x25f360	08080100380801003c0801003c080100	....8...<...<...
0x25f370	3f0801009e080100a7080100af080100	?...............
0x25f380	e0080100f5080100fb080100	............

0x25f150	801fd31fd61fef1ff21ffe1f10202720	............. '
0x25f160	30205e207020712074209c20a020c020	0 ^ p q t . . .
0x25f170	d020f02000218b219021262440244a24	. . .!.!.!&$@$J$
0x25f180	6024732b762bf32cf92c272d2d2d2d2d	`$s+v+.,.,'-----
0x25f190	302d672d6f2d702d7f2d962da02d5d2e	0-g-o-p-.-.-.-].
0x25f1a0	802ef32e002fd52ff02ffb2f01309630	....././././.0.0
0x25f1b0	9930ff300531e331f0318ca490a4c6a4	.0.0.1.1.1......
0x25f1c0	d0a42ba640a6f7a600a7caa7d0a7d9a7	..+.@...........
0x25f1d0	f2a72ca830a839a840a877a880a8c5a8	..,.0.9.@.w.....
0x25f1e0	cea8d9a8e0a853a95fa97ca980a9d9a9	......S._.\|.....
0x25f1f0	dea936aa40aa4daa50aa59aa5caac2aa	..6.@.M.P.Y.\...
0x25f200	dbaaf6aa01ab06ab09ab0eab11ab16ab	................
0x25f210	20ab6bab70abedabf0abf9ab00aca3d7	.k.p...........
0x25f220	b0d7c6d7cbd7fbd700f96dfa70fad9fa	..........m.p...
0x25f230	00fb06fb13fb17fb1dfbc2fbd3fb8ffd	................
0x25f240	92fdc7fdcffdcffdf0fd19fe20fe6bfe	............ .k.
0x25f250	70fefcfe01ffbeffc2ffc7ffcaffcfff	p...............
0x25f260	d2ffd7ffdaffdcffe0ffeefffcfffdff	................
0x25f270	00000000000000000000000000000000	................
0x25f280	000001004d000100500001005d000100	....M...P...]...
0x25f290	80000100fa0001000001010002010100	................
0x25f2a0	0701010033010100370101009c010100	....3...7.......
0x25f2b0	a0010100a0010100d0010100fd010100	................
0x25f2c0	800201009c020100a0020100d0020100	................
0x25f2d0	e0020100fb0201000003010023030100	............#...
0x25f2e0	2d0301004a030100500301007a030100	-...J...P...z...
0x25f2f0	80030100c3030100c8030100d5030100	................
0x25f300	000401009d040100a0040100a9040100	................
0x25f310	b0040100d3040100d8040100fb040100	................
0x25f320	00050100270501003005010063050100	....'...0...c...
0x25f330	6f050100bc0501000006010036070100	o...........6...
0x25f340	40070100550701006007010067070100	@...U...`...g...
0x25f350	80070100ba0701000008010005080100	................
0x25f360	08080100380801003c0801003c080100	....8...<...<...
0x25f370	3f0801009e080100a7080100af080100	?...............
0x25f380	e0080100f5080100fb080100	............

0x274e08	0000000028202c0080f1250000000000	....( ,...%.....
0x274e18	00000000000000000000000000000000	................
0x274e28	6b65726e656c33322e646c6c00000000	kernel32.dll....
0x274e38	577269746546696c6500000057726974	WriteFile...Writ
0x274e48	65436f6e736f6c655700000057657253	eConsoleW...WerS
0x274e58	6574466c616773000000576572476574	etFlags...WerGet
0x274e68	466c61677300000057616974466f724d	Flags...WaitForM
0x274e78	756c7469706c654f626a656374730000	ultipleObjects..
0x274e88	000057616974466f7253696e676c654f	..WaitForSingleO
0x274e98	626a6563740000005669727475616c51	bject...VirtualQ
0x274ea8	75657279000000005669727475616c46	uery....VirtualF
0x274eb8	7265650000005669727475616c416c6c	ree...VirtualAll
0x274ec8	6f6300000000546c73416c6c6f630000	oc....TlsAlloc..
0x274ed8	0000537769746368546f546872656164	..SwitchToThread
0x274ee8	0000000053757370656e645468726561	....SuspendThrea
0x274ef8	640000005365745761697461626c6554	d...SetWaitableT
0x274f08	696d65720000000053657450726f6365	imer....SetProce
0x274f18	73735072696f72697479426f6f737400	ssPriorityBoost.
0x274f28	00005365744576656e74000000005365	..SetEvent....Se
0x274f38	744572726f724d6f6465000000005365	tErrorMode....Se
0x274f48	74436f6e736f6c654374726c48616e64	tConsoleCtrlHand
0x274f58	6c657200000052746c5669727475616c	ler...RtlVirtual
0x274f68	556e77696e640000000052746c4c6f6f	Unwind....RtlLoo
0x274f78	6b757046756e6374696f6e456e747279	kupFunctionEntry
0x274f88	00000000526573756d65546872656164	....ResumeThread
0x274f98	00000000526169736546	....RaiseF

0x2750fa	6e6d656e74537472696e677357000000	nmentStringsW...
0x27510a	4578697450726f636573730000004475	ExitProcess...Du
0x27511a	706c696361746548616e646c65000000	plicateHandle...
0x27512a	4372656174655761697461626c655469	CreateWaitableTi
0x27513a	6d657245785700000000437265617465	merExW....Create
0x27514a	54687265616400000000437265617465	Thread....Create
0x27515a	496f436f6d706c6574696f6e506f7274	IoCompletionPort
0x27516a	000000004372656174654576656e7441	....CreateEventA
0x27517a	00000000436c6f736548616e646c6500	....CloseHandle.
0x27518a	0000416464566563746f726564457863	..AddVectoredExc
0x27519a	657074696f6e48616e646c6572000000	eptionHandler...
0x2751aa	416464566563	AddVec

Metadata

0x279dc0	00000000000000000000000000000000	................
0x279dd0	00000000000000000000000000000000	................
0x279de0	00000000000000000000000000000000	................
0x279df0	00000000000000000000000000000000	................
0x279e00	00000000040000000000000001002000	.............. .
0x279e10	03000000000011000000d0c011000100	................
0x279e20	20000300000000001f00000000000000	...............
0x279e30	010020000200000000002a0000008000	.. .......*.....
0x279e40	00000100200002000000000040000000	.... .......@...
0x279e50	a0000000010020000200000000005900	...... .......Y.
0x279e60	00000001000001002000020000000000	........ .......
0x279e70	6d000000200100000100200002000000	m... ..... .....
0x279e80	00008600000040	......@

0x29b04e	746166697073656e6400676f3a6d6169	tafipsend.go:mai
0x29b05e	6e2e696e69747461736b7300676f3a72	n.inittasks.go:r
0x29b06e	756e74696d652e696e69747461736b73	untime.inittasks
0x29b07e	0072756e74696d652e6275696c645665	.runtime.buildVe
0x29b08e	7273696f6e2e7374720072756e74696d	rsion.str.runtim
0x29b09e	652e6d6f64696e666f2e737472007275	e.modinfo.str.ru
0x29b0ae	6e74696d652e747970656c696e6b0072	ntime.typelink.r
0x29b0be	756e74696d652e697461626c696e6b00	untime.itablink.
0x29b0ce	676f3a6275696c64696e666f00676f3a	go:buildinfo.go:
0x29b0de	6275696c64696e666f2e726566007275	buildinfo.ref.ru
0x29b0ee	6e74696d652e70636c6e746162007275	ntime.pclntab.ru
0x29b0fe	6e74696d652e66696e6466756e637461	ntime.findfuncta
0x29b10e	620072756e74696d652e726f64617461	b.runtime.rodata
0x29b11e	0072756e74696d652e65726f64617461	.runtime.erodata
0x29b12e	0072756e74696d652e74797065730072	.runtime.types.r
0x29b13e	756e74696d652e657479706573007275	untime.etypes.ru
0x29b14e	6e74696d652e6e6f7074726461746100	ntime.noptrdata.
0x29b15e	72756e74696d652e656e6f7074726461	runtime.enoptrda
0x29b16e	74610072756e74696d652e6461746100	ta.runtime.data.
0x29b17e	72756e74696d652e6564617461007275	runtime.edata.ru
0x29b18e	6e74696d652e6273730072756e74696d	ntime.bss.runtim
0x29b19e	652e656273730072756e74696d652e6e	e.ebss.runtime.n
0x29b1ae	6f7074726273730072756e74696d652e	optrbss.runtime.
0x29b1be	656e6f7074726273730072756e74696d	enoptrbss.runtim
0x29b1ce	652e636f7663747273007275	e.covctrs.ru

0x29b3c0	00000000000000000000000000000000	................
0x29b3d0	00000000000000000000000000000000	................
0x29b3e0	00000000000000000000000000000000	................
0x29b3f0	00000000000000000000000000000000	................
0x29b400	70090000000202003082096306092a86	p.......0..c..*.
0x29b410	4886f70d010702a08209543082095002	H.........T0..P.
0x29b420	0101310b300906052b0e03021a050030	..1.0...+......0
0x29b430	68060a2b060104018237020104a05a30	h..+.....7....Z0
0x29b440	583033060a2b06010401823702010f30	X03..+.....7...0
0x29b450	25030100a020a21e801c003c003c003c	%.... .....<.<.<
0x29b460	004f00620073006f006c006500740065	.O.b.s.o.l.e.t.e
0x29b470	003e003e003e3021300906052b0e0302	.>.>.>0!0...+...
0x29b480	1a050004140aa6dcafb7b098a1c5efd9	................
0x29b490	c53b35fa4007745cbea08205be308205	.;5.@.t\.....0..
0x29b4a0	ba308203a2a00302010202086efd4e75	.0..........n.Nu
0x29b4b0	bbce4d0d300d06092a864886f70d0101	..M.0...*.H.....
0x29b4c0	0b0500305f310b300906035504061302	...0_1.0...U....
0x29b4d0	5553310f300d060355040813064a3666	US1.0...U....J6f
0x29b4e0	4c313631123010060355040713097346	L161.0...U....sF
0x29b4f0	7266616838323031143012060355040a	rfah8201.0...U..
0x29b500	130b6c727956677a794d384f65311530	..lryVgzyM8Oe1.0
0x29b510	130603550403130c6761736b696c6f74	...U....gaskilot
0x29b520	2e62697a301e170d3236303733313131	.biz0...26073111
0x29b530	333031335a170d323730373331313133	3013Z..270731113
0x29b540	3031335a305f310b3009060355040613	013Z0_1.0...U...
0x29b550	025553310f300d060355040813064a36	.US1.0...U....J6
0x29b560	664c3136311230100603550407130973	fL161.0...U....s
0x29b570	46726661683832303114301206035504	Frfah8201.0...U.
0x29b580	0a130b6c727956677a794d384f653115	...lryVgzyM8Oe1.
0x29b590	30130603550403130c6761736b696c6f	0...U....gaskilo
0x29b5a0	742e62697a30820222300d06092a8648	t.biz0.."0...*.H
0x29b5b0	86f70d01010105000382020f00308202	.............0..
0x29b5c0	0a0282020100dec8577f5a78e623859a	........W.Zx.#..
0x29b5d0	dca537a4ff11d8ec07672f135b92a0cd	..7......g/.[...
0x29b5e0	b46b3b6fcff0c3052ae00c320811c107	.k;o....*..2....
0x29b5f0	6bc14a5e7678bab03e1bd2c18bbb115d	k.J^vx..>......]
0x29b600	b9584b6deb222fa6cad82cc969137879	.XKm."/...,.i.xy
0x29b610	1f6f6f815672eb380bd65a7829aabb9a	.oo.Vr.8..Zx)...
0x29b620	f881c8b547a8bdee46398176140c5af0	....G...F9.v..Z.
0x29b630	057e4ed22a3506fcc5dd4be139937630	.~N.*5....K.9.v0
0x29b640	857b84516f9a227ce875c8ce630dea1f	.{.Qo."\|.u..c...
0x29b650	7ff17a5723b0921f0f68c0b62e2187e8	..zW#....h...!..
0x29b660	ac7bc303fd9532e00d1d45a3a4ef4c20	.{....2...E...L
0x29b670	916295ffa82eb5e93e843341280d1171	.b......>.3A(..q

0x29b7e0	1d0603551d250416301406082b060105	...U.%..0...+...
0x29b7f0	0507030106082b06010505070302300f	......+.......0.
0x29b800	0603551d130101ff040530030101ff30	..U.......0....0
0x29b810	1d0603551d0e04160414a04a1766d575	...U.......J.f.u
0x29b820	07bd1384c55252a311ddd275b4543017	.....RR....u.T0.
0x29b830	0603551d110410300e820c6761736b69	..U....0...gaski
0x29b840	6c6f742e62697a300d06092a864886f7	lot.biz0...*.H..
0x29b850	0d01010b05000382020100334a8e18e9	...........3J...
0x29b860	a7d8b69b586c3f5800f0e57cb9fdea68	....Xl?X...\|...h
0x29b870	fdedc96f2475f93fde0d0ff65ac24f0e	...o$u.?....Z.O.
0x29b880	1ffffec100a46dded75d1bd96e28024b	......m..]..n(.K
0x29b890	8f18c3008a6241e7efa9a245967cb4ea	.....bA....E.\|..
0x29b8a0	9ad76c648ca8b2df5afb4032702d1b5a	..ld....Z.@2p-.Z
0x29b8b0	375cd2fd22808fafcbd3095631e2dfae	7\.."......V1...
0x29b8c0	fdb337c2a2273ed67fbf5e8cfd96c37b	..7..'>...^....{
0x29b8d0	cb0a4b6539caab97ea541d2983435edd	..Ke9....T.).C^.
0x29b8e0	a082f54984975bd71b3c1e55a9bf54d8	...I..[..<.U..T.
0x29b8f0	505e540bc2df1a2991a5d3561ea4637e	P^T....)...V..c~
0x29b900	9cf67f2052723f80ebb025500c43a119	... Rr?...%P.C..
0x29b910	6b9aa13d30f7caa47ca8e642e1f8affe	k..=0...\|..B....
0x29b920	ba9568de9777c9051810467add9386de	..h..w....Fz....
0x29b930	0675030b4e98dcdb673c1ddbc13a9862	.u..N...g<...:.b
0x29b940	9482b8e039c0d23c870eca46cde81ef9	....9..<...F....
0x29b950	12b533e7c06ef620ea2596148eb0e725	..3..n. .%.....%
0x29b960	03a7a977bbc3852a82192d5e1afc1938	...w...*..-^...8
0x29b970	b63b99e65bfa00c199c5c3f6b8b4d4f0	.;..[...........
0x29b980	0f8768d219110b608af889848d23f6cd	..h....`.....#..
0x29b990	98c6c51df93bec0ba72a5201d7b1f51c	.....;...*R.....
0x29b9a0	27eb12bc4e7d916d5f9f8cc87f2e754b	'...N}.m_.....uK
0x29b9b0	a0a470a9ed6daa639cca7ff7c1f9392a	..p..m.c......9*
0x29b9c0	c9cbf633d7ff4094b39b55ba8381b002	...3..@...U.....
0x29b9d0	3aed8edc2b694bba44254454cb41ba4e	:...+iK.D%DT.A.N
0x29b9e0	3275984d4f3bd4a28fe14d259d1bad38	2u.MO;....M%...8
0x29b9f0	44bc90101067345c533ad117176c330d	D....g4\S:...l3.
0x29ba00	b3c0a89a95cb650991d3e01fab60bceb	......e......`..
0x29ba10	97d4cf446a226b21f20846f296763c06	...Dj"k!..F..v<.
0x29ba20	d84cad875b904a5902ca77cb5934c564	.L..[.JY..w.Y4.d
0x29ba30	1c62fc4e1e7071dda0ec2bf3e7ad5b8c	.b.N.pq...+...[.

signed Authenticode chain CN: gaskilot.biz

signed/certificate PE leaf certificate is self-issued

lang Go binary built with trimpath flag

20 of 22 traits shown

Identity

SHA-256	41dbfcca18129caecd4a958132d0346b6ca0c30bc8b06abf4e776bd2715e7244
Filename	ws-Setup-Complete.exe
Package	41dbfcca18129caecd4a958132d0346b6ca0c30bc8b06abf4e776bd2715e7244

Origin

Source	harvest
Feed	malwarebazaar
Ecosystem	windows
Domain	abuse.ch

Timeline

First seen	2 Aug 2026 10:10 UTC
First analyzed	2 Aug 2026 22:00 UTC
Last analyzed	2 Aug 2026 22:00 UTC
Last updated	2 Aug 2026 22:00 UTC

Labeling

Label	bad
Label source	harvest
Traits version	e785a

Not seeing what you expected? Let us know

0x299634	7a65546f53697a65436c617373313238	zeToSizeClass128
0x299644	00696e7465726e616c2f676f64656275	.internal/godebu
0x299654	67732e416c6c00696e7465726e616c2f	gs.All.internal/
0x299664	72756e74696d652f65786974686f6f6b	runtime/exithook
0x299674	2e6c6f636b656400696e7465726e616c	.locked.internal
0x299684	2f72756e74696d652f65786974686f6f	/runtime/exithoo
0x299694	6b2e72756e476f696400696e7465726e	k.runGoid.intern
0x2996a4	616c2f72756e74696d652f6578697468	al/runtime/exith
0x2996b4	6f6f6b2e686f6f6b7300696e7465726e	ook.hooks.intern
0x2996c4	616c2f72756e74696d652f6578697468	al/runtime/exith
0x2996d4	6f6f6b2e476f736368656400696e7465	ook.Gosched.inte
0x2996e4	726e616c2f72756e74696d652f657869	rnal/runtime/exi
0x2996f4	74686f6f6b2e47	thook.G