Static | ZeroBOX

PE Compile Time

2020-09-10 20:41:49

PDB Path

C:\rubanumecoxunehace racuh_zigixavinozu_kajofehak.pdbn\zekisobo.pdb

PE Imphash

376fa88e139eef85f4524a21edf65c38

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00001000 0x0008bcee 0x0008be00 7.95861972187
.rdata 0x0008d000 0x00003898 0x00003a00 5.28471314092
.data 0x00091000 0x02770b60 0x00002a00 1.32700748406
.rsrc 0x02802000 0x000066e0 0x00006800 4.83274964925

Resources

Name Offset Size Language Sub-language File type
AFX_DIALOG_LAYOUT 0x028050b0 0x00000002 LANG_FRENCH SUBLANG_FRENCH data
SAPU 0x02804b70 0x000003d8 LANG_FRENCH SUBLANG_FRENCH ASCII text, with very long lines, with no line terminators
RT_CURSOR 0x028073a8 0x000008a8 LANG_FRENCH SUBLANG_FRENCH dBase III DBT, version number 0, next free block index 40, 1st item "\251\317"
RT_CURSOR 0x028073a8 0x000008a8 LANG_FRENCH SUBLANG_FRENCH dBase III DBT, version number 0, next free block index 40, 1st item "\251\317"
RT_CURSOR 0x028073a8 0x000008a8 LANG_FRENCH SUBLANG_FRENCH dBase III DBT, version number 0, next free block index 40, 1st item "\251\317"
RT_CURSOR 0x028073a8 0x000008a8 LANG_FRENCH SUBLANG_FRENCH dBase III DBT, version number 0, next free block index 40, 1st item "\251\317"
RT_CURSOR 0x028073a8 0x000008a8 LANG_FRENCH SUBLANG_FRENCH dBase III DBT, version number 0, next free block index 40, 1st item "\251\317"
RT_CURSOR 0x028073a8 0x000008a8 LANG_FRENCH SUBLANG_FRENCH dBase III DBT, version number 0, next free block index 40, 1st item "\251\317"
RT_ICON 0x028025b0 0x000025a8 LANG_FRENCH SUBLANG_FRENCH data
RT_STRING 0x02808470 0x0000026c LANG_FRENCH SUBLANG_FRENCH data
RT_STRING 0x02808470 0x0000026c LANG_FRENCH SUBLANG_FRENCH data
RT_STRING 0x02808470 0x0000026c LANG_FRENCH SUBLANG_FRENCH data
RT_ACCELERATOR 0x02804f48 0x00000090 LANG_FRENCH SUBLANG_FRENCH data
RT_ACCELERATOR 0x02804f48 0x00000090 LANG_FRENCH SUBLANG_FRENCH data
RT_GROUP_CURSOR 0x02807c50 0x00000022 LANG_FRENCH SUBLANG_FRENCH data
RT_GROUP_CURSOR 0x02807c50 0x00000022 LANG_FRENCH SUBLANG_FRENCH data
RT_GROUP_CURSOR 0x02807c50 0x00000022 LANG_FRENCH SUBLANG_FRENCH data
RT_GROUP_ICON 0x02804b58 0x00000014 LANG_FRENCH SUBLANG_FRENCH data
RT_VERSION 0x02807c78 0x00000144 LANG_FRENCH SUBLANG_FRENCH data
None 0x028050a0 0x0000000a LANG_FRENCH SUBLANG_FRENCH data
None 0x028050a0 0x0000000a LANG_FRENCH SUBLANG_FRENCH data
None 0x028050a0 0x0000000a LANG_FRENCH SUBLANG_FRENCH data
None 0x028050a0 0x0000000a LANG_FRENCH SUBLANG_FRENCH data
None 0x028050a0 0x0000000a LANG_FRENCH SUBLANG_FRENCH data

Imports

Library KERNEL32.dll:
0x48d008 lstrlenA
0x48d00c TlsGetValue
0x48d010 SetLocalTime
0x48d018 CallNamedPipeA
0x48d024 GetCommState
0x48d034 CreateJobObjectW
0x48d038 WaitForSingleObject
0x48d03c CancelWaitableTimer
0x48d044 LocalFlags
0x48d04c GetCommandLineA
0x48d050 GlobalAlloc
0x48d054 Sleep
0x48d058 _hread
0x48d064 SetConsoleMode
0x48d068 SetSystemPowerState
0x48d070 ReadFile
0x48d074 GetBinaryTypeW
0x48d078 SetThreadContext
0x48d084 OpenMutexW
0x48d08c GetLastError
0x48d090 GetProcAddress
0x48d094 VirtualAlloc
0x48d098 HeapSize
0x48d0a0 SetStdHandle
0x48d0a8 LoadLibraryA
0x48d0b0 AddAtomW
0x48d0b4 SetCommMask
0x48d0bc GetOEMCP
0x48d0c0 DebugBreakProcess
0x48d0c4 CreateMutexA
0x48d0cc EnumDateFormatsW
0x48d0d4 GetSystemTime
0x48d0d8 GetProfileSectionW
0x48d0dc DeleteFileA
0x48d0e0 lstrcpyA
0x48d0e4 GetACP
0x48d0ec HeapAlloc
0x48d0f0 TerminateProcess
0x48d0f4 GetCurrentProcess
0x48d0fc IsDebuggerPresent
0x48d100 GetModuleHandleW
0x48d104 ExitProcess
0x48d108 GetStartupInfoA
0x48d10c RaiseException
0x48d110 RtlUnwind
0x48d118 SetHandleCount
0x48d11c GetStdHandle
0x48d120 GetFileType
0x48d128 WriteFile
0x48d12c WideCharToMultiByte
0x48d130 GetConsoleCP
0x48d134 GetConsoleMode
0x48d138 HeapFree
0x48d13c VirtualFree
0x48d140 HeapReAlloc
0x48d144 HeapCreate
0x48d148 GetModuleFileNameA
0x48d14c TlsAlloc
0x48d150 TlsSetValue
0x48d154 TlsFree
0x48d158 SetLastError
0x48d15c GetCurrentThreadId
0x48d17c GetTickCount
0x48d180 GetCurrentProcessId
0x48d188 GetCPInfo
0x48d18c IsValidCodePage
0x48d190 MultiByteToWideChar
0x48d194 SetFilePointer
0x48d198 WriteConsoleA
0x48d19c GetConsoleOutputCP
0x48d1a0 WriteConsoleW
0x48d1a4 GetLocaleInfoA
0x48d1a8 FlushFileBuffers
0x48d1ac LCMapStringA
0x48d1b0 LCMapStringW
0x48d1b4 GetStringTypeA
0x48d1b8 GetStringTypeW
0x48d1bc CreateFileA
0x48d1c0 CloseHandle
Library USER32.dll:
0x48d1c8 GetAncestor
Library ADVAPI32.dll:
0x48d000 IsTextUnicode

Exports

Ordinal Address Name
1 0x48c5c0 _lifan@8
!This program cannot be run in DOS mode.
`.rdata
@.data
0WWWWW
0WWWWW
QQSVWd
j@j ^V
^F<-uB
<xtX<XtT
HHtXHHt
>If90t
0SSSSS
>=Yt1j
HtHu4j
s[S;7|G;w
tR99u2
URPQQh
0A@@Ju
^SSSSS
j"^SSSSS
0SSSSS
0SSSSS
;t$,v-
UQPXY]Y[
t"SS9]
PPPPPPPP
PPPPPPPP
t+WWVPV
t8I60S
i[}.4f
HF"YN0
'&L__O
eK<3}eh
R-Tb?W
[\d]Wk
N$q!2q-F'
HBArsP
ZN#Nm$B!
Z<6 JVq=P1?
=G8]6*o
h<q&E;
;?|dX*fP
P&4'C{BG
NqShQ
mIR&kj
j!AJ
:3Yec^
`6:2pWm
)OCdS<
\WK@&h
kQMbPL'J
f~7go5
{=Q`Qc
i<#Y9}!
EF[nyp
.p[<Vw
V*L4$/,
Y)?]0c
)Uz7x=
]q(-Ph
M Y8,Z
}00H&u}
&YSce!
!q9c>H
2\7,_V
gYt|o9
\q#HFP3
u7&<JS
3)lOCf
DV"k#L
>'?nBD
}6"a'
5Njsqh
;jwUG*
zZ8d(9g
6J~n:At
r`3^+YG
{+Swcx
O(""C
'RNpjOx
@=q>!+
v*A: *5
a:a+?9V)
ytNx5h
NO8v1R
1sJ/{J
c#~;ei
~HV3Qy
"2}5q[
RbcgQ
KA%&=Ig
V_Do{4{
}W2&:V
&k/$2"
:\HddC
X2Jj&U
c?Ch9&L
t2kCZc
+)<eyV
um^KF-
JuW!&j
&Mxx;V
FXfi`D
f#E9wtq/1
"/D?U"
y9KrZ}
o"$DpV#z
wS%P%6,*
';6]"Z
pdTOe|k
M95};8Q+:
_B$CLy
$98-Ig
kJ.n`
bX;Xcb
T"Yp^h
Tkh6c-j
n}s|W"
ozP:5n
j[h3Qf
R3Z0d
Pl5^|2
hB|:K-Y1
a4wL3]M
9YPRkm
DztM:Gzd
B.oX;}
Vm)-BM
I:7N_j
y$~yC]
M|OG>K
`y5gz.>
oijX~
b.zo'^
'l:m\![K
FMnjb'''
~6o=nD
/@$u"d
K!p[=y0K
T2z8IL
LOUM0:e
Aob\,_
n)KCmDA
6 ])>b
[TCqJY
UE?Tk3)6
H/H7HP
(j`xcj|
@PTunGo
=<fBR!
L+mnL
D"43g>AXi'
(~1dG]
wT1/Sw3
PYn hN
NUWq6)
eB\djk
r1u|7>N
@{e~nI
YJCU3(
"]E2!G
6_b*Xu
?V9tY'R
Qk'b%X
Ox.C1!C
leFP);
L%C TI
E_WL[E
[77:SISSX^
q(Ve^,
uR25Px
s{WcXrc-
K(q)p.H%v
F:XF!P
2jC]X"}
KtdrhV
=qU'YqM
=" gL:
IZY)ou
A1\*zb
dw/R^A
F];Y$R2z
af) !s
XY@UEJOk
N#:Lw{
mMiHjQ
zW|#f<
@S;KiO]t>
Qr;z~:CWE
~ 4NE<Z+>
k&&E~o
toH1IX!
6Cg}p*
'k-?Aw
R/v;p$~~
~hDA}"
hL]"PX
u3CS5u
jC;vUC@
zHk%4bN
*Wu'H=
=g{Ze{
BB+~@[
UydEt,
'Ze%3j
wt0:3Q
>n1O7U
OB}?l[
)B9U|^
v91SAsG
i-Q%?W
A$D6wE
-]>D1]K
4mBiyv
vW"ga%
7`^}2e@%
_@omgA
5a49<7
\|E8I9.
x1Ul0o
c=whM!
ou!?R}
$&59<7
%:r $eK
Ijl)$:
zX4Bud
]R<n!8
Ua`W4\jG
:LSS\\
+]Mr-$
ZLG'(o
hO&[lt
vw{J(&
W[1!OF
eyzZ1g~@Q+
j*?q<J
~EBy|D
Z]OR3=QW#
~|0_^~hD
%E+%-eJ
wC2z7KtV
0|gL8$
N>^-Xb
&&e(fT-
w3lVox[o
#\h~M-
'Zs3m;
WZ!wC8
|X{,`hy<R
M<Hr3N
6bpnn?
`L]n3d
c6Q=j,
Q7`yIo
W`bgg:]
@'9Edn
BtoBC'6
^nV0l29b
Vuu0/&K
&a%KD>
DjI#IL/
c~!f/]
EUW(7Vy
K>iGb+
Ls6SK.6
F3;_Wcl
:gZIz5(
02].Uj
OKj<"j
1F\@Br
{\p)Y1
CN-+R#
t=:Y +
aP'kMX
+Y+@=l
VzGzj(
xpT\guV5_(
bg._-H
}CssbX
HP|zgs
Y")<Xp
6X{G'o
N'sCqb
ECbkx'
4@$PgT
tH(c5Bq{ f
HwL[) $
LE\U'F
kxA9(Q
4C|Qp6
j`HF6z
vScA5p
W/E%iY
LFS]_4
2P T99
ArI&Apl
'm_iKp_O
w(fu,s
HVo_R5
>}O&~Q
D!q\>
Jt3=+u
F'r9Ix
x8u#zc
&qV7)P
`><2pif
3"Li^|
+ASg.
Uy3`iG
7aiMVR
/]gji<N
83\DT
p,v&i"1d
c`|^QVG
Mea=X.
Pl\TB(,Y
w*&>"_u
9|(G+e
0<sD""
p!>rsG
}U"@zt
.Q:t|e
[d/nKvI
ELp_A"
'U^JBV
:U>@YvX;!
oaTg}A
]<Eq8R
mW@]Mfh
Mh*Sa{Q
usW;f*
9Y+-:H
\\UuI y
O)$Cda
F$a_D-
GIe+0m
kGfVf2
l_Vhc1
O%wm9Z
*Th,4<.
bamVC|
(Lj+&L
(3w"1
pn0yWK
.FZ0~i~
8+:P &Q
WX`oy?rT
!Gh.$z
D<o#Q`
x<Bg50
uhxS!i
SFoWj>
EA)8'n/I:
XWdYf
>bV2W
GRtnc5
rcyRui
"~ksf`%
1j"Iisy
PDikJ5
z?kQQk
IlhV@a
Eq'm4?}
Rws?|4-b
uIx1!]3s5
9?.d('
U'#![x
--C_p\
Fu'=>-
'wCl]:
]..?=t
i])y(
qE;`u&
{|8Hu]
S$$Ktt
K/p]*{
yUg[z{
[tn_m4
G*?,1O
`#ZU/>
y2`5jJ*|
VEZ,2f
PY%Yit
J8> [A
+WT"\M
\*C'Yq
K.2T,}
'"]6/m
Odkxr-
F8P.]y2$
6hb:p0H
|?'uI9
>d%veL=)
`wuf7Q
B1P2-p3
9+TaqD
Z-E##[#b
S:c9qV
dyh4$7v
cGQq=wV0
o)|z|4
1i7pT%
_UVU#6
b{wzk%
RA[p*J
`C:&'~
bMNd<&
V9O`.e
9IJOA6
]`hDch
rBH\#l
%y*YOk
nrh+Y9Rl
=)T!E,
?YB/NO
f*5wU $
,T|^H%
JO3Ngq|QdY
y}=0~f]
{Wf!j/W
3+I1hE
G=BB[`
!w>$,6
Z/W9oP
%SSX>|
12?7g7t
M*(!:uX
ip/=+=*
HiZTh
*P>qGk
1tL\.z
^`/~2Duz
Ios{B:wG
W|_,B 86C}
R4QGK`
im_n,!B@
Q$z90K
*CPW9]n
*oXZ6pD
Q`Q!H?
b]Gw=X
$vH[ wG
o'Zd>f9
XQFqL
*|} Y/
`bu}J-
-jH3BZwI*
GvaT0s
C!xxc(
VZ|a_(
5Gm]_6
XBbx#K
AZLwtQoY
gHG)6
KwVA@?
0oI0,ELA`
){$pZ2
jjF:k|
O"k\cRh
bkDx&M+~dzj
6Ndo~`
[dYxdZ
zVH#Bj
2:J[X.
z/v=2*(
&RJKDJ
$uG[7oj
S|1IYNuSn
V?av/#
SWNJ[!
-Jr#P)E
aILb}vT
C*}iUG
B'V(%y
,VX#k%
xm&++o
"xw~m}R
7ft~l/
[/lCnpO
B7,5zL
CO;(~wL
+t0c0q
/C3&jh:
U$&8#E>
c'x:(_m]
`82%8u
K`z8#+
;{M|hv
'zc-j8x:
J.]a>0
2Q'\|z
494 wMg
YJW1r$
dK=\bz
!aw|+#
k}o%p_>
P'Vl|R
n%(`m1
L_pXBJ
\+-Z"r-
2$KrRo
`DWb{e
8]nl_04
?nHP>o
#\hz|XB
!*M<S0
6fzEj<
ID#Xtx
v&>e[2
Z:X+ g
Uq%&{`+[
bkqTKj
:xtcB6
OXD<;t
p +A4SS
9'S&%3e
G{.(Q"
aw8C$&$
v5WN=`
-iI2gK
W!Yb7w
MqkIZO
GE#c5P-NL*'&I
o;J#sV
)E]%Hi
_OT*;et
TZ*@MP*
39HwPI{S
Nl*Sh
K~QV*k
_>Uw 5
jz148-
FYh^xc
yowD79
`{p<!
E]:B5/`?
xrYk#3E@"8
~=u.r~
LP9cjli:H
c.n@?"?
d/u0j6sX
iGRj~P
$~P;]5^
#}@B]b{
WQNh|\
#Q2YTR
c]\<tf
C::vU}
TOszY@
q /q@X
5Yx]H(
Bi>Abh
"((DsS
E_"kmg
7q{&;
*KAnp7a!
$JEf"G
(iU#b5#
VK*j0{
kVC!u_
f|6$}T)7G
T}`o\m
4.a(V\N
lhl*NI{
98I}<e
wx3cq n
# =xXM
5wI)~9c
0@+d^.
#2ORLk
s,s!~d
d.iE,Y
jUFKn09
hdBo$_g(
WUd}20
x<j5/F_
<Gq57*
88?3XNY
MxO2MH
Sy+'T#Se>
<Wg)GQw
#POz:mp
.1|^E<
-,yM`L
{dZEVR)/
@ggZ+)
wq>X*S
e6HIBF
#]5erI7M
5^f;Kv
RT M5(
}3sLj6%~
Q%&=Fk
!^FgNw
:yWktT
b>$|H)o
Le3geO
2/3esj
x-e6#4qlA/
qT%ZAqFE
hYTS.U
Rg/ V
z%TFs&x
Sa;R
}FP2]W)g
zj~.EA
xVPo6?
}'oeZ8
D8=:d/
Q34V\@
p@amQ*[
23l"g^jZ
JEnwv~
#UR83At;
>(J$itx
;6O*('?
"}5"4D
>y DX5y
.%*3.c
sW,ZJ
T&U$vT&
n*|b1@
& 8;L[
@meN9*
{c}|=c
VFY)AY
{ACg)G
aUgnM{
pxfQ0
BEg>RR
%<]=gt
dImF].
]7&3If
SP[,rQ
 HNn@
A@y0PQ
6#(qEAr
;IiKQ:
mnW,\PN
?@::df
JUL-0+
8xkmk<
I1>x*#&
@"bNgP
MSc^uk
{8}.+q|,V;
6M@3QR
,"160d&
4s5"Y`
?`Cue8
:n.W2/V`
CNs&Gt
uR\;xI
sX%XMX
^eI-tq
-bp&~dU
e30;
rv2~*{y
890ncS
#p8M7d/
^9_L])
JKFD&*
H3)52
_MmAi#
n>)\qq
z<7gc@
Q6sVlr
Q~! ti
EJKjrzErR%,
:7MvX{
p&@'e$
8N',\v<o
`^~]r/41
{FKh1=
;O3g}58
bO8N!F
nu9tZY
S9DveJ
m%Ky<C
:D^xF&,
93P|=A
KV"}B0m#i
#Ua!,f
S&wLbQ
3 vH.E
T9H4^O
xdC"wfz
SH2Gdf
6?o1#4
=ncl %
rO%Nj)3
0-wN9"
*T(Guq
g"T~=.
^T,f=v
V'=)hh
!vrZ/D
.Z8!g-
O'<Q(Z
TcaqgK+
TLS?>e
3|O;\5'
3_Abmbu
QNe][?
A/fEvZuk
DN(3?G
"-q:cJ*
`JzbTlw
X1\my&
2"Isjf9
byu[.)
~lR 'p
x/tDqu
ff3Jn,C
a#8'y+
SCF"L
Y<m[>}Q
{$I.{O2%
80Q=8+qD
{="%?B
sHI8~t?
[LQ_&|
u@1nnO*
F9M80K
TDU9a(d
_<k6L^<
::Ao3r9
k+ZlyZrQAhU
CY,Mt~
}JPFs8
(2$GwO
hn}iEQ)
7tQcK{
7-4,q-
,-jQeO
gF@I}Yz
O1fF>dfc
Q&D*F7
xwD0$+
oBB<4GL
WS^)DP
gLr&{10r
@)g(<M
}K2oVH@)W>
$h;\LI$/)
K|U=<R
$NT,df
$`7xAu
F=(a!H
9Z<t>ya
BIf~v\
>R!m4(
r5+F>)
+9#Bq:E
$a@0r'
.,t&a?
AM$|k}[m
UAeydjY
wGkliI9G
IA/NW,
'|dqlp
s[;UFr
Eb+Rp/
2k#M8g2
J)e0ze
g[@$<s
JBQsa@
tzEZ/d
UO=NB!
moXtbS4
L@&b$::X
@SKdO=R
\w=JDn
/z]]?I
IWB[n'@
6ratD6
-D&(C7D
_SE}fYH+n
2K"!vi>
dDzi1F
'1yxf)
b@P"U>
S|W|:G
Nq"E)j**kdq
q $xDsQd
yYL6b.
`,&d/.
]bpEV0Pl
*g#\f"
YOwP]a
n2h+8)Vv
38Q^0Q
C"~j3a0
-s7l-R`
.vA#Fo
Ie,HoB+b
567nq?"-
?%7~G~
~bQv-J
};>^[w
8Sua:L4
CvzMPs
+w*@V-
~}&vGb
q47)[:
ezBX.H
\<sT]{
A3]B>V
ms(w22
YiT=yp
A!06.]9
b{XXpt
+|C7\$b
}-W9E9
N,sCI`
V)1.`g
0vu<A0
?f"Xh^
:R*RA>
glq c[R
%Gh0(
rJTXxA
+u+c.V
gZTIzq
~Buy=R-
8h35h
?;+Ywt
QAYetp
3;@&DO
_zvSoT
\jFW3[
uev#tN
d!k98ey
9nqhh{Z_
?i+s#;
,LbH]\
E4eZA:P%Q
Y[#Z.{
pxh3P`
mz(C9E_
f%7Jvb
gIi&ut
h)5hRG
I0XIfVonv
CRQm9Q!'?
qi2j"&
+p|[Cj
_?Q_Z
n"u\F[
Gy]n5.
0q\a=3
: 6Uit
zCE:R"
giU7+
c_B{(j
GC'Kw!
0b&s+N
e^vSmxn
76sPryW
tw''L'
'oY]vb
W-.+XS{V
6n.Y.p
L?foFq
fYd{fEH4
p2Hh\$}
$"'g+__
a_>+?"S`
U_b}S=
",ZtT/
*ouN2H
<XbTeop*
e7U[QH
3>6Lt'
gi=UO9
i9J#px
'v@yZ,
}|%Gdhef0u
}Od< l:
^,e4ga
c6rSY2
y)/e5'
e^H{{\(
wWKYDnJ
/I"~lZ
.<#GTu$
'~.^xw
rRYs2s
UmbZ8H
KB8zUU
9l!D|H$<r
!R^zp@D
3C{2bm
Pbu=+.
c'>3Gn#
e$|UuT
;xN:TdT
rPXbnc
|o>/yF
u"7WU0
MVX1>Y"
t@sP6A
B[Um`7
h){\w!
mdqBA<Mq
~S[G*k
RA1U6TP
B;}gZ
8j|9"^
PJKW.'
,'8uJ
uKM$!O
R9f1[e
Ab"aWq(
gu=-PT
6y@rs^*
+Bf@Th
TzQu5k
a0,IPv}
1)$}H$
+}6:q9
gQg 6@c
L*Cc&"
~Fqi,q
0~[%=0"
SH,tU]
\'\h-S
xZn1eS
S%L9HuCq
@]lDJR
J3oRxz
^AgA[BZ
s1e:#^k
/4u&q`
bad allocation
string too long
invalid string position
Unknown exception
CorExitProcess
(null)
`h````
xpxxxx
Illegal byte sequence
Directory not empty
Function not implemented
No locks available
Filename too long
Resource deadlock avoided
Result too large
Domain error
Broken pipe
Too many links
Read-only file system
Invalid seek
No space left on device
File too large
Inappropriate I/O control operation
Too many open files
Too many open files in system
Invalid argument
Is a directory
Not a directory
No such device
Improper link
File exists
Resource device
Unknown error
Bad address
Permission denied
Not enough space
Resource temporarily unavailable
No child processes
Bad file descriptor
Exec format error
Arg list too long
No such device or address
Input/output error
Interrupted function call
No such process
No such file or directory
Operation not permitted
No error
runtime error
TLOSS error
SING error
DOMAIN error
An application has made an attempt to load the C runtime library incorrectly.
Please contact the application's support team for more information.
- Attempt to use MSIL code from this assembly during native code initialization
This indicates a bug in your application. It is most likely the result of calling an MSIL-compiled (/clr) function from a native constructor or from DllMain.
- not enough space for locale information
- Attempt to initialize the CRT more than once.
This indicates a bug in your application.
- CRT not initialized
- unable to initialize heap
- not enough space for lowio initialization
- not enough space for stdio initialization
- pure virtual function call
- not enough space for _onexit/atexit table
- unable to open console device
- unexpected heap error
- unexpected multithread lock error
- not enough space for thread data
This application has requested the Runtime to terminate it in an unusual way.
Please contact the application's support team for more information.
- not enough space for environment
- not enough space for arguments
- floating point support not loaded
Microsoft Visual C++ Runtime Library
<program name unknown>
Runtime Error!
Program:
EncodePointer
DecodePointer
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
bad exception
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
`h`hhh
xppwpp
GetProcessWindowStation
GetUserObjectInformationA
GetLastActivePopup
GetActiveWindow
MessageBoxA
USER32.DLL
Complete Object Locator'
Class Hierarchy Descriptor'
Base Class Array'
Base Class Descriptor at (
Type Descriptor'
`local static thread guard'
`managed vector copy constructor iterator'
`vector vbase copy constructor iterator'
`vector copy constructor iterator'
`dynamic atexit destructor for '
`dynamic initializer for '
`eh vector vbase copy constructor iterator'
`eh vector copy constructor iterator'
`managed vector destructor iterator'
`managed vector constructor iterator'
`placement delete[] closure'
`placement delete closure'
`omni callsig'
delete[]
new[]
`local vftable constructor closure'
`local vftable'
`udt returning'
`copy constructor closure'
`eh vector vbase constructor iterator'
`eh vector destructor iterator'
`eh vector constructor iterator'
`virtual displacement map'
`vector vbase constructor iterator'
`vector destructor iterator'
`vector constructor iterator'
`scalar deleting destructor'
`default constructor closure'
`vector deleting destructor'
`vbase destructor'
`string'
`local static guard'
`typeof'
`vcall'
`vbtable'
`vftable'
operator
delete
__unaligned
__restrict
__ptr64
__clrcall
__fastcall
__thiscall
__stdcall
__pascal
__cdecl
__based(
 !"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~
HH:mm:ss
dddd, MMMM dd, yyyy
MM/dd/yy
December
November
October
September
August
February
January
Saturday
Friday
Thursday
Wednesday
Tuesday
Monday
Sunday
CONOUT$
SunMonTueWedThuFriSat
JanFebMarAprMayJunJulAugSepOctNovDec
bad allocation
kernel32.dll
WirtualBriclsk
%s %d %f
vector<T> too long
C:\rubanumecoxunehace racuh_zigixavinozu_kajofehak.pdb
n\zekisobo.pdb
FileTimeToDosDateTime
SetThreadContext
lstrlenA
TlsGetValue
SetLocalTime
BuildCommDCBAndTimeoutsA
CallNamedPipeA
SetUnhandledExceptionFilter
InterlockedIncrement
GetCommState
SetDefaultCommConfigW
ReadConsoleOutputAttribute
SetEnvironmentVariableW
CreateJobObjectW
WaitForSingleObject
CancelWaitableTimer
GetProcessPriorityBoost
LocalFlags
FindNextVolumeMountPointA
GetCommandLineA
GlobalAlloc
_hread
SetSystemTimeAdjustment
DeleteVolumeMountPointW
SetConsoleMode
SetSystemPowerState
FileTimeToSystemTime
ReadFile
GetBinaryTypeW
GetACP
GetNamedPipeHandleStateW
FreeLibraryAndExitThread
OpenMutexW
GetHandleInformation
GetLastError
GetProcAddress
VirtualAlloc
HeapSize
BeginUpdateResourceW
SetStdHandle
EnterCriticalSection
LoadLibraryA
BuildCommDCBAndTimeoutsW
AddAtomW
SetCommMask
WaitForMultipleObjects
GetOEMCP
DebugBreakProcess
CreateMutexA
GetCurrentDirectoryA
EnumDateFormatsW
GetConsoleCursorInfo
GetSystemTime
GetProfileSectionW
DeleteFileA
lstrcpyA
KERNEL32.dll
GetAncestor
USER32.dll
IsTextUnicode
ADVAPI32.dll
HeapAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
GetModuleHandleW
ExitProcess
GetStartupInfoA
RaiseException
RtlUnwind
LeaveCriticalSection
SetHandleCount
GetStdHandle
GetFileType
DeleteCriticalSection
WriteFile
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
HeapFree
VirtualFree
HeapReAlloc
HeapCreate
GetModuleFileNameA
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
InterlockedDecrement
InitializeCriticalSectionAndSpinCount
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
IsValidCodePage
MultiByteToWideChar
SetFilePointer
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetLocaleInfoA
FlushFileBuffers
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
CreateFileA
CloseHandle
zekisobo.exe
_lifan@8
.?AVout_of_range@std@@
.?AVtype_info@@
.?AVbad_exception@std@@
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
.?AVexception@std@@
.?AVlogic_error@std@@
.?AVlength_error@std@@
.?AVbad_alloc@std@@
Lunenavibit. Fibanik dek noxodo tesayote. Vosoh kesiloheputaj. Gofu. Gupuxez nocur liwedewaxayeget. Cube wonelemor hubodokizofu dafeheyem zorufurafutuvot. Todisoxuned. Kare xukajemogoza bab tedotasukus fuyohofuvej. Fuhoxifadejelan xitigiku dad hujurofas lirudibem. Zifotadu neyi yebi xazeyuveh. Jorisupeniyece. Xemapisenedapog. Lemoferihabojoh. Tufoti dohonido pakadanecup. Behewin pivu jejecuyika zutu. Rewuwovipagireb. Vimivujiwob rodivajojamanoz. Yitibu wur. Fakemoze. Penosunis nimu satola newahigo. Dozuzerul bidigeyumihene sehuvate wehobosedepu sozosug. Cal vogeloju rofizove. Bekecixihuyu lamikefitu mobacop huwayari hon. Tarifag lolibejuzezeg saviwokexuven bajifed guca. Fehenuzilo nosuruwarime yewojeyiyodunep. Bepuxobi bafilifeyumek vozokejabubefox jupinohaxo. Tedelutoho xucadekisoneka yeyohejafuve kuhecinuhuno. Nunewuyabavewo tahuzepos sewaxokurefizad xepo bohawumeceja. Jirutiwukukuhin nacahusasulopa tevacatasuy. Fuxe zeyohoxayelopoj fejoxiwaba rivavakor dakogutifenemi
iiiiii
iiiiii
iiiiiiiiiiii
iiiiiiiiii
iiiiii
iiiiiiiii
iiiiiiiiiiiii
iiiiiiii

Hjjjjjjj
Hjjjjjjj
mscoree.dll
(null)
KERNEL32.DLL
((((( H
h(((( H
H
wexudujecajatanenipoloh
AFX_DIALOG_LAYOUT
/ P6pL
,/KPip
/-P?pR
/ P6pL
,/KPip
/-P?pR
VS_VERSION_INFO
StringFileInfo
041904E6
FileVerus
1.0.2.18
ProductVersys
1.5.28.29
VarFileInfo
Translations
BNajixifubo ladiluv yicazerup nikiyegu ronar padoxuwag nihoz kavefa
Pomulivip bavefuhurejMWimazokolutiboj tetobulalov nikezotuyit wovitaf kecufogifegab gubivepojokigov4Kefahesagulu pefibi ragulojeyu tuyebayixede dimexenu^Jodizasatozok carakoyebi weku nazufiyucuhobur lijahelosewola tunobi tucajovu gogu vaxesihasegu
Kimovayuj sugahin bibufezibuho
6Jexucepasulihu toyal muwimagesesupay hatudelim mawahazHWupiza cicotaladaligem punegihoporo meyayazujuzoc boboyituc dopoca xobuwlGaratamadujowu rozevuf wuvihasayesaz ged wiworewokerok xitutosigax zuhid vehotewuxoto libahedi fokajumubayey
Cukijesem fovu humu
DLifom jicizahole cetagajacaney tatimiv cezokogido ceramodes lirotidi
Nodi zudapanuxipoYGozovihur hidatexi hoj rokoducemitiz huhubohasov cilozobajiziki zitetegawewus lako pudozi
Mob4Jivokirupodok riwu vej surosiv buponun hofiwuwidabus
Pape nayhVehuzemom yewacurup moxukihibovot cazewap wuluvila vawaz burivuwile larodisut sogimumayi zerodowegubulac
SozuyahuwinaneYCipitap hijabame fadawuva feh rulanovarih nexebuwi kuhekedatanosif kigele mopokofim nulin-Hej moxuvipo luveh malazujeru nutuwerarob teh"Jumuxuzoril jixusucubela macizulot
Antivirus Signature
Bkav W32.AIDetect.malware2
Elastic malicious (high confidence)
MicroWorld-eScan Clean
FireEye Generic.mg.3c541941aa60ce75
CAT-QuickHeal Clean
ALYac Clean
Cylance Unsafe
Zillya Clean
AegisLab Trojan.Win32.Kiosk.i!c
Sangfor Trojan.Win32.Save.a
K7AntiVirus Trojan ( 0056cc381 )
BitDefender Trojan.GenericKDZ.74048
K7GW Trojan ( 0056cc381 )
Cybereason Clean
Baidu Clean
Cyren Clean
Symantec ML.Attribute.HighConfidence
ESET-NOD32 a variant of Win32/Kryptik.HKIS
APEX Malicious
Avast FileRepMalware
ClamAV Clean
Kaspersky UDS:DangerousObject.Multi.Generic
Alibaba Clean
NANO-Antivirus Clean
ViRobot Clean
Rising Malware.Obscure/Heur!1.A89F (CLOUD)
Ad-Aware Trojan.GenericKDZ.74048
Emsisoft Clean
Comodo Clean
F-Secure Clean
DrWeb Clean
VIPRE Clean
TrendMicro Clean
McAfee-GW-Edition BehavesLike.Win32.Packed.jc
MaxSecure Trojan.Malware.300983.susgen
CMC Clean
Sophos Mal/Generic-S
Ikarus Trojan.Crypt
GData Clean
Jiangmin Clean
Webroot W32.Kiosk.Gen
Avira Clean
MAX Clean
Antiy-AVL Clean
Kingsoft Win32.Troj.Generic_a.a.(kcloud)
Gridinsoft Clean
Arcabit Clean
SUPERAntiSpyware Clean
ZoneAlarm Clean
Microsoft Trojan:Win32/Wacatac.B!ml
Cynet Malicious (score: 100)
AhnLab-V3 Clean
Acronis Clean
McAfee Artemis!3C541941AA60
TACHYON Clean
VBA32 Clean
Malwarebytes Trojan.MalPack.GS
Panda Trj/Genetic.gen
Zoner Clean
TrendMicro-HouseCall Clean
Tencent Clean
Yandex Clean
SentinelOne Static AI - Malicious PE
eGambit Clean
Fortinet W32/Kryptik.HKIM!tr
BitDefenderTheta Gen:NN.ZexaF.34670.MqW@aeP8QBae
AVG FileRepMalware
Paloalto generic.ml
CrowdStrike win/malicious_confidence_100% (W)
Qihoo-360 Win32/Heur.Generic.HwoCdEcA
No IRMA results available.