Static | ZeroBOX

PE Compile Time

2021-04-27 22:59:25

PE Imphash

e5d15e5539bc8bad0faadfeda5992100

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00001000 0x000480a0 0x00048200 6.83182538137
.rdata 0x0004a000 0x0001134e 0x00011400 6.76004362914
.data 0x0005c000 0x0000adc0 0x00009c00 7.82275687426
.pdata 0x00067000 0x000017f4 0x00001800 5.60630868387
.vtbs 0x00069000 0x00001b80 0x00001c00 7.91972180721
.gfids 0x0006b000 0x000000a0 0x00000200 0.811097944555
.rsrc 0x0006c000 0x00000240 0x00000400 1.77762143552
.reloc 0x0006d000 0x00000628 0x00000800 4.78457537643

Resources

Name Offset Size Language Sub-language File type
AFX_DIALOG_LAYOUT 0x0006c198 0x00000002 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_MENU 0x0006c1a0 0x000000a0 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_DIALOG 0x0006c110 0x00000088 LANG_ENGLISH SUBLANG_ENGLISH_US data

Imports

Library KERNEL32.dll:
0x14004a038 HeapSize
0x14004a048 GetConsoleAliasesW
0x14004a050 LoadLibraryA
0x14004a058 GetProcAddress
0x14004a060 VirtualProtect
0x14004a068 WriteConsoleW
0x14004a070 CreateFileW
0x14004a078 CloseHandle
0x14004a080 HeapFree
0x14004a088 GetConsoleMode
0x14004a090 GetConsoleCP
0x14004a098 FlushFileBuffers
0x14004a0a0 LCMapStringW
0x14004a0a8 HeapReAlloc
0x14004a0b0 HeapAlloc
0x14004a0b8 GetProcessHeap
0x14004a0c0 VirtualAlloc
0x14004a0c8 VirtualFree
0x14004a0d0 SetFilePointerEx
0x14004a0d8 GetStringTypeW
0x14004a0e0 RtlCaptureContext
0x14004a0e8 RtlLookupFunctionEntry
0x14004a0f0 RtlVirtualUnwind
0x14004a0f8 UnhandledExceptionFilter
0x14004a108 GetCurrentProcess
0x14004a110 TerminateProcess
0x14004a120 QueryPerformanceCounter
0x14004a128 GetCurrentProcessId
0x14004a130 GetCurrentThreadId
0x14004a138 GetSystemTimeAsFileTime
0x14004a140 InitializeSListHead
0x14004a148 IsDebuggerPresent
0x14004a150 GetStartupInfoW
0x14004a158 GetModuleHandleW
0x14004a160 RtlUnwindEx
0x14004a168 GetLastError
0x14004a170 SetLastError
0x14004a178 EnterCriticalSection
0x14004a180 LeaveCriticalSection
0x14004a188 DeleteCriticalSection
0x14004a198 TlsAlloc
0x14004a1a0 TlsGetValue
0x14004a1a8 TlsSetValue
0x14004a1b0 TlsFree
0x14004a1b8 FreeLibrary
0x14004a1c0 LoadLibraryExW
0x14004a1c8 GetStdHandle
0x14004a1d0 WriteFile
0x14004a1d8 GetModuleFileNameW
0x14004a1e0 MultiByteToWideChar
0x14004a1e8 WideCharToMultiByte
0x14004a1f0 ExitProcess
0x14004a1f8 GetModuleHandleExW
0x14004a200 GetACP
0x14004a208 FindClose
0x14004a210 FindFirstFileExW
0x14004a218 FindNextFileW
0x14004a220 IsValidCodePage
0x14004a228 GetOEMCP
0x14004a230 GetCPInfo
0x14004a238 GetCommandLineA
0x14004a240 GetCommandLineW
0x14004a248 GetEnvironmentStringsW
0x14004a250 FreeEnvironmentStringsW
0x14004a258 SetStdHandle
0x14004a260 GetFileType
0x14004a268 RaiseException
Library USER32.dll:
0x14004a298 EndPaint
0x14004a2a0 ChangeDisplaySettingsA
0x14004a2a8 AdjustWindowRect
0x14004a2b0 OemKeyScan
Library ole32.dll:
0x14004a2c8 GetClassFile
0x14004a2d0 CreateDataAdviseHolder
0x14004a2d8 CoCreateGuid
0x14004a2e0 HWND_UserUnmarshal
0x14004a2e8 HWND_UserSize
0x14004a2f0 CoLoadLibrary
Library GDI32.dll:
0x14004a000 SetDeviceGammaRamp
0x14004a010 D3DKMTReclaimAllocations
0x14004a018 D3DKMTReleaseKeyedMutex
0x14004a020 PtVisible
0x14004a028 D3DKMTAcquireKeyedMutex2
Library SHELL32.dll:
0x14004a280 None

!This program cannot be run in DOS mode.
`.rdata
@.data
.pdata
@.vtbs
.gfids
@.rsrc
@.reloc
AWAVAUATVWUSH
L9g(r)
8[]_^A\A]A^A_
AWAVAUATVWUSPI
[]_^A\A]A^A_
AWAVAUATVWUSH
%Ty/nA
H9~(s;H9^0A
[]_^A\A]A^A_
;^`t7H
AWAVAUATVWUSH
[]_^A\A]A^A_
AVVWUSH
[]_^A^
AWAVATVWUSH
0[]_^A\A^A_
AVVWSH
([_^A^
AWAVAUATVWUSH
D$P!>'
x[]_^A\A]A^A_
AWAVVWSH
D$Hv*=0H
p[_^A^A_
AWAVAUATVWUSH
D$dY;j
D$l[<W~
D$l"u>
=Ydc(|
[]_^A\A]A^A_
AWAVAUATVWUSH
D$8%+F
D$ ;$I
D$dEYB9
[]_^A\A]A^A_
AWAVAUATVWUSH
D$ 0^R>L
D$`D;(t
D$XD;(
x[]_^A\A]A^A_
AWAVAUATVWUSH
h[]_^A\A]A^A_
AWAVAUATVWUSH
[]_^A\A]A^A_
AVVWSH
X[_^A^
AWAVAUATVWUSH
D$ EPc
[]_^A\A]A^A_
AVVWSH
8[_^A^
AWAVAUATVWUSH
X[]_^A\A]A^A_
AWAVAUATVWUSH
,$;/tZH
x[]_^A\A]A^A_
AWAVAUATVWUSH
>D+|$h
x[]_^A\A]A^A_
AWAVVWSH
P[_^A^A_
AWAVATVWSH
h[_^A\A^A_
AWAVAUATVWUSH
x[]_^A\A]A^A_
AWAVATVWUSH
`[]_^A\A^A_
AWAVAUATVWUSH
X[]_^A\A]A^A_
AWAVATVWUSH
0[]_^A\A^A_
1A;3}NA
AWAVAUATVWUSH
D$HT+%7H
D$08X]=H
D$ ss3
[]_^A\A]A^A_
AWAVAUATVWUSH
D$hc&O
D$(L9~
D$0y5R6H
D$0Y;>-H
[]_^A\A]A^A_
AWAVATVWSH
x[_^A\A^A_
AWAVAUATVWUSH
D$ D4u
[]_^A\A]A^A_
AWAVAUATVWUSH
0E;7u7
D$ B?c)
[]_^A\A]A^A_
AWAVAUATVWUSH
D$8.SU
D$x;(tfL
D$x;(u
[]_^A\A]A^A_
AWAVATVWSH
AHG_0kA
D$8I}K
D$ >z8
x[_^A\A^A_
AWAVAUATVWSH
[_^A\A]A^A_
AWAVAUATVWSH
0[_^A\A]A^A_
AWAVAUATVWUSH
X[]_^A\A]A^A_
AWAVAUATVWUSH
D$0zoR
D$@2|d8H
[]_^A\A]A^A_
AWAVAUATVWUSH
%t3&.L
[]_^A\A]A^A_
AWAVVWSH
`[_^A^A_
AWAVAUATVWUSH
h[]_^A\A]A^A_
AWAVAUATVWUSH
H[]_^A\A]A^A_
AWAVAUATVWUSH
D$ {|_
X[]_^A\A]A^A_
AWAVAUATVWUSH
D$@HzW
D$xD;hp
[]_^A\A]A^A_
AWAVAUATVWUSH
h[]_^A\A]A^A_
AWAVAUATVWUSH
X[]_^A\A]A^A_
AWAVVWSH
@[_^A^A_
AWAVAUATVWUSH
eZ<t<H
8[]_^A\A]A^A_
AWAVAUATVWUSH
D$HAU,6H
R0<2||D
D$ X?($
[]_^A\A]A^A_
AWAVVWUSH
2A;0|5
[]_^A^A_
AWAVAUATVWUSH
%%3Q/6MG
D$HTf82H
[]_^A\A]A^A_
AWAVATVWUSH
D$ }];H
`[]_^A\A^A_
AWAVAUATVWUSH
H[]_^A\A]A^A_
AWAVAUATVWUSH
D$PU)T6H
l$dE9/
D$xD;(u
D$0EJ=$H
[]_^A\A]A^A_
AWAVAUATVWUSH
|$x|$H
D$(/p?*H
[]_^A\A]A^A_
<$grm=
<$hrm=|
AWAVATVWUSH
%koZ&~
D$(Lez
p[]_^A\A^A_
AWAVAUATVWSH
[_^A\A]A^A_
AWAVAUATVWUSH
D$(^,>*H
x[]_^A\A]A^A_
AVVWUSH
D$PD;0
%c.85~
D$PD;0
`[]_^A^
AWAVAUATVWUSH
8E"m4|
X[]_^A\A]A^A_
AWAVAUATVWUSH
D$dSA?
D$x\lo+
D$8ExH
[]_^A\A]A^A_
AWAVAUATVWUSH
h[]_^A\A]A^A_
AWAVATVWUSH
p[]_^A\A^A_
AVVWSH
H[_^A^
AWAVAUATVWUSH
h[]_^A\A]A^A_
AWAVAUATVWUSH
D$(yng
x[]_^A\A]A^A_
AWAVAUATVWUSH
V&6uTH
[]_^A\A]A^A_
D$ we7
AWAVATVWSH
X[_^A\A^A_
AWAVAUATVWUSH
d$`=]u
L$HE;9
h[]_^A\A]A^A_
AWAVAUATVWSH
@[_^A\A]A^A_
AWAVAUATVWSH
`[_^A\A]A^A_
AWAVAUATVWUSH
D$('4n
x[]_^A\A]A^A_
AWAVAUATVWUSH
D$ 3NH
[]_^A\A]A^A_
;A;:u#A
AWAVAUATVWUSH
A;6tFH
h[]_^A\A]A^A_
AVVWSH
([_^A^
AWAVATVWSH
8[_^A\A^A_
AWAVAUATVWUSH
D$ QyX
&e0u+A
e{%|!D
h[]_^A\A]A^A_
AWAVATVWUSH
[]_^A\A^A_
D$`;(tW
D$hEYB9
D$`;(t
AWAVAUATVWUSH
[]_^A\A]A^A_
AWAVAUATVWUSH
D$`EYB9
D$0P4T7H
x[]_^A\A]A^A_
AWAVAUATVWUSH
X[]_^A\A]A^A_
AWAVAUATVWUSH
D$ Z:3
[]_^A\A]A^A_
D$(;p,7H
AWAVAUATVWUSH
x[]_^A\A]A^A_
AWAVAUATVWUSH
D$p=v2
D$HLQt
[]_^A\A]A^A_
AWAVAUATVWUSH
D$`_:P
D$\Y;j
[]_^A\A]A^A_
AWAVAUATVWUSH
D$X;(u*
D$X;(t
h[]_^A\A]A^A_
AWAVAUATVWUSH
D$@GEJ"H
[]_^A\A]A^A_
AWAVAUATVWUSH
D$px{h/H
[]_^A\A]A^A_
AWAVAUATVWUSH
t6#t9I
x[]_^A\A]A^A_
AWAVAUATVWUSH
D$\*B=9
[]_^A\A]A^A_
AWAVAUATVWUSH
x[]_^A\A]A^A_
AWAVAUATVWUSH
X[]_^A\A]A^A_
AWAVAUATVWUSH
\$\}hH
[]_^A\A]A^A_
AWAVAUATVWUSH
D$ |1E
H[]_^A\A]A^A_
AVVWSH
H[_^A^
AWAVAUATVWUSH
D$ DM6%
D$@V,x+H
[]_^A\A]A^A_
AWAVAUATVWUSH
D$0~=^/H
[]_^A\A]A^A_
AWAVAUATVWUSH
D$(AcS
D$(Ld-%H
x[]_^A\A]A^A_
D$07O2(H
D$`EYB9
AWAVVWSH
@[_^A^A_
AWAVAUATVWUSH
D|0}gA9E
h[]_^A\A]A^A_
D$Tx{h/
AVVWSH
X[_^A^
AWAVAUATVWUSH
D$`D;(~pE
D$`D;0~
[]_^A\A]A^A_
AWAVVWUSH
[]_^A^A_
AWAVAUATVWUSH
E;.t%H
%EYB91
%a_B9O
8%4\,H
D$ SbL
[]_^A\A]A^A_
AWAVAUATVWUSH
/;+~<L
D$ *?u&H
?hKNu
}g5ugA
h[]_^A\A]A^A_
AWAVAUATVWUSH
/9)t];npuXD
D$ u5
x[]_^A\A]A^A_
AWAVAUATVWUSH
[]_^A\A]A^A_
AWAVAUATVWUSH
h[]_^A\A]A^A_
AWAVAUATVWUSH
H#D$hH
E;<$uT
x[]_^A\A]A^A_
AWAVAUATVWSH
[_^A\A]A^A_
AWAVAUATVWUSH
D$0'J
x[]_^A\A]A^A_
AWAVAUATVWUSH
[]_^A\A]A^A_
+h,1=?
AWAVAUATVWSH
[_^A\A]A^A_
AVVWSH
H[_^A^
AWAVAUATVWSH
%p|><r[G
P[_^A\A]A^A_
AWAVATVWUSH
(A;/}vD
L$L;/u
L$L;/u
`[]_^A\A^A_
AWAVAUATVWUSH
([]_^A\A]A^A_
AWAVVWSH
[_^A^A_
0A;0tFA
2;1t2A
AVVWSH
([_^A^
AWAVATVWSH
D$@O\$
:mP(7|`
h[_^A\A^A_
AWAVAUATVWUSH
[]_^A\A]A^A_
D;(t-D
D$hD9(~
AWAVAUATVWUSH
t>=t5E
D$|EYB9
[]_^A\A]A^A_
AWAVAUATVWUSH
H[]_^A\A]A^A_
AWAVAUATVWUSH
D$(-aw
h[]_^A\A]A^A_
AWAVAUATVWUSH
D$hc&z$A
[]_^A\A]A^A_
AWAVAUATVWUSH
:#)|QH
[]_^A\A]A^A_
AWAVAUATVWUSH
=?Z\'}
D$ 96*
[]_^A\A]A^A_
AWAVAUATVWSH
8U%R5|
p[_^A\A]A^A_
AWAVAUATVWUSH
D$dY;j
D$H7'*
9;;twA
D$0ds1H
[]_^A\A]A^A_
AWAVAUATVWUSH
D$\"u>
[]_^A\A]A^A_
D$8V_H0H
AWAVAUATVWUSH
l$\E;}
[]_^A\A]A^A_
AWAVATVWSH
>U|%#|=I
H[_^A\A^A_
AWAVATVWSH
([_^A\A^A_
AWAVAUATVWUSH
x[]_^A\A]A^A_
AWAVAUATVWUSH
[]_^A\A]A^A_
AWAVAUATVWUSH
x[]_^A\A]A^A_
AWAVATVWUSH
`[]_^A\A^A_
AWAVVWSH
0[_^A^A_
AWAVAUATVWUSH
[]_^A\A]A^A_
AWAVAUATVWUSH
D$ @\r'L
;CHt")
[]_^A\A]A^A_
AWAVAUATVWUSH
D$@"yS&H
D$pD;8uAD
[]_^A\A]A^A_
AWAVAUATVWUSH
[]_^A\A]A^A_
AWAVAUATVWUSH
5S6|9H
[]_^A\A]A^A_
D$ U~M:
AWAVATVWSH
%3Ox.6YA
=69z/u
[_^A\A^A_
AWAVAUATVWUSH
([]_^A\A]A^A_
AWAVAUATVWUSH
X[]_^A\A]A^A_
AWAVAUATVWUSH
h[]_^A\A]A^A_
AWAVVWUSH
H[]_^A^A_
AWAVVWUSH
x[]_^A^A_
AWAVAUATVWUSH
X[]_^A\A]A^A_
AWAVAUATVWUSH
D$(GXT
D$ 2UI?L
8;>u=L
D$045W
[]_^A\A]A^A_
AWAVAUATVWUSH
h[]_^A\A]A^A_
AWAVAUATVWUSH
h[]_^A\A]A^A_
AWAVAUATVWUSH
D$ O^A
[]_^A\A]A^A_
AWAVAUATVWUSH
D$x8me3
D$lx{h/
[]_^A\A]A^A_
AWAVAUATVWUSH
h[]_^A\A]A^A_
AWAVAUATVWUSH
x[]_^A\A]A^A_
AWAVAUATVWSH
p[_^A\A]A^A_
AWAVATVWUSH
L$h;)~o
[]_^A\A^A_
AWAVAUATVWUSH
[]_^A\A]A^A_
AWAVAUATVWSH
[_^A\A]A^A_
AWAVAUATVWUSH
x[]_^A\A]A^A_
AWAVAUATVWUSH
h[]_^A\A]A^A_
AWAVAUATVWUSH
T$X;(t
x[]_^A\A]A^A_
AWAVAUATVWSH
[_^A\A]A^A_
AWAVVWUSH
D$HDB~
D$x;8~
D$@b8a-H
[]_^A^A_
AWAVVWSH
`[_^A^A_
AWAVAUATVWUSH
D$(77|9H
x[]_^A\A]A^A_
AWAVAUATVWUSH
D$(i@9A
T$d;+}
h[]_^A\A]A^A_
AWAVAUATVWUSH
D$hr[G
D$`_:P
D$ :ac%L
[]_^A\A]A^A_
AWAVAUATVWUSH
D$ Y5+ H
D$(E=/1H
D$ 8}`/L
D$(.,W
D$d2w"<A
x[]_^A\A]A^A_
AWAVAUATVWUSH
D$t:j26
D$@+:O'H
[]_^A\A]A^A_
EYB9A;0tM
AWAVAUATVWUSH
L$d;L$hu
D$dY;j
[]_^A\A]A^A_
AWAVAUATVWUSH
d$xD;.u9
D$`EYB9
[]_^A\A]A^A_
AWAVAUATVWUSH
L$p;)}
x[]_^A\A]A^A_
AWAVVWSH
[_^A^A_
AWAVATVWSH
D$ eS|
h[_^A\A^A_
AWAVAUATVWUSH
D$0/MC
D$ q;j
[]_^A\A]A^A_
AVVWSH
([_^A^
AWAVAUATVWUSH
?/_c4u!
D$ f+8"
L$pD;)~'A
[]_^A\A]A^A_
AWAVAUATVWUSH
D$`Y;j
[]_^A\A]A^A_
AWAVAUATVWUSH
D$def"
x[]_^A\A]A^A_
AWAVAUATVWUSH
D$\Og=
[]_^A\A]A^A_
AWAVAUATVWUSH
D$xY?%1
$MwoHA
D$0d|13H
[]_^A\A]A^A_
AWAVAUATVWSH
`[_^A\A]A^A_
AWAVAUATVWUSH
[]_^A\A]A^A_
AWAVAUATVWUSH
D$8M8E?H
X[]_^A\A]A^A_
AWAVATVWUSH
D$(GTL
D$ -2J
p[]_^A\A^A_
AWAVVWSH
p[_^A^A_
<%N8]&
:'BQ6t<A
AWAVATVWUSH
`[]_^A\A^A_
AWAVAUATVWUSH
D$HTxt
\$t|3H
[]_^A\A]A^A_
AVVWSH
8[_^A^
AWAVAUATVWUSH
D$0dpq3
D$ &~`
[]_^A\A]A^A_
AWAVVWUSH
D$0I6X$H
x[]_^A^A_
AWAVVWUSH
D$()d(;
X[]_^A^A_
AWAVAUATVWUSH
[]_^A\A]A^A_
@@&{</A
AWAVAUATVWUSH
[]_^A\A]A^A_
D$X;D$TM
AWAVVWUSH
h[]_^A^A_
AWAVVWUSH
D$(4O:
[]_^A^A_
AWAVAUATVWUSH
D$(mvQ
[]_^A\A]A^A_
AWAVAUATVWUSH
\2A;tPH
D$dn9*
[]_^A\A]A^A_
AWAVAUATVWUSH
X[]_^A\A]A^A_
AWAVATVWSH
D$($aK0H
D$ V~%
D$l_:P
[_^A\A^A_
AWAVAUATVWUSH
D$X;8~
h[]_^A\A]A^A_
AWAVAUATVWUSH
h[]_^A\A]A^A_
D$@3W:
AWAVAUATVWUSH
7s2|^A
x[]_^A\A]A^A_
AWAVVWSH
[_^A^A_
AWAVAUATVWUSH
x[]_^A\A]A^A_
AWAVAUATVWUSH
L64t<I
D$d_:P
%`H>.:
h[]_^A\A]A^A_
rf|+D;
AWAVAUATVWUSH
L$`;)~>
h[]_^A\A]A^A_
AWAVAUATVWUSH
D$8Y:9<H
x[]_^A\A]A^A_
AWAVAUATVWUSH
l$\A;|!
D$ L<K0
[]_^A\A]A^A_
AWAVAUATVWUSH
h[]_^A\A]A^A_
AWAVAUATVWUSH
D$(C n=
X[]_^A\A]A^A_
AWAVAUATVWUSH
D$ X`\+
D$Xw);
D$8$10
[]_^A\A]A^A_
AWAVAUATVWUSH
D$ _!{
D$x90~FH
D$(pjY!
D$x;0u
L$x;1t
[]_^A\A]A^A_
AWAVAUATVWUSH
h[]_^A\A]A^A_
AWAVAUATVWUSH
D$dY;j
[]_^A\A]A^A_
AWAVAUATVWUSH
D$\yZA
D$(jL^
[]_^A\A]A^A_
AWAVAUATVWUSH
[]_^A\A]A^A_
AWAVAUATVWUSH
X[]_^A\A]A^A_
AVVWUSH
;Ct}/1
[]_^A^
AWAVAUATVWUSH
D$@#5y,H
D$(uW.2H
D$ uC"
[]_^A\A]A^A_
AWAVAUATVWUSH
8e[N'|\A
[]_^A\A]A^A_
AWAVAUATVWUSH
[]_^A\A]A^A_
AWAVAUATVWUSH
L$HHc@<
x[]_^A\A]A^A_
AWAVAUATVWUSH
[]_^A\A]A^A_
AWAVAUATVWUSH
~_=>rRP
HcL$,H
HcD$(H
x[]_^A\A]A^A_
&tO=0Lkzu
H3E H3E
WATAUAVAWH
A_A^A]A\_
ffffff
WATAUAVAWH
A_A^A]A\_
fD9!u7A
UVWAVAWH
0A_A^_^]
WAVAWH
fA96tdH
fA94nu
0A_A^_
u3HcH<H
x ATAVAWH
A_A^A\
WATAUAVAWH
r\H9+t
A_A^A]A\_
UVWATAUAVAWH
fA9<Bu
fC9<hu
A_A^A]A\_^]
WATAUAVAWH
0A_A^A]A\_
u.H9>uBA
\$ UVWAVAWH
A_A^_^]
f9|$^t&f
f9|$`t
UVWATAUAVAWH
L$&8\$&t.8Y
@A_A^A]A\_^]
fD9t$b
@UATAUAVAWH
e0A_A^A]A\]
WATAUAVAWH
A_A^A]A\_
\$ VWATAUAWH
D!l$x@
@A_A]A\_^
D82u&H
D8t$Ht
l$ WAVAWH
A_A^_
AUAVAWH
t$ fff
A_A^A]
@UATAUAVAWH
H!T$0D
uf!T$(H!T$
A_A^A]A\]
L$ VWAVH
UVWATAUAVAWH
pA_A^A]A\_^]
VWATAVAW
A_A^A\_^
ATAVAWH
A_A^A\
\$ UVWATAUAVAWH
H!D$ E
PA_A^A]A\_^]
ffffff
fffffff
USVWAVH
A^_^[]
LcA<E3
9``q/_
*up9a
FI?0Cz
GfuZz
VL!}d
l<]VUV
EsZop5
;8D.mh
c<,`;*
Gc(7g$;d
C4MCi@
M1$!ns
N4${rU
s6/kGT
:BgM06!l\
?[Q@(]
w>503S
M%-\/}
x, 'H2
\!8OR+
:tB!bR
W*yX[SS
=8|Q;>V
U&sEI\
]:U`R$
6\t=~z
{N~u9@
C)?[7/?
^M2O6W
Er](%]
:D</9EZ
Huqa,#m
x8D?xe
ORlNG0QFL
0;#+q%
\=g0Zd
KLgMhsY
u${Mf|
niuCX*k
"z8%":l
%4si$U
']ExUl
yx"\cQ
z('^FH{
P1Gv1#
\62X/e<
OmbMV;J
KI7_v(
0L4*4t
4x>=.h=v
-rBAk}
/EFbV:
49r*G#\
RoVABJ
.reloc
FlsAlloc
FlsFree
FlsGetValue
FlsSetValue
InitializeCriticalSectionEx
__based(
__cdecl
__pascal
__stdcall
__thiscall
__fastcall
__vectorcall
__clrcall
__eabi
__ptr64
__restrict
__unaligned
restrict(
delete
operator
`vftable'
`vbtable'
`vcall'
`typeof'
`local static guard'
`string'
`vbase destructor'
`vector deleting destructor'
`default constructor closure'
`scalar deleting destructor'
`vector constructor iterator'
`vector destructor iterator'
`vector vbase constructor iterator'
`virtual displacement map'
`eh vector constructor iterator'
`eh vector destructor iterator'
`eh vector vbase constructor iterator'
`copy constructor closure'
`udt returning'
`local vftable'
`local vftable constructor closure'
new[]
delete[]
`omni callsig'
`placement delete closure'
`placement delete[] closure'
`managed vector constructor iterator'
`managed vector destructor iterator'
`eh vector copy constructor iterator'
`eh vector vbase copy constructor iterator'
`dynamic initializer for '
`dynamic atexit destructor for '
`vector copy constructor iterator'
`vector vbase copy constructor iterator'
`managed vector copy constructor iterator'
`local static thread guard'
operator ""
Type Descriptor'
Base Class Descriptor at (
Base Class Array'
Class Hierarchy Descriptor'
Complete Object Locator'
CorExitProcess
 !"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~
Sunday
Monday
Tuesday
Wednesday
Thursday
Friday
Saturday
January
February
August
September
October
November
December
MM/dd/yy
dddd, MMMM dd, yyyy
HH:mm:ss
LCMapStringEx
LocaleNameToLCID
AppPolicyGetProcessTerminationMethod
UUUUUU
UUUUUU
=imb;D
/>58d%
VM>cQ6
>jtm}S
)>6{1n
+f)>0'
;H9>&X
*StO9>T
n03>Pu
K~Je#>!
bp(=>?g
BC?>6t9^
K&>.yC
.xJ>Hf
y\PD>!
|b=})>
c [1>H'
uzKs@>
3>N;kU
kE>fvw
V6E>`"(5
?UUUUUU
?7zQ6$
.text$mn
.text$mn$00
.text$x
.idata$5
.00cfg
.CRT$XCA
.CRT$XCAA
.CRT$XCZ
.CRT$XIA
.CRT$XIAA
.CRT$XIAC
.CRT$XIC
.CRT$XIZ
.CRT$XPA
.CRT$XPX
.CRT$XPXA
.CRT$XPZ
.CRT$XTA
.CRT$XTZ
.rdata
.rdata$zzzdbg
.rtc$IAA
.rtc$IZZ
.rtc$TAA
.rtc$TZZ
.xdata
.edata
.idata$2
.idata$3
.idata$4
.idata$6
.pdata
.gfids$y
.rsrc$01
.rsrc$02
zdlte671pv2c.exe
VirtualFree
VirtualAlloc
GetProcessHeap
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
ExpandEnvironmentStringsA
GetConsoleAliasesW
LoadLibraryA
GetProcAddress
VirtualProtect
KERNEL32.dll
OemKeyScan
PhysicalToLogicalPointForPerMonitorDPI
EndPaint
ChangeDisplaySettingsA
AdjustWindowRect
USER32.dll
HWND_UserSize
CoLoadLibrary
GetClassFile
CreateDataAdviseHolder
CoCreateGuid
HWND_UserUnmarshal
NdrProxyForwardingFunction28
ole32.dll
PtVisible
D3DKMTReleaseKeyedMutex
D3DKMTReclaimAllocations
D3DKMTOpenAdapterFromGdiDisplayName
SetDeviceGammaRamp
D3DKMTAcquireKeyedMutex2
GDI32.dll
SHEvaluateSystemCommandTemplate
SHELL32.dll
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlUnwindEx
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
GetStdHandle
WriteFile
GetModuleFileNameW
MultiByteToWideChar
WideCharToMultiByte
ExitProcess
GetModuleHandleExW
GetACP
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetStdHandle
GetFileType
GetStringTypeW
LCMapStringW
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetFilePointerEx
CloseHandle
CreateFileW
WriteConsoleW
RaiseException
Ll=YJp
%`X1`(
BfFf)h!
7>W]K;
Bzi7U;
rwg*&"
y&P{Gf
RI_Xe
? P9&]}
LHG5SN
j&-ft:
7d*7t/+
x'f@Q*
B"7[m KX1eZ
EHd8gQ
IocJVR/
Qw1ZUU
S2(hw0w
uH BRj$L
*J4<F-
7il{YO
;Tu,&
mfZ7Z$
;*3c!\
;;}pqogr*
(`[R4M
~\Q+s|
f]w&</
[|Lbl
0/4|Co
}9Ag/!
!&%wFuT
qc#0ma
8,w9dD
GTZ:~}b
7Uq5Bf6
SFByL2
>saWT0
7j=at3
^>N,*!m7
e{a_dG
sGBEV)5v
ZEhj\+
+tE<t|}
$w&qmd
044zEC
8>'Lrs6
*To_B:Y:
g}) tK
"k^=#~
N ,&#f
hjj)4 ,@O
Xzy37_e
qHIlfQv
-kK%E1
1*AHv8V2
U;JD8+m
X]c@bq
LI\ju"H
4PV-@\
?>ukE?
1|r:Wf
,_wU1*=Ob
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
XA:0vZ
PdxXFh
;v/mu)
w#*x^P
;vV5o!
OMn:BL
c+Gw|Ik
|Q~N31
Z&X6`bG
Lq:EW|
)9jo{8
DyGUN!
`)OX`H
advapi32
api-ms-win-core-fibers-l1-1-1
api-ms-win-core-synch-l1-2-0
kernel32
mscoree.dll
((((( H
Sunday
Monday
Tuesday
Wednesday
Thursday
Friday
Saturday
January
February
August
September
October
November
December
MM/dd/yy
dddd, MMMM dd, yyyy
HH:mm:ss
api-ms-win-core-datetime-l1-1-1
api-ms-win-core-file-l1-2-2
api-ms-win-core-localization-l1-2-1
api-ms-win-core-localization-obsolete-l1-2-0
api-ms-win-core-processthreads-l1-1-2
api-ms-win-core-string-l1-1-0
api-ms-win-core-sysinfo-l1-2-1
api-ms-win-core-winrt-l1-1-0
api-ms-win-core-xstate-l2-1-0
api-ms-win-rtcore-ntuser-window-l1-1-0
api-ms-win-security-systemfunctions-l1-1-0
ext-ms-win-ntuser-dialogbox-l1-1-0
ext-ms-win-ntuser-windowstation-l1-1-0
api-ms-win-appmodel-runtime-l1-1-2
user32
api-ms-
ext-ms-
zh-CHS
az-AZ-Latn
uz-UZ-Latn
kok-IN
syr-SY
div-MV
quz-BO
sr-SP-Latn
az-AZ-Cyrl
uz-UZ-Cyrl
quz-EC
sr-SP-Cyrl
quz-PE
smj-NO
bs-BA-Latn
smj-SE
sr-BA-Latn
sma-NO
sr-BA-Cyrl
sma-SE
sms-FI
smn-FI
zh-CHT
az-az-cyrl
az-az-latn
bs-ba-latn
div-mv
kok-in
quz-bo
quz-ec
quz-pe
sma-no
sma-se
smj-no
smj-se
smn-fi
sms-fi
sr-ba-cyrl
sr-ba-latn
sr-sp-cyrl
sr-sp-latn
syr-sy
uz-uz-cyrl
uz-uz-latn
zh-chs
zh-cht
CONOUT$
AFX_DIALOG_LAYOUT
Property Page
MS Shell Dlg
Text 1
Italic2
License
Antivirus Signature
Bkav Clean
Elastic Clean
DrWeb Clean
ClamAV Clean
CMC Clean
CAT-QuickHeal Clean
McAfee Artemis!C4539ADB4566
Cylance Clean
Zillya Clean
AegisLab Clean
Sangfor Clean
CrowdStrike win/malicious_confidence_90% (W)
Alibaba Clean
K7GW Clean
K7AntiVirus Clean
BitDefenderTheta Clean
Cyren Clean
Symantec Clean
ESET-NOD32 a variant of Win64/GenKryptik.FEGA
APEX Malicious
Paloalto Clean
Cynet Clean
Kaspersky Clean
BitDefender Clean
NANO-Antivirus Clean
ViRobot Clean
MicroWorld-eScan Clean
Rising Clean
Ad-Aware Clean
Sophos Clean
Comodo Clean
F-Secure Clean
Baidu Clean
VIPRE Clean
TrendMicro Clean
McAfee-GW-Edition BehavesLike.Win64.Generic.gc
FireEye Generic.mg.c4539adb4566822a
Emsisoft Clean
SentinelOne Clean
Jiangmin Clean
MaxSecure Clean
Avira Clean
Antiy-AVL Clean
Kingsoft Clean
Microsoft Clean
Gridinsoft Trojan.Heur!.02092023
Arcabit Clean
SUPERAntiSpyware Clean
ZoneAlarm Clean
GData Clean
TACHYON Clean
AhnLab-V3 Clean
Acronis Clean
VBA32 Clean
ALYac Clean
MAX Clean
Malwarebytes Clean
Panda Clean
Zoner Clean
TrendMicro-HouseCall Clean
Tencent Clean
Yandex Clean
Ikarus Clean
eGambit Clean
Fortinet Clean
Webroot Clean
Cybereason Clean
Avast Clean
Qihoo-360 Clean
No IRMA results available.