Static | ZeroBOX

PE Compile Time

2021-05-17 15:11:38

PE Imphash

62f768540236a83c83fcc280f2976ac9

PEiD Signatures

Armadillo v1.71

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00001000 0x000044fa 0x00005000 6.10384115092
.rdata 0x00006000 0x00000c00 0x00001000 4.35667679223
.data 0x00007000 0x0000359c 0x00003000 0.716072739633

Imports

Library KERNEL32.dll:
0x406000 GetProcAddress
0x406004 LoadLibraryA
0x406008 CloseHandle
0x40600c WriteFile
0x406010 CreateFileW
0x406014 GetModuleFileNameW
0x406018 GetConsoleWindow
0x406020 GetCommandLineA
0x406024 GetVersion
0x406028 ExitProcess
0x40602c HeapAlloc
0x406030 TerminateProcess
0x406034 GetCurrentProcess
0x40603c GetModuleFileNameA
0x406048 WideCharToMultiByte
0x406054 SetHandleCount
0x406058 GetStdHandle
0x40605c GetFileType
0x406060 GetStartupInfoA
0x406064 GetCurrentThreadId
0x406068 TlsSetValue
0x40606c TlsAlloc
0x406070 SetLastError
0x406074 TlsGetValue
0x406078 GetLastError
0x40607c GetModuleHandleA
0x406084 GetVersionExA
0x406088 HeapDestroy
0x40608c HeapCreate
0x406090 VirtualFree
0x406094 HeapFree
0x406098 RtlUnwind
0x40609c VirtualAlloc
0x4060a0 HeapReAlloc
0x4060b0 GetCPInfo
0x4060b4 GetACP
0x4060b8 GetOEMCP
0x4060bc MultiByteToWideChar
0x4060c0 LCMapStringA
0x4060c4 LCMapStringW
0x4060c8 GetStringTypeA
0x4060cc GetStringTypeW
Library USER32.dll:
0x4060dc MoveWindow
0x4060e0 wsprintfW
Library ole32.dll:
0x4060e8 CoUninitialize
0x4060ec CoCreateInstance
0x4060f0 CoInitialize

!This program cannot be run in DOS mode.
`.rdata
@.data
D$ ShelQP
D$,lExe
D$0cute
D$4ExW
uySVWh
QWh\p@
VRh0p@
D$XSetFP
D$`ileP
D$doint
D$PClos
D$TeHan
D$Xdle
D$,GetF
D$0ileS
D$4ize
D$DRead
D$HFile
D$8Crea
D$<teFi
D$@leW
L$xhlp@
L$hPQR
YYh p@
8t9UW
SS@SSPVSS
t#SSUP
t$$VSS
_^][YY
t.;t$$t(
VC20XC00U
PPPPPPPP
PPPPPPPP
tFGQPS
^}%95d
__GLOBAL_HEAP_SELECTED
__MSVCRT_HEAP_SELECT
runtime error
TLOSS error
SING error
DOMAIN error
- unable to initialize heap
- not enough space for lowio initialization
- not enough space for stdio initialization
- pure virtual function call
- not enough space for _onexit/atexit table
- unable to open console device
- unexpected heap error
- unexpected multithread lock error
- not enough space for thread data
abnormal program termination
- not enough space for environment
- not enough space for arguments
- floating point not loaded
Microsoft Visual C++ Runtime Library
Runtime Error!
Program:
<program name unknown>
GetLastActivePopup
GetActiveWindow
MessageBoxA
user32.dll
H:mm:ss
dddd, MMMM dd, yyyy
M/d/yy
December
November
October
September
August
February
January
Saturday
Friday
Thursday
Wednesday
Tuesday
Monday
Sunday
SunMonTueWedThuFriSat
JanFebMarAprMayJunJulAugSepOctNovDec
GetProcAddress
LoadLibraryA
CloseHandle
WriteFile
CreateFileW
GetModuleFileNameW
GetConsoleWindow
GetEnvironmentVariableW
KERNEL32.dll
wsprintfW
MoveWindow
USER32.dll
CoUninitialize
CoCreateInstance
CoInitialize
ole32.dll
GetCommandLineA
GetVersion
ExitProcess
HeapAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
GetLastError
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
VirtualAlloc
HeapReAlloc
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
InterlockedDecrement
InterlockedIncrement
!This program cannot be run in DOS mode.
`.rdata
@.data
.pdata
@.rsrc
@.reloc
WAVAWH
0A_A^_
t$ WAVAWH
\$XHcK
0A_A^_
(t$0w+
(t$0wn
9AX}43
SVWAVH
8A^_^[
WAVAWH
|$ AVH
H3E H3E
.text$mn
.text$mn$00
.text$x
.idata$5
.00cfg
.CRT$XCA
.CRT$XCZ
.CRT$XIA
.CRT$XIZ
.CRT$XPA
.CRT$XPZ
.CRT$XTA
.CRT$XTZ
.rdata
.rdata$r
.rdata$zzzdbg
.rtc$IAA
.rtc$IZZ
.rtc$TAA
.rtc$TZZ
.xdata
.edata
.idata$2
.idata$3
.idata$4
.idata$6
.data$r
.data$rs
.pdata
.rsrc$01
.rsrc$02
Qt5Concurrent.dll
??0BlockSizeManager@QtConcurrent@@QEAA@H@Z
??0BlockSizeManagerV2@QtConcurrent@@QEAA@H@Z
??0ThreadEngineBase@QtConcurrent@@QEAA@XZ
??1BlockSizeManager@QtConcurrent@@QEAA@XZ
??1ThreadEngineBase@QtConcurrent@@UEAA@XZ
??_7ThreadEngineBase@QtConcurrent@@6B@
?acquireBarrierSemaphore@ThreadEngineBase@QtConcurrent@@QEAAXXZ
?blockSize@BlockSizeManager@QtConcurrent@@QEAAHXZ
?blockSize@BlockSizeManagerV2@QtConcurrent@@QEAAHXZ
?blockSizeMaxed@BlockSizeManager@QtConcurrent@@AEAA_NXZ
?blockSizeMaxed@BlockSizeManagerV2@QtConcurrent@@AEAA_NXZ
?finish@ThreadEngineBase@QtConcurrent@@MEAAXXZ
?handleException@ThreadEngineBase@QtConcurrent@@AEAAXAEBVQException@@@Z
?isCanceled@ThreadEngineBase@QtConcurrent@@QEAA_NXZ
?isProgressReportingEnabled@ThreadEngineBase@QtConcurrent@@QEAA_NXZ
?run@ThreadEngineBase@QtConcurrent@@EEAAXXZ
?setProgressRange@ThreadEngineBase@QtConcurrent@@QEAAXHH@Z
?setProgressValue@ThreadEngineBase@QtConcurrent@@QEAAXH@Z
?shouldStartThread@ThreadEngineBase@QtConcurrent@@MEAA_NXZ
?shouldThrottleThread@ThreadEngineBase@QtConcurrent@@MEAA_NXZ
?start@ThreadEngineBase@QtConcurrent@@MEAAXXZ
?startBlocking@ThreadEngineBase@QtConcurrent@@QEAAXXZ
?startSingleThreaded@ThreadEngineBase@QtConcurrent@@QEAAXXZ
?startThread@ThreadEngineBase@QtConcurrent@@QEAAXXZ
?startThreadInternal@ThreadEngineBase@QtConcurrent@@AEAA_NXZ
?startThreads@ThreadEngineBase@QtConcurrent@@AEAAXXZ
?threadExit@ThreadEngineBase@QtConcurrent@@AEAAXXZ
?threadFunction@ThreadEngineBase@QtConcurrent@@MEAA?AW4ThreadFunctionResult@2@XZ
?threadThrottleExit@ThreadEngineBase@QtConcurrent@@AEAA_NXZ
?timeAfterUser@BlockSizeManager@QtConcurrent@@QEAAXXZ
?timeAfterUser@BlockSizeManagerV2@QtConcurrent@@QEAAXXZ
?timeBeforeUser@BlockSizeManager@QtConcurrent@@QEAAXXZ
?timeBeforeUser@BlockSizeManagerV2@QtConcurrent@@QEAAXXZ
?waitForResume@ThreadEngineBase@QtConcurrent@@QEAAXXZ
??0QRunnable@@QEAA@XZ
??1QRunnable@@UEAA@XZ
?globalInstance@QThreadPool@@SAPEAV1@XZ
*?tryStart@QThreadPool@@QEAA_NPEAVQRunnable@@@Z
??1QUnhandledException@@UEAA@XZ
??0QUnhandledException@@QEAA@XZ
??0ExceptionHolder@QtPrivate@@QEAA@PEAVQException@@@Z
?setException@ExceptionStore@QtPrivate@@QEAAXAEBVQException@@@Z
?throwPossibleException@ExceptionStore@QtPrivate@@QEAAXXZ
??1ExceptionStore@QtPrivate@@QEAA@XZ
?reportException@QFutureInterfaceBase@@QEAAXAEBVQException@@@Z
?setProgressRange@QFutureInterfaceBase@@QEAAXHH@Z
?setProgressValue@QFutureInterfaceBase@@QEAAXH@Z
?isCanceled@QFutureInterfaceBase@@QEBA_NXZ
?isPaused@QFutureInterfaceBase@@QEBA_NXZ
?waitForResume@QFutureInterfaceBase@@QEAAXXZ
??0QSemaphore@@QEAA@H@Z
??1QSemaphore@@QEAA@XZ
?acquire@QSemaphore@@QEAAXH@Z
?release@QSemaphore@@QEAAXH@Z
?qBadAlloc@@YAXXZ
?allocate@QArrayData@@SAPEAU1@_K00V?$QFlags@W4AllocationOption@QArrayData@@@@@Z
?deallocate@QArrayData@@SAXPEAU1@_K1@Z
?sharedNull@QArrayData@@SAPEAU1@XZ
?deadlineNSecs@QDeadlineTimer@@QEBA_JXZ
?current@QDeadlineTimer@@SA?AV1@W4TimerType@Qt@@@Z
?maxThreadCount@QThreadPool@@QEBAHXZ
Qt5Core.dll
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
InitializeSListHead
IsDebuggerPresent
KERNEL32.dll
_purecall
__CxxFrameHandler4
_CxxThrowException
memcpy
memmove
memset
__current_exception
__current_exception_context
__C_specific_handler
__std_type_info_destroy_list
VCRUNTIME140.dll
VCRUNTIME140_1.dll
terminate
_initterm
_initterm_e
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_execute_onexit_table
_cexit
api-ms-win-crt-runtime-l1-1-0.dll
api-ms-win-crt-heap-l1-1-0.dll
.?AVQException@@
.?AVtype_info@@
.?AVThreadEngineBase@QtConcurrent@@
.?AVQRunnable@@
<?xml version='1.0' encoding='UTF-8' standalone='yes'?>
<assembly xmlns='urn:schemas-microsoft-com:asm.v1' manifestVersion='1.0'>
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v3">
<security>
<requestedPrivileges>
<requestedExecutionLevel level='asInvoker' uiAccess='false' />
</requestedPrivileges>
</security>
</trustInfo>
</assembly>
DigiCert Inc1
www.digicert.com110/
(DigiCert SHA2 Assured ID Timestamping CA0
210101000000Z
310106000000Z0H1
DigiCert, Inc.1 0
DigiCert Timestamp 20210
http://www.digicert.com/CPS0
,http://crl3.digicert.com/sha2-assured-ts.crl02
,http://crl4.digicert.com/sha2-assured-ts.crl0
http://ocsp.digicert.com0O
Chttp://cacerts.digicert.com/DigiCertSHA2AssuredIDTimestampingCA.crt0
QJxy6z'
dwc_#Ri
DigiCert Inc1
www.digicert.com1$0"
DigiCert Assured ID Root CA0
160107120000Z
310107120000Z0r1
DigiCert Inc1
www.digicert.com110/
(DigiCert SHA2 Assured ID Timestamping CA0
fnVa')
http://ocsp.digicert.com0C
7http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0
4http://crl4.digicert.com/DigiCertAssuredIDRootCA.crl0:
4http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0P
https://www.digicert.com/CPS0
8aMbF$
V3"/"6
DigiCert Inc1
www.digicert.com1+0)
"DigiCert EV Code Signing CA (SHA2)0
200629000000Z
220722120000Z0
California1
Private Organization1
C10678791
California1
Newark1
Logitech Inc1
Logitech Inc0
iY|@Dh
US-CALIFORNIA-C10678790
1http://crl3.digicert.com/EVCodeSigningSHA2-g1.crl07
1http://crl4.digicert.com/EVCodeSigningSHA2-g1.crl0K
https://www.digicert.com/CPS0
http://ocsp.digicert.com0H
<http://cacerts.digicert.com/DigiCertEVCodeSigningCA-SHA2.crt0
DigiCert Inc1
www.digicert.com1+0)
"DigiCert High Assurance EV Root CA0
120418120000Z
270418120000Z0l1
DigiCert Inc1
www.digicert.com1+0)
"DigiCert EV Code Signing CA (SHA2)0
+.+1Xf
http://ocsp.digicert.com0I
=http://cacerts.digicert.com/DigiCertHighAssuranceEVRootCA.crt0
:http://crl3.digicert.com/DigiCertHighAssuranceEVRootCA.crl0@
:http://crl4.digicert.com/DigiCertHighAssuranceEVRootCA.crl0
.http://www.digicert.com/ssl-cps-repository.htm0
DigiCert Inc1
www.digicert.com1+0)
"DigiCert EV Code Signing CA (SHA2)
DigiCert Inc1
www.digicert.com110/
(DigiCert SHA2 Assured ID Timestamping CA
210505021913Z0/
^/;z<6#
8.5.210.26-electron.0
,WLJ_
*lk8RXVt(
syOM'<
unz*iB
HOTC>W
L!iImEo
CY:Yep
KjnA`s
$~@jnA
3zG*v&
5n%iwxJ7R
=WQ]}}CM<
P]~UCe
zCU]Yu
%KH'.x
t;#fmy
PsiuEE
g7>HWr
{/jqzT
yrM;My"Ky
6TEqNH
=6wPYC
'CF%AX
9;{,TU?
l4b6a0
vv}.](
w:$@z'
04sFhfh
WCMMum}
$<\^]S?
lLn"l?
jiCx)wi
"\qemti
YOkVu]
7h9fhO
^5&sL1
Fg<Y3R@
%iIFmUN
?S.8VY
Tj-*)J
iK@vYb
H:r,Kx
RxTp$rZ0
~'fu62
q8lX@ l
`}lA8
xFBnKwi
@Z%g>;
lar;gf
})&.!J{(
'B@!_g4
O.6N#j
kS`=,`&
n`zX`>
b{8[ L
4"c}Wz
JXw(a}]
$gMPRb'*
<G6Z\`
U~?Ug%
Jfx>"c
6Y{({/qd
S(<'7\
Z'|A4Dm
/Pc:ki
NCFcWFo
B+_hCj;
_|-;\8^FLf
IcGAbL*A
DAbL*A
]#O+_nC
}Y'|f2
DAbL*A
fzKz(5
%4p&oS
z)!Jw<eK
;:1d!a
m)#"f;
J$Gx"_
wdxA)3
GM0h`m
x3}UxW
z><t[S
#;\q!2|M
Z{J_WF
8v,)cml
)U]bc[
';VHw~{
Q&t0ik
8$ COW
IGkn){
o!PEVK
n9qz7>
Wryp~</i
y4)Gq]+U
boXEL$*
cFl1q
U!!\\%P
>|&?k{7h=
*l-&,g
?+an$/e
z?%)c>
:.fs;,
-/rs)&-oi>
ifk'!m
JCa10$/
QT*9MZ
mQ"md}
..&KDm
vn)c/$
b59)5L
k/k-j8:
d-h8[cGK
YjebNd
z37y}d
&~Z- )
8*\Cy_B
&X(fh!<
wuQ.N
g=?m0v
m-f.`$
5H`(c*
7\Qsj0G
'B-c)f,
yYTAIt|)
A f$d@
9_-k$(d
5zgl-CX~i
@$[$A|L
vB~>Tc
>hi4N[
j"4tm,
+K2]$+
}.s'?o?
g{_)g)
`F4T:gI
~2//-,
b(h`'Pu
L>R&O;f
y#'XW?
b+c~p
z3>Ug@
vGHyZ&
~JA4<V
,.ig%`
0am:}X
d~f|dr|
KH,h(K
>e7 fQM
z8j&k,
m,o&k%
`,9(k|
*h /%>FJ
d86U9z
j0>[*#~
n )Gq^
}t0,l$/
$?ck'$)
j`on".
Cf-d#!
<b+gi :
<l9"i?4
) j+b
B>$=z!gn
2e)OyV
9:uZBM
uie&U=
CYTAIt|)
XXEU=
D4/AIk
jXF3-$
'[XN;w,
=t5;t+%
KwHHqZ
IAS3(Z
~z$'?i
fbYPg[
3kNHdc
44OF2:
b47} z
8*Tvj
]bwD$`
}G19/X
~&,)io
6q-Gb~[
K{]M=)
}-nf/B
O(ZT4t&b
yl8(kO
gai =#
!"}p{v
7N,meM
k(MM/w
MF3oI'
XU(+fS
oM@YT1
>gV.{J/
!r2nk7<
q0-cd9
q'%b^W
D&KO*D
K2Q.)i
"aF,J%!R
gl'cR2
&(dh#<
)2s'?i
YNE69U-
[J;2?7:.
P#~HB
P(dHTZ
%\fTx.
zCv-LP
ENjh c
m'(LD'/
]Iz]d@
(1tI,3Y
IQ&k/[
83?b*/
71ic/'
h,-g05`
i')GE
\j+"-kad=
z<Fz,d3
<l:h<n:|
jXB :X
.had+j
$L*[s1
=&z?W7
mY\se=O
T72Q6z
TO~2{HC
}r3n/j
TAIt|)d
R;I)e;
JL72I|
`-'%i,
4<\]*
g//-%.
#e-<uk
z.%.(&
-{3idl
f&(r2\
l&j+j>
.j;zQE?z
qZt_l`='%J
-s'?i8
kr"?14
#F1?-g
sin+-P
HWu`G&
(.h`i#o
]g,ma-
I)EC?*
./MkBI
8(4"TX&
>u')`e
klDJ[i
VyC!CB
&*`%ja
9/9p!gq8N
q8j)>8
h`y58p
F\D6Ijg
g=0 fA
h%CN-"
j8;kh<
C,~w:7k
i`5/w..
KR(u4s
kr"?1,
z4/ab8
k/TD~qu
t 'cC~
-PS(Mc
-$LI'Vd
(mb"&j
)he9SMj
y>'s020
B_k]o}T
h,Y.n(
Z%Rk56
_jg/bp
eNJgc""
w/=6"4
0l2H}mW
k56CD5SC
*PZ70{
&$R^h.
Ee5&ap;
ID#]bw
.z5e^*
:j\]-*
*ed,/g$
3u'?i8
!"'|q\\
).><=?g
.CdzmSe
*0eg8t
gegege
|r;:wv;
jdVTC~
q8j>s"4s
!fqi3i
LA.;7X
8GCO}xB
y:*)M@fS\
:=?9|l)e
QlySD.
a`&(nbn
Xa-5}h.
i9)pj{
hOTm f
-c`10*
S>b|oF
@"10a'
q; 2"<,
eXjW'4
As2"`i@
'w3/@[
AMgv{f
bDZ5m-.
Hb'8}b
)g%nBnB'
NN[]GKc
~$)a+i
}B+(^PL
{=T DO
s0!vk.
v*fy;O`S
Tm}DTm
C/i:i:i
mbkjHO
N}klPzb
3K+%sq
q\It"!
UzbdO[/DQ
k&d+z
9"a;>&n
V3grLt
2}6sYV
c-(j]T
,&?kzu[[
;}/eUk
;i12j/
p`I9f
KXFF3b$
ufi7t~?
.BHj"$
@j<</\
(miL:
!EC1u9Y*
5(d fof
J'?Dvi
b,'k- ;
cFi .om,
JO/oO'
Yu2m.'.
9+}Y]0,'
kC}T'`
=a-MAH
n+e-{I]
l{akw}
#)$KE8zb
S[+/!gg-
__.&&n
fJCll)
.w_Mky
lY%ZeD.
OnKw<!
,.vsat
o6k,l>
;e8zb#z
JnKlHw
qe&`(&
ml+c'[
^FZK3{
,PkR$k
w 1A<P
v$af3y
:=?$8W
)s'c6i
/>F#Yd
Gb,!oe-
@.SV;^P
]uSSuh
jc&-d
.({'+#
zbGJi&
'r63wrs
W*fyQ
WOD\W
jkI~d`@O
[AS8.Pf
h( )wz.
As5':T
\n(f*d}1
W9C*/h
.zoAz<
>4n+gjU
IQ&k/[
)P22;/
-+/MPo
'|1jLO
{1MNw+r
KjCU-
ELv9e{
K=e<>Sl
6I%M9V
u7=Hn
?N94C>
%CTbrT
^/HS?/h*
5}4'DU
;u*1{b
KR<2bl
YbwEQG
\S)/((
Zk}J\9
$;u,j+V
FzRhNl
mR&,/w
vsHUCZIo
o/n&/
]Rwx@vK
3.'>5h6
k?o9i;s
fn;s'?o7
C_:| 6i
.{5#r%~
nZkP{h
'g>c3~
#59<Hh6
8qn')%?
emkcOr
zCvO_N
>k'7K[|<*
m-m%nz]
f\X"$,
a3rJC\
)Loh]:
im*c+.=
($)OyO
' f3ju,
GnkUhw
g+/f2_
mf!k/K
Y|:i?<
0yNsD[
-'WBd/
lkdP^
`gd\R
dI>L27
e]e_o"/O$
p}_[b%
PMy4a;
}H)]sF'
;hv#uq)w
3hMYyZ
-Lv85
2xa=k2S`
ncl'*V1
;?ESL=
'MPMWz
%9Ub#G
Gx0>7a
/)7p!'
oF=%&
|lq8|
gOFwee6
jl.B7^d
=hx+Q5Mo
q`cED$
$_F*Iy"
BRKTdL
eepGW/.
!LD+eg
n~j@!x
,'Ot?\t
[Z%0OZ
_ZmxOZS
Y"db+#
8uOB#~
g8tFx|2
WGcLNk
8eVG~Ov
Q$+~s;
z} 'r/
7:g`mjg
gjg@]zg
WZgj&C
aOP}|1
)$zWPy
L1CNze
SlkZC~S
bRZ8A,UZ
L+i<r&
m\nM@g
x]ns~g
ZIh3a z
Gjcob~
y3[SR*
XpCk0i
7<[PQf^
W'ffil
2:b[k*
Snk&&C
SK%l+g
3nW|J,
e-q<%P
hCRvmf
hk03hjh
;[m9:/
20#>?*
fZ_63Z
SZPf$&
5<"S>L)
9UW+TXe(
$)xufS\
-!d*k}
d1?&(+m
%w{e1u
>R^2Wy
+%/#-%b
kSuVIo
_d-)`+
:q("k&
H"oALk^
YFSK|w
UV,"XR!
-bVBpg
`/*c~3
>.H-t=
t-:fb6
rl(V:C
/)D:j
S|kjfk
<2l+u2d ciH
!"OD!oe
;_[,j4
&bF@87
(f)-d7
J8}d8:
$k&*&k
/vC?[J
0dd#l@
YFGMKa
I26)iU
n"/ge,
zG(]&x-
G7m9pe
#fkfsN
/]1{b
ZOe87NH
2/h!f4|N
Mk,"du
y""0hR
sk+'N
[!gye/
^d-}5j
l(np.uG
9"&ws;
EAlj#.
L@L@d#
vI6)fj(
a"t3B"
+:e#bd
AK 6v,&
z<?qmd
;+w\%"
=dH\1
h&(",1?
MACL g
P+'BM(e
'+fkk"
q|svhi
-4HQ-gYsG
]Vh&[ki
dg+(o`
1+o{kci
j@.IrF
chf)$(h
Yc-9ri
ci!cF
!h!/!$<;
i,*$"*
65g*fh
ubK/6_
y49|a
@Fa]E5w
j]&y=&j
OC-.d~
{g7vo/"'
bbK/n{
>o+(ldh
IGB%MY
~`o IAL
Q&`0;',)'
o<}3,Y&Z
OFb`<@
3kz r6H
`YkN9`
b-djam
8~Vm^EK
*j`&n(`
Qk*K$I$
y(~xEq[#ANw
!"fR]!
tCMal?",
0-#91kk
&`"l+e4Rw
a'i+e53
Y8tj ,W
&*m,"B
p%HX5*B
Kp~sz.u"
{ORpn'
t/PZt9
6nb/"/
1l+a&l)oB
i-d/)'
=j*fi(v0
/i$#/(4
d6qo'
/,*-(m*i)
wE"l-S
q69JcM
k84w?i
1o(3pn
jd8n;e
$hd(6pn
#$.h*l
\{UMa$d
vjQYe%
ti,9NZ<`5
Z5S;?_
>\*$!i
TfUg"d7
)br3($
rrr3!,
qd#l+/
Pf(yHM
&f{o-
kkN<LP
*DhgW[
+vz*^pp
%&fm,}$s
<k^P%j(
/m!vf6
g]s"O,
2}FJi.
m% &`e=?
hdHTqt
FYn\M`
]W$_o38
F<zI>eZ
jm.ag~;
>vKTI
=7&*UMW
!nh$co
uJ'#e0
fJI=;Y
yKu1?0
FSOr?S
a-s?a$
*l)GH &
gm~6<.l
kIhg!l
-3a?("R
d*_QP}W@
*%e7=c
Q `]??
.C_n:dt>
:F:WZG
bW?b[b
.h!/"*
KrW<t/
[a%a*h
L#)eg,
aL#~.|
+m)`*&
bj`){w
6Gx~mn
.*oYT_
}]8bgJ
PV$ga&
M$"@Pn@
h,')",U7
mm,cIH
j'cAa<
c(%`&e7
&h$q}m
wPP5dg
'QF8%xH
#"@Pn@
}sy'oAD
5dVM>i
u.t.t8
ihf8<C
bx;}x^
DfhP7a
#'l*t2l
RE b&[
aMf)r?
]:>.h!
@T&2 k%L
NZh./4:
>'NJ'&
&a,/ ,!
MjfJDQ
&pq$
g~rkvQN:
x"09o!
km!x,t
{gka(j
9h,*Ra
'`E'<e
a/v7*j
h/zIQv
$f<>fJ
Z-RF+'
l*t2oi
b`a,(cjiq8
=$<8 !
<YxO~s
i?A#Hv
hkjMV^
[W*UX&
bd86*.*
cb((rs
b2_wiP'
5`."mg<~
vx*&l.da*f
&fm,LE)
F9;FD_
H0_2"/
%mR+~L-
=RwcHN
1p'gsA
okdh62
:`a*WD0f
8{-jp;
;qCgo'
[Tv`E'_
02V'Z,
`'a*la
Qo&N`bkle
u8k9um'
"1vd%c
#/R]!b
X4+;FSMVx
qyn0w?@H
`memHO
|~%17d
BkU~;o
,20%u2
X+e!kKr
cJGu(sY
I0U/vM-P
"/h+!'
/-[S.
n`V[c-e
Im,(n!
k^R1|g
7h&@HM
Cgs6"cr
Ikgf5-
a/`.a/
16(l+k,$WZ
l5TS=:
v$|p.mK
U7"j&n
oqtj-a
$g^>C18
\f*xuY
nr?Q}#
AFRtjM|[
S0x6.a?
fKAgm
X|mAmq
Sl/x2k
x-W;HTe,Q
O!d6h6
j4rh._A
2u=i12
jXjW'4
KWqnkN
h$#e1?
oMo0QD
.Q^%%-
2$&`'a)#
:>bV3\
&:wYT,G
U/"XT/
,*e6<E
>-*Bn
y*(GF*
g1w"+dR
7"E1"l
&`82&,3<
,e#, $*/
u(]*cb
-%>_(s
T0e!g#
: M62m
aWI ;r~
DFgKc
9j=GYtD
idek"l
?hjyqg
R- m!69V
C<jn~0!l
'j3?'t;
"l*dm$
R\uJWr
Okipvd
S~ ,nJ
FQfKpu
k5jXYs
4`&(jd7
o/om,"k
f?RF`*$
b}C^/+
eOMLXR
oi=;d)
d/NC!f
<wm&f#
<sm"d"-
I".CL e("&
y~M!,k
=de._
l.g,'|
|3yN`
@JGNkt
~|*MR;p
6^IFDPN
j#.he##
MCobZw
mg+J|L
(m*%sa
<0[$vY
xJ0bTo
=(T@Km'
eKWyeC
A.e+$,
.7*Wu;
-8 <Po
+_LyON
eQDdqn"
,2;m5s#e.,
h?4.sd
!.@lq[
tlsZ4K9
"*~vCOJ
f/j#ac
8m74/"
5=$=9a#/M~
^4m#$+fCJDJ!Q
6>G'~u
#X]& v
Bl(fbG
"d07$
)m4:",/!
i%GgCk
q".ANf
"(."{O
{E0-b2j
k:ek"f
a'c*s=&
N[]..nm
Wm,lm"
AF(df +
W4AXIC
^#e87@,
v`*l"f
)4y&I6
4$oj,)o
:j/dG]6.
+dHH b{.
>1g"l+g
w3_$*2
dT^,($
J) h.
&gC-O<v2
:`* fl&(
_e,2{e
GHLiu2<
"z0Y3}
l-#q?ek
FPXQtjXYT
g#m(n/
7!^M|5
Md 7/W
G.ha&P
$d",6rS
"l(d l
"$/9zl
vR&\Pf
tXV*$&
g!:
EzsotQ)M
J\<`o).
e3>#-e
=8.DLn$
j\"fGhLe
kKbeKb
zjzi'*np
\sJb/$I
x?l*yJ,qh8
SL9vNw
n*o'k@
)>x".HF$`"
?|I:6@Lf
V"fMCgY
"(!GVqE
Q:8o*br
Z".+)h
"b-go-
hdek"f
'"bc'J
#/MG b
F.g#ZP
kWY&m(/
]'B0M?
E3$BZ<
)_D{vY
W#'#F
&/"C
#<0]=v+
t?r7#f
(`')681v
K>R"'f
kxz~2>
N2wIlo
Ha.h&`
,pw{l&)
b"NTUwe0
P2>W,=
-sRLA7
_1eROS%
/igBN[T
mWU,?F
DB?j4o
goooUJ}
*%)$,)
ebdYW
Ea,maF
dG>L27
eRe_o"/OJ
!wLv+{
p}_Sb-
|Q$Hr_Tbp
1aEFOg/6eeD
$e2rH'
8{OJ|N
sr?x7Gb
mepn4/B3
2L*FEN
LXV8>5T
.2}sY0
oSkPX
U@_=%w
fZKndp;
9}y|7s
jTnIh~
kAcPik
|lq.r
gOFwee6
jl.B7^d
=hx+Q5Mo
q`cED$
$_F*Iy"
BRKTdL
eepGW/.
!LD+eg
n~j@!x
,'Ot?\t
]G!F'C.
v"n[f|
0`m)>89
U/^0]B
F9Q/I5i4
U<uj8u
CRJ[C*
G9TW{=R
nC(?5"
GgvS@y
MBS[B3
"PkpKS
WnS!E7Sj
R[:3PF}
ZZ_W+7
Rh|i9e
X;dd^7
fO@(0o
oXl6,s
(T]bkR
B-(kwM
"2qj*i
x1HhnF
TTSh$
j*FV9d
?7lcEuY
jG49Jg
uL[/~[B
*kz>o+jz'
Gnz_V[
@HdGH%
ybKXqj'
8vroj5
?&C]9ggjj
/bwjwjY
ly>+ly-
q<&C^8
RM{%*o
bNNkhe
|~*s3!|
b4E+X6s_
huxgbM
h(8JZKtS
eGmBhg
>e4m=9c
jbb!3pb
E'D'L)
w^4S@'.
di+Cnu
O0&Z(C
*j5lR_
yHf_<)
-d.%ob
<!o+,#"X
>cne('
R%mw>f
e|alvof
Ck,!gf
ejfqMZgV[
jZGyMpAU
@jG\;>:
n`96f\
EJft"3)
JfG\G'\F
*&kehY
nwzbKC
ngib,M
trl')BL
!This program cannot be run in DOS mode.
`.rdata
@.data
.reloc
B.rsrc
D$TSU3
D$@ReadP
D$HFile
D$PSetF
D$TileP
D$Xoint
D$8GetF
D$<ileS
D$@ize
D$ Clos
D$$eHan
D$(dle
D$,Crea
D$0teFi
D$4leW
L$,PQV
D$(GetTR
D$0ickC
D$4ount
GetProcAddress
LoadLibraryA
GetModuleFileNameW
KERNEL32.dll
_initterm
malloc
_adjust_fdiv
MSVCRT.dll
dec.dll
setuser
8&8+80858@8M8W8l8x8~8
UN0lL32.eXe
%s.lnk
"%s",%s
USERPROFILE
((((( H
VS_VERSION_INFO
StringFileInfo
040904b0
CompanyName
The Qt Company Ltd.
FileDescription
C++ Application Development Framework
FileVersion
5.15.2.0
LegalCopyright
Copyright (C) 2020 The Qt Company Ltd.
OriginalFilename
Qt5Concurrent.dll
ProductName
ProductVersion
5.15.2.0
VarFileInfo
Translation
<<<Obsolete>>
RAny use of this Certificate constitutes acceptance of the DigiCert CP/CPS and the Relying Party Agreement which limit liability and are incorporated herein by reference
VS_VERSION_INFO
StringFileInfo
000004b0
Comments
This installation was built with Inno Setup.
CompanyName
jrsoftware.org
FileDescription
Inno Setup Setup
FileVersion
LegalCopyright
Copyright
1997-2020 Jordan Russell. Portions Copyright
2000-2020 Martijn Laan.
OriginalFileName
ProductName
Inno Setup
ProductVersion
6.1.2
VarFileInfo
Translation
Qt5Concurrent.dll
snapshot_blob.bin
install.dat
install.dll
setuser
Antivirus Signature
Bkav W32.AIDetect.malware1
Elastic malicious (high confidence)
MicroWorld-eScan Gen:Variant.Ser.Cerbu.3566
FireEye Gen:Variant.Ser.Cerbu.3566
CAT-QuickHeal Clean
Qihoo-360 Clean
ALYac Gen:Variant.Ser.Cerbu.3566
Cylance Unsafe
Zillya Clean
Sangfor Trojan.Win32.Injector.gen
K7AntiVirus Trojan ( 0057c8ba1 )
BitDefender Gen:Variant.Ser.Cerbu.3566
K7GW Trojan ( 0057c8ba1 )
Cybereason Clean
Baidu Clean
Cyren Clean
Symantec ML.Attribute.HighConfidence
ESET-NOD32 a variant of Win32/GenKryptik.FFGP
APEX Malicious
Paloalto generic.ml
ClamAV Clean
Kaspersky HEUR:Trojan.Win32.Injector.gen
Alibaba Clean
NANO-Antivirus Clean
ViRobot Clean
Rising Trojan.GenKryptik!8.AA55 (CLOUD)
Ad-Aware Gen:Variant.Ser.Cerbu.3566
Sophos Mal/Generic-S
Comodo Clean
F-Secure Clean
DrWeb Trojan.Inject4.11947
VIPRE Clean
TrendMicro Clean
McAfee-GW-Edition Artemis!Trojan
CMC Clean
Emsisoft Gen:Variant.Ser.Cerbu.3566 (B)
SentinelOne Clean
GData Gen:Variant.Ser.Cerbu.3566
Jiangmin Clean
Webroot W32.Injector.Gen
Avira TR/AD.Inject.mjdpy
MAX malware (ai score=82)
Kingsoft Win32.Troj.Undef.(kcloud)
Gridinsoft Trojan.Win32.Downloader.ns
Arcabit Clean
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Trojan.Win32.Injector.gen
Microsoft Trojan:Win32/Sabsik.FT.A!ml
Cynet Malicious (score: 100)
AhnLab-V3 Clean
Acronis Clean
McAfee Artemis!A1ACC4E7065D
TACHYON Clean
VBA32 Clean
Malwarebytes Clean
Panda Clean
Zoner Clean
TrendMicro-HouseCall TROJ_GEN.R002H0DEH21
Tencent Clean
Yandex Clean
Ikarus Win32.Outbreak
eGambit Clean
Fortinet W32/GenKryptik.FFGP!tr
BitDefenderTheta Clean
AVG Win32:Trojan-gen
Avast Win32:Trojan-gen
CrowdStrike win/malicious_confidence_60% (W)
MaxSecure Clean
No IRMA results available.