Static | ZeroBOX

PE Compile Time

2009-03-03 16:06:26

PE Imphash

73b8cec9d966d2100b9daa6840b6cd9b

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00001000 0x000173fc 0x00018000 7.03901666627
.data 0x00019000 0x0000115c 0x00001000 0.0
.rsrc 0x0001b000 0x0000665c 0x00007000 5.35487646096

Resources

Name Offset Size Language Sub-language File type
RT_ICON 0x0001b564 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x0001b564 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x0001b564 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x0001b564 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x0001b564 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x0001b564 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x0001b564 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_GROUP_ICON 0x0001b4fc 0x00000068 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_VERSION 0x0001b210 0x000002ec LANG_MALTESE SUBLANG_DEFAULT data

Imports

Library MSVBVM60.DLL:
0x401000 _CIcos
0x401004 _adj_fptan
0x401008 _adj_fdiv_m64
0x40100c _adj_fprem1
0x401014 _adj_fdiv_m32
0x401018 _adj_fdiv_m16i
0x40101c _adj_fdivr_m16i
0x401020 _CIsin
0x401024 __vbaChkstk
0x401028 EVENT_SINK_AddRef
0x40102c _adj_fpatan
0x401030 EVENT_SINK_Release
0x401034 _CIsqrt
0x40103c __vbaExceptHandler
0x401040 _adj_fprem
0x401044 _adj_fdivr_m64
0x401048 __vbaFPException
0x40104c _CIlog
0x401050 _adj_fdiv_m32i
0x401054 _adj_fdivr_m32i
0x401058 _adj_fdivr_m32
0x40105c _adj_fdiv_r
0x401060 None
0x401064 _CIatan
0x401068 _allmul
0x40106c _CItan
0x401070 _CIexp

!This program cannot be run in DOS mode.
`.data
MSVBVM60.DLL
iUFOLKETINGSTIDENDERNE
SKIMLENDES
FLEREETAGESEJENDOMMENES
11??;;33
===<?;?;;333
hannll
1??;;33
naannll
=11??::33
11??4;:3
=11?;;:33
=1<?;;
aP```a
===?<?;8
`SRP``
PSSR``a
STSSP``a
SUTTTSSPP``a
UAAJJUUTTSSRR`aal}
ABAAAJJIIIIWSWRRRbn
PABBBAAAAJJIIKIHHVVeean
PBFBDDBBBLBLLLLKKKHHVVeaanl
SFFFBDDDDBBBBBLBKLKKHHeeennnl}
TFFFFFFFDFDDDDDBBBLLKKHHeeannhh}
UFFFFFFFFFFFFFFFDDDBBLKHHHeaanh}}
UFFFFFFFFFFFFFFFFFFFBBLLKHVebanhh
AFFFFFFFFFFFFFFFFFFFFFDBKKHVbba
AFFFFFFFFFFFFFFFFFFFFFFDBLKKWb`aa
BFFFFFFFFFFFFFFFFFFFFFFFFDLLHWRba
FAFFFFFFE@MZ[ggffffff
]^X!,,,/%g[[\MM\\\\[Yf#/,()*'
&!&&ggY[[\\\MMMM\\\[[Ygg&%%/#Yg
#\%&fgY[[\\MMMMMMMM\\[[gff&%%fM\
/MffgYY[\\MMMNNNNMMM\\[YYgff%Y\\
NYfY[[-f
[Xff&[M[5
\\YY[[5
YYff\M%
fEY[[\7
/[YYY\E7
/E\[[\!
%[YY[NN6
[E\\\[
7[[[[ME!
/EM\\\!
(%\[[MEN7
[F\\M\(
,\\\\EE%
/NEMMM[(
7[\\\EEM,
!EENMM\!7
7/\M\MNF\(
#EENNNMf!+,(//fMMMMNEN+
!EEENNNN\\\\MNMMMEEN+
#\EEENNNNNNMNMNEEY/
!#MEEEEEENEEEE\/
#%\NEEEEEMY/$
#/,,+/!
GGGGGG
GGGGGG
2119988
"Zdktsr
#ZZdks||
$^Zedkvs|
sKVV^^Zeekr{
d@KKVVTTTQePkr
ZE@@@@HVHWWWQPPrp
^EEE@@@@@@@WWWQPjhr
_FEFEFEEEE@@@HWWQPrr
KFFFFFFFFFFFF@@HWQPhr
@FFFFFFFFFFFFFE@@WQPtt|
@EFFFFFFFDDDDDEBHWWPht|
/!o`aabIIIIbaaoo!//a)
!oo`aabIJJJIIbaa`o!oI)
!b`a!/
o`o`I(
,babC+
(aaICo
*`IICa
-JCJI` -/oIIICb-
/aECJJJIJIJCa
/ICCCCCCb/
o!!!!!
DF'[FF
PFF&PFF!_FF-_FF*PGG5_FF2_FF>_FF:PFF
_FF'^FF#]FF,[FF)\GG4[FF?ZFF;[FF8ZFF
^GG%]GG"]GG.]GG+]GG7]GG3]GG1^GG<_GG9_GG
]FF$\FF!\GG.[FF)[FF7\FF3\FF0]FF;^GG9_FF
[FF$[GG"[FF-ZFF*ZFF7[FF3[FF0\GG<]FF9_FF
[FF8OFF
ZGG%ZFF YFF,YFF)YFF6ZFF2ZGG?\FF=]FF8^FF
[FF0OFF
YGG'YFF"XFF/XFF,XFF(XFF5YGG1YFF0[FF:\FF8]FF
XFF6NFF
\FFyQFF
XFF$gFF!gFF/gFF+gFF7XGG5XFF1YFF>YFF:[FF
fFF+MFF
\GG~RGGyQGG
XGG%fGG"gGG.gGG+fGG(gGG5XGG1XGG>YGG;YGG
dGG#MGG
]FFqSFF|QGGx_FF
YGGXFF
fFF%fFF fFF.fGG)fFF7fFF3fFF?gFF=XFF9YGG
}FFy^FFtSFFpRGG{PFF
fFF'fFF#fFF gGG.fFF+fFF6fFF3fFF?gFF<XGG
~FF}_FFiTFFsRGG
QFF{_FF
YFFXFF
YFF%XGG!gFF/XFF*gFF7gFF4XFF0gGG<gFF8gFF
hn=qFFtQFFaWFFoWGGlVFFjUFFvSFFrRFF
RFF{QGG
YGG%XFF"XFF.XFF*gFF7XFF4gGG>fFF<fFF8eFF
cFFeHFF]KFFZKGGfIFFbHFFaHFFmWFFjVFFhVGGtUFFqUFF~UFF{TFF
PFF^FF#YFF.XFF+gFF7gGG2fFF>eFF;dFF
gFGZJFGQMGG]LGGZKGGgKGGeKGGbIGGoIGGmIGGjHGGwHGGuIGGrHGG
HGG|HGGyHGG
QGG'\GG-YGG6fGG2eGG?dGG9cGG
[FF_LFFUOFFRNGGPNFF^NFF[MFFYMFFgMFFeLGGbLFF`LFFnMFFlNFFhNFFuMGGsMFF
LFF{JFF
SFF']FF+YFF1dFF9bFF
wFF{HFF
<lg~]FFRMFFHAFFV@GGT@FFQOFFP@FF_@FF\@FF[AGGYAFFgAFFeBFFcBFFaBFFnCGGkBFFhAFFu@FFpOFF|MFF
^FF$[GG.gFF)eFF5cFF2aFF=oFF
hFFqHFF
<lgt_FFUOFFKBFFJBGGWBFFWBFFVCFFUCFFTDFFREGGQFFF_FFF^FFF\FFFZFFFXFGGdFFFbFFFnFFFiDFFuCFFpAGGzNFF
QFF^GG
\FF#YFF.fFF+cFF3`FF>mGG9kFF
hFFvHFF
=lgiRFFI@FFODFFNDGGLDFFLFFFKFFFJFFFJFFFIGGGHFFFWFFFVFFFUFFFTFFFRGGGPFFF\FFFXFFFdFFFoFFFkFGGtCFF~OFFyLFF
[FF&XFF!dFF,bFF6oGG1mFF<kFF:jFFlIFF<kGG
>lgoUFFLBFFCFFFBFGGAFFFAFFFOFFF@FFF@FFF@GGG@FFFOFFFOFFFNFFFMFFFKGGGIFFFWFFFSFFF^FFFYFFFdGGGnFFFiEFFsBFF|MFF
XFF#dFF.bGG(mFF4lFF2kFFcJFF5mGG
>kXdWGGNCGGFGGGEGGGDGGGDGGGEGGGEGGGEGGGFGGGFGGGFGGGFGGGFGGGEGGGDGGGDGGGAGGGNGGGIGGGTGGG^GGGgGGGbGGGkFGGuBGG}MGG
\GGYGG
fGG%cGG.`GG*mGG(mGGfJGG+nGG
4n^YIFFOCFFFFFFGGGGFFFFFFFFFFFFFFFFFFFFGGGGFFFFFFFFFFFFFFFFFFFFGGGGFFFFFFFFEFFFCFFFNFFFHGGGRFFF[FFFdFFFmFFFuAFF
eGG%cFF!oFF.nFFYKFF"`GG
7oQ^KFFOCFFFFFFGGGGFFFFFFFFFFFFFFFFFFFFGGGGFFFFFFFFFFFFFFFFFFFFGGGGFFFFFFFFFFFFFFFFFFFFBGGGKFFFUFFF]FFFfFFFnFFFwAGGpKFFyWFF
aFFoWFF!`GG
(`QRMFFTNFFEFFFFGGGFFFFFFFFFFFFFFFFFFFFGGGGFFFFFFFFFFFFFFFFFFFFFGGGFFFFFFFFFFFFFFFFEFFFEFGGCFFFOFFFHFFF_FFFgFFF`EGGi@FFrJFF|VFF
bFF'`GG
0obUOFFPNFFROFFTBGGUDFFWEFFHFFFWBCFRMNFZVIGoYQFulaF
XMF&YCF fFF+bFF4mFF>iGG9vFF
oMOseQEicXFyqtF
~FihhFnnnFcccGffeFggfFfffFeeeFddcF```GkjjFuttF|{zF
G$%&F-&
GyyyG~~~GqqqGtttGhhhGmmmGaaaGdddGgggGYYYGYYYGYYYGXXXGfffGdddG```GlllGwwwGtttGpppG}}}GyzzG
GusqGrp~G
FxxxF|||FpppFtttGhhhFlllFaaaFeeeFYYYF\\\G^^^F^^^F^^^F]]]F\\\FXXXGeeeFaaaFlllFhhhFrrrF
F~~~FXXXGbbbF
]]]FzzzF{{{F
FsssFwwwGlllF```FeeeFXXXF\\\F___GQQQFRRRFRRRFQQQF___F\\\GXXXFdddF```FkkkFvvvFsssG~~~F{{{FxxxF
FrrrFgggGaaaF
SSSDrrrF
FsssFwwwFwwwE...k 0
F|||FxxxFjjjFXXXGjjjF
fffBeeeFrrrFuuuFjjjFlllF
uuuFqqqF
F}}}FbbbF^^^G
xxxIIIIFtttFhhhFlllF```G111X
hhhFtttFrrrFsssFgggFJJJG(((L
,,,wMMMGdddGiiiGnnnGbbbG
LjjjGwwwGtttGmmmGPPPG___G
nnnDLLLFoooF```FcccGjjjE
|jjjGmmmFiiiFiiiF\\\FNNNF
"""c@@@F^^^F```FdddGfffF
FaaaGnnnFjjjFfffFKKKF___F
wwwDOOOFZZZFdddGgggFaaaF...L
$$$IaaaFbbbGoooFfffFKKKFOOOF
SSSFMMMF[[[GXXXF[[[FiiiF!!!N
+++KjjjFeeeFcccGeeeFJJJFNNNFeeeE
kKKKGOOOGRRRG[[[G^^^GdddG
F```GYYYGgggGgggGHHHGNNNGXXXF
SKKKGNNNFSSSF]]]F___FZZZF
FF'''C'''C
GqqqFZZZF[[[FYYYFYYYFHHHGMMMF]]]F***m
]UUUFOOOFIIIFRRRFPPPFRRRG___FfffFaaaF```FeeeF]]]GPPPF]]]F[[[F]]]FIIIFMMMG___F,,,k
```ENNNFMMMFJJJFWWWGTTTFSSSFRRRFRRRFQQQFPPPGPPPF___FSSSFJJJFJJJFsssD333
I\\\FNNNFLLLGKKKFKKKFIIIFIIIFHHHFHHHGHHHFJJJFMMMFcccF
VnnnGQQQFJJJFLLLFLLLFKKKFHHHGZZZFpppF
???+444
***w***j)))w333
;;;2999
GGGGGG
RFF_GG
^FF&^FF.]FF(\GG1[FF;\FF
PGG_GG
^GG#\GG.\GG)\GG3]GG>^GG9_GG
_FF]FF
\FF#[GG-ZFF([FF3\FF>]GG9_FF
ZGG!YFF,YFF7YFF2ZGG?\FF8^FF
sFF{RFF
YGG%XFF gFF+gFF6XGG1YFF<ZFF8\FF
"\N<tGGqSGGyPGG
gGG%gGG gGG+fGG6XGG0XGG<YGG
"\N2uFFuTFF~QGG
XGGgFF
fFF$fFF/fGG+fFF4fFF?gFF:XGG
"\N7wFFlVFFtSGG
QFFy_FF
XFF%XGG XFF*gFF6gFF0gGG:gFF
dFF\KFFgJGGbHFFnWFFiUFFuUGG
TFFySFF
]FF!XFF+gFF4gGG>eFF9dFF
$\N|]FGSOGG^LGGZLGGfKGGbJGGnIGGjIGGwJGGrJGG~IGGyHGG
QGG$\GG7gGG>dGG
nGG?dGG
%\OuPFFIAFFT@GGQOFF_OFF[OFFY@GGf@FFcAFFoAFFkAGGw@FFqNFFzLFF
VFFRFF"[FF(fGG0bFF:oFF
iFF1aFF,eFF
%]OmSFFMCFFJBGGHCFFWDFFUEFFSFGGQFFF_FFF]FFFZFGGeFFFoFFFiDFFqBGGyMFF
^GG'ZFF/eFF7aFF>mGG8jFF+aFF&eFF
&]OeWFFCFFF@FGG@FFFNFFFOFFFNGGGMFFFMFFFKFFFIGGGUFFF_FFFXFFF`FGGwDFF
YFF#dFF*`GG4lFF'cFF
&]O[JGGFGGGEGGGEGGGEGGGFGGGFGGGFGGGFGGGFGGGEGGGCGGGOGGGHGGG_GGGfGGGlEGGqOGG
XGG%bGG-nGGeGG
^OPMFFFFFFGGGGFFFFFFFFFFFFGGGGFFFFFFFFFFFFGGGGFFFFFFFFEFFFNGGGTFFFYFFFmEFFsNGGyWFF
gGG'bFF
^OQMFFLBFFBFGGCFFFDFFFEFFFEFGGCDEFBBCFOAAFJOAGJOAFINAFWMAFVNAGSAAFZBCFoDFFtAGGyHFF
[FFfGG
aFF#oFF,lFF
G}}}GsssGhhhGoooGdddGXXXG[[[GZZZGXXXGdddGnnnGhhhGqqqG|||G
GljiG025V
F{{{FrrrFwwwGnnnFeeeF[[[F___GQQQFQQQF___FZZZGeeeFnnnFvvvFqqqG{{{F
F|||FXXXG<;;g
cccFqqqFwwwF
qqqF|||FuuuF\\\G
SSSFtttFjjjFrrrC
$$$ytttFpppF```FXXXF
ooo@eeeGmmmGaaaF
~~~BhhhGwwwG___G
LLLF```FeeeG
777n```GkkkFXXXFWWWF
hhhNTTTFeeeGeeeF444V
jjjFaaaGXXXFMMMF
PPPFWWWG[[[FfffF
333UwwwFgggFXXXGLLLFnnnB
RRRFIIIGPPPG]]]GvvvG
E~~~GXXXG[[[G\\\GKKKGeeeD
=oooNMMMFWWWFTTTGSSSFQQQFQQQFPPPG___FRRRFJJJFvvvM
i[[[FNNNGLLLFJJJFIIIFJJJGJJJFdddF'''z
Xp(((+
^D^FF
_FF/^FF7]GG?]FF
^GG%]GG.\GG7\GG0]GG9_GG
[FF%ZGG,ZFF6ZFF?\GG9^FF
YGG"XFF+gFF5YGG>ZFF8\GG
$PEy_GGyPGG
gGG!fGG*fGG4gGG=XGG
$PEqQFF
gFF!gGG+gFF3gGG<XFF
PEbWFFbHGGmVFFvTFFpSGG
]GG$ZFF+gGG3gFF;eFF
uFF8gFF
PEPMFG^MGGYLGGdKGGoJGGjJGGuKGG
JGGxHGG
^GG)XGG:bGG
uGG+XGG
QEW@FFWAGGSAFFQBFF]CGGZDFFfDFFaDGGkCFFrAGGyLFF
QGG'[FF,fFF3aFF8lGG
QENCFGOEGGNFGGMFGGLGGGKGGGIGGGVGGG_GGGgGGGlEGGqAGG
[GG"dGG7oGG?kGG
&QGBEFFEGGGEFFFFFFFFGGGFFFFFFFFEGGGCFFFKGGGPFFFcFFFuAGG
YFF%bGG,nFF
'RGOCFFFGGGFFFFFFFFGGGGFFFFFFFFFGGGFFFFFFGGAFFFVFFFfFGGh@FFzWFF
F}}}FtttGmmmFeeeFZZZG\\\FZZZGdddFlllFsssG|||F
}}}FsssFzzzK
|||^{{{F~~~FbbbF
aaaFiiiF
pqqqFjjjFpppD
___FmmmGuuuC
tttDwwwG^^^G000z
u^^^FeeeG+++S
'''f```FXXXFZZZD
fffKQQQGgggF///H
'---RdddGZZZFWWWF
YYY@VVVG___GjjjG
FjjjG\\\G^^^GHHHF***
gHHHFIIIGVVVFUUUGTTTFVVVFaaaA
yyyY{{{P
8k888G888G888G888G888G888G888G888G888G888G888G
8m444)
zME2lAF9kBF
RH+aGG
]GG.\GG3\GG9_GG
PGG888G
RH%bFF
[FF&YGG,XFF2ZGG8]FF
_FF888G
dGGx_GG
[GGXGG$fGG*fGG0gGG
YGG888G
[FFkUGGqRFF
[GG+XFF?gGG
bFF888G
RHcWFG_NGGXMGGbLGGkMGGrMGG
HGGPGG)XGG8aGG
wGG?bGG888G
RHPMFFMDGGJEFFHFGGUFFF_FGGdFFFtBGG
^GG!eFF1mGG&dFF888G
RHJAGGFGGGFGGGFGGGFGGGEGGG@GGGRGGGmDGGxHGG
\GG&bGG
XGG888G
_|||GhhhGeeeG]]]G]]]GdddGwwwG|||G
~uuuF;;;
ctttF---u
hhhEYYYG
{{{n[[[G000f
rrrfTTTGoooFtttFeeeGQQQGxxxb
;;;1rrr`jjjW
FLEREETAGESEJENDOMMENES
Combo2
CACKING
Command3
ANMASSENDES
Command2
KONTRASIGNATURENS
Command1
GROUSES
BIRKAS
Combo1
TABBING
VB5!6&*
KARNFL
SKOVKANTS
FOLKETINGSTIDENDERNE
FOLKETINGSTIDENDERNE
SKIMLENDES
BACKWARDS
Command3
C:\Program Files (x86)\Microsoft Visual Studio\VB98\VB6.OLB
Combo2
Combo1
Command1
Command2
VBA6.DLL
__vbaHresultCheckObj
BACKWARDS
ICC_PROFILE
mntrRGB XYZ
sRGB IEC61966-2-1 black scaled
$$M$|$
.IEC 61966-2-1 Default RGB Colour Space - sRGB
CRT desc
-Reference Viewing Condition in IEC 61966-2-1
Copyright International Color Consortium, 2009
"3 % % 3-7,),7-Q@88@Q^OJO^qeeq
"3 % % 3-7,),7-Q@88@Q^OJO^qeeq
,/!nEi
,/!nEi
e7zr'/
'(ulev
5zr#'I~
O6zru<%r
5zr$A\
~Vmvr^
y_3zJN
7z#$RLl
7zJx_`
|S>|Rd
3^`&[u
i6zru29r
?zrbBZ
76zr%'
ZuF++`
X6zr'K
WuC%6zr
]4^XJT
B6zrZ0
z6zrbBB
6zrbBF
6zr'?~F
?zrbBR
6zrbB:
NV P=\
7zKG_v
L,zr_3z
^{$WuC%6zr
KM24q#
D}y7ummr
7zKVQC
7z}?VO
JOQGKk
)5j8QC
7zr_?z
5zr%BUn
5zr#`o
7z&F\>
e}G|r
-47GY T
s^nubnr
4cwe7zr
5zr%f
wp"[wq
WuC%6zr
v6zr"v
KkPf2E,
6zr_+z
w6zrP<e
U6zru4zr
^{5J:JDQ
_3zJWS
Cr3&gzr
5ay7;(
7zru7zr
HHHHHHHHHHHHHHHHHHHHHH^
}}}}}}}}}}}}}}}}}}}5
lllllllllllllllllllllll
>WWWWWWWWWWWWWWWWWWWWWWW
`gggggggggggggggggggggH
RRRRRRRRRRRRRRRRRRRRRRRR
A66666666666666666666f
@@@@@@@@@@@@@@@@@@@@@f
<<<<<<<<<<<<<<<<<<<
Pqqqqqqqqqqqqqqqqqqqqqqq
zffffffffffffffffffffffff
b&&&&&&&&&&&&&&&&&&&&&&
lfhhhhhhhhhhhhhhhhhhh
%8\\\\\\\\\\\\\\\\\\\\\\\
2222222222222222222222222S
11111111111111111111
rjW^\\\\\\\\\\\\\\\\\\\\\\\\\I
WXEZQQQQQQQQQQQQQQQQQQQ
]]]]]]]]]]]]]]]]]]]]]]
Ke11111111111111111111
{````````````````````
;qqqqqqqqqqqqqqqqqqqqqqqqq
<oS%^
=<s,oP
:qqxE
tXIP%J
-WjxzG
(^`AI,
den<Lh
Ypph&\
PHkG(0
^Fe@b"
9KUJsP
oQ,H-b
gdFX5^
0GcQ/,
h\pP4@
0]}QUW
n?At,:/
XIZu/=
Ti@Sya/
%EQcY1Bh^9
k7/=<@]
YX;<T@0
a;de>N,
;(cU.5
cdOC8ENe
1`(d`_
i~HA9%
Jz|Dz_vh
Z=|jfSy
MSVBVM60.DLL
_CIcos
_adj_fptan
_adj_fdiv_m64
_adj_fprem1
__vbaHresultCheckObj
_adj_fdiv_m32
_adj_fdiv_m16i
_adj_fdivr_m16i
_CIsin
__vbaChkstk
EVENT_SINK_AddRef
_adj_fpatan
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
_adj_fprem
_adj_fdivr_m64
__vbaFPException
_CIlog
_adj_fdiv_m32i
_adj_fdivr_m32i
_adj_fdivr_m32
_adj_fdiv_r
_CIatan
_allmul
_CItan
_CIexp
8k888G888G888G888G888G888G888G888G888G888G888G
8m444)
zME2lAF9kBF
RH+aGG
]GG.\GG3\GG9_GG
PGG888G
RH%bFF
[FF&YGG,XFF2ZGG8]FF
_FF888G
dGGx_GG
[GGXGG$fGG*fGG0gGG
YGG888G
[FFkUGGqRFF
[GG+XFF?gGG
bFF888G
RHcWFG_NGGXMGGbLGGkMGGrMGG
HGGPGG)XGG8aGG
wGG?bGG888G
RHPMFFMDGGJEFFHFGGUFFF_FGGdFFFtBGG
^GG!eFF1mGG&dFF888G
RHJAGGFGGGFGGGFGGGFGGGEGGG@GGGRGGGmDGGxHGG
\GG&bGG
XGG888G
_|||GhhhGeeeG]]]G]]]GdddGwwwG|||G
~uuuF;;;
ctttF---u
hhhEYYYG
{{{n[[[G000f
rrrfTTTGoooFtttFeeeGQQQGxxxb
;;;1rrr`jjjW
^D^FF
_FF/^FF7]GG?]FF
^GG%]GG.\GG7\GG0]GG9_GG
[FF%ZGG,ZFF6ZFF?\GG9^FF
YGG"XFF+gFF5YGG>ZFF8\GG
$PEy_GGyPGG
gGG!fGG*fGG4gGG=XGG
$PEqQFF
gFF!gGG+gFF3gGG<XFF
PEbWFFbHGGmVFFvTFFpSGG
]GG$ZFF+gGG3gFF;eFF
uFF8gFF
PEPMFG^MGGYLGGdKGGoJGGjJGGuKGG
JGGxHGG
^GG)XGG:bGG
uGG+XGG
QEW@FFWAGGSAFFQBFF]CGGZDFFfDFFaDGGkCFFrAGGyLFF
QGG'[FF,fFF3aFF8lGG
QENCFGOEGGNFGGMFGGLGGGKGGGIGGGVGGG_GGGgGGGlEGGqAGG
[GG"dGG7oGG?kGG
&QGBEFFEGGGEFFFFFFFFGGGFFFFFFFFEGGGCFFFKGGGPFFFcFFFuAGG
YFF%bGG,nFF
'RGOCFFFGGGFFFFFFFFGGGGFFFFFFFFFGGGFFFFFFGGAFFFVFFFfFGGh@FFzWFF
F}}}FtttGmmmFeeeFZZZG\\\FZZZGdddFlllFsssG|||F
}}}FsssFzzzK
|||^{{{F~~~FbbbF
aaaFiiiF
pqqqFjjjFpppD
___FmmmGuuuC
tttDwwwG^^^G000z
u^^^FeeeG+++S
'''f```FXXXFZZZD
fffKQQQGgggF///H
'---RdddGZZZFWWWF
YYY@VVVG___GjjjG
FjjjG\\\G^^^GHHHF***
gHHHFIIIGVVVFUUUGTTTFVVVFaaaA
yyyY{{{P
RFF_GG
^FF&^FF.]FF(\GG1[FF;\FF
PGG_GG
^GG#\GG.\GG)\GG3]GG>^GG9_GG
_FF]FF
\FF#[GG-ZFF([FF3\FF>]GG9_FF
ZGG!YFF,YFF7YFF2ZGG?\FF8^FF
sFF{RFF
YGG%XFF gFF+gFF6XGG1YFF<ZFF8\FF
"\N<tGGqSGGyPGG
gGG%gGG gGG+fGG6XGG0XGG<YGG
"\N2uFFuTFF~QGG
XGGgFF
fFF$fFF/fGG+fFF4fFF?gFF:XGG
"\N7wFFlVFFtSGG
QFFy_FF
XFF%XGG XFF*gFF6gFF0gGG:gFF
dFF\KFFgJGGbHFFnWFFiUFFuUGG
TFFySFF
]FF!XFF+gFF4gGG>eFF9dFF
$\N|]FGSOGG^LGGZLGGfKGGbJGGnIGGjIGGwJGGrJGG~IGGyHGG
QGG$\GG7gGG>dGG
nGG?dGG
%\OuPFFIAFFT@GGQOFF_OFF[OFFY@GGf@FFcAFFoAFFkAGGw@FFqNFFzLFF
VFFRFF"[FF(fGG0bFF:oFF
iFF1aFF,eFF
%]OmSFFMCFFJBGGHCFFWDFFUEFFSFGGQFFF_FFF]FFFZFGGeFFFoFFFiDFFqBGGyMFF
^GG'ZFF/eFF7aFF>mGG8jFF+aFF&eFF
&]OeWFFCFFF@FGG@FFFNFFFOFFFNGGGMFFFMFFFKFFFIGGGUFFF_FFFXFFF`FGGwDFF
YFF#dFF*`GG4lFF'cFF
&]O[JGGFGGGEGGGEGGGEGGGFGGGFGGGFGGGFGGGFGGGEGGGCGGGOGGGHGGG_GGGfGGGlEGGqOGG
XGG%bGG-nGGeGG
^OPMFFFFFFGGGGFFFFFFFFFFFFGGGGFFFFFFFFFFFFGGGGFFFFFFFFEFFFNGGGTFFFYFFFmEFFsNGGyWFF
gGG'bFF
^OQMFFLBFFBFGGCFFFDFFFEFFFEFGGCDEFBBCFOAAFJOAGJOAFINAFWMAFVNAGSAAFZBCFoDFFtAGGyHFF
[FFfGG
aFF#oFF,lFF
G}}}GsssGhhhGoooGdddGXXXG[[[GZZZGXXXGdddGnnnGhhhGqqqG|||G
GljiG025V
F{{{FrrrFwwwGnnnFeeeF[[[F___GQQQFQQQF___FZZZGeeeFnnnFvvvFqqqG{{{F
F|||FXXXG<;;g
cccFqqqFwwwF
qqqF|||FuuuF\\\G
SSSFtttFjjjFrrrC
$$$ytttFpppF```FXXXF
ooo@eeeGmmmGaaaF
~~~BhhhGwwwG___G
LLLF```FeeeG
777n```GkkkFXXXFWWWF
hhhNTTTFeeeGeeeF444V
jjjFaaaGXXXFMMMF
PPPFWWWG[[[FfffF
333UwwwFgggFXXXGLLLFnnnB
RRRFIIIGPPPG]]]GvvvG
E~~~GXXXG[[[G\\\GKKKGeeeD
=oooNMMMFWWWFTTTGSSSFQQQFQQQFPPPG___FRRRFJJJFvvvM
i[[[FNNNGLLLFJJJFIIIFJJJGJJJFdddF'''z
Xp(((+
DF'[FF
PFF&PFF!_FF-_FF*PGG5_FF2_FF>_FF:PFF
_FF'^FF#]FF,[FF)\GG4[FF?ZFF;[FF8ZFF
^GG%]GG"]GG.]GG+]GG7]GG3]GG1^GG<_GG9_GG
]FF$\FF!\GG.[FF)[FF7\FF3\FF0]FF;^GG9_FF
[FF$[GG"[FF-ZFF*ZFF7[FF3[FF0\GG<]FF9_FF
[FF8OFF
ZGG%ZFF YFF,YFF)YFF6ZFF2ZGG?\FF=]FF8^FF
[FF0OFF
YGG'YFF"XFF/XFF,XFF(XFF5YGG1YFF0[FF:\FF8]FF
XFF6NFF
\FFyQFF
XFF$gFF!gFF/gFF+gFF7XGG5XFF1YFF>YFF:[FF
fFF+MFF
\GG~RGGyQGG
XGG%fGG"gGG.gGG+fGG(gGG5XGG1XGG>YGG;YGG
dGG#MGG
]FFqSFF|QGGx_FF
YGGXFF
fFF%fFF fFF.fGG)fFF7fFF3fFF?gFF=XFF9YGG
}FFy^FFtSFFpRGG{PFF
fFF'fFF#fFF gGG.fFF+fFF6fFF3fFF?gFF<XGG
~FF}_FFiTFFsRGG
QFF{_FF
YFFXFF
YFF%XGG!gFF/XFF*gFF7gFF4XFF0gGG<gFF8gFF
hn=qFFtQFFaWFFoWGGlVFFjUFFvSFFrRFF
RFF{QGG
YGG%XFF"XFF.XFF*gFF7XFF4gGG>fFF<fFF8eFF
cFFeHFF]KFFZKGGfIFFbHFFaHFFmWFFjVFFhVGGtUFFqUFF~UFF{TFF
PFF^FF#YFF.XFF+gFF7gGG2fFF>eFF;dFF
gFGZJFGQMGG]LGGZKGGgKGGeKGGbIGGoIGGmIGGjHGGwHGGuIGGrHGG
HGG|HGGyHGG
QGG'\GG-YGG6fGG2eGG?dGG9cGG
[FF_LFFUOFFRNGGPNFF^NFF[MFFYMFFgMFFeLGGbLFF`LFFnMFFlNFFhNFFuMGGsMFF
LFF{JFF
SFF']FF+YFF1dFF9bFF
wFF{HFF
<lg~]FFRMFFHAFFV@GGT@FFQOFFP@FF_@FF\@FF[AGGYAFFgAFFeBFFcBFFaBFFnCGGkBFFhAFFu@FFpOFF|MFF
^FF$[GG.gFF)eFF5cFF2aFF=oFF
hFFqHFF
<lgt_FFUOFFKBFFJBGGWBFFWBFFVCFFUCFFTDFFREGGQFFF_FFF^FFF\FFFZFFFXFGGdFFFbFFFnFFFiDFFuCFFpAGGzNFF
QFF^GG
\FF#YFF.fFF+cFF3`FF>mGG9kFF
hFFvHFF
=lgiRFFI@FFODFFNDGGLDFFLFFFKFFFJFFFJFFFIGGGHFFFWFFFVFFFUFFFTFFFRGGGPFFF\FFFXFFFdFFFoFFFkFGGtCFF~OFFyLFF
[FF&XFF!dFF,bFF6oGG1mFF<kFF:jFFlIFF<kGG
>lgoUFFLBFFCFFFBFGGAFFFAFFFOFFF@FFF@FFF@GGG@FFFOFFFOFFFNFFFMFFFKGGGIFFFWFFFSFFF^FFFYFFFdGGGnFFFiEFFsBFF|MFF
XFF#dFF.bGG(mFF4lFF2kFFcJFF5mGG
>kXdWGGNCGGFGGGEGGGDGGGDGGGEGGGEGGGEGGGFGGGFGGGFGGGFGGGFGGGEGGGDGGGDGGGAGGGNGGGIGGGTGGG^GGGgGGGbGGGkFGGuBGG}MGG
\GGYGG
fGG%cGG.`GG*mGG(mGGfJGG+nGG
4n^YIFFOCFFFFFFGGGGFFFFFFFFFFFFFFFFFFFFGGGGFFFFFFFFFFFFFFFFFFFFGGGGFFFFFFFFEFFFCFFFNFFFHGGGRFFF[FFFdFFFmFFFuAFF
eGG%cFF!oFF.nFFYKFF"`GG
7oQ^KFFOCFFFFFFGGGGFFFFFFFFFFFFFFFFFFFFGGGGFFFFFFFFFFFFFFFFFFFFGGGGFFFFFFFFFFFFFFFFFFFFBGGGKFFFUFFF]FFFfFFFnFFFwAGGpKFFyWFF
aFFoWFF!`GG
(`QRMFFTNFFEFFFFGGGFFFFFFFFFFFFFFFFFFFFGGGGFFFFFFFFFFFFFFFFFFFFFGGGFFFFFFFFFFFFFFFFEFFFEFGGCFFFOFFFHFFF_FFFgFFF`EGGi@FFrJFF|VFF
bFF'`GG
0obUOFFPNFFROFFTBGGUDFFWEFFHFFFWBCFRMNFZVIGoYQFulaF
XMF&YCF fFF+bFF4mFF>iGG9vFF
oMOseQEicXFyqtF
~FihhFnnnFcccGffeFggfFfffFeeeFddcF```GkjjFuttF|{zF
G$%&F-&
GyyyG~~~GqqqGtttGhhhGmmmGaaaGdddGgggGYYYGYYYGYYYGXXXGfffGdddG```GlllGwwwGtttGpppG}}}GyzzG
GusqGrp~G
FxxxF|||FpppFtttGhhhFlllFaaaFeeeFYYYF\\\G^^^F^^^F^^^F]]]F\\\FXXXGeeeFaaaFlllFhhhFrrrF
F~~~FXXXGbbbF
]]]FzzzF{{{F
FsssFwwwGlllF```FeeeFXXXF\\\F___GQQQFRRRFRRRFQQQF___F\\\GXXXFdddF```FkkkFvvvFsssG~~~F{{{FxxxF
FrrrFgggGaaaF
SSSDrrrF
FsssFwwwFwwwE...k 0
F|||FxxxFjjjFXXXGjjjF
fffBeeeFrrrFuuuFjjjFlllF
uuuFqqqF
F}}}FbbbF^^^G
xxxIIIIFtttFhhhFlllF```G111X
hhhFtttFrrrFsssFgggFJJJG(((L
,,,wMMMGdddGiiiGnnnGbbbG
LjjjGwwwGtttGmmmGPPPG___G
nnnDLLLFoooF```FcccGjjjE
|jjjGmmmFiiiFiiiF\\\FNNNF
"""c@@@F^^^F```FdddGfffF
FaaaGnnnFjjjFfffFKKKF___F
wwwDOOOFZZZFdddGgggFaaaF...L
$$$IaaaFbbbGoooFfffFKKKFOOOF
SSSFMMMF[[[GXXXF[[[FiiiF!!!N
+++KjjjFeeeFcccGeeeFJJJFNNNFeeeE
kKKKGOOOGRRRG[[[G^^^GdddG
F```GYYYGgggGgggGHHHGNNNGXXXF
SKKKGNNNFSSSF]]]F___FZZZF
FF'''C'''C
GqqqFZZZF[[[FYYYFYYYFHHHGMMMF]]]F***m
]UUUFOOOFIIIFRRRFPPPFRRRG___FfffFaaaF```FeeeF]]]GPPPF]]]F[[[F]]]FIIIFMMMG___F,,,k
```ENNNFMMMFJJJFWWWGTTTFSSSFRRRFRRRFQQQFPPPGPPPF___FSSSFJJJFJJJFsssD333
I\\\FNNNFLLLGKKKFKKKFIIIFIIIFHHHFHHHGHHHFJJJFMMMFcccF
VnnnGQQQFJJJFLLLFLLLFKKKFHHHGZZZFpppF
???+444
***w***j)))w333
;;;2999
GGGGGG
2119988
"Zdktsr
#ZZdks||
$^Zedkvs|
sKVV^^Zeekr{
d@KKVVTTTQePkr
ZE@@@@HVHWWWQPPrp
^EEE@@@@@@@WWWQPjhr
_FEFEFEEEE@@@HWWQPrr
KFFFFFFFFFFFF@@HWQPhr
@FFFFFFFFFFFFFE@@WQPtt|
@EFFFFFFFDDDDDEBHWWPht|
/!o`aabIIIIbaaoo!//a)
!oo`aabIJJJIIbaa`o!oI)
!b`a!/
o`o`I(
,babC+
(aaICo
*`IICa
-JCJI` -/oIIICb-
/aECJJJIJIJCa
/ICCCCCCb/
o!!!!!
11??;;33
===<?;?;;333
hannll
1??;;33
naannll
=11??::33
11??4;:3
=11?;;:33
=1<?;;
aP```a
===?<?;8
`SRP``
PSSR``a
STSSP``a
SUTTTSSPP``a
UAAJJUUTTSSRR`aal}
ABAAAJJIIIIWSWRRRbn
PABBBAAAAJJIIKIHHVVeean
PBFBDDBBBLBLLLLKKKHHVVeaanl
SFFFBDDDDBBBBBLBKLKKHHeeennnl}
TFFFFFFFDFDDDDDBBBLLKKHHeeannhh}
UFFFFFFFFFFFFFFFDDDBBLKHHHeaanh}}
UFFFFFFFFFFFFFFFFFFFBBLLKHVebanhh
AFFFFFFFFFFFFFFFFFFFFFDBKKHVbba
AFFFFFFFFFFFFFFFFFFFFFFDBLKKWb`aa
BFFFFFFFFFFFFFFFFFFFFFFFFDLLHWRba
FAFFFFFFE@MZ[ggffffff
]^X!,,,/%g[[\MM\\\\[Yf#/,()*'
&!&&ggY[[\\\MMMM\\\[[Ygg&%%/#Yg
#\%&fgY[[\\MMMMMMMM\\[[gff&%%fM\
/MffgYY[\\MMMNNNNMMM\\[YYgff%Y\\
NYfY[[-f
[Xff&[M[5
\\YY[[5
YYff\M%
fEY[[\7
/[YYY\E7
/E\[[\!
%[YY[NN6
[E\\\[
7[[[[ME!
/EM\\\!
(%\[[MEN7
[F\\M\(
,\\\\EE%
/NEMMM[(
7[\\\EEM,
!EENMM\!7
7/\M\MNF\(
#EENNNMf!+,(//fMMMMNEN+
!EEENNNN\\\\MNMMMEEN+
#\EEENNNNNNMNMNEEY/
!#MEEEEEENEEEE\/
#%\NEEEEEMY/$
#/,,+/!
GGGGGG
GGGGGG
#(-27;@EJOTY^chmrw|
VS_VERSION_INFO
VarFileInfo
Translation
StringFileInfo
043A04B0
Comments
Schoology
CompanyName
Schoology
FileDescription
Schoology
LegalCopyright
Schoology
LegalTrademarks
Schoology
ProductName
Schoology
FileVersion
ProductVersion
InternalName
KARNFL
OriginalFilename
KARNFL.exe
Antivirus Signature
Bkav W32.AIDetect.malware1
Lionic Clean
Elastic malicious (high confidence)
MicroWorld-eScan Clean
FireEye Generic.mg.c85ee9fe0a4d3464
CAT-QuickHeal Clean
McAfee Artemis!C85EE9FE0A4D
Cylance Clean
VIPRE Clean
Sangfor Trojan.Win32.Save.a
K7AntiVirus Clean
BitDefender Clean
K7GW Clean
Cybereason Clean
Baidu Clean
Cyren W32/VBKrypt.AXS.gen!Eldorado
Symantec Packed.Generic.575
ESET-NOD32 a variant of Win32/Injector.EPVN
APEX Malicious
Paloalto Clean
ClamAV Clean
Kaspersky Trojan.Win32.Vebzenpak.agdc
Alibaba Clean
NANO-Antivirus Clean
ViRobot Clean
Rising Clean
Ad-Aware Clean
Sophos ML/PE-A
Comodo Clean
F-Secure Clean
DrWeb Clean
Zillya Clean
TrendMicro Clean
McAfee-GW-Edition BehavesLike.Win32.Generic.ch
CMC Clean
Emsisoft Clean
SentinelOne Static AI - Malicious PE
GData Clean
Jiangmin Clean
Webroot Clean
Avira Clean
eGambit Unsafe.AI_Score_99%
MAX Clean
Antiy-AVL Clean
Kingsoft Clean
Gridinsoft Clean
Arcabit Clean
SUPERAntiSpyware Clean
ZoneAlarm Clean
Microsoft Program:Win32/Wacapew.C!ml
Cynet Clean
AhnLab-V3 Clean
Acronis Clean
VBA32 Clean
ALYac Clean
TACHYON Clean
Malwarebytes Clean
Panda Clean
Zoner Clean
TrendMicro-HouseCall Clean
Tencent Clean
Yandex Trojan.GenAsa!5wnZ8amFQDs
Ikarus Clean
MaxSecure Clean
Fortinet Clean
BitDefenderTheta Gen:NN.ZevbaF.34050.im0@ayhPhYaG
AVG Win32:Trojan-gen
Avast Win32:Trojan-gen
CrowdStrike win/malicious_confidence_60% (W)
Qihoo-360 Win32/Trojan.Vebzenpak.HwMA4iQA
No IRMA results available.