Static | ZeroBOX

PE Compile Time

2021-08-17 15:13:43

PDB Path

C:\code\16\cal\Release\cal.pdb

PE Imphash

ff42c22be7db6fd997a1f31962592e30

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00001000 0x000220a9 0x00022200 6.69291327208
.rdata 0x00024000 0x00006a2e 0x00006c00 4.69759698244
.data 0x0002b000 0x0006daa4 0x0006ba00 7.66719324825
.rsrc 0x00099000 0x00001338 0x00001400 5.72554231319
.reloc 0x0009b000 0x000085d6 0x00008600 1.84802224565

Resources

Name Offset Size Language Sub-language File type
RT_ICON 0x000990fc 0x000010a8 LANG_NEUTRAL SUBLANG_DEFAULT dBase IV DBT of @.DBF, block length 4096, next free block index 40, next free block 0, next used block 0
RT_GROUP_ICON 0x0009a1a4 0x00000014 LANG_NEUTRAL SUBLANG_DEFAULT data
RT_MANIFEST 0x0009a1b8 0x0000017d LANG_ENGLISH SUBLANG_ENGLISH_US XML 1.0 document text

Imports

Library KERNEL32.dll:
0x424000 FreeConsole
0x424004 VirtualProtect
0x424008 CreateFileW
0x42400c ReadConsoleW
0x424010 WriteConsoleW
0x424014 WideCharToMultiByte
0x424020 EncodePointer
0x424024 DecodePointer
0x424038 Sleep
0x42403c GetLocaleInfoEx
0x424040 MultiByteToWideChar
0x424044 GetStringTypeW
0x424048 GetLastError
0x42404c HeapFree
0x424050 GetCommandLineA
0x424054 GetCPInfo
0x424058 RaiseException
0x42405c RtlUnwind
0x424060 HeapAlloc
0x42406c IsDebuggerPresent
0x424070 GetProcessHeap
0x424074 SetLastError
0x424078 GetCurrentThreadId
0x42407c ExitProcess
0x424080 GetModuleHandleExW
0x424084 GetProcAddress
0x424088 HeapSize
0x42408c GetStdHandle
0x424090 WriteFile
0x424094 GetModuleFileNameW
0x424098 GetFileType
0x42409c InitOnceExecuteOnce
0x4240a0 GetStartupInfoW
0x4240a4 GetModuleFileNameA
0x4240b0 GetTickCount64
0x4240bc IsValidCodePage
0x4240c0 GetACP
0x4240c4 GetOEMCP
0x4240c8 CloseHandle
0x4240cc FlushFileBuffers
0x4240d0 GetConsoleCP
0x4240d4 GetConsoleMode
0x4240d8 ReadFile
0x4240dc SetFilePointerEx
0x4240e8 FlsAlloc
0x4240ec FlsGetValue
0x4240f0 FlsSetValue
0x4240f4 FlsFree
0x4240f8 GetCurrentProcess
0x4240fc TerminateProcess
0x424100 GetModuleHandleW
0x424108 LCMapStringEx
0x42410c IsValidLocaleName
0x424110 EnumSystemLocalesEx
0x424114 HeapReAlloc
0x424118 LoadLibraryExW
0x42411c OutputDebugStringW
0x424120 LoadLibraryW
0x424124 SetStdHandle
Library USER32.dll:
0x42412c GetSystemMetrics
0x424130 PostQuitMessage

!This program cannot be run in DOS mode.
`.rdata
@.data
@.reloc
D$@SVW
D$ j@P
D$ j@P
D$$j@P
D$$j@P
D$8jlP
D$8jlP
D$hSVW
CD$@Pj
L$X9L$8
D$8SVW
D$(9D$ t
D$8SVW
D$(9D$ t
D$@9D$8t
D$@9D$8t
D$@9D$8t
D$@SVW
D$09D$(t
D$`SVW
D$ ;D$(u
CD$@VW
D$$RPW
\$\QSW
D$HSVW
D$$RPS
t$HQVS
D$`SVW
L$TQhV
:D$Tuc
:D$lu
;D$ sZ
D$hSVW
L$hQh:
:D$huY
:D$utH
:D$ruJ
uB9;uB
D$xSVW
L$lQh(
:D$luE
:D$luY
uB9;uB
D$0SVW
tb9u^j
tb9u^j
t~9uzj
tG9uCj
<xt"<Xu!
<xt"<Xu!
<ntw<Nts<it
f9tGj
Wj5_f;
PPPPPPPP
QQSVWd
HtHu4j
PP9E u
HHtVHHt
Genuu_
ineIuV
nteluM3
~pjCXf
j@j _W
tyPVj@W
_tcPVj@
u#j,Xf;
>Cu/f9F
RVSQSWV
xy;5xyI
,SVWj0X
Wj0XPV
SVWjA_jZ+
uBjAYjZ+
x$;5xyI
HHtVHHt
<0|o<9
G Pj*S
G$Pj+S
G(Pj,S
G,Pj-S
G0Pj.S
G4Pj/S
G8PjDS
G<PjES
G@PjFS
GDPjGS
GHPjHS
GLPjIS
GPPjJS
GTPjKS
GXPjLS
G\PjMS
G`PjNS
GdPjOS
GhPj8S
GlPj9S
GpPj:S
GtPj;S
GxPj<S
G|Pj=S
URPQQhp
t VV9u
Yu2Vj@h
;t$,v-
UQPXY]Y[
x&;5xyI
~';_t|%3
Ht+Ht$Ht
HtHHt
SVjA[jZ^+
jAZjZ^+
+tHHt
+t"HHt
HAO8t
uHjAXf;
permission denied
file exists
no such device
filename too long
device or resource busy
io error
directory not empty
invalid argument
no space on device
no such file or directory
function not supported
no lock available
not enough memory
resource unavailable try again
cross device link
operation canceled
too many files open
permission_denied
address_in_use
address_not_available
address_family_not_supported
connection_already_in_progress
bad_file_descriptor
connection_aborted
connection_refused
connection_reset
destination_address_required
bad_address
host_unreachable
operation_in_progress
interrupted
invalid_argument
already_connected
too_many_files_open
message_size
filename_too_long
network_down
network_reset
network_unreachable
no_buffer_space
no_protocol_option
not_connected
not_a_socket
operation_not_supported
protocol_not_supported
wrong_protocol_type
timed_out
operation_would_block
address family not supported
address in use
address not available
already connected
argument list too long
argument out of domain
bad address
bad file descriptor
bad message
broken pipe
connection aborted
connection already in progress
connection refused
connection reset
destination address required
executable format error
file too large
host unreachable
identifier removed
illegal byte sequence
inappropriate io control operation
invalid seek
is a directory
message size
network down
network reset
network unreachable
no buffer space
no child process
no link
no message available
no message
no protocol option
no stream resources
no such device or address
no such process
not a directory
not a socket
not a stream
not connected
not supported
operation in progress
operation not permitted
operation not supported
operation would block
owner dead
protocol error
protocol not supported
read only file system
resource deadlock would occur
result out of range
state not recoverable
stream timeout
text file busy
timed out
too many files open in system
too many links
too many symbolic link levels
value too large
wrong protocol type
bad allocation
M(knN0123456789abcdefghijklmnopqrstuvwxyz
A0123456789abcdefghijklmnopqrstuvwxyz
0123456789abcdefABCDEF
Unknown exception
bad exception
 !"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~
(null)
`h````
xpxxxx
_hypot
_nextafter
Sunday
Monday
Tuesday
Wednesday
Thursday
Friday
Saturday
January
February
August
September
October
November
December
MM/dd/yy
dddd, MMMM dd, yyyy
HH:mm:ss
CorExitProcess
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
GetCurrentPackageId
SunMonTueWedThuFriSat
JanFebMarAprMayJunJulAugSepOctNovDec
`h`hhh
xppwpp
MessageBoxW
GetActiveWindow
GetLastActivePopup
GetUserObjectInformationW
GetProcessWindowStation
__based(
__cdecl
__pascal
__stdcall
__thiscall
__fastcall
__clrcall
__eabi
__ptr64
__restrict
__unaligned
restrict(
delete
operator
`vftable'
`vbtable'
`vcall'
`typeof'
`local static guard'
`string'
`vbase destructor'
`vector deleting destructor'
`default constructor closure'
`scalar deleting destructor'
`vector constructor iterator'
`vector destructor iterator'
`vector vbase constructor iterator'
`virtual displacement map'
`eh vector constructor iterator'
`eh vector destructor iterator'
`eh vector vbase constructor iterator'
`copy constructor closure'
`udt returning'
`local vftable'
`local vftable constructor closure'
new[]
delete[]
`omni callsig'
`placement delete closure'
`placement delete[] closure'
`managed vector constructor iterator'
`managed vector destructor iterator'
`eh vector copy constructor iterator'
`eh vector vbase copy constructor iterator'
`dynamic initializer for '
`dynamic atexit destructor for '
`vector copy constructor iterator'
`vector vbase copy constructor iterator'
`managed vector copy constructor iterator'
`local static thread guard'
Type Descriptor'
Base Class Descriptor at (
Base Class Array'
Class Hierarchy Descriptor'
Complete Object Locator'
1#SNAN
1#QNAN
bad locale name
generic
unknown error
iostream
iostream stream error
system
ios_base::badbit set
ios_base::failbit set
ios_base::eofbit set
Calculator Console Application
Please enter the operation to perform. Format: a+b | a-b | a*b | a/b
Division by 0 exception
Result is:
invalid string position
string too long
bad cast
0123456789ABCDEFabcdef-+XxPp
0123456789-+Ee
0123456789ABCDEFabcdef-+Xx
C:\code\16\cal\Release\cal.pdb
FreeConsole
VirtualProtect
KERNEL32.dll
GetSystemMetrics
PostQuitMessage
USER32.dll
WideCharToMultiByte
InterlockedIncrement
InterlockedDecrement
EncodePointer
DecodePointer
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
GetLocaleInfoEx
MultiByteToWideChar
GetStringTypeW
GetLastError
HeapFree
GetCommandLineA
GetCPInfo
RaiseException
RtlUnwind
HeapAlloc
InitializeCriticalSectionAndSpinCount
IsProcessorFeaturePresent
IsDebuggerPresent
GetProcessHeap
SetLastError
GetCurrentThreadId
ExitProcess
GetModuleHandleExW
GetProcAddress
HeapSize
GetStdHandle
WriteFile
GetModuleFileNameW
GetFileType
InitOnceExecuteOnce
GetStartupInfoW
GetModuleFileNameA
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetTickCount64
GetEnvironmentStringsW
FreeEnvironmentStringsW
IsValidCodePage
GetACP
GetOEMCP
CloseHandle
FlushFileBuffers
GetConsoleCP
GetConsoleMode
ReadFile
SetFilePointerEx
UnhandledExceptionFilter
SetUnhandledExceptionFilter
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
GetCurrentProcess
TerminateProcess
GetModuleHandleW
GetUserDefaultLocaleName
LCMapStringEx
IsValidLocaleName
EnumSystemLocalesEx
HeapReAlloc
LoadLibraryExW
OutputDebugStringW
LoadLibraryW
SetStdHandle
WriteConsoleW
ReadConsoleW
CreateFileW
.?AV_Locimp@locale@std@@
.?AVios_base@std@@
.?AV?$_Iosb@H@std@@
.?AV?$basic_ios@DU?$char_traits@D@std@@@std@@
.?AV?$basic_streambuf@DU?$char_traits@D@std@@@std@@
.?AV?$basic_ostream@DU?$char_traits@D@std@@@std@@
.?AV?$basic_filebuf@DU?$char_traits@D@std@@@std@@
.?AVcodecvt_base@std@@
.?AV?$codecvt@DDH@std@@
.?AV?$basic_istream@DU?$char_traits@D@std@@@std@@
.?AVbad_alloc@std@@
.?AVlogic_error@std@@
.?AVlength_error@std@@
.?AVout_of_range@std@@
Copyright (c) 1992-2004 by P.J. Plauger, licensed by Dinkumware, Ltd. ALL RIGHTS RESERVED.
.?AVtype_info@@
.?AVbad_exception@std@@
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
.?AVsystem_error@std@@
.?AVbad_cast@std@@
.?AVexception@std@@
.?AV_Iostream_error_category@std@@
.?AVfailure@ios_base@std@@
.?AVruntime_error@std@@
.?AV?$ctype@D@std@@
.?AV_System_error_category@std@@
.?AV?$numpunct@D@std@@
.?AVerror_category@std@@
.?AV?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@
.?AV?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@
.?AV_Generic_error_category@std@@
.?AV_Facet_base@std@@
.?AUctype_base@std@@
.?AVfacet@locale@std@@
_#nq" m]
f_t~#
/`c!\#
6X**ip!F
X*Jip!{I5TC
X*jip!^
ip!bP<
<X**jp!
=X*Jjp!
CX*jjp!]O;
jp!O=),C
X**kp!a
X*Jkp!
X*jkp!@.
kp!~L8NC
X**lp!\R>zC
X*Jlp!
fX*jlp!
lp!kYEtC
X**ep!@
%X*Jep!
X*jep!85
{b'7PX*
fX**fp!
X*Jfp!
X*jfp!
!mVL5^Q
-{z0\#n
fp!NF@4C
X**gp!Z
X*Jgp!
!mi_PpQ
a<X*jgp!
X**hp!
X*Jhp!
X*jhp!M
;hu\#.
X*:mp!
X*Zmp!
gh:X*zmp!
mp!VMG
r|b8gU
*M>7gX
UAlgV9
"mq-o)
Gk;m:?
Gk;u::
]&/<*Vm
_dRs2/<*
;zpRt*
2zu\%"
|c;:2"
X+wub
Hv"#nt
#zz!`X
7 mpr\#
{bXz!`X*
%1snx}l;
'n|cpW
v|*MZ!`
Kmz'`X
%fnq"\
&%mpt
k|crz<
36z"`X
?cU=iX
Oymnqy
i*q1r"#v
"q1r"%
Qfnq"}
)Pkp!
`y)loq
#nq"}>
WC&nqx}
mpr",Z
qEs4joT
/wn9gR
'qz`X
GF}c^b
Zs40c\
'0|cpPeGU
*vkp!"#
)od?)a
5|r" #
c>xq"},
`yiHoq
;:xq"}
gnqx},
;y):oqr
_y9@oq
|cXbfs
XRg'qA%)[F
yHEf)b*[n
:Vk{ 0
1Gmp!
`y);oq
doCA!d
-Q-ro7b
X*&mp!
X*Fmp!
X*Rmp!
)vz,\#
nX*rmp!
!.\$U~
mp1K+
2fooTp
nqU^!N#
4UU)od?~
uq"\$f'}c
cyuToq
bySToq
']9nqt
9.nqr}<z
9.nqu
%hq""3~
`y9Moq
O9.nqy}|
)kpq""3"
_#nqr}L}
jp! #2
4bpq"
lg^qb1
e[q""3
mps"3~
mps}\p
nqr $.
eBoqr\
%Dq""!
q^Rnq"
'A|c^bV~
/Hfj"n
TD*MF/`
W=7"5^
ux x[O
$nqs".
/Hvd"n
O|c_bf
{b{z#`X*zmp!
"oq""!
y|*M*(`
}lgVq*
mz!`X
){oq"
.wR8g-
.w*8g]
HF-"nt
Ejp! 4
,nqt}|
%ip! $
)od?+5
||*MB#`
"q1r"+
/ss"3:
.sr"+:
xpq""3^
M"pip!
xpq""3^
"q1r"+
@{C<,u
s|c;C2$
>q8%d!
h1%iy"+f
q7%c_t
'])nqt"
*^mp!}
_yIwnqUU!N
b)#Ms%
XE9<%F
KU#j=V
P?n yv{+
@79&ck
CO{U->
_, u*0
&u5%Dg
PPo7!1
%nqx}\
%nqx},
mps}|
!mps},
nq"}LG
+^pq"}lF
ty!pnq
0wN8%%.
!!mpr}
T{'cY.lv)#
:sCD#r
-}vr1WSu
%}v:!R
%oq""#
mp"},
%oq""#
mp"}<
{hH[m'
{l*vW'
mpUU!N
)od?'3
x8/v;n
BK2GAz
2/c[Q%"}
ONK$Qi
1Q2$-V
9z'h;
[dr9lb
.Wb{x
41J,,J
{@DM5s`8O
YFbL=p
L}4.u;
|Pq@v.
&Gjp!$
iEvj8:BLP8e
LthGjad
rXP_78XF
|N[,[ap
5=uxgfzS
pza@+'
bxKf^&
L\-jKk
[OJvENt
LF^"(gTBs`Z
PS(x|^L
g;clFci
2FQHs39nXY;T
~S@-'a
ZEV-x-
J`M$~K
\K*A'O
[$Q1[~
A(."@k0
/;ogM!
|AO1Uw
,"'-P_
1Hd`/
PqmCfn
5XQ;c
8#mEdp
+oK1(h
Y_Zl?^
h,HS ;
VPg7rj$B
@Jg*,
6A2..cT<B
Gdq~@
%iHwtD}
t\?nre5fy<
w#TGzMy3
=nR@[#_
".F)yB:l]
`>BfI
yux2t4
Kv)#WX
{+uNVG8p{
/B3[UA
&]OYQxM
jRPBne
AOi}I_
X+18dO
iUq~\N
p;}RBC
$t\D?
[Cc$s6&:y
^jBp&s
XJr.q-k
}l\`D
~2<<j,
?O?Ruh
/!@P{&
hY*EL-
+_HAA|
"Iu3{I4
Bjg6ME
P^3,:I
v`AtM6+
@a7r:4)
"Fgsc-CkQ
Qim"Mq
3Evj(
wAnEIll
2)?51
w0?hxg
\KJy9f$.
/T!V<cod
s\JaLu
ZjH'VE
@QMbwMS
#:?KXI
%`Ek,%
tyAcXA
qjj&K#W
H|AE]I
r2O8IK
Ph9faVV
$# ETM
Y9+XSk
v#pd|H
oA::+M2
li=9},
_eZFF
GtYp-C
_<3W(F
Ya+Z?9&
6P!n<[
!)|qOy
SUvIknH
zriDL9
zjgyE
^u3/T*
'Og0v`cn
_=4)^l?
|#|*)p
n)88ew
ck]P0|y
~5VM<;
J~VW_=g
)fJc93
O#-?Jc8
9J=W!B
}&Ir@;
,%D\DBY
%%j?oG
@[ur<|
u<<,xfm,
rP_^"b
QReteM
;qMoWj
{g[IKO
1pQ~z/
\cPs{|
M{QeV*&z
ye)rI_9
qW5^EW
[.z|:a
pz`Q~$
qCnwoD
bz51'2:
n<Vj37
egfH21
6h@\I4
%jm^K9
nNsea$&
$D9I}'
pEj~f6_
N!b'.C
D+CGHL
->hGHX M
7 3B37
MWlCf7
b3u}*H.
JUA@+&
d|\uqT
hYEvwg
FJT"i.
[!oS-B
XPZVJ*
89WMl<
?TIB}L
|{U6{b8
_2O'Ei3&
kkBmJD
B[FRt)
hvF\<$
X!xSL0
[Z=E!
KsS`\
M\tK0v3
!(#p~c
wO<F)+
&vI6/8
US\eLG5
=_g8yF!
q7?L*4
tPDAnk
J%?aVX
S}!AhK
v56i`9
ob2ypX
x"P2}:
* ^43 L
b F!\59
3'acw[
ep-J&i
*Jn)tN
)j/8A'(
.C7yFT;
g['vd>3x+
'KX6@#
!2E&fs
?'%=/]
{_X1IG
>xnOT|
2.0x&?yj(
=*X]W==
\&)*}0
s(2G^E
]|YIRW
Mn^J?bg
|_oF&Je
}zV;P5
)e6cp=
@!Q<8{
UELgqn
r^$"hJ4
2&Q/)k@a
<Y"V?h
a,XWCx
~&4*WR
'o>Jk+
)ARBzp
+wi~.?
?odheC]^
_uN$qQ
'!f/x`P
Wv$i[0
qET0r]
/NNh7$?~~
}#Tmec
jdE#5m*
R`vc@3lvd
C^6`>DAQ|
t|gS|j
Yb^T"Y
xa8q@U
MRYrKC
'}+~ W
x#)u#RM:
|_OjHS
Xn8f),
oD#RtK
I/^]'&
+6J`Y/
J1VKsUTYr
FuuyV6
{35 ;I2
,r~0J_'*
sZc=?9AwZ
gv.Gl L
ZOxV]S
d1 {bv
~"B)NGU
K0y S6FX
oMtdUo
U5|a2/
(+CFHRs
dtY\iq
r"+6S.;
j1hLr>
Gb#Y7J~N
/<bxOrC
[B)O@oI9
~VhR^M
;!_Ehn=
kgPlA:
L}mBEgt#
!Verid
T!KKB&
8p^C7]
~m~"]%
51),Tu
^mk!^;
~zmP&
Z-1\$!
v#nNXi
I{F,X/
>"mY_W
Wd"jwM
kDK5g/4
63mY<T
S2,;[D
e;uG>B
-Zje [
k.SI+hv
sk-W5yA
&[Be'V
'4BfBL
_%r["y
MjlI5W
/pZE|$
8U NJ1
(wC)J`
Aw1"^.&;t
EzKyAc@
gW2'j+yP7,~h
LI$I)Qrn
f6}rg~
Lo mTfN
+>nU-0
royFOT
&-ur0B
p\B}5F
K%xF7F
SdkW}y
"}&2j[
ZLcGUm
ZQ8M!"
WRy-M+
,OtF?t$
)>&#|2
7F9-Zfy
4$,}y*
zWw"pGl,
"]I`wK
*Cg$$m
0$!Q;>[C
Qbt]q:
N,@,dw
7z%9q`
>-LWo1
N$u8A
{!K*m5
~4vri2w
'#yLE1T
0&6`C%
/"FRs0
-[1;f>
1)d?<
m&yyAzN
+NE/4N1
Sv1E.95
D!|EM:
^0[ me
SX:,>C
=gjP{N
Obxqn
A 1fA/
l>8dF`
+*VFGA
dW>uy!
yoL(1o
mb"8g2
/Nq7C3
,$Fn;6
%g@F4^4"
".cekh
5;z8?Q
o~ooi9
\_\E <
L9\#l'
%9rS=Jv
W.8Wo;M
m9+FVq
Iq^ZL3
]\L!aU
5J1<II
GA23d%
)^/^\
~q2S7i(
I%G)]'
"/)Hw6H
&wJ*n(
3~,#-r
7SAb.o3
*;Y~CD
dgg<q!
9g^$D=6
7z^WqG
5jx<[)
\*j^V'
m(a,YV=
8Yl<^2:
;xuPyE
O4ZY<_C
6Y:,D#?.ED
_P-7%j
BBv3"Sy
fK!~wL
d9-("'+
J.)96'H
W0.Vh
^e*8,l
1CItqq?V
H`b*[\
cluZ\6:
Lu'~eWA5p
,ZRQOVi)
m#5R/n
g:F{JF
80>%h'
"9Bp{J
&_4f0a
l#ochk#
&dG7KU
D9n@l/
3{JWw2
KS&\\av;
;2d<Z:_T7t|
86,.i$#Eonn%
0QBi5z]
:BQeU0
%Ww w3
B>cVL)
V78wh5
}H#Q5+
]rWo=A
lG=7j_
Uy@GPG
y\J/'9B
spW=,'
7DRt\'
EY@V$4
N*Zs`^
iAS{Xq
?,Lc)f
9Y|}m2
a`O009-
_$wGjx^+4
UI$aq_
uhK]#O
dLI)6w*
zTvm#$
?MC0lZ
(9lL3
n2=C/"
hu/S!{
GdsATY|
9@Zq(y
u:}k,;F
t;,9b*wWP
%7=gdj
s)Fc `)au
~7Mw)3
QTiA$+4,
~$NqS8
52>A0.
p*L_pV
WSx'r}
|XKLqw5
bxt;cc(
plIt"8
`#B#yy
\j$:Z?sr
*d[8JD0
#.K#=z
(L6'=m
!vVK;
m^07](A
ixttN%
I\O#ny
>Kf?j6
TUVs/u$
~pp]~Op
'7p~Y'O
=a|H{R
<4A.]_`8N
';jGd&
|fwKj-
=E"])~
nN[\KU
:3H;<\
NkI;8|
`R;ser
;qLo\Ej
;7:<Eg
o}Y`g-
Ha{2kP
($4m6lI
35!;CX
RpgEPk
|n(=c4
{zvKez
DAqXn7l
~2`bh&
^hzOV
syYPZ\*
^R+2Vr
:6R~m{/)
s#sVinS
T,(\9j
4;|od
B{q]#af
("W|4HH
gy}5ul
"i$rxD4
b~bDd`F5
n^@xl(
\HIn6(
p~W-5p
?$KD;!
+Q !A(
(e>72A
62WI@#
bn ;DK?
`Ya`M6
Y[Z<&+
q6{\W|
2O^jN}
Z'FFX_E
%t3`K&
rAU.a
6JJDY=
nRl:,3
iEE}a|
di}KmS
AZet$,
@C"Aaw
&%rZ(_C
8B%#(R
~+#$z$
<?xml version='1.0' encoding='UTF-8' standalone='yes'?>
<assembly xmlns='urn:schemas-microsoft-com:asm.v1' manifestVersion='1.0'>
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v3">
<security>
<requestedPrivileges>
<requestedExecutionLevel level='asInvoker' uiAccess='false' />
</requestedPrivileges>
</security>
</trustInfo>
</assembly>
PADPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGX
;$;*;/;6;H;
=F>X>m?
0Y1h1t162E283&484J5
;/;;;o;
<;=U=a=
>I?X?f?
3&454&555)686F6Y7h7v7
9z:i;x;
>5?I?X?f?
Y4h4v4
<)>8>F>G?L?
4 4p4}4
5*565<5j5q5
8$9*9@9G9M9R9`9
:%:T:Z:p:w:}:
7D7V7f7
8 8'8/8D8a8v8
9S:h:q:
4v5e7~9
;$;G;R;u;
7|8K9X9
>5?Q?X?j?
#2`2y2
7,737;7@7D7H7q7
7"8(8,80848
89Q9X9\9`9d9h9l9p9t9
<,=2=D=^=f=u=
>p>u>~>
1#1-1g1l1s1y1
2;2C2c2k2
56S6g6
6,979Y9d9
9#:K:Y:
<#<<<C<K<P<T<X<
<2=8=<=@=D=
>/>a>h>l>p>t>x>|>
2<3T3Y3
6 6/6p6
8F8`8o8|8
9N9[9d9
=R>Y>{>
66+666[6
; >*>5>
7'808>8j8o8u8y8
<"=-=?=
[4_4c4g4k4o4s4w4{4
5)5a5g5m5s5y5
6,656f6l6r6x6~6
1-333Y3_3~3
35"7&7*7.72767:7>718?8X8a8
33-3t3
7$7\7d7
8'838B8g8|8
89:9S9d9x9
:!:3:>:C:Z:d:z:
;4;A;M;];c;t;
0$0@0G0M0[0a0v0
1R3[3|3
6=6N6T6
6*7E7c7
8.8c8|8
:%;/;s;
<3<?<N<W<d<
=D=X=c=s=
?(?2?B?
3(31373@3E3T3[3
4$5o5M6W6]6q6}6*7K7
>!>8>T>
4O5Z5`5
;'<c<y<
>/>O>d>n>
60I0Y0
0#0,030<0C0Z0p0~0
1%2+272n2
=,>2>>>C>H>M>V>
4'494K4]4o4
7B8T8f8x8
:+:t:~:
; ;&;.;7;>;F;O;a;y;
657O7X7z7
8!8:8\8c8
91:@:_:
<$=;=P=j=
#0@0V0
2C2Q2_2
2]3c3q3
1!1%1)1-1115191G1
4T6Z6z6
8&9J9z9
?,?6?@?P?U?_?r?
0"0&02060<0F0P0Z0d0n0x0
<1@1D1H1L1P1T1X1\1`1d1h1l1p1t1x1
2$2,242<2D2L2T2\2d2l2t2|2
3$3,343<3D3L3T3\3d3l3t3|3
4$4,444<4D4T4\4d4l4t4|4
5$5,545<5D5L5T5\5d5l5t5|5
6$6,646<6D6L6T6\6d6l6t6|6
6P?T?X?\?`?d?h?l?p?t?x?|?
0 0$0(0,0004080<0@0D0H0L0P0T0X0\0`0p0t0x0|0
1 1$1(14181<1P1T1X1\1`1d1h1l1p1024282<2@2D2H2L2P2T2X2\2`2d2h2l2p2t2x2|2
4(<,<0<
1$1,141<1D1L1T1\1d1l1t1|1
<@<H<L<P<T<X<\<`<d<h<l<p<t<x<|<
0 0$0(0,0004080<0@0D0H0L0P0T0X0\0`0d0h0l0p0t0x0|0
7(747@7L7X7d7p7|7
8$808<8H8T8`8l8x8
9 9,989D9P9\9h9t9
2(242@2L2X2d2p2
6,707@7D7H7L7T7l7|7
8,8084888@8X8h8l8|8
9 9$9(909H9X9\9l9p9t9|9
:$:4:8:H:L:P:T:X:`:x:
; ;$;4;8;<;@;H;`;p;t;
< <$<4<8<@<X<h<l<|<
=(=,=0=4=<=@=H=`=p=t=x=|=
> >$><>L>P>T>X>\>p>t>
?0?@?D?\?`?x?
00040D0H0L0P0T0X0`0x0
2(2H2T2t2
3$303P3X3`3d3l3
404P4l4p4
585X5x5
6 6(6,6D6H6d6h6x6
74787X7x7
8(8H8h8t8
9 9@9`9
: :(:0:8:L:T:\:d:x:
;P;`;l;
<(<4<<<T<\<
=P=d=t=
>8>@>L>l>t>|>
? ?,?L?X?x?
0$000P0\0d0|0
1 1,1L1X1`1x1
2$202P2X2d2
0$0@0\0
4 4$4(4,484<4@4D4H4L4P4T4`4
9$:,:4:<:D:L:T:\:d:l:t:|:
;0;4;8;<;@;D;H;L;P;T;X;\;`;d;h;l;p;t;x;|;
< <$<(<,<0<4<8<<<@<D<H<L<P<T<X<\<`<d<h<l<p<t<x<|<
=(=,=0=4=
3@8`8|8
9$9P9p9
d8h8l8
((((( H
h(((( H
H
(null)
Sunday
Monday
Tuesday
Wednesday
Thursday
Friday
Saturday
January
February
August
September
October
November
December
MM/dd/yy
dddd, MMMM dd, yyyy
HH:mm:ss
mscoree.dll
BR6002
- floating point support not loaded
- not enough space for arguments
- not enough space for environment
- abort() has been called
- not enough space for thread data
- unexpected multithread lock error
- unexpected heap error
- unable to open console device
- not enough space for _onexit/atexit table
- pure virtual function call
- not enough space for stdio initialization
- not enough space for lowio initialization
- unable to initialize heap
- CRT not initialized
- Attempt to initialize the CRT more than once.
This indicates a bug in your application.
- not enough space for locale information
- Attempt to use MSIL code from this assembly during native code initialization
This indicates a bug in your application. It is most likely the result of calling an MSIL-compiled (/clr) function from a native constructor or from DllMain.
- inconsistent onexit begin-end variables
DOMAIN error
SING error
TLOSS error
runtime error
Runtime Error!
Program:
<program name unknown>
Microsoft Visual C++ Runtime Library
Bja-JP
ALC_ALL
LC_COLLATE
LC_CTYPE
LC_MONETARY
LC_NUMERIC
LC_TIME
dkernel32.dll
USER32.DLL
american
american english
american-english
australian
belgian
canadian
chinese
chinese-hongkong
chinese-simplified
chinese-singapore
chinese-traditional
dutch-belgian
english-american
english-aus
english-belize
english-can
english-caribbean
english-ire
english-jamaica
english-nz
english-south africa
english-trinidad y tobago
english-uk
english-us
english-usa
french-belgian
french-canadian
french-luxembourg
french-swiss
german-austrian
german-lichtenstein
german-luxembourg
german-swiss
irish-english
italian-swiss
norwegian
norwegian-bokmal
norwegian-nynorsk
portuguese-brazilian
spanish-argentina
spanish-bolivia
spanish-chile
spanish-colombia
spanish-costa rica
spanish-dominican republic
spanish-ecuador
spanish-el salvador
spanish-guatemala
spanish-honduras
spanish-mexican
spanish-modern
spanish-nicaragua
spanish-panama
spanish-paraguay
spanish-peru
spanish-puerto rico
spanish-uruguay
spanish-venezuela
swedish-finland
america
britain
england
great britain
holland
hong-kong
new-zealand
pr china
pr-china
puerto-rico
slovak
south africa
south korea
south-africa
south-korea
trinidad & tobago
united-kingdom
united-states
CONOUT$
MAINICON
Antivirus Signature
Bkav Clean
Lionic Trojan.Win32.Zusy.4!c
Elastic malicious (high confidence)
MicroWorld-eScan Gen:Variant.Zusy.397809
FireEye Generic.mg.5fcbfeae2b818e9e
CAT-QuickHeal Clean
ALYac Gen:Variant.Zusy.397809
Malwarebytes Malware.AI.1850730742
VIPRE Clean
K7AntiVirus Clean
BitDefender Gen:Variant.Zusy.397809
K7GW Clean
Cybereason malicious.97d898
BitDefenderTheta Gen:NN.ZexaF.34088.NuW@aO6OU7mO
Cyren W32/Faker.AF.gen!Eldorado
Symantec ML.Attribute.HighConfidence
ESET-NOD32 Win32/Formbook.AA
Baidu Clean
APEX Malicious
Paloalto generic.ml
ClamAV Clean
Kaspersky Clean
Alibaba Clean
NANO-Antivirus Clean
ViRobot Clean
Tencent Clean
Ad-Aware Gen:Variant.Zusy.397809
TACHYON Clean
Comodo Clean
F-Secure Clean
DrWeb Clean
Zillya Clean
TrendMicro Clean
McAfee-GW-Edition BehavesLike.Win32.Generic.jc
CMC Clean
Sophos Mal/Generic-R
SentinelOne Static AI - Malicious PE
Jiangmin Clean
Webroot W32.Malware.Gen
Avira Clean
Antiy-AVL Clean
Kingsoft Clean
Gridinsoft Trojan.Win32.Kryptik.oa
Arcabit Clean
SUPERAntiSpyware Clean
ZoneAlarm Clean
GData Gen:Variant.Zusy.397809
Cynet Malicious (score: 100)
AhnLab-V3 Clean
Acronis suspicious
MAX malware (ai score=87)
Panda Trj/RnkBend.A
Zoner Clean
TrendMicro-HouseCall TROJ_GEN.R002H0CHH21
Rising Trojan.Kryptik!1.D6EE (CLASSIC)
Yandex Clean
Ikarus Clean
eGambit Clean
Fortinet W32/Agent.FAA!tr
MaxSecure Trojan.Malware.300983.susgen
AVG FileRepMalware
Avast FileRepMalware
CrowdStrike win/malicious_confidence_100% (W)
Qihoo-360 Clean
No IRMA results available.