Static | ZeroBOX

PE Compile Time

2021-09-12 00:33:48

PE Imphash

0056da32d722449e0387cffcb345ecd5

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00001000 0x000179a5 0x00017a00 6.49308582076
.rdata 0x00019000 0x00034d54 0x00034e00 6.07962827223
.data 0x0004e000 0x00001d8c 0x00000c00 2.23415114126
.pdata 0x00050000 0x000015b4 0x00001600 5.12285886117
_RDATA 0x00052000 0x00000094 0x00000200 1.11345166949
.rsrc 0x00053000 0x000001e8 0x00000200 4.76569929136
.reloc 0x00054000 0x0000069c 0x00000800 5.00858912794

Resources

Name Offset Size Language Sub-language File type
RT_MANIFEST 0x00053060 0x00000188 LANG_ENGLISH SUBLANG_ENGLISH_US XML 1.0 document text

Imports

Library KERNEL32.dll:
0x140019000 Process32First
0x140019008 WriteProcessMemory
0x140019010 SetPriorityClass
0x140019018 GetCurrentProcess
0x140019020 TerminateProcess
0x140019028 GetModuleHandleA
0x140019030 OpenProcess
0x140019038 CreateToolhelp32Snapshot
0x140019040 Sleep
0x140019048 GetTempPathA
0x140019050 K32GetModuleFileNameExA
0x140019058 Process32Next
0x140019060 CloseHandle
0x140019068 GetProcAddress
0x140019070 VirtualAllocEx
0x140019078 GetCurrentProcessId
0x140019080 CreateRemoteThread
0x140019088 K32EnumProcessModules
0x140019090 WriteConsoleW
0x140019098 RtlCaptureContext
0x1400190a0 RtlLookupFunctionEntry
0x1400190a8 RtlVirtualUnwind
0x1400190b0 UnhandledExceptionFilter
0x1400190c8 IsDebuggerPresent
0x1400190d0 GetStartupInfoW
0x1400190d8 GetModuleHandleW
0x1400190e0 QueryPerformanceCounter
0x1400190e8 GetCurrentThreadId
0x1400190f0 GetSystemTimeAsFileTime
0x1400190f8 InitializeSListHead
0x140019100 RtlUnwindEx
0x140019108 RtlPcToFileHeader
0x140019110 RaiseException
0x140019118 GetLastError
0x140019120 SetLastError
0x140019128 EnterCriticalSection
0x140019130 LeaveCriticalSection
0x140019138 DeleteCriticalSection
0x140019148 TlsAlloc
0x140019150 TlsGetValue
0x140019158 TlsSetValue
0x140019160 TlsFree
0x140019168 FreeLibrary
0x140019170 LoadLibraryExW
0x140019178 EncodePointer
0x140019180 ExitProcess
0x140019188 GetModuleHandleExW
0x140019190 GetModuleFileNameW
0x140019198 GetStdHandle
0x1400191a0 WriteFile
0x1400191a8 HeapFree
0x1400191b0 HeapAlloc
0x1400191b8 GetFileType
0x1400191c0 GetConsoleOutputCP
0x1400191c8 GetConsoleMode
0x1400191d0 GetFileSizeEx
0x1400191d8 SetFilePointerEx
0x1400191e0 FindClose
0x1400191e8 FindFirstFileExW
0x1400191f0 FindNextFileW
0x1400191f8 IsValidCodePage
0x140019200 GetACP
0x140019208 GetOEMCP
0x140019210 GetCPInfo
0x140019218 GetCommandLineA
0x140019220 GetCommandLineW
0x140019228 MultiByteToWideChar
0x140019230 WideCharToMultiByte
0x140019238 GetEnvironmentStringsW
0x140019240 FreeEnvironmentStringsW
0x140019248 LCMapStringW
0x140019250 GetProcessHeap
0x140019258 SetStdHandle
0x140019260 GetStringTypeW
0x140019268 CreateFileW
0x140019270 FlushFileBuffers
0x140019278 ReadFile
0x140019280 ReadConsoleW
0x140019288 HeapSize
0x140019290 HeapReAlloc
0x140019298 SetEndOfFile

!This program cannot be run in DOS mode.
`.rdata
@.data
.pdata
@_RDATA
@.rsrc
@.reloc
L$ SVWH
gfffffffH
gfffffffI+
gfffffffH
@SVWAVAWH
A_A^_^[
A_A^_^[
|$ ATAVAWH
A_A^A\
@SVWATAUAVAWH
gfffffffI
fffffff
gfffffffH
A_A^A]A\_^[
t$ AWH
WAVAWH
0A_A^_
@SVATAVH
(A^A\^[
@SVATAUH
8A]A\^[
u0HcH<H
H3E H3E
WATAUAVAWH
A_A^A]A\_
A:8ucI
t&A88t
WATAUAVAWH
A_A^A]A\_
D8L$0uP
UAVAWH
H;xXu5
AUAVAWH
u4I9}(
3I9}(taH
0A_A^A]
UVWATAUAVAWH
`A_A^A]A\_^]
@USVWATAUAVAWH
d$dD;d$lt^
A_A^A]A\_^[]
@USVWATAUAVAWH
A_A^A]A\_^[]
WAVAWH
SVWATAUAWH
L!d$(L!d$@D
D$HL9gXt
A_A]A\_^[
B(I9A(u
SVWATAUAVAWH
A_A^A]A\_^[
t$ WATAUAVAWH
A_A^A]A\_
UVWATAUAVAWH
A_A^A]A\_^]
D8t$8t
D$@H;G
t(<#t
<htl<jt\<lt4<tt$<wt
t$ WAVAWH
<Ct-<D
<StW@:
<g~{<itd<ntY<ot7<pt
<utT@:
D<P0@:
k4+kP+
0A_A^_
x ATAVAWH
A_A^A\
t$ WATAUAVAWH
A_A^A]A\_
;D$Xs;
u3HcH<H
x ATAVAWH
A_A^A\
UVWAVAWH
0A_A^_^]
WAVAWH
0A_A^_
t$ WAVAWH
A_A^_
WAVAWH
A_A^_
x AUAVAWH
@A_A^A]
L$ VWAVH
@UATAUAVAWH
H!T$0D
ue!T$(H!T$
A_A^A]A\]
@8l$Ht
L$ UVWH
WATAUAVAWH
gfffffffH
D8t$ht
A_A^A]A\_
x ATAVAWH
A_A^A\
fD9t$b
UVWATAUAVAWH
D8\0>t
L$@D8]
A_A^A]A\_^]
VWATAVAW
A_A^A\_^
WATAUAVAWH
A_A^A]A\_
\$ UVWATAUAVAWH
H!D$ H
`A_A^A]A\_^]
D$0H9D$8
u"8Z(t
uF8Z(t
vC8_(t
u"8Z(t
uF8Z(t
vB8_(t
UVWATAUAVAWH
`A_A^A]A\_^]
WATAUAVAWH
0A_A^A]A\_
H97u+A
\$ UVWATAUAVAWH
@8|$Ht
@8|$Ht
@8|$Ht
D$XD9x
@8|$ht
@8|$ht
@8|$ht
A_A^A]A\_^]
u"8Z(t
UVWATAUAVAWH
L$&8\$&t,8Y
@A_A^A]A\_^]
fD94Fu
WATAUAVAWH
A_A^A]A\_
\$ VWATAUAVH
D!l$xA
@A^A]A\_^
ATAVAWH
0A_A^A\
@UATAUAVAWH
e0A_A^A]A\]
s WAVAWH
0A_A^_
u~9t$Xt
UATAUAVAWH
A_A^A]A\]
WATAUAVAWH
A_A^A]A\_
WAVAWH
A_A^_
SUVWATAVAWH
A_A^A\_^][
@USVWATAVAWH
D8|$0A
A_A^A\_^[]
WATAUAVAWH
A_A^A]A\_
@SUVWATAUAVAWH
8A_A^A]A\_^][
L$ SUVWATAUAVAWH
8A_A^A]A\_^][
UVWATAUAVAWH
@8t$HtsL
`A_A^A]A\_^]
ATAUAVH
L$ fff
L$ |+L;
A^A]A\
WAVAWH
A_A^_
x ATAVAWH
A_A^A\
UVWAVAWH
@A_A^_^]
ffffff
fffffff
ATAVAWH
A_A^A\
USVWAVH
A^_^[]
LcA<E3
u HcA<H
bad allocation
__based(
__cdecl
__pascal
__stdcall
__thiscall
__fastcall
__vectorcall
__clrcall
__eabi
__swift_1
__swift_2
__ptr64
__restrict
__unaligned
restrict(
delete
operator
`vftable'
`vbtable'
`vcall'
`typeof'
`local static guard'
`string'
`vbase destructor'
`vector deleting destructor'
`default constructor closure'
`scalar deleting destructor'
`vector constructor iterator'
`vector destructor iterator'
`vector vbase constructor iterator'
`virtual displacement map'
`eh vector constructor iterator'
`eh vector destructor iterator'
`eh vector vbase constructor iterator'
`copy constructor closure'
`udt returning'
`local vftable'
`local vftable constructor closure'
new[]
delete[]
`omni callsig'
`placement delete closure'
`placement delete[] closure'
`managed vector constructor iterator'
`managed vector destructor iterator'
`eh vector copy constructor iterator'
`eh vector vbase copy constructor iterator'
`dynamic initializer for '
`dynamic atexit destructor for '
`vector copy constructor iterator'
`vector vbase copy constructor iterator'
`managed vector copy constructor iterator'
`local static thread guard'
operator ""
operator co_await
operator<=>
Type Descriptor'
Base Class Descriptor at (
Base Class Array'
Class Hierarchy Descriptor'
Complete Object Locator'
`anonymous namespace'
FlsAlloc
FlsFree
FlsGetValue
FlsSetValue
InitializeCriticalSectionEx
bad exception
(null)
CorExitProcess
UTF-16LEUNICODE
Sunday
Monday
Tuesday
Wednesday
Thursday
Friday
Saturday
January
February
August
September
October
November
December
MM/dd/yy
dddd, MMMM dd, yyyy
HH:mm:ss
NAN(SNAN)
nan(snan)
NAN(IND)
nan(ind)
AreFileApisANSI
LCMapStringEx
LocaleNameToLCID
AppPolicyGetProcessTerminationMethod
 !"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~
[aOni*{
~ $s%r
@b;zO]
v2!L.2
1#QNAN
1#SNAN
UUUUUU
UUUUUU
=imb;D
/>58d%
VM>cQ6
>jtm}S
)>6{1n
+f)>0'
;H9>&X
*StO9>T
n03>Pu
K~Je#>!
bp(=>?g
BC?>6t9^
K&>.yC
.xJ>Hf
y\PD>!
|b=})>
c [1>H'
uzKs@>
3>N;kU
kE>fvw
V6E>`"(5
?UUUUUU
?7zQ6$
Unknown exception
bad array new length
abcdefghijklmnopqrstuvwxyz0123456789_ABCDEFGHIJKLMNOPQRSTUVWXYZ
pidhtmpfile.tmp
pidHTSIG
Taskmgr.exe
kernel32.dll
LoadLibraryA
vector too long
string too long
!This program cannot be run in DOS mode.
vMRich
`.rdata
@.data
.pdata
@_RDATA
@.rsrc
@.reloc
L$ SVWH
9t$Pu$H
UWAUAVAWH
A_A^A]_]
\$ UVWATAUAVAWH
PA_A^A]A\_^]
@USATH
@USVWAVAWH
A_A^_^[]
@SUWAVAWH
A_A^_][
A_A^_][
@SVWATAUAVAWH
A_A^A]A\_^[
t$ WATAUAVAWH
0A_A^A]A\_
WAVAWH
A_A^_
@SUVAUH
8A]^][
@SVATAUH
8A]A\^[
@SVATAVH
(A^A\^[
|$ AVH
H3E H3E
WATAUAVAWH
A_A^A]A\_
WATAUAVAWH
A_A^A]A\_
D8L$0uP
UAVAWH
H;xXu5
AUAVAWH
u4I9}(
3I9}(taH
0A_A^A]
UVWATAUAVAWH
`A_A^A]A\_^]
@USVWATAUAVAWH
d$dD;d$lt^
A_A^A]A\_^[]
@USVWATAUAVAWH
A_A^A]A\_^[]
WAVAWH
SVWATAUAWH
L!d$(L!d$@D
D$HL9gXt
A_A]A\_^[
B(I9A(u
SVWATAUAVAWH
A_A^A]A\_^[
t$ WATAUAVAWH
A_A^A]A\_
UVWATAUAVAWH
A_A^A]A\_^]
UVWATAUAVAWH
A_A^A]A\_^]
t$ WATAUAVAW
A_A^A]A\_
t$ WATAUAVAWH
A_A^A]A\_
;D$Xs;
x AUAVAWH
@A_A^A]
WAVAWH
@A_A^_
L$ UVWATAUAVAWH
0A_A^A]A\_^]
T$ D)s
UVWATAUAVAWH
A_A^A]A\_^]
x ATAVAWH
D8d$8t
t1D8d$8t
bD8d$8t
D8d$8t
@A_A^A\
8\$PtD
t?8_:t
8\$PtF
tA8_:t
x ATAVAWH
D8Y:u_H
A_A^A\
VWATAVAWH
D8a:uVH
0A_A^A\_^
tQD8c:u0M
@HcC(H
UVWATAUAVAWH
0A_A^A]A\_^]
t$ WATAUAVAWH
t$HA_A^A]A\_
UVWATAUAVAWH
L$<;L$P
L$4+L$8
l$0D+ D9
L$4+L$H
A_A^A]A\_^]
SUVWATAVAWH
A_A^A\_^][
@8|$Pu
<CtO<Dv
<[tO<a
<itz<ntm<ot`<ptS<st
L$0H;K
tj<jtV
@8)u&I
t$ UWAVH
u3HcH<H
x ATAVAWH
A_A^A\
UVWAVAWH
0A_A^_^]
WAVAWH
0A_A^_
t$ WAVAWH
A_A^_
WAVAWH
A_A^_
WATAUAVAWH
A_A^A]A\_
@SUVWATAUAVAWH
8A_A^A]A\_^][
L$ SUVWATAUAVAWH
8A_A^A]A\_^][
AUAVAWH
A_A^A]
UVWATAUAVAWH
@8t$HtsL
`A_A^A]A\_^]
fD9t$b
L$ VWAVH
UVWATAUAVAWH
D8\0>t
L$@D8]
A_A^A]A\_^]
VWATAVAW
A_A^A\_^
WATAUAVAWH
A_A^A]A\_
\$ UVWATAUAVAWH
H!D$ H
`A_A^A]A\_^]
D$0H9D$8
@8l$Ht
u"8Z(t
uF8Z(t
vC8_(t
u"8Z(t
uF8Z(t
vB8_(t
UVWATAUAVAWH
`A_A^A]A\_^]
WATAUAVAWH
0A_A^A]A\_
H97u+A
\$ UVWATAUAVAWH
@8|$Ht
@8|$Ht
@8|$Ht
D$XD9x
@8|$ht
@8|$ht
@8|$ht
A_A^A]A\_^]
u"8Z(t
UVWATAUAVAWH
L$&8\$&t,8Y
@A_A^A]A\_^]
fD94Fu
WATAUAVAWH
A_A^A]A\_
\$ VWATAUAVH
D!l$xA
@A^A]A\_^
ATAVAWH
0A_A^A\
s WAVAWH
0A_A^_
u~9t$Xt
UATAUAVAWH
A_A^A]A\]
WATAUAVAWH
A_A^A]A\_
@UATAUAVAWH
e0A_A^A]A\]
ATAUAVH
L$ fff
L$ |+L;
A^A]A\
@UATAUAVAWH
H!T$0D
ue!T$(H!T$
A_A^A]A\]
WAVAWH
A_A^_
x ATAVAWH
A_A^A\
UVWAVAWH
@A_A^_^]
ffffff
fffffff
USVWAVH
A^_^[]
LcA<E3
u HcA<H
bad allocation
FlsAlloc
FlsFree
FlsGetValue
FlsSetValue
InitializeCriticalSectionEx
InitOnceExecuteOnce
CreateEventExW
CreateSemaphoreW
CreateSemaphoreExW
CreateThreadpoolTimer
SetThreadpoolTimer
WaitForThreadpoolTimerCallbacks
CloseThreadpoolTimer
CreateThreadpoolWait
SetThreadpoolWait
CloseThreadpoolWait
FlushProcessWriteBuffers
FreeLibraryWhenCallbackReturns
GetCurrentProcessorNumber
CreateSymbolicLinkW
GetCurrentPackageId
GetTickCount64
GetFileInformationByHandleEx
SetFileInformationByHandle
GetSystemTimePreciseAsFileTime
InitializeConditionVariable
WakeConditionVariable
WakeAllConditionVariable
SleepConditionVariableCS
InitializeSRWLock
AcquireSRWLockExclusive
TryAcquireSRWLockExclusive
ReleaseSRWLockExclusive
SleepConditionVariableSRW
CreateThreadpoolWork
SubmitThreadpoolWork
CloseThreadpoolWork
CompareStringEx
GetLocaleInfoEx
LCMapStringEx
__based(
__cdecl
__pascal
__stdcall
__thiscall
__fastcall
__vectorcall
__clrcall
__eabi
__swift_1
__swift_2
__ptr64
__restrict
__unaligned
restrict(
delete
operator
`vftable'
`vbtable'
`vcall'
`typeof'
`local static guard'
`string'
`vbase destructor'
`vector deleting destructor'
`default constructor closure'
`scalar deleting destructor'
`vector constructor iterator'
`vector destructor iterator'
`vector vbase constructor iterator'
`virtual displacement map'
`eh vector constructor iterator'
`eh vector destructor iterator'
`eh vector vbase constructor iterator'
`copy constructor closure'
`udt returning'
`local vftable'
`local vftable constructor closure'
new[]
delete[]
`omni callsig'
`placement delete closure'
`placement delete[] closure'
`managed vector constructor iterator'
`managed vector destructor iterator'
`eh vector copy constructor iterator'
`eh vector vbase copy constructor iterator'
`dynamic initializer for '
`dynamic atexit destructor for '
`vector copy constructor iterator'
`vector vbase copy constructor iterator'
`managed vector copy constructor iterator'
`local static thread guard'
operator ""
operator co_await
operator<=>
Type Descriptor'
Base Class Descriptor at (
Base Class Array'
Class Hierarchy Descriptor'
Complete Object Locator'
`anonymous namespace'
bad exception
[aOni*{
~ $s%r
@b;zO]
v2!L.2
IND)ind)
CorExitProcess
UTF-16LEUNICODE
 !"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~
Sunday
Monday
Tuesday
Wednesday
Thursday
Friday
Saturday
January
February
August
September
October
November
December
MM/dd/yy
dddd, MMMM dd, yyyy
HH:mm:ss
AreFileApisANSI
LocaleNameToLCID
AppPolicyGetProcessTerminationMethod
UUUUUU
UUUUUU
=imb;D
/>58d%
VM>cQ6
>jtm}S
)>6{1n
+f)>0'
;H9>&X
*StO9>T
n03>Pu
K~Je#>!
bp(=>?g
BC?>6t9^
K&>.yC
.xJ>Hf
y\PD>!
|b=})>
c [1>H'
uzKs@>
3>N;kU
kE>fvw
V6E>`"(5
?UUUUUU
?7zQ6$
Unknown exception
bad array new length
[TIME][
pidhtmpdata.tmp
[TIME][%llu]
[PP][]
[HP][]
NtQuerySystemInformation
ntdll.dll
pidhtmpfile.tmp
invalid string position
vector too long
string too long
.text$di
.text$mn
.text$mn$00
.text$x
.text$yd
.idata$5
.00cfg
.CRT$XCA
.CRT$XCU
.CRT$XCZ
.CRT$XIA
.CRT$XIC
.CRT$XIZ
.CRT$XPA
.CRT$XPX
.CRT$XPXA
.CRT$XPZ
.CRT$XTA
.CRT$XTZ
.rdata
.rdata$r
.rdata$zzzdbg
.rtc$IAA
.rtc$IZZ
.rtc$TAA
.rtc$TZZ
.xdata
.xdata$x
.idata$2
.idata$3
.idata$4
.idata$6
.data$r
.pdata
_RDATA
.rsrc$01
.rsrc$02
Process32First
VirtualProtect
SetPriorityClass
GetCurrentProcess
GetModuleHandleA
CreateToolhelp32Snapshot
GetTempPathA
DeleteFileA
Process32Next
CloseHandle
K32GetModuleInformation
GetProcAddress
KERNEL32.dll
QueryPerformanceCounter
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
GetModuleHandleW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
GetCurrentProcessId
GetCurrentThreadId
InitializeSListHead
RtlUnwindEx
RtlPcToFileHeader
RaiseException
InterlockedFlushSList
GetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
FreeLibrary
LoadLibraryExW
EncodePointer
ReadFile
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
SetFilePointerEx
GetConsoleMode
ReadConsoleW
GetStdHandle
GetFileType
HeapFree
WriteFile
GetConsoleOutputCP
GetFileSizeEx
HeapAlloc
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
LCMapStringW
GetProcessHeap
SetStdHandle
CreateFileW
FlushFileBuffers
GetStringTypeW
HeapSize
HeapReAlloc
SetEndOfFile
WriteConsoleW
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
.?AVlogic_error@std@@
.?AVlength_error@std@@
.?AVout_of_range@std@@
.?AVtype_info@@
.?AVbad_exception@std@@
.?AVbad_alloc@std@@
.?AVexception@std@@
.?AVbad_array_new_length@std@@
<?xml version='1.0' encoding='UTF-8' standalone='yes'?>
<assembly xmlns='urn:schemas-microsoft-com:asm.v1' manifestVersion='1.0'>
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v3">
<security>
<requestedPrivileges>
<requestedExecutionLevel level='asInvoker' uiAccess='false' />
</requestedPrivileges>
</security>
</trustInfo>
</assembly>
.text$di
.text$mn
.text$mn$00
.text$x
.text$yd
.idata$5
.00cfg
.CRT$XCA
.CRT$XCAA
.CRT$XCU
.CRT$XCZ
.CRT$XIA
.CRT$XIAA
.CRT$XIAC
.CRT$XIC
.CRT$XIZ
.CRT$XPA
.CRT$XPX
.CRT$XPXA
.CRT$XPZ
.CRT$XTA
.CRT$XTZ
.rdata
.rdata$r
.rdata$zzzdbg
.rtc$IAA
.rtc$IZZ
.rtc$TAA
.rtc$TZZ
.xdata
.xdata$x
.idata$2
.idata$3
.idata$4
.idata$6
.data$r
.pdata
_RDATA
.rsrc$01
.rsrc$02
Process32First
WriteProcessMemory
SetPriorityClass
GetCurrentProcess
TerminateProcess
GetModuleHandleA
OpenProcess
CreateToolhelp32Snapshot
GetTempPathA
K32GetModuleFileNameExA
Process32Next
CloseHandle
GetProcAddress
VirtualAllocEx
GetCurrentProcessId
CreateRemoteThread
K32EnumProcessModules
KERNEL32.dll
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlUnwindEx
RtlPcToFileHeader
RaiseException
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
EncodePointer
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
GetStdHandle
WriteFile
HeapFree
HeapAlloc
GetFileType
GetConsoleOutputCP
GetConsoleMode
GetFileSizeEx
SetFilePointerEx
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
LCMapStringW
GetProcessHeap
SetStdHandle
GetStringTypeW
CreateFileW
FlushFileBuffers
ReadFile
ReadConsoleW
HeapSize
HeapReAlloc
SetEndOfFile
WriteConsoleW
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
.?AVlogic_error@std@@
.?AVlength_error@std@@
.?AVtype_info@@
.?AVbad_exception@std@@
.?AVbad_alloc@std@@
.?AVexception@std@@
.?AVbad_array_new_length@std@@
<?xml version='1.0' encoding='UTF-8' standalone='yes'?>
<assembly xmlns='urn:schemas-microsoft-com:asm.v1' manifestVersion='1.0'>
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v3">
<security>
<requestedPrivileges>
<requestedExecutionLevel level='requireAdministrator' uiAccess='false' />
</requestedPrivileges>
</security>
</trustInfo>
</assembly>
api-ms-win-core-fibers-l1-1-1
api-ms-win-core-synch-l1-2-0
kernel32
api-ms-
(null)
mscoree.dll
Sunday
Monday
Tuesday
Wednesday
Thursday
Friday
Saturday
January
February
August
September
October
November
December
MM/dd/yy
dddd, MMMM dd, yyyy
HH:mm:ss
api-ms-win-core-datetime-l1-1-1
api-ms-win-core-file-l1-2-2
api-ms-win-core-localization-l1-2-1
api-ms-win-core-localization-obsolete-l1-2-0
api-ms-win-core-processthreads-l1-1-2
api-ms-win-core-string-l1-1-0
api-ms-win-core-sysinfo-l1-2-1
api-ms-win-core-winrt-l1-1-0
api-ms-win-core-xstate-l2-1-0
api-ms-win-rtcore-ntuser-window-l1-1-0
api-ms-win-security-systemfunctions-l1-1-0
ext-ms-win-ntuser-dialogbox-l1-1-0
ext-ms-win-ntuser-windowstation-l1-1-0
advapi32
api-ms-win-appmodel-runtime-l1-1-2
user32
ext-ms-
((((( H
zh-CHS
az-AZ-Latn
uz-UZ-Latn
kok-IN
syr-SY
div-MV
quz-BO
sr-SP-Latn
az-AZ-Cyrl
uz-UZ-Cyrl
quz-EC
sr-SP-Cyrl
quz-PE
smj-NO
bs-BA-Latn
smj-SE
sr-BA-Latn
sma-NO
sr-BA-Cyrl
sma-SE
sms-FI
smn-FI
zh-CHT
az-az-cyrl
az-az-latn
bs-ba-latn
div-mv
kok-in
quz-bo
quz-ec
quz-pe
sma-no
sma-se
smj-no
smj-se
smn-fi
sms-fi
sr-ba-cyrl
sr-ba-latn
sr-sp-cyrl
sr-sp-latn
syr-sy
uz-uz-cyrl
uz-uz-latn
zh-chs
zh-cht
CONOUT$
kernel32.dll
api-ms-win-core-fibers-l1-1-1
api-ms-win-core-synch-l1-2-0
kernel32
api-ms-
minkernel\crts\ucrt\inc\corecrt_internal_strtox.h
__crt_strtox::floating_point_value::as_double
_is_double
__crt_strtox::floating_point_value::as_float
!_is_double
mscoree.dll
((((( H
Sunday
Monday
Tuesday
Wednesday
Thursday
Friday
Saturday
January
February
August
September
October
November
December
MM/dd/yy
dddd, MMMM dd, yyyy
HH:mm:ss
api-ms-win-core-datetime-l1-1-1
api-ms-win-core-file-l1-2-2
api-ms-win-core-localization-l1-2-1
api-ms-win-core-localization-obsolete-l1-2-0
api-ms-win-core-processthreads-l1-1-2
api-ms-win-core-string-l1-1-0
api-ms-win-core-sysinfo-l1-2-1
api-ms-win-core-winrt-l1-1-0
api-ms-win-core-xstate-l2-1-0
api-ms-win-rtcore-ntuser-window-l1-1-0
api-ms-win-security-systemfunctions-l1-1-0
ext-ms-win-ntuser-dialogbox-l1-1-0
ext-ms-win-ntuser-windowstation-l1-1-0
advapi32
api-ms-win-appmodel-runtime-l1-1-2
user32
ext-ms-
zh-CHS
az-AZ-Latn
uz-UZ-Latn
kok-IN
syr-SY
div-MV
quz-BO
sr-SP-Latn
az-AZ-Cyrl
uz-UZ-Cyrl
quz-EC
sr-SP-Cyrl
quz-PE
smj-NO
bs-BA-Latn
smj-SE
sr-BA-Latn
sma-NO
sr-BA-Cyrl
sma-SE
sms-FI
smn-FI
zh-CHT
az-az-cyrl
az-az-latn
bs-ba-latn
div-mv
kok-in
quz-bo
quz-ec
quz-pe
sma-no
sma-se
smj-no
smj-se
smn-fi
sms-fi
sr-ba-cyrl
sr-ba-latn
sr-sp-cyrl
sr-sp-latn
syr-sy
uz-uz-cyrl
uz-uz-latn
zh-chs
zh-cht
CONOUT$
Antivirus Signature
Bkav Clean
Lionic Clean
Elastic Clean
MicroWorld-eScan Clean
FireEye Generic.mg.3f22bd82ee1b38f4
CAT-QuickHeal Clean
ALYac Gen:Variant.Cerbu.112632
Cylance Clean
VIPRE Clean
Sangfor Clean
K7AntiVirus Clean
BitDefender Clean
K7GW Clean
Cybereason malicious.18f86e
BitDefenderTheta Clean
Cyren Clean
Symantec Clean
ESET-NOD32 Clean
Baidu Clean
APEX Malicious
Paloalto Clean
ClamAV Clean
Kaspersky Clean
Alibaba Clean
NANO-Antivirus Clean
ViRobot Clean
Tencent Clean
Ad-Aware Clean
TACHYON Clean
Comodo Clean
F-Secure Clean
DrWeb Clean
Zillya Clean
TrendMicro Clean
McAfee-GW-Edition BehavesLike.Win64.Injector.fh
CMC Clean
Emsisoft Clean
Ikarus Clean
Jiangmin Backdoor.Androm.qhp
eGambit Clean
Avira Clean
Antiy-AVL Clean
Kingsoft Clean
Microsoft Trojan:Win32/Wacatac.B!ml
Gridinsoft Clean
Arcabit Clean
SUPERAntiSpyware Clean
ZoneAlarm Clean
GData Clean
Cynet Malicious (score: 100)
AhnLab-V3 Clean
Acronis Clean
McAfee Artemis!3F22BD82EE1B
MAX Clean
VBA32 Clean
Malwarebytes Clean
Panda Clean
Zoner Clean
TrendMicro-HouseCall Clean
Rising Clean
Yandex Clean
SentinelOne Static AI - Suspicious PE
MaxSecure Trojan.Malware.300983.susgen
Fortinet Clean
Webroot Clean
Avast Clean
CrowdStrike Clean
No IRMA results available.