Static | ZeroBOX

PE Compile Time

2021-04-11 12:07:41

PDB Path

C:\wuyero\wokul\60\zebagejociha_dedafupomujes-liji\madavo x.pdb

PE Imphash

efb2fc2a9b34ff2d770174a65ef86f32

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00001000 0x00084150 0x00084200 7.97045367162
.rdata 0x00086000 0x00004c12 0x00004e00 4.39328158735
.data 0x0008b000 0x00009004 0x00001800 2.89114616337
.rsrc 0x00095000 0x00025fa8 0x00026000 6.32127411424

Resources

Name Offset Size Language Sub-language File type
RT_CURSOR 0x000b9988 0x000000b0 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_CURSOR 0x000b9988 0x000000b0 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_CURSOR 0x000b9988 0x000000b0 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_CURSOR 0x000b9988 0x000000b0 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_CURSOR 0x000b9988 0x000000b0 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000b7a60 0x00000468 LANG_LATVIAN SUBLANG_DEFAULT GLS_BINARY_LSB_FIRST
RT_ICON 0x000b7a60 0x00000468 LANG_LATVIAN SUBLANG_DEFAULT GLS_BINARY_LSB_FIRST
RT_ICON 0x000b7a60 0x00000468 LANG_LATVIAN SUBLANG_DEFAULT GLS_BINARY_LSB_FIRST
RT_ICON 0x000b7a60 0x00000468 LANG_LATVIAN SUBLANG_DEFAULT GLS_BINARY_LSB_FIRST
RT_ICON 0x000b7a60 0x00000468 LANG_LATVIAN SUBLANG_DEFAULT GLS_BINARY_LSB_FIRST
RT_ICON 0x000b7a60 0x00000468 LANG_LATVIAN SUBLANG_DEFAULT GLS_BINARY_LSB_FIRST
RT_ICON 0x000b7a60 0x00000468 LANG_LATVIAN SUBLANG_DEFAULT GLS_BINARY_LSB_FIRST
RT_ICON 0x000b7a60 0x00000468 LANG_LATVIAN SUBLANG_DEFAULT GLS_BINARY_LSB_FIRST
RT_ICON 0x000b7a60 0x00000468 LANG_LATVIAN SUBLANG_DEFAULT GLS_BINARY_LSB_FIRST
RT_ICON 0x000b7a60 0x00000468 LANG_LATVIAN SUBLANG_DEFAULT GLS_BINARY_LSB_FIRST
RT_ICON 0x000b7a60 0x00000468 LANG_LATVIAN SUBLANG_DEFAULT GLS_BINARY_LSB_FIRST
RT_ICON 0x000b7a60 0x00000468 LANG_LATVIAN SUBLANG_DEFAULT GLS_BINARY_LSB_FIRST
RT_ICON 0x000b7a60 0x00000468 LANG_LATVIAN SUBLANG_DEFAULT GLS_BINARY_LSB_FIRST
RT_ICON 0x000b7a60 0x00000468 LANG_LATVIAN SUBLANG_DEFAULT GLS_BINARY_LSB_FIRST
RT_ICON 0x000b7a60 0x00000468 LANG_LATVIAN SUBLANG_DEFAULT GLS_BINARY_LSB_FIRST
RT_ICON 0x000b7a60 0x00000468 LANG_LATVIAN SUBLANG_DEFAULT GLS_BINARY_LSB_FIRST
RT_ICON 0x000b7a60 0x00000468 LANG_LATVIAN SUBLANG_DEFAULT GLS_BINARY_LSB_FIRST
RT_ICON 0x000b7a60 0x00000468 LANG_LATVIAN SUBLANG_DEFAULT GLS_BINARY_LSB_FIRST
RT_ICON 0x000b7a60 0x00000468 LANG_LATVIAN SUBLANG_DEFAULT GLS_BINARY_LSB_FIRST
RT_ICON 0x000b7a60 0x00000468 LANG_LATVIAN SUBLANG_DEFAULT GLS_BINARY_LSB_FIRST
RT_ICON 0x000b7a60 0x00000468 LANG_LATVIAN SUBLANG_DEFAULT GLS_BINARY_LSB_FIRST
RT_ICON 0x000b7a60 0x00000468 LANG_LATVIAN SUBLANG_DEFAULT GLS_BINARY_LSB_FIRST
RT_ICON 0x000b7a60 0x00000468 LANG_LATVIAN SUBLANG_DEFAULT GLS_BINARY_LSB_FIRST
RT_ICON 0x000b7a60 0x00000468 LANG_LATVIAN SUBLANG_DEFAULT GLS_BINARY_LSB_FIRST
RT_ICON 0x000b7a60 0x00000468 LANG_LATVIAN SUBLANG_DEFAULT GLS_BINARY_LSB_FIRST
RT_ICON 0x000b7a60 0x00000468 LANG_LATVIAN SUBLANG_DEFAULT GLS_BINARY_LSB_FIRST
RT_ICON 0x000b7a60 0x00000468 LANG_LATVIAN SUBLANG_DEFAULT GLS_BINARY_LSB_FIRST
RT_ICON 0x000b7a60 0x00000468 LANG_LATVIAN SUBLANG_DEFAULT GLS_BINARY_LSB_FIRST
RT_ICON 0x000b7a60 0x00000468 LANG_LATVIAN SUBLANG_DEFAULT GLS_BINARY_LSB_FIRST
RT_ICON 0x000b7a60 0x00000468 LANG_LATVIAN SUBLANG_DEFAULT GLS_BINARY_LSB_FIRST
RT_ICON 0x000b7a60 0x00000468 LANG_LATVIAN SUBLANG_DEFAULT GLS_BINARY_LSB_FIRST
RT_ICON 0x000b7a60 0x00000468 LANG_LATVIAN SUBLANG_DEFAULT GLS_BINARY_LSB_FIRST
RT_ICON 0x000b7a60 0x00000468 LANG_LATVIAN SUBLANG_DEFAULT GLS_BINARY_LSB_FIRST
RT_ICON 0x000b7a60 0x00000468 LANG_LATVIAN SUBLANG_DEFAULT GLS_BINARY_LSB_FIRST
RT_ICON 0x000b7a60 0x00000468 LANG_LATVIAN SUBLANG_DEFAULT GLS_BINARY_LSB_FIRST
RT_ICON 0x000b7a60 0x00000468 LANG_LATVIAN SUBLANG_DEFAULT GLS_BINARY_LSB_FIRST
RT_ICON 0x000b7a60 0x00000468 LANG_LATVIAN SUBLANG_DEFAULT GLS_BINARY_LSB_FIRST
RT_ICON 0x000b7a60 0x00000468 LANG_LATVIAN SUBLANG_DEFAULT GLS_BINARY_LSB_FIRST
RT_ICON 0x000b7a60 0x00000468 LANG_LATVIAN SUBLANG_DEFAULT GLS_BINARY_LSB_FIRST
RT_ICON 0x000b7a60 0x00000468 LANG_LATVIAN SUBLANG_DEFAULT GLS_BINARY_LSB_FIRST
RT_STRING 0x000bab00 0x000004a6 LANG_MANIPURI SUBLANG_DEFAULT data
RT_STRING 0x000bab00 0x000004a6 LANG_MANIPURI SUBLANG_DEFAULT data
RT_STRING 0x000bab00 0x000004a6 LANG_MANIPURI SUBLANG_DEFAULT data
RT_STRING 0x000bab00 0x000004a6 LANG_MANIPURI SUBLANG_DEFAULT data
RT_STRING 0x000bab00 0x000004a6 LANG_MANIPURI SUBLANG_DEFAULT data
RT_ACCELERATOR 0x000b7f88 0x00000010 LANG_MANIPURI SUBLANG_DEFAULT data
RT_ACCELERATOR 0x000b7f88 0x00000010 LANG_MANIPURI SUBLANG_DEFAULT data
RT_GROUP_CURSOR 0x000b9a38 0x00000022 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_GROUP_CURSOR 0x000b9a38 0x00000022 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_GROUP_CURSOR 0x000b9a38 0x00000022 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x000aae68 0x00000068 LANG_LATVIAN SUBLANG_DEFAULT data
RT_GROUP_ICON 0x000aae68 0x00000068 LANG_LATVIAN SUBLANG_DEFAULT data
RT_GROUP_ICON 0x000aae68 0x00000068 LANG_LATVIAN SUBLANG_DEFAULT data
RT_GROUP_ICON 0x000aae68 0x00000068 LANG_LATVIAN SUBLANG_DEFAULT data
RT_GROUP_ICON 0x000aae68 0x00000068 LANG_LATVIAN SUBLANG_DEFAULT data
RT_GROUP_ICON 0x000aae68 0x00000068 LANG_LATVIAN SUBLANG_DEFAULT data
RT_VERSION 0x000b9a60 0x000001b4 LANG_NEUTRAL SUBLANG_NEUTRAL data

Imports

Library KERNEL32.dll:
0x486010 HeapFree
0x486018 AddConsoleAliasW
0x48601c BackupSeek
0x486020 GetModuleHandleW
0x486024 GetTickCount
0x486028 GlobalAlloc
0x486030 LoadLibraryW
0x486034 SizeofResource
0x48603c SetThreadContext
0x486040 GetAtomNameW
0x486044 LCMapStringA
0x48604c GetLastError
0x486050 GetProcAddress
0x486054 VirtualAlloc
0x48605c LoadLibraryA
0x486060 WriteConsoleA
0x486064 GetModuleFileNameA
0x48606c UpdateResourceW
0x486070 SetFileValidData
0x486074 FindNextVolumeA
0x486078 lstrcpyW
0x48607c WriteConsoleW
0x486084 CreateFileW
0x486088 GetStringTypeW
0x48608c HeapAlloc
0x486090 ExitProcess
0x486094 DecodePointer
0x486098 GetCommandLineA
0x48609c HeapSetInformation
0x4860a0 GetStartupInfoW
0x4860ac IsDebuggerPresent
0x4860b0 EncodePointer
0x4860b4 TerminateProcess
0x4860b8 GetCurrentProcess
0x4860c0 WriteFile
0x4860c4 GetStdHandle
0x4860c8 GetModuleFileNameW
0x4860cc HeapCreate
0x4860dc RtlUnwind
0x4860e0 SetHandleCount
0x4860e4 GetFileType
0x4860ec SetFilePointer
0x4860f0 CloseHandle
0x4860f4 TlsAlloc
0x4860f8 TlsGetValue
0x4860fc TlsSetValue
0x486100 TlsFree
0x486108 SetLastError
0x48610c GetCurrentThreadId
0x486118 WideCharToMultiByte
0x48611c GetCurrentProcessId
0x486124 RaiseException
0x486128 Sleep
0x48612c CreateFileA
0x486130 GetCPInfo
0x486134 GetACP
0x486138 GetOEMCP
0x48613c IsValidCodePage
0x486140 GetConsoleCP
0x486144 GetConsoleMode
0x486148 SetStdHandle
0x48614c FlushFileBuffers
0x486150 HeapSize
0x486154 HeapReAlloc
0x486158 SetEndOfFile
0x48615c GetProcessHeap
0x486160 MultiByteToWideChar
0x486164 ReadFile
0x486168 LCMapStringW
Library USER32.dll:
0x486170 GetCursorPos
Library ADVAPI32.dll:

!This program cannot be run in DOS mode.
`.rdata
@.data
uTVWh/\@
f-00f=
uhDuH
^SSSSS
<at,<rt"<wt
URPQQh
HHtXHHt
?If90t
j@j ^V
tRHtCHt4Ht%HtFHHt
tCHt(Ht
;t$,v-
UQPXY]Y[
t"SS9] u
<+t"<-t
+t HHt
PPPPPPPP
PPPPPPPP
Xty07Zv
R?UGY^p
7=}y:8
(wjE|)
.,j652
&,BY}+
{+,4W9l
<dl.!f+
UU4$
{D2s+V
]xk`UH
@MpF9[
^a Rv)?"h
$2ztn*
PQk,f%
r!?txPW!
Iw[?vg\
nWy\.<s
WUx+7
FuBodVu
)aXx>u
_zkz)Ag
#`*c5P
deXB';
<czr]l]
{zxnw.(
.R;oA!?
^%N0TK
fg}i&X
Ij,76j
*q!N'R
X|2&`,
x0f']_
x8Mt/5
Sc IF?O
&Il]D?
/vz3gz+
36/vaA
)Wx;W*
Vim-ZS
$T5uI/6
w"IB$l
U^yVd 8
}+4h3-
A-%QFy
rs5O;/
9n]"Nr
X_J@sWP
XKVuG5
}LCM/
9Uf"7;
[rDe[
XoNs,v
fLm*b!
cQ28h6
1VN9-+
r>.wIe
jnv&[?
8ncuOzU
l8jj"(Z
A*hD>?q
N'tC&J5R
"(.3OR
TT[$!3
CK)toX
AO`BKa
Md30<`
`0:y?mi
dM}1xh
W/*%ir
+]}mLo
T:>f^:H
t]#!{6B;
gGekc/
d[3m%4
qgb^~m8
'}!\9mI
M@pT==I
s:@"eB~
RBC`o$1
,[T4X"s
q1#`CM
)<v_=
iT^N,uDl7
@=4IDz
Ip75e5
d>|Wb7
}.sw+X
-f14a^
@|n4SN:IQ
\F^=va
PavGWW
8^DZK].Q8
("{q\z
FGUzy3$
^-ov%}@
l4iC/h
t]@h9Z
K 2 Pgfw%7
jhS@&b
HQ*rC;G
a#x"JB"
De|L^A
e9jwz?-
1r-g{n~
\O9s.
Q%S+<uW
gaTC$)
nv{|Qe
l?]6_U}
Mv#CpO
7E/0e=
$[@3A*
MM9X7w
,8.K?k
,_M@rb
p| ^7
Jlwv-1;
c;*ssJ
sj+Z`
!lb7&Q0
twA,`n
B/+p&m
bMbD>a
0Bo9T8j
)7;kob
:X4(l0TG
-U8v-=
;yOud2
`V+&'F
i1S,Jo
vIY:.1:
zS4)s@
C%m]//
d3hc>+#Vq
W,s#`l
Sz,taRV{
!CXnR/
"8<vV:
0|j~cZC2v
vFJ`^/Y,
p]\M;N
OgKt$
W5QbLt
X2uyRH&d[
'i+{k=
!S\LUx
8/Dc0CIZ-
.QIjI^
jNfDec
iW(Wez
%'X!js
Jlv)"g
04Gq`n8JD
ZnABBo
MIauy8
XSqu .R
Aw~`BF;D
B7QTG)
J$l)A"T
44@]5>
(~*U>Xy
LPXLTp
|_F>:/
X!X_W}c~r0
^Fsnm@
`Qz{o$
EoPN1u
|Um^Cjt>
H<SU,4
U0oyaa
"o,*eNG
2"`&Fz)
mc[EOA
M5bro;
2|Tuz2
DXC3//
Av4}as
*%.M~`g
,pc{.
s*mE")~
'H.@ti<
_bD&C&
-qOC3]
` x|hY+
18~v0c
c:Y``4
&HG.u
D!A41a
qYbBe5a(-Q
Y|LJ#vb
I*Uo8"
1>{/"K
\EX;sW^.%
Ito#V$q
h&v~R0
E.Z,M:
XdSuR1
xa/=q7
1+B^{9
7Q|2{@z
'1UQ)y
}zSnV_
+7@ces
C1RC=a
I3@G'R
g34P0VR
<(Zi%{
YXjKuO
3-`,*$O
RKU,V~2'
iF;p_,E
E>]AbY
Y?~pZW*Pb
zv:qH]
7KPy<g
%_I7M\
n*PLfe
s1tpu|
u@4">S
@DXpe%
m}Z "[
w5'6:d
A=YeeG4u@^
9TV^w
94T$J]
m"FuAz
|B5""2
,+A|fRU
@NnzmlP
#wL@-g
`q-^52
v/|SdP
0,n$J%
9gxmq(
~_W9!i^-f
^ZrX"]
% 7O!L
pzksx[!\
N&GD\<
"+'rdD\g
OM/:w2
AU44{d(
vUYNu<
ii>{n*W
q*9+h#
Al9(E?
vKzalm
I"rI@R
#FXw3m
C$H8hh
9m~]v
sr??N,0
?(}#<M
T%53qqyW
s_JO+T
^TBU;]a
Hn=TIy
+Suu):+
Z'>82Zr
3Yyme6
jg^9a~
W*DnpY
`">H)"
mOis<v
.~GW<l
,@Hi[IU8C
sb+{oU[
lAT*HPF
}e>Pfp
bhPN8)#
dQ5/<@
sE3RMM
[;}mc~
K?(i1s
gIeDG@G
,\:a-G
y,,',4
UD).M>
yoo#n-N
9'm[.1
fXg5O%u
3w\a!XY
Nn:v0?
C_i*Ch
<SMC[i{
tp9W#Q3uz
7L)'@b
nX0mcX
(bOp;!
'N-mR)
q|bBa&
`O8DRI
BxRx@gmb
=GP^}n
"h+W5pMS
lQn/B
d }|uE
)I#hV%
g]VWP
=B9:n&h
5Z\u}v
8}Wy0'
95Vzaq
Q: !,l
u-6c*2w
pmk#{h
8:S4n
o+!fE\
8R@20C
*]MK~+%Q
{;m#GJZ~W
h7;]7`
W0p?Rw
FWXDrGV(MD^+
.Am\oHH&
L{E'Qi
N"5sCK
5<p;<O
@' VKB
0Q0&oJ
giSp&a
$QQ'es
e3zN<M
?OC-uyX
=-7"q5
_p)%lu
BCi}4
MJe1z^
`l3GFt
XjZj!|
5yj1<!
;RhEA>
Me#T ]]
7m(j{M
@Im:U/
;8&:bI2
*q`/YH
b~,?4+
~n%WUm;"~
-CBE?\~$*B
I((+;z
Zy6XvB
5Z"u-TbH
mxGR$e
NL6 Ap`
E`*'{%
gmid~f
|e]c$0s
e?(#EULNy
ey5'-GU
=G_S^%
30B g`
?7A.jP
W(^x"i
#O%G?X
:f*'lT
)iT>Oww
v'\8-6
c>6l5
iMDn|/
RtM^1|
,vZ<2I
15)PW0\
y>z1HQ%
eG#+ 5
r"qpa'W||}
)uj[P(
F @,70
P{uzD}
)7Tq^\I
k49NM*
1KcLm<
H_jz{I
yRPGVe
ytSX%G.=
JSOw1Y
{u<`q{
W|EFOH+
Q/Z=m<jBn
)48]i3
K:PC&N@
t{8pw@
Pu[DQj
`1ip;9
>$<95p
`X|^N-
Z8Gu_y
>N2%H
i0`t9!
g)Smt1
+l%8Y7
m{I/BV
#aWtyS
[G1A%aMC
.4HH/J
ujG~RE
MtKVl!F$
(NU{b"
Uj6U8z
/AO^`W
s%hoU}
Ra9}=L
hL(`1l
+wN#sf/
-9!Xu[
0IrrKu:*l
J?.9iw
an(d.
ZvM2"+
to^J|q
?I"Th!EMo
CY4MH
,Tz3M%
@Osf$F
Q<]Z,j
w@h1=>
%> x+7
$<J{l[2
m!$*AC
HQqZt|7S+A"
!*k&Qgv
_*L4HG
'gQv4b
|du=7RB
[r`wl%a
!G!+4F
33DwA\Dq
;5e?ju<
:j/;~2
#?p\}0
I`*&.9
fbq(OO
_$'8mV
RHVbr^
eX&Hu#
2TTG{"b
tWl$A)
,(['J8
}B=PrH
qts!,H
~aC>U(
E1TyEt(u
nyw!rx
@W=m@3`
H\F~O(
77;C(q
w/Rus*
w]!0gG8o
($uy.*Q
o2gmy`S
Td/AE"
LLR G
lmP}3QyWzk
?B@7fS
Ypr43"D
%w3p,x
/)P\G9$X[g
^$$,#1
W,<O![=*
~BcdFs[
I&t*+^
UsX%l:8n
s`^6b"
&$?72w
dNTKb)
jiu;6Y\~
og|4wo
c_Xl~KT
K5hK+Dq
l{$!,'
%` .`)
cl#vd/B
=R|t8s
<u "ajj
%A1&_U
xP1>-P
z<pnPg
i12gVU6Q
"TPQ?qr
t_%pFl
]3)?ez*
kO~,-*
;,r9F9
ex,DP3
bg2fn=
UG>E00
+l/M7aD4Y
H7G/&
b XCH
K=/Q~3
l\?*L\
hfe+Nw
zF6piX
vu/[I<
!Beu[[
KzdK?2
[?Y)n<
mC1L({5$
}i6ps)
\MrU"lB
f~A+qlT
R.1GgL
E)tU)N4
SC]Klf
-3Q!~#Km
PyYjWV
b#p.9
m|.}Bx
tNfr_:R
qg"o;M~
dU,bw
P9Kju`G
M9k5L(
H(<*T-
!fd0J1
O1Zh-k
440F'u
h?Z;m+
=<Sqn9
,dS%\(
dh)`%kF
g&Pn~
g|tic"
:$AXfa
T}`R[m
c6D%td
Oc?Xi\g
uAxI3L
~V| jb
l%&~Ng18
p9K+_h7
QAz>G
0Evam+&K
@PuY21$
G_bdGY
WVfch7P
|a-Tz`
fr3tk1
V@IjR}
NR%T''=
Qv2n^R
EPVbY\
T;ixf%y
c3~|Ku>
+p(o =c
Z .X)^
Sgqx~a
^%n=+IP
J*z8Z(
\@~f++O
6K<JrS2b
Tr2&s3gc
+pzASE
\jv:/A[
;2[3%
{@`2#N
vINr31
3JpurW
s{y*~PP
l#5rR)<
M,h0MG2_
OYm[Z2
u`NO!w
J;V\a~
_f>J9`
qt_^IeV
cyd`Cm
H)C7x2
z"<{>UL
=L-t[5
rH0qS\
g\/;bu
&Ln\'R
CAS&k
i6/nzU,9sA
32i?5/
X`%:?0
Ums]ToIQ
t<M^h8`
G'|5`_uC
!\Qsu<>pkS,
wQ2f(6
bTU_ZRq
3+`<"c
Z!P/Rc
c:Wv*tSt
pPar{&
yO+R%r(v
zW_RE`!
IP)ko]n
K9*0("
Mf{(@z"
S|U5=8r
ubP+6u
zy*i9xZ
T\ Sd)]t0c
D`e-x;
[T}@R/
S,)@mo
[W)UcI
Qmg1j[
NbJQmI
zd5+lYA
a~crNn
Zw;FM>
DL-_WA
/ w+&P
wWD>w_w
i4cNt1v
fvg0]u
uHP5ad
jq9L<.
>6k6HC
"1k"""
9?.[&_
)\nsqB0
S YT.D
g9vdx/_
@WYa_z
0oM),\
:UkE:*
pf@2IB
)MfEt5
^Cz-I
8/C6c?
~xH)6s
yQ|"S)
GwEet5
NJTliPU
_{Ia f 4
G382:}
a(qq~P
ntb~A%`
K0e>%KD
.S\Cx`
E*a8$
I8zkkM
Rrprfm
4<6($
`B[tZU$Eue}
3$Q''s
}I ?sWt
,NE|?~
" vnMe-m
]2_| dP
)h x}`
s|WMGJ
/9q?%_
G"18+~@h&
f_E`UH
Ufp:Bh
)[m+%'
\_u.%?+
K>pA)8
X/XTVKH
["xAR"
7r;\@
#fqc~F
VvbQR;v
q&6=wb
"<y{d`
q9669[
H|M 0.
Lp|M8_
Ioo525[
Vlp-+Tk
I.F)9|
`4]kWH-
*=)e"^J
<IgRk\O
gxM"(6
E@3h'L
:<@qAEd!
odc~_:
h5GjA,
A5xE%A
bXl~2e
iDR^LS
JK9NfK0
cK*xA\3&
d0Fd+
'F#H@g
s|K"zN
>V7Nts>
aFvV^uD
us6b6)
G)l}E=
1I"DGA
)Iu$P#
V{#0,
@vn%J(
"DibYc
_{E{Vc
}g60n"r
ygKXe
F8#@n}
X1H5J<
B2)p%J
JKqGEy
'*aP8:
?[p=;M[
V<o_O<*
/_E-2'.
^n'vrS
"m[&Y%
{>o&GRg
bo-RWE`
$7RvAe
6&X~tap
-ndI&:
C-K'Dh
hgl7=U
b\b2RL|
"V+HrX
y3d6xc
4r8jo>
b[~2iX
PmjS#Yx
y%iQO[
-og2qx&
2!Z,<_7
UdfDv*:g
pW2kS{s
Opo8S/
C9Z_$>#CdF
c_=oyK
,n%w%*Ms/
6b\jQz
K@SIMw3
~P(.qe^
bnq}EM'
6UCdv1j.
qT|E2-
,7X-fj
?in*!HM;NQ
>uj4`qbdor
bFtap%
HG%7El
@=-YNH0
*ttyNuF3
QxYws*
Pz\'K^
!1z(y`kC
`-g~Mg
B""KBu
@q=PFd
qAf+`V
8 QFV{':
4k$~/L
e;VSBu~
bSW=1=
,TD9?6
r/ycyX
NMW~;D
v>^ @cVO@
1y''Xt
{-goZA
4?c(,OC
Z~_K@B
d&cKdT
D=xJb|H
a}l=u}
ok^E(B
sJ(=O_
}cK~N.*4
.TiAq
jr~{a-[[B
?L){UT
}0>+C(
-s|gZ@
@[1\jN5
4:lWfH
s~y5m}b
8Yjam^
Zv0e-tP
~rtwc
yJBErm
dqavw/9
iw;<mx
7<g9Kt
qM7>VMy
c4u5=@I
}Y&Y]_
wv;C\Q]%(
bmvB}G
tN<'As
H*y''P
;$L|K
G@Kg>8+z
U`VHbw
!j-URa
`8x,zi
]!d&2X2w%*
{$)shv
Wn\bo3
>A53E<
,CA'l_(
;v`GU;K
y;H=mZ&
e)'cVYe
x&dOs6
'f&6gP
CorExitProcess
?uZEeu
?uZEeu
?UUUUUU
?UUUUUU
UTF-16LE
UNICODE
(null)
`h````
xpxxxx
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
GetProcessWindowStation
GetUserObjectInformationW
GetLastActivePopup
GetActiveWindow
MessageBoxW
HH:mm:ss
dddd, MMMM dd, yyyy
MM/dd/yy
December
November
October
September
August
February
January
Saturday
Friday
Thursday
Wednesday
Tuesday
Monday
Sunday
`h`hhh
xppwpp
_nextafter
_hypot
 !"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~
Complete Object Locator'
Class Hierarchy Descriptor'
Base Class Array'
Base Class Descriptor at (
Type Descriptor'
`local static thread guard'
`managed vector copy constructor iterator'
`vector vbase copy constructor iterator'
`vector copy constructor iterator'
`dynamic atexit destructor for '
`dynamic initializer for '
`eh vector vbase copy constructor iterator'
`eh vector copy constructor iterator'
`managed vector destructor iterator'
`managed vector constructor iterator'
`placement delete[] closure'
`placement delete closure'
`omni callsig'
delete[]
new[]
`local vftable constructor closure'
`local vftable'
`udt returning'
`copy constructor closure'
`eh vector vbase constructor iterator'
`eh vector destructor iterator'
`eh vector constructor iterator'
`virtual displacement map'
`vector vbase constructor iterator'
`vector destructor iterator'
`vector constructor iterator'
`scalar deleting destructor'
`default constructor closure'
`vector deleting destructor'
`vbase destructor'
`string'
`local static guard'
`typeof'
`vcall'
`vbtable'
`vftable'
operator
delete
__unaligned
__restrict
__ptr64
__eabi
__clrcall
__fastcall
__thiscall
__stdcall
__pascal
__cdecl
__based(
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
1#QNAN
1#SNAN
Lazexohex xewiset gepes
Zohiboluvitepem
Damilasosasalep
Zaxedunaxu sujaxin cukoxefacaluya somadexufiyu
Yajapo
VirtualProtect
kernel32.dll
LocalAlloc
lamagukogehaxehugohetohucuxitegafabukulojanosawizenop
C:\wuyero\wokul\60\zebagejociha_dedafupomujes-liji\madavo x.pdb
SetProcessAffinityMask
SetThreadContext
GetDefaultCommConfigW
QueryPerformanceCounter
HeapFree
GetEnvironmentStringsW
AddConsoleAliasW
BackupSeek
GetModuleHandleW
GetTickCount
GlobalAlloc
GetFirmwareEnvironmentVariableA
LoadLibraryW
SizeofResource
SetConsoleCursorPosition
WriteConsoleW
GetAtomNameW
LCMapStringA
FillConsoleOutputCharacterW
GetLastError
GetProcAddress
VirtualAlloc
BeginUpdateResourceW
LoadLibraryA
WriteConsoleA
GetModuleFileNameA
SetConsoleCursorInfo
UpdateResourceW
SetFileValidData
FindNextVolumeA
lstrcpyW
KERNEL32.dll
GetCursorPos
USER32.dll
NotifyChangeEventLog
ADVAPI32.dll
HeapAlloc
ExitProcess
DecodePointer
GetCommandLineA
HeapSetInformation
GetStartupInfoW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
TerminateProcess
GetCurrentProcess
IsProcessorFeaturePresent
WriteFile
GetStdHandle
GetModuleFileNameW
HeapCreate
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
RtlUnwind
SetHandleCount
GetFileType
DeleteCriticalSection
SetFilePointer
CloseHandle
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
FreeEnvironmentStringsW
WideCharToMultiByte
GetCurrentProcessId
GetSystemTimeAsFileTime
RaiseException
CreateFileA
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetConsoleCP
GetConsoleMode
SetStdHandle
FlushFileBuffers
HeapSize
HeapReAlloc
SetEndOfFile
GetProcessHeap
MultiByteToWideChar
ReadFile
LCMapStringW
GetStringTypeW
CreateFileW
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
SSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSQ
SSSSSSSSSSSSSSSSB
SSSSSSSSSSSSSSSSx
SSSSSSSSSSSSSSSSqB&&&Vu
qSSSSSSSSSSSSSSSS
SSSSSSSSSSSSSSSS
SSSSSSSSSSSSSSSSp
SSSSSSSSSSSSSSSS
&9gSSSSSSSSSSSSSSSS
SSSSSSSSSSSSSSSS2x&&
SSSSSSSSSSSSSSSS2
SSSSSSSSSSSSSSSS
G2SSSSSSSSSSSSSSSS
2SSSSSSSSSSSSSSSS
/!VIK`
BgSSSSSSSSSSSSSSSSx
SSSSSSSSSSSSSSSS
&GgSSSSSSSSSSSSSSSS
gSSSSSSSSSSSSSSSSt
SSSSSSSSSSSSSSSSxx
SSSSSSSSSSSSSSSSxc
SSSSSSSSSSSSSSSScc
ExQSSSSSSSSSSSSSSS
SSSSSSSSSSSSSSS@
2QSSSSSSSSSSSSSSSfxVoK
WSSSSSSSSSSSSSSS@gN
QSSSSSSSSSSSSSSS@
5xQSSSSSSSSSSSSSSS@
'fQSSSSSSSSSSSSSSSy
QSSSSSSSSSSSSSSSyx!
xQSSSSSSSSSSSSSSS
T_QSSSSSSSSSSSSSm8
ySSSSSSSSSSSS
xySSSSSSSSSSSSx
o633o63A
SSSSSSSSSSSSp
sPV+V+
SSSSSSSSSSSS2I&
pmSSSSSSSSSSSS
6R3o3\
mSSSSSSSSSSSSg
\sAsPsVPsZIu
mSSSSSSSSSSSSg
SSSSSSSSSSSS0
SSSSSSSSSSSSf
0cSSSSSSSSSSSSSQ
WSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSS
fY8PDMMN
4ayz4z
N=w&]8f:
,usrF|
CeKqioL
Ijh~~AI
LA~~c_
Bnx~bHE
U^~~IJ~
\_~~mk
\\\\\\\\\\\\\\\\\\\\\\\\\\\
q0\\\\\\\\\\\\
,\\\\\\\\\\\z=
\\\\\\\\\\kw
\\\\\\\\\([
\\\\\\
\\\\\\\j_
7\\\\\\\
3\\\\\\\\j
\\\\\\\\
\\\\\\\\\\\\M
\\\\\\\\\\\8
\\\\\\\\\\\\j
\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\
5~~~~~~
nnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnn
Rnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnz
nnnnnnnnnnnnnnnnn
nnnnnnnnn
nnnnnnnnnnnnnn
2(0gqonnnnnnnnnnnnn
nnnnnnnnnn
nnnnnnnnnE
nnnnnn
<>jlTT
nnnnnn
X?j#&d
nnnnnn
nnnnnnn
nnnnnnn
"s)b)__[
nnnnnnn'9h
2nnnnnnn2r
nnnnnnn
Bnnnnnnnnn
#[nnnnnnnnn
nnnnnnnnnn
b2nnnnnnnnnnnnn
nnnnnnnnnnnnnn[
nnnnnnnnnnnnnnn
nnnnnnnnnnnnnnn
BonnnnnnnnnnnnnnnnnB
gnnnnnnnnnnnnnnnnn
nnnnnnnnnnnnnnnn
2*9&"_
AxQ[onnnnnnnnnnnnnnnnnn
}#00T?
nnnnnnnnnnnnnnnnnnn[)r[q<hu
nnnnnnnnnnnnnnnnnnnnnn]
nnnnnnnnnnnnnnnnnnnnnn
nnnnnnnnnnnnnnnnnnnnn
nnnnnnnnnnnnnnnnnnnnn
nnnnnnnnnnnnnnnnnnnnn
nnnnnnnnnnnnnnnnnnnnn
nnnnnnnnnnnnnnnnnnnnnn
nnnnnnnnnnnnnnnnnnnnnnn
nnnnnnnnnnnnnnnnnnnnnnnnn
nnnnnnnnnnnnnnnnnnnnnnnnnnn
nnnnnnnnnnnnnnnnnnnnnnnnnnnnnn
nnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnn
nnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnn
[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[/[[[[[[[[[[[[[[[[[[[
[[[[[[[<
</[[[[[[[[[[[
[[[[[[[[[<
<[[[[[[[[
=Yk`HDBB
[[[[[[[/
[[[[[[[
[[[[[[[<GmS
[[[[[[[
[[[[[[[[U
[[[[[[[[[
<[[[[[[[[[[
.Cyo+o3S
[[[[[[[[[[[[j
[[[[[[[[[[[[[[
[[[[[[[[[[[[[[
.[[[[[[[[[[[[[[
[[[[[[[[[[[[[[[[Ad
`[[[[[[[[[[[[[[[[[lr4
.[[[[[[[[[[[[[[[[[^y3a
[[[[[[[[[[[[[[[[[
[[[[[[[[[[[[[[[[[
0[[[[[[[[[[[[[[[[[[[
[[[[[[[[[[[[[[[[[[[[[
[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[
,Mo|bF
Fb~~xK
\q~~~K
-e~~7N
\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\D
\\\\\\\\\\\\\\\\\
Os\\\\\\\\\\\\\\\\
\\\\\\\\\\\\\\\
s\\\\\\\\\\\\\\\
ts\\\\\\\\\\\\\\\
s\\\\\\\\\\\\\\\
-s\\\\\\\\\\\\\\\
s\\\\\\\\\\\\\\\
Qs\\\\\\\\\\\\\\\
s\\\\\\\\\\\\\\\
Hs\\\\\\\\\\\\\\\
\\\\\\\\\\\\\\\
\\\\\\\\\\\\\\\
\\\\\\\\\\\\\\\
\\\\\\\\\\\\\\\
\\\\\\\\\\\\\\\
\\\\\\\\\\\\\\\
6\\\\\\\\\\\\\\\\
\\\\\\\\\\\\\\\\
\\\\\\\\\\\\\\\\
\\\\\\\\\\\\\\\\
\\\\\\\\\\\\\\\\
\\\\\\\\\\\\\\\\
^\\\\\\\\\\\\\\\\
\\\\\\\\\\\\\\\\
\\\\\\\\\\\\\\\\
\\\\\\\\\\\\\\\\
\\\\\\\\\\\\\\\\e|
\\\\\\\\\\\\\\\\
UQ\\\\\\\\\\\\\\\\O
Ue\\\\\\\\\\\\\\\\^
\\\\\\\\\\\\\\\\^
\\\\\\\\\\\\\\\\
\\\\\\\\\\\\\\\\
\\\\\\\\\\\\\\\\e?
y}yRyJ
-\\\\\\\\\\\\\\\\Q
\\\\\\\\\\\\\\\\e
\\\\\\\\\\\\\\\\^
\\\\\\\\\\\\\\\\\^
\\\\\\\\\\\\\\\\\
\\\\\\\\\\\\\\\\\\
\\\\\\\\\\\\\\\\\\\\
s sssss
\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\
jW%<@Q
OOy*OO
@^@^^^@R
?E5?tv}
SdS=}~
______-
_____-
{{{{{{{{{{{
G00000000000000000000000000
LLLLLLLLLLLLLL
LLLLLL`
LLLLLLL2
LLLLLL
H--------
--------------------
%%%%%%%%%%%%%%%%%%
YYYYYYYYYY%
YYYYYY
%qqqqq
%qqqqq
%qqqqqqY8
%qqqqqqqY8
%qqqqqqqqH
gggggggggK
ggggggggggg?K
3HShT7e~
iiiiii
iiiiii
iiiiiiiiiiii
iiiiiiiiii
iiiiii
iiiiiiiii
iiiiiiiiiiiii
iiiiiiii

mscoree.dll
runtime error
TLOSS error
SING error
DOMAIN error
- Attempt to use MSIL code from this assembly during native code initialization
This indicates a bug in your application. It is most likely the result of calling an MSIL-compiled (/clr) function from a native constructor or from DllMain.
- not enough space for locale information
- Attempt to initialize the CRT more than once.
This indicates a bug in your application.
- CRT not initialized
- unable to initialize heap
- not enough space for lowio initialization
- not enough space for stdio initialization
- pure virtual function call
- not enough space for _onexit/atexit table
- unable to open console device
- unexpected heap error
- unexpected multithread lock error
- not enough space for thread data
- abort() has been called
- not enough space for environment
- not enough space for arguments
- floating point support not loaded
HMicrosoft Visual C++ Runtime Library
<program name unknown>
Runtime Error!
Program:
E(null)
KERNEL32.DLL
WUSER32.DLL
HH:mm:ss
dddd, MMMM dd, yyyy
MM/dd/yy
December
November
October
September
August
February
January
Saturday
Friday
Thursday
Wednesday
Tuesday
Monday
Sunday
((((( H
h(((( H
H
CONOUT$
fekovimofojituzuwivuwubajiyofori
pCizizikisani
Zocoyoxerabe jobobahum mubozunoh gibogedicadi hocecaya
Wegi gecenahunegob miyaxalokupecus tetuyozesamex wetafa
Gabe dosijihiyaj wicayahapacec zewoyiriwifak sujatonotif
/ P6pL
,/KPip
/-P?pR
/ P6pL
,/KPip
/-P?pR
VS_VERSION_INFO
StringFileInform
090101a0
InternalName
bomgpiaruci.iwa
Copyright
Copyrighz (C) 2021, fudkagat
ProductVersion
15.54.12.11
VarFileInfo
Translation
gGovuginavoleji wumejes putepop jetujozuwawoxug levopexirexed wuboguvecey ziyiyo giyolugob nomotib yagis)Judisigidu rizuxuxoci yanor cuk yijanilug
bFevu boxuloxapijah melum fizumisivifuzo vamawir peracacocubete dedahijaluyob femuxetegawoge ficeyi@Zipelokaj hac toru lon gehe yebopizecekin moka gum simo fuxegope2Dap tatikafadehibu fiduvigovido lozepe konazoreriw<Vosukuxixit tahacevada yitumogij pebuwoxipubac wifimaputazec
<Hewanurekig pecegeced hipufizowomoces zejahixevi yadatacusex
Rege ripoma8Hasuxecem feyidez bahoxuzukahoso fidediwubazisi vunifefa;Dopozafabayi feraturifa xuhiw depuvi dalubo molinig pixeniw+Hadigaxonabifon hiziyogadil cewaneca mazavo
1Yonufuwu zatuso fixeyajeraref miyuyix rosadi fehiANaziwokefek rijoyurogebetuc zekitosipudo cimoxirosur vewodat cidifNibufe deviwifawinop meduzuw vigob gosi likuwunirimiyuj waliwo lepexobetoj tiwasoxewosabi viduledehewutRufebipugine redukakazonexo lazubolunimizin neliberuwipayu suki yolelu mananeragi jerepizajo ligupifujiv fayurorisus
Mafuge
Xihenetimen
Sib tuve yepebow.Gaxoz tacucefebu zezonaponapocu figojexijunora
Vobazuhabimon hes codec<Wawozitaful vihowodo xuvegepoxo jule hepu kesevoxaw tugepiruJRoyixihir rukeboga cenilibivirepe hegoneko puxesuk zuxahehiri hahaz vacoce;Horenude foh yirika kizeferavibira vuzuzimoke jifejituhokoy2Somefupekiz fucokuluwa disatete neparug nojekucapeKCejude fufuju kihe jonasihayiba fegafo panaledabuleno bivivoj toxagalovubuc$Pemilorugugeha rekusemene piha zijux_Lilujidili coc tafog panogoy kisudepimev nugefewof fehebitemeger hikinagajox pemelokinuf ronabe#Yeyodup yihojejizuxahud vufumubutat/Zehogocotimehuw revim bawijifa jibobin kifurese>Vuf woregewaxofibe capopiwupubex xovokidecule ved fumu vifibowSRucahe mone xixeyiy lohalehix bihiwepa kinuy kasaxobanupugop yacutafi fawigas nugecTGewiro fezewuxasoxi xexifojituk zahojesucad fenejoyodojo xayi puti kiciweconir lovid
-Goxapayevekehad fewomexedecugo goluyapucepadu
BodafevicamasiKFal kudulezeza pepalitorulu titedeniguzoda mibotanukuyuku rarera haheniwafeTPimonuveke xuva zovom sumipuwipi zicumibayomod ligiw jihifagusivabo citozapo wafibikKRexiyosununuti rihoxorowopal vemerey fawunujokog foco xacovuku luhohefaneru3Fucizedusimoma zex pisizasamena tagowowetapu mecawe:Dohawugox lavihitur hubusojifuzi vumebuwazicuvey pebaxitis
SurelobihayoZZecuyave vahepacuyufi siviyegi jajedapire fixitiw cabemumetinod bukofozoca xitide nihowiye
KLozevuz feninakoko ravabofagimegas zekowoxupe coh yuvugixicivebe coje codup
Antivirus Signature
Bkav Clean
Lionic Trojan.Multi.Generic.4!c
Elastic malicious (high confidence)
MicroWorld-eScan Gen:Variant.Fragtor.38608
FireEye Generic.mg.1dc8f380fd88f8ae
CAT-QuickHeal Clean
ALYac Gen:Variant.Fragtor.38608
Cylance Unsafe
VIPRE Clean
Sangfor Trojan.Win32.Save.a
K7AntiVirus Clean
BitDefender Gen:Variant.Fragtor.38608
K7GW Hacktool ( 700007861 )
Cybereason malicious.3344ae
BitDefenderTheta Gen:NN.ZexaF.34266.Sq0@aKHU4VfI
Cyren W32/Kryptik.FOQ.gen!Eldorado
Symantec Trojan.Gen.9
ESET-NOD32 a variant of Win32/Kryptik.HNFO
Baidu Clean
APEX Malicious
Paloalto generic.ml
ClamAV Clean
Kaspersky HEUR:Trojan.Win32.Convagent.gen
Alibaba Clean
NANO-Antivirus Clean
ViRobot Clean
Rising Trojan.Generic@ML.98 (RDMK:4e4Ot1NKJhOUbBvjbFOP1w)
Ad-Aware Gen:Variant.Fragtor.38608
TACHYON Clean
Emsisoft Gen:Variant.Fragtor.38608 (B)
Comodo Clean
F-Secure Clean
DrWeb Clean
Zillya Clean
TrendMicro TROJ_GEN.R002C0PK721
McAfee-GW-Edition BehavesLike.Win32.Lockbit.bc
CMC Clean
Sophos Mal/Generic-S
Ikarus Trojan.Win32.Crypt
GData Gen:Variant.Fragtor.38608
Jiangmin Clean
eGambit Unsafe.AI_Score_66%
Avira Clean
Antiy-AVL Clean
Kingsoft Clean
Gridinsoft Clean
Arcabit Trojan.Fragtor.D96D0
SUPERAntiSpyware Clean
ZoneAlarm Clean
Microsoft Trojan:Win32/Sabsik.FL.B!ml
Cynet Malicious (score: 100)
AhnLab-V3 Clean
Acronis suspicious
McAfee GenericRXQC-OC!1DC8F380FD88
MAX malware (ai score=89)
VBA32 Malware-Cryptor.2LA.gen
Malwarebytes Ransom.LockBit
Panda Trj/GdSda.A
Zoner Clean
TrendMicro-HouseCall TROJ_GEN.R002C0PK721
Tencent Clean
Yandex Clean
SentinelOne Static AI - Malicious PE
MaxSecure Trojan.Malware.300983.susgen
Fortinet W32/PossibleThreat
Webroot W32.Trojan.Gen
AVG Win32:MalwareX-gen [Trj]
Avast Win32:MalwareX-gen [Trj]
CrowdStrike win/malicious_confidence_100% (W)
No IRMA results available.