Static | ZeroBOX
!This program cannot be run in :NS#mode.
`.unascen
Uoh(uJ
'4K 5D&
PPh(uJ
u h"rG
Snh(uJ
& & &
j-PPjK
j<jsj*WVj
PQRVWj9
VVVVVVV
_^[ZYXhk
PRVWjej3
j^jrjE
jvho G
WPPj!j0
Pcepcepd
jmj0jx
_^[ZYX
cepcepcepcep
VVVVP3
PQRSVjG
j"SjVjuWh
SSjyPj1j]
j{jfjsj:h
PQRSVj
jrh)wG
jiPWjHhz
j-j0j5
jujijE
jwj*SP
jdj%jbj
jpjljI
_^[ZYX
j#jhWj
PjfjZh
jnjWjI
jAWj6PWS
j<j4jg
jtj#Rjy
Vj=VjCVPj;
++++++[U
_^[ZYX
PQRSVWj
j,PWWh
PQRSVWj
WjbVSh
u(jgjN
`j"j!h
Sj>jojg
PQRSVWjI
PQRSVWj
_^[ZYX
jcj|jtj
4bhNoG
PQRSVW
UUUUUUh
j}jajA
,-hj>G
SjSPSW
oPP^ZYX
PQRSVWhyf
u$PSj6
PChTuJ
Wj`j"j@
jiVjcj
j$Wj8P
Sjuj)S
j=jJh<EG
j$jNjm
PQRSVh
,-hrsF
PQRSWj
jUj~j}
j8j4jGjVh
fb:fb:
++++++++++
j#j5h
UUUUOf
j?PjwPhHpG
WjXj)jG
j$jwj"hSjG
j+jTj`h
j>Wj8P
jrjBj(j0jpjTjcjX
UUUUUU
j8j8Sj
u jGh7
Exh(uJ
P+=]jf
j)jEPjPj'
j@j_jSjp
j*Sj%j7
Pj'jOjJj?
j=j[jkh
j5jNWV
_^[ZYXh ;G
PQRSVj
j7jqjU
Vj.Sj)j
PQRSVWjI
jajFjaj#
PQjTjI
PQRSVWh
QRSVWj%j"
AllocateAndInitializeSid
RegOpenKeyExA
CheckTokenMembership
RegSaveKeyA
RegCloseKey
FreeSid
RegQueryValueExA
advapi32.dll
CSCFindNextFileW
cscdll.dll
RtlUnwind
GetCurrentProcessId
DeleteCriticalSection
SetLastError
GetACP
QueryPerformanceCounter
GetOEMCP
MultiByteToWideChar
TlsAlloc
WideCharToMultiByte
GetEnvironmentStringsW
GlobalAlloc
GetStringTypeW
FreeEnvironmentStringsW
HeapSize
HeapFree
SetUnhandledExceptionFilter
HeapAlloc
HeapReAlloc
InterlockedIncrement
VirtualFree
GetProcAddress
InitializeCriticalSection
CloseHandle
WriteFile
UnhandledExceptionFilter
GetLocaleInfoA
FreeLibrary
GetVersionExA
HeapDestroy
SetHandleCount
VirtualProtect
ExitProcess
WaitForSingleObject
IsDebuggerPresent
LCMapStringW
GetTickCount
GetModuleHandleW
CreateProcessA
GetModuleHandleA
LeaveCriticalSection
GetFileType
InterlockedDecrement
GetStartupInfoA
TlsFree
GetStdHandle
GetProcessHeap
LCMapStringA
TlsGetValue
RaiseException
GetCurrentThreadId
TerminateProcess
GetCurrentProcess
FreeEnvironmentStringsA
GetEnvironmentStrings
GetCommandLineA
HeapCreate
VirtualAlloc
GetLastError
LoadLibraryA
EnterCriticalSection
GetCPInfo
GetModuleFileNameA
TlsSetValue
WinExec
GetStringTypeA
kernel32.dll
KillTimer
SetTimer
GetMessageA
MessageBoxExA
user32.dll
VerFindFileW
version.dll
socket
setsockopt
ws2_32.dll
0Xh(uJ
( aohi$W
,2E0{{cv
3Y?C#~
<_m+72
3_.1\}Y#
lTfM3Wx'40
,2E3_.1\}110
3Y?C371
3Y?C110
3_.1\}5
3_.1\}oTek
3Y?C0477
3Y?C3_.1\}U/W
ds\b4W@vUdi
q^}zX@LqSB?
o2g5fK748Jnag91uikMkInsN5sVceD6YcQReDOBE9
D&(f36
epjpcN53
:(-%skJ
}I1:A(Ve
3_.1\}8061
o2g5fK748Jnag91uikMkInsN5sVceD6YcQReDOBE9
user32.dll
~Ckm1skJ
;qzs[{K&E4sDTrb
Q_sB2^g
zX@LqS
NG2aU/W
:(-%qV
3_.1\}
,2Em_z
N_s'652
<_m+user32.dll
RB/K7655
@`IU21
,2E415
-ML-EjxbF
}I1:A(V
HWoI.`mS
s0)pSKa
~Ckm13_.1\}U/W
s0)p031
D&(fsw
Rb3_.1\}26
.XGdE
XmI2877
D&(f856
user32.dll
3_.1\}[c@q
tYv{0640
}I1:A(V
`C3Y?C
,2E3Y?CjxbF
tYv{6780
\b4W@oTek
o2g5fK748Jnag91uikMkInsN5sVceD6YcQReDOBE9vUdi
lTfM3W
3_.1\}NkC
,2E3_.1\}
_L3?iF
s0)pI.{AARe
#2%jw{
}I1:A(V
user32.dll
{K&E4s4537
3_.1\}
ix}\P
,2E7480
S>@!u%
~Ckm1NkC
q^}user32.dll
`C1322
,j5842
#2%jw{x'40
}I1:A(V
3Y?Cuser32.dll
3_.1\}
\b4W@user32.dll
,2EI.{A6a4
`C7166
{K&E4s7166
_L3?0828
.XGd72
3_.1\}3761
zX@LqS}wb
~Ckm1652
N_s'72
N_s'$#
3Y?C381
Jh`"4:(-%q
Jh`"4o2g5fK748Jnag91uikMkInsN5sVceD6YcQReDOBE9
3_.1\}vUdi
@`IU262
epjpcN0
,2E205
`C3438
~Ckm1-ML-E|B#w
_L3?Y#
<_m+dWK
,2EyJji
o2g5fK748Jnag91uikMkInsN5sVceD6YcQReDOBE972
.XGdzf#
NG2adVox
user32.dll
\b4W@7166
}I1:A(VKB
3Y?CtYv{V
D&(f2^g
N_s'Q_sBiF
zX@LqS[_ch
D&(f+9
3_.1\}
uq4'7166
}I1:A(V
,2EYw+
'm8061
user32.dll
l3_.1\}Pgw
Q_sBpqv
_L3?MwL
<_m+'r
-ML-E3_.1\}o2g5fK748Jnag91uikMkInsN5sVceD6YcQReDOBE96248
3_.1\}B?
;qzs[167
#2%jw{
s0)p3Y?C
,2E253
Mo2g5fK748Jnag91uikMkInsN5sVceD6YcQReDOBE9
q{3123
-ML-EQn
,2Em_z
<_m+803
Q_sBtYv{
}I1:A(VD_
=ZdnZS
uq4'205
}I1:A(VQ_sBD_
3_.1\}0477
Q_sBpqv
3Y?CpGwq
HWoI.SKa
=ZdnZhd
$wzR72
p3Y?C'<
3_.1\}\b4W@KNt
3_.1\}lTfM3W2^g
HWoI.5
=Zdn|B#w
Z{MfN?4q
s0)p7166
u/8`044
#2%jw{
Z{MB/K7
ds3_.1\}
3_.1\}
s'/8^`
@`IUpGwq
zX@LqS36
3_.1\}1322
NG2amI
_E1E253
3_.1\}D_
3_.1\}6780
#2%jw{3Y?Cl
3Y?CtYv{0
B/K7KNt
}I1:A(V
o2g5fK748Jnag91uikMkInsN5sVceD6YcQReDOBE9dVox
q{<_m+oTek
}I1:A(V_
o2g5fK748Jnag91uikMkInsN5sVceD6YcQReDOBE9
j0S>hve
XmIlUDC
3_.1\}}
q^}866
3_.1\}3_.1\}
h3_.1\}
fzX@LqS
o2g5fK748Jnag91uikMkInsN5sVceD6YcQReDOBE9
lTfM3W8061
3_.1\}iF
--N'KB
fN?4&HLIb
3_.1\}53
3_.1\}ve
user32.dll
epjpcN0053
o2g5fK748Jnag91uikMkInsN5sVceD6YcQReDOBE9
epjpcN&HLIb
--N'42
}I1:A(VZS
--N'253
\b4W@ZS
`C6248
XmIM_V%
\b4W@0477
dsQ_sBpYL
3_.1\}m_z
3_.1\}110
mS`.yvY
MfN?4jxbF
:(-%5118
_L3?Yw+
user32.dll
N_s'044
user32.dll
Jh`"4
~Ckm1D
xc7480
=Zdnso#)
3Y?C/}
=Zdn110
user32.dll
I.{A}wb
@`IU371
3_.1\}2^g
Jh`"4I.{AqV
~Ckm1lUDC
'm0477
zB/K7m_z
fuq4'i$W
MtYv{58
HWoI.SF
N_s''WC
_E1E}\P
,2E110
:(-%/8^`
\b4W@g
o2g5fK748Jnag91uikMkInsN5sVceD6YcQReDOBE9
3Y?C110
~Ckm1D_
3Y?C7166
o2g5fK748Jnag91uikMkInsN5sVceD6YcQReDOBE9
,2E3_.1\}V
D&(fD_
{K&E4s
NG2aIM
3Y?C#~
,2Em_z
}I1:A(V'
:(-%uDB
,2EB/K7
}I1:A(V3_.1\}6025
lj0S>hM_V%
q{RMnd
{K&E4sV
D&(f7166
Muser32.dll
s0)p3_.1\}
,2E3_.1\}}I1:A(VmI
user32.dll
D&(f371
( aoh8421
o2g5fK748Jnag91uikMkInsN5sVceD6YcQReDOBE9R
~Ckm1'WC
3_.1\}
user32.dll
\b4W@BaN
_E1E5842
$wzR&HLIb
S>jxbF
( aohlM
~Ckm1iF
user32.dll
3_.1\}
{K&E4shT
lTfM3W
3_.1\}D_
XmIMYF
$wzRS!
Z-ML-E
,2Eo2g5fK748Jnag91uikMkInsN5sVceD6YcQReDOBE9
fN?4skJ
3Y?CS!
ds3761
o2g5fK748Jnag91uikMkInsN5sVceD6YcQReDOBE9ve
3_.1\}u/8`;qzs[3123
3_.1\}[h-
3_.1\}031
3_.1\}qV
,2EskJ
:(-%tYv{
NG2a5118
s'3_.1\}
XmIu/8`>
=Zdn46
3_.1\}D_
Q_sB4537
.XGd4171
q^}371
s0)pSF
3Y?C`9
user32.dll
:(-%+9
3_.1\}
#2%jw{6025
mS`.--N'
NG2alUDC
3Y?C53
3_.1\}
uq4'5853
Q_sB#2%jw{vjW
s0)p110
tYv{+9
3_.1\}j0S>hZhd
,HGiGcW
Q_sBlUDC
s0)p3438
;qzs[ve
\b4W@<_m+HWoI.Ywb
nj---N'
u/8`qV
s'0640
3_.1\}
user32.dll
3_.1\}
\b4W@7166
HWoI.42
Jh`"4874
,2Ei$W
3_.1\}4171
nj-m_z
Jh`"4
~Ckm172
D&(fx'40
user32.dll
=ZdnQn
uq4'DTrb
3_.1\}6a4
D&(f3Y?CHMD
( aoh302
fN?43Y?C5842
s'6780
,2E874
3_.1\}
,2E}wb
\b4W@5020
'3_.1\}
@`IU=4<
_L3?DTrb
Jh`"4
,2EJh`"4e
zX@LqS0828
`Cx'40
--N'user32.dll
3_.1\}
N_s'7166
xc3Y?C5853
lTfM3WE
XmImS`.
,2E652
zX@LqSzf#
o2g5fK748Jnag91uikMkInsN5sVceD6YcQReDOBE9hT
3_.1\}
$wzR|B#w
Q_sBJQQ
3Y?CU/W
3_.1\}D_
Z{M}wb
}I1:A(V
epjpcN7166
@`IU:(-%
-ML-E866
_E1E371
3_.1\}
~Ckm1U?
,2Ej0S>hZ
3_.1\}m_z
Jh`"4
}I1:A(V3_.1\}9/
3_.1\}
Wc8421
mS`.jK;
<_m+v(}
lTfM3W>
nj-110
3_.1\}SKa
=Zdn{K&E4sZ
j0S>h[h-
\b4W@D_
user32.dll
s0)pdVox
;qzs[/8^`
S>1674
$wzR42
,2E}wb
HWoI.7166
#2%jw{Z
,2E3761
}I1:A(V
=ZdnPgw
,2E7166
epjpcNsw
,2E3_.1\}
3Y?CD_
,2E655
q^}mS`.
q^}262
--N'}I1:A(V110
user32.dll
nj-`mS
fN?4hAu
Jh`"43_.1\}
=ZdnD_
3Y?C+9
tYv{/8^`
_E1EM_V%
3Y?C58
_E1EYw+
M\b4W@
_L3?BaN
epjpcN3_.1\}D_
Q_sBoTek
\b4W@x'40
o2g5fK748Jnag91uikMkInsN5sVceD6YcQReDOBE9110
@`IUyvY
3Y?CjK;
:(-%DTrb
3Y?C2^g
Jh`"4IM
#2%jw{--N'iV
3Y?C381
fN?4M>
.XGd_
s0)p.XGdBaN
,2E0828
epjpcN3Y?CZ
user32.dll
o2g5fK748Jnag91uikMkInsN5sVceD6YcQReDOBE9[c@q
3Y?C044
<_m+\b4W@
zX@LqS#@k
j0S>h726
~Ckm1}
3Y?CSKa
,HGzX@LqSpYL
-ML-E2^g
Q_sB05
}I1:A(V
3Y?C856
=Zdn6755
s0)p1322
s0)puser32.dll
XmI110
I.{ARcA
,2E3_.1\}q
<_m+:(-%
u/8`3Y?CvjW
<_m+3_.1\}hT
user32.dll
nj-u/8`Zhd
_E1E652
,2E0883
Q_sB0477
<_m+253
,2E267
3_.1\}
3Y?C6755
o2g5fK748Jnag91uikMkInsN5sVceD6YcQReDOBE9N_s'
s'6755
WilUDC
}I1:A(V
.Z0053
3Y?C`mS
3Y?CN_s'KB
#2%jw{8061
}I1:A(V5311
D&(fuq4'031
<_m+\b4W@%
Jh`"4
user32.dll
3Y?CU/W
q{7166
@`IU6248
3Y?C3Y?ClUDC
,2Em_z
o2g5fK748Jnag91uikMkInsN5sVceD6YcQReDOBE9mI
( aohU/W
zX@LqS
\b4W@qV
RbmS`.
$wzRskJ
user32.dll
3_.1\}
Jh`"49
f3Y?C652
3_.1\}NX
mS`.3Y?CjK;
Jh`"48
\b4W@5311
s0)pyvY
=Zdnuser32.dll
D&(f110
,2ESKa
}I1:A(V
3_.1\}51
user32.dll
mS`.u3$;6
epjpcN2877
Q_sBve
-ML-Eso#)
Q_sB#@k
=ZdnskJ
D&(fD_
zX@LqS'r
user32.dll
3_.1\}
Jh`"4SKa
q{3Y?C2^g
tYv{044
<_m+U/W
<_m+fEIQ
o2g5fK748Jnag91uikMkInsN5sVceD6YcQReDOBE9U/W
s0)p110
HWoI.866
tYv{jK;
Jh`"4skJ
#2%jw{@`IUNX
N_s'70
nj-856
,HG6a4
3_.1\}Q_sB[
;qzs[4537
WidVox
o2g5fK748Jnag91uikMkInsN5sVceD6YcQReDOBE9
user32.dll
$wzR6a4
epjpcN2877
s'3_.1\}dWK
q^}866
epjpcNPgw
Jh`"4Z
_E1E3Y?C
NG2a652
Jh`"4
user32.dll
\b4W@l
3_.1\}9/
( aoh655
user32.dll
HWoI.>
,2E051
~Ckm1}wb
tYv{`9
HWoI.e
~Ckm15
xclUDC
q{3_.1\}x'40
,2E0{{cv
user32.dll
q^}MwL
o2g5fK748Jnag91uikMkInsN5sVceD6YcQReDOBE9
Z{M3761
3Y?C'<
,2E866
Wcuser32.dll
}I1:A(V'
user32.dll
HWoI.1674
tYv{pYL
3_.1\}--N'o2g5fK748Jnag91uikMkInsN5sVceD6YcQReDOBE9031
3_.1\}|B#w
nj-0477
$wzRGYu
3Y?C3_.1\}Zhd
j0S>hmI
;qzs[A
_L3?&HLIb
3_.1\}D_
,2EdWK
<_m+3Y?CiF
ix@!u%
@`IUzX@LqS
nj-skJ
Wi5020
#2%jw{3_.1\}skJ
z3Y?C\b4W@205
Jh`"4|B#w
\b4W@031
I.{A3Y?CZS
user32.dll
~Ckm1
Jh`"4
epjpcN
_E1E8061
o2g5fK748Jnag91uikMkInsN5sVceD6YcQReDOBE90053
fuser32.dll
'u/8`72
#2%jw{mI
{K&E4sZ
3Y?CNkC
@`IU@!u%
,HG0883
HWoI.253
zX@LqS_
NG2a7166
,2E7166
I.{A7166
3_.1\}7166
3Y?C3Y?C
fN?4sw
epjpcN%
\b4W@"
N_s'5020
=ZdnD_
\b4W@i
3_.1\}$#
s0)p267
d_L3?3_.1\}MwL
s0)psw
TtYv{72
o2g5fK748Jnag91uikMkInsN5sVceD6YcQReDOBE9
NG2ahAu
s0)pB?
user32.dll
s'N_s'
3Y?C70
zX@LqS}\P
s0)p7166
D&(f4537
user32.dll
`CJh`"4
uq4'U/W
.XGdhM
s0)p9/
3Y?C}I1:A(V
Q_sBdr
_L3?`mS
o2g5fK748Jnag91uikMkInsN5sVceD6YcQReDOBE9
3_.1\}
mS`.dWK
3_.1\}6025
pJh`"4lc
$wzR'WC
f--N'zX@LqS{K&E4s"
user32.dll
N_s'81
S>0883
$wzR3Y?C
user32.dll
WidVox
3Y?C110
3_.1\}#~
tYv{3438
tYv{7480
3_.1\}110
3_.1\}
@`IU;qzs[vUdi
~Ckm1zX@LqSMwL
3_.1\}
D&(f381
epjpcN
3Y?C/[
u/8`IM
q^}zf#
3Y?C05
;qzs[6025
zHWoI.7166
_L3?user32.dll
3_.1\}
Z{M@!u%
3_.1\}3Y?C53
$wzR2877
NG2a@`IU
13_.1\}6'
user32.dll
D&(f21
j0S>hx'40
:(-%qV
}I1:A(V
S>0{{cv
s0)p262
,j|B#w
o2g5fK748Jnag91uikMkInsN5sVceD6YcQReDOBE9jxbF
~Ckm1S!
s0)pU/W
@`IU8421
@`IUiGcW
j0S>h110
q^}262
mS`.21
epjpcN"
:(-%3Y?C[_ch
'mRMnd
--N'iV
user32.dll
.XGdD_
Q_sBD_
-ML-Eu3$;6
;qzs[dWK
3Y?C:(-%<i
lTfM3W
3_.1\}@!u%
mS`.SXx
j0S>hHW
<_m+o2g5fK748Jnag91uikMkInsN5sVceD6YcQReDOBE9\b4W@3123
;qzs[253
~Ckm1zX@LqS7166
epjpcN@cq
Jh`"4<_m+M_V%
j0S>h%
$wzRuser32.dll
--N'ARe
3Y?C#@k
ds7166
B/K7zf#
3_.1\}$#
D&(f1674
#2%jw{
o2g5fK748Jnag91uikMkInsN5sVceD6YcQReDOBE96025
3Y?ChAu
N_s'72
3_.1\}7166
~Ckm1skJ
,2E3Y?CD_
`C5853
3_.1\}lUDC
s0)pmF
fN?4371
epjpcNIM
_E1E6a4
3_.1\}
xc|B#w
uq4'KB
3Y?C'WC
,HG726
{K&E4s110
3_.1\}user32.dll
user32.dll
$wzRRMnd
_E1Eu/8`Q_sBNkC
lTfM3Wlc
3Y?CQn
3_.1\}
user32.dll
ds7166
}I1:A(V
NG2ayvY
,2ElUDC
Jh`"4
o2g5fK748Jnag91uikMkInsN5sVceD6YcQReDOBE9o2g5fK748Jnag91uikMkInsN5sVceD6YcQReDOBE93_.1\}
,HGvUdi
~Ckm1856
,2EvUdi
j0S>hBaN
;qzs[[
s'3_.1\}}
epjpcN
;qzs[7166
3Y?Cuser32.dll
\b4W@5311
user32.dll
dso2g5fK748Jnag91uikMkInsN5sVceD6YcQReDOBE9jK;
,HG`mS
3_.1\}253
q{5842
dj0S>hBaN
,2EMYF
=Zdn2877
@`IU3Y?C
=Zdn110
\b4W@}\P
3_.1\}pYL
}I1:A(Vso#)
3_.1\}
_E1EARe
3Y?CYw+
3Y?CPgw
o2g5fK748Jnag91uikMkInsN5sVceD6YcQReDOBE9'<
}I1:A(V6'
R&HLIb
.XGd267
;qzs[IM
,j0053
:(-%72
Jh`"4
user32.dll
NG2a<_m+pGwq
s'fEIQ
\b4W@'
s'fEIQ
,2EvjW
3Y?C'<
,2ERcA
3Y?C6248
XmI6a4
epjpcN#@k
I.{A371
Rb-ML-EMwL
3Y?Co2g5fK748Jnag91uikMkInsN5sVceD6YcQReDOBE9
~Ckm1031
3Y?C3Y?C
Jh`"4uDB
3_.1\}oTek
HWoI.`mS
user32.dll
,2E3Y?C
3Y?C110
uq4'5853
NG2a58
=Zdn46
epjpcN
@`IUiGcW
,2EfN?4
lTfM3WQ_sBpYL
-ML-E_
NG2afEIQ
Wc7166
user32.dll
user32.dll
3_.1\}[
.XGdoTek
zX@LqS_
=Zdn{K&E4s}\P
I.{AS!
,2E253
3Y?Cve
,2ElUDC
D&(f6755
$wzRD_
,2EvjW
.Zj0S>h<_m+
--N'9/
q{B/K7/8^`
3_.1\}
,2E803
WcfEIQ
3_.1\}110
\b4W@3Y?C-ML-E7166
\b4W@<_m+415
lTfM3W
3_.1\}58
N_s'dVox
.XGd'
{K&E4s3_.1\}
j0S>h>
user32.dll
3Y?C1674
$wzR1674
3_.1\}pYL
-ML-E3_.1\}0828
{K&E4s'r
tYv{GYu
Jh`"4mF
Guser32.dll
#2%jw{'
G3Y?C53
s'x'40
;qzs[fEIQ
NG2a4537
zuser32.dll
Z{MJQQ
`Cuser32.dll
user32.dll
3_.1\}--N'}I1:A(V3761
user32.dll
3_.1\}655
}I1:A(V
_L3?hAu
tYv{`mS
3Y?C5020
j0S>hZ
--N'<_m+
~Ckm11674
Jh`"4
@`IU[c@q
3_.1\}--N'D_
.XGd7166
,2E5311
3_.1\}i
I.{Azf#
_fN?4267
uq4'3761
Q_sBSXx
zX@LqSZhd
#2%jw{
,j4171
B/K7U?
`C&HLIb
Jh`"426
3_.1\}3_.1\}3Y?C110
3_.1\}415
N_s'58
NG2a#@k
3_.1\}D_
nj-&HLIb
3_.1\}
zX@LqS
:(-%.XGd6755
N_s'u3$;6
3_.1\}yJji
3_.1\}
{K&E4s3438
NG2a@`IU6248
Q_sBmF
}I1:A(V5311
NG2aD_
q^}DTrb
3Y?C3Y?C.
Wi6248
3_.1\}
_E1E110
M3_.1\}D_
-ML-E'
,2E371
Z{M267
$wzRiV
,j5118
S>3_.1\}MwL
3_.1\}
o2g5fK748Jnag91uikMkInsN5sVceD6YcQReDOBE9U?
nj-tYv{jK;
;qzs[>
f3Y?C0053
Jh`"4
{K&E4szf#
#\b4W@$#
epjpcNYw+
zX@LqS
user32.dll
Q_sB6780
3_.1\}user32.dll
lTfM3Wu3$;6
3_.1\}
3Y?CpGwq
3Y?Cpqv
$wzR371
N_s'9/
3_.1\}user32.dll
user32.dll
;qzs[302
3Y?CmI
3_.1\}D_
{K&E4s
zX@LqSIM
3_.1\}+9
Q_sB5853
,2EM_V%
,2E0477
user32.dll
q^}oTek
N_s'O_u
\b4W@856
Z{MJh`"4
XmIuq4'
\b4W@ve
j0S>huser32.dll
o2g5fK748Jnag91uikMkInsN5sVceD6YcQReDOBE9
}I1:A(V
$wzRMwL
<_m+7166
<_m+MYF
o2g5fK748Jnag91uikMkInsN5sVceD6YcQReDOBE9
$wzRvjW
}I1:A(V
*11[111
111*1[111**
1*1[111
11NN11NN1[*
)>>>>>>>>>>>>)
//9999%
k%%%%%
k/#######
<??D?<//
66<66666
&FFFFFDFD
=PPJPJPJP
jQQQQQUUPT
JYYUUUUUUUUUUUUUUY\J
`N]\\YYYYYYYYY\\]]Q`
cQ]`b`b`b`b`b`b]Yc
e]]]Y]]]Y]]]]e
cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccaaaaaaa
@@z;4bb4;YM
ccaaaaaaa
R+||RQR
lm4[\\;
QQQbbb\\Sq
l?X.=T
zTMMM=
MM=@VY
==;;b+
''[mkx
0'iZl?
G5,,GGGG
8MMnnW
<:Xkzb(
ccC000
CtccyL
ccKT=.h
U-H-H996669-
s66666
o"^^cc
cc !!#
&&u**...
cc^__1
j?xj
cc$$D##1_
Kk>>?k
#oo^^2
$``A
nkjkk
@k?xj/
>XhjXl
>**?kV=MM
0'LyNN3
ZmmmiiY
O !__o#
DAA##Dp
ppp$`"
^"P"P2222
pppp"`
P$$pDo"P2
$$D$$`$P`
"DDpPP
ccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc
}}qqnl
yyyyxx
xxxyxyyy
yxxxxyy
!'''''!,iqf
' f}~q~}}o}~ozmx
oo~oq}}oozm
xxxxxx
&&&!h
yyyyyy
yyyyyyy
yyyyyyyyy
xyyyyyyyyy
xxyyxxyy
xxyxxxyxyyyy
yxxxyxy
'''E+'
7'''''''''
sonzmyl
}oo}~}~}}ooo}~}zyyxl
fo~~q~~~o~o}}~nnzmmy`
~o}o~}oqq~}qo}n{mlm
9&&'''!t}~~~}o~}oo}o~nm
~~o~~ng
xxxxxx
yyyyyyy
yyyyyyyy
yyyyyyyyy
yyyyyyyyyy
yyyyyyyyyyyy
xyyyyyyyyyyyyy
yyyyyyyyyyyyyy
xxxxxx
xxxxxx
xxxxxx
xxxxxx
xxxxxx
wwwwww
wwwwwwwwwp
wwwwwwwwwwwwwp
wwwwwwwwwwwwwwwp
wwwwwwwww
333333
333333
333333
333333
333333
333333
;;;;;;;;
333333
3333333
333333
3333333
333333
33333333
3333333
33333333
33333333
333333
HHrrrr
rrrrrr
HHHHHHHHrr
&&&&&&&&&&&&&&&&&&&&&
ppp,WW````
`````WW*J[[
9```````
``````S
3`````$
`````W[
xD`````W
``````;
xpx93`````
``````+Kppp
,-D````W;B9
TB;W````D4,
,D``N1[AksXskAS9N``<,
xUAjjjjjjjjjAUz
2(/"(
0PI)[0
0/P)(0
hjn1ggtl
/8**)))F)))R
~~ww~`
~~ww~`
eeeeeeee
eeeeeeeee
eeeeeeeeee
eeeeeeeee
DffffD
FggggfD
Dgggggd@
f~~~~vd
Fv~~~vvD
F~~~~~~vD
f~~~~~vd@
f~~~~~~vt
Fv~~~~~vv@
f~~~~~~vt
Fv~~~~~vv@
f~~~~~~vd
Df~~~~~vt@
Dv~~~~vt
Fv~~~vv@
pDfggggf@
DvvvvD
DfffdD
DDDD@x
wwwwwwx
xxxxxx
xxxxxp
<?xml version='1.0' encoding='UTF-8' standalone='yes'?>
<assembly xmlns = 'urn:schemas-microsoft-com:asm.v1' manifestVersion = '1.0'>
<trustInfo xmlns = "urn:schemas-microsoft-com:asm.v3">
<security>
<requestedPrivileges>
<requestedExecutionLevel level = 'asInvoker' uiAccess = 'false' />
</requestedPrivileges>
</security>
</trustInfo>
</assembly>
Greater Manchester1
Salford1
COMODO CA Limited1705
.COMODO RSA Extended Validation Code Signing CA0
191007000000Z
221006235959Z0
943491
Private Organization1
Dubai1
Dubai1;09
2Business Central Towers, Tower A, Office 2301 23031
Telegram FZ-LLC1
Telegram FZ-LLC0
https://sectigo.com/CPS0U
Dhttp://crl.comodoca.com/COMODORSAExtendedValidationCodeSigningCA.crl0
Dhttp://crt.comodoca.com/COMODORSAExtendedValidationCodeSigningCA.crt0$
http://ocsp.comodoca.com0#
AE-943490
Greater Manchester1
Salford1
COMODO CA Limited1+0)
"COMODO RSA Certification Authority0
141203000000Z
291202235959Z0
Greater Manchester1
Salford1
COMODO CA Limited1705
.COMODO RSA Extended Validation Code Signing CA0
=U5W5H
https://secure.comodo.com/CPS0L
;http://crl.comodoca.com/COMODORSACertificationAuthority.crl0q
/http://crt.comodoca.com/COMODORSAAddTrustCA.crt0$
http://ocsp.comodoca.com0
Greater Manchester1
Salford1
COMODO CA Limited1705
.COMODO RSA Extended Validation Code Signing CA
20211008103448Z
Greater Manchester1
Salford1
Sectigo Limited1,0*
#Sectigo RSA Time Stamping Signer #2
Greater Manchester1
Salford1
Sectigo Limited1%0#
Sectigo RSA Time Stamping CA0
201023000000Z
320122235959Z0
Greater Manchester1
Salford1
Sectigo Limited1,0*
#Sectigo RSA Time Stamping Signer #20
https://sectigo.com/CPS0D
3http://crl.sectigo.com/SectigoRSATimeStampingCA.crl0t
3http://crt.sectigo.com/SectigoRSATimeStampingCA.crt0#
http://ocsp.sectigo.com0
New Jersey1
Jersey City1
The USERTRUST Network1.0,
%USERTrust RSA Certification Authority0
190502000000Z
380118235959Z0}1
Greater Manchester1
Salford1
Sectigo Limited1%0#
Sectigo RSA Time Stamping CA0
?http://crl.usertrust.com/USERTrustRSACertificationAuthority.crl0v
3http://crt.usertrust.com/USERTrustRSAAddTrustCA.crt0%
http://ocsp.usertrust.com0
rRj;B7|
[C]e=P
Greater Manchester1
Salford1
Sectigo Limited1%0#
Sectigo RSA Time Stamping CA
211008103448Z0?
New Jersey1
Jersey City1
The USERTRUST Network1.0,
%USERTrust RSA Certification Authority
G?d{um
]!#[bu
jjjjjj
000000
VS_VERSION_INFO
StringFileInfo
040904E4
FileVersion
4, 7, 6, 9
CompanyName
Promt Asus Corp.
InternalName
Premonumental
OriginalFilename
Laglast
PrivateBuild
Lieutenancy
VarFileInfo
Translation
Antivirus Signature
Bkav Clean
Lionic Clean
Elastic malicious (high confidence)
MicroWorld-eScan Clean
FireEye Generic.mg.8b9bce00bcd650b9
CAT-QuickHeal Clean
McAfee Clean
Cylance Unsafe
VIPRE Clean
Sangfor Trojan.Win32.Save.a
K7AntiVirus Clean
BitDefender Clean
K7GW Clean
CrowdStrike Clean
BitDefenderTheta Clean
Cyren Clean
Symantec Clean
ESET-NOD32 a variant of Win32/GenKryptik.FNKE
Baidu Clean
APEX Malicious
Paloalto Clean
ClamAV Clean
Kaspersky VHO:Trojan.Win32.SelfDel.gen
Alibaba Clean
NANO-Antivirus Clean
ViRobot Clean
Rising Clean
Ad-Aware Clean
Emsisoft Clean
Comodo Clean
F-Secure Clean
DrWeb Clean
Zillya Clean
TrendMicro Clean
McAfee-GW-Edition Clean
CMC Clean
Sophos Clean
Ikarus Clean
GData Clean
Jiangmin Clean
MaxSecure Trojan.Malware.300983.susgen
Avira Clean
MAX Clean
Antiy-AVL Clean
Kingsoft Clean
Gridinsoft Trojan.Heur!.00002031
Arcabit Clean
SUPERAntiSpyware Clean
Microsoft Trojan:Win32/Sabsik.FL.B!ml
Cynet Malicious (score: 100)
AhnLab-V3 Clean
Acronis suspicious
ALYac Clean
TACHYON Clean
VBA32 Clean
Malwarebytes MachineLearning/Anomalous.95%
Panda Clean
Zoner Clean
TrendMicro-HouseCall Clean
Tencent Clean
Yandex Clean
SentinelOne Static AI - Malicious PE
eGambit PE.Heur.InvalidSig
Fortinet Clean
Webroot Clean
Cybereason Clean
Avast Clean
No IRMA results available.