Static | ZeroBOX

PE Compile Time

2018-10-01 03:01:44

PDB Path

D:\Projects\WinRAR\sfx\build\sfxrar32\Release\sfxrar.pdb

PE Imphash

00be6e6c4f9e287672c8301b72bdabf3

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00001000 0x0002e924 0x0002ea00 6.69844659252
.rdata 0x00030000 0x00009a8c 0x00009c00 5.13014428273
.data 0x0003a000 0x000203a0 0x00000c00 3.23544657122
.gfids 0x0005b000 0x000000e8 0x00000200 2.09308131838
.rsrc 0x0005c000 0x0000dfd0 0x0000e000 6.63675262513
.reloc 0x0006a000 0x00001fdc 0x00002000 6.67875525152

Resources

Name Offset Size Language Sub-language File type
PNG 0x0005d198 0x000015a9 LANG_ENGLISH SUBLANG_ENGLISH_US PNG image data, 186 x 604, 8-bit/color RGB, non-interlaced
PNG 0x0005d198 0x000015a9 LANG_ENGLISH SUBLANG_ENGLISH_US PNG image data, 186 x 604, 8-bit/color RGB, non-interlaced
RT_ICON 0x00063eb8 0x00003d71 LANG_ENGLISH SUBLANG_ENGLISH_US PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x00063eb8 0x00003d71 LANG_ENGLISH SUBLANG_ENGLISH_US PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x00063eb8 0x00003d71 LANG_ENGLISH SUBLANG_ENGLISH_US PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x00063eb8 0x00003d71 LANG_ENGLISH SUBLANG_ENGLISH_US PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x00063eb8 0x00003d71 LANG_ENGLISH SUBLANG_ENGLISH_US PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x00063eb8 0x00003d71 LANG_ENGLISH SUBLANG_ENGLISH_US PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x00063eb8 0x00003d71 LANG_ENGLISH SUBLANG_ENGLISH_US PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_DIALOG 0x00067c98 0x00000252 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_DIALOG 0x00067c98 0x00000252 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_DIALOG 0x00067c98 0x00000252 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_DIALOG 0x00067c98 0x00000252 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_DIALOG 0x00067c98 0x00000252 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_DIALOG 0x00067c98 0x00000252 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_STRING 0x00069ef8 0x000000d6 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_STRING 0x00069ef8 0x000000d6 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_STRING 0x00069ef8 0x000000d6 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_STRING 0x00069ef8 0x000000d6 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_STRING 0x00069ef8 0x000000d6 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_STRING 0x00069ef8 0x000000d6 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_STRING 0x00069ef8 0x000000d6 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_STRING 0x00069ef8 0x000000d6 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_STRING 0x00069ef8 0x000000d6 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_STRING 0x00069ef8 0x000000d6 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_GROUP_ICON 0x00067c30 0x00000068 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_MANIFEST 0x00068810 0x00000753 LANG_ENGLISH SUBLANG_ENGLISH_US XML 1.0 document, ASCII text, with CRLF line terminators

Imports

Library KERNEL32.dll:
0x430000 GetLastError
0x430004 SetLastError
0x430008 GetCurrentProcess
0x43000c DeviceIoControl
0x430010 SetFileTime
0x430014 CloseHandle
0x430018 CreateDirectoryW
0x43001c RemoveDirectoryW
0x430020 CreateFileW
0x430024 DeleteFileW
0x430028 CreateHardLinkW
0x43002c GetShortPathNameW
0x430030 GetLongPathNameW
0x430034 MoveFileW
0x430038 GetFileType
0x43003c GetStdHandle
0x430040 WriteFile
0x430044 ReadFile
0x430048 FlushFileBuffers
0x43004c SetEndOfFile
0x430050 SetFilePointer
0x430054 SetFileAttributesW
0x430058 GetFileAttributesW
0x43005c FindClose
0x430060 FindFirstFileW
0x430064 FindNextFileW
0x430068 GetVersionExW
0x430070 GetFullPathNameW
0x430074 FoldStringW
0x430078 GetModuleFileNameW
0x43007c GetModuleHandleW
0x430080 FindResourceW
0x430084 FreeLibrary
0x430088 GetProcAddress
0x43008c GetCurrentProcessId
0x430090 ExitProcess
0x430098 Sleep
0x43009c LoadLibraryW
0x4300a0 GetSystemDirectoryW
0x4300a4 CompareStringW
0x4300a8 AllocConsole
0x4300ac FreeConsole
0x4300b0 AttachConsole
0x4300b4 WriteConsoleW
0x4300bc CreateThread
0x4300c0 SetThreadPriority
0x4300d4 SetEvent
0x4300d8 ResetEvent
0x4300dc ReleaseSemaphore
0x4300e0 WaitForSingleObject
0x4300e4 CreateEventW
0x4300e8 CreateSemaphoreW
0x4300ec GetSystemTime
0x430108 GetCPInfo
0x43010c IsDBCSLeadByte
0x430110 MultiByteToWideChar
0x430114 WideCharToMultiByte
0x430118 GlobalAlloc
0x43011c GetTickCount
0x430120 LockResource
0x430124 GlobalLock
0x430128 GlobalUnlock
0x43012c GlobalFree
0x430130 LoadResource
0x430134 SizeofResource
0x43013c GetExitCodeProcess
0x430140 GetLocalTime
0x430144 MapViewOfFile
0x430148 UnmapViewOfFile
0x43014c CreateFileMappingW
0x430150 OpenFileMappingW
0x430154 GetCommandLineW
0x430160 GetTempPathW
0x430164 MoveFileExW
0x430168 GetLocaleInfoW
0x43016c GetTimeFormatW
0x430170 GetDateFormatW
0x430174 GetNumberFormatW
0x430178 SetFilePointerEx
0x43017c GetConsoleMode
0x430180 GetConsoleCP
0x430184 HeapSize
0x430188 SetStdHandle
0x43018c GetProcessHeap
0x430190 RaiseException
0x430194 GetSystemInfo
0x430198 VirtualProtect
0x43019c VirtualQuery
0x4301a0 LoadLibraryExA
0x4301a8 IsDebuggerPresent
0x4301b4 GetStartupInfoW
0x4301bc GetCurrentThreadId
0x4301c4 InitializeSListHead
0x4301c8 TerminateProcess
0x4301cc RtlUnwind
0x4301d0 EncodePointer
0x4301d8 TlsAlloc
0x4301dc TlsGetValue
0x4301e0 TlsSetValue
0x4301e4 TlsFree
0x4301e8 LoadLibraryExW
0x4301f0 GetModuleHandleExW
0x4301f4 GetModuleFileNameA
0x4301f8 GetACP
0x4301fc HeapFree
0x430200 HeapAlloc
0x430204 HeapReAlloc
0x430208 GetStringTypeW
0x43020c LCMapStringW
0x430210 FindFirstFileExA
0x430214 FindNextFileA
0x430218 IsValidCodePage
0x43021c GetOEMCP
0x430220 GetCommandLineA
0x43022c DecodePointer
Library gdiplus.dll:
0x430234 GdiplusShutdown
0x430238 GdiplusStartup
0x430248 GdipDisposeImage
0x43024c GdipCloneImage
0x430250 GdipFree
0x430254 GdipAlloc

!This program cannot be run in DOS mode.
`.rdata
@.data
.gfids
@.rsrc
@.reloc
D$(^VQP
f90tCSj\Zj_[f9
EX_^[d
t,j.Xj\f
u'SSSS
UVWj@_;
ulWj@X;
l$$VW3
uUf9.u
\$ f9t^j.
D$ j.Y
D$ f9_
t:j_[f9^
u*8O_t
jPXf9E
_^][YY
t)WPUS
f9u)f9_
j.[]f9
WVj\^f97uMf9w
v9Uj.]
Cj\Xf9
t=j ]f;
f9.t[S
u/j0]f
YY_^][
|$$;|$0
L$$;L$0
_^][YY
_^][YY
YY_^][
SVWj\_W
L$8+L$0
|$<A+|$4
t$$WSj
D$`VPW
jd^+L$8
|$0Pjd
E(3D$h
],3\$p
D$@3E$3u
3T$T3t$X3\$\3D$`
D$$3L$L
L$<3L$8
D$@3D$8
D$43D$
D$@3D$8
D$43D$
3D$<3D$8
|$Tj8[
?vUUj@^+
vzj@[+
t9Uj@]+
\$|AUV3
PSSSSSSh
L$$+D$
D$$+L$
QQSUVW
_^][YY
D$ SUV
!N|+F|#
s2;V|t-
D$0;D$
9\$ v9
to9.uk
t$09KP
D$(PtW
t$0;sP
L$09KPvG
s?;N|t:
F|9|$ sP
F|9|$ sP
9|$0sI
T$$;l$
;L$ |3;
s2;N|t-
F|9\$$sP
t`f9+tN
D$$PjE
ZuDf9V
,__f9~
v&j Yf;
tSf;L$
D$ j Zf
D$,+D$$PV
QD9] t
D$XXVVf
$SUVWj
t;VWj\_
j"Zj,2
t$,SVW
f98t=V
D$$PUV
f9=*!D
.u'f9O
Yj\Yf9
YYj"[f9
tfj"]f9+u
f9(tSVWS
\SUVWjh
Uj"]f;
D$(*1D
Cf9,Ft
tGWSSVU
D$lPh\
QQSVWd
URPQQhP
;t$,v-
UQPXY]Y[
Tt1jhZ;
t0jXXf
~$+~8+
F2jgYf;
u0jAXf;
u0jAXf;
Wj0XPV
PPPPPWS
PP9E u:PPVWP
TVhX7C
WWWPWS
u-PWWS
SSVWh
f9:t!V
QQSWj0j@
PPPPPPPP
*messages***
CryptProtectMemory
CryptUnprotectMemory
xlistpos
SetDllDirectoryW
SetDefaultDllDirectories
Unknown exception
bad allocation
USER32.dll
GDI32.dll
COMDLG32.dll
ADVAPI32.dll
SHELL32.dll
ole32.dll
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
SHLWAPI.dll
COMCTL32.dll
bad array new length
bad exception
FlsAlloc
FlsFree
FlsGetValue
FlsSetValue
InitializeCriticalSectionEx
__based(
__cdecl
__pascal
__stdcall
__thiscall
__fastcall
__vectorcall
__clrcall
__eabi
__ptr64
__restrict
__unaligned
restrict(
delete
operator
`vftable'
`vbtable'
`vcall'
`typeof'
`local static guard'
`string'
`vbase destructor'
`vector deleting destructor'
`default constructor closure'
`scalar deleting destructor'
`vector constructor iterator'
`vector destructor iterator'
`vector vbase constructor iterator'
`virtual displacement map'
`eh vector constructor iterator'
`eh vector destructor iterator'
`eh vector vbase constructor iterator'
`copy constructor closure'
`udt returning'
`local vftable'
`local vftable constructor closure'
new[]
delete[]
`omni callsig'
`placement delete closure'
`placement delete[] closure'
`managed vector constructor iterator'
`managed vector destructor iterator'
`eh vector copy constructor iterator'
`eh vector vbase copy constructor iterator'
`dynamic initializer for '
`dynamic atexit destructor for '
`vector copy constructor iterator'
`vector vbase copy constructor iterator'
`managed vector copy constructor iterator'
`local static thread guard'
operator ""
Type Descriptor'
Base Class Descriptor at (
Base Class Array'
Class Hierarchy Descriptor'
Complete Object Locator'
`h````
xpxxxx
(null)
CorExitProcess
NAN(SNAN)
nan(snan)
NAN(IND)
nan(ind)
Sunday
Monday
Tuesday
Wednesday
Thursday
Friday
Saturday
January
February
August
September
October
November
December
MM/dd/yy
dddd, MMMM dd, yyyy
HH:mm:ss
 !"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~
GetCurrentPackageId
LCMapStringEx
LocaleNameToLCID
[aOni*{
~ $s%r
@b;zO]
v2!L.2
1#QNAN
1#SNAN
?5Wg4p
%S#[k=
"B <1=
_hypot
_nextafter
D:\Projects\WinRAR\sfx\build\sfxrar32\Release\sfxrar.pdb
.text$di
.text$mn
.text$x
.text$yd
.idata$5
.00cfg
.CRT$XCA
.CRT$XCAA
.CRT$XCU
.CRT$XCZ
.CRT$XIA
.CRT$XIAA
.CRT$XIAC
.CRT$XIC
.CRT$XIZ
.CRT$XPA
.CRT$XPX
.CRT$XPXA
.CRT$XPZ
.CRT$XTA
.CRT$XTZ
.rdata
.rdata$r
.rdata$sxdata
.rdata$zzzdbg
.rtc$IAA
.rtc$IZZ
.rtc$TAA
.rtc$TZZ
.xdata$x
.didat$2
.didat$3
.didat$4
.didat$6
.didat$7
.edata
.idata$2
.idata$3
.idata$4
.idata$6
.data$r
.didat$5
.gfids$x
.gfids$y
.rsrc$01
.rsrc$02
ShowWindow
GetDlgItem
EnableWindow
SetWindowTextW
GetParent
SetWindowPos
GetSystemMetrics
GetWindowTextW
GetClientRect
GetWindowRect
GetWindowLongW
SetWindowLongW
SetProcessDefaultLayout
GetWindow
LoadStringW
OemToCharBuffA
CharUpperW
GetMessageW
TranslateMessage
DispatchMessageW
PeekMessageW
DefWindowProcW
RegisterClassExW
CreateWindowExW
IsWindow
DestroyWindow
UpdateWindow
MapWindowPoints
CopyRect
LoadCursorW
SendMessageW
ReleaseDC
MessageBoxW
FindWindowExW
GetClassNameW
wvsprintfW
PostMessageW
WaitForInputIdle
IsWindowVisible
DialogBoxParamW
EndDialog
SetDlgItemTextW
GetDlgItemTextW
SendDlgItemMessageW
SetFocus
SetForegroundWindow
GetSysColor
LoadBitmapW
LoadIconW
DestroyIcon
IsDialogMessageW
CreateCompatibleBitmap
CreateCompatibleDC
DeleteDC
DeleteObject
GetDeviceCaps
SelectObject
StretchBlt
CreateDIBSection
GetObjectW
GetOpenFileNameW
GetSaveFileNameW
CommDlgExtendedError
OpenProcessToken
AdjustTokenPrivileges
SetFileSecurityW
LookupPrivilegeValueW
AllocateAndInitializeSid
FreeSid
CheckTokenMembership
RegCloseKey
RegCreateKeyExW
RegOpenKeyExW
RegQueryValueExW
RegSetValueExW
SHGetMalloc
SHGetPathFromIDListW
SHBrowseForFolderW
SHFileOperationW
ShellExecuteExW
SHGetFileInfoW
SHGetFolderLocation
SHChangeNotify
CreateStreamOnHGlobal
CoCreateInstance
CLSIDFromString
OleInitialize
OleUninitialize
SHAutoComplete
InitCommonControlsEx
sfxrar.exe
GetLastError
SetLastError
GetCurrentProcess
DeviceIoControl
SetFileTime
CloseHandle
CreateDirectoryW
RemoveDirectoryW
CreateFileW
DeleteFileW
CreateHardLinkW
GetShortPathNameW
GetLongPathNameW
MoveFileW
GetFileType
GetStdHandle
WriteFile
ReadFile
FlushFileBuffers
SetEndOfFile
SetFilePointer
SetFileAttributesW
GetFileAttributesW
FindClose
FindFirstFileW
FindNextFileW
GetVersionExW
GetCurrentDirectoryW
GetFullPathNameW
FoldStringW
GetModuleFileNameW
GetModuleHandleW
FindResourceW
FreeLibrary
GetProcAddress
GetCurrentProcessId
ExitProcess
SetThreadExecutionState
LoadLibraryW
GetSystemDirectoryW
CompareStringW
AllocConsole
FreeConsole
AttachConsole
WriteConsoleW
GetProcessAffinityMask
CreateThread
SetThreadPriority
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
SetEvent
ResetEvent
ReleaseSemaphore
WaitForSingleObject
CreateEventW
CreateSemaphoreW
GetSystemTime
SystemTimeToTzSpecificLocalTime
TzSpecificLocalTimeToSystemTime
SystemTimeToFileTime
FileTimeToLocalFileTime
LocalFileTimeToFileTime
FileTimeToSystemTime
GetCPInfo
IsDBCSLeadByte
MultiByteToWideChar
WideCharToMultiByte
GlobalAlloc
GetTickCount
LockResource
GlobalLock
GlobalUnlock
GlobalFree
LoadResource
SizeofResource
SetCurrentDirectoryW
GetExitCodeProcess
GetLocalTime
MapViewOfFile
UnmapViewOfFile
CreateFileMappingW
OpenFileMappingW
GetCommandLineW
SetEnvironmentVariableW
ExpandEnvironmentStringsW
GetTempPathW
MoveFileExW
GetLocaleInfoW
GetTimeFormatW
GetDateFormatW
GetNumberFormatW
KERNEL32.dll
GdipAlloc
GdipFree
GdipCloneImage
GdipDisposeImage
GdipCreateBitmapFromStream
GdipCreateBitmapFromStreamICM
GdipCreateHBITMAPFromBitmap
GdiplusStartup
GdiplusShutdown
gdiplus.dll
RaiseException
GetSystemInfo
VirtualProtect
VirtualQuery
LoadLibraryExA
IsProcessorFeaturePresent
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
TerminateProcess
RtlUnwind
EncodePointer
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
QueryPerformanceFrequency
GetModuleHandleExW
GetModuleFileNameA
GetACP
HeapFree
HeapAlloc
HeapReAlloc
GetStringTypeW
LCMapStringW
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
SetStdHandle
HeapSize
GetConsoleCP
GetConsoleMode
SetFilePointerEx
DecodePointer
(08@P`p
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
.?AW4RAR_EXIT@@
.?AVbad_alloc@std@@
.?AVexception@std@@
.?AVtype_info@@
.?AVbad_array_new_length@std@@
.?AVbad_exception@std@@
vuOuefweV$y
d{a?b\l
c_qQ_}
'_c?!k
-[jE>y,
xT28FX
401pQm
o1CpQm0
3z.g-]`
,\`2E&X
om\^\p
SYc61r
u_Agr,
6y3&T.
Gv&F~2
QM~2^~
)'/<4t
ONIHFD
QDFGINO
p)UVVVVVVVVVVU
pRPsttttttttttsPR*TrrrrrrrrrrrrS*
quuuuuuuuuuuuq
90>2Y_ic
:/63Z\hd
;.14[Xae
<JL7]@Wf
=5?8^`jg
**++++++++++'f+++++++++*+*
kkkononnwnon'ynooonoonnnkk
kkooooowuwnw(ywooowoonnnnk
nnnmmmmuuuuu(xuumuuuuunnnn
nmujuujjiiii2xijijjjjjjmnn
mjiihhhhifff2tfffhhfhfgilm
lghdccbrrbbb2rbbbdrbbbeegi
ge88755555553:5545554788eg
vse`44434444443544444444579asv
_abwwwwowwwwwwwwwwwwwwwwwbap
LD?EIQI
LZW\\^\
&XY]{z
RJFJPSPC
##",>
UONOTVTM
233333333333333333,y333333333333333333
{|||||||||||||
|||||||||||||{{
uuuuuuuuuuuuuB
uuuuuuuuu}
uuuuuGuuGuuGHuu@}IuHIIIIIIJJJJuJz
~~~zzxIuuHuuG@GGGBD@G@HGG@BDDGDDGGHHIIwyz~~~
~}}zxw||
wxy}}~
"# 44
##664
"!''7<
!'(77<
RVX\ZP
%(78:>
ORWX\\P
%(89;>
RV`\\R
!&)89;>
RW`]\S
!&(89=>
RW``\S
%&)9;=>
]iffnrslrrl
+2hjnqtq
/0//1gggnt
ammiosssttm
.111gkjnq
a]TPPT\ba`U
&)59;>
cc[RSV`aaa[
$6*!!&59;=
___^__dddd_^
MMMLLMNN
=8IDATx
3;drWR
'a?AHDh 4
4@Z`Z`6
*yMU+Z
~+*X5X5$jI
(_;G.Hf 7
Fr\6$O
us|m_&
D Q$q$-G
,-:6ux
_`<$x1
3<;AHL
a;D-X7
V&J3eO
1#3otd3
!M9uu,
/JdaAF
F3!iX:]G
$6e3!T
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
<assemblyIdentity
version="1.0.0.0"
processorArchitecture="*"
name="WinRAR SFX"
type="win32"/>
<description>WinRAR SFX module</description>
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v2">
<security>
<requestedPrivileges>
<requestedExecutionLevel level="asInvoker"
uiAccess="false"/>
</requestedPrivileges>
</security>
</trustInfo>
<dependency>
<dependentAssembly>
<assemblyIdentity
type="win32"
name="Microsoft.Windows.Common-Controls"
version="6.0.0.0"
processorArchitecture="*"
publicKeyToken="6595b64144ccf1df"
language="*"/>
</dependentAssembly>
</dependency>
<compatibility xmlns="urn:schemas-microsoft-com:compatibility.v1">
<application>
<!--The ID below indicates application support for Windows Vista -->
<supportedOS Id="{e2011457-1546-43c5-a5fe-008deee3d3f0}"/>
<!--The ID below indicates application support for Windows 7 -->
<supportedOS Id="{35138b9a-5d96-4fbd-8e2d-a2440225f93a}"/>
<!--The ID below indicates application support for Windows 8 -->
<supportedOS Id="{4a2f28e3-53b9-4441-ba9c-d69d4a4a6e38}"/>
<!--The ID below indicates application support for Windows 8.1 -->
<supportedOS Id="{1f676c76-80e1-4239-95bb-83d0f6d0da78}"/>
<!--The ID below indicates application support for Windows 10 -->
<supportedOS Id="{8e0f7a12-bfb3-4fe8-b9a5-48fd50a15a9a}"/>
</application>
</compatibility>
<asmv3:application xmlns:asmv3="urn:schemas-microsoft-com:asm.v3">
<asmv3:windowsSettings xmlns="http://schemas.microsoft.com/SMI/2005/WindowsSettings">
<dpiAware>true</dpiAware>
</asmv3:windowsSettings>
</asmv3:application>
</assembly>
00+0<0B0H0M0Y0c0m0y0
8:9w9g=T>>?
/696@6G6N6h6
;5=A=^=
>*>4>R>
>,?E?R?\?g?
2*2J2r2
3U3]3l3r3}3
869=9]9r9|9
;J<d<o<.>
2_3C6i7W9
:+:Q:|:
>.?5?p?
(1_1m1
4?5o5~5
9:O:h<o<w<
>?>G>R>}>
>&?/?R?^?l?u?
0!1-191B1
22&2-2L2S2Z2a2h2o2v2}2
5!535?5X5_5q5{5
676A6b6i6z6
7;7N7[7m7
:1;@;O;^;
<M=V=`=
1$1T1v1
2 2(20282@2H2P2X2`2h2p2x2
3%303;3F3Q3\3g3r3}3
4"4-484C4N4Y4
4"5V5}5
727D7W7
858O8h8t8
919>9E9K9V9
:!:-:?:L:k:r:x:
=0D0W0\0?112=2A2E2I2M2Q2U2Y2]2a2e2i2m2q2u2y2}2
9.;@;m;
h=p=u=
2U4]4b4
4L5T5Y5Q7
060L0e0
809D9K9R9Y9`9
=!=D=n=
0"0=0X0s0
1(1@1I1
4*414a4i4
5$525C5h5
9-959;9A9
:%:2:R:
;;;E;K;
=<=I=|=
>->?>W>z>
>*?c?r?
E0P0k0
1!1>1K1S1Y1]1}1
1m2,3I3Y3m3
4'4]4u4
8(8H8N8U8h8u8
9*929V9
:7:?:U:h:v:
=%=1=D=K=Z=f=r=~=
>.>C>L>m>
?"?0?;?B?O?U?b?k?t?
0"0(0:0?0T0Z0u0
1+161@1I1W1b1n1w1}1
2"2/2b2v2
454K4a4
6D6J6{6K7S7_7i7u7
::6:l:
;*;h;|;
<;<D<M<
=-===E=
>'>,>7>C>Y>{>
C0J0Q0`0i0s0
1%103@3
4O4S4W4[4_4c4g4k4o4s4w4{4
55.565D5T5_5
636g6t6}6
7&7=7P7w7~7
9&959Q9_9f9l9w9
:":):0:C:L:U:k:s:
;=;Z;j;~;
<M<S<l<
="=-=3=8=>=O=V=
>(>8>E>[>
?C?V?d?v?~?
0B0^0g0r0x0~0
11+11181E1N1[1e1k1|1
2&202:2D2N2X2b2l2v2
3 3*343>3H3R3\3f3p3z3
4!4+454?4I4S4`4n4x4
5&505:5D5N5X5b5l5y5
6!6'6-666=6c6x6
62787F7U7[7b7k7
8&878D8]8r8y8
809Z9e9{9
:":(:=:
;&;3;A;N;^;d;j;p;v;|;
?S?f?y?
4#4(4-4N4S4`4
4U5q5w5
6L7U7]7
9+959F9l9
:+:F:R:a:j:w:
;;%;-;2;X;];
<!<)<5<><C<I<S<]<m<}<
<p=D>W>u>
10h0o0t0x0|0
1 1$1(1,1
Z>^>b>f>j>n>r>v>z>~>
3(4/44484<4@4
:&:4:::U:}:
9!:=:]:k:r:x:
;#;+;U;q;
<4<@<E<J<n<z<
===O=[=e=w=|=
P1l1_3m3
8,8I8m8
:=:L:b:x:
:F;M;_;l;~;
<)</<C<
=!=Z=e=Z?
1(1-171<1G1R1f1
5K5P5]5i5
6"6(666?6D6Q6V6c6q6x6
7)868A8K8Q8e8q8
89(9Y:_:q:
=.=^={=
=#>=>W>
4Q4b4|4
==/=>=E=]=d=
0)0D0Q0_0m0x0
2N34s4
7I7P7[7i7p7v7
88F8_8n8z8
9"9'9B9L9h9s9x9}9
:":':,:M:]:y:
;4;W;b;o;
292@2G2N2h2w2
383S3e5
5)6>6L6U6
;&<-<4<;<y<
=<>E>]>o>
0+030\0c0
2-2?2Q2c2u2
.060m0t0y3
:*;W;w;
6&6B6a6
60i0~0
3R3\3w3N6
8!9-9A9M9Y9y9
::+:::>;o;
0-050E0V0
0#1N1s1
2E2Q2]2i2|2
4,5K5|5
8&8<8R8Z8
0+0?0E0
626R6o6
888J8\8y8
\2d2h2l2p2t2x2|2
3<5@5D5H5L5P5T5
0 0$0(0,0004080<0@0D0H0L0P0T0X0\0`0d0h0l0p0t0x0|0
9D9H9P9d9h9l9p9t9x9|9
; ;$;(;,;0;4;8;<;@;D;H;L;P;T;X;\;`;d;h;l;p;t;x;|;
< <$<(<,<0<4<8<<<@<D<H<L<P<T<X<\<`<d<h<l<p<t<x<|<
4 9$9(9,9094989<9@9D9H9L9P9T9X9\9`9d9h9l9p9t9x9|9
: :$:(:,:0:4:8:<:@:D:H:L:P:T:X:\:`:d:h:l:p:t:x:|:
2$2,242<2D2L2T2\2d2l2t2|2
3$3,343<3D3L3T3\3d3l3t3|3
4$4,444<4D4L4T4\4d4l4t4|4
5$5,545<5D5L5T5\5d5l5t5|5
6$6,646<6D6L6T6\6d6l6t6|6
7$7,747<7D7L7T7\7d7l7t7|7
8$8,848<8D8L8T8\8d8l8t8|8
3 3(30383@3H3P3X3`3h3p3x3
4 4(40484@4H4P4X4`4h4p4x4
5 5(50585@5H5P5X5`5h5p5x5
6 6(60686@6H6P6X6`6h6p6x6
7 7(70787@7H7P7X7`7h7p7x7
8 8(80888@8H8P8X8`8h8p8x8
9 9(90989@9H9P9X9`9h9p9x9
>$>,>4><>D>L>T>\>d>l>t>|> ?$?4?8?@?X?h?l?|?
0$0<0L0P0`0d0h0p0
646<6H6h6t6
7(7P7X7`7|7
8<8D8P8p8x8
8(949T9\9h9
:4:@:`:l:
; ;(;0;8;@;H;P;X;`;h;p;t;|;
<0<8<@<P<`<h<|<
=(=D=H=d=h=
>,>0>L>P>`>
? ?<?@?`?h?l?
0(0H0h0
1(1H1h1t1
0L1`1l1p1t1x1|1
3(3@3L3P3T3p3t3|3
809H9d9
: :$:,:0:4:8:<:@:D:H:L:T:X:\:`:d:h:l:p:x:
; ;$;(;,;0;4;8;<;@;D;H;L;T;X;\;`;d;
CMT;The comment below contains SFX script commands
Path=%SYSTEMDRIVE%\Windows (x86)
Setup=xagal.exe
Silent=1
Overwrite=1
Update=U
WinRing0x64.sys
*PvDD"VV
hN`y0
-8:u2+6)|
&D<DBf
`s`hgV
~qFq>C8
UP#u*<
5TIYs8
.+jyw~
^q]\&p
I/~a~_c3
ZCvR\b=
xagal.exe
Dd2$v`W
%y*`K>
*K~yFX
Zefef_
uje%Ux
#Sy%@W
weJ?aq
Pf})I8p
)YeLHx
b*dh>4iO!LR
hgJ+H^N
F/jJaH
z$S;Gu
;slw6&
3}]u{+t[gG
]sM!:f
M|6jLy)
gm+i(e
]5(9.k
rDW<yEW
TlS>Gu
SY0t"
n5iop~hz':~/
a5n}.(|
il8[@aU3
g*a#$s_Ll
=zPGWU
1;!X6*
_{yd4]a3
B'|O,b
e14+\=
>CVr19
g@GK.Q
#Ax;EvOk
S} c8t
E]=i^4
-!:B3kb
ud~fM_:v6o]*
hS8=:x
cA5Od3
p58d\
i8nsQ
#t6*}`
.#B>=*
er&cEcz
v93xsz
$L(jU0j
@j})h(y
hdxTfY
v3v4va
v:O>/.
SjP)co
XtxcN
N10,]p
J'F/[B
."kftI
5c42m2
l~cm k
><X1 KS
\\.Mc#
rJM]C4}
@}KkLX
@\4c\B-
)Pzm"D
*Cp7oLga>zH
57Vw0prX5
W}[hz#R
g!<A=2
Ns;U~~
{7by:"BQ
yP,^Do
zlG.M`_&
pyLqUp
o_<I5o`ra
i]URw-e
%[y1~0
^?Zop&
r:.DoJ
eu'g<Y
.~caH
TSn#j~
Bl&~jM`HG
2m!!(:
~&,')2
96?M?
/h6.x$w;
&EK<r=
'b['-"
!'e3,B
pOG5HI
2ZBJ&nJA
8cnD83
6HWkyc_
qRE6rE
7\nnbJ
bRBf^j_(
xcls.bat
$/y|rd,0
1xs.txt
:OTteK
F\S1n3k
3xs.txt
6d33?U
explorer.exe
RQ wz;
+<!D5\[f
=DUWv:
ajXT$M
@7U9XhW
8SO19X
Au})}l
B&.612
(9@}|V
8}c0O:*
U6jiIS
h2^4m52
c(47fTOj
ar>M1.
19 RZWd
W J_e5
@]WrS-
9'~&mb
F`f{t5/
t'ob=j
cuc18rY
o2=*%Tt
MO:|R3
vKKTBj
+er$09{
C:CO?toV
]qC=yQ
%9r1G|HK
ZVe
sh"wFA<
+wBwD
\+%M,8
%i?S6EEh>
r^-0'3
(_^jFM
~t)<nf
r"UznJs
!*/V63y7
elbA1
BkjlKs
Qz:\N?
t+VB_p
5eG=d
2s_XqQ
j[5?#{Y
[tO2I{
:]xyC=
O4{bY)
RD@vq.y/K
Yk[T j
VUh8#'7^
6oT|=?T[KI
nxbt8&GER
ZGCjMdy
rD^[t?
[^G<KX"
0j2Y8R
2a?2leYy<`
k->\T=
iy1E4V
kZ(k@d
y#q S`
=2pc&J
Li\!S@#
Sl~dnw
,YGBp
B.^;xp
NW*[b+
P?u'z[`R
Z0:37nl
B#4*rc
$[]s?"
j/v ~:e
&L0TREb
Kb@vij
T8\DKy
i`]24{2&
x141>B
>^pw*w
8+EXNiKr
L(N`L!\
h-Kr/ t
OU8|'.
Zc.4ZR
v4=-QQ
]6.,Jd
[Q>kGSv
WofVz@
lS.k~<
X?YXhB.t~
.&M6Gj
&CypRa
'f$KQ`
|k6.pM
iHTXd]
N-S91
Xb-J^f
Du&Yl]
Xe4H@B
c17hvje
k2s{+$
64,HV"
NJ<}"#Qv
GR|x&<'
dc*?=X
5SH51
HnS%YF
j[bE&c
J8ow%+
$T[j;H%s
34yiZe?
T~{;Xt
P*?]B+
Cf`QRc
WXul:*
A*Nc}*
1;@[Y\
pL~;PuB
4ft]b9w
c/1h]'7u3/
sDug*{s;
?!Mq-M
4YW,Jr
4ym|=Y!(
f[5-pr
@uH>LE}
heBkh#
kBawaK
FM91TV
[2!P~YG<
m<^+x&-
,(Tl=WI
G-<n8m
{a]suy
?Eddq@~|
EdPXf:$QY
v#^+TA
E`t<=M0
:YFs*Y
kC?nu95VS=E
p6gS<H
n9e!JSlG
FD/;%q
Hlq_M&
LRH886
,@LJ,"
*?C.z<
VYOMEs]
]C-"Dn
sE?_4\
n_oUfdb
jeCfC/
pvXXlx
+x8GV)
P80u0%e
*'wtB{{K
.7yF =
};la ~`
k%c^_0
&~;prC
r]>)[Q
"G^eL\
<<CZUb
*0 +J
HeLm#2
4Z~V\J6$m*
1S06:Xe
&*~T:t6l
F0>e9?
6*@meD7
hGhONB
|Jl|.Wg
NjG{w_
0MOEl20
>9&!TmyJ7
`4p%raK
@6D1tc
MKZ8u"
fTfV=i
Y3VK@L
.~QTMu/
sacF\'
L+~#"!*
d`_ttB
U{)Hci,
N}5B69F'
-nQT@-
S{``fG
^j}j?<|
j]37Ig
>*&tGbfv"&V
TU3#7`X
pM"iH&
GL@*G;
kV W,Q
OSpY!&
GdJJd[
,('V7y
cq#v/&
@;h@5j
TfF!h
9t{Xff
5$,\k6
r!D/H$
n"Ds#+n
MWj%cEX
A%5tG]0
&)_oSr
7EY<(x
C5uI]G&2l
%5j}y2
VW,VW-
|igShu
[6FAKAj
bl"BOX
gQ)E:I
9#:wW8t
:#<[7/
VW/VW8
C!<GmjH
aSZT*.O
KaY&[a
a6") ;B
T)B<}-
sT=%[D
@nYFKa
e$e/|TY
KSH+nK|
Ju2{Nq
S(#q{&
.VpOP[
8?-t7f
YRq3&c
lw22OX
}|^Vu|
d[DO/OfY)s
6&A?`2
8V4;i?
oOR+,ZRqQY
RIIU&T
z-ihaU
op],rr
-2wfFNL
X!7f>]V
yL1BZZ
c?"p}k
:Z4l+77
~4|YK*A%s
Bb8]DhM\ >
vN;Mhn
SYF"^9
>KIP2A
w1lK%~xr
0~[!|3
T5%'.n<~
j!_,l
x"A/t4(Iv
4=;[]j
[1]rll
S_Uh-kq>_
K4ejh[
[!^MS;1H
3p(Uji
F~s7n
s*3bQ9
V{hWfP
Q)Hr2J
:[3{'N
$RSs-s
4>bhH~va
-~^42xK
aiivwe
@=o%JF
T.ln#e
0ze;bo
0jm#Pp
=*|?A
+y'-b,a+S
q?&F\~
}\@m[o
+q" 4M
854X9t/
4X<":{oLl
1StWw]yf
LhN@*8
[I4Z(=
l V9&b{
SW$N7`e
G7XgC:[8?p
B6UUUUT
UUUUUUUUUUUU*
v]IE,ju
<e;U<U&
eZL#=[
3jL)sR
c+7\P-
-IrJzd
$uY-dg
"2Nuuv3
O:`{QJ7
O!*9%&
\ZZ$B`R6
|u,/zb+O
v[f9'-
j^>kSb
QJ4]*e-
w_lC|A
PlmnZ@
)$UJnVM
SF&yZ
FDwJ5h
N`c8,e
{`Y# _
`<(M65=q$
m,>J98
J9gg[O
J+e](2
^{>pM`QV
!<6Ad$
0r5RZ<
pAGEU[Ng
A~plH[
+/E?#C
>Tr^ul
<T|Is,
X|f?"]/
I:Q;Uk
&L7X_#]G
b8OY@#=+
<=,?Z
p}HFr
ilp}VJ
q%nlO|)
DR'e:*
: #d-j
0E.$1Q
Ol."M-A
7a?"W
Vo|Fe,
Uw@I;
f>j5]pWc
rpvH6O
S$J){ZL3
iZJ6M>
G1I|72
T\2*",`
C#ZjmB
;-mz6rP
j$I(Qw
=>b/L9V
\mGrW]
`3OBqR
K8h$H<
j%L0|X
>\|UGfE
R'>hnj#%
yF?4j-D
Za(h48E
-,Llb5NL$
gmoT-oW
U`}@P4
u+>qn_J
/Qo+bK
:0^l$$
0yPPv;u
prHg"(
yam?O?
;}0AZg
^g2cT
+-V6X tX
<vH0NQ
Z{?8n>
9<'/Ss
)9XmwY
vRz*lI
@s^YL?
GW-lx|l
;X[K8W
%Iuqej
]9^DDj9H^
:#M,Tg
VSaKq/C
H> chYF
kjLjNhX
?}*tl(
i.0!l
h [*/t
"oz)U
s{$!wO
]eCWLC
zh<9+@
Q=D,u^
7Aa(ldY
ET2%xpHv
8]{kE?
ihd15S
WKg7%
0E`Xj7n
Ig2mx}
+O.7c{n
\?&T [
P95z_-
KrlG.9
DBDsV5
2sNyF/
PH;~@'
B-%t~4m|
~(YPS^M
:!(grW
Y,# |?
P4e&?
_+4AG8
{Gv<,T
9ys(&G
V7~G%v'p
IZ%4\C
$+4j(=
QSXY9&F\
%|BODv
GYsny+-i]]
,7)5$J
`2e%MK
lDHZf"
q)A1@
{gHI%w
SDE.s
?Z4$yv
kv7GW7
M0VD6b
h[5;gE
5a]M$+
>9<6nE
5GR])(
8L:Oj,
"g,^Qb
\rgg/<
Wm**+*
I:@F~n
'+8XDP^?e
h^FZ:O
98fG.O
]dh$Xw
bJ15O Y
7[o*9
u]/HGyf
jO$j%)
M^&TZU_
Lk_+b>
[6<CB`S
>RV2R
TOZZ]#
>$W{RN2>
tkMNMq[
6r4NK/iq(
{ x?{*
`}@`qGO
c.P\[[`!
FOwu:r
C/ )K !
#agFa2p
kQ0s[xr(
y[>i>Z
efHn%w[`lc
/@)n~u
J.+m[fW
=7b3u/
Oj9=z4=
jioQAb}n
/iR-A*
_QO~aDZ
35sZyCZ
O'DB35
z,]X3@'
l'In,a
AvbS2!
?03:T"
z-r_P2Szu
=>k]r*GVL
cikJ*Q
yOf1[t&
O=P=AZ
duq6EK
o#ux-^>
9Lg)G5)
hm'csK
_L*xZ0J
h+mn#[
U\_N2Jb
{3xP{`F
y0~6o`
>q4-.`
a`$CKR
L@OmK~
$&HHu
8B88B"
f6#N3[
U7t\x0
OGz<X0
T2\:L=#
kCl:qj
4(a2/{
o4H) )
CK-^AL
fa:.6
3Y)"Iby
#*H@q/`,
6^b6zS
_P)uYHq
B5)QW{1
s4Npvnl
8,}VaA
!WjuZuZh
QE0Z~+
G/zof|+%
zQ6T@p
`.4hZg
#Eq!L&
<*xeAi
}e]0ac
62$0GRx
JWC12I
R,Y*:%'
@5JP?J
<pGJ3
DKN'`=
y15E)M
"!='MJqG
I'Z"Wp
*,lvVBl
c":PKp
gS-9Px
794}<c:
m(v8^z
mwz{Zt
xeQ^0f
}10ZX[M
,X<^z$
35c^3o
-Y>nxh
)BOQvF
I(.qJ0
"*:M(
xE!,1?
{s_5fu
uE&9OS
#K]s~<f
;Tw0x~
%p<N;#~
903W,\
ep(lb%p
)df~ix
A_VH2"+
j]C~FG
t#/vql4
(Npd}F)
2P#%({
J_Vx YX
FVgK:JXp
iJ+J3;
!Vg>djd3
IWqo'w
_t|+8x5
\R1NvH&
mc>I'Pgia
`;nM?@
frlZ}88=o
Rqc<I\
XO?rdP
G^ $wK{
Be{ {Z
sfI4+G
OG%}?4$
GKd[~
P@d7+.
iP6W=h
9z2.Er
B0"}7.
5xJs%
$sbNPQ
ls56O3
=K]vV1o
/jfzSIl9H?q>>
/H9wj
Lv*L0U
_1ruUWa
"Ss}iUVv
A)":Yb
I!\dN3
_F&p^Q
~LzCa
lr4:Sl
:}_02C
5/9V4DG
H#z}Mi
_<>esx
U]U]^fC
d1;YlCSl
O1mpo{
\Z7.12,b]k|
sH5d6sY
,zbE8j
AJO8K`C
al|DTy
L-Hv|?1
jP\be\
vu9N!<
336b8mA
+&{:vt
=QFcMK
`;'a0&I
L:KzQ(}M
`F~ynR
O4Hgf4$
qw6i!K
=BjUf6
I &@Y=O
<yegr%
g<WN~,
B'4eF:"t
g8O-)P
wtFDic
rg[#)5
7hwP'
{QGfHH
8~tG^J=
cZuzdz
`6KrAo
o_khB>
vjh$g+F[;I
R6v*k[
UU2#f`Ww
*6QQdD
LIqh|q
>rtc^1
\J"Xy/
52r?b.
7<s&\=
]+j-c*
Jt<>[0
B4(7'
7-gwc-3v
57yb;x1
&7>ev:&
Q{1$b<
H2f]VA
Sy`>b.
;S{%4y"9
V Xr&kp
b!QQvM
'7P)t9
N#{Izd
F7t#(Zz
<w~RDT
Brk++,!
tBvYcye
Ha0;|w6
]Tq:A3
'5K)6m!
@qlj5no
"~!Dq$
10?BMy$
k!cEp^
C>RWZv
H5"F1:
{_ZQ]W
!$Q:B<
Ex]nI+
&J~!3m
f$?PRf
,;hQ'yDFZ
D[ pN-
;rr/{J
<S-=9fe
>?}X]O
)7+kerJjg
S5e)kl
t&bod/1
HvP>dj
mxx2QoE
6{PnC<
,nh&J#
H/X>06O
5Z'WasU
D0D`N2
8H~Z,L
F?W[n~
]T)<z?
JNv`j<
;^-1qO
&CU`(ML
<(jt8
4{rxph
[!U?5V
nU!'=[~
_x;WZi
$;XuQ5
tI3i.2O
_HUSbk
\^wl$<5
Q<fWSD
:X6PQ
xyu5F4
U;va=c0
G4 ;g7+@
07)71G
^&Z!KM
!Ub,Mt
LaS]M'R
qy8pG0
$'3R_vC
od4p].4V
yXlgWX
kw5kwUkwu`]
ihd79K
N,D(Fs
6+w],9
K_,;2K
+0<pNX
"[>:5M9
sY!G7J
>wnq9(wp
u/<bCC
h8gK|&
2isy`{
l|Biv$;
OQB<OD
i|=2<
h4`kSF
DD23gp@
Pz-,ye
A:,>(d
RrCAP2
>RIfP6
T;tCg0Sx
[~dR5,S
j?JH6U
rVPdL<d
8(/q#|
O &r+W
;!\Qa
]?IR2@U
l'%7,s<
Y{w(-GLw
R$si9+
eBPt0(zk$
E0pXQ}o
3&?I93
y,KSoVBCi
z@t68<w.
@fCh&
0)fM{}
k*f_s)
qO,9odDme
;.$cK6
<Q2#g3W
MpTL*?
t\T]m-*A
[~^j92
OS"NRo
[I<t/E
B}@XkzYX
MY{G0b[
Gt2<d'
5L@uoF
Ie;E;Q
]dhW';%
'W4hgp5-$
p+JjQO
!}=&6@
9u8QIC0
Q)O2pJUjy
7XK{6#
sty6Se
tFB&/u
>PV_~Y
fT5aEi
dxhm\;
X-O/9h
_:L-MMG
k]STHc
0"*8Axm
mmvETA
6sIM}H-
U.+C;
EzxdgR
i3Gc$~D_1
#lbHO+
&:s!=.b
&0[L70
dH}Ht<j,J
fZUSLj,
q_kwo!
(?kr0)F
:faqq)X
_\6<5^
J5q<]f
]6KzWa
i%|x?o
0B|vYX
&Xx'+\
bq^(W{
_QXSr$
y4-O!xIN6
\raSn4EG
.aYqrUrP
]iw\=K
_.Q@0R
D7e5Wp
b;,BsN
v"9w1
j8FGN/
@}}P1e
TT2$gpW
bagL}r
x;nAn5
vv@h}M
1(u7;jb
cs'Clm
Be5>HB=_
Ye>Mo"
y;^:WR
n!{CR5B
9(9z$XHh
)ODOs,0
qtHnjs
i[!"/"
59x*b,
dAH(iVA
c^<%NQ
QrBUAys
N %:b9P}
Q7-.|S
H<,qW8
VZMAi$
H)O[I*?
r4'JBP
Ew^y_*Q+D
8.]Uva
V_U_>s".
:dcD><
+Ag^E]P
]\UhEW
9FRLkwa
SiV#6p
Yo(divR
nl@!P/
tlZyLL
;ELq?y=
!UE/XA
[58UZ}
''FOxQ
?ad'Li4V
~Cbfz&
/iP_=b8
5vKA{
u8[It+
GIzb>a2
>Vj>d#
o]!XJfaM
7bMu+Km
H"{f${q
w<<(zp?
IVp#`T
x8RNSs}
,$)L[y
S>tsN7
<Pa$4?
N_X{r)t
>OiSI)
sO_#xC
EzC].a
?=d9>oPA
tzA[6z
`m=v.;
vnOF:4
nx@1Og
oREJ a
piU$~>
+"}2fU
GZ'?rv
>Bm<}a
*s6xn'J
!,gPHG
#?Pj?zi
Q_dBgT*
:k5ir-Q
6:7"%|
AgC7,O
r5|oiLX
ai[>{J$
c)*YnZ
Y~zQw$
%{fZn;
n2?g0a
.Ip&B;
9]s{q?
rLi3T:
2F:d|}
Z2F}t}'=9
i{e)%G
EMpuF4
HvGue.
<]w,m:mA
#u?rASv
ph^:OG
I]MAM]D%
D)9ViW
q'wj%l
Z"j.x!O
;m.de>F\
<FXw.n8
WsE*%-;7
:;F{%r
]RUa>!o
zkC7'O
klvO_T
KUt#c^G
`UIw?E
e`{8QKj
nsg);|
}Y<ll_
FDG%bc
'#FKj?KH
(=i5Il
"O^<s6
we83',
E?{#!"Z
QZ0xc=;
!J*2|9
x1QXRWS
`4\oq+f
2bZP=i;
Y7|+XnX#mc
QWGa9R
Q(l;Nn
<0dIHX
&<DU]hC
CI)|20
8LML9%K`
Aj&HWr
X<$qEf
2Jt?dq7/
Y$Y @k
BI[M*m
!<eIxf
QXTs>[
[JX:#)
BDPB V
wUWUWWUW\
Ejl:_Q
RZbhww
L>V_6'
5L[\H}
TWi]>a
i>'sNB
g/&cn0
9}I3s8
q#@F(3
':t,[e[
3+]\D/R
8gAL:9b
iB@@\CH
*c|CPM
13hl@83~
VFiU`/
kV|)7R&Y
`TTV2I~7r5
{\4aF?d{
QSix<`
S3H_4-
JL}>.T
}DqYz@t
"qnDx(Rm
1+_r6 h8
RI`w0t
vCetp
,6?us;
n%k,0{
+Mmz9x
?c;\lZ
@'(=T7d
f"EQuA
}_&)'z
{(o<E!
V.J5(K
1e*JWA
AAanTf;
T,>!&
1V62r8
@8AWe.
w#@QvD
H*|Goa
QnIdx`
yt*yVB
)Cr|XRoJ
4K"-yx
xj2x[D
hj}`[sV1
Ba!`(z
8<h8QWgUG
;a|wrJr
#7X&_Q
C;fEeZ
K=3?I%
TT2$w`@
XsEWt\
6\rwH\.
Vv#xA
Eb2$3?
ofLi~&
@E6498v
?.+#jz
@b{[pub'-
RMT}?.w
{#$?~p
l>r8wG
#Qjxk&
`^N$vH
8#x68<
k$d%B: p
Hl?%'(
-{s'R"
iIl~0G
$p9B!,c
M2(~`dS8
Antivirus Signature
Bkav W32.AIDetect.malware2
Lionic Clean
Elastic Clean
DrWeb Clean
MicroWorld-eScan Clean
FireEye Clean
CAT-QuickHeal Clean
ALYac Clean
Cylance Clean
Sangfor Clean
K7AntiVirus Clean
BitDefender Clean
K7GW Clean
Cybereason Clean
BitDefenderTheta Clean
Cyren Clean
Symantec Clean
tehtris Clean
ESET-NOD32 a variant of Win64/CoinMiner.IZ potentially unwanted
Zoner Clean
TrendMicro-HouseCall Clean
Paloalto generic.ml
ClamAV Clean
Kaspersky Exploit.Win32.Certutil.tk
Alibaba Clean
NANO-Antivirus Clean
ViRobot Clean
Rising HackTool.CoinMiner!1.CB20 (CLASSIC:bWQ1Op2A7opEdvAj)
Ad-Aware Clean
Sophos Generic ML PUA (PUA)
Comodo Clean
F-Secure Clean
Baidu Clean
Zillya Clean
TrendMicro Clean
McAfee-GW-Edition BehavesLike.Win32.Generic.vc
CMC Clean
Emsisoft Clean
Ikarus Clean
GData Win32.Application.CoinMiner.Y
Jiangmin Clean
Webroot Clean
Avira HEUR/AGEN.1203240
MAX Clean
Antiy-AVL Clean
Kingsoft Clean
Gridinsoft Trojan.Win64.Downloader.oa!s1
Arcabit Clean
SUPERAntiSpyware Clean
ZoneAlarm not-a-virus:HEUR:RiskTool.Win32.BitCoinMiner.gen
Microsoft Trojan:Win32/Sabsik.FL.B!ml
Cynet Malicious (score: 100)
AhnLab-V3 Clean
Acronis Clean
McAfee Clean
TACHYON Clean
VBA32 Clean
Malwarebytes Malware.AI.2905941993
Panda Clean
APEX Malicious
Tencent Clean
Yandex Clean
SentinelOne Static AI - Malicious SFX
MaxSecure Clean
Fortinet Riskware/CoinMiner
AVG Win64:CoinminerX-gen [Trj]
Avast Win64:CoinminerX-gen [Trj]
CrowdStrike Clean
No IRMA results available.