Static | ZeroBOX

PE Compile Time

2022-12-08 01:22:45

PDB Path

C:\Users\Администратор\Downloads\NewPublish\j0mf7f\YYfde.pdb

PE Imphash

43052fbcc86537f02aea12e98d776319

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00001000 0x000702bc 0x00070400 6.64189513909
.rdata 0x00072000 0x00014996 0x00014a00 5.15116706377
.data 0x00087000 0x0001a5fc 0x00019000 7.03927503524
.reloc 0x000a2000 0x00004604 0x00004800 6.59848683411

Imports

Library SHELL32.dll:
0x472168 CommandLineToArgvW
Library ADVAPI32.dll:
0x472000 GetLengthSid
Library KERNEL32.dll:
0x472008 HeapSize
0x47200c CreateFileW
0x472010 FreeLibrary
0x472014 GetCommandLineW
0x472018 GetCurrentProcess
0x47201c LocalFree
0x472020 MultiByteToWideChar
0x472024 FormatMessageA
0x472028 GetStringTypeW
0x47202c WideCharToMultiByte
0x472040 EncodePointer
0x472044 DecodePointer
0x472048 LCMapStringEx
0x47204c GetLocaleInfoEx
0x472050 CompareStringEx
0x472054 GetCPInfo
0x47205c GetCurrentProcessId
0x472060 GetCurrentThreadId
0x472068 InitializeSListHead
0x47206c IsDebuggerPresent
0x472078 GetStartupInfoW
0x472080 GetModuleHandleW
0x472084 TerminateProcess
0x472088 ReadConsoleW
0x47208c RaiseException
0x472090 RtlUnwind
0x47209c GetLastError
0x4720a0 SetLastError
0x4720a8 TlsAlloc
0x4720ac TlsGetValue
0x4720b0 TlsSetValue
0x4720b4 TlsFree
0x4720b8 WriteConsoleW
0x4720bc GetProcAddress
0x4720c0 LoadLibraryExW
0x4720c4 GetStdHandle
0x4720c8 WriteFile
0x4720cc GetModuleFileNameW
0x4720d0 ExitProcess
0x4720d4 GetModuleHandleExW
0x4720d8 GetCommandLineA
0x4720dc HeapAlloc
0x4720e0 HeapFree
0x4720e4 GetDateFormatW
0x4720e8 GetTimeFormatW
0x4720ec CompareStringW
0x4720f0 LCMapStringW
0x4720f4 GetLocaleInfoW
0x4720f8 IsValidLocale
0x4720fc GetUserDefaultLCID
0x472100 EnumSystemLocalesW
0x472104 GetFileType
0x472108 GetCurrentThread
0x47210c GetFileSizeEx
0x472110 SetFilePointerEx
0x472114 CloseHandle
0x472118 FlushFileBuffers
0x47211c GetConsoleOutputCP
0x472120 GetConsoleMode
0x472124 ReadFile
0x472128 HeapReAlloc
0x472134 OutputDebugStringW
0x472138 FindClose
0x47213c FindFirstFileExW
0x472140 FindNextFileW
0x472144 IsValidCodePage
0x472148 GetACP
0x47214c GetOEMCP
0x47215c SetStdHandle
0x472160 GetProcessHeap

!This program cannot be run in DOS mode.
`.rdata
@.data
.reloc
~,9~$t
SSSSSS
tC97u?j4
GL9_8u
tG9uCj
tC97u?j
tG9uCj
tG9uCj
tZ9uVj
PPPPPWS
SWhl>G
tC97u?j4
t{9uwj
t{9uwj
tO9uKjD
tG9uCj
tG9uCj
tG9uCj
tG9uCj
tG9uCj
tG9uCj
tc9u_jX
td9u`jX
tc9u_jX
td9u`jX
tG9uCj
tG9uCj
tG9uCj
tG9uCj
tZ9uVj
tZ9uVj
tI97uEjD
tI97uEjD
tS9uOj
tS9uOj
YPhC?G
M$+E4@Pj
M$+E4@Pj
<:t2<,t.</u2
<:t2<,t.</u2
<:t2<,t.</u2
<:t2<,t.</u2
SWhl>G
t{9uwj
tG9uCj
tG9uCj
tG9uCj
tc9u_jX
td9u`jX
tI97uEjD
tS9uOj
M$+E4@Pj
<xt><Xu=
<xt <Xt
<xtJ<XuI
<xt)<Xt%j
QQSVWd
t/hTBG
j<h(UH
URPQQh
<0| <9
jdh VH
UQPXY]Y[
F4_^[]
F4_^[]
F4_^[]
F4_^[]
F4_^[]
F4_^[]
<ItC<Lt3<Tt#<h
A<lt'<tt
<ItC<Lt3<Tt#<h
A<lt'<tt
<ItC<Lt3<Tt#<h
A<lt'<tt
<ItC<Lt3<Tt#<h
A<lt'<tt
<ItC<Lt3<Tt#<h
A<lt'<tt
<ItC<Lt3<Tt#<h
A<lt'<tt
Tt)jhZf;
Jjl^f;
Tt)jhZf;
Jjl^f;
Tt)jhZf;
Jjl^f;
Tt)jhZf;
Jjl^f;
Tt)jhZf;
Jjl^f;
Tt)jhZf;
Jjl^f;
V2jx_f;
V2jx_f;
V2jx_f;
V2jx_f;
V2jx_f;
V2jx_f;
F2jgYf;
jg[BjG_
F2jgYf;
F2jgYf;
F2jgYf;
jg[BjG_
F2jgYf;
F2jgYf;
x!j$Xf9
x!j$Xf9
ARPRQh
j-Xf9E
PPPPPPPP
zSSSSj
SVh`qG
j"_f9y
t#Vh`rG
SWt@jU
_tqPVj@
<xt<Xt
VWhHyG
t\hPzG
u,PQRS
Wj0XPV
SPjdVQ
PPPPPWS
PP9E u:PPVWP
u kE$<
j-Xf9E
tlj*Yf
zSSSSj
f9:t!V
QQSVj8j@
tl=@qH
NX9^`t1
;V\uYW
u2Vj@h
9C`u99C\t4
u29K\t-
7;1u"3
CY<u
D8(Ht'
PPPPPPPP
tHSVWP
bad allocation
bad function call
regex_error(error_collate): The expression contained an invalid collating element name.
regex_error(error_ctype): The expression contained an invalid character class name.
regex_error(error_escape): The expression contained an invalid escaped character, or a trailing escape.
regex_error(error_backref): The expression contained an invalid back reference.
regex_error(error_brack): The expression contained mismatched [ and ].
regex_error(error_paren): The expression contained mismatched ( and ).
regex_error(error_brace): The expression contained mismatched { and }.
regex_error(error_badbrace): The expression contained an invalid range in a { expression }.
regex_error(error_range): The expression contained an invalid character range, such as [b-a] in most encodings.
regex_error(error_space): There was insufficient memory to convert the expression into a finite state machine.
regex_error(error_badrepeat): One of *?+{ was not preceded by a valid regular expression.
regex_error(error_complexity): The complexity of an attempted match against a regular expression exceeded a pre-set level.
regex_error(error_stack): There was insufficient memory to determine whether the regular expression could match the specified character sequence.
regex_error(error_parse)
regex_error(error_syntax)
regex_error
invalid string position
address family not supported
address in use
address not available
already connected
argument list too long
argument out of domain
bad address
bad file descriptor
bad message
broken pipe
connection aborted
connection already in progress
connection refused
connection reset
cross device link
destination address required
device or resource busy
directory not empty
executable format error
file exists
file too large
filename too long
function not supported
host unreachable
identifier removed
illegal byte sequence
inappropriate io control operation
interrupted
invalid argument
invalid seek
io error
is a directory
message size
network down
network reset
network unreachable
no buffer space
no child process
no link
no lock available
no message available
no message
no protocol option
no space on device
no stream resources
no such device or address
no such device
no such file or directory
no such process
not a directory
not a socket
not a stream
not connected
not enough memory
not supported
operation canceled
operation in progress
operation not permitted
operation not supported
operation would block
owner dead
permission denied
protocol error
protocol not supported
read only file system
resource deadlock would occur
resource unavailable try again
result out of range
state not recoverable
stream timeout
text file busy
timed out
too many files open in system
too many files open
too many links
too many symbolic link levels
value too large
wrong protocol type
unknown error
0123456789-+Ee
0123456789ABCDEFabcdef-+Xx
0123456789ABCDEFabcdef-+XxPp
:Sun:Sunday:Mon:Monday:Tue:Tuesday:Wed:Wednesday:Thu:Thursday:Fri:Friday:Sat:Saturday
:Jan:January:Feb:February:Mar:March:Apr:April:May:May:Jun:June:Jul:July:Aug:August:Sep:September:Oct:October:Nov:November:Dec:December
%b %d %H : %M : %S %Y
%m / %d / %y
:AM:am:PM:pm
%I : %M : %S %p
%H : %M
%H : %M : %S
%d / %m / %y
0123456789-
0123456789-
0123456789-
0123456789-+Ee
0123456789ABCDEFabcdef-+Xx
0123456789-
0123456789-+Ee
0123456789ABCDEFabcdef-+Xx
0123456789ABCDEFabcdef-+XxPp
0123456789ABCDEFabcdef-+XxPp
+v$x+v$xv$+xv+$xv$+x+$vx+$vx$v+x+$vx$+vx+v $+v $v $+v +$v $++$ v+$ v$ v++$ v$+ v+xv$+ v$v$ +v+ $v$ ++x$v+ $v$v ++ $v$ +v
raB3G@
0123456789-
0123456789-
0123456789abcdefghijklmnopqrstuvwxyz
0123456789abcdefghijklmnopqrstuvwxyz
bad exception
__based(
__cdecl
__pascal
__stdcall
__thiscall
__fastcall
__vectorcall
__clrcall
__eabi
__swift_1
__swift_2
__swift_3
__ptr64
__restrict
__unaligned
restrict(
delete
operator
`vftable'
`vbtable'
`vcall'
`typeof'
`local static guard'
`string'
`vbase destructor'
`vector deleting destructor'
`default constructor closure'
`scalar deleting destructor'
`vector constructor iterator'
`vector destructor iterator'
`vector vbase constructor iterator'
`virtual displacement map'
`eh vector constructor iterator'
`eh vector destructor iterator'
`eh vector vbase constructor iterator'
`copy constructor closure'
`udt returning'
`local vftable'
`local vftable constructor closure'
new[]
delete[]
`omni callsig'
`placement delete closure'
`placement delete[] closure'
`managed vector constructor iterator'
`managed vector destructor iterator'
`eh vector copy constructor iterator'
`eh vector vbase copy constructor iterator'
`dynamic initializer for '
`dynamic atexit destructor for '
`vector copy constructor iterator'
`vector vbase copy constructor iterator'
`managed vector copy constructor iterator'
`local static thread guard'
operator ""
operator co_await
operator<=>
Type Descriptor'
Base Class Descriptor at (
Base Class Array'
Class Hierarchy Descriptor'
Complete Object Locator'
`anonymous namespace'
template-parameter-
`template-parameter-
generic-type-
`generic-type-
`non-type-template-parameter
`template-type-parameter-
`generic-class-parameter-
`generic-method-parameter-
nullptr
lambda
`template-parameter
`vtordispex{
`vtordisp{
`adjustor{
`local static destructor helper'
`template static data member constructor helper'
`template static data member destructor helper'
static
virtual
private:
protected:
public:
[thunk]:
extern "C"
short
unsigned
volatile
volatile
std::nullptr_t
std::nullptr_t
<ellipsis>
,<ellipsis>
noexcept
double
__int8
__int16
__int32
__int64
__int128
<unknown>
char8_t
char16_t
char32_t
wchar_t
decltype(auto)
__w64
UNKNOWN
signed
volatile
`unknown ecsu'
union
struct
class
coclass
cointerface
const
cli::array<
cli::pin_ptr<
{flat}
FlsAlloc
FlsFree
FlsGetValue
FlsSetValue
InitializeCriticalSectionEx
(null)
 !"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~
[aOni*{
~ $s%r
@b;zO]
v2!L.2
IND)ind)S
CorExitProcess
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
AreFileApisANSI
CompareStringEx
EnumSystemLocalesEx
GetActiveWindow
GetDateFormatEx
GetEnabledXStateFeatures
GetLastActivePopup
GetLocaleInfoEx
GetProcessWindowStation
GetSystemTimePreciseAsFileTime
GetTimeFormatEx
GetUserDefaultLocaleName
GetUserObjectInformationW
GetXStateFeaturesMask
IsValidLocaleName
LCMapStringEx
LCIDToLocaleName
LocaleNameToLCID
LocateXStateFeature
MessageBoxA
MessageBoxW
RoInitialize
RoUninitialize
AppPolicyGetProcessTerminationMethod
AppPolicyGetThreadInitializationType
AppPolicyGetShowDeveloperDiagnostic
AppPolicyGetWindowingModel
SetThreadStackGuarantee
SystemFunction036
NAN(SNAN)
nan(snan)
NAN(IND)
nan(ind)
Sunday
Monday
Tuesday
Wednesday
Thursday
Friday
Saturday
January
February
August
September
October
November
December
MM/dd/yy
dddd, MMMM dd, yyyy
HH:mm:ss
_hypot
_nextafter
?SunMonTueWedThuFriSat
JanFebMarAprMayJunJulAugSepOctNovDec
1#QNAN
1#SNAN
]vQ<)8
|)P!?Ua0
Eb2]A=
u?^p?o4
y1~?|"
?x+s7
?5Od%
?|I7Z#
>,'1D=
?g)([|X>=
~U`?K
:h"?bC
@H#?43
Ax#?uN}*
r7Yr7=
F0$?3=1
H`$?h|
&?~YK|
sU0&?W
<8bunz8
?#%X.y
F||<##
<@En[vP
?5Wg4p
%S#[k=
"B <1=
Unknown exception
bad array new length
string too long
iostream
bad cast
bad locale name
ios_base::badbit set
ios_base::failbit set
ios_base::eofbit set
user32.dll
kernel32.dll
VirtualProtectEx
%d Super String
%d Zaswqe32t
%d: %ws
iostream stream error
C:\Users\
\Downloads\NewPublish\j0mf7f\YYfde.pdb
.text$di
.text$mn
.text$x
.text$yd
.idata$5
.00cfg
.CRT$XCA
.CRT$XCAA
.CRT$XCC
.CRT$XCL
.CRT$XCZ
.CRT$XIA
.CRT$XIAA
.CRT$XIAC
.CRT$XIC
.CRT$XIZ
.CRT$XPA
.CRT$XPX
.CRT$XPXA
.CRT$XPZ
.CRT$XTA
.CRT$XTZ
.rdata
.rdata$CastGuardVftablesA
.rdata$CastGuardVftablesC
.rdata$r
.rdata$sxdata
.rdata$voltmd
.rdata$zzzdbg
.rtc$IAA
.rtc$IZZ
.rtc$TAA
.rtc$TZZ
.xdata$x
.idata$2
.idata$3
.idata$4
.idata$6
.data$r
.data$rs
SHGetFolderPathAndSubDirW
CommandLineToArgvW
SHELL32.dll
GetLengthSid
ADVAPI32.dll
GetCommandLineW
GetCurrentProcess
LocalFree
MultiByteToWideChar
FormatMessageA
GetStringTypeW
WideCharToMultiByte
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
EncodePointer
DecodePointer
LCMapStringEx
GetLocaleInfoEx
CompareStringEx
GetCPInfo
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
TerminateProcess
KERNEL32.dll
RaiseException
RtlUnwind
InterlockedPushEntrySList
InterlockedFlushSList
GetLastError
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
GetStdHandle
WriteFile
GetModuleFileNameW
ExitProcess
GetModuleHandleExW
GetCommandLineA
HeapAlloc
HeapFree
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetFileType
GetCurrentThread
GetFileSizeEx
SetFilePointerEx
CloseHandle
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
ReadFile
HeapReAlloc
SetConsoleCtrlHandler
GetTimeZoneInformation
OutputDebugStringW
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
SetStdHandle
GetProcessHeap
ReadConsoleW
HeapSize
CreateFileW
WriteConsoleW
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
e[VU)HQ
gUZm&dre'
je]RU1
j6e5KQ
.?AVinvalid_argument@std@@
.?AVlogic_error@std@@
.?AVlength_error@std@@
.?AVout_of_range@std@@
.?AVoverflow_error@std@@
.?AVbad_function_call@std@@
.?AVregex_error@std@@
.?AVbad_exception@std@@
.?AVfailure@ios_base@std@@
.?AVruntime_error@std@@
.?AVbad_alloc@std@@
.?AVsystem_error@std@@
.?AVbad_cast@std@@
.?AV_System_error@std@@
.?AVexception@std@@
.?AVbad_array_new_length@std@@
.?AV_Locimp@locale@std@@
.?AVios_base@std@@
.?AV?$_Iosb@H@std@@
.?AV?$basic_ios@_WU?$char_traits@_W@std@@@std@@
.?AV?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@
.?AV?$basic_ostream@_WU?$char_traits@_W@std@@@std@@
.?AV?$basic_filebuf@_WU?$char_traits@_W@std@@@std@@
.?AVcodecvt_base@std@@
.?AV?$codecvt@_WDU_Mbstatet@@@std@@
.?AV?$ctype@D@std@@
.?AV?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@
.?AV?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@
.?AV?$numpunct@D@std@@
.?AV?$codecvt@DDU_Mbstatet@@@std@@
.?AV?$codecvt@GDU_Mbstatet@@@std@@
.?AV?$ctype@G@std@@
.?AUmessages_base@std@@
.?AUmoney_base@std@@
.?AUtime_base@std@@
.?AV?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@
.?AV?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@
.?AV?$numpunct@_W@std@@
.?AV?$collate@_W@std@@
.?AV?$messages@_W@std@@
.?AV?$money_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@
.?AV?$money_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@
.?AV?$moneypunct@_W$0A@@std@@
.?AV?$_Mpunct@_W@std@@
.?AV?$moneypunct@_W$00@std@@
.?AV?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@
.?AV?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@
.?AV?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@
.?AV?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@
.?AV?$numpunct@G@std@@
.?AV?$collate@G@std@@
.?AV?$messages@G@std@@
.?AV?$money_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@
.?AV?$money_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@
.?AV?$moneypunct@G$0A@@std@@
.?AV?$_Mpunct@G@std@@
.?AV?$moneypunct@G$00@std@@
.?AV?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@
.?AV?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@
.?AV?$collate@D@std@@
.?AV?$messages@D@std@@
.?AV?$money_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@
.?AV?$money_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@
.?AV?$moneypunct@D$0A@@std@@
.?AV?$_Mpunct@D@std@@
.?AV?$moneypunct@D$00@std@@
.?AV?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@
.?AV?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@
.?AVtype_info@@
.?AVDNameNode@@
.?AVcharNode@@
.?AVpcharNode@@
.?AVpDNameNode@@
.?AVDNameStatusNode@@
.?AVpairNode@@
.?AVerror_category@std@@
.?AV_Facet_base@std@@
.?AU_Crt_new_delete@std@@
.?AV_Iostream_error_category2@std@@
.?AUctype_base@std@@
.?AVfacet@locale@std@@
.?AV?$ctype@_W@std@@
0#0/090C0S0X0b0x0
2$252j2y2
:';J;d;
>1>;>@>_>
?9???|?
8#8/8C8U8|8
9%:4:@:R:V:`:q:{:
?K?T?q?x?
0 0+0P0b0W2
:@:H:X:s:
;0;T;b;n;
<7<R<q<
=8=V=f=w=
>!?&?-?4?;?B?I?P?W?^?e?l?s?z?
0 0@0`0
22/2N2
3#3*323H3d3y3
88;8d8s8
859:9@9V9\9
:J:V:m:
:P;\;x;
1R2g2u2
4&8;8@8
8)939P9e9j9
9S:]:z:
<<'<.<8<C<O<^<
>$>G>f>u>U?
3C4i4t4
4H5M5X5
<"<H<c<
<"=A=x=
<S=C>Z>
4$5F5p5%626G6O6U6c6k6
6%7K7Q7
24G4L4
455?5\5q5v5
8(8E8Z8_8
8H9R9o9
;.;C;H;
;1<;<X<m<r<
?$?A?V?[?
D0N0k0
2*2M2f2
384D4|4
7#7G7n7
8#8.8N8d8
9::G:S:a:m:|:
; ;';.;5;?;J;U;`;k;v;
2#2B2Q2t2
2 3C3f3
4'464U4d4
5=5L5k5z5
8*:l:v:P;1=s=}=W>
4-5;5^5
566D6g6
1%2*252=4
;7<><I<4>
+020=0(2
959Y9x9
;';F;};
0"0Y0g0
7 8>8V8
;S<-=[>?
2V3q3{3
4 5z5o6
727<7G7
=!>t><?
:=:N:{:
6D748K8
:$;:;6<L<e=
7-7Q7v7
<L=a=f=
=O>Y>v>
? ?%?y?
050J0O0
081B1_1t1y1
303X3q3|3
4"5E5d5s5
7;8I8l8
:E:S:x:
62T2l2
1#2<2D2&3
5-7L7s7
252:2G2
6)6/656;6A6G6M6b6w6~6
7=7O7j7{7
9+939C9H9c9p9u9
;+;4;A;W;
;<(<.<A<
=-=7=j=
=0>9>>>Q>e>j>}>
?)?7?=?C?I?O?U?\?c?j?q?x?
0/0=0C0I0O0U0[0b0i0p0w0~0
1$1*11181?1F1M1T1[1c1k1s1~1
222J2T2]2
3S3]3f3o3
4]4c4i4o4u4{4
6'6E6S6
888?8D8H8L8P8
=&>k>p>t>x>|>
6g7"859H9
&2*2.22262:2>2B2F2J2N2R2V2Z2^2b2f2j2n2r2v2z2~2
8"8&8*8.82868:8>8B8F8J8N8R8V8Z8^8b8f8j8n8r8v8z8~8
=@=]=r=
>>;>F>T>Z>k>|>
=K>P>{>
J0Q0z0
2!363b3w3
8/999F9
>$><>B>b?n?
0&0^0~0
4(414<4
70849j9
:+;9;G;U;c;q;
<$</<=<s<
>>>c>h>{>
0X0v0x1
3/3I3j3
354A4W4
6#6/6;6N6
6i7m7q7u7y7}7
7S8d8j8z8
182C2Q2_2p2
393H3Z3|3
7O7X7h7
8#9e9|9
:G:O:g:
1$1G1b1
434:4F4
5%636<6
8-9=9D9N9`9k9
:,:G:K:O:k:o:s:w:{:
<!<7<}<
=+===w=
>>.>M>~>
0B1Q1p1
5)666`6
8*8c8n8y8
89/9B9j9
: :N:b:w:
=2>9>+?:?L?v?
0;0f0j0n0r0v0z0~0
5!5%5)5-5Y5d5~5
7D8U8f8~8
8$909]9
:.:V:a:
;/;C;V;n;
;H<Q<j<z<
>g>r>|>
0q1v1{1
343N3c3
4$4-42474R4\4h4m4r4
515D5[5x5
8,8O8d8z8
X9`9g9
<P=D>A?
4'4J4^4
5%595[5o5
2f3j3n3r3v3z3~3
9"9&9*9.9
9::>:B:F:J:N:R:V:
:n;r;v;z;~;
>0>7>\>`>d>h>l><?
080>0D0J0P0V0\0b0h0n0t0z0
2W2h2s2
=;?D?p?
1-2S4^4%7
=g>z>'?:?
9a:i:r;{;
<5===s=|=
0"0&0*0.0
5"5Y5`5
r7*878G8T8>9
9$:Z;x<
335e5k6
1@1N1X1u1{1
2:2H2T2j2}2
4:5C5|5
;$;V;];w;
0@1F1L1R1X1^1
2 2.242B2
2C3Y3l3
424<4O4V4b4z4
5I6Q6[6d6u6
7"8>8`8
809D9`9
9"9*939`9i9o9z9
:9:D:z:
<3<F<R<e<q<
>$?e?{?
00+0Q0
::=:E:o:v:|:
;);d;q;y;
< <%<*<:<?<D<T<Y<^<n<s<x<
=$=)=.=>=C=H=X=]=b=r=w=|=
>(>->2>B>G>L>\>a>f>v>{>
?,?1?6?F?K?P?`?e?j?
!0M0V0
131J1T1`1v1
2'2,212N2g2l2q2
3@3w3|3
4)44494>4\4k4
505@5E5J5e5t5
6(6@6E6J6k6{6
6+7O7s7
8#8(8-8H8[8`8e8}8
:!:&:;:@:E:]:
;4;A;F;T;
9_9;;[;
>7>>>]>
??G?^?x?
0.0G0e0
181M1_1l1
=V>[>b>
?(?6?E?
m123:3x3
031r1}1
1-2j2t2
:4:?:M:
;(;:;D;f;
>5>W>`>
;H;m;w;
727H7^7f7
0$0#2]243:3
4-4c4k4
5 5+535Q5]5s5|5
949X9a9l9
6-7L7`7h7
8I8Q8p8
8>9E9L9S9
9?:D:I:N:i:*;3;
=c=m=s=}=
2 2*24282>2B2H2N2T2Z2`2
3F4N4Z4g4n4w4
5!5*5:5
6%7*707:7D7Z7a7n7
9&9X;c;j;p;
<b<m<z<
8i<O=->T>
6Z7;8Z8}8
9(959?9O9
<0=9===C=G=M=Q=[=n=w=
4 5-5^5l5x5
5j6b7q7
=!='=_=
?8?L?|?
1$1j1y1
2A3N3}3
4M5X5d5
5<6N6`6r6
7S78:";4;F;X;j;
;]=d=l=t=|=
6.7g7~7
7 8A8'9
:0e061~1
1I2R2u2
6Q6@7v7
:d;k;r;|;
8h9/:i:
= =*=4=$>8>c>[?
6:6f6s6
7?7J7X7
8!999l9
;"<9<b<}<
1#1l2v2^3
3O3^3j3y3
3:4C4L4U4
5$6H6S6`6r6
6W7l7u7~7
8/959I9O9T9[9k9y9
2:2B2_2o2{2
8A9R9c9
<#<)</<5<;<A<G<M<S<Y<_<e<k<q<w<}<
11T1~1
2:2W2t2
1"1?1\1y1
2'2Q2{2
:.;m;v<
1$1A1u1
4)5S5}5
5%6O6y6
2@2c2m2w2
2 282<2@2D2H2L2P2T2X2\2`2d2h2l2p2t2x2|2
8 8$8(8,8084888<8@8D8H8L8P8T8X8\8`8d8h8l8p8t8x8|8
9 9$9(9,9094989<9@9D9H9L9P9T9X9\9`9d9h9l9p9t9x9|9
9$<,<4<<<D<L<T<\<d<l<t<|<
=$=,=4=<=D=L=T=\=d=l=t=|=
>$>,>4><>D>L>T>\>d>l>t>|>
5 5$5(5,5054585<5@5D5H5L5P5T5X5\5`5d5h5l5p5t5x5|5
: :$:(:,:0:4:8:<:@:D:H:L:P:T:X:\:`:d:h:l:p:t:x:|:
; ;$;(;,;0;4;8;<;@;D;H;L;P;T;X;\;`;d;h;l;p;t;x;|;
< <$<(<,<0<4<8<<<@<D<H<L<P<T<X<\<`<d<h<l<p<t<x<|<
= =$=(=,=0=4=8=<=@=D=H=L=P=T=X=\=`=d=h=l=p=t=x=|=
> >$>(>,>0>
@0D0H0L0P0T0X0\0`0d0h0l0p0t0x0|0
1 1$1(1,1014181<1@1D1H1L1P1T1X1\1`1d1h1l1p1t1x1|1
1D2H2L2P2T2X2\2`2x2
3 3(30383@3H3P3X3`3h3p3x3
4 4(40484@4H4P4X4`4h4p4x4
5 5(50585@5H5P5X5`5h5p5x5
\0`0d0h0l0p0t0x0|0
(242D2
3 3$3(3,30343
4 4$4(4,404<4D4L4P4T4X4\4`4d4h4l4p4t4x4|4
4H<L<P<T<X<\<`<d<h<l<p<t<x<|<
= =$=(=,=0=4=8=<=@=D=H=L=P=T=X=\=`=d=h=l=p=t=x=
> >$>(>,>0>
2$2,242<2D2L2T2\2d2l2t2
6$606<6H6T6`6l6x6
7 7,787D7P7\7h7t7
8(848@8L8X8d8p8|8
9(949@9L9X9d9p9|9
4$4,444<4D4L4T4\4d4l4t4|4
5$5,545<5D5L5T5\5d5l5t5|5
6$6,646<6D6L6T6\6d6l6t6|6
7$7,747<7D7L7T7\7d7l7t7|7
8$8,848<8D8L8T8\8d8l8t8|8
9$9,949<9D9L9T9\9d9l9t9|9
:$:,:4:<:D:L:T:\:d:l:t:|:
5 5(50585@5H5P5X5`5h5p5x5
6 6(60686@6H6P6X6`6h6p6x6
7 7(70787@7H7P7X7`7h7p7x7
8 8(80888@8H8P8X8`8h8p8x8
9 9(90989@9H9P9X9`9h9p9x9
: :(:0:8:@:H:P:X:`:h:p:x:
; ;(;0;8;@;H;P;X;`;h;p;x;
=$=(=8=<=@=D=L=d=t=x=
>(>,>0>4><>T>d>h>x>|>
? ?$?,?D?H?`?p?t?|?
0,000H0L0d0h0
1 10141D1H1L1P1T1\1t1
2$24282H2L2P2T2X2`2x2
3 30343D3H3L3P3T3X3`3x3
4(484<4L4P4T4X4\4d4|4
5$54585H5L5P5T5X5`5x5
6 60646D6H6L6P6T6\6t6
7 70747D7H7L7P7T7\7t7
8$8(888<8@8D8H8L8P8X8p8
9,909@9D9T9X9\9`9d9l9
:,:<:@:P:T:X:\:`:h:
;,;<;@;P;T;X;\;`;h;
<0<4<D<H<L<P<T<X<\<d<|<
=(=8=<=L=P=`=d=h=l=p=x=
>$><>L>P>`>d>h>l>p>x>
? ?$?(?,?@?D?T?X?\?`?d?h?l?t?
0 080H0L0\0`0p0t0|0
1(181<1L1P1T1\1t1
2 2024282@2X2h2l2|2
3 30343D3H3L3P3T3X3`3x3|3
4 484<4T4d4h4l4t4
5$54585P5`5p5t5
6$64686H6L6P6d6h6l6
0 0d0x0
181H1T1\1
2$2,20242<2P2X2l2t2|2
3 3(30383<3D3L3T3X3`3t3|3
4$4h4t4
5`5h5t5
6$6D6L6X6x6
8(8H8T8x8
9 9,9L9X9x9
:(:0:8:@:H:T:t:|:
;8;@;L;l;t;
<(<0<<<\<h<
=,=8=X=`=l=
><>H>h>t>
$0,0T0\0|0
081@1h1p1
2,282X2`2l2
383D3d3p3
4(4L4l4t4|4
5 5@5H5P5\5|5
6(60686@6L6l6t6
7<7D7P7p7x7
8 8@8H8T8t8
9$9,949<9D9L9T9\9d9l9t9|9
:0:8:D:h:
;(;4;T;\;d;l;x;
<$<D<P<p<x<
=0=<=\=h=
>$>0>P>\>
?(?4?T?`?
00080@0H0P0\0|0
1 1@1H1T1t1|1
20282D2d2p2
343<3D3P3p3x3
484D4d4p4
5 5(50585@5H5P5X5`5h5t5
6,6L6T6\6d6l6t6|6
7<7P7p7
808<8\8h8
9$9D9L9X9x9
:8:D:d:p:
;(;H;P;\;|;
< <(<0<<<\<d<l<x<
<0=8=`=h=
><>H>h>p>|>
?$?D?L?T?\?d?l?t?|?
0$0,080X0`0l0
1$101P1\1|1
282@2L2l2x2
3,383X3d3
4<4D4P4p4x4
5 5$5@5H5L5\5
686@6L6
7 7@7`7
8 8@8`8
9 9@9L9h9
:(:H:h:
;(;H;h;
<0<P<p<
=0=P=p=
>0>P>p>x>
?8?X?x?
0(00080@0T0\0d0l0
0`00141@1D1H1L1P1T1X1\1`1d1p1t1x1|1
1 202@2P2`2x2
2@4D4H4L4
0080\0|0
1$1D1h1
4$5@5`5
8,9L9l9
>4>T>x>
:Sun:Sunday:Mon:Monday:Tue:Tuesday:Wed:Wednesday:Thu:Thursday:Fri:Friday:Sat:Saturday
:Jan:January:Feb:February:Mar:March:Apr:April:May:May:Jun:June:Jul:July:Aug:August:Sep:September:Oct:October:Nov:November:Dec:December
:AM:am:PM:pm
Gapi-ms-win-core-fibers-l1-1-1
api-ms-win-core-synch-l1-2-0
kernel32
api-ms-
(null)
((((( H
((((( H
(
minkernel\crts\ucrt\inc\corecrt_internal_strtox.h
__crt_strtox::floating_point_value::as_double
_is_double
__crt_strtox::floating_point_value::as_float
!_is_double
IND)ind)
Runtime Error!
Program:
<program name unknown>
Microsoft Visual C++ Runtime Library
Gmscoree.dll
FLC_ALL
LC_COLLATE
LC_CTYPE
LC_MONETARY
LC_NUMERIC
LC_TIME
Gapi-ms-win-core-datetime-l1-1-1
api-ms-win-core-file-l1-2-2
api-ms-win-core-localization-l1-2-1
api-ms-win-core-localization-obsolete-l1-2-0
api-ms-win-core-processthreads-l1-1-2
api-ms-win-core-string-l1-1-0
api-ms-win-core-sysinfo-l1-2-1
api-ms-win-core-winrt-l1-1-0
api-ms-win-core-xstate-l2-1-0
api-ms-win-rtcore-ntuser-window-l1-1-0
api-ms-win-security-systemfunctions-l1-1-0
ext-ms-win-ntuser-dialogbox-l1-1-0
ext-ms-win-ntuser-windowstation-l1-1-0
advapi32
api-ms-win-appmodel-runtime-l1-1-2
user32
ext-ms-
Sunday
Monday
Tuesday
Wednesday
Thursday
Friday
Saturday
January
February
August
September
October
November
December
MM/dd/yy
dddd, MMMM dd, yyyy
HH:mm:ss
Gja-JP
american
american english
american-english
australian
belgian
canadian
chinese
chinese-hongkong
chinese-simplified
chinese-singapore
chinese-traditional
dutch-belgian
english-american
english-aus
english-belize
english-can
english-caribbean
english-ire
english-jamaica
english-nz
english-south africa
english-trinidad y tobago
english-uk
english-us
english-usa
french-belgian
french-canadian
french-luxembourg
french-swiss
german-austrian
german-lichtenstein
german-luxembourg
german-swiss
irish-english
italian-swiss
norwegian
norwegian-bokmal
norwegian-nynorsk
portuguese-brazilian
spanish-argentina
spanish-bolivia
spanish-chile
spanish-colombia
spanish-costa rica
spanish-dominican republic
spanish-ecuador
spanish-el salvador
spanish-guatemala
spanish-honduras
spanish-mexican
spanish-modern
spanish-nicaragua
spanish-panama
spanish-paraguay
spanish-peru
spanish-puerto rico
spanish-uruguay
spanish-venezuela
swedish-finland
america
britain
england
great britain
holland
hong-kong
new-zealand
pr china
pr-china
puerto-rico
slovak
south africa
south korea
south-africa
south-korea
trinidad & tobago
united-kingdom
united-states
zh-CHS
az-AZ-Latn
uz-UZ-Latn
kok-IN
syr-SY
div-MV
quz-BO
sr-SP-Latn
az-AZ-Cyrl
uz-UZ-Cyrl
quz-EC
sr-SP-Cyrl
quz-PE
smj-NO
bs-BA-Latn
smj-SE
sr-BA-Latn
sma-NO
sr-BA-Cyrl
sma-SE
sms-FI
smn-FI
zh-CHT
az-az-cyrl
az-az-latn
bs-ba-latn
div-mv
kok-in
quz-bo
quz-ec
quz-pe
sma-no
sma-se
smj-no
smj-se
smn-fi
sms-fi
sr-ba-cyrl
sr-ba-latn
sr-sp-cyrl
sr-sp-latn
syr-sy
uz-uz-cyrl
uz-uz-latn
zh-chs
zh-cht
CONOUT$
UIzahuAqww2
C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe
Help me Faith!
Help me Faith
CihAzbaqtyq
Help me Faith!!!
H0HLHhH
Antivirus Signature
Bkav Clean
Lionic Clean
Elastic malicious (high confidence)
MicroWorld-eScan Clean
ClamAV Clean
FireEye Generic.mg.89b2ce64736e525d
CAT-QuickHeal Clean
McAfee Clean
Cylance Clean
Zillya Clean
Sangfor Clean
K7AntiVirus Clean
BitDefender Clean
K7GW Clean
Cybereason Clean
Baidu Clean
VirIT Clean
Cyren W32/Redline.F.gen!Eldorado
Symantec ML.Attribute.HighConfidence
tehtris Clean
ESET-NOD32 a variant of Win32/Kryptik.HQMY
APEX Malicious
Paloalto Clean
Cynet Malicious (score: 100)
Kaspersky VHO:Backdoor.Win32.Agent.gen
Alibaba Clean
NANO-Antivirus Clean
ViRobot Clean
Rising Trojan.Generic@AI.94 (RDML:Wdjt+CucZd44QNWdgZWP4Q)
Ad-Aware Clean
Sophos Clean
Comodo Clean
F-Secure Clean
DrWeb Trojan.PWS.Stealer.32832
VIPRE Clean
TrendMicro Clean
McAfee-GW-Edition BehavesLike.Win32.Generic.jh
Trapmine malicious.high.ml.score
CMC Clean
Emsisoft Clean
Ikarus Trojan.Win32.Krypt
GData Clean
Jiangmin Clean
Webroot Clean
Avira Clean
MAX Clean
Antiy-AVL Clean
Kingsoft Clean
Gridinsoft Clean
Arcabit Clean
SUPERAntiSpyware Clean
ZoneAlarm Clean
Microsoft Trojan:Win32/Sabsik.FL.B!ml
Google Detected
AhnLab-V3 Clean
Acronis suspicious
BitDefenderTheta Gen:NN.ZexaF.36106.OqW@aiheZ8d
ALYac Clean
TACHYON Clean
VBA32 BScope.TrojanPSW.RedLine
Malwarebytes Clean
Panda Clean
Zoner Clean
TrendMicro-HouseCall Clean
Tencent Clean
Yandex Clean
SentinelOne Clean
MaxSecure Trojan.Malware.300983.susgen
Fortinet Clean
AVG Clean
Avast Clean
CrowdStrike win/malicious_confidence_90% (D)
No IRMA results available.