Static | ZeroBOX

PE Compile Time

2022-12-08 16:51:49

PDB Path

C:\faf\Jocay\vice\quosal\wopi warajoje vanaq.pdb

PE Imphash

bb2af1988009d4b4491115f62e2f94ab

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00001000 0x00109331 0x00109400 7.99154555884
.rdata 0x0010b000 0x00001d76 0x00001e00 5.57095546208
.data 0x0010d000 0x0021559c 0x00000e00 2.74895130245
.rsrc 0x00323000 0x00025e7c 0x00026000 7.48520422661
.reloc 0x00349000 0x00003aac 0x00003c00 3.22516705388

Resources

Name Offset Size Language Sub-language File type
RT_ICON 0x003477d4 0x00000128 LANG_FRENCH SUBLANG_FRENCH_LUXEMBOURG GLS_BINARY_LSB_FIRST
RT_ICON 0x003477d4 0x00000128 LANG_FRENCH SUBLANG_FRENCH_LUXEMBOURG GLS_BINARY_LSB_FIRST
RT_ICON 0x003477d4 0x00000128 LANG_FRENCH SUBLANG_FRENCH_LUXEMBOURG GLS_BINARY_LSB_FIRST
RT_ICON 0x003477d4 0x00000128 LANG_FRENCH SUBLANG_FRENCH_LUXEMBOURG GLS_BINARY_LSB_FIRST
RT_ICON 0x003477d4 0x00000128 LANG_FRENCH SUBLANG_FRENCH_LUXEMBOURG GLS_BINARY_LSB_FIRST
RT_ICON 0x003477d4 0x00000128 LANG_FRENCH SUBLANG_FRENCH_LUXEMBOURG GLS_BINARY_LSB_FIRST
RT_ICON 0x003477d4 0x00000128 LANG_FRENCH SUBLANG_FRENCH_LUXEMBOURG GLS_BINARY_LSB_FIRST
RT_ICON 0x003477d4 0x00000128 LANG_FRENCH SUBLANG_FRENCH_LUXEMBOURG GLS_BINARY_LSB_FIRST
RT_ICON 0x003477d4 0x00000128 LANG_FRENCH SUBLANG_FRENCH_LUXEMBOURG GLS_BINARY_LSB_FIRST
RT_ICON 0x003477d4 0x00000128 LANG_FRENCH SUBLANG_FRENCH_LUXEMBOURG GLS_BINARY_LSB_FIRST
RT_ICON 0x003477d4 0x00000128 LANG_FRENCH SUBLANG_FRENCH_LUXEMBOURG GLS_BINARY_LSB_FIRST
RT_ICON 0x003477d4 0x00000128 LANG_FRENCH SUBLANG_FRENCH_LUXEMBOURG GLS_BINARY_LSB_FIRST
RT_ICON 0x003477d4 0x00000128 LANG_FRENCH SUBLANG_FRENCH_LUXEMBOURG GLS_BINARY_LSB_FIRST
RT_ICON 0x003477d4 0x00000128 LANG_FRENCH SUBLANG_FRENCH_LUXEMBOURG GLS_BINARY_LSB_FIRST
RT_DIALOG 0x00347c94 0x000000e4 LANG_FRENCH SUBLANG_FRENCH_LUXEMBOURG data
RT_DIALOG 0x00347c94 0x000000e4 LANG_FRENCH SUBLANG_FRENCH_LUXEMBOURG data
RT_DIALOG 0x00347c94 0x000000e4 LANG_FRENCH SUBLANG_FRENCH_LUXEMBOURG data
RT_DIALOG 0x00347c94 0x000000e4 LANG_FRENCH SUBLANG_FRENCH_LUXEMBOURG data
RT_STRING 0x00348bf8 0x0000005c LANG_FRENCH SUBLANG_FRENCH_LUXEMBOURG data
RT_STRING 0x00348bf8 0x0000005c LANG_FRENCH SUBLANG_FRENCH_LUXEMBOURG data
RT_STRING 0x00348bf8 0x0000005c LANG_FRENCH SUBLANG_FRENCH_LUXEMBOURG data
RT_STRING 0x00348bf8 0x0000005c LANG_FRENCH SUBLANG_FRENCH_LUXEMBOURG data
RT_GROUP_ICON 0x00348c54 0x000000ca LANG_FRENCH SUBLANG_FRENCH_LUXEMBOURG data
RT_MANIFEST 0x00348d20 0x0000015a LANG_ENGLISH SUBLANG_ENGLISH_US ASCII text, with CRLF line terminators

Imports

Library KERNEL32.dll:
0x50b004 lstrlenA
0x50b008 TlsGetValue
0x50b00c HeapAlloc
0x50b014 OutputDebugStringW
0x50b018 IsBadReadPtr
0x50b01c GetConsoleCP
0x50b020 Sleep
0x50b024 HeapCreate
0x50b028 GetACP
0x50b02c GetLastError
0x50b034 SetLastError
0x50b038 GetProcAddress
0x50b03c FoldStringW
0x50b040 GetCurrentProcessId
0x50b044 GetThreadUILanguage
0x50b048 LCMapStringW
0x50b04c LCMapStringA
0x50b050 GetStringTypeW
0x50b054 MultiByteToWideChar
0x50b058 GetStringTypeA
0x50b05c GetStartupInfoW
0x50b064 GetModuleHandleW
0x50b068 ExitProcess
0x50b06c WriteFile
0x50b070 GetStdHandle
0x50b074 GetModuleFileNameA
0x50b078 GetModuleFileNameW
0x50b084 GetCommandLineW
0x50b088 SetHandleCount
0x50b08c GetFileType
0x50b090 GetStartupInfoA
0x50b098 TlsAlloc
0x50b09c TlsSetValue
0x50b0a0 TlsFree
0x50b0a4 GetCurrentThreadId
0x50b0ac VirtualFree
0x50b0b0 HeapFree
0x50b0b8 GetTickCount
0x50b0c0 TerminateProcess
0x50b0c4 GetCurrentProcess
0x50b0cc IsDebuggerPresent
0x50b0d8 VirtualAlloc
0x50b0dc HeapReAlloc
0x50b0e0 LoadLibraryA
0x50b0e8 GetCPInfo
0x50b0ec GetOEMCP
0x50b0f0 IsValidCodePage
0x50b0f4 RtlUnwind
0x50b0f8 HeapSize
0x50b0fc GetLocaleInfoA
0x50b100 WideCharToMultiByte
Library USER32.dll:
0x50b108 GetMessagePos
0x50b10c MessageBoxW
0x50b110 IsIconic
0x50b114 GetMessageExtraInfo
0x50b118 IsZoomed
0x50b120 GetForegroundWindow
Library ole32.dll:
0x50b128 CoInitialize
0x50b12c CoUninitialize

!This program cannot be run in DOS mode.
`.rdata
@.data
@.reloc
>=Yt1j
QQSVWh
j@j ^V
t hd$r
0SSSSS
0SSSSS
0SSSSS
0WWWWW
AAFFf;
0A@@Ju
URPQQhd
PPPPPPPP
PPPPPPPP
t"SS9]
;t$,v-
UQPXY]Y[
t+WWVPV
|f,HZ"?
(s`-d&b
P!ua3
,,e!iO
|'$DMM
Ki<_XwC
[sdV/n
4~G^hK0J
qc')^_
$l']jd
TuO ?NY
uV;l?~
w>2yFl
}L;7Yh
4'nhGtb3.
22Xc,yF5
?Q]u(4
/Wfd5I
`Oqa6K
_qt_jz
{%K7#&P*
(Q`vnS
n!SF)VRf
%e`&2l
%<8u%/
x/RpW[p
dXQ43m
HMF-.@p
aQ!WU^
z8?__J
._q%u|
z:OTv
6y:r'#P
U`Z3Hr#c
JA[z;MJZ
+;bggr
w_[Bny
]r!tmI1
_L#;H8
D%/Xp%I
tUmSC
* q[`.
@<.8\6.
pzy+Xt
45G(Cl
9$F*-k
n.pr!1O
.%QFm-b{z
o*qGC0'#
,#_vr_
6>/Xd$
k{_Ss2v
`w(D#P
d4A6Np
%Pso/
*VnV4(
C+7wo'9
ld1'TL50 "
`_`4?}
M:kpxYc<
&NEP="
Gv&/W+i)A
>"<N*`
tN\y6>
lxB\w4g
j^cIe2
*^'bET
12"Ywk
b8UO 7
zP*r+N
8Cx~lV
q/qa_
m<&ME]r
`E[#Z`>
82k;[(,
1+@UM=
.[<J)3
If2Za_OzR
*R ;IJ##
QhFkn
Dj9)[
6rpK~]
{y^!DVv0}n
%ZZ8"\
cMo_{`[?~
<o~9@X
zv[>:`
i3`]hZ8
[XLh9=
20.S|V
)'xWmbL4
c:FZ\e>
|(Ly*i
5h0pyi
fyKf".S
{CdrjB
E%R3#%>
{h~S-7
1BEkj2
-cx4;$
;.K~)_
T:.e}Y
gtsyI|
{\>,d0
&c=:3f
'yh#O!
I&NA$w
!#5_\a
U5\a1w
FS^Cz-_
a~_abM
@PGf].
~zl]jm
oeG;h
u2+.9{
KYX9BG
vhgv|c
H~<tg:
?``D]IL8
1q $F:&&
Gr~x`K
g6G5|K6
A1rJ{M
`#"JIX
S<Nq88
LaDTA@p
Hqg@:cQ
0b]MHu
(hmy1c
0$ESz0
xaqLo{]
6RFlZtj
m=vDu+7
ndM9UV
'A+p;H
s; ;T9
XKU3#z$
v6"h;.
1om!`,
$]P~;N
QrM5F,Y
K __/b
g,j^[6
E,nKJb
LdF!Om
dHNXm[
!U5+H-%
,y~FD67
.="hQy
yJu*Ge\
Tv-eQ(Gv0
swr==G^
7D@7vB1
e"1Cxb
/Vm3#P
,9J~(XI+g
iWQ6nV
lUg]Kl
@U,>o+#
iv"o__
v5k|v,
:O[\('
eS5}Nw
6G:A\a
1ZB*nI
qWQL7L
USJ;?o
I6^vvW
/Dc=1pxC
uCGhr'
lkOR$-fs
rTE84
F/*z%+
VTx8^9
(lVX5\
8=Ke8.
4\'!4S
!-cVQI
GnB+n
7Nt7\q
4p1Xl{lQq
?Zl(i
N`jKiNsG
+l%k
{d_<Biqe
!X=zId
md?vtK
"\!`&Z
_TmDP7
0Jz-\C4
SNZoZ$
C5N}pJ
K,KwB]h
\7(z/?
Lxo(Pe
S+y1Ch33
{Reu'e
)!qM+f
%#'SC[
M~b;!S1
0Jt\FE
5h.G<_r
z05\mu
|Yj=7A
eJStY|
?m[>qT
4;R[={Q%6
@]MQ|2
+~<qz|v
2~:|bX
Vdy*p&{
!r)+RM
2{\4_h::R
+fvFB7_
T\wu2-
w^1V};
IHwoWX
fW=dU:
ge'}`g
%;tKu1s
):4n?ATpL`
VpEwG2
+}Ztj}z
c3*hX:
4NyAAP
37GeYx
JLP@4D
CMar'!t
/xCM!'
.)(>@R
t g<gQq
l"tqii
Zb;x5_
)ol/]-
-<)Wmp'
^JlL|,
bc%jKH
N/3ttZ
0G/{m]
`HBcCXR
[aI3F.
>N!@Sw
i 5DC=
0Rfxa
#`K?U5r
wB6A6<
q+JT)Lt,
!wZQOu
N2/fn^n
zo/O]s
R)!F+s
4`laK
GZ9c%T
I)v8ViZ
yus_v"Tm
T tqdi
/F tr0
CiSIC=Rr
2)Qk)&s
M~&l^K
m<Jw+G
7u}S@w
;+f*"@
#GdQ?Vo[#
=0A~`Dq
D5$le_
7ocF/z
0=6PXz
6B0y^(
RkO'L1$
zzBhc"
Vr);}y
_sWloT
8`=Bn_
E0Oel}X
!e2nC!v
KD'"1af+
o^:Z&M
tGVRg0I
>A:A)~
+ez^E
!`j=~J
u-);(`{o
qr|D>2Y
2-_hi%
.b>B":
;oA}'bmZ
-Ji B
i?MF27
7>&,TN
BESb!t~
&9XR7Bh
.]_Z^k3
L)jS*^
5-,yV~
yl"Ud|~
]C2mjM
%zW=;:
(4BV^<
UpT(Mp
S)J"1"
/|g]c)
H!^|JiUNc
H>-Cwl
kO5?F+
u]AA) &`
f!O.'X
+$c4$5
?P'\DA>.s|
PYCqRa
I#^;RRn
$>,L-NJ
:=|&&8
+%E6F
X(&mwgw
4p 90_
xKfM2V
LBBriB|
oE)Qsa
5J9\O$
Msf2+XzU
~6=&{1J
a6:ygP
@;O0&Gf
>?hZkp
Jn07D-
D/drc'
B.d"B*
9+?ct5N
.=q|DF
hgQ4Oi+
Nm+q@'
bpV@U4U"
^"d"/d
{ U]3j<
s5t~W@
~4J=awCf|jH
`4iGK`a
gD*kLi
e}?E(%7
)efM6AA!
el:lOS
b%_?M}
;D<_ZO
V.GNL^
&0$r.@s
nzFWVT
0Y]_d`
~n~`_1
a*>q;;
{F(rii
wzY8-
2r\:H;I
Blm[pF
Rl>QnD"]:
Dl|G,X
ypaz[.^2h
{``>$c`p
ZCg9k"
"M-6UG
YYG_Feb
S'UQ~-j
Hv^MCN
^`5`b2
cEsGk}
T={6 5
ks\ \5
g]P,Zii
wM=^|0
02jmA
EyXIwJf
rGKwg^
7E{|lE
ikQKpN
A%2[j0f
_eV,+r
.iKlV3
`\<S&\
d'Tx{A
IhPtJP
.]u)(x
7NT)B@
m$q-!k
8+XQ:&
i>,4>,W
Yw"FA
r4Wr":
kc-E@qO
o2Ip!_
@,EuHr
Q"ik<m
T,E:Kg
}9^*Dl(
Z7U$d]
7Y(9_4
ty<A:v
%>cm?^z
jse/7q
&\R%hN
X;-dH(E-
tfR<5m
+c<"Z
4;h-rM
^"O8xRV
Ao=Lxp
U=;x6i
x|,YOJ
B^4XlU
BO+PRs
F@Lm|'x
?-0T#E
bZ_Uq>
a\BTjS
iI9e u
fT}GUg
V0[@z
'm#ky=
6|P7=L
u$l!_V
-`Qg?~0&
`$oiu~f"
DktU0O
!Q+Dc%Q
9]|cWA
n.y7cC
h|)sy)
6im?l=
;UBx];
tpD(SvG
La$;OR
gA.GnC
?b`fI3
;Hf~;0|X"
+'!:|P\UD
Mx],M)&
Ks+O!Xt3gt
c-?IR{
[+@NIIg
ic1&/!p
k[O,O3
g]u)Z|
:goZt2r
0`q$L\
C~YQ^[
jH9b%?
fE_gVs
'I[2_t8
0-pnpp
M[8L;8
N;N >I
;.P^R$
2U+[nf\o
+~!fEZ,%)(
"T}W5C*]5h
/:O)Qi
DXzaPc
@VH~bp
-Ia`e3
v'C\QbS
sZ/RBF@er
gQW5.NX
-v*9E$
By*-a6\
]R?y![
70f9Z@
!x9M[*w
LY'64`y,
Q~SCzh@
AMf'3R
)\[By0
N/j4X=[
ZrI{x_
z4P$qJ
e06|BH
te 63zx
}EX%*\
)7<jDW
Kig)z4
LGX$&w
[Se7i]
nqUqom
u+JPu)
@'^B;c
{VyBwP
da]B~-7
d$/8"Zw
k([==P
i@BI%C
WVikvP
ZK0NV}
#Q;W}8&
!%Yvea9
\y{{C1
I+)Y?U
4O?Fs3
]JWTN}E
X2u<!9lgk
B+v<#qb
6T5C"I
_sSbOSt
T~Imwa
[|_cVS
Td,PAL
L[rLwER
xir5j8`R()lNh
M;[Qrs#t6
W>,wk<PzG"
rll_>S
A>A"{d
u$'oU?
kaQ H$-
^esaUL
.Q.,)U
=Z0=)g
4?[ss=
W]KM/#m;k
\L"R#e
r:ZE\Cu
a0{E$dGO
nI[[#PH
eUplSW
F%`#zfg
;0q"\B
Mp"/G&a
d2PN,}
6xp2Ir/
|gf--g
^4'3wDb
51:#&}
>gjH{%
#!K?=d
W-tvz*
SEXRkx5p
?V%\gP
8 pF[P*
C^/,du
dZ5G#
$(K+z!
XPxw8wS5n
AIJMzo
i#\k(v
Nxm}Ka`
MErNa
(K}7}J+
U./2&8
&ec>{3Y
:u*V2>I
z>%Gr7
[<1DWp
.D6::o
o/Ri-o
!'qEE
RWoPYi
rhhM.&Xu
4$c+K'
}Li D"
Qd:&f&
<'](v\S
JY8n.K
"KU.3h
TkrjyP
eMo/NxtH
J@r#6FF
!<;Ml!
SE>;/U
[A 3)D
eN'k^R
]jy\VZR
x$>@9NI
kQ+iy]3
nPDT]:
'fBdek
wl5'Dy
n+G&CX!
5%67[
'\:04n
+E<2{8
VVLnuApF
v-bT1*1<C
`{>$ub
XNI52
=Q"x#s
AdF\&!N
D/`.ce
+bj&h&
e;wnX_
Kc2oJ7&
SZ#(G>65]
o1~!U'
yD)$v'
EV0)PgLwje
_6s?Hv
yRHn]9
kp>E!p
4O`5,3
@j KnE
ZbUcJ_
=s13%m!X3s
PDk9,=b
Pdn'7_}{J*9F
F#jp:T*wbR7eY
8K0:r@
W=i|)j
~vOU}h
%`BaY
l'^V-+
&zENK4
ag"`T\
G4xN+fm
Nw[;Qn
HIetiJb
SR=jRvT
cQxtl^
!cS`?*
.4}8vu
sA7]TR
j>oLdx
%7PP*Z
S8`'}xn
V0\OpBe'z
tq+F"a
]>H!/>
{&3m)e
6x2NAe
bi\x)/
HCtx*Mc
u&GFn|e
j01Vz0a
O[-I])
*wq{(9PK
]NnB_E
e+@U48T
X`h_?aX
632;7cE
9n<0B_
sfBgJ
#7kH~MHZX
*eFwGT
HfoSzG
SExRqW
izJcoy^
iSq4fe
?(p:GW
Y~Z]DQO
%F5p+x
F)xO#H
2V%g>R
9z4EQp
kYj)\$
#|D}}{D2V
lqS8z@
Zqp$HP^e%
Jdh\]&m
)zHM5
gX$lH+
A>8~7jC>Y=
}%/tnG1
$Xe$%j
u.0!ZRG
G$]:Fw
E1FnV9
)gjg TF
hutc67S
Q3[Z4|
.Ukl7/
0#S6YV
>"<9Kv
o-ah6m
!y91E]B
i5z(o*3e
I_]?tJ
hp%$jL
/1Z7LH
co{q9=x
Bvr9X1
a9@I`f
jW~G|NM
Q`$!2r
=7N0Qu
opMs5
/s$#:7^
R;5}{>N
w~XZVj\
_<y](!J
S4>v.7
rNWoN
P:XAk)Zg4f.m
o+qxkn
gH\Q(5
w#YdJr9
xi$cQ#&
c=;@c
Yc3!kdsA
W*C`po
Pde*/]
}t>5?9
Zs7*8;
hMfZ#L
5,;}E%
2@8<g*
zU5w/P
dexH4T
P1RzX:V
Q8xA@x<
[J~h;TR
<-Z(zq
_-_Q4:
SN@jo1
37-)M
z'iTk*
DS z~@3
8?gL:L
V9LC`M\
lPv/qQ
O63w<7
{I.v`n
el|`+d~
vUM:-[
lYiogU
\kZ_+LGT
Ut*%XD8
R1>l1
i6V]X6
7"Lm<v/
+w7>-}U
X!(0xlx
W|h:7)
A8C{z*v
6Au`Yh
gmh-$
>#C8\d4
<ButSxj
q!l8 |
d6W$YF
?$qMdM
qb&c!"hq
*KK]yYE
2FkRtPT{1
.%Tg*a
?sw+|{
f$:nPV
2x:`YaD
!eNps~c
,uGJh__
)x?_0k
*QwHSx
`fX!22
x-Oid6
/,0Fs2
z?-r5Xr
Ol5A,O
q~+4=A
*vd0"X
_[Zc,wUhMg
>$V3q&a
Kt<R,n1
|3Fhr}
BP~R0
B65%Z5jkJ
iX),BI
)]$K/r
C>"|Axyr`
"a!-],
cA+of2
PDQ\7P
SNrtLw
uVE!!M
vF:lP(
pB?YP
E.Pm9H
mN&{E]
xE*@N;CN
PU%@+\
Q[JO,J
p'/0\]x
[aNmT?3
$ gu="
&e6Kr=]Q
Iyy`K+
^_P lk&
vC|FLte
&m}+_W
(ND9+8
z"D*Q1
<3?m0jh
eKFg2#2
D(w"&(
L)j/,dG
`7{T^8
+Dx.&Odz
<*|imJ
Y$}53_
G}|o(bx
zFNF4A
]PwtWt
3CVT@c
DCC:r@
]% '{O
(US=KB
]eRQ]4
+#7x[dd
Ju\\5o
}a9_w0
/&$bx=
X[*fml
@Cpv@j
;Yt}"/
_n!qC_
FfjnC&{
e*e9(m
X4x-n>
Y\0a_;
_W;z}n<
@-OKbS
:8W/m9=
nBPlRJ
0|Espd
p| ]aZ
cIQ.!,o
}p*#/h
[#Xp>G/
6AlO35r(VXU}M
:O*']L
.h/MTj
)F^^Lm
YQnqNU
4w@@w)1
(Tm:7c
^E5#'@
IQ+~VC{
5=5O&E
5|i],}
E0``lC^
:#(-.m
ybibQm
*,.cXL
>Qs*/#
y9kniJ
UWN62(
&rwdnH
8?2bDI
~<O0fa[
k(>K 9
qO(Y2))7
2}:Yrp
B9;'<m
j<"3;_
iMz!?v
wI}vLE
ZsmSoGr
>6J!>}X
A|0_p
RG3-htp
shI&bP8
yA*sJc#:
u"G%3LD
m+!TI-
=zq`Z!
F<0AZQjvC
3Z6h!
a0E|,L2D
&]5tmUvcx=<
P.`f0B|
02_IM.
*fj }l"'
y0~Lpb
s)u 1e
HxmK+\
{u01z!
P8n !~
$_m>G,
cQJj p
m{Bk)w
f~@kW;"
$^6@gZ
(Hp@e)G
|G>xZM
lO(E?_
{f:P!*
7-2<F>
gv.cr]
>W<c,fl
%ahH~g
V!>H*p
7FPFr5
c:}J"P
U(8`;2
RHE9^
mtU5Z
qq@VpY
5<3#a.
ZClKuq
|AJz-k
_"\avG
k5PC@O
}$*R(gr
4%v2"a
vd>FUO
)2KP%\G>
S@4#rdQ
I@a>w\
7?co1m
#XsA\+
[fAe~@
}$7U`{
yr!$)
41[9e
o)W_QV
.4}bJ@
CDhR#tw
OqVL%S
dbl98<qP
4Lu~xR
XLy5*z
]|0$BT
n,SW{e
}j[mCr
)zx9F
yn#l+)
8m![H1
L@iO5*S
<~}k+
e;17kV
.CKdJ=
Y s,?P
KYNqT
Vwb75*
FG~Y[V
[\BJ-E
gsR@6OuZ0+< )H
aUl~Ib
.=AOc`TC
Il1Np+
1mbaR`
7u=0bu"
#p'1[{8?s
iZ>.mv
|7/qFR
O;4!'+
&#h^Ao
_yq`OJ7
d^Ot7k
(?Uk^!
34O&>7
*i1H?R,
o'yo`J
+cw9uA
)id'C~
f%fYf;]
A2-$n+
[$\VN
&%zN"I
/^FSDW
O<|$~>
cz y;!
]Gw5<Y
4kG,EO9"
u+1l/9
oZbNMe
ncH;~31]
iNqHj|
N@54g#HGt
n+IQ%RM
$@ev$+BS
}{$~<l
s&+'{4Tq+x
5_8W/sB%
L:jw"`
W6)')"
a?V`/1
f8IAMRrcM
-W>{m/
P,N0lz
=b#_EZ
w(=@d1
H0&0>
/#"8:q
:N;3Up
!Fr*Z1XW
7H_arO
I@8l3n
^1Qca(
d"Z8e@
ynsr`C
IE"qv>
NiF"h
*j!^S9
4ilJH~
U1pt2z
kYOSJl
I%TM 0
603[hD%
f;C*'n
a6=J=
7l3JLq
)@^DXp8.
CaP#tgxLf
cKySvRq
,x``\X
33"R5t
P;RJ$+
mh%0}2
j.e2zD
V-d(]n
GD;7LC
^bC+[#
n\AUS$<
[Dkkx_
faL>T*
Z\lu>]>B
E,fqnj
u*N?=
FY{v~G&
K\B"vq%
ClG/gy
~zq%9|CB
M^8cZJ
Oa# ha
!:3W@p
L)}UV:
MNdrhL
~C$_rX
?!1h2'
8E\&NX
4E1>Yx
ARUuyfw
gcyq[vX'V
pqXpH\
Y8uSZr
/Zr\8P
B6YE_
_MnqC@]h
"iQTFf
S4cY`s
sJK)5 J
Yp8!Z
"]eL=p(
`iIh3>]
S=mpG2
4$r4g/
/g|4Loe
2GOV8Wl
Gy%y@V
;";*+Z
F_. px
\4a~&lx"
U]N&*gef
JL2Cys
%/>m\r.P
O^$Nbt
X,*Hfu$
byiFk5my-
&Fv"p+
rX-`@#
_ UQ[4A
HMhM'T
P2[c2o
VB,6r~q
|(<:O
13"W^k
q#xU5~
#|Eq>^
3750E/aw|
oH=q^t
_3fP/}
^BDc]^
1#r>#P
k"lWl6
:mt7Yx
u+U4uK
&m9C|G
|L~HJB@s
,y+l%;
$sZlPo
)0u*Tz1
C@Hq!R
;2;BI~
FX1m82
Y?K!\G_H
09)rQu
BoIfMa
j2m&fz~:
j{S>e
)-i)E<
k1~"]A
R#ldhj
JGQdyV6
B<>)cB,
{$x(S{
RaF#>5
x`$&e4
_AID,
!u\ymZ>
ASZM@[
mV[C<^+
OBXj,)
P%,RK@e4~
D3xZW-
xJ38si
CFce(]K
5K|0hi
:u6gs^,
IW!KH-
w2mG5B
^R%yQQ
LJQoCg
(8]1b8$NTlZ
0s,rro
PYF]g6w
#<19>4
[3)87
Z6!Tt
a$|sZT
6O,Y"#
QiO|SN({Q
jXWreS
F&PZVj
:dYu)s
|3h?"$"
]pf[kx
3eLYR~I
[OL=t
zo=O 7{
&St1}
*)$,g)
V[_cuC
sN18+M
e9RDeV
*[N;oZ
{~Q=Al
/l)$L`;
OIdED-W
'2b"&'c
z-){uf
DoaRa,.;Ps
Eju!HE{k
W5;Ulo
>/a7D8
X)<u~jGz
#,-Iz&K
0c,6e6L
;<0sp{2
/Hfj\~
JGP`|X
,,OT#4
Hn\XD_x
acb3_)
`kMFIks
7Y=]5sA
/57gvbJ`
nH<}c+
'"ItRr
?C,W%<
Wt(Dq8A
ZD,!mK
)@Zk`_r
hMNtMw
OnB@0>
CVV~kj
9-aqnm
8-F)ao
3-_:^a
U^}_;fO
@Fas<|
;gYN<!]
c*!,/I
bogK8
6_fdLB
7NdJ:U
wvjP..
(k3j#A/B?
yMpJnlHG
xFIJj_
~xQ%4
JB~s6)W
C*R10
KVE1pv/n
f~|vgV
LrN]W0m~
w V)UO
$.AOG
z|$Kyy
I"nX{.
wC\-LT
ZI?Nb6i;n7
E P,Hj
'3'LB0@
zy=p[^:
FjXS=*
PH){2>
muCO%9
(lXxR~
1t]3B,
IfbscJ
j%:>-h
wBNIBK
nxw {?
f]k`E.p
e(j"*m@Y
MO,DWj
3d{go`
v3RLk
mtg+G"
E)4L.
zy[U.Z&
2(b.tT
~i-%Hg
'Fl+qn
Pp7{nq
Mp}aEl
UZ0c[^
9XJ`.t
~<eiA,n
P VZFu
pk&j>)N
|Qn;RKp
v0z6ki
hp'bSs
(/A|tHO
c/p?e2
-QVd78
mf sF)J>DO
]uHz;.
4qoiI<)
%O,`Ny
rqR!
pr/n*
2u/4`v
V:?bI5
?ze|WtL,
&a8DK~
f9bJ%@
C;</T
lA9:Io.
=,/lq:
GlV:{5*
& <lpA
(7eClxY*
NpM,]1
@]:o "
Y-P_9]{
)E_p[Y
q;t#I+2
MPN)fl/
H-uq>E{FB
32Q%i]RX[
5MZc-x3
D"X<Q}I,
$19+Dq
0f&W4g
.U;1 C
{&Q^q9>
QIR$JRazB
OrJaE[|
}J(QW
)JjA57hUG
(r],2
JU\T:T
N]"|Zg
uhV,d
rX 1k5"
2*Mt+n
_\[*q9
I-09iD
6|Y#)<!i
Wj9%p9
v:Ml7@
-$^|o(9
`DqPq
*;;33=
NhNi)
)mKmHs
]sr@/=!
%]N8(f
1DI~>4L
MJUYQ]
nd`.*`
tb@r2Z>B4
&?o -
)V>BiS'I
V.JU{
uNwYt\
6RV(ZS
dw,Kuw
m9 jAHG
wCmUL);#~
yuF8')
IyrKR]!]
;U'( JmtD
rst^G\
,s9xwN
Ox9[;"
Sn$lf
<io~W5
\PUW@x{
UQ0'0*S
CZH66V
W/+-rA*v
aqXyMAXw4
'3'N.=}t
lPP"pu
~r!G}QH
IHHe 6k: n
`mhqI^
H\XaY>[
YfZ,CT.s(s
MgNXD@
()Z+7y8
3/3cHO
&BM$M:]W
qid7F{3m
Y9CSh?Q
#V"Lm&
nM6 "K*
5p?kC'
>E8TAp
Hwb_Nu
w{1[Gv
E/djTV
WX4@f;B
jo}5{!x
Nyl81*
br5PuD
3TKj@2}
'r'(vn
b)H`{W)
mN`3jQ
)"g-EG
6nTFK62
#>a;~
4N:vuw
aw\eV/
kDc}wN
;B"{sX
sjzx;-I?
~#zVT^
O^yXkn)^
'|nPXL
CklN59
InYgAS
q:`r>Z
eL}QyO
_JAH:h
iCmT[,
4c34R?
Ngrp=RA
cYlh1*g=
h.{%=a
RZXE0]_
A'5sct.
$3q"fT
-<[@LGbA\s
1oo|>;Z
G^t5o.
Q3\9_z
KO`\8j
3tL5XE
AR;}J|
H6iFQ_!6
+(<[hn
C=k#i
@>cYo`
4Mi @h
|.;8aSv
dv70ic
&I=K,*G
|9JNP"
zll,bT
I#m:J
mQ27Sb
#kl]O1
e"l)~
.wa*+|
'v&`m_>
7J,OfM
nidJBy
f5TMI
l5TK%E
oT$*|:
3Y'&hx
"zf'y,JMv
s&(w[M*
V>ghm7
!8&<p
e-nd:e
8U&&QQ
xu!8a7
X1;[^w
S:d8&Zs,t
r((gFs
h7f_r*
Bo-AK~
)PpyKzW
4H^sb$
EBx=9
46)?lJ
YSvg7au
I#)"GbJ3
I8!+Q%
HYQB]$k
QHw06{
jFw"m\
RvHY%gS
XM#bo-
#aYg=*&
6;q0Qb
sU>cYZjJ
Rh>{ka
/7-]Z[{
<%<Z*G
]{ped*
y9Ngaw
b\4P2Q
<U,SBr
yI_ew"
!Cd!D1s[
~niPU;
r^x!+Inl
se?T@:}
D<@?L#
PyQ%NG
?.VetO
|*z'v+
jy|uVXQ
*8n0c-
_P ;Ns
Eg~=0#e
Jw)@$Ps+
EPw8 a
Q=ufE+
/)hgY
<TIuoJ
}m]7vO
_lc>"y
zd5"6^
l.b'z-
G@%`qx
Jq@0J]
M@S_;+
C`wZls
8<i.DeZ'5M
50[s[G
p+WxU<
^a6<Lp
_}n:38X
.$KdAe6
1W1AhF
uM %vC
nM"D-w
%0_e*C"
Npa/fck
p{z71h
f'bssu
2(W5/W.
E:bs"E"
&hMv=D
cgy3BV
^bX]((
}lnAfrcY
(@8v<X
eY'vq>K
C"`Zq
GR7iJ0n
&x(j~W
Ot$SSIl
V3Xfs|w
bp`]G'
w6#;;MX
OAao`zJ
b 8}LUn
k|f4rb,(
g4~.md
#}jagB
`-6b5M
k)g(wQ
0_Hp}\L
N4A-Fn
s@xC!^
.Mg|?.
KzK;p$h
@[?HLJg
blk&kJ
UfaZJ.
/s9Zo<
:-{Wy5P
q}>BK
ph,3C6^&
WAA/[d3c/
N>_r[F
Cb|xaQ
rx#Xs}_
uj+Af-
GVLM>Z
qWN2.Wf<
Sh]T,P0
/=s-NTA
7'8huW
qeUnNd
]|0|Kz
g~-zBk
^ [+f
>(iBYl
]_Bta1
!u8#dn-
=;ktS_zSd+49S
,d-Jhl
5p|l\\
q8>jet
"$@ejl
VC:J-~
oksma`
]L{\9k
GnCIYA
@~k6_I
;*KJAw
*I`|W[
d;Ch8
IQ@@Zi
YC3`Dk
`#UD-A*Kx
%]ju*@G
OY<t!:,
wD>LE@
l;akiz
PaX":()z
{P3`}_
G~^#EB
ai>9vv~
jVzl0gkW
[edJ>D
OzHVB8
B43_":<5Z
Uqhu1)
Qq<*g(
@\Oa+a
\Hr.SR#
q{4{l)
&?7_lD
X1hAu6
At%Z9l
rk<?:dW
|UWB\W)9
ji?D _+Q
.,] )X
ac8:(|M
Z!3+Q+|fx
a1{FM!
&s$qqR#
w1Vg(<:+
m9Dd?'
kp-#%:
jW(j8f
GQpQ{u
K")nix
B>jI]Vq
3d*0Wu
&S:`(P
:O6$ySC
R[gd=+
eY)n^D
vqDY)n
.RVu#*
JBC.Mm
IvYnPW^nlq
W"~ AT
N&d3B$
SbGxIh
FHI9Ss
L:BR.
`sg9-b
V-7`f]:
gQ`2`g~
Un|o;R
<|w{i{
*P(\#n
\0-.Uz
J3w%)3
CUl' >
+?D~(a
xMqN@~
6UXjsF
0?{S#%-h
W3&7N^}
Lv@m4;
EX{1pT
6yXZ#
dD/5#@
L7 lK8
O>1 Kq`\
e|,yZ,f
)>Fv<k
e|~H(6
y,4;sE0
)2o6K[(
%jL:,B
8+L;H>
or#~;3
ArV%bV
:\[H`
/YSd/q
6?*FnQ
/y"?%G>
=,=*'I
B"-oGx
`4U?%
ubR#e>h
b/8Q>p
GI8RGb
%{U:]"l
+qC!]Vx
58Bz72
5Fs4v+
#0x.'Fd
-y)B$;
w-Vc(d
`?yCY*
ofM;"a
`}9oNN
0m>0W@
X9FU]B
RV=?H=M
|[QoK{
!Dq,Su
Qfkg)5
K8g4MB+
JA`PT6=
5Rfr=+
~6aDV"b
L,jxar
JKg>j7
1!X4#KP]
c}MT[
2!5}!=gW
E/&AH2*
A ?[bw
JLXe*z
UWC~MX
z0';z%
7k}dP+9
7_ic]o
5'cF}59
m`xzOq
&nCQp2
,P@v)'
<xee kR
#LT^Qj'
IG%4\F_
RHX[hHF
I&wWbR>,
WIspU{
QwY]H(t
7uAHJ@
G=c&jdzL_
Am;s1p
U0!;F'+sb
7M#8:q_
NA`)j3
bT^wH~>
*OW]P^
lYL])5
1G+y)z
5hCM7O=#O
fHx`_'
h^qt9w
kmeuqv|
UZe==!}
Asaq'hF
oLIv&
l%#IRD
)cf6Qh
zKc+=R
6+p:}D
@Pg0_<
-2]!_J
!fyUX2L
n7^:Q0
7aJ]AX
jw5[HY`3
_Yz;itO
5IgivtZ
/lWh5B1i
pNUuFI<;
"+)EDA2HS\
ufm:?J
ROl3#^
Qp6VML
FniF*`
[O=cbp
+4^7'R7
Cx*],1a
`me-5p
CorExitProcess
runtime error
TLOSS error
SING error
DOMAIN error
An application has made an attempt to load the C runtime library incorrectly.
Please contact the application's support team for more information.
- Attempt to use MSIL code from this assembly during native code initialization
This indicates a bug in your application. It is most likely the result of calling an MSIL-compiled (/clr) function from a native constructor or from DllMain.
- not enough space for locale information
- Attempt to initialize the CRT more than once.
This indicates a bug in your application.
- CRT not initialized
- unable to initialize heap
- not enough space for lowio initialization
- not enough space for stdio initialization
- pure virtual function call
- not enough space for _onexit/atexit table
- unable to open console device
- unexpected heap error
- unexpected multithread lock error
- not enough space for thread data
This application has requested the Runtime to terminate it in an unusual way.
Please contact the application's support team for more information.
- not enough space for environment
- not enough space for arguments
- floating point support not loaded
Microsoft Visual C++ Runtime Library
<program name unknown>
Runtime Error!
Program:
EncodePointer
DecodePointer
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
GetProcessWindowStation
GetUserObjectInformationA
GetLastActivePopup
GetActiveWindow
MessageBoxA
USER32.DLL
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
 !"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~
HH:mm:ss
dddd, MMMM dd, yyyy
MM/dd/yy
December
November
October
September
August
February
January
Saturday
Friday
Thursday
Wednesday
Tuesday
Monday
Sunday
SunMonTueWedThuFriSat
JanFebMarAprMayJunJulAugSepOctNovDec
bad allocation
GetTickCount
GetCommandLineW
GetLastError
d:\th\ds\ext\a
Unknown HTTP error
C:\faf\Jocay\vice\quosal\wopi warajoje vanaq.pdb
GetSystemDefaultLangID
lstrlenA
TlsGetValue
HeapAlloc
InterlockedIncrement
OutputDebugStringW
IsBadReadPtr
GetConsoleCP
HeapCreate
GetACP
GetLastError
GetCurrentDirectoryW
SetLastError
GetProcAddress
FoldStringW
GetCurrentProcessId
GetThreadUILanguage
KERNEL32.dll
GetMessagePos
MessageBoxW
GetForegroundWindow
GetWindowTextLengthA
IsZoomed
GetMessageExtraInfo
IsIconic
USER32.dll
CoUninitialize
CoInitialize
ole32.dll
GetStartupInfoW
SetUnhandledExceptionFilter
GetModuleHandleW
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
TlsAlloc
TlsSetValue
TlsFree
GetCurrentThreadId
InterlockedDecrement
VirtualFree
HeapFree
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
LoadLibraryA
InitializeCriticalSectionAndSpinCount
GetCPInfo
GetOEMCP
IsValidCodePage
RtlUnwind
HeapSize
GetLocaleInfoA
WideCharToMultiByte
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
wcsnlen
.?AU?$IVector@PE$A
IDATx^
X{<gt<
eqsAf6
m`VRoTat
yEoNV"18
$(7X_k
08v?ZS
qcccHN
YxEdn@>
AoqNRO
aCt<Um^
;/XG~A
^K(R-:L
O|r 2XYAX
T~ucEdQ
.MP:!u
EH7Q7,]
FIWs!3
:R]kki
:FOUZ}$
0^1ej?
_<v==|
ljT4u"
*m.-5mz
6w0Wzc
pc`[,Jh:
S5eynD
G(%"aL
f@0Af`
P+0aa25
&BGcEX
B^*+j(
5 Lktx
s ; uxz-D
3d]G\Q<
b#0=#?
jN4+Bm^(
;~w/ '#
@06b"^
=w^lP4
lhlay^
{DmKg]8O
N3 LW
4%]"cG
<_0dFRF
uq)}.|
gs].T\!RP
b&"5^/
<@# PfA
\El|-0B
Yt!a\s
]`~Bp@
FV[LOd/
cg2}E>
qjE5C8
2d,vSo
X0uG3{
p{kg|r
dTPI}n
7}lxrss
ff.QfEQ
3;:rdvx
Q|M<2[
0;@,il
Q(G_@a
qoOs>~
xoem)>
9,c07>
N``c.
U4A^^_
\Kt0jM
&hOdTh
N0k7y>
zz>!=Ok
*7uaN0
s&M-<V8hF u
%AF::#
0e-+*P
:DEC%O
n}4?U>
-}(kg`~y
c02uk#f
9QKp'u:
cG h@?Lgf
zkD2+k3rQ
SU;*rB
r_!y9,h
5X|}&(
zE*_om
&|o@Tk
y;!~<@
EoL%c,d?
7'WLd/q
c@J?#*
\w|~Ij{
t~}}}C
>@R|R6
n"L][2
d]j<3
<qO#[(&s
3B,]*/
nyliqa0
D|c&z_
|%'<|I
,S-wkq
",Q'0a
#[>-*t
#Hew}J
#J<]YZ
\Kyiki%
m]dXG:
`VA=bu
_:>n)s
I>|'wU,
N$_%e[
X^^Js
nf{m[^\>/
Gv&4Akn\
62@Q,SX
pQ(/-/
9$$u`1l
Xo?}]P!
t4)oMJ
PB5)kO
$0bg`I
}U,lPb
G}akMp
\!~qDv
#b&/6^
&dS?@=
winnc.
$p~'0wtni.
',b}JN
ypf+r`
7AFn8a
$9B.r]at
`xfoP:
9^NF$
2u_m3Bb
PTX}klC
C0v K}
sSh&6N[
<wz9Q
###]!$%
+++/*'+
111222
444?444
!b"!"
$$$E%%&
)""%|
.......+
%.!+%%
%'C."..#+%'%+.w%%.
%+u+...
##o&( &%
..25+.(4/25gd..
**j($+/
1$005500o
0%5.`5#.
[$/1"1
1g20//05?051560
?.5?4.$?
0?5CC547345.6
B55/C9556
A9CC1CCAC829?.
2AAW?=(5/J
A9CCCC9C95C7C?8CC
W?47CC?
:C59CCC50CCCCC
?5?C:CC?CC5?5C:
AJCJI9:>G:=5E
<D;DF:JD:J8JJJJDC
YGGD9?H:FH=6GC
GJJ?DHAJGJC9DJD=
C;D;NHJJJ;HCJJFJIJECJFJDJJDEDJk
F?@;YYYMDHLRNRCR<YOHBLYKHJ@DH
FLLHOJJNJJWB;JBJCOST@JJYHH}
hTTJPRWTZYTIT[CYWZ[UFEIL
YZWYMYYYUVYRYZUUSYN;K
[YZRLZU[NYUTUUSVV
Antivirus Signature
Bkav W32.AIDetect.malware2
Lionic Clean
tehtris Clean
ClamAV Clean
FireEye Generic.mg.f36038207a570f62
CAT-QuickHeal Clean
McAfee Artemis!F36038207A57
Malwarebytes MachineLearning/Anomalous.100%
Zillya Clean
Sangfor Trojan.Win32.Save.a
K7AntiVirus Clean
BitDefender Trojan.GenericKD.64110650
K7GW Clean
Cybereason Clean
Baidu Clean
VirIT Clean
Cyren Clean
Symantec ML.Attribute.HighConfidence
Elastic malicious (high confidence)
ESET-NOD32 a variant of Win32/GenCBL.DEK
APEX Malicious
Paloalto Clean
Cynet Malicious (score: 100)
Kaspersky HEUR:Trojan-PSW.Win32.Reline.gen
Alibaba Clean
NANO-Antivirus Clean
ViRobot Clean
MicroWorld-eScan Trojan.GenericKD.64110650
Rising Trojan.Kryptik!8.8 (TFE:5:leZOYpvcsGQ)
Ad-Aware Trojan.GenericKD.64110650
Sophos Mal/Generic-S
Comodo Clean
F-Secure Clean
DrWeb Clean
VIPRE Clean
TrendMicro Trojan.Win32.PRIVATELOADER.YXCLHZ
McAfee-GW-Edition Artemis!Trojan
Trapmine Clean
CMC Clean
Emsisoft Clean
SentinelOne Clean
GData Trojan.GenericKD.64110650
Jiangmin Clean
Webroot Clean
Avira Clean
MAX malware (ai score=99)
Antiy-AVL Clean
Kingsoft Win32.Troj.Undef.(kcloud)
Gridinsoft Ransom.Win32.Sabsik.sa
Arcabit Clean
SUPERAntiSpyware Clean
ZoneAlarm Clean
Microsoft Trojan:Win32/Sabsik.FL.B!ml
Google Clean
AhnLab-V3 Clean
Acronis Clean
VBA32 BScope.TrojanDownloader.Zlob
ALYac Clean
TACHYON Clean
Panda Clean
Zoner Clean
TrendMicro-HouseCall Trojan.Win32.PRIVATELOADER.YXCLHZ
Tencent Clean
Yandex Clean
Ikarus Clean
MaxSecure Trojan.Malware.300983.susgen
Fortinet W32/GenKryptik.GDIT!tr
BitDefenderTheta Gen:NN.ZexaF.36106.nvX@auAVJxam
AVG Win32:Trojan-gen
Avast Win32:Trojan-gen
No IRMA results available.