Static | ZeroBOX

PE Compile Time

2023-02-13 16:55:51

PE Imphash

4dd24c5aa6efe26191b8c320e81469c3

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00001000 0x00010b25 0x00010c00 6.56777024712
.rdata 0x00012000 0x00006c1c 0x00006e00 4.75109059179
.data 0x00019000 0x0007bc14 0x00077a00 7.99137565468
.rsrc 0x00095000 0x0017e2e8 0x0017e400 5.35025829642
.reloc 0x00214000 0x000010a4 0x00001200 6.32793720234

Resources

Name Offset Size Language Sub-language File type
RT_ICON 0x00128a18 0x00042028 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_ICON 0x00128a18 0x00042028 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_ICON 0x00128a18 0x00042028 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_ICON 0x00128a18 0x00042028 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_ICON 0x00128a18 0x00042028 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_ICON 0x00128a18 0x00042028 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_ICON 0x00128a18 0x00042028 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_ICON 0x00128a18 0x00042028 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_ICON 0x00128a18 0x00042028 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_ICON 0x00128a18 0x00042028 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_ICON 0x00128a18 0x00042028 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_ICON 0x00128a18 0x00042028 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_ICON 0x00128a18 0x00042028 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_ICON 0x00128a18 0x00042028 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_ICON 0x00128a18 0x00042028 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_MENU 0x0016ab48 0x00000090 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_MENU 0x0016ab48 0x00000090 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_DIALOG 0x0016abd8 0x00000090 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002126cc 0x0000026c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x00212994 0x00000084 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_GROUP_ICON 0x00212994 0x00000084 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_VERSION 0x00212a18 0x0000020c LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_MANIFEST 0x00212c24 0x000006c1 LANG_ENGLISH SUBLANG_ENGLISH_US XML 1.0 document, ASCII text, with CRLF line terminators

Imports

Library KERNEL32.dll:
0x412008 DeviceIoControl
0x41200c VirtualAlloc
0x412010 GetModuleFileNameW
0x412014 VirtualAllocExNuma
0x412018 Thread32Next
0x41201c CreateFileW
0x412020 lstrcmpA
0x412024 GetSystemDirectoryW
0x412028 OpenProcess
0x412030 Sleep
0x412034 OutputDebugStringW
0x41203c lstrcatW
0x412040 GlobalAlloc
0x412044 CloseHandle
0x412048 GetSystemInfo
0x412050 GetCurrentProcess
0x412054 GetProcAddress
0x412058 VirtualAllocEx
0x41205c ExitProcess
0x412060 VerSetConditionMask
0x412068 GetModuleHandleW
0x41206c FreeLibrary
0x412070 CopyFileW
0x412074 lstrcpyW
0x412078 VerifyVersionInfoW
0x412080 CreateFileMappingW
0x412084 MapViewOfFile
0x412088 OpenThread
0x41208c WriteConsoleW
0x412090 SetLastError
0x412094 LoadLibraryW
0x412098 VirtualProtect
0x41209c HeapReAlloc
0x4120a0 HeapSize
0x4120a4 SetFilePointerEx
0x4120a8 GetConsoleMode
0x4120ac GetConsoleOutputCP
0x4120b0 FlushFileBuffers
0x4120b4 GetProcessHeap
0x4120b8 GetStringTypeW
0x4120bc SetStdHandle
0x4120d0 TerminateProcess
0x4120dc GetCurrentProcessId
0x4120e0 GetCurrentThreadId
0x4120e8 InitializeSListHead
0x4120ec IsDebuggerPresent
0x4120f0 GetStartupInfoW
0x4120f4 RtlUnwind
0x4120f8 GetLastError
0x41210c TlsAlloc
0x412110 TlsGetValue
0x412114 TlsSetValue
0x412118 TlsFree
0x41211c LoadLibraryExW
0x412120 EncodePointer
0x412124 RaiseException
0x412128 GetStdHandle
0x41212c WriteFile
0x412130 GetModuleHandleExW
0x412134 HeapAlloc
0x412138 HeapFree
0x41213c LCMapStringW
0x412140 GetFileType
0x412144 FindClose
0x412148 FindFirstFileExW
0x41214c FindNextFileW
0x412150 IsValidCodePage
0x412154 GetACP
0x412158 GetOEMCP
0x41215c GetCPInfo
0x412160 GetCommandLineA
0x412164 GetCommandLineW
0x412168 MultiByteToWideChar
0x41216c WideCharToMultiByte
0x412170 DecodePointer
Library USER32.dll:
0x412178 MessageBoxW
Library ADVAPI32.dll:
0x412000 OpenSCManagerA
Library ole32.dll:
0x412198 CoInitialize
Library WINHTTP.dll:
0x412180 WinHttpConnect
0x412184 WinHttpSendRequest
0x412188 WinHttpOpen
0x41218c WinHttpOpenRequest
0x412190 WinHttpCloseHandle

Exports

Ordinal Address Name
1 0x403130 PostBuildPatch
2 0x403150 dmain
!This program cannot be run in DOS mode.
`.rdata
@.data
@.reloc
jPh0pA
WL j@h
WL h\rA
WL htsA
=l.dlu
URPQQh
UQPXY]Y[
QQSVWd
j<h(}A
j"^f92
j"_f9z
t^j*Yf
f9:t!V
QQSVj8j@
PPPPPPPP
PPPPPVW
PP9E u!PPSVP
__based(
__cdecl
__pascal
__stdcall
__thiscall
__fastcall
__vectorcall
__clrcall
__eabi
__swift_1
__swift_2
__swift_3
__ptr64
__restrict
__unaligned
restrict(
delete
operator
`vftable'
`vbtable'
`vcall'
`typeof'
`local static guard'
`string'
`vbase destructor'
`vector deleting destructor'
`default constructor closure'
`scalar deleting destructor'
`vector constructor iterator'
`vector destructor iterator'
`vector vbase constructor iterator'
`virtual displacement map'
`eh vector constructor iterator'
`eh vector destructor iterator'
`eh vector vbase constructor iterator'
`copy constructor closure'
`udt returning'
`local vftable'
`local vftable constructor closure'
new[]
delete[]
`omni callsig'
`placement delete closure'
`placement delete[] closure'
`managed vector constructor iterator'
`managed vector destructor iterator'
`eh vector copy constructor iterator'
`eh vector vbase copy constructor iterator'
`dynamic initializer for '
`dynamic atexit destructor for '
`vector copy constructor iterator'
`vector vbase copy constructor iterator'
`managed vector copy constructor iterator'
`local static thread guard'
operator ""
operator co_await
operator<=>
Type Descriptor'
Base Class Descriptor at (
Base Class Array'
Class Hierarchy Descriptor'
Complete Object Locator'
`anonymous namespace'
FlsAlloc
FlsFree
FlsGetValue
FlsSetValue
InitializeCriticalSectionEx
Unknown exception
bad exception
CorExitProcess
LCMapStringEx
LocaleNameToLCID
AppPolicyGetProcessTerminationMethod
Sunday
Monday
Tuesday
Wednesday
Thursday
Friday
Saturday
January
February
August
September
October
November
December
MM/dd/yy
dddd, MMMM dd, yyyy
HH:mm:ss
 !"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~
?5Wg4p
%S#[k=
"B <1=
_hypot
_nextafter
CURRENT->NEXT->prev IS NOT CURRENT !!!
OpenServiceA
QueryServiceStatusEx
Thread32First
NtQueryInformationThread
GetModuleInformation
VirtualFree
.text$mn
.text$x
.idata$5
.00cfg
.CRT$XCA
.CRT$XCAA
.CRT$XCZ
.CRT$XIA
.CRT$XIAA
.CRT$XIAC
.CRT$XIC
.CRT$XIZ
.CRT$XLA
.CRT$XLF
.CRT$XLZ
.CRT$XPA
.CRT$XPX
.CRT$XPXA
.CRT$XPZ
.CRT$XTA
.CRT$XTZ
.rdata
.rdata$T
.rdata$r
.rdata$voltmd
.rdata$zzzdbg
.rtc$IAA
.rtc$IZZ
.rtc$TAA
.rtc$TZZ
.tls$ZZZ
.xdata$x
.edata
.idata$2
.idata$3
.idata$4
.idata$6
.data$r
.data$rs
.rsrc$01
.rsrc$02
stub.exe
PostBuildPatch
VirtualProtect
SetLastError
GetCurrentProcess
DeviceIoControl
VirtualAlloc
GetModuleFileNameW
VirtualAllocExNuma
Thread32Next
CreateFileW
lstrcmpA
GetSystemDirectoryW
OpenProcess
CreateToolhelp32Snapshot
OutputDebugStringW
K32GetModuleBaseNameW
lstrcatW
GlobalAlloc
CloseHandle
GetSystemInfo
K32GetModuleInformation
LoadLibraryW
GetProcAddress
VirtualAllocEx
ExitProcess
VerSetConditionMask
GlobalMemoryStatusEx
GetModuleHandleW
FreeLibrary
CopyFileW
lstrcpyW
VerifyVersionInfoW
K32EnumProcessModules
CreateFileMappingW
MapViewOfFile
OpenThread
KERNEL32.dll
MessageBoxW
USER32.dll
OpenSCManagerA
ADVAPI32.dll
CoInitialize
ole32.dll
WinHttpConnect
WinHttpSendRequest
WinHttpCloseHandle
WinHttpOpenRequest
WinHttpOpen
WINHTTP.dll
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
RtlUnwind
GetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
EncodePointer
RaiseException
GetStdHandle
WriteFile
GetModuleHandleExW
HeapAlloc
HeapFree
LCMapStringW
GetFileType
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetStdHandle
GetStringTypeW
GetProcessHeap
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
SetFilePointerEx
HeapSize
HeapReAlloc
WriteConsoleW
DecodePointer
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
f/=7%~
n}v4B.a
k#KjSO
=o[RzV
/Ba:Yk
g?"qFt
"Q89`w
zv:CVU
.C"d06
lEQ/0;
"=9>l\b
'=mjPb_
%n8sTJii
-i.$/d
DVVlYI
!ofvL
p@eO}t
3+dxzj]
h*1fEL
Om[Cg@u
[tHJ2X
NzrIJgWw
De@-Y"h
h=O!74"\
V3,$zRI
qyS4:2w
,SG9|*
06$.;N:`hA
l~28zZ!2
E?66WR
2q#*AQ
~(H~sU
Wa%wr*
~Y&bM9
K-tq*R-
kew06v
8t4:7]VPA
NS5fM5
.eB)ns8
$[ayh3A6
p(IN5>2
;@(TFl
F"(^KI
/:\#/*
;jUJ6j
n*4kBvL
kvWc]<
RHNw`C
W,\4s^
~F|-bw
33gl RC
8BRa,c
NM]S-<
4?OmAj
biUtpi
~~t~m^UV
iV^h~.
fNB6lhI
b*v0@nX
Oud ?R%y3
^*FjI!
%oZi<9
N9otK,4wc
MTzhvB
%}mQUo
^n5jnx\
c{27>2(
-j3rf?
6GFHIg
S'&!skQ
P"dA/hP~
nWmiV~
hR`L)R
-{j,8O
^u`#g3wQ
^X4O0a$
mXMC U4
N\@gZ*
RRR!.X
&rUDy\R
yiP"m~
M%Uj7
(o.=C,oI
@{?5pv
<x\\+0
;~@Law
7w\b3+
UQ>=a9oqF
hh_>\
!/Y&k/
gvzDC_iobE
B)Vu:,]
In2s\-
i>cNJa1Bl
;:}Sj8
Gvi-~*
Zo%T
m)["K9J
p:M!2
P9AI.&xX.d
,,@s3J
(!U.F`
|?[C'J
mJn*`~M
./Jj|X
7&12e;U
*ZXM?_
_Yr02-
UX#BC|
fwz\d,
5g"Z8W
B=$2uN2
piRYlK;
x4Xi~:/
/''_i7L
KjJ14u
|TDLV!
_>QB
,!4vd&r?
(`=0Vl
n/.!|JjF
!#u93^
Of?Bu_
QtBO&s
nsV/xA
E#MlIN
}H|w0M
mqQ:_%
?%-2`}!
Qf-Ojm
Ry1!skIh3
GKXYnbL+]
X# izU
)8Z\IX
L)rSlF
=m%QFmX
#E3z5f
8Q$\oC
~2IZoi
0'L1dC
I#28HB
rbk_#>9H
%9-VdA
+|fk@2
SFQJ*O
;#MzD7$V
`8yNZ$*
E_L;v*
jxI_CUE
#{q ?V
ieiMM"
*[HRD$
je=,_I
XUV+$}
T&i'Yc
(gt}uz
{c>:TK
']fI=Og
:P_6o._]c
V']1&1
\[_rx8E
|iis0
f#f()\
gcRT5=Q`}@I
=vY95ljX
S A$f!7B
5!q`d/
197@u;
Mrt5YR<4'*)
*Jw4am
0";)3g
{g3,t=
xjryx!
-wjMOn(-
oU9Oj2
qM$.wbg^W>
fY:,56
Ega3J`"
B=S$]4Gd
8U$M|A
{2UuQ+
R\'#-M
|w_<~I
0Y,pl5
F+O~VW
gB `fK1j
FV.6Lw
x"/^R\
nkNQPU
]uzm:K
JJzG|
]~x'R'^
*O@(xt|
SISE;"
uWG`S<u
OiB$j#*h
8e(h1B
G"PG L
\A#tsG/mW
]@/?eo
w:_hvB
t,H6J3
Y$$8g)
za>N+"
Po[%v|s
z$:=-&Z
:^bIfv
xnAul\
\C"c0D
TCl:%x!
vJs7'y
D]@>*/
Q0TLGT
(_kN?$
.?,xY"
g514+{
VS)C94^p
V*Hq$v
Ks69;Jv
L]Hut_i%9>)p
94bl}Q
t\_+Vns
b-5]rR
BE~`,-
HSx0OW
:Gj,:^
sT%7|z{
Fg7@Wj
Px:Y9{Q7
ct=W(!
Y+8(MfId
9320RT
Xu2H&=J
(P~q%
<84*<dX
p+4X6'
.7SNr|
>aNnC=k
Gtr=S\P
>:(fk
nF:Fxgh
xo-E{`0v
:y<TA*
=e{mOn
5@a :b
cA7l,M
\|hY]Bk
[ F0z\
^Y?({
\6)LG:
K2M#-JI
/g])i_
d[lk6$
$#4JT<
zR`ygr
+hY%V2%
IB:%KX``
$^%3vU
Gv:4c!
2r,=C+3~
":\, ]MC
G2U\J3!
/zc|/J
3'&p;~
xUAp@
x] PhF
AFaBu4
bdYsXt
dA[nT7
\Lej1
ZXN)('
3m2ie1Q
{JD5]
`"IfGef
Jr,/Im
d}zd~}
jCqniXe
Jj(8Ah
:VTi;[
^1Mt}JH
BhJQ@
{F&O`p^
b2RAlx
K-j7Ct
Q;5.>Q4
Tc<=$
k'dC`d
q2}yltkNX
jT8'q%v
1iQHo?N[
/W@r/,;
C`A.q+
~z/ZsQ
|{`&]Rk
y2@(&r6
=[5xdS
3on9{}
Hv-sfB~
@%Gpzb
9AM^v_9
!6pTf=
>11}eU
l+gmP2<^
$K$;!n
rGeY7j
&byR(=
PUQlU/
Lc@V@?
CaKLB=
H$v\Xeg
XInn5;I
}6tqMn
.Ur)xz
PZ#|R-
sR_%@{
~xET^
OB}g/d
'la#>ii
.-# }#
7Yu[2b
OX++{U
9s9D#
rY;0cX2
Q;T^r2NR
W~HF_S.4
$8xIK66
WPm#G
KRfH3]
*8Zqu3
LeGJ}_lWO]
Q1ZZPF
*DX#w>
W_RA<o
bA6LCCB
^7viOG
PtprO@
Q(Rbfx
-q/b%`@dd0o
-bt?pP
NxxzN}
m)M[ <i
+{u"(K
"M#ra\~qw
Jh(i8}1$
_U_-}=}
.UTmIim
$1Z,eY
3xr}Qp
hPCR)2
"o$eip
:@hID>
X?H^9h
E3_ctv
<l4T>P
foD ~6/\
lF/ie7
}Xp`zau+
_.d*[s0
-xMD@b
8OL@kl
D_mg%<e
J9FjL%
VbiW E
}VieVF
8p=Ra]
I9X["k
4*MLKG<
#A9ZFm,
eN#7wX
p~3,+$(
eN#7wX
p~3,+$(
RYpj]r
O8w*-f
O8w*-f
O8w*-f
I@E.SP
vk+l4A
O8w*-f
O8w*-f
O8w*-f
O8w*-f
v%0/ F
vN`;5w
zJ]J+F
<sU'YT
KZFlI}
5G;p1p
iTk54`
oIdI
J^b\Tjm
Jj9 _Tq
xMxP: 5k
j.}5+U
.+F}i$
u$S1bju#.Z
-Z(\(jA
.<K8=q
/!Uyg%
B=n_20x\
W|qE/Y
LKJx_ergI
g0fUB
?)i0dvQ
_#!5aC
Q-<H\No
zX+A7E
9}5U\,
f/KQ'/
|}jpL^
^u#n.O
3xh?g<
T~Ym9b
c4E:dPV
3=R IBk
ky)q":
o({n6k
ky)q":
X\.AkCH.
83j%l2
]?190s
.a}!:wl\
86v*.{
vYr^<U
;`%!3nk1=
~tm^0T
b6^(]--
#M+sv/
q]uYAl-g{
: C/m!
yM<KQ&z4
7u]E-u
c?z!R1a
GIen]>
Vu7Q2\A
D}rM+H
#r[s/l
jO'g?X,
)ETRvB
s9_3C#
sV}HV'
2,)O D<g]K
.C'N9t
(c'eOX
m|5MmBU
tc6`_d
JsI{GZ
Hv^2Fdg
U>S1;2
ziF4V
-W^EO@
O)-K-{F70
}^C5TN
I]OyOx
b% umW
iW;Rwq
[3V= hw
`G#W~Fx
\HnwwX`
.B'!Vy~
IzsglH
.M{8>t
Drf<7rc
v=]!<(x
+<+-Qs
\3\!'g4
!$~$1%
jc%,Pi
V!kX~O
*0xr$N
CR[O%0:bS
Q:Z.*P4
&#k([
IGXNhmq
|e1E[nTnb
(+1z+9
J P.m?
7W'eLOj3K
l<zlS:S
bSHO)8
D0"scDw
_{d7,b
ggK14v
)k.!Fz
ysxD)$3
o1_3P%j&
&30%#V
k!,jm
Jr$(1I
/(<e&=Sg
g6rv!m
p=4UEv?d9
eK/?WAI
{Zu2J}
;B6Z-{
_(veLpr
L'Ogd0
XrO_7T
$@D[Rh
Dy?|co
%~dyC@
1)Y@{5
;crvOu
1'Mm(m
0dU_u8
avtb=&e
=t}X5_Q
e/QzbAu
kfh`>&
>{k!Ya
f>uXI
#-z@M(
\SR8tT
Fu+w44
:I>di~
E$aB+!
:Q=b'$
s]iepon
ZQDB9X
" Vk*9p
r2^A3C_K+
KPzTW8
"GH.XG
M50T'A
P/^ZK#
7(<'G"
m}8FXPF
U?84o0a
}PgC0*
kI>Qi,
[85sc|
~fsb!~
f2wW1=
Q4AW#1
fpp;[s
/~oS8wDh
r<ymKA
g>!T+X
m7s!Nr
{$@[)a;
{SK$n&
c`S3nv
59n20k
iFc1A<
@g#S!]
:Tny"d
sDRk%a3T5Y
riE-*5
<Wl<6?
U;=)kq6P
?(zleO
2F)?1-
30HX*4
}F!5Ek
UU`&fE
mv=a9"j
R|7l)*
5b|(7J
?6`u]Db
`VWBGn
>^mp)u~
/>s\\&}P
nTe%~So
TM2O5:
^sC/FX"
=gh^k4
]be_*'
N06uao
Y`$%BV
OSj@=[FK
_g>v:)
="gb]l
}FVxF=FTl
fpkCHh4
J P.m?
9[\CuL
]v&F=s
KxG|y^
*j^W;a
Kr,O4>
Qr1T8'Kr`
&"|SA'
&VmLa]
LU4R0BI
Ytd;a+=
J4HBio
qM+}bX}
)L?GDf
$c[K0=
Yw5?x
Yh,xNn
|U<);g
3Pquj7
u\hki@
wW?1/-
.zGD@E
#R.qh7N'1
vfPJ-LX
bOSzg`
cZ6{!\oe
4wt9|t~
s2LI\^
s2LI\^
QAwwIc
{NG+\
6_aQM%
ImW6:?
c^DJ5p=a
q0yK|
Q@q0yK|
1|Ow:Ud
ObjdT}
3cPb:H\
aH/^#3
3{BRRwW
NvCcMK_n
|{@Jti
dpL1>N
|{@Jti
|{@Jti
1}<<,y
lJ+nlE(
lJ+nlE(
Cm"5:
[TQW@oz
61"_l8h
`~W7Ta"
!Yn3dU
Q_HP=
5:IeWs
gl<s%P4
]C,qDW
Q3.WI"
c3V1nF
tY}.F j
)LSoi`
!8'iC^'-
UO]1G?o
JuZE'l
GUTPBx@
w7J'}7
9*UEc
?/,z?
ubnO(s
o1UOX<
&& Wnz
R,Gj._%
d1`rwS
%l=\k^
u@F&y@m
{&Kk(:
A@:JUa
NY@N&q
o<QiPn
_>nu7=
0s!3Txq
P4cn4M
QE#(JA
$UY2B9
Ks;CGR
P@X7.tR
)]+;T-
,m Aq
y<3qM2
(uM9Xw[
-9J0d)
jQw3~]
Vbj*4"
WhL*Bs
guY!C$
CtDy]s
ZvZn3y
nWy7E6.
[(Ky)'I[
>Lzj94N
e6{iZ:
mP{iZ:
b']TBo{
f9_ y}
VlwY?Zk
,;DF_V
*sPoz+
su6W0L
#~Mhq
G"Tcq!J
cJP,"3
5]gmu
n~K;*M&
dw*_5.v
=Y!fczj
ZW//DD
gw}" ?
:gm*<;/O
rN6)$@
}Y'Z}#
|cX>UMdS
I(I}~J$h
*JRX;&
d%R]x0;H
BY&eP:'
g4xN8l
V*n%khDk
8hC;%f)$
#\:O&;
?aJ_ R
s/FNP9]
)LXgE:
M$M\yHCrbU
DC[QVr
UWnDE1^
#a['S?m
)L`=H+
&O|`|z
1YaS[^
%2&p!1
s:^@W3
cfL'1A
`7zW3Fu
n(^(s,(
8eeA(:F
QG7HxM
}NW?}
$[8A|-H
ajkv/ML
>dd<N%
$5+ Sg
u-w~9M3
72?0XZD-h
=:k7^?
6}Kz]6
[$%/TLK;T
zV}QNV]
JMbhtX
cW|mtI1s
"'Si0i
-0I0A(g
?tp}'8k
ta]Xpl
Y2XJ~>
D9yL`Li
M0V}FFn&
D9:PM)
sZ.ddn
o4;m"u
~D.|\vf]
i$e0z,
(4BF>=T
CI.,9$
CI.,9$
CI.,9$
CI.,9$
M]v-9k
NP1_c@
-OW9)
)LN;9.vZ
*:ZVBz#K
=gRN1K
)LcQNu
)LcQNu
t6b)Ye~
WOX,T{
8bRnm1sC*%
jFm"wi
o3X5Ht
BYvl@[
m1ng)%
uMDv:S
J+L=J5
=qt/8c
9pO9X#
ccl7bf
,.6tA2H
`/#mZ
vq.$L
FZYu`l"v9l
9RwY[X
Vp}K0
_GD+&|d
K~~W=;
GJ^xw^#E
aI].;N(zj
(.L I]N
|=$[0
a3^+TX
a3^+TX
[X}Ll:y
}QW6r<
=kf$TN
5DF3bjiZxoCrfpk8NszIbpaiMRLVvNgl
.?AVbad_exception@std@@
.?AVexception@std@@
.?AVtype_info@@
c0f0D0~0Y0
YY0N0~0Y0
W0f0D0~0Y0
0~0_0o0
c0f0D0~0Y0
0g0M0~0[0
Q0~0[0
0k0o0UOK0
bW0f0O0`0U0D0
PL0g0M0f0D0~0[0
Y0N0~0Y0!
O0h0M0k0
0L0zvuW0~0W0_0
0g0Y0:
Rg0M0~0[0
bn0h0M0k0
0L0zvuW0~0W0_0
0g0M0~0[0
W0f0D0~0Y0.
W0f0D0~0Y0.
0~0W0_0
0S0h0o0g0M0~0[0
[k0OUL
0~0W0_0
Q0~0[0
}g0Y0!
[HQx0n0
0L0zvuW0~0W0_0!
0f0D0~0[0
0~0Y0!
0W0D0g0Y0K0
W0f0D0~0Y0:
0g0Y0!
e-Nk0
W0f0D0~0Y0
W0f0D0~0Y0
0f0D0~0[0
0g0W0_0
0f0D0~0[0
Rj0Bf;Rg0Y0
:y~0_0o0
fW0~0Y0
[W0~0Y0
W0~0Y0
\(u^\'`
0h0Y0y0f0n0
tW0~0Y0
tW0~0Y0
[W0j0D0g0
0Y0y0f0n0
0n0^\'`
:yW0~0Y0
:yW0_0
0W0~0Y0
0h0W0f0d0Q0
0h0W0f0-
Y0y0f0n0
0k0o0:
0k0o0:
O0k0o0:
0W0~0Y0
QW0~0Y0
[W0~0Y0
:yW0_0
0W0~0Y0
fW0~0Y0
[W0j0D0g0
:y~0_0o0-
[W0~0Y0
[W0~0Y0
0h0M0o0
[[0Z0k0
RW0f0O0`0U0D0
_a0~0Y0
[W0~0Y0
:yW0~0[0
0:S%RW0~0Y0
bW0~0Y0
SW0~0Y0
)R(ug0M0
)R(ug0M0
YW0~0Y0
NW0~0Y0
W0~0Y0L0
NW0~0[0
W0~0Y0
0S0h0o0g0M0~0[0
[W0~0Y0
SgqW0f0
O0`0U0D0)
0n0MRofr
[W0~0Y0
[W0~0Y0
0n0zzD0f0D0
(uW0j0D0
o0!kn0
0S0h0L0g0M0~0Y0
j0n0o0
eW[`0Q0g0Y0)
0D04lr
fM0W0~0Y0L0
0W0D0g0Y0K0?
d0~0_0o0
0%Rn04X@bk0
0W0~0Y0
[W0~0Y0
0h0W0f0qbD0~0Y0
0h0W0f0qbD0~0Y0
0~0_0o0
[W0~0Y0
0L0ckW0O0
gW0~0Y0
SQ0tPn0
:yW0~0[0
SQ0tPn0
:yW0~0Y0
RW0f0O0`0U0D0
RW0f0O0`0U0D0
RW0f0O0`0U0D0
:y~0_0o0-
[W0~0Y0
D0~0Y0
[L0j0D04X
fW0j0D04X
bW0~0Y0
d0~0_0o0
W0~0Y0
[W0~0Y0
0W0~0[0
:yW0~0Y0
:yW0~0Y0
0qNpeg0
fM0W0~0Y0
O(uW0f0
:y[0Z0k0JRd
W0~0Y0
vk0JRd
W0~0Y0
0Y0y0f0n0
W0~0Y0
^\'`k0
bW0~0Y0
]0n0^\'`
0n0Y0y0f0n0
0L0JRd
0~0Y0!
0W0D0g0Y0K0
W0~0W0_0
W0~0W0_0
0~0_0o0
__jW0~0Y0
[W0~0Y0
[W0j0D04X
0XSMOk0o0
:yW0~0Y0
0~0_0o0
[W0~0Y0
0_0^\'`n0
:yW0~0Y0
]0n0^\'`
:yW0~0Y0
NM0~0[0
:yW0~0Y0
0h0Ah:S
TX0g0Y0L0
Rg0&Ny0
:yW0~0Y0
eW[g0h
:yW0~0Y0
O(uW0~0Y0
fH0f0h
:yW0~0Y0
\U0D0{0F0K0
SD0{0F0K0
T0h0k0\PbkW0f0h
:yW0~0Y0
:yW0~0Y0
0s0]0n0
0n0Y0y0f0n0
:yW0~0Y0
0~0_0o0&Ny0
[W0~0Y0
:yW0~0Y0
:yW0~0Y0
TMRn0MRk0
TX0g0Y0
TMRL0j0D04X
d0n0peW[g0t^
:yW0~0Y0
[g0M0~0Y0
0F0k0
0MRk0d0Q0
fW0~0Y0
0h0W0f0-
[W0~0Y0
fW0~0Y0
:yW0~0Y0
0o0zzg0Y0
:yW0~0Y0L0
0d0Q0~0[0
:yW0~0Y0
RW0~0Y0
:yW0~0Y0L0
0d0Q0~0[0
:yW0_0
fH0~0Y0
RW0~0Y0
[[0Z0k0
RW0f0O0`0U0D0
NW0~0Y0
W0~0Y0
eW[n0n
[W0~0Y0
[W0~0Y0
O(ug0M0~0Y0
0T0h0k0
[W0~0Y0
0~0_0o0
[W0~0Y0
0h0M0o0
O(uW0f0O0`0U0D0
:yW0~0Y0
0-Ng0ag
W0~0Y0
NL0}Pn04X
Tk0`0Q0
[W0~0Y0
0_0h0M0k0
NL0wk0j0
[W0~0Y0
NL0wn0h0M0k0
[W0~0Y0
0h0M0k0ag
NL0wk0j0
W0~0Y0
TL0X[(WY0
0h0M0k0ag
NL0wk0j0
[W0~0Y0
0h0M0k0ag
NL0wk0j0
[W0~0Y0
RW0~0Y0
0h0W0f0
[W0~0Y0
0n0HQ-
RW0f0O0`0
:y~0_0o0
fW0~0Y0
RW0f0O0`0U0D0
bW0f0O0`0U0D0:
s(WBf;Ro0+
bW0~0Y0
:yW0~0Y0
0f0D0~0Y0
0k0o0UOK0
bW0f0O0`0U0D0
fM0W0~0Y0L0
0W0D0g0Y0K0
fW0~0Y0
d0~0_0o0
0k0o0:
0k0o0:
0n04X@bh0
[W0~0Y0
Yn0Y0y0f0
D0~0Y0
g0n06RP
0~0_0L0c0f0
0S0h0o0
g0M0~0[0
!kn0$PL0
O(ug0M0~0Y0:
0!kn0
0~0Y0:
:y~0_0o0-
[W0~0Y0
0h0W0f0
0Y0y0f0n0
0`0Q0L0
[[0Z0k0
NBf\PbkW0
:yW0~0Y0
0k0o0UOK0
bW0f0O0`0U0D0
~0_0o0
fW0~0Y0
[W0~0Y0
eW[h0!kk0:yY0yr
O(ug0M0~0Y0:
]K0c0S0)
SK0c0S0)
W0~0Y0)
s(Wn0Bf;R
:yW0~0Y03
[[0Z0k0
W0~0Y0
fW0~0Y0
:yW0~0[0
0W0~0[0
0MRk0]0
0f0D0~0[0
01XJTY0
[g0M0j0D0n0g0
aW0f0O0`0U0D0
]0F0D0c0_0
vk0o0
0(uD0f0O0`0U0D0
0~0W0_0
0~0W0_0
W0~0Y0
0Y0y0f0JRd
W0~0Y0
:yW0~0[0
RU0[0~0Y0
0g0M0~0Y0
0-Nn0n
0n0MOn
fW0~0Y0
0~0_0o0JRd
W0~0Y0
[W0~0Y0
Ypek0rR
[W0~0Y0
[[0Z0k0
RW0f0O0`0U0D0
0~0_0o0
W0~0Y0
[W0~0Y0
0o0Y0y0f0
Tg[0Z0k0
[W0~0Y0
[W0~0Y0
:y~0_0o0-
[W0~0Y0
s(WBf;Rn0h
D0~0Y0
[L0j0Q0
s(Wn0-
eW0D0Bf;R
fW0j0D04X
bW0f0O0`0U0D0
eW0D0Bf;R
RW0f0O0`0U0D0:
yL0L}N
P~0g0n0
OF0S0h0L0g0M0~0Y0
k0W0~0Y0
k0W0~0Y0
0S0h0j0O0
:yW0~0Y0
[W0~0Y0
~0g0L0)R(ug0M0~0Y0
[W0j0D04X
0h0W0f0
OD0~0Y0
k0o0!kn0
Nd0n0$P
0S0h0L0g0M0~0Y0:
n0D0Z0
[W0j0K0c0_04X
fH0~0Y0
0~0_0o0
:yW0~0Y0
:yW0~0Y0
0g0Y0!
0k0ckW0O0
0_0S0h0
0K0i0F0K0
c:yW0~0Y0
s(Wn0-
0h0M0o0
[[0Z0k0
RW0f0O0`0U0D0
n0i0a0
[W0f0O0`0U0D0
:yW0~0Y0
:yW0~0Y0
:yW0~0Y0
:yW0~0Y0
hQO0n0!q
W0O0o0
0S0h0L0hY
0f0D0~0Y0
W0O0o0
0k0o0
g(ug0B0
0~0Y0L0
hQO0n0!q
vx0n0i
Yk0:yU0
0hQO0X[(WW0~0[0
W0O0o0
O0`0U0D0
0B0j0_0o0S0
0c0f0zvL
0c0f0o0]0
0n0F0a0i0
^~0_0o09e
0S0h0L0g0M0~0Y0
01XJTo0
c0f0O0`0U0D0
0o0!kn0
0eQKbg0M0~0Y0:
X[(WY0
:yW0~0Y0
fW0~0Y0
0n0MOn
h0'YM0U0
[W0~0Y0
SW0~0Y0
SW0~0Y0
0k0;bW0~0Y0
fW0~0Y0
0n0MOn
h0'YM0U0
[W0~0Y0
SW0~0Y0
SW0~0Y0
0k0;bW0~0Y0
0~0W0_0
0~0W0_0
0~0W0_0
n0$PL0!q
Rn0$PL0!q
j0Y0y0f0n0
j0Y0y0f0n0
fj0W0)
:yW0_0
0W0~0Y0
:y~0_0o0
fW0~0Y0
0W0~0Y0
QW0~0Y0
:yW0_0
0W0~0Y0
:y~0_0o0-
[W0~0Y0
_a0~0Y0
SW0~0Y0
YW0~0Y0
0n0MRofr
[W0~0Y0
d0~0_0o0
0%Rn04X@bk0
0W0~0Y0
:y~0_0o0-
[W0~0Y0
0~0_0o0
__jW0~0Y0
d0~0_0o0
W0~0Y0
:yW0~0Y0
:yW0_0
fH0~0Y0
d0~0_0o0
W0~0Y0
NW0~0Y0
W0~0Y0
0n0zzM0
RW0~0Y0
OW0~0Y0
0_0Y0y0f0n0
:yW0~0Y0
0-Ng0ag
W0~0Y0
:y~0_0o0
fW0~0Y0
bW0~0Y0
bW0~0Y0
fW0~0Y0
:y~0_0o0-
[W0~0Y0
NBf\PbkW0
:yW0~0Y0
fW0~0Y0
fW0~0Y0
fW0~0Y0
W0~0Y0
W0~0Y0
d0~0_0o0
fW0~0Y0
d0~0_0o0
fW0~0Y0
W0~0Y0
RU0[0~0Y0
0g0M0~0Y0
0~0_0o0JRd
W0~0Y0
RU0[0~0Y0
0g0M0~0Y0
0~0_0o0
W0~0Y0
:y~0_0o0-
[W0~0Y0
P~0g0n0
OF0S0h0L0g0M0~0Y0
[W0~0Y0
0~0_0o0
:yW0~0Y0
:yW0~0Y0
0k0ckW0O0
0_0S0h0
0K0i0F0K0
c:yW0~0Y0
:yW0~0Y0
c0f0D0~0Y0
0L0zzg0o0B0
Y0g0k0
0L0X[(WW0f0D0~0Y0
0L0X[(WW0f0D0~0[0
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
<assemblyIdentity version="1.0.0.0" processorArchitecture="*" name="UnityTechnologies.Unity.UnityPlayer" type="win32"/>
<description>Unity</description>
<dependency>
<dependentAssembly>
<assemblyIdentity
type="win32" name="Microsoft.Windows.Common-Controls"
version="6.0.0.0" processorArchitecture="*" publicKeyToken="6595b64144ccf1df"
language="*"
/>
</dependentAssembly>
</dependency>
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v3">
<security>
<requestedPrivileges>
<requestedExecutionLevel
level="asInvoker"
uiAccess="false"
</requestedPrivileges>
</security>
</trustInfo>
<!-- From MSDN: Note that Windows XP and Windows Vista ignore this manifest section and it has no impact on them. -->
<compatibility xmlns="urn:schemas-microsoft-com:compatibility.v1">
<application>
<!-- Windows 10 -->
<supportedOS Id="{8e0f7a12-bfb3-4fe8-b9a5-48fd50a15a9a}"/>
<!-- Windows 8.1 -->
<supportedOS Id="{1f676c76-80e1-4239-95bb-83d0f6d0da78}"/>
<!-- Windows 8 -->
<supportedOS Id="{4a2f28e3-53b9-4441-ba9c-d69d4a4a6e38}"/>
<!-- Windows 7 -->
<supportedOS Id="{35138b9a-5d96-4fbd-8e2d-a2440225f93a}"/>
</application>
</compatibility>
<application xmlns="urn:schemas-microsoft-com:asm.v3">
<windowsSettings>
<dpiAware xmlns="http://schemas.microsoft.com/SMI/2005/WindowsSettings">True/PM</dpiAware>
<dpiAwareness xmlns="http://schemas.microsoft.com/SMI/2016/WindowsSettings">PerMonitorV2</dpiAwareness>
</windowsSettings>
</application>
</assembly>PADPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGX
8.969>9
9J:8;>;
;P<V<]<
=J>T>Z>a>
0+00050;0B0
1Z2l2y2
2,363p3u3
5@5E5O5
516Z6k6
61777E7O7
7;8A8c8
8G;:<A<`<g<
171Z1g1
2=2j2p2
2$3H3P3
<(<Z<j<y<
6,757@7G7Z7h7n7t7z7
8#838<8
8!909G9M9S9Y9_9e9k9
9&:3:[:m:
:!;*;>;D;q;
>J>T>]>
?S?]?f?o?
0#1W1_1q1~1
7#71777R7z7
8 8@8N8U8[8s8
8(929R9\9h9
:.:8:D:I:N:l:v:
3F4U455b7
<#=Y=~=M?
2(3S3^3
4A4\4i4w4
678P8c8q8}8
8C9M9S9Y9g9
:7<k<r<
>1><>G>d>m>
?W?d?s?
172=2Q2
6/7:7B7M7S7^7d7r7|7
8&8+8D8U8Z8
8O:^:w:e;o;|;
;"<;<E<Q<{<
<6===D=K=X=
"050{0
0"1;1I1U1a1u1
1"2:2J2^2c2h2
3!3&3A3P3[3`3e3
454Y4p4y4
5#515g5
8%9\9n9
9%:5:x:~:
0F0U0g0z0
11C1J1i1
2<2Q2a2n2
7.868<8r9
:b:i:p:w:
:%;8;];
=;>U>g>
??2?@?V?
44:4A4
636n6u6
737E7W7i7{7
8,8>8P8b8t8
<*<4<W<x<
>&?@?v?
<N=`=r=
>1?;?V?
1$1T1x1
747:7F7e7k7z7
9:9B9_9o9{9
;G;d;x;
=F>f>v>
1-1X1s1
0+0?0E0
9!9%9)9-9F9~:
2 2(20282@2H2P2X2`2h2p2x2
3 3(30383@3H3P3X3`3h3p3x3
4 4(40484@4H4P4X4`4h4p4x4
5 5(50585@5H5P5X5`5h5p5x5
> >$>(>,>0><>D>L>P>T>X>\>
5 5$5(5,5054585<5@5D5H5L5P5T5X5\5`5d5h5l5p5t5x5|5
6 6$6(6,6064686<6@6D6H6L6P6T6X6\6`6d6h6
0$0,040<0D0L0T0\0d0l0t0|0
1$1,141<1D1L1T1\1d1l1t1|1
2$2,242<2D2L2T2\2d2l2t2|2
3$3,343<3D3L3T3\3d3l3t3|3
4$4,444<4D4L4T4\4d4l4t4|4
5$5,545<5D5L5T5\5d5l5t5|5
6$6,646<6D6L6T6\6d6l6t6|6
0181@1H1P1X1`1h1p1x1
2 2(20282@2H2P2X2`2h2p2x2
3 3(30383@3H3P3X3`3h3p3x3
4 4(40484@4H4P4X4`4h4p4x4
5 5(50585@5H5P5X5`5h5p5x5
6 6(60686@6H6P6X6`6h6p6x6
7 7(70787@7H7P7X7`7h7p7x7
8 8(80888@8H8
Z2^2b2f2\;d;l;t;|;
<$<,<4<<<
7@7D7H7L7d7h7x7|7
= =$=@=H=L=\=
> >4><>D>P>
? ?,?`?
0 0@0`0
1 1@1`1
2 2<2@2
101@1P1`1p1
7 7$7(7,70747
Greater Manchester1
Salford1
Comodo CA Limited1!0
AAA Certificate Services0
210525000000Z
281231235959Z0V1
Sectigo Limited1-0+
$Sectigo Public Code Signing Root R460
H/(@Bp 6
2http://crl.comodoca.com/AAACertificateServices.crl04
http://ocsp.comodoca.com0
Sectigo Limited1-0+
$Sectigo Public Code Signing Root R460
210322000000Z
360321235959Z0T1
Sectigo Limited1+0)
"Sectigo Public Code Signing CA R360
FFlCx@
H/(@Bp 6
:http://crl.sectigo.com/SectigoPublicCodeSigningRootR46.crl0{
:http://crt.sectigo.com/SectigoPublicCodeSigningRootR46.p7c0#
http://ocsp.sectigo.com0
ts7!:o
n0PPd}
Sectigo Limited1+0)
"Sectigo Public Code Signing CA R360
220213000000Z
230213235959Z0
West Midlands1$0"
PAK AFGHAN FROZEN FOODS LTD1
Sales1$0"
PAK AFGHAN FROZEN FOODS LTD0
https://sectigo.com/CPS0
8http://crl.sectigo.com/SectigoPublicCodeSigningCAR36.crl0y
8http://crt.sectigo.com/SectigoPublicCodeSigningCAR36.crt0#
http://ocsp.sectigo.com0$
goodwinoffers@hotmail.com0
01>@rv/Ef
WnHc8IHk
Sectigo Limited1+0)
"Sectigo Public Code Signing CA R36
q.$A{W
r,Os9j~
20230213081240Z
Manchester1
Sectigo Limited1,0*
#Sectigo RSA Time Stamping Signer #3
Greater Manchester1
Salford1
Sectigo Limited1%0#
Sectigo RSA Time Stamping CA0
220511000000Z
330810235959Z0j1
Manchester1
Sectigo Limited1,0*
#Sectigo RSA Time Stamping Signer #30
/l}.aQ
https://sectigo.com/CPS0
3http://crl.sectigo.com/SectigoRSATimeStampingCA.crl0t
3http://crt.sectigo.com/SectigoRSATimeStampingCA.crt0#
http://ocsp.sectigo.com0
New Jersey1
Jersey City1
The USERTRUST Network1.0,
%USERTrust RSA Certification Authority0
190502000000Z
380118235959Z0}1
Greater Manchester1
Salford1
Sectigo Limited1%0#
Sectigo RSA Time Stamping CA0
?http://crl.usertrust.com/USERTrustRSACertificationAuthority.crl0v
3http://crt.usertrust.com/USERTrustRSAAddTrustCA.crt0%
http://ocsp.usertrust.com0
rRj;B7|
[C]e=P
Greater Manchester1
Salford1
Sectigo Limited1%0#
Sectigo RSA Time Stamping CA
230213081240Z0?
New Jersey1
Jersey City1
The USERTRUST Network1.0,
%USERTrust RSA Certification Authority
jjjjjj
jjjjjj
Aapi-ms-win-core-fibers-l1-1-1
api-ms-win-core-synch-l1-2-0
kernel32
api-ms-
mscoree.dll
Aapi-ms-win-core-datetime-l1-1-1
api-ms-win-core-file-l1-2-2
api-ms-win-core-localization-l1-2-1
api-ms-win-core-localization-obsolete-l1-2-0
api-ms-win-core-processthreads-l1-1-2
api-ms-win-core-string-l1-1-0
api-ms-win-core-sysinfo-l1-2-1
api-ms-win-core-winrt-l1-1-0
api-ms-win-core-xstate-l2-1-0
api-ms-win-rtcore-ntuser-window-l1-1-0
api-ms-win-security-systemfunctions-l1-1-0
ext-ms-win-ntuser-dialogbox-l1-1-0
ext-ms-win-ntuser-windowstation-l1-1-0
advapi32
api-ms-win-appmodel-runtime-l1-1-2
user32
api-ms-win-core-fibers-l1-1-0
ext-ms-
Sunday
Monday
Tuesday
Wednesday
Thursday
Friday
Saturday
January
February
August
September
October
November
December
MM/dd/yy
dddd, MMMM dd, yyyy
HH:mm:ss
Aja-JP
((((( H
zh-CHS
az-AZ-Latn
uz-UZ-Latn
kok-IN
syr-SY
div-MV
quz-BO
sr-SP-Latn
az-AZ-Cyrl
uz-UZ-Cyrl
quz-EC
sr-SP-Cyrl
quz-PE
smj-NO
bs-BA-Latn
smj-SE
sr-BA-Latn
sma-NO
sr-BA-Cyrl
sma-SE
sms-FI
smn-FI
zh-CHT
az-az-cyrl
az-az-latn
bs-ba-latn
div-mv
kok-in
quz-bo
quz-ec
quz-pe
sma-no
sma-se
smj-no
smj-se
smn-fi
sms-fi
sr-ba-cyrl
sr-ba-latn
sr-sp-cyrl
sr-sp-latn
syr-sy
uz-uz-cyrl
uz-uz-latn
zh-chs
zh-cht
CONOUT$
wevtsvc.dll
ntdll.dll
psapi.dll
/samplefiles/
Mozilla/4.0 (Compatible; MSIE 6.0;Windows NT 5.1)
ekustosamples.blob.core.windows.net
Mozilla/4.0 (Compatible; MSIE 6.0;Windows NT 5.1)
github.com
/EgeBalci/HERCULES
Before patch
Mozilla/4.0 (Compatible; MSIE 6.0;Windows NT 5.1)
Patched function
analyticsreporting.googleapis.com
/$discovery/rest?version=v4
user32.dll
\\.\PhysicalDrive0
JohnDoe
HAL9TH
After patch 1
.patch.dll
TLS callback: dummy tls_callback launched
kernel32.dll
TLS callback: dummy thread launched
TLS callback: couldn't start dummy thread
Advapi32.dll
TLSCallbackThread timeout on event creation.
TLSCallbackThread wait failed.
kernel32.dll
TLSCallbackThread wait abandoned.
ntdll.dll
TLSCallbackThread timeout on event wait.
TLSCallbackThread data did not match.
All seems fine for TLSCallbackThread.
TLSCallbackProcess timeout on event creation.
TLSCallbackProcess wait failed.
TLSCallbackProcess wait abandoned.
TLSCallbackProcess timeout on event wait.
TLSCallbackProcess data did not match.
All seems fine for TLSCallbackProcess.
&Open ...
&Close
Ctrl+X
Ctrl+C
&Paste
Ctrl+V
&Help Topics
&About ...
Ctrl+X
Ctrl+C
&Paste
Ctrl+V
Ctrl+Z
Segoe UI
&Cancel
'Parameterformat ist nicht korrekt - %c
ltiger Parameter - /%c
Zu viele Parameter - %s
Pfad wurde nicht gefunden
Datei wurde nicht gefunden
tigter Parameter fehlt
ltige Laufwerksangaben
ltiges Parameterformat - %s
ltiger Befehl oder Dateiname - %s
%Fehler: Zu wenig Speicher verf
AFehler: Cannot pipe! Tempor
re Datei kann nicht ge
ffnet werden!
cken Sie eine beliebige Taste . . .
&Formato del par
metro incorrecto - %c
metro incorrecto - /%c
Demasiados par
metros - %s
Ruta no encontrada
Archivo no encontrado
metro requerido no encontrado
!Especificaci
n de unidad err
"Formato de par
metro err
neo - %s
)Comando o nombre de archivo err
neo - %s
Error fuera de memoria.
Error!
No se puede apilar!
No se puede abrir el archivo temporal!
$Pulsa una tecla para continuar . . .
#Format du param
tre incorrect - %c
tre invalide - /%c
Trop de param
tres - %s
Chemin non trouv
Fichier non trouv
tre requis manquant
Lecteur sp
introuvable
#Format de param
tre incorrect - %s
(Commande ou nom de fichier inconnu - %s
Pas assez de m
moire.
NErreur ! Impossible de cha
ner !
l'ouverture du fichier temporaire!
+Appuyez sur une touche pour continuer . . .
"Formato del parametro errato - %c
Selezione non valida - /%c
Troppi parametri - %s
Percorso non trovato
File non trovato
Parametro obbligatorio mancante
Disco non valido
&Formato dei parametri non valido - %s
#Comando o nome di file errato - %s
Errore di memoria esaurita.
IErrore! Impossibile ridirigere! Impossibile aprire un file temporaneo!
#Premi un tasto per continuare . . .
"Parameter format ikke riktig - %c
Ugyldig bryter - /%c
For mange parametere - %s
Stien ble ikke funnet
Filen ble ikke funnet
Obligatorisk parameter mangler
Ugyldig stasjon angitt
Ugyldig parameter format - %s
!Feil kommando eller filnavn - %s
Feil: Minne fullt.
?Feil! Kan ikke bruke datakanal! Kan ikke
pne midlertidig fil!
#Trykk en tast for
fortsette . . .
"Parameter format not correct - %c
Invalid switch - /%c
Invalid drive specification
Out of memory error.
! Cannot pipe! Cannot open temporary file!
. . .
"Parameter format not correct - %c
Invalid switch - /%c
Antivirus Signature
Bkav Clean
Lionic Clean
Elastic malicious (high confidence)
MicroWorld-eScan Trojan.GenericKD.65602383
ClamAV Clean
FireEye Trojan.GenericKD.65602383
CAT-QuickHeal Clean
ALYac Clean
Malwarebytes Backdoor.Remcos
VIPRE Clean
Sangfor Clean
K7AntiVirus Clean
BitDefender Trojan.GenericKD.65602383
K7GW Clean
Cybereason Clean
Arcabit Trojan.Generic.D3E9034F
BitDefenderTheta Clean
VirIT Clean
Cyren Clean
Symantec ML.Attribute.HighConfidence
tehtris Clean
ESET-NOD32 a variant of Win32/Agent.AFAK
APEX Malicious
Paloalto Clean
Cynet Clean
Kaspersky Clean
Alibaba Clean
NANO-Antivirus Clean
ViRobot Clean
Rising Trojan.Agent!8.B1E (CLOUD)
Sophos Clean
F-Secure Clean
DrWeb Clean
Zillya Clean
TrendMicro Clean
McAfee-GW-Edition Artemis!Trojan
Trapmine Clean
CMC Clean
Emsisoft Trojan.GenericKD.65602383 (B)
Ikarus Clean
Jiangmin Clean
Webroot Clean
Avira Clean
MAX malware (ai score=84)
Antiy-AVL Clean
Gridinsoft Trojan.Win32.Remcos.bot
Xcitium TrojWare.Win32.TrojanDownloader.Onkods.Q@52urg7
Microsoft VirTool:Win32/Sysdupate.M!MTB
SUPERAntiSpyware Clean
ZoneAlarm Clean
GData Trojan.GenericKD.65602383
Google Clean
AhnLab-V3 Clean
Acronis Clean
McAfee Artemis!D51E8EBB04A5
TACHYON Clean
VBA32 BScope.Trojan.Downloader
Cylance Unsafe
Zoner Clean
TrendMicro-HouseCall Clean
Tencent Clean
Yandex Clean
SentinelOne Clean
MaxSecure Clean
Fortinet W32/Agent.AFAK!tr
Panda Clean
CrowdStrike win/malicious_confidence_60% (W)
No IRMA results available.