Static | ZeroBOX

PE Compile Time

2022-10-28 12:15:53

PE Imphash

8f54c7f89ab7fb80e3cbd057af48cb19

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00001000 0x00062000 0x00029000 7.97676754401
.sedata 0x00063000 0x000ee000 0x000ee000 7.56030268598
.idata 0x00151000 0x00001000 0x00001000 1.3069981478
.rsrc 0x00152000 0x00011000 0x00011000 3.43963701188
.sedata 0x00163000 0x00001000 0x00001000 7.98415426718

Resources

Name Offset Size Language Sub-language File type
RT_ICON 0x001520e8 0x00010828 LANG_CHINESE SUBLANG_CHINESE_SIMPLIFIED data
RT_GROUP_ICON 0x00162910 0x00000014 LANG_CHINESE SUBLANG_CHINESE_SIMPLIFIED data
RT_VERSION 0x00162924 0x00000418 LANG_CHINESE SUBLANG_CHINESE_SIMPLIFIED data

Imports

Library KERNEL32.dll:
0x5512ae HeapSize
Library USER32.dll:
Library GDI32.dll:
0x5512c6 SetMapMode
Library comdlg32.dll:
0x5512d2 GetOpenFileNameA
Library WINSPOOL.DRV:
0x5512de OpenPrinterA
Library ADVAPI32.dll:
0x5512ea RegCloseKey
Library SHELL32.dll:
0x5512f6 SHGetMalloc
Library COMCTL32.dll:
0x551302 None
Library oledlg.dll:
0x55130e None
Library ole32.dll:
Library OLEPRO32.DLL:
0x551326 None
Library OLEAUT32.dll:
0x551332 SysFreeString
Library MSVCRT.dll:
0x55133e strncpy
Library IPHLPAPI.DLL:
0x55134a GetInterfaceInfo
Library PSAPI.DLL:
0x551356 GetMappedFileNameW

!This program cannot be run in DOS mode.
.sedata
.idata
.sedata
7_!~o
M.9RDM1q;
GE,GTN
R:4Wm\
G8(Hys
}2&]^qU
sIo~l+j
Ao6X4K%s
vgNHCY
1fP8W{h
}=6 E
vP<HEq
/5iQyD
]wFbN8
f;9d$Z
u3rI.K~!k
l(o%U$A
O&r1Hd
LTu!+N
9hWBy
EAS{{y
]a\gi1
r!3$<\T
vfCJvQW
-2GSH-=
jo|2\ho
m>>F2d
EO-l]$
3[=QhQ
!)^s7
#2vK33
R/vmT
j5p\99
P&9c(c
{5q(0t
\96Eez
k%u-D
J&zh"2hd
z=PYbr
P*NgPo^
P3B1r^%
2%CFTs,$
13AtB{
sLdPx7
4+g;[;=
5kFz?a
{Y)+xJ
@4*E:u5
'hvlB;G
huy*1H
H-P`W
#bR&r~
:~w*-alu
H(Vm}AJ
&:$FAn
O :E34
ObGjp'
oY`"C.m
u>7nf,
[BgAzr
Q >1D|
\w`DDJ
XR7`F-
y4G1).B
kj=*lcq
hB,"KV
;8v72b
Ik)Cx,
fa\U@c
#X$cn(
0r[_7a
e|KTs[T
X$bNi+
dH9sH/"x"
W&w[Jax4^;W
4+'4^Cq
=.pqP[
<7:0x!
J8*n}4#8@:4
Hw_icJ
g*Ov]&[
whF#G>
V'*d8v4{
Ql&05*
5&l9mM:
hgd[fd%p
,\ vC(
OX|AlK
X:@,WB
';4p63V[Q
OL4_Xk?K
'VzDY-a
i{:Fs"E
igBEQ;
sTFM&9
Up=uy:
Wv]7 n[
A^&E+Fzp
JxD\vW
@U4dL%e-I
Z_udk-
rlB}If
frC2QV
&X8i\c
Ok'0A3`
\T&To@
`k=JTQ5e#j
J5t l}
f]LC>%
>x4f`*
RgGl[cU
2JR$J|'E
w@d\nGdR'
}Q03cM
kenQkL
c|Z)@;[
4I'bra
'b4eHj
AI<`=>T
posr_E
Ky39<S}zfd
]<m,yb.
gO-yB+&
Ge!3ko
CIO$!lJ6
w\|6jzm1
*FDbn\
kn7"fR
b%u;b&
5l f#u
zryAP(
K#KL$
qaX"+?
F'zBe$
#wV>N,
A?wGZr*Z
9ox#4Y
$i#{"J
=.?It7K
_JtA#yH
z7p$%:
}%\Kl7
<>jjb:H
)~d3C6ce
`SDu?H.q
BARN|.8
1P8|*)c
.o\^zF@pgL1p
!63E\*
$NL.T{3
qA`.A^
yk|C=5G
[UioF7!
6rchG36
)gHiVQU
yD.QQA
P#Ly|^
Vr(lju
y"LA]O
z0e_[c
lvv^f.|k
r3f=K?
GjKU>j
I%:'_ $
Ij8IM
nbQ|ia
|<v,gM%
wzB]LK
y\pC$J
xB8kz5=
4k||Ju
}x`]("i
z.r:hE
ri-l P
Hbn'@$-<
]F{?L&s
?Vi4NR|
[df9"ZFB\
]mymFv
gdI TM
E1+`vUH2
]nE[(M
3TGw90.
yC["POD
I6xO~z({
ME6h6Y
bo'{u'
3k2_lX
`Dm)~U]
:T|G'1X
9Pw&IsV7
=1E+INf
Zg](QA
%3u}l3z
!'lcWXx
U+k8"wOKo?
)`is7Qf
@NUwg~
5<s*&/
8[i(6mu
lA<a!U
{Pw/*'n
q;}voe
I.etz
ICPmJ+
mNW^!bl
76:jl
UGWnbp
l&jc:1
E%h$ps(
@;D3k*
w/Gvm?{.JA
K]K1_(
q={Uhb
caJIds+
R#onrU
v=\]0
\LX-Hf
[8 #<,A
H#`A(?wR;Q
Yf{JZ,
-`=vzu
k;Xr!:
waWrr0
.1?f_~
J-V!wm
t+::t
GIN!>$
uU*XRd
Crck)
-*t5Tk
#Sn"?VZh
e3Bj;]
JC5,0s69
[W(.rUL
X]8C]yE
->q3+Ox
53e}Q1r
gfi\!D
F]CJe\PU
? )_8,
npep?V
.=+$@}
|auigOA.
eI242?
C;95S
:`zHq;n4
:v`e9' 3
`/ mRY^S
Tqy|mh
)<C\Hx
;,jpV&
Er;<)?
{3_h`>
/~rs-c
x7`r/|i
%<moeTq
~$QTcES
ZOqjpXy+
y>W>g8U]N*}g
ad\Z.8
*8{86Y
gWy$g3m
5||Zt}
,f#lz
bI|PXI
QW5wD%
!>i3f
UL]n6.
u?@.x>\
`zh4m)
OH0|r#N
3R9ia.
)`gnS
OOl't==Yj)
x^Hb0eO
eT4j0dKc
Nf?;NV
fY5JPl
QmFdLqq
KB/vy%{iXAJ}
4Dvx6[?`
6lo]Rdx%g
44kTV5
p4A@0B
A#.R5S
1tJt{H
?6//Bwm
$*3dc_
>!>E%<
/6Lgj|
N(u%pC
rkj{ova
dXfM}n5
;L$,wv)L$,
/6!{3@
W$rm|O@s>G
}"s2:(
Og+$Q
4'NFDu
rm|OJx
>f(l=,
)ufyB{
fM;,t
rm|O7R
fMrcvL
*I}Z>&
qps03*E
)ufpsj
[v^rOZ}
[TF#<C
{yJ~$W
{ y=eU
'D[1y<
5OP_xh
7/NPXhP
Msd+J6
/6!h~eB
103*=p
{]iM<-@
aiM~qK
x03*Eh'D
W_qpsj
v4d;,W
h03*Eh
HAy$'Y
<43Eo1]
yG<Pm|O
aH^;sF2q
K"SVBs>
GetModuleHandleA
GetProcessHeap
HeapCreate
ntdll.dll
RtlAllocateHeap
LoadLibraryExA
CreateFileW
GetFileSize
ReadFile
CloseHandle
VirtualProtect
GetTickCount
GetProcAddress
RtlFreeHeap
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DbgBreakPoint
DbgUserBreakPoint
DbgUiRemoteBreakin
kernel32.dll
NtQueryInformationThread
NtSetInformationThread
user32.dll
advapi32.dll
hid.dll
iphlpapi.dll
VirtualAlloc
VirtualFree
SetThreadAffinityMask
GetCurrentThread
ExitProcess
GetSystemDefaultLangID
GetSystemTime
SystemTimeToFileTime
WriteFile
GlobalAlloc
GlobalLock
GlobalUnlock
GetCurrentThreadId
GetExitCodeThread
OpenThread
TerminateThread
SuspendThread
MultiByteToWideChar
WideCharToMultiByte
IsWow64Process
GetStartupInfoW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
CheckRemoteDebuggerPresent
CreateThread
ResumeThread
GetThreadContext
SetThreadContext
mscoree.dll
mscorwks.dll
mscorsvr.dll
KernelBase.dll
mscoreei.dll
clr.dll
diasymreader.dll
SECheckProtection
SEGetAppStatus
SESetAppStatus
SEGetLicenseUserInfoW
SEGetLicenseTrialInfo
SEGetNumExecUsed
SEGetNumExecLeft
SESetNumExecUsed
SEGetExecTimeUsed
SEGetExecTimeLeft
SESetExecTime
SEGetTotalExecTimeUsed
SEGetTotalExecTimeLeft
SESetTotalExecTime
SEGetNumDaysUsed
SEGetNumDaysLeft
SECheckHardwareID
SECheckExpDate
SECheckExecTime
SECheckTotalExecTime
SECheckCountryID
SEGetHardwareIDW
SECheckLicenseFileW
SEGetLicenseHash
SENotifyLicenseBanned
SEResetTrial
SEGetProtectionDate
SEAddMemoryGuard
SEDelMemoryGuard
CreateFileMappingW
MapViewOfFile
MapViewOfFileEx
UnmapViewOfFile
LoadLibraryExW
LoadLibraryA
=j&&LZ66lA??~
}{))R>
f""D~**T
V22dN::t
o%%Jr..\$
&&Lj66lZ??~A
99rKJJ
==zGdd
""Df**T~
;22dV::tN
$$Hl\\
C77nYmm
%%Jo..\r
>!KK
55j_WW
&Lj&6lZ6?~A?
~=zG=d
"Df"*T~*
2dV2:tN:
x%Jo%.\r.
t>!K
a5j_5W
ggV}++
Lj&&lZ66~A??
bS11*?
Xt,,4.
RRvM;;
MMfU33
PPxD<<%
Bc!! 0
~~zG==
Df""T~**;
dV22tN::
xxJo%%\r..8$
tt>!
pp|B>>q
aaj_55
UUPx((
cccc||||wwww{{{{
kkkkoooo
gggg++++
YYYYGGGG
&&&&6666????
nnnnZZZZ
RRRR;;;;
[[[[jjjj
9999JJJJLLLLXXXX
CCCCMMMM3333
PPPP<<<<
~~~~====dddd]]]]
ssss````
""""****
2222::::
$$$$\\\\
7777mmmm
llllVVVV
eeeezzzz
xxxx%%%%....
ttttKKKK
pppp>>>>
ffffHHHH
aaaa5555WWWW
UUUU((((
BBBBhhhhAAAA
='9-6d
_jbF~T
11#?*0
,4$8_@
t\lHBW
QPeA~S
>4$8,@
p\lHtW
+HpXhE
T[$:.6
00006666
CCCCDDDD
TTTT{{{{
####====
ffff((((
vvvv[[[[
IIIImmmm
%%%%rrrr
]]]]eeee
llllppppHHHHPPPP
FFFFWWWW
kkkk::::
AAAAOOOOgggg
tttt""""
nnnnGGGG
VVVV>>>>KKKK
yyyy
YYYY''''
____````QQQQ
;;;;MMMM
ccccUUUU!!!!
6bad allocation
_except_handler3
MSVCRT.dll
GetInterfaceInfo
IPHLPAPI.DLL
??3@YAXPAX@Z
strncpy
wcsrchr
??2@YAPAXI@Z
strncat
_wcsicmp
_wcsnicmp
__dllonexit
_onexit
_initterm
malloc
_adjust_fdiv
GetMappedFileNameW
PSAPI.DLL
DeviceIoControl
DeleteCriticalSection
GetModuleFileNameW
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
GetModuleHandleExA
LoadLibraryExW
MapViewOfFileEx
GetLogicalDriveStringsW
QueryDosDeviceW
KERNEL32.dll
wsprintfW
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
MessageBoxW
FindWindowA
GetDesktopWindow
GetClassNameA
GetWindow
USER32.dll
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegCreateKeyExA
RegSetValueExA
RegDeleteKeyA
ADVAPI32.dll
SHGetFolderPathW
SHELL32.dll
Af-yFv
fTfVfX
strncpy
_onexit
'3s`r^#
MSVCRT.dll
??2@YAPAXI@Z
MSVCRT.dll
_except_handler3
GetInterfaceInfo
IPHLPAPI.DLL
MSVCRT.dll
??3@YAXPAX@Z
MSVCRT.dll
MSVCRT.dll
MSVCRT.dll
__dllonexit
wcsrchr
X-*=5
MSVCRT.dll
malloc
MSVCRT.dll
_adjust_fdiv
_initterm
MSVCRT.dll
strncat
_wcsicmp
MSVCRT.dll
MSVCRT.dll
??2@YAPAXI@Z
_wcsnicmp
MSVCRT.dll
MSVCRT.dll
MSVCRT.dll
MSVCRT.dll
MSVCRT.dll
__dllonexit
MSVCRT.dll
_initterm
MSVCRT.dll
GetMappedFileNameW
PSAPI.DLL
_wcsnicmp
GetMappedFileNameW
PSAPI.DLL
GetWindow
KERNEL32.dll
GetLogicalDriveStringsW
QueryDosDeviceW
KERNEL32.dll
MSVCRT.dll
!uGt[O
KERNEL32.dll
GetModuleFileNameW
UnmapViewOfFile
KERNEL32.dll
USER32.dll
USER32.dll
GetClassNameA
MSVCRT.dll
USER32.dll
OpenClipboard
USER32.dll
EmptyClipboard
SetClipboardData
USER32.dll
CloseClipboard
KERNEL32.dll
MapViewOfFileEx
wsprintfW
MapViewOfFile
KERNEL32.dll
strncat
KERNEL32.dll
wcsrchr
CreateFileMappingW
USER32.dll
USER32.dll
KERNEL32.dll
DeleteCriticalSection
MessageBoxW
strncpy
KERNEL32.dll
GetModuleHandleExA
MSVCRT.dll
wsprintfW
USER32.dll
_wcsicmp
MSVCRT.dll
KERNEL32.dll
LoadLibraryExW
ADVAPI32.dll
RegDeleteKeyA
ADVAPI32.dll
RegCreateKeyExA
ADVAPI32.dll
RegSetValueExA
ADVAPI32.dll
RegCloseKey
ADVAPI32.dll
RegQueryValueExA
RegOpenKeyExA
ADVAPI32.dll
DeviceIoControl
KERNEL32.dll
MSVCRT.dll
A03*Ea`
USER32.dll
USER32.dll
MessageBoxW
SHELL32.dll
MSVCRT.dll
SHGetFolderPathW
USER32.dll
GetDesktopWindow
USER32.dll
FindWindowA
USER32.dll
FindWindowA
USER32.dll
FindWindowA
FindWindowA
USER32.dll
gova,?
DgMQBU
)\M`c.9
/6!`fA
F103*]
Wz)+l-\
@`csSR
;#aRz<-X
l&V1d-
zd^u9X
f[#D=V
H2.N8Qb`
8QQ4(K2
.okPC:Qz
43+G;Q^
$T;Q_J
8Q|cv:
d\>Q;%
6Q7o8;
z7QX@5
8Q6]*Bc$t
D*\;Ql
_;Q{np7
6QIyAnt
7Q@w-M
8QV~;
8?Q; S
Gh'?Q
b:[;QA
N"*C:Q
b>So<QE
=Q%J.j
$]6Q[u
Rv7Qq8
@`c{|r
0e82X;
\+_\/
DJs.sw
>)aMBS\
%[z>@
i\u{|=
G +.+=@
Z>7`0l
hPB7wh
,njd/Y
-;#*Ws
EJXFw"
x!:8MH
:5qg(J
1~T-rH
1+p}5J
Krm|Of
qpsjf!
udfBfS
5$WY_^
ovao93A
qphB/A
cmEToM
103*WQ
$fC}K|3.
'1r#@}
v3(-fQ
/6!`R3
qpsjIW
@heJDr
#^WF`I
V?ShGv
nbl#p}
qMiZ!Hf
4A>uH1
Uzk"g`
]eY{#Q
3VC;8$1
H\N_CE"v
H@qdE_
HV~;7Q
:&*IYY
YUM)B$
mGm}1G
zqpsjYo
"rV;Rx
bh0,<y
OB6nHY
+`lOCR
B^lU@*]
P^L4c`
pMqbu>h
pMm^5}@
~:ew/85
6qpsjfKy
7uZ/I2ni
BmD0|)
-eWCX
qpsj:z
Xju("]Ks
^9NV1KE
EUoWy\
wOVpMj["
Dl(3"S~
#"rUr3
jNfz-%
g0>|pH
}UPg"d
#o`)D$
#/(BjcK
-h+VI8
#tfJ[U
KNgF9"
9te&[g
)yj}:6
)_PD03R
}3:l_"]
U*D-fq
]u@P0H+
gOW2T)
@`c"ps&
vL6T?)
`)89[f
* j^y6[XPc~
7[%)h)
q!d>=[
z9[2g,~
V9[Y'9
iw&4%9[e
hXg!|9[k
7xO;[;
Ki>9[6
5[3VC;
T;MP:[ZJ
r>P:["
`r f=)|b
%PoOw_bK1
LVs_br
yaYbR4
IYb7l"d
vVbbJ-
h+q1z]b
BxhXb&
&"D3K\b
eVMYb!
3hi_Wb
[bJDFQ
CXbw8^
]bOG@cMX
]b@TZ>LJ<
$WbZX&`
r/n#!Yb>EW
;CC_Wb
GdeYbA
cWb~5X(a
}xYbish
"u@RAFXbGjNc7y
xpWbcJ)
kWboY~Y
d$ f9P
gXYzU
uLMb*,y
%P(ioM
FlDeoM&
HGM'XX
hoMrc*ff
#u^<cd
'?rm|f
d|WR^O
;w%_jQ'
(+qXh'
R}"\g
7q|h>xd2lw
e2e}8P
,L)L0Q
,F7fm0
2%D6W}
903*Ef
3*EwQ
fApQfQ
103*`f
KsIr1{
/Q)WnM
){l3`{R
)103*f
qpsjX{
f,8SLS
{lo0|s,
103*Ef
%TSfRf
u=@X\R
#vo^xJ
L+qpsjf
te<gpsj
W,[@;
YoZ}jK
TuX;2J
d@7eu9
1H}9?.
xpSN%y
+;#-!z
@ doN8
>yUDpcy
J)pB!
-EgoD5
u)^Y{I
Xz03*E
,w9eb-
,"2vk1
,5b(pI
b|b_HN
-hgA9H
9]t\'\m
qps5fm
rm|O[3
w^h&]G
+o@<6h
CJ>v''
C2T%+?
7a1ud>
Jrm"],s
5$Gf}`
YbiL);e
rm|%0K
D$ fSf
RL*5i%0
6ZTR.'
fVIew
Hbl6,+"
XahfK'&
103*%#
*8)qGM
5psj:j
+SOe?
"]h=gy
zUh'#G
fo1"5B
q=^aRe
L./6!`
$=odN?R
`e)^wO
'}va%Hr0
xlo9*=
nyXhc(G
X/BZXt
@!3C]E
&'103*
J|Bf,\
$Bz {M
`ZfZf+
4?v>eE
%p!(~~I
|@\">:
c 6{CK
j"hFI'
x"tf7P
v$]^B2R
NX=_P1
f}zSf
AUtv@s
B9R*wT
!kouf-
C&$:>
ova~|n@
103*h/
*qbu-s
V((grm|O`
Na/it"\S
zk2n*E
6MxZca
@cIxGc
qPxjj(xp
1TIx/J
Kz4\c}Hx
m@3o.Jx
bHx)^G
Y_5Mx"
z}Kx#^v4
U>]fMx
`b"]7N
UXIx
H*IhQx
'o!QHx
!J#'OMx
:x6Hx3I;
87Mx]XpX{
Ps~cPx
PNNiJx
gg3Mx*
JxrOzw
sWIxw8^
;5_m|O
Eb93*E
03*EO'
tg!k0q
C4GR ZN
&Q\Zv@
fJvwn
!/"4^6
g> m_s
"]'yCW
cyZ"89`
+V,r/h
d]gJ'9
c\Zt?
p6!`hgo
Px,]t@
N"]Kk$
&`k9s&
/6!`;XT
)103*P
/6!/Ji<
c03*E?=y?
M/d5&n{
S6M:)w
5$hSvD
%Tq&p$
,7N8ih
5103**5 .
GF4T cOg
$,co1"5H
SuHaI|
qpsjP{
qkdSmf
>Q,6#v
2$J|9#
i'29#B
ge4#,Y
(j_4#Q
4#kmgN
$5#YJ-
7#D ">lw;
T+m,6#
k5#AF-
,6#~Iln
%i5#1s
wKa$m9
ZDaS%j
I:V,r9
I9JT~<
]?oa_sK>P!}Z
03*EhPQx
qI2V'b
z[v#(W
zU=;s?
b*V+RJ
==d? ?qq
Bt0,]X
i4Yd*&KQv
Q&E\Ax>
q63HY;
D"E.m;
)H-^mi
UXD"UNF;
;O7":W
65&CEX
AQA65W
h$ l.sY
*EcvFX
mi_A2Ey
gyQ"xP!btLh(R
nyompD
9UV=T]
W75Nk3m
)HX:LB
fB|&}$
4IcCX:
cAryu
B@V.!3
sb{Z{b
^v(QW<
#1X{EY
Eo'Zl(
2{3y,R
t*g~h?
FQu2cf
}L4gu<
RE103*
W*YA[3
XeefFl
|;/X="
k%x}h^
T^qGpO
JT!j2+
%DxU;3d{bl?
[9hLR
;nyX)a'
7QndjR
C#oB\<Q
2-<svI
55$W2M
,/103*e=\
Yqpsjf
$oT?8f
M<-@|^
ZC!H%T
IHgv'D
)H$"xC
$({psj
1#;X{r
5$W^6\
?/I)>s
D~h*E
qp)s0r
v(GA[T
/6!&!H
%k4nyP
x"AuR6;
66!`K^Z
8oKrPU
F*oFf*
~E\Ah~U
R=>xWX
3MctV"4/
+J%?(S
C2vPJ2
r.9D3/
]&`k#]
{j=LB
8+jxza
OG@cz=
L"\gY
rm|$"}H
/6!Xc`
E5V)C+nV
JHW8d
u6$Wi!
lT%&84uC
xzOHZ\
xsHAS(_Z
T)2)k.
R 76!'
gU9^,^
rp9s~[
qt[MP
2M;c{.g
{RqJ)9B
iz']oj
`)cn7qZ
Jwr`".
.hTm|O
Rz6Asy
L'@ +>
7,YF~eLZ
qQ9TW-
uXsiRV
BN"KtX
rmQOmG
>q&)KH
&;SKWi
Z!iUh-
}LF~W|
k|eKg 0
K!ZFf'7J
0thfz>n
QycR,p
}0lh1^J
qp4et<
BT) !3
/6!TRpG
xK?h2H
Q06S^{
65pg Y5
nnpWZ52
E]%N|a
9t\h&V
JU<tI1X/2u
&Q`^pG
oX5dLo
WY03*E4'0
V}0SD#v
ZQB!t1@YI
K&ORgj
rm|ALi
s<tG7\uY
Ve <qH
36%2BR
EPm'(L
%X?Jy9nr
+B<:uG
XEHIr;
OL.{\A#
!z `Zg_L=
mkr6T+
sYu.>~
qfdX6T
JX?Mc=
FQG"9"Do
alWT+
N51r"
~Lhf%J
[+vth7d#
,O$ydCL
N8\h+(J
HVgo5&
rm|OB@uG
ahfm7dI:
iqo/ K
ZLb06!`
BKez7x
vp|_Gu
wju\v#
4Gn%O%
(}bLu1
O9Qm|O
[P} &p
_TR<Fd7(S
YW*<dhY
MFdF7b
ZCLSV'
J]D|Qx[
T!8SIh
fAs0fA
VB/6!`~
{bDf|?
X!|I|*
<[Ky^A8
JbIWnR
GVa\T+
.ggMb]yN~eh!
34ai%vh|
/`Mcid
C=`}!C
Zzhi#a I7x
oM`itJx
k`itJ>
a.`i_hp
)[nqfg`iC
gNdAOi+V
J}dole8
6PI|.oVT
*eVnyX
&Q`BUs
2'%}<d
S'xg3D
/6!QU`
dy,u@Od
'bzN_i
M\~"bCLs
+k<ooK<
?Fmt'p
ye"%kW
D7\{
u\w^
%Tc;oif
wRP]<T
Z+Sk.H0
Ls;6!+>
GuY$I#
!U2Qh3
tknVZp
6#yQ"cu
,XIt;>
a<Ty<V
>((iep
p(h[WU
~5yh~z
qwo/ ~6
03*E0p^}
"4}e
uu\_-Mi
gGW?ZT
=hlTE9`
@ETpntw>
pS)dgT@i
</6!`!
oLO78i
_<?t*i
8dQpmv'
H>Hb0D
w03*335
+v%R})
Y&=?GOk
\|Q0r<d
OuHj;e7
=$LpKq.2
ZX!OvS$5Q
%Vk\O"
H0J)&C(
+PL4xW
oZr),zuG
>+vKIVy
st6Cc ~!
oZg-hGH
`|-4s6
$jsK"^
]dwshz
|xZN<SL!G
mb"?nk
O Q8T
7YL~`%
W^ Wt
U\:zh
x|FZN|{
F(5aHZ
M9+X:k
DJ67')
!b-[6o
`aA%mW
7*:nJd
iCa5~Q
xB^V?K
dmWPyU
72T<&t
|scS-VF)
@k?76+
NGKm7j
a+7F#Y
cwP%/?{V
fq|qvA
z_vO$;@
G.n*ZP
r)-/-;
`~R|J6
USW>}4o
TF:t{zJ
<"hn)^{
<7L0$9zjVC
#8eIJK
kL~2*5
Or'#cN1`
~YV>l!a
>-X`gJ
b\\_@s
@rHo.u
y>c32U
yhKHH*~
~vm([
1n33B7
x5mhx
/l8F%kA
7f!Q{
*4 u}St[
^t_^X[
z7S)x@
_u21dX1
;G,~3O=1
Mz7?1A
+J0oULR6
2gPq?0z
UC~r_K
!-{!be"G
p+*txc
z(>N%#
.*_aceQ`
(|wWx?xQ}
7>uoPV
BM(Eq(s
Lc:5d]
dL5)31
b|D^e&
dIb+%:f
7KV:%"
S&U/)i
 X~QNJ
v!=RE
y'&t%{
3^U12T
l5W51#
#rlhi]d
C]R,MI
(4~cdJ
+jZNu)V*
_^ne4_DL*
m[d,h[
;Nw'DY
nc"I2W
*;Sp*(HTd
)~'[M[
@dU)![
bZi&{a2z$0
PJA>$
[OC[~$t=[#
E}Xs1_
B!'pUfr
;L`nT%b
:Wkn:.
36f[$c
l8Op/E
t)TSr~
Y6[aU$=
+Y'4Nky
<(E1Yi
fDYmFV
xD`3>:
v]",2P
i/vL5JO
=e)d*vl
f2@,2E
A[\^{
J[b25
`_2u],7
|kyy@2
d;}XNo
=l3kSdW
jo=;;62E
pVx=,0:
&4bNe*+a
jO?"pB
}'Yj71
O1TDtc
%JA+2V
8i<FT*
%Swt_>
Xwq{)ve
_X kQP
b0(>FD
jX5J?!
d6]L1r
6=fJ ?
-Wb5z&
>c-[-Z7F
IhIW,1
wM_%(`
XpDFNo
T0KC]H
*:wNtsi^
1[[/=I
dxRQ:&
sD(m~$[
3v`F8d
jMcpP<
!J(#.ke
t9J[pB
mUT>:b
]g3gEzTHg
W<G&[T
Po9!E`
lo&lM{
"4vi4;
-3}A73
_.UWUGv
`U3Cs9B
9VQQW/
ajn6F3
U)tk6xY
! :?zK
G5PTUU3
MPVg*>
KE*Y/=\
_cvl_6
e&Qc/D
~`mY"P
ut3+fF
,6QwsORv.Y
zrYq);
d{,y~y
wGqvP5v0
&>}4I1{
!gT^k7
MWdy9
u'o^Ak
wwtg[~
(p&`@Q
-^glhC
?d_kEl
>_7#r)
;fOCNb
bpFdT}
7{}}{V
$L?UZ'W`
okY`2?
Qr{?fy
c3%1H/Msv
~SAAA;6
vJ)Vy/
ov#Ng0Ni)
4'A|P&S\
N/M4/{&
<b;kzr
*QB:;j
<-r!<e
7az|hh5
BV2?]
yRU{vr
!@ "vZF
2+5"54
d/oX~G
M>H-\4y
Rg{W$~
H[F-=u
4=i^7UE4J6
H@_"BZ
P%16(^
N6DXfg
~b[u0V
C()>s(C?
1ORQE5
,{7@VY
96-*Z)E(WgAG
-8qZb8
Ys_QMc5R
[7$wu<
i fU_E
<v64\]
ar49[X
,jo\Zr
1#a5Va
CCj .@{b^
."L&zYP}
HR~*vs
GetACP
1KERNEL32.dll
MulDiv
HeapSize
SetHandleCount
%HeapFree
GetFileType
RtlUnwind
4GetStdHandle
GetVersionExA
PSleep
HeapDestroy
LGetOEMCP
GetCPInfo
HIsChild
IsBadWritePtr
GetMenu
TlsAlloc
lstrcatA
LCMapStringA
GetFileTime
?LCMapStringW
GetStringTypeA
GetStringTypeW
3PatBlt
GetFileSize
LocalAlloc
&IsBadCodePtr
8GetVersion
$SetStdHandle
SetRect
HlstrcpynA
CompareStringA
GetTickCount
CompareStringW
,LockFile
YReadFile
TlsGetValue
FindClose
/UnlockFile
/DPtoLP
RaiseException
,LPtoDP
TerminateProcess
?lstrcmpA
GetCommandLineA
TlsSetValue
lstrcmpiA
GetProfileStringA
GetStartupInfoA
SaveDC
Escape
lstrcpyA
,GlobalFree
LocalFree
+GetFileAttributesA
LocalReAlloc
#BitBlt
GlobalReAlloc
*lstrlenA
GlobalHandle
GetProcessVersion
CopyRect
GlobalFlags
GlobalAlloc
WinHelpA
SizeofResource
GetEnvironmentStrings
GetTimeZoneInformation
SetUnhandledExceptionFilter
FileTimeToSystemTime
UnhandledExceptionFilter
EnterCriticalSection
FreeEnvironmentStringsW
GlobalAddAtomA
;FreeEnvironmentStringsA
SetEnvironmentVariableA
GlobalGetAtomNameA
GetEnvironmentVariableA
LeaveCriticalSection
GetEnvironmentStringsW
DeleteCriticalSection
FileTimeToLocalFileTime
WritePrivateProfileStringA
SetEndOfFile
FindFirstFileA
!oGetVolumeInformationA
(aGetFullPathNameA
FlushFileBuffers
SetFilePointer
GetThreadLocale
DuplicateHandle
"]GetCurrentProcess
GlobalLock
GlobalFindAtomA
GetModuleFileNameA
1GetLastError
GlobalDeleteAtom
SetPropA
InitializeCriticalSection
LockResource
HeapAlloc
0GetCurrentThreadId
FormatMessageA
Y*LoadResource
WideCharToMultiByte
GlobalUnlock
FindResourceA
InterlockedDecrement
GetModuleHandleA
GetCurrentThread
ExitProcess
WriteFile
SetLastError
InterlockedIncrement
GetProcAddress
LoadLibraryA
GetProcessHeap
HeapReAlloc
CreateFileA
CloseHandle
:VirtualFree
USER32.dll
GetCapture
MultiByteToWideChar
PostThreadMessageA
7RegisterClipboardFormatA
GetTopWindow
HeapCreate
RegisterClassA
GetClassInfoA
GetMenuItemID
GetSubMenu
GetWindowTextA
_GetWindowTextLengthA
GetDlgCtrlID
CreateWindowExA
GetMenuItemCount
UnhookWindowsHookEx
GetClassLongA
GetPropA
RemovePropA
FreeLibrary
DefWindowProcA
RCallWindowProcA
GetMessagePos
GetMessageTime
GetForegroundWindow
VirtualAlloc
SetWindowLongA
MZSetForegroundWindow
SystemParametersInfoA
GetWindowPlacement
IntersectRect
GetWindowRect
MapDialogRect
OffsetRect
GetWindow
CharUpperA
SetWindowPos
wsprintfA
ModifyMenuA
SetWindowContextHelpId
RegisterWindowMessageA
GetMenuState
GetFocus
InvalidateRect
GetNextDlgGroupItem
SetMenuItemBitmaps
EnableMenuItem
IsBadReadPtr
TranslateMessage
GetKeyState
qGetMessageA
CallNextHookEx
ValidateRect
pDispatchMessageA
PeekMessageA
IsWindow
IsWindowVisible
SetWindowsHookExA
4GetCursorPos
MessageBoxA
PostMessageA
EndPaint
PostQuitMessage
EndDialog
GetParent
rGetNextDlgTabItem
m|SetCursor
IsWindowEnabled
zUGetDlgItem
SendMessageA
w^GetWindowLongA
DrawFocusRect
kExcludeUpdateRgn
DefDlgProcA
ShowCaret
LoadIconA
BeginPaint
IsWindowUnicode
HideCaret
CopyAcceleratorTableA
%TDestroyWindow
ClientToScreen
ReleaseDC
nGetWindowDC
MessageBeep
FillRect
InflateRect
GetMenuCheckMarkDimensions
TabbedTextOutA
EnableWindow
IsIconic
GetSysColor
DrawTextA
GetSystemMetrics
UpdateWindow
GrayStringA
DrawIcon
GetSystemMenu
~GetClientRect
CharNextA
LoadCursorA
AppendMenuA
LoadBitmapA
GetSysColorBrush
ScreenToClient
DestroyMenu
SetFocus
,GetClassNameA
LoadStringA
DeleteDC
PtInRect
MoveWindow
GDI32.dll
?ShowWindow
SetWindowTextA
GetDesktopWindow
SendDlgItemMessageA
MapWindowPoints
tgIsDialogMessageA
CheckMenuItem
TextOutA
CreateDialogIndirectParamA
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
ScaleViewportExtEx
SetMapMode
SetWindowOrgEx
GetClipBox
AdjustWindowRectEx
IntersectClipRect
ScaleWindowExtEx
SetWindowExtEx
GetViewportExtEx
GetDeviceCaps
GetWindowExtEx
GetTextColor
SetBkMode
GetMapMode
SetBkColor
GetBkColor
GetStockObject
SSetActiveWindow
RectVisible
PtVisible
ExtTextOutA
SetTextColor
StretchBlt
CreateSolidBrush
GetObjectA
CreateCompatibleDC
CreateDIBitmap
comdlg32.dll
DeleteObject
CreateFontIndirectA
GetTextExtentPointA
GetOpenFileNameA
GetFileTitleA
CreateCompatibleBitmap
OpenPrinterA
/6WINSPOOL.DRV
DocumentPropertiesA
!`ClosePrinter
ADVAPI32.dll
RegCloseKey
GetSaveFileNameA
RegCreateKeyExA
(KCreateBitmap
SHGetMalloc
ole32.dll
SHELL32.dll
SHGetDesktopFolder
RegSetValueExA
SHBrowseForFolderA
FRegOpenKeyExA
COMCTL32.dll
SHGetPathFromIDListA
oledlg.dll
OLEPRO32.DLL
RestoreDC
CoTaskMemAlloc
OleUninitialize
CoGetClassObject
CoTaskMemFree
CreateILockBytesOnHGlobal
CLSIDFromString
CoFreeUnusedLibraries
StgCreateDocfileOnILockBytes
CLSIDFromProgID
SelectObject
OleIsCurrentClipboard
OleFlushClipboard
IPHLPAPI.DLL
)MSVCRT.dll
OLEAUT32.dll
PSAPI.DLL
OleInitialize
Safengine Shielden v2.4.0.0
ovCoRevokeClassObject
CoRegisterMessageFilter
10StgOpenStorageOnILockBytes
GetActiveWindow
GetLastActivePopup
JhPQP
KERNEL32.dll
USER32.dll
GDI32.dll
comdlg32.dll
WINSPOOL.DRV
ADVAPI32.dll
SHELL32.dll
COMCTL32.dll
oledlg.dll
ole32.dll
OLEPRO32.DLL
OLEAUT32.dll
MSVCRT.dll
IPHLPAPI.DLL
PSAPI.DLL
HeapSize
RegisterClipboardFormatA
SetMapMode
GetOpenFileNameA
OpenPrinterA
RegCloseKey
SHGetMalloc
CoFreeUnusedLibraries
strncpy
GetInterfaceInfo
GetMappedFileNameW
HrCg@b
VS_VERSION_INFO
StringFileInfo
080404b0
Comments
CompanyName
(Future Studio)
FileDescription
FileVersion
1, 0, 0, 1
InternalName
FileSplt
LegalCopyright
(C) 2001
(Future Studio)
LegalTrademarks
OriginalFilename
FileSplt.EXE
PrivateBuild
ProductName
ProductVersion
1, 0, 0, 1
SpecialBuild
VarFileInfo
Translation
Antivirus Signature
Bkav W32.AIDetectNet.01
Lionic Hacktool.Win32.Generic.lA3h
tehtris Generic.Malware
MicroWorld-eScan Clean
ClamAV Clean
FireEye Generic.mg.8ed2a04ece93bee3
CAT-QuickHeal Clean
McAfee Artemis!8ED2A04ECE93
Malwarebytes Agent.Trojan.Downloader.DDS
Zillya Clean
Sangfor Trojan.Win32.Save.a
K7AntiVirus Trojan ( 005239691 )
BitDefender Trojan.GenericKD.65823234
K7GW Adware ( 005693e61 )
CrowdStrike win/malicious_confidence_100% (W)
Baidu Clean
VirIT Clean
Cyren W32/Trojan.HPC.gen!Eldorado
Symantec ML.Attribute.HighConfidence
Elastic malicious (high confidence)
ESET-NOD32 a variant of Win32/Packed.NoobyProtect.M suspicious
APEX Malicious
Paloalto Clean
Cynet Malicious (score: 100)
Kaspersky UDS:Backdoor.Win32.Lotok.lmy
Alibaba Packed:Win32/NoobyProtect.d79656f8
NANO-Antivirus Clean
ViRobot Clean
Rising Trojan.Generic@AI.95 (RDML:h7FI4uhxYeCwfzm9yZLfbg)
Emsisoft Clean
F-Secure Clean
DrWeb Clean
VIPRE Clean
TrendMicro Clean
McAfee-GW-Edition BehavesLike.Win32.Injector.tc
Trapmine malicious.high.ml.score
CMC Clean
Sophos Generic ML PUA (PUA)
SentinelOne Static AI - Suspicious PE
GData Win32.Packed.NoobyProtect.B
Jiangmin Clean
Webroot W32.Adware.Gen
Avira HEUR/AGEN.1237427
MAX Clean
Antiy-AVL GrayWare/Win32.Safeguard.a
Gridinsoft Trojan.Heur!.03010021
Xcitium TrojWare.Win32.Amtar.KNB@4wlm66
Arcabit Clean
SUPERAntiSpyware Clean
ZoneAlarm Clean
Microsoft Trojan:Win32/Casdet!rfn
Google Detected
AhnLab-V3 Trojan/Win.Leonem.C5391929
Acronis Clean
VBA32 Clean
ALYac Clean
TACHYON Clean
Cylance unsafe
Panda Clean
Zoner Clean
TrendMicro-HouseCall Clean
Tencent Clean
Yandex Clean
Ikarus PUA.NoobyProtect
MaxSecure Virus.W32.packed.Noobyprotect.B
Fortinet Riskware/Application
BitDefenderTheta Gen:NN.ZexaF.36308.kv0@a4qDUsob
AVG Clean
Avast Clean
No IRMA results available.