Static | ZeroBOX

PE Compile Time

2022-03-02 11:26:23

PDB Path

C:\citugije52\xubar-guletovax.pdb

PE Imphash

21829bcb83e2224c2104cf7cefe96c53

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00001000 0x0002fe4e 0x00030000 7.43563540293
.data 0x00031000 0x002c32fc 0x00003000 2.287833567
.rsrc 0x002f5000 0x000098f8 0x00009a00 4.71099886151
.reloc 0x002ff000 0x00003b4a 0x00003c00 2.93495602389

Resources

Name Offset Size Language Sub-language File type
AFX_DIALOG_LAYOUT 0x002fbd58 0x0000000e LANG_NEUTRAL SUBLANG_NEUTRAL data
AFX_DIALOG_LAYOUT 0x002fbd58 0x0000000e LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_CURSOR 0x002fd948 0x00000568 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_CURSOR 0x002fd948 0x00000568 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_CURSOR 0x002fd948 0x00000568 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_CURSOR 0x002fd948 0x00000568 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_CURSOR 0x002fd948 0x00000568 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x002fb878 0x00000468 LANG_SPANISH SUBLANG_SPANISH_MEXICAN GLS_BINARY_LSB_FIRST
RT_ICON 0x002fb878 0x00000468 LANG_SPANISH SUBLANG_SPANISH_MEXICAN GLS_BINARY_LSB_FIRST
RT_ICON 0x002fb878 0x00000468 LANG_SPANISH SUBLANG_SPANISH_MEXICAN GLS_BINARY_LSB_FIRST
RT_ICON 0x002fb878 0x00000468 LANG_SPANISH SUBLANG_SPANISH_MEXICAN GLS_BINARY_LSB_FIRST
RT_ICON 0x002fb878 0x00000468 LANG_SPANISH SUBLANG_SPANISH_MEXICAN GLS_BINARY_LSB_FIRST
RT_ICON 0x002fb878 0x00000468 LANG_SPANISH SUBLANG_SPANISH_MEXICAN GLS_BINARY_LSB_FIRST
RT_ICON 0x002fb878 0x00000468 LANG_SPANISH SUBLANG_SPANISH_MEXICAN GLS_BINARY_LSB_FIRST
RT_ICON 0x002fb878 0x00000468 LANG_SPANISH SUBLANG_SPANISH_MEXICAN GLS_BINARY_LSB_FIRST
RT_DIALOG 0x002fe0b8 0x000000e8 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002fe438 0x000004be LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x002fe438 0x000004be LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_GROUP_CURSOR 0x002fdeb0 0x00000030 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_GROUP_CURSOR 0x002fdeb0 0x00000030 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x002fbce0 0x00000076 LANG_SPANISH SUBLANG_SPANISH_MEXICAN data
RT_VERSION 0x002fdee0 0x000001d4 LANG_NEUTRAL SUBLANG_NEUTRAL data

Imports

Library KERNEL32.dll:
0x401018 GlobalSize
0x401020 CreateHardLinkA
0x40102c EnumCalendarInfoExW
0x401030 GetConsoleTitleA
0x401034 ReadConsoleW
0x40103c WaitNamedPipeW
0x401040 CreateActCtxW
0x401044 SetHandleCount
0x401048 TlsSetValue
0x40104c LoadLibraryW
0x401050 GetConsoleMode
0x401058 FindNextVolumeW
0x40105c GetFileAttributesW
0x401060 WriteConsoleW
0x401064 IsBadStringPtrA
0x40106c GetStringTypeExA
0x401070 GetConsoleAliasesW
0x401074 GetCommState
0x40107c SetLastError
0x401080 GetProcAddress
0x401084 VirtualAlloc
0x401090 SearchPathA
0x401094 LoadLibraryA
0x401098 LocalAlloc
0x4010a0 AddAtomW
0x4010a4 GetProfileStringA
0x4010b0 FoldStringW
0x4010b4 EnumResourceTypesW
0x4010b8 GetModuleFileNameA
0x4010bc GetModuleHandleA
0x4010c0 GetCommTimeouts
0x4010c8 DeleteFileW
0x4010cc DebugBreak
0x4010d8 FindResourceExW
0x4010e0 VirtualQuery
0x4010e4 GetStdHandle
0x4010f0 Sleep
0x40110c GetLastError
0x401110 HeapFree
0x401114 MultiByteToWideChar
0x401118 TerminateProcess
0x40111c GetCurrentProcess
0x401120 IsDebuggerPresent
0x401124 GetStartupInfoW
0x401128 RtlUnwind
0x40112c RaiseException
0x401130 LCMapStringA
0x401134 WideCharToMultiByte
0x401138 LCMapStringW
0x40113c GetCPInfo
0x401140 GetModuleHandleW
0x401144 ExitProcess
0x401148 WriteFile
0x40114c HeapAlloc
0x401150 HeapCreate
0x401154 VirtualFree
0x401158 HeapReAlloc
0x40115c GetACP
0x401160 GetOEMCP
0x401164 IsValidCodePage
0x401168 TlsGetValue
0x40116c TlsAlloc
0x401170 TlsFree
0x401174 GetCurrentThreadId
0x401178 GetModuleFileNameW
0x401184 GetCommandLineW
0x401188 GetFileType
0x40118c GetStartupInfoA
0x401194 GetTickCount
0x401198 GetCurrentProcessId
0x4011a0 HeapSize
0x4011a4 GetUserDefaultLCID
0x4011a8 GetLocaleInfoA
0x4011ac EnumSystemLocalesA
0x4011b0 IsValidLocale
0x4011b4 GetStringTypeA
0x4011b8 GetStringTypeW
0x4011c0 SetFilePointer
0x4011c4 GetConsoleCP
0x4011c8 GetLocaleInfoW
0x4011cc SetStdHandle
0x4011d0 WriteConsoleA
0x4011d4 GetConsoleOutputCP
0x4011d8 FlushFileBuffers
0x4011dc CreateFileA
0x4011e0 CloseHandle
Library GDI32.dll:
0x401008 GetCharABCWidthsW
0x401010 GetCharWidthI
Library ADVAPI32.dll:

!This program cannot be run in DOS mode.
`.data
@.reloc
bad allocation
string too long
invalid string position
Unknown exception
LC_TIME
LC_NUMERIC
LC_MONETARY
LC_CTYPE
LC_COLLATE
LC_ALL
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
 !"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~
CorExitProcess
runtime error
TLOSS error
SING error
DOMAIN error
An application has made an attempt to load the C runtime library incorrectly.
Please contact the application's support team for more information.
- Attempt to use MSIL code from this assembly during native code initialization
This indicates a bug in your application. It is most likely the result of calling an MSIL-compiled (/clr) function from a native constructor or from DllMain.
- not enough space for locale information
- Attempt to initialize the CRT more than once.
This indicates a bug in your application.
- CRT not initialized
- unable to initialize heap
- not enough space for lowio initialization
- not enough space for stdio initialization
- pure virtual function call
- not enough space for _onexit/atexit table
- unable to open console device
- unexpected heap error
- unexpected multithread lock error
- not enough space for thread data
This application has requested the Runtime to terminate it in an unusual way.
Please contact the application's support team for more information.
- not enough space for environment
- not enough space for arguments
- floating point support not loaded
Microsoft Visual C++ Runtime Library
<program name unknown>
Runtime Error!
Program:
(null)
`h````
xpxxxx
EncodePointer
DecodePointer
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
bad exception
HH:mm:ss
dddd, MMMM dd, yyyy
MM/dd/yy
December
November
October
September
August
February
January
Saturday
Friday
Thursday
Wednesday
Tuesday
Monday
Sunday
united-states
united-kingdom
trinidad & tobago
south-korea
south-africa
south korea
south africa
slovak
puerto-rico
pr-china
pr china
new-zealand
hong-kong
holland
great britain
england
britain
america
swedish-finland
spanish-venezuela
spanish-uruguay
spanish-puerto rico
spanish-peru
spanish-paraguay
spanish-panama
spanish-nicaragua
spanish-modern
spanish-mexican
spanish-honduras
spanish-guatemala
spanish-el salvador
spanish-ecuador
spanish-dominican republic
spanish-costa rica
spanish-colombia
spanish-chile
spanish-bolivia
spanish-argentina
portuguese-brazilian
norwegian-nynorsk
norwegian-bokmal
norwegian
italian-swiss
irish-english
german-swiss
german-luxembourg
german-lichtenstein
german-austrian
french-swiss
french-luxembourg
french-canadian
french-belgian
english-usa
english-us
english-uk
english-trinidad y tobago
english-south africa
english-nz
english-jamaica
english-ire
english-caribbean
english-can
english-belize
english-aus
english-american
dutch-belgian
chinese-traditional
chinese-singapore
chinese-simplified
chinese-hongkong
chinese
canadian
belgian
australian
american-english
american english
american
Norwegian-Nynorsk
GetProcessWindowStation
GetUserObjectInformationA
GetLastActivePopup
GetActiveWindow
MessageBoxA
USER32.DLL
`h`hhh
xppwpp
Complete Object Locator'
Class Hierarchy Descriptor'
Base Class Array'
Base Class Descriptor at (
Type Descriptor'
`local static thread guard'
`managed vector copy constructor iterator'
`vector vbase copy constructor iterator'
`vector copy constructor iterator'
`dynamic atexit destructor for '
`dynamic initializer for '
`eh vector vbase copy constructor iterator'
`eh vector copy constructor iterator'
`managed vector destructor iterator'
`managed vector constructor iterator'
`placement delete[] closure'
`placement delete closure'
`omni callsig'
delete[]
new[]
`local vftable constructor closure'
`local vftable'
`udt returning'
`copy constructor closure'
`eh vector vbase constructor iterator'
`eh vector destructor iterator'
`eh vector constructor iterator'
`virtual displacement map'
`vector vbase constructor iterator'
`vector destructor iterator'
`vector constructor iterator'
`scalar deleting destructor'
`default constructor closure'
`vector deleting destructor'
`vbase destructor'
`string'
`local static guard'
`typeof'
`vcall'
`vbtable'
`vftable'
operator
delete
__unaligned
__restrict
__ptr64
__clrcall
__fastcall
__thiscall
__stdcall
__pascal
__cdecl
__based(
SunMonTueWedThuFriSat
JanFebMarAprMayJunJulAugSepOctNovDec
GAIsProcessorFeaturePresent
KERNEL32
_nextafter
_hypot
CONOUT$
1#QNAN
1#SNAN
bad allocation
huliguxabuponetexuxibepiwasudamidoviwepucovavomaxuj
cusifavodojadowofajokuvowocen
bilezizileperuseduxiporutiloyez
puvewoyoloyunu
bad exception
jiwuyiwoxevopelafam
lokirarojukejedodatafapa
sonipasegutimijubibihe
ios_base::badbit set
ios_base::failbit set
ios_base::eofbit set
bad cast
C:\citugije52\xubar-guletovax.pdb
^\9nTr
^@9n8r
D$ VSUP
t$$3t$
F09^(u
0WWWWW
|*SSQVj
0WWWWW
QQSVWd
t"SS9]
u&h "@
HHtXHHt
>If90t
0SSSSS
uL9=TJC
0A@@Ju
F\=p#@
>=Yt1j
QQSVWh
j@j ^V
HtHu4j
s[S;7|G;w
tR99u2
C PjPV
C$PjQV
C*PjTV
C+PjUV
C,PjVV
C-PjWV
C.PjRV
C/PjSV
0SSSSS
PPPPPPPP
0SSSSS
tNh$-@
t=h -@
Vj@hH*@
u%h(-@
PPPPPPPP
t+WWVPV
tRHtCHt4Ht%HtFHHt
^SSSSS
j"^SSSSS
URPQQhxZA
0WWWWW
AAFFf;
;t$,v-
UQPXY]Y[
^SSSSS
^SSSSS
u,VVWV
t VV9u
_VVVVV
^WWWWW
0SSSSS
_VVVVV
<+t(<-t$:
+t HHt
-,6*+R#S
UOA1"Pf$P
PUBWJV
F^4q+D`P
aV,`^T
N:_HTEeg
{b:XZtv
0m*;WL~
P{h5+";
8Q,9\h
rK \0'$)~
XCze/(J
,LUnTJ
1rH]Q}?w
uoh:3~GU<C
nzk&4
Ng+=+]
IP`NXH
`<M2T6B
9Pz+*A
?P}8yZ
k1IE
p5f__"
k;+{D2of
vU%/({
mC"wWVJ
QTOn#(I7
[?p8QL
LrB7b
7'e'NxO8Tbh/oCmZ/+
He(t1H
[U`XCT
u^$A|ttCgT
lS&cw7
T2Z}q`
TmoOC5ZWMX
&{_&35S
#S]?-!
km38M(
(};6b*8
:f?hSQ
W^Nnw<
~2|K)X
nt~[8_^m
apr>\
E;pAq,=jr
+V"z4M
Y}9yu(
M}OO0v
2K:>? 5Me
OJ]vn/
]}N1t;W
.XePbm
q.~eu(
6H6#xl=
O~:[rHu
z@6}!#YEIz
!B#,5\
;BJ["(o
0osoR;
km%N>O
4{1hX
#;e$!X
&.$tW^'
'Fw*@>r
B3FQFS
LZYF%v
<8r"oZ
n>c`~7
RGAN`(~>;
T8;A#15
3}9H%w1
Hu$Zo
@|es\e^
$<s1v"`B
hLW*<
aGPsiz
9?)[4`
tujII;s}
4:32Pe~5[
7`!nK3
j+ ](N
sG[mLl
q XpgEYr
2QFp`Jeh7
mx.3UA
UmTo|
xXgZz)
^th;Ty
WdcVjX
!&/I4Z"
SNaDirB
e{d6xM
~esa](1lm
DY:]Ux
-NpesC
2-$7JIu
o>Ebyov
*jeV0*
]OtQ90
r!5B'C<|9Y
N~?bN+U
|@j4FJD
ltOT|'g
^.]. (
]Ane2*
GYB`%g@s
#cZ)v>
>M{tqWxk
&Vj6%W
EeIE&1
MjO]A}
1I)&!q
NHWV]g
.4%@7w%
k4l>#Z2}
uyb.C^
'>'K/H
a/htrw
![y/s$N
|GUUw{
5JG`lw
_QneQD
V|/!"2
4=-##t
0*YJn;<
:3b# $@O
2(jlzA
M)u7Ms4
6v' r
g1S6U}i
VAc&{@
##_B;A
f%%:1`
=ZoF5m
GetNumaProcessorNode
VirtualQuery
FindResourceExW
GetConsoleAliasExesLengthA
GetCommState
GlobalSize
SetDefaultCommConfigW
CreateHardLinkA
WaitForSingleObjectEx
FreeEnvironmentStringsA
EnumCalendarInfoExW
GetConsoleTitleA
ReadConsoleW
GetCompressedFileSizeW
WaitNamedPipeW
CreateActCtxW
SetHandleCount
TlsSetValue
LoadLibraryW
GetConsoleMode
InterlockedPopEntrySList
FindNextVolumeW
GetFileAttributesW
WriteConsoleW
IsBadStringPtrA
WritePrivateProfileStringW
GetStringTypeExA
GetConsoleAliasesW
GetStdHandle
ChangeTimerQueueTimer
SetLastError
GetProcAddress
VirtualAlloc
EnumSystemCodePagesW
CreateMemoryResourceNotification
SearchPathA
LoadLibraryA
LocalAlloc
DnsHostnameToComputerNameA
AddAtomW
GetProfileStringA
BeginUpdateResourceA
WriteProfileSectionW
FoldStringW
EnumResourceTypesW
GetModuleFileNameA
GetModuleHandleA
GetCommTimeouts
QueryPerformanceFrequency
DeleteFileW
DebugBreak
ReadConsoleOutputCharacterW
KERNEL32.dll
CreateDiscardableBitmap
GetCharABCWidthsW
GetCharWidthI
GDI32.dll
GetEventLogInformation
ADVAPI32.dll
InterlockedIncrement
InterlockedDecrement
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetLastError
HeapFree
MultiByteToWideChar
TerminateProcess
GetCurrentProcess
IsDebuggerPresent
GetStartupInfoW
RtlUnwind
RaiseException
LCMapStringA
WideCharToMultiByte
LCMapStringW
GetCPInfo
GetModuleHandleW
ExitProcess
WriteFile
HeapAlloc
HeapCreate
VirtualFree
HeapReAlloc
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsFree
GetCurrentThreadId
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetFileType
GetStartupInfoA
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapSize
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeA
GetStringTypeW
InitializeCriticalSectionAndSpinCount
SetFilePointer
GetConsoleCP
GetLocaleInfoW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
FlushFileBuffers
CreateFileA
CloseHandle
.?AV_Locimp@locale@std@@
.?AVlogic_error@std@@
.?AVlength_error@std@@
.?AVout_of_range@std@@
Copyright (c) 1992-2004 by P.J. Plauger, licensed by Dinkumware, Ltd. ALL RIGHTS RESERVED.
.?AVtype_info@@
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
.?AV?$ctype@D@std@@
.?AUctype_base@std@@
.?AVfacet@locale@std@@
.?AV?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@
.?AV?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@
.?AV?$basic_iostream@DU?$char_traits@D@std@@@std@@
.?AV?$basic_ostream@DU?$char_traits@D@std@@@std@@
.?AV?$basic_istream@DU?$char_traits@D@std@@@std@@
.?AV?$basic_streambuf@DU?$char_traits@D@std@@@std@@
.?AV?$basic_ios@DU?$char_traits@D@std@@@std@@
.?AV?$_Iosb@H@std@@
.?AVios_base@std@@
.?AVbad_exception@std@@
.?AVruntime_error@std@@
.?AVexception@std@@
.?AVfailure@ios_base@std@@
.?AVbad_cast@std@@
.?AVbad_alloc@std@@
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
>>>>>>
>>>>>>>>>>>>>>
>>>>>>>>>
>>>>>>>>
>>>>>>>
>>>>>>
>>>>>>
AAAAAA
AAAAAAA
AAAAAAAAAA
AAAAAAAAAAA
AAAAAAAAA
AAAAAAAAAAAAAA
AAAAAAAAAAAA
V222222222
jjjjjjjjjjj
RRRRRR
I=========================="
=I$$$$$$$$$$$$$$$$$$$$$$$$$=
22222t2t2tttttttttttttt22=
tLtLLLLLLLLL
tLtLtLtLLLLLLL
ttLtLLLLLLLLLLLLL
ttLtLtLtLLLLLL
tttLtLtLLtLLLLLLLL
ttLttLtg
gtLLLLLLLL
ttttLtLE
_C$LLLLLL
2ttttttg.
2tttLtLt
2ttttttt_
qLLLLL
22ttttttC
LLLLLtL=
222ttttt'
qLLLLtt=
22222ttttw
LLLLt=
22222ttttt
qLLtt=
22222222tttw
2222222t2ttt
euuuuuuuuXuuuuu
uuuuuuuuuuuuuuuuuuuu
}}}}}}}}}}}}}}}}}}
//////////}
//////
}kkkkkk
wwwwwwwwwwwwww
NNNNNN
~~|{}}
||~~|z
~}}~~~z}
|}|~{~
~{|~~}
~{{{{{
|zy~{||~
~~|{z~y
{|{{~{
{z{{||
~~|~~{
}z||}z||}~
|~||||||z
y}{z~}
}~|~~}
|}}}z|}
}|||~z
{~~|{}
}|~}}~}}{
y~|{||~|
{{~|{}
||z|}|
iiiiiiii
iiiiiiii
iiiiii
iiiiii
iiiiiiiii
iiiiiiiiii
iiiiiiii
iiiiiii
iiiiiiiii

2(2,2p2t2x2|2
4H:P:X:`:h:p:x:
; ;(;0;8;@;H;P;X;`;h;p;x;
< <(<0<8<@<H<P<X<`<h<p<x<
4 4$4(4,4044484<4@4D4H4L4P4T4X4\4`4d4h4l4p4t4x4|4
9 9$9(9,9094989<9@9D9H9L9P9T9X9\9`9d9h9l9p9t9x9|9
9$:(:0:4:8:<:
;$;<;L;P;`;d;h;l;t;
<$<<<L<P<`<d<l<
=$=4=8=<=D=\=l=p=
> >$>(>,>0>4>8><>D>\>l>p>
?,?<?@?P?T?X?\?`?h?
0(080<0L0P0X0p0
1 1(1@1D1\1l1p1
2"353u3
6#7#8?8q8U:
;2;@;{;
>">'>->O>i>|>
0)0.03090A0I0W0j0|0
041A1J1O1d1j1s1y1
2!2&212\2t2
4,444B4O4X4l4s4{4
9"9H9N9
:S;j;{;
233V3]3e3
4%434E4j4x4
6@6N6\6c6/8<8S8q8
90D0U0a0i0o0~0
1 1(1@1Q1
1)232G2
3 3(323A3N3T3^3m3
4J4W4j4
585I5m5
:q:{:(;<;
<0<M<Z<
-0K0]0/191F1a1h1
4*41474I4Q4\4
?J?q?z?
4V597i7
989@9j:
;";R;\;h;q;
<<+<5<=<H<x<
555=5[5c5
8$8(8,8084888<8@8
9K9T9`9
:#:):2:9:[:
;0;;;U;a;i;y;
=&>+>p>u>|>
!0*010:0z0
2-2S2q2x2|2
2V3a3|3
4 4$4(4,404z4
6"6&6*6.6
7%7\7m7
7%83898\8c8|8
<#<,<9<D<V<i<t<z<
=$=1=7=Q=b=h=y=
2^214<4D4Y4v4
<U<b<l<z<
0,050;0D0I0X0
1 1G1M1X1d1y1
2!2.282?2W2f2m2z2
3H3N3j3
3"4E4O4
5"5(50575<5D5M5Y5^5c5i5m5s5x5~5
6&6,6H6`7G8V8q8
3$313=3M3T3c3o3|3
484G4P4t4
8I9T9^9o9z9
<!=:={=
>8>=>^>c>
8&9391;%<q<|<
=$=*=0=6===D=K=R=Y=`=g=o=w=
3.4L4^4p4
2!2P2_2
99#9'9+9/93979;9?9C9O9Y9q9x9
4!4E4h4
8 888>8M8S8b8h8v8
9%9d9k9q9
:L;l;q;w;{;
>/>P>\>
2/282o3
393?3H3O3
9$929b9
;6;D;S;a;i;v;
8>8R9H:P:
<&=,=<=
2 373g3
6&:*:.:2:6:::>:B:F:J:N:R:_::;R;a;
6(626>6J6T6^6h6s6w6|6
7 7,7L7X7x7
888<8@8H8\8d8p8
909P9\9h9
:(:H:h:t:
; ;$;<;@;P;t;
<$<8<T<X<t<x<
=8=X=x=
> >(><>D>X>`>t>|>
?$?,?8?X?`?h?p?x?
000<0\0h0
1,181X1d1
202@2P2X2d2
04080X0x0
1 1014181@1T1\1d1l1t1|1
> >$>(>,>0>4>8><>@>D>H>L>P>T>X>\>`>d>h>l>p>t>x>|>
? ?$?(?,?0?4?
0$0D0L0T0\0d0l0t0|0
7$7@7`7
((((( H
h(((( H
H
mscoree.dll
(null)
KERNEL32.DLL
mopiceyerowedemi
cmexep
cotopewiluvepogomi
kernel32.dll
Rakeyihisego
Mifivu vizulebujula
msimg32.dll
yaviwuselo xetukuhurati
AFX_DIALOG_LAYOUT
/ P6pL
,/KPip
/-P?pR
/ P6pL
,/KPip
/-P?pR
/ P6pL
,/KPip
/-P?pR
VS_VERSION_INFO
StringFileInfo
041301F2
FilesVersion
15.18.62.51
InternalNamy
GodGuest
LegalasCopyright
Copyright (C) 2023, shmaer
ProductName
VarFileInfo
Translation
Msogfndo sfujsdi:
&Retry again
&Restart
&Ignore
QMiyogaci wotov vehihukih vakuxuw sosoyi wufupenahebij kihuxezanipu bin kebagenore
<Fowu zuci bikowesehaj fakotih lejenupedogi mibovicedelu veje6Sodefejugunoyo dekatizoley wevaseju socazomaxopo jetit'Noxiyexaz ronopa zadelebu wicoz bilezabOWedawipawofo fosatacakula zebacekoxaw tagunirobutayo cegahoficivan deji binejiz
lFekax hasowe givarifukanin rilisuja zikuyuduvalagur nanuzeyerag datamiyolaluvi fizatuculowebuh wuyopiderufif(Fekuxukeg sedubosehujova wuxefu gawafegenSin muni kogapagig sevuxajehohiy ferujokiwepamax zohigucaveko jepovoka rugunayosuha kahocabimurojo hewixewahem
*Lusiji liyayepayobi vorebamad vebuxivojiti
Pufanamijivozi rifikubowoc fabow2Yeludefisi luxija gay xeyumanijetuvu jupicitepufut&Hoganijuga xiz doxob wal misinemeceseb
ULukomigiviyu yezub rige jozofejo gugenujiyeveh vaniditehun gekelunum mekenomizudi dehVCamicisuw rakonukijojag muso sehasozu xehu hecadurelet piyozinanetimez potahititijapem
Antivirus Signature
Bkav W32.AIDetectNet.01
Lionic Clean
Elastic malicious (high confidence)
MicroWorld-eScan Clean
FireEye Generic.mg.4e9932a21816959b
CAT-QuickHeal Ransom.Stop.P5
ALYac Clean
Malwarebytes Clean
VIPRE Clean
Sangfor Trojan.Win32.Save.a
K7AntiVirus Clean
Alibaba Clean
K7GW Clean
CrowdStrike win/malicious_confidence_100% (W)
BitDefenderTheta Clean
VirIT Clean
Cyren Clean
Symantec ML.Attribute.HighConfidence
tehtris Clean
ESET-NOD32 Clean
APEX Malicious
Paloalto Clean
ClamAV Win.Packer.pkr_ce1a-9980177-0
Kaspersky UDS:DangerousObject.Multi.Generic
BitDefender Clean
NANO-Antivirus Clean
SUPERAntiSpyware Clean
Avast CrypterX-gen [Trj]
Tencent Clean
TACHYON Clean
Sophos ML/PE-A
Baidu Clean
F-Secure Clean
DrWeb Clean
Zillya Clean
TrendMicro Clean
McAfee-GW-Edition BehavesLike.Win32.Lockbit.dh
Trapmine malicious.moderate.ml.score
CMC Clean
Emsisoft Clean
SentinelOne Clean
Jiangmin Clean
Webroot Clean
Google Detected
Avira Clean
Antiy-AVL Clean
Microsoft Ransom:Win32/LockbitCrypt.SV!MTB
Gridinsoft Clean
Xcitium Clean
Arcabit Clean
ViRobot Clean
ZoneAlarm Clean
GData Clean
Cynet Malicious (score: 100)
AhnLab-V3 Trojan/Win.Generic.R565732
Acronis Clean
McAfee Clean
MAX Clean
VBA32 BScope.Trojan.Kryptik
Cylance Clean
Zoner Clean
TrendMicro-HouseCall Clean
Rising Trojan.Kryptik!1.E3DA (CLASSIC)
Yandex Clean
Ikarus Trojan-Banker.UrSnif
MaxSecure Clean
Fortinet Clean
AVG CrypterX-gen [Trj]
Panda Clean
No IRMA results available.