Static | ZeroBOX

PE Compile Time

2022-02-01 01:43:27

PDB Path

C:\xici30\dalufanakoyaru\zopo\benedum.pdb

PE Imphash

908502d3241a04cd06b259e5c173a60f

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00001000 0x000303ce 0x00030400 7.45471123135
.data 0x00032000 0x002c351c 0x00003200 2.45195466177
.rsrc 0x002f6000 0x00006fd0 0x00007000 4.68995329105
.reloc 0x002fd000 0x00003b88 0x00003c00 3.04648119064

Resources

Name Offset Size Language Sub-language File type
RT_ICON 0x002fc5d8 0x00000468 LANG_SPANISH SUBLANG_SPANISH_MEXICAN GLS_BINARY_LSB_FIRST
RT_ICON 0x002fc5d8 0x00000468 LANG_SPANISH SUBLANG_SPANISH_MEXICAN GLS_BINARY_LSB_FIRST
RT_ICON 0x002fc5d8 0x00000468 LANG_SPANISH SUBLANG_SPANISH_MEXICAN GLS_BINARY_LSB_FIRST
RT_ICON 0x002fc5d8 0x00000468 LANG_SPANISH SUBLANG_SPANISH_MEXICAN GLS_BINARY_LSB_FIRST
RT_ICON 0x002fc5d8 0x00000468 LANG_SPANISH SUBLANG_SPANISH_MEXICAN GLS_BINARY_LSB_FIRST
RT_ICON 0x002fc5d8 0x00000468 LANG_SPANISH SUBLANG_SPANISH_MEXICAN GLS_BINARY_LSB_FIRST
RT_ICON 0x002fc5d8 0x00000468 LANG_SPANISH SUBLANG_SPANISH_MEXICAN GLS_BINARY_LSB_FIRST
RT_ICON 0x002fc5d8 0x00000468 LANG_SPANISH SUBLANG_SPANISH_MEXICAN GLS_BINARY_LSB_FIRST
RT_STRING 0x002fcc90 0x0000033a LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x002fca40 0x00000076 LANG_SPANISH SUBLANG_SPANISH_MEXICAN data
RT_VERSION 0x002fcab8 0x000001d4 LANG_NEUTRAL SUBLANG_NEUTRAL data

Imports

Library KERNEL32.dll:
0x401010 GetCommState
0x401014 GlobalSize
0x40101c GetProfileStringW
0x401020 SetComputerNameW
0x401024 AddConsoleAliasW
0x401030 WaitNamedPipeW
0x401034 CreateActCtxW
0x401038 EnumResourceTypesA
0x40103c SetHandleCount
0x401040 TlsSetValue
0x401044 FindResourceExA
0x401048 VirtualFreeEx
0x40104c LoadLibraryW
0x401058 GetStringTypeExW
0x401060 SetConsoleMode
0x401064 GetFileAttributesW
0x401068 IsBadStringPtrA
0x401070 GetConsoleAliasesW
0x401074 SetLastError
0x401078 VirtualQuery
0x40107c GetProcAddress
0x401080 VirtualAlloc
0x401088 SetStdHandle
0x40108c SearchPathA
0x401094 LoadLibraryA
0x401098 LocalAlloc
0x40109c CreateHardLinkW
0x4010a0 AddAtomW
0x4010a4 OpenEventA
0x4010ac FoldStringA
0x4010b0 GetModuleFileNameA
0x4010b4 GetModuleHandleA
0x4010bc GetConsoleTitleW
0x4010c0 WaitForDebugEvent
0x4010c8 SetCalendarInfoA
0x4010cc DeleteFileW
0x4010d0 EnumCalendarInfoExA
0x4010d4 FindNextVolumeA
0x4010d8 MoveFileExA
0x4010e8 Sleep
0x401104 GetLastError
0x401108 HeapFree
0x40110c MultiByteToWideChar
0x401110 TerminateProcess
0x401114 GetCurrentProcess
0x401118 IsDebuggerPresent
0x40111c GetStartupInfoW
0x401120 RtlUnwind
0x401124 RaiseException
0x401128 LCMapStringA
0x40112c WideCharToMultiByte
0x401130 LCMapStringW
0x401134 GetCPInfo
0x401138 GetModuleHandleW
0x40113c ExitProcess
0x401140 WriteFile
0x401144 GetStdHandle
0x401148 HeapAlloc
0x40114c HeapCreate
0x401150 VirtualFree
0x401154 HeapReAlloc
0x401158 GetACP
0x40115c GetOEMCP
0x401160 IsValidCodePage
0x401164 TlsGetValue
0x401168 TlsAlloc
0x40116c TlsFree
0x401170 GetCurrentThreadId
0x401174 GetModuleFileNameW
0x40117c GetCommandLineW
0x401180 GetFileType
0x401184 GetStartupInfoA
0x40118c GetTickCount
0x401190 GetCurrentProcessId
0x401198 HeapSize
0x40119c GetUserDefaultLCID
0x4011a0 GetLocaleInfoA
0x4011a4 EnumSystemLocalesA
0x4011a8 IsValidLocale
0x4011ac GetStringTypeA
0x4011b0 GetStringTypeW
0x4011b8 SetFilePointer
0x4011bc GetConsoleCP
0x4011c0 GetConsoleMode
0x4011c4 GetLocaleInfoW
0x4011c8 WriteConsoleA
0x4011cc GetConsoleOutputCP
0x4011d0 WriteConsoleW
0x4011d4 FlushFileBuffers
0x4011d8 CreateFileA
0x4011dc CloseHandle
Library USER32.dll:
0x4011e4 GetCaretBlinkTime
Library GDI32.dll:
0x401004 SelectPalette
0x401008 GetBoundsRect

!This program cannot be run in DOS mode.
Richb
`.data
@.reloc
bad allocation
string too long
invalid string position
Unknown exception
LC_TIME
LC_NUMERIC
LC_MONETARY
LC_CTYPE
LC_COLLATE
LC_ALL
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
bad exception
 !"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~
CorExitProcess
runtime error
TLOSS error
SING error
DOMAIN error
An application has made an attempt to load the C runtime library incorrectly.
Please contact the application's support team for more information.
- Attempt to use MSIL code from this assembly during native code initialization
This indicates a bug in your application. It is most likely the result of calling an MSIL-compiled (/clr) function from a native constructor or from DllMain.
- not enough space for locale information
- Attempt to initialize the CRT more than once.
This indicates a bug in your application.
- CRT not initialized
- unable to initialize heap
- not enough space for lowio initialization
- not enough space for stdio initialization
- pure virtual function call
- not enough space for _onexit/atexit table
- unable to open console device
- unexpected heap error
- unexpected multithread lock error
- not enough space for thread data
This application has requested the Runtime to terminate it in an unusual way.
Please contact the application's support team for more information.
- not enough space for environment
- not enough space for arguments
- floating point support not loaded
Microsoft Visual C++ Runtime Library
<program name unknown>
Runtime Error!
Program:
(null)
`h````
xpxxxx
EncodePointer
DecodePointer
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
HH:mm:ss
dddd, MMMM dd, yyyy
MM/dd/yy
December
November
October
September
August
February
January
Saturday
Friday
Thursday
Wednesday
Tuesday
Monday
Sunday
united-states
united-kingdom
trinidad & tobago
south-korea
south-africa
south korea
south africa
slovak
puerto-rico
pr-china
pr china
new-zealand
hong-kong
holland
great britain
england
britain
america
swedish-finland
spanish-venezuela
spanish-uruguay
spanish-puerto rico
spanish-peru
spanish-paraguay
spanish-panama
spanish-nicaragua
spanish-modern
spanish-mexican
spanish-honduras
spanish-guatemala
spanish-el salvador
spanish-ecuador
spanish-dominican republic
spanish-costa rica
spanish-colombia
spanish-chile
spanish-bolivia
spanish-argentina
portuguese-brazilian
norwegian-nynorsk
norwegian-bokmal
norwegian
italian-swiss
irish-english
german-swiss
german-luxembourg
german-lichtenstein
german-austrian
french-swiss
french-luxembourg
french-canadian
french-belgian
english-usa
english-us
english-uk
english-trinidad y tobago
english-south africa
english-nz
english-jamaica
english-ire
english-caribbean
english-can
english-belize
english-aus
english-american
dutch-belgian
chinese-traditional
chinese-singapore
chinese-simplified
chinese-hongkong
chinese
canadian
belgian
australian
american-english
american english
american
Norwegian-Nynorsk
GetProcessWindowStation
GetUserObjectInformationA
GetLastActivePopup
GetActiveWindow
MessageBoxA
USER32.DLL
`h`hhh
xppwpp
Complete Object Locator'
Class Hierarchy Descriptor'
Base Class Array'
Base Class Descriptor at (
Type Descriptor'
`local static thread guard'
`managed vector copy constructor iterator'
`vector vbase copy constructor iterator'
`vector copy constructor iterator'
`dynamic atexit destructor for '
`dynamic initializer for '
`eh vector vbase copy constructor iterator'
`eh vector copy constructor iterator'
`managed vector destructor iterator'
`managed vector constructor iterator'
`placement delete[] closure'
`placement delete closure'
`omni callsig'
delete[]
new[]
`local vftable constructor closure'
`local vftable'
`udt returning'
`copy constructor closure'
`eh vector vbase constructor iterator'
`eh vector destructor iterator'
`eh vector constructor iterator'
`virtual displacement map'
`vector vbase constructor iterator'
`vector destructor iterator'
`vector constructor iterator'
`scalar deleting destructor'
`default constructor closure'
`vector deleting destructor'
`vbase destructor'
`string'
`local static guard'
`typeof'
`vcall'
`vbtable'
`vftable'
operator
delete
__unaligned
__restrict
__ptr64
__clrcall
__fastcall
__thiscall
__stdcall
__pascal
__cdecl
__based(
SunMonTueWedThuFriSat
JanFebMarAprMayJunJulAugSepOctNovDec
GAIsProcessorFeaturePresent
KERNEL32
_nextafter
_hypot
?CONOUT$
1#QNAN
1#SNAN
bad allocation
ronesejelukoca coxugiduseza
hijidokasozabuwaba
tuba gijiwonahek
kernel32.dll
fajicunoruri
tevomaparoyatonibes
xapaxapap
piyofigijenu
ios_base::badbit set
ios_base::failbit set
ios_base::eofbit set
bad cast
C:\xici30\dalufanakoyaru\zopo\benedum.pdb
^\9nTr
^@9n8r
D$ VSUP
tth@8@
D$X89@
D$Tt9@
\$$3\$
D$43D$
D$\}DDA
D$`7ZK0
l$H(5P
D$8GW{Q
D$DPSSS
F09^(u
0WWWWW
|*SSQVj
0WWWWW
QQSVWd
to=`/C
HtHu4j
s[S;7|G;w
tR99u2
t"SS9]
u&h@"@
HHtXHHt
>If90t
0SSSSS
uL9=t\C
0A@@Ju
Fh=@%C
t$h$#@
Y;=H+C
>=Yt1j
QQSVWh
j@j ^V
C PjPV
C$PjQV
C*PjTV
C+PjUV
C,PjVV
C-PjWV
C.PjRV
C/PjSV
0SSSSS
PPPPPPPP
0SSSSS
tNh$-@
t=h -@
Vj@hH*@
u%h(-@
PPPPPPPP
t+WWVPV
tRHtCHt4Ht%HtFHHt
^SSSSS
j"^SSSSS
URPQQhxNA
0WWWWW
AAFFf;
;t$,v-
UQPXY]Y[
^SSSSS
^SSSSS
u,VVWV
t VV9u
_VVVVV
^WWWWW
0SSSSS
_VVVVV
<+t(<-t$:
+t HHt
ju{5jc
a{}1rtiS
asWXR
5`/(5-HF
OOC1%+]$P
%m58I*
js'|A%
>v`v<4
t]R:W-L
L.@$5d
J_nT'q
#kIIE3
#`-heVw
1wD$h
;jy{/e
@%Py&G
&]^E>FZ
9`Rzp.u}
aXRglg
Z=Jd;Ka&
J$".p+
PfN{B[
I.Wn}x
q.?x|PFp
sNQCg~
1}65r1
G=#(tt
4oO-_`x
M64o/'r
{|"&]H
c%JbEz
e*{6<&
1kU2q
|2",Scf
#(e9cD
1RiQ#]
yVohot
YW07oP
mmfsI\
_5_P2zz
P[1XXpB^
%i4T6"
f\fU:c
;87]r'
(;7j(q
rK<'%cv
^$Yn[F
?F2CYT
*{];WY
q|9h+T^
K,:,ou
<>VdI9
1k~F?J(
G?+7;'
:+In)q}
n7n%D@
V-LSW"
,lF mw
v=`oaZ
Qve-D
/T*0>z
h_4h*3Q~
U0Krd!
\} mO<
#e{mx&
?oJ+Hq
h-IpR1
Pb3nLdFO
|Hd(=Q
)q2^F_
xxVh9.
R][Z8PeI
+))H)iN
EX'vxI
Te+x,c
XrymK~
/Svki]
*Jk`NU
R2w:9!
H?ggg9
_~&p[}
m~;[Sb
`$~4],,
uB2*U-
Q^3h\A
fRH[[dG!
pZa)'%K
!gz[(D
v2,?zh
{[uYKv
+Ym+3`
3BL"%
@g#Hc|5
U`kq5tq
xDi+h
D)U;Vwh
_jognuy
jvX0re
XU{9+KY
[9n!b2I
:<I`RS
UkR}\j
^rtsJk:2
nRKe0T
7aD}EoJ
=iktaCx\
Qo)%c"
Ymd7{k
.7QJ":&1
`\4KN
Xw(~Zm
eV/y@
A6e+;0
sL2~0R
HmAwZ}
?=5|z<
N(xApU
I`AY3lz
$%T.K
rjm\&i
69 iIZ
',{1'KCI
@6Xqu,
q}ZXE!
Q-].IM
rW1n+Kv
YsEY4=
ql+ "0'*
)i;eL{_
>q!_%GH
E|#}IyX
9{]*XB
@/Rw}>
;^)NpX
-E/9di
Y$,2M8
YO`k/A
1a,Qp .%
?Qxk}e
c~G+|L
($e/%)
iB$U%u
nd2UC
ek6WFX
{E)~V@
-6@(p/
rt#]iB
0TA#_h|
Ub3wA&X
G]E"4E`
TwB!kB
tf9_Sy
C*9<Dv
\jz*18
J[<wOl
%}b!bf
z'9I~!
,lkI4(
M\UM+j
('ia}SX
@YonBo
Cr#b'M
`&3+%?
MoveFileExA
VirtualQuery
GetCommState
GlobalSize
SetDefaultCommConfigW
GetProfileStringW
SetComputerNameW
AddConsoleAliasW
WaitForSingleObjectEx
GetCompressedFileSizeW
WaitNamedPipeW
CreateActCtxW
EnumResourceTypesA
SetHandleCount
TlsSetValue
FindResourceExA
VirtualFreeEx
LoadLibraryW
DeleteVolumeMountPointW
InterlockedPopEntrySList
GetStringTypeExW
EnumSystemCodePagesA
SetConsoleMode
GetFileAttributesW
IsBadStringPtrA
WritePrivateProfileStringW
GetConsoleAliasesW
SetLastError
ReadConsoleOutputCharacterA
GetProcAddress
VirtualAlloc
BeginUpdateResourceW
SetStdHandle
SearchPathA
SetThreadPriorityBoost
LoadLibraryA
LocalAlloc
CreateHardLinkW
AddAtomW
OpenEventA
WriteProfileSectionW
FoldStringA
GetModuleFileNameA
GetModuleHandleA
FreeEnvironmentStringsW
GetConsoleTitleW
WaitForDebugEvent
QueryPerformanceFrequency
SetCalendarInfoA
DeleteFileW
EnumCalendarInfoExA
FindNextVolumeA
KERNEL32.dll
GetCaretBlinkTime
USER32.dll
SelectPalette
CreateCompatibleBitmap
GetBoundsRect
GDI32.dll
InterlockedIncrement
InterlockedDecrement
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetLastError
HeapFree
MultiByteToWideChar
TerminateProcess
GetCurrentProcess
IsDebuggerPresent
GetStartupInfoW
RtlUnwind
RaiseException
LCMapStringA
WideCharToMultiByte
LCMapStringW
GetCPInfo
GetModuleHandleW
ExitProcess
WriteFile
GetStdHandle
HeapAlloc
HeapCreate
VirtualFree
HeapReAlloc
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsFree
GetCurrentThreadId
GetModuleFileNameW
GetEnvironmentStringsW
GetCommandLineW
GetFileType
GetStartupInfoA
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapSize
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeA
GetStringTypeW
InitializeCriticalSectionAndSpinCount
SetFilePointer
GetConsoleCP
GetConsoleMode
GetLocaleInfoW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
FlushFileBuffers
CreateFileA
CloseHandle
.?AV_Locimp@locale@std@@
.?AVlogic_error@std@@
.?AVlength_error@std@@
.?AVout_of_range@std@@
Copyright (c) 1992-2004 by P.J. Plauger, licensed by Dinkumware, Ltd. ALL RIGHTS RESERVED.
.?AVtype_info@@
.?AVbad_exception@std@@
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
.?AV?$ctype@D@std@@
.?AUctype_base@std@@
.?AVfacet@locale@std@@
.?AV?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@
.?AV?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@
.?AV?$basic_iostream@DU?$char_traits@D@std@@@std@@
.?AV?$basic_ostream@DU?$char_traits@D@std@@@std@@
.?AV?$basic_istream@DU?$char_traits@D@std@@@std@@
.?AV?$basic_streambuf@DU?$char_traits@D@std@@@std@@
.?AV?$basic_ios@DU?$char_traits@D@std@@@std@@
.?AV?$_Iosb@H@std@@
.?AVios_base@std@@
.?AVruntime_error@std@@
.?AVexception@std@@
.?AVfailure@ios_base@std@@
.?AVbad_cast@std@@
.?AVbad_alloc@std@@
____________________________________________________________________________________________________
kkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkk
______kWAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWk______kA^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^Ak______kA^^^^^7^7^7777777777777777777777777777^Ak______kA^7-7-7---7--------
Ak______kA77-7-7-7----7------
Ak______kA77-7-7-7-7-----------
Ak______kA^7-7-7-7--7-7--7------
Ak______kA777-7-7-7----7---------
Ak______kA^77777-7-77-7---7-------
Ak______kA^7-7-77-7-7---7----------
Ak______kA^7777-77-7-7-7-7-7-7--------
Ak______kA^777-77-77-7 R
----------
Ak______kA^7777777-77-R
-7------
Ak______kA^77777-77-77
-------
Ak______kA^^77777777-7
-------
Ak______kA^^777777-777- fBBBB36x
Ak______kA^^^7777777777
-b-----
-^Ak______kA^^^^^777777-7
b------
Ak______kA^^^^7^7777777
bb-----
--^Ak______kA^^^^^7^7777777(
-b-----
Ak______kA^^^^^^7^777777
bb------^Ak______kA^^^^^^^7^777777
-b-----
Ak______kA^^^^^^^^^^777777
bb----^Ak______kA^^^^^^^^^^^777777
bb---^Ak______kA^^^^^^^^^7^^777777
bb-b^Ak______kA^^^^^^^^^^^^^^77777
bb-^Ak______kA^^^^^^^^^^^^77^7^777
Ak______
hhhhhhhhh|
______
______
______
______
______
______
ncM=;x
!!!!!!OOOO
______
________________________________________
__________________________________________
____________________________________________
______________________________________________
______________________________________________________________________________________________________________________________________________________________________________________________________
77777777777777
777777q
7777777
777777>
F;wS(/Z
wS(/Z8
wwwwwwwwwwwwwwwwww
333[[3
tttttQ
@@@@@@@@@@@@
YYYYY@Y@Y
YY@Y@YY
YYYYYY@Y
888888888888888888888888888888888
{{}z{|
|{{~||~
~}{}{}
{{}{}{|~~|~
~|}{{{
~|~|~|
{~{y~~
|z}z~|
~{|}||
}z{}|}{
~}}|{{~|
~~~|{}~
~{{|{y
}}~z~|
~y||{{
|z~}|{{z
z{zz~{
{}|~y}
~z|zy}{
}|~{}{
||~}}}
}}|||{
}||~{}~
~||}|||
{z{|y}z
~~~|z~
{zz|~|y
}}}zz~
~~|~|}}
~~~y}z}{
{~|}~}
~~~|}~~
~~}}{}z
{||}|}{
{~~z}|~
}{z~z~
|~z{|~}}~|
}yy{||}
~z|~~|
~~~|~{
|~~}{|{
~}{~}}
yz{}~{
y}{z}~}
~~|~~~{{
{y~{~z
2,202p2t2x2|2
3X4\4`4d4
4H:P:X:`:h:p:x:
; ;(;0;8;@;H;P;X;`;h;p;x;
< <(<0<8<@<H<P<X<`<h<p<x<
4 4$4(4,4044484<4@4D4H4L4P4T4X4\4`4d4h4l4p4t4x4|4
5 5$5|8
9 94989<9@9D9H9L9P9T9X9\9`9d9h9l9p9t9x9
9L:P:`:d:h:p:
;$;4;8;H;L;P;T;\;t;
<,<0<@<D<H<P<h<x<|<
= =(=@=P=T=d=h=p=
> >(>@>P>T>d>h>l>t>
? ?$?4?8?<?@?D?L?d?t?x?
0 00040<0T0d0h0x0|0
1$1(1@1P1T1d1h1l1t1
9:d:~:
;O;i;~;E<
<+=7=^=l=x=
>)>;>G>T>Y>e>
?"?(?6?[?s?{?
0&0+050t0
1#1(1<1F1O1i1
3*3<3D3J3Q3^3g3}3
4)4C4I4i4
9#9_9s9
9*:/:5:::
;+;F=f=
393E3Z3o3
4(464P4W4
=">0>J>
00.070
121Y1b1{1
1<2I2S2X2
3<3Y3h3
4I4V4i4
5B5_5%888?8J8P8[8`8t8
<><^<p<
1"1)131:1
1A2G2O2\2p2
>#>/>;>G>S>^>
1 4G4T4R6l7~7
P0b0l0v0
1O1h1o1w1|1
2^2d2h2l2p2
5B5K5x5
5*626E6P6U6e6o6v6
6>7K7u7z7
9l:u:{:
;J;b;m;
<<<a<t<
=?=X=_=g=l=p=t=
>N>T>X>\>`>
?!?K?}?
22o2u2
2:3?3M3Z3a3k3
5Q7_7e7
8!8,81898?8I8P8d8k8q8
1$1<1T1
202v2|2
718<8F8_8i8|8
;%;@;H;P;g;
<)<<<B<M<Y<n<u<
=#=/=5=A=P=V=_=k=y=
I0P0k0p0x0~0
1#1(13181C1H1U1c1i1v1
2%2+2E2T2a2m2}2
353h3w3
6"7(7K7
;!;';,;2;
<'<H<N<
<=)=Q=j=
=?>E>h>m>
?5?=?I?
80C0n0y0
1 1'1/171?1K1T1Y1_1i1r1}1
808i8}9
:.:@:R:d:v:
==F?\?m?
1;3z334<4~4
5[5d5}5
=1=8=B=J=W=^=
8!8E8h8
< <8<><M<S<b<h<v<
=%=d=k=q=
>L?l?q?w?{?
455O5X5
3S4$6-6Y6_6h6o6
:(:>:T:\:
<7<D<R<
>(>V>d>s>
4N4V4e4m4
3"6o9u9z9
:j<`=h=
>0D0T0
9>=B=F=J=N=R=V=Z=^=b=f=j=w=R>j>y>
888[8~8
8%9e9q9
<,<8<X<d<
= =(=4=T=X=\=d=x=
?(?0?4?L?P?`?
0 0(0,040H0h0
1(1H1T1p1|1
24282X2t2x2
3$3<3@3`3
4 4$4,444<4P4X4\4d4l4t4
5$5l5|5
6(646T6`6
7$707P7X7`7h7p7x7
8$8,848@8`8l8
04080X0x0
1 1$1<1P1T1X1x1|1
2$2,242<2D2
;,;8;<;@;D;H;P;T;`;h;
>">&>:>>>B>F>L>
? ?$?(?,?0?4?8?<?@?D?H?X?`?d?h?l?p?t?x?|?
Z0^0b0f0
141<1D1L1T1\1d1l1t1|1
3"3&3*3.32363:3>3B3F3J3N3R3V3Z3^3b3f3j3n3r3v3z3~3
307L7l7
8 9X9t9
((((( H
h(((( H
H
mscoree.dll
(null)
KERNEL32.DLL
dugacixavegogecufalomubesutabihedabikirucijaroxatuf
aviwafemogovivol
msimg32.dll
yaviwuselo xetukuhurati
VS_VERSION_INFO
StringFileInfo
045301F2
FilesVersion
15.8.62.51
InternalNamy
GodGuest
LegalasCopyright
Copyright (C) 2023, shmaer
ProductName
VarFileInfo
Translation
(Fekuxukeg sedubosehujova wuxefu gawafegenSin muni kogapagig sevuxajehohiy ferujokiwepamax zohigucaveko jepovoka rugunayosuha kahocabimurojo hewixewahem
*Lusiji liyayepayobi vorebamad vebuxivojiti
Pufanamijivozi rifikubowoc fabow2Yeludefisi luxija gay xeyumanijetuvu jupicitepufut&Hoganijuga xiz doxob wal misinemeceseb
ULukomigiviyu yezub rige jozofejo gugenujiyeveh vaniditehun gekelunum mekenomizudi deh
Antivirus Signature
Bkav W32.AIDetectNet.01
Lionic Trojan.Win32.Androm.4!c
tehtris Clean
MicroWorld-eScan Trojan.GenericKD.66136114
FireEye Generic.mg.9d2cb12118d3f3e4
CAT-QuickHeal Ransom.Stop.P5
McAfee GenericRXVR-RH!9D2CB12118D3
Malwarebytes Malware.AI.973256698
VIPRE Clean
Sangfor Trojan.Win32.Save.a
K7AntiVirus Clean
BitDefender Trojan.GenericKD.66136114
K7GW Clean
CrowdStrike win/malicious_confidence_100% (W)
Baidu Clean
VirIT Clean
Cyren W32/Agent.FTZ.gen!Eldorado
Symantec ML.Attribute.HighConfidence
Elastic malicious (high confidence)
ESET-NOD32 a variant of Win32/Kryptik.HTEK
APEX Malicious
Paloalto generic.ml
ClamAV Win.Packer.pkr_ce1a-9980177-0
Kaspersky HEUR:Backdoor.Win32.Androm.gen
Alibaba Clean
NANO-Antivirus Clean
ViRobot Trojan.Win.Z.Sabsik.255488.H
Rising Trojan.Kryptik!1.E3DA (CLASSIC)
Emsisoft Trojan.GenericKD.66136114 (B)
F-Secure Clean
DrWeb Clean
Zillya Clean
TrendMicro Clean
McAfee-GW-Edition BehavesLike.Win32.Lockbit.dc
Trapmine malicious.moderate.ml.score
CMC Clean
Sophos Troj/Krypt-VZ
Ikarus Trojan-Banker.UrSnif
Jiangmin Clean
Webroot W32.Trojan.Gen
Google Detected
Avira Clean
MAX malware (ai score=82)
Antiy-AVL Clean
Gridinsoft Clean
Xcitium Clean
Arcabit Clean
SUPERAntiSpyware Clean
ZoneAlarm Clean
GData Win32.Trojan.Agent.6A8T0W
Cynet Malicious (score: 100)
AhnLab-V3 Clean
Acronis Clean
BitDefenderTheta Clean
ALYac Clean
TACHYON Clean
VBA32 Clean
Cylance unsafe
Panda Trj/Genetic.gen
Zoner Clean
TrendMicro-HouseCall TROJ_GEN.R002H07CS23
Tencent Clean
Yandex Clean
SentinelOne Static AI - Suspicious PE
MaxSecure Trojan.Malware.300983.susgen
Fortinet W32/GenKryptik.GIBU!tr
AVG Win32:RansomX-gen [Ransom]
Avast Win32:RansomX-gen [Ransom]
No IRMA results available.