Static | ZeroBOX

PE Compile Time

2085-04-10 01:53:07

PE Imphash

a56f115ee5ef2625bd949acaeec66b76

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
0x00002000 0x0017a000 0x0009a000 7.99970294677
.rsrc 0x0017c000 0x0001ce2b 0x0001d000 6.47457023556
.idata 0x0019a000 0x00002000 0x00000200 0.649575783613
.themida 0x0019c000 0x0044c000 0x0044c000 5.91155596446

Resources

Name Offset Size Language Sub-language File type
RT_ICON 0x0017c130 0x0001b904 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x00197a34 0x00000014 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_VERSION 0x00197a48 0x000005a8 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_MANIFEST 0x00197ff0 0x00000e3b LANG_NEUTRAL SUBLANG_NEUTRAL XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminators

Imports

Library kernel32.dll:
0x59a048 GetModuleHandleA

!This program cannot be run in DOS mode.
`.rsrc
@.idata
.themida
!^<P>c
+Pnpvw
H:v(mj8%
%y\9Gl
zIuhM2
gZ;wJ-
izKC-~3
kM=ot
_^Y^fN
F$2!\XX
uL`;G#
&\%<L(
_o\B-C
2YVCN2
n&QCds
f MB5+
Z2OP`2
7Rxy0v
@%i(!w
d8|AgJ
JAu98H
8mbPLohi
D.81j
]38oMG
0>yCu_j
4L2oZz
Fzl<A.J
&237kw
$wf:sy
zR^]dw
C>16t!w
A`3Btr
>6u6r^d
Um!:$|zB
-}])zf@B
~y,Xi)
\p`f9l
RIv<B9
oauD@E
*t-kJa
,(JPp3
*%,V]-
]R+cg#
B^{T@<
_l0D-,
Y2<~>b
\*9"r8Z|
FT.i5{
V38};4T
,zAIY
c'Q55B#
vK \U"
T0sdLq
#jNIBb
h ma14-N
Pj#{Af"
E{R=^&
zdC[tV
j=!4KX
fzR BF"
#H"+#o
[(q^,C
;k!zyS=(
$*2AaL,\
o7#7O~{t
`*%{TC1z
<+d0&lj
S@\v]C
fi_x1Nf
6$D:8aRDk
vp$%N#
jgo2L
K2'HA{C
xd$A^p
93or\J8
4>dB]:
;#%HC!khU
Bdc TQ
~S }^
}e.a$)
E>yR[bZ`
sJ/Oa
bI@F'8PL}u
3|@OBB
Ko,ie*
+9=%nx
A9Lod-9
4([&_:
-K)|3JAL
#]Vp"s
\[BBKP
/DNoQQn
Te-!Km
)-dUyQ
>*[<kJ
~m9Q{Q)
GR1Oh\
;&F`,zi
lsS]"Y
sShiAz>
O398Q|
gk$$e3:
"0}~igk
O3urYx
tI.)Z;3 h>
B",E_g
MJrAuLd+
Fm<+fY<
<OU[,1
5D"iYn_
V0lzP?
5d@hC(
Ed={C]
P%B-L_LX
I}<#,uY
9u^DMOU
6kL8)5
5hvcLr
xQIh397
`=Pw,d
sU?ceu
iuX_[Z
Sm?f3k
DY,5U<
WCP^%e
Kj xBE%
),U0Ky
A?ICeH
Q5_tzoo
*}I_3Fh"O=|
62-p<A
{cRr$8
,#1W+Fs
[g-sR
d7(UD;
XzO^I
Kk!H~ e{
m5.Eu=h
;couC2
Lm L>rV
M8*?G/
vK9k>Z
>36rIG
953K#:C
m;k;-s1&e
.X,;IN
\G/VtR^
t&{jN:
C],[)
DxO"!t
*,Xzy+
`1&E>3@
f6OS7a
st7\Ij\.
%(qF.F4
"/R^ae1b4
p0SzNM
21,cDX!
i.Y^c&J
l~Xtr
"cTrc;,%
nz!v6LH6
QJl;=8Z
";Ci2SK
<7RU+K
M`:bri`
6=;_%r
r[9YqC7\
-1rM&c&,\{
iK+Rx,d
EZG+Rp}
g@/#9""
D-cnxs
Yc/O6de
];!_%{
/='Q<S
YL6GP":Cq
4jEyz$
vAF@S,|
f74pgx
}_n:=5
<_KD@}
FOgi\^
aEOiTkS
#rr5Yfb
WbYjl
Dr0%{
7 L;h$`<6I
{pn,`B#
F)97H
vem=='
4KBeO0"t
=\I_1U<
Ic"D6<
+I0v_5Y
}IiR%`Z
5;)yvt8y
6#&^Zg
brsP;U
J-gRxA
vQHW;oc
n4!mj
fl%@>_
P?Ksr>
0[:$j{
9$M\EE
\^i1'`
~[^6f;Q
.)F^[k
}@`8ty
ssQ]_/
`h}jR
/$&g>_S
S~E\P
wS#!jl
y; Hh}
8Dc#Ez][
\1KMz5K
i@LREi
e'qg97
B.{'7"
=3q$aa
+cY1QE
S{N`LC
m`3XtSW
@uUs540qn
3Kjy&[
VbuoQ5
QrhrwEy
=7Zyoi~
(IWYTX
q}au`G1
!;(GUc
VJS]lf
Rz#P{'j
{9}2.j2
OqX"1&l
<JT]Ab
?@HrnqC
%9e`L;
3:G>ue
Yr?5/5B
|{'a;|
Q~$Rtz8
/`4Pmk`
:^gT=v*[
1Oir'Zg
5&}L!c
?WV6dDIWh
:_VDjD
|s >PV
@vl+>V$
27lK'A
xH}I;r}
7@X5s*
Fs<4x^\
y'IwSc.
m4`2U4
ns<u$\0t
UBK>Gs
CF< j1.
)E/a4H
Jd4f8V
>'@}yhE
"9emmGt
/AYCi[
ht?]/n=
IN@U#3
UnGHhaEjkY
hmErRU
;@l}UB
7:!6%{
"orDV[
8ltt[?
/%2a9'`
+`"9T,H
&RG`j$
DLAnxS*%
"yviRQ
!N#ruY
)J;t:*U
'-V1QN
.aD%UT
=nHMKm
0t5QjZ!
J@#z4!
-;E:7xA}5
&h"*_x
9BMX+J\
Z1GN]3
`DK`NB
q+7}DTO
)5c5*%
%!ytuo
jhK*XR1
>ChTq_
gx)'[B
~eg$KGg
8juLrQo0
']StBu
Ld:LZ![.\
RP?DRL
rW2%CTW}
b0nl3^`)
RG}XBT
X,E:HuA
13lZ't
.,wJ!;
+nQ{H]F
2Fp[^J`
s:\BjAG6j.
KYX{2,
5P@5bR
}P2Q}ZmZ
~:Wj)(g
A&~mI=
HbVzXl
x{Q~4CK7@
s/xC<6`
K+`8`x
g*E*`X
}*SAEP1R
vEJWSK
3Qg";f!Z
\!lb;HT
qwR5h[
tP#]Jb
a4[3iA
#<i5/=
5RI+Rd,;
K^`jG.;g
8wE`wWH
h@P.Au
o?a=9}T
KZ[LK5
EU"59<
V$7[?qU
M'#]gN
]wt4=Q4
eIW'W%
=q$$[
i?}!rf
kW$$?]u
y*l}T`
>;]}$'
%:S|%^
X1c!MO/
A>SX0x
edP!A]
jlv&>$
|"Bip]
yYe${4
Ug_1,H
AgD) $
D0U)K&>
c*|@2+B
g=irADv
*"UM#GzUB;
:g1B>e
Et]7u<
wT=M"m
:f_M3t#
E7L6f1gg
l~p$a'
-y~~{9F
bmmR{|8]
]FHyU>
g,=3E)+'
0TL0&d
tpfYB[
5_nO`8
GOS6=]
=Ve|xV
;mU{@F
z7j"Y:A
U&nW,U
/jm<L>
T]yno|P!
A7[u7,(t
z\8]_i
1vu~=+
}N4{z+
Lzv,+7
vxSi!{H
HL$;
(W/\M[
Xd`ioi
4!M-8p
?TVP(V
j'>cg0
22onHW
(cx+GQ
UqISLJ
Av;%ZH
qY6cJ:
MX[b4e
(w)+&My|
|S)#M9\
eAAIi<
AxsbT=
~UQ,]s9
/W5Z9!
|9YrXWr
A.**n-
WTy3Vn
.P>D|G5
pY F".
d#!w72M
<D;E2b
=dwq^v
v_X[\&
_5\5M|
%-/9L_
:nHPzoEo
cEe!CaZ<~
mCE([8
4&o@]/
d&)!sE
fFgt=j
+B'>nh
?GofX!ml
y904NA
b*Acol
}$g_E2J
l{==D?
RFpX[c
@M5k#;
u`qLxl?
=oI\*=
`]6f#G[R
bm_DWiQ
a@j(PU
mLT>VQ/|{h
p6A`AJTr+7
(u3{o&o
+9=<'5
HR"Vk&6@
oDa~h#{
]v;`mK
@"O[+dr
/wEaSy
@mxRr;
CWOJ,r9
"w?wXc$_
gZh326#6
NK<3 x{
3VCRx
Cmca]t
b|hp]q)
vQIe[/
L6'{(Z
6'(O?-
s_dSEb
A$GLwuA
4Be5O*
8gF@`+gS
by>)_{
b/^;uKxA
$HqMHK
6R\'/]Ai
=q>D'G=
rz,<)5
*a0vIn
FPuqfP
<-:m;y
7R8!1i
R|"y=\A
"r4p9M>Hv
-6O>^Pyq
o[Sm5
FX)6{|A^
AgKN=b
+_Lx\9
5y'yfM
pIBn%.
P68V5v
?3p\ql
hR#>$:
V@W*A
Fm&I2Lm
\np_O>
pQIb9d
ItHuop
<oNGto
JZ>kG|
0ft0qb7f)
r+'u6^))H
?H%w?2F
(O(Kmn
cA:0B.
>kB-nS
W3-K/;
LS5xIc
3Y6Mys
D*rDq=
O{ZN)H
N;n;/`
KYSbZk
S!5ylJ
=JDyyH
[\/1]#
6vB7_n<-
k!^dpV
(}IAw.b
#?]9mb
k(|q0L
[cZ$/e
Sm/M)BjfXZ
RP%!o.
17?64Fp
&;l|zw
0U:AeP
F%OM.]P
}qj4:S<
(H%rT
a MgIc
nci`nj
*%1[[&
oD]lvU:$r
EK6_zc
8g8*2MG
~TkGa|c
Sq6(F
bcay!@P
?3nU]o
] ]E_1d
E5.;E{
FPp#r~
~Qlqrmp
JpH10Yx%
nQ0S=1
T08C%M~
r&'Tj~I
eq5PO@=
~3KTm^
X@yPSh
hhyTM*?
w kF'`BO'
kNhaC^(
_?y`a6n
Ro^{KxC
%;zX}9
B^}\8D
d5?KBk
VpF\Xd
RZhs>+"W
8Vs-Yy\
!5T-s>`
G$nvTb2
)Pj|fE#BA'S(
wt%GP*
eP<kLZ~
cWow{7
%ihE~Xj
a[*XL'
FBE0Q
):|6{Z)
"8+pf%
0Y>-}^
]~`/r'
<5mLq.J
ju\Z@]
BN4<Kq
e&RBym
FtTw8>
TTAFQd
F+kF+e
9j`_Wf
VawsY;i
/gqV("
[ HZ:m
[^%OYx.
n%GBUcs
5X39wS
CCG.d}J
7gogc[y3
@)U,-E
LtyaW{
{OO`eL@~
A);4"e
FGvc[Wk8aG
N~!]#RE
VhHc@R}'
ywm3hg
79!>&O
s86xZJ1
UH+Vg|Gb
*(=x"doB'(
h9Ml?QaJ&
9Ha$jri
yr.<h`<
OH:Uf`
&3-E@C
uB{I~%9
|q/Kp%
7-)d]]C!8u
XR`iM@8r
1Xdj5P
v$VLwo/d
@#Rq$s
z,caPy
F__GBt
-Fd^}N
p]F)f{
mC1C5W
t[^&)
ip(_pI
ThSNvN
:=;>j7K
h;_4Dy
KC^$n4T
k,-{uZ
R B2`P
tJ2tS.
ic*R3o
ORfJ4>
cG\I1d
&K'pcL
i@?4P,f
2+D"K"
E+lQ#"
<_9Z^H
^*ZTYA
zOBR{:L@
vUse&0
WLp.'
o6gmeN
^3eu?,
H\`m`[
Ix3njxs1
Hi%3,h
a$37x.
f-;Rj2
S_';;'
MNjZuf
353/I}
Bo4u3;T!
8B!%:i`
> 89K>
14lM<+
I&cJ|4
S*/vT!
9:|6<X
COR7fg
FUAQyP
dD|[0K
h:jtaW
2S!t#H
\Z\M5Cv
~?3CS_
+.3<t'
O2Sxug
5 Rvqm
Z5quhI
-%sDv[
(z9=il
-A8'a5
Vi5OXL8
~/_sd
!>fU2K
}VZ6Mz
cCX:IW
L>8l\O
Z5jq-h
jq{Y!;
H)@:@R
^"[Izo
'i$oGnh
-`VuGZ
O?{N *w
/+}!Bppp
^:/H(~L+
QR5f<u
!&=jmp3
B||-y8
@Bar*Y
e`~)q*
VL"l%H
Pt(:%K
`=P..Y
BewCjqQ
u:Q kw
u!E{r0{
9kFZ\Z"
.m+:~w
q4Sz,6.U
$_<LQJ9
=7$_3ee
m"9%U7%k
m~@LpM
.a$z1u
6%KV"^
`CtO&7
dFQ)pT
\ZFuq$
^!>_D#
-;7%kD
Mj=A{V
&&%LRT
FZEUMB
)]b5/_
@9j>|2
</%;IK:r&5
@HCGUx
98zO08
!}A5Ui
otrrcZ
:5RsMU
MIYEo
'bZ0Kg
y7E8BU
@E@[m2
H#h^j|v
Jl8q ^[
p/BH%]
#zPx^vC
m,Su["
|Z];i@-R
un^vtP
k_v?Ir
'ZmJ`6
"bF=51
wg`6u
6= [Dq
G6\tzJ,
4-?![<(1
uk\~M!
pwTw8>
2 Hc%-7\
!,+FI=j
Ja2$-SU
P"=/NH
ku`F@F#?
c)WW?9
uQq/IBBL"
d?S*T
I|h=~
#JOo~J
rPNC__m
-Qpr4^
$(=bhI
^_fl{:%c
w}9zY=
dZ)1Xr
"8BIbA>K
aiJ],Mr
4vNH#d
Tr7{)'
H2hzH2F.
4ZvKay?
ZBSeY"
X-u#|,|
@"@rk4U
!`O"_g
-n=)K0XA
CYj!2c
7V7'^?
R# hp]Q
}(j@zt
<1V*Vj
<5()U3
'OP`Sd
Zon7ph>
EeeL>0
:<(9}]
<PN<*'
DZ;GGt
TD;Q11
M_z`z}cG
Sl\=0-:
y9b;sEjC
:dlfa"
x9vy5%
Q_^DC.
_Iq[=2[
+T7v&S~o]
zzo+_u1
Tm,Lba;?
+.sQ04
&m@|`e
~7j rD
#qTUr2o
3I[*va
k aJv6
2bnMv<Y
T(*%e4
m6'a+;
`-.R8o
C'>5IT
RR?kTRh
BG\K51
*&m:*
x'udEW
${:XSnT
b8vL@}&
B!v'bP
xE+^|=
Uo1D1\
sBdk+(\t/u
)XV}S[
w:[g)G
S(hQA>
QtY:R,OPDD|
-pC@Y8
#/A?>5+
MMqV9^
*bDH?9)
zs~T,U!
I:Z<PQ
sJ0 .H
Gym9]m<3
T5%XM.
c>;~Z)
=*]>JxZ<
dFw%"u|
YHab(T
|=)y_01
lLL\ye5
,:{y8Y
%o;>I>
/3K~5:
oD_WiQ
>KD#9{
-#}Zt,
G/Q<cyT[{
`q:u{
WTd&iK>2)X
h{}o.>
SeEQi)
r}lih"
GTLTgrl
35"sVk
v"DTEIY|S
t)JiEw
fGMsa8g
Y$bu&nWT
EyX}A
e[OO|~
?AaH-|
?_;ahd25
bMR.phg
6"xRm
SP_;M1
hY1Y`3~
chBH{ca
QU65S0"
4AYE^0
gX.Pj=
A0;"E5
>1^xm+
6E'F6e;
L[tw}3
.3:B+)
p;;)xF
<Zu"FF
f?;iU_
8_ \^%
Oj]q+`
Ys3mZI
l=+Hb
MJ*J.d
Zd2D;G{WA
YErl$)s
x+|_Y.
lRPk0VF
P;&yqj
>O|.40V
UbVH*7w]
%~h/6
nj?LdE
@.4$M$
!-oulGj
_k1=Gn
Q'b*3y1t
?:~S}O
*-e]1D
A~{(7b
:x@V$-
5kNIp3{
~if\+~
/eC~<!
kxoZV)
6MZ[=+
CmXR2
[vf;\e
HYq%&8
&.[-53$
\n]|ts
~jiv\I
EL?E`@
1IfT%@wY
_\t$Bv
%"=ds
O>ZG"]Y
eN?t}cV$
p'<"\R
17f*v=+
7! b|v
~_Enh{kkz
>OxHuD
Xh=L fl
QjQK$<
O<5.v6
ljt2_
*Z?-F&j
ofQl0XsH
C^uNf
L6`s=mmD
!7{)!b
kp7Lnk
1fK[**
n"Z+]P
JUd9)
Ti(VxDr
+3:y.?
4[A<X<
8_ynYv
C`^/MR
7_!vr(m
e'&!{
F,Cz97
~z|i"=
4mQqc,
Ay)8e
;3Y8a#
2A<$=Z
/pL7?]
HsvZf8
,UFs1'q
2:? 4@~
db:$+"
oNTO{>M"1
9"QE6<C
Z;-!3W
6iFVq(
&=RI'ZB
Nbf1 "
XH}P?uF
"YM^un
CVcF6~
R)qxi1q(q
4Cj}mbg*`=
295lxu
aFN#Bn
78zE4pkt
6]|=0p
%H,hn@
Caks5u
GB4A^Z
$i,bq/)
)<AZP'
nlMn&0c
YIuR3
Y:x1]N
ZWg6?*
U)F4lX
u},rREV
AYdKcb?Jq.
J2wHaaf
(@[l7gkk
vY0nb'
mLaYGf
XylYM
ut7x6f
i!tJM+!
L;#u}X-
^!`uh2o|
n!%CH*dg2#
-bB Ev
ak:m!S
<#uS4D
Bn8:PT
F1QEVlX
e%@]Uz
r_kv=|
y ,[5O
qO+.`AI
VsZmsT1
+\8V)/1
/#h{cz
Zil%?|
[Y'}\
$a'8|l
O%2hs@
~J/e[k
+N1x2/
jIj/W;
{#vvMt
Qx<"QW
*fMj}`
=[86R!
,s+qqpU.
,_##""
%7mrxsd
&):2nxH
YQYV9M
<Z*si
<+r@/\
?${:n%
)R#jj
$5ibm0
T)=aT"UB
?F_&~
, T"O<!
)?z<3i
}TbbMu
u0~+z{
:TEF;
4~.i:)E
`;TmLYv
A"Bn9}T
B7sM^|n
7\{?Mr
Q#nbywQvaS9
+u!O `
`35Ou
1*)7UK>f
1C``;h
3}fnw
6^bt;L
kwF4}")
|I/A]G
w&S%o|
JTZ<e&
{9Zwuu
~%b<wu
d+Z#h/
xU;p'T
PWK-o}D9
dI?#$&g
xX!6K$;
26QmU4
b7T[uR
gXLBG?
b6jD;#,h@
QQ9kQpX
VMi.5
Mmv%ZR3
&%}hEDr
[Q{q3F
;\wXjS
#b8[/H
^u#:k[
3Q#@!>
LU@_]-8
XLPdKTz
SoW'P
R83r<BiS
\R'r9nq
{e)JPB
dMFFN!
v3?fd
b`DjbD\
b]5Kvhn1
cP#ue1
ah>(r8
s]%0n<
_W<Ow[W
3{z2dF
a.?nr{N
2~=ba@
3z#=|4
ysFe)]
S<VszO
)z_6{}
s.L=>s
De;kAN(
4<gf7q
2IMAM)
V<fhBa/
uj6o,*y
O'SP)+J
K~g4(9L
2}ka@u
PC)=OJ
LSNNlZTH
D9fC=;:
mt]8F6
n@@E:;
aT}9jB
_vCV1hE
E/GZ6w1
+UX^<SUS
/>In_,2
-kwrAZ
49U{Dg
g44MR0
,K_>u
S&r*Nbz
>]1tn^4
"Y"c #m""#v$$%
##-""+#!!)) !(/ '5&=%D
$e $n#"%v&'&
%%3.-9$44>(89B+<=E.>>F/??F/>>E/;;B/88?/66=/55</44;043:043:043:034:034:045:055;055;044<044<044<044;044;044;044;044;044;044;044;034;034;034;034;034;045;045;155;155;155;155;155;155;155;155;144;144;144;144;144;144<144<144<145<145<145;145;145;155;155;155:144:144:144:144:155:155:155:055:0559133811163//45,,19**/=))-C'',I&&*P%%)W$$)^#"(e!!'m! 't! &{#"&
0//24324;;69CC;@II?ENNBJQQDNSSEOTTEOSSDOQQBOOO@OMM?OLL>PLK=PLK=PKK=PKJ<PJJ<PJJ<QJJ<QKJ<QKJ<QJJ=QJJ=QJJ=QJJ<QII<QII<QII;QII;QII;QII;QII;QII;QII;QII;QII;QII;QII;QII;QII;RII;RII;RII;RII;RII<RII<RII<RII=RII=RII=RII=RII=RII=RII=RII=RII=RII<RII=RIJ=RJJ=RKJ>RKJ>RKJ>RKJ>RKJ>RKJ>RJJ=RJJ=QJJ=QII=QHH<QFF;QCC9R@@8T==6W::3[771`54/f22.m00-t..,z-,+
@?3RDC5UKJ8[TS<dZY?k__BqccDuedEvfeEveeDvdcBvbaAva`@v`_@w`_@w`_?w_^?w_^?w^^>w]]>x]]>x^]>x]]=x]]>x]]>x\\=x\\=x\\<x[[<x[[<x[[<x[[<x[[<x[[<x[Z<x[Z<x[Z<x[Z<x[Z<x[Z<x[Z<xZZ;yZZ:yZZ:yZZ;yZZ;yZZ<yZZ=y[[=y[[>y[[>y[[>y\\>y\\>y[[>y[[>y[[=y[[=y[[=y[[>y[[>y\\?y^\@y^]Ay^]Ay^]Ay^]Ay^]Ay]\@y]\@y\[@xZY?xWW>xTT=yQQ;zMM9|JJ7
ML6tQP7xXW:
stl{wxrY
``Xr^_[Mdff1}
UUMmOPMGNOR*^`e
QQHlJJHFEEJ(IIT
OOFkHHEE@@F&::I
ONEkGGED>>E%87G
PPGkIIGDCCI&FGR
SSJmLLJFJJN)YZa
XXOqSSPJVVX/npq
bdYycd^Vmol<
nq[wot`Su~f6
eeXoab[J_b`,fmg
a_Vl[ZYFUU](SUa
_]UkWVXDNM[&DB]
`_UlYXXEPP[&GG^
aaVlZZYFSS['KK^
bbVm[[YFSS\'KK_
bbWm[[YFSS\'KK_
bbWm[[YFSS\'KK_
bbWm[[ZFSS\'KK_
bbXm[[ZFSS\'KK_
bbXm[[ZFSS\'KK^
bbWm[[YFSS\'KK^
bbXm[[YFSS\'KK^
cbXm\[ZFSS\'KL^
dcXm\\ZFTT]'LL_
edYm]\[FUT]'ML_
edZm^][FUU]'MM_
feZm^^\FVU^'NM_
fe[m_^\FVU^'NM`
ff[l_^]FVV^'NN`
gf[l__]FVV_'NN`
gf\l__]FVW_'NO`
gg\l__]FVW_'NO`
gg\l__]FVW_'NO`
gg]l`_^FWW_'NO`
hg]l`_^FWW_'OO`
hg]l``^FWW_'NO`
hh^l``^FWW_'NO`
hh^l``_FWW_'NN`
hh^l``_FWW`'NN`
hh^l``_FWW`'NN`
hh^l``_FWW_'NN`
hh^l``_FWW_'NN_
hi^l``^FWW_'NN_
ii^laa^FWW^'NN^
ii^laa^FWW^'NN^
ji^laa^FXW^'OO^
ji_lba_FXX_'OO_
ji_lba_FXX_'OP_
jj`lbb`FXY`'OP`
jj`lbb`FXY`'OP`
jj`lbb`FXY`'OP`
kjalbb`FXY`'OP`
kjalbbaFXY`'OP`
kjalbbaFXX`'OP`
kjblbbaFXX`'OO_
jjblbaaFXX`'NO_
jjalaaaFWW_'NN_
jjalaa`FWW_'NN^
jjalaa`FWW^'NN]
kjalba_FWW^'NN\
kjalba_FWW]'MN\
kjalbb_FWW]'MN\
kkalbb_FWW]'MM\
kkalbb`FWW]'MM\
kkblbb`FWW]'MM[
kkblbb`FWW]'NN[
kkblbb`FXX^'NN[
klbmbc`FXX^'NN[
klbmbc`FXX]'NO[
klbmbc`GWX^(NO[
klcnbcaGXX^(NO\
klcnbcaGXY_(OO\
lldmccbFYY`(PP]
mmfgeedB[[a%RR_
nnh_ggf<^^d!VVb
yxlxpojUjji5cch
yxoksroIono-jjo
xxq`uus@ttu&qqv
xxs[wwv<vvx$vv{
<?xml version="1.0" encoding="utf-8"?>
<assembly manifestVersion="1.0" xmlns="urn:schemas-microsoft-com:asm.v1">
<assemblyIdentity version="1.0.0.0" name="MyApplication.app" />
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v2">
<security>
<requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3">
<!-- UAC Manifest Options
If you want to change the Windows User Account Control level replace the
requestedExecutionLevel node with one of the following.
<requestedExecutionLevel level="asInvoker" uiAccess="false" />
<requestedExecutionLevel level="requireAdministrator" uiAccess="false" />
<requestedExecutionLevel level="highestAvailable" uiAccess="false" />
Specifying requestedExecutionLevel element will disable file and registry virtualization.
Remove this element if your application requires this virtualization for backwards
compatibility.
-->
<requestedExecutionLevel level="asInvoker" uiAccess="false" />
</requestedPrivileges>
<applicationRequestMinimum>
<defaultAssemblyRequest permissionSetReference="Custom" />
<PermissionSet class="System.Security.PermissionSet" version="1" Unrestricted="true" ID="Custom" SameSite="site" />
</applicationRequestMinimum>
</security>
</trustInfo>
<compatibility xmlns="urn:schemas-microsoft-com:compatibility.v1">
<application>
<!-- A list of the Windows versions that this application has been tested on
and is designed to work with. Uncomment the appropriate elements
and Windows will automatically select the most compatible environment. -->
<!-- Windows Vista -->
<!--<supportedOS Id="{e2011457-1546-43c5-a5fe-008deee3d3f0}" />-->
<!-- Windows 7 -->
<!--<supportedOS Id="{35138b9a-5d96-4fbd-8e2d-a2440225f93a}" />-->
<!-- Windows 8 -->
<!--<supportedOS Id="{4a2f28e3-53b9-4441-ba9c-d69d4a4a6e38}" />-->
<!-- Windows 8.1 -->
<!--<supportedOS Id="{1f676c76-80e1-4239-95bb-83d0f6d0da78}" />-->
<!-- Windows 10 -->
<!--<supportedOS Id="{8e0f7a12-bfb3-4fe8-b9a5-48fd50a15a9a}" />-->
</application>
</compatibility>
<!-- Indicates that the application is DPI-aware and will not be automatically scaled by Windows at higher
DPIs. Windows Presentation Foundation (WPF) applications are automatically DPI-aware and do not need
to opt in. Windows Forms applications targeting .NET Framework 4.6 that opt into this setting, should
also set the 'EnableWindowsFormsHighDpiAutoResizing' setting to 'true' in their app.config.
Makes the application long-path aware. See https://docs.microsoft.com/windows/win32/fileio/maximum-file-path-limitation -->
<!--
<application xmlns="urn:schemas-microsoft-com:asm.v3">
<windowsSettings>
<dpiAware xmlns="http://schemas.microsoft.com/SMI/2005/WindowsSettings">true</dpiAware>
<longPathAware xmlns="http://schemas.microsoft.com/SMI/2016/WindowsSettings">true</longPathAware>
</windowsSettings>
</application>
<!-- Enable themes for Windows common controls and dialogs (Windows XP and later) -->
<!--
<dependency>
<dependentAssembly>
<assemblyIdentity
type="win32"
name="Microsoft.Windows.Common-Controls"
version="6.0.0.0"
processorArchitecture="*"
publicKeyToken="6595b64144ccf1df"
language="*"
/>
</dependentAssembly>
</dependency>
</assembly>
kernel32.dll
GetModuleHandleA
!This program cannot be run in DOS mode.
`.rdata
@.data
.pdata
@.gfids
@.rsrc
@.reloc
Z:\Development\SecureEngine\src\plugins_manager\internal_plugins\embedded dlls\TlsHelperXBundler\x64\Release\XBundlerTlsHelper.pdb
.text$mn
.text$mn$00
.idata$5
.00cfg
.rdata
.rdata$T
.rdata$zzzdbg
.xdata
.idata$2
.idata$3
.idata$4
.idata$6
.pdata
.tls$ZZZ
.CRT$XLA
.CRT$XLZ
.gfids$y
.rsrc$01
.rsrc$02
KERNEL32.dll
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
<?xml version='1.0' encoding='UTF-8' standalone='yes'?>
<assembly xmlns='urn:schemas-microsoft-com:asm.v1' manifestVersion='1.0'>
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v3">
<security>
<requestedPrivileges>
<requestedExecutionLevel level='asInvoker' uiAccess='false' />
</requestedPrivileges>
</security>
</trustInfo>
</assembly>
{!g+}&
ye(z$
ye*|
Q9"r!e
d"`[hP
DSo1w
RYA */
(j! 9I
(Uv?bI
$$E)&I
$$fE!e
Jc2<H5@
fD)+H%
fA)9H5?
0`^8|H
fD17H1
fE14$I
fA)4$H
A37I91I
E3*M9(H
A+4$L!
?D98H1
A32I93H
AXAYAZA[A\A]A^A__^][ZYX
-3+MSI
)C;rTI
E34$M1
fE)4$I
/:NWDH)
#HcA9
D#7M92I
fA14$M
PQRSUVWAWAVAUATASARAQAPL
AXAYAZA[A\A]A^A__^][ZYX
$]fg{I
fD)!L)
fD1(M1
!;E!<$I
/R!HkH
fA)4$M)
fE)7I!
3/\WOH
fE1'I1
6vxv2H
+Z=PzH
fA1<$H
Ir{,f-
fE14$I
!?7F&H
$$fD!#
"B%-L)
fE1,$H!
fE14$H
2M94$I
fE1:M1
AU@(:I
#2H91I
7FJ\~I
A#?I9>H
fE1,$H
+k$JI
+]9}.I
A34$I90H
jP)dM)
fE12M!
AXAYAZA[A\A]A^A__^][ZYX
$Z )I1
D+0L92+>I9}
D##M9&I
E3,$M)
Ic:H5
fD1#M1
fE)4$I
fA1<$I
fE10I1
(~gvBI
fE1,$H
D+"L9&I
A+4$I)
AXAYAZA[A\A]A^A__^][ZYX
fA):H1
fE1"M)
AXAYAZA[A\A]A^A__^][ZYX
fE)/fE
/R0VeH
6fD)7H
E+<$H5
#:I9>H
):>.2L!
AXAYAZA[A\A]A^A__^][ZYX
A38H99
AXAYAZA[A\A]A^A__^][ZYX
fE1/L)
AXAYAZA[A\A]A^A__^][ZYX
fE)8M)
$$A <$
E+;H5x
Mc)H%?
:IVNH5
#E#m:H
fE1>L1
$$fE),$H5
fE1<$H
AXAYAZA[A\A]A^A__^][ZYX
fA)4$H
fD)1L1
fD).I)
Mc<$L)
+1S4KI
/h@Gm{L
fE1<$I
fE1,$L
2)jv|I
6fE17I
E!4$H)
AXAYAZA[A\A]A^A__^][ZYX
.YprKI
.!=.1I
33H97I
0F4\!I
AXAYAZA[A\A]A^A__^][ZYX
$$fE)4$
.y]ImH
AXAYAZA[A\A]A^A__^][ZYX
fE),$H
$$o^<I
E3,$fA
AXAYAZA[A\A]A^A__^][ZYX
fA)<$H
,tPH%x
&o@1L)
3xW11H
D+)L9(H
ypCBH5
D+"H-?
AXAYAZA[A\A]A^A__^][ZYX
,$X#cWH
A!>H5?
AXAYAZA[A\A]A^A__^][ZYX
AXAYAZA[A\A]A^A__^][ZYX
jIWkD!7
A#3H93I
_u;4I
AXAYAZA[A\A]A^A__^][ZYX
D3+L9)I
fA18H-
YD)6H5
6wqb)I
- J+gI
fE)0M1
hu*X{ASI
fA)>M1
]ThH5@
fE)2M!
0Hm;aI
D++H%
30H93I
fE14$I
[=9tH)
D+*H-@
fE14$I
fE1(H5
D#:L9?L
AXAYAZA[A\A]A^A__^][ZYX
+>I9<$E+
fE1L!
A14$M)
7;rYXI
fA)4$H
6H90M!
fD)L!
Mc:H-
x!s0H!
AXAYAZA[A\A]A^A__^][ZYX
"\^%3H
E#"L9#H
E+4$L1
fE)4$I
ZfE18I
AXAYAZA[A\A]A^A__^][ZYX
fD1>M1
*]M.RL1
&CLOeM
fE1+I)
QA|^I
+1f7I!
fE10M!
eVxWL!
AXAYAZA[A\A]A^A__^][ZYX
D+!M9e
fA)7M!
E+,$H)
D+9M9;I
"VPe\H
E04$M)
E3,$H!
AXAYAZA[A\A]A^A__^][ZYX
(OpD8H
fE)4$I
E3;L9;H
&]EteI
Ic>H%x
AXAYAZA[A\A]A^A__^][ZYX
p<0VM)
+%`UH
(/V4(I
^Q%4I
AXAYAZA[A\A]A^A__^][ZYX
AXAYAZA[A\A]A^A__^][ZYX
E1<$H1
fE1,$H
097.bI
D#/L9(I
D3?L9;I
(1eUbI
!8B6WI
AXAYAZA[A\A]A^A__^][ZYX
0qAW.I
E14$H1
fA)8L1
fA)0H1
D+;M9}
'LFZ^H
+w;55I
fA)?I1
fA1?I)
"j)(XI
fE14$I
D#9L9?I
fE1,$H
"@K/GH
$$E).I
E31H%@
fA)<$H
fE),$L)
$ARTAZI
H3,$H1,$H3,$\
yhc5LmP
|h~(T/H
$$PASA
XAUQWH
\>OATA
Em~RTZH
D$pAPA
VwcMAPPh
$AUUh/
A_XAVA
L34$L14$L34$\
,$TA]I
$AVTA^I
4$\hic
$ASTA[I
<t}~E)
WAVAPA
AXQAQH
*hehwoH
D$pARA
4$XARI
ASAVATh
L3,$L1,$L3,$\H
A\D)T$
L3,$L1,$L3,$\H
|AYAQA
6?_[AUA
cA]A\VH
+APUUH
L'l'E)
$AWATh
$$ST[H
,$RA]AUH
SAQTAYI
W)\?%g9}Z
vN_ATA
H-..;H-
4+AUPH
4$[AUI
hBN~=hx
ATQh36{WY
4$ZASI
AVAPPH
$\APAWA
?H-"B~?H-
"B~?H-
wATSA\L
4$YARI
$AUTA]I
$ASTA[I
>vRAPA
WVA]AVA
,$ATTA\I
$$\AVI
*{{)l$
*AWTA_I
4+A^A_AVS
4+5"jH
H3,$H1,$H3,$\H
DpH)l$
|q-uLO~
AUTA]I
$AQTAYI
,$2+~-]H
uA{h=auWh
_UWShX
,$\H-g
4$TA^I
4$[AUTA]I
$VAZAR
$$TA\I
$AUTA]I
L34$L14$L34$\H
<$AUATM
ATA]A\H
H3,$H1,$H3,$\SH
oU^)t$
h@PiML
L34$L14$L34$\AR
uATTA\I
pA^Uh-
,$AQhcN
PARAVI
A^L)T$
:wD1|$
4$YAPI
"hoD)
Aj]H-}9
?H-&O^oH
$1ukwH
H3,$H1,$H3,$\H
h?u?{AWSH
h)=?AQM
$APTAXI
nA^APA
?A^APAVI
A]AYA^L
6qY0D1
D$pAVhWn
}A^ARA
0vzH-Y[
,_{APA
4$\hZ7
4$XPTXH
4$[AUI
wATWA\H
c|_ARM
d}?A\h
!VwA^1
$\AWRH
-#AXATA
~w;AZI
>H-)S
AUTA]I
+hvix{VL
+AVAWM
e?PAVA
;hv-gOL
4$SA^AV
A^VAQA
$ARAUA
A]D1T$
uw-Xw_
4$AYVH
$ARAPh
8<[[ATAVh
4$YARI
ATQAUI
4$YATI
L3$$L1$$L3$$\APA
GwH-Sr
GwH-P|
yAVPA^APVL
D$pAPA
$ATTA\I
$AWTA_I
<$\ARA
4$[AWI
4$YATI
L3$$APM
AXL3$$\
4$TA^I
$APAYL
ATTA\I
UZ_ATQH
{AUAWA
4$YATTA\I
L3$$L1$$L3$$\W
ZZAQARA
D$pATA
4$XWT_H
$ASARh
AUPAVI
$}wH-%M-KH
%M-KH-
4$[AWI
1u=AXI
$h[diVh
4$AYSH
$$AWAUATh
$Tn^t^
A\SARI
$\ARh_L
9:l.A1
,$F65vH
F65vAQH
DBL1l$
D$pAVA
^QAUAPM
ARTAZI
}uH-I]
&?oATA
m5AVASI
$hhY]|H
AWAUA_L
AQTAYI
4$AXUH
H3,$H1,$H3,$\h
nA[AVH
$\ARh"-o;AZAQA
egAWVL
A]WAPA
L3<$L1<$L3<$\Q
4$YUT]H
4$56>G[
Io>XARA
<$\SATA
D$pAUAWA
<$PA_ASM
4+UARI
uATAWM
?f{A\A
?{H-%p
#H-hSY|H-
$APAQM
AYL1D$
<$TA_I
4$ASQA[L
+^ARRAVM
_ASAPI
*s_H-LA
AWSASI
4$XASI
H34$H14$H34$H
?fA1>H
AXAYAZA[A\A]A^A__^][ZYX
\pIQ_H
$$vsZuI
fE)4$I
PQRSUVWAWAVAUATASARAQAPH
9AXAYAZA[A\A]A^A__^][ZYX
$$fE!e
AXAYAZA[A\A]A^A__^][ZYX
AQMc0I
.y;lYI
'dy_7H
0OdF_I
fE)4$I
$$E94$
-{)6JI
+b '0I
-dMQtI
-HP\TI
+:PJoI
fA1<$I
3^K>BH
"Zw:H
$\qACH
/= eTI
)^Pd#I
AXAYAZA[A\A]A^A__^][ZYX
AXAYAZA[A\A]A^A__^][ZYX
fE),$I
$&o]ZH
.2OHH
-KWo\I
fA14$I
fE)<$H
AXAYAZA[A\A]A^A__^][ZYX
AXAYAZA[A\A]A^A__^][ZYX
. GAjI
AXAYAZA[A\A]A^A__^][ZYX
2AXAYH
fE)<$I
.4ba"H
fA14$H
/_0dNI
#4W9$I
,$!bMCH
!<h;DI
AXAYAZA[A\A]A^A__^][ZYX
0[ 'JH
6`7jmH
fE14$I
$$fE9"
"hx$mH
fE)4$H
-UFI5I
AXAYAZA[A\A]A^A__^][ZYX
fA1<$I
AXAYAZA[A\A]A^A__^][ZYX
$$A!4$H
iATHc7I
2ae0yI
Sf-VqH
/oVosI
fE1<$I
/*^7"I
AXAYAZA[A\A]A^A__^][ZYX
$ATTA\I
L3$$L1$$L3$$\H
AWARA_L
A_ZAZAQ
ATARA\ATH
]6APh,
$RARhm
$hg1K{H
<$TA_I
L3<$L1<$L3<$\L
$AQTAYI
4$YST[H
_V1D$
$ATAUA
4$A]SH
he4kwH
+UASASH
M}APAUPA]AUL
+AXAVA
4$A^AUI
7wH-Pf
HxhlO
>AUSA]L
H34$H14$H34$\L
,$ASTA[I
$hoLQWH
$RARARH
RRc[ATA
4$YRTZH
[APATA
AQQSh}
A]XAWA
H-NM2wH-
<$AQTAYI
h^Q?{L
$AWAXL
{SAWATA
$ATAUA
htMo}h
h)sgtRH
$AP[ATI
H-P3|6H-`
,$AShP
4$PA^AV
1E{%RH
(1E{%H
4$XWT_H
H3<$H1<$H3<$\
A^A\AXI
ZAUARA
PAQPASI
D$pAVH
$PYAWI
AYQAVh
wPQAQI
AYH1L$
<$ASh]
4$XAPTAXI
4$[AVI
pvFgH-
yH-pvFgH
$AVTA^I
4$\AVI
$APTAXI
4$AXARI
)zwRUH
4$hyuU^A^A
JnD1d$
A]SAVA
oH-&,{9H-
H-n{~\H
&,{9H-
$PA[APM
}vAPRAXL
AWASAVM
$AVTA^I
hD@z_AQ
hg<?gQ
mo>A])
K$=;ASA
4$YAQTAYI
oO:ATASQ
_A\APh
pXRASh
AVWhUZ
D$pATV
}A[H-:
}H-ejv}H-
AZVASA
4$XASI
}OXAWA
4$YAPI
[ARAVI
{A^AUM
,)A]AZ
4$YARI
Z[XAVA
A^H-5Z
H-e[|KH-
+h??H-
cH-+h??H-
$$YA\QH
Y?YShE}
>7PATATA\H
,$\A\ZH
H3<$H1<$H3<$H
4$[AVI
$hSp{=H
$$ARSH
$ghn}X5<;
4$Yh%~
^APAWA
hK_?oL
X?PARVAWI
$APA[L
4$XPTXH
wARSATI
A\SAZ[AR
+AZAQW
3H-m={rQ
Pn~h^=
$ARTAZI
4$[ASI
4$[ATTA\I
H34$H14$H34$H
<$AWTL
L3<$L1<$L3<$\L
?A^AVI
+A^AWh#
{WA]RH
$hH yVH
A]A^WH
A\SAPA
D$pAVA
y.ARAUh[v
;QRh@'
<^G{H-b
8]H-YY
wH-<^G{H
AUTA]I
$A\AZH
hPy~^8
%5v6 N2-
;SAchz4
NhrIPU&
cb5k-\
@o,I"pv
zU%_]O
4Fj&Sdh
]kF[C=
~6_QfCz
bzd(d '
6";yha3
'gq2*\
11hS-{4
'gM0_X
l++vn(
b%J?7h`
v+7V2'
BgM0'X
CDqIo]
BDh$_M
BDh$_R
BDj$_M
q,C<u(
t$CCn+
g$C!h+
+C<q+7U
+C<q+7U
+C<q+7U
+C<q+7U
C!j/oU
3xE(gM
&CDj'_N
}`p/gW
|`r+gg
my]2+@
*CKg+C0jUD
(gV0_X
BDgI'8
0'=t/d4
W>}*.H
V9}*FH
+3X'_X
m8N*F<
m8N*J<
gU:u*K3
w;N09X
-bxw]Ht>
F/s*=&
c/<x8!5
9h=r[s
Z)+9 rEGp$
aP/rI|_
Ge)rEM11
Z)+90r
=Ou$r,B#>
r_`#dI
XBH_FNT
`vF/bugcheckfull
\,/dumpstatus
WinLicenseVersion
[/[jq*h
CHECK_OUT = %d
YFqYvb
PROC_IN = %d
WLSoftwareVersion
/nosplash
Exception Information
I"[XxUr
m=kB_|&lB
/showinstance
ExitOUT
PROC_OUT = %d
mr1l{rW
CHECK_IN = %d
/getwlstatus
ExpInfo
CheckIN
WLSoftwareName
/bugcheck
PROC_OUT = %d, Process = %x
TP_IN = %d
SplashClassName
2|h<?T
4k9JSr
WLProtectionDateTime
<ERQmX
ProcIN
WinLicenseInstance
ExitIN
PROC_IN = %d, Process = %x
]w^TW>F
lS`7x|k*
#F\B Q
HOOK_IN = %d
XprotExit
&.6>defg
q6NX@q
K*437/
O)efWT
O/TD$d,e
Antivirus Signature
Bkav Clean
Lionic Clean
tehtris Clean
MicroWorld-eScan Clean
CMC Clean
CAT-QuickHeal Clean
ALYac Clean
Cylance Clean
VIPRE Clean
Sangfor Clean
CrowdStrike win/malicious_confidence_100% (D)
BitDefender Clean
K7GW Clean
K7AntiVirus Clean
BitDefenderTheta Clean
VirIT Clean
Cyren Clean
Symantec ML.Attribute.HighConfidence
Elastic malicious (high confidence)
ESET-NOD32 Clean
APEX Clean
Paloalto Clean
ClamAV Clean
Kaspersky Clean
Alibaba Clean
NANO-Antivirus Clean
SUPERAntiSpyware Clean
Tencent Clean
Sophos Mal/Generic-S
Baidu Clean
F-Secure Clean
DrWeb Clean
Zillya Clean
TrendMicro Clean
McAfee-GW-Edition Artemis!Trojan
Trapmine Clean
FireEye Generic.mg.36ec5db7a7da85a8
Emsisoft Clean
Ikarus Trojan.Win32.Generic
Jiangmin Clean
Webroot Clean
Google Detected
Avira Clean
MAX Clean
Antiy-AVL Clean
Microsoft Trojan:MSIL/Vidar.C!MTB
Gridinsoft Clean
Xcitium Clean
Arcabit Clean
ViRobot Clean
ZoneAlarm Clean
GData Clean
Cynet Clean
AhnLab-V3 Clean
Acronis Clean
McAfee Artemis!36EC5DB7A7DA
TACHYON Clean
DeepInstinct MALICIOUS
VBA32 Clean
Malwarebytes Clean
Panda Clean
Zoner Clean
TrendMicro-HouseCall Clean
Rising Clean
Yandex Clean
SentinelOne Clean
MaxSecure Clean
Fortinet Clean
AVG FileRepMalware [Pws]
Avast FileRepMalware [Pws]
No IRMA results available.