Static | ZeroBOX

PE Compile Time

2022-09-27 05:37:02

PDB Path

D:\a\_work\1\s\artifacts\obj\win-x86.Release\corehost\cli\apphost\Release\apphost.pdb

PE Imphash

bf1462ce2cfa173883d7ac57d7af7b93

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00001000 0x00014e8a 0x00015000 6.47884735514
.rdata 0x00016000 0x00009b98 0x00009c00 4.45472966977
.data 0x00020000 0x00001220 0x00000c00 3.28300338138
.rsrc 0x00022000 0x0000146c 0x00001600 4.41494886651
.reloc 0x00024000 0x00001894 0x00001a00 6.44178599246

Resources

Name Offset Size Language Sub-language File type
RT_ICON 0x000220e8 0x000010a8 LANG_NEUTRAL SUBLANG_NEUTRAL dBase IV DBT of @.DBF, block length 4096, next free block index 40, next free block 0, next used block 0
RT_GROUP_ICON 0x00023190 0x00000014 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_VERSION 0x000231a4 0x000002c8 LANG_NEUTRAL SUBLANG_NEUTRAL data

Imports

Library KERNEL32.dll:
0x41601c FindClose
0x416020 FindFirstFileExW
0x416024 FindNextFileW
0x41602c GetFullPathNameW
0x416030 GetTempPathW
0x416034 GetLastError
0x416048 GetCurrentProcess
0x41604c IsWow64Process
0x416050 GetModuleFileNameW
0x416054 GetModuleHandleExW
0x416058 GetProcAddress
0x41605c LoadLibraryExW
0x416060 LoadLibraryA
0x416064 MultiByteToWideChar
0x416068 WideCharToMultiByte
0x41606c FreeLibrary
0x416070 RtlUnwind
0x416074 RaiseException
0x416078 OutputDebugStringW
0x41607c GetModuleHandleW
0x416080 GetCurrentProcessId
0x416084 Sleep
0x416088 RemoveDirectoryW
0x416090 CreateDirectoryW
0x416094 InitializeSListHead
0x416098 GetCurrentThreadId
0x4160a0 IsDebuggerPresent
0x4160a8 TerminateProcess
0x4160b4 LCMapStringW
0x4160bc TlsFree
0x4160c0 TlsSetValue
0x4160c4 TlsGetValue
0x4160c8 TlsAlloc
0x4160cc SwitchToThread
0x4160d4 SetLastError
0x4160d8 DecodePointer
0x4160dc EncodePointer
0x4160e0 GetStringTypeW
Library USER32.dll:
0x4160f0 MessageBoxW
Library SHELL32.dll:
0x4160e8 ShellExecuteW
Library ADVAPI32.dll:
0x416000 RegOpenKeyExW
0x416004 RegCloseKey
0x416008 ReportEventW
0x416014 RegGetValueW
Library api-ms-win-crt-runtime-l1-1-0.dll:
0x41615c terminate
0x416160 _controlfp_s
0x416168 _errno
0x41616c _c_exit
0x416170 __p___wargv
0x416174 _seh_filter_exe
0x416178 __p___argc
0x416180 _cexit
0x416184 _crt_atexit
0x416188 _exit
0x41618c exit
0x416198 _set_app_type
0x41619c _initterm_e
0x4161a0 _initterm
0x4161b0 abort
Library api-ms-win-crt-heap-l1-1-0.dll:
0x416110 calloc
0x416114 free
0x416118 _set_new_mode
0x41611c _callnewh
0x416120 malloc
Library api-ms-win-crt-math-l1-1-0.dll:
0x416150 frexp
0x416154 __setusermatherr
Library api-ms-win-crt-stdio-l1-1-0.dll:
0x4161b8 _set_fmode
0x4161c0 __p__commode
0x4161c4 fflush
0x4161c8 _wfopen
0x4161d0 fputws
0x4161d4 fclose
0x4161d8 fread
0x4161dc fseek
0x4161e0 fwrite
0x4161e4 __acrt_iob_func
0x4161e8 fputwc
Library api-ms-win-crt-string-l1-1-0.dll:
0x4161f4 strcpy_s
0x4161f8 memset
0x4161fc strcspn
0x416200 wcsncmp
0x416204 _wcsicmp
0x416208 _wcsnicmp
0x41620c wcsnlen
0x416210 _wcsdup
Library api-ms-win-crt-locale-l1-1-0.dll:
0x416128 __pctype_func
0x41612c setlocale
0x416130 ___mb_cur_max_func
0x416134 ___lc_codepage_func
0x41613c localeconv
0x416140 _unlock_locales
0x416144 _lock_locales
0x416148 _configthreadlocale
Library api-ms-win-crt-filesystem-l1-1-0.dll:
0x416104 _wrename
0x416108 _wremove
Library api-ms-win-crt-convert-l1-1-0.dll:
0x4160f8 wcstoul
0x4160fc _wtoi
Library api-ms-win-crt-time-l1-1-0.dll:
0x416218 _time64
0x41621c wcsftime
0x416220 _gmtime64

!This program cannot be run in DOS mode.
Rich\)
`.rdata
@.data
@.reloc
WPhXgA
QSVWj,
6Vh@qA
6VhxoA
w$Vh`mA
?Wh8lA
PWVhHtA
6PQRVh(
QQSVWd
tH9] uC
u PWQR
URPQQh
;t$,v-
UQPXY]Y[
Unknown exception
bad locale name
iostream
iostream stream error
ios_base::badbit set
ios_base::failbit set
ios_base::eofbit set
invalid string position
string too long
list<T> too long
vector<T> too long
invalid stoul argument
stoul argument out of range
ntdll.dll
RtlGetVersion
hostfxr_main
c3ab8ff13720e8ad9047dd39466b3c89
74e592c2fa383d4a3960714caef0c4f2
hostfxr_main_startupinfo
hostfxr_set_error_writer
bad allocation
unknown error
address family not supported
address in use
address not available
already connected
argument list too long
argument out of domain
bad address
bad file descriptor
bad message
broken pipe
connection aborted
connection already in progress
connection refused
connection reset
cross device link
destination address required
device or resource busy
directory not empty
executable format error
file exists
file too large
filename too long
function not supported
host unreachable
identifier removed
illegal byte sequence
inappropriate io control operation
interrupted
invalid argument
invalid seek
io error
is a directory
message size
network down
network reset
network unreachable
no buffer space
no child process
no link
no lock available
no message available
no message
no protocol option
no space on device
no stream resources
no such device or address
no such device
no such file or directory
no such process
not a directory
not a socket
not a stream
not connected
not enough memory
not supported
operation canceled
operation in progress
operation not permitted
operation not supported
operation would block
owner dead
permission denied
protocol error
protocol not supported
read only file system
resource deadlock would occur
resource unavailable try again
result out of range
state not recoverable
stream timeout
text file busy
timed out
too many files open in system
too many files open
too many links
too many symbolic link levels
value too large
wrong protocol type
FlsAlloc
FlsFree
FlsGetValue
FlsSetValue
InitializeCriticalSectionEx
InitOnceExecuteOnce
CreateEventExW
CreateSemaphoreW
CreateSemaphoreExW
CreateThreadpoolTimer
SetThreadpoolTimer
WaitForThreadpoolTimerCallbacks
CloseThreadpoolTimer
CreateThreadpoolWait
SetThreadpoolWait
CloseThreadpoolWait
FlushProcessWriteBuffers
FreeLibraryWhenCallbackReturns
GetCurrentProcessorNumber
CreateSymbolicLinkW
GetCurrentPackageId
GetTickCount64
GetFileInformationByHandleEx
SetFileInformationByHandle
GetSystemTimePreciseAsFileTime
InitializeConditionVariable
WakeConditionVariable
WakeAllConditionVariable
SleepConditionVariableCS
InitializeSRWLock
AcquireSRWLockExclusive
TryAcquireSRWLockExclusive
ReleaseSRWLockExclusive
SleepConditionVariableSRW
CreateThreadpoolWork
SubmitThreadpoolWork
CloseThreadpoolWork
CompareStringEx
GetLocaleInfoEx
LCMapStringEx
0123456789abcdefghijklmnopqrstuvwxyz
0123456789abcdefghijklmnopqrstuvwxyz
bad array new length
bad exception
__based(
__cdecl
__pascal
__stdcall
__thiscall
__fastcall
__vectorcall
__clrcall
__eabi
__swift_1
__swift_2
__ptr64
__restrict
__unaligned
restrict(
delete
operator
`vftable'
`vbtable'
`vcall'
`typeof'
`local static guard'
`string'
`vbase destructor'
`vector deleting destructor'
`default constructor closure'
`scalar deleting destructor'
`vector constructor iterator'
`vector destructor iterator'
`vector vbase constructor iterator'
`virtual displacement map'
`eh vector constructor iterator'
`eh vector destructor iterator'
`eh vector vbase constructor iterator'
`copy constructor closure'
`udt returning'
`local vftable'
`local vftable constructor closure'
new[]
delete[]
`omni callsig'
`placement delete closure'
`placement delete[] closure'
`managed vector constructor iterator'
`managed vector destructor iterator'
`eh vector copy constructor iterator'
`eh vector vbase copy constructor iterator'
`dynamic initializer for '
`dynamic atexit destructor for '
`vector copy constructor iterator'
`vector vbase copy constructor iterator'
`managed vector copy constructor iterator'
`local static thread guard'
operator ""
operator co_await
Type Descriptor'
Base Class Descriptor at (
Base Class Array'
Class Hierarchy Descriptor'
Complete Object Locator'
D:\a\_work\1\s\artifacts\obj\win-x86.Release\corehost\cli\apphost\Release\apphost.pdb
.text$di
.text$mn
.text$x
.text$yd
.idata$5
.00cfg
.CRT$XCA
.CRT$XCAA
.CRT$XCC
.CRT$XCL
.CRT$XCU
.CRT$XCZ
.CRT$XIA
.CRT$XIAA
.CRT$XIAC
.CRT$XIC
.CRT$XIZ
.CRT$XLA
.CRT$XLZ
.CRT$XPA
.CRT$XPZ
.CRT$XTA
.CRT$XTZ
.gfids
.rdata
.rdata$T
.rdata$r
.rdata$sxdata
.rdata$zzzdbg
.rtc$IAA
.rtc$IZZ
.rtc$TAA
.rtc$TZZ
.tls$ZZZ
.xdata$x
.idata$2
.idata$3
.idata$4
.idata$6
.data$r
CreateDirectoryW
RemoveDirectoryW
GetCurrentProcessId
GetModuleHandleW
OutputDebugStringW
GetEnvironmentVariableW
FindClose
FindFirstFileExW
FindNextFileW
GetFileAttributesExW
GetFullPathNameW
GetTempPathW
GetLastError
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
GetCurrentProcess
IsWow64Process
GetModuleFileNameW
GetModuleHandleExW
GetProcAddress
LoadLibraryExW
LoadLibraryA
MultiByteToWideChar
WideCharToMultiByte
KERNEL32.dll
MessageBoxW
USER32.dll
ShellExecuteW
SHELL32.dll
DeregisterEventSource
RegisterEventSourceW
ReportEventW
RegCloseKey
RegOpenKeyExW
RegGetValueW
ADVAPI32.dll
_invalid_parameter_noinfo_noreturn
calloc
__stdio_common_vsprintf_s
strcspn
terminate
localeconv
memset
_errno
_wrename
_wfopen
_wremove
__stdio_common_vswprintf
fclose
fwrite
__acrt_iob_func
fputwc
fputws
__stdio_common_vfwprintf
fflush
wcstoul
wcsncmp
_wcsicmp
_wcsnicmp
wcsftime
_gmtime64
_time64
api-ms-win-crt-runtime-l1-1-0.dll
api-ms-win-crt-heap-l1-1-0.dll
api-ms-win-crt-math-l1-1-0.dll
api-ms-win-crt-stdio-l1-1-0.dll
api-ms-win-crt-string-l1-1-0.dll
api-ms-win-crt-locale-l1-1-0.dll
api-ms-win-crt-filesystem-l1-1-0.dll
api-ms-win-crt-convert-l1-1-0.dll
api-ms-win-crt-time-l1-1-0.dll
GetStringTypeW
EncodePointer
DecodePointer
SetLastError
InitializeCriticalSectionAndSpinCount
SwitchToThread
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
LCMapStringW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
QueryPerformanceCounter
GetCurrentThreadId
InitializeSListHead
RaiseException
RtlUnwind
FreeLibrary
_lock_locales
_unlock_locales
__pctype_func
_wcsdup
___lc_locale_name_func
___lc_codepage_func
___mb_cur_max_func
malloc
setlocale
wcsnlen
_callnewh
_initialize_onexit_table
_register_onexit_function
_crt_atexit
_cexit
_seh_filter_exe
_set_app_type
__setusermatherr
_configure_wide_argv
_initialize_wide_environment
_get_initial_wide_environment
_initterm
_initterm_e
_set_fmode
__p___argc
__p___wargv
_c_exit
_register_thread_local_exe_atexit_callback
_configthreadlocale
_set_new_mode
__p__commode
_controlfp_s
strcpy_s
ja 8r{
d38cc827-e34f-4453-9df4-1e796e9f1d07
HawkEyes.dll
Copyright (c) by P.J. Plauger, licensed by Dinkumware, Ltd. ALL RIGHTS RESERVED.
.?AVruntime_error@std@@
.?AVexception@std@@
.?AVfailure@ios_base@std@@
.?AVsystem_error@std@@
.?AV_System_error@std@@
.?AVios_base@std@@
.?AV?$_Iosb@H@std@@
.?AV?$basic_ios@_WU?$char_traits@_W@std@@@std@@
.?AV?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@
.?AV?$basic_istream@_WU?$char_traits@_W@std@@@std@@
.?AV?$basic_ostream@_WU?$char_traits@_W@std@@@std@@
.?AV?$basic_iostream@_WU?$char_traits@_W@std@@@std@@
.?AV?$basic_stringbuf@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@
.?AV?$basic_stringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@
.?AV_Facet_base@std@@
.?AVfacet@locale@std@@
.?AU_Crt_new_delete@std@@
.?AUctype_base@std@@
.?AV?$ctype@_W@std@@
.?AVerror_category@std@@
.?AV_Generic_error_category@std@@
.?AV_Iostream_error_category@std@@
.?AV?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@
.?AV?$numpunct@_W@std@@
.?AW4StatusCode@@
.?AVbad_alloc@std@@
.?AVinvalid_argument@std@@
.?AVlogic_error@std@@
.?AVlength_error@std@@
.?AVout_of_range@std@@
.?AV_Locimp@locale@std@@
.?AVtype_info@@
.?AVbad_array_new_length@std@@
.?AVbad_exception@std@@
PADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADD
0!0+0C0H0R0c0h0r0
161H1Q2
4(4F4X4
9!9F9X9x9}9
=#=*=J=
>I?V?v?
555V5h5
7V7b7|7
8&858J8i8
9+:J:b:
<&=4=u=f>x>
3#3=3X3s3
364C4`4z4
7F7S7o7
:@:Z:w:
80Q0&151
647_7|7
040V0e0
5?6G6v7
2U3_3d3
6(6S8y8
;D<Y<p<
=D=Y=p=
0(0S0E1l1
222I2f2|2o3
5'5D5O5Y5v5
6666A6K6b6m6w6
6!7+7B7V7g7
1.1F1X1q1
1&343c3
4#5-525R5e5o5t5
517;7n7~7
839V9h9
:);P;p;
050Q0Y0
3;3I3{3
6S6_6e6u6
7"737>7e7
9 9'9<9E9]9s9
;6;C;U;];h;
3+3F3U3
3$4<4J4X4
8#8/8B8
:B:I:_:d:~:
3K3U3f3
3<4J4j4
4(545A5T5
9=9[9k9u9
93:F:X:
4&4,4>4D4
5&5,5V6h6
>o?t?~?
535V56659
<[=`=e=j=
>!>'>->3>9>?>E>K>Q>W>]>c>i>o>u>{>
?@?X?^?}?
000P0o0
1C2O3j3
545B5^5v5
7$7)7<7W7
8X8`8f8u8
9B9]9d9
96:[:i:
;!;';-;4;B;H;O;V;\;a;g;m;s;x;~;
<<%<+<0<6<<<B<G<M<S<Y<^<d<j<p<u<{<
="=(=-=3=9=?=D=J=P=V=[=a=g=m=r=x=~=
>>%>*>0>6><>A>G>M>S>X>^>d>j>o>u>{>
?3?V?p?~?
0/050V0y0(1L1
3 3&383B3
505E5J5O5p5u5
8(8.8B8\8e8p8w8
9(929B9R9b9k9{9
9C:L:T:
<O=^=g=t=
>0>9>?>G>L>_>s>x>
77$7(7,707
=K=P=T=X=\=
333G3c3n3|3
3C4R435a7
@1E1p1u1
252P2^2j2v2
2-3Y3^3c3~3
424<4H4M4R4s4
5.656h6
8"8(8.848:8@8F8L8R8X8^8d8j8p8v8|8
9-9K9_9e9
3"4J4z4
<*<E<R<\<
="=,=_=i=s=
=>)>3>A>Q>a>q>
(2024282<2@2D2H2L2P2T2X2\2`2l2p2t2
5054585\5`5d5h5p5t5x5|5
6l6p6t6x6|6
7(7,7074787<7@7D7H7L7P7T7l7p7t7x7|7
?0?4?8?<?@?D?H?L?P?T?X?\?`?d?h?l?
0$0,040<0D0L0T0\0d0l0t0|0
1$1,141<1D1L1T1\1d1l1t1|1
14><>D>L>T>\>d>l>t>|>
?$?,?4?<?D?L?T?\?d?l?t?|?
0$0,040<0D0L0T0\0d0l0t0|0
1$1,141<1D1L1T1\1d1l1t1|1
2$2,242<2D2L2T2\2d2l2t2|2
3$3,343<3D3L3T3\3d3l3t3|3
4$4,444<4D4L4T4\4d4l4t4|4
5$5,545<5D5L5P5X5`5h5p5x5
6 6(60686@6H6P6X6`6h6p6x6
7 7(70787@7H7P7X7`7h7p7x7
8 8(80888@8H8P8X8`8h8p8x8
9 9(90989@9H9P9X9`9h9p9x9
: :(:0:8:@:H:P:X:`:h:p:x:
; ;(;0;8;@;H;P;X;`;h;p;x;
< <(<0<8<@<H<P<X<`<h<
1 1$1(1,1014181<1@1D1H1L1P1T1X1\1`1d1h1l1p1t1x1|1
2 2$2(2,2024282<2@2D2H2L2P2T2X2\2`2d2h2l2p2
9h9l9p9t9
:,:<:@:H:`:d:|:
;0;@;D;T;X;\;`;d;l;
< <$<(<,<0<4<8<<<D<\<`<x<
=0=@=D=T=X=\=d=|=
>,>0>8>P>`>d>h>l>p>x>
?,?0?@?D?H?L?T?l?|?
0 0$0(000H0X0\0l0p0t0x0|0
1 1$1(101H1X1\1l1p1t1|1
202@2D2T2X2\2`2h2
3$34383H3L3T3l3|3
4H9h9p9x9
:$:0:P:X:`:l:
; ;,;L;T;\;d;p;
<0<8<@<H<P<X<`<x<
=,=8=@=X=p=x=
> >(>0>8>@>L>l>t>|>
? ?(?0?8?D?d?l?t?|?
0$00080P0X0`0l0
1,141H1P1X1`1d1h1l1p1x1
2,242X2d2l2
3 3(343T3\3h3
4,484\4|4
5 5(5D5L5d5l5t5|5
6$6,6D6P6p6x6
7<7D7L7X7x7
8 888@8L8l8t8
9$9H9h9p9x9
:$:,:4:<:D:L:T:`:
;$;,;4;<;D;L;T;\;`;h;|;
< <(<,<0<8<L<T<`<
=4=8=X=`=d=
> >(>0>8><>D>X>t>x>
686T6p6
:<:\:|:
"runtimeOptions": {
"tfm": "netcoreapp3.1",
"includedFrameworks": [
{
"name": "Microsoft.NETCore.App",
"version": "3.1.30"
}
!This program cannot be run in DOS mode.
Richw e
`.rsrc
api-ms-win-core-xstate-l2-1-0.pdb
.rdata
.rdata$zzzdbg
.edata
.rsrc$01
.rsrc$02
api-ms-win-core-xstate-l2-1-0.dll
CopyContext
kernel32.CopyContext
GetEnabledXStateFeatures
kernel32.GetEnabledXStateFeatures
GetXStateFeaturesMask
kernel32.GetXStateFeaturesMask
InitializeContext
kernel32.InitializeContext
LocateXStateFeature
kernel32.LocateXStateFeature
SetXStateFeaturesMask
kernel32.SetXStateFeaturesMask
Washington1
Redmond1
Microsoft Corporation1(0&
Microsoft Code Signing PCA 20110
220512204601Z
230511204601Z0t1
Washington1
Redmond1
Microsoft Corporation1
Microsoft Corporation0
G(cT5&
E0C1)0'
Microsoft Operations Puerto Rico1
230012+4705290
Chttp://www.microsoft.com/pkiops/crl/MicCodSigPCA2011_2011-07-08.crl0a
Ehttp://www.microsoft.com/pkiops/certs/MicCodSigPCA2011_2011-07-08.crt0
Washington1
Redmond1
Microsoft Corporation1200
)Microsoft Root Certificate Authority 20110
110708205909Z
260708210909Z0~1
Washington1
Redmond1
Microsoft Corporation1(0&
Microsoft Code Signing PCA 20110
Ihttp://crl.microsoft.com/pki/crl/products/MicRooCerAut2011_2011_03_22.crl0^
Bhttp://www.microsoft.com/pki/certs/MicRooCerAut2011_2011_03_22.crt0
3http://www.microsoft.com/pkiops/docs/primarycps.htm0@
*?*kXIc
QEX82q'
WqVNHE
Washington1
Redmond1
Microsoft Corporation1(0&
Microsoft Code Signing PCA 2011
http://www.microsoft.com0
20220926174353.646Z0
Washington1
Redmond1
Microsoft Corporation1-0+
$Microsoft Ireland Operations Limited1&0$
Thales TSS ESN:179E-4BB0-82461%0#
Microsoft Time-Stamp Service
Washington1
Redmond1
Microsoft Corporation1&0$
Microsoft Time-Stamp PCA 20100
211028192742Z
230126192742Z0
Washington1
Redmond1
Microsoft Corporation1-0+
$Microsoft Ireland Operations Limited1&0$
Thales TSS ESN:179E-4BB0-82461%0#
Microsoft Time-Stamp Service0
;DdxYo
N kJ~@(
Nhttp://www.microsoft.com/pkiops/crl/Microsoft%20Time-Stamp%20PCA%202010(1).crl0l
Phttp://www.microsoft.com/pkiops/certs/Microsoft%20Time-Stamp%20PCA%202010(1).crt0
Washington1
Redmond1
Microsoft Corporation1200
)Microsoft Root Certificate Authority 20100
210930182225Z
300930183225Z0|1
Washington1
Redmond1
Microsoft Corporation1&0$
Microsoft Time-Stamp PCA 20100
3http://www.microsoft.com/pkiops/Docs/Repository.htm0
Ehttp://crl.microsoft.com/pki/crl/products/MicRooCerAut_2010-06-23.crl0Z
>http://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt0
as.,k{n?,
Washington1
Redmond1
Microsoft Corporation1-0+
$Microsoft Ireland Operations Limited1&0$
Thales TSS ESN:179E-4BB0-82461%0#
Microsoft Time-Stamp Service
Washington1
Redmond1
Microsoft Corporation1&0$
Microsoft Time-Stamp PCA 20100
20220926201729Z
20220927201729Z0w0=
Washington1
Redmond1
Microsoft Corporation1&0$
Microsoft Time-Stamp PCA 2010
Washington1
Redmond1
Microsoft Corporation1&0$
Microsoft Time-Stamp PCA 2010
1"[-5*
!This program cannot be run in DOS mode.
\iRich%
`.data
.idata
@.didat
@.reloc
Unknown exception
bad exception
FlsAlloc
FlsFree
FlsGetValue
FlsSetValue
InitializeCriticalSectionEx
__based(
__cdecl
__pascal
__stdcall
__thiscall
__fastcall
__vectorcall
__clrcall
__eabi
__ptr64
__restrict
__unaligned
restrict(
delete
operator
`vftable'
`vbtable'
`vcall'
`typeof'
`local static guard'
`string'
`vbase destructor'
`vector deleting destructor'
`default constructor closure'
`scalar deleting destructor'
`vector constructor iterator'
`vector destructor iterator'
`vector vbase constructor iterator'
`virtual displacement map'
`eh vector constructor iterator'
`eh vector destructor iterator'
`eh vector vbase constructor iterator'
`copy constructor closure'
`udt returning'
`local vftable'
`local vftable constructor closure'
new[]
delete[]
`omni callsig'
`placement delete closure'
`placement delete[] closure'
`managed vector constructor iterator'
`managed vector destructor iterator'
`eh vector copy constructor iterator'
`eh vector vbase copy constructor iterator'
`dynamic initializer for '
`dynamic atexit destructor for '
`vector copy constructor iterator'
`vector vbase copy constructor iterator'
`managed vector copy constructor iterator'
`local static thread guard'
operator ""
operator co_await
Type Descriptor'
Base Class Descriptor at (
Base Class Array'
Class Hierarchy Descriptor'
Complete Object Locator'
template-parameter-
generic-type-
`anonymous namespace'
`non-type-template-parameter
`template-parameter
`template-type-parameter-
`generic-class-parameter-
`generic-method-parameter-
`vtordispex{
`vtordisp{
`adjustor{
`local static destructor helper'
`template static data member constructor helper'
`template static data member destructor helper'
static
virtual
private:
protected:
public:
[thunk]:
extern "C"
short
unsigned
volatile
std::nullptr_t
std::nullptr_t
<ellipsis>
,<ellipsis>
noexcept
double
__int8
__int16
__int32
__int64
__int128
<unknown>
char16_t
char32_t
wchar_t
__w64
UNKNOWN
signed
volatile
`unknown ecsu'
union
struct
class
coclass
cointerface
volatile
const
cli::array<
cli::pin_ptr<
{flat}
vfunctab
Qkkbal
* Linker *
__imp_
Microsoft (R) Optimizing Compiler
vfunctab
@Module %d
***DIA***
***globals***
.debug$P
.debug$T
.debug$S
/
//
@%s<E&C%03.3d>
@ILT+%d(%s)EnC
vfunctab
___ImageBase
vfunctab
vfunctab
vfunctab
vfunctab
Microsoft
Program Database
14.12.25830.2
vfunctab
BCryptOpenAlgorithmProvider
BCryptCloseAlgorithmProvider
BCryptGetProperty
BCryptCreateHash
BCryptHashData
BCryptFinishHash
BCryptDestroyHash
CopyFileExW
Qkkbal
vfunctab
vfunctab
vfunctab
LF_PROCEDURE_16t
LF_MFUNCTION_16t
LF_COBOL0_16t
LF_BARRAY_16t
LF_DIMARRAY_16t
LF_VFTPATH_16t
LF_PRECOMP_16t
LF_OEM_16t
LF_SKIP_16t
LF_ARGLIST_16t
LF_DERIVED_16t
LF_DEFARG_16t
LF_FIELDLIST_16t
LF_METHODLIST_16t
LF_BITFIELD_16t
LF_DIMCONU_16t
LF_DIMCONLU_16t
LF_DIMVARU_16t
LF_DIMVARLU_16t
LF_INDEX_16t
LF_BCLASS_16t
LF_VBCLASS_16t
LF_IVBCLASS_16t
LF_FRIENDCLS_16t
LF_FRIENDFCN_16t
LF_MEMBER_16t
LF_STMEMBER_16t
LF_VFUNCTAB_16t
LF_VFUNCOFF_16t
LF_METHOD_16t
LF_ONEMETHOD_16t
LF_NESTTYPE_16t
LF_NESTTYPEEX
LF_MEMBERMODIFY
LF_FUNC_ID
LF_MFUNC_ID
LF_BUILDINFO
LF_STRING_ID
LF_SUBSTR_LIST
LF_UDT_SRC_LINE
LF_STRIDED_ARRAY
LF_VECTOR
LF_MATRIX
LF_MODIFIER_EX
LF_HLSL
LF_INTERFACE
LF_BINTERFACE
LF_CLASS2
LF_STRUCTURE2
LF_UNION2
LF_INTERFACE2
vfunctab
S_COMPILE
S_REGISTER_16t
S_CONSTANT_16t
S_UDT_16t
S_SSEARCH
S_SKIP
S_CVRESERVE
S_OBJNAME_ST
S_ENDARG
S_COBOLUDT_16t
S_MANYREG_16t
S_RETURN
S_ENTRYTHIS
S_BPREL16
S_LDATA16
S_GDATA16
S_PUB16
S_LPROC16
S_GPROC16
S_THUNK16
S_BLOCK16
S_WITH16
S_LABEL16
S_CEXMODEL16
S_VFTABLE16
S_REGREL16
S_BPREL32_16t
S_LDATA32_16t
S_GDATA32_16t
S_PUB32_16t
S_LPROC32_16t
S_GPROC32_16t
S_THUNK32_ST
S_BLOCK32_ST
S_WITH32_ST
S_LABEL32_ST
S_CEXMODEL32
S_VFTABLE32_16t
S_REGREL32_16t
S_LTHREAD32_16t
S_GTHREAD32_16t
S_SLINK32
S_LPROCMIPS_16t
S_GPROCMIPS_16t
S_PROCREF_ST
S_DATAREF_ST
S_ALIGN
S_LPROCREF_ST
S_REGISTER_ST
S_CONSTANT_ST
S_UDT_ST
S_COBOLUDT_ST
S_MANYREG_ST
S_BPREL32_ST
S_LDATA32_ST
S_GDATA32_ST
S_PUB32_ST
S_LPROC32_ST
S_GPROC32_ST
S_VFTABLE32
S_REGREL32_ST
S_LTHREAD32_ST
S_GTHREAD32_ST
S_LPROCMIPS_ST
S_GPROCMIPS_ST
S_FRAMEREG
S_FRAMEPROC
S_COMPILE2_ST
S_MANYREG2_ST
S_LPROCIA64_ST
S_GPROCIA64_ST
S_LOCALSLOT_ST
S_PARAMSLOT_ST
S_ANNOTATION
S_GMANPROC_ST
S_LMANPROC_ST
S_RESERVED1
S_RESERVED2
S_RESERVED3
S_RESERVED4
S_LMANDATA_ST
S_GMANDATA_ST
S_MANFRAMEREL_ST
S_MANREGISTER_ST
S_MANSLOT_ST
S_MANMANYREG_ST
S_MANREGREL_ST
S_MANMANYREG2_ST
S_MANTYPREF
S_UNAMESPACE_ST
S_OBJNAME
S_THUNK32
S_BLOCK32
S_WITH32
S_LABEL32
S_REGISTER
S_CONSTANT
S_COBOLUDT
S_MANYREG
S_BPREL32
S_BPREL32_INDIR
S_LDATA32
S_GDATA32
S_PUB32
S_LPROC32
S_GPROC32
S_REGREL32
S_REGREL32_INDIR
S_LTHREAD32
S_GTHREAD32
S_LPROCMIPS
S_GPROCMIPS
S_COMPILE2
S_MANYREG2
S_LPROCIA64
S_GPROCIA64
S_LOCALSLOT
S_PARAMSLOT
S_LMANDATA
S_GMANDATA
S_MANFRAMEREL
S_MANREGISTER
S_MANSLOT
S_MANMANYREG
S_MANREGREL
S_MANMANYREG2
S_UNAMESPACE
S_PROCREF
S_DATAREF
S_LPROCREF
S_ANNOTATIONREF
S_TOKENREF
S_GMANPROC
S_LMANPROC
S_TRAMPOLINE
S_MANCONSTANT
S_ATTR_FRAMEREL
S_ATTR_REGISTER
S_ATTR_REGREL
S_ATTR_MANYREG
S_SEPCODE
S_LOCAL
S_FILESTATIC
S_DEFRANGE
S_DEFRANGE_SUBFIELD
S_DEFRANGE_SUBFIELD_REGISTER
S_DEFRANGE_REGISTER
S_DEFRANGE_FRAMEPOINTER_REL
S_DEFRANGE_FRAMEPOINTER_REL_FULL_SCOPE
S_DEFRANGE_REGISTER_REL
S_SECTION
S_COFFGROUP
S_EXPORT
S_CALLSITEINFO
S_HEAPALLOCSITE
S_FRAMECOOKIE
S_DISCARDED
S_COMPILE3
S_ENVBLOCK
S_BUILDINFO
S_INLINESITE
S_INLINESITE2
S_INLINESITE_END
S_PROC_ID_END
S_GPROC32_ID
S_LPROC32_ID
S_GPROCMIPS_ID
S_LPROCMIPS_ID
S_GPROCIA64_ID
S_LPROCIA64_ID
S_DEFRANGE_HLSL
S_GDATA_HLSL
S_LDATA_HLSL
S_GDATA_HLSL32
S_LDATA_HLSL32
S_GDATA_HLSL32_EX
S_LDATA_HLSL32_EX
S_LPROC32_DPC
S_LPROC32_DPC_ID
S_LOCAL_DPC_GROUPSHARED
S_DEFRANGE_DPC_PTR_TAG
S_DPC_SYM_TAG_MAP
S_ARMSWITCHTABLE
S_CALLEES
S_CALLERS
S_INLINEES
S_POGODATA
S_REF_MINIPDB
S_REF_MINIPDB2
S_PDBMAP
S_HOTPATCHFUNC
LF_MODIFIER
LF_POINTER
LF_ARRAY
LF_CLASS
LF_STRUCTURE
LF_UNION
LF_ENUM
LF_ALIAS
LF_MANAGED
LF_PROCEDURE
LF_MFUNCTION
LF_VTSHAPE
LF_VFTABLE
LF_COBOL0
LF_COBOL1
LF_BARRAY
LF_LABEL
LF_NULL
LF_DIMARRAY
LF_VFTPATH
LF_PRECOMP
LF_ENDPRECOMP
LF_OEM
LF_OEM2
LF_TYPESERVER
LF_TYPESERVER2
LF_SKIP
LF_ARGLIST
LF_DERIVED
LF_DEFARG
LF_LIST
LF_FIELDLIST
LF_METHODLIST
LF_BITFIELD
LF_DIMCONU
LF_DIMCONLU
LF_DIMVARU
LF_DIMVARLU
LF_REFSYM
LF_INDEX
LF_BCLASS
LF_VBCLASS
LF_IVBCLASS
LF_FRIENDCLS
LF_FRIENDFCN
LF_MEMBER
LF_STMEMBER
LF_VFUNCTAB
LF_VFUNCOFF
LF_METHOD
LF_ONEMETHOD
LF_ENUMERATE
LF_NESTTYPE
LF_TYPESERVER_ST
LF_ENUMERATE_ST
LF_ARRAY_ST
LF_CLASS_ST
LF_STRUCTURE_ST
LF_UNION_ST
LF_ENUM_ST
LF_ALIAS_ST
LF_MANAGED_ST
LF_DIMARRAY_ST
LF_PRECOMP_ST
LF_DEFARG_ST
LF_FRIENDFCN_ST
LF_MEMBER_ST
LF_STMEMBER_ST
LF_METHOD_ST
LF_NESTTYPE_ST
LF_ONEMETHOD_ST
LF_NESTTYPEEX_ST
LF_MEMBERMODIFY_ST
LF_MODIFIER_16t
LF_POINTER_16t
LF_ARRAY_16t
LF_CLASS_16t
LF_STRUCTURE_16t
LF_UNION_16t
LF_ENUM_16t
0123456789abcdefp
Microsoft C/C++ program database 2.00
Microsoft C/C++ MSF 7.00
cb = %d
/names
vfunctab
vfunctab
/LinkInfo
vfunctab
vfunctab
%d%s (ordinal)
'%s'!'%s'
Microsoft (R) LINK
vfunctab
Cannot access 32-bit type pool with 16-bit APIs
vfunctab
SymbolServerW
SymbolServerSetOptions
SymbolServerStoreFileW
vfunctab
@ILT+%d(
vfunctab
::<unnamed-tag>
::__unnamed
vfunctab
OLEAUT32.dll
FRPCRT4.dll
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
InitializeConditionVariable
SleepConditionVariableCS
WakeAllConditionVariable
sh::SymMethod::GetSequencePointCount Entry
sh::SymMethod::GetSequencePointCount Exit
sh::SymMethod::GetOffsets Entry
sh::SymMethod::GetOffsets Exit
sh::SymMethod::GetSequencePointsHelper Entry
sh::SymMethod::GetSequencePointsHelper Exit
sh::SymReader::GetMethod Entry
sh::SymReader::GetMethod Exit
sh::SymReader::GetMethodVersion Entry
sh::SymReader::GetMethodVersion Exit
sh::SymReader::GetMethodByVersion Entry
sh::SymReader::GetMethodByVersion Exit
sh::SymReader::GetMethodFromDocumentPosition Entry
sh::SymReader::GetMethodFromDocumentPosition Exit
sh::SymReader::GetMethodsFromDocumentPosition Entry
sh::SymReader::GetMethodsFromDocumentPosition Exit
SymBinder
SymReader.dia
Dia based SymReader
Pdb based SymWriter
CorSymWriter.pdb
Pdb based CorSymWriter
CorSymReader.pdb
Pdb based CorSymReader
CorSymBinder
NDP SymBinder
CorSymWriter
NDP SymWriter
CorSymReader
NDP SymReader
COM+_Entry_Point
srcsrv
sourcelink
%d (PID: %.4x)(Timer%.4X + %8d) : %-70s
Microsoft.DiaSymReader.Native.x86.pdb
.CRT$XCA
.CRT$XCL
.CRT$XCU
.CRT$XCZ
.CRT$XIA
.CRT$XIC
.CRT$XIZ
.CRT$XLA
.CRT$XLZ
.CRT$XPA
.CRT$XPZ
.CRT$XTA
.CRT$XTZ
.gfids
.rdata
.rdata$T
.rdata$r
.rdata$sxdata
.rdata$zzzdbg
.rtc$IAA
.rtc$IZZ
.rtc$TAA
.rtc$TZZ
.text$cthunks
.text$di
.text$mn
.text$mn$00
.text$src
.text$tii
.text$wti
.text$x
.text$yd
.tls$ZZZ
.xdata$x
.didat$2
.didat$3
.didat$4
.didat$6
.edata
.data$r
.idata$5
.00cfg
.idata$2
.idata$3
.idata$4
.idata$6
.didat$5
.rsrc$01
.rsrc$02
29t$8sA
xS9>wMQ
r uVQ
F(9F$ul
^(9N$v
L$d_^[3
D$0PRS
D$ PWh
9~ v6S
QQSVWd
URPQQhp
tJ<_t<<$t8<<t4<>t0<-t,<a|
<z~$<A|
MwyhXT
<0|O<9
tE<A|2<P
<A|,<P
YPShhL
<0|*<9
;t$,v-
UQPXY]Y[
tA;t=
C<+C4_^[
9~ v?S
GD t\V
AD+A@3
_tx,0<
t/WQWj
tG<.tC<$t?
d:t _^]
8!<aru
< t></t:
8!<aru
9S$v"3
tQF;wHr
 !"#$%JJ&'()JJJJ*JJJJ+,-JJ./0JJJJJJJ12345678JJJ9:;<=>JJJ?@ABCJJJDEFGJJJJJJJJJJHI
t7PSWV
t];C,tX
Ch9Cdu
Cp;Cduk
NTA;NP
KTA;KP
N0;N(u
Cx@;Ct
t@8G u;
t@8G u;
t@8G u;
teF;s8r
F$ tW3
%UUUU+
=NOTMu
=MINIu
wx8M t
;Clu4f
t&Vh@e
A@j@VQ
f;^0vF
f;_0vB
SVWf;A
SVWf;A
9~ v6S
f9A4u-f
9rdt`3
9pdtK3
w;t)=\
Pj(QQV
QjHRPV
=NB10u,
P=RSDSu
=NB10t&=RSDSt[3
FVWVWh
%UUUU+
%UUUU+
Ct+Cpt
f;Adu#
}f;Sdu
+HhQh4n
t(ShHj
UuidCreate
Microsoft.DiaSymReader.Native.x86
CreateNGenPdbWriter
CreateSymReader
CreateSymWriter
DllCanUnloadNow
DllGetClassObject
DllGetClassObjectInternal
DllRegisterServer
DllUnregisterServer
VSDllRegisterServer
VSDllUnregisterServer
.?AVtype_info@@
.?AVbad_exception@std@@
.?AVexception@std@@
.?AVDNameNode@@
.?AVcharNode@@
.?AVpcharNode@@
.?AVpDNameNode@@
.?AVDNameStatusNode@@
.?AVpairNode@@
.?AVCAtlException@ATL@@
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetCurrentThreadId
LocalAlloc
DisableThreadLibraryCalls
GetLastError
FreeLibrary
KERNEL32.dll
CoTaskMemAlloc
CoTaskMemFree
ole32.dll
_callnewh
malloc
wcsncpy_s
_invalid_parameter_noinfo
_errno
_initterm
_initterm_e
terminate
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_cexit
_free_base
strcpy_s
_calloc_base
wcsncmp
__stdio_common_vsprintf_s
__stdio_common_vswprintf_s
wcscpy_s
_wcsdup
_wmakepath_s
_wsplitpath_s
wcscat_s
__stdio_common_vswprintf
_wcsicmp
_wcsnicmp
_wfopen_s
fclose
__stdio_common_vfprintf
bsearch
strcat_s
_stricmp
strncmp
_fullpath
_close
__stdio_common_vsnwprintf_s
_wfsopen
strncpy_s
wcstoul
__doserrno
__stdio_common_vsscanf
_open_osfhandle
_filelengthi64
_lseeki64
__stdio_common_vsnprintf_s
calloc
towlower
wcsncat_s
_wstat64
_wfullpath
_wsopen_s
__acrt_iob_func
fflush
_chsize_s
_get_osfhandle
_write
_wdupenv_s
_mbscmp
_memicmp
api-ms-win-crt-heap-l1-1-0.dll
api-ms-win-crt-utility-l1-1-0.dll
api-ms-win-crt-string-l1-1-0.dll
api-ms-win-crt-runtime-l1-1-0.dll
api-ms-win-crt-stdio-l1-1-0.dll
api-ms-win-crt-convert-l1-1-0.dll
api-ms-win-crt-filesystem-l1-1-0.dll
api-ms-win-crt-environment-l1-1-0.dll
api-ms-win-crt-multibyte-l1-1-0.dll
RegOpenKeyExW
RegCloseKey
RegQueryValueExW
ADVAPI32.dll
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
GetModuleHandleW
GetCurrentProcess
TerminateProcess
RtlUnwind
InterlockedFlushSList
SetLastError
EncodePointer
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetProcAddress
LoadLibraryExW
RaiseException
LocalFree
FormatMessageW
LCMapStringW
GetEnvironmentVariableW
GetTickCount
GetSystemInfo
MultiByteToWideChar
CloseHandle
UnmapViewOfFile
CreateFileW
GetFileSize
CreateFileMappingW
MapViewOfFile
GetFileAttributesW
SetFileAttributesW
WideCharToMultiByte
VirtualAlloc
VirtualFree
DeleteFileW
GetFileType
ReadFile
SetEndOfFile
SetFilePointerEx
WriteFile
DeviceIoControl
ExpandEnvironmentStringsW
GetFullPathNameW
GetFileSizeEx
MapViewOfFileEx
VirtualProtect
VirtualQuery
LoadLibraryExA
_time32
api-ms-win-crt-time-l1-1-0.dll
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
0 0$0(0,0004080<0@0D0H0T0X0
: :$:(:,:0:4:8:<:@:D:H:L:P:T:X:\:`:d:h:l:p:t:x:|:
; ;$;(;,;0;4;8;<;@;D;H;L;P;T;X;\;`;d;h;l;p;t;x;|;
X5\5`5d5h5l5p5t5x5|5
; ;$;(;,;0;4;8;<;@;D;H;L;P;T;
< <$<(<,<0<4<8<<<@<D<H<L<P<T<X<\<`<d<h<l<p<t<x<|<
= =$=(=,=0=4=8=<=@=D=H=L=P=T=X=\=`=d=h=l=p=t=x=|=
> >$>(>,>0>4>8><>@>D>
0 0$0(0,0004080<0@0D0H0L0P0T0X0\0`0d0h0l0p0t0x0|0
0p1t1x1|1
3 3$3(3,3034383<3@3D3H3L3P3T3X3\3`3d3h3l3p3t3x3|3
6 6$6(6,6064686<6@6D6H6L6P6T6X6\6`6d6h6l6p6t6x6|6
7 7$7(7,7074787<7@7D7H7L7P7T7X7\7`7d7h7l7p7t7x7|7
8T9X9\9`9d9h9l9p9t9x9|9
:p>t>x>|>
? ?$?(?,?0?4?8?<?@?D?H?L?P?T?X?\?`?d?h?l?p?t?x?|?
0 0$0(0,0004080<0@0D0H0L0P0T0X0\0`0d0h0l0p0t0x0|0
1 1$1(1,1014181<1@1D1H1L1P1T1X1\1`1d1h1l1p1t1x1|1
2 2$2(2,2024282<2@2D2H2L2P2T2X2\2`2d2h2l2p2t2x2|2
3 3$3(3,3034383<3@3D3H3L3P3T3X3\3`3d3h3l3p3t3x3|3
4 4$4(4,4044484<4@4D4H4L4P4T4X4\4`4d4h4l4p4t4x4|4
5 5$5(5,5054585<5@5D5H5L5P5T5X5\5`5d5h5l5p5t5x5|5
6 6$6(6,6064686<6@6D6H6L6
9 9$9(9,9094989<9@9D9H9L9P9T9X9\9`9d9h9l9p9t9x9|9
: :$:(:,:0:4:8:<:@:D:H:L:P:T:X:\:`:d:h:l:p:t:x:|:
; ;$;(;,;0;4;8;<;@;D;H;L;P;T;X;\;`;d;h;l;p;t;x;|;
< <$<(<,<0<4<8<<<@<D<H<L<P<T<X<\<`<d<h<l<p<t<x<|<
= =$=(=,=0=4=8=<=@=D=H=L=P=T=X=\=`=d=h=l=p=t=x=|=
> >$>(>,>0>4>8><>@>D>H>L>P>T>X>\>`>d>h>l>p>t>x>|>
? ?$?(?,?0?4?8?<?@?D?H?L?P?T?X?\?`?d?h?l?p?t?x?|?
0 0$0,0004080<0@0D0H0L0P0T0X0\0`0d0h0l0p0t0x0|0
1 1$1(1,1014181<1@1D1H1L1P1T1X1\1`1d1h1l1p1t1x1|1
3 3$3(3,3034383<3@3D3H3L3P3T3X3\3`3d3h3l3p3t3x3|3
4 4$4(4,4044484<4@4D4H4L4P4T4X4\4`4d4h4l4p4t4x4|4
6 6$6(6,6064686<6@6D6H6L6P6T6X6\6`6d6h6l6p6t6x6|6
688<8@8D8H8L8P8T8X8\8`8d8h8l8p8t8x8|8
9 9$9(9,9094989<9@9D9H9L9P9T9X9\9`9d9h9l9p9t9x9|9
: :$:(:,:0:4:8:<:@:D:H:L:P:T:X:\:`:d:h:l:p:t:x:|:
; ;$;(;,;0;4;8;<;@;D;H;L;P;T;X;\;`;d;h;l;p;t;x;|;
< <$<(<,<0<4<8<<<@<D<H<L<P<T<X<\<`<d<h<l<p<t<x<|<
= =$=(=,=0=4=8=<=@=D=H=L=P=T=X=\=`=d=h=l=p=t=x=|=
> >$>(>,>0>4>8><>@>D>H>L>P>T>X>\>`>d>h>l>p>t>x>|>
? ?$?(?,?0?4?8?<?@?D?H?L?P?T?X?\?`?d?h?l?p?t?x?|?
0 0$0(0,0004080<0@0D0H0L0P0T0X0\0`0d0h0l0p0t0x0|0
1 1$1(1,1014181<1@1D1H1L1P1T1X1\1`1d1h1l1p1t1x1|1
2 2$2(2,2024282<2@2D2H2L2P2T2X2\2`2d2h2l2p2t2x2|2
3 3$3(3,3034383<3@3D3H3L3P3T3X3\3`3d3h3l3p3t3x3|3
4 4$4(4,4044484<4@4D4H4L4P4T4X4\4`4d4h4l4p4t4x4|4
5 5$5(5,5054585<5@5D5H5L5P5T5X5\5`5d5h5l5p5t5x5|5
6 6$6(6,6064686<6@6D6H6L6P6T6X6\6`6d6h6l6p6t6x6|6
7 7$7(7,7074787<7@7D7H7L7P7T7X7\7`7d7h7l7p7t7x7|7
8 8$8(8,8084888<8@8D8H8L8P8T8X8\8`8d8h8l8p8t8x8|8
9 9$9(9,9094989<9@9D9H9L9P9T9X9\9`9d9h9l9p9t9x9|9
: :$:(:,:0:4:8:<:@:D:H:L:P:T:X:\:`:d:h:l:p:t:x:|:
; ;$;(;,;0;4;8;<;@;D;H;L;P;T;X;\;`;d;h;l;p;t;x;|;
< <$<(<,<0<4<8<<<@<D<H<L<P<T<X<\<`<d<h<l<p<t<x<|<
= =$=(=,=0=4=8=<=@=D=H=L=P=T=X=\=`=d=h=l=p=t=x=|=
> >$>(>,>0>4>8><>@>D>H>L>P>T>X>\>`>d>h>l>p>t>x>|>
? ?$?(?,?0?4?8?<?@?D?H?L?P?T?X?\?`?d?h?l?p?t?x?|?
0 0$0(0,0004080<0@0D0H0L0P0T0X0\0`0d0h0l0p0t0x0|0
1 1$1(1,1014181<1@1D1H1L1P1T1X1\1`1d1h1l1p1t1x1|1
2 2$2(2,2024282<2@2D2H2L2P2T2X2\2`2d2h2l2p2t2x2|2
3 3$3(3,3034383<3@3D3H3L3P3T3X3\3`3d3h3l3p3t3x3|3
4 4$4(4,4044484<4@4D4H4L4P4T4X4\4`4d4h4l4p4t4x4|4
5 5$5(5,5054585<5@5D5H5L5P5T5X5\5`5d5h5l5p5t5x5|5
6 6$6(6,6064686<6@6D6H6L6P6T6X6\6`6d6h6l6p6t6x6|6
7 7$7(7,7074787<7@7D7H7L7P7T7X7\7`7d7h7l7p7t7x7|7
8 8$8(8,8084888<8@8D8H8L8P8T8X8\8`8d8h8l8p8t8x8|8
9 9$9(9,9094989<9@9D9H9L9P9T9X9\9`9d9h9l9p9t9x9|9
: :$:(:,:0:4:8:<:@:D:H:L:P:T:X:\:`:d:h:l:p:t:x:|:
; ;$;(;,;0;4;8;<;@;D;H;L;P;T;X;\;`;d;h;l;p;t;x;|;
< <$<(<,<0<4<8<<<@<D<H<L<P<T<X<\<`<d<h<l<p<t<x<|<
= =$=(=,=0=4=8=<=@=D=H=L=P=T=X=\=`=d=h=
= =$=(=,=0=4=8=<=@=D=H=L=P=T=X=\=`=d=h=l=p=t=x=|=
> >$>(>,>0>4>8><>@>D>H>L>P>T>X>\>`>d>h>l>p>t>x>|>
? ?$?(?,?0?4?8?<?@?D?H?L?P?T?X?\?`?d?h?l?p?t?x?|?
0 0$0(0,0004080<0@0D0H0L0P0T0X0\0`0d0h0l0p0t0x0|0
1 1$1(1,1014181<1@1D1H1L1P1T1X1\1`1d1h1l1p1t1x1|1
2 2$2(2,2024282<2@2D2H2L2P2T2X2\2`2d2h2l2p2t2x2|2
2034383<3@3D3H3L3P3T3X3\3`3d3h3l3p3t3x3|3
3H4P4X4`4h4p4x4
4P9T9X9\9`9d9h9l9p9t9x9|9
: :$:(:,:(>,>0>4>8><>@>D>
@3D3l4
5 5$5(5,5054585<5@5D5H5L5P5T5X5\5`5d5h5l5p5t5x5|5
6 6$6(6,6064686<6@6D6H6L6P6T6X6\6`6d6h6l6p6t6x6|6
7 7$7(7,7074787<7@7D7H7L7P7T7X7\7`7d7h7l7p7t7x7|7
8 8$8(8,8084888<8@8D8H8L8P8T8X8\8`8d8h8l8p8t8x8|8
9 9$9(9,9094989<9@9D9H9L9P9T9X9\9`9d9h9l9p9t9x9|9
: :$:(:,:0:4:8:<:@:D:H:L:P:T:X:\:`:d:h:l:p:t:x:|:
; ;$;(;,;0;4;8;<;@;D;H;L;P;T;X;\;`;d;h;l;p;t;x;|;
< <$<(<,<0<4<8<<<@<D<H<L<P<T<X<\<`<d<h<l<p<t<x<|<
= =$=(=4=8=<=@=D=H=L=P=T=X=\=`=d=h=l=p=t=x=|=
> >$>(>,>0>4>8><>@>D>H>L>P>T>X>\>`>d>h>l>p>t>x>|>
? ?$?(?,?0?4?8?<?@?D?H?L?P?T?X?\?`?d?h?l?p?t?x?|?
0 0$0(0,0004080@0D0H0L0P0T0X0\0`0d0h0l0p0t0x0|0
1 1$1(1,1014181<1@1D1H1L1P1T1X1\1`1d1h1l1p1t1x1|1
2 2$2(2,2024282<2@2D2H2L2P2T2X2\2`2d2h2l2p2t2x2|2
3 3$3(3,3034383<3@3D3H3L3P3T3X3\3`3d3h3l3p3t3x3|3
4 4$4(4,4044484<4@4D4H4L4P4T4X4\4`4d4h4l4p4t4x4|4
5 5$5(5,5054585<5@5D5H5L5P5T5X5\5`5d5h5l5p5t5x5|5
6 6$6(6,6064686<6@6D6H6L6P6T6X6\6`6d6h6l6p6t6x6|6
7 7$7(7,7074787<7@7D7H7L7P7T7X7\7`7d7h7l7p7t7x7|7
8 8$8(8,8084888<8@8D8H8L8P8T8X8\8`8d8h8l8p8t8x8|8
9 9$9(9,9094989<9@9
> >$>(>,>0>4>8><>@>D>H>L>P>T>X>\>`>d>h>l>p>t>x>|>
? ?$?(?,?0?4?8?<?@?D?H?L?P?T?X?\?`?d?h?l?p?t?x?|?
@0D0H0L0P0T0X0\0`0d0h0l0p0t0x0|0
1 1$1(1,1014181<1@1D1H1L1P1T1X1\1`1d1h1l1p1t1x1|1
2(242@2L2X2d2p2|2
3$303<3H3T3`3l3x3
4 4,484D4P4\4h4t4
5(545@5L5X5d5p5|5
6$606<6H6T6`6l6x6
7 7,787D7P7\7h7t7
8(848@8L8X8d8p8|8
9$909<9H9T9`9l9x9
: :,:8:D:P:\:h:t:
;(;4;@;L;X;d;p;|;
<$<0<<<H<T<`<l<x<
= =,=8=D=P=\=h=t=
> >,>8>D>P>\>h>t>
?(?4?@?L?X?d?p?|?
0$000<0H0T0`0l0x0
1 1,181D1P1\1h1t1
2(242@2L2X2d2p2|2
3$303<3H3T3`3l3x3
4 4,484D4P4\4h4t4
5(545@5L5X5d5p5|5
6$606<6H6T6`6l6x6
7 7,787D7P7\7h7t7
8(848@8L8X8d8p8|8
9$909<9H9T9`9l9x9
< <$<(<,<0<4<8<<<@<D<H<L<P<X=\=`=t=x=
2 2$2(2,2024282<2@2D2H2L2\2`2
646T6t6
747T7d7t7
848T8t8
9$949D9T9d9t9
:4:T:d:t:
;$;4;<;T;\;t;
<$<4<D<T<\<d<t<
=$=4=D=T=d=t=
>4>T>\>d>t>
?4?T?t?
040T0t0|0
141T1t1
2$242<2D2T2d2t2
3$343D3T3d3t3
4$444D4T4d4t4
545T5\5t5
646T6t6
7$747D7T7\7d7t7
848T8t8
9$949D9T9t9
:$:(:4:T:t:
;$;(;4;T;d;t;
<$<4<D<H<T<d<t<
=$=4=T=t=
2$2,242D2L2T2d2l2t2
3$343D3L3T3d3l3
4$404D4T4d4
5$5,545D5L5T5d5l5t5
6$6,646D6P6T6d6p6t6
7$7,747D7L7T7d7l7t7
8$848D8L8T8d8t8
9$9,949D9L9T9d9t9
:$:,:4:D:L:T:d:l:t:
;$;,;4;D;L;T;d;l;t;
<$<,<4<D<L<T<d<p<
=$=,=4=D=d=p=
>$>,>4>D>L>T>d>l>t>
?$?,?4?D?L?T?d?l?t?
0$0,0D0L0T0d0l0
1$1,141D1L1T1d1l1t1
1t3x3|3
4 4$4(4,4044484<4@4D4H4L4P4T4X4\4`4d4h4l4p4t4x4|4
5 5$5(5,5054585<5L5l5p5t5x5|5
6 6$6(6,6064686<6@6D6H6L6P6T6X6\6`6d6h6l6p6t6x6|6
7 7$7(7,7074787
9 9$9(9,9094989<9@9D9H9L9P9T9X9\9`9d9h9l9p9t9x9|9
9 :$:(:,:0:4:8:<:@:
; ;$;(;,;0;4;8;<;@;D;H;L;
;p=t=x=|=
>$>(>T>X>\>`>d>h>l>p>t>x>|>
? ?$?(?,?0?4?8?<?@?D?H?L?P?T?X?\?`?d?h?l?p?t?x?|?
1 1$1(1,1014181<1@1D1H1L1P1T1X1\1`1d1h1l1p1t1x1|1
2 2$2(2,2024282<2@2D2H2L2P2T2X2\2`2d2h2l2p2t2x2|2
3 3$3(3,3034383<3@3D3H3L3P3T3X3\3`3d3h3l3p3t3x3|3
4 4$4(4,4044484<4@4D4H4L4P4T4X4\4`4d4h4l4p4t4x4|4
5 5$5(5,5054585<5@5D5H5L5P5T5X5\5`5
7 7(707
8 8$8(8,8084888<8@8D8H8L8P8T8X8\8`8d8h8l8p8t8x8|8
9 9$9(9,9094989<9@9D9H9L9P9T9X9\9`9d9h9l9p9t9x9|9
: :$:(:,:0:4:8:<:@:D:H:L:P:T:X:\:`:d:h:l:p:t:x:|:
; ;$;(;,;0;4;8;<;@;D;H;L;P;T;X;\;`;d;h;l;p;t;x;|;
< <$<(<,<0<4<8<<<@<D<H<L<P<
d1p1t1x1|1
9(989<9L9P9T9\9t9
: :(:@:P:T:d:h:l:t:
51L1u1
252L2u2
3 333?3C3J3c3l3{3
4 494B4Q4[4_4f4
5#5-51585Q5Z5i5s5w5~5
6,656D6N6R6Y6r6{6
7!7%7,7F7O7a7m7q7w7
8-888<8C8\8e8t8~8
939<9H9w9
:":,:0:7:P:Y:k:w:{:
;(;,;3;L;U;d;n;r;y;
<#<2<<<@<G<`<i<x<
=2=;=J=T=X=_=x=
>">&>->F>O>^>h>l>s>
?!?0?:?>?E?`?i?u?
0)020E0Q0U0\0u0~0
1$1(1/1H1Q1`1j1n1u1
2 242@2D2K2d2m2
3"3;3D3S3]3a3h3
4%4/434:4S4\4n4z4~4
5&5/5>5H5L5S5l5u5
66#6*6C6L6[6e6i6p6
7&727W7`7r7~7
838<8K8U8Y8`8y8
9'9+929K9T9c9m9q9x9
:!:*:9:C:G:N:g:p:
;7;@;R;];a;g;
<)<g<p<
=$=(=/=H=Q=`=j=n=u=
>#>2><>@>G>`>i>x>
?2?;?M?Y?]?d?}?
0'01050<0U0^0m0w0{0
1,151D1N1R1Y1r1{1
22#2*2C2L2[2e2i2p2
3-373;3B3[3d3s3}3
4-464E4O4S4Z4s4|4
5'5+525K5T5c5m5q5x5
6&656?6C6J6c6l6{6
7 797B7Q7[7_7f7
8&82868<8U8^8p8{8
9'9+929K9T9c9o9y9~9
:":):B:K:Z:d:h:o:
;,;6;:;A;Z;c;r;|;
<,<5<D<N<R<Y<r<{<
=%=)=0=I=R=a=m=w=|=
>#><>E>T>^>b>i>
?&?0?4?;?T?]?l?v?z?
0&0/0A0L0P0V0o0x0
1!1(1A1J1Y1c1g1n1
2+25292@2Y2b2q2{2
3+343C3M3Q3X3q3z3
4#4'4.4G4P4_4i4m4t4
5"515;5?5F5_5h5w5
616:6I6S6W6^6w6
7%7)707I7R7a7k7o7v7
8$838=8A8H8a8j8y8
969?9N9X9\9c9|9
: :*:.:5:N:W:f:p:t:{:
; ;);8;B;F;M;f;o;~;
<<8<A<P<Z<^<e<~<
="=,=0=7=P=Y=h=r=v=}=
>">+>:>D>H>O>h>q>
?!?:?C?R?\?`?g?
0$0.02090R0[0j0t0x0
1$1-1<1F1J1Q1j1s1
2#2<2E2T2^2b2i2
3&30343;3T3]3o3{3
4*434B4L4P4W4p4y4
5"5)5B5K5Z5d5h5o5
6,666:6A6Z6c6r6|6
7,757D7N7R7Y7r7{7
8 8$8+8D8M8\8f8j8q8
99.989<9C9\9e9t9~9
:.:7:F:P:T:[:t:}:
;";&;-;F;O;^;h;l;s;
<!<0<:<><E<^<g<v<
=4===L=V=Z=a=z=
>(>,>3>L>U>d>n>r>y>
?'?6?@?D?K?d?m?|?
060?0N0X0\0c0|0
1#1/13191R1[1j1t1x1
2%2.2=2G2K2R2k2t2
3$3=3F3U3_3c3j3
4'41454<4U4^4m4w4{4
5'505?5I5M5T5m5v5
6#6)6.6F6L6Q6f6l6q6
='>S>X>
1?1j1o1
262S3\3
67E7r7
111N1k1
1t2i3v4
0?1&4v516
;A;^;{;
3I5_5~5
7&7D7K7R7Y7g7
8D8\8c8l8s89J9r9
:=;f;x;
5 5'5-565
5'6R6m6v6
0:2S2z2
R0/2S2Z2`2j2
3$3U3v3
555K5j5|5
586E6{6
;#;/;C;Y;`;f;o;v;};
;K<l<s<}<
<&=4=H=O=
0?0L0R0[0d0m0t0}0
131T1v1
6>6V6h6
7*8I8f8x8
;*;1;7;c;
=1>M>g>~>
272T2m2
5*5G5`5
:&:::V:]:o:
:*;<;T;b;
=#>>>E>K>i>
2&3E3u3
3 474N4
5.6=6a6h6q6z6
7.7>7b7y7
9.959>9G9N9U9}9
:/;L;i;
<$=1=o=
1,1K1c1w1
818P8h8Y9
243c3j3s3}3
7$7f7t7
78<8k8
4.4K4z4
4 5:5V5f5z5
?A?L?k?p?
2:3h3o3y3
5 5,5F5g5
6$6;6O6f6
:4:T:v:
0#1?1s1
2(2=2v2
2(3V3e3
6F6S6w6U7
<8<S<q<
(0Q0z0
2 3P3t3
7%8V8e8
:-;H;R;
2#3N3l3
728O8s8
1(1C1e1
2 3J3z3
6&7O7w7
838R8s8
;#;?;\;
==J=n=
0!0V0h0
2J3P3V3^3f3q3|3
4!4)414C4J4R4Z4
5>5D5J5S5\5j5p5y5
6%6+646=6H6N6W6`6j6p6x6
6"7=7X7
8%8.878
9!9)919P9T9X9\9`9d9h9l9p9t9x9|9
=5>y>&?5?
1=1\1{1
2f2.3X3}3
7"7D7d7
7&868G8x8
<N<f=u=
=>L>`>
$0B0F4U4
6@7]7z7
8!979E9J9f9
0F1U1v1
2"363E3q3
3-4f4u4
>6>]>}>
4/4Q4y4
8Q9\9t9
=+=>=u=
>7>P>]>
4 4L4q4
0.0p0}1
9%9H9T9
=->U>G?
2a2%3`3
6"6)6>6k6
:N;U;\;f;
8$9(9,9094989<9@9D9H9L9P9T9X9\9`9d9h9l9p9t9x9
>">=>g>
768C8Z8
;4;V;t;
6'666?6D6S6Z6g6w6~6
6&7U7b7
8%8/8=8O8g8
;k<.=_=
>#>:>O>V>\>n>x>
?+?j?y?
1-171R1[1`1
1"2+262=2]2c2i2o2u2{2
3(313d3j3p3v3|3
44-4H4S4
445H5O5
6P6h6m6
;'<O<'=
>?-?3?N?v?
9>:";z=
?%?J?f?
0%010E0[0
1.13181_1h1m1r1
2#2S2[2`2p2z2
4K5P5Z5`5h5p5x5
7@7G7Q7V7
9C:J:|:
;(;e<n<(=T=m=
7<8K8{8
9%:T:y:~:
=*=c=|=
?3?^?h?r?|?
1B1F1J1N1R1V1k1
3$4>4C4I4v4{4
9"9/9A9
=2=>=f=
>`>e>~>
>??C?G?K?O?S?W?[?d?n?
0.0K0\0
33$3N3
7+707L7j7
=7=I=X=i=
=/>K>P>d>
?%?X?j?v?
0&0K0e0r0z0
2I2U2c2~2
2"333f3~3
6"737q7~7
: ;+;y;
<-<P<p<
=<=I=`=
#0c0z0
1'181q1
2D2c2{2
5M5e5i5m5q5u5y5}5
7&757b7m7
828V8p8
9L9U9u9x:
??$?(?,?0?
5D5K5r5{5
7*7U7v7
798Y8b8k8r8
=6=K=b=y=
>(>/>Y>w>
?4?;?u?
6$7D7e7s7z7
:0:U:c:j:
;#<U<p<
171Z1x1
282Q2K3V3
424U4z4
8+868^8
;";-;U;
<#<G<Q<X<o<v<
=,=3=U=c=
>'>1>8>O>V>l>s>
212F2M2
313F3M3
414J4[4b4
5%6/666=6D6y6
657k7x7
7$828;8@8H8]8
929H9w9
:":8:g:
7H7R7e7~7
0/1=1C1J1Q1_1f1
22&242;2w2
445T5a5
5$6(6,6064686<6@6D6
939S<c<*>
080U0{0
<-<D<j<w<
?1?f?~?
455C5]5
6E7X7i7
7$7@7d7
>?^?z?
:7;W;!<
;%<M<~<
666f6U7~7
051X1G6
:):6:[:
;S<5=|=
Antivirus Signature
Bkav Clean
Lionic Clean
tehtris Clean
MicroWorld-eScan Clean
CMC Clean
CAT-QuickHeal Clean
McAfee Clean
Cylance Clean
VIPRE Clean
Sangfor Clean
K7AntiVirus Clean
BitDefender Clean
K7GW Clean
CrowdStrike Clean
Baidu Clean
VirIT Clean
Symantec Clean
ESET-NOD32 Clean
APEX Clean
Paloalto Clean
ClamAV Clean
Kaspersky UDS:Trojan-Spy.Win32.Bobik.a
Alibaba Clean
NANO-Antivirus Clean
ViRobot Clean
Rising Clean
Sophos Clean
F-Secure Clean
DrWeb Clean
Zillya Clean
TrendMicro Clean
McAfee-GW-Edition Clean
Trapmine Clean
FireEye Clean
Emsisoft Clean
Ikarus Trojan-Spy.MSIL.Agent
Jiangmin Clean
Webroot W32.Trojan.Gen
Avira Clean
MAX Clean
Antiy-AVL Clean
Microsoft Trojan:Win32/Malgent!MSR
Gridinsoft Clean
Xcitium Clean
Arcabit Clean
SUPERAntiSpyware Clean
ZoneAlarm Clean
GData Clean
AhnLab-V3 Clean
Acronis Clean
BitDefenderTheta Clean
ALYac Clean
TACHYON Clean
DeepInstinct Clean
VBA32 Clean
Malwarebytes Clean
Panda Clean
Zoner Clean
TrendMicro-HouseCall Clean
Tencent Clean
Yandex Clean
SentinelOne Clean
MaxSecure Clean
Fortinet Clean
AVG Clean
Avast Clean
No IRMA results available.