Static | ZeroBOX

PE Compile Time

2023-10-17 01:18:51

PDB Path

L:\Code\smalllumma\Release\LargeBarga.pdb

PE Imphash

8012fe0c67d93ad97108363904afaf97

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00001000 0x000219af 0x00021a00 5.79516053157
.rdata 0x00023000 0x0000554e 0x00005600 3.45115084652
.data 0x00029000 0x00002380 0x00001600 3.12786710732
.idata 0x0002c000 0x00000b93 0x00000c00 4.47238665032
RT_DATA 0x0002d000 0x000a70e0 0x000a7200 6.78015113193
.tls 0x000d5000 0x00000202 0x00000400 0.0
.rsrc 0x000d6000 0x00095bcc 0x00095c00 6.31662193254
.reloc 0x0016c000 0x00002496 0x00002600 4.14674266151

Resources

Name Offset Size Language Sub-language File type
RT_RCDATA 0x000d60e8 0x00095800 LANG_NEUTRAL SUBLANG_NEUTRAL PE32+ executable (DLL) (GUI) x86-64, for MS Windows
RT_VERSION 0x0016b8e8 0x00000188 LANG_ENGLISH SUBLANG_ENGLISH_US Alpha compressed COFF
RT_MANIFEST 0x0016ba70 0x0000015a LANG_ENGLISH SUBLANG_ENGLISH_US ASCII text, with CRLF line terminators

Imports

Library KERNEL32.dll:
0x42c21c VirtualProtect
0x42c220 GetProcAddress
0x42c224 LoadLibraryA
0x42c228 HeapAlloc
0x42c22c GetProcessHeap
0x42c234 VirtualAlloc
0x42c238 LockResource
0x42c23c SizeofResource
0x42c240 LoadResource
0x42c244 FindResourceW
0x42c248 GetModuleHandleW
0x42c24c EnumSystemLocalesA
0x42c250 GetLocaleInfoA
0x42c254 GetUserDefaultLCID
0x42c258 HeapReAlloc
0x42c25c GetStringTypeW
0x42c260 MultiByteToWideChar
0x42c264 LCMapStringW
0x42c268 RtlUnwind
0x42c26c GetCommandLineA
0x42c270 HeapSetInformation
0x42c274 GetStartupInfoW
0x42c278 EncodePointer
0x42c280 DecodePointer
0x42c284 RaiseException
0x42c28c ExitProcess
0x42c290 WriteFile
0x42c294 GetStdHandle
0x42c298 GetModuleFileNameW
0x42c29c GetModuleFileNameA
0x42c2a4 WideCharToMultiByte
0x42c2ac SetHandleCount
0x42c2b4 GetFileType
0x42c2bc TlsAlloc
0x42c2c0 TlsGetValue
0x42c2c4 TlsSetValue
0x42c2c8 TlsFree
0x42c2d0 SetLastError
0x42c2d4 GetCurrentThreadId
0x42c2d8 GetLastError
0x42c2e0 GetCurrentThread
0x42c2e4 HeapCreate
0x42c2e8 HeapDestroy
0x42c2f0 GetTickCount
0x42c2f4 GetCurrentProcessId
0x42c2f8 GetCPInfo
0x42c2fc GetACP
0x42c300 GetOEMCP
0x42c304 IsValidCodePage
0x42c30c IsDebuggerPresent
0x42c310 TerminateProcess
0x42c314 GetCurrentProcess
0x42c318 HeapFree
0x42c31c Sleep
0x42c320 HeapSize
0x42c328 FatalAppExitA
0x42c334 FreeLibrary
0x42c338 InterlockedExchange
0x42c33c LoadLibraryW
0x42c340 GetLocaleInfoW
0x42c344 IsValidLocale
Library USER32.dll:
0x42c3b0 RegisterClassExW
0x42c3b4 CreateWindowExW
0x42c3b8 ShowWindow
0x42c3bc UpdateWindow
0x42c3c0 GetMessageW
0x42c3c4 TranslateMessage
0x42c3c8 DispatchMessageW

!This program cannot be run in DOS mode.
bJ''b2Q
b,)*b Q
bJ'#b$Q
bJ'$b$Q
bRich%Q
.rdata
@.data
.idata
RT_DATA
@.reloc
^SSSSS
j@j ^V
F\=XHB
VPPPPP
tRHtCHt4Ht%HtFHHt
u}h(MB
URPQQh
t"SS9] u
F Pj*S
F$Pj+Sj
F(Pj,S
F,Pj-S
F0Pj.S
F4Pj/S
F8PjDS
F<PjES
F@PjFS
FDPjGS
FHPjHS
FLPjIS
FPPjJS
FTPjKS
FXPjLS
F\PjMS
F`PjNS
FdPjOS
FhPj8S
FlPj9S
FpPj:S
FtPj;S
FxPj<S
F|Pj=S
C PjPV
C$PjQV
C*PjTV
C+PjUV
C,PjVV
C-PjWV
C.PjRV
C/PjSV
CHPjPV
CLPjQV
.t|PVj@
uMhdVB
<+t"<-t
+t HHt
u-h|VB
HHt*HHt
<0|<9
tK<_t<<$t8<<t4<>t0<-t,<a|
<z~$<A|
<0|L<9
tI<A|2<P
t]<@tS<Zt
tfh\\B
tp<@tl
YPVh4\B
Du'hp_B
OtFOt#OuV
t4<@t;V
Tt^HtTHtJHt
Hu\h4`B
0t1HHt
<@tJ!~
t!h|aB
AtJHt4Hu
<?tG<Xt
t VV9u
;t$,v-
UQPXY]Y[
PPPPPPPP
Wj@h8gB
PPPPPPPP
bad allocation
Unknown exception
CorExitProcess
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
HH:mm:ss
dddd, MMMM dd, yyyy
MM/dd/yy
December
November
October
September
August
February
January
Saturday
Friday
Thursday
Wednesday
Tuesday
Monday
Sunday
SystemFunction036
GetProcessWindowStation
GetUserObjectInformationW
GetLastActivePopup
GetActiveWindow
MessageBoxW
 !"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~
LC_TIME
LC_NUMERIC
LC_MONETARY
LC_CTYPE
LC_COLLATE
LC_ALL
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
1#QNAN
1#SNAN
_nextafter
_hypot
Complete Object Locator'
Class Hierarchy Descriptor'
Base Class Array'
Base Class Descriptor at (
Type Descriptor'
`local static thread guard'
`managed vector copy constructor iterator'
`vector vbase copy constructor iterator'
`vector copy constructor iterator'
`dynamic atexit destructor for '
`dynamic initializer for '
`eh vector vbase copy constructor iterator'
`eh vector copy constructor iterator'
`managed vector destructor iterator'
`managed vector constructor iterator'
`placement delete[] closure'
`placement delete closure'
`omni callsig'
delete[]
new[]
`local vftable constructor closure'
`local vftable'
`udt returning'
`copy constructor closure'
`eh vector vbase constructor iterator'
`eh vector destructor iterator'
`eh vector constructor iterator'
`virtual displacement map'
`vector vbase constructor iterator'
`vector destructor iterator'
`vector constructor iterator'
`scalar deleting destructor'
`default constructor closure'
`vector deleting destructor'
`vbase destructor'
`string'
`local static guard'
`typeof'
`vcall'
`vbtable'
`vftable'
operator
delete
__unaligned
__restrict
__ptr64
__eabi
__clrcall
__fastcall
__thiscall
__stdcall
__pascal
__cdecl
__based(
{flat}
`non-type-template-parameter
unsigned
short
<ellipsis>
,<ellipsis>
throw(
`template-parameter
cli::pin_ptr<
cli::array<
`anonymous namespace'
generic-type-
template-parameter-
`unknown ecsu'
union
struct
class
coclass
cointerface
extern "C"
[thunk]:
public:
protected:
private:
virtual
static
`template static data member destructor helper'
`template static data member constructor helper'
`local static destructor helper'
`adjustor{
`vtordisp{
`vtordispex{
const
volatile
volatile
volatile
signed
double
<unknown>
wchar_t
UNKNOWN
__int128
__int32
__int64
__int16
__w64
__int8
std::nullptr_t
united-states
united-kingdom
trinidad & tobago
south-korea
south-africa
south korea
south africa
slovak
puerto-rico
pr-china
pr china
new-zealand
hong-kong
holland
great britain
england
britain
america
swedish-finland
spanish-venezuela
spanish-uruguay
spanish-puerto rico
spanish-peru
spanish-paraguay
spanish-panama
spanish-nicaragua
spanish-modern
spanish-mexican
spanish-honduras
spanish-guatemala
spanish-el salvador
spanish-ecuador
spanish-dominican republic
spanish-costa rica
spanish-colombia
spanish-chile
spanish-bolivia
spanish-argentina
portuguese-brazilian
norwegian-nynorsk
norwegian-bokmal
norwegian
italian-swiss
irish-english
german-swiss
german-luxembourg
german-lichtenstein
german-austrian
french-swiss
french-luxembourg
french-canadian
french-belgian
english-usa
english-us
english-uk
english-trinidad y tobago
english-south africa
english-nz
english-jamaica
english-ire
english-caribbean
english-can
english-belize
english-aus
english-american
dutch-belgian
chinese-traditional
chinese-singapore
chinese-simplified
chinese-hongkong
chinese
canadian
belgian
australian
american-english
american english
american
Norwegian-Nynorsk
L:\Code\smalllumma\Release\LargeBarga.pdb
.?AVbad_alloc@std@@
.?AVexception@std@@
.?AVbad_cast@std@@
.?AVbad_typeid@std@@
.?AV__non_rtti_object@std@@
.?AVtype_info@@
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
VirtualProtect
GetProcAddress
LoadLibraryA
HeapAlloc
GetProcessHeap
GetSystemTimeAsFileTime
VirtualAlloc
LockResource
SizeofResource
LoadResource
FindResourceW
GetModuleHandleW
KERNEL32.dll
DispatchMessageW
TranslateMessage
GetMessageW
UpdateWindow
ShowWindow
CreateWindowExW
RegisterClassExW
USER32.dll
GetCommandLineA
HeapSetInformation
GetStartupInfoW
EncodePointer
IsProcessorFeaturePresent
DecodePointer
RaiseException
SetUnhandledExceptionFilter
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
GetLastError
InterlockedDecrement
GetCurrentThread
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
UnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
HeapFree
HeapSize
LeaveCriticalSection
FatalAppExitA
EnterCriticalSection
SetConsoleCtrlHandler
FreeLibrary
InterlockedExchange
LoadLibraryW
GetLocaleInfoW
RtlUnwind
LCMapStringW
MultiByteToWideChar
GetStringTypeW
HeapReAlloc
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
$((+{@#
lYF}-l
,II:,7Px
JxZNtpl
"Z3!@_4
G3eE3$d
HlK*c,|
$Uz")$
X_5%a-
/mO>)r!0+
7ZhQWs
G&6%bs`
M`:](6"
j-C2/9
$;z?jod
s]RD>ii
?[L5a?
T!F+ot
W<nM'w
c|OFr&@
fz4Q+*yC
5J+X}p
bQl},O
|4[F2;
K7W2[)
qYpC#
A]2'\+/"
^5#Gq]
3<h'jx
_N!O&F
>#{I)%
o`),v/E
N~":b7
\}Xu,(
x3S7G=
Q6>"j(
43*jBkzS
_LG9_e
MKSjNu
s;{9ZU
%WuC y
:L=>%8V#j
IJ_c&V
~yH+Q9
K=qo3~
%hyH)+
Su`1|~
">|~[G
yXKi{C(
YY1%K7
|IslZ+
P/8|h7|
W}dEV+I
Zb]1EW
w_u5j5Y
dOq4Vft
Wn=5I0$
@hYat?[6
oK"[gY
w}TKzB
maTPQ!
RXL:0vq
gx>]nn
y j:3`_
>o'k@
9$'/P(
FIQ{Q-w
I,@0R7
-{sTYLO1
@ZD6M,
pjj:~c
}d.]-b
",]U4U
OrFG-^
@iD`qb
y~KlI[
ET`P=k
EmNkSl
ZfUi O`
-wA:eH/
~JR}CHrz
mzgGnn
0}7/zpn
ZOX}J2
&0GSw!Pp
[g8<Gw
tW~EW:
F&s%'E4
F^m7WU
-?vqcV
E{/r0`r
C#K6c7
hQc8-H
_e5fEG!
,_+` r
*Mx^N]
3E5WWG
VzA@o{
0s0l>{w~
1Y QLe7
PqkZ-jWC
?%(yMl
.>,/i|/
a+I]11
^XZD_]
)\z[!:
q-oNz'7j$
c73~m~
QEzDOi
~r@;f8
(<KQnK
>AB!e!
%j CYS
*9cU{l@
71n4N7
6:rW\
4-:Pwe
Ph-z f/$
&C4,u
rH":w3
2S".A>n
ZM+B%J
5W4EE[
?Xx0b"
P<4XWG
(R4(YZ
|CupNM
,i:\HH
,CRYea
bD_2ag/
b:?:s
O=t{r@s f
=d5tO%@R
sxvO&<
4p@g=?
AgL_)K
y'\H?e
8&UEgG
s5=Q.7
SL6.S*
w{^{8s;b
=hN\v"
*uUhlB
^pho2C
Cz`Ka`
ZEI{Dq
&.Jr=*h(
[e=Fl;6
o/=Kj
4T*o4l~
t/K!@_Z
{d5URK
K~3+aRH
[8.9Z4
?!JQ(7
~kgh81T
BA%YuTcO
Q|/r81%c
N'[`em
(&oR[0
QV)]ux
=X0o,>
(3Q2z@
c^*u+Ef
7Spfu(
Jlj3>G
!{w4yNuc$
xQC:v`
KVLE)*
+&U)ZP
(_9X'J
j1~YF$
kA &1P
I$ae($
R0uP]U
|z{';<
F\v|S]"
N>QEd[
9X~Erq
2f]]%Q
yDsYRe
bU)561-d
Q?6p.D
{'Bi[
7CT|T*3
}fq%>Eg
me8eXvi
S*9@t&
6H[qR+
)2y0D//
P\wZ#x$
gL7l)Sux
il4traZ
ryx@{8
"nZ"Ah
:WV;tE
{~:rqH
j^_t<^
goS5z6a
15VdS:1
i5N(j^
s^n)SP>z;S6d
} 7^'8
By1fT)
w.t4Cw
bN"+@4n
?fsBsk#
9,?\[q6
5JoG\1y
xxi,Y6(
OqGTrQ;R"FCU
8O}rOK
Me*:uq3
?vSh%e.-
SjdTg=
^Y`(}cF~
Lm9k=L
@NR[q3
W{acC'
u}JAUZ
6ldeeBe
4[|*x&
${|5J$p:
nD,kyBF6J
lh\'S#\
,: nbyhZ
8fyi8<
U,W)iF
pUN>=(
6`jdV7
.&{(PY
"5NHX#
@Jx_0o1
;AR8_Q
(_5Am$
A&Kr4)
$E]N9L
Uq])-v
<!*k^U
+19Cl$
%}1(5e
.E&f|Fv
,bma5/
cb|z7v
`#@"4;,]
6Y>iUG
~%6hzEi_
log<TI~i
1.(A$yD
l#nYZ||
Zc){KP)
1,]J]t
q;L7u&
2L~s2o
:#q134
7O1aaYWU
Z%JGgP)
QyU$@$D
v!o$i|
\tFQN/q
Cr<q,}
d0GVt'e
;9PR6'
ou=2So
A/}g-GR
J@f*0[
4e=6?A(
];I'i7{6
D1e_,Z$
D44x
T'XrF6
dB$^gx
6wY?XM
8_&t9>
vuw[zA
Q/uF*-c
~Y[2K.
G5@drS
P+J'`>
U>z]}w\
<Ra'1I
./\.0{
*iE-w,*`
NiWcf_3
"SXxyR
lH/At/
X_zom>
wy]5,B~
f\:I]q
-=}',}
j*3(;*
nv@DW<
#;0L=e
fCTHM1
eI'<-U
^`D]I"6
.xh,).
y^b#!zl1MIi
tUP<GT
yb9Q}A
6TWmII
"ze/]bq2
`r "pI&H
Tr@4}'
FLDslpC'
VUdX[d$
zVCcxWB%\lJ
ErTBi.3EU
buW.U
pdH^)'
J~K6)
DP}$Adu
`3oN 7
_:uDAp
a)&pnA
DD:F2[
R:Q!O.
;&E&WfWR
>t.HX
i25!!$
UxgWDQ#
13ir3Ww@
V=\=,(>
~c\7|9G
$1t7ca
L'1ZvL{
Pw2<vB
NU~nJ'
TNk{;'<
>aT!dG
ph\,Nt
[7 EY5F
GKUfz5
E45['BH
Fx]?^!
Scr1CWc
T.pYj?
8VkV;$%
Hq"9uy:
l?kVW[
xU~4!~E
|A|s$
iMD%{f
;rO""`
s0wG;$
b pnkx
{Z#,Dr#v
>0e)JxP
I[:2Fxb7,
#`&89wM
hxIB!w5
_G>:=OO
d~b2h(&
AXk>:^x
f?dr!j
Z%ZJqP6j8
#oTovTo
C3!jb[.t@T
no9xt6
8L5>B$
0\BQdZ
9g_jp?r
qAV.$4'
9NN}nA
w@',^zx
wO.`n*V8Qp
#b*$P\q
|<^5i@;g*}
DNz>z<
=mZX$C
!A@>#0
xvW(ld
3BFM2}
lCYA)
x#|7&a4d
6DE7`Z@
35P!a}
Qk|Fal:
a3G j49TA
-0\W75r
S+c<aWY
2Alj@/
lYZ'}{N%
?Vxa:I
s.|+vC
3%|-S[.
-}#T=$
|&vqQl
'hlKH:
xR_-Fx
P'"0E,jx
)U@+L
Pe'YOi4a
+`i\&M
qbk.*-]
e*?8y]N
{5|7n.
nw?f$p
aUd(c|Xe
`O^2luv
uV/4"-
qQ*f3#
l*6yTM
80xV33"&
^;fUEDy
!wz)'1
iv#&&"_$
)h?hsj
@(h)?a
j0>C:`
tCrNTO
9U_nF<MvC
>Cg]|c
44w;)o\
k>W,GU
;(C]:"
O4* w%
wTy_di
]pjG.$
v~FnyT'
r> OtA
:dIL^!K
}:Os8%k!&
O?gezxN
vp${,P
7?AKDm
ZVG!j0yU
&w+zkRs
hh@dJH
hg^zqN^
xh.j)E7
QD8prD<VT
Xoqz+j
@YM>86
uq$]7
};Mz03
psLh0
d):BcyC|vS
0f"J:&
~@8d Rv
-!a-Nz+
W?*]oD
#f -z$UN
Wg$5:b
t)kfmUM((
+!@%^u
J[|v8Z_
TWcAb'
Fhp!*K
"|_I-h:
MZ@ K<t
#+y}N_~T
#m>3c,
vfF/M@$.
D7]c$SR
l9n|<2g
;qIhYz
Ec~H&W
a:?y<nL
_*Vi?/
`}I0b>"
0=vv%f
GCdyhxQ~
Q1O+dtes
%K:$qf
"xijq/
o)!Qi.
]B6<":
5'&7Na
CkhpiT
bWmt>C1xI
do`Fi$M
'OBW{9Dxf
RF`\a`
mX]AIk~Y
8zc/Tr
A-@e)c
c~% ax
U+pL2z
=liTI^
Tm] =.
q>gwaVn
FO}($jZQ
0HV\P*C
xjt_J
\~z2k3d
swN|m\
Sn26D(
6O\k4IR
z{];T|
y{!9iwL
J@AYAS
;/{\8t
QKJ^O.
Bd`w-D
Z&rSYr
wGELEN
mnX{L8"
;@C_TT
p]B8>i
/Ynm_v
jhj_{)#[S
3#'J3U
gt,X3tO
!JX17=+
ndjKOC
OcQ#:
jNX6nU
P9k!"3
#Swwvn;
Y?I3;^
tKW&#c
?Kg2H:
gs5ET>%
'aOlOJ5
</y3b@D
5E4'A1&p
dWW4tu
=uD;P=Aj
~'.Q&a
UumT/
\>]mLQaL
&cU!7/
!4},lYH
NC9gu\
Q)es;0r
$I*\m@
|gaBE<
rIpbkW
y->G]E
-OC'sd1
bn$u}Q
((&F%$#
nEm|CZ
#>g%<a{'
Z{1w|7
K|n=L\
6a3=kV
e1oBQ$
lO]}R4
G|!Sg
^8b~6&
CBSWQ:
o~4=/=[
-&iC&(
@"KBYg
H9F{cN
uX#w34kk
y(a9K{S:
\\iB4v
@W!whS
}W\Kk
.Cl=!?
pA;k6e>
<J"0fR
BH+n}O
CK+jrW
Ss_ tc6s
:)j{9&
#Rg~Z8r
AS r-7
F1pN9w
8JUtDb>\
3eZDN
Blh19iI
`k2p?M
>`Uz-t
.(y_Kd
~&TQR_^
.z1*<|s
/.r%zD
=fEJ3/*
]@ '6Z
0KNh]?]L
(^FU4<Ox9i;
e"Nr5'[b
7oy8x*
aq/U7S9
("62D`
p;Sq8}
1.|X.
r$.C+8
(y[ *?
GA46D@
0SZ|$y
KKl>yq=
1M0G"Z
-:x6)hqHn
@_Px.~
5HuU[z
v><C(R
W9t>BQ
Sd+Ov;
FBDW7
l&=VG4
skPvI
@iUb#EK
g%d9Uo%
+\+)'&~o
iRj:KN
{<zd:x*
;"WvV!
}mhbW
jfACfb
&2VS0-
+aAIqsGR
eVU9v9
"MJoB]
Zt8)(
|EK8j%
?E"[o|
;X~C%}_
IWNnY$
#1>]T~
7!Y>+=
J:L5x3
3J<Og=
vcT=ekb
Y7O;kA
8<YCvu-c
wn;?<5'
fP)Z.4
/iywD=B
[bYU"q.
Fa2'[
ajvtWMo
%'#=O"
u(w4x$
u&1~L%
jsani/
0WrtA-
dIvb{{
f&]*ee
s{P|RhV
kOlT
9s7/;9
I'R=]a
}X_~<Q
UsZAj"!
IC ^wV
g&Z*q5w
_dQXVIta
B;;4b4
\ tw[Ne
jd%O#B
jc:cdO
wwYCdc
7$T8f#1
\t~-8N*W
xiit}}
8M2`e"
'yfipY&F
P/-z@Q
u*-w=ytg
6jQZ`5&
0hmZ6$
AdFDH@G
\/aVe`"<s
$9p* 
L+hz0c
Y>,yvbW
HK}A/6>
i6x92
k^\P;d$I
xW4w1O
\S0C08
*z5cTxyN
n=Go)1km{
I*+CD4
')p#=L
KWAn"?u
8zm#t'
DOsU1}f
7<iy;m
rBi 1b
nxi5+X
*D*Uy`
vfc^'|
)p7:Ff
xbbkh
)P}Lz%L
W+jMo3
d|uBP1\
.=+# z
wv7HYU?
r;x#29P
gka!ul^k
^Wf/2d
@8|-Wl
*rB3Z'O
f*N;yn|
K+f>zi
C%6Vm2H
OnL8^'0
LX2VK*
1 %)^b
ZU)9$n
u K4>?6;
i1/:Hw
Fwp&rD
~%-j14M
)Q3,#N3
^87l/
GS7-OA
} }Ss7
Bd8kp@p
2 a]3(
v*fZJq
8LZTo*
nW [R$
H8&AE1
~k'.;?
rx"NZ\
P1XF%/_
3x<LLt
*ipLNR
r^QHLG
>RP$y*4
(@xpNE\
WYKoX
vY$CGg;O
`: -.1d
+{|Y$~cO
z<xCV"
UpeCXq
Z^O7A\
%XtgH;Y
!,,V0u
l<WG?9
Ppy;cC
FOo,dF&
U%R"0a
Q"b%u&ze
SguET+?
<NXG_H
3GC^f})
kr?coG
H cz7X
mC(cRH
X1DON\
X_[o Ia
@{$KZL*3]
m7oji/-
!zqXYT
FWB<m>
+FQ:D,O
KVS!6$
kKWtmb
*v?vA~
r1R[X]sp
rWZr"e
oXgZJi<
q+${0h
Ufglnk
DsG6c4p
<no-/z
6J~BWa_W
#eB\r"
3-S)2A
<YP~hnY
5{c]'f
*e=q-wj
Jo2Q>;
ijXqvM
cW\+ K
MktMMX
aFQ^7j
tM15&5\
'^ye;oU1J
@QxZ#.>
kBaZX\
0dYB+W
1u;$B}
~>:VNPS
_QdyVh
{Ys\H\
CVs@a_
+;}*$f
@'4'kd
n}$DEO
BC+%H
%h>*=
=4ocKSs~
X<^p?{
?L%+Um
Y`_'_n
P9/?s909
{kd_1@
OdqsB/
5vjr6"
h;`Cqjp
I:(p3x
G}{u '~
OI\\@I
uk0*%<
1D\YZz
K\IZ@
_~iDCIN.
=yw;;j
|j0t$+
SZ7;Ln]
+?p"q~
i_F \}
ACL&nesv
}EGl+E
f]u0I
xJ$3|y
A1mk$f
>R bW<
\upGfz
HlWa0A
(9Jc=j
YZCQCk
8J)jPzP
xQImg%y
r+zwfZ
GC@Gj1
>aM:faKX
pvMVw`/
r@vV|@
L7)zhn
zp~zF"Y
^GwyfFw
X%dEE7
fcA#Zh
TFB)'j
<=ZFI q_
3IL.zB8
Y{=$`&
9g_T{F
?~\Mtn
e\;W5P9
|24!JQ
|nm&Np
~"n0vbh
9."F9]
Z)~Z1RC
)jx[1j&
y\pe*a
ZmP$4J
ON*Zze
/:v'kbD{
r^d*@8
28eEPz
/+#wBg
W&8l;3
cIld0D
I5&9x9
CsX]aO
-}p#fo
uRkh-.b
9$6Rma
";{K3
60pz:@aJ
I.sU]q
n%d1hKB
X{aMEv!
:I5?{;
DrE#~8
&k>uf|
65S$KJ-
!p6[uR
7WtVDH
5dnn(H
hoo:0
BYCtLw;0~)
|b>G8f
jF3H]`
4:IIj#
llP*Gs
d\l4pk
R%QDG39
F@9,B,
<*f9$c
Zlf"}b
o%MPsb
B0!;#!$
v9rUVD!
=f{IrJ-
AhymPz
Qp]=UgF]
3^bN]h4
2Y/wx?{
Xv|u"q
a,p5?=
Nr=5Q.
Q.A\aM
e)'$\z
Po/,OE
ObOA76
\c/t?1
!This program cannot be run in DOS mode.
_pRich
`.rdata
@.data
.pdata
@.rsrc
@.reloc
t$ AVH
ndH9q t
H9s(u@
UVWATAUAVAWH
D$@9G(u5D
D$@D!L$0L
D+D$DH
l$HD;l$@D
A_A^A]A\_^]
?f!GbH
UVWATAUAVAWH
SXL9c0t
9C(}@H
A_A^A]A\_^]
UWATAUAWH
A_A]A\_]
@USVWATAUAVAWH
tKH9t$Ht?H
L9\$HH
t$Hu2H
A_A^A]A\_^[]
H9t$Ht
D$(H9L$HA
H9t$Ht
H9t$HD
|$Hwwseu
L$HHc@
L9t$Pu
T$PH9t$Ht
""""""""""""""""""""""""""""""""""""""""
"""""""""""" !
==========
 !"#$%&='(=)==========*===========+,=
==========================-================.===============================/01234==============56789:===========================================;<
@USVWAVAWH
C4L9|$pt
C8H9D$x
C,L9|$pt
T$pD8}
A_A^_^[]
ATAVAWH
A_A^A\
LcA<E3
u HcA<H
H3E H3E
E(=csm
E8=csm
EH=csm
EX=csm
Eh=csm
Ex=csm
WAVAWH
+L$,A;
D+D$<E;
@A_A^_
UVWATAUAVAWH
A_A^A]A\_^]
WAVAWH
A_A^_
x UATAUAVAWH
u$H!t$ L
u=H9t$0u6H
A_A^A]A\]
t$ UWAVH
f+D$$D
D$(f+D$
D$$)D$,
t$ WAVAWH
l$ VWAVH
L!t$ E
T$0)D$8E3
UVWATAUAVAWH
G,L9uPt
A_A^A]A\_^]
t$ WATAUAVAWH
A_A^A]A\_
k VWATAVAWH
0A_A^A\_^
UVWAVAWH
0A_A^_^]
G"8C"t
G&f9C&t
G0f9C0u
O.f9K.u
O49K4t
UVWAVAWH
A_A^_^]
|$ UATAUAVAWH
0A_A^A]A\]
@*f9A*t
@(f9A(
WATAUAVAWH
0A_A^A]A\_
C @t!H
f3G f#
f3G f#
UVWATAUAVAWH
A_A^A]A\_^]
L$PH!\$HD
EpD+v8A
tsH!\$8A
H!\$03
s WATAUAVAWH
<$Wv$fA
<$(v(fA
f3C f#
f3C f#
t$ A9E
0A_A^A]A\_
UVWATAUAVAWH
PA_A^A]A\_^]
UWATAVAWH
A_A^A\_]
UVWATAUAVAWH
E9,$u D
D$D+D$L
D$H+D$@
D$@+D$L
|$@D+|$LL
L$HD;L$@~6H
D$PD+L$@H
A_A^A]A\_^]
f3C f#
t$ UWAVH
\$ UVWAVAWH
A_A^_^]
t$ WATAUAVAWH
t!fD9g
0A_A^A]A\_
UVWAVAWH
pA_A^_^]
@USVWATAUAVAWH
A_A^A]A\_^[]
WAVAWH
UVWATAUAVAWH
A_A^A]A\_^]
H@H9Q0uBH!T$8E3
!T$0H!T$(H
t$ UWAVH
WAVAWH
@A_A^_
WAVAWH
@A_A^_
L$P+T$p
Fl9^hu
l$ VWATAVAWH
Gl9D$Tt
A_A^A\_^
UVWATAUAVAWH
`A_A^A]A\_^]
VWATAVAWH
D$ @taH
;L$4~$H
A_A^A\_^
UVWATAUAVAWH
A_A^A]A\_^]
WAVAWH
0A_A^_
E3+EC+E+
@SUVWATAUAVAWH
D+|$<E
XA_A^A]A\_^][
WAVAWH
GTD9|$ht
A_A^_
@USVWATAUAVAWH
A_A^A]A\_^[]
@USVWATAUAVAWH
A_A^A]A\_^[]
C83G8%
G83C8%
WATAUAVAWH
A_A^A]A\_
UVWATAUAVAWH
D$D+}$H
L$8+M
A_A^A]A\_^]
D;Y@}AA;Rp};I
xi;{p|
x UATAUAVAWH
L$09\$p|
A_A^A]A\]
\$ UVWATAUAVAWH
A_A^A]A\_^]
UVWATAUAVAWH
A_A^A]A\_^]
USVWATAUAVAWH
9t$8~H
D;d$8}.A
L$0H9t$0t
9t$8~
L$0H9t$0t
;D$\sA
9t$Xt6A
A_A^A]A\_^[]
SUVWATAUAVAWH
A_A^A]A\_^][
x ATAVAWH
u%!CH!
A_A^A\
\$ UVWATAUAVAWH
|$LD;`
9w ucH
D$8;D$<
A_A^A]A\_^]
\$ UVWATAUAVAWH
KhD+ D
}:D;[p}4H
uT9|$HtNE
9|$Lt6H
9|$PuP
A_A^A]A\_^]
WAVAWH
A_A^_
UVWATAUAVAWH
D!cPD!
0A_A^A]A\_^]
@USVWATAUAVAWH
t$(D!d$
$D9{Ht
SP+T$T
;Sp}%H
D9|$@t
A_A^A]A\_^[]
WATAUAVAWH
;Sp}DD9
;Sp}@H
0A_A^A]A\_
u9;sp|7H
H9{0u>H
\$ UVWATAUAVAWH
D;>t6H
D$4;D$8
A_A^A]A\_^]
UVWATAUAVAWH
|$<D;}
D$@D+}
A_A^A]A\_^]
x UATAUAVAWH
A_A^A]A\]
@SUVWAVH
H9{0t4H
pA^_^][
UVWATAUAVAWH
L$`+FHM
A_A^A]A\_^]
sHD9sP
t$ UWAVH
Kh+CHH
UVWAVAWH
A_A^_^]
t$ WATAUAVAWH
0A_A^A]A\_
WAVAWH
A_A^_
WAVAWH
A_A^_
WATAUAVAWH
A_A^A]A\_
UVWATAUAVAWH
A_A^A]A\_^]
VWATAVAWH
H9~ t$A
A_A^A\_^
UWATAVAWH
A_A^A\_]
|$ UATAUAVAWH
D$8H!|$83
H!|$@L
A_A^A]A\]
t$ WATAUAVAWH
t}f;-P
x9f;-Z
A_A^A]A\_
@USVWATAVAWH
A_A^A\_^[]
UWATAVAWH
A_A^A\_]
WAVAWH
UVWAVAWH
u595&o
A_A^_^]
t$ UWAVH
WAVAWH
0A_A^_
UVWATAUAVAWH
A_A^A]A\_^]
L$ UVWATAUAVAWH
tM9='`
PA_A^A]A\_^]
@USVWATAUAVAWH
t$9YXuH
A_A^A]A\_^[]
x ATAVAWH
A_A^A\
VWATAVAWH
0A_A^A\_^
UVWATAUAVAWH
A_A^A]A\_^]
VWATAVAWH
A_A^A\_^
L$ UVWATAUAVAWH
`A_A^A]A\_^]
t$ WAVAWH
0A_A^_
WATAUAVAWH
A_A^A]A\_
UWAUAVAWH
A_A^A]_]
UVWATAUAVAWH
A_A^A]A\_^]
x ATAVAWH
A_A^A\
|$ UATAUAVAWH
A_A^A]A\]
WATAWH
@SUVWATAVAWH
9\$ t
@A_A^A\_^][
|$ AVH
@SUVWAVAWH
A_A^_^][
@USVWATAUAWH
D9d$Xt
A_A]A\_^[]
ufE;T
f9AXuW
f9Aru@
u#L9I@u
KPH91t
UATAUAVAWH
D9ePtjD9-K
w'E92u
A_A^A]A\]
UWATAVAWH
A_A^A\_]
WAVAWH
A_A^_
UVWATAUAVAWH
L$4u!D
H9|$8t
A_A^A]A\_^]
WATAUAVAWH
A_A^A]A\_
UVWATAUAVAWH
d$Xt5D9-3
T$[<pu
uXD8kwu_H
D8CwtHD9-6
A_A^A]A\_^]
WAVAWH
A_A^_
WATAUAVAWH
A_A^A]A\_
WAVAWH
A_A^_
UVWATAUAVAWH
u#@:}Hu
PA_A^A]A\_^]
WAVAWH
A_A^_
SUVWATAUAVAWH
t:D:hwu
XA_A^A]A\_^][
WATAUAVAWH
0A_A^A]A\_
WATAUAVAWH
0A_A^A]A\_
WAVAWH
A_A^_
@USVWATAVAWH
A_A^A\_^[]
@USVWATAVAWH
`A_A^A\_^[]
@USVWAVH
A^_^[]
\$ UVWATAUH
D3C4E#
{,umE3
A]A\_^]
@USVWAVAWH
A_A^_^[]
p WAVAWH
0A_A^_
t$ UWAVH
\$ UVWH
C0 tpH
\$ UVWAVAWH
@A_A^_^]
A0 tH
WATAVH
A^A\_
l$ VWAVH
WATAUAVAWH
A_A^A]A\_
f9+tWfD93tyf
t$ UWATAVAWH
D+t$@L
D+|$D3
A_A^A\_]
@SUVWH
@USVWATAUAVAWH
HA_A^A]A\_^[]
@SUVWAVAWH
T$ +D$ A
D$,+D$$
HA_A^_^][
WAVAWH
H;GxuI
WAVAWH
WAVAWH
A_A^_
WATAUAVAWH
A_A^A]A\_
UAVAWH
\$ UVWH
@USVWAVAWH
8A_A^_^[]
l$ VWAVH
UVWATAUAVAWH
fD9yPt
upD9|$h~iH
N,;L$h~
u0D9~,u*
A_A^A]A\_^]
@SUVWAVH
T$`f!K f
L$`;L$ht
A^_^][
\$ UVWATAUAVAWH
A_A^A]A\_^]
@USVWAVH
@A^_^[]
WAVAWH
uh9\$PtbHct$PH
9\$`t)
A_A^_
UVWATAUAVAWH
fA+V(3
PA_A^A]A\_^]
UVWATAUAVAWH
A_A^A]A\_^]
VWATAVAWH
fD9y0u
us9\$`tmHcl$`H
A_A^A\_^
t$ UWAVH
x ATAVAWH
0A_A^A\
t>fD97t8I
UVWAVAWH
H!t$ E3
D$89D$<@
A_A^_^]
L$ UWAVH
]8+](M
F,@tWH
l$ VWATH
\$ UVWATAUAVAWH
A_A^A]A\_^]
t$ WATAUAVAWH
0A_A^A]A\_
\$ UVWATAUAVAWH
A_A^A]A\_^]
\$0D+O|D
\$ UVWAVAWH
PA_A^_^]
\$ UVWATAUAVAWH
`A_A^A]A\_^]
l$ VAVAWH
L$0D9r$E
D$4D9=#6
WATAUAVAWH
0A_A^A]A\_
WATAUAVAWH
!|$(E3
0A_A^A]A\_
;C|t$D
UVWATAUAVAWH
PA_A^A]A\_^]
l$ VWAVH
L$H+L$@
\$ UVWATAUAVAWH
pA_A^A]A\_^]
WAVAWH
0A_A^_
@USVWATAUAVAWH
uvH9t$puoH
D$p95N
A_A^A]A\_^[]
UVWAVAWH
PA_A^_^]
l$ VWAVH
@USVWAVH
A^_^[]
\$ UVWATAUAVAW
A_A^A]A\_^]
UVWATAUAVAWH
@A_A^A]A\_^]
@USVWATAVAWH
0A_A^A\_^[]
@USVWATAUAVAWH
A_A^A]A\_^[]
@USVWAVAWH
A_A^_^[]
UVWATAUAVAWH
L$@+W(
L$@+W(
A_A^A]A\_^]
UVWATAUAVAWH
A_A^A]A\_^]
@USVWATAUAVAWH
L$LE9|$Xt3I
A_A^A]A\_^[]
H!|$0H!|$(
UVWATAUAVAWH
A_A^A]A\_^]
k VWAVH
WAVAWH
A_A^_
@USVWATAUAVAWH
D!|$ L
u%;\$0u
A_A^A]A\_^[]
UVWATAUAVAWH
w 9GP}
A_A^A]A\_^]
UVWATAUAVAWH
0A_A^A]A\_^]
l$ VWAVH
WATAUAVAWH
T$(L!l$ I
0A_A^A]A\_
@SUVWATAVAWH
PA_A^A\_^][
UATAUAVAWH
A_A^A]A\]
WAVAWH
A_A^_
WAVAWH
A_A^_
UWATAVAWH
A_A^A\_]
x ATAVAWH
0A_A^A\
@SUVWAVH
@A^_^][
\$ UVWATAUAVAWH
A_A^A]A\_^]
t$ WATAUAVAWH
f+L$PfA
A_A^A]A\_
\$ UVWATAUAVAWH
T$`I9O
t+D8@"u
D$df;_\A
D$P9_Pt
OX;L$P~
ID;wPu6A
_ D;\$|
A_A^A]A\_^]
tQf9*t?
WAVAWH
A_A^_
+_X+_T+
UVWATAUAVAWH
0A_A^A]A\_^]
@SUVWAVH
A^_^][
WAVAWH
@A_A^_
WAVAWH
@A_A^_
l$ VWAVH
WAVAWH
@A_A^_
@USVWATAUAVAWH
A_A^A]A\_^[]
xPH9t
x ATAVAWH
A_A^A\
BH;^0t3H
WATAUAVAWH
0A_A^A]A\_
@SUVWATAVAWH
@A_A^A\_^][
@USVWAVAWH
D$L+D$H
A_A^_^[]
WAVAWH
0A_A^_
UATAUAVAWH
A_A^A]A\]
\$ UVWATAUAVAWH
9|$T}i3
A_A^A]A\_^]
UVWATAUAVAWH
D$`A9^0u
D+T$`D
A_A^A]A\_^]
UVWATAUAVAWH
A_A^A]A\_^]
UVWATAUAVAWH
`A_A^A]A\_^]
x AUAVAWH
C(D9~$
A_A^A]
UVWATAUAVAWH
`A_A^A]A\_^]
UVWATAUAVAWH
pA_A^A]A\_^]
WAVAWH
A_A^_
t$ WATAUAVAWH
A_A^A]A\_
l$ VWATAVAWH
A_A^A\_^
UVWATAUAVAWH
A_A^A]A\_^]
UVWAVAWH
0A_A^_^]
UVWATAUAVAWH
wXD+@H
`A_A^A]A\_^]
UVWAVAWH
tJE98|E
0A_A^_^]
s WAVAWH
\$ UVWH
l$ VWAVH
x ATAVAWH
G83A8%
9D$P}QA
A_A^A\
UVWATAUAVAWH
9}@t/H
`A_A^A]A\_^]
t$ UWAVH
WAVAWH
L$`fA#
@A_A^_
UWAUAVAWH
;GXt;H
A_A^A]_]
@USVWATAUAVAWH
A+FXA9^X
8\$Qt;
tT9L$TtE
M@A9^Xu
ED$\9\$`
A_A^A]A\_^[]
UVWAVAWH
@A_A^_^]
UVWAVAWH
@A_A^_^]
UWATAVAWH
t3D;u0u-
@A_A^A\_]
UVWAVAWH
@A_A^_^]
UVWATAUAVAWH
PA_A^A]A\_^]
` UAVAWH
0A_A^]
WATAUAVAWH
A_A^A]A\_
Ab u*H
UVWATAUAVAWH
@A_A^A]A\_^]
UVWATAUAVAWH
A_A^A]A\_^]
x UATAUAVAWH
A_A^A]A\]
9\$xt1
L$pfA#
&9\$`t&
UVWAVAWH
|?9T$p~,
A_A^_^]
USVWATAUAVAWH
A_A^A]A\_^[]
|$ UATAUAVAWH
t<D9uPt6D
A_A^A]A\]
UVWATAUAVAWH
KbD;k(u
D;cXt%
@A_A^A]A\_^]
USVWATAUAVAWH
+GX9_X
d$`D;g(}|D
l$HD9o(}mH
A_A^A]A\_^[]
UVWATAUAVAWH
NHD+n(A
F8D+~(H
A_A^A]A\_^]
UVWAVAWH
`A_A^_^]
WATAUAVAWH
0A_A^A]A\_
l$ VWATAUAVH
A^A]A\_^
x ATAVAWH
Cb@t)A
A_A^A\
SUVWATAUAVAWH
D+t$$H
HA_A^A]A\_^][
t$ WATAUAVAWH
A_A^A]A\_
VWATAVAWH
A_A^A\_^
Ge t H
UVWATAUAVAWH
`A_A^A]A\_^]
UVWATAUAVAWH
l$@D;l$Dt
D9sP~0
Ce t!L
D$89|$P|
D8se}rH
D9k }B
A_A^A]A\_^]
WATAUAVAWH
A_A^A]A\_
|$ UAVAWH
l$ VWATAVAWH
t$x;D$pt
A_A^A\_^
\$ UVWATAUAVAWH
uED8odt?H
+\$@+\$D
A_A^A]A\_^]
@USVWATAUAVAWH
HA_A^A]A\_^[]
@SUVWAVH
pA^_^][
x ATAVAWH
!|$0E3
@A_A^A\
UVWATAUAVAWH
A_A^A]A\_^]
VWATAVAWH
A_A^A\_^
t$ WATAUAVAWH
A_A^A]A\_
Antivirus Signature
Bkav W32.AIDetectMalware
Lionic Clean
tehtris Clean
MicroWorld-eScan Clean
FireEye Generic.mg.a6f75b1e5f8b4265
CAT-QuickHeal Clean
Skyhigh BehavesLike.Win32.Generic.th
McAfee Artemis!A6F75B1E5F8B
Malwarebytes Clean
Zillya Clean
Sangfor Clean
K7AntiVirus Clean
BitDefender Clean
K7GW Clean
Cybereason malicious.e71ef0
Baidu Clean
VirIT Clean
Symantec ML.Attribute.HighConfidence
Elastic malicious (high confidence)
ESET-NOD32 Clean
APEX Malicious
Paloalto Clean
ClamAV Clean
Kaspersky UDS:DangerousObject.Multi.Generic
Alibaba Clean
NANO-Antivirus Clean
ViRobot Clean
Rising Trojan.Generic@AI.89 (RDML:r/KcSBnkbtowlBEJEBLtZA)
Sophos Mal/Generic-S
F-Secure Trojan.TR/Crypt.XPACK.Gen5
DrWeb Clean
VIPRE Clean
TrendMicro Trojan.Win32.AMADEY.YXDJQZ
Trapmine Clean
CMC Clean
Emsisoft Clean
SentinelOne Static AI - Malicious PE
GData Clean
Jiangmin Clean
Webroot Clean
Google Clean
Avira TR/Crypt.XPACK.Gen5
Varist Clean
Antiy-AVL Clean
Kingsoft malware.kb.a.1000
Gridinsoft Clean
Xcitium Clean
Arcabit Clean
SUPERAntiSpyware Clean
ZoneAlarm UDS:DangerousObject.Multi.Generic
Microsoft Trojan:Win32/Znyonm
Cynet Malicious (score: 100)
AhnLab-V3 Clean
Acronis Clean
VBA32 Clean
ALYac Clean
TACHYON Clean
DeepInstinct MALICIOUS
Cylance unsafe
Panda Trj/Chgt.AD
Zoner Clean
TrendMicro-HouseCall Trojan.Win32.AMADEY.YXDJQZ
Tencent Clean
Yandex Clean
Ikarus Clean
MaxSecure Clean
Fortinet Clean
BitDefenderTheta Gen:NN.ZexaF.36738.AH0@aaOZjJfi
AVG Clean
Avast Clean
CrowdStrike win/malicious_confidence_100% (D)
No IRMA results available.