Static | ZeroBOX

PE Compile Time

2023-05-26 04:03:04

PDB Path

C:\dexumatacofix64-wecuxo5_gehajabi\42\tawo-zud.pdb

PE Imphash

7ac24a9e85698f19a8d2637811e8f9f4

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00001000 0x00060912 0x00060a00 7.85388730476
.rdata 0x00062000 0x0000352e 0x00003600 5.22200582237
.data 0x00066000 0x004207b8 0x00001800 3.46172600202
.rsrc 0x00487000 0x00015cb0 0x00015e00 4.15794927978

Resources

Name Offset Size Language Sub-language File type
RT_CURSOR 0x0049a7f8 0x00000568 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_CURSOR 0x0049a7f8 0x00000568 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_CURSOR 0x0049a7f8 0x00000568 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_CURSOR 0x0049a7f8 0x00000568 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_CURSOR 0x0049a7f8 0x00000568 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_CURSOR 0x0049a7f8 0x00000568 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00496e40 0x00000468 LANG_PUNJABI SUBLANG_DEFAULT GLS_BINARY_LSB_FIRST
RT_ICON 0x00496e40 0x00000468 LANG_PUNJABI SUBLANG_DEFAULT GLS_BINARY_LSB_FIRST
RT_ICON 0x00496e40 0x00000468 LANG_PUNJABI SUBLANG_DEFAULT GLS_BINARY_LSB_FIRST
RT_ICON 0x00496e40 0x00000468 LANG_PUNJABI SUBLANG_DEFAULT GLS_BINARY_LSB_FIRST
RT_ICON 0x00496e40 0x00000468 LANG_PUNJABI SUBLANG_DEFAULT GLS_BINARY_LSB_FIRST
RT_ICON 0x00496e40 0x00000468 LANG_PUNJABI SUBLANG_DEFAULT GLS_BINARY_LSB_FIRST
RT_ICON 0x00496e40 0x00000468 LANG_PUNJABI SUBLANG_DEFAULT GLS_BINARY_LSB_FIRST
RT_ICON 0x00496e40 0x00000468 LANG_PUNJABI SUBLANG_DEFAULT GLS_BINARY_LSB_FIRST
RT_ICON 0x00496e40 0x00000468 LANG_PUNJABI SUBLANG_DEFAULT GLS_BINARY_LSB_FIRST
RT_ICON 0x00496e40 0x00000468 LANG_PUNJABI SUBLANG_DEFAULT GLS_BINARY_LSB_FIRST
RT_ICON 0x00496e40 0x00000468 LANG_PUNJABI SUBLANG_DEFAULT GLS_BINARY_LSB_FIRST
RT_ICON 0x00496e40 0x00000468 LANG_PUNJABI SUBLANG_DEFAULT GLS_BINARY_LSB_FIRST
RT_ICON 0x00496e40 0x00000468 LANG_PUNJABI SUBLANG_DEFAULT GLS_BINARY_LSB_FIRST
RT_ICON 0x00496e40 0x00000468 LANG_PUNJABI SUBLANG_DEFAULT GLS_BINARY_LSB_FIRST
RT_ICON 0x00496e40 0x00000468 LANG_PUNJABI SUBLANG_DEFAULT GLS_BINARY_LSB_FIRST
RT_ICON 0x00496e40 0x00000468 LANG_PUNJABI SUBLANG_DEFAULT GLS_BINARY_LSB_FIRST
RT_ICON 0x00496e40 0x00000468 LANG_PUNJABI SUBLANG_DEFAULT GLS_BINARY_LSB_FIRST
RT_ICON 0x00496e40 0x00000468 LANG_PUNJABI SUBLANG_DEFAULT GLS_BINARY_LSB_FIRST
RT_STRING 0x0049c770 0x0000053e LANG_PUNJABI SUBLANG_DEFAULT data
RT_STRING 0x0049c770 0x0000053e LANG_PUNJABI SUBLANG_DEFAULT data
RT_STRING 0x0049c770 0x0000053e LANG_PUNJABI SUBLANG_DEFAULT data
RT_STRING 0x0049c770 0x0000053e LANG_PUNJABI SUBLANG_DEFAULT data
RT_STRING 0x0049c770 0x0000053e LANG_PUNJABI SUBLANG_DEFAULT data
RT_STRING 0x0049c770 0x0000053e LANG_PUNJABI SUBLANG_DEFAULT data
RT_ACCELERATOR 0x00497360 0x00000030 LANG_PUNJABI SUBLANG_DEFAULT data
RT_ACCELERATOR 0x00497360 0x00000030 LANG_PUNJABI SUBLANG_DEFAULT data
RT_GROUP_CURSOR 0x0049ad60 0x00000030 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_GROUP_CURSOR 0x0049ad60 0x00000030 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x00490a80 0x00000068 LANG_PUNJABI SUBLANG_DEFAULT data
RT_GROUP_ICON 0x00490a80 0x00000068 LANG_PUNJABI SUBLANG_DEFAULT data
RT_GROUP_ICON 0x00490a80 0x00000068 LANG_PUNJABI SUBLANG_DEFAULT data
RT_VERSION 0x0049ad90 0x0000019c LANG_NEUTRAL SUBLANG_NEUTRAL data
None 0x004973b0 0x0000000a LANG_PUNJABI SUBLANG_DEFAULT data
None 0x004973b0 0x0000000a LANG_PUNJABI SUBLANG_DEFAULT data
None 0x004973b0 0x0000000a LANG_PUNJABI SUBLANG_DEFAULT data

Imports

Library KERNEL32.dll:
0x462008 EnumCalendarInfoA
0x46200c GlobalAddAtomA
0x462014 OpenJobObjectA
0x462018 GetCurrentProcess
0x46201c GetModuleHandleW
0x462020 GetCommConfig
0x462024 GetProcessHeap
0x46202c SizeofResource
0x462034 CreateFileW
0x462038 GetOverlappedResult
0x46203c ExitThread
0x462040 GetVolumePathNameA
0x462044 FlushFileBuffers
0x462048 InterlockedExchange
0x46204c GetLastError
0x462050 SetLastError
0x462054 GetProcAddress
0x462058 VirtualAlloc
0x46205c GetComputerNameA
0x462060 LoadLibraryA
0x462064 OpenMutexA
0x462068 LocalAlloc
0x46206c CreateHardLinkW
0x462078 GlobalFindAtomW
0x46207c VirtualProtect
0x462080 _lopen
0x462084 GetVersionExA
0x462088 FindAtomW
0x462090 OpenFileMappingA
0x462094 TlsFree
0x462098 LCMapStringW
0x46209c lstrcpyA
0x4620a0 BackupWrite
0x4620a4 GetFullPathNameW
0x4620ac Sleep
0x4620c8 GetStartupInfoW
0x4620cc RaiseException
0x4620d0 RtlUnwind
0x4620d4 HeapFree
0x4620d8 ExitProcess
0x4620dc WriteFile
0x4620e0 GetStdHandle
0x4620e4 GetModuleFileNameA
0x4620e8 TerminateProcess
0x4620ec IsDebuggerPresent
0x4620f0 HeapAlloc
0x4620f4 GetModuleFileNameW
0x462100 GetCommandLineW
0x462104 SetHandleCount
0x462108 GetFileType
0x46210c GetStartupInfoA
0x462110 TlsGetValue
0x462114 TlsAlloc
0x462118 TlsSetValue
0x46211c GetCurrentThreadId
0x462120 HeapCreate
0x462124 VirtualFree
0x46212c GetTickCount
0x462130 GetCurrentProcessId
0x462138 HeapSize
0x46213c HeapReAlloc
0x462140 GetCPInfo
0x462144 GetACP
0x462148 GetOEMCP
0x46214c IsValidCodePage
0x462150 GetLocaleInfoA
0x462154 GetStringTypeA
0x462158 MultiByteToWideChar
0x46215c GetStringTypeW
0x462164 GetModuleHandleA
0x462168 LCMapStringA
0x46216c WideCharToMultiByte
Library USER32.dll:
0x462174 SetClipboardViewer
Library GDI32.dll:
0x462000 GetDeviceGammaRamp

!This program cannot be run in DOS mode.
`.rdata
@.data
0WWWWW
0WWWWW
QQSVWd
to=8hF
0SSSSS
>=Yt1j
QQSVWh
j@j ^V
Y;=hgF
j,hHIF
HtHu4j
s[S;7|G;w
tR99u2
v$;5\hF
0A@@Ju
0SSSSS
PPPPPPPP
0SSSSS
FVhL4F
PPPPPPPP
_VVVVV
^WWWWW
URPQQh8
0WWWWW
AAFFf;
;t$,v-
UQPXY]Y[
GWhL4F
t"SS9]
t+WWVPV
0SSSSS
_VVVVV
<+t(<-t$:
+t HHt
u;hh<F
u,h`<F
jAV1PG
pI]O C-
jAV1PG
*\2'8p
jAV1PG
jAV1PG
u9Qz:Zi
L`H;xO2
z!|F&G
9"d"\!
Iq]T45
Ybd7Y&d
drZykp
wD2xy#
5T>,'*
GwT>nm
mQ45~i
,:w>Y|
2yQ39z
x;<7sds
JcJ1{/
D2TTN`
X&&"+h
G}N$N
r6g6<<
W<.HwT
y_r hZ
.\JXy"
l00vWR
C>%u=H
O,<jYHx
"+(8o_
dU3k4(
Bo>hiSa
Du_,EpMDO&
y:YHHS
Fct!<*
"}#f*l
#lC+#4
=vU)1p
0xXWo4
yA^PYy
~@Lz+W
/@c'wO
a7X1Rjt+{
Ie66=e
I,@QmQ
@FwcGO
fR8=jc
swr| !K
4vIHg%
?P(g-6p
D-sWwJ
)H>.2R*
xqT*6_
mx3Gjx
I@/&XD
x?&^6o
IuQ@]Q
rkG,}T
(~\ot*
Y2z;S"
\f?nf%
Fco!YFy
cZcnl6
7XBfGG
{5j;0N
4K5>,ll
U]<F<ob
z{2^O=Di
yWul._
q0,k3U
wxU6t`
tnkpNW
x=<>m`A
/5:vS4*
A2XKiT
X1[vnk;
0|I0z~
8iy?{}
h>5/{6
hnndA+
Zdq?b:
tsZ(0tv]
}a2h=2f
h?VV4H
Vvvq|V?
"I+--|B
rD0PdYSx
)HVGJ/
LDJT8j a
V6Jz8*P
tNZ>zF
rlq0#/-
d@9NQ0
%vnuZU
V$PdrVcA
)8NCPr
nXKN|A)
o6b!6v
&RV*[Y2:2
kr7i9l
bCkY3A
DL?~#b
\2uk]
*4xjy=
3fp+"}_
~c%yGXy6ckm
q(^n!{
3/+[UY
"bVgs@
>o"6vc6
z8O2_v
i}mnBG
^%0F-d4
l)l^c
mV{D]
vn$=B
mnJg'F
$Qg*_?=
<wD5,^
X3GI1N
}QG7,u
4$JP|V
$3crlh
kcyCrD
w>=]]P
*Uhf}(B
,Xr$(F
@:iJc4
S]|iQV
KbV'J-
]rTfePz
&&+V&d
^XxCJ$
jUu%St
yT7ryX\Ku
,[@/]jrh
5G[tc<
"^0z ;
a[]<8k
vn*"tF
&'_Ov4
w:-A^lT
*gU3Fs
V|*7=O
.3:"x
'#H#|-4
x*\I<pk
EN(u;SA]{7
}*p<U*
\YG]oBn
!pDEOO
^`roMd
?[dun
,B5oCB\
x4*$+2
QG]|3o
:q-r&k
eve5F/
_Y.Zcg
{G2//%
6$_|Jwf
mzZ~4Z7
K.)>m]
mimSa>
o|BA;A
O3@Vq$
.x*vE5T3
B>}Jl[
VM{<3C
S($PC'G-
@&Br}q
=SlM-Z+
P-UQHf
q9mLN`+*L=
6_KotW
9Z`>(<
@Y{`to
e*&zy:^
iC`n(yt
BB7yBs
7yk'5sKW
xL*BHm
EFH{[m'Fx
L\-MW}
FQg&=v
yW.Z_Ny
DERH=_
IlU74
`R`<%;
C"+}a
nNhamC-
DoN!)
!>L80r
6f|T>`SK
]:Abj~
e.=pB
t|LC>a
!a89G)
s]U`O_E
\&6*5L
Hc= k{
Uy+C^r
,@{/]-
x&XF.(
5&fbSF
*mfu42KaD
h@-RUl
'/\CUb(
7D=FOPfF
9ThtY>
'|c9,O
;oAo#&57
%hi|/e
>yTlRU
b*EAka2
\?%0eK
k$:$+-
u}lP9&
e1p$+T$
Io9;/`
;ucHe
}x!![[
;ruA[O]8eF
Q4}:q6
p\$ynN
t[`;j3
~jBl!mv
J&'6)[[
Q;N]-D
BuK&%[V2f
h7W{<n.
1i5v;2
!AZAykk
&]raXD
jeDWJ$%
WX+"5XS
o.`WWC
R7(|0i
_}Qut-
H7c/)0
5)GY[&
jcZCl>
Njld/d
`l>*vk
rr9;'&
SpaR:kq
"~l)(8
w0IT0}"yK
l%!Cib
0LN=+g
J%!9kF#
SU}?&2
~I}g]U
)(S7A'fVc{
~+G\EY
yOP-s }
nk=c2N
$\9!~%
L:H59&
3xaOf4
{(-#FO
%QNl|d"
T%9;!%
DoT@`c~
JP@vNq
h<xL{q
x|+Cxs
/|0aon
v.IB<uA^
(](/*-|
aV0QQpu`
rUnIMk
m1d@C
wyxpWd1z
/TT>)
x;ALlw
moHh~S
xi!a9rS
*U$5?#h
(/KZW1c
{0\5yq
ZLhmx}8t
RJI61y
vw\[=u
#<u[q=
f+H`)d4
@#A01;.
(6Z8p-=f
a pW q
.IjDI%
24)'Fd
P&o,rwk
:H'g|*
@7W/D1\
}h$kpE
^n2&y@
qYucDD
up`f{
D33dvN
V#!frX
G3Ws=}x
eO:tc,
6*v6i*
'[EvxL
iXl0s~'
ewi%#p
I`,yp'+
7/hmX:
[zduLPt
S[7sP$
|9@%B@8G
4dPrZ2
'}>Ok]b?.
# r#&R
g+gp.fR
"8uKM\
YJ.UfyvH
eF4H1X
qWZxgg
fVhOgZM
R3DIQy
hbq!jv
l_tJ3:h
[k:*zP
'Sp('.x
c.]GS\M
xeobO0+
H6bz%sy
#3jG!3
Rroj"'
H2y#w1
B>VEbv
#KJcB%
_cPJ{@p
e%UT?@w
RQ;b#'
GF.y?Q
,]-}9w%Uh
-Sw^|=
nRN&qA
8PU9d^
k}1fKO
e#Kt!6
$J7X]L
u\^<qB
ytr'$:
(%Cx0{~
D"j5i\cD><:1
h5)C*B
:Tc0<R
TrE sB
R>.|+u
+o_xhv
I,R2>)
C,MMgy
a#x0A
HZ^m-~[
e{A3Z`
J;s;Gk
c,|2s
Lo"uO*
=Czp38X
4#xZ+
5\n~](
LbUEU_
q%E0)HP
QN{yL1
r'O5Y+>
:P\D`t
t}/maG
.).ZD:
yc2Qg.
1bNIS-
]G#scO
wy nBh
PGk&$lc-
%vKb_]
x%BW?c<
vt](m>
#t`-.*
#Dqv4n
.k><N9
B%<THY
8^R;et)u
S5q5{_
qmgT'O
{27?mk
Ed1{$S
b*."Vs
! LZ5O1
"r6kHn
LvPg[-v
n 4xnI]
!@]D8#
6a.=`Z
O2O3/2
0^i@wv6
j<jXGM
g:FUdq
d`H-8$
/H+;RY
ko^^~b
R2CrcX
BEe#B3
uDMDku
{y|3:%
CiFC?
'~3u!J
?"<LXQ=
pSb64F
;|BDBZ
`%HNyS~
a6cHA
=K_T)#3Xt
V3[!3e
;+y+T>>
r%xrZX
uq&gop
B@dTR
I5J kR
y7m<D&
0_.HYZ
}Kyp<i
tkVT&
EQk%;}
P7skxV
*yP=c|,6K
^C0ms-9
Y S_%,
-oa"s'%*
_{]2DA
`^z[-?
SbRMEf
a%)Fa}
Y!@o`z_
@y4q'{i
y7 <+|
~L|9)6I:
!,{y'!-
*Jyt=>
?/1L%w
bSylt/
[%A+3#
tPr6x|
fh!:@O
% `7R-N
X2t7?{
ZxY]UM
ecuSJS!`Y
sPGW}Q6P
'n?x13
13X_D~
+OG\Y~
&^"v[0
qK#9({
&`gj(eN
1u=aWc1
LJ{.H`
AW`i/Z
rW%N-D
}V>WNRk
96p}bdw
7h|quke
`'A|6
tuzsX]
9T8GbV
c_=h/
ul},gY
LU6,F;
gjRv4'
z}dD}8
i`O+`wN
21<;a;du?
\m"wB7
,BR"V
/:QR9!b
m6s`[W
cNH47b
2-rpU@
Al5o*?
*hRTD( 6`
>Y-cCf3%a
/?^WTR
.F>.lMc
bE[^%+3
Ed5U+7
+~w;u(
_SDF>bt
Cgn0p[%
<6Iu^E
sL&L?n
z`oZ^$|
(?e"HR
|<g|&d
8_0ruk
GIEiFU{
2)`)~p}
nmR'm0
>PY>D]
)Hpw%N
N|I:VD
CN4u1?eb
s"fPQ`
,qC|q5
!q-vFC
\{.F4u<
A|ctNi
O)r>6H
g'.#^I
m8O:V a
K}M\Q
St,SCvK?
`:+[j+
'gMZ0o
'zrb<4V
f$;`3r
0fL{kMN
dl,z#%
HY=Ag7
>`LT99f
1BJ;.}
+H`9|m
1vv+q+
aT@#S"
T}kII}
PFLv:M
=BULTD
g&.b%$
WPjWyP7
0r\Vd;q
2~4I8#
Bfy~Feri
P>U@*.
ew<t<^
$pN O=
k{W*lX
l-87yoj
>~"kr/
--f1%*&
&Ah|$I
:yJ[,,a/Z
93Z&S"
YX~pvf}
nWDCb p
lT=13t
&lki~wN
JczOW*
7:2>T
flybt@
s6C*W<
uDmpEQ
<#+/Uj
,\s1,`
}t(RvI
cDm0ZQf}X
2;fZ9Z
2i)WOl$
?btT2[
yb7Bu
bad allocation
string too long
invalid string position
Unknown exception
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
CorExitProcess
runtime error
TLOSS error
SING error
DOMAIN error
An application has made an attempt to load the C runtime library incorrectly.
Please contact the application's support team for more information.
- Attempt to use MSIL code from this assembly during native code initialization
This indicates a bug in your application. It is most likely the result of calling an MSIL-compiled (/clr) function from a native constructor or from DllMain.
- not enough space for locale information
- Attempt to initialize the CRT more than once.
This indicates a bug in your application.
- CRT not initialized
- unable to initialize heap
- not enough space for lowio initialization
- not enough space for stdio initialization
- pure virtual function call
- not enough space for _onexit/atexit table
- unable to open console device
- unexpected heap error
- unexpected multithread lock error
- not enough space for thread data
This application has requested the Runtime to terminate it in an unusual way.
Please contact the application's support team for more information.
- not enough space for environment
- not enough space for arguments
- floating point support not loaded
Microsoft Visual C++ Runtime Library
<program name unknown>
Runtime Error!
Program:
_nextafter
_hypot
EncodePointer
DecodePointer
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
bad exception
 !"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~
HH:mm:ss
dddd, MMMM dd, yyyy
MM/dd/yy
December
November
October
September
August
February
January
Saturday
Friday
Thursday
Wednesday
Tuesday
Monday
Sunday
GetProcessWindowStation
GetUserObjectInformationA
GetLastActivePopup
GetActiveWindow
MessageBoxA
USER32.DLL
GAIsProcessorFeaturePresent
KERNEL32
Complete Object Locator'
Class Hierarchy Descriptor'
Base Class Array'
Base Class Descriptor at (
Type Descriptor'
`local static thread guard'
`managed vector copy constructor iterator'
`vector vbase copy constructor iterator'
`vector copy constructor iterator'
`dynamic atexit destructor for '
`dynamic initializer for '
`eh vector vbase copy constructor iterator'
`eh vector copy constructor iterator'
`managed vector destructor iterator'
`managed vector constructor iterator'
`placement delete[] closure'
`placement delete closure'
`omni callsig'
delete[]
new[]
`local vftable constructor closure'
`local vftable'
`udt returning'
`copy constructor closure'
`eh vector vbase constructor iterator'
`eh vector destructor iterator'
`eh vector constructor iterator'
`virtual displacement map'
`vector vbase constructor iterator'
`vector destructor iterator'
`vector constructor iterator'
`scalar deleting destructor'
`default constructor closure'
`vector deleting destructor'
`vbase destructor'
`string'
`local static guard'
`typeof'
`vcall'
`vbtable'
`vftable'
operator
delete
__unaligned
__restrict
__ptr64
__clrcall
__fastcall
__thiscall
__stdcall
__pascal
__cdecl
__based(
SunMonTueWedThuFriSat
JanFebMarAprMayJunJulAugSepOctNovDec
1#QNAN
1#SNAN
bad allocation
niposubulibetuveyifozebetawujem
vekowitakorumac
povenisorujuducogarulozuye
kulajowutevigax
kuzekaziguzedabixuve
C:\dexumatacofix64-wecuxo5_gehajabi\42\tawo-zud.pdb
GetFullPathNameW
GetComputerNameA
EnumCalendarInfoA
GlobalAddAtomA
InterlockedIncrement
OpenJobObjectA
GetCurrentProcess
GetModuleHandleW
GetCommConfig
GetProcessHeap
GetWindowsDirectoryA
SizeofResource
EnumResourceLanguagesA
CreateFileW
GetOverlappedResult
ExitThread
GetVolumePathNameA
FlushFileBuffers
InterlockedExchange
GetLastError
SetLastError
GetProcAddress
VirtualAlloc
BackupWrite
LoadLibraryA
OpenMutexA
LocalAlloc
CreateHardLinkW
FindFirstVolumeMountPointW
BeginUpdateResourceA
GlobalFindAtomW
VirtualProtect
_lopen
GetVersionExA
FindAtomW
GetFileInformationByHandle
OpenFileMappingA
TlsFree
LCMapStringW
lstrcpyA
KERNEL32.dll
SetClipboardViewer
USER32.dll
GetDeviceGammaRamp
GDI32.dll
InterlockedDecrement
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
RaiseException
RtlUnwind
HeapFree
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
TerminateProcess
IsDebuggerPresent
HeapAlloc
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
TlsGetValue
TlsAlloc
TlsSetValue
GetCurrentThreadId
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapSize
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetLocaleInfoA
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
InitializeCriticalSectionAndSpinCount
GetModuleHandleA
LCMapStringA
WideCharToMultiByte
.?AVlogic_error@std@@
.?AVlength_error@std@@
.?AVout_of_range@std@@
.?AVfacet@locale@std@@
.?AV_Locimp@locale@std@@
Copyright (c) 1992-2004 by P.J. Plauger, licensed by Dinkumware, Ltd. ALL RIGHTS RESERVED.
.?AVtype_info@@
.?AVbad_exception@std@@
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
.?AV?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@
.?AV?$basic_streambuf@DU?$char_traits@D@std@@@std@@
.?AVexception@std@@
.?AVbad_alloc@std@@
6666666666666666666666666666666666666666666666666666666666666666666666666666666666666666
PD66666666666666666666
666666666666666666
=6666666666666666q2
666666666666666
66666666666666
666666666666666
Yn=666666666666666
66666666666)
6666666666
H/6666666666T
666666666666
666666666666
_6666666666666
MT666666666666TV 666
666666666666TV66666
666666666666666666
666666666666666666)
666666666666666666
666666666666666666
466666666666666666666666666666666666666
|{~|{~~
z{||{{~
}}{~~|
{|~~}|
{~}|{}
z}~}}{
z}|}~z
{}|{}{z
z~}{}|
~}{{}|
|}~{zz
~|}{}||}
}~{|}|
{|}~}~
{{~{~{
SSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSS
PSmWH^K
2SSSSSSSSSSSSSSSSXw
SSSSSSSSSSSSSSSSjw
SSSSSSSSSSSSSSSS)Xeee
)SSSSSSSSSSSSSSSS
SSSSSSSSSSSSSSSS
SSSSSSSSSSSSSSSS
SSSSSSSSSSSSSSSS}
SSSSSSSSSSSSSSSS
SSSSSSSSSSSSSSSS:jee]
SSSSSSSSSSSSSSSS:P
SSSSSSSSSSSSSSSS
:SSSSSSSSSSSSSSSSP
:SSSSSSSSSSSSSSSS
SSSSSSSSSSSSSSSSj
SSSSSSSSSSSSSSSSP
SSSSSSSSSSSSSSSS
SSSSSSSSSSSSSSSSL
PSSSSSSSSSSSSSSSSjj
SSSSSSSSSSSSSSSSjr
wSSSSSSSSSSSSSSSSrr
SSSSSSSSSSSSSSS
SSSSSSSSSSSSSSS
SSSSSSSSSSSSSSS
PSSSSSSSSSSSSSSS
SSSSSSSSSSSSSSS
SSSSSSSSSSSSSSS
SSSSSSSSSSSSSSS
SSSSSSSSSSSSSSS
&&bMgE&
SSSSSSSSSSSSSSS
SSSSSSSSSSSSS#
SSSSSSSSSSSS
RRqR3g
SSSSSSSSSSSSj
RRUPkSSSSSSSSSSSS_
kSSSSSSSSSSSS:\e
#SSSSSSSSSSSS
#SSSSSSSSSSSS
o^\M>\_M
#SSSSSSSSSSSS
_H__\M
FSSSSSSSSSSSS&]
;\^\mg
SSSSSSSSSSSS
&rSSSSSSSSSSSSS
FFFFFGG#####kk
GGGGPSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSS
J!]JJG]
~~~~~~
________________________________________
gggggggggggggggggggggggggggggggggggggg
ggggg{g{g{{{{{{{{{{{{{{{{{{{{{{{{{{{{g
g{H{H{HHH{HHHHHHHH
{{H{H{H{HHHH{HHHHHH
{{H{H{H{H{HHHHHHHHHHH
g{H{H{H{HH{H{HH{HHHHHH
{{{H{H{H{HHHH{HHHHHHHHH
g{{{{{H{H{{H{HHH{HHHHHHH
g{H{H{{H{H{HHH{HHHHHHHHHH
g{{{{H{{H{H{H{H{H{H{HHHHHHHH
g{{{H{{H{{H{
HHHHHHHHHH
g{{{{{{{H{{HFxxx
c?H{HHHHHH
g{{{{{H{{H{{
cHHHHHHH
gg{{{{{{{{H{
(nxcHHHHHHH
gg{{{{{{H{{{H
kkkk-p
ggg{{{{{{{{{{
ggggg{{{{{{H{cx
HHHHHH
gggg{g{{{{{{{?xI
ggggg{g{{{{{{{
gggggg{g{{{{{{
HHHHHHg
ggggggg{g{{{{{{
HHHHH<
gggggggggg{{{{{{
ggggggggggg{{{{{{
ggggggggg{gg{{{{{{
gggggggggggggg{{{{{
gggggggggggg{{g{g{{{
8888888888888888888888888
..............
......
.......*
......U
....7w`
.....Cw
...7w`
\`mm`h
PPPPPPPPPPPPPPPPPP
zzzzzzzzzzP
zzzzzz
RRppppppppppppRRRp
1pRRlllllllll1}
RRlllllllllll
1RRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRR
~~~~~~
iiiiiiii
iiiiiiii
iiiiii
iiiiii
iiiiiiiii
iiiiiiiiii
iiiiiiii
iiiiiii
iiiiiiiii

Fjjjjjjj
mscoree.dll
KERNEL32.DLL
((((( H
h(((( H
H
pofavuwuporiketaluduyisekena koxikerewacuzihasexutatafu
vasokumacedubato fizagoralukodezacujenavacesal jowecebayotomuhopabupe tofumapepapa kun
mtohazedokuho
kernel32.dll
kernel32.dll
baxuconuzusihohukumid
uxivelamari gewabahohutihogibopegudi magihenanuhasov xun
erixiguxokudepe vih nukaxakutepisoxekuposu nujuf
/ P6pL
,/KPip
/-P?pR
/ P6pL
,/KPip
/-P?pR
/ P6pL
,/KPip
/-P?pR
/ P6pL
,/KPip
/-P?pR
/ P6pL
,/KPip
/-P?pR
/ P6pL
,/KPip
/-P?pR
VS_VERSION_INFO
StringFileInfo
095250F3
OriginalFilename
Lariants
ProductsVersion
21.59.2.52
ProdeuctionVersion
25.50.25.70
VarFileInfo
Translation
hJoza tobomegacavava sigekiwi tutugasozi huvadoguxejojaz yijig soyucosoneto lenufubodug rizolopipuxab nub
fMuhobifakehumuy yasepisebeh wazumopugep zig musomarif wicalexo sabafecewol jupuc rofumosezefucu yivare"Zixamuwicuju kesusinu zemecufegidi7Fejirubogexono kayaporujaza cidajavacuv pizuciyebedexuc
Rivem cofimebagupe
Rahonotiziwu faw Xufogalofururij xexucebegov wigo
pYipesepo donurujuyi wewutedem xopojakap wayi rudipowi lanoyexigalihu ranemudayitoko xorututiricofit rihugukaluto
Mivopopo?Bayu ziy fanojefubec mopiyo visez rawavalo gametoledosig nazisa0Per dutuvigodujo wefimehaxematoy payacinafamicovrZajop sifotunepusiban gesaxocelericex pumitohele rugij hexetuhura webohaxineme kubi heyosuxipiwusek dubopakogapuza
)Mokuxibarema nizinenorore bagatuwunibulol
Wed yux
Coyemedoza
=Wotipikug ramojesup yebiyipuyunewad xesog bajab nalesodiyuwif^Hujalebazosunen mizecofa xukenuti tenabilet kotet nuhuribozud bubo fejenuluzaw rokekozizizuzun2Jogenosijov lofinorakeroxo duganicixonam giwam wimEWevugopipivohi sajihu sefal nuhekekobaha remucu xev nohuhuxuvi kirudo
ZRosudipiwe gozezuxe mugivaho mudadarasuyad sunuyileco guwowapohoxe loto feha labufesa tavuyTamuxokuteret zixelevekogahox pevabaduj hosusotetaruto yetuwizoj cajohokaporodet segem xafodopozo sebigimov metusoyabuxolrCuyijop sapabunurayihi yilepakodab wobeloxexizuj nehilalisapone kilalazecicamij vadepataboy pedupal xoxinasanohohu;Wah keyopove zopumujejak fekirekilukup wegerejomut lewafomedMatovujope hin dagiximehovak bekewepac juvehagebu tixogomilel vamecehatomubiz jagivopopifi yew zulux)Fuw toselob wuz vizomufifer putaxacelinij
Medifa rifimeyodoreceb4Xeyusezowiyizo mulok mixeyijoxoferub dovonafoyeyuzic<Fabamuc bigamuhera zol cesafupabod xinehuvirug dovo wuzozuxaiLuvudokixula zegu mitetegamoherak gasasaw waducex bapi hecukiwonacih rimowij mijexoniziveyi nagojasomotafMMapib xojakawayosal dozokapipuc kuj misohagudube gogunohizefipi nifu zoxawuzu;Sejedasetidit mocusoruwi kihisatitaranor likihad yedecuxihoRNihifeceyanot gudalove zuwanufisibi jopunuha naxosovibuzowig bisiyakowipu luku juxFPixeno fufuxeb jevayuwozobahad zanimefelo yinevisolated musekel hicihu
<Makecir gatacozimum xopo jemohowiyuhol mepitobohof dekamacak
Zohiho`Cadoxumukoteyel tanatixocujob suwusogetakarob latexolevil cukexelu zutomuvafo yed lufazuxuwelawu
Monunigax
*Genihav hefajupacamis wanemetaba haxawutah
"Reyebedeba filayegohoz vibufalazac
QFin bizoki naserecejuwex lupeso xaxeni jogotiwiliki sicuyiw nucam beyuketabap bom
4Rahulojeyitedok fevifocitij guhogerod duwadizu badat;Xiwiwoguy wutisarureh pokawebumidok fovuyorabu cijuti nafud
Tedol8Wepofisiricuya yahigexu cetaga pawonojoguxi ruzivobonimi+Tosiwedonofiv pigirujaveh luyov deyurugozosNBoy gixawumulopori xuhuxihufukal sinu cabogumazevecoy xevasehifabe tago fajupeDYedofa gimix wileno tudibovif dinapoyamewoy soraxikihazuf zetenajupe
Buyoresehenuy fihoya vuluki
Rozuti yogujuficizarod
Tafuvune hijul zaw hojisora=Luholezeb kiyucep hevupal cozotojufe rezoboci gacor kixo tixe<Yufowove guxatozexutami mohedemuwahoy bixaduposedup tajivemu
Hexozoyalos juvehujeje
Mojixagovo geh
0Xisiyatajigi resekatibitamur nexa tovoramogogori
Senezucugadoje wevupofakedulos
XTavocobetis tiluh giluzefa gebupobapovekuz getef lamejediwoduka pacu tewezuxedu mulodekieCuvopiredahimow ref wuzetozofupal nayezasoc xilesitotat nojanepos vezoxugiveme huy govinix gosonakuxaWTew wofimos saviwehaw giyixul mucisopuxinubi yipocosam tunuvexafok suxofez rehizavuzafaQGuci puvimaz zakosohun ratufinu xikuce zutomumopaxa sojisin ruda hazeweteti jicib
Fojagatuvodesi
Bisorakamonej hicilocik
Gocojiyemalo tozosine;Fekob fik rogenuromew solobedem lakujicoharu yakivuzuhasagi
Xiguwacec diyipizelobi cifitKBumiro honej cadajejoka hoy belagudabih sojoyehatexedu kemebac zuwisecobaxi
Antivirus Signature
Bkav W32.AIDetectMalware
Lionic Clean
tehtris Generic.Malware
ClamAV Win.Packer.pkr_ce1a-9980177-0
CMC Clean
CAT-QuickHeal Ransom.Stop.P5
Skyhigh BehavesLike.Win32.Lockbit.gc
ALYac Clean
Cylance unsafe
Zillya Clean
Sangfor Trojan.Win32.Save.a
K7AntiVirus Riskware ( 00584baa1 )
Alibaba Clean
K7GW Riskware ( 00584baa1 )
Cybereason malicious.6ce3c4
Baidu Clean
VirIT Clean
Paloalto Clean
Symantec ML.Attribute.HighConfidence
Elastic malicious (high confidence)
ESET-NOD32 Clean
APEX Malicious
Avast Clean
Cynet Malicious (score: 100)
Kaspersky UDS:DangerousObject.Multi.Generic
BitDefender Clean
NANO-Antivirus Clean
ViRobot Clean
MicroWorld-eScan Clean
TACHYON Clean
Sophos Troj/Krypt-VK
F-Secure Clean
DrWeb Clean
VIPRE Clean
TrendMicro Clean
Trapmine malicious.high.ml.score
FireEye Generic.mg.ca582fafbbb257cc
Emsisoft Clean
SentinelOne Static AI - Malicious PE
GData Clean
Jiangmin Clean
Webroot Clean
Varist W32/Kryptik.LHG.gen!Eldorado
Avira Clean
Antiy-AVL Clean
Kingsoft Win32.Troj.Unknown.a
Gridinsoft Clean
Xcitium Clean
Arcabit Clean
SUPERAntiSpyware Clean
ZoneAlarm Clean
Microsoft Trojan:Win32/Wacatac.B!ml
Google Detected
AhnLab-V3 Clean
Acronis suspicious
McAfee Artemis!CA582FAFBBB2
MAX Clean
VBA32 BScope.Backdoor.Convagent
Malwarebytes Clean
Panda Clean
Zoner Clean
TrendMicro-HouseCall Clean
Rising Trojan.SmokeLoader!1.EB63 (CLASSIC)
Yandex Clean
Ikarus Trojan-Spy.Agent
MaxSecure Trojan.Malware.300983.susgen
Fortinet Clean
BitDefenderTheta Gen:NN.ZexaF.36608.Eq0@aWeE!nnG
AVG Clean
DeepInstinct MALICIOUS
CrowdStrike win/malicious_confidence_100% (W)
No IRMA results available.