Static | ZeroBOX

PE Compile Time

2024-02-01 10:52:43

PE Imphash

cc12e3f394a2cfaeb0c35364d40acf00

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00001000 0x0003419e 0x00034200 5.89624518607
.rdata 0x00036000 0x0000a7b4 0x0000a800 5.40122843896
.data 0x00041000 0x00029690 0x00025e00 2.89461981056
.pdata 0x0006b000 0x000019ec 0x00001a00 5.46624911269
.rsrc 0x0006d000 0x000002f0 0x00000400 4.27699897542
.reloc 0x0006e000 0x00000d04 0x00000e00 3.90868353766

Resources

Name Offset Size Language Sub-language File type
RT_MANIFEST 0x0006d060 0x00000290 LANG_NEUTRAL SUBLANG_NEUTRAL XML 1.0 document, ASCII text, with CRLF line terminators

Imports

Library KERNEL32.dll:
0x140036000 WaitForSingleObject
0x140036008 GetWindowsDirectoryW
0x140036010 GetTempPathW
0x140036018 OpenEventW
0x140036020 LoadLibraryW
0x140036028 TerminateProcess
0x140036030 ExitProcess
0x140036038 lstrcpyW
0x140036040 lstrlenW
0x140036048 GetCurrentProcess
0x140036050 GetSystemDirectoryW
0x140036058 GetModuleFileNameW
0x140036060 LocalFree
0x140036068 CreateProcessW
0x140036070 LocalAlloc
0x140036078 lstrcmpiW
0x140036080 lstrcpyA
0x140036088 CloseHandle
0x140036090 GetLastError
0x140036098 GetProcAddress
0x1400360a0 GetModuleHandleW
0x1400360a8 lstrlenA
0x1400360b0 FileTimeToSystemTime
0x1400360b8 CreateThread
0x1400360c0 lstrcmpA
0x1400360c8 SetEvent
0x1400360d0 WaitForMultipleObjects
0x1400360d8 CreateMutexW
0x1400360e0 OpenMutexW
0x1400360e8 GetModuleHandleA
0x1400360f0 VirtualProtect
0x1400360f8 VirtualAlloc
0x140036100 VirtualFree
0x140036108 LoadLibraryA
0x140036110 ReadFile
0x140036118 GetFileSize
0x140036120 CreateFileW
0x140036128 CreateEventW
0x140036130 GetTickCount64
0x140036138 GetCurrentProcessId
0x140036140 ReleaseMutex
0x140036148 Sleep
0x140036150 HeapReAlloc
0x140036158 WriteConsoleW
0x140036160 SetStdHandle
0x140036168 LCMapStringW
0x140036170 GetStringTypeW
0x140036178 HeapSize
0x140036180 MultiByteToWideChar
0x140036188 LeaveCriticalSection
0x140036190 EnterCriticalSection
0x140036198 GetConsoleMode
0x1400361a0 GetConsoleCP
0x1400361a8 SetFilePointer
0x1400361b0 GetSystemTimeAsFileTime
0x1400361b8 GetTickCount
0x1400361c0 FlushFileBuffers
0x1400361c8 RtlLookupFunctionEntry
0x1400361d0 RtlUnwindEx
0x1400361d8 RaiseException
0x1400361e0 RtlPcToFileHeader
0x1400361e8 GetCommandLineA
0x1400361f0 GetStartupInfoW
0x1400361f8 DecodePointer
0x140036200 UnhandledExceptionFilter
0x140036210 IsDebuggerPresent
0x140036218 RtlVirtualUnwind
0x140036220 RtlCaptureContext
0x140036228 EncodePointer
0x140036230 FlsGetValue
0x140036238 FlsSetValue
0x140036240 FlsFree
0x140036248 SetLastError
0x140036250 GetCurrentThreadId
0x140036258 FlsAlloc
0x140036260 HeapFree
0x140036268 HeapAlloc
0x140036270 GetCPInfo
0x140036278 GetACP
0x140036280 GetOEMCP
0x140036288 IsValidCodePage
0x140036290 WriteFile
0x140036298 GetStdHandle
0x1400362a0 GetModuleFileNameA
0x1400362a8 FreeEnvironmentStringsW
0x1400362b0 WideCharToMultiByte
0x1400362b8 GetEnvironmentStringsW
0x1400362c0 SetHandleCount
0x1400362d0 GetFileType
0x1400362d8 DeleteCriticalSection
0x1400362e0 HeapSetInformation
0x1400362e8 GetVersion
0x1400362f0 HeapCreate
0x1400362f8 QueryPerformanceCounter
Library USER32.dll:
0x140036330 DispatchMessageW
0x140036338 wsprintfW
0x140036340 DefWindowProcW
0x140036348 RegisterClassW
0x140036350 GetMessageW
0x140036358 TranslateMessage
0x140036360 wsprintfA
0x140036368 DestroyWindow
0x140036370 UnregisterClassW
0x140036378 PostMessageW
0x140036380 CreateWindowExW
Library ole32.dll:
0x140036390 CoCreateInstance
Library OLEAUT32.dll:
0x140036308 VariantClear
0x140036310 VariantInit
0x140036318 SysFreeString
0x140036320 SysAllocString

!This program cannot be run in DOS mode.
`.rdata
@.data
.pdata
@.rsrc
@.reloc
D$8H9D$0t
D$8HcD$8H
HcD$XH
HcD$XH
HcD$XL
HcD$X3
s0HcD$lH
HcD$lH
D$l9D$xu1H
D$@HcD$@3
s0HcD$lH
HcD$lH
HcD$ Hi
HcD$ Hi
HcL$$Hk
t-HcD$ Hi
HcL$$Hk
HcD$ Hi
HcL$$Hk
HcD$ Hi
HcL$$Hk
HcD$ Hi
HcL$$Hk
HcD$ Hi
HcL$$Hk
HcD$ Hi
HcL$$Hk
tXHcD$ Hi
HcL$$Hk
HcD$ Hi
HcL$$Hk
HcD$ Hi
t2HcD$ Hi
T$(HcD$ Hi
HcD$ Hi
t!HcD$ Hi
T$0HcD$ Hi
HcD$ Hi
|$`uHH
}fHcD$`Hi
uEHcD$`Hi
D$0Hc@<H
D$(HcD$0H
HcL$HH
H+L$(D
D$hHcD$hH
HcD$0H
HcD$hH
D$XHcD$hH
D$X9D$l}$H
D$\9D$p}'
HcL$DH
HcL$DH
D$,9D$X}$H
D$09D$\}'
D$(HcD$HH
H+D$(D
HcD$h3
D$XHcD$h3
D$X9D$l}$H
D$\9D$p}'
D$4HcL$DH
D$4HcL$DH
D$,9D$X}$H
D$09D$\}'
D$X9D$H}
D$ 9D$$};HcD$$H
HcD$$H
D$8HcD$43
D$,HcD$43
D$,9D$<}$H
D$09D$@}'
D$$9D$ t
D$ 9D$(})HcD$(H
HcL$(H
D$ Hc@<H
9D$`}zH
D$(9D$Lt
D$`9D$Hu
D$H9D$Xu
D$`Hc@<H
HcD$|H
HcD$|H
HcD$|H
HcD$|H
D$(Hc@<H
D$@9D$P}UHcD$PH
u=HcD$PH
D$HHc@<H
D$hHcD$`H
HcD$`H
HcD$pH
uFHcD$pH
D$ HcD$xHcL$hH
HcD$hHcL$ H
H9D$(s
H+D$HH;D$ s
H9D$ w
H;D$Xs
H;D$ s
D$XH9D$ s
H9D$Pw
D$XH9D$Pt2H
D$HH9D$@t
}NHcD$@H
HcL$@H
HcL$@H
|$`@}Q
HcL$`H
D$ HcD$ H;
HcD$ H
HcL$ H
HcD$hL
D$T9D$X}_H
D$(9D$8u
HcD$lH
HcD$lH
D$H9D$Xu
tOHcD$XL
~\HcD$(H
HcD$tH
D$(HcD$(H
D$ Hc@<H
D$ Hc@<H
D$ Hc@<H
9D$`}zH
9D$`}zH
HcD$\H
HcD$\H
HcD$\H
HcD$\H
D$`Hc@<H
HcD$pH
uFHcD$pH
D$0Hc@<H
D$ Hc@<H
D$(Hc@<H
D$89D$H}UHcD$HH
u=HcD$HH
D$(Hc@<H
D$@9D$P}UHcD$PH
u=HcD$PH
D$@Hc@<H
D$hHcD$\H
HcD$\H
D$H9D$Xu
D$,9D$0}
D$(9D$4}9HcD$4H
HcD$4H
D$,9D$0}
D$(9D$4}=HcD$4H
HcD$4H
D$$9D$ t
D$ 9D$(})HcD$(H
HcL$(H
D$X9D$H}
D$ 9D$$};HcD$$H
HcD$$H
HcD$<Hk
HcD$<Hk
HcD$<Hk
t4HcD$<Hk
HcD$<Hk
HcD$<Hk
t4HcD$<Hk
HcD$<Hk
HcD$<Hk
HcL$<Hk
tvHcD$<Hk
HcD$<Hk
HcD$<Hk
HcD$<Hk
HcD$<Hk
HcD$<Hk
HcD$<Hk
HcD$<Hk
t4HcD$<Hk
HcD$<Hk
HcD$<Hk
t4HcD$<Hk
HcD$<Hk
HcD$<Hk
HcL$<Hk
tvHcD$<Hk
HcD$<Hk
HcD$<Hk
HcD$<Hk
HcD$<Hk
HcD$<Hk
HcD$<Hk
HcD$<Hk
D$$HcD$(H
D$$HcD$(H
D$@HcD$DH
D$@HcD$DH
9D$`s*
HcD$$Hk
HcD$$Hk
HcD$$Hk
HcD$$Hk
t HcD$$Hk
HcD$$Hk
HcD$$Hk
HcD$$Hk
HcD$$Hk
HcD$$Hk
HcD$$Hk
H9D$`v
D$(H9D$0uAH
D$@H9D$Xw
D$@H9D$X
H9D$XvLH
D$0H9D$X
H9D$Xwi
D$8H9D$(
D$HH9D$(wR
L$ USVWH
t$ WATAUAVAWH
A_A^A]A\_
p WATAUH
A]A\_
WATAUH
A]A\_
@USVWATAUAVAWH
A_A^A]A\_^[]
fffffff
fffffff
L$ USVWH
|$ UATAUAVAWH
A_A^A]A\]
WATAUH
A]A\_
UVWATAUAVAWH
9D$XufE
A_A^A]A\_^]
SVWATAUAVAWH
0A_A^A]A\_^[
WATAUAVAWH
A_A^A]A\_
@SVWATAUAVAWH
L!l$HL!l$@
D$PL9oXt
D$8HcH
A_A^A]A\_^[
ATAUAVH
0A^A]A\
VWATAUAVH
A^A]A\_^
UVWATAUAVAWH
`A_A^A]A\_^]
UVWATAUAVAWH
E9,$~T3
A_A^A]A\_^]
WATAVH
@A^A\_
WATAUAVAWH
A_A^A]A\_
ATAUAVH
A^A]A\
WATAUH
A]A\_
UVWATAUAVAWH
D$HD9T$\
t$pD+d$HD+
9D$Ttg
A_A^A]A\_^]
UVWATAUAVAWH
A_A^A]A\_^]
UVWATAUH
D$&8\$&t-8X
@A]A\_^]
WATAUAVAWH
@A_A^A]A\_
t$ WATAUH
x ATAUAVH
A^A]A\
Hct$@H
s\HcL$HH
ATAUAVH
fD9t$b
A^A]A\
VWATAUAVH
A^A]A\_^
\$ UVWATAUAVAWH
!|$DHc
|$DD9d$X
f;D$@ug
f;D$@uD
H!\$ H
HcD$HH;
H!\$ H
HcD$HH;
H!|$ L
A_A^A]A\_^]
VWATAUAVH
A^A]A\_^
l$ VWATH
9\$ ~>H
D8"u%H
LcA<E3
L$ UVWH
@UATAUAVAWH
!t$(H!t$ A
A_A^A]A\]
@UATAUAVAWH
A_A^A]A\]
WATAUAVAWH
0A_A^A]A\_
@SUVWATAUAVH
PA^A]A\_^][
ATAUAWH
0A_A]A\
x ATAUAWH
A_A]A\
D8d$Ht
@SUVWH
UATAUAVAWH
gfffffffH
A_A^A]A\]
@8|$8t
@8t$8t
@SUVWH
@SUVWATH
A\_^][
@USVWH
UVWATAUAVAWH
`A_A^A]A\_^]
UVWATAUAVAWH
`A_A^A]A\_^]
UVWATAUAVAWH
A_A^A]A\_^]
UVWATAUAVAWH
A_A^A]A\_^]
x ATAUAWH
A_A]A\
EPH9E t
H(H9J(u
L-z,}Y~S
L-z,}Y~S
L-z,}Y~S
DLLCFG
@echo off
cmd /c start "" "%S%S" %S
NtCreateSection
NtMapViewOfSection
RtlCreateUserThread
NtUnmapViewOfSection
NtClose
LoadLibraryW
GetProcAddress
LoadLibraryA
LocalAlloc
VirtualAlloc
LocalFree
CloseHandle
VirtualFree
MessageBoxW
VirtualProtect
NtCreateSection
NtMapViewOfSection
RtlCreateUserThread
NtUnmapViewOfSection
NtClose
LoadLibraryW
GetProcAddress
LoadLibraryA
LocalAlloc
VirtualAlloc
LocalFree
CloseHandle
VirtualFree
MessageBoxW
VirtualProtect
L-z,}Y~S
L-z,}Y~S
RtlDecompressBuffer
RtlGetCompressionWorkSpaceSize
L-z,}Y~S
L-z,}Y~S
L-z,}Y~S
RtlTimeToSecondsSince1970
L-z,}Y~S
vector<T> too long
expand 32-byte k
L-z,}Y~S
L-z,}Y~S
L-z,}Y~S
RtlGetVersion
L-z,}Y~S
L-z,}Y~S
L-z,}Y~S
L-z,}Y~S
RtlGetVersion
RtlGetVersion
L-z,}Y~S
L-z,}Y~S
NKagj(h
bad allocation
Unknown exception
bad exception
(null)
`h````
xpxxxx
HH:mm:ss
dddd, MMMM dd, yyyy
MM/dd/yy
December
November
October
September
August
February
January
Saturday
Friday
Thursday
Wednesday
Tuesday
Monday
Sunday
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
CorExitProcess
Complete Object Locator'
Class Hierarchy Descriptor'
Base Class Array'
Base Class Descriptor at (
Type Descriptor'
`local static thread guard'
`managed vector copy constructor iterator'
`vector vbase copy constructor iterator'
`vector copy constructor iterator'
`dynamic atexit destructor for '
`dynamic initializer for '
`eh vector vbase copy constructor iterator'
`eh vector copy constructor iterator'
`managed vector destructor iterator'
`managed vector constructor iterator'
`placement delete[] closure'
`placement delete closure'
`omni callsig'
delete[]
new[]
`local vftable constructor closure'
`local vftable'
`udt returning'
`copy constructor closure'
`eh vector vbase constructor iterator'
`eh vector destructor iterator'
`eh vector constructor iterator'
`virtual displacement map'
`vector vbase constructor iterator'
`vector destructor iterator'
`vector constructor iterator'
`scalar deleting destructor'
`default constructor closure'
`vector deleting destructor'
`vbase destructor'
`string'
`local static guard'
`typeof'
`vcall'
`vbtable'
`vftable'
operator
delete
__unaligned
__restrict
__ptr64
__eabi
__clrcall
__fastcall
__thiscall
__stdcall
__pascal
__cdecl
__based(
 !"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~
GetProcessWindowStation
GetUserObjectInformationW
GetLastActivePopup
GetActiveWindow
MessageBoxW
`h`hhh
xppwpp
1#QNAN
1#SNAN
WaitForSingleObject
GetWindowsDirectoryW
GetTempPathW
OpenEventW
LoadLibraryW
TerminateProcess
ExitProcess
lstrcpyW
lstrlenW
GetCurrentProcess
GetSystemDirectoryW
GetModuleFileNameW
LocalFree
CreateProcessW
LocalAlloc
lstrcmpiW
lstrcpyA
CloseHandle
GetLastError
GetProcAddress
GetModuleHandleW
lstrlenA
FileTimeToSystemTime
CreateThread
lstrcmpA
SetEvent
WaitForMultipleObjects
CreateMutexW
OpenMutexW
GetModuleHandleA
VirtualProtect
VirtualAlloc
VirtualFree
LoadLibraryA
ReadFile
GetFileSize
CreateFileW
CreateEventW
GetTickCount64
GetCurrentProcessId
ReleaseMutex
KERNEL32.dll
wsprintfW
CreateWindowExW
PostMessageW
UnregisterClassW
DestroyWindow
DispatchMessageW
TranslateMessage
GetMessageW
RegisterClassW
DefWindowProcW
wsprintfA
USER32.dll
CoCreateInstance
ole32.dll
OLEAUT32.dll
RtlLookupFunctionEntry
RtlUnwindEx
RaiseException
RtlPcToFileHeader
GetCommandLineA
GetStartupInfoW
DecodePointer
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlCaptureContext
EncodePointer
FlsGetValue
FlsSetValue
FlsFree
SetLastError
GetCurrentThreadId
FlsAlloc
HeapFree
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
HeapSetInformation
GetVersion
HeapCreate
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
SetFilePointer
GetConsoleCP
GetConsoleMode
EnterCriticalSection
LeaveCriticalSection
MultiByteToWideChar
HeapSize
GetStringTypeW
LCMapStringW
SetStdHandle
WriteConsoleW
HeapReAlloc
FlushFileBuffers
!This program cannot be run
in DOS mode.
ec&Rich2
`.rdat
@.reloc
USVWH
u7Ardq
J A]A\2
NA_A^A
\UJU1AHq
1AAUC%
;7sUr7
kAsHI
(HDp0G\
Hct$@H
t4Iq +
D9d &
3q2q5q5
AD$p2hU
D$V!hp H
D$&8\$&t-
WATAUE%0
0A_A^A]A
bWA}M+
D$(BBA
!t$(Haf A
uPT|bj
tAH1h8
u,q5a<
Zq5aVWa<tN
CorExitProcess
da@Bb,!
I/c@/q
DaPcaPm
&cSaPpq@ea
gqPsq@
FaPbq uc
tqPra@ay
Fq ii@Ta
uq si@
TqPZuj
ni@SqP
bas@dv
HH:mm:B7
dddd, MMMM "jyyy
MM/dd/
Decembe"
OctoB$Sept6
ebruar
JanW!0
Thurs'o
WedneY&Tu$RMon#o
`h````
xpxxxx
SQ0 aPrq
Aq@taPm
s q@o!
uq0R&MS0L!
2idaP
c a R`
vhaP q eq0ua
/a0lq )!
fqPna0Fn
iy`nq0tq uc0
"'htDc
R&CQ T!
"Riaa
iPh&wa
pqP$bva
rq@Rfl!
cBcbn2c
aP2rTb
mqPlq@
rhq ea
"bac@Bgta
2'baPVh
i*Rhbn
i*aq rsmaPnq@s
hB'sqP
cq oq0
Q RiBn
"hgq aa
kR&Rikc
RRiHnEq "h
"hvt:!
 !"#$%&'()*+,-./0123456789:;<=
>?@abcdefghijklmnopqrstuvwxyz[\
]^_`pE
AABCDEFGHIJKL
MNOPQRSTUVWXYZ
uWindow
Station
UserObjectInformc/W
stActivePopup
M!EageBoxt
UQ0EQ
xppwpp
CreateuJq
KERNEL32.dl
CurrentThA6dIA
FlsSetValue
ommandLineA
iinter
ledExcep"
IsDebuggerPres1
RtlVirt
ualUnwinA
TLookupFunA/onEntR
ptureCo
Terminh#
gError
rJAddA$
ModuleHs
zCount
InitializeCr
/calS1B
AndSpinT
AEnvironmentStringsW
CharToMultiByte
DeA5oy
QueryPer
E&rJ!E
Sys!:Ti
onsoleCP
A>!%MM
LeavD
yidCodePq
LCMapD7q
WQ Clos
Buff!U
DXGI.DLLA`plyComp
D3D10C
D6eviceh
LayeredD
eclareAdap!%Removq
umpJourna
#6In!%face
figura"
DllMain
PIXB1nCarurYi
UdS!c\i
Q!atT
Upda#HMDEmu
lc/B$u9h a
+ 1+0UU
!+@Q+PA+`q+pa+
LookupPrivilegeValueW
AdjustTokenPrivileges
OpenProcessToken
LoadLibraryW
LocalAlloc
GetModuleHandleW
GetModuleFileNameW
lstrcpyW
lstrcpyA
VirtualFree
LocalFree
VirtualProtect
GetCurrentProcessId
GetCurrentThreadId
CloseHandle
CreateToolhelp32Snapshot
Thread32First
OpenThread
SuspendThread
ResumeThread
Thread32Next
CreateFileW
GetFileSize
ReadFile
lstrcmpA
VirtualAlloc
lstrcmpiW
GetProcAddress
.?AVbad_alloc@std@@
.?AVexception@std@@
94.156.8.44
.?AVlogic_error@std@@
.?AVlength_error@std@@
.?AVtype_info@@
.?AVbad_exception@std@@
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
.?AV_com_error@@
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
<dependency>
<dependentAssembly>
<assemblyIdentity type="win32" name="Microsoft.Windows.Common-Controls" version="6.0.0.0" processorArchitecture="*" publicKeyToken="6595b64144ccf1df" language="*"/>
</dependentAssembly>
</dependency>
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v3">
<security>
<requestedPrivileges>
<requestedExecutionLevel
level="asInvoker"
uiAccess="false"/>
</requestedPrivileges>
</security>
</trustInfo>
</assembly>
NTDLL.DLL
KERNEL32.DLL
DBGHELP.DLL
USER32.DLL
WIN32U.DLL
%s\explorer.exe
%s\svchost.exe
%s\cmd.exe
SOFTWARE\%s
HWID_%s
SOFTWARE\%s
SOFTWARE\%s
default
SOFTWARE\%s
SOFTWARE\%s
SOFTWARE\%s
SOFTWARE\%s
SOFTWARE\%s
%s\explorer.exe
%s\svchost.exe
%s\cmd.exe
%s\cmd.exe
%s\%S.DLL
\\?\%s
%s\System32
\\?\%s
%s\System32
\\?\%s
%s\System32
%s\*.*
%s\explorer.exe
%s\svchost.exe
%s\cmd.exe
"%s%s" %s
"%s%s"
"%s%s" %s
Software\%s
Software\%s
"%s" %s
%s.EXE
Software\%s
Software\%s
Software\%s
Software\%s
Software\%s
Software\%s
%s\%s.lnk
%s\%s\%s.bat
%s%s %s
Software\Microsoft\Windows\CurrentVersion\Run
SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Software\Microsoft\Windows\CurrentVersion\Run
SOFTWARE\Microsoft\Windows\CurrentVersion\Run
%s\%s\
NTDLL.DLL
eKERNEL32.DLL
KERNEL32.DLL
USER32.DLL
"%s%s" %s
Software\%s
%s\%s.lnk
%s\%s\%s.BAT
NTDLL.DLL
eKERNEL32.DLL
KERNEL32.DLL
USER32.DLL
%s\EXPLORER.EXE
%s\SVCHOST.EXE
%s\CMD.EXE
'%s%s'
'%s%s'
'%s%s'
'%s%s'
'%s%s'
NTDLL.DLL
%s\%s.DLL
%s.DLL
%s\%s.DLL
%s.DLL
%s\%s.DLL
%s.DLL
%s\%s.DLL
%s.DLL
%s\%s.DLL
%s.DLL
%s\%s.DLL
%s.DLL
%s\%s.DLL
%s.DLL
%s\%s.DLL
%s.DLL
%s\%s.DLL
%s.DLL
%s\%s.DLL
%s.DLL
%s\%s.DLL
%s.DLL
%s\%s.DLL
%s.DLL
%s\%s.DLL
%s.DLL
%s\%s.DLL
%s.DLL
%s\%s.DLL
%s.DLL
%s\%s.DLL
%s.DLL
%s\%s.DLL
%s.DLL
%s\%s.DLL
%s.DLL
%s\%s.DLL
%s.DLL
%s\%s.DLL
%s.DLL
%s\%s.DLL
%s.DLL
%s\%s.DLL
%s.DLL
%s\%s.DLL
%s.DLL
%s\%s.DLL
%s.DLL
%s\%s.DLL
%s.DLL
%s\%s.DLL
%s.DLL
%s\%s.DLL
%s.DLL
NTDLL.DLL
KERNEL32.DLL
USER32.DLL
GDI32.DLL
ADVAPI32.DLL
SHLWAPI.DLL
SHELL32.DLL
OLE32.DLL
WINHTTP.DLL
WTSAPI32.DLL
WS2_32.DLL
GDIPLUS.DLL
MSI.DLL
WINMM.DLL
DBGHELP.DLL
SECUR32.DLL
CRYPT32.DLL
application/octet-stream
text/plain
application/octet-stream
text/plain
NTDLL.DLL
KERNEL32.DLL
ADVAPI32.DLL
Mozilla/5.0 (Windows NT 6.1; WOW64; rv:64.0) Gecko/20100101 Firefox/64.0
KERNEL32.DLL
Microsoft Enhanced RSA and AES Cryptographic Provider
S:(ML;;NW;;;LW)
"%s%s"
NTDLL.DLL
NTDLL.DLL
%s [%d]
(null)
HH:mm:ss
dddd, MMMM dd, yyyy
MM/dd/yy
December
November
October
September
August
February
January
Saturday
Friday
Thursday
Wednesday
Tuesday
Monday
Sunday
mscoree.dll
runtime error
TLOSS error
SING error
DOMAIN error
- Attempt to use MSIL code from this assembly during native code initialization
This indicates a bug in your application. It is most likely the result of calling an MSIL-compiled (/clr) function from a native constructor or from DllMain.
- not enough space for locale information
- Attempt to initialize the CRT more than once.
This indicates a bug in your application.
- CRT not initialized
- unable to initialize heap
- not enough space for lowio initialization
- not enough space for stdio initialization
- pure virtual function call
- not enough space for _onexit/atexit table
- unable to open console device
- unexpected heap error
- unexpected multithread lock error
- not enough space for thread data
- abort() has been called
- not enough space for environment
- not enough space for arguments
- floating point support not loaded
Microsoft Visual C++ Runtime Library
<program name unknown>
Runtime Error!
Program:
((((( H
h(((( H
H
USER32.DLL
CONOUT$
ree.dl
SeDebugPrivilege
SoftVisionV4
Winhlpr
Winhlpr.exe
UNLOAD.TXT
\Winhlpr
{5900AF67-C493-4D43-A13B-B33FB632F901}
{DC40B8EB-5A65-4799-89E4-D6604AF60D03}
{AB1F3E47-AEF1-400E-A108-233A046C3A34}
{95D7802E-03EC-415C-9463-2042E7EF0E2E}
{941EFC1D-EB4C-4B9C-AE8E-0018772AD18B}
{68A06D48-E323-4EB9-82BF-3E3083FDC9C7}
{6D944AB2-B285-4356-8ECB-88B0A135B2BA}
{4DC686CC-9B51-4660-AD75-0D231DC6684F}
{A991F2B4-342E-4568-9D9B-F8E1E0FC95D4}
{177412BD-6AB8-4077-9A7B-BD8CF44296F5}
{0C053FD2-FC32-497D-9187-30A681369F42}
{FBA0A164-1DD3-446B-8619-0A84F45B9EFC}
{DF87844E-1932-48DB-88CC-CBF3297B4DB3}
{E15D665C-B887-477D-B132-D8B2958F30F0}
{B52C5605-0518-4AF2-8BA7-3432FE3D931F}
{02A93A0D-CB25-498F-9E16-E71381E9065A}
{C17F7309-184C-4D1C-BF6F-36430E2F4CD0}
{27FCEDB5-05FE-4FA9-B1BF-46711C27F9B9}
{409A831A-1D68-4E9D-92F0-8B2E3B8ECCF6}
{69A2BBFE-6CD2-4206-8D4A-FF056F56100C}
{0E1DCD5E-B96F-480A-84FF-897E29F76A98}
{4D7BB80F-0889-4F21-AB19-41D5A1D3F2C6}
{9A2ABA3E-675E-4573-BC73-CA5E5E222CAD}
{A2E8B6B2-1531-4FCB-A6FA-0B8B55C40928}
{B376083D-8C8D-48E0-8C0D-883D5EC560CD}
{510C3CA8-AB93-4F0D-97FB-49A0BA1EF70D}
{7985ED85-DE2F-4F10-A65C-BA3676D9EF76}
{634E1DC3-6554-4D8D-A23F-E8D5272959D8}
{65A24A72-1DC4-4FEE-84CE-7036B122D600}
{B5B86005-1671-481A-B060-8ED307856445}
{3A2DF588-451A-4A71-8B32-F0973D3D39E3}
{ABA6FE9E-CC27-4F28-A903-5F792187E17D}
{E98B14CE-88FF-4DE0-995B-7E7138ABC65F}
{77428D9F-2B6A-43E7-A823-AF3C4607B7DC}
{D49C7F0A-309D-49A6-9B5C-4FB32524386E}
{EA1D788C-4828-426C-A111-20018598D4C6}
{DD1B7932-3B51-431C-A49F-251F9B60D731}
{2085D7B0-CAD7-42AC-B23D-90A000D89787}
{F2337CE5-2DDA-455C-981E-D5C03802700C}
{D6BCF267-E83C-48A8-928D-4167E3CBED9D}
{F037FCA8-1E10-422A-94E4-40D8582983A2}
{B00CBE8B-705E-4CF6-AC49-A3299996AC85}
{69E6CDC6-9540-4911-B4B3-4E2D2EFAB9E6}
{3C24DC3E-5837-4C24-8FDD-E7C330B8DB37}
{A2B85132-6A74-45E2-BEE8-F9F5BE8DFA98}
{1ACA6A0A-498C-4BFD-9F90-682BD582A1F2}
{05ACADEF-A71B-4A5A-90AD-A51CEB7A30BB}
{9FF45C64-640C-4CC7-A288-0566784F362E}
{66206830-B9F5-48F9-9BDF-C9FE23A9330E}
{DAE4C793-D42C-49CE-BAD2-A4DA4A4D6AC0}
{7742DDA8-716A-4E00-8A92-7E035BEC5978}
{0842E2F2-BBF3-430D-AD33-E5F46CA90A26}
{3395F137-38F1-44EA-80BE-96DF7B0B478A}
{1B5F99AA-BAFF-4B3F-A6CC-F0FA54F45896}
{CDAE8A5E-5445-4EE4-B3AF-F88AC4CF73FC}
{4F8002FF-6FF8-4796-B345-244FE7F68963}
{E3A5D51C-CDAC-4D0C-8EFD-87C645E62B99}
{1B88F884-6548-467A-9B3C-AEAB415D69BD}
{1CF66CDA-D130-4B6A-AF75-53B6E66E94C6}
{C232BD77-AB37-4ACF-B8A4-4F36D264966B}
{44D415BF-9C7E-48C6-A21C-5720135E302E}
{8CCF5870-6C95-48D7-A0F1-7A2D5DE59D65}
{E395D0E5-283A-4619-92AC-B9F9ED99EF5E}
{4C9F8955-38AF-4B27-8861-2F3F6D1DEE65}
{5AC3711D-E26B-4FDB-A9B7-65B46861E516}
{DD77F180-579C-4504-87B8-15278571E56C}
{11403BFC-5D35-4487-B26B-7F612B235F28}
{8CDE9446-8536-488A-ADEA-E5BE407156C9}
{B58BA97C-853E-4966-B139-C269AEA6E751}
{CF7C1B27-721A-46D8-A598-74B92FBEF04B}
{EB3F3C8E-257A-46D7-9DA0-F22D3C616CB1}
{6EE937AD-1AFD-4676-A8DA-701BF00F0B84}
{E03A0B25-28B7-4266-BD23-52EABDAB2C12}
{A021F93B-9121-4784-AE33-A49196358982}
{E538C857-73DC-4EB2-A0D7-419BC04ABDAB}
{C64F99C0-8C7F-4C06-B65F-82FED0F14795}
{F1F09429-2F08-484C-ABE3-9DC9085E4E57}
{EEE5A51F-89B8-4FFF-8564-1FF91B948212}
{E472585C-CECF-4622-B909-4EC92383AFCE}
{06DE5164-027D-4A98-860A-E6A358B5BAD5}
{9D2F0955-3BBE-4083-8CAD-6D021A4EA3A2}
{B4E26B3F-7375-4175-AB99-499D79642812}
{8395D257-1432-4AAD-BA1F-4D7EE870933C}
{24A8EFF5-AB9A-41CC-BFF9-C4288B7EDD1E}
{F0C7A511-B7F2-4699-9706-987C89466B95}
{1B1A3E13-9E00-43C1-8E12-C0183BCEB57E}
{26CB68A6-1191-4E6E-8453-532E25E806D5}
{DD2C4109-D78F-4632-84AB-30F3BC7164AB}
{9F57D1B1-51A6-4504-8C01-69B3090CD5AA}
{36724197-372F-4E85-BBCF-46B22EB4B3F5}
{4BE2A0D1-3A39-428C-A77A-75C819117849}
{905A300B-66CE-4CE0-B89A-E0A3572B4E0D}
{93DA037B-3D76-4B04-BFA2-F4DB942CF911}
{B0F3845F-8F2F-411D-9D0C-1C3352807A8C}
{B1F90366-D5F2-47BE-8C3B-2E4841E1B8C0}
{3A525470-65CC-4DB4-82DD-0A120654AADB}
{19901A58-BE0F-46FD-865F-072356584285}
{C9E7145F-C200-4F9A-BA55-C9CFB4D40B39}
{A76EC51B-990F-4604-A85E-C3B7B541A7AD}
{9B133DCA-E38B-4A36-96BD-BC6556200FDE}
{2E77DEFA-C7E4-4371-AE63-AF58EA28F659}
{0BB63880-1552-46D9-89DC-2B978FE635D1}
{DC1F8EC6-8F5F-4F6E-B278-A389067B2FBF}
{95D139FE-EBA2-4944-9745-72C07923FA6C}
{3AFD53C7-266E-4AD3-A9D2-FBA990B80D73}
{C2DFCD9D-2740-49B7-8CB2-AA1D2B7DBF10}
{5ACB5ACA-C9F7-49D1-819A-91681BBD94B6}
{4455267A-9DD7-403D-ACA0-A7652DFF478A}
{BE1CD760-66E5-4935-A989-50679C727A72}
{64B3E3C2-6829-48EB-B0D8-50674FC38EFD}
{5A1EA3FE-D97D-40C3-A113-82D524DB5432}
{88C0DEC9-12C5-4D05-8402-20C0479C280C}
{5DC02069-694B-48E5-BFCC-9F335CA399AE}
{2660A93A-2951-4877-ACEA-960F80667D91}
{F33B8AE1-1242-4BC4-9A78-0A9C72BE72DD}
{37B0C8BC-A422-41EF-84CC-26B2977AE497}
{39847E9E-2BA0-475C-B497-66977C7B94BE}
{1B9F4BDD-231B-4036-8214-2A926B7491AE}
{EE486695-5AC1-48DC-AD4F-71BCFF7FF4B4}
{39F83F9B-E28E-4A07-9F9E-E199CD634A92}
{461ADF03-5041-4A9B-BF1E-E0C91103EA80}
{B4B3A8E0-E8D0-4600-AE4E-7E91C919EA7F}
{12F77EE3-EB79-43B9-96E9-BA30D28128FF}
{CB665882-46AD-455A-87C2-446433EACF01}
{284D6485-082D-4038-A88B-FE12F94557D5}
{AAFB77DD-B293-412D-AAF2-01B2B8165029}
{69981331-978D-4F09-8705-55D6D4B9DEFE}
{D715825B-A80B-4589-BA1E-5A3FAF2876E7}
{FC9E1266-2D24-4101-8525-F2667785694D}
{2FDEEEF3-0536-4BBC-A90D-257B1580283D}
{763B815B-0422-486B-B30D-6DFDB7BE65E0}
{219FF141-6A57-4700-8BC9-E3774855AAE4}
{CC25B126-3A1E-4906-A472-0F1D438F7616}
{93F9C2DC-6847-422B-A05A-683120AF87A5}
{F9407E74-DEDA-4AAC-8CB5-2240F24F003E}
{F4881CF9-A7DB-4CD8-8C25-8EE9024245B7}
{4A1639E1-261C-4085-A163-374C2E14079C}
{6CE25CFA-8B6A-42BA-A25B-ED7335289DD3}
{E46DC5C2-E332-4B8C-94C9-296E76611D09}
{BF388C2D-54ED-4BD1-A309-4FB617D68A9E}
No antivirus signatures available.
No IRMA results available.