Static | ZeroBOX

PE Compile Time

2023-01-09 01:02:53

PE Imphash

eb67be19b81b44ee5931ef078192d536

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00001000 0x0000b9a9 0x0000ba00 6.56383129099
.rdata 0x0000d000 0x000b5cee 0x000b5e00 7.87093892148
.data 0x000c3000 0x027299c8 0x00002800 1.20752782677
.rsrc 0x027ed000 0x000095f0 0x00009600 5.34378717975

Resources

Name Offset Size Language Sub-language File type
AFX_DIALOG_LAYOUT 0x027f3d08 0x00000002 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_CURSOR 0x027f4d20 0x00000134 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_CURSOR 0x027f4d20 0x00000134 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_CURSOR 0x027f4d20 0x00000134 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_ICON 0x027f3828 0x00000468 LANG_TSWANA SUBLANG_DEFAULT GLS_BINARY_LSB_FIRST
RT_ICON 0x027f3828 0x00000468 LANG_TSWANA SUBLANG_DEFAULT GLS_BINARY_LSB_FIRST
RT_ICON 0x027f3828 0x00000468 LANG_TSWANA SUBLANG_DEFAULT GLS_BINARY_LSB_FIRST
RT_ICON 0x027f3828 0x00000468 LANG_TSWANA SUBLANG_DEFAULT GLS_BINARY_LSB_FIRST
RT_ICON 0x027f3828 0x00000468 LANG_TSWANA SUBLANG_DEFAULT GLS_BINARY_LSB_FIRST
RT_ICON 0x027f3828 0x00000468 LANG_TSWANA SUBLANG_DEFAULT GLS_BINARY_LSB_FIRST
RT_ICON 0x027f3828 0x00000468 LANG_TSWANA SUBLANG_DEFAULT GLS_BINARY_LSB_FIRST
RT_ICON 0x027f3828 0x00000468 LANG_TSWANA SUBLANG_DEFAULT GLS_BINARY_LSB_FIRST
RT_STRING 0x027f6030 0x000005c0 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x027f6030 0x000005c0 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x027f6030 0x000005c0 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x027f6030 0x000005c0 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_GROUP_CURSOR 0x027f4e58 0x00000014 LANG_NEUTRAL SUBLANG_NEUTRAL Lotus unknown worksheet or configuration, revision 0x1
RT_GROUP_CURSOR 0x027f4e58 0x00000014 LANG_NEUTRAL SUBLANG_NEUTRAL Lotus unknown worksheet or configuration, revision 0x1
RT_GROUP_CURSOR 0x027f4e58 0x00000014 LANG_NEUTRAL SUBLANG_NEUTRAL Lotus unknown worksheet or configuration, revision 0x1
RT_GROUP_ICON 0x027f3c90 0x00000076 LANG_TSWANA SUBLANG_DEFAULT data
RT_VERSION 0x027f4e70 0x000001e4 LANG_NEUTRAL SUBLANG_NEUTRAL data

Imports

Library KERNEL32.dll:
0x40d000 DebugActiveProcess
0x40d004 GetDateFormatW
0x40d008 CreateFileA
0x40d014 GetLocaleInfoA
0x40d018 HeapAlloc
0x40d020 HeapFree
0x40d024 CreateHardLinkA
0x40d028 ConnectNamedPipe
0x40d02c GetModuleHandleW
0x40d034 ReadConsoleOutputA
0x40d03c GlobalAlloc
0x40d040 LoadLibraryW
0x40d048 lstrcpynW
0x40d04c GetAtomNameW
0x40d050 LocalHandle
0x40d054 SetConsoleTitleA
0x40d05c GetThreadLocale
0x40d060 GetProcAddress
0x40d064 GetLongPathNameA
0x40d068 SetComputerNameA
0x40d06c SetCalendarInfoW
0x40d074 GlobalFindAtomW
0x40d078 GetModuleFileNameA
0x40d07c HeapSetInformation
0x40d080 VirtualProtect
0x40d08c FindAtomW
0x40d090 GetSystemTime
0x40d094 SetFileAttributesW
0x40d098 CreateFileW
0x40d09c EncodePointer
0x40d0a0 DecodePointer
0x40d0a4 ExitProcess
0x40d0a8 GetCommandLineW
0x40d0ac GetStartupInfoW
0x40d0b0 RaiseException
0x40d0b4 TerminateProcess
0x40d0b8 GetCurrentProcess
0x40d0c4 IsDebuggerPresent
0x40d0c8 GetLastError
0x40d0d0 WriteFile
0x40d0d4 GetStdHandle
0x40d0d8 GetModuleFileNameW
0x40d0dc HeapCreate
0x40d0e8 Sleep
0x40d0ec HeapSize
0x40d0f4 TlsAlloc
0x40d0f8 TlsGetValue
0x40d0fc TlsSetValue
0x40d100 TlsFree
0x40d104 SetLastError
0x40d108 GetCurrentThreadId
0x40d118 SetHandleCount
0x40d11c GetFileType
0x40d124 GetTickCount
0x40d128 GetCurrentProcessId
0x40d130 SetFilePointer
0x40d134 WideCharToMultiByte
0x40d138 GetConsoleCP
0x40d13c GetConsoleMode
0x40d140 GetCPInfo
0x40d144 GetACP
0x40d148 GetOEMCP
0x40d14c IsValidCodePage
0x40d150 RtlUnwind
0x40d154 MultiByteToWideChar
0x40d158 HeapReAlloc
0x40d15c SetStdHandle
0x40d160 WriteConsoleW
0x40d164 LCMapStringW
0x40d168 GetStringTypeW
0x40d16c FlushFileBuffers
0x40d170 ReadFile
0x40d174 CloseHandle
Library USER32.dll:
0x40d17c GetMonitorInfoW
0x40d180 CopyRect
0x40d184 LoadIconA

!This program cannot be run in DOS mode.
82Richm
`.rdata
@.data
;D$$tb;
HHtXHHt
?If90t
^SSSSS
r=`4L
Y;=x=L
QQSVWh
j@j ^V
URPQQh
t"SS9] u
;t$,v-
UQPXY]Y[
PPPPPPPP
PPPPPPPP
D$(Pj@QR
QQSVWd
t=MOC
j,hX#L
HtHu4j
t*=RCC
;7|G;p
tR99u2
Unknown exception
CorExitProcess
bad allocation
(null)
`h````
xpxxxx
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
HH:mm:ss
dddd, MMMM dd, yyyy
MM/dd/yy
December
November
October
September
August
February
January
Saturday
Friday
Thursday
Wednesday
Tuesday
Monday
Sunday
`h`hhh
xppwpp
GetProcessWindowStation
GetUserObjectInformationW
GetLastActivePopup
GetActiveWindow
MessageBoxW
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
Complete Object Locator'
Class Hierarchy Descriptor'
Base Class Array'
Base Class Descriptor at (
Type Descriptor'
`local static thread guard'
`managed vector copy constructor iterator'
`vector vbase copy constructor iterator'
`vector copy constructor iterator'
`dynamic atexit destructor for '
`dynamic initializer for '
`eh vector vbase copy constructor iterator'
`eh vector copy constructor iterator'
`managed vector destructor iterator'
`managed vector constructor iterator'
`placement delete[] closure'
`placement delete closure'
`omni callsig'
delete[]
new[]
`local vftable constructor closure'
`local vftable'
`udt returning'
`copy constructor closure'
`eh vector vbase constructor iterator'
`eh vector destructor iterator'
`eh vector constructor iterator'
`virtual displacement map'
`vector vbase constructor iterator'
`vector destructor iterator'
`vector constructor iterator'
`scalar deleting destructor'
`default constructor closure'
`vector deleting destructor'
`vbase destructor'
`string'
`local static guard'
`typeof'
`vcall'
`vbtable'
`vftable'
operator
delete
__unaligned
__restrict
__ptr64
__eabi
__clrcall
__fastcall
__thiscall
__stdcall
__pascal
__cdecl
__based(
 !"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~
=d?f09
ya{EFP
#W'{1\[
nz]sO
\u0dY $
*HX?Y7]
nCZ)=*
:53Jw=
LiS3Y,n
*+Q(%$
*VbB`{
CDrV;Db
4r`b_[
Rj?Q]5
d:T:p"
QG<c^e
\&tM@o
%GEQ%r
3Duz5}
v[uS,$
"(1{:[x-
J3v@KuP^
6!K?'Xz
)@a>}_{D
pybEI4Ht
W?z2Q0
<[tu$X
}r_#oN
0O`dCj
jD`Qyx
gH706#
(V}0!>
xSLD2>T
B6Al/V
ji5:_M8
-a5-^T-
@s U:Do
6yMhbW>gSYR
wlm0G6
v9q#G4
XRa:$14|
Qr8{x){
=Qq:+X
zprV_C
Ktvhglz
hJhS,_
g}B|uu
+H@p/^
?a&ZKQ
9"v|w$
nr}(GR-x
~/W$XJ}3
x\cUn[
?uiQM#j
l{TR<1
8r0~"v
5kHb\Y
j|T*K
k8Bwwi
+E<VJ5
v Z!ys
I.a5{5
-Xw`9s4
3ZAEk5
uM0T/Z|
ZGO`p3
o*N-{[|v>
JcH~TJc7ml\
e(>30J
Ov)>3+
I#{^8f
-ds{1\
64Al64`
Jg)lj/q
P!f7[?PG
s5`U*J
_u~+(
:e68q%
o:u)>u
D,:mdp
Vgy)yC
vg_o2t
kqrBG0
(\+_y(
xTJRA
)T>ci[
[Ua38w
92FQ@$
59rSAf*K1
{jUHMX
(NU~a=%
vjak'O01
J+DImB
A3nk'
oE+\/%
t&3(TB1
?j_<eG
(T9Pfl
}n]v;XT
RX1',b
`?1T"yq
f=cv1}+
zs],z].
m=o{\u
%i>a`1<
wF)Ml=
m)8?aC
n6z>zA
cKO~72?
y:RG$(U&^
.j!DC0
asEja3q<
083&*[!7p
||Q=y>=
.G!m]3.
yQ)W-a
zePD(c
C{j?yZ[Mq
O?Wy01RV.;
IO>.y,
/F~s|2r
mL@*5/
3$2X2i
Jdnz}T
;CK!"R
k=sp)0
%NKH<jz
dK:4La
hLVo(':
h 3w!C<
O4e-2U
2NEtk6oX3W
&,;!Z
79G`{\
Wa}^mP"
J a"N_
jp?$t
Mn~-G<
nQb4*NErP
ydH,'[
W=9Z!RL
mmq;9p1
`*E2)=
dGm9sG
peD'XV7!
ViXxeU
En"03w
&h1Hw
[yKW~C
lN^Ygf
Eutd*o
)Xs GN
hbs(f3
H:-qBL
L@Y%ZE
ILI4M.n
!>UbV]
F0tG&"
''~*$M
Fe^;PGD
Z4CP:3
x58h1'
(pv[i
v (xWm
Q_M-Y5j
A3R7$U
@UH[Q]k
bbP7@[
^[,Po*\
F)OtU;
ama@R{
c9?0qx
8 gms|
0X{>VJbS
uuVK6R@
JV_9Cs
-5]`86
nFiy(J1U
emzCiI
RF/P&vl
rK:Yk$aI
k7*}~a
-@;\d#
<</?GN2
xZYqP,(%
5sT+p=
NW.JXfb
!] MZt
RrVJ>l
8y,;$UC
[X4I^w
:m=$IT
N.%9_2*)-
n6s83t
-&p?pt
%rZVw3
vxM9{3
t#:<A%
gvXzstk
(kD}xcT
"v)Gr r
*Os0e+
*,Vns
&.JKg!{
prbvE?d
`s'Qk?
Y)Zbn8{D
py:~#Q
{|.,(A
28m|fA0Q
Lkkk?'
t'zB;G
T7,_yO
3W,)D9S
3H._Kq1
0RmF8t
lah8vlee
I/oH2/bU'
-&*?6$
`JP}"*
YF%s}[U
8oZc1zJ
c]}c0|?p
8h*Roy
=<;$u?
a$u%3)
b5nnwQ,v
.T$NUu
#xBHfJ
(.Pb 8lUQ
zb(K7`N
VB"-Fq
puQMTb
h/b8Nj
lYPps0
,xg2nXQ
w"ZOFdA0
q<!0*zt
E>!'vP
t)yes/T
J%>Lv
G_;=o
}\y02
?-W7.]
3t.&1ZUt
qD>V{I#
1s89i!
*74Mu4
6_`byl
Vpg8jITBE
-QI"F.j
)%X8Bk
Rk5h;ZJ
e9{$$V
<'Mo%v-K
@K[a9&
4*3Lx#
x/Sg21i
/4U9Lp$V
niQJ!L;x$
QJ`@~k
&]z*GH
Gb<<7\
|idx\[
WD5k)s
F"#DGzU
#h<JQY
jp6,$OCb
FzL"L.
U@m3E`
Md4CPF{
ZJ<aS^
7;i6=l
`?!U7Ir
4H? V2=5
~83{2y_
8DzQAK`Y
s.YVBD
+yS&R
CbQ?HdE
uy<z(j1
{Zh$Zv
-\m["_
5uab~>
T8O=U}
8-Gx:+
Y)NGk6M
_9D-RK
`$5+3.5
i;H'?[
9c$mJU
D:CS}&CF
h6ok/SWP
\_Lp1e
M7GO9U
:UxSI
*:5k<aG
puX_*s
aK*xv*-Q
=e]1VgiX
FDA`=D)
)iF+p3D
N=Y&{ 8-
j04hw/n
Q1\Qk}l
*p%Sd.!
=4.)oPJ_
k+#2$?Y
xBdV`5a
#X]QkA)
|W)@s4"e
Kv+oj:=c
g.5'jz
Z^Vo91p=
ME/%8i
B9@2/'
G?X%?LKb+
-(Tr>Me
6\cq&I
>*~E^~
^4)NsrG
rn,,df
_9^s5>
7r)6-K
s@<d3s^{
To<qNKj
AEWxx5:7
KXT~%y7)mg
s;GG(2
aF9y.Z
CV]e$n
3qKsX;
D>`RCM
`X2.$(
[1jmTm
^8j5OH(
&9kW =G
^xu$`T_
l>M0CI
%? i0[
{W72+|
>BxSQ(k
ZHe# <
HlhY0{
5S+[cui
rY{=}B
!z@hiR
Z-CTp<
$\#nLq',bUU+$
#HS-g(
h)Xi_S
|x9&.,
!ng lk
Wv5ROi
C&Qlx6
[mZM/b=
z@A8sC
]Az9vT
~jBCc
:M0bE59>o
3DOZ\N
E~ph?
zIt1\r2?
11XEqn
B_HAIA
'dS[*\
t,+pWQ
TP#*^:
$>;vfk
|Enx"K
r[^XfP?
8wlk37q
9[DutY
r^?-"zQ_
iYh=Ir
Ks/T4'
0h9Ox&y
57iM9M
MS6>dH
>%E9n'
1]B?f^
7KHf-R
6P^?6y-f
igl@K1M%J
s}`^Hb;
EhJ*/2
C51eB7
|pGc:xzm@
PNL tf
:c3H_X
'RyL~I
@vs<p-jy?
nhL2zi
|._N\aq
fq7&n:
u-4SKOzE
=v3aB8
o{ZyNp
>%,#]`
^lME\.C4
:0?Hv ]
t7&fIt
.M?\1&
MQ1T8-
n8QJ<#
+uPf1Q
3>B_I:
2IY%;L;
|Vs_PN\6>
9ipE"S
56Q]@j
8S.bo)
k,(u_oq
,\nZu
|`e@1-2
3J{0X_
0*7UqE
}Q|&U8
3OyJTp
A&D%v.[
.vv? )
Q"V9w!
*@p}HR
Dfd*r?
,z2xLxCS
>9X\Mt
")m5!A
OSND&d
l]N-Nh
<J)VNp
:` ||l
v{[-TA
af1B'V
9Lo2_dg
ktxJTw
't@Uw!*B
Ve=TD
N*Lt&}
ziViSD
e{5p9Z4
Gd"}.u
A`C/ylYKf
eZpst=
:=!PL@
;zo55T6
B!3n8e
UsswUK
_VGj)2gp
tgv03
I6/D?#o
wj"FO.
11<(pi
bNzdA'
K/J{:
Ki#[no{
{/_!kc
0WgK@e
"fI5IQJ
"F~*9)
=5hQ)MS
fynfXY
#]Y>tw
vDXQ;)
7gRi1G
iYt,Vn1&=
l#T8Ef
.BjKaC
Jx'30I\
iFj]3sq=B
/<{Z"c
l@7b?9
WJ]CLx_
2:<!KT O
F0YI^i
'$2e|"
KBq9SJ$]
:&-D=4
La<jeS
uE"&AC{
b}:nx#
QX6&s
*Jxn/BI
ijdlO+
$`6]o4
.$kXW#
E&DgPk
;x*IPB
unn0H\
%rgjEj
=tp_"Y
E7{z;+
^run:!
g.CJ)0t
X4zb#!
0~00mpv|}
zo_}9o^$5A*
B.l/%j
Q/b&7@
].ueDF
~ox'@o
fwC.jy
~i (X)
$XYL+j
D,$c^gC
^g&;^7%
l12\L+i
-m,R`};
Wo8yA40
\Ia27Awo
0M(cBQ
8a"S6: W,
Ay~h=,
x'*/wX=
^c3@Bf
DFK-U1a3
m.&&D+
H8]<~ s%XN
!Gp\/o
Kc+'+v_
N<u<:9
NI/i+-HI8
wn4B>t
UAl|L"
|q_HY(/
y]1T'd49
ZX<[4{y
iXn?.J
uRee<\
CNW<`n
nX#]xY8
yp\aAg]
_j2 (g@
y]y\27
9j~tHY
y[i+XD
uhN`(y
RO2>vT
@sSa"Gp
bcg_yf
,uQ9)HJa
g7&50E
NNL:]'
;Oy%_M
b{wt{9
/~@Ri#
1U.&ZG,
n\qr9j
[-8,AE
` Sw=N
V~Psodu;
fP?KFM}
0|T\X2Z
L9_x2:
{RjMl\f-
;g54hN
AW vbu
*5m>{b,'
IW~PY9W
@gF*_[
\z,y9.
OpS,0
srr/S
.#R=1*
|vg#aL
MZb_zK
2MSu?2=
8"z&tV
6yyjln
>oB3?PI-y
~KXNob
Wa[xIR
G.%M b
5!*S/W
P><q)K
2f2 ]\
DC"U%@E4
P`/D[Q
pcPn^R
fL?LO
t_b7-#E
sy|p,&S
Q)c:D5
"|_MQH
1wW w~J^
Z6qT5y
yP@!LG
bIT}UE
+w)tTe
agzU4-
1"k >F
GpEv?h
OL!4=.w
6A#^AG
aKErJQ
WEee6.
!)FQsx
A=6`z
M|a*p_
;#%^om4|7
7n|ryf#
[*[Ttaq
j*i)ksvO
>e))cs
1Uvw.o
,IM=Sv8z
e{t5I$
y,Xb8j
x1t2y
lx"MAplV
v3n*+
XeEZ%F
6R0a7k
ZUr>#\
sG'^E4]
69UKA^
aVA'D
u8|A4Q
g0F ta
cjY|?"
c*=3=M
rdntF;
g,.Luw
w{}.1A&}
6|:qC]C5
/AK e+
vCRp`-
(?nLY'
!7^O4"S
"WfLOa
OozTseIqT
'!aC=K
G*lYQZeiz
(%v?Ll^
pfAr74/
!+3h%.
^iv>P.#
bK{6q
,v|}?"
6Yu{O%De
@vLMRf
$!*XAnX
mCn=R;
LNHUcn
cBN{lGu(M
&Mu.+M
&h8_~v
S75CcW
C!/'!2j
@T\Iz}
J*}5/LC
XBhOrV^
13m~+G
|),{!]
2G(G}^
Q,$Ia7
N5&hu%
pKi}SR1
)2y@5h
R%^$2H
7s5uuD
1kl>xQ
ms~7(p
h-L-Z}
?}_2t5J
5fNlBX
q;{>Ig
1b9rs?
0apof;
,NZ-T0
\MrrSXF
Fib}&4J
1\Pv`(&
Miqj:+|
%U'Fp^(
,O*6
F^y=f]o
Drgo=o
3'GEl
^0kOtx&#RL
!$Fwn/Z2S
nak_\
MVBNig
?[OA.a,i
TR1O~9j
WAC>?o
1wcM%M
nx%zmj
kG__/K
X6@W`t
yRDB5t
@6Q,:5
bS]?n}-e!Q
d'cN`{k}
V<UnUG
g,|TI^LT
3zR)|Q
(%ak{W
kpbRSq(
/Nn0p,;/
S<81Pj
T,}[ 8
Z+eZ>KE4
?lME5c
^JB$g>
fO)u){
1CqfU7
w<~4z'vu^
"K2Tg#
WT{<R
9"K?q<
zt/Be1
Ld{2CI
=eM$B.E;
bQ3_WX
8u<Yi+
FcIZ4`p/
-?-T\5
iP]a'm
*TIv9MS
Rk-qdF
R0=9y
hS;GH@
r/ssiEwd
2dV"|Vw
T4}?):
E*j{P#db
Gsl,8P
F9MLRi
iNiHfU
/BU%|~;0gm
gZ9$gfi
jgL\!K
5*}^`y
*;*&Ve
J]Tt)w
p?//0mk R
A0xnQ=
QY10L!
^,@'P6
4Y4j]c
1bGhyR
3*]Or
~Ro9O
.{&5ot
s!j}$v
tHzf:Q
# 0VPFn
6Fsl"lj
W4T"9B
yCTQAw
geqZ5o<
v8N6x1
+OKw:fC
@hH <%A
:tOX$$
!sAmUp9
EZ[r
16-<md
ah<eOe
hL\ymb
b7\L$h
3',S.L%
/KYy}l
rG|2yp
8,zp|J
Ek.3y@
/u`nCI
MJT C9
J ,;<+{
0y"Ev6
7=P"*-
q5aoAi
g}KoIS
}#'Mb!%
yc#>'=
jrCZCB,
Y5',+CrXe\
~skpb#
AB,*lt
e}/FSS
]Q3+We
zjw`)Sj
uMuoVL
iR9#=/
)5y[BD
@.9pfk(&
TdwVs?
"_`*b_>
QC)}@*
[&.NMum
M 4A (
BP0U*6
s:{VX A
2[c3`p+
Wx~hC]
>xN+"'!
iA+lPm
z;&&*.
r/}#/b
U`pEc=v
_ se}r
;uGd!jJou
s+59|(
3@xoc{
ODv=+NcR
~7};%
{?lMs*
,F<i,\Z
AC0Re%6
l#F8<*g
=V\pr:
/p&cWJ
a@U}Yi
rO#[jD
NEiB%8
+q6Bxt
#)FNC
U;`jLwF
c+ARgcbAv
lBCx6n
6+0q\,
PE6!v
O@N#m[
I3xpH'
B|s7\z
j\`{U!
C"ursVG
U(*yRd3
hEVr6l
6H(abz2
L+A>f+K5
s7*)CU
bo3<LX
NhhIBF
yu,n4q
*lPJ~3
Fz~Bzw
|'ZI\=
T:Uvjq
/pQ<1T
3STtwe}Z
f5NZN-
t0./Rb,
ht>dxx5
k6BF\}1w
xx">xv
bah?s|5L
M>+O\/uk
%${WI#
Y~y_a+
sD<ue7
KB|Rq
c?)E0@
vI% B3
`9@LQ!
3P:3(U
[Z(Q3b
;_r2oC
U{<Rq
:]D]'K
XK`kqW9
#cQqi$
!]q~ll<
T2RuC;
uuIF7DRW
^+64uE
zSf~Fv
ek*_dk
qxNf=!
%#rP|_
2'\QR"
~s7R0Y
Q+JMA}UY
*]:X~"
.FrH'<
7;$g#I
"tSBk7_
B<2cF<
|HOE`t
{JQNjr
zJP+1w
&<ZexmU
9CcfO_Gph_
GeO_=*n9
y`n?@V
MX=R7V
""#\;^
=|nc?b[{
#%Bk$]
foXX-t
bF~i=w
oy~R'I
k#uXs;|
;i<|.U0
;%`/#Z
<x/@_B
5X'11P
xk%CD*
Laje"*
a)mW=?
N#*;$V7
kr.g'}d
BaXY`c
uE_5~z
nsMXQ,t
-`]1 $.
{QI,Me
Ry0F:5
YV{y<F
9i:;Rg_l
1DB+/g^[k
f}S }2
1#X1!}(e
`!,;Oy+
^fP}A#
+c>aEn
^)``[FE
C]5rs"?
[{Zp9{
.y-r?*O
nAA'.KI
ER`h+z
(6WD.A
Yv_Qy@
mhv$w2
B?N[eY
5h[S&fM
6$#.ot
m.8DC#5
I}:+@0
-Qn{7&
n>9Dca
+0M*{i
:xTUp>
-n;em6
(37<2Z
7LkS{i
'g2y=<%
4|~B"V
"'^dA<
O*K`:t
QY0|/y%o
ON+.(_
XD`>X)
Z1Sd h
~ftk0r
)G1ZHh
9L_6;w
`<`)sh
UC0?u
u5?MK>>=Z3
sX2SZZ~
_Hs;=Jq
!_3U3Fq
g?;7C4
:/fAQk
)%96N}
fn7^c{
:5K1M<
R|I$'
$=(8MP
sS"rwB
G(H4gD
>am$o>
('f6@|F
P[>`-;T
l5#W'Q
kAqE+
Q&9Wz3n
{aHJ--
LehTKI
*Dh 'W
fR^W;N
9pY.f
%/|c.x
VM9JR
K\Y"%
VI6c+*
6<"qA5
K`-<k5
z5aeg>
)\3X`%9
c^2)t|i
SRmYP#I
9z3N<s
p0mM8OlX
;x,cS[
(.0in
]feFth
q?]W&t
);Rbh>
/0a [`N
\MQ*RK
;>Lab)~
z/80,l6*
&ns$Sn
4q}/aqW
_gx[ko
h=gIf`
j}D{Hh
7DiMNg
;mXIm5
{V Q]%B^
g10qiTk:
JNEw$O
>W~X$X
t20TB0
D3}=M:;B;
lR|)wO
OJnJBw
-lb5pk^
ZWYrtL
ru>v3`
aSjr|jH
mm+K^A
947A/~
-g@Fb_
Z{:H-:h
C /z?
I9WF]:
gq>!M``/
}bfmFBV
[>VWvj
=?N0\
@rg$>I
chUp2l
IkfcgC
PrnrW<
KTd8Paw&
E&V!S1" V
Q9+L 8|
IAG{d;
7:h que{
G4&^c0
/vP*fHBA
I%*i\&
_"'FA&
EiGX0&
[=0W3
CvIj5E(W
yv(KY?9;o
v[F#\_s
{!^SY[
<CXKIw
{.I>j*n
8&)WN.#
2oXmdy
`]Z_^@
g;6U7U
aBk'"F
^!LkJG
]D8!K!
yIDIsFs
X1p'|
5>Z1b
wS&r@~T
f3_.A*s
AO<}V%g
6uuI,N
O6-NJ_
ff<~|ly
Psr(t"
hLJo)$
|QtB+G
qCP0;
9N/oo9
&[D1,o
zp8>FW
ylL-bYyVm#
Uzj~TU
!fFoxV
0H2#TSd
\0N{<0
e4,`c$
I=m_Q`
7G;Cgr/
)>Y8ZB
[m#+>x
qrazMT\+6C@2
@~BEvH
bGrpMXv
boq0o-4
z,O*KDS
lT?v=/
b0S%Iy
YfWJr%
PZ*1PZ
v)y^y;
%xy3KE
)1Q]m[
/.B&%?Q
N'{%L/
<l$8r%a
^NguYqL
'~j5H<
XR-? @m
@hgDHc
A?nBpa
MWKHJR
PxlbO"|
i<\^"f
&7U2d#7
IRI@@7
%KFAV%
Pd'()s
^u$J8O
vekXRK
rG#C&@
zt6lQ55
|N4 6K
?_L}u
`+&fZV
%V%o'_
HGA2e%
8>;J`h
^X_r\}
@-Vt6)eX
=Rn?6@
+FWItO]
g3nXX$
pp+Dk|
xXU}RvFw
623W9l
[p/ -O
-38o=cg
=bRW;n
H1g>t/
EO,cqwL:
Dy]57yD
k(ge4Y
SKZj[D
mdV/x&
/p)\;Z
Qx#(J,
9La3tI
(]LOey
euf*u9B
$Wj!Ws
f%=}/P
vr_$cLYFB+
>%y@?4
rqxuPo
PhKIdz
77<vXKl8
_|eqT6`
v6{Dtu
_BG)}RU
/ERQ%6?
O?0ovG
8.}a@@
Y-EO1X
n2QW1[
nFOPNrS
LhAh1)c
cflY7E
\MZp4G
*5LD,wc2
1o$T4f
RgS'~w
w~0u-h
8+_|<F
<"EgS2
4KK5<e
4LB3!?
>cm'1[
\{.bF4
<Rl*&en
ni+U$u
pdHpLL
6'#o.:P
YcFs[T/
fX=GP#
*N(,v`
mQ]$C"z
{zakJx
y+8zc1X
b~r;&H5
JbIoMw
2TZmvW
=1K-z#
4XP7oI
XqxPXS(`y"
KHq|8>^I`
(Z!l 4
_rAgE)
)+yO5&
0;>C8H
G07HnI>
j_%$BO
b6J0yTMQ
xi``jE[
~$/vkO
4XVF^8
LQf"QC7?
>e7H0Z
xbT_0/
/aPPdt
fiZJT"
CS~+fP
=-jlZ{R
k,L!:n
ZHUW5>~
R&WKaIU
|WCADF
LNc_8u
]=0y$[&U
#qaXDdb
a&Y 7u
i.Gu=p
oPXu'tPj!
%+u`/*S
_()\tw
X/xV<b
t(sX+v
Un0/u@
{z^VY[
02i1B1
S]P(i\
C6sGc-d
2,vUAU
inMMZ4y7
v8||i\*
divit pejadov
nawiyadok
0 %s %d %f
fipelidivukaluvijahevavuzuke
invalid string position
vector<T> too long
string too long
bad exception
DebugActiveProcess
GetDateFormatW
CreateFileA
GetConsoleAliasesLengthW
GetNumaProcessorNode
GetLocaleInfoA
HeapAlloc
InterlockedIncrement
HeapFree
CreateHardLinkA
ConnectNamedPipe
GetModuleHandleW
FindNextVolumeMountPointA
ReadConsoleOutputA
GetUserDefaultLangID
GlobalAlloc
LoadLibraryW
GetConsoleAliasExesLengthW
lstrcpynW
GetAtomNameW
LocalHandle
SetConsoleTitleA
WritePrivateProfileStringW
GetThreadLocale
GetProcAddress
GetLongPathNameA
SetComputerNameA
SetCalendarInfoW
SetConsoleDisplayMode
GlobalFindAtomW
GetModuleFileNameA
HeapSetInformation
VirtualProtect
GetCurrentDirectoryA
DeleteCriticalSection
FindAtomW
GetSystemTime
SetFileAttributesW
KERNEL32.dll
CopyRect
GetMonitorInfoW
LoadIconA
USER32.dll
EncodePointer
DecodePointer
ExitProcess
GetCommandLineW
GetStartupInfoW
RaiseException
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetLastError
IsProcessorFeaturePresent
WriteFile
GetStdHandle
GetModuleFileNameW
HeapCreate
EnterCriticalSection
LeaveCriticalSection
HeapSize
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
InterlockedDecrement
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
SetFilePointer
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
RtlUnwind
MultiByteToWideChar
HeapReAlloc
SetStdHandle
WriteConsoleW
LCMapStringW
GetStringTypeW
FlushFileBuffers
ReadFile
CreateFileW
CloseHandle
.?AVlogic_error@std@@
.?AVlength_error@std@@
.?AVout_of_range@std@@
.?AVtype_info@@
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
.?AVexception@std@@
.?AVbad_alloc@std@@
.?AVbad_exception@std@@
@@@<!(
@@@@"6<!yO
@@@""66
dX::}@
!!!!yyyyyXX::zd
???!!!!yyyyX:::ddddd}0
??!!!yyyXX:::dddd}}
yyyXX:::dddd}}}}
yyyyX::::dddd}}}
yXX:::dddd}}}
/////<(
::::dddd}}}}
x::ddd}}}}
ddd}}}}
/////bbbbWW
////bbbbbWWW
bbbbWW
/////bbbb
////bbbW
bbbbWW
2ffffffffff
P%%%YY
%%YYYYei
llllllllll
2ffffffffff
CCbbPPP
CCbbPP
nnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnn-nnnnnnnnn-
-nnnnnnnn
-nnnnnnn
-nnnnnn
-nnnnn
-nnnnn
-nnnnnn
-nnnnnnn-
-nnnnnnnnnnnnnn-nnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnn
iiiiii
iiiiii
iiiiiiiiiiii
iiiiiiiiii
iiiiii
iiiiiiiii
iiiiiiiiiiiii
iiiiiiii
jjjjjj
mscoree.dll
L(null)
runtime error
TLOSS error
SING error
DOMAIN error
- Attempt to use MSIL code from this assembly during native code initialization
This indicates a bug in your application. It is most likely the result of calling an MSIL-compiled (/clr) function from a native constructor or from DllMain.
- not enough space for locale information
- Attempt to initialize the CRT more than once.
This indicates a bug in your application.
- CRT not initialized
- unable to initialize heap
- not enough space for lowio initialization
- not enough space for stdio initialization
- pure virtual function call
- not enough space for _onexit/atexit table
- unable to open console device
- unexpected heap error
- unexpected multithread lock error
- not enough space for thread data
- abort() has been called
- not enough space for environment
- not enough space for arguments
- floating point support not loaded
@Microsoft Visual C++ Runtime Library
<program name unknown>
Runtime Error!
Program:
KERNEL32.DLL
HH:mm:ss
dddd, MMMM dd, yyyy
MM/dd/yy
December
November
October
September
August
February
January
Saturday
Friday
Thursday
Wednesday
Tuesday
Monday
Sunday
WUSER32.DLL
((((( H
h(((( H
H
CONOUT$
kerudesakafoxodayu
gusidawocuxigumakexi
kernel32.dll
msimg32.dll
zumuhejofohowexadilebapi zayubaca tojivesavohutu zah narat
AFX_DIALOG_LAYOUT
/ P6pL
,/KPip
/-P?pR
VS_VERSION_INFO
StringFileInform
040504E4
FileVersions
28.93.75.33
ProductVersion
95.83.76.15
InternalName
Slupido
LegalCopyrights
CompanyNames
VarFileInfo
Translation
RFaz yofojasiri gir bibalasihotucah danisosacov majuzovizek miku yutaye bevidalafuzHWetadixu gabep cikamihobize vejifihezutel petasunu wonetaj cusobewawikem
)Xuyidurez kosahagaced hotomahi kiromakepifYifufoy yeg wirodij cepixov lamoyimojafeju dadavije miliceyumigococ cavuku rasejeluxiv fumogumuciwukov2Yezukipe robageyekup zonehux rajew polovesuwovabek
Tagotaba cicumufisu kodeluromahXupurumusa zoxugarix yozam yexasuwo xiyeratajunujut nemayumogup bukac sitos sozizapojuhe fomagupanikubah1Devuxulikuy jiban jupadovojekoke haworum labilezuWYabisica waponibecu pemijozedutec guzafa kurefamuj bocacicud mafeno sizuzuluke xohazapo/Roribicayo kugoz kaxosuf zoxoga ziw zepeyacuyug=Selezekatireyen piroteyelirad tifav lametutelewone mixoturuvaMLuruhog fuhikakam hudunoxopive lecusupepit giyo won tir bipufesixak xolukoxarOMenezifufefumu jib sibarebejebo xab sudobozoza cih teduciyefe sazu dumukabusexi[Gawod xafem ketoyem jeyadawejetik bixovabike xevahipeja jiwarixax veburam fusodi tucawivozo4Nabisihas figid ximelavapaha lagun yukomazijene fafuYDahiyeko toyuhero fesovuxuy remis gepepeha tez poliramuze gubobodo zazena kugeciwadagavow3Hatumewowagay powavovo yaxoze zuyeyadufiyofun sifac
Jilure paxuriyotapi
Wisolilusikaxun
Yamoviyuwideroy wisigejikoseZLifebalufamudeh verof sebirorenexewo pedorutelami levijog wagezevuhuyige regabamozub gazojENecifoyefuzopi setapotakopi sevebevewodo sijoh sokawuxivaw vixibidiruLSewexeh kizaxele dakapizamomafi dujuto vurahubic zapelulufabigub gig jiyofoj>Dunib gibigapi pojo jozukitec lihop sanewebubusip kalitazajohe2Cigadanicijuhog mib rawe puhigelibiv cewovubeboliy;Sizufixaj fad gew role dilakasus vuzefozohuhoj jegafinasigeDBekener juponu wimolu luzosepa hajuko guzivuhuhijidi viwejumihihejev
pHoxaludof dipedireyunamex neyebiyituzage yuter wiyaxe hifijuhereluya wetumepivolet juxigob derapaketax siworijax
Zuwinatara xozezohomofariUCovaxad focekonef bovojugamuji tisefosol ruyupapopiz gahocuveko civapef muhawenifekoz5Son vimosoge xive melezid xuwasecu ber mot xecikikakiLYuramosifamo dacohehosebabab kakogaxupinovef rimidepamawi raxacedubi zurawap)Humu gejibolid bipuseyucicoxit gocivelura
Koma sibu wadefuxipuj zeme
Terodosaza hevujeMMixo yevug zebu rigimizaxiwabe puveyi sof sacubehasew tekujecoy povayox rahagLLenin yeyusuxubesop jafucoguco yuzetuyuj godano jikos kibe miha koxehenunoci+Gofilofomayabah viyadijazajenix xor sesixef_Ladinibigatule tehikemoger catojatisikemap lupala wiroyexogojitu buhejajeda kejomilaf yasinisambKejijuralo tiyunul nale kahozaxaxulela gajateferasisi heretogilita hedoju yulukugozozem pemirifola
Butig fazafosul xizic
Vedor bodisuxiriwot
Don kowaCDuva sadaxowaxujozu riyamil mow dutoganilajunac bitonopofafo raceke8Wujuzehigukule huhupugoto yekugadoy zeg pakopuh pazemaza
Antivirus Signature
Bkav W32.AIDetectMalware
Lionic Trojan.Win32.Zbot.m5ir
tehtris Generic.Malware
ClamAV Clean
CMC Clean
CAT-QuickHeal Clean
Skyhigh BehavesLike.Win32.Lockbit.cc
ALYac Clean
Cylance unsafe
Zillya Clean
Sangfor Ransom.Win32.Save.a
K7AntiVirus Clean
Alibaba Clean
K7GW Clean
Cybereason Clean
Baidu Clean
VirIT Clean
Paloalto Clean
Symantec ML.Attribute.HighConfidence
Elastic malicious (high confidence)
ESET-NOD32 Clean
APEX Malicious
Avast FileRepMalware [Cryp]
Cynet Malicious (score: 100)
Kaspersky UDS:DangerousObject.Multi.Generic
BitDefender Clean
NANO-Antivirus Clean
ViRobot Clean
MicroWorld-eScan Clean
Tencent Clean
TACHYON Clean
Sophos Mal/Generic-S
F-Secure Clean
DrWeb Clean
VIPRE Clean
TrendMicro Clean
Trapmine malicious.high.ml.score
FireEye Generic.mg.f29bb9918f380304
Emsisoft Clean
SentinelOne Static AI - Suspicious PE
GData Clean
Jiangmin Clean
Varist W32/Kryptik.LYK.gen!Eldorado
Avira Clean
Antiy-AVL Clean
Kingsoft Win32.Troj.Unknown.a
Gridinsoft Malware.Win32.RisePro.tr
Xcitium Clean
Arcabit Clean
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Trojan.Win32.Strab.gen
Microsoft Trojan:Win32/Sabsik.FL.B!ml
Google Detected
AhnLab-V3 Clean
Acronis Clean
McAfee Artemis!F29BB9918F38
MAX Clean
VBA32 Clean
Malwarebytes Trojan.MalPack.GS
Panda Trj/Chgt.AD
Zoner Clean
TrendMicro-HouseCall Clean
Rising Trojan.SmokeLoader!1.F900 (CLASSIC)
Yandex Clean
Ikarus Win32.Outbreak
MaxSecure Trojan.Malware.300983.susgen
Fortinet W32/Kryptik.GYGF!tr
BitDefenderTheta Gen:NN.ZexaF.36802.Zq0@ayKfg4gG
AVG FileRepMalware [Cryp]
DeepInstinct MALICIOUS
CrowdStrike win/malicious_confidence_100% (W)
alibabacloud Clean
No IRMA results available.