Static | ZeroBOX

PE Compile Time

2024-05-21 18:27:48

PE Imphash

63814aaf116ba6abb6496ce4bcad24c6

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
0x00001000 0x0015bbc8 0x0009d200 7.98357716021
0x0015d000 0x00027e32 0x00010a00 7.93660586335
0x00185000 0x00004930 0x00000800 7.7892364398
0x0018a000 0x00001638 0x00001200 7.914128854
0x0018c000 0x00009858 0x00007200 7.91177725008
.idata 0x00196000 0x00001000 0x00000400 3.42439969017
.tls 0x00197000 0x00001000 0x00000200 0.181201876782
.rsrc 0x00198000 0x00001800 0x00001800 6.54226088324
.themida 0x0019a000 0x0041a000 0x0041a000 6.25140538836
.reloc 0x005b4000 0x00001000 0x00000010 2.47460175271

Resources

Name Offset Size Language Sub-language File type
RT_ICON 0x00198100 0x00001060 LANG_RUSSIAN SUBLANG_RUSSIAN PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_GROUP_ICON 0x00199170 0x00000014 LANG_RUSSIAN SUBLANG_RUSSIAN data
RT_VERSION 0x00199194 0x00000310 LANG_RUSSIAN SUBLANG_RUSSIAN data
RT_MANIFEST 0x001994b4 0x0000017d LANG_ENGLISH SUBLANG_ENGLISH_US XML 1.0 document text

Imports

Library kernel32.dll:
0x5962a4 GetModuleHandleA
Library USER32.dll:
0x5962ac wsprintfA
Library GDI32.dll:
Library ADVAPI32.dll:
0x5962bc RegQueryValueExA
Library SHELL32.dll:
0x5962c4 ShellExecuteA
Library ole32.dll:
0x5962cc CoInitialize
Library WS2_32.dll:
0x5962d4 WSAStartup
Library CRYPT32.dll:
0x5962dc CryptUnprotectData
Library SHLWAPI.dll:
0x5962e4 PathFindExtensionA
Library gdiplus.dll:
Library SETUPAPI.dll:
Library ntdll.dll:
Library RstrtMgr.DLL:
0x596304 RmStartSession

!This program cannot be run in DOS mode.
` 2~
@ 0I
8
@ X
B.idata
@.themida
.reloc
]$I@JS
*sI^tnd
w>4t[:Y73J
n5_%nU?
Y{aA.Zb}
?C'yI7?
c?/|-G
E>5T"9[^
]:tnBAn
^m:[,1E
^}k,F
tK((M+
@D"amlF
uCH0P?
g=NUQT
.k}yp5@nYH
=#Gomm
%22U>gW
#E^Ps)
=:$EE2
`<qkf9+
t,1=cydK
<(t7<U
7#_dS:6
/K]5/$
G$\=rc
(uS/.oQ#9
Ma(</MP
VV`f)
[~~fCa
wxMmG$
Pu`Esq
97/zSZnC
31QcqG
KC!E8<
3hh9|Q
vlU;9!
%ijZT|
>U2,W^y
-D\qW|
4|gFZ5)o
Ouv@-?
o#J#zYyA
{yR31-
z*Qd_4Y
*p^,l[
Ng=XtF
*Q~_;1Pk
J.p/,+s
\3no|7
dR"L]?s
+0GCA^w0
8z%a7*<
Y\<xk'
JE"r0m
eq@g3d
DM_@~P
cZ5//w
5kh{2f
KOMCb+n&
FHT;(J
uLiRVq
ju:W9B
o:kqJ
B+zwOx
9J,*jq;RvWxd
j^7=7"
sOg()S
/),Pzl
B)[QIN
;7gz1-
u(D=&\Bq
i1)9*k
L<{L'Lm
s2s4Y*
}}.BfP
!HyKe+
-Z)^#\
<dfqmc
%M'@T&m
McMaVR
u*X'>o
N$A3;*H
DYPp*I
SwcEE]
@,5MjZA
\?7WbM6
uFi ?vV
TKmp~@
}q"qLg
,2>-gT\M
N6{-bY
7RY-T,e0
ag2Y1:
)(`~STr
.Kz'Hog
cde_IC
Ae<_lS
;yE1'ht
o8Ff3z
ASRMH6tW
I.Q'*(
{)Y&;J
'EsT@E
;jkLTt0Ap
9)jHi5p
3Ma>7o
-w|#da
5Y^gt.
9X.IN)
-~CcY<ykm+
>>di0=
].);~_1|fCM
gE%K:P
0.>cl`#
RE<M$4
R4zy]D
vdcE_c
&yd]p,
K^{Nb|
I;=wv'
`I0tSP9
3"jnL!+
>)nK>&
'K?&fSl
|Rtf&~V
w%;>Uh~J!
`Sj^:a`W
PQAqlE
=6oSa!
Qfaf<z5
h45Q`;
m9]0f!
i|~'n|B
=mf"PK
0F' bRl
E^}T*"!
)v\Ki!
#bt9`C:
,,)#[c
cmT$E+j
a?rz6'
`|HOzV
uPAHvXA
uE~!th
NOw*/J~
n4dBb'r
\.C"d";
"P)]g9
OS\8un
oD-l,m
/RPWE~
hX!Aq_
M?v3ss
y <:Q'
j[h$:u
]ZQPDi
lLE`go&
t]A%?@
tc!DlI
V-|O7Q
>>Sq9;
EdkF5U
oVUfrs
khd]}\
=6&6p(YE
e2EN17
xEEAf{T
d9:dg:
~B/"O6
Vvv&#]
mv`Nqnh
P"V`Zb
vA[7FtY
*lv'>j5
G;W2'_V
X#pQY
tGm#@W
't*=%Z
lsKL*.;
q&ZgaQ
%0/&h=
omA_V=
eP;C)_N
]M[F4*n>
PC!a<1
3Z&Z}3
\Wk|Ip
*UUd}n
@Prl'E
4/3bC{
cU+5 r/
Rc,.JZ
o!kIIP
Be[B(f
F?&3W/
}i2v1A
ZbY 98v
ln3i!S
se?h~*
B&8:w!
`bd3&V
p*X#j4
PGZ`lf+
rJj8D=
h086Sw
eA^>>4
Msp1si
`o[if%
}L)K)w
%qLj'pH
<83gk=
=%kkw3
rqT7.S
*cz8i<
\q0f/P
X8,Nr-5zME
&\}r|-{
Yu`B;9
;BW.q1u_]
i~Cai(uu
t(Sno_
Kx6qu u
(g<=tT
)gea~@@
}&bKT?S
w17YOa
4{'@vd
.mZ2Ln
(R4fLWU
&At(-S`_
*'^c{|
4Sd($O8
+Rd0St0
PjwgCw&
TBL7V$t2
yVaF)K
LOu"3M
Zxphe6
^#m,d-t
j@5dQ-
(hX6#3C5h7
;,qu]%
;w^?mS
Ab'M}
vNL!_Ko
2*PIyx)PeS6
5:4m8Z
4];_eeX^J
ZissJ
BO![X ^
>F70~e
-CmC`3
s21SiV
yW>O6+
'lH?q&-
VX:[@$
~Nyd;7
1/]p]A
PZ2aCe
(Dw5R?
ld-ge"?Z!
dp8`Qh
)/mxe.
1{O3t,
c/$+j9m
v0WI&T
[D]N~=
a]?~)K
5i0 'P6
#AbwW[
q3gt7=e|
^=SrWJ
q-[FA'
:<>zn9
.:vP+td
x?{B!K
9]#0m,ct
{f7d9}
AltGe(Hfx
w23gQ
:G4i;u
QSJqOo
?)O=yb
?Tc=-|
aMkBSh
6V?r1p*
D3N9P}
uSp`)}
=(Usqfe
~mD8A-
pY(hnsM{
CQ.?=T
*u0L$a#
~6RMQ8C
5e$w<{nG
mK?*SUp3
K-UBifX/
BEa#,L
=ShaPL
21a!4
MTX/]U
P'^$3j
S"E#%-
,?e=ec
1O;BC9
It0%>c
| (wfn#d
!J.QO)
CJ,<3zG
L>Ug["1
UsfUMd
j7}CM\}
h8p/XM$
pGXWMo
hJ^k=GE
A!JgpsYK
hwU2J
mQUAlA
4e4V7
?poX/MC
87dJ {
$ng*if
zG1.j/
=QUAlA
pO\'e
naB~E>
s$$usx
nE^k=G
9pl,HR>
q2#'{|XI9E
zLxCF &G$T6
V2%P5a
1kO8ks
E[`Gg$+
4^yM U-
r{Xgqq
^oe;=F
FW=v?@
r=3{lq
H*p#Y{
5YP7^i=
.YAC^f=mWK
r3&O,hz
aCvN\?e
7tKRr
&@)\sV
-1B<7,`
8_e;M[T
ge;EGI
~5p0Goy<
p^mIaR
8qp9jd
saZA+1
mk/m6r+=
kq<hA:
Z ^~%Id
I@76F4X
PSXg93
t!ZAk1?
5Yra;UG
>20@;_
(mB=G?
lmpN0@os
.1bA,
gi3*{,
~AQWxT
<Dwt+eT
>0eYme
cpi.Eq
X[Y!Pe~i
cUKhs9G
*+o#K{
(pPV#K
qo?9a,@
aEl-r
1=R3xS^
psWMaJ
0n5]54
=74Y!~
=X![C%
Ge;%FA
'sW_;90l
wp'\We
<,K^j!C
9_WY[z
DPEOk
yYk)^:s
e?9:1Vk
~!BLu7
e6"/>Ca
Z+(RdO
>@-^YB
8-F";q5#
EevU+n%
PzDYq&
h_1QAW
UGb2y[`[
9b'w_b'
9,7kMg
'EWk6J
3k7k5w
~uCto>
T!OIN>
D$ C:3
;gGO=^
(*ucY3
-E#5k74
/A=!5}>`
mq=~yC
2p52=:
Si9*vx
fS]X6w
8hkw?A
cc:Zmr
h"'Z$K_?1
88:o98
T"8Ww?
llfzmd
H~A5T[g
}2n_%Fu9oR
F20ji}
U5T+&a
i;b>`z
scY`e'
6fce3&
ll,ojhi.
JV*C0A=Y
mQAoGA
0Ap1;.{
R29mG/
V$Tf7q;
[a[U"a%
cQs)zH
5:}9 |
pc!<=[
FH/R4-G-
L*=A6-Q
Fa0l'
$.mO_S(B!m
M0D.{T
N\0YYA
X?{WUr
GGK|[)
}P5)(
Xb(<]q
C^crG7
n+a93<2
3e2u=y
p/~\?O<.
.IfJ\g;
H'y=ps
I-$O9?j
UZEu(
b YSC$'
tB]Vs[
"=BqSA
g0JqcN
bC?am
}T&e 2
AK!3x[
OWW$@S
C&Z'l6
4*<V_T
p,Laf{LS"
$V)bya
~;mO/'hP>4mO/'hP>0m
%!p.L/
P>4K/;
'EWZ2[V
fL}2>M<2e[8
Pk|6jud
hm3^EP
4Z\/m^l
'*ON's
5s[eUp?
L~T;6<
H_`b%=
Ql(JoJ
@8QLe/
BRQU*W
#OO]Z3
!3\WYm
CM]X6w
~y`0]/9
o]k9rH
GrQ7jx
ECg/S9q/
M/:;
'%X[Z71O
McyOI
ecUSk*E.
'eOC[Ss\U$
oZR!Nej
"\L=X8
TN$9;ro=
DL=!2]
[ZN^sl
gI\m(9
IA^Am!
ix(}9CP
Y. NY,vY
9fu]hT
k&yKbD_
!^m"1
m\I59;m
}{Mib#}Sh
e;eGY.
)+Po%V
EwR;_T
u`q.@7
A;U2#d
%e\E-g
|-ioZK
6t{/{Z
ioH{\9
MIr2BG
.paPBH
H=Ch00H
!HbLa@G
?<#sU0<s
GgBE;
?=y%10
>B|?vg
A9-iFf
v}IQn*:
+N<#
U-d+Xsc
|2leG_,
,r&_2c)
v&]g/~
mqC1(a*
rM|3lWh
&N4<aa
wn5$|i
B,k7P_
#IbC3
kD2Mzmo
jw8!G,
aV}pE\
"''(H|!.
OSOj$U
$^9]-~
.k3swn
&*r7AT
8k<we@5
``>!XHn
"nb*<ms
Ag<<3B=)
Q:!1ar
rZHrsm
3"qc0)
2-cl93
>0K=E
My9lq/
u0L\5vT
A(&Wa]
ZTeS`>j
%P"VLi
@*/h8,
l1TyG-{
:vC#l_]
__WSVGi
7}<AvH{>dV!t
'Hzk#=r
B;8=jb
+l,~]-c
#Qbex)8D
T{$=o?7
w2o%J:
LS8tObt
6.tKF-dw
AE0a|q
=Oe#J7
x&bv':
SI96iyA4
KzNG?=^
C1c-A\Ca
.mEMH8
[_`rh7OF
cGNdMj
'zRG=^
]1Q&O-a
RT?Yq^
;2GON_V
d`EO#8
:![O0$
`4A]O3Ak
C{AOl]
R3S4|+)
Xtq.oz-
i{7OMkY=
wEp]L#n
x&mKOy
u9YAK7
a/7z}W
A@;p%H
x>z}!q
z_)haE
t7`M1ce'
#G;:
#[Vc<
,fVik}
{>j~iw
c%~,nR
3AShgv
NtIJRC
[68JSd
MK{s5\
)-0Jn&
^'79]{
RhoS^@4~
Hr<;dw
bC43A5
)qzf-M
<eP$,=
4*0a:X[
KK~2Mf
kbZl5{
DNjA1"
c4\=5k#
1O:sqA
;Y{133
Mq}<-h+
tZN6ld
%47\Vc
S_HMf`]
qM$_k5G2
RZijP#
KU'oc5
S 0A#a%v
J2r}e7
WnwdC{
B';W'z1
-(/h6W
T_x3sS@
Ic!NRV
T*m`G8
-*-=y4>\;
]Jn-SP
9JraKS
)VQd<0|<1q
vAvj!<
H0ND\=
6?zh9P
k)FIQ1
7F@w8y
=A,x;J
DuCjgO
m!ycz[P
8@:s~|
`#\z7~
JFSGG;
)>> c|
ly%=eM
QNJ-h>
XP]s@(
k1W`Hl
R5ac<D-
A%LH=Ym
]Nz0~QC
'ufau5
|p^*<I
2:V#q
4omGqsL
G\[!'pK
U1"Z ~4
7G!MD9
NOS~0y"8
A]mUl^L
#;aL"7
/qHNlH
pU8+y\Pq
Sy{QBRt
#RDoLk
.y!E;q
(<>iSA|4
~pQ%"~
&AfS,%
(IQX9A
#c.52k
tIU),g'?
s [7l2VI
8A9m(E*hb
#|Y!GF
z!mn7?
ScgK>!5
W><yxwY
L+&XI|fi
%FE_Fk
ttS"ED
Mr{z8g
0EE%8I
1#!0O%+L
My/.nP
@y^Gvv
(MZ6$P6
-J;|r_
u7Pk]9
:jb#>l:+
HGs~Wc
Okm(G|
Z9uxX6
Nc)`EY
>iR#2<
1:Q`g=a
!jV*.|%
'ko"=^S
']!jl#)
OHS+KR|6
(9fVmTAtmL
@]yGRV
<Dkj7mhq
Hi>~GqE
h6+cU@a|m
iS@89I
L&j\lS
7f9dKi$
T/$n<@
R@7X7f
hd\V>f
08:|'Fc
P<g]{Lf
<tnE;4.@E
]I+D>6
M.[o>d!A
*~{/!
]uAsMj
;SZhm+
KCDzsI
B62'k6
mY~%=Z
ck(&AR
_OjWdq
%LtqnH
;Hts\7
nB<c@y
MZGqCTdh#N
U!6hh'
y\Dq8nm
(UmB!k6
5S=Jp?*3i
=`}4M|
_TV+cY
^F~?yz}
ON\sC7
3oWi2/
EclM~R
(=ZyuU
%55RPU
cxp?MD
:X@&$n
!5vfkE
4f2<B
YQOq/3t
>@#2+e9
c$MW95
$sas3h
C#B!%~/
2WtGH%P
p! 3'D
{DIqi)
6tft7
[)]kj*w
>,vnghC
5rZ/JL
U)R'Y
)XdoL"
m(%qaz
3_,@sg#
*6!W3r
.1P_?q
oU3|md
|r:Vpr!<
bTldpiX~
2"Z$Vy
GKoGvg?
qcr>E;
:_X:~{h6
F{gY{IH+
?)^<9K`
w)p/8_
C8rRU!
_H'V}(
GRifj'
Sw,YbV!1
K]1F.(
5bmVB8
m<w~bgz7
{7F6; q
<q:m:R+f
c3B(jB
&oj-Bz
r9-O[s!
78yQWar
fgz5PQ
*:bTqa
(3Z2=^a8
[Z](|UP
;P_IuP.
iSbZ)||r
WlZ/B O
I6{L=csj
f'RdPEJ
R2lb'I
n.K%%M
pq_Bn*
,`B-<r8
apU+a4
0 "gsIq
jjUi:w
~f!PTS
mH<5+m
NV9zq'
]SX&H4
'M:dZW
x^H\ V
vy2gZb
w_Puz~
3fC=un
5wPTCpJ
XC?/Tt
c."gP0
hpl`^.w
I2"HO8J-`
6t[.'
Nr0SlA
e+F-]/
Xp%w1(
|WPHf'
g6qfiA[V
mi||DO
<,6M-
{Q{f@=4
OW{WUO
Hd4sW(
1RU%}?
X$omUkF
O^(-q/
1R19QkS
'+!aH^
q`_?C=
/PmR^f8
xp<[oi
Vl01'V
X M*W}WT
?Y[(1'
i!Anr(
Y@3!}I@d}
>&F().
O;Z@L[
rZ93p#
ISJ!S)
x~JRM+r
&:!c[V
s+>_1
(Ifh$X
=|BdWnm,/pm
b`7#!1
V4c:t6
CSz%gL_
20B(Ly
C.'v*N
$;s@1I
~FZ3!AAu
;4i:E'
Gf#X99
Y.=)e1
_@|Gz{fH&M
fa/9qAjl
z1s,,f
RmY%T-`
F7xT5uf1)
xnIzkZ
3!/d/A@
bl](4*
=;1D\S
K/+(M[
cM)y<
~VN^{g
'KSF0z
-?RCmw
}xPEOZ
,:Q{4Z
H::3i0
1EL,S3
M;T6g
Z=1?/4[
A;m1<8
}a).Ziu
^SmyB@
+0Rl'0
w#8p1h
vwP\?L5;
=xZ+J:
qAyvi<
p^I=@v
.nY1D/4,]
GA2"KI*
^dSv+f
*>.uK~
p~-Gsn
&FW?z IB
H!_8Xp
!H)<FC
Y@MFMN
S0P:as
4SCTy[|
[*c!lA=;Y
&Cu6Va
eUKzI}
5 xS`5
YzqLe~
:AKaBx
3fOA)i
Bc#2I4
Y)z" =
h_Ja8ie
^nK|>(Jo+
>JhA?a
Tli`Q
Grk]wj
,u*k7&"
ofL6@j
yYgl/IV}4
"O)@`/
g]1r2H_z
GHqXws
P})L{
q+DQs I
5=yaE9o
gd}!\xVr
/qr"
_P^iBM
\WQo-N
\wC Vh
.?q.1*R!6|
.Bik4q
/5GLzo
jcy+p(t
GiQhu`
QR'N1,s
Q6ou
@PwN(L
`95R!b
&(M8uqL
FBbQ<@
"-BNvbQ
6(PaPQV>
AgSubB
h?aF)Z
Sa*2I>
[8Y*FQ*Q
rEXG@=
#~B\AS
a)6';m
gNL<3"!
6'Wv61St
^QphnZP
~[&"Ty
#0yQ&5z
D;R96_R&
K>k^qId
4USc7~VU6
{+!VDX
`i(9
cw=wbE
o(,@:Er
d#:q^w
~wlG1t;
QIyX8A
+Y`7Cf
I;Ilr+X
6OV;Y1
`x>w1@
Wj~`SMWu
RFAOIO
r{SWnA
/MHNc7
qgi~ ;
mw|mD
Xlr'XDs
]s+})b
PmMX
_YL@:K
v`ovG@
*8yD6
bSPC"d
C-m wzm
6D24*-
KHS`3C
B}CG9u
]+')U~78
ouGdzZ
#jutX T
Z|6k+f
pF[H9s
Q/w}wE
mM%#x
"Ou\ZWnxJ
N\fjXIWc
f\Pq]_
9yw{/Y
pZ|3R.
\1zNw@#Vh"
f>*'l\L
V{TYZM
!L:y+&2
>a-!>l-4>
5_'%:s+4>
7H0%I8
=l9+tD
TB6bRpM
>d-&>s-6>
6]COUKC
^w:x~y
RRTil4
Z?_!czbI:(SpD8
sKije3A
J9_`B
|x;!Z{
_qN>t\
SOOi`X
J>iR=p
*zP-J>
B@XcQ5
g9Jx=Fl
oN/Sxr-
v33_HC
^dN'Qx
07shUw
AAl%EO
V`>`VC
>`-#>p-3>
_`N#_pN3_
=+<|%`/4
xmCnfLx3L
w!8RQs
kernel32.dll
GetModuleHandleA
USER32.dll
wsprintfA
GDI32.dll
CreateCompatibleBitmap
ADVAPI32.dll
RegQueryValueExA
SHELL32.dll
ShellExecuteA
ole32.dll
CoInitialize
WS2_32.dll
CRYPT32.dll
CryptUnprotectData
SHLWAPI.dll
PathFindExtensionA
gdiplus.dll
GdipGetImageEncoders
SETUPAPI.dll
SetupDiEnumDeviceInfo
ntdll.dll
RtlUnicodeStringToAnsiString
RstrtMgr.DLL
RmStartSession
f$`F+`
nS#m3'R!
[rAb%1
<?xml version='1.0' encoding='UTF-8' standalone='yes'?>
<assembly xmlns='urn:schemas-microsoft-com:asm.v1' manifestVersion='1.0'>
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v3">
<security>
<requestedPrivileges>
<requestedExecutionLevel level='asInvoker' uiAccess='false' />
</requestedPrivileges>
</security>
</trustInfo>
</assembly>
kY=(q>
?{WinLicenseInstance
PQRSUVW
_^][ZYX
1XCf^1
u)o~k*
:cO"L}
fx41h
_^][ZYX
34$14$34$
#W/hH
U*l2X$
f%g[h=
tOhDR%
n.T_EW
W'*xhPz\
vST{3&
q>*Ug0*2
_^][ZYX
ProcIN
ExitIN
opk\eh21$
ExpInfo
CheckIN
X>S/S_bZ
/showcode2
/logstatus
PROC_IN = %d
$hq(Y][
oky^7\e
4$[h__a
DDDDDDDD
F"5})E&!4
YoHP_Rm??
X3,$1,$3,$
&1+4.5
1"MsJQ
Ph 5o}X
DJ@wnl*
ExitOUT
[QLwZ~
Y6`9xO
f+a=i0
-*io/)
4j+S\E[
9@biXm
4$[PTXR
34$14$34$\
WLProjectName
9[%f_I
~@-!4owH-
B?hm<1
@P{7$I44
(SuYI!
3,$1,$3,$
'rN0,9
kO1Cv<
Activation1010266433
Exception Information
XprotExit
/showcode
nYQ5sH
^3,$1,$3,$\
3,$1,$3,$\
PF)V&{
4$[UT]
VVibQd
4$XPTX
b8?rWV
/getwlstatus
^'m`Y4
3,$1,$3,$
]LVw"jB
vn@~VQN[K
_F~yox
yoG!8}H
.po:eD
LnE s!xLoB
ggP5@)
&{Vp'5<
XBH_FNT
Software\WLkt
4:+arYU.
89nKIT
H-X#N])
Software\WinLicense
Software\WinLicense
4$[VT^
48I1G!
/{.8,]Jo
Kr:|Qv
V:lPzN
5"\5G|
_^][ZYX
w/E6X!ih
SplashClassName
0a`D)R
'uM8+)
V|Mj!K
@ShjvZ
#8\O!l
4$[UT]
/skipactivexreg
[3<$1<$3<$
4$[WT_
3<$1<$3<$\
:E+[8"
lf[srE
&.6>defg
ajBY'L.t'
Dg@Q3Cv
)HF}N
4$[RTZV
OQrrMM
4$XST[
4$XVT^
_^][ZYX
j)q5ag
G4\AN8^
4$[ST[
3<$1<$3<$\
$Xho{C
/forcerun
%q)"f\KQ\
4$XQTY
PROC_OUT = %d
CHECK_IN = %d
4$[ST[
.C/05p
sV~h1B
PQRSUVW
1_^][ZYX
WinLicenseDriverVersion
/nosplash
/bugcheck
$&~&CB
40T4m\
CheckOUT
t | ]7N
y}Je|/
4$ZST[
40P8yUo
4$XRTZ
eQ,M<:
AIp_ug|
/deactivate
4$[QTY
_^][ZYX
`5}U|Y_
V:LH\w
aIJs:`
F4qkGd
CZ0{kr
-zc_4!
/bugcheck2
WLSoftwareVersion
PROC_OUT = %d, Process = %x
v\$5s=
_^][ZYX
7FNXvjAR
_^][ZYX
-DTg?+
3<$1<$3<$\
_^][ZYX
"c\"b
-j;Mj!
`DNZp[tt
Qu.8C=
3W}x\/
h}C,#P,
Pt;1p]_d"
[/e*<m
ST[Ph$k==X
V3uz!T
=tZ-\@*
c9l*^u
O,0P!*0
56"<ZA
a6 b?_
3<$1<$3<$\
4$YQTY
(V>n`K
YyXEHP
_^][ZYX
6k7H}^!7:'
Y,yY=GSU
8l{6$?
"J!d_!
m+cLck
WinLicenseVersion
0tlc|/3
S}5/'?gr
ProcOUT
_^][ZYX
$XHOOK_IN = %d
SpK,\x
3(?5L
N,Q:\o
$Sh-6=
4$XST[
ExitOk
A,)s/xz
,UyF['Z
(c?W@
b18uJj
)Xy:4)
bQ\Bx_
idT f@
r G'w
8qRp4
'(eB1N+)
,12VV
H/checkprotection
r|7ivw
]1nRDE
UFKW]Gi
h~jo?^
34$14$34$
4$[RTZ
,$ZPh=
$\RWh.
4$_VT^
,$\Whz
4$XWT_
34$14$34$\)0P
4$_RTZ
4$_WT_
Qh5,gY
4$_WT_
<$\SSSU
4$RTZS
/_GPh~^
YrN j0:|
Vj/l+O
34$14$34$
4$h3z#m
4$XQTYS
34$14$34$\
_^][ZYX
cOa|\0R[Q
\p(w#k
\)cx7^P
e2UTbl9
4$qsWk
vpj't2
E&YditF
1tvEUb&
gE$eFr
=8Yhglhxj
~mGI~i
Y[+uMG
+18]?3?j#
~YWKFI
;AhTA#%
-d{n}in
ur+owS
1*}2.~
' P|DL
#`fd<'
+%Pnz)o
v`a)-3
E&#"]<
RCt-s,zB
d8=,5z
RAppEy@
ES,oEgZ
N$d%iCW a
:8[E]Xl
cJLG5|
4$XVT^
$\h/hEJ
4$^ST[
3,$1,$3,$\Qh
34$14$34$\
4$XQTY
3,$1,$3,$\Q
4$_UT]V
34$14$34$\
4$XVT^
14$34$\
<$VT^P
'!q!mh
ynZr7o
l@Xsm+}
5u"zP
G.b0z#
18?5K
O@$q,2
T{c*L>
h&0[Nx
y2v4o(
v%3f//
p='@/zy5
THUs]&
1/J&Ui
@vy*qA1
J)BAN;5
o>\8$?
<$\Qh9
4$XVT^
-IL,'1
j1?Ba`
zd>VR-
4L\RZ.0Y
GTaQ2\
B#r*ee)
E;6-/9
>,) ^3?Tz
srgOE0
4$ZRTZ
14$34$\
34$14$34$\
4$XVT^
4$\hdm
3,$1,$3,$\
34$14$34$\
$Why/=
_^][ZYX
|DfPl<TP_IN = %d
,$\RhN
34$14$34$\
3<$1<$3<$\
Yh[wld
4$XST[
Uh@#Z~
,$\QTY
4$[PTX
34$14$34$
LcL0~
&?lBE4
({~B-9
4$\hW2
SOFTWARE\WinLicense
4$YWT_
<$ST[W
_^][ZYX
3,$1,$3,$
4$ZPTX
~o]XRV
14$34$\h
4$[PTX
4$YQTY
4$XWT_
3<$1<$3<$\
3<$1<$3<$\
JUd0yO
;B)|AX1yJ
BX,C7I
oweii
#=#5.l
34$14$34$\P
4$^UT]
,$\Sh5
4$_WT_Q
$h#|~?Z
,$QTYP
_^][ZYX
y>;7UYc
Gub*j
47Tw@pq
Aq:XCu
`]3,A;
PROC_IN = %d, Process = %x
,$\VT^
4$[ST[
G ~\#!
zPlease, contact the software developers with the following codes. Thank you. (version %d.%d.%d)
(press CTRL+C on this window to copy to clipboard)
CheckIN = %d
CheckOUT = %d
ProcIN = %d
ProcOUT = %d
ExitIN = %d
ExitOUT = %d
TPin = %d
HWIn = %d
IntV = %x, %x, %x, %x
z1sYl,$1`
;Bq6+w
WLProtectionDateTime
cMfOr6
4$ZQTY
4$[VT^
~Yw3B]
4$[PTX
3,$1,$3,$
3<$1<$3<$\
4$XVT^
$hmS}s
whLgJf
_eKdvu
IE0^z\
u,";ld
qa6-2*
4$[WT_
3<$1<$3<$\
Qkkbal
pj9UYN
I?z(fa
&3Bm*[
Ux<TXH
4$[UT]
4$XUT]
3,$1,$3,$\
Kw!,DK
4$XPTX
4$[UT]
p8B%PS
kuMxGl
+3[9d1t
#$Fn}%=
$]ZWhP
^3<$1<$3<$\
34$14$34$\R
4$XQTY
_^][ZYX
]]Qh?,n
Rh 6`
$PUh0A
$\RUhI
Z3,$1,$3,$
:g>-94}})
94}}Y%
_3,$1,$3,$\
4$XWT_
4$[PTX
z<TZ%
/bugcheckfull
/showinstance
NM!b;9
CHECK_OUT = %d
WLSoftwareName
4$[UT]
zP6ff_
3<$1<$3<$\
J'`EjR
/dumpstatus
_^][ZYX
4$XPTX
H/9m,]
$PTXVh
_Wh2}4
s7_PTX
4$[UT]
34$14$34$\
3,$1,$3,$\-
3,$1,$3,$\
34$14$34$
34$14$34$\1
,$\h|o
N[-yAad
yAad[-<
oShOl~=[)
34$14$34$
3,$1,$3,$\h
Sh9{CE
$RhE{W
,$QTYP
4$WT_S
$WRh0A
3,$1,$3,$\
Yh[ydY
RVh^vF^
$\h=V#
$$hu{Zr
3,$1,$3,$\R
34$14$34$\
4$PhND
34$14$34$
]34$14$34$\R
Z3<$1<$3<$\
$PUh0A
3,$1,$3,$\U
4$ZVT^
3<$1<$3<$\
Z34$14$34$\h
3<$1<$3<$\
4$YVT^
4$YWT_
3,$1,$3,$\h@hbv
3<$1<$3<$\
3<$1<$3<$
4$XQTY
34$14$34$\
34$14$34$
Z3<$1<$3<$\
^3,$1,$3,$\
4$XWT_
,$\VWhIH
_34$14$34$
34$14$34$
34$14$34$
4$XVT^
34$14$34$\S
4$XQTY
4$[PTX
4$XUT]
$Ph"M<
3,$1,$3,$\
_3,$1,$3,$\W
^3,$1,$3,$\
^VhGrs
3<$1<$3<$\
\l3gxu
kzST|&x
f#/'1Vl+:
$ZPRhA'a)Z
[34$14$34$\
+^~0qWWBT)
Z34$14$34$\
34$14$34$\h
4$ZQTY
4$]UT]
<$\hLX:
4$[ST[
Z3<$1<$3<$\
4$ZVT^
[3<$1<$3<$\
Z\8fB"
<$\h$o
34$14$34$
,$h:y<
4$XVT^
3<$1<$3<$\
4$[UT]
3<$1<$3<$\S
34$14$34$\
3,$1,$3,$\
4$XVT^
%("86@.
$Vh_hTy^
4$XUT]
3,$1,$3,$\
3<$1<$3<$\
4$YWhJ#
4$\hh[
4$[ST[
,$\h`_
34$14$34$
3,$1,$3,$\
4$XPTX
_3,$1,$3,$\
Ba1f-<
&FB#}4
3,$1,$3,$\S
4$XUT]
34$14$34$
c-?H{ja
34$14$34$
3<$1<$3<$\
<$\UT]
3,$1,$3,$\
4$XVT^
3,$1,$3,$\
4$XST[
4$XRTZ
3<$1<$3<$\h
3,$1,$3,$
4$XWT_
4$XPTX
$\h._o#
34$14$34$\
4$XVT^
34$14$34$\
lsDsCf
4$ZRTZ
0SA)s+B
4$[hWWE'
[34$14$34$\
34$14$34$\
34$14$34$\
3<$1<$3<$\
3<$1<$3<$\
34$14$34$\
4$XWT_
Qhyj;vY)
3<$1<$3<$\ST
4$ZUT]
3<$1<$3<$\
34$14$34$\
4$_WT_
6lf&dPm
14$34$
sS<C,H`y/
.^.)ms
g's*r>_
3<$1<$3<$\
4$Xh-XO
pP7^-[
3<$1<$3<$\
2g'c$M
4$\WVP
3,$1,$3,$\9
4$[UT]
4$YRTZ
4$]RTZ
4$[UT]
$h]s`[Z
4$YUT]S
RQRhL5
3,$1,$3,$\
4$[ST[
3<$1<$3<$\
$h+]] Z
&kx!k~g
SHgOLW
_U=!U+!
^3<$1<$3<$\
34$14$34$\
34$14$34$
4$[RTZ
3,$1,$3,$\P
3,$1,$3,$\
3,$1,$3,$\
4$[ST[
VK;/jk
4$ZPTX
3<$1<$3<$\
4$XST[
$\h;Tw_
34$14$34$\h
3,$1,$3,$\
$Vh\.D
4$[QTY
34$14$34$\S
4$\hyh
Bvo5s)8
oyZh,x
%n[s@hE
$RTZh>
4$XST[
3<$1<$3<$\Wh
4$Yh"6
,$\-h0
-DQ{w-h'
?{ST[W
4$YQTY
4$ZQTY
YhoTqh
$ShJ|y4
3<$1<$3<$\
FZ04/s
6{zfID
wQ|,l&
[r|[x'.Z
k<9C?[Y
5KzEr\
?j#u2#
Le&,<I
-3Io5y`\
;x<!Jf
0UfDF,
z''H~]R
Ep$}|6
Ej}r~H
y8}-Y1
Y9Bu|b
iUg-KQ
(.[K2XJ
i>\#f`xH
3Io5y`\
(.[K2X9f
uPe@A<
k%K7a9\
L4I!T=
kvLI~PG
!/SZE"
+lIwbO
':v5Ivj
+?O!@t7
"e#$]I
_G1bLU.
h4oUmP
maYf/HT\
(.[K2Xx
P%rI0q
zX2MVp
URjtQe
i<eT537
Bh_ypr
W[XO<[
h?s]wc
z0J*:be
vh<VydrB$
Yy~3`"
<5J(N@Jq
<5J(N
0LO]UGd
7'N:B'
j%@]Mh
_SrAC.
xw+y9
Ls>d)+
R6HF]$
bnRY^'
DEM(%8
0bwo,gA
9$}Rct?
ZY,s|
3Lv*E:Z
&dz.)|
"|Pu@C
bAK2"R
eD-Jim
8~b6R@(@
Fc:d0!O
Mt6,%U%B
A=#4.
N])!3q
(EN-'
(EN-f
/+BcEa
UOSE~X
Swg{$C
N@ue;$K
iYKTV/_*
n.:K'X
W[XO<j
;m-Vf'Hm;
j<d=p1
EUmU*:Y
.!okjE
V_@(hU:<
_A5+N8
^{uwYK]h
zmnrbS
`W}-56
S4i}uM)
U`Ep5t
Cu>v>D
9 &zw2
b>Fbz^
C\n}25
f WGYv
(SMA,tS
f+s|s}T
*pp#(KMrO~
LRSswUx
-3Gx\{
p{X?`RL
A6Rmq6
Gazh"k
;d&]&xN
G,4 epb>
F|#=)S
M#7`k"
s{]lge
)X&hNJE
OhcZUuQ
CTIi[S}
c,S}-k#wr
9Mf]'z
M7%c\wH
J*[Kbj-AaM
vn&OI1wc
Gc"HOJ
@{j|T#
^zT[<\
Gc"HOJ
@{j|T#
=}|,N:
A;/vB}
p:R;Z9
YUDqK9.
kKo4O+
M^p34J
h<N]iI
49#DM<
:4'`^
I%slrI
7`!(qyh
4|cJLR
EeKZ.VW
V=`u4J{v
3,[<E?t
R-c3k
J@t'h7
!"1+5{
'-3#u-
YUDqK9
)'>t(
-e1nq-
g9N/]]
5sFW'*'
+n"cXc\K
\x|8T#
hAF\m
5?*j}3
YUDqK9
d?pVXL
sY_a2]INJ~C
AC=BfT
IAOoV>o
-k4cl
FUL3;w@
SyG5CE
)'#.c,~q
8qo%<^
\M gM2
Nsfgz@
YUDqK9
3vOx`(
/~S^[+V
b)9frg
-THj[TP
C~cKJH
p:R;Z9
~1hmfcC
YUDqK9
o>J[Dm
#K%+[FH
obZaw_
a:U(Ex
w-K0\b
,&J(]Aa
=`Z=0xZ*
"q?bXgm
~=5M,g
XU)7]Zu
QYl%$U
d]Ti/"
.>)pXC*f
A=#4.
N])!3q
(EN-'
(EN-f
/+BcEa
UOSE~X
Swg{$j
bag.W6u
giM[eb
wyr0a<
8Gv|G
m["l;k
ngAj1,i%+x
e#l,Tza,
0~/4&]KUjnpA]
E)<"iw
t[4bZ;+ k
!B){%1o?}
zYg-J,
;I{<tq3
1,U~QFB
|9I0ElK
's`'%=!
Rr@[cX
("^]5I
J5H)T"
aw>HN>
+Kfataa
NVp9DrRE
E2D5 _
jjvpoF
t~f*<I
~~|N7#
KURlbk
v<l1PK
E2D5 (d
MWhB}O
+M[kLU;
9M[kLU;
A[mPJ|
3cI2q[
6}|6&X
l\m.&X
?cEB]dA
78.QE+
U>49yt
xNt0rH)
Q^2Ln"h
mD~6|
,?Myg|
:pbXvd
FB%V{g
:52BNR1
$pJr1^
L&DnVfj
nh?=FH
w1& 7{6
}Cp3w!
ZHiYfN
davHL(
9u-C19
wo}$wr
&?d5=@E
>*'pMC
gaekC%
n)PVDf"
*}kM(C
A3}&-4
8e53Yft
ht&G"R
_PjK[!
4$[UT]
3,$1,$3,$
p; Mx'YF
4$ZVT^
a/Gm1l
_34$14$34$\
9:0l/)%
E3mSK1.'
lPr@-_
cPEB>`
4$^hGa
4$XQTY
34$14$34$\
3<$1<$3<$
DwK33%
CMK/$b
PV[Z!%
$Qh.~<
$\hJ*k_
3<$1<$3<$\
34$14$34$
J1)PM;
4$ZVT^
4$[PTXQ
Zhh`*5
3<$1<$3<$\
4$^UT]
Z3<$1<$3<$\
s(%qI
%Bs2p$
n3C}9'
q#)Sh2%
nhh$3x
*B|hg%
fm1-$b
9Zj]r*k
4.2RP%
#Bk7_s~
5yo$f/%
^7Q-[&
n<.IQ%
:jlB;%
E|bfc%
lL.- b
L7g4[
j'O7hD
?!j=k~i
.X l(%
{<:-2~
Kn5f%
@X\60
;)8:<6
J?~-C%
z[1v}cf
cc,T:u
n+g}Mb
_D !Kx
fdv a6b
:v|)-Z
_D !9g
Vxd};%
hB[7!;*#
%@noB=^
&>Qt%
iBhRd,%
5PP'/b
~^3JK%
)a[X!%
*UI{s@
fliR<k
Antivirus Signature
Bkav W32.AIDetectMalware
Lionic Clean
tehtris Generic.Malware
ClamAV Win.Packed.Risepro-10030665-0
CMC Clean
CAT-QuickHeal Clean
Skyhigh BehavesLike.Win32.RisePro.rh
ALYac Clean
Cylance Unsafe
Zillya Clean
Sangfor Clean
K7AntiVirus Riskware ( 0040eff71 )
Alibaba Clean
K7GW Riskware ( 0040eff71 )
Cybereason Clean
Baidu Clean
VirIT Clean
Paloalto Clean
Symantec ML.Attribute.HighConfidence
Elastic malicious (high confidence)
ESET-NOD32 a variant of Win32/Packed.Themida.HQI
APEX Malicious
Avast Win32:PWSX-gen [Trj]
Cynet Clean
Kaspersky Clean
BitDefender Clean
NANO-Antivirus Virus.Win32.Gen.ccmw
ViRobot Clean
MicroWorld-eScan Clean
Tencent Clean
TACHYON Clean
Sophos Mal/RisePro-A
F-Secure Clean
DrWeb Clean
VIPRE Clean
TrendMicro Clean
McAfeeD ti!B599C9B362C1
Trapmine malicious.high.ml.score
FireEye Generic.mg.3e767dd673e06387
Emsisoft Clean
SentinelOne Static AI - Malicious PE
GData Clean
Jiangmin Clean
Webroot Clean
Varist Clean
Avira Clean
Antiy-AVL Trojan[PSW]/Win32.RisePro
Kingsoft Clean
Gridinsoft Clean
Xcitium Clean
Arcabit Clean
SUPERAntiSpyware Clean
ZoneAlarm Clean
Microsoft Trojan:Win32/RiseProStealer.AX!MTB
Google Detected
AhnLab-V3 Trojan/Win.RisePro.R651288
Acronis Clean
McAfee Clean
MAX Clean
VBA32 Clean
Malwarebytes Trojan.MalPack
Panda Clean
Zoner Clean
TrendMicro-HouseCall Clean
Rising Trojan.Agent!8.B1E (TFE:5:HzAMnjYwPaL)
Yandex Clean
Ikarus Clean
MaxSecure Clean
Fortinet Clean
BitDefenderTheta Gen:NN.ZexaF.36808.@R0@aebcDOak
AVG Win32:PWSX-gen [Trj]
DeepInstinct MALICIOUS
CrowdStrike win/malicious_confidence_90% (D)
alibabacloud Clean
No IRMA results available.