Static | ZeroBOX

PE Compile Time

2024-06-28 15:19:37

PE Imphash

6918ba97730e30a95b8fcd002ec1547e

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00001000 0x0003b52b 0x00000000 0.0
.rdata 0x0003d000 0x00002aa7 0x00000000 0.0
.data 0x00040000 0x000120ac 0x00000000 0.0
.vmpL\xc2\xa7p 0x00053000 0x002e0713 0x00000000 0.0
.vmpL\xc2\xa7p 0x00334000 0x00000240 0x00000400 1.1975662001
.vmpL\xc2\xa7p 0x00335000 0x005de290 0x005de400 7.88181667678
.reloc 0x00914000 0x00000688 0x00000800 3.60914364798
.rsrc 0x00915000 0x0008a7dc 0x00076600 6.08433665283

Resources

Name Offset Size Language Sub-language File type
RT_BITMAP 0x00991544 0x00000328 LANG_ENGLISH SUBLANG_ENGLISH_US empty
RT_BITMAP 0x00991544 0x00000328 LANG_ENGLISH SUBLANG_ENGLISH_US empty
RT_BITMAP 0x00991544 0x00000328 LANG_ENGLISH SUBLANG_ENGLISH_US empty
RT_BITMAP 0x00991544 0x00000328 LANG_ENGLISH SUBLANG_ENGLISH_US empty
RT_BITMAP 0x00991544 0x00000328 LANG_ENGLISH SUBLANG_ENGLISH_US empty
RT_BITMAP 0x00991544 0x00000328 LANG_ENGLISH SUBLANG_ENGLISH_US empty
RT_BITMAP 0x00991544 0x00000328 LANG_ENGLISH SUBLANG_ENGLISH_US empty
RT_BITMAP 0x00991544 0x00000328 LANG_ENGLISH SUBLANG_ENGLISH_US empty
RT_BITMAP 0x00991544 0x00000328 LANG_ENGLISH SUBLANG_ENGLISH_US empty
RT_BITMAP 0x00991544 0x00000328 LANG_ENGLISH SUBLANG_ENGLISH_US empty
RT_BITMAP 0x00991544 0x00000328 LANG_ENGLISH SUBLANG_ENGLISH_US empty
RT_BITMAP 0x00991544 0x00000328 LANG_ENGLISH SUBLANG_ENGLISH_US empty
RT_BITMAP 0x00991544 0x00000328 LANG_ENGLISH SUBLANG_ENGLISH_US empty
RT_BITMAP 0x00991544 0x00000328 LANG_ENGLISH SUBLANG_ENGLISH_US empty
RT_BITMAP 0x00991544 0x00000328 LANG_ENGLISH SUBLANG_ENGLISH_US empty
RT_BITMAP 0x00991544 0x00000328 LANG_ENGLISH SUBLANG_ENGLISH_US empty
RT_BITMAP 0x00991544 0x00000328 LANG_ENGLISH SUBLANG_ENGLISH_US empty
RT_BITMAP 0x00991544 0x00000328 LANG_ENGLISH SUBLANG_ENGLISH_US empty
RT_BITMAP 0x00991544 0x00000328 LANG_ENGLISH SUBLANG_ENGLISH_US empty
RT_BITMAP 0x00991544 0x00000328 LANG_ENGLISH SUBLANG_ENGLISH_US empty
RT_BITMAP 0x00991544 0x00000328 LANG_ENGLISH SUBLANG_ENGLISH_US empty
RT_BITMAP 0x00991544 0x00000328 LANG_ENGLISH SUBLANG_ENGLISH_US empty
RT_BITMAP 0x00991544 0x00000328 LANG_ENGLISH SUBLANG_ENGLISH_US empty
RT_ICON 0x0092fe8c 0x000097f5 LANG_ENGLISH SUBLANG_ENGLISH_US PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x0092fe8c 0x000097f5 LANG_ENGLISH SUBLANG_ENGLISH_US PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x0092fe8c 0x000097f5 LANG_ENGLISH SUBLANG_ENGLISH_US PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x0092fe8c 0x000097f5 LANG_ENGLISH SUBLANG_ENGLISH_US PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x0092fe8c 0x000097f5 LANG_ENGLISH SUBLANG_ENGLISH_US PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x0092fe8c 0x000097f5 LANG_ENGLISH SUBLANG_ENGLISH_US PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x0092fe8c 0x000097f5 LANG_ENGLISH SUBLANG_ENGLISH_US PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x0092fe8c 0x000097f5 LANG_ENGLISH SUBLANG_ENGLISH_US PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x0092fe8c 0x000097f5 LANG_ENGLISH SUBLANG_ENGLISH_US PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x0092fe8c 0x000097f5 LANG_ENGLISH SUBLANG_ENGLISH_US PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x0092fe8c 0x000097f5 LANG_ENGLISH SUBLANG_ENGLISH_US PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_MENU 0x0099186c 0x0000024c LANG_ENGLISH SUBLANG_ENGLISH_US empty
RT_DIALOG 0x00995a44 0x000001fa LANG_ENGLISH SUBLANG_ENGLISH_US empty
RT_DIALOG 0x00995a44 0x000001fa LANG_ENGLISH SUBLANG_ENGLISH_US empty
RT_DIALOG 0x00995a44 0x000001fa LANG_ENGLISH SUBLANG_ENGLISH_US empty
RT_DIALOG 0x00995a44 0x000001fa LANG_ENGLISH SUBLANG_ENGLISH_US empty
RT_DIALOG 0x00995a44 0x000001fa LANG_ENGLISH SUBLANG_ENGLISH_US empty
RT_DIALOG 0x00995a44 0x000001fa LANG_ENGLISH SUBLANG_ENGLISH_US empty
RT_DIALOG 0x00995a44 0x000001fa LANG_ENGLISH SUBLANG_ENGLISH_US empty
RT_DIALOG 0x00995a44 0x000001fa LANG_ENGLISH SUBLANG_ENGLISH_US empty
RT_DIALOG 0x00995a44 0x000001fa LANG_ENGLISH SUBLANG_ENGLISH_US empty
RT_DIALOG 0x00995a44 0x000001fa LANG_ENGLISH SUBLANG_ENGLISH_US empty
RT_DIALOG 0x00995a44 0x000001fa LANG_ENGLISH SUBLANG_ENGLISH_US empty
RT_DIALOG 0x00995a44 0x000001fa LANG_ENGLISH SUBLANG_ENGLISH_US empty
RT_DIALOG 0x00995a44 0x000001fa LANG_ENGLISH SUBLANG_ENGLISH_US empty
RT_DIALOG 0x00995a44 0x000001fa LANG_ENGLISH SUBLANG_ENGLISH_US empty
RT_DIALOG 0x00995a44 0x000001fa LANG_ENGLISH SUBLANG_ENGLISH_US empty
RT_DIALOG 0x00995a44 0x000001fa LANG_ENGLISH SUBLANG_ENGLISH_US empty
RT_DIALOG 0x00995a44 0x000001fa LANG_ENGLISH SUBLANG_ENGLISH_US empty
RT_DIALOG 0x00995a44 0x000001fa LANG_ENGLISH SUBLANG_ENGLISH_US empty
RT_DIALOG 0x00995a44 0x000001fa LANG_ENGLISH SUBLANG_ENGLISH_US empty
RT_DIALOG 0x00995a44 0x000001fa LANG_ENGLISH SUBLANG_ENGLISH_US empty
RT_DIALOG 0x00995a44 0x000001fa LANG_ENGLISH SUBLANG_ENGLISH_US empty
RT_DIALOG 0x00995a44 0x000001fa LANG_ENGLISH SUBLANG_ENGLISH_US empty
RT_DIALOG 0x00995a44 0x000001fa LANG_ENGLISH SUBLANG_ENGLISH_US empty
RT_DIALOG 0x00995a44 0x000001fa LANG_ENGLISH SUBLANG_ENGLISH_US empty
RT_DIALOG 0x00995a44 0x000001fa LANG_ENGLISH SUBLANG_ENGLISH_US empty
RT_DIALOG 0x00995a44 0x000001fa LANG_ENGLISH SUBLANG_ENGLISH_US empty
RT_STRING 0x0099ecbc 0x00000afe LANG_ENGLISH SUBLANG_ENGLISH_US empty
RT_STRING 0x0099ecbc 0x00000afe LANG_ENGLISH SUBLANG_ENGLISH_US empty
RT_STRING 0x0099ecbc 0x00000afe LANG_ENGLISH SUBLANG_ENGLISH_US empty
RT_STRING 0x0099ecbc 0x00000afe LANG_ENGLISH SUBLANG_ENGLISH_US empty
RT_STRING 0x0099ecbc 0x00000afe LANG_ENGLISH SUBLANG_ENGLISH_US empty
RT_STRING 0x0099ecbc 0x00000afe LANG_ENGLISH SUBLANG_ENGLISH_US empty
RT_STRING 0x0099ecbc 0x00000afe LANG_ENGLISH SUBLANG_ENGLISH_US empty
RT_STRING 0x0099ecbc 0x00000afe LANG_ENGLISH SUBLANG_ENGLISH_US empty
RT_STRING 0x0099ecbc 0x00000afe LANG_ENGLISH SUBLANG_ENGLISH_US empty
RT_STRING 0x0099ecbc 0x00000afe LANG_ENGLISH SUBLANG_ENGLISH_US empty
RT_STRING 0x0099ecbc 0x00000afe LANG_ENGLISH SUBLANG_ENGLISH_US empty
RT_STRING 0x0099ecbc 0x00000afe LANG_ENGLISH SUBLANG_ENGLISH_US empty
RT_STRING 0x0099ecbc 0x00000afe LANG_ENGLISH SUBLANG_ENGLISH_US empty
RT_STRING 0x0099ecbc 0x00000afe LANG_ENGLISH SUBLANG_ENGLISH_US empty
RT_STRING 0x0099ecbc 0x00000afe LANG_ENGLISH SUBLANG_ENGLISH_US empty
RT_STRING 0x0099ecbc 0x00000afe LANG_ENGLISH SUBLANG_ENGLISH_US empty
RT_STRING 0x0099ecbc 0x00000afe LANG_ENGLISH SUBLANG_ENGLISH_US empty
RT_STRING 0x0099ecbc 0x00000afe LANG_ENGLISH SUBLANG_ENGLISH_US empty
RT_STRING 0x0099ecbc 0x00000afe LANG_ENGLISH SUBLANG_ENGLISH_US empty
RT_STRING 0x0099ecbc 0x00000afe LANG_ENGLISH SUBLANG_ENGLISH_US empty
RT_STRING 0x0099ecbc 0x00000afe LANG_ENGLISH SUBLANG_ENGLISH_US empty
RT_STRING 0x0099ecbc 0x00000afe LANG_ENGLISH SUBLANG_ENGLISH_US empty
RT_STRING 0x0099ecbc 0x00000afe LANG_ENGLISH SUBLANG_ENGLISH_US empty
RT_STRING 0x0099ecbc 0x00000afe LANG_ENGLISH SUBLANG_ENGLISH_US empty
RT_STRING 0x0099ecbc 0x00000afe LANG_ENGLISH SUBLANG_ENGLISH_US empty
RT_STRING 0x0099ecbc 0x00000afe LANG_ENGLISH SUBLANG_ENGLISH_US empty
RT_STRING 0x0099ecbc 0x00000afe LANG_ENGLISH SUBLANG_ENGLISH_US empty
RT_ACCELERATOR 0x0099f7bc 0x00000020 LANG_ENGLISH SUBLANG_ENGLISH_US empty
RT_GROUP_ICON 0x00939700 0x00000030 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_GROUP_ICON 0x00939700 0x00000030 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_GROUP_ICON 0x00939700 0x00000030 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_VERSION 0x00939730 0x000003c0 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_HTML 0x00984aa0 0x0000669b LANG_ENGLISH SUBLANG_ENGLISH_US exported SGML document, ASCII text, with CRLF line terminators
RT_HTML 0x00984aa0 0x0000669b LANG_ENGLISH SUBLANG_ENGLISH_US exported SGML document, ASCII text, with CRLF line terminators
RT_HTML 0x00984aa0 0x0000669b LANG_ENGLISH SUBLANG_ENGLISH_US exported SGML document, ASCII text, with CRLF line terminators
RT_HTML 0x00984aa0 0x0000669b LANG_ENGLISH SUBLANG_ENGLISH_US exported SGML document, ASCII text, with CRLF line terminators
RT_MANIFEST 0x0098b13c 0x000003d8 LANG_ENGLISH SUBLANG_ENGLISH_US XML 1.0 document, ASCII text, with CRLF line terminators

Imports

Library KERNEL32.dll:
0x734000 ExitProcess
0x734004 GetCurrentProcessId
0x734008 GetCurrentThreadId
0x73400c GetLogicalDrives
0x734010 GetProcessVersion
0x734014 GetSystemDirectoryW
0x734018 GlobalLock
0x73401c GlobalUnlock
Library OLEAUT32.dll:
0x734024 SysAllocString
0x734028 SysFreeString
0x73402c SysStringLen
0x734030 VariantClear
0x734034 VariantInit
Library ole32.dll:
0x73403c CoCreateInstance
0x734040 CoInitializeEx
0x734048 CoSetProxyBlanket
0x73404c CoUninitialize
Library USER32.dll:
0x734054 CloseClipboard
0x734058 GetClipboardData
0x73405c GetDC
0x734060 GetSystemMetrics
0x734064 GetWindowLongW
0x734068 OpenClipboard
0x73406c ReleaseDC
Library GDI32.dll:
0x734074 BitBlt
0x73407c CreateCompatibleDC
0x734080 DeleteDC
0x734084 DeleteObject
0x734088 GetCurrentObject
0x73408c GetDIBits
0x734090 GetObjectW
0x734094 SelectObject
Library KERNEL32.dll:
0x73409c HeapAlloc
0x7340a0 HeapFree
0x7340a4 ExitProcess
0x7340a8 GetModuleHandleA
0x7340ac LoadLibraryA
0x7340b0 GetProcAddress

!This program cannot be run in DOS mode.$
`.rdata
@.data
`.vmpL
`.reloc
@.rsrc
tb\Ixi
YZYYXY
/&2vq\~Oc
:<xA_I
P8/@"M
_JB~^
>W1rNs
rC}8?+!
RQv:{%RQv
+",$}!
iBZm;i)
;D9r^M
A]AXA^AX
N(4-uf
'fq#bc
Ah0$%rh
/v*QVt
#z<bx|
L,YATA_N
a>UX^Y
Th0+}6
i17E$`4
((G9[|
KM"m-ui
<jPAe !<jPAe
$;fa|Wdw]
9> m/2
&gZK''
|8T5/Xf
[g7{E\
'VvBv_
S#A1TT
pVs}@Q
Z~PXjy'
]FGl^A
H M5to*p
'\;hfA
oE5:Ll
${Q~dk
M,[3$AP
XXXXYY
Pa~Swrj|
-K/]mi
(:h?7<
:[B|IL
#Av=x&#Av
{S&#j#df
r9Qy^^
8e4VIk
>WN%9
SZpOT-
zv56h_
ATAPM3
,ZA>ABw
LA.[z[
1")CD1
YXYXXXX
XA_APH
;Kv/Ig
?eJOp)
I:s :'
)rgcj:
('3-\{
20=45G
X3$rh4S
7o.c5B
C[yps\
Zm?/]
~6qq/?
"7e>s>
ZZZYZX
R!i_VKW
.TTatAb
Pia#Qv
_>5nQX
~3 qpn
AYAUfA
1r&`|s
6b5sqa
L$PZZY
=-~Ad#
`v0eT!Q
m=7:6/A=7:^W9=7::;0s
hP.5uJ_f
15=n-r
cgPx`5
)uM38?
A<U%eE
AQD14$AY
RlI^TFW
Y5^jk
)`mhao
n]B~O@
wrFf`L
ZYXYZXY
r,XY;F
T~'Nc8
!J1<F~
Eq4miP
WS_9y}(
T[&r:h)
!$'|GL^#
{4JAYHc
u'RZP{
A]A^A]A^Y
ih+s*N
rX{iN-
`{-_0F
E[:cx?
e:@K+u
aMT3a1
,8QF+u
z1IG+u
6eB':^
R-9V+alv7
n1iVR;
u_Aa.`
@r UW2
J`[fzg,
aO)&f8
YZYZXZX
M`U<)? R
d{-'T|Z
zZp%}~
`nkRL3
C^vwx`V/G
pk@mz,"5
p!Chwe
TgG9r`
ct#d_@#
lb/n4 T
!I.a?H
>2]cE{
P{E;d}
XYYXZXX
h@1;1
*cRF^U
`fHf`II
R#b6m{
9Rki>l.
PXXZYY
+1X+(u
iL(&(uuW
)a6Ws+
[`"$~6P
@Q3;G&
WAE|gF2
=.I7S1(($:
|XEL>Xc
v"%LIN
oA]A]AX[[
\AO(/b
*nmyh0w
A]A^A_
lz"l:F
C-GQBa
O}//H
CNi`sI
X&4bh!C
' -4 W
eK<c4B
9J(,hC
FZ5zII
/_`+ME
%"AVA3
ibxC~J
R-W@@P
KERNEL32.dll
F-b]Z:
PPIPf5
e!TObV
Rae'bf
yO2m'\
Z5)A$iHI
#mF]A
XZXZYXZ
nj^g?c
2kJ(cb
n+$ih
A\AYMc
m\UvVAKPI
Dz51$a
^#Mm&L
-Tu8vu
xpTwW8u
PwTD}<Tz
@ix*L5
g#Fp,W
NTNB~S9
x8W3H?
A^A\A^
/IEd-c
 J_w`q
ExitProcess
7~hwP"p
bI=uD@
&*vXAw&*v
&*vt%/&*v
SvLgf5
8RRXXYZ
/+=ubfE
`Sr]|LU:
@]d7a@
7XfvSu
iv`O80
i>}>;@
|L4]0O
nACI-'
r*K|54
Gk-EST
oKbvL+\gI
*c/XB_
76.#5%j
;hRBja
lhW}\o
GetProcAddress
C:#Y^:7hl
k:!v~&
$mD<>0$
7wW)f~
(ixY.{
qU@w>j;
K=Bdj:
LH*AP5
Im?KGs
fJp3H.
@v10q!3g
-hmi/K
$vQ"<t^
XZZZZY
]:_U8
PYH$#81
~FQoNA&Rc'
uG@$N
)FTPxO
+\Q$,+
:<vnx-9Ir>
#V3"#Z
7.zw%OeG
gPDzxw
iugBYP
?#>Ozy
ZZ^{U(
d:']U
KGO~{@8
F[1'A,
v*G0{"
elK@xw
mx]`O
GDI32.dll
B#CSDCE3J#K3M
dcfShCi
j#k3l#m
wsxCy3z
#c&c+C83
HsO#PSQ
$S<s>SA
%#(#*C+
&S's(#)
q#tS}3
QcRCS3T
z3{S|#
1C2s=c>
BCCcD#F
3C:3@
T#WsYs^
tCy#|c
&S's(#)
qct#wCz
W#Y3\3`
HcT#UcXcd#eCh
psr#ssu
WcXs_#`
#!s!#"s##$
qSrCuCv#
/c2c>S?
EN) MB
CoInitializeSecurity
,/S]0X
Wv@Y~.!
CzKK<.
EW,gD3
wLbj7{
ui>oH
>v6;%a
(ATAYL
"A]AX_ZA_Z
T$$f!L$
t e)5e
dBv'b<dBv
,Av94j,Av
,AvQh#q7
N!L(bE
@$DXAh
\;,I4$l
b_dE\M6
(^o[+s
+rhSp<i
A,e@|4
LM~t7j
ZXXXYY
3j.Af8
eDuC91
1R:Lch#
]!s^W[
'"/g+=
~4u(8y
UX::XP27I};
nuFa:N
k-C/xox]g
f~\S@v
%oHM5R'
7m4:%{
Vx@ZN
Zx@ZA
GetCurrentThreadId
+bmb@
;!;W&|l
OS=63eU
?i(EkzE
=*2Jl{O
uC,DjM
1ldf:/}
&YZXXXZ
8+v}<.8+v
F!t<!fB
LD(WD1d
DXvxQF
g[v0iq
$*G*$u
u@M8xH
H-Evx*2
,Q9$+&
-@IN$
}n(yEz5
A]A\AZ
+YZYXYZX
wD!?/i
Scz] n
kc$)b9R.
yn"vIiU
<9.6b
EgzFmk
?X[[AX
RA\Z[A^
6AA{gEYN
F"D:gi
D]FmOzX]Fm
SFm{a,[
YJKwXA
j_^wI)_
b["I|&
5+\%Y5V
fB)<Df
t,k!:]
X#q"W
?{55Ev"k8
23k5q5
R\a#t
"YZYYZ
JLEN|7
HeapFree
A%@,'f
CbUI<6
u*VY|EZ
<,gpi4
[A_A^Y
8L$Wno%
8p0#!5ZC
!K^?kK|.
A_A^A_Z
;NAQWfA
ZsUkit
YvW&QP/
N#|$ XA_A^A][Y
U`R[,r
F]}=d`
;>iC,A5(
C%uAYf
|B1<<A
iWStRds
RT<x%uf
E+s T):
&ZXXXZZZX
TAYSMc
JH64Hh
)iZ@ t
hnv4v/
XYYXYZY
pxJg;i
ZCVl0g
~DZ6`1._
=(Ddl!
a)P+0
ELe0B;
\DX*lC/
j(A[Z/6
|.cEDwM
6n&"e`
x(zX2~j
lmTP}A
RAZA^YY
TM5"dJB
L!m8KV
yIqQIN
b!,SR&[
rH`!#A
BRD$p)
AVAXfB
#O8^Odi
A\A\A^A]
q<cnP)
/_wZR\
uu2JscKT2y
4T,zvux
uZX+sL!52Ve
:!F2-
gxxz>f%
xxvFbi
4!MD"u
XXZZYZZ
-S$[BN
}fn(!`oJ
Kqsgj`
_aLg}Df
iZ; vqf,%I}
!mKvOR
{#b5k"
le9k5&?
.g[{}b
f B`7)
:!V/k(
[MJakJ=
L^.7K)
cp"`^]D
^;tfC
dH&TOh
t!ST%(
IL[UyK,
B$O'5
acqqJ.'7.
pAgNDPQ~r
cGPdbQ6
i)e5B
Sdq[cc
~`5(NgB
ua$X$h
QYXZXYZ
L30v@W
r]A'S@
cvQ!`L
I\*^EK
y]Py$^
64er(WfE
T4{4%C
]wv=7?
Fugvvr
`p2u1y
<q&:mx
A_YA^[_
AZLYLR
ZI)&]>
J[]fz\*
+7A(z>
w6Ug&?
`i*iRv
W^Y#=W
iosXEi
-XZXXZ
h}8>dK|y
AZA]A^A\[AZ
\;v`AV
w'~&w
sYu~z;|
.5ZtoX
S](Cr@
;x|B~r
=@:{wp5
s_=@sPP
&IE{zugY
SwkW~
GlobalLock
arvj7E>
arJHv@
v%a%tB
0x'HB@
Wi]g51=G
(i.N[
!^]GDU
m49dUgz
g<0_0
TQ}xe
&Me_J5
,B,>;4
<y(#`!
3ftnC|
5Xj\?e
o&5bkE
6? @KWx
T>FvF(
q+I~AcEe
y^oiV}Y
^pl"F^y
2*Z2`L
.'_7!D
ZQR$^9
]7}iFvm
pV7gCc/
_^@G/D2F!
.[n]1`
(ThwIX
fZ(T-P
;$GhR{
cOR[qS.
6&*&w!R
s`6cc3
NsSN=Su
D./2R
&RS<P=M
6WGvwb
4bLJ4H
\G8 *i.
GLvKp
o-h?,v
h4D_eZl
D@kF$b
hg:c/)
cB@ew[
C_ktj_)*
j9KeLq
DXsHpV[
bIH3k*
Em.=c?J
jOOS-m
_jerD"
q^QS}
tGdObt
/1YTmr
?Z_;@JI
o_*f&2
{wU7$+
drUj(d
v/Q!EO
Ls|\.cX
SJx6l"
Q_/koA#
'&{@^b8'
D>oer{
7AQZ
qsk||*R"
1fK]M;EV
O8l vi
X<%E0H
D_2Zsjx
vLtfq/^
NM3AQA
q)ZWLh
6jyU*:
X'_.B/o
J5n9*%
E5|`+UT
_]:tBTG
tD,|;~
2]8dka
0q}FG}
vX.e@f
0}x)@S
N#7kg8P
5}5(iE
\18}wLm
8[lAUd
00vnr2
;R'OR2
6D1ND7*%U
u@ @x*p
6ti}AL
Zi$st/
Hy3y(v
hl$&^uJ
pnm8fw
F 1"o>w
ub*!G(
IJ\m-"
FyY9!k0
{4t9):
U5H*[>
72K/?.
E1Ooa~
qes{/[
i7/]m~
typ(.Y
Un!AI8f4
~fpA4^H
= 8YZM"
.(C,4h
]4I$J(N
Qi!v5X
Fe^E`#
o,ZF?Z
}uoUxO7
08QRtb;
qY]{"%=
S'F87PW
N8z$q
}z)jlf#
KhQ(6w
[,l:3IC
{c #W=
5yaaG
dJ:3$g
}UCqoe
/gO<~1O
V+/_ Vqg
Z~%_L|
oI"IQ X
'y&[,\
z.\39^
5EgHf
"A;\l4
x)<@K#P.e
t>-"[x
<&66#]
J!X{uD
*^<|9K
A;]vxj
*p<Up.
ND_fFU
uCHFU`
MX5`hA
nNip;*
iCh%Usf8U
JojctfI
t@C^wk!
3|:gj4
8[>^Q$
1*3yJQ5v1/
Fq=7o+
PH50H+
aMjBAGbw
,hFSUS
xSsh|f82
6!^{pO
l->OZeB
O@#+|w"YL
wo+V%'U![
<_?fu`
51Ro K
8[</NA
v!n9!K
3QJ')_'jm
UC5XgRD
#!5_"G
9`lJqt,
Cx6E9T<
!0C#xP
NGmAqi
]1,[fc
tl1[T|
fl+2PI6Y
28?Qs}
+[{suB
S=W('w@
2V0(2xv
J;c]h!
a`)rqo
ck{4BD
:??sjA_
m]QC"7
AleXc1
,TfU:Xl
YzgnQY
.&.{XA
b)w(>-
#_l A9
Et2l_#
pd)9cE
b,1gC0,Z
w4xRCu
qXH#i}
Q&?/6kJ b
9c|?v9
bY/Cn+
1}/JqM4
ASHN0@
:\89?['
nLw]Ah
o-XFBp
;.Cp!u
<3O1[p
Ax?$=7
@S@_k%W
.U?RL+
R1]=J
~0'=N7P
S4cNc3
H\>Lx[I
eXz?U_
u16M$8
\PWa#E5
qJ ,ZZ;
bXi^}-
]7@~uy
4-67b^
!psL7v
N=&{Jw
Swn~cp
)s/}${
db*\?$|
b^2O/[
O)~!:6
e~!:6q~!:F+z
}C^.L_
~$iR/-
nM% ^JR
CIaSsN
X!<Qh&K
u%x"E"
ZXYZZYZ
_ PtN"
QXYZZZ
:bUw6iRd<p"L
i-xmtJ_#
5JQ e9
oD1,TN
uVcBxK
r:A]>=
AE^Ep)
VL5Y9jq
:+Co9%
qNX1w5
-p\gD.L
'YXYZY
BYXZYY
'kf`#h
2AqEOliM
>)Rl3!
DZ"3C-
_ENmoB9PB$
Xj-QyF
C`?>]_,
AQB1T|
[$"Qk#U
v f"F'
mH; ]OL
}!wR,(
KP@O%
X81HH
"Oqtq0
_[hAdjBT
vDMVf
ohx%q9
22Nbsf
i8Rlb3
&"2q-3
<Ro`S Z
mIP`4w
{2Vh83'*
b9S<IA
Kk9@(g
wb<QvK
(S~;Gk
0nA\6fD
%#>Uq"
yL N34r
KT @q\
]gCm/D
iKB@MY-E
Z:UiEX8xqe
QLi,l'
!*z*%]
a(DW2Z
4.4w-E
6pUsjF
mowW(S
hJ1{t2,t
;`0s !4,
|fKU=Im
G5H-8K
HA;sq.
DK3Ma['
g\U ,\
{Cdj!p
mIVz|,
}R&rBS
h488Cd
pgL#iNxd
Ljlmo7
fjm?NIWn
21F-tN
%S5c3}
yE"?3G\
cRWosE)?
r_`xF-UYn
RUR!%C
O#oLnk
B:vFwIB:v
H<B%O3
?S Mth
&XZZYX
[P6O#^
j5@34(c
kU"ZR[E
65:t$t
ExitProcess
caXCo_57B
J"s|;q
`/k KAG|
k4I-XE5"
`1xf#
!:bELV
8AfSBD
WlG<`A
Y\C85v
3imaHb
r0V|\V`n>
YYXZYYYZX
Kh<W2)
Xy5"8b
sx@56/15
GetDIBits
X1FYks
Hb^-,}Ik
l 7z|S
tA & E
<Z%E0'
AWf503A
g\WSAHT?
.TDVQ}.^
vVbBA!$
v]l{;Q
3l-q":
<8DC0f
9m_5hd
elKz4e
JHf1L$
Lr E:m
b]RkC@
EamdAyU`h
ub_>2|
KH8AXq{fBnmC
#(lR>-J
vikA3g@
`:q/KT]i
AVAZAYD
XZXXY
_*(^@=
?&y#J>
EI^^j'
]wM+BE
s=OAYHc
wF1<$E
#K,hAP
Mp=C(|
ZXYZXXZ
,1#BAYK
ole32.dll
YZZZZX
FSdq1E!hd^7
K}F){z1
|Rf'{%
_Ry)Eb5\
ctXsHq
BE)V=9}-
]Y!/Ph
gZ)$A
AXAZA][AXA]
PYY_A^X
Us6wvvp
M?vRWH
AQF1,$fD
/Jyv7Y
Ui*nan
|-lcY3
rb_bP1&l(S
.Da:2~PT`u
q+_k9l
jf:Wf`
gtqFOi(wtn
kUpIstA
zR|{{
~5/rJ=
bSP~3v
_A^A^A]A]YAX
%Cnslg
4&D)l$
3HY{/_
0E[DRll;
=uy|Am
Y_Yu)@p
R<]!k:
|)P'l -
t!q3D&
Y%5@i"B
BMhBrJ
oI,1_N[
J{YErm
X\4<L0
Te; %d
qip<5x
K~KugH
arw!i\
,a<5A3
AZZA]A_A\A_A\
OJA-yP
|1$ICC
uAQ-{,Zk`
_8L :Ep?
ReleaseDC
guf1@l
<.WsG&
w-Us*rT
Orbag%MG
*oVEsW
-YE2TDE>a}
FCcnilRD-
cV,b4
r`gP#i
yav If
Te2SdbE
C?cE@`'
)F$fg$
E\3!a~W
i}M_*,hOsy5
WPg=?!
AYAPHc
fF+,t4
kk=O.m
Z$@3k=
b_!{hP
S-M$~b,
ms_S?%
meP&]b'
kx`9`/
7ct@7l
Yu0*4
5:*KB
E-:R*.
B5(71g
XXZYZY
ar0j%g
8iYZG1
*4YXXZXXZ
/<ZAv5>
]Yv8K0e_
"2vkPAQJ
OM59>dXn
'&9(2v
e_b>-o
)~vb;QfE3
BAK-|-
RrwU5A
T`"fyn~
WXYy?ka
ie?SYbH
Da{ tf
>e:lol
bd.#3m
v-g9)N
DeleteObject
j3{]*bh
wI^\v3
g<vU("g<v
g<vaHjg<v
@PYNM5
_38Lli
h]Fsl-
:c+#R_
p7?nrg
ua/r*?
#/0aj1
F4x`@&
yo~M3br4\
n:%4$be
Laj,~ad
!v|FTb
)8:]e;
g=6~3
TkIwS+
GetCurrentObject
r#Mo44
kbia1S
l1vi.9?.
[,.PkHM
"#KJpnd
#bMhA*
A_AXA]A\
X(m[=VJ
cM(-u^J
Mt#ed O
ED]2zgv=
ZB?7 N
7U !|_C3c6+
PXXZXZ
EU""Q;
z`=N2J
c:+RXz
WT2Z*t
Kv$1]<,c@
g:`ZZZ
ZZYXZY
TkD6Ra
?u%,fO
]$7z]vO$
p<v>>m%u"h4lv
GetObjectW
*U0>4i
mcK`CY
S 1L
WnEJrQ-
wH7Nxi
y})qTd
*'tRLv
|hM^EL;ro"
4((0q!R
0{A_fA
Bo@`WQ
3KO%r._x}
wAA3vD
=u:CD#
D0v8yU2
sw0"?fn
D5MKr2
"@r`#"
lb_]`i
j pC:K
'v,w'@
o,UuHB
Wp{#8?
/;sJi
,<>Gxb
&Qf1L$
0 wi\zF
j?UE~!%
>qj8|{
!0va>J
^A'BgB
(xw\}o=
-aC]yY{
ARfD)D$
-0v_`|
3TK}N`r
A_AQfA
n:M]"9
~BH5=D
H@M&aR5
iL7q(Os
'kWEA[
[q59px1L
|pr."P
0@ Nwi
O6=oZ7
<RCF:Qx
CF:M\H
XYXYYX
L!BCD8;<@
a5;Hs#c
j6;}Es
:VRadk
VwnT%:H
Ok@-U)
=A-Nq<c+A}
%8c+Aa<
l=^P}=
>Ovh[P
0#K9bnd
CQt_iF
#,3f8Xi
'GjJu]
> -UE3
AQARD1d
wfFHE
\l]:^_
|Yf_E9
%aAzF'_
L__H4E;
_9]RE9VS
x.uD[,tn
N'GzQNq
.9@JO;
$@aa)eZP`D
E"=Y,,
Tu.Z)
Ja,yp
#W6y!z
YOAhiH6
NU'5I"
d"Ii5+
8#]&i*
AQB1<<fD
8jrAS}
e<IikC
+lBf+L$
GlobalUnlock
A-K UV
a<i3wp
sV (sW
&klVqZ
)`ifA
FNubP_i
SYuLTh
GetSystemDirectoryW
AQF1d4
y3r _AYMc
A&Gn4
iV89b]
nWD*G>
`[X/P\/
kZI_:S
V7A^f06
DCJA*"
LNEdX&
Q7LEmb
$TAZAZ
foo+Vh
Kk+X{l\eV
mn~[<g
RYXZYYZ
|l!TEtK
$#WN.d
0[wxlC
B->iak
AQF1,4f
BU+g;b
hbCThi
=H+b<v
A__A_Z_
QAX[AXAXAX
T1Nf%3
@XZXZYX
h6e0Lh
5NwE?H=
W;zeg<
LS'g|TP
R3( UD
q>/f 7
-?;)|6
GetWindowLongW
9AXZA]
M>vT{H
2>v_TL
~D3v/M
"E'9sL
C);ws.L
(/8//X
XAfuhF
@8m$9V
FtJ7h-
B>(JJ'
A\A]AXA_
A_ZA]A\A]
/?@`C*
3[xPU=
^NaYP= ^`
UEELfl
`.8I$)u
CoInitializeEx
&BzNBfF
&JzNBI
F)dT J
AX_[A^[
j iHb`8N
Z.+G$z6
6F\'.?
}L:gxl
yl`yIk
i0E8nGx
:d4Pvz
f/!kN6
[^tZoj
0z$`Qt4\X@
.EtlW"
S^?%"4
*Jzp\9
kIGEOX
$R8(#%
D%Fwt"1JYD
%IZv(A
],36Z[
Z\8|j[O
Xy0qQ
A4e~q3
d'f;XP7TqL
Mv.)r
5<YJKz
A=vFiO
L|(XfA
QA%~q@
.*2^s;2
ZXZYZX
} wl?>
#}a L*
)>wyO
XFU>J&
*y9xpo
uM^f>3
i[`IC;
i[`.Zc
W76X#s
s8:It"s8:yx
s8:AX6s8:ix
5^o9t-$
E>Z|Ya`
4dA"CBO
R_ K:+
< a"k"
AWF1tl
f-}g7$
:,i(k%
[@ufkG
)<+,.K
@((dp/_Y]I
!D4e,L
_<30V7
X+ZHc}
/w<9U`=[
U&vt3
tE@<QC
uY9VWC
>u0f^H
BAlytG
ef{nmT1
jRfr
aU(OJ#uV
;4E^f%E
XXAZ_AX
X{RPoa
cc5**Z
NCy9FJ
cASN{-
A]ZAX[A]
bK'0Rd
YDmZ_hX
bF53q<
[`,bIu
AF,N*:s
?%[/6:
;tPCEp
>Xq48"/
!%)#:
a,@i9
`p@m$
QQc_aV
|U',LRP
g=z.W:
wT6\&]
J9>]z>I
nyAYPMc
H7{0Tp
AN)>/
KBzL<:
y%S+R}
5,+}KU
[RnC{+E
5}f}7]
b\K/sd
AWA_Mc
:D=UV|
$wKh:T^
j0jq^l
\9T/D@
f5)ff-.
9Y'5{Y
7vYf[1
<Q#%;&
I=Ely:2
LdRDHS
B`Ft&`C
8A\A__
n~qwpm
AQF1T$
Wbxo[i
|uoQ0>
3!5 fB
c/WybY
<v47Pf
<vEJFN
U#6 &!
$0Y64D2
qWQ?<*
7IaN\A
V_AXYZ
3^4KC{
e,c1b[
]d8,mcO
p`|_@g
R"+k<W
ZYYYYXZ
+iv`>
v=oNZgD
,"r6Cd
Y>]A8[Ta>]A
#_$zK/^
A`s[wF
TE*"P
BW0MEj
i,l6_m
ZXZYZX
'UU$E_
Q` Qa
O"P ;xj
A5S`9l
_~gR~w
yp{c:8
%bLY!<
;va"j%
|x.-yiS@
;vBm?8
"jrg/[kY4
9GUUv)=
xEv)=,
gKa`HB
Mt<8Aq
c0Sb"
Gr$'[b
g14AYA
`]`~UL
'A<"Nt
%XA_XAZ
r+AXZZ
0APA_YAXYAZAZ[A]Z
.*Ih$l6
A^AXY[AX
p[*<u
I457)/
YXYYXZZ
`6-~dh
5F5WYc
W7F';g
iul,bR
1s3VB1
6VAYHc
+(6lu4
;\E::
IPX%(j
nTwt2(7
bzV/CN
*9JI3;
GetSystemMetrics
5f%'fB
m-Ou[5
=]ljO%O
BXr|>v
&1E(n]
`>evKPIm
AXA\ZZ
<6vD93<6v
l$(AZL
J~gWE.
BC(IZa
dVvKlsSI
]l 5`?
7+][fCs
-AQD1||
q>,AXH
$T8f}/
`I-5K'
]_{jim#^rM
@XCtJ?
A^AWD"
[A\ZAX
}C5#UC
%F1$4f
F7EW5|
kFU-'}
H9^/x>)
8J`$?=
~UG^NR0
2=cc4
R$ZA6_
shB[=i
v"sLpd
{7D4VT
Ya?)x`
j'KEju
|~o:Ej}
}T(<z#
P|@g`{7
*i,;`}
Et$<bK;
6G@]5y
$>riYS
Pbl4\i
rbEq~i
vH":ig
XZZXXZ
<$L5Wf
?,W!cS
85fq^&
K)MsY\
m|q#~6
jk])<R
y_9-%.)
O G(]^:
e}0_`8
SJTFnY
foGA"F
z5iE`C
E"snF[g
BbyRRA~d
?m|1o`
-[?Oq
(Za CfrU
]<K3`G}
OAV#5
J*7;;U
D&kX5^
R%c`2/
XXYXXY
R76@Dv
77U`[GV
iT08bs
SM\9@H
V8#;sc
#*MF8v
,@t_.@t_2
2E@>MhE*m
@]hEfS
l$@A\M
7qP+_F
eT,ko)
BC">O`
n~W5jV@
hKvmzYXXXY
PRf!DD
05-c)r
DLv8Jf
]()z+_XR
/@i!Tr
O#vHX8
Fcl$Pd
P!$@ ?
):E5VW
BZZZZYX
cOR7?2
!1UR[P
%qE6C%%qEr[d
C:{;TR7o
`]$-@T
/7bX`<
d\`!o`
WrrX`]
APAXA^YA\
2CG#54
y_NyIX9
/5rCW=
2bM5qd
o(C@o'.
zuFt`Z
BDV{nw
uGW2r0
HRf1T$
XZAZA\_[A_
:"G MH
8(ce7&
f*_:>g
7pV$qp
%poR'v
CreateCompatibleDC
H_ pH^ W
CreateCompatibleBitmap
iU(G>Y
XXZZYZX
1nzEQ>
,x<Cb[
>>EJGP
2R/(kaX6({
)Nss.)
=VMb.`
H)TB,=F
*dD5aF~
&`0h&l
0#kM_]
8a>S4
f5%fD3
ZA]AZA__Z
jb)[xnU
,o\fFi
WC!o'UC}'=
AZA\[_
&8vc&4&8v
8G;l@2
IE4KGq:
b"wAQE
:l^yh8&
l7+"UA
k\~km9
;\p6ZqV
pYA0Bh
(oj(B)
Rjj2lJ
mcEG?%
7e=7]b
iI:)bn
nm3nlIT
FgN#kV
hx`Zbk
v&v^m+
\Lu5><
8Rt4?%
X9F;h>1
9UZuh\
eTN:4]
nU_J^R(
KwkO!o
ryq&Hu
XsLVht;
xB_cHzB
!!eWtG(
)@9=:K
@m\, t
qAJ1v6
+)=*p\
a0[|Y_j<
~b7~vU
}:P^QT
tjB%Dm5
^D_M"l
w@`N}
'_%v3z
-HAEK
@JvoU:
.S9j!0v
fGSv^UM
GetCurrentProcessId
-+&1,d
F<\i[p
IL":A
"'B;A
fqSw.=
lf&]/U]
:?Y4)K
;3 YW<
fg@ip_
b"Kb}5
ZXZZZX
eRdUU
HV lxQW
W4#$PC
S>}nc9
V%SN_
2Ra c[
nSuo?Z
@pz_pw
mt>,]sI
HHH^HlN
&"9F_;l
4RFXX
m?<D[
^EM"qE
`)ZQKGvz
='-'vK
S .Quy
_Iqeks
x'u;lA
I(UWA/
O7fL^k
>-XLoE
OpenClipboard
AYAPMc
u6s"hP/
fO(u1%ryV
=@ldhy
GetClipboardData
A^AZZAXXA^Z
CoUninitialize
n{O`^|8
~\/yh
9{J_hr
F1$,L#
#"tfD3
ZYYYXX
p=/XfD3
bSEkdp
4MI<TI
bYdxL>J
XZYXYYZ
wv|PHQ
5x<w4`
XYZYXX
ngkL\)]
A^_A]AX_
l/Iw=&
0.]8a'
QBAvaE6
CU9=D"
jc$t;81g
HIjGT:
-<vVc,pJ
!%g!&R
M 1(}'F
`$u[P#
k%d+:,
7$pdf-
{L(YKK_
VHl*fO
_`M.kp
rbD>ri
[!d`~4
L8,Oxk
Z-2Aa}
A^_AZA\
YXAZAXA]ZA\
#zpfH7
=Z#TVu
ZD1,TI
vjB74B
*Uat<8TE`5
d[B1<dE
A][A]ZAZ
Nb<*ozA
0z~dz
3i'`W:
`189K_
@n[wz5B9
[\loCv
L'vK1n
'!C45W-
KoT)>V`
spG~zv
A\[AXAXX
%fD#d$
M$vvI'
h~]RKq8u
4b_R8i
<40}+r
_A]AXZZ
$t_5Ee
k#V[,B
|z&IEz%:
!yK_s4d
YE7uvN7
A^_Y_AZA]
]4J9Xv
S3bGXA*
&?vEbL
A0Oy>y`k
ywoD?%
i/9_b$
C`Z#!d
Ll(F1|l(H
fAqRe
s?4 ~r$
76E#m?x
fF3$$N
GAVE?8
]H0CEe
CU(.W!
\@_8W^
tM*d#v
,AWfB+
,%aLz@4
ux?p*(
!>X"D$
T8:V/@[
T\ZC&H
Ne\ZCf
6@3:^B50
%FJU{E
$vJST9
/YNB"L
nA,ZJaLA
|"{2E:e
,nOE(O
4|/N!$
[[A\AXAX
~Bi~YQdnx
H[{v"YQ1
A CnL`hB1
p3E9.{
VPQc]%+~
N27ri^mC
w%y$rA
-<GZYXX
ZA\YA\XXX
ZZZXZX
HeapAlloc
~W<O$~&^Iy
LoadLibraryA
!N0]~Y
<}7tTF1Tt
`!Ya(}
Sj_7{b
TX5l1&Mv
AZAXAZA^
[*3&|M
j$8-5B
2c6hq*
5`kNft\
a]NxvH
i\_r"v
PZ2y>d
6RX,*[
ZXXZZXXY
[[YA]Z
{pC}k4
H)@wYp
'Amr$d
C/. ,x
.v9'I[
lW\PuO4r
H79g}l
8%.}EB
b}_>m
aDoiR:
H7qO{l
A^B1L,
ZKQ!JT@
y6fuKd
A^A\A\
Zc+(eqs
T[dZ@+
OUZdP/aJ
vZseS"v
@*J~^~
>fB7x!@}
&XZYZYZZ
hl:Evi
$BzNBA
4BzNBF
$DzNBJ
~qVi*s
)5_tNf
VozAE
&k!.mN
DEi)"Y
XBM35QhB{
\Yb215
zUV"_
s-tRl^
e|!SU{V
x`Nq
n}0#?t
2|$lcu
PJC$ AQ+
S;*;)A
AYAPAPMc
;^a?[$
fwHv]yb
k>u|!v
5pr@W,
1;&?B1|$
)]=b<oB
K7Jlmo
h]dFF.dr
kNUPLc
R!v^5Z
@!v2AO
0 _Gsw
)u[Wnaj
b%-:>-W
0zv >P
A^AX_A\
e%s'a{|
F0GE+/
|z@RQC
{a1u*>
2J`q1h[J
wvPX?=b
5xNvk/
9ovT_
w,Lz&%
+-X5z$
JAD{zF3
@P4&G'
ya.nDLH
QXYZXX
WQYXXX
DaXAX[
>Ch'kN
zwp5~_g
uzc'IA
}3R$M4%
v2CT';
K_KU{X<
dEs$4
cM~Mb+
\^:9"v
$ [.#W
RLx)_D
o!pg_&
tI-eDNZ
8!uXi(
G=!TIag
W &DN/
zZH)wR
G7@gw07
6T(+1#
)g4Ovi
EXg|/+
1x>RfA
H"*ymJ3
3`'>fB
0kcyab
ljw6=c
gkfFWl
Jo"5zhU
n6z&iA
&YZYZX
H_.if#
J[fE3
E:EI9(
J.B8hf
AVAXAQfA
)~eA$
X#GyPg0
`3b+\T
x-6g v
WM4mev4
*pm*E?
-pL/A5
YUcb|
L\(A_B
!XZZXY
AZAQB1
i%+b.
= v2)w
,.)b@'
.P,tXi
4h>2v
AYAVMc
jb"Erc
vzsDfF6
Gr`aYP#0
74\R{>
RbHv4l
|<)ATAUJ
YA^A]Z
,56!TT
epkUM)
~KieVJ|
jVIsfmK
f&ziCK
+0qUwk
inO[b
[BQf#L
5]$.N;n
FeEQ$d
}FT,)k
A-~U$"
Ae>9 "
u;.NvMZ
IRZXYYZ
(b-v$i
0A]AUJ
AXA\A_
'U?^t]
s{ya?R
cZM`bL+
QF5KZ#Sva-y
A\[[A^
`Ab,g6
@aU-pf"
ykWb}y
]#x'[1
nopV$b|/K
G3OX\T
%D7Y{S$
B1L$ A
4biSdU>}
[38H{?
\5AH},
7K?H[O{'
E7/ia
_J};,E<F
A@k,/v
n-*J^X2
:A)/fE+
`CWfHTk.
^P!mW@C-
9ZZYXX
|N`B`g
"$fwEx~
A^A][Z
_ogc0o
ct<&b*
mE{@Kc
Gitzois0
RRA(t$
AZAQfA
*s^5'>
B>()`)
YA([PI
<zA=NEh
0QP"ck
KvVk!Yqv
+9[Z2D
. S(|di}
0b\<FT^
Q,|Xu4
"{}rpV
{Wd)$]
a!\P$(
&=C]lC
e"39U7
Hxcs4O9
'7[ny%
hD$s3N
TCg/3W
S%jq=D`
y]~4sO
7 DbI@
[k+S`21
pT=@2#Jm:
sA266x
E{\&hQ4S
_Q[SIK
tDfHDC
:-:GgS?
nILs+f
=;*$3[
_-I4@N-w
#1AQF1
@$5O<58
JgV`/`
a4:{aG(
DeleteDC
:08/1
O^R:E
CoSetProxyBlanket
3$BLIO
c{[}cx/
LoC5Le
:vkvFw
zjL<zf
XiEE.o
H:PYM>X:|#TD7
{,U:"Y
-{@+2I
nEC[%{A
i`5?bk
9Lv1cK
3Jz;Qm
N\ RH-
c-]3bK
H.B8rf
!W0NkOd2
EJNd ;Yy
_ew*s2
|NhfE&
!]XQVxY
Va@Q:#")#
E8FG>T
d)oFR*
@ZF:qZm
6CRf(+j
HS$[HQ
4x"|4}
QZYZXX
.TH7PS5
hiaDJ"yFE
rKWtXu
(^aXPTVN`_
wA7;_{
R}sAN+
0E'qwR
u+Aw:Q
f?dWXt
DT:E*&
-tELa3d
h2n+\f
YZZYXXY
6 d@.4H
FA?AYHc
v[5WFg
V_aR|7L#V
,#403Y
Ke-c$J
KtF#fE
2|Y&~1
],]2`Wm
>?86rf!d05
c>u -v
i!LLbn
'[E%,~]
d&21{RF
'#Ro`!
1TJLv>
gyd_M!
ZA\[A\XA^
|v/5x^8
o&ej(1
uLAD'$
LXxAu9u
USER32.dll
6UE4[r
,cA%v1
'hyR m
EuxHCg
qp{9dk
rnOQp
rovUPnrov
YAZ[A^
F7@"Ub
[u,{kr[
t847sO
}QrAF`XT
aE7 K!&R
YXZZYY
ZXYZXX
9:EIWE
$hAMWA
]@U=q?
F1$4fA
\bh@Pic
f@oq>>
7&:1ES
eDw>i
Dd0qtcG
e$>(bS
RYZYXX
xK4Hzq>
Vt-Uu4O
m(HJ@3
c7E304
ZAQD1$$E
A@),5c
vML_m$
bPaJ]n
V9eT-(
SW/!p[
LAujA\
e+SQy/K3
:T`oW^^
vQ#||v
BitBlt
%h=z>^
Xx9Lda7
AX__ZAZ
mM@;C?
|\C;i
E=E.`""f
AC^SdL
1<DAYD
G0TSBV
QDK{wJB
XYYZYXYY
j`_!;i
6aKngh
aaNQQf9l|
+iP$2S
>&:Z?j
AO 36J
Antivirus Signature
Bkav W32.AIDetectMalware
Lionic Clean
tehtris Clean
ClamAV Clean
CMC Clean
CAT-QuickHeal Clean
Skyhigh BehavesLike.Win32.Generic.vc
ALYac Trojan.GenericKD.73323652
Cylance Unsafe
Zillya Clean
Sangfor Suspicious.Win32.Save.a
K7AntiVirus Clean
Alibaba Clean
K7GW Clean
Cybereason Clean
Baidu Clean
VirIT Trojan.Win32.Genus.VYR
Paloalto generic.ml
Symantec ML.Attribute.HighConfidence
Elastic malicious (high confidence)
ESET-NOD32 a variant of Win32/Spy.LummaStealer.B
APEX Malicious
Avast Win32:MalwareX-gen [Trj]
Cynet Clean
Kaspersky Clean
BitDefender Trojan.GenericKD.73323652
NANO-Antivirus Clean
ViRobot Clean
MicroWorld-eScan Trojan.GenericKD.73323652
Tencent Clean
TACHYON Clean
Sophos Mal/Generic-S
F-Secure Trojan.TR/AVI.Agent.wkgdl
DrWeb Clean
VIPRE Trojan.GenericKD.73323652
TrendMicro Trojan.Win32.SMOKELOADER.YXEF4Z
McAfeeD ti!CAE992788853
Trapmine malicious.moderate.ml.score
FireEye Generic.mg.bd2eac64cbded877
Emsisoft Trojan.GenericKD.73323652 (B)
SentinelOne Static AI - Malicious PE
GData Trojan.GenericKD.73323652
Jiangmin Clean
Webroot Clean
Varist W32/ABTrojan.BATW-1424
Avira TR/AVI.Agent.wkgdl
Antiy-AVL Clean
Kingsoft Clean
Gridinsoft Spy.Win32.Gen.tr
Xcitium Clean
Arcabit Trojan.Generic.D45ED484
SUPERAntiSpyware Clean
ZoneAlarm Clean
Microsoft Trojan:Win32/LummaStealer.MWW!MTB
Google Detected
AhnLab-V3 Clean
Acronis Clean
McAfee Clean
MAX malware (ai score=84)
VBA32 SScope.TrojanDropper.Hider
Malwarebytes Neshta.Virus.FileInfector.DDS
Panda Clean
Zoner Clean
TrendMicro-HouseCall Trojan.Win32.SMOKELOADER.YXEF4Z
Rising Spyware.LummaStealer!8.1A464 (CLOUD)
Yandex Clean
Ikarus Trojan-Spy.Win32.LummaStealer
MaxSecure Trojan.Malware.300983.susgen
Fortinet W32/LummaStealer.B!tr.spy
BitDefenderTheta Gen:NN.ZexaF.36808.@J0@aeZYSJai
AVG Win32:MalwareX-gen [Trj]
DeepInstinct MALICIOUS
CrowdStrike win/malicious_confidence_100% (W)
alibabacloud Clean
No IRMA results available.