Static | ZeroBOX

PE Compile Time

2023-02-09 07:10:28

PE Imphash

4328f7206db519cd4e82283211d98e83

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
0x00002000 0x00012000 0x0000876a 7.97255996593
.rsrc 0x00014000 0x0000a398 0x0000a400 7.17810822655
.reloc 0x00020000 0x0000000c 0x00000200 0.101910425663
.imports 0x00022000 0x00002000 0x00000200 1.14055315347
.themida 0x00024000 0x0060e000 0x0060e000 6.46122217827

Resources

Name Offset Size Language Sub-language File type
RT_ICON 0x00018630 0x00004f64 LANG_NEUTRAL SUBLANG_NEUTRAL PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x00018630 0x00004f64 LANG_NEUTRAL SUBLANG_NEUTRAL PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x00018630 0x00004f64 LANG_NEUTRAL SUBLANG_NEUTRAL PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x00018630 0x00004f64 LANG_NEUTRAL SUBLANG_NEUTRAL PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x00018630 0x00004f64 LANG_NEUTRAL SUBLANG_NEUTRAL PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_GROUP_ICON 0x0001d594 0x0000004c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_VERSION 0x0001d5e0 0x00000334 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_MANIFEST 0x0001d914 0x00000a83 LANG_NEUTRAL SUBLANG_NEUTRAL XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminators

Imports

Library kernel32.dll:
0x422078 GetModuleHandleA
Library mscoree.dll:
0x422080 _CorExeMain

!This program cannot be run in DOS mode.
`.rsrc
@.reloc
B.imports
.themida
*7rjbPpuBSr
T:}frHS
g:lm'9f
O*[bldA
8~IQ7_w
o>[7@3
O-qx}J
\Brhs"
H=I3i`
,Ux:~[
8t.'8wF;3vz<,q
5cSn#b
Er4$xz!"
z_bI&X
&wg;wp
HIoAFl
<t%IxD>
pm%$mD3
Y^mzzu
91yjXD
HyB{4Yvz
HK.'HYH_p*U
Ad$SJ{
au2j.k
v<X7)k
"C}SB-j
H:MSUFx
eD)u@d]t
l|~AIl
J{:d}L
kzeVp:
f6upy(
g@8$u@]
8v0n6[
dVp"q8p
="*qFS5
x:V$x$
aur:e$sB
y$\8|V
E\6k*n
aDL,_WV
}F]'i&,
iO!F*I
qr=yS|Q
`e%(>Is
]-G|fa%36uOc
mB|f)Jk
~N\8z+c~
c[k|a+u
jo;r/q:
.Xz)OT
by[?*
]x7aE^#3
Sx[\qN
?m"~1yb
RbaQVD\
"bzQ&Du%j
n*s./g:
Kjz[0aq
$Ea*to
ajykwkt
(Ea&to
"@[[q_
u01:kr[
[[IqvN
cT]5\S
b`Nx`|
g55QZ'+\~
:lj&?C
{jmU
8G%xC}'
m%Re}a
KM xzD
vG;D1B
v2ChC<
CBZ!-?
M[=S}]I
4tBv!3
Fx#34&
Nm.>H|
5FALR9
;iELa4
Z]H}]l
B byB~
!0j|)p
9z=84[Gc
"NVUK9
"B8b0]
x!4X9E
oq;BeL]
KF]<&Zr5#
4F9v'{T
LZ=|;yF
b)tb_|v
9P1-]&
:kfB+K
_i?|B'0f
C{NPgZ
D4ufP+L
ggRkfT,;
O+IDATx
mHCC(j
k3;>BI
Bf\R:t,
+|0baP
47HZzz
i~1]a-
U8o^17
!"ej'f
zOTcp8AY
HFCiZL
iJ/E6'G
e-Dfad
aHt#Uv
*n[WCc
JUL'[_O
|;[w$Ad(NY
g6gaR9
1L!0aLF
4bN%d4
H@AKDd"
hq9W.+g
gtW^]J>
o*AJiz
2HG6GZ
r6-,c^
NOXcGw
,|M7h,
K||cs3
M.?g|i
_7$UA/
GKd"vD
ZTz%e7
+QTDE=
[Tg*q2
2Q^WIQ
:,{Z[d_
<?xml version="1.0" encoding="utf-8"?>
<assembly manifestVersion="1.0" xmlns="urn:schemas-microsoft-com:asm.v1">
<assemblyIdentity version="1.0.7.0" name="MyApplication.app"/>
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v2">
<security>
<requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3">
<requestedExecutionLevel level="asInvoker" uiAccess="false" />
</requestedPrivileges>
</security>
</trustInfo>
<compatibility xmlns="urn:schemas-microsoft-com:compatibility.v1">
<application>
<!-- A list of the Windows versions that this application has been tested on
and is designed to work with. Uncomment the appropriate elements
and Windows will automatically select the most compatible environment. -->
<!-- Windows Vista -->
<!--<supportedOS Id="{e2011457-1546-43c5-a5fe-008deee3d3f0}" />-->
<!-- Windows 7 -->
<!--<supportedOS Id="{35138b9a-5d96-4fbd-8e2d-a2440225f93a}" />-->
<!-- Windows 8 -->
<!--<supportedOS Id="{4a2f28e3-53b9-4441-ba9c-d69d4a4a6e38}" />-->
<!-- Windows 8.1 -->
<!--<supportedOS Id="{1f676c76-80e1-4239-95bb-83d0f6d0da78}" />-->
<!-- Windows 10 -->
<!--<supportedOS Id="{8e0f7a12-bfb3-4fe8-b9a5-48fd50a15a9a}" />-->
</application>
</compatibility>
<!-- Indicates that the application is DPI-aware and will not be automatically scaled by Windows at higher
DPIs. Windows Presentation Foundation (WPF) applications are automatically DPI-aware and do not need
to opt in. Windows Forms applications targeting .NET Framework 4.6 that opt into this setting, should
also set the 'EnableWindowsFormsHighDpiAutoResizing' setting to 'true' in their app.config. -->
<application xmlns="urn:schemas-microsoft-com:asm.v3">
<windowsSettings>
<dpiAware xmlns="http://schemas.microsoft.com/SMI/2005/WindowsSettings">true</dpiAware>
<dpiAwareness xmlns="http://schemas.microsoft.com/SMI/2016/WindowsSettings">PerMonitorV2, PerMonitor</dpiAwareness>
<longPathAware xmlns="http://schemas.microsoft.com/SMI/2016/WindowsSettings">true</longPathAware>
</windowsSettings>
</application>
<!-- Enable themes for Windows common controls and dialogs (Windows XP and later) -->
<!--
<dependency>
<dependentAssembly>
<assemblyIdentity
type="win32"
name="Microsoft.Windows.Common-Controls"
version="6.0.0.0"
processorArchitecture="*"
publicKeyToken="6595b64144ccf1df"
language="*"
/>
</dependentAssembly>
</dependency>
</assembly>
PPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGX
kernel32.dll
GetModuleHandleA
mscoree.dll
_CorExeMain
34$14$34$\
A#p3\
zdnCrN|
+,%rk
Ya6iN
0,#*')FO
3,$1,$3,$\
CHECK_OUT = %d
"u$@4N
X3+CXNu
V1LbhH!:
Rhf\<s
]-Ap}_
_^][ZYX
,$h9"d
4IuvMW
x&/\`6
o2n<5x
FhB&}/
}OW1<$3<$1<$
cT35df%
hh[ZTi
Y `v6iS\{
_^][ZYX
k/skipactivexreg
_^][ZYX
I^98xteu
_^][ZYX
S80sw|
:0vs/)4
ShH\Or[
_^][ZYX
uEW<#
_^][ZYX
3,$1,$3,$\
_^][ZYX
_^][ZYX
Exception Information
UhI !\
WLSoftwareVersion
9zY?va
oWq4'2yG
;yw|)T
9C5H@u
N`\bg%
_^][ZYX
!K+mf%0
=kBzqH
%Z:~o-
;u_S][
3u{X5y
Shs8~_[Q
_^][ZYX
4$h;vs_^
fg=Y99
V@@5F)
3<$1<$3<$\
GW<$DW
AM4{]l
[QWhL3[#_
Oh,Y *
gWhFQ^y_
u'Y$kEt
$hXI^
/bugcheck
PhLi?oX
$6e;BG
T(Kws
/x-?iJ
Z[+89>Z
wh!6"
$ZWR_Z
2g-X0
_^][ZYX
$hy/%R
9uY>9n_
4$_QTY
3,$1,$3,$\
<$Rh#x
_^][ZYX
6h~)T
Xv!DMBo
=+;A=@>
kU*d4
u:&V`6Nq
C;[Qo.
7!"/CW4_
)7C`'q
e"D/9K
_^][ZYX
X;!xTM
wOIAMt
_^][ZYX
RShsl{y[
9A+G<F
]L5:g|
\ OJ;N
_^][ZYX
Bo<HqJ
.pf>K
Ug8Shgk
Nz?-/z
`io_GV
&5hlzqT
<~-5Z^~
:&9$=#
9gnE}*
RJ?uLV1
|tB=g+
{H5sjwm-
3<$1<$3<$\
j#}Uh68
mIQ-3C
e .VB)
5q4;FbZW
:-Gt@@
chHJr-
=4]nCK
M7TR7}
_^][ZYX
h|K<*6
|uLB7
Q*hBe9
#,Q8l/
BI)NJj
zk!d/qY
34$14$34$\
XO+jFhw
yw0:dy
!fN33Ee
$\VhkR
QhOPnqYQ
qE<~UV]^
}XhH~A
3<$1<$3<$\
<Y:t=cy
?R6ox;
_^][ZYX
_^][ZYX
3u(NmL
5D()\6
'%5[<b
sl|Q=.)
-!V7Z
h5_#X)
^5cE8B
XtCo9l
Tz/#TW
#dcaH
?9v(,X
}u.T9
_^][ZYX
>Wh:mF
Vhg_q;^
8gcxoQ
_^][ZYX
_^][ZYX
wD_.6jP_
),$]Rh
<N`h_s|
_^][ZYX
'}v+c+r
_^][ZYX
h@M y$
u-GD+_
,$h&@~_]
)hS~gE
8xPC.U
[)7!8H
-r}mY1
7-R^wj
R^wj-B
hg k\oR
%71 Ng2
7h}2"w
OQWY_S
_^][ZYX
WLProtectionDateTime
ADOsKY?
ccQ$9f
snHT`i
g5`RQp
"qKd#5Z
p&cldt
J[_,n D
{Z#791
XhrR<q
$\#193
%tG%4a]=H
YZRhXB
N~Cgb
&DI*9/W
|#d:uL
OJo{WhC
&n#i"[
?Egsd&I
34$14$34$\h
O-7V;oV
NZf/6I
x]:+S(@&
i=<-_l
=w}}41
$hKhWwZ
_^][ZYX
4$^hn\EG
4$W^_W
:HON}f4
8+{?5E*
pQM1E%
@Z@Hn<R
LTb`>n
Ooq57n
X7:L5B
-WS6&<
G^O\[&
2DZ1bpw
/showinstance
PROC_OUT = %d
CgX|K'
,$Shm'r^[
_^][ZYX
_^][ZYX
XBH_FNT
_^][ZYX
s[;P&t
_^][ZYX
~f==,Q
pAjB{v
b+G`1+
?#RhU>
H^[F0cI
z-4^.
vO[V?N
H>_^Wh
4$h@Su
m@p'5?j
N~NFdF
6hMIw$
>X+391
~59kyu5
_^][ZYX
34$14$34$\
_^][ZYX
&S.7Q9
>Pf=nu|
_^][ZYX
"iXrg!
?Qhds5,Y
GYoFw~
Xh`Ie8
_^][ZYX
^UP]XP
_^][ZYX
bYWdAR
_^][ZYX
3,$1,$3,$\f
/IhhOh
4$\Wh)
;=>bisr9_
|}Vha=
-w2Jc[
_^][ZYX
4$YPTX
=^0-%t
?8>f7@s
Cs:(GE
_^][ZYX
YvVVK(f`
_^][ZYX
MUA_noO
wJ`Pw~
F5"S|
Q}.*Gc&
^H37;U
3<$1<$3<$
c%$7a%
/checkprotection
_^][ZYX
pP'p-)
!This program cannot be run in DOS mode.
`.rdata
@.data
@.rsrc
@.reloc
RSDSiV@
Z:\Oreans Projects\SecureEngine\src\plugins_manager\internal_plugins\embedded dlls\TlsHelperXBundler\Release\XBundlerTlsHelper.pdb
.text$mn
.idata$5
.rdata
.rdata$T
.rdata$zzzdbg
.idata$2
.idata$3
.idata$4
.idata$6
.tls$ZZZ
.CRT$XLA
.CRT$XLZ
.rsrc$01
.rsrc$02
KERNEL32.dll
<?xml version='1.0' encoding='UTF-8' standalone='yes'?>
<assembly xmlns='urn:schemas-microsoft-com:asm.v1' manifestVersion='1.0'>
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v3">
<security>
<requestedPrivileges>
<requestedExecutionLevel level='asInvoker' uiAccess='false' />
</requestedPrivileges>
</security>
</trustInfo>
</assembly>
0$0(0,000
2%T'1J
Q!_`wYo
ZEH'*[
[LTVeN
_^][ZYX
C*\Xh
VhC|}.
Ph1;K_XQ
>6,sLZ
W.*|PV2mX[
_^][ZYX
Y34$14$34$\
4$[PTX
AA"ooP
)[lE+Z81
Ql<h/\
+e}-B]
(LD(U1u
%"'(M?
en[wQp
_^][ZYX
d-"H3_)
"H3_[-
{ ,"\
4$^RTZ
bYWdA/
m<>^')'|
@&7Wt&p
iO2K';
"%+5!)GD.*wt
src)P+
,4<V-k
8d.K$%
0-L0q~
ZeNk^C
/J/?f\
ogBy+<>
_^][ZYX
_^][ZYX
QHpy,Y
]Xt/B1
_^#89;
oQhV
Qh=*zvYIS
C}^WGQ
VPh=9O
_^][ZYX
/aIp_
g-N%BB)
}X%(I:
_^][ZYX
b^;8&l
IY2]%Aq
/!aF(+
VhBx?;^)
X_Sh=w
_^][ZYX
BMP|{2?
_^][ZYX
Y2?`c5m
$G=.C{
"=ge+V4*k
,$hyPw=]E
''st5`
^(V.;l
*rvh~
3<$1<$3<$\
_^][ZYX
{/-,sV
34$14$34$\)>
~@-Ac(
;Zv6XV
_^][ZYX
{_}}^S
_^][ZYX
[g(zwT4
Y$|]:S
]_%&B:g5
o@-*DW^
34$14$34$\
~X@H-<u
ix'<AA
s?VUhV8zO]
^!1h_$
PhLx{^X
_^][ZYX
Vhzqon^
b5J6Do
0?>/lMRh
)#U1LO
l'0T$f~C
X25}Q?
L8c@bZ
_^][ZYX
3<$1<$3<$\
34$14$34$\
'}_WQ_Y
|'^~_5
$i`?9_
_3390)
Mo^-^0
?-TL.\
$\#391
3,$1,$3,$\W
5hi2c3
io{5Ar
5P~~A)
$hJIu-Z
_^][ZYX
!jGZWV
3<$1<$3<$\U
e1D)=
I^jUYn
T-[C!Z
?r1Bzut8S
YS;(_E
si~U?V
E.Yo>v
g!4>Wh
ooUh^r
WBK>-!BK>
-h~\'!
$hh~\'X
$hBs^<[
$h}9~yZ
G\OCv[
r.N7Xo
4uSZ[V
_^][ZYX
_^][ZYX
/deactivate
H^[F0c
H^[F0c
GEyxH1$
8+91e4?t
d7RWZ_
_^][ZYX
4G{^NNR
_^][ZYX
?sauUBpw(
S't^!9
TJpkX]
?$Lq9p#)3
d6LNAL
&[~V}O
%Oay@`
(:wvTI
3,$1,$3,$\UQ
5j_Xc!
_^][ZYX
GwKgvv
$\3998
3,$1,$3,$\
$hq._SX@
_^][ZYX
gS][MM
WhQ[sw_h
$ht[swY1
<$\+390
3<$1<$3<$
,$h@8w
LYBGSV
3<$1<$3<$\
_^][ZYX
_^][ZYX
4$YPTX
tSh-q0
3<$1<$3<$\
_^][ZYX
55w/Sh
3,$1,$3,$\
|'AhUj
?<OwCQ
~]M'UhgA
_^][ZYX
~US][S
-:&Gf)
DE}~_Ph
_h{N2m
,|OkX)
3<$1<$3<$\
5]owQhb
}-!&5_Z
4$ZPTX
$h{k{Z
$h[,uc[S
_^][ZYX
3<$1<$3<$\
u~~X_!
5EUP]X@
- w#_-Fe
Idw|AAA
Qf7Ph,
k]h~hu5
6hkhZl
3,$1,$3,$\
YsN5bQ
T;V~Z!
oSZwYi
QhuRx~Y!
W+woAP
F*pkJS
[5CX}{-~
3,$1,$3,$\
r!?zOG
ShM8?_
$QhMV~_Y
_^][ZYX
KTMo]1
UhX`}o]
Ph}1n7X5
$hd3!<[
ZQh6d:?Y
_^][ZYX
mFhQ#mB
Ta_WX)
_MQh%:
-mWPh31
3,$1,$3,$\
}{]hdu
L:HOOK_IN = %d
_^][ZYX
PROC_IN = %d, Process = %x
WhXmw/_W
BUR]ZE
QhGA_iY
s__GPR
~P$~Ph
6Sh]Ouw
_^][ZYX
4$YUT]
ggH@Qh &7dY)
34$14$34$\
<$hTY]K_V
iV?@PQ
34$14$34$\
8H}t-8
BPhf8?cX
)<$_OR
Y-(-;_
,>>5~N
Xh!c|^
3,$1,$3,$\
j)Hr]1
$h7V'}X
Y3<$1<$3<$\
3<$1<$3<$\
]+;99V
-soKCQ
WhU,|}_
U\Jo]1
-AX{O]9
ap7XVh
B,sgZQ
Sl| @c
__+89:
~Y-P{zs%8
$`jk.^
7{_OOO
8{\-?z
)<toX-@
PhSv}mXQ
(3#w5I
/Q]Y-
34$14$34$\
PhXvy}XSh
WhjJ?Z_
OZPh@owwX
0yw@-M6
Vh"J]C^
PhbF/^X
4$_PTX
$UNn-7
Juw5l"
d[UhAp
n5Y j_
wmVR^Z
Ug8_-c7
A|WPhkQW,X
Y]hd%Lg
3P.}5}u
{_XH-\
,$hdu,
4$YST[
NIQWY_
k.6[1
]u?)<$
t<m(Qh
Sht<m([
34$14$34$\!
=oYIIR
4$^WT_
_@5Bl9{@
4$ZPTX
>ZRQZYI
g8?PV
$<f8?X)
_^][ZYX
Q6oo[)
/VQhl7u
ofw5f/
)g @V[^W
3<$1<$3<$\
$V[^KU
G/oShO
4-VE{W
_^][ZYX
eZ]Qh(
i^hj"1
?s-ABw}5
-h_We-
$O|?u[
ASy?5`
QUhmr{>]
-^R/(-8
$hO(}|Zh
Rhr-Mm
4$ZUT]
YXVhUR
X-~\<y-
Sh^kw>[Q
QXH@5[
__s-C%
A@,@Q[Y
l@@5!z_}5%
_^][ZYX
F~z-'3
4$]VT^
glUhyM7R]1
g^hqS-
Ph4Y~|XH
~-fc{[h
!(`oQh
_Y3290
gVhW\
_^][ZYX
--Bx?~]
34$14$34$\
jShT^
6hZzjL
WhqLV[_
@%{wEMS
w5)yWv
)-NYSz
_+99;9
0O>_3
H-fIy&
Z8x$-i
34$14$34$\
<$h*{Km_
5MvlE!
3<$1<$3<$\
_^][ZYX
_^][ZYX
Yh"My=
=@@-CE
Vh]:~;^FR
$$#998
[^+197
$UJ?g]
<{WR_Z
8hLR%2
3,$1,$3,$\
3,$1,$3,$\
34$14$34$\
D-9|Uhh
_^][ZYX
4$[PTX
$O$~{XHQ
Xa1V]^
-1'o~]
4$]UT]
n_-O'
4$_ST[
_^][ZYX
Vhvtk~^
L6(}\=3
-UO[y-c
$#Qc^R
UhN3m.
_^][ZYX
-IBd}Z
B~{-7l
[gyOU#
u+~}_Sh
lrs-xK}%
-uwn{Y)
xNs5~KQ
_^][ZYX
w_QSh>
wS]{%DJ
$\hn9K6
PVX^-k
sH5f/J
[h^2RW
$\399>
KYVh4u~
$t@T}[
3<$1<$3<$\
PUh-eic]
-3Go[)
4$hie
3,$1,$3,$\
nK;GX!
Wh+Czo_
Wnk^CK
@%=psn
<|T@-n
@wzQhs
4$\Sh;
O@-(^?sShk
$XH-qz
xp?-QS~_
<$hQS~__
13o6Z#
:3kg$)!K
ZOF9hIa
3<$1<$3<$\
3<$1<$3<$\
SKWh'J
Zh~>qL
3,$1,$3,$\
-\Tt7R
4$\Ph^
oh6xV!
3<$1<$3<$
'Rhq*Z]ZB
34$14$34$\
]Uhhxgk]
,s}WhEv
_^][ZYX
PUh%\}{]
_^][ZYX
ShRt~[
]_hzNi0
m]+193
PQRSUVW
_^][ZYX
}5}_Vh
%X}:S
c)f=Phk(f=X)
$X5!}>
{]h{p5=
4$^UT]
G*}|XGV
4$ZPTX
oZ3791
9*<}Ph
)v]H(`
!p9;K!
QhuFP;YS
3<$1<$3<$\
[-m!FU
1QhzT#z
^RhP/)=ZJ
H^[F0c
ExitOk
UwqXhz
3oX@@H
Wh|a/}_
lB9C%_f
_^][ZYX
_^][ZYX
5J/m]%
Z3998!
~[PhmT?
_^][ZYX
$hP9y?
-F)E[W
}oU~)Y
$B^]v]
3,$1,$3,$
4$YWT_
~>VhNY
_^][ZYX
yzo}Rh
F|]ShY8
-OdokZ
3,$1,$3,$\
a=_MRhG
$hleuwZ
_^][ZYX
;ShYZ@J[
34$14$34$\
GmNyY^
_Y3>99
5Eo_-H
ShPqQD
3,$1,$3,$\5
Rh`t_>ZU
,~w)<$
^$~qGU
UhA_W}]
`{OOP
zo5tmK
_^][ZYX
Z3,$1,$3,$
4$XVT^
Uo<O_1
_%MW}y
&^6/v(
34$14$34$\
34$14$34$\)
3<$1<$3<$\h
_^][ZYX
$\+:98
kQhMR~
Vh^T6}^
3<$1<$3<$\
Q>~X5+r}O
%eDw/S
1[SX[!
W4[_x9
9YdcX^Z
<$\PhF
]/0Ju+
v- 3:x
1.{_\!
]*1TQk&
y5 )?5
E[Whb=
$hV_]>[
,$haTg7]1
f{SP[X
4$\VhYG
#SK$lV
]%CC{cH-fsmP
[h|^2!
VhPaw}^
GkAR^Z
^Oh9 {k
M{_w])
d}ZQh
/yvg+R
Ug8VZ^
SWPhw*
9fK{MEE
-c>g-&'
_^][ZYX
Ph|W~%X
$oi{_]
8_VP^X
_^][ZYX
,0?~H@-
|po{UhY{
3<$1<$3<$\
lXPUX]
j-#z-M
XzErVh
`w.-)geW
PROC_IN = %d
'|og}B
4$_QTY
3<$1<$3<$\
/dumpstatus
_QXY@%
o|Vh3W
_^][ZYX
q(t;Rh
?[_+297_
34$14$34$\
Software\WinLicense
Software\WinLicense
ProcIN
3,$1,$3,$\
Y{~^Qh|
)4$^NQh
,$\Qh%
$hpqm&Y
$Wh2a_M_
~ZUPhT
3,$1,$3,$\
3,$1,$3,$\
Gm%Ciye-
3<$1<$3<$\
,$ha~Ow]
-\/}YZ
Z@5YuZ4
PQRSUVW
_^][ZYX
,$\PTX
Zh zoJ
$hJGzC
-8rl{[
4$WT_U
QJ~B@c
_^][ZYX
34$14$34$\
$\)3RU
]-;}7{
4$h/BU
<$hxDb
wm[39-
7OURh)
VhS6gO^S
34$14$34$\
3Ph60=wXRS
"*_kZ3
0EShc[
^?WhAG<W
$\+197
5\/wJB
}|k-JB.
NB?vEV
%&$?e5
-b(N/-
x_=ZJU
*_oX5[v
OXhZ8m"
2=yRuQ1
3<$1<$3<$\
5Y]C91
3,$1,$3,$
P|@!-]
_^][ZYX
VhodZ}^Q
Y%=+^M-
5j~$x)
3,$1,$3,$\
4$Xh+b
_hi$e|
`9~5=
4$\@-og
34$14$34$
e}LUhKk
_^][ZYX
;z<MUP]X
$\+>99!
ProcOUT
WLProjectName
34$14$34$\
3,$1,$3,$
G}5A^8
Why[_.
Rg@-V[^
/a{?BJJR
{]Qhj4
$9N?/]V
Mw/NS
PROC_OUT = %d, Process = %x
_^][ZYX
Y3<$1<$3<$\
4$[WT_
4$XRTZ
<$\-I[|n
;mJ.5@
3,$1,$3,$
4$[RTZ
3,$1,$3,$\
\-X'}o
4$[ST[
4$ShZP
X34$14$34$\
4$[PTX
3<$1<$3<$\
34$14$34$\R
~RRPh0A
$h'PHx
_^][ZYX
-]/;g7
TP_IN = %d
3,$1,$3,$
%!6e!2
,$h6;u|
3,$1,$3,$\S
<$\Vh{
4$XUT]
3,$1,$3,$\9
}HH-bp
3,$1,$3,$\
4$YQTY
3,$1,$3,$\
,$[]ST[
4$XRTZ
34$14$34$\
$\WPhJ
[hqWcX
3<$1<$3<$\
3<$1<$3<$\
,$\[US
4$[RTZ
4$XWT_V
^3,$1,$3,$\
<$PhPY
34$14$34$
$$h`Om
X3,$1,$3,$
34$14$34$
4$\Rh3P6vZ)
34$14$34$\
34$14$34$
4$QTYV
3,$1,$3,$\
3<$1<$3<$\
%P[XPV
4$\h4%d6
Z34$14$34$\
3,$1,$3,$\
[~7},0
1eVa91
7Oax6b
5#9P!
P)zW!
*C$]H[
-a;aM;
HNr`19
7LR(B)
_^][ZYX
b;aJr!
2ExitOUT
4$[WT_
4$XWT_U
.UA*b)
^Q@]:L)
Kt,QY
2_BJJB
^%n2T(
_^][ZYX
.?YB0a
!Zb7/!
7Gp)V-
_^][ZYX
Software\WLkt
A QV\S
*S`51
X3,$1,$3,$\
+;Buj=
5wK[!
CheckOUT
_^][ZYX
H^[F0c
46/showcode
?~doK\
^[F0c;
+%\A<%$
Sat Aug 24 16:33:29 2024
(&'T@@
Telegram Desktop
WinLicenseVersion
=l;f!>
1H^[F0c
WinLicenseDriverVersion
"gV'7X
)g"k.o
^[F0c"
[h5lC4
H^[F0c
@SplashClassName
VE/t],
H^[F0c
znPh5
ExpInfo
CheckIN
4$[VT^
_^][ZYX
+ffz49KHtQYvXd
4a2e"R
-Pz?<*X
MKNR>TTg
;2pW--
]L!iz%
J~m6UJ
4$XRTZ
CHECK_IN = %d
H^[F0c
H^[F0cEm
&K~n5h
/logstatus
/bugcheck2
7G9a-)
9d&$g;
3<$1<$3<$\
4$[PTX
4$XQTY
/getwlstatus
'$C5-M
0dopQr
%Y)7x-
34$14$34$\
3,$1,$3,$\
3,$1,$3,$\Vh
4$[QTY
4$[VT^
34$14$34$
k=~_-a
Z[X[Wh
4$XRTZ
3,$1,$3,$\
kp\?)&
BVGn8.
34$14$34$
Y3<$1<$3<$\
3<$1<$3<$
4$[QTY
34$14$34$
/bugcheckfull
[34$14$34$\
4$]ST[
4$Sh&-'
sX@5wgN$
2H^[F0c
34$14$34$\
XprotExit
34$14$34$
$[YQRP
USh&-'
-Ts>wh
4$[QTY
3<$1<$3<$\
_34$14$34$\
H^[F0c
?\GjkY
H^[F0c
iRNz&G
4$[WT_
34$14$34$\
4$XUT]
9o+i?T
s|8$sf
i"=_=1@
^.Z*o2
,m&>1Q
WWH0)#
$\Uh:
34$14$34$\Rh|
34$14$34$\
4$ZST[
34$14$34$\
4$XST[
]34$14$34$\Q
&.6>defg
3<$1<$3<$\
_-gI_}
gI_}^-
34$14$34$\
,$UT]Q
<$hwqD>_
3,$1,$3,$\
34$14$34$\
,$[]MSU[
4$XRTZQ
3,$1,$3,$\
$\hZy"M
/forcerun
0{_[WT
4$YVT^
4$XQTY
4$[RTZ
X34$14$34$\P
$$WWhb
_34$14$34$\
3,$1,$3,$\h8WL&
<$\VhM
34$14$34$
$UT]Sh
4$YQTY
4$\QVS
34$14$34$
,$\VT^P
4$[WT_
,$WT_P
4$[PTX
34$14$34$
$hyr>[Z
3<$1<$3<$\
34$14$34$\
4$XRTZ
3<$1<$3<$\
34$14$34$
/yuy5+yuy
<$h{3j
3,$1,$3,$\
4$\Ph{
4$YVT^
,$\SPh
_^][ZYX
_^][ZYX
_^][ZYX
1.r(3@~aa
_^][ZYX
1H^[F0c
P@^[F0c
3,$1,$3,$\
3,$1,$3,$\h
4$[ST[
34$14$34$\
3,$1,$3,$
4$[UT]
H^[F0cy
4$[ST[
4$XPTX
4$h%24
4$XVT^
Z3,$1,$3,$\
34$14$34$
s=PIj8
ExitIN
4$ZVT^
H^[F0c
H^[F0c
H^[F0c
$[PTXU
4$XVT^
3<$1<$3<$\
V,R%]=O
/showcode2
[Qh%Vfo
R141kF2
34$14$34$
XheT_u
H^[F0c
4$[VT^
4$[PTX
34$14$34$\
34$14$34$
^[F0cf
H^[F0cr>
Y1<".$
H^[F0c
<$\WT_
4$[QTY
R+D%&$
4$XVT^
/nosplash
4$XWT_
@ZAN.$
2H^[F0c@m
4$XWT_
H^[F0c
3,$1,$3,$\
Qkkbal
DDDDDDDD
H^[F0c
2wPlease, contact the software developers with the following codes. Thank you. (version %d.%d.%d)
(press CTRL+C on this window to copy to clipboard)
CheckIN = %d
CheckOUT = %d
ProcIN = %d
ProcOUT = %d
ExitIN = %d
ExitOUT = %d
TPin = %d
HWIn = %d
IntV = %x, %x, %x, %x
^[F0cT
3,$1,$3,$\
4$ZPTX
2H^[F0c
H^[F0ce
H^[F0c
H^[F0cm
y!I8f/v
^[F0c
@^[F0c
^[F0c9
3,$1,$3,$\
H^[F0c
34$14$34$\P
3,$1,$3,$
F"gL;}5~
$Rh:N
$hVY)a
4$\WT_
WLSoftwareName
H^[F0c
H^[F0c3L
3,$1,$3,$\
.WinLicenseInstance
$$h3tmm
,$hYV.
f$u&#r
H^[F0cKj
34$14$34$\
34$14$34$\
~_YVT^
[3<$1<$3<$\
$PPh0A
-A,=}YV
4$[VT^
4$[QTY
$\RTZQ
-CAg?U
q&4XcX2
?y~wr5
eJKz@'
H^[F0ck*
AF"C;X
H^[F0cR
3<$1<$3<$
[Vh#2T}^NW
$Qh)Ga"
$QTYVU
34$14$34$
KZ3<$1<$3<$\
<$\Rh@+
,$\-]Y
$h+fLg
H^[F0cc
H^[F0c
H^[F0c
34$14$34$
4$^QTY
4$XVT^
H^[F0c
4$XRTZ
H^[F0c!%
`Lr "K$
X3<$1<$3<$\
$VT^Ph
2>_-&N
3,$1,$3,$
,$h_& D
4$[WT_
4$[WT_
2H^[F0c
4$[VT^
3<$1<$3<$\
3,$1,$3,$\P
4$XUT]
4$hF0!>
4$YRTZ
4$[UT]
34$14$34$
H^[F0cB
3<$1<$3<$
[+EF+94
H^[F0c
H^[F0c
H^[F0cn1
H^[F0cf
$h)qc/
4$[PTX
3,$1,$3,$\
4$XQTY
1H^[F0c
H^[F0c
H^[F0c
]*1XQk&
$\h*xu
4$XRTZ
34$14$34$\S
34$14$34$\
34$14$34$\V
34$14$34$\
$SSh0A
4$XhPt
Z3<$1<$3<$\
4$XST[P
4$XRTZ
4$XPTX
4$[VT^
$Xhi-<-
34$14$34$\
$\UT]Q
4$XQTY
34$14$34$\R
34$14$34$
4$[VT^
3<$1<$3<$
4$XWT_
H^[F0c
3<$1<$3<$
Z34$14$34$\
3,$1,$3,$
3,$1,$3,$
,$\SQ[
YUY]SR
4$XRTZ
w%8=x_
4$[VT^
4$XPTX
34$14$34$\
4$\QTY
$\-o0xJ
3<$1<$3<$\U
3,$1,$3,$\
H^[F0c
H^[F0ceK
34$14$34$\
4$[RTZ
34$14$34$\
4$[UT]
g78ILx
H^[F0c2
N!D3/s
4$[WT_
34$14$34$\
4$[QTY
4$XPTX
4$XRTZ
4$[RTZ
3<$1<$3<$\
5>[sQt
3<$1<$3<$\
3,$1,$3,$\
3,$1,$3,$\
3<$1<$3<$\
Z3<$1<$3<$\RVhh
3<$1<$3<$\
4$he2,
4$[VT^R
^3,$1,$3,$\
34$14$34$\
H^[F0c
,$h2PMm]
$\h&)!~
3<$1<$3<$\
34$14$34$\
Z3<$1<$3<$\
34$14$34$\
3<$1<$3<$\
DH^[F0cr
[3<$1<$3<$\
3,$1,$3,$\P
3<$1<$3<$\
3,$1,$3,$\
X3<$1<$3<$\
34$14$34$\
34$14$34$\
3,$1,$3,$\R
4$XQTY
34$14$34$\
4$XST[
fRfhAPf
34$14$34$\
4$[ST[
3<$1<$3<$
4$XUT]
4$[RTZ
Y34$14$34$\
3<$1<$3<$\
4$[PTX
,$\QTY
4$XST[
$h>@PE
4$[ST[
3,$1,$3,$\
34$14$34$\
4$]UT]R
<$\VT^
4$\h3v
,$\PWh
3,$1,$3,$\
3,$1,$3,$\
4$\RRh
$\hdAoe
3<$1<$3<$\PTXU
34$14$34$\
3,$1,$3,$\
3,$1,$3,$\
4$ZUT]
4$[VT^
3,$1,$3,$\
4$XRTZ
H^[F0cd}
3<$1<$3<$\
H^[F0c
3,$1,$3,$
4$XWT_
4$[PTX
RPhd;(X
3<$1<$3<$\
34$14$34$\
4$WT_S
4$[VT^
/wlPh-
$$hm {?
3,$1,$3,$\
3<$1<$3<$\
3<$1<$3<$\
3,$1,$3,$\
3,$1,$3,$\h
F j|-w
4$XQTY
Jiwy5U
34$14$34$\P
3<$1<$3<$\P
4$ZQTY
34$14$34$\
[3,$1,$3,$\
4$ZPTX
1<$3<$\
<$hw+4
4$XST[
_3,$1,$3,$\
H^[F0cb
^[F0cF.
[34$14$34$\
~}54RX
,$\SQh
4$XWT_
H^[F0cy
4$[VT^
r2xWlXo
_'0uTJ
3,$1,$3,$\
3,$1,$3,$
34$14$34$
3,$1,$3,$\
X$Z+)x
" F_6
][M:O}7
$[~/O:
3K#ug
G[D6:b|`?
x>CrSYx
D?+g1.
O~72&1
@}>q+l3$
L7ffVc
STi]aN
3<|4#C'=]mf<
rAr p'
)/aJ^G$K
`Pj$[~/O:
5K.gZ;
vd&*iiP
Nlh~4>
-jtATy
}AN?@(
9)Z9jq
6Dt;w
_.&M'n
Wjb\z]0X
ML"Ec}
PsxtpYS
XkF4l=
90'Y`
w5YFH2i
O2P8T(
7",O$H
{yN2wG
2}Pis
V80|x52
d=LaYB
ln&!.\
`dzm[T
J156}]
z Q(xP5
8[rxP5
Ewp!U4
rM+\B$
(US[A
d<KMe2
h>{<7O
. 7Xza
YJHkIT
[;%&8X
D2iM-g
] d@SaF
I>,5rWm
bhP4b`,3,
B>7VR`qC
0/=<*.
Z^r!V.
)QrEc33
GzBYgu
P{[D>{
}<!{UhM
)/. T
]/,lBL
M?~5@@
Ym!(q\
CLe:=fe%
,:x15d
@Haxk3
iA3,Z0
vd{TQ3
L<M] &
mT3dqW
(nH:VoR
J\@~-(
tk-bDI
`L{C:~
a:1rBM
~cqNM{
w\UM9Iz)Y
Xf7"v3
DRr)[t
LDOfF@
bg1<gjY
3P3&MhT
39`Bg_
6ytH?{q6~
*NNMx$=y
jlUKanf
?a9oTN
Qj}PNi+
|O=+{RP
3$Ffz$
N;yDqI
P"PM=[y:
{QXBt9e
gqn!6z
&\3Or"
J|4fv25
!xt 1C
tor6vS
P"PM=[y:
W5;Not
P"PM=[y:
Y:~f)XqH
9Iso`o
lje+sJ
E{@fe%
%Lm m3
}z={|
i2&@<Gh
C5Lww"y
cXIY<o
86V>?c#.}
bs/etL
MAK-#?
mG}=!b
HYwt,&S
3XT2+uv
ouF[^<
,/`xM!
=!@{ w
?r$>Y.2
(>UD*j
OS]>K/}
{Z^F[jg
0J='&M
SAuOK/
:w($GN
>/^U1@B
=VmN&h
qm.m=[
Ut?EhE
}:Zv%x
}?Ra&0N
AKC<a7xh
]/,lBL
yO13+
u'-&+(R
` kt64H
duH-KW
8/p(7qw
[E,o(t3;
nu[%w&
9z\2cI
yi'PS\
S&Df(o
}w&!-;
0]wHc}
EJQ?N6Z
Qy%vzT
TNC+M9
V?+gz/
oF>XQUU,S
i4;[N6
%GMxP5
'&K|CH
7+pyTI
6r.`,8
6r.`,8
*&caJEN
F|F7n-
F|F7n-
PaL<96
ts0]wHc}
m4Uj_1
^3t $+
Gq7a 1k
h}Ch0B
dkI6X<
=-n\'G
Fydkz
N;*tm
[HX:6S
}5W>rB
sF4#Jz
+o|>\/
Z^r!V.
DW+;xP5
0Mof&+s
7hiT%s
7hiT%75
V;O-^g
vRK~P7
IWL_2
k@%zE_W
/-b-z:']_`
wVmA!fm
wVmA!fm
B;J=ex
t%JLL<
]A{jn4
=nN'Y?
UhBP9;
UX%\-}
{0c^(0
c@bzIz
\NG!Oh|i
g'c-G
D}lca#
D}lca#
lP4fl-
=kImI}
NO`fl-
=kImk^
8 {$1P
8 {$1P
8 {$1P
8 {$1P
_Th ZY^
{>(-PBj2
%a% t{
&iW:6o.
ER|q$@
\r$$:wJ
P.sDSD
wgdZAzI
'@j"v,
nC{dZ}
pnyEX}
j{#_;Tg
(FJ)WW
V|.{C^2
}*yi!/
w;T~w,
0xsPnR
wy7,v;
dY*:+V
h**PrU
8(;J;`(B
c*P;f:
odSotQS
ZEK&H={
z):iy$F
:9g[BL
-uV2 m
DDUIaR
0fvs%b
NH.y3z
#S&+ds
im:v6az
4oE%{J
wnELrp
}%Ych$
Y9N""
FE}l[p
vRn/3l
EOh#I
l$P?4l
]NIdk}
$$zCmh:>
4$ZST[
4$\h!C
3,$1,$3,$
4$XRTZ
4$[PTX
4$XUT]
3<$1<$3<$\S
3<$1<$3<$\
3,$1,$3,$\
34$14$34$\
%zp9-5~ 8
<$\RTZ
3,$1,$3,$\WU
H^[F0cA
34$14$34$\
4$ZQTY
3<$1<$3<$\
3<$1<$3<$\R
3,$1,$3,$
3<$1<$3<$\
2PhGCI'XPZ
4$[h!S0
34$14$34$\
AL$i1
y,H<c/
4$[VT^
34$14$34$\
3<$1<$3<$\
4$XRTZ
,$\ST[R
34$14$34$\
$XhCPoz
<$\h{}
H^[F0cl
H^[F0c
ng|UsH
l~-<~H
4$Xh~w
m%OS;o
34$14$34$\
4$[RTZ
_3fe^r
3,$1,$3,$
2H^[F0c
]VWh=Y
$\PTXS
<$\PTX
4$\RTZ
}{@55A
$[h%Qk
34$14$34$\P
$ZWQhx
$hkd%h
3,$1,$3,$\
4$XWT_
$$VT^R
34$14$34$
4$XQTY
^3<$1<$3<$\
34$14$34$\W
$\h9im
4$[VT^
4$[UT]
$Sh^ '
`>Y/RI
86,n)^
$h0C`\
4$XST[
XQRhrv+
34$14$34$\
34$14$34$\
3<$1<$3<$\
4$XVT^
4$[WT_
3,$1,$3,$\
4$[QTY
4$XRTZS
3,$1,$3,$\
3<$1<$3<$\
3<$1<$3<$\
_SRhiM
$\h3`T4
34$14$34$\
3<$1<$3<$\Q
34$14$34$\P
3,$1,$3,$\
3,$1,$3,$\
Antivirus Signature
Bkav W32.AIDetectMalware
Lionic Clean
tehtris Clean
ClamAV Clean
CMC Clean
CAT-QuickHeal Clean
Skyhigh BehavesLike.Win32.Worm.vh
ALYac Clean
Cylance Unsafe
Zillya Clean
Sangfor Ransom.Win32.Save.a
K7AntiVirus Clean
Alibaba Clean
K7GW Clean
Cybereason Clean
huorong Clean
Baidu Clean
VirIT Win95.Marburg
Paloalto Clean
Symantec ML.Attribute.HighConfidence
Elastic malicious (high confidence)
ESET-NOD32 Clean
APEX Malicious
Avast Clean
Cynet Clean
Kaspersky UDS:DangerousObject.Multi.Generic
BitDefender Clean
NANO-Antivirus Clean
ViRobot Clean
MicroWorld-eScan Clean
Tencent Clean
TACHYON Clean
Sophos Generic ML PUA (PUA)
F-Secure Clean
DrWeb Clean
VIPRE Clean
TrendMicro Clean
McAfeeD Real Protect-LS!D0DD63B98BF3
Trapmine malicious.high.ml.score
FireEye Generic.mg.d0dd63b98bf3d7e5
Emsisoft Clean
Ikarus Trojan.Win32.Themida
GData Clean
Jiangmin Clean
Webroot Clean
Varist W32/Trojan.YJEH-0980
Avira Clean
Antiy-AVL Clean
Kingsoft malware.kb.a.1000
Gridinsoft Trojan.Heur!.030100A1
Xcitium Clean
Arcabit Clean
SUPERAntiSpyware Clean
ZoneAlarm UDS:DangerousObject.Multi.Generic
Microsoft Trojan:Win32/Sabsik.FL.A!ml
Google Detected
AhnLab-V3 Clean
Acronis Clean
McAfee Artemis!D0DD63B98BF3
MAX Clean
VBA32 Clean
Malwarebytes Generic.Malware.AI.DDS
Panda Clean
Zoner Probably Heur.ExeHeaderL
TrendMicro-HouseCall Clean
Rising Clean
Yandex Clean
SentinelOne Static AI - Malicious PE
MaxSecure Trojan.Malware.300983.susgen
Fortinet Clean
BitDefenderTheta Gen:NN.ZexaF.36812.@x0@aK6s7ef
AVG Clean
DeepInstinct MALICIOUS
CrowdStrike win/malicious_confidence_100% (W)
alibabacloud Clean
No IRMA results available.