Static | ZeroBOX

PE Compile Time

2025-01-22 03:46:28

PDB Path

G:\目录\2025工作站\主控工程\主控修复上线包\shellcode\注入自身进程\Release\注入自身进程.pdb

PE Imphash

c67ef5a5a21b6fceb58b3ff6fde243b5

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00001000 0x0004a8c6 0x0004aa00 6.62798710484
.rdata 0x0004c000 0x00009600 0x00009600 5.07375700356
.data 0x00056000 0x00001cb0 0x00000a00 2.62474965551
.rsrc 0x00058000 0x000a7c1c 0x000a7e00 7.7756037937
.reloc 0x00100000 0x00002410 0x00002600 6.53808725549

Resources

Name Offset Size Language Sub-language File type
RT_CURSOR 0x000583e8 0x00000134 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_BITMAP 0x0005851c 0x00000328 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00092e20 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00092e20 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00092e20 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00092e20 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00092e20 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00092e20 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00092e20 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00092e20 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00092e20 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00092e20 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00092e20 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_GROUP_CURSOR 0x00093288 0x00000014 LANG_NEUTRAL SUBLANG_NEUTRAL Lotus unknown worksheet or configuration, revision 0x1
RT_GROUP_ICON 0x0009329c 0x000000a0 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_MANIFEST 0x0009333c 0x0000017d LANG_ENGLISH SUBLANG_ENGLISH_US XML 1.0 document text
None 0x000934bc 0x0006c760 LANG_NEUTRAL SUBLANG_NEUTRAL DOS executable (COM, 0x8C-variant)

Imports

Library KERNEL32.dll:
0x44c018 CreateThread
0x44c01c GetVersionExA
0x44c020 VirtualAlloc
0x44c024 GetModuleFileNameA
0x44c028 ExitProcess
0x44c02c Process32FirstW
0x44c030 Process32NextW
0x44c034 WriteConsoleW
0x44c038 CreateFileW
0x44c03c ReadConsoleW
0x44c040 GetCurrentProcess
0x44c044 CloseHandle
0x44c048 ReadFile
0x44c04c GetFileSize
0x44c054 CreateFileA
0x44c058 SetFilePointerEx
0x44c05c GetFileSizeEx
0x44c060 GetConsoleMode
0x44c06c TerminateProcess
0x44c078 GetCurrentProcessId
0x44c07c GetCurrentThreadId
0x44c084 InitializeSListHead
0x44c088 IsDebuggerPresent
0x44c08c GetStartupInfoW
0x44c090 GetModuleHandleW
0x44c09c RaiseException
0x44c0a0 RtlUnwind
0x44c0a4 GetLastError
0x44c0a8 SetLastError
0x44c0bc TlsAlloc
0x44c0c0 TlsGetValue
0x44c0c4 TlsSetValue
0x44c0c8 TlsFree
0x44c0cc FreeLibrary
0x44c0d0 GetProcAddress
0x44c0d4 LoadLibraryExW
0x44c0d8 EncodePointer
0x44c0dc GetStdHandle
0x44c0e0 WriteFile
0x44c0e4 GetModuleFileNameW
0x44c0e8 GetModuleHandleExW
0x44c0ec GetCommandLineA
0x44c0f0 GetCommandLineW
0x44c0f4 HeapFree
0x44c0f8 HeapAlloc
0x44c0fc GetCurrentThread
0x44c100 GetDateFormatW
0x44c104 GetTimeFormatW
0x44c108 CompareStringW
0x44c10c LCMapStringW
0x44c110 GetLocaleInfoW
0x44c114 IsValidLocale
0x44c118 GetUserDefaultLCID
0x44c11c EnumSystemLocalesW
0x44c120 MultiByteToWideChar
0x44c128 OutputDebugStringW
0x44c12c FindClose
0x44c130 FindFirstFileExW
0x44c134 FindNextFileW
0x44c138 IsValidCodePage
0x44c13c GetACP
0x44c140 GetOEMCP
0x44c144 GetCPInfo
0x44c148 WideCharToMultiByte
0x44c158 SetStdHandle
0x44c15c GetFileType
0x44c160 GetStringTypeW
0x44c164 GetProcessHeap
0x44c16c HeapSize
0x44c170 HeapReAlloc
0x44c174 FlushFileBuffers
0x44c178 GetConsoleOutputCP
0x44c17c DecodePointer
Library USER32.dll:
0x44c190 MessageBoxA
Library ADVAPI32.dll:
0x44c000 RegQueryValueExA
0x44c004 RegOpenKeyExA
0x44c008 RegCloseKey
0x44c00c InitializeAcl
0x44c010 SetSecurityInfo
Library SHELL32.dll:
0x44c184 ShellExecuteExA
0x44c188 None

!This program cannot be run in DOS mode.
`.rdata
@.data
@.reloc
u"h(mE
URPQQh0:@
V<0|M<9
<0|$<9
UQPXY]Y[
QQSVWd
j<h(CE
j"^f92
j"_f9z
SWt@jU
_tqPVj@
VSSSSS
VPPPPP
VPPPPP
j0Z9~4t
j0Z9~4t
j0Z9~4t
j0Z9~4t
j0Z9~4t
j0Z9~4t
j0Z9~4t
j0Z9~4t
j0Z9~4t
j0Z9~4t
j0Z9~4t
j0Z9~4t
t#9^$}
t#9^$}
uj*Xf;
<j*Xf;
uj*Xf;
<j*Xf;
uj*Xf;
<j*Xf;
t#9^$}
uj*Xf;
<j*Xf;
<ItC<Lt3<Tt#<h
A<lt'<tt
<ItC<Lt3<Tt#<h
A<lt'<tt
<ItC<Lt3<Tt#<h
A<lt'<tt
<ItC<Lt3<Tt#<h
A<lt'<tt
<ItC<Lt3<Tt#<h
A<lt'<tt
<ItC<Lt3<Tt#<h
A<lt'<tt
Tt)jhZf;
JjlZf;
Tt)jhZf;
JjlZf;
Tt)jhZf;
JjlZf;
Tt)jhZf;
JjlZf;
Tt)jhZf;
JjlZf;
Tt)jhZf;
JjlZf;
F +F4+
8^8tb9^4~]
F +F4+
8^8tb9^4~]
F +F4+
8^8tb9^4~]
V +V4+
tb9^4~]
V +V4+
tb9^4~]
V +V4+
tb9^4~]
V.jx_f;
~ +~4+
V.jx_f;
~ +~4+
V.jx_f;
~ +~4+
V.jx_f;
~ +~4+
V.jx_f;
~ +~4+
V.jx_f;
~ +~4+
F.jgYf;
jg[BjG_
F.jgYf;
F.jgYf;
F.jgYf;
jg[BjG_
F.jgYf;
F.jgYf;
PRRRRR
PRRRRR
PRRRRR
ul<0|[<9
ul<0|[<9
x!j$Xf9
x!j$Xf9
_PVVVVV
j"_SVVVV
PVVVVV
^PSSSSS
j"^WSSSS
WVVVVV
PVSRSQV
t^j*Yf
uSSSSj
f9:t!V
QQSVj8j@
xi;5 |E
xg;5 |E
ARPRQh
jYjf
NX9^`t1
;V\uYW
u2Vj@hh
9C`u99C\t4
u29K\t-
35<|E
j,h@JE
F95`mE
M,j"^QRRRRR
Vj0XPW
r!SSPVQ
dr#SSjdVQ
M$j"^QRRRRR
j"[VWWWW
u#VhX|E
PVVVVV
PVVVVV
PVVVVV
PSSSSS
PPPPPPPP
PPPPPVW
PP9E u!PPSVP
xE;5 |E
^PQQQQQ
E ^PQQQQ
7;1u"3
CY<u
uTh0)E
D8(Ht'
D8(Ht5F
L:-^_[
xK;5 |E
tNSVWP
C:\ProgramData\Microsoft\Program\ziliao.jpg
Microsoft
SOFTWARE\Microsoft\Windows\CurrentVersion\Run
C:\ProgramData\Microsoft\EdgeUpdate\Log\chuangkou.log
Unknown exception
bad allocation
bad array new length
__based(
__cdecl
__pascal
__stdcall
__thiscall
__fastcall
__vectorcall
__clrcall
__eabi
__swift_1
__swift_2
__swift_3
__ptr64
__restrict
__unaligned
restrict(
delete
operator
`vftable'
`vbtable'
`vcall'
`typeof'
`local static guard'
`string'
`vbase destructor'
`vector deleting destructor'
`default constructor closure'
`scalar deleting destructor'
`vector constructor iterator'
`vector destructor iterator'
`vector vbase constructor iterator'
`virtual displacement map'
`eh vector constructor iterator'
`eh vector destructor iterator'
`eh vector vbase constructor iterator'
`copy constructor closure'
`udt returning'
`local vftable'
`local vftable constructor closure'
new[]
delete[]
`omni callsig'
`placement delete closure'
`placement delete[] closure'
`managed vector constructor iterator'
`managed vector destructor iterator'
`eh vector copy constructor iterator'
`eh vector vbase copy constructor iterator'
`dynamic initializer for '
`dynamic atexit destructor for '
`vector copy constructor iterator'
`vector vbase copy constructor iterator'
`managed vector copy constructor iterator'
`local static thread guard'
operator ""
operator co_await
operator<=>
Type Descriptor'
Base Class Descriptor at (
Base Class Array'
Class Hierarchy Descriptor'
Complete Object Locator'
`anonymous namespace'
template-parameter-
`template-parameter-
generic-type-
`generic-type-
`non-type-template-parameter
`template-type-parameter-
`generic-class-parameter-
`generic-method-parameter-
nullptr
lambda
`template-parameter
`vtordispex{
`vtordisp{
`adjustor{
`local static destructor helper'
`template static data member constructor helper'
`template static data member destructor helper'
static
virtual
private:
protected:
public:
[thunk]:
extern "C"
short
unsigned
volatile
volatile
std::nullptr_t
std::nullptr_t
<ellipsis>
,<ellipsis>
noexcept
double
__int8
__int16
__int32
__int64
__int128
<unknown>
char8_t
char16_t
char32_t
wchar_t
decltype(auto)
__w64
UNKNOWN
signed
volatile
`unknown ecsu'
union
struct
class
coclass
cointerface
const
cli::array<
cli::pin_ptr<
{flat}
FlsAlloc
FlsFree
FlsGetValue
FlsSetValue
InitializeCriticalSectionEx
bad exception
CorExitProcess
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
(null)
AreFileApisANSI
CompareStringEx
EnumSystemLocalesEx
GetActiveWindow
GetDateFormatEx
GetEnabledXStateFeatures
GetLastActivePopup
GetLocaleInfoEx
GetProcessWindowStation
GetSystemTimePreciseAsFileTime
GetTimeFormatEx
GetUserDefaultLocaleName
GetUserObjectInformationW
GetXStateFeaturesMask
IsValidLocaleName
LCMapStringEx
LCIDToLocaleName
LocaleNameToLCID
LocateXStateFeature
MessageBoxA
MessageBoxW
RoInitialize
RoUninitialize
AppPolicyGetProcessTerminationMethod
AppPolicyGetThreadInitializationType
AppPolicyGetShowDeveloperDiagnostic
AppPolicyGetWindowingModel
SetThreadStackGuarantee
SystemFunction036
Sunday
Monday
Tuesday
Wednesday
Thursday
Friday
Saturday
January
February
August
September
October
November
December
MM/dd/yy
dddd, MMMM dd, yyyy
HH:mm:ss
 !"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~
NAN(SNAN)
nan(snan)
NAN(IND)
nan(ind)
[aOni*{
~ $s%r
@b;zO]
v2!L.2
1#QNAN
1#SNAN
?5Wg4p
%S#[k=
"B <1=
_hypot
_nextafter
RSDSl(
\shellcode\
\Release\
.text$mn
.text$x
.idata$5
.00cfg
.CRT$XCA
.CRT$XCAA
.CRT$XCZ
.CRT$XIA
.CRT$XIAA
.CRT$XIAC
.CRT$XIC
.CRT$XIZ
.CRT$XPA
.CRT$XPX
.CRT$XPXA
.CRT$XPZ
.CRT$XTA
.CRT$XTZ
.rdata
.rdata$CastGuardVftablesA
.rdata$CastGuardVftablesC
.rdata$r
.rdata$sxdata
.rdata$voltmd
.rdata$zzzdbg
.rtc$IAA
.rtc$IZZ
.rtc$TAA
.rtc$TZZ
.xdata$x
.idata$2
.idata$3
.idata$4
.idata$6
.data$r
.data$rs
.rsrc$01
.rsrc$02
CreateFileA
GetFileSize
ReadFile
CloseHandle
GetCurrentProcess
ExitProcess
CreateThread
GetVersionExA
VirtualAlloc
GetModuleFileNameA
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
KERNEL32.dll
MessageBoxA
USER32.dll
InitializeAcl
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
SetSecurityInfo
ADVAPI32.dll
ShellExecuteExA
SHELL32.dll
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
InterlockedPushEntrySList
InterlockedFlushSList
RaiseException
RtlUnwind
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
EncodePointer
GetStdHandle
WriteFile
GetModuleFileNameW
GetModuleHandleExW
GetCommandLineA
GetCommandLineW
HeapFree
HeapAlloc
GetCurrentThread
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
MultiByteToWideChar
GetFileAttributesExW
OutputDebugStringW
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
SetStdHandle
GetFileType
GetStringTypeW
GetProcessHeap
SetConsoleCtrlHandler
HeapSize
HeapReAlloc
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
GetFileSizeEx
SetFilePointerEx
ReadConsoleW
CreateFileW
WriteConsoleW
DecodePointer
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
.?AVbad_alloc@std@@
.?AVexception@std@@
.?AVbad_array_new_length@std@@
.?AVbad_exception@std@@
.?AVtype_info@@
.?AVDNameNode@@
.?AVcharNode@@
.?AVpcharNode@@
.?AVpDNameNode@@
.?AVDNameStatusNode@@
.?AVpairNode@@
9#######
.############
$#$#############
$$'$$$#$#######
''''$$$$$########
9''''''''$'''#########
1G'G'G''''''$''#'##########
@GGGG'G'G''''''''#'############
GGGGGGGGG'G'''''''''''######
GGPGGGGGGGGGG''''''#'#''#########
;OGPMMGGk
`GGGGG'''''''#''#######"#
2PPPGPOGr
GGGGGGGG'''''''''#'######
APOPOPPPb
GGGGGGGG`G'''''#''########
OOPUPPPPP
bOGPGGG
`jM''''''#'###
UUUOUOUOP
rPPGOM_
`'''''#'##
;UUUUUUOSU
J''''''''#
2UUUUUUUUO
'GG''''''
DXUXUUUUUU
GGGGG''''8
XXXXXXXUUU
hGGGGGG'''
XXXXXXXXXX
GMIII'IGG
;tXtXtXXXXX
GOGIGIGGG0
5ttttXtXtXX
TGTIIIIIG
EttXvtXtXtX
_OTGOIIIGM
tvvvttvXttt
UPOTIOIIG1
vvvvvsvvttXt
OOPOOIOIP
;wvvvvvvvvtvX
UUOOOTITM
wwvvvvvvvvvv
XXXXXUUUUUUUTOOTG?
|wwwwwvvvvsvs
UUUUTTOTO;
wwwwwwwwvvvvvvvv
tttXtX
UXUUUTTPO
w{w{wwwwwwvvvvvsvXvttXt
XUUUUUUTB
>{{{w{w{wwwwvvvvvvvttttXt
XXXXXXUUUT7
{{{{w{ww{wwwwvvvvvvttttXXtXXXXUUUUU
}{{{{{w{wwwwwwwwvvvvvXvXvXtXXXXXXUU^
{{{{{{{w{wwwwvvvvsvvtvXvXtXXXXVUU4
{w{ww{wwwwvvvvstttXtXXtXXUXU
{vwwvvvvvvXvttXt\XXXXUV
vvvvvtXttXXXXXXX
tvtXtt\XXVU
XXtXVXX
$++++44
W33+3E
@333+3
3++++e^.
333833
<<3<33
$<<<3<3
Y=<<<<<
D=====<
=K==K==~
3+3+--'
LKLL===u
838---
&LLLJKLLi
g8333+*
ZLLLLLLJh
c==<<H:<3333#
QNNNLLLLSw
x:<3<38
NNNNNNLLLLLLL=Kw
x<<<33@
PNNNNNNLNLLLJL==F==<<<<!
(PPPPNNNNLLLLL=L====<<<3
sbVPNPNNNNLLLLJL====<<7
sbTLLNLLJKJJ===<<W
taRL=L=K==<<
kaF===<
&&&&&&
"))&]e&&&
%)))cu(&&6cK(
...)\u8)&huOu]
....WupjfudVuO&
111.QuXbso5es+&&&
I1111EuM[uV,nj)&)&
:>><1:uZpi/;u^)))&
>>>>>>smpC.MlD/)))
@@@>>>ks_11ZM.--)#
G@@@@>>><<1mi....!
JGG@@@@@>><<111...
LGGGG@@@>>><<111.$
UH@@@>><1<111
UF<<111.
MF=O9M
"K6KD>F
"'"J@L J;
'''GN5A%
.++'/7"4J
+++++''"""0
C3-+'''&"
Pt/cF<o
O^<6>:
LK`5IR
{N^>9:
>ujxle
sKc|jm
'lx!lM
{O_?=<
{O?qzxb
MNsT:/
=}~xbe
1oUkJ?S
5pp4nZ
/`b'EV
z_$M3l
;9S_Y4
BHm+LW
%#Ffg6#X
B "<~d
5nIqs80
TQ8VTA
^s@_Te
a*G6ND;o
,vHgY -
pa1"FGAO
Lr7@Nm
g+[_TC
J;U\&R-
[<eq4>
mdm)e<]
jrsJp`
WKYbmh5
{vkAFW4
OQ($kA$NI
r[J2,@
JBqR!HR
R+_c.@
ytbT ;
wlp4i<;
nNg_Q!)
(kwRg$F
62+o 1
Lv5.Fiz$%(
Vpa`#e
1*Yxy,
1K`-T`
-l#Lg
ihDViH
%:d1:5*$c
(2)::p
QyQ^jC
h%Qnh%s
cAx1-H
mZ9QWP
R4/yzZ
Mb1_uK
Ers6R<K<
%{W`}=
lX@Qt[3
QH.k54
SGRLG'
(a#w<c
YJ*Gt=m8
ftsz^PF
dnq+ut
.e{u18
A``)L%
j1_hSoq
|UpfYK
IDATx=h
!vd$1e
fBX~.w
#.EeDW
b$-b'E
i|v(fZ2c2O
%f1o,
Zfg:^"2
,h5744
X#v?[<BW
?3@+G0y
yQwV?1eIS
yOD~1t!I
Gw_wht
2KP]z7
U/)LT b
~l2)r\
hO~e^M6
#c(C,F
]J)r/F
YX#A2v
A)U#4'G
5Ek1ItH
\tJ<t
F(z+;3L,
t\28*Vi
24fchE
Gh_}d3
qAtV]u
Ng q[ 3
ml ]VRy
$S)A+Tn
r56rXe
I$Q"@t
PY3vm)n
;8I#G_
3|w!ke_2
HaahBX5
;9HAAG
YK`bc)[
*X=m)B
EZ]XDmo+
H<ot)V
d_e:*L
ron@#_
eKqWBn
ZvzZzE
IV,V""9
eDn"`C
lU*AJ
mJJNb$
k&\8U\
?w&:"Qv"
kN_D+g
r9lB!l
fX3W?]v4M
!+[-Lst
@JBhR-!d
a%)DXA
K&1}&IB
b'}=)F
%lsM?w
:g_q;4#
e$E1*45
)1'iE|\
%K*eNR
z&;;!G
`p|.Wm
=JH7G5
tZ_&2-
0^37Bi
i3">;N
')(osy
2-wm%@
4Y[vR.
{_VU7[
Iz"J(l
[%B&\^
(._F+[7%I
b"E|R
lO.-F\
B^PHH
bgBJ*&uV
&_$'F]
u5Fc^i
*=kz=D
;q[Mvi
Af<<(l
:t[T[=
mZX{R
:V\3:]
>\bl^A
%)e"*`u
uW.N4J{m#<
y-$vID
M1Nf2IW
"?jv$s'0?:
UFr:gS
]%z ":Hd
\?,8qA
KG=)^{
`\^3"+
MnSi`E'
E;/\7B+2
6BEf[dk
+ckUQm
PAM}?+
jMB;ZqP)LK*
G)9pJ?
=J3~c:8
o%&$}MJ
L@7 q64
q.dU|<vY.Jq
&%A#h
{/^D^2`
+50<wX
lw{_7u
);f.IsJ
IDAT"
l1o~Sw
Wvq^?,/
-=ZY;{
a8o>Q}
`sp)Ny
`jNzc3|q
N??#fT$
(=hMDsZ
0W0cf_
d 7')+
:v7jbWR
K"mSvfB
0e^S8
l}a2BP^
'<?A*z
SzP"_?x
";C)XL!
'M'#,[
c n0l4
<#Zj!k
6j!-lsa9
dmP{R:
ieNEYj
eHmI4c
7#ZxSa
7~`WS]
nhp>@jC
`M}3Yz
>|UPH
:un*7w
Qz`lZ+
f"2clR5
`5B]WM$5lgJ
!,yqVBM
Im|}m(
!mQ)C"
"O|;#,
});}a*?
etr`t
-miximq
ypipTQ
Nw(sXP
rZbY>N{
_jvoYA
(:GGv
dn_Q s
9t^~B^8:U\8
GFx<KP
\>,&v,M
$O}E^u
Q~4Tkxo
:Uk'=(
IDATCFqE{
^1Nuy=
7S,o.m:
#"sP^C
Ab*Ggt
GG,h4EH
MPM3N%Q
Vjz{&^Y
m3{'7x
<?xml version='1.0' encoding='UTF-8' standalone='yes'?>
<assembly xmlns='urn:schemas-microsoft-com:asm.v1' manifestVersion='1.0'>
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v3">
<security>
<requestedPrivileges>
<requestedExecutionLevel level='asInvoker' uiAccess='false' />
</requestedPrivileges>
</security>
</trustInfo>
</assembly>
T?+j@XO??
:I.08`
j^-v[0
{:bl(gs
lUt*>m
puO)8+
JnJ*4+
>@=Iz45
ZDCV'pd
Jon!eG
]~FKyC
l*tj|[
sBq:Cop
$<@5y#
Wro78l
QVP/3G"
Mw\M4P
[upmPWf
4{ag.Ub
Dp_9lU
IX<pS0
/m9_T|
Ya.2~!
@AwbR)^
%}MrLk
x+T'p8
)RgZP4
)uU="v
q=.*EJ
ShzLe@%
$k|h'*
f3KyjO.
.Zb=LS
*`]pEW
9wfBp{
`W6Fpk0
jl^sa<
L47>J;
k9@?Y}
=+FtTH
.[{\`P!
MUIU`-
S:&HBu
$9gO|n
PHJy[4$G
[ nx;*
Ae9m'b
@;a^~7\QS=l
^O@\[R
LV'P1(b
PW**EyCq
[S"]N>
z- N\Bh
v;2r(L
&ZuIpD
a.bu$)
zN5_M/4
=4l._
/} A72
x7a0^<n*
:U*4~m
2GZuvd
iLpi-:
#.UH14
Nsr:*u
dL-'+&:
07r-.
'b-]WQ
0a43Ws/
YunwUm
(3a ~x
7;Q-7a
3t.\qn
qMXFndC
:C&TI@
<$wqV
Mw0]x,]
Px1lqU<u
^ixbTae2
ufWhRU
Lm/t9m
a^S:sv
%0uSOH
~m?J>x
/I6/ ,WK
r[VPXP
~4~P2U
HU/P3L
nn),9XBpm
`xML}pJP
?eFJJE
dZR#UL
[E'W2u
Oh9&RK
4x:U-{T
HFz29}r
EGqsaT--e
f}P<lt
I*;fXp5
5sc`ZG
6OQ=<p
l-HqKN
s`/]{
)t,gV
5_4_$)
3vG~OP
u\,tEtq@5<
n+:A9bQ
)tFL&K
1NVV!I
@+OhH{
|* T Hq
t`E]\
=[.K>`
E4y}He'"
]]$_jG
X0Yh2{
=9f =v
!mfW1$
QNRY^i
govfy i
P>2y:T{
yj'8>~
\v.wKC
L/jN>I!
yOo'@-
hnncu'
~sFh,L:
imlck}
4' }a1
(o'dhI
bdygSi
nGhZh~`
.g{$j6
}FRnM9K
44fEXR
HbrnWZ@
]$Lc&H
?pZG4l
tYLO^G
AX7:kV
K]>3P/
_+#ipL
u^D#>8
u8o7p:
!H<W[$
+vhsAZU
b/`82
=qjCk9
!ox0_C
:{I::V
N(VNM3(
$X("<O
\vCE5d
B?^yV7S
a~Ixls
pwr5Kt
-3PDcBX
Uh0h9K@"
d0csgv
XL]#1@
2c~#0Is
8q5o>'
r\Ei$D
yzd[c.J7
8F(K?[%
>g$ozk
XiO&1m
MP8|l%
v']J9V
|&|VE".
X=";')5
>wzg%g>
/S,b_]*B
?P9~;%2
>@@nA_{
ru(W|9
o/ (vS
n_>7(S
M)!>Mx
lNTxRI
)'zvOV
C<5([^
]{&p Q
&K?[3n
p&<vb^
+0~7g"
{*s/dl
RUBsy6V
}KOZ}U
f1KHg@u]3>u~
oeMVSi
I51|Ts
$7Qb$S
/cNjM;
w'E"EZC
W`UskD1
]uS-_\7
K1%hMb
Ua]L6/
%nn0s %(FdJ<+4
bX1H2"
x?entyn(@
0KaNUpV
c]@t=G
:[5b2T
s"JF%`
2Q`]RU
'WxhP>!v
}]k$;_u
L!q#JBE
!!sP+2(#Q
0#z+>$
:O%O-V
?_;}AmLj
C~m>\J
BP-=7
/bC:J_
x:G2nT
w$[~=~
_}`@dt66
X|b_f~
^H/@8=tt
;&xr)pE
P n|I`
WW+DP5
Xc2(ua
-C)>=>
jGg>K#z
CJG=0E
fS(g4%
jE%hG3|
!:-o|+
M#q($l
5;_UC.
B=z?(`
ho*s?A
H@=Y=%"}l
[wf%Ry
2<*BJi
mczZ(_
9[1Xnw
Ag>e3v
I1WWDXM
7^}MyX
UuCuxo
%}h'ngA|)
07g*3>b
xhs"|.u#
mvn*H/
R qD*F
>\9M<9
0b]?=:
eCahEE*8T;a{
v9`14KHc$
ny>''a
7L\|uE
-aLzbB
OE^#V.w:
NU9pLP
do"13#
0_t@w|
tQ:Ry7$L
xzx`Dc
gUdi]0
Gb!&6
&$zvQ0
CW2+/d
4tsqEY
r95_I9
1k0LPiP,
=DX3/t
8GA>:
v+c.#Ca
\, Nxp
k$-3y]
wf~_!P
]%oQol
Qa:^C`
wtvw[G
{]j_-~
t,-*^3~
p'/Ugc
^adt@%N
s)lKoM
>)Pp05U
vqIp 9
AUdg/r21N
An4S\^
K0AL9W
Scw |
E[zqrZ
jCiCNE
>*F6dk 6
mF_ ,]
"J}@3]h
D gA$Jd
Fz*d@
n3JD;$
y9,V"]kK
<dj@s=
{gO/~Q
~C2<P:{
-;cU]6}
z%&/3#
mNU-U6
[M8Y&4
~Vu[7q
R$'K6GK
C/^8-V
N\)f{3
!\9\In
o0aHQK7w
3^v_`uz
Uo1k0=
-qqTF#
m"Nfh*
6YKf$~~
7X<_aZ
H[ &/QT
uLo@;J
"y2J6m+
#P9TIC
VaWG[,
JvaE.\
Q1:8i#Nj
G6a>Wl
JpH4bs
&b_\zg
K/.k0mF0L
;bP"]PX
fQ8sK`[
[C+1|Tuv
hAz&6fI
:():pb
/HRLVu
xafp6#
L~ZEL<F
:k"5T~FR
&2mCzw
}GaiWU;
'h$l \
3+%%Y
E9^M>@
8t)AY`
B81UVV`
i<nsQUG
Ts}_\/
/6w0 _
RqlGT)un
%^{h3
Pg!ce.
)2He^P
NAiwTe
gN#j#
,g9mou
]0:nK;
I$"|Is
e~YWY2
E$@wV'
8{nkZN
{pXV"7
NV!uj"
Vd>6It
.CefKP
OG}|Eu
k|=M3^^
z8W_6#p
Ey)X^X
Gmk<Wb
IyeFn.
.<6SC
4Ii`Ch
3zcm.`
2K*MYY
ZRJ0Lb
\)"t\]M*K
%kSOND
U?x/5r{d
ML2yyU
f|W.C}?
3+pO@-
-oK&1+
Z2;s&Y
}#^/?l!
COGZ3B?
n}F_vL
9X9?8#
)8XiS}
'X7/[
&*_!y.
+{D6{1 M
%V<!~5z
FY=hfHAEw^
Zw&MuM
O?>xLu
Id7HTxm*gC^
~~i%6sw(W@
%4Q}<r
Tc+.Yy
btWq&z
^tfm|5
upRw-r
m}?5q5
#S:13h
g52Pq!
+L9[`G
s>U2e
A(+Hp xa
yIT.X1
nRu`s'
x>uPS/
,o"w#J
'f(P=Dcwl|
B)J6{
nTto-X
L%4>D@
f/1%V]
{&VI@.u=
LkK##2t
.K{z[P
==(5%~3
|0p&R^
<lM7E@
=.@O+w
>w:/@^\
+u'E) 7
D;9,rS
N0k::k
6c-fQ2
YFq5'L-
x*5Gyc
L+.K5w
R3/VNW1
sn, T_
O\Cg,
jg%F?K
9G;:;g
6WuTrWQ/
mDqvL/r
+3xT@e
&FAIxo
&3r~*L
mm"|8
/6dZq~
r`tPG+
u;s6.g
Aa=bh4
y+y?]!
NaWM~E
weX=xw)
`{8[3!{
-t`V2/o
U&S<;*
crC(79
@HGEx$
C'a'g&/
!h~}.L
k9m'te
%qhVH+X
/RpMJX)
Z~eywe
U(jpw'*
S43;fA
;BEyGa
:xj~}Bh
W*9/)1k
9k/U!f
O. TB>/
mm(}c;3
<O~+f4
+G9|IP
:`lk(#
M6Tn>4
"yUC4
kM9N1+
>-*Efc
M+gIY%
+Vy^`H
)4S]Zq5
?YB}T
qno)T]
):40|
$G%sj[
M00NDZ
n^$9e7;&
t:QQ`<
<1\~)T
4Dy?cp)
PdWLh%EC
;yqWtU
;jHRS5
Wnu`>4
A)Vq<9
1e&pW6 r
kg?cEo
\5^Q|W1S
hPENab
fApq{u
,rgP2~
4Yt-z4
L^=XyVY
I-4QBHZ ={
U@)RE'
3oZ5rE&
f_~U;}
-L]=1S
'(@3R:
$T?,A
(kO9J}DQ6
(K[uw0
WFVkEq0
#@[fN0
F<G)b8Z\`c
jA e-&
_P HGY
\.+/YST
)HE~-(
_L@VAL
T%}QLII
XM~$8WQ4
c0R<\~
j)n),o)
edL)2
EeTZ;s%
$_}X{g
8xTu&I/
{?Q"%plJ
XXjA([2
,0nk'X
op7NJ!uT
yb!YQ
DFMRmeX
W6fAv^f&
oo0?VVInXj
7PoEe&
~M}E+rTQ
-HWDMI
ED7M FO
V$ipW_r
yjguy)8
v=vcOL
k?H},,
d|.DEVz
C0B9M)<3]
9 \CRJ
/T=D%2
SNA(Jt.
5?)~A-
CATU)B
.Gq\WN
T.q]pk'/
(7IG{*
.y%i=DHc
bE8)3xZ
Ea`D9o
E~|@z-GZ
rgxO?K
,DXD^6@Acri
782Vu}
j=|>UtY}
7* n5|
BO9`*C
|Bx&,L&0D
h68)ez
SA%.v_
+;Jw8\
|F#rC7A
\hyeB?
v?4rA0
s&'OZk
Qi/U|s"
z6-S>
5$TMk=T4t
`{B"Q1
G<)a+N
u>tHvw%
$\J(5z
^3)0q*w
*_iMuDFD
U'*$o~O
=9{n_H
#ZJk=<t
G>aEl=
x +_$_0
Lb,pE[u
*X[ pN
-d$^wd
]I&X!%
'J~X&Z
U0k.xQ
&mi(WD
YQEP'!
,F*T=Q2
u:~s+<
T;&Mdj
,2C eA
$'=Ds1/
;1\eyj
AgpNg<-
;NHfRd
]OKE3CiQ
C,gI06
cW2YL*
[14jk{X
ZZiF ^U
NI||j%
0>{@3U
~}~aGn
%114el
uGy+]O
Je}%Im
gZp#KW
6:H|y>x
PC2(7a
VK4gI_
^<|Bd;
eKPS=y
!G E@h
#*%:l2
.,yl6D
D]hT]-*
yK&+9i
(B>{7 tYD%
cwIO<Q
_"T]E>#
=nk[KE
sRY`kF
(^m.]+n
GAp7zn%
M7BKg6h
gZOC3/6
w`K0*Q
Clf|eT
0)|k}H
|artI'T`
>HDbkI,3
WJ<VRe
Q=O6y/v
:'c<aT
;'.:tz
!WSuq#
PcLz;'
OEJu=)t
d%.!Ha
6|V`S>e
WljBv/
-)A|P}
+1"80+
L' >c{
25_+YbQP
FaDZ{N
|VBXDA
yn"1$
ml*YrP
t4abd;
Z8s=PN
Xl\>`'
?#Eza&
J,u>rq
}8*1\v
_Ed7!D
9f=5DZ`M
;J#qqU
VFJU@RI
#Z?sJO
VH36(U"
VAronY#`
B$6.Qm]
#"D\`s
Api&I%
Jp<YQ!?
okY"pp
c|v=,^
laVR+%
%Av~gXb
GY/gRK/
^'+"8w:
gNb!0s
G3t)P)
)oeDjh
;:'KUq
}4Yc0B
v{%Y3<
NS?A)p
vkx;/9
L,N6B(F
3.Cc/4
/q3OC3N
Hf<,Vg
g8]em)
Ydoh]m
MQ+8(+?a
n\2tD$R
k}l{u#
*7?IK_(
u7yB#y`
E%,.O[
(T\c*t
<Ov1JN#
dV$bgxL
;x} 7C
<N_tk4
%c+!yE"
)gz8=%
jXQy_?ll^
Lz2OL5
PeHTX|tV
-;8xGk
#XT)39
:k }p8f
y8*$KJxC-
^wp+)8
f ])gLW
G3A|a^
gm@?$l
3frZfI
s<9&9,
`PIjcq06
%Mi~g]G1
lrP!@b
jfbtG
+he<ao
^yP_={
$/MW(*p
B*Xt2Y
&TI#"z
_2}Rji1
$t#k#i
.Str$5G
W0KfC^
`<vcZN4
N/M*1J<
9RBX@$
)A{XTX
CctOoi
NVO=#U"D
U\TuA=]{|]
$,2u.'
,_#\i|k
ZrmE^=
8isPm"A
"9$s)\
171>1N1
2L3o3}3
5"565B5P5c5{5
656;6A6G6M6S6Y6_6e6k6q6w6}6
::&:-:4:;:B:J:R:Z:f:o:t:z:
;%;,;3;:;A;H;P;X;`;k;p;v;
<<'</<:<?<E<O<y<
? ?2?<?
0M0\0e0r0
0*101V1_1e1x1D2d2n2
3g3p3u3
3_4d4z4
550555K5_5l5q5
6#626F6X6`6}6
6797J7[7r7
808:8D8M8
9C9M9V9_9t9}9
<&=k=p=t=x=|=
132g2o2
6l7K9{9
;6;;;f;k;
<=<Z<o<
=8=C=Q=W=h=y=
>(>/>5>N>U>
0/0D0p0
1;1Q1l1
6 606g6q6~6
:#;@;M;X;_;y;
1G1e1n1y1
3N4*5m5q6
718h8v8
9%939B9S9a9l9z9
;/;L;{;
</<4<T<
0.0>0N0W0y0
2+3>3J3V3b3n3z3
8+9O9Z9m9t9
;"<R<j<
1&292w2
3>4N4j4
51585A5Q5a5y5
9*:6:M:W:z:
=S>e>{>
2B2M2n2|2
233A3L3
3R4X5c5
6#6=6K6V6x6~6
819_9u9
:.:Q:j:w:
;-;G;s;
=9=H=U=
=*>;>n>
5'6-6Z6`6
8 8,8=8v8
<8<H<l<
=>=K=m=
=*>5>K>d>
061I1a1e1i1m1q1u1y1}1
202:2`2
3+3Q3k3p3
4&5c5o5
6Q6\6m6
7.7A7i7}7
:#:K:R:\:
;8<]<e<k<q<w<
<L=W=b=g=l=
><?c?s?
0#0(0-0=0B0G0f0{0
171A1\1v1
22+2G2V2[2`2{2
3/393E3J3O3p3
0^1v1|1
:&;k;p;t;x;|;
2N4@6Y6
6%737=7Z7`7h7v7
7A8O8[8q8
9):.:v:
80>0D0J0
1#1*181>1L1R1\1u1~1
292@2D5
7C7Q7n7
7f8l8r8x8~8
9(9@9F9L9Z9`9n9
:1;O;\;k;
</=6=H=Z=
>!?_?l?
1K1P1V1[1f1l1r1x1~1
2 3e3~3
4-737;7G7~7
8H8S8]8l8t8|86:
1I1R1X1c1y1
2#2Y2t2
4+4A4T4`4s4
7L7b7r7
8!8,828=8C8Q8^8b8j8v8
5@5Z5}5
6/6G6i6
8G>M>S>Y>_>e>k>q>w>}>
;n<T>X>\>`>d>h>l>p>
4181<1@1D1H1L1P1
14484<4@4D4H4L4P4
7$9(9,9094989<9@9
0@2D2H2L2P2T2X2\2
==<=@=D=H=L=
.6L6u6=8C8I8O8U8[8a8g8m8s8y8
4 4+4p4v4
4D526<6I6z6
7,767B7
7C8I8K9]9E:
5X5%6?6j6y6
7)767[7b7
7<8C8k8
9(9;9U9i9
:*:X:g:y:
;";/;S;];
<7<><i<q<
=,=B=U=
>!>'>2>7><>L>Q>V>f>k>p>
?!?&?6?;?@?P?U?Z?j?o?t?
0 0%0*0:0?0D0T0Y0^0n0s0x0
1$1)1.1>1C1H1X1]1b1r1w1|1
2'2:2[2h2}2
3;3c3z3
4!4>4W4\4a4~4
45C5p5
6%6*6/6J6Y6d6i6n6
7K7`7p7u7z7
80858:8X8p8u8z8
:;:S:X:]:x:
<)<5<:<?<T<Y<^<v<
=!?Y?c?
1!1'1o3
8%8E8T8^8k8u8
<%<7<x<
=!='=k=
4=4[4n4
6B6P6X6i6w6~6B7]8l8
=0>6><>B>H>N>
/0_0s0
00112K2
303j3q3
4!4h4u4
7'898i8
?-???Q?c?u?
4%474I4
1R1q1:2A2H2R2[2|2
4'494?4H4N4
6#7,7D7p7
7]8e8w8|8
97:Q:V:
1!1D1Y1o1|1
2<62;f=
u0{0%101?1M1\1e1e2
1T2Z2g2
9.989[9|9
1#1_1|1
5{8?9u9|9
5+5V5i5t5
6%636y6
;4;L;q;
7.8g8/=
151;1u1{1
22-2c2=3
425<5W5
5q6y6r7w7
8 9J9R9o9
: ;W;t;
1.1M1x1
1"2D2h2
9&9<9D9C=l>
7C9M9|:
<!<'<-<3<9<?<E<K<Q<W<]<c<i<o<u<{<
=#=)=/=5=;=A=G=M=S=Y=_=e=k=q=w=}=
>+>?>E>+?^?
==#='=+=/=3=7=;=?=C=G=K=O=S=W=[=_=c=g=k=
33#3'3+3/33373;3?3C3G3K3O3S3b3
7-7J7g7
828O8l8
3 3$3(30383@3H3P3X3`3h3p3x3
4 4(40484@4H4P4X4`4h4p4x4
5 5(50585@5H5P5X5`5h5p5x5
6 6(60686@6H6P6X6`6h6p6x6
1 1$1(1,1014181<1@1D1H1L1P1T1X1\1`1d1h1l1p1t1x1|1
586@6D6H6L6P6T6X6\6`6d6h6l6p6t6x6|60787@7D7H7L7P7T7X7\7d7h7l7p7t7x7|7
`3d3h3l3p3t3x3|3
4 4$4(4,4044484<4@4D4H4L4P4T4X4\4`4d4h4l4p4t4x4|4
4 8$8(8,8
1(141@1L1X1d1p1|1
2$202<2H2T2`2l2x2
3 3,383D3P3\3h3x3
4 4,484D4P4\4h4t4
4@>D>H>L>P>T>X>\>`>d>h>l>p>t>x>|>
?$?,?4?<?D?L?T?\?d?l?t?|?
0$0,040<0D0L0T0\0d0l0t0|0
1$1,141<1D1L1T1\1d1l1t1|1
2$2,242<2D2L2T2\2d2l2t2|2
3$3,343<3D3L3T3\3d3l3t3|3
4$4,444<4D4L4T4\4d4l4t4|4
5$5,545<5D5L5T5\5d5l5t5|5
0 0(00080@0H0P0X0`0h0p0x0
1 1(10181@1H1P1X1`1h1p1x1
2 2(20282@2H2P2X2`2h2p2x2
3 3(30383@3H3P3X3`3h3p3x3
4 4(40484@4H4P4X4`4h4p4x4
5 5(50585@5H5P5X5`5h5p5x5
6 6(60686@6H6P6X6`6h6p6x6
5$5,545<5D5L5T5
9 9$9,9D9T9X9h9l9p9x9
:(:8:<:L:P:X:p:
;,;0;4;<;T;d;h;x;|;
2$282@2T2\2d2l2p2t2|2
3 3$3@3H3L3\3
484@4H4T4
6(6H6h6
74787X7x7
788X8x8
989X9x9
:8:X:x:
< <@<`<
$0@0`0
8 9@9X9p9
-@>(fUY
S{CH\G
Md6s'$E
cI--V|
/++0P!
x_/ hR
!<7TZ{
FwMH7|
|yPbwwB
ED|(MU
2Uy+pP
V;RV/*
hUiUfe
$\)b\C
Washington1
Redmond1
Microsoft Corporation1.0,
%Microsoft Windows Production PCA 20110
200131192636Z
210122192636Z0z1
Washington1
Redmond1
Microsoft Corporation1$0"
Microsoft Windows Publisher0
I0G1-0+
$Microsoft Ireland Operations Limited1
230280+4576700
Chttp://www.microsoft.com/pkiops/crl/MicWinProPCA2011_2011-10-19.crl0a
Ehttp://www.microsoft.com/pkiops/certs/MicWinProPCA2011_2011-10-19.crt0
Washington1
Redmond1
Microsoft Corporation1200
)Microsoft Root Certificate Authority 20100
111019184142Z
261019185142Z0
Washington1
Redmond1
Microsoft Corporation1.0,
%Microsoft Windows Production PCA 20110
i%(\6
Ehttp://crl.microsoft.com/pki/crl/products/MicRooCerAut_2010-06-23.crl0Z
>http://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt0
Washington1
Redmond1
Microsoft Corporation1.0,
%Microsoft Windows Production PCA 2011
,oHqYStCxmBDMNains4kvY6P+uoFZuhiZUvnq8R+OfqU=0Z
http://www.microsoft.com/windows0
20200412092427.241Z0
Washington1
Redmond1
Microsoft Corporation1)0'
Microsoft Operations Puerto Rico1&0$
Thales TSS ESN:B1B7-F67F-FEC21%0#
Microsoft Time-Stamp Service
Washington1
Redmond1
Microsoft Corporation1&0$
Microsoft Time-Stamp PCA 20100
190906204117Z
201204204117Z0
Washington1
Redmond1
Microsoft Corporation1)0'
Microsoft Operations Puerto Rico1&0$
Thales TSS ESN:B1B7-F67F-FEC21%0#
Microsoft Time-Stamp Service0
Ehttp://crl.microsoft.com/pki/crl/products/MicTimStaPCA_2010-07-01.crl0Z
>http://www.microsoft.com/pki/certs/MicTimStaPCA_2010-07-01.crt0
Washington1
Redmond1
Microsoft Corporation1200
)Microsoft Root Certificate Authority 20100
100701213655Z
250701214655Z0|1
Washington1
Redmond1
Microsoft Corporation1&0$
Microsoft Time-Stamp PCA 20100
$`2X`F
Ehttp://crl.microsoft.com/pki/crl/products/MicRooCerAut_2010-06-23.crl0Z
>http://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt0
1http://www.microsoft.com/PKI/docs/CPS/default.htm0@
oK0D$"<
r~akow
Washington1
Redmond1
Microsoft Corporation1)0'
Microsoft Operations Puerto Rico1&0$
Thales TSS ESN:B1B7-F67F-FEC21%0#
Microsoft Time-Stamp Service
k\:6x:
Washington1
Redmond1
Microsoft Corporation1)0'
Microsoft Operations Puerto Rico1'0%
nCipher NTS ESN:4DE9-0C5E-3E091+0)
"Microsoft Time Source Master Clock0
20200412125618Z
20200413125618Z0w0=
Washington1
Redmond1
Microsoft Corporation1&0$
Microsoft Time-Stamp PCA 2010
k\:6x:
Washington1
Redmond1
Microsoft Corporation1&0$
Microsoft Time-Stamp PCA 2010
Dapi-ms-win-core-fibers-l1-1-1
api-ms-win-core-synch-l1-2-0
kernel32
api-ms-
Runtime Error!
Program:
<program name unknown>
Microsoft Visual C++ Runtime Library
mscoree.dll
CLC_ALL
LC_COLLATE
LC_CTYPE
LC_MONETARY
LC_NUMERIC
LC_TIME
(null)
Dapi-ms-win-core-datetime-l1-1-1
api-ms-win-core-file-l1-2-2
api-ms-win-core-localization-l1-2-1
api-ms-win-core-localization-obsolete-l1-2-0
api-ms-win-core-processthreads-l1-1-2
api-ms-win-core-string-l1-1-0
api-ms-win-core-sysinfo-l1-2-1
api-ms-win-core-winrt-l1-1-0
api-ms-win-core-xstate-l2-1-0
api-ms-win-rtcore-ntuser-window-l1-1-0
api-ms-win-security-systemfunctions-l1-1-0
ext-ms-win-ntuser-dialogbox-l1-1-0
ext-ms-win-ntuser-windowstation-l1-1-0
advapi32
api-ms-win-appmodel-runtime-l1-1-2
user32
api-ms-win-core-fibers-l1-1-0
ext-ms-
Sunday
Monday
Tuesday
Wednesday
Thursday
Friday
Saturday
January
February
August
September
October
November
December
MM/dd/yy
dddd, MMMM dd, yyyy
HH:mm:ss
Dja-JP
((((( H
((((( H
(
american
american english
american-english
australian
belgian
canadian
chinese
chinese-hongkong
chinese-simplified
chinese-singapore
chinese-traditional
dutch-belgian
english-american
english-aus
english-belize
english-can
english-caribbean
english-ire
english-jamaica
english-nz
english-south africa
english-trinidad y tobago
english-uk
english-us
english-usa
french-belgian
french-canadian
french-luxembourg
french-swiss
german-austrian
german-lichtenstein
german-luxembourg
german-swiss
irish-english
italian-swiss
norwegian
norwegian-bokmal
Antivirus Signature
Bkav W32.AIDetectMalware
Lionic Trojan.Win32.Agentb.X!c
Elastic Windows.Trojan.TwistedTinsel
ClamAV Clean
CMC Clean
CAT-QuickHeal Trojan.Ghanarava.1738507411ac0e7d
Skyhigh Artemis!Trojan
ALYac Gen:Variant.Fragtor.760966
Cylance Unsafe
Zillya Trojan.Agent.Win32.4128111
Sangfor Trojan.Win32.Save.a
CrowdStrike win/malicious_confidence_100% (W)
Alibaba Trojan:Win32/Generic.9227a85c
K7GW Trojan ( 005c00a71 )
K7AntiVirus Trojan ( 005c00a71 )
huorong Clean
Baidu Clean
VirIT Clean
Paloalto generic.ml
Symantec ML.Attribute.HighConfidence
tehtris Clean
ESET-NOD32 a variant of Win32/Agent.AHCE
APEX Clean
Avast Win32:Agent-BDDR [Drp]
Cynet Malicious (score: 99)
Kaspersky HEUR:Trojan.Win32.Agentb.gen
BitDefender Gen:Variant.Fragtor.760966
NANO-Antivirus Trojan.Win32.Babar.kvlmek
ViRobot Clean
MicroWorld-eScan Gen:Variant.Fragtor.760966
Tencent Malware.Win32.Gencirc.10c0a4c2
Sophos Mal/Generic-S
F-Secure Trojan.TR/Dropper.Gen
DrWeb Clean
VIPRE Gen:Variant.Fragtor.760966
TrendMicro Clean
McAfeeD ti!CCE443E59E62
Trapmine Clean
CTX exe.trojan.generic
Emsisoft Gen:Variant.Fragtor.760966 (B)
Ikarus Trojan.Win32.Agent
FireEye Generic.mg.076f846121b6425d
Jiangmin Clean
Webroot Win.Trojan.Babar
Varist W32/ABTrojan.FFAO-6739
Avira TR/Dropper.Gen
Fortinet W32/Agent.AHCE!tr
Antiy-AVL GrayWare/Win32.Wacapew
Kingsoft Win32.Trojan.Agentb.gen
Gridinsoft Ransom.Win32.Wacatac.sa
Xcitium Clean
Arcabit Trojan.Fragtor.DB9C86
SUPERAntiSpyware Clean
Microsoft Trojan:Win32/Multiverze
Google Detected
AhnLab-V3 Dropper/Win.Generic.R689899
Acronis Clean
McAfee Artemis!076F846121B6
TACHYON Clean
VBA32 BScope.Trojan.Downloader
Malwarebytes Malware.AI.1163237881
Panda Trj/Chgt.AD
Zoner Clean
TrendMicro-HouseCall TROJ_GEN.R002H09AO25
Rising Trojan.Sabsik!8.128D4 (TFE:5:9u6a2PLrbiL)
Yandex Trojan.Agent!ut1/lfR1OZ8
SentinelOne Static AI - Suspicious PE
MaxSecure Trojan.Malware.9325066.susgen
GData Gen:Variant.Fragtor.760966
AVG Win32:Agent-BDDR [Drp]
DeepInstinct MALICIOUS
alibabacloud Trojan[dropper]:Win/Wacatac.B9nj
No IRMA results available.