VSCodium/vscodium 1.121.03429
PE
Verdict: SUSPICIOUS
AI
ShellObject stub marker detected
Local reference
Suspicious dependency
Inferred
Mal-ecule
O₃(C₂AsDy₂)H₄(F₂Os₄Po₄U)Md₃(Bi₅Si₂)
↗
Size
137.1 MB
⇩ download
First seen
66 days ago
Analyzed
66 days ago
Ecosystem
github
Source
github.com ↗
ShellObject XAQS stub marker: VSCodium-vscodium-1.121.03429-VSCodiumUserSetup-x64-1.121.03429.exe:0x1aa3e8d
| 0x0 | 4d5a50000200000004000f00ffff0000 | MZP.............Inno Setup installer file |
| 0x10 | b80000000000000040001a0000000000 | ........@....... |
| 0x20 | 00000000000000000000000000000000 | ................ |
| 0x30 | 00000000000000000000000000010000 | ................ |
| 0x40 | ba10000e1fb409cd21b8014ccd219090 | ........!..L.!.. |
| 0x50 | 546869732070726f6772616d206d7573 | This program mus |
| 0x60 | 742062 | t b |
| 0xaa7dc | 01000000030000000400000005000000 | ................ |
| 0xaa7ec | 496e6e6f205365747570205365747570 | Inno Setup SetupInno Setup installer file |
| 0xaa7fc | 20446174612028362e342e302e312900 | Data (6.4.0.1). |
| 0xaa80c | 00000000000000000000000000000000 | ................ |
| 0xaa81c | 000000000000000000000000000000 | ............... |
| 0xab46c | 790000005265616446696c6500000000 | y...ReadFile.... |
| 0xab47c | 43726561746550726f63657373570000 | CreateProcessW.. |
| 0xab48c | 00004765744c6173744572726f720000 | ..GetLastError.. |
| 0xab49c | 00004765744d6f64756c6546696c654e | ..GetModuleFileN |
| 0xab4ac | 616d6557000000005365744c61737445 | ameW....SetLastE |
| 0xab4bc | 72726f720000000046696e645265736f | rror....FindReso |
| 0xab4cc | 75726365570000004372656174655468 | urceW...CreateTh |
| 0xab4dc | 7265616400000000436f6d7061726553 | read....CompareS |
| 0xab4ec | 7472696e6757000000004c6f61644c69 | tringW....LoadLi |
| 0xab4fc | 62726172 | brar |
| 0xab504 | 000052657365744576656e7400000000 | ..ResetEvent.... |
| 0xab514 | 476574566f6c756d65496e666f726d61 | GetVolumeInforma |
| 0xab524 | 74696f6e570000004765745665727369 | tionW...GetVersi |
| 0xab534 | 6f6e0000000047657444726976655479 | on....GetDriveTy |
| 0xab544 | 7065570000 | peW.. |
| 0x1aa3e7d | 40493177c0b8b17d9d823c36a5d51fba | @I1w...}..<6.... |
| 0x1aa3e8d | 58415153a6fb14744284a2746a951644 | XAQS...tB..tj..DShellObject XAQS stub marker |
| 0x1aa3e9d | 3e37e2c3c186d7cf30cd621afe874097 | >7......0.b...@. |
| 0x1aa3ead | 66e94470 | f.Dp |
Objectives
| 0x1aa3e7d | 40493177c0b8b17d9d823c36a5d51fba | @I1w...}..<6.... |
| 0x1aa3e8d | 58415153a6fb14744284a2746a951644 | XAQS...tB..tj..D |
| 0x1aa3e9d | 3e37e2c3c186d7cf30cd621afe874097 | >7......0.b...@. |
| 0x1aa3ead | 66e94470 | f.Dp |
| 0x0 | 4d5a50000200000004000f00ffff0000 | MZP............. |
| 0x10 | b80000000000000040001a0000000000 | ........@....... |
| 0x20 | 00000000000000000000000000000000 | ................ |
| 0x30 | 00000000000000000000000000010000 | ................ |
| 0x40 | ba10000e1fb409cd21b8014ccd219090 | ........!..L.!.. |
| 0x50 | 546869732070726f6772616d206d7573 | This program mus |
| 0x60 | 742062 | t b |
| 0xb52c8 | 6238743884388c389a38ad38bd38c538 | b8t8.8.8.8.8.8.8 |
| 0xb52d8 | d338e338f53805390d391b392e393e39 | .8.8.8.9.9.9.9>9 |
| 0xb52e8 | 463954396439763986398e399c39af39 | F9T9d9v9.9.9.9.9 |
| 0xb52f8 | bf39c739d539e539f739073a0f3a1d3a | .9.9.9.9.9.:.:.: |
| 0xb5308 | 303a403a483a563a663a783a883a903a | 0:@:H:V:f:x:.:.: |
| 0xb5318 | 9e3ab13ac13ac93ad73ae73af93a093b | .:.:.:.:.:.:.:.; |
| 0xb5328 | 113b1f3b323b423b4a3b583b683b7a3b | .;.;2;B;J;X;h;z; |
| 0xb5338 | 873b8f3b9d3bad3bc03bcb3bd33be13b | .;.;.;.;.;.;.;.; |
| 0xb5348 | f13b043c0f3c173c253c353c483c533c | .;.<.<.<%<5<H<S< |
| 0xb5358 | 5b3c693c793c8c3ca53cc33cd53cee3c | [<i<y<.<.<.<.<.< |
| 0xb5368 | fc3c0c3d1e3d373d453d553d653d773d | .<.=.=7=E=U=e=w= |
| 0xb5378 | 943da23db53dd23de03df03d023e1f3e | .=.=.=.=.=.=.>.> |
| 0xb5388 | 2d3e403e5d3e6b3e7b3e8d3eaa3eb83e | ->@>]>k>{>.>.>.> |
| 0xb5398 | cb3ee83ef63e063f183f353f433f563f | .>.>.>.?.?5?C?V? |
| 0xb53a8 | 733f813f913fa33fc03fce3fe13ffe3f | s?.?.?.?.?.?.?.? |
| 0xb53b8 | 00800600300200000c301c302e304b30 | ....0....0.0.0K0 |
| 0xb53c8 | 59306c3089309730a730b930d630e430 | Y0l0.0.0.0.0.0.0 |
| 0xb53d8 | f730143122313231443161316f318231 | .0.1"121D1a1o1.1 |
| 0xb53e8 | 9f31ad31bd31cf31ec31fa310d322a32 | .1.1.1.1.1.1.2*2 |
| 0xb53f8 | 383248325a32773285329832b532c332 | 82H2Z2w2.2.2.2.2 |
| 0xb5408 | d332e53202331033233340334e335e33 | .2.2.3.3#3@3N3^3 |
| 0xb5418 | 70338d339b33ae33cb33d933e933fb33 | p3.3.3.3.3.3.3.3 |
| 0xb5428 | 1834263439345634643474348634a334 | .4&494V4d4t4.4.4 |
| 0xb5438 | b134c434e134ef34ff3411352e353c35 | .4.4.4.4.4.5.5<5 |
| 0xb5448 | 4f356c357a358a359c35b635d435e635 | O5l5z5.5.5.5.5.5 |
| 0xb5458 | 00360e361e3630364a36583668367836 | .6.6.606J6X6h6x6 |
| 0xb5468 | 8a36a836b636c636d836e736ef36fd36 | .6.6.6.6.6.6.6.6 |
| 0xb5478 | 0d371c37333747374f375d3772378937 | .7.737G7O7]7r7.7 |
| 0xb5488 | 91379f37b437d137df37f43714382238 | .7.7.7.7.7.7.8"8 |
| 0xb5498 | 333848386638743886389b38bc38ca38 | 38H8f8t8.8.8.8.8 |
| 0xb54a8 | db38ed38023924393239433959397b39 | .8.8.9$929C9Y9{9 |
| 0xb54b8 | 89399f39bb39cc39d939dd39f739fe39 | .9.9.9.9.9.9.9.9 |
| 0xb54c8 | 083a0c3a103a2b3a333a4c3a5c3a603a | .:.:.:+:3:L:\:`: |
| 0xb54d8 | 643a6c3a743a783a7c3a803a843a883a | d:l:t:x:|:.:.:.: |
| 0xb54e8 | 8c3a903a943a983a9c3aa03aa43aa83a | .:.:.:.:.:.:.:.: |
| 0xb54f8 | ac3ab03ab43ab83abc3ac03ac43ac83a | .:.:.:.:.:.:.:.: |
| 0xb5508 | cc3ad03add3af03a013b193b213b293b | .:.:.:.:.;.;!;); |
| 0xb5518 | 313b513b5c3b643b823b943b9f3ba73b | 1;Q;\;d;.;.;.;.; |
| 0xb5528 | b53bc53bd83bf33b013c143c2d3c3b3c | .;.;.;.;.<.<-<;< |
| 0xb5538 | 503c693c6d3c873c913cb43cc43cc83c | P<i<m<.<.<.<.<.< |
| 0xb5548 | cc3cd43cdc3ce03ce43ce83cec3cf03c | .<.<.<.<.<.<.<.< |
| 0xb5558 | f43c | .< |
| 0xaa7dc | 01000000030000000400000005000000 | ................ |
| 0xaa7ec | 496e6e6f205365747570205365747570 | Inno Setup Setup |
| 0xaa7fc | 20446174612028362e342e302e312900 | Data (6.4.0.1). |
| 0xaa80c | 00000000000000000000000000000000 | ................ |
| 0xaa81c | 000000000000000000000000000000 | ............... |
| 0xac208 | 249c4a0010904b000000000000000000 | $.J...K......... |
| 0xac218 | 456d62617263616465726f2044656c70 | Embarcadero Delp |
| 0xac228 | 686920666f722057696e333220636f6d | hi for Win32 com |
| 0xac238 | 70696c65722076657273696f6e203335 | piler version 35 |
| 0xac248 | 2e30202832382e302e34383336312e33 | .0 (28.0.48361.3 |
| 0xac258 | 32333629000000000000000000 | 236)......... |
| 0xb52c8 | 6238743884388c389a38ad38bd38c538 | b8t8.8.8.8.8.8.8 |
| 0xb52d8 | d338e338f53805390d391b392e393e39 | .8.8.8.9.9.9.9>9 |
| 0xb52e8 | 463954396439763986398e399c39af39 | F9T9d9v9.9.9.9.9 |
| 0xb52f8 | bf39c739d539e539f739073a0f3a1d3a | .9.9.9.9.9.:.:.: |
| 0xb5308 | 303a403a483a563a663a783a883a903a | 0:@:H:V:f:x:.:.: |
| 0xb5318 | 9e3ab13ac13ac93ad73ae73af93a093b | .:.:.:.:.:.:.:.; |
| 0xb5328 | 113b1f3b323b423b4a3b583b683b7a3b | .;.;2;B;J;X;h;z; |
| 0xb5338 | 873b8f3b9d3bad3bc03bcb3bd33be13b | .;.;.;.;.;.;.;.; |
| 0xb5348 | f13b043c0f3c173c253c353c483c533c | .;.<.<.<%<5<H<S< |
| 0xb5358 | 5b3c693c793c8c3ca53cc33cd53cee3c | [<i<y<.<.<.<.<.< |
| 0xb5368 | fc3c0c3d1e3d373d453d553d653d773d | .<.=.=7=E=U=e=w= |
| 0xb5378 | 943da23db53dd23de03df03d023e1f3e | .=.=.=.=.=.=.>.> |
| 0xb5388 | 2d3e403e5d3e6b3e7b3e8d3eaa3eb83e | ->@>]>k>{>.>.>.> |
| 0xb5398 | cb3ee83ef63e063f183f353f433f563f | .>.>.>.?.?5?C?V? |
| 0xb53a8 | 733f813f913fa33fc03fce3fe13ffe3f | s?.?.?.?.?.?.?.? |
| 0xb53b8 | 00800600300200000c301c302e304b30 | ....0....0.0.0K0 |
| 0xb53c8 | 59306c3089309730a730b930d630e430 | Y0l0.0.0.0.0.0.0 |
| 0xb53d8 | f730143122313231443161316f318231 | .0.1"121D1a1o1.1 |
| 0xb53e8 | 9f31ad31bd31cf31ec31fa310d322a32 | .1.1.1.1.1.1.2*2 |
| 0xb53f8 | 383248325a32773285329832b532c332 | 82H2Z2w2.2.2.2.2 |
| 0xb5408 | d332e53202331033233340334e335e33 | .2.2.3.3#3@3N3^3 |
| 0xb5418 | 70338d339b33ae33cb33d933e933fb33 | p3.3.3.3.3.3.3.3 |
| 0xb5428 | 1834263439345634643474348634a334 | .4&494V4d4t4.4.4 |
| 0xb5438 | b134c434e134ef34ff3411352e353c35 | .4.4.4.4.4.5.5<5 |
| 0xb5448 | 4f356c357a358a359c35b635d435e635 | O5l5z5.5.5.5.5.5 |
| 0xb5458 | 00360e361e3630364a36583668367836 | .6.6.606J6X6h6x6 |
| 0xb5468 | 8a36a836b636c636d836e736ef36fd36 | .6.6.6.6.6.6.6.6 |
| 0xb5478 | 0d371c37333747374f375d3772378937 | .7.737G7O7]7r7.7 |
| 0xb5488 | 91379f37b437d137df37f43714382238 | .7.7.7.7.7.7.8"8 |
| 0xb5498 | 333848386638743886389b38bc38ca38 | 38H8f8t8.8.8.8.8 |
| 0xb54a8 | db38ed38023924393239433959397b39 | .8.8.9$929C9Y9{9 |
| 0xb54b8 | 89399f39bb39cc39d939dd39f739fe39 | .9.9.9.9.9.9.9.9 |
| 0xb54c8 | 083a0c3a103a2b3a333a4c3a5c3a603a | .:.:.:+:3:L:\:`: |
| 0xb54d8 | 643a6c3a743a783a7c3a803a843a883a | d:l:t:x:|:.:.:.: |
| 0xb54e8 | 8c3a903a943a983a9c3aa03aa43aa83a | .:.:.:.:.:.:.:.: |
| 0xb54f8 | ac3ab03ab43ab83abc3ac03ac43ac83a | .:.:.:.:.:.:.:.: |
| 0xb5508 | cc3ad03add3af03a013b193b213b293b | .:.:.:.:.;.;!;); |
| 0xb5518 | 313b513b5c3b643b823b943b9f3ba73b | 1;Q;\;d;.;.;.;.; |
| 0xb5528 | b53bc53bd83bf33b013c143c2d3c3b3c | .;.;.;.;.<.<-<;< |
| 0xb5538 | 503c693c6d3c873c913cb43cc43cc83c | P<i<m<.<.<.<.<.< |
| 0xb5548 | cc3cd43cdc3ce03ce43ce83cec3cf03c | .<.<.<.<.<.<.<.< |
| 0xb5558 | f43c | .< |
| 0x0 | 4d5a50000200000004000f00ffff0000 | MZP............. |
| 0x10 | b80000000000000040001a0000000000 | ........@....... |
| 0x20 | 00000000000000000000000000000000 | ................ |
| 0x30 | 00000000000000000000000000010000 | ................ |
| 0x40 | ba10000e1fb409cd21b8014ccd219090 | ........!..L.!.. |
| 0x50 | 546869732070726f6772616d206d7573 | This program mus |
| 0x60 | 742062 | t b |
| 0xaa7dc | 01000000030000000400000005000000 | ................ |
| 0xaa7ec | 496e6e6f205365747570205365747570 | Inno Setup Setup |
| 0xaa7fc | 20446174612028362e342e302e312900 | Data (6.4.0.1). |
| 0xaa80c | 00000000000000000000000000000000 | ................ |
| 0xaa81c | 000000000000000000000000000000 | ............... |
| 0xab504 | 000052657365744576656e7400000000 | ..ResetEvent.... |
| 0xab514 | 476574566f6c756d65496e666f726d61 | GetVolumeInforma |
| 0xab524 | 74696f6e570000004765745665727369 | tionW...GetVersi |
| 0xab534 | 6f6e0000000047657444726976655479 | on....GetDriveTy |
| 0xab544 | 7065570000 | peW.. |
| 0xab778 | 7450726f634164647265737300000000 | tProcAddress.... |
| 0xab788 | 526573756d6554687265616400000000 | ResumeThread.... |
| 0xab798 | 47657456657273696f6e457857000000 | GetVersionExW... |
| 0xab7a8 | 56657269667956657273696f6e496e66 | VerifyVersionInf |
| 0xab7b8 | 6f570000000048656170437265 | oW....HeapCre |
| 0xab7fa | 436f6e646974696f6e4d61736b000000 | ConditionMask... |
| 0xab80a | 4765744469736b467265655370616365 | GetDiskFreeSpace |
| 0xab81a | 5700000046696e64466972737446696c | W...FindFirstFil |
| 0xab82a | 65570000000047657455736572446566 | eW....GetUserDef |
| 0xab83a | 61 | a |
| 0xb52c8 | 6238743884388c389a38ad38bd38c538 | b8t8.8.8.8.8.8.8 |
| 0xb52d8 | d338e338f53805390d391b392e393e39 | .8.8.8.9.9.9.9>9 |
| 0xb52e8 | 463954396439763986398e399c39af39 | F9T9d9v9.9.9.9.9 |
| 0xb52f8 | bf39c739d539e539f739073a0f3a1d3a | .9.9.9.9.9.:.:.: |
| 0xb5308 | 303a403a483a563a663a783a883a903a | 0:@:H:V:f:x:.:.: |
| 0xb5318 | 9e3ab13ac13ac93ad73ae73af93a093b | .:.:.:.:.:.:.:.; |
| 0xb5328 | 113b1f3b323b423b4a3b583b683b7a3b | .;.;2;B;J;X;h;z; |
| 0xb5338 | 873b8f3b9d3bad3bc03bcb3bd33be13b | .;.;.;.;.;.;.;.; |
| 0xb5348 | f13b043c0f3c173c253c353c483c533c | .;.<.<.<%<5<H<S< |
| 0xb5358 | 5b3c693c793c8c3ca53cc33cd53cee3c | [<i<y<.<.<.<.<.< |
| 0xb5368 | fc3c0c3d1e3d373d453d553d653d773d | .<.=.=7=E=U=e=w= |
| 0xb5378 | 943da23db53dd23de03df03d023e1f3e | .=.=.=.=.=.=.>.> |
| 0xb5388 | 2d3e403e5d3e6b3e7b3e8d3eaa3eb83e | ->@>]>k>{>.>.>.> |
| 0xb5398 | cb3ee83ef63e063f183f353f433f563f | .>.>.>.?.?5?C?V? |
| 0xb53a8 | 733f813f913fa33fc03fce3fe13ffe3f | s?.?.?.?.?.?.?.? |
| 0xb53b8 | 00800600300200000c301c302e304b30 | ....0....0.0.0K0 |
| 0xb53c8 | 59306c3089309730a730b930d630e430 | Y0l0.0.0.0.0.0.0 |
| 0xb53d8 | f730143122313231443161316f318231 | .0.1"121D1a1o1.1 |
| 0xb53e8 | 9f31ad31bd31cf31ec31fa310d322a32 | .1.1.1.1.1.1.2*2 |
| 0xb53f8 | 383248325a32773285329832b532c332 | 82H2Z2w2.2.2.2.2 |
| 0xb5408 | d332e53202331033233340334e335e33 | .2.2.3.3#3@3N3^3 |
| 0xb5418 | 70338d339b33ae33cb33d933e933fb33 | p3.3.3.3.3.3.3.3 |
| 0xb5428 | 1834263439345634643474348634a334 | .4&494V4d4t4.4.4 |
| 0xb5438 | b134c434e134ef34ff3411352e353c35 | .4.4.4.4.4.5.5<5 |
| 0xb5448 | 4f356c357a358a359c35b635d435e635 | O5l5z5.5.5.5.5.5 |
| 0xb5458 | 00360e361e3630364a36583668367836 | .6.6.606J6X6h6x6 |
| 0xb5468 | 8a36a836b636c636d836e736ef36fd36 | .6.6.6.6.6.6.6.6 |
| 0xb5478 | 0d371c37333747374f375d3772378937 | .7.737G7O7]7r7.7 |
| 0xb5488 | 91379f37b437d137df37f43714382238 | .7.7.7.7.7.7.8"8 |
| 0xb5498 | 333848386638743886389b38bc38ca38 | 38H8f8t8.8.8.8.8 |
| 0xb54a8 | db38ed38023924393239433959397b39 | .8.8.9$929C9Y9{9 |
| 0xb54b8 | 89399f39bb39cc39d939dd39f739fe39 | .9.9.9.9.9.9.9.9 |
| 0xb54c8 | 083a0c3a103a2b3a333a4c3a5c3a603a | .:.:.:+:3:L:\:`: |
| 0xb54d8 | 643a6c3a743a783a7c3a803a843a883a | d:l:t:x:|:.:.:.: |
| 0xb54e8 | 8c3a903a943a983a9c3aa03aa43aa83a | .:.:.:.:.:.:.:.: |
| 0xb54f8 | ac3ab03ab43ab83abc3ac03ac43ac83a | .:.:.:.:.:.:.:.: |
| 0xb5508 | cc3ad03add3af03a013b193b213b293b | .:.:.:.:.;.;!;); |
| 0xb5518 | 313b513b5c3b643b823b943b9f3ba73b | 1;Q;\;d;.;.;.;.; |
| 0xb5528 | b53bc53bd83bf33b013c143c2d3c3b3c | .;.;.;.;.<.<-<;< |
| 0xb5538 | 503c693c6d3c873c913cb43cc43cc83c | P<i<m<.<.<.<.<.< |
| 0xb5548 | cc3cd43cdc3ce03ce43ce83cec3cf03c | .<.<.<.<.<.<.<.< |
| 0xb5558 | f43c | .< |
Micro-behaviors
| 0xb52c8 | 6238743884388c389a38ad38bd38c538 | b8t8.8.8.8.8.8.8 |
| 0xb52d8 | d338e338f53805390d391b392e393e39 | .8.8.8.9.9.9.9>9 |
| 0xb52e8 | 463954396439763986398e399c39af39 | F9T9d9v9.9.9.9.9 |
| 0xb52f8 | bf39c739d539e539f739073a0f3a1d3a | .9.9.9.9.9.:.:.: |
| 0xb5308 | 303a403a483a563a663a783a883a903a | 0:@:H:V:f:x:.:.: |
| 0xb5318 | 9e3ab13ac13ac93ad73ae73af93a093b | .:.:.:.:.:.:.:.; |
| 0xb5328 | 113b1f3b323b423b4a3b583b683b7a3b | .;.;2;B;J;X;h;z; |
| 0xb5338 | 873b8f3b9d3bad3bc03bcb3bd33be13b | .;.;.;.;.;.;.;.; |
| 0xb5348 | f13b043c0f3c173c253c353c483c533c | .;.<.<.<%<5<H<S< |
| 0xb5358 | 5b3c693c793c8c3ca53cc33cd53cee3c | [<i<y<.<.<.<.<.< |
| 0xb5368 | fc3c0c3d1e3d373d453d553d653d773d | .<.=.=7=E=U=e=w= |
| 0xb5378 | 943da23db53dd23de03df03d023e1f3e | .=.=.=.=.=.=.>.> |
| 0xb5388 | 2d3e403e5d3e6b3e7b3e8d3eaa3eb83e | ->@>]>k>{>.>.>.> |
| 0xb5398 | cb3ee83ef63e063f183f353f433f563f | .>.>.>.?.?5?C?V? |
| 0xb53a8 | 733f813f913fa33fc03fce3fe13ffe3f | s?.?.?.?.?.?.?.? |
| 0xb53b8 | 00800600300200000c301c302e304b30 | ....0....0.0.0K0 |
| 0xb53c8 | 59306c3089309730a730b930d630e430 | Y0l0.0.0.0.0.0.0 |
| 0xb53d8 | f730143122313231443161316f318231 | .0.1"121D1a1o1.1 |
| 0xb53e8 | 9f31ad31bd31cf31ec31fa310d322a32 | .1.1.1.1.1.1.2*2 |
| 0xb53f8 | 383248325a32773285329832b532c332 | 82H2Z2w2.2.2.2.2 |
| 0xb5408 | d332e53202331033233340334e335e33 | .2.2.3.3#3@3N3^3 |
| 0xb5418 | 70338d339b33ae33cb33d933e933fb33 | p3.3.3.3.3.3.3.3 |
| 0xb5428 | 1834263439345634643474348634a334 | .4&494V4d4t4.4.4 |
| 0xb5438 | b134c434e134ef34ff3411352e353c35 | .4.4.4.4.4.5.5<5 |
| 0xb5448 | 4f356c357a358a359c35b635d435e635 | O5l5z5.5.5.5.5.5 |
| 0xb5458 | 00360e361e3630364a36583668367836 | .6.6.606J6X6h6x6 |
| 0xb5468 | 8a36a836b636c636d836e736ef36fd36 | .6.6.6.6.6.6.6.6 |
| 0xb5478 | 0d371c37333747374f375d3772378937 | .7.737G7O7]7r7.7 |
| 0xb5488 | 91379f37b437d137df37f43714382238 | .7.7.7.7.7.7.8"8 |
| 0xb5498 | 333848386638743886389b38bc38ca38 | 38H8f8t8.8.8.8.8 |
| 0xb54a8 | db38ed38023924393239433959397b39 | .8.8.9$929C9Y9{9 |
| 0xb54b8 | 89399f39bb39cc39d939dd39f739fe39 | .9.9.9.9.9.9.9.9 |
| 0xb54c8 | 083a0c3a103a2b3a333a4c3a5c3a603a | .:.:.:+:3:L:\:`: |
| 0xb54d8 | 643a6c3a743a783a7c3a803a843a883a | d:l:t:x:|:.:.:.: |
| 0xb54e8 | 8c3a903a943a983a9c3aa03aa43aa83a | .:.:.:.:.:.:.:.: |
| 0xb54f8 | ac3ab03ab43ab83abc3ac03ac43ac83a | .:.:.:.:.:.:.:.: |
| 0xb5508 | cc3ad03add3af03a013b193b213b293b | .:.:.:.:.;.;!;); |
| 0xb5518 | 313b513b5c3b643b823b943b9f3ba73b | 1;Q;\;d;.;.;.;.; |
| 0xb5528 | b53bc53bd83bf33b013c143c2d3c3b3c | .;.;.;.;.<.<-<;< |
| 0xb5538 | 503c693c6d3c873c913cb43cc43cc83c | P<i<m<.<.<.<.<.< |
| 0xb5548 | cc3cd43cdc3ce03ce43ce83cec3cf03c | .<.<.<.<.<.<.<.< |
| 0xb5558 | f43c | .< |
| 0xab504 | 000052657365744576656e7400000000 | ..ResetEvent.... |
| 0xab514 | 476574566f6c756d65496e666f726d61 | GetVolumeInforma |
| 0xab524 | 74696f6e570000004765745665727369 | tionW...GetVersi |
| 0xab534 | 6f6e0000000047657444726976655479 | on....GetDriveTy |
| 0xab544 | 7065570000 | peW.. |
| 0xb52c8 | 6238743884388c389a38ad38bd38c538 | b8t8.8.8.8.8.8.8 |
| 0xb52d8 | d338e338f53805390d391b392e393e39 | .8.8.8.9.9.9.9>9 |
| 0xb52e8 | 463954396439763986398e399c39af39 | F9T9d9v9.9.9.9.9 |
| 0xb52f8 | bf39c739d539e539f739073a0f3a1d3a | .9.9.9.9.9.:.:.: |
| 0xb5308 | 303a403a483a563a663a783a883a903a | 0:@:H:V:f:x:.:.: |
| 0xb5318 | 9e3ab13ac13ac93ad73ae73af93a093b | .:.:.:.:.:.:.:.; |
| 0xb5328 | 113b1f3b323b423b4a3b583b683b7a3b | .;.;2;B;J;X;h;z; |
| 0xb5338 | 873b8f3b9d3bad3bc03bcb3bd33be13b | .;.;.;.;.;.;.;.; |
| 0xb5348 | f13b043c0f3c173c253c353c483c533c | .;.<.<.<%<5<H<S< |
| 0xb5358 | 5b3c693c793c8c3ca53cc33cd53cee3c | [<i<y<.<.<.<.<.< |
| 0xb5368 | fc3c0c3d1e3d373d453d553d653d773d | .<.=.=7=E=U=e=w= |
| 0xb5378 | 943da23db53dd23de03df03d023e1f3e | .=.=.=.=.=.=.>.> |
| 0xb5388 | 2d3e403e5d3e6b3e7b3e8d3eaa3eb83e | ->@>]>k>{>.>.>.> |
| 0xb5398 | cb3ee83ef63e063f183f353f433f563f | .>.>.>.?.?5?C?V? |
| 0xb53a8 | 733f813f913fa33fc03fce3fe13ffe3f | s?.?.?.?.?.?.?.? |
| 0xb53b8 | 00800600300200000c301c302e304b30 | ....0....0.0.0K0 |
| 0xb53c8 | 59306c3089309730a730b930d630e430 | Y0l0.0.0.0.0.0.0 |
| 0xb53d8 | f730143122313231443161316f318231 | .0.1"121D1a1o1.1 |
| 0xb53e8 | 9f31ad31bd31cf31ec31fa310d322a32 | .1.1.1.1.1.1.2*2 |
| 0xb53f8 | 383248325a32773285329832b532c332 | 82H2Z2w2.2.2.2.2 |
| 0xb5408 | d332e53202331033233340334e335e33 | .2.2.3.3#3@3N3^3 |
| 0xb5418 | 70338d339b33ae33cb33d933e933fb33 | p3.3.3.3.3.3.3.3 |
| 0xb5428 | 1834263439345634643474348634a334 | .4&494V4d4t4.4.4 |
| 0xb5438 | b134c434e134ef34ff3411352e353c35 | .4.4.4.4.4.5.5<5 |
| 0xb5448 | 4f356c357a358a359c35b635d435e635 | O5l5z5.5.5.5.5.5 |
| 0xb5458 | 00360e361e3630364a36583668367836 | .6.6.606J6X6h6x6 |
| 0xb5468 | 8a36a836b636c636d836e736ef36fd36 | .6.6.6.6.6.6.6.6 |
| 0xb5478 | 0d371c37333747374f375d3772378937 | .7.737G7O7]7r7.7 |
| 0xb5488 | 91379f37b437d137df37f43714382238 | .7.7.7.7.7.7.8"8 |
| 0xb5498 | 333848386638743886389b38bc38ca38 | 38H8f8t8.8.8.8.8 |
| 0xb54a8 | db38ed38023924393239433959397b39 | .8.8.9$929C9Y9{9 |
| 0xb54b8 | 89399f39bb39cc39d939dd39f739fe39 | .9.9.9.9.9.9.9.9 |
| 0xb54c8 | 083a0c3a103a2b3a333a4c3a5c3a603a | .:.:.:+:3:L:\:`: |
| 0xb54d8 | 643a6c3a743a783a7c3a803a843a883a | d:l:t:x:|:.:.:.: |
| 0xb54e8 | 8c3a903a943a983a9c3aa03aa43aa83a | .:.:.:.:.:.:.:.: |
| 0xb54f8 | ac3ab03ab43ab83abc3ac03ac43ac83a | .:.:.:.:.:.:.:.: |
| 0xb5508 | cc3ad03add3af03a013b193b213b293b | .:.:.:.:.;.;!;); |
| 0xb5518 | 313b513b5c3b643b823b943b9f3ba73b | 1;Q;\;d;.;.;.;.; |
| 0xb5528 | b53bc53bd83bf33b013c143c2d3c3b3c | .;.;.;.;.<.<-<;< |
| 0xb5538 | 503c693c6d3c873c913cb43cc43cc83c | P<i<m<.<.<.<.<.< |
| 0xb5548 | cc3cd43cdc3ce03ce43ce83cec3cf03c | .<.<.<.<.<.<.<.< |
| 0xb5558 | f43c | .< |
| 0xb52c8 | 6238743884388c389a38ad38bd38c538 | b8t8.8.8.8.8.8.8 |
| 0xb52d8 | d338e338f53805390d391b392e393e39 | .8.8.8.9.9.9.9>9 |
| 0xb52e8 | 463954396439763986398e399c39af39 | F9T9d9v9.9.9.9.9 |
| 0xb52f8 | bf39c739d539e539f739073a0f3a1d3a | .9.9.9.9.9.:.:.: |
| 0xb5308 | 303a403a483a563a663a783a883a903a | 0:@:H:V:f:x:.:.: |
| 0xb5318 | 9e3ab13ac13ac93ad73ae73af93a093b | .:.:.:.:.:.:.:.; |
| 0xb5328 | 113b1f3b323b423b4a3b583b683b7a3b | .;.;2;B;J;X;h;z; |
| 0xb5338 | 873b8f3b9d3bad3bc03bcb3bd33be13b | .;.;.;.;.;.;.;.; |
| 0xb5348 | f13b043c0f3c173c253c353c483c533c | .;.<.<.<%<5<H<S< |
| 0xb5358 | 5b3c693c793c8c3ca53cc33cd53cee3c | [<i<y<.<.<.<.<.< |
| 0xb5368 | fc3c0c3d1e3d373d453d553d653d773d | .<.=.=7=E=U=e=w= |
| 0xb5378 | 943da23db53dd23de03df03d023e1f3e | .=.=.=.=.=.=.>.> |
| 0xb5388 | 2d3e403e5d3e6b3e7b3e8d3eaa3eb83e | ->@>]>k>{>.>.>.> |
| 0xb5398 | cb3ee83ef63e063f183f353f433f563f | .>.>.>.?.?5?C?V? |
| 0xb53a8 | 733f813f913fa33fc03fce3fe13ffe3f | s?.?.?.?.?.?.?.? |
| 0xb53b8 | 00800600300200000c301c302e304b30 | ....0....0.0.0K0 |
| 0xb53c8 | 59306c3089309730a730b930d630e430 | Y0l0.0.0.0.0.0.0 |
| 0xb53d8 | f730143122313231443161316f318231 | .0.1"121D1a1o1.1 |
| 0xb53e8 | 9f31ad31bd31cf31ec31fa310d322a32 | .1.1.1.1.1.1.2*2 |
| 0xb53f8 | 383248325a32773285329832b532c332 | 82H2Z2w2.2.2.2.2 |
| 0xb5408 | d332e53202331033233340334e335e33 | .2.2.3.3#3@3N3^3 |
| 0xb5418 | 70338d339b33ae33cb33d933e933fb33 | p3.3.3.3.3.3.3.3 |
| 0xb5428 | 1834263439345634643474348634a334 | .4&494V4d4t4.4.4 |
| 0xb5438 | b134c434e134ef34ff3411352e353c35 | .4.4.4.4.4.5.5<5 |
| 0xb5448 | 4f356c357a358a359c35b635d435e635 | O5l5z5.5.5.5.5.5 |
| 0xb5458 | 00360e361e3630364a36583668367836 | .6.6.606J6X6h6x6 |
| 0xb5468 | 8a36a836b636c636d836e736ef36fd36 | .6.6.6.6.6.6.6.6 |
| 0xb5478 | 0d371c37333747374f375d3772378937 | .7.737G7O7]7r7.7 |
| 0xb5488 | 91379f37b437d137df37f43714382238 | .7.7.7.7.7.7.8"8 |
| 0xb5498 | 333848386638743886389b38bc38ca38 | 38H8f8t8.8.8.8.8 |
| 0xb54a8 | db38ed38023924393239433959397b39 | .8.8.9$929C9Y9{9 |
| 0xb54b8 | 89399f39bb39cc39d939dd39f739fe39 | .9.9.9.9.9.9.9.9 |
| 0xb54c8 | 083a0c3a103a2b3a333a4c3a5c3a603a | .:.:.:+:3:L:\:`: |
| 0xb54d8 | 643a6c3a743a783a7c3a803a843a883a | d:l:t:x:|:.:.:.: |
| 0xb54e8 | 8c3a903a943a983a9c3aa03aa43aa83a | .:.:.:.:.:.:.:.: |
| 0xb54f8 | ac3ab03ab43ab83abc3ac03ac43ac83a | .:.:.:.:.:.:.:.: |
| 0xb5508 | cc3ad03add3af03a013b193b213b293b | .:.:.:.:.;.;!;); |
| 0xb5518 | 313b513b5c3b643b823b943b9f3ba73b | 1;Q;\;d;.;.;.;.; |
| 0xb5528 | b53bc53bd83bf33b013c143c2d3c3b3c | .;.;.;.;.<.<-<;< |
| 0xb5538 | 503c693c6d3c873c913cb43cc43cc83c | P<i<m<.<.<.<.<.< |
| 0xb5548 | cc3cd43cdc3ce03ce43ce83cec3cf03c | .<.<.<.<.<.<.<.< |
| 0xb5558 | f43c | .< |
| 0xb52c8 | 6238743884388c389a38ad38bd38c538 | b8t8.8.8.8.8.8.8 |
| 0xb52d8 | d338e338f53805390d391b392e393e39 | .8.8.8.9.9.9.9>9 |
| 0xb52e8 | 463954396439763986398e399c39af39 | F9T9d9v9.9.9.9.9 |
| 0xb52f8 | bf39c739d539e539f739073a0f3a1d3a | .9.9.9.9.9.:.:.: |
| 0xb5308 | 303a403a483a563a663a783a883a903a | 0:@:H:V:f:x:.:.: |
| 0xb5318 | 9e3ab13ac13ac93ad73ae73af93a093b | .:.:.:.:.:.:.:.; |
| 0xb5328 | 113b1f3b323b423b4a3b583b683b7a3b | .;.;2;B;J;X;h;z; |
| 0xb5338 | 873b8f3b9d3bad3bc03bcb3bd33be13b | .;.;.;.;.;.;.;.; |
| 0xb5348 | f13b043c0f3c173c253c353c483c533c | .;.<.<.<%<5<H<S< |
| 0xb5358 | 5b3c693c793c8c3ca53cc33cd53cee3c | [<i<y<.<.<.<.<.< |
| 0xb5368 | fc3c0c3d1e3d373d453d553d653d773d | .<.=.=7=E=U=e=w= |
| 0xb5378 | 943da23db53dd23de03df03d023e1f3e | .=.=.=.=.=.=.>.> |
| 0xb5388 | 2d3e403e5d3e6b3e7b3e8d3eaa3eb83e | ->@>]>k>{>.>.>.> |
| 0xb5398 | cb3ee83ef63e063f183f353f433f563f | .>.>.>.?.?5?C?V? |
| 0xb53a8 | 733f813f913fa33fc03fce3fe13ffe3f | s?.?.?.?.?.?.?.? |
| 0xb53b8 | 00800600300200000c301c302e304b30 | ....0....0.0.0K0 |
| 0xb53c8 | 59306c3089309730a730b930d630e430 | Y0l0.0.0.0.0.0.0 |
| 0xb53d8 | f730143122313231443161316f318231 | .0.1"121D1a1o1.1 |
| 0xb53e8 | 9f31ad31bd31cf31ec31fa310d322a32 | .1.1.1.1.1.1.2*2 |
| 0xb53f8 | 383248325a32773285329832b532c332 | 82H2Z2w2.2.2.2.2 |
| 0xb5408 | d332e53202331033233340334e335e33 | .2.2.3.3#3@3N3^3 |
| 0xb5418 | 70338d339b33ae33cb33d933e933fb33 | p3.3.3.3.3.3.3.3 |
| 0xb5428 | 1834263439345634643474348634a334 | .4&494V4d4t4.4.4 |
| 0xb5438 | b134c434e134ef34ff3411352e353c35 | .4.4.4.4.4.5.5<5 |
| 0xb5448 | 4f356c357a358a359c35b635d435e635 | O5l5z5.5.5.5.5.5 |
| 0xb5458 | 00360e361e3630364a36583668367836 | .6.6.606J6X6h6x6 |
| 0xb5468 | 8a36a836b636c636d836e736ef36fd36 | .6.6.6.6.6.6.6.6 |
| 0xb5478 | 0d371c37333747374f375d3772378937 | .7.737G7O7]7r7.7 |
| 0xb5488 | 91379f37b437d137df37f43714382238 | .7.7.7.7.7.7.8"8 |
| 0xb5498 | 333848386638743886389b38bc38ca38 | 38H8f8t8.8.8.8.8 |
| 0xb54a8 | db38ed38023924393239433959397b39 | .8.8.9$929C9Y9{9 |
| 0xb54b8 | 89399f39bb39cc39d939dd39f739fe39 | .9.9.9.9.9.9.9.9 |
| 0xb54c8 | 083a0c3a103a2b3a333a4c3a5c3a603a | .:.:.:+:3:L:\:`: |
| 0xb54d8 | 643a6c3a743a783a7c3a803a843a883a | d:l:t:x:|:.:.:.: |
| 0xb54e8 | 8c3a903a943a983a9c3aa03aa43aa83a | .:.:.:.:.:.:.:.: |
| 0xb54f8 | ac3ab03ab43ab83abc3ac03ac43ac83a | .:.:.:.:.:.:.:.: |
| 0xb5508 | cc3ad03add3af03a013b193b213b293b | .:.:.:.:.;.;!;); |
| 0xb5518 | 313b513b5c3b643b823b943b9f3ba73b | 1;Q;\;d;.;.;.;.; |
| 0xb5528 | b53bc53bd83bf33b013c143c2d3c3b3c | .;.;.;.;.<.<-<;< |
| 0xb5538 | 503c693c6d3c873c913cb43cc43cc83c | P<i<m<.<.<.<.<.< |
| 0xb5548 | cc3cd43cdc3ce03ce43ce83cec3cf03c | .<.<.<.<.<.<.<.< |
| 0xb5558 | f43c | .< |
| 0xab7fa | 436f6e646974696f6e4d61736b000000 | ConditionMask... |
| 0xab80a | 4765744469736b467265655370616365 | GetDiskFreeSpace |
| 0xab81a | 5700000046696e64466972737446696c | W...FindFirstFil |
| 0xab82a | 65570000000047657455736572446566 | eW....GetUserDef |
| 0xab83a | 61 | a |
| 0xb52c8 | 6238743884388c389a38ad38bd38c538 | b8t8.8.8.8.8.8.8 |
| 0xb52d8 | d338e338f53805390d391b392e393e39 | .8.8.8.9.9.9.9>9 |
| 0xb52e8 | 463954396439763986398e399c39af39 | F9T9d9v9.9.9.9.9 |
| 0xb52f8 | bf39c739d539e539f739073a0f3a1d3a | .9.9.9.9.9.:.:.: |
| 0xb5308 | 303a403a483a563a663a783a883a903a | 0:@:H:V:f:x:.:.: |
| 0xb5318 | 9e3ab13ac13ac93ad73ae73af93a093b | .:.:.:.:.:.:.:.; |
| 0xb5328 | 113b1f3b323b423b4a3b583b683b7a3b | .;.;2;B;J;X;h;z; |
| 0xb5338 | 873b8f3b9d3bad3bc03bcb3bd33be13b | .;.;.;.;.;.;.;.; |
| 0xb5348 | f13b043c0f3c173c253c353c483c533c | .;.<.<.<%<5<H<S< |
| 0xb5358 | 5b3c693c793c8c3ca53cc33cd53cee3c | [<i<y<.<.<.<.<.< |
| 0xb5368 | fc3c0c3d1e3d373d453d553d653d773d | .<.=.=7=E=U=e=w= |
| 0xb5378 | 943da23db53dd23de03df03d023e1f3e | .=.=.=.=.=.=.>.> |
| 0xb5388 | 2d3e403e5d3e6b3e7b3e8d3eaa3eb83e | ->@>]>k>{>.>.>.> |
| 0xb5398 | cb3ee83ef63e063f183f353f433f563f | .>.>.>.?.?5?C?V? |
| 0xb53a8 | 733f813f913fa33fc03fce3fe13ffe3f | s?.?.?.?.?.?.?.? |
| 0xb53b8 | 00800600300200000c301c302e304b30 | ....0....0.0.0K0 |
| 0xb53c8 | 59306c3089309730a730b930d630e430 | Y0l0.0.0.0.0.0.0 |
| 0xb53d8 | f730143122313231443161316f318231 | .0.1"121D1a1o1.1 |
| 0xb53e8 | 9f31ad31bd31cf31ec31fa310d322a32 | .1.1.1.1.1.1.2*2 |
| 0xb53f8 | 383248325a32773285329832b532c332 | 82H2Z2w2.2.2.2.2 |
| 0xb5408 | d332e53202331033233340334e335e33 | .2.2.3.3#3@3N3^3 |
| 0xb5418 | 70338d339b33ae33cb33d933e933fb33 | p3.3.3.3.3.3.3.3 |
| 0xb5428 | 1834263439345634643474348634a334 | .4&494V4d4t4.4.4 |
| 0xb5438 | b134c434e134ef34ff3411352e353c35 | .4.4.4.4.4.5.5<5 |
| 0xb5448 | 4f356c357a358a359c35b635d435e635 | O5l5z5.5.5.5.5.5 |
| 0xb5458 | 00360e361e3630364a36583668367836 | .6.6.606J6X6h6x6 |
| 0xb5468 | 8a36a836b636c636d836e736ef36fd36 | .6.6.6.6.6.6.6.6 |
| 0xb5478 | 0d371c37333747374f375d3772378937 | .7.737G7O7]7r7.7 |
| 0xb5488 | 91379f37b437d137df37f43714382238 | .7.7.7.7.7.7.8"8 |
| 0xb5498 | 333848386638743886389b38bc38ca38 | 38H8f8t8.8.8.8.8 |
| 0xb54a8 | db38ed38023924393239433959397b39 | .8.8.9$929C9Y9{9 |
| 0xb54b8 | 89399f39bb39cc39d939dd39f739fe39 | .9.9.9.9.9.9.9.9 |
| 0xb54c8 | 083a0c3a103a2b3a333a4c3a5c3a603a | .:.:.:+:3:L:\:`: |
| 0xb54d8 | 643a6c3a743a783a7c3a803a843a883a | d:l:t:x:|:.:.:.: |
| 0xb54e8 | 8c3a903a943a983a9c3aa03aa43aa83a | .:.:.:.:.:.:.:.: |
| 0xb54f8 | ac3ab03ab43ab83abc3ac03ac43ac83a | .:.:.:.:.:.:.:.: |
| 0xb5508 | cc3ad03add3af03a013b193b213b293b | .:.:.:.:.;.;!;); |
| 0xb5518 | 313b513b5c3b643b823b943b9f3ba73b | 1;Q;\;d;.;.;.;.; |
| 0xb5528 | b53bc53bd83bf33b013c143c2d3c3b3c | .;.;.;.;.<.<-<;< |
| 0xb5538 | 503c693c6d3c873c913cb43cc43cc83c | P<i<m<.<.<.<.<.< |
| 0xb5548 | cc3cd43cdc3ce03ce43ce83cec3cf03c | .<.<.<.<.<.<.<.< |
| 0xb5558 | f43c | .< |
| 0xab46c | 790000005265616446696c6500000000 | y...ReadFile.... |
| 0xab47c | 43726561746550726f63657373570000 | CreateProcessW.. |
| 0xab48c | 00004765744c6173744572726f720000 | ..GetLastError.. |
| 0xab49c | 00004765744d6f64756c6546696c654e | ..GetModuleFileN |
| 0xab4ac | 616d6557000000005365744c61737445 | ameW....SetLastE |
| 0xab4bc | 72726f720000000046696e645265736f | rror....FindReso |
| 0xab4cc | 75726365570000004372656174655468 | urceW...CreateTh |
| 0xab4dc | 7265616400000000436f6d7061726553 | read....CompareS |
| 0xab4ec | 7472696e6757000000004c6f61644c69 | tringW....LoadLi |
| 0xab4fc | 62726172 | brar |
| 0xb52c8 | 6238743884388c389a38ad38bd38c538 | b8t8.8.8.8.8.8.8 |
| 0xb52d8 | d338e338f53805390d391b392e393e39 | .8.8.8.9.9.9.9>9 |
| 0xb52e8 | 463954396439763986398e399c39af39 | F9T9d9v9.9.9.9.9 |
| 0xb52f8 | bf39c739d539e539f739073a0f3a1d3a | .9.9.9.9.9.:.:.: |
| 0xb5308 | 303a403a483a563a663a783a883a903a | 0:@:H:V:f:x:.:.: |
| 0xb5318 | 9e3ab13ac13ac93ad73ae73af93a093b | .:.:.:.:.:.:.:.; |
| 0xb5328 | 113b1f3b323b423b4a3b583b683b7a3b | .;.;2;B;J;X;h;z; |
| 0xb5338 | 873b8f3b9d3bad3bc03bcb3bd33be13b | .;.;.;.;.;.;.;.; |
| 0xb5348 | f13b043c0f3c173c253c353c483c533c | .;.<.<.<%<5<H<S< |
| 0xb5358 | 5b3c693c793c8c3ca53cc33cd53cee3c | [<i<y<.<.<.<.<.< |
| 0xb5368 | fc3c0c3d1e3d373d453d553d653d773d | .<.=.=7=E=U=e=w= |
| 0xb5378 | 943da23db53dd23de03df03d023e1f3e | .=.=.=.=.=.=.>.> |
| 0xb5388 | 2d3e403e5d3e6b3e7b3e8d3eaa3eb83e | ->@>]>k>{>.>.>.> |
| 0xb5398 | cb3ee83ef63e063f183f353f433f563f | .>.>.>.?.?5?C?V? |
| 0xb53a8 | 733f813f913fa33fc03fce3fe13ffe3f | s?.?.?.?.?.?.?.? |
| 0xb53b8 | 00800600300200000c301c302e304b30 | ....0....0.0.0K0 |
| 0xb53c8 | 59306c3089309730a730b930d630e430 | Y0l0.0.0.0.0.0.0 |
| 0xb53d8 | f730143122313231443161316f318231 | .0.1"121D1a1o1.1 |
| 0xb53e8 | 9f31ad31bd31cf31ec31fa310d322a32 | .1.1.1.1.1.1.2*2 |
| 0xb53f8 | 383248325a32773285329832b532c332 | 82H2Z2w2.2.2.2.2 |
| 0xb5408 | d332e53202331033233340334e335e33 | .2.2.3.3#3@3N3^3 |
| 0xb5418 | 70338d339b33ae33cb33d933e933fb33 | p3.3.3.3.3.3.3.3 |
| 0xb5428 | 1834263439345634643474348634a334 | .4&494V4d4t4.4.4 |
| 0xb5438 | b134c434e134ef34ff3411352e353c35 | .4.4.4.4.4.5.5<5 |
| 0xb5448 | 4f356c357a358a359c35b635d435e635 | O5l5z5.5.5.5.5.5 |
| 0xb5458 | 00360e361e3630364a36583668367836 | .6.6.606J6X6h6x6 |
| 0xb5468 | 8a36a836b636c636d836e736ef36fd36 | .6.6.6.6.6.6.6.6 |
| 0xb5478 | 0d371c37333747374f375d3772378937 | .7.737G7O7]7r7.7 |
| 0xb5488 | 91379f37b437d137df37f43714382238 | .7.7.7.7.7.7.8"8 |
| 0xb5498 | 333848386638743886389b38bc38ca38 | 38H8f8t8.8.8.8.8 |
| 0xb54a8 | db38ed38023924393239433959397b39 | .8.8.9$929C9Y9{9 |
| 0xb54b8 | 89399f39bb39cc39d939dd39f739fe39 | .9.9.9.9.9.9.9.9 |
| 0xb54c8 | 083a0c3a103a2b3a333a4c3a5c3a603a | .:.:.:+:3:L:\:`: |
| 0xb54d8 | 643a6c3a743a783a7c3a803a843a883a | d:l:t:x:|:.:.:.: |
| 0xb54e8 | 8c3a903a943a983a9c3aa03aa43aa83a | .:.:.:.:.:.:.:.: |
| 0xb54f8 | ac3ab03ab43ab83abc3ac03ac43ac83a | .:.:.:.:.:.:.:.: |
| 0xb5508 | cc3ad03add3af03a013b193b213b293b | .:.:.:.:.;.;!;); |
| 0xb5518 | 313b513b5c3b643b823b943b9f3ba73b | 1;Q;\;d;.;.;.;.; |
| 0xb5528 | b53bc53bd83bf33b013c143c2d3c3b3c | .;.;.;.;.<.<-<;< |
| 0xb5538 | 503c693c6d3c873c913cb43cc43cc83c | P<i<m<.<.<.<.<.< |
| 0xb5548 | cc3cd43cdc3ce03ce43ce83cec3cf03c | .<.<.<.<.<.<.<.< |
| 0xb5558 | f43c | .< |
| 0xb52c8 | 6238743884388c389a38ad38bd38c538 | b8t8.8.8.8.8.8.8 |
| 0xb52d8 | d338e338f53805390d391b392e393e39 | .8.8.8.9.9.9.9>9 |
| 0xb52e8 | 463954396439763986398e399c39af39 | F9T9d9v9.9.9.9.9 |
| 0xb52f8 | bf39c739d539e539f739073a0f3a1d3a | .9.9.9.9.9.:.:.: |
| 0xb5308 | 303a403a483a563a663a783a883a903a | 0:@:H:V:f:x:.:.: |
| 0xb5318 | 9e3ab13ac13ac93ad73ae73af93a093b | .:.:.:.:.:.:.:.; |
| 0xb5328 | 113b1f3b323b423b4a3b583b683b7a3b | .;.;2;B;J;X;h;z; |
| 0xb5338 | 873b8f3b9d3bad3bc03bcb3bd33be13b | .;.;.;.;.;.;.;.; |
| 0xb5348 | f13b043c0f3c173c253c353c483c533c | .;.<.<.<%<5<H<S< |
| 0xb5358 | 5b3c693c793c8c3ca53cc33cd53cee3c | [<i<y<.<.<.<.<.< |
| 0xb5368 | fc3c0c3d1e3d373d453d553d653d773d | .<.=.=7=E=U=e=w= |
| 0xb5378 | 943da23db53dd23de03df03d023e1f3e | .=.=.=.=.=.=.>.> |
| 0xb5388 | 2d3e403e5d3e6b3e7b3e8d3eaa3eb83e | ->@>]>k>{>.>.>.> |
| 0xb5398 | cb3ee83ef63e063f183f353f433f563f | .>.>.>.?.?5?C?V? |
| 0xb53a8 | 733f813f913fa33fc03fce3fe13ffe3f | s?.?.?.?.?.?.?.? |
| 0xb53b8 | 00800600300200000c301c302e304b30 | ....0....0.0.0K0 |
| 0xb53c8 | 59306c3089309730a730b930d630e430 | Y0l0.0.0.0.0.0.0 |
| 0xb53d8 | f730143122313231443161316f318231 | .0.1"121D1a1o1.1 |
| 0xb53e8 | 9f31ad31bd31cf31ec31fa310d322a32 | .1.1.1.1.1.1.2*2 |
| 0xb53f8 | 383248325a32773285329832b532c332 | 82H2Z2w2.2.2.2.2 |
| 0xb5408 | d332e53202331033233340334e335e33 | .2.2.3.3#3@3N3^3 |
| 0xb5418 | 70338d339b33ae33cb33d933e933fb33 | p3.3.3.3.3.3.3.3 |
| 0xb5428 | 1834263439345634643474348634a334 | .4&494V4d4t4.4.4 |
| 0xb5438 | b134c434e134ef34ff3411352e353c35 | .4.4.4.4.4.5.5<5 |
| 0xb5448 | 4f356c357a358a359c35b635d435e635 | O5l5z5.5.5.5.5.5 |
| 0xb5458 | 00360e361e3630364a36583668367836 | .6.6.606J6X6h6x6 |
| 0xb5468 | 8a36a836b636c636d836e736ef36fd36 | .6.6.6.6.6.6.6.6 |
| 0xb5478 | 0d371c37333747374f375d3772378937 | .7.737G7O7]7r7.7 |
| 0xb5488 | 91379f37b437d137df37f43714382238 | .7.7.7.7.7.7.8"8 |
| 0xb5498 | 333848386638743886389b38bc38ca38 | 38H8f8t8.8.8.8.8 |
| 0xb54a8 | db38ed38023924393239433959397b39 | .8.8.9$929C9Y9{9 |
| 0xb54b8 | 89399f39bb39cc39d939dd39f739fe39 | .9.9.9.9.9.9.9.9 |
| 0xb54c8 | 083a0c3a103a2b3a333a4c3a5c3a603a | .:.:.:+:3:L:\:`: |
| 0xb54d8 | 643a6c3a743a783a7c3a803a843a883a | d:l:t:x:|:.:.:.: |
| 0xb54e8 | 8c3a903a943a983a9c3aa03aa43aa83a | .:.:.:.:.:.:.:.: |
| 0xb54f8 | ac3ab03ab43ab83abc3ac03ac43ac83a | .:.:.:.:.:.:.:.: |
| 0xb5508 | cc3ad03add3af03a013b193b213b293b | .:.:.:.:.;.;!;); |
| 0xb5518 | 313b513b5c3b643b823b943b9f3ba73b | 1;Q;\;d;.;.;.;.; |
| 0xb5528 | b53bc53bd83bf33b013c143c2d3c3b3c | .;.;.;.;.<.<-<;< |
| 0xb5538 | 503c693c6d3c873c913cb43cc43cc83c | P<i<m<.<.<.<.<.< |
| 0xb5548 | cc3cd43cdc3ce03ce43ce83cec3cf03c | .<.<.<.<.<.<.<.< |
| 0xb5558 | f43c | .< |
| 0xb52c8 | 6238743884388c389a38ad38bd38c538 | b8t8.8.8.8.8.8.8 |
| 0xb52d8 | d338e338f53805390d391b392e393e39 | .8.8.8.9.9.9.9>9 |
| 0xb52e8 | 463954396439763986398e399c39af39 | F9T9d9v9.9.9.9.9 |
| 0xb52f8 | bf39c739d539e539f739073a0f3a1d3a | .9.9.9.9.9.:.:.: |
| 0xb5308 | 303a403a483a563a663a783a883a903a | 0:@:H:V:f:x:.:.: |
| 0xb5318 | 9e3ab13ac13ac93ad73ae73af93a093b | .:.:.:.:.:.:.:.; |
| 0xb5328 | 113b1f3b323b423b4a3b583b683b7a3b | .;.;2;B;J;X;h;z; |
| 0xb5338 | 873b8f3b9d3bad3bc03bcb3bd33be13b | .;.;.;.;.;.;.;.; |
| 0xb5348 | f13b043c0f3c173c253c353c483c533c | .;.<.<.<%<5<H<S< |
| 0xb5358 | 5b3c693c793c8c3ca53cc33cd53cee3c | [<i<y<.<.<.<.<.< |
| 0xb5368 | fc3c0c3d1e3d373d453d553d653d773d | .<.=.=7=E=U=e=w= |
| 0xb5378 | 943da23db53dd23de03df03d023e1f3e | .=.=.=.=.=.=.>.> |
| 0xb5388 | 2d3e403e5d3e6b3e7b3e8d3eaa3eb83e | ->@>]>k>{>.>.>.> |
| 0xb5398 | cb3ee83ef63e063f183f353f433f563f | .>.>.>.?.?5?C?V? |
| 0xb53a8 | 733f813f913fa33fc03fce3fe13ffe3f | s?.?.?.?.?.?.?.? |
| 0xb53b8 | 00800600300200000c301c302e304b30 | ....0....0.0.0K0 |
| 0xb53c8 | 59306c3089309730a730b930d630e430 | Y0l0.0.0.0.0.0.0 |
| 0xb53d8 | f730143122313231443161316f318231 | .0.1"121D1a1o1.1 |
| 0xb53e8 | 9f31ad31bd31cf31ec31fa310d322a32 | .1.1.1.1.1.1.2*2 |
| 0xb53f8 | 383248325a32773285329832b532c332 | 82H2Z2w2.2.2.2.2 |
| 0xb5408 | d332e53202331033233340334e335e33 | .2.2.3.3#3@3N3^3 |
| 0xb5418 | 70338d339b33ae33cb33d933e933fb33 | p3.3.3.3.3.3.3.3 |
| 0xb5428 | 1834263439345634643474348634a334 | .4&494V4d4t4.4.4 |
| 0xb5438 | b134c434e134ef34ff3411352e353c35 | .4.4.4.4.4.5.5<5 |
| 0xb5448 | 4f356c357a358a359c35b635d435e635 | O5l5z5.5.5.5.5.5 |
| 0xb5458 | 00360e361e3630364a36583668367836 | .6.6.606J6X6h6x6 |
| 0xb5468 | 8a36a836b636c636d836e736ef36fd36 | .6.6.6.6.6.6.6.6 |
| 0xb5478 | 0d371c37333747374f375d3772378937 | .7.737G7O7]7r7.7 |
| 0xb5488 | 91379f37b437d137df37f43714382238 | .7.7.7.7.7.7.8"8 |
| 0xb5498 | 333848386638743886389b38bc38ca38 | 38H8f8t8.8.8.8.8 |
| 0xb54a8 | db38ed38023924393239433959397b39 | .8.8.9$929C9Y9{9 |
| 0xb54b8 | 89399f39bb39cc39d939dd39f739fe39 | .9.9.9.9.9.9.9.9 |
| 0xb54c8 | 083a0c3a103a2b3a333a4c3a5c3a603a | .:.:.:+:3:L:\:`: |
| 0xb54d8 | 643a6c3a743a783a7c3a803a843a883a | d:l:t:x:|:.:.:.: |
| 0xb54e8 | 8c3a903a943a983a9c3aa03aa43aa83a | .:.:.:.:.:.:.:.: |
| 0xb54f8 | ac3ab03ab43ab83abc3ac03ac43ac83a | .:.:.:.:.:.:.:.: |
| 0xb5508 | cc3ad03add3af03a013b193b213b293b | .:.:.:.:.;.;!;); |
| 0xb5518 | 313b513b5c3b643b823b943b9f3ba73b | 1;Q;\;d;.;.;.;.; |
| 0xb5528 | b53bc53bd83bf33b013c143c2d3c3b3c | .;.;.;.;.<.<-<;< |
| 0xb5538 | 503c693c6d3c873c913cb43cc43cc83c | P<i<m<.<.<.<.<.< |
| 0xb5548 | cc3cd43cdc3ce03ce43ce83cec3cf03c | .<.<.<.<.<.<.<.< |
| 0xb5558 | f43c | .< |
Metadata
-
0x0
4d 5a 50 00 02 00 00 00 04 00 0f 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 ba 10 00 0e 1f b4 09 cd 21 b8 01 4c cd 21 90 90 54 68 69 73 20 70 72 6f 67 72 61 6d 20 6d 75 73 74 20 62 MZP.....................@...............................................!..L.!..This program must b×7
| 0xe7a7b | 636f6d7061746962696c6974793e0d0a | compatibility>.. |
| 0xe7a8b | 3c66696c65206e616d653d22636f6d63 | <file name="comc |
| 0xe7a9b | 746c33322e646c6c22206c6f61644672 | tl32.dll" loadFr |
| 0xe7aab | 6f6d3d222553797374656d526f6f7425 | om="%SystemRoot% |
| 0xe7abb | 5c73797374656d33325c22202f3e0d0a | \system32\" />.. |
| 0xe7acb | 3c66696c65206e616d653d226d70722e | <file name="mpr. |
| 0xe7adb | 646c6c22206c6f616446726f6d3d2225 | dll" loadFrom="% |
| 0xe7aeb | 53797374656d526f6f74255c73797374 | SystemRoot%\syst |
| 0xe7afb | 656d33325c22202f3e0d0a3c66696c65 | em32\" />..<file |
| 0xe7b0b | 206e616d653d226e657461706933322e | name="netapi32. |
| 0xe7b1b | 646c6c22206c6f616446726f6d3d2225 | dll" loadFrom="% |
| 0xe7b2b | 53797374656d526f6f74255c73797374 | SystemRoot%\syst |
| 0xe7b3b | 656d33325c22202f3e0d0a3c66696c65 | em32\" />..<file |
| 0xe7b4b | 206e616d653d226e65747574696c732e | name="netutils. |
| 0xe7b5b | 646c6c22206c6f616446726f6d3d2225 | dll" loadFrom="% |
| 0xe7b6b | 53797374656d526f6f74255c73797374 | SystemRoot%\syst |
| 0xe7b7b | 656d33325c22202f3e0d0a3c66696c65 | em32\" />..<file |
| 0xe7b8b | 206e616d653d22746578747368617069 | name="textshapi |
| 0xe7b9b | 6e672e646c6c22206c6f616446726f6d | ng.dll" loadFrom |
| 0xe7bab | 3d222553797374656d526f6f74255c73 | ="%SystemRoot%\s |
| 0xe7bbb | 797374656d33325c22202f3e0d0a3c66 | ystem32\" />..<f |
| 0xe7bcb | 696c65206e616d653d2276657273696f | ile name="versio |
| 0xe7bdb | 6e2e646c6c22206c6f616446726f6d3d | n.dll" loadFrom= |
| 0xe7beb | 222553797374656d526f6f74255c7379 | "%SystemRoot%\sy |
| 0xe7bfb | 7374656d33325c22202f3e0d0a3c6669 | stem32\" />..<fi |
| 0xe7c0b | 6c65206e616d653d2277696e68747470 | le name="winhttp |
| 0xe7c1b | 2e646c6c22206c6f616446726f6d3d22 | .dll" loadFrom=" |
| 0xe7c2b | 2553797374656d526f6f74255c737973 | %SystemRoot%\sys |
| 0xe7c3b | 74656d33325c22202f3e0d0a3c2f6173 | tem32\" />..</as |
| 0xe7c4b | 73656d626c793e0d0a50414444494e47 | sembly>..PADDING |
| 0xe7c5b | 585850414444494e4750 | XXPADDINGP |
| 0xaa7dc | 01000000030000000400000005000000 | ................ |
| 0xaa7ec | 496e6e6f205365747570205365747570 | Inno Setup Setup |
| 0xaa7fc | 20446174612028362e342e302e312900 | Data (6.4.0.1). |
| 0xaa80c | 00000000000000000000000000000000 | ................ |
| 0xaa81c | 000000000000000000000000000000 | ............... |
| 0x0 | 4d5a50000200000004000f00ffff0000 | MZP............. |
| 0x10 | b80000000000000040001a0000000000 | ........@....... |
| 0x20 | 00000000000000000000000000000000 | ................ |
| 0x30 | 00000000000000000000000000010000 | ................ |
| 0x40 | ba10000e1fb409cd21b8014ccd219090 | ........!..L.!.. |
| 0x50 | 546869732070726f6772616d206d7573 | This program mus |
| 0x60 | 742062 | t b |
-
0x0
4d 5a 50 00 02 00 00 00 04 00 0f 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 ba 10 00 0e 1f b4 09 cd 21 b8 01 4c cd 21 90 90 54 68 69 73 20 70 72 6f 67 72 61 6d 20 6d 75 73 74 20 62 MZP.....................@...............................................!..L.!..This program must b×3
notable severity, 100% confident.
signed
Authenticode chain CN: SignPath Foundation
notable severity, 100% confident.
strings-truncated
String extraction truncated due to limits (count: 100000, total bytes: 50 MB)
file
| 0xaa7dc | 01000000030000000400000005000000 | ................ |
| 0xaa7ec | 496e6e6f205365747570205365747570 | Inno Setup Setup |
| 0xaa7fc | 20446174612028362e342e302e312900 | Data (6.4.0.1). |
| 0xaa80c | 00000000000000000000000000000000 | ................ |
| 0xaa81c | 000000000000000000000000000000 | ............... |
notable severity, 86% confident.
sfx/inno-setup
Inno Setup extraction failed
20 of 30 traits shown
Identity
| SHA-256 | 21b126ba82829633072836bb67df5fbbe1dd08ec1afc3b2483c886efc9f72515 |
|---|---|
| Filename | VSCodium-vscodium-1.121.03429-VSCodiumUserSetup-x64-1.121.03429.exe |
| Package | VSCodium/vscodium |
| Version | 1.121.03429 |
Origin
| Source | forager |
|---|---|
| Feed | github.com |
| Ecosystem | github |
| Domain | github.com |
| URL | https://github.com/VSCodium/vscodium/releases/download/1.121.03429/VSCodiumUserSetup-x64-1.121.03429.exe ↗ |
Timeline
| First seen | 19 Jun 2026 09:25 UTC |
|---|---|
| First analyzed | 19 Jun 2026 11:52 UTC |
| Last analyzed | 19 Jun 2026 11:52 UTC |
| Last updated | 20 Jun 2026 11:25 UTC |
Labeling
| Label | good |
|---|---|
| Label source | forager |
| Traits version | 56752 |
Not seeing what you expected? Let us know