virussign.com_7c438095a2e03fb33521dfdd105f8de0.vir

HOSTILE

3ed38bd9753aaca386280f59413271bbbe14ec02177f7bc1171252ad4488723b · 100%

Mal-ecule

O₃(CaP₂As)H₆(Cm₂DbF₂Os₅Po₅U)Md₄(Bi₃Pt)Th

Size 55.0 KB download

First seen 13 days ago

Analyzed 11 days ago

Source virussign.com

Also detected by 1 source

Card verification phishing resource set: virussign.com_7c438095a2e03fb33521dfdd105f8de0.vir:0xab11

Shell service COM hijack persistence: virussign.com_7c438095a2e03fb33521dfdd105f8de0.vir:0xb36c

ATM PIN prompt in PE resource: virussign.com_7c438095a2e03fb33521dfdd105f8de0.vir:0xab11

virussign.com_7c438095a2e03fb33521dfdd105f8de0.vir pe

0x3c0	00000000000000000000000000000000	................
0x3d0	00000000000000000000000000000000	................
0x3e0	00000000000000000000000000000000	................
0x3f0	00000000000000000000000000000000	................
0x400	5f8290c82266d4b42f46d6436e42a44c	_..."f../F.CnB.L
0x410	e506f44be516f453e74068406e42d080	...K...S.@h@nB..
0x420	3d1487c82a66c01304bcb8437e02d027	=...*f.....C~..'
0x430	9177d0436e42b4ca4b42d0436ec99467	.w.CnB..KB.Cn..g
0x440	4ec9884be532dcc090bda4635536f467	N..K.2.....cU6.g
0x450	1a585d7718c9dcf0e50ef44be50adcc0	.X]w.......K....
0x460	12f1d4431b952f17dd4a3b920acdd543	...C../..J;....C
0x470	6e42d0c0aa4e8f1d358185ca8b118614	nB...N..5.......
0x480	3b28d0296e2a42532e422f3666aa6639	;(.)n*BS.B/6f.f9
0x490	6e428d1c301959af33812c16e7a753af	nB..0.Y.3.,...S.
0x4a0	661186143bc98d4fe507d8e0e2f2	f...;..O......

0x83c0	00000000000000000000000000000000	................
0x83d0	00000000000000000000000000000000	................
0x83e0	00000000000000000000000000000000	................
0x83f0	00000000000000000000000000000000	................
0x8400	29de107e99ed127e29ce507e294e507e	)..~...~).P~)NP~
0x8410	294e507e294e507e294e507e294e507e	)NP~)NP~)NP~)NP~
0x8420	294e507e294e507e294e507e294e507e	)NP~)NP~)NP~)NP~
0x8430	294e507e294e507e294e507e294e507e	)NP~)NP~)NP~)NP~
0x8440	294e507e294e507e294e507e294e507e	)NP~)NP~)NP~)NP~
0x8450	294e507e294e507e294e507e294e507e	)NP~)NP~)NP~)NP~
0x8460	294e507e294e507e294e507e294e507e	)NP~)NP~)NP~)NP~
0x8470	294e507e294e507e294e507e294e507e	)NP~)NP~)NP~)NP~
0x8480	294e507e294e507e294e507e294e507e	)NP~)NP~)NP~)NP~
0x8490	294e507e62273e19622f220a46200f4f	)NP~b'>.b/".F .O
0x84a0	194e	.N

0xa9c4	294e507e294e507e294e507e294e507e	)NP~)NP~)NP~)NP~
0xa9d4	294e507e294e507e294e507e294e507e	)NP~)NP~)NP~)NP~
0xa9e4	294e507e294e507e294e507e294e507e	)NP~)NP~)NP~)NP~
0xa9f4	294e507e294e507e294e507e294e507e	)NP~)NP~)NP~)NP~
0xaa04	7d26390d09051529656e032a7c08165e	}&9....)en.*\|..^
0xaa14	5e2f235e4a21341b4d6e320709187e5e	^/#^J!4.Mn2...~^
0xaa24	7f60702e7c1e1b3767627013462a350c	.`p.\|..7gbp.F*5.
0xaa34	483a3f0c0921365e4a3c250a463e7e10	H:?..!6^J<%.F>~.
0xaa44	5c4e071b452d3f134c6e24110921250c	\N..E-?.Ln$..!%.
0xaa54	09283f0c5c237c5e682a25125d6e071b	.(?.\#\|^h*%.]n..
0xaa64	4b6e1d1f5a3a350c5a6f70165d3a2044	Kn..Z:5.Zop.]: D
0xaa74	0661330c5c3a3f0e0720257e68191d52	.a3.\:?.. %~h..R
0xaa84	093935124a213d1b093a3f5e6a1c052a	.95.J!=..:?^j..*
0xaa94	661e7e307c6e7d5e610f023a6a01023b	f.~0\|n}^a..:j..;
0xaaa4	060d1f307d0b1e2a060d1837650a702e	...0}..*...7e.p.
0xaab4	661c1e3106021f32601a112d061c112e	f..1...2`..-....
0xaac4	6c4e023b6802703d681d1852091c153f	lN.;h.p=h..R...?
0xaad4	656e12377d0d183b736e7d5e6a1c052a	en.7}..;sn}^j..*
0xaae4	661e7e307c4e507e294e19104a21220c	f.~0\|NP~)N..J!".
0xaaf4	4c2d245e681a1d5e79071e52093e3c1b	L-$^h..^y..R.><.
0xab04	483d3552092d3f0c5b2b330a291e3c1b	H=5R.-?.[+3.).<.Card verification phishing resource set
0xab14	483d3552092b3e0a4c3c7007463b225e	H=5R.+>.L<p.F;"^
0xab24	681a1d5e79071e7e602033115b3c351d	h..^y..~` 3.[<5.
0xab34	5d6e13287f7c70561a6334174e27245e	]n.(.\|pV.c4.N'$^
0xab44	4a21341b09213e5e4b2f33150921365e	J!4..!>^K/3..!6^
0xab54	4a2f221a0062700e452b310d4c62701d	J/"..bp.E+1.Lbp.
0xab64	463c221b4a3a502e452b310d4c62701b	F<".J:P.E+1.Lbp.CVV2 prompt in PE resource
0xab74	473a350c09373f0b5b6e13287f7c7056	G:5..7?.[n.(.\|pV
0xab84	1a6334174e27245e4a21341b09213e5e	.c4.N'$^J!4..!>^
0xab94	4b2f33150921365e4a2f221a004e750d	K/3..!6^J/"..Nu.
0xaba4	046b237e7922351f5a2b7c5e5a2b3c1b	.k#~y"5.Z+\|^Z+<.
0xabb4	4a3a703b513e390c483a3911476e091b	J:p;Q>9.H:9.Gn..
0xabc4	483c502e452b310d4c62700d4c22351d	H<P.E+1.Lbp.L"5.
0xabd4	5d6e15065927221f5d273f1009033f10	]n..Y'".]'?...?.
0xabe4	5d265037472d3f0c5b2b330a090d310c	]&P7G-?.[+3...1.
0xabf4	4d6e1e0b442c350c056e20124c2f231b	Mn..D,5..n .L/#.
0xac04	056e33115b3c351d5d4e00124c2f231b	.n3.[<5.]N..L/#.Card number prompt in PE resource
0xac14	056e35105d2b225e5021250c090d310c	.n5.]+"^P!%...1.
0xac24	4d6e1e0b442c350c296b235e0c3d502e	Mn..D,5.)k#^.=P.
0xac34	452b310d4c62701b473a350c092d3f0c	E+1.Lbp.G:5..-?.
0xac44	5b2b330a09082512456e1e1f442b502e	[+3...%.En..D+P.
0xac54	452b310d4c62700d4c22351d5d6e131f	E+1.Lbp.L"5.]n..
0xac64	5b2a70567f27231f0603310d5d2b223d	[*pV.'#...1.]+"=
0xac74	483c3457292822131b4e021b4e27230a	H<4W)("..N..N'#.
0xac84	4c3c031b5b38391d4c1e22114a2b230d	L<..[89.L.".J+#.
0xac94	2925350c472b3c4d1b603412454e230b	)%5.G+<M.`4.EN#.
0xaca4	5b287e1a483a501a47253b504d223c7e	[(~.H:P.G%;PM"<~
0xacb4	4225634c0738281a29253b4d1b603412	B%cL.8(.)%;M.`4.

0xb061	6e7d53174e7a50034e08534625021b4a	n}S.NzP.N.SF%..J
0xb071	38614f290715385b2f3d1b296b235b5c	8aO)..8[/=.)k#[\
0xb081	6e7d5e6427330c463d3f185d6e19105d	n}^d'3.F=?.]n..]
0xb091	2b22104c3a703b513e3c115b2b227e75	+".L:p;Q><.[+"~u
0xb0a1	07350659223f0c4c6035064c6e502e48	.5.Y"?.L`5.LnP.H
0xb0b1	3a387e7a21360a5e2f221b7503391d5b	:8~z!6.^/".u.9.[
0xb0c1	2123114f3a0c376c6e031b5d3b20227a	!#.O:.7ln..]; "z
0xb0d1	2b240b594e291b5a4e120c4639231b67	+$.YN).ZN..F9#.g
0xb0e1	2b272e5b21331b5a3d50506d0b163f7c	+'.[!3.Z=PPm..?\|
0xb0f1	0204227a01162a7e0f023b7503391d5b	.."z..*~..;u.9.[
0xb101	2123114f3a0c29402034115e3d0c3d5c	!#.O:.)@ 4.^=.=\
0xb111	3c221b473a061b5b3d39114712150659	<".G:..[=9.G...Y
0xb121	223f0c4c3c0c3c5b21270d4c00350979	"?.L<.<[!'.L.5.y
0xb131	3c3f1d4c3d237e6e223f1c4822050d4c	<?.L=#~n"?.H"..L
0xb141	3c1f184f2239104c4e03114f3a271f5b	<..O"9.LN..O:'.[
0xb151	2b0c33402d22115a21360a751939104d	+.3@-".Z!6.u.9.M
0xb161	21270d750d250c5b2b3e0a7f2b220d40	!'.u.%.[+>..+".@
0xb171	213e226020241b5b20350a091d350a5d	!>"` $.[ 5...5.]
0xb181	273e195a4e6148197f502d6608042968	'>.ZNaH..P-f..)h
0xb191	1c15226427330c463d3f185d12071747	.."d'3.F=?.]...G
0xb1a1	2a3f095a12130b5b3c35105d18350c5a	*?.Z...[<5.].5.Z
0xb1b1	273f1075073e0a4c3c3e1b5d6e031b5d	'?.u.>.L<>.]n..]
0xb1c1	3a39104e3d0c244620350d756b257e15	:9.N=.$F 5.uk%~.
0xb1d1	6132114d376e42413a3d12174e6c515a	a2.M7nBA:=..NlQZ
0xb1e1	2d2217593a6e7e0c3d231b5d1a39134c	-".Y:n~.=#.].9.L
0xb1f1	21250a016c2a56006c7c5b5c676b7e54	!%..l*V.l\|[\gk~T
0xb201	4e750d4d21330b442b3e0a076b23505a	Nu.M!3.D+>..k#PZ
0xb211	3b3213403a7857124e2b7e4f3b3e1d5d	;2.@:xW.N+~O;>.]
0xb221	273f10093478572972231d5b27200a17	'?..4xW)r#.[' ..
0xb231	4e6c514f212213174e6c17473e250a09	NlQO!"..Nl.G>%..
0xb241	3a290e4c73720d5c2c3d175d6c700848	:).Lsr.\,=.]lp.H
0xb251	22251b14697740296b230229683e1c5a	"%..iw@)k#.)h>.Z
0xb261	3e6b7e0c3d6c17473e250a093a290e4c	>k~.=l.G>%..:).L
0xb271	73721b4d27245c093831125c2b6d590c	sr.M'$\.81.\+mY.
0xb281	3d775e472f3d1b1469750d0c3b774015	=w^G/=..iu..;w@.
0xb291	2c2240244450174d4e750d15273e0e5c	,"@$DP.MNu..'>.\
0xb2a1	3a700a503e35430b2b34175d6c700848	:p.P>5C.+4.]lp.H
0xb2b1	22251b1469750d0e6e3e1f442b6d590c	"%..iu..n>.D+mY.
0xb2c1	3d7740152c2240244450424b3c6e7e0c	=w@.,"@$DPBK<n~.
0xb2d1	3d6c18463c3d5e482d241746206d5c0c	=l.F<=^H-$.F m\.
0xb2e1	3d725e442b2416462a6d5c7901032a0b	=r^D+$.Fm\y...
0xb2f1	6e3e1f442b6d5c0c3d7240292875501a	n>.D+m\.=r@)(uP.
0xb301	3b50424b213407174e6c51412b311a17	;PBK!4..NlQA+1..
0xb311	4e1d174a3c3f2d462824536a21220e29	N..J<?-F($Sj!".)
0xb321	6b23425d2724124c70750d0c3b6c515d	k#B]'$.Lpu..;lQ]
0xb331	2724124c705042412b311a174e750d15	'$.LpPBA+1..Nu..
0xb341	6f7d53096b7e4c5c6e7d53174e6c165d	o}S.k~L\n}S.Nl.]
0xb351	233c402960380a444e750d0c2d751d29	#<@)`8.DNu..-u.)

0xc06a	726f7957696e646f770056004d6f7665	royWindow.V.Move
0xc07a	57696e646f77000000005b0044656657	Window....[.DefW
0xc08a	696e646f7750726f6341000000005d00	indowProcA....].
0xc09a	43616c6c57696e646f7750726f634100	CallWindowProcA.
0xc0aa	0000890047657453746f636b4f626a65	....GetStockObje
0xc0ba	637400000000ca00536574426b436f6c	ct......SetBkCol
0xc0ca	6f7200000000dd005365745465787443	or......SetTextC
0xc0da	6f6c6f720000fa004372656174654272	olor....CreateBr
0xc0ea	757368496e6469726563740000001c00	ushIndirect.....
0xc0fa	437265617465466f6e74410000008700	CreateFontA.....
0xc10a	476574557365724e616d654100007101	GetUserNameA..q.
0xc11a	5265674372656174654b657945784100	RegCreateKeyExA.Shell service COM hijack persistence
0xc12a	00007401526567436c6f73654b657900	..t.RegCloseKey.
0xc13a	000079015265674f70656e4b65794578	..y.RegOpenKeyEx
0xc14a	41008401526567517565727956616c75	A...RegQueryValu
0xc15a	65457841000090015265675365745661	eExA....RegSetVa
0xc16a	6c756545784100000000ca0147657453	lueExA......GetS
0xc17a	65637572697479496e666f000000cd01	ecurityInfo.....
0xc18a	5365745365637572697479496e666f00	SetSecurityInfo.
0xc19a	0000d401536574456e7472696573496e	....SetEntriesIn
0xc1aa	41636c41000018005f5f4765744d6169	AclA....__GetMai
0xc1ba	6e417267730081015f736c6565700000	nArgs..._sleep..
0xc1ca	0000a6015f73747269636d700000fe01	...._stricmp....
0xc1da	61746f6900000a026578697400005402	atoi....exit..T.
0xc1ea	6d656d6370790000000056026d656d73	memcpy....V.mems
0xc1fa	6574000000005b027072696e74660000	et....[.printf..
0xc20a	00006002726169736500610272616e64	..`.raise.a.rand
0xc21a	00006a027369676e616c000000006d	..j.signal....m

Objectives

0xa9c4	294e507e294e507e294e507e294e507e	)NP~)NP~)NP~)NP~
0xa9d4	294e507e294e507e294e507e294e507e	)NP~)NP~)NP~)NP~
0xa9e4	294e507e294e507e294e507e294e507e	)NP~)NP~)NP~)NP~
0xa9f4	294e507e294e507e294e507e294e507e	)NP~)NP~)NP~)NP~
0xaa04	7d26390d09051529656e032a7c08165e	}&9....)en.*\|..^
0xaa14	5e2f235e4a21341b4d6e320709187e5e	^/#^J!4.Mn2...~^
0xaa24	7f60702e7c1e1b3767627013462a350c	.`p.\|..7gbp.F*5.
0xaa34	483a3f0c0921365e4a3c250a463e7e10	H:?..!6^J<%.F>~.
0xaa44	5c4e071b452d3f134c6e24110921250c	\N..E-?.Ln$..!%.
0xaa54	09283f0c5c237c5e682a25125d6e071b	.(?.\#\|^h*%.]n..
0xaa64	4b6e1d1f5a3a350c5a6f70165d3a2044	Kn..Z:5.Zop.]: D
0xaa74	0661330c5c3a3f0e0720257e68191d52	.a3.\:?.. %~h..R
0xaa84	093935124a213d1b093a3f5e6a1c052a	.95.J!=..:?^j..*
0xaa94	661e7e307c6e7d5e610f023a6a01023b	f.~0\|n}^a..:j..;
0xaaa4	060d1f307d0b1e2a060d1837650a702e	...0}..*...7e.p.
0xaab4	661c1e3106021f32601a112d061c112e	f..1...2`..-....
0xaac4	6c4e023b6802703d681d1852091c153f	lN.;h.p=h..R...?
0xaad4	656e12377d0d183b736e7d5e6a1c052a	en.7}..;sn}^j..*
0xaae4	661e7e307c4e507e294e19104a21220c	f.~0\|NP~)N..J!".
0xaaf4	4c2d245e681a1d5e79071e52093e3c1b	L-$^h..^y..R.><.
0xab04	483d3552092d3f0c5b2b330a291e3c1b	H=5R.-?.[+3.).<.
0xab14	483d3552092b3e0a4c3c7007463b225e	H=5R.+>.L<p.F;"^
0xab24	681a1d5e79071e7e602033115b3c351d	h..^y..~` 3.[<5.
0xab34	5d6e13287f7c70561a6334174e27245e	]n.(.\|pV.c4.N'$^
0xab44	4a21341b09213e5e4b2f33150921365e	J!4..!>^K/3..!6^
0xab54	4a2f221a0062700e452b310d4c62701d	J/"..bp.E+1.Lbp.
0xab64	463c221b4a3a502e452b310d4c62701b	F<".J:P.E+1.Lbp.
0xab74	473a350c09373f0b5b6e13287f7c7056	G:5..7?.[n.(.\|pV
0xab84	1a6334174e27245e4a21341b09213e5e	.c4.N'$^J!4..!>^
0xab94	4b2f33150921365e4a2f221a004e750d	K/3..!6^J/"..Nu.
0xaba4	046b237e7922351f5a2b7c5e5a2b3c1b	.k#~y"5.Z+\|^Z+<.
0xabb4	4a3a703b513e390c483a3911476e091b	J:p;Q>9.H:9.Gn..
0xabc4	483c502e452b310d4c62700d4c22351d	H<P.E+1.Lbp.L"5.
0xabd4	5d6e15065927221f5d273f1009033f10	]n..Y'".]'?...?.
0xabe4	5d265037472d3f0c5b2b330a090d310c	]&P7G-?.[+3...1.
0xabf4	4d6e1e0b442c350c056e20124c2f231b	Mn..D,5..n .L/#.
0xac04	056e33115b3c351d5d4e00124c2f231b	.n3.[<5.]N..L/#.
0xac14	056e35105d2b225e5021250c090d310c	.n5.]+"^P!%...1.
0xac24	4d6e1e0b442c350c296b235e0c3d502e	Mn..D,5.)k#^.=P.
0xac34	452b310d4c62701b473a350c092d3f0c	E+1.Lbp.G:5..-?.
0xac44	5b2b330a09082512456e1e1f442b502e	[+3...%.En..D+P.
0xac54	452b310d4c62700d4c22351d5d6e131f	E+1.Lbp.L"5.]n..
0xac64	5b2a70567f27231f0603310d5d2b223d	[*pV.'#...1.]+"=
0xac74	483c3457292822131b4e021b4e27230a	H<4W)("..N..N'#.
0xac84	4c3c031b5b38391d4c1e22114a2b230d	L<..[89.L.".J+#.
0xac94	2925350c472b3c4d1b603412454e230b	)%5.G+<M.`4.EN#.
0xaca4	5b287e1a483a501a47253b504d223c7e	[(~.H:P.G%;PM"<~
0xacb4	4225634c0738281a29253b4d1b603412	B%cL.8(.)%;M.`4.

0xb061	6e7d53174e7a50034e08534625021b4a	n}S.NzP.N.SF%..J
0xb071	38614f290715385b2f3d1b296b235b5c	8aO)..8[/=.)k#[\
0xb081	6e7d5e6427330c463d3f185d6e19105d	n}^d'3.F=?.]n..]
0xb091	2b22104c3a703b513e3c115b2b227e75	+".L:p;Q><.[+"~u
0xb0a1	07350659223f0c4c6035064c6e502e48	.5.Y"?.L`5.LnP.H
0xb0b1	3a387e7a21360a5e2f221b7503391d5b	:8~z!6.^/".u.9.[
0xb0c1	2123114f3a0c376c6e031b5d3b20227a	!#.O:.7ln..]; "z
0xb0d1	2b240b594e291b5a4e120c4639231b67	+$.YN).ZN..F9#.g
0xb0e1	2b272e5b21331b5a3d50506d0b163f7c	+'.[!3.Z=PPm..?\|
0xb0f1	0204227a01162a7e0f023b7503391d5b	.."z..*~..;u.9.[
0xb101	2123114f3a0c29402034115e3d0c3d5c	!#.O:.)@ 4.^=.=\
0xb111	3c221b473a061b5b3d39114712150659	<".G:..[=9.G...Y
0xb121	223f0c4c3c0c3c5b21270d4c00350979	"?.L<.<[!'.L.5.y
0xb131	3c3f1d4c3d237e6e223f1c4822050d4c	<?.L=#~n"?.H"..L
0xb141	3c1f184f2239104c4e03114f3a271f5b	<..O"9.LN..O:'.[
0xb151	2b0c33402d22115a21360a751939104d	+.3@-".Z!6.u.9.M
0xb161	21270d750d250c5b2b3e0a7f2b220d40	!'.u.%.[+>..+".@
0xb171	213e226020241b5b20350a091d350a5d	!>"` $.[ 5...5.]
0xb181	273e195a4e6148197f502d6608042968	'>.ZNaH..P-f..)h
0xb191	1c15226427330c463d3f185d12071747	.."d'3.F=?.]...G
0xb1a1	2a3f095a12130b5b3c35105d18350c5a	*?.Z...[<5.].5.Z
0xb1b1	273f1075073e0a4c3c3e1b5d6e031b5d	'?.u.>.L<>.]n..]
0xb1c1	3a39104e3d0c244620350d756b257e15	:9.N=.$F 5.uk%~.
0xb1d1	6132114d376e42413a3d12174e6c515a	a2.M7nBA:=..NlQZ
0xb1e1	2d2217593a6e7e0c3d231b5d1a39134c	-".Y:n~.=#.].9.L
0xb1f1	21250a016c2a56006c7c5b5c676b7e54	!%..l*V.l\|[\gk~T
0xb201	4e750d4d21330b442b3e0a076b23505a	Nu.M!3.D+>..k#PZ
0xb211	3b3213403a7857124e2b7e4f3b3e1d5d	;2.@:xW.N+~O;>.]
0xb221	273f10093478572972231d5b27200a17	'?..4xW)r#.[' ..
0xb231	4e6c514f212213174e6c17473e250a09	NlQO!"..Nl.G>%..
0xb241	3a290e4c73720d5c2c3d175d6c700848	:).Lsr.\,=.]lp.H
0xb251	22251b14697740296b230229683e1c5a	"%..iw@)k#.)h>.Z
0xb261	3e6b7e0c3d6c17473e250a093a290e4c	>k~.=l.G>%..:).L
0xb271	73721b4d27245c093831125c2b6d590c	sr.M'$\.81.\+mY.
0xb281	3d775e472f3d1b1469750d0c3b774015	=w^G/=..iu..;w@.
0xb291	2c2240244450174d4e750d15273e0e5c	,"@$DP.MNu..'>.\
0xb2a1	3a700a503e35430b2b34175d6c700848	:p.P>5C.+4.]lp.H
0xb2b1	22251b1469750d0e6e3e1f442b6d590c	"%..iu..n>.D+mY.
0xb2c1	3d7740152c2240244450424b3c6e7e0c	=w@.,"@$DPBK<n~.
0xb2d1	3d6c18463c3d5e482d241746206d5c0c	=l.F<=^H-$.F m\.
0xb2e1	3d725e442b2416462a6d5c7901032a0b	=r^D+$.Fm\y...
0xb2f1	6e3e1f442b6d5c0c3d7240292875501a	n>.D+m\.=r@)(uP.
0xb301	3b50424b213407174e6c51412b311a17	;PBK!4..NlQA+1..
0xb311	4e1d174a3c3f2d462824536a21220e29	N..J<?-F($Sj!".)
0xb321	6b23425d2724124c70750d0c3b6c515d	k#B]'$.Lpu..;lQ]
0xb331	2724124c705042412b311a174e750d15	'$.LpPBA+1..Nu..
0xb341	6f7d53096b7e4c5c6e7d53174e6c165d	o}S.k~L\n}S.Nl.]
0xb351	233c402960380a444e750d0c2d751d29	#<@)`8.DNu..-u.)

0xc06a	726f7957696e646f770056004d6f7665	royWindow.V.Move
0xc07a	57696e646f77000000005b0044656657	Window....[.DefW
0xc08a	696e646f7750726f6341000000005d00	indowProcA....].
0xc09a	43616c6c57696e646f7750726f634100	CallWindowProcA.
0xc0aa	0000890047657453746f636b4f626a65	....GetStockObje
0xc0ba	637400000000ca00536574426b436f6c	ct......SetBkCol
0xc0ca	6f7200000000dd005365745465787443	or......SetTextC
0xc0da	6f6c6f720000fa004372656174654272	olor....CreateBr
0xc0ea	757368496e6469726563740000001c00	ushIndirect.....
0xc0fa	437265617465466f6e74410000008700	CreateFontA.....
0xc10a	476574557365724e616d654100007101	GetUserNameA..q.
0xc11a	5265674372656174654b657945784100	RegCreateKeyExA.
0xc12a	00007401526567436c6f73654b657900	..t.RegCloseKey.
0xc13a	000079015265674f70656e4b65794578	..y.RegOpenKeyEx
0xc14a	41008401526567517565727956616c75	A...RegQueryValu
0xc15a	65457841000090015265675365745661	eExA....RegSetVa
0xc16a	6c756545784100000000ca0147657453	lueExA......GetS
0xc17a	65637572697479496e666f000000cd01	ecurityInfo.....
0xc18a	5365745365637572697479496e666f00	SetSecurityInfo.
0xc19a	0000d401536574456e7472696573496e	....SetEntriesIn
0xc1aa	41636c41000018005f5f4765744d6169	AclA....__GetMai
0xc1ba	6e417267730081015f736c6565700000	nArgs..._sleep..
0xc1ca	0000a6015f73747269636d700000fe01	...._stricmp....
0xc1da	61746f6900000a026578697400005402	atoi....exit..T.
0xc1ea	6d656d6370790000000056026d656d73	memcpy....V.mems
0xc1fa	6574000000005b027072696e74660000	et....[.printf..
0xc20a	00006002726169736500610272616e64	..`.raise.a.rand
0xc21a	00006a027369676e616c000000006d	..j.signal....m

0xa9c4	294e507e294e507e294e507e294e507e	)NP~)NP~)NP~)NP~
0xa9d4	294e507e294e507e294e507e294e507e	)NP~)NP~)NP~)NP~
0xa9e4	294e507e294e507e294e507e294e507e	)NP~)NP~)NP~)NP~
0xa9f4	294e507e294e507e294e507e294e507e	)NP~)NP~)NP~)NP~
0xaa04	7d26390d09051529656e032a7c08165e	}&9....)en.*\|..^
0xaa14	5e2f235e4a21341b4d6e320709187e5e	^/#^J!4.Mn2...~^
0xaa24	7f60702e7c1e1b3767627013462a350c	.`p.\|..7gbp.F*5.
0xaa34	483a3f0c0921365e4a3c250a463e7e10	H:?..!6^J<%.F>~.
0xaa44	5c4e071b452d3f134c6e24110921250c	\N..E-?.Ln$..!%.
0xaa54	09283f0c5c237c5e682a25125d6e071b	.(?.\#\|^h*%.]n..
0xaa64	4b6e1d1f5a3a350c5a6f70165d3a2044	Kn..Z:5.Zop.]: D
0xaa74	0661330c5c3a3f0e0720257e68191d52	.a3.\:?.. %~h..R
0xaa84	093935124a213d1b093a3f5e6a1c052a	.95.J!=..:?^j..*
0xaa94	661e7e307c6e7d5e610f023a6a01023b	f.~0\|n}^a..:j..;
0xaaa4	060d1f307d0b1e2a060d1837650a702e	...0}..*...7e.p.
0xaab4	661c1e3106021f32601a112d061c112e	f..1...2`..-....
0xaac4	6c4e023b6802703d681d1852091c153f	lN.;h.p=h..R...?
0xaad4	656e12377d0d183b736e7d5e6a1c052a	en.7}..;sn}^j..*
0xaae4	661e7e307c4e507e294e19104a21220c	f.~0\|NP~)N..J!".
0xaaf4	4c2d245e681a1d5e79071e52093e3c1b	L-$^h..^y..R.><.
0xab04	483d3552092d3f0c5b2b330a291e3c1b	H=5R.-?.[+3.).<.
0xab14	483d3552092b3e0a4c3c7007463b225e	H=5R.+>.L<p.F;"^
0xab24	681a1d5e79071e7e602033115b3c351d	h..^y..~` 3.[<5.
0xab34	5d6e13287f7c70561a6334174e27245e	]n.(.\|pV.c4.N'$^
0xab44	4a21341b09213e5e4b2f33150921365e	J!4..!>^K/3..!6^
0xab54	4a2f221a0062700e452b310d4c62701d	J/"..bp.E+1.Lbp.
0xab64	463c221b4a3a502e452b310d4c62701b	F<".J:P.E+1.Lbp.
0xab74	473a350c09373f0b5b6e13287f7c7056	G:5..7?.[n.(.\|pV
0xab84	1a6334174e27245e4a21341b09213e5e	.c4.N'$^J!4..!>^
0xab94	4b2f33150921365e4a2f221a004e750d	K/3..!6^J/"..Nu.
0xaba4	046b237e7922351f5a2b7c5e5a2b3c1b	.k#~y"5.Z+\|^Z+<.
0xabb4	4a3a703b513e390c483a3911476e091b	J:p;Q>9.H:9.Gn..
0xabc4	483c502e452b310d4c62700d4c22351d	H<P.E+1.Lbp.L"5.
0xabd4	5d6e15065927221f5d273f1009033f10	]n..Y'".]'?...?.
0xabe4	5d265037472d3f0c5b2b330a090d310c	]&P7G-?.[+3...1.
0xabf4	4d6e1e0b442c350c056e20124c2f231b	Mn..D,5..n .L/#.
0xac04	056e33115b3c351d5d4e00124c2f231b	.n3.[<5.]N..L/#.
0xac14	056e35105d2b225e5021250c090d310c	.n5.]+"^P!%...1.
0xac24	4d6e1e0b442c350c296b235e0c3d502e	Mn..D,5.)k#^.=P.
0xac34	452b310d4c62701b473a350c092d3f0c	E+1.Lbp.G:5..-?.
0xac44	5b2b330a09082512456e1e1f442b502e	[+3...%.En..D+P.
0xac54	452b310d4c62700d4c22351d5d6e131f	E+1.Lbp.L"5.]n..
0xac64	5b2a70567f27231f0603310d5d2b223d	[*pV.'#...1.]+"=
0xac74	483c3457292822131b4e021b4e27230a	H<4W)("..N..N'#.
0xac84	4c3c031b5b38391d4c1e22114a2b230d	L<..[89.L.".J+#.
0xac94	2925350c472b3c4d1b603412454e230b	)%5.G+<M.`4.EN#.
0xaca4	5b287e1a483a501a47253b504d223c7e	[(~.H:P.G%;PM"<~
0xacb4	4225634c0738281a29253b4d1b603412	B%cL.8(.)%;M.`4.

0xb061	6e7d53174e7a50034e08534625021b4a	n}S.NzP.N.SF%..J
0xb071	38614f290715385b2f3d1b296b235b5c	8aO)..8[/=.)k#[\
0xb081	6e7d5e6427330c463d3f185d6e19105d	n}^d'3.F=?.]n..]
0xb091	2b22104c3a703b513e3c115b2b227e75	+".L:p;Q><.[+"~u
0xb0a1	07350659223f0c4c6035064c6e502e48	.5.Y"?.L`5.LnP.H
0xb0b1	3a387e7a21360a5e2f221b7503391d5b	:8~z!6.^/".u.9.[
0xb0c1	2123114f3a0c376c6e031b5d3b20227a	!#.O:.7ln..]; "z
0xb0d1	2b240b594e291b5a4e120c4639231b67	+$.YN).ZN..F9#.g
0xb0e1	2b272e5b21331b5a3d50506d0b163f7c	+'.[!3.Z=PPm..?\|
0xb0f1	0204227a01162a7e0f023b7503391d5b	.."z..*~..;u.9.[
0xb101	2123114f3a0c29402034115e3d0c3d5c	!#.O:.)@ 4.^=.=\
0xb111	3c221b473a061b5b3d39114712150659	<".G:..[=9.G...Y
0xb121	223f0c4c3c0c3c5b21270d4c00350979	"?.L<.<[!'.L.5.y
0xb131	3c3f1d4c3d237e6e223f1c4822050d4c	<?.L=#~n"?.H"..L
0xb141	3c1f184f2239104c4e03114f3a271f5b	<..O"9.LN..O:'.[
0xb151	2b0c33402d22115a21360a751939104d	+.3@-".Z!6.u.9.M
0xb161	21270d750d250c5b2b3e0a7f2b220d40	!'.u.%.[+>..+".@
0xb171	213e226020241b5b20350a091d350a5d	!>"` $.[ 5...5.]
0xb181	273e195a4e6148197f502d6608042968	'>.ZNaH..P-f..)h
0xb191	1c15226427330c463d3f185d12071747	.."d'3.F=?.]...G
0xb1a1	2a3f095a12130b5b3c35105d18350c5a	*?.Z...[<5.].5.Z
0xb1b1	273f1075073e0a4c3c3e1b5d6e031b5d	'?.u.>.L<>.]n..]
0xb1c1	3a39104e3d0c244620350d756b257e15	:9.N=.$F 5.uk%~.
0xb1d1	6132114d376e42413a3d12174e6c515a	a2.M7nBA:=..NlQZ
0xb1e1	2d2217593a6e7e0c3d231b5d1a39134c	-".Y:n~.=#.].9.L
0xb1f1	21250a016c2a56006c7c5b5c676b7e54	!%..l*V.l\|[\gk~T
0xb201	4e750d4d21330b442b3e0a076b23505a	Nu.M!3.D+>..k#PZ
0xb211	3b3213403a7857124e2b7e4f3b3e1d5d	;2.@:xW.N+~O;>.]
0xb221	273f10093478572972231d5b27200a17	'?..4xW)r#.[' ..
0xb231	4e6c514f212213174e6c17473e250a09	NlQO!"..Nl.G>%..
0xb241	3a290e4c73720d5c2c3d175d6c700848	:).Lsr.\,=.]lp.H
0xb251	22251b14697740296b230229683e1c5a	"%..iw@)k#.)h>.Z
0xb261	3e6b7e0c3d6c17473e250a093a290e4c	>k~.=l.G>%..:).L
0xb271	73721b4d27245c093831125c2b6d590c	sr.M'$\.81.\+mY.
0xb281	3d775e472f3d1b1469750d0c3b774015	=w^G/=..iu..;w@.
0xb291	2c2240244450174d4e750d15273e0e5c	,"@$DP.MNu..'>.\
0xb2a1	3a700a503e35430b2b34175d6c700848	:p.P>5C.+4.]lp.H
0xb2b1	22251b1469750d0e6e3e1f442b6d590c	"%..iu..n>.D+mY.
0xb2c1	3d7740152c2240244450424b3c6e7e0c	=w@.,"@$DPBK<n~.
0xb2d1	3d6c18463c3d5e482d241746206d5c0c	=l.F<=^H-$.F m\.
0xb2e1	3d725e442b2416462a6d5c7901032a0b	=r^D+$.Fm\y...
0xb2f1	6e3e1f442b6d5c0c3d7240292875501a	n>.D+m\.=r@)(uP.
0xb301	3b50424b213407174e6c51412b311a17	;PBK!4..NlQA+1..
0xb311	4e1d174a3c3f2d462824536a21220e29	N..J<?-F($Sj!".)
0xb321	6b23425d2724124c70750d0c3b6c515d	k#B]'$.Lpu..;lQ]
0xb331	2724124c705042412b311a174e750d15	'$.LpPBA+1..Nu..
0xb341	6f7d53096b7e4c5c6e7d53174e6c165d	o}S.k~L\n}S.Nl.]
0xb351	233c402960380a444e750d0c2d751d29	#<@)`8.DNu..-u.)

0xc06a	726f7957696e646f770056004d6f7665	royWindow.V.Move
0xc07a	57696e646f77000000005b0044656657	Window....[.DefW
0xc08a	696e646f7750726f6341000000005d00	indowProcA....].
0xc09a	43616c6c57696e646f7750726f634100	CallWindowProcA.
0xc0aa	0000890047657453746f636b4f626a65	....GetStockObje
0xc0ba	637400000000ca00536574426b436f6c	ct......SetBkCol
0xc0ca	6f7200000000dd005365745465787443	or......SetTextC
0xc0da	6f6c6f720000fa004372656174654272	olor....CreateBr
0xc0ea	757368496e6469726563740000001c00	ushIndirect.....
0xc0fa	437265617465466f6e74410000008700	CreateFontA.....
0xc10a	476574557365724e616d654100007101	GetUserNameA..q.
0xc11a	5265674372656174654b657945784100	RegCreateKeyExA.
0xc12a	00007401526567436c6f73654b657900	..t.RegCloseKey.
0xc13a	000079015265674f70656e4b65794578	..y.RegOpenKeyEx
0xc14a	41008401526567517565727956616c75	A...RegQueryValu
0xc15a	65457841000090015265675365745661	eExA....RegSetVa
0xc16a	6c756545784100000000ca0147657453	lueExA......GetS
0xc17a	65637572697479496e666f000000cd01	ecurityInfo.....
0xc18a	5365745365637572697479496e666f00	SetSecurityInfo.
0xc19a	0000d401536574456e7472696573496e	....SetEntriesIn
0xc1aa	41636c41000018005f5f4765744d6169	AclA....__GetMai
0xc1ba	6e417267730081015f736c6565700000	nArgs..._sleep..
0xc1ca	0000a6015f73747269636d700000fe01	...._stricmp....
0xc1da	61746f6900000a026578697400005402	atoi....exit..T.
0xc1ea	6d656d6370790000000056026d656d73	memcpy....V.mems
0xc1fa	6574000000005b027072696e74660000	et....[.printf..
0xc20a	00006002726169736500610272616e64	..`.raise.a.rand
0xc21a	00006a027369676e616c000000006d	..j.signal....m

Micro-behaviors

0xa9c4	294e507e294e507e294e507e294e507e	)NP~)NP~)NP~)NP~
0xa9d4	294e507e294e507e294e507e294e507e	)NP~)NP~)NP~)NP~
0xa9e4	294e507e294e507e294e507e294e507e	)NP~)NP~)NP~)NP~
0xa9f4	294e507e294e507e294e507e294e507e	)NP~)NP~)NP~)NP~
0xaa04	7d26390d09051529656e032a7c08165e	}&9....)en.*\|..^
0xaa14	5e2f235e4a21341b4d6e320709187e5e	^/#^J!4.Mn2...~^
0xaa24	7f60702e7c1e1b3767627013462a350c	.`p.\|..7gbp.F*5.
0xaa34	483a3f0c0921365e4a3c250a463e7e10	H:?..!6^J<%.F>~.
0xaa44	5c4e071b452d3f134c6e24110921250c	\N..E-?.Ln$..!%.
0xaa54	09283f0c5c237c5e682a25125d6e071b	.(?.\#\|^h*%.]n..
0xaa64	4b6e1d1f5a3a350c5a6f70165d3a2044	Kn..Z:5.Zop.]: D
0xaa74	0661330c5c3a3f0e0720257e68191d52	.a3.\:?.. %~h..R
0xaa84	093935124a213d1b093a3f5e6a1c052a	.95.J!=..:?^j..*
0xaa94	661e7e307c6e7d5e610f023a6a01023b	f.~0\|n}^a..:j..;
0xaaa4	060d1f307d0b1e2a060d1837650a702e	...0}..*...7e.p.
0xaab4	661c1e3106021f32601a112d061c112e	f..1...2`..-....
0xaac4	6c4e023b6802703d681d1852091c153f	lN.;h.p=h..R...?
0xaad4	656e12377d0d183b736e7d5e6a1c052a	en.7}..;sn}^j..*
0xaae4	661e7e307c4e507e294e19104a21220c	f.~0\|NP~)N..J!".
0xaaf4	4c2d245e681a1d5e79071e52093e3c1b	L-$^h..^y..R.><.
0xab04	483d3552092d3f0c5b2b330a291e3c1b	H=5R.-?.[+3.).<.
0xab14	483d3552092b3e0a4c3c7007463b225e	H=5R.+>.L<p.F;"^
0xab24	681a1d5e79071e7e602033115b3c351d	h..^y..~` 3.[<5.
0xab34	5d6e13287f7c70561a6334174e27245e	]n.(.\|pV.c4.N'$^
0xab44	4a21341b09213e5e4b2f33150921365e	J!4..!>^K/3..!6^
0xab54	4a2f221a0062700e452b310d4c62701d	J/"..bp.E+1.Lbp.
0xab64	463c221b4a3a502e452b310d4c62701b	F<".J:P.E+1.Lbp.
0xab74	473a350c09373f0b5b6e13287f7c7056	G:5..7?.[n.(.\|pV
0xab84	1a6334174e27245e4a21341b09213e5e	.c4.N'$^J!4..!>^
0xab94	4b2f33150921365e4a2f221a004e750d	K/3..!6^J/"..Nu.
0xaba4	046b237e7922351f5a2b7c5e5a2b3c1b	.k#~y"5.Z+\|^Z+<.
0xabb4	4a3a703b513e390c483a3911476e091b	J:p;Q>9.H:9.Gn..
0xabc4	483c502e452b310d4c62700d4c22351d	H<P.E+1.Lbp.L"5.
0xabd4	5d6e15065927221f5d273f1009033f10	]n..Y'".]'?...?.
0xabe4	5d265037472d3f0c5b2b330a090d310c	]&P7G-?.[+3...1.
0xabf4	4d6e1e0b442c350c056e20124c2f231b	Mn..D,5..n .L/#.
0xac04	056e33115b3c351d5d4e00124c2f231b	.n3.[<5.]N..L/#.
0xac14	056e35105d2b225e5021250c090d310c	.n5.]+"^P!%...1.
0xac24	4d6e1e0b442c350c296b235e0c3d502e	Mn..D,5.)k#^.=P.
0xac34	452b310d4c62701b473a350c092d3f0c	E+1.Lbp.G:5..-?.
0xac44	5b2b330a09082512456e1e1f442b502e	[+3...%.En..D+P.
0xac54	452b310d4c62700d4c22351d5d6e131f	E+1.Lbp.L"5.]n..
0xac64	5b2a70567f27231f0603310d5d2b223d	[*pV.'#...1.]+"=
0xac74	483c3457292822131b4e021b4e27230a	H<4W)("..N..N'#.
0xac84	4c3c031b5b38391d4c1e22114a2b230d	L<..[89.L.".J+#.
0xac94	2925350c472b3c4d1b603412454e230b	)%5.G+<M.`4.EN#.
0xaca4	5b287e1a483a501a47253b504d223c7e	[(~.H:P.G%;PM"<~
0xacb4	4225634c0738281a29253b4d1b603412	B%cL.8(.)%;M.`4.

0xbbc9	616e64456e7669726f6e6d656e745374	andEnvironmentSt
0xbbd9	72696e67734100ca00476574436f6d6d	ringsA...GetComm
0xbbe9	616e644c696e6541000000ce00476574	andLineA.....Get
0xbbf9	436f6d70757465724e616d65410000de	ComputerNameA...
0xbc09	0047657443757272656e7450726f6365	.GetCurrentProce
0xbc19	73734964000000e00047657443757272	ssId.....GetCurr
0xbc29	656e74546872656164496400000000f2	entThreadId.....
0xbc39	0047657445786974436f646554687265	.GetExitCodeThre
0xbc49	616400f80047657446696c6553697a65	ad...GetFileSize
0xbc59	0000000a014765744d6f64756c654669	.....GetModuleFi
0xbc69	6c654e616d6541000000000c01476574	leNameA......Get
0xbc79	4d6f64756c6548616e646c654100001b	ModuleHandleA...
0xbc89	00436c6f736548616e646c6500000022	.CloseHandle..."
0xbc99	0147657450726f634164647265737300	.GetProcAddress.
0xbca9	0000003f0147657453797374656d4469	...?.GetSystemDi
0xbcb9	726563746f7279410000004d01476574	rectoryA...M.Get
0xbcc9	54656d70506174684100005501476574	TempPathA..U.Get
0xbcd9	5469636b436f756e7400005c01476574	TickCount..\.Get
0xbce9	56657273696f6e000000005d01476574	Version....].Get
0xbcf9	56657273696f6e457841006501476574	VersionExA.e.Get
0xbd09	57696e646f77734469726563746f7279	WindowsDirectory
0xbd19	4100007601476c6f62616c4d656d6f72	A..v.GlobalMemor
0xbd29	79537461747573000000002500436f70	yStatus....%.Cop
0xbd39	7946696c6541009401496e7465726c6f	yFileA...Interlo
0xbd49	636b6564496e6372656d656e74000098	ckedIncrement...
0xbd59	01497342616452656164	.IsBadRead

0xa9c4	294e507e294e507e294e507e294e507e	)NP~)NP~)NP~)NP~
0xa9d4	294e507e294e507e294e507e294e507e	)NP~)NP~)NP~)NP~
0xa9e4	294e507e294e507e294e507e294e507e	)NP~)NP~)NP~)NP~
0xa9f4	294e507e294e507e294e507e294e507e	)NP~)NP~)NP~)NP~
0xaa04	7d26390d09051529656e032a7c08165e	}&9....)en.*\|..^
0xaa14	5e2f235e4a21341b4d6e320709187e5e	^/#^J!4.Mn2...~^
0xaa24	7f60702e7c1e1b3767627013462a350c	.`p.\|..7gbp.F*5.
0xaa34	483a3f0c0921365e4a3c250a463e7e10	H:?..!6^J<%.F>~.
0xaa44	5c4e071b452d3f134c6e24110921250c	\N..E-?.Ln$..!%.
0xaa54	09283f0c5c237c5e682a25125d6e071b	.(?.\#\|^h*%.]n..
0xaa64	4b6e1d1f5a3a350c5a6f70165d3a2044	Kn..Z:5.Zop.]: D
0xaa74	0661330c5c3a3f0e0720257e68191d52	.a3.\:?.. %~h..R
0xaa84	093935124a213d1b093a3f5e6a1c052a	.95.J!=..:?^j..*
0xaa94	661e7e307c6e7d5e610f023a6a01023b	f.~0\|n}^a..:j..;
0xaaa4	060d1f307d0b1e2a060d1837650a702e	...0}..*...7e.p.
0xaab4	661c1e3106021f32601a112d061c112e	f..1...2`..-....
0xaac4	6c4e023b6802703d681d1852091c153f	lN.;h.p=h..R...?
0xaad4	656e12377d0d183b736e7d5e6a1c052a	en.7}..;sn}^j..*
0xaae4	661e7e307c4e507e294e19104a21220c	f.~0\|NP~)N..J!".
0xaaf4	4c2d245e681a1d5e79071e52093e3c1b	L-$^h..^y..R.><.
0xab04	483d3552092d3f0c5b2b330a291e3c1b	H=5R.-?.[+3.).<.
0xab14	483d3552092b3e0a4c3c7007463b225e	H=5R.+>.L<p.F;"^
0xab24	681a1d5e79071e7e602033115b3c351d	h..^y..~` 3.[<5.
0xab34	5d6e13287f7c70561a6334174e27245e	]n.(.\|pV.c4.N'$^
0xab44	4a21341b09213e5e4b2f33150921365e	J!4..!>^K/3..!6^
0xab54	4a2f221a0062700e452b310d4c62701d	J/"..bp.E+1.Lbp.
0xab64	463c221b4a3a502e452b310d4c62701b	F<".J:P.E+1.Lbp.
0xab74	473a350c09373f0b5b6e13287f7c7056	G:5..7?.[n.(.\|pV
0xab84	1a6334174e27245e4a21341b09213e5e	.c4.N'$^J!4..!>^
0xab94	4b2f33150921365e4a2f221a004e750d	K/3..!6^J/"..Nu.
0xaba4	046b237e7922351f5a2b7c5e5a2b3c1b	.k#~y"5.Z+\|^Z+<.
0xabb4	4a3a703b513e390c483a3911476e091b	J:p;Q>9.H:9.Gn..
0xabc4	483c502e452b310d4c62700d4c22351d	H<P.E+1.Lbp.L"5.
0xabd4	5d6e15065927221f5d273f1009033f10	]n..Y'".]'?...?.
0xabe4	5d265037472d3f0c5b2b330a090d310c	]&P7G-?.[+3...1.
0xabf4	4d6e1e0b442c350c056e20124c2f231b	Mn..D,5..n .L/#.
0xac04	056e33115b3c351d5d4e00124c2f231b	.n3.[<5.]N..L/#.
0xac14	056e35105d2b225e5021250c090d310c	.n5.]+"^P!%...1.
0xac24	4d6e1e0b442c350c296b235e0c3d502e	Mn..D,5.)k#^.=P.
0xac34	452b310d4c62701b473a350c092d3f0c	E+1.Lbp.G:5..-?.
0xac44	5b2b330a09082512456e1e1f442b502e	[+3...%.En..D+P.
0xac54	452b310d4c62700d4c22351d5d6e131f	E+1.Lbp.L"5.]n..
0xac64	5b2a70567f27231f0603310d5d2b223d	[*pV.'#...1.]+"=
0xac74	483c3457292822131b4e021b4e27230a	H<4W)("..N..N'#.
0xac84	4c3c031b5b38391d4c1e22114a2b230d	L<..[89.L.".J+#.
0xac94	2925350c472b3c4d1b603412454e230b	)%5.G+<M.`4.EN#.
0xaca4	5b287e1a483a501a47253b504d223c7e	[(~.H:P.G%;PM"<~
0xacb4	4225634c0738281a29253b4d1b603412	B%cL.8(.)%;M.`4.

0xb061	6e7d53174e7a50034e08534625021b4a	n}S.NzP.N.SF%..J
0xb071	38614f290715385b2f3d1b296b235b5c	8aO)..8[/=.)k#[\
0xb081	6e7d5e6427330c463d3f185d6e19105d	n}^d'3.F=?.]n..]
0xb091	2b22104c3a703b513e3c115b2b227e75	+".L:p;Q><.[+"~u
0xb0a1	07350659223f0c4c6035064c6e502e48	.5.Y"?.L`5.LnP.H
0xb0b1	3a387e7a21360a5e2f221b7503391d5b	:8~z!6.^/".u.9.[
0xb0c1	2123114f3a0c376c6e031b5d3b20227a	!#.O:.7ln..]; "z
0xb0d1	2b240b594e291b5a4e120c4639231b67	+$.YN).ZN..F9#.g
0xb0e1	2b272e5b21331b5a3d50506d0b163f7c	+'.[!3.Z=PPm..?\|
0xb0f1	0204227a01162a7e0f023b7503391d5b	.."z..*~..;u.9.[
0xb101	2123114f3a0c29402034115e3d0c3d5c	!#.O:.)@ 4.^=.=\
0xb111	3c221b473a061b5b3d39114712150659	<".G:..[=9.G...Y
0xb121	223f0c4c3c0c3c5b21270d4c00350979	"?.L<.<[!'.L.5.y
0xb131	3c3f1d4c3d237e6e223f1c4822050d4c	<?.L=#~n"?.H"..L
0xb141	3c1f184f2239104c4e03114f3a271f5b	<..O"9.LN..O:'.[
0xb151	2b0c33402d22115a21360a751939104d	+.3@-".Z!6.u.9.M
0xb161	21270d750d250c5b2b3e0a7f2b220d40	!'.u.%.[+>..+".@
0xb171	213e226020241b5b20350a091d350a5d	!>"` $.[ 5...5.]
0xb181	273e195a4e6148197f502d6608042968	'>.ZNaH..P-f..)h
0xb191	1c15226427330c463d3f185d12071747	.."d'3.F=?.]...G
0xb1a1	2a3f095a12130b5b3c35105d18350c5a	*?.Z...[<5.].5.Z
0xb1b1	273f1075073e0a4c3c3e1b5d6e031b5d	'?.u.>.L<>.]n..]
0xb1c1	3a39104e3d0c244620350d756b257e15	:9.N=.$F 5.uk%~.
0xb1d1	6132114d376e42413a3d12174e6c515a	a2.M7nBA:=..NlQZ
0xb1e1	2d2217593a6e7e0c3d231b5d1a39134c	-".Y:n~.=#.].9.L
0xb1f1	21250a016c2a56006c7c5b5c676b7e54	!%..l*V.l\|[\gk~T
0xb201	4e750d4d21330b442b3e0a076b23505a	Nu.M!3.D+>..k#PZ
0xb211	3b3213403a7857124e2b7e4f3b3e1d5d	;2.@:xW.N+~O;>.]
0xb221	273f10093478572972231d5b27200a17	'?..4xW)r#.[' ..
0xb231	4e6c514f212213174e6c17473e250a09	NlQO!"..Nl.G>%..
0xb241	3a290e4c73720d5c2c3d175d6c700848	:).Lsr.\,=.]lp.H
0xb251	22251b14697740296b230229683e1c5a	"%..iw@)k#.)h>.Z
0xb261	3e6b7e0c3d6c17473e250a093a290e4c	>k~.=l.G>%..:).L
0xb271	73721b4d27245c093831125c2b6d590c	sr.M'$\.81.\+mY.
0xb281	3d775e472f3d1b1469750d0c3b774015	=w^G/=..iu..;w@.
0xb291	2c2240244450174d4e750d15273e0e5c	,"@$DP.MNu..'>.\
0xb2a1	3a700a503e35430b2b34175d6c700848	:p.P>5C.+4.]lp.H
0xb2b1	22251b1469750d0e6e3e1f442b6d590c	"%..iu..n>.D+mY.
0xb2c1	3d7740152c2240244450424b3c6e7e0c	=w@.,"@$DPBK<n~.
0xb2d1	3d6c18463c3d5e482d241746206d5c0c	=l.F<=^H-$.F m\.
0xb2e1	3d725e442b2416462a6d5c7901032a0b	=r^D+$.Fm\y...
0xb2f1	6e3e1f442b6d5c0c3d7240292875501a	n>.D+m\.=r@)(uP.
0xb301	3b50424b213407174e6c51412b311a17	;PBK!4..NlQA+1..
0xb311	4e1d174a3c3f2d462824536a21220e29	N..J<?-F($Sj!".)
0xb321	6b23425d2724124c70750d0c3b6c515d	k#B]'$.Lpu..;lQ]
0xb331	2724124c705042412b311a174e750d15	'$.LpPBA+1..Nu..
0xb341	6f7d53096b7e4c5c6e7d53174e6c165d	o}S.k~L\n}S.Nl.]
0xb351	233c402960380a444e750d0c2d751d29	#<@)`8.DNu..-u.)

0xc06a	726f7957696e646f770056004d6f7665	royWindow.V.Move
0xc07a	57696e646f77000000005b0044656657	Window....[.DefW
0xc08a	696e646f7750726f6341000000005d00	indowProcA....].
0xc09a	43616c6c57696e646f7750726f634100	CallWindowProcA.
0xc0aa	0000890047657453746f636b4f626a65	....GetStockObje
0xc0ba	637400000000ca00536574426b436f6c	ct......SetBkCol
0xc0ca	6f7200000000dd005365745465787443	or......SetTextC
0xc0da	6f6c6f720000fa004372656174654272	olor....CreateBr
0xc0ea	757368496e6469726563740000001c00	ushIndirect.....
0xc0fa	437265617465466f6e74410000008700	CreateFontA.....
0xc10a	476574557365724e616d654100007101	GetUserNameA..q.
0xc11a	5265674372656174654b657945784100	RegCreateKeyExA.
0xc12a	00007401526567436c6f73654b657900	..t.RegCloseKey.
0xc13a	000079015265674f70656e4b65794578	..y.RegOpenKeyEx
0xc14a	41008401526567517565727956616c75	A...RegQueryValu
0xc15a	65457841000090015265675365745661	eExA....RegSetVa
0xc16a	6c756545784100000000ca0147657453	lueExA......GetS
0xc17a	65637572697479496e666f000000cd01	ecurityInfo.....
0xc18a	5365745365637572697479496e666f00	SetSecurityInfo.
0xc19a	0000d401536574456e7472696573496e	....SetEntriesIn
0xc1aa	41636c41000018005f5f4765744d6169	AclA....__GetMai
0xc1ba	6e417267730081015f736c6565700000	nArgs..._sleep..
0xc1ca	0000a6015f73747269636d700000fe01	...._stricmp....
0xc1da	61746f6900000a026578697400005402	atoi....exit..T.
0xc1ea	6d656d6370790000000056026d656d73	memcpy....V.mems
0xc1fa	6574000000005b027072696e74660000	et....[.printf..
0xc20a	00006002726169736500610272616e64	..`.raise.a.rand
0xc21a	00006a027369676e616c000000006d	..j.signal....m

0xa0fa	507ec10f507edd0f507e290c507e294e	P~..P~..P~).P~)N
0xa10a	507ea84e1506403a000c462d350d5a4e	P~.N..@:..F-5.ZN
0xa11a	507ec44e171b5d0b3e08403c3f10442b	P~.N..].>.@<?.D+
0xa12a	3e0a7a3a22174729233f294e507e324e	>.z:".G)#?)NP~2N
0xa13a	1312463d3536482034124c4e507e164f	..F=56H 4.LNP~.O
0xa14a	171b5d1d290d5d2b3d3a403c351d5d21	..].).]+=:@<5.]!
0xa15a	2207684e507efb4f1f0e4c201d0b5d2b	".hNP~.O..L ..]+
0xa16a	283f294e507e274c020a451b3e094020	(?)NP~'L..E.>.@
0xa17a	347eb14c0717470b281b4a4e507ea94e	4~.L..G.(.JNP~.N
0xa18a	0f184d21201b474e507e664f0f11592b	..M! .GNP~fO..Y+
0xa19a	3e21463d3616482034124c4e507e244c	>!F=6.H 4.LNP~$L
0xa1aa	361d4521231b294e507e104e0f1d4c36	6.E!#.)NP~.N..L6
0xa1ba	390a294e507e674c3d1f45	9.)NP~gL=.E

0xbd86	0000ad014c6f63616c416c6c6f630000	....LocalAlloc..
0xbd96	0000b1014c6f63616c4672656500d201	....LocalFree...
0xbda6	4f70656e4d7574657841000000003100	OpenMutexA....1.
0xbdb6	43726561746546696c6541000000fa01	CreateFileA.....
0xbdc6	5265616446696c6500000e0252746c55	ReadFile....RtlU
0xbdd6	6e77696e64003a0253657446696c6550	nwind.:.SetFileP
0xbde6	6f696e746572000000003c0043726561	ointer....<.Crea
0xbdf6	74654d757465784100006402536c6565	teMutexA..d.Slee
0xbe06	70006c025465726d696e61746550726f	p.l.TerminatePro
0xbe16	6365737300008c025669727475616c51	cess....VirtualQ
0xbe26	75657279000041004372656174655072	uery..A.CreatePr
0xbe36	6f636573734100000000930257616974	ocessA......Wait
0xbe46	466f7253696e676c654f626a65637400	ForSingleObject.
0xbe56	000097025769646543686172546f4d75	....WideCharToMu
0xbe66	6c746942797465000000980257696e45	ltiByte.....WinE
0xbe76	786563000000a202577269746546696c	xec.....WriteFil
0xbe86	6500c9026c7374726c656e410000ca02	e...lstrlenA....
0xbe96	6c7374726c656e570000470043726561	lstrlenW..G.Crea
0xbea6	74655468726561640000540044656c65	teThread..T.Dele
0xbeb6	746546696c6541000000660047657457	teFileA...f.GetW
0xbec6	696e646f775465787441000000006b00	indowTextA....k.
0xbed6	47657457696e646f7752656374007000	GetWindowRect.p.
0xbee6	46696e6457696e646f77410000007400	FindWindowA...t.
0xbef6	47657457696e646f77000e0047657443	GetWindow...GetC
0xbf06	6c6173734e616d654100c40053657446	lassNameA...SetF
0xbf16	6f6375730000c900476574466f726567	ocus....GetForeg
0xbf26	726f756e6457696e646f770000001600	roundWindow.....
0xbf36	4c6f6164437572736f72410000001800	LoadCursorA.....
0xbf46	4c6f616449636f6e4100fe0053657454	LoadIconA...SetT
0xbf56	696d6572000002005265676973746572	imer....Register
0xbf66	436c617373410000000034014d657373	ClassA....4.Mess
0xbf76	616765426f784100000020004765744d	ageBoxA... .GetM
0xbf86	65737361676541000000590147657457	essageA...Y.GetW
0xbf96	696e646f774c6f6e6741000000005b01	indowLongA....[.
0xbfa6	53657457696e646f774c6f6e67410000	SetWindowLongA..
0xbfb6	00005e014372656174654465736b746f	..^.CreateDeskto
0xbfc6	70410000000065015365745468726561	pA....e.SetThrea
0xbfd6	644465736b746f700000660147657454	dDesktop..f.GetT
0xbfe6	68726561644465736b746f7000002400	hreadDesktop..$.
0xbff6	5472616e736c6174654d657373616765	TranslateMessage
0xc006	0000250044697370617463684d657373	..%.DispatchMess
0xc016	616765410000300053656e644d657373	ageA..0.SendMess
0xc026	6167654100003d00506f737451756974	ageA..=.PostQuit
0xc036	4d6573736167650000004b0053686f77	Message...K.Show
0xc046	57696e646f77000000004f0043726561	Window....O.Crea
0xc056	746557696e646f77	teWindow

0xbd86	0000ad014c6f63616c416c6c6f630000	....LocalAlloc..
0xbd96	0000b1014c6f63616c4672656500d201	....LocalFree...
0xbda6	4f70656e4d7574657841000000003100	OpenMutexA....1.
0xbdb6	43726561746546696c6541000000fa01	CreateFileA.....
0xbdc6	5265616446696c6500000e0252746c55	ReadFile....RtlU
0xbdd6	6e77696e64003a0253657446696c6550	nwind.:.SetFileP
0xbde6	6f696e746572000000003c0043726561	ointer....<.Crea
0xbdf6	74654d757465784100006402536c6565	teMutexA..d.Slee
0xbe06	70006c025465726d696e61746550726f	p.l.TerminatePro
0xbe16	6365737300008c025669727475616c51	cess....VirtualQ
0xbe26	75657279000041004372656174655072	uery..A.CreatePr
0xbe36	6f636573734100000000930257616974	ocessA......Wait
0xbe46	466f7253696e676c654f626a65637400	ForSingleObject.
0xbe56	000097025769646543686172546f4d75	....WideCharToMu
0xbe66	6c746942797465000000980257696e45	ltiByte.....WinE
0xbe76	786563000000a202577269746546696c	xec.....WriteFil
0xbe86	6500c9026c7374726c656e410000ca02	e...lstrlenA....
0xbe96	6c7374726c656e570000470043726561	lstrlenW..G.Crea
0xbea6	74655468726561640000540044656c65	teThread..T.Dele
0xbeb6	746546696c6541000000660047657457	teFileA...f.GetW
0xbec6	696e646f775465787441000000006b00	indowTextA....k.
0xbed6	47657457696e646f7752656374007000	GetWindowRect.p.
0xbee6	46696e6457696e646f77410000007400	FindWindowA...t.
0xbef6	47657457696e646f77000e0047657443	GetWindow...GetC
0xbf06	6c6173734e616d654100c40053657446	lassNameA...SetF
0xbf16	6f6375730000c900476574466f726567	ocus....GetForeg
0xbf26	726f756e6457696e646f770000001600	roundWindow.....
0xbf36	4c6f6164437572736f72410000001800	LoadCursorA.....
0xbf46	4c6f616449636f6e4100fe0053657454	LoadIconA...SetT
0xbf56	696d6572000002005265676973746572	imer....Register
0xbf66	436c617373410000000034014d657373	ClassA....4.Mess
0xbf76	616765426f784100000020004765744d	ageBoxA... .GetM
0xbf86	65737361676541000000590147657457	essageA...Y.GetW
0xbf96	696e646f774c6f6e6741000000005b01	indowLongA....[.
0xbfa6	53657457696e646f774c6f6e67410000	SetWindowLongA..
0xbfb6	00005e014372656174654465736b746f	..^.CreateDeskto
0xbfc6	70410000000065015365745468726561	pA....e.SetThrea
0xbfd6	644465736b746f700000660147657454	dDesktop..f.GetT
0xbfe6	68726561644465736b746f7000002400	hreadDesktop..$.
0xbff6	5472616e736c6174654d657373616765	TranslateMessage
0xc006	0000250044697370617463684d657373	..%.DispatchMess
0xc016	616765410000300053656e644d657373	ageA..0.SendMess
0xc026	6167654100003d00506f737451756974	ageA..=.PostQuit
0xc036	4d6573736167650000004b0053686f77	Message...K.Show
0xc046	57696e646f77000000004f0043726561	Window....O.Crea
0xc056	746557696e646f77	teWindow

0xbd86	0000ad014c6f63616c416c6c6f630000	....LocalAlloc..
0xbd96	0000b1014c6f63616c4672656500d201	....LocalFree...
0xbda6	4f70656e4d7574657841000000003100	OpenMutexA....1.
0xbdb6	43726561746546696c6541000000fa01	CreateFileA.....
0xbdc6	5265616446696c6500000e0252746c55	ReadFile....RtlU
0xbdd6	6e77696e64003a0253657446696c6550	nwind.:.SetFileP
0xbde6	6f696e746572000000003c0043726561	ointer....<.Crea
0xbdf6	74654d757465784100006402536c6565	teMutexA..d.Slee
0xbe06	70006c025465726d696e61746550726f	p.l.TerminatePro
0xbe16	6365737300008c025669727475616c51	cess....VirtualQ
0xbe26	75657279000041004372656174655072	uery..A.CreatePr
0xbe36	6f636573734100000000930257616974	ocessA......Wait
0xbe46	466f7253696e676c654f626a65637400	ForSingleObject.
0xbe56	000097025769646543686172546f4d75	....WideCharToMu
0xbe66	6c746942797465000000980257696e45	ltiByte.....WinE
0xbe76	786563000000a202577269746546696c	xec.....WriteFil
0xbe86	6500c9026c7374726c656e410000ca02	e...lstrlenA....
0xbe96	6c7374726c656e570000470043726561	lstrlenW..G.Crea
0xbea6	74655468726561640000540044656c65	teThread..T.Dele
0xbeb6	746546696c6541000000660047657457	teFileA...f.GetW
0xbec6	696e646f775465787441000000006b00	indowTextA....k.
0xbed6	47657457696e646f7752656374007000	GetWindowRect.p.
0xbee6	46696e6457696e646f77410000007400	FindWindowA...t.
0xbef6	47657457696e646f77000e0047657443	GetWindow...GetC
0xbf06	6c6173734e616d654100c40053657446	lassNameA...SetF
0xbf16	6f6375730000c900476574466f726567	ocus....GetForeg
0xbf26	726f756e6457696e646f770000001600	roundWindow.....
0xbf36	4c6f6164437572736f72410000001800	LoadCursorA.....
0xbf46	4c6f616449636f6e4100fe0053657454	LoadIconA...SetT
0xbf56	696d6572000002005265676973746572	imer....Register
0xbf66	436c617373410000000034014d657373	ClassA....4.Mess
0xbf76	616765426f784100000020004765744d	ageBoxA... .GetM
0xbf86	65737361676541000000590147657457	essageA...Y.GetW
0xbf96	696e646f774c6f6e6741000000005b01	indowLongA....[.
0xbfa6	53657457696e646f774c6f6e67410000	SetWindowLongA..
0xbfb6	00005e014372656174654465736b746f	..^.CreateDeskto
0xbfc6	70410000000065015365745468726561	pA....e.SetThrea
0xbfd6	644465736b746f700000660147657454	dDesktop..f.GetT
0xbfe6	68726561644465736b746f7000002400	hreadDesktop..$.
0xbff6	5472616e736c6174654d657373616765	TranslateMessage
0xc006	0000250044697370617463684d657373	..%.DispatchMess
0xc016	616765410000300053656e644d657373	ageA..0.SendMess
0xc026	6167654100003d00506f737451756974	ageA..=.PostQuit
0xc036	4d6573736167650000004b0053686f77	Message...K.Show
0xc046	57696e646f77000000004f0043726561	Window....O.Crea
0xc056	746557696e646f77	teWindow

Metadata

0xa625	7cc24d3f7a244a3f7b724b077b6a4b6f	\|.M?z$J?{rK.{jKo
0xa635	7b024b777b3a4b5f7bd24ba77bca4b8f	{.Kw{:K_{.K.{.K.
0xa645	7be24b977b9a4bff7b507e297e507e25	{.K.{.K.{P~)~P~%
0xa655	4e507e297e507e290e507e054e507e35	NP~)~P~).P~.NP~5
0xa665	7c704c0d7c784c057c604c1d7c144c61	\|pL.\|xL.\|`L.\|.La
0xa675	7c1c4c797c044c717c0c4c497c344c41	\|.Ly\|.Lq\|.LI\|4LA
0xa685	7c507e294e507e294e507e294e507e29	\|P~)NP~)NP~)NP~)
0xa695	4e507e294e507e294e507e294e507e29	NP~)NP~)NP~)NP~)
0xa6a5	4e507e294e507e294e507e294e507e29	NP~)NP~)NP~)NP~)
0xa6b5	4e507e294e507e294e507e294e507e29	NP~)NP~)NP~)NP~)
0xa6c5	4e507e294e507e294e507e294e507e29	NP~)NP~)NP~)NP~)
0xa6d5	4e507e294e507e294e507e294e507e29	NP~)NP~)NP~)NP~)
0xa6e5	4e507e294e507e294e507e294e507e29	NP~)NP~)NP~)NP~)
0xa6f5	4e507e294e507e294e507e294e507e29	NP~)NP~)NP~)NP~)
0xa705	4e507e294e507e	NP~)NP~

0xa9c4	294e507e294e507e294e507e294e507e	)NP~)NP~)NP~)NP~
0xa9d4	294e507e294e507e294e507e294e507e	)NP~)NP~)NP~)NP~
0xa9e4	294e507e294e507e294e507e294e507e	)NP~)NP~)NP~)NP~
0xa9f4	294e507e294e507e294e507e294e507e	)NP~)NP~)NP~)NP~
0xaa04	7d26390d09051529656e032a7c08165e	}&9....)en.*\|..^
0xaa14	5e2f235e4a21341b4d6e320709187e5e	^/#^J!4.Mn2...~^
0xaa24	7f60702e7c1e1b3767627013462a350c	.`p.\|..7gbp.F*5.
0xaa34	483a3f0c0921365e4a3c250a463e7e10	H:?..!6^J<%.F>~.
0xaa44	5c4e071b452d3f134c6e24110921250c	\N..E-?.Ln$..!%.
0xaa54	09283f0c5c237c5e682a25125d6e071b	.(?.\#\|^h*%.]n..
0xaa64	4b6e1d1f5a3a350c5a6f70165d3a2044	Kn..Z:5.Zop.]: D
0xaa74	0661330c5c3a3f0e0720257e68191d52	.a3.\:?.. %~h..R
0xaa84	093935124a213d1b093a3f5e6a1c052a	.95.J!=..:?^j..*
0xaa94	661e7e307c6e7d5e610f023a6a01023b	f.~0\|n}^a..:j..;
0xaaa4	060d1f307d0b1e2a060d1837650a702e	...0}..*...7e.p.
0xaab4	661c1e3106021f32601a112d061c112e	f..1...2`..-....
0xaac4	6c4e023b6802703d681d1852091c153f	lN.;h.p=h..R...?
0xaad4	656e12377d0d183b736e7d5e6a1c052a	en.7}..;sn}^j..*
0xaae4	661e7e307c4e507e294e19104a21220c	f.~0\|NP~)N..J!".
0xaaf4	4c2d245e681a1d5e79071e52093e3c1b	L-$^h..^y..R.><.
0xab04	483d3552092d3f0c5b2b330a291e3c1b	H=5R.-?.[+3.).<.
0xab14	483d3552092b3e0a4c3c7007463b225e	H=5R.+>.L<p.F;"^
0xab24	681a1d5e79071e7e602033115b3c351d	h..^y..~` 3.[<5.
0xab34	5d6e13287f7c70561a6334174e27245e	]n.(.\|pV.c4.N'$^
0xab44	4a21341b09213e5e4b2f33150921365e	J!4..!>^K/3..!6^
0xab54	4a2f221a0062700e452b310d4c62701d	J/"..bp.E+1.Lbp.
0xab64	463c221b4a3a502e452b310d4c62701b	F<".J:P.E+1.Lbp.
0xab74	473a350c09373f0b5b6e13287f7c7056	G:5..7?.[n.(.\|pV
0xab84	1a6334174e27245e4a21341b09213e5e	.c4.N'$^J!4..!>^
0xab94	4b2f33150921365e4a2f221a004e750d	K/3..!6^J/"..Nu.
0xaba4	046b237e7922351f5a2b7c5e5a2b3c1b	.k#~y"5.Z+\|^Z+<.
0xabb4	4a3a703b513e390c483a3911476e091b	J:p;Q>9.H:9.Gn..
0xabc4	483c502e452b310d4c62700d4c22351d	H<P.E+1.Lbp.L"5.
0xabd4	5d6e15065927221f5d273f1009033f10	]n..Y'".]'?...?.
0xabe4	5d265037472d3f0c5b2b330a090d310c	]&P7G-?.[+3...1.
0xabf4	4d6e1e0b442c350c056e20124c2f231b	Mn..D,5..n .L/#.
0xac04	056e33115b3c351d5d4e00124c2f231b	.n3.[<5.]N..L/#.
0xac14	056e35105d2b225e5021250c090d310c	.n5.]+"^P!%...1.
0xac24	4d6e1e0b442c350c296b235e0c3d502e	Mn..D,5.)k#^.=P.
0xac34	452b310d4c62701b473a350c092d3f0c	E+1.Lbp.G:5..-?.
0xac44	5b2b330a09082512456e1e1f442b502e	[+3...%.En..D+P.
0xac54	452b310d4c62700d4c22351d5d6e131f	E+1.Lbp.L"5.]n..
0xac64	5b2a70567f27231f0603310d5d2b223d	[*pV.'#...1.]+"=
0xac74	483c3457292822131b4e021b4e27230a	H<4W)("..N..N'#.
0xac84	4c3c031b5b38391d4c1e22114a2b230d	L<..[89.L.".J+#.
0xac94	2925350c472b3c4d1b603412454e230b	)%5.G+<M.`4.EN#.
0xaca4	5b287e1a483a501a47253b504d223c7e	[(~.H:P.G%;PM"<~
0xacb4	4225634c0738281a29253b4d1b603412	B%cL.8(.)%;M.`4.

0xa9c4	294e507e294e507e294e507e294e507e	)NP~)NP~)NP~)NP~
0xa9d4	294e507e294e507e294e507e294e507e	)NP~)NP~)NP~)NP~
0xa9e4	294e507e294e507e294e507e294e507e	)NP~)NP~)NP~)NP~
0xa9f4	294e507e294e507e294e507e294e507e	)NP~)NP~)NP~)NP~
0xaa04	7d26390d09051529656e032a7c08165e	}&9....)en.*\|..^
0xaa14	5e2f235e4a21341b4d6e320709187e5e	^/#^J!4.Mn2...~^
0xaa24	7f60702e7c1e1b3767627013462a350c	.`p.\|..7gbp.F*5.
0xaa34	483a3f0c0921365e4a3c250a463e7e10	H:?..!6^J<%.F>~.
0xaa44	5c4e071b452d3f134c6e24110921250c	\N..E-?.Ln$..!%.
0xaa54	09283f0c5c237c5e682a25125d6e071b	.(?.\#\|^h*%.]n..
0xaa64	4b6e1d1f5a3a350c5a6f70165d3a2044	Kn..Z:5.Zop.]: D
0xaa74	0661330c5c3a3f0e0720257e68191d52	.a3.\:?.. %~h..R
0xaa84	093935124a213d1b093a3f5e6a1c052a	.95.J!=..:?^j..*
0xaa94	661e7e307c6e7d5e610f023a6a01023b	f.~0\|n}^a..:j..;
0xaaa4	060d1f307d0b1e2a060d1837650a702e	...0}..*...7e.p.
0xaab4	661c1e3106021f32601a112d061c112e	f..1...2`..-....
0xaac4	6c4e023b6802703d681d1852091c153f	lN.;h.p=h..R...?
0xaad4	656e12377d0d183b736e7d5e6a1c052a	en.7}..;sn}^j..*
0xaae4	661e7e307c4e507e294e19104a21220c	f.~0\|NP~)N..J!".
0xaaf4	4c2d245e681a1d5e79071e52093e3c1b	L-$^h..^y..R.><.
0xab04	483d3552092d3f0c5b2b330a291e3c1b	H=5R.-?.[+3.).<.
0xab14	483d3552092b3e0a4c3c7007463b225e	H=5R.+>.L<p.F;"^
0xab24	681a1d5e79071e7e602033115b3c351d	h..^y..~` 3.[<5.
0xab34	5d6e13287f7c70561a6334174e27245e	]n.(.\|pV.c4.N'$^
0xab44	4a21341b09213e5e4b2f33150921365e	J!4..!>^K/3..!6^
0xab54	4a2f221a0062700e452b310d4c62701d	J/"..bp.E+1.Lbp.
0xab64	463c221b4a3a502e452b310d4c62701b	F<".J:P.E+1.Lbp.
0xab74	473a350c09373f0b5b6e13287f7c7056	G:5..7?.[n.(.\|pV
0xab84	1a6334174e27245e4a21341b09213e5e	.c4.N'$^J!4..!>^
0xab94	4b2f33150921365e4a2f221a004e750d	K/3..!6^J/"..Nu.
0xaba4	046b237e7922351f5a2b7c5e5a2b3c1b	.k#~y"5.Z+\|^Z+<.
0xabb4	4a3a703b513e390c483a3911476e091b	J:p;Q>9.H:9.Gn..
0xabc4	483c502e452b310d4c62700d4c22351d	H<P.E+1.Lbp.L"5.
0xabd4	5d6e15065927221f5d273f1009033f10	]n..Y'".]'?...?.
0xabe4	5d265037472d3f0c5b2b330a090d310c	]&P7G-?.[+3...1.
0xabf4	4d6e1e0b442c350c056e20124c2f231b	Mn..D,5..n .L/#.
0xac04	056e33115b3c351d5d4e00124c2f231b	.n3.[<5.]N..L/#.
0xac14	056e35105d2b225e5021250c090d310c	.n5.]+"^P!%...1.
0xac24	4d6e1e0b442c350c296b235e0c3d502e	Mn..D,5.)k#^.=P.
0xac34	452b310d4c62701b473a350c092d3f0c	E+1.Lbp.G:5..-?.
0xac44	5b2b330a09082512456e1e1f442b502e	[+3...%.En..D+P.
0xac54	452b310d4c62700d4c22351d5d6e131f	E+1.Lbp.L"5.]n..
0xac64	5b2a70567f27231f0603310d5d2b223d	[*pV.'#...1.]+"=
0xac74	483c3457292822131b4e021b4e27230a	H<4W)("..N..N'#.
0xac84	4c3c031b5b38391d4c1e22114a2b230d	L<..[89.L.".J+#.
0xac94	2925350c472b3c4d1b603412454e230b	)%5.G+<M.`4.EN#.
0xaca4	5b287e1a483a501a47253b504d223c7e	[(~.H:P.G%;PM"<~
0xacb4	4225634c0738281a29253b4d1b603412	B%cL.8(.)%;M.`4.

Third-party

SigBase/SUSP/Imphash Detects imphash often found in malware samples (Zero hits with with search for 'imphash:x p:0' on Virustotal)

20 of 27 traits shown

Identity

SHA-256	3ed38bd9753aaca386280f59413271bbbe14ec02177f7bc1171252ad4488723b
Filename	virussign.com_7c438095a2e03fb33521dfdd105f8de0.vir
Package	virussign.com_7c438095a2e03fb33521dfdd105f8de0.vir

Origin

Source	harvest
Feed	virussign
Domain	virussign.com

Timeline

First seen	31 Jul 2026 21:37 UTC
First analyzed	2 Aug 2026 18:56 UTC
Last analyzed	2 Aug 2026 18:56 UTC
Last updated	2 Aug 2026 18:56 UTC

Labeling

Label	bad
Label source	harvest
Traits version	d9759

Not seeing what you expected? Let us know

0xdbc0	20000000000000000000000000000000	...............
0xdbd0	00000000000000000000000000000000	................
0xdbe0	00000000000000000000000000000000	................
0xdbf0	00000000000000000000000000000000	................
0xdc00	90909090909090909090909090909090	................
0xdc10	9090909090909090909090909090	..............