| filename | data.exe | |
|---|---|---|
| size | 317952 (0x4da00) | |
| md5 | 8626242719c85dfbd4eb6541c7e321e0 | |
| type | PE32 executable (GUI) Intel 80386, for MS Windows | |
| mimetype | application/x-dosexec | |
| clamav | Win.Trojan.FakeAV-168 FOUND | |
| virustotal | → scan with virustotal.com | |
| histogram | ||
MZ Header
| signature | MZ |
| bytes_in_last_block | 0x90 |
| blocks_in_file | 3 |
| num_relocs | 0 |
| header_paragraphs | 4 |
| min_extra_paragraphs | 0 |
| max_extra_paragraphs | 0xffff |
| ss | 0 |
| sp | 0xb8 |
| checksum | 0 |
| ip | 0 |
| cs | 0 |
| reloc_table_offset | 0x40 |
| overlay_number | 0 |
| reserved0 | 0 |
| oem_id | 0 |
| oem_info | 0 |
| reserved2 | 0 |
| reserved3 | 0 |
| reserved4 | 0 |
| reserved5 | 0 |
| reserved6 | 0 |
| lfanew | 0x100 |
Rich Header
| lib id | version | times used |
|---|---|---|
| 150 | 20413 | 6 |
| 149 | 30729 | 10 |
| 132 | 30729 | 2 |
| 4 | 8447 | 18 |
| 110 | 50727 | 1 |
| 147 | 30729 | 8 |
| 123 | 50727 | 19 |
| 1 | 0 | 1339 |
| 131 | 30729 | 241 |
| 148 | 21022 | 1 |
| 145 | 30729 | 1 |
DOS stub
00000000: 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 |........!..L.!Th| 00000010: 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f |is program canno| 00000020: 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 |t be run in DOS | 00000030: 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 |mode....$.......|
PE Header
Sections
| name | va | vsize | raw size | flags | |
|---|---|---|---|---|---|
| .text | 0x1000 | 0x7a1 | 0x800 | R-X CODE | |
| .rdata | 0x2000 | 0xab8 | 0xc00 | RW- IDATA | |
| .data | 0x3000 | 0xae000 | 0x400 | RW- IDATA | |
| .rsrc | 0xb1000 | 0x115c | 0x1200 | R-- IDATA |
Data Directory
TLS
| raw start | raw end | index | callbks | zero fill | flags | |
|---|---|---|---|---|---|---|
| 0x402ad0 | 0x402af8 | 0x402af8 | 0x402afc | 0 | 0 |
| module_name | hint | ord | function_name |
|---|---|---|---|
| KERNEL32.dll | 183 | HeapCreate | |
| KERNEL32.dll | 195 | FileTimeToLocalFileTime | |
| KERNEL32.dll | 332 | GetDriveTypeA | |
| KERNEL32.dll | 151 | EnterCriticalSection | |
| KERNEL32.dll | 433 | GetStdHandle | |
| KERNEL32.dll | 772 | SetErrorMode | |
| KERNEL32.dll | 666 | RaiseException | |
| KERNEL32.dll | 512 | GlobalUnlock | |
| KERNEL32.dll | 600 | LockResource | |
| KERNEL32.dll | 264 | LoadLibraryExA | |
| KERNEL32.dll | 755 | SetConsoleOutputCP | |
| KERNEL32.dll | 247 | GetACP | |
| KERNEL32.dll | 361 | GetLastError | |
| KERNEL32.dll | 50 | CloseHandle | |
| KERNEL32.dll | 641 | VirtualProtect | |
| KERNEL32.dll | 496 | GlobalDeleteAtom | |
| KERNEL32.dll | 542 | InterlockedExchange | |
| KERNEL32.dll | 501 | GlobalFree | |
| KERNEL32.dll | 492 | GlobalAddAtomA | |
| KERNEL32.dll | 835 | Sleep | |
| KERNEL32.dll | 364 | GetLocaleInfoA | |
| USER32.dll | 201 | EndPaint | |
| USER32.dll | 14 | BeginPaint | |
| USER32.dll | 268 | GetCursorPos | |
| USER32.dll | 208 | GetActiveWindow | |
| USER32.dll | 710 | ValidateRect | |
| USER32.dll | 557 | ShowWindow | |
| USER32.dll | 319 | GetWindow | |
| USER32.dll | 66 | ClipCursor | |
| USER32.dll | 309 | GetMenuItemInfoA | |
| USER32.dll | 189 | DrawTextA | |
| USER32.dll | 467 | ReleaseDC | |
| USER32.dll | 437 | IsIconic | |
| USER32.dll | 330 | GetWindowTextA | |
| USER32.dll | 253 | GetClassNameA | |
| USER32.dll | 326 | GetParent | |
| USER32.dll | 495 | OemToCharW | |
| USER32.dll | 247 | GetFocus | |
| USER32.dll | 248 | SetForegroundWindow | |
| USER32.dll | 179 | DrawEdge | |
| HTTPAPI.dll | 2 | HttpAddUrl | |
| HTTPAPI.dll | 7 | HttpCreateHttpHandle | |
| HTTPAPI.dll | 42 | HttpTerminate | |
| HTTPAPI.dll | 20 | HttpInitialize | |
| HTTPAPI.dll | 33 | HttpRemoveUrl | |
| WLDAP32.dll | 11 | ldap_add |
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
Cannot call to_der on
undefined method `type' for nil:NilClass
Scanning the drive for archives: 1 file, 317952 bytes (311 KiB) Errors: 1
![]() |
| Please donate some bucks to keep this site up and running: | |
| Ko-fi | |
|---|---|
| Yandex.Money | |
| Thank you! | |
[!] PEdump::WIN_CERTIFICATE: too big length 964095238
[!] PEdump::WIN_CERTIFICATE: too big length 444198913
[!] PEdump::WIN_CERTIFICATE: too big length 342871802
[!] PEdump::WIN_CERTIFICATE: too big length 1016256487
[!] PEdump::WIN_CERTIFICATE: too big length 611971345
[!] PEdump::WIN_CERTIFICATE: too big length 697355785
[!] PEdump::WIN_CERTIFICATE: too big length 864800012
[!] PEdump::WIN_CERTIFICATE: too big length 1050271460
[!] PEdump::WIN_CERTIFICATE: too big length 1067514115
[!] PEdump::WIN_CERTIFICATE: too big length 1082846750
[!] PEdump::WIN_CERTIFICATE: too big length 1183314203
[!] PEdump::WIN_CERTIFICATE: too big length 1183313693
[!] PEdump::WIN_CERTIFICATE: too big length 947574246
[!] PEdump::WIN_CERTIFICATE: too big length 529853458
[!] PEdump::WIN_CERTIFICATE: too big length 813945608
[!] PEdump::WIN_CERTIFICATE: too big length 312536546
[!] PEdump::WIN_CERTIFICATE: too big length 211472143
[!] PEdump::WIN_CERTIFICATE: too big length 343337699
[!] PEdump::WIN_CERTIFICATE: too big length 360180451
[!] PEdump::WIN_CERTIFICATE: too big length 259711979
[!] PEdump::WIN_CERTIFICATE: too big length 159706346
[!] PEdump::WIN_CERTIFICATE: too big length 225896164
[!] PEdump::WIN_CERTIFICATE: too big length 780719342
[!] PEdump::WIN_CERTIFICATE: too big length 444397565
[!] PEdump::WIN_CERTIFICATE: too big length 427490048
[!] PEdump::WIN_CERTIFICATE: too big length 1133432592
[!] PEdump::WIN_CERTIFICATE: too big length 965536739
[!] PEdump::WIN_CERTIFICATE: too big length 660988184
[!] PEdump::WIN_CERTIFICATE: too big length 660988182
[!] PEdump::WIN_CERTIFICATE: too big length 446235143
[!] PEdump::WIN_CERTIFICATE: too big length 631242243
[!] PEdump::WIN_CERTIFICATE: too big length 311159322
[!] PEdump::WIN_CERTIFICATE: too big length 260761625
[!] PEdump::WIN_CERTIFICATE: too big length 327935008
[!] PEdump::WIN_CERTIFICATE: too big length 346160650
[!] PEdump::WIN_CERTIFICATE: too big length 346150115
[!] PEdump::WIN_CERTIFICATE: too big length 444526105
[!] PEdump::WIN_CERTIFICATE: too big length 679732244
[!] PEdump::WIN_CERTIFICATE: too big length 1080413931
[!] PEdump::WIN_CERTIFICATE: too big length 913690606
[!] PEdump::WIN_CERTIFICATE: too big length 1675572988
[!] PEdump::WIN_CERTIFICATE: too big length 1659124970
[!] PEdump::WIN_CERTIFICATE: too big length 936387791
[!] PEdump::WIN_CERTIFICATE: too big length 480776614
[!] PEdump::WIN_CERTIFICATE: too big length 1120940201
[!] PEdump::WIN_CERTIFICATE: too big length 1053894564
[!] PEdump::WIN_CERTIFICATE: too big length 431954389
[!] PEdump::WIN_CERTIFICATE: too big length 964095238
[!] PEdump::WIN_CERTIFICATE: too big length 444198913
[!] PEdump::WIN_CERTIFICATE: too big length 342871802
[!] PEdump::WIN_CERTIFICATE: too big length 1016256487
[!] PEdump::WIN_CERTIFICATE: too big length 611971345
[!] PEdump::WIN_CERTIFICATE: too big length 697355785
[!] PEdump::WIN_CERTIFICATE: too big length 864800012
[!] PEdump::WIN_CERTIFICATE: too big length 1050271460
[!] PEdump::WIN_CERTIFICATE: too big length 1067514115
[!] PEdump::WIN_CERTIFICATE: too big length 1082846750
[!] PEdump::WIN_CERTIFICATE: too big length 1183314203
[!] PEdump::WIN_CERTIFICATE: too big length 1183313693
[!] PEdump::WIN_CERTIFICATE: too big length 947574246
[!] PEdump::WIN_CERTIFICATE: too big length 529853458
[!] PEdump::WIN_CERTIFICATE: too big length 813945608
[!] PEdump::WIN_CERTIFICATE: too big length 312536546
[!] PEdump::WIN_CERTIFICATE: too big length 211472143
[!] PEdump::WIN_CERTIFICATE: too big length 343337699
[!] PEdump::WIN_CERTIFICATE: too big length 360180451
[!] PEdump::WIN_CERTIFICATE: too big length 259711979
[!] PEdump::WIN_CERTIFICATE: too big length 159706346
[!] PEdump::WIN_CERTIFICATE: too big length 225896164
[!] PEdump::WIN_CERTIFICATE: too big length 780719342
[!] PEdump::WIN_CERTIFICATE: too big length 444397565
[!] PEdump::WIN_CERTIFICATE: too big length 427490048
[!] PEdump::WIN_CERTIFICATE: too big length 1133432592
[!] PEdump::WIN_CERTIFICATE: too big length 965536739
[!] PEdump::WIN_CERTIFICATE: too big length 660988184
[!] PEdump::WIN_CERTIFICATE: too big length 660988182
[!] PEdump::WIN_CERTIFICATE: too big length 446235143
[!] PEdump::WIN_CERTIFICATE: too big length 631242243
[!] PEdump::WIN_CERTIFICATE: too big length 311159322
[!] PEdump::WIN_CERTIFICATE: too big length 260761625
[!] PEdump::WIN_CERTIFICATE: too big length 327935008
[!] PEdump::WIN_CERTIFICATE: too big length 346160650
[!] PEdump::WIN_CERTIFICATE: too big length 346150115
[!] PEdump::WIN_CERTIFICATE: too big length 444526105
[!] PEdump::WIN_CERTIFICATE: too big length 679732244
[!] PEdump::WIN_CERTIFICATE: too big length 1080413931
[!] PEdump::WIN_CERTIFICATE: too big length 913690606
[!] PEdump::WIN_CERTIFICATE: too big length 1675572988
[!] PEdump::WIN_CERTIFICATE: too big length 1659124970
[!] PEdump::WIN_CERTIFICATE: too big length 936387791
[!] PEdump::WIN_CERTIFICATE: too big length 480776614
[!] PEdump::WIN_CERTIFICATE: too big length 1120940201
[!] PEdump::WIN_CERTIFICATE: too big length 1053894564
[!] PEdump::WIN_CERTIFICATE: too big length 431954389
[?] can't find file_offset of VA 0x3c00
[?] can't find file_offset of VA 0x3d00
[!] PEdump::WIN_CERTIFICATE: too big length 964095238
[!] PEdump::WIN_CERTIFICATE: too big length 444198913
[!] PEdump::WIN_CERTIFICATE: too big length 342871802
[!] PEdump::WIN_CERTIFICATE: too big length 1016256487
[!] PEdump::WIN_CERTIFICATE: too big length 611971345
[!] PEdump::WIN_CERTIFICATE: too big length 697355785
[!] PEdump::WIN_CERTIFICATE: too big length 864800012
[!] PEdump::WIN_CERTIFICATE: too big length 1050271460
[!] PEdump::WIN_CERTIFICATE: too big length 1067514115
[!] PEdump::WIN_CERTIFICATE: too big length 1082846750
[!] PEdump::WIN_CERTIFICATE: too big length 1183314203
[!] PEdump::WIN_CERTIFICATE: too big length 1183313693
[!] PEdump::WIN_CERTIFICATE: too big length 947574246
[!] PEdump::WIN_CERTIFICATE: too big length 529853458
[!] PEdump::WIN_CERTIFICATE: too big length 813945608
[!] PEdump::WIN_CERTIFICATE: too big length 312536546
[!] PEdump::WIN_CERTIFICATE: too big length 211472143
[!] PEdump::WIN_CERTIFICATE: too big length 343337699
[!] PEdump::WIN_CERTIFICATE: too big length 360180451
[!] PEdump::WIN_CERTIFICATE: too big length 259711979
[!] PEdump::WIN_CERTIFICATE: too big length 159706346
[!] PEdump::WIN_CERTIFICATE: too big length 225896164
[!] PEdump::WIN_CERTIFICATE: too big length 780719342
[!] PEdump::WIN_CERTIFICATE: too big length 444397565
[!] PEdump::WIN_CERTIFICATE: too big length 427490048
[!] PEdump::WIN_CERTIFICATE: too big length 1133432592
[!] PEdump::WIN_CERTIFICATE: too big length 965536739
[!] PEdump::WIN_CERTIFICATE: too big length 660988184
[!] PEdump::WIN_CERTIFICATE: too big length 660988182
[!] PEdump::WIN_CERTIFICATE: too big length 446235143
[!] PEdump::WIN_CERTIFICATE: too big length 631242243
[!] PEdump::WIN_CERTIFICATE: too big length 311159322
[!] PEdump::WIN_CERTIFICATE: too big length 260761625
[!] PEdump::WIN_CERTIFICATE: too big length 327935008
[!] PEdump::WIN_CERTIFICATE: too big length 346160650
[!] PEdump::WIN_CERTIFICATE: too big length 346150115
[!] PEdump::WIN_CERTIFICATE: too big length 444526105
[!] PEdump::WIN_CERTIFICATE: too big length 679732244
[!] PEdump::WIN_CERTIFICATE: too big length 1080413931
[!] PEdump::WIN_CERTIFICATE: too big length 913690606
[!] PEdump::WIN_CERTIFICATE: too big length 1675572988
[!] PEdump::WIN_CERTIFICATE: too big length 1659124970
[!] PEdump::WIN_CERTIFICATE: too big length 936387791
[!] PEdump::WIN_CERTIFICATE: too big length 480776614
[!] PEdump::WIN_CERTIFICATE: too big length 1120940201
[!] PEdump::WIN_CERTIFICATE: too big length 1053894564
[!] PEdump::WIN_CERTIFICATE: too big length 431954389
[!] PEdump::WIN_CERTIFICATE: too big length 964095238
[!] PEdump::WIN_CERTIFICATE: too big length 444198913
[!] PEdump::WIN_CERTIFICATE: too big length 342871802
[!] PEdump::WIN_CERTIFICATE: too big length 1016256487
[!] PEdump::WIN_CERTIFICATE: too big length 611971345
[!] PEdump::WIN_CERTIFICATE: too big length 697355785
[!] PEdump::WIN_CERTIFICATE: too big length 864800012
[!] PEdump::WIN_CERTIFICATE: too big length 1050271460
[!] PEdump::WIN_CERTIFICATE: too big length 1067514115
[!] PEdump::WIN_CERTIFICATE: too big length 1082846750
[!] PEdump::WIN_CERTIFICATE: too big length 1183314203
[!] PEdump::WIN_CERTIFICATE: too big length 1183313693
[!] PEdump::WIN_CERTIFICATE: too big length 947574246
[!] PEdump::WIN_CERTIFICATE: too big length 529853458
[!] PEdump::WIN_CERTIFICATE: too big length 813945608
[!] PEdump::WIN_CERTIFICATE: too big length 312536546
[!] PEdump::WIN_CERTIFICATE: too big length 211472143
[!] PEdump::WIN_CERTIFICATE: too big length 343337699
[!] PEdump::WIN_CERTIFICATE: too big length 360180451
[!] PEdump::WIN_CERTIFICATE: too big length 259711979
[!] PEdump::WIN_CERTIFICATE: too big length 159706346
[!] PEdump::WIN_CERTIFICATE: too big length 225896164
[!] PEdump::WIN_CERTIFICATE: too big length 780719342
[!] PEdump::WIN_CERTIFICATE: too big length 444397565
[!] PEdump::WIN_CERTIFICATE: too big length 427490048
[!] PEdump::WIN_CERTIFICATE: too big length 1133432592
[!] PEdump::WIN_CERTIFICATE: too big length 965536739
[!] PEdump::WIN_CERTIFICATE: too big length 660988184
[!] PEdump::WIN_CERTIFICATE: too big length 660988182
[!] PEdump::WIN_CERTIFICATE: too big length 446235143
[!] PEdump::WIN_CERTIFICATE: too big length 631242243
[!] PEdump::WIN_CERTIFICATE: too big length 311159322
[!] PEdump::WIN_CERTIFICATE: too big length 260761625
[!] PEdump::WIN_CERTIFICATE: too big length 327935008
[!] PEdump::WIN_CERTIFICATE: too big length 346160650
[!] PEdump::WIN_CERTIFICATE: too big length 346150115
[!] PEdump::WIN_CERTIFICATE: too big length 444526105
[!] PEdump::WIN_CERTIFICATE: too big length 679732244
[!] PEdump::WIN_CERTIFICATE: too big length 1080413931
[!] PEdump::WIN_CERTIFICATE: too big length 913690606
[!] PEdump::WIN_CERTIFICATE: too big length 1675572988
[!] PEdump::WIN_CERTIFICATE: too big length 1659124970
[!] PEdump::WIN_CERTIFICATE: too big length 936387791
[!] PEdump::WIN_CERTIFICATE: too big length 480776614
[!] PEdump::WIN_CERTIFICATE: too big length 1120940201
[!] PEdump::WIN_CERTIFICATE: too big length 1053894564
[!] PEdump::WIN_CERTIFICATE: too big length 431954389
[!] PEdump::WIN_CERTIFICATE: too big length 964095238
[!] PEdump::WIN_CERTIFICATE: too big length 444198913
[!] PEdump::WIN_CERTIFICATE: too big length 342871802
[!] PEdump::WIN_CERTIFICATE: too big length 1016256487
[!] PEdump::WIN_CERTIFICATE: too big length 611971345
[!] PEdump::WIN_CERTIFICATE: too big length 697355785
[!] PEdump::WIN_CERTIFICATE: too big length 864800012
[!] PEdump::WIN_CERTIFICATE: too big length 1050271460
[!] PEdump::WIN_CERTIFICATE: too big length 1067514115
[!] PEdump::WIN_CERTIFICATE: too big length 1082846750
[!] PEdump::WIN_CERTIFICATE: too big length 1183314203
[!] PEdump::WIN_CERTIFICATE: too big length 1183313693
[!] PEdump::WIN_CERTIFICATE: too big length 947574246
[!] PEdump::WIN_CERTIFICATE: too big length 529853458
[!] PEdump::WIN_CERTIFICATE: too big length 813945608
[!] PEdump::WIN_CERTIFICATE: too big length 312536546
[!] PEdump::WIN_CERTIFICATE: too big length 211472143
[!] PEdump::WIN_CERTIFICATE: too big length 343337699
[!] PEdump::WIN_CERTIFICATE: too big length 360180451
[!] PEdump::WIN_CERTIFICATE: too big length 259711979
[!] PEdump::WIN_CERTIFICATE: too big length 159706346
[!] PEdump::WIN_CERTIFICATE: too big length 225896164
[!] PEdump::WIN_CERTIFICATE: too big length 780719342
[!] PEdump::WIN_CERTIFICATE: too big length 444397565
[!] PEdump::WIN_CERTIFICATE: too big length 427490048
[!] PEdump::WIN_CERTIFICATE: too big length 1133432592
[!] PEdump::WIN_CERTIFICATE: too big length 965536739
[!] PEdump::WIN_CERTIFICATE: too big length 660988184
[!] PEdump::WIN_CERTIFICATE: too big length 660988182
[!] PEdump::WIN_CERTIFICATE: too big length 446235143
[!] PEdump::WIN_CERTIFICATE: too big length 631242243
[!] PEdump::WIN_CERTIFICATE: too big length 311159322
[!] PEdump::WIN_CERTIFICATE: too big length 260761625
[!] PEdump::WIN_CERTIFICATE: too big length 327935008
[!] PEdump::WIN_CERTIFICATE: too big length 346160650
[!] PEdump::WIN_CERTIFICATE: too big length 346150115
[!] PEdump::WIN_CERTIFICATE: too big length 444526105
[!] PEdump::WIN_CERTIFICATE: too big length 679732244
[!] PEdump::WIN_CERTIFICATE: too big length 1080413931
[!] PEdump::WIN_CERTIFICATE: too big length 913690606
[!] PEdump::WIN_CERTIFICATE: too big length 1675572988
[!] PEdump::WIN_CERTIFICATE: too big length 1659124970
[!] PEdump::WIN_CERTIFICATE: too big length 936387791
[!] PEdump::WIN_CERTIFICATE: too big length 480776614
[!] PEdump::WIN_CERTIFICATE: too big length 1120940201
[!] PEdump::WIN_CERTIFICATE: too big length 1053894564
[!] PEdump::WIN_CERTIFICATE: too big length 431954389
[!] PEdump::WIN_CERTIFICATE: too big length 964095238
[!] PEdump::WIN_CERTIFICATE: too big length 444198913
[!] PEdump::WIN_CERTIFICATE: too big length 342871802
[!] PEdump::WIN_CERTIFICATE: too big length 1016256487
[!] PEdump::WIN_CERTIFICATE: too big length 611971345
[!] PEdump::WIN_CERTIFICATE: too big length 697355785
[!] PEdump::WIN_CERTIFICATE: too big length 864800012
[!] PEdump::WIN_CERTIFICATE: too big length 1050271460
[!] PEdump::WIN_CERTIFICATE: too big length 1067514115
[!] PEdump::WIN_CERTIFICATE: too big length 1082846750
[!] PEdump::WIN_CERTIFICATE: too big length 1183314203
[!] PEdump::WIN_CERTIFICATE: too big length 1183313693
[!] PEdump::WIN_CERTIFICATE: too big length 947574246
[!] PEdump::WIN_CERTIFICATE: too big length 529853458
[!] PEdump::WIN_CERTIFICATE: too big length 813945608
[!] PEdump::WIN_CERTIFICATE: too big length 312536546
[!] PEdump::WIN_CERTIFICATE: too big length 211472143
[!] PEdump::WIN_CERTIFICATE: too big length 343337699
[!] PEdump::WIN_CERTIFICATE: too big length 360180451
[!] PEdump::WIN_CERTIFICATE: too big length 259711979
[!] PEdump::WIN_CERTIFICATE: too big length 159706346
[!] PEdump::WIN_CERTIFICATE: too big length 225896164
[!] PEdump::WIN_CERTIFICATE: too big length 780719342
[!] PEdump::WIN_CERTIFICATE: too big length 444397565
[!] PEdump::WIN_CERTIFICATE: too big length 427490048
[!] PEdump::WIN_CERTIFICATE: too big length 1133432592
[!] PEdump::WIN_CERTIFICATE: too big length 965536739
[!] PEdump::WIN_CERTIFICATE: too big length 660988184
[!] PEdump::WIN_CERTIFICATE: too big length 660988182
[!] PEdump::WIN_CERTIFICATE: too big length 446235143
[!] PEdump::WIN_CERTIFICATE: too big length 631242243
[!] PEdump::WIN_CERTIFICATE: too big length 311159322
[!] PEdump::WIN_CERTIFICATE: too big length 260761625
[!] PEdump::WIN_CERTIFICATE: too big length 327935008
[!] PEdump::WIN_CERTIFICATE: too big length 346160650
[!] PEdump::WIN_CERTIFICATE: too big length 346150115
[!] PEdump::WIN_CERTIFICATE: too big length 444526105
[!] PEdump::WIN_CERTIFICATE: too big length 679732244
[!] PEdump::WIN_CERTIFICATE: too big length 1080413931
[!] PEdump::WIN_CERTIFICATE: too big length 913690606
[!] PEdump::WIN_CERTIFICATE: too big length 1675572988
[!] PEdump::WIN_CERTIFICATE: too big length 1659124970
[!] PEdump::WIN_CERTIFICATE: too big length 936387791
[!] PEdump::WIN_CERTIFICATE: too big length 480776614
[!] PEdump::WIN_CERTIFICATE: too big length 1120940201
[!] PEdump::WIN_CERTIFICATE: too big length 1053894564
[!] PEdump::WIN_CERTIFICATE: too big length 431954389
offset:( 0x )