PESCAN.IO - Analysis Report

PESCAN.IO - Analysis Report Basic

File Structure

PE Chart Code

Header PE (light blue)

Executable sections (pink)

Non-executable sections (black)

External injected code (red)

File Structure in red = malformed or corrupted header

Chart Code For Other Files

Printable characters (blue)

Non-printable characters (black)

Information

Icon:

Size: 3,32 MB
SHA-256 Hash: A463B78A69E756AB70887FFA04E27641E770C67CF114D15D27AEF6FB4B5F004F
SHA-1 Hash: 9F6CC2D61C5F394FEBE3D4FCA24380E3A47B2642
MD5 Hash: A041CC5B5793ED010A0992BF7BFC639A
Imphash: 616118E697EE211E3E0F2EA027DD3438
MajorOSVersion: 10
MinorOSVersion: 2
CheckSum: 0035BBCA
EntryPoint (rva): 166D0
SizeOfHeaders: 400
SizeOfImage: 363000
ImageBase: 0000000180000000
Architecture: x64
ExportTable: 36470
ImportTable: 36650
IAT: 29000
Characteristics: 2022
TimeDateStamp: 559431DD
Date: 01/07/2015 18:30:53
File Type: DLL
Number Of Sections: 8
ASLR: Disabled
Section Names (Optional Header): .text$x, .text0, .rdata, .data, .pdata, .fptable, .rsrc, .reloc
Number Of Executable Sections: 2
Subsystem: Windows GUI
UAC Execution Level Manifest: asInvoker

Sections Info

Section Name	Flags	ROffset	RSize	VOffset	VSize	Entropy	Chi2
.text$x	0x60600020 Code Executable Readable	400	26A00	1000	26A00	6.4823	1022658.12
.text0	0x60600020 Code Executable Readable	26E00	400	28000	25D	3.6913	72975
.rdata	0x40600040 Initialized Data Readable	27200	E200	29000	E0FC	5.4781	2234644.98
.data	0xC0100040 Initialized Data Readable Writeable	35400	C00	38000	B278	2.2401	442138.5
.pdata	0x40100040 Initialized Data Readable	36000	1C00	44000	1B78	5.4559	190856.14
.fptable	0xC0000040 Initialized Data Readable Writeable	37C00	200	46000	100	0	130560
.rsrc	0x40700040 Initialized Data Readable	37E00	31A600	47000	31A468	6.1909	10228378.68
.reloc	0x42100040 Initialized Data GP-Relative Readable	352400	800	362000	6B4	5.0062	28890

Description

OriginalFilename: travelplanner.dll
CompanyName: Willow Pine
LegalCopyright: Copyright (C) 2025 Willow Pine.
ProductName: Travel Planner
FileVersion: 2.97.8194.5899
FileDescription: Offline notes companion
ProductVersion: 2.97.8194.5899
Language: English (United States) (ID=0x409)
CodePage: Unicode (UTF-16 LE) (0x4B0)

Entry Point

The section number (1) have the Entry Point
Information -> EntryPoint (calculated) - 15AD0
Code -> 48895C24084889742410574883EC20498BF88BDA488BF183FA017505E84F0000004C8BC78BD3488BCE488B5C2430488B7424

Assembler

|MOV QWORD PTR [RSP + 8], RBX

|MOV QWORD PTR [RSP + 0X10], RSI

|PUSH RDI

|SUB RSP, 0X20

|MOV RDI, R8

|MOV EBX, EDX

|MOV RSI, RCX

|CMP EDX, 1

|JNE 0X1800166F1

|CALL 0X180016740

|MOV R8, RDI

|MOV EDX, EBX

|MOV RCX, RSI

|MOV RBX, QWORD PTR [RSP + 0X30]

Signatures

Rich Signature Analyzer:
Code -> 878E1DE6C3EF73B5C3EF73B5C3EF73B5CA9771B5E1EF73B5579A78B4FAEF73B5CA9771B5D8EF73B555867BB4EFEF73B5CA9771B5AEEF73B503997DB4A1EF73B5579A78B4C7EF73B5CA9771B5FBEF73B5CA9771B5A3EF73B5BF967CB4E9EF73B5159B79B4EDEF73B5C3EF77B58FEF73B5159B79B4DFEF73B5579A78B4CBEF73B5558676B4F2EF73B552696368C3EF73B5
Footprint md5 Hash -> A668BCBFBCE6BE67720BBED678A2F164
• The Rich header apparently has not been modified
Certificate - Digital Signature Not Found:
• The file is not signed

Packer/Compiler

Detect It Easy (die)
• PE+(64): compiler: Microsoft Visual C/C++(-)[-]
• PE+(64): linker: Microsoft Linker(17.25*)[-]
• Entropy: 6.44984

Suspicious Functions

Library	Function	Description
KERNEL32.DLL	WriteFile	Writes data to a specified file or input/output (I/O) device.
KERNEL32.DLL	LoadLibraryW	Loads the specified module into the address space of the calling process.
KERNEL32.DLL	GetProcAddress	Retrieves the address of an exported function or variable from the specified dynamic-link library (DLL).
KERNEL32.DLL	IsDebuggerPresent	Determines if the calling process is being debugged by a user-mode debugger.

ET Functions (carving)

Original Name -> WindowsProject975_5BCFB9F5.dll
Buildohdhey
CachedScrollbarStream
DemolishBufferMatcher
GetFileVersionInfoA
GetFileVersionInfoExA
GetFileVersionInfoExW
GetFileVersionInfoSizeA
GetFileVersionInfoSizeW
GetFileVersionInfoW
PsServiceObserver
QueuedStreamkic
RtlChannelJLl
VerQueryValueA
VerQueryValueW

Windows REG (UNICODE)

SOFTWARE\Microsoft\Windows NT\CurrentVersion

File Access

SHLWAPI.dll
ole32.dll
SHELL32.dll
ADVAPI32.dll
KERNEL32.dll
WindowsProject975_5BCFB9F5.dll
D$(.dll
.dll
D$XD$Xk\$ D$YerneD$]l\$ D$baseD$b.dll
.dat
@.dat

File Access (UNICODE)

travelplanner.dll
mscoree.dll

Interest's Words

exec
start

Interest's Words (UNICODE)

pause

Strings/Hex Code Found With The File Rules

Rule Type	Encoding	Matched (Word)
Text	Ascii	Registry (RegOpenKeyEx)
Text	Ascii	File (CreateFile)
Text	Ascii	File (WriteFile)
Text	Ascii	Anti-Analysis VM (IsDebuggerPresent)
Text	Ascii	Reconnaissance (FindNextFileW)
Text	Ascii	Reconnaissance (FindClose)
Text	Ascii	Stealth (CloseHandle)
Text	Ascii	Stealth (VirtualProtect)
Text	Ascii	Execution (ResumeThread)
Text	Ascii	Keyboard Key (Scroll)
Entry Point	Hex Pattern	Microsoft Visual C++ 8.0 (DLL)

Resources

Path	DataRVA	Size	FileOffset	Code	Text
\ICON\1\1033	35F9D8	468	3507D8	2800000010000000200000000100200000000000000400000000000000000000000000000000000079679AFF7A6E88FF796B	(....... ..... .........................yg..zn..yk
\ICON\2\1033	35FE40	10A8	350C40	280000002000000040000000010020000000000000100000000000000000000000000000000000006E7E87FF696483FF7570	(... ...@..... .........................n~..id..up
\STRING\7\1033	360F10	92	351D10	00000000000000000300430075007400040043006F00700079000400530061007600650006004900740061006C0069006300	..........C.u.t...C.o.p.y...S.a.v.e...I.t.a.l.i.c.
\STRING\8\1033	360FA8	110	351DA8	080054006800750072007300640061007900060052006500730069007A0065000C004C006F006100640069006E0067002000	..T.h.u.r.s.d.a.y...R.e.s.i.z.e...L.o.a.d.i.n.g. .
\STRING\9\1033	3610B8	126	351EB8	04004F00700065006E000900500061006E00200052006900670068007400050041007000720069006C000700520065007600	..O.p.e.n...P.a.n. .R.i.g.h.t...A.p.r.i.l...R.e.v.
\STRING\10\1033	3611E0	102	351FE0	1100530065006C006500630074006500640020002500640020006900740065006D00730005004D0061007200630068000900	..S.e.l.e.c.t.e.d. .%.d. .i.t.e.m.s...M.a.r.c.h...
\STRING\11\1033	3612E8	126	3520E8	0400480065006C00700009005700650064006E0065007300640061007900110043006C00690063006B00200074006F002000	..H.e.l.p...W.e.d.n.e.s.d.a.y...C.l.i.c.k. .t.o. .
\STRING\12\1033	361410	54	352210	0B0053006D0061006C006C002000490063006F006E00730007005400750065007300640061007900040046006C0069007000040042006F006C006400000000000000000000000000000000000000000000000000	..S.m.a.l.l. .I.c.o.n.s...T.u.e.s.d.a.y...F.l.i.p...B.o.l.d.........................
\RCDATA\4000\1033	485A0	C07	393A0	6080F0DCF7C8190B235FDD058E9493949895925494909199939A9C9198F090999057909E909D989F9699949A9C949990949B	......._.........T.............W................
\RCDATA\15000\1033	491A8	5133	39FA8	96FB96959792969E909090919090909090949B90919890909090909090909090959B9095959D9D9D99999E98979195989B94	..................................................
\RCDATA\15001\1033	4E2E0	9263	3F0E0	B70AB402B1BFB0B3B15BBB0B0BB9BBB3B5B7B2B802B5B9BEB9B6BCBD03B9B0B0BBB0B1BBBAB703B1B6B8BDB7B853B7BCB7B5	.........[...................................S....
\RCDATA\15002\1033	57548	9B53	48348	BDB8BCB30EBEB6B2B2BFB3B3B3B15CBEBABA570EBDB1B3B209BCB8B1B7BC09B2B5B90ABAB2B5B6BFBBB6B0BDB9B6B6B0BAB6	..............\...W...............................
\RCDATA\15003\1033	610A0	590E	51EA0	B7B1B203B7BAB550B6B0B153B8B5B8BCBCB7BCB1B4B7B7B2B9B4BEB0BA52BDB7B1B6B5B6B3BABABCB9B7B5B6B3B5B6B752B5	.......P...S.................R..................R.
\RCDATA\15004\1033	669B0	6C22	577B0	BDB006BFB0BBB6B8BFBAB9B0BDBBB9BBBEB7B7BBBEBCBCB5BBB8BBBABBB1BBB4B7B00DB1BEB055B7B7B005BDB9B8B8B0B4BB	......................................U...........
\RCDATA\15005\1033	6D5D8	ACD9	5E3D8	B6B6B2B8BC55B6B2B4B1BAB354BDB0B2B7B6B6B5B0BFB1BAB4BFB5B0BBBDB7BFB9B9BFB8B0B1B1B9BAB5B2B8BDB3B7BDBC5A	.....U......T....................................Z
\RCDATA\15006\1033	782B8	650A	690B8	99FF57589F96539A9AFF9B9C579F95579A96539BFD9894F49E989E999C9A9A939F9794969F9F9F939D9695949595989A9FFD	..WX..S.....W..W..S...............................
\RCDATA\15007\1033	7E7C8	5D88	6F5C8	A2A9A6A81DA11BA61AA5AEA5AFA7ADA5A2AFAE1EAEA5A8A6A6A8ACAFA6AEA4ACA7ABA8ABA4A4A3AFAFAFA2A7ACA6ABA5A155	.................................................U
\RCDATA\15008\1033	84550	65AE	75350	B7BCB455B6B0B5B3BFBDB2B70CB2B2B5B3B5B1BEBCB8B0BCBABBB9B55BB9B1BB05B8B8B4B3B5B7BDB8BCB7BABA04BB00B6B6	...U........................[.....................
\RCDATA\15009\1033	8AB00	5A19	7B900	B7B8B70CBFBD59BDB2BBB1B0B3B5BA56BEB6BCB7B1BFB8B904B9BDB202BA0001B7BDB4BAB403BF55BCBDB8B3B30DBDB2B0B0	......Y........V.......................U..........
\RCDATA\15010\1033	90520	5428	81320	9D99969E9A90939B9B919A97955394949B909397F79F959C9C999D99959C9B9E965C929255919998955C9E989F91919F969C	.............S...................\..U....\........
\RCDATA\15011\1033	95948	9D82	86748	B0B0B6B9B7B7BBB0B9BFB00AB8BFBAB05AB2BFB2B5B6BFBEB5B0BCB9B558BABAB5B8B6B7BBB7BDBDBCB5B2B2B4B7B85650BF	................Z............X.................VP.
\RCDATA\15012\1033	9F6D0	6573	904D0	B6B5B8B65AB3B5BA06BEB7B1BBB30EB95DBEBD0AB9BF0CB2B0B50DBEB1BCB7B4BEB1B9B4BAB3BAB9BDB3BFB5BEBDB3B85FBF	....Z...........]..............................._.
\RCDATA\15013\1033	A5C48	63A3	96A48	BBB3B0B6BFB6B8B10DBDB7B6BDB9B8BCB2BAB4B2B3B0B9BEBBBCB5B155BFB9B4B758B4B2B459B5B3B7B3B7B60FB6B7B0B8BD	............................U....X...Y............
\RCDATA\15014\1033	ABFF0	8EFD	9CDF0	9C989B9A59929F94989A92969F5294589C9699969CF19092F55990FA9A939990979E9EF698599F94949B5693959691949696	....Y........R.X.........Y...........Y....V.......
\RCDATA\15015\1033	B4EF0	6D68	A5CF0	B3B7B9BAB0BF51BEB6B0B5BBB1BBB8BCB20EB4B1B2BE5DBF5DBEB3B6B9B5B5B709B0BCB5BE56BC0F58BEBFBA57BCB8B5BAB4	......Q...............].]............V..X...W.....
\RCDATA\15016\1033	BBC58	7978	ACA58	96989C9996919C9A90919997909D92949094999B95959A929A949A939F9EF8929C9F9B989B989B969DF4979AFE98989292FB	..................................................
\RCDATA\15017\1033	C35D0	826F	B43D0	A3ACA6AEA55A52A3A4A2A5A8A317ADA7AEAAA7A9A9AFA0A6AAADA9A558AE5AAE50A8ADA4ACADAEACA5AFA1AAA51FA2A9ABAC	.....ZR.....................X.Z.P.................
\RCDATA\15018\1033	CB840	635C	BC640	949497979B97969498F19D999A95929F939F9097959AF99E939D979E9C969F909E9BF89A9A999491F692FE919B99969791F8	..................................................
\RCDATA\15019\1033	D1BA0	7F1D	C29A0	A3AFAAA3A5A01BACA919A4A2A6AFAEA3AEAEA6A2AEA1AFA350A8A7A3ADAFA2A0A1A3A3A7AA14A5A65AAAAFA3AE54A2ADA4AE	........................P...............Z....T....
\RCDATA\15020\1033	D9AC0	ACD8	CA8C0	BE04BBBCB2B1BBB0BC5754B851B4B6BEB3B9BBB8B7BABDB6B7BFB6B2B6B4B7BCBFB9BEB1B2B0B5BAB3B4B454BE5CBCB5B6BD	.........WT.Q..............................T.\....
\RCDATA\15021\1033	E4798	61CC	D5598	A2AEAAA0ADADA719AF5EA0A65CA2AD53AAA3AEA0AAA2A3A8A4AFAAAB52A0A4A5AE5FAFA6A0A3AFAF12A7A0A7AEADAAA8ABA8	...........\..S............R...._................
\RCDATA\15022\1033	EA968	9100	DB768	B2B10BBCB1B9BDB5BEBEBBB2B6B3BA54BBB4B8BDB5B5B9BDBCBEBC57BEB2BABABEB0BAB3B3B1BAB452B1B1BAB3B7BAB4BBB1	...............T...........W............R.........
\RCDATA\15023\1033	F3A68	753D	E4868	A71BAFACAAA2A6A3A8ABAFADAAA5ABADA4A8AAA2A5AEA1A2AEA5A3A4ACAAA5A6A552A7A7AAA1ACA8AFA9A8A4AFABA8A61DA7	.................................R................
\RCDATA\15024\1033	FAFA8	ABFD	EBDA8	939C9B9A9E96F090989399949492929791929C93979790949D9D99939C999A92989C9E9499919A9DFA9493959891959A985F	................................................._
\RCDATA\15025\1033	105BA8	88CE	F69A8	94979B9A91999B97909390949A9A919C90939B9C9F9F93909395F4959A94909C9A9C9397939D9A919C9E97569C9D98979393	...........................................V......
\RCDATA\15026\1033	10E478	9B70	FF278	5E969193989A9B9D949C95F399979051959E9B9F9C909C99FF9D9EFE9E9B9AF0F391959993909490979D969D9A94F39E9E97	..............Q..................................
\RCDATA\15027\1033	117FE8	83B3	108DE8	BC50BCB5B85AB0B9B7BCB0BFB6BFB4B9BDB9BAB4B9BC5CBFB3B654B1BABA03B7B501B7B4BDB3BBBAB2BBBDB6B3B1B1BCB2BC	.P...Z................\...T.......................
\RCDATA\15028\1033	1203A0	79CF	1111A0	ACA7A4A8ADACA3A618A21BADA052A6A4AAA2A6ABA1A0ABA4A916A5A6A7A9A1ABA4ADA9A7A3AFADA053AEACA7AAA3A9A1A8AD	.............R..........................S.........
\RCDATA\15029\1033	127D70	8501	118B70	939E9F5899F899999898935AFA91529490949F5E9D959DFA979C929F979691949490995AF9959F949D93F196969392FCF290	...X.......Z..R...................Z..............
\RCDATA\15030\1033	130278	92DD	121078	9092599D99939B9698989AFD9B9590905092969457979F9590929E9594965498915D929A969F98929E909D9D929894909F9B	..Y.............P...W.........T..]................
\RCDATA\15031\1033	139558	542F	12A358	989796959690909F979391999595F7979B91999D9B9F9AF99AF39E939095969F98FE9B949A9F989294FCF3939893519E9A9E	..............................................Q...
\RCDATA\15032\1033	13E988	A0D8	12F788	BEB3B905B5B1B8B0B3BFB7B8B5B8BBB2BEB6B5B8B4BCB0B3B6B6BB0DBDBBB7B4B5B4B9B8B7B4B8B7B7B8B3B7B8B2BAB2BEB9	..................................................
\RCDATA\15033\1033	148A60	8DEF	139860	A6A5A7AAA5A2A6A1A4AEA7A4AFAEA8A7A2ADAEAAAFA7A7A05317A8ACA8A8A3A0A858ACAFA9AEAB15A7ADAF1EA7A0A5A2ACA8	........................S........X................
\RCDATA\15034\1033	151850	AC3B	142650	9A98945A909F979C9D9D9A959C959E97999E9495909C9D959D9997F89B9E9C91949B9B96945A9C969D9690F59E979D99FF97	...Z.................................Z............
\RCDATA\15035\1033	15C490	7438	14D290	B5B7B5BAB903B4BAB6BFBFB7BCB2B7B5BDBABDB0BCB0B800B6B3B2B0B8B3B4BE01B1BDB9050CBCB6B8B1B9B6B9BDB301BAB5	..................................................
\RCDATA\15036\1033	1638C8	79A1	1546C8	A4A91FAA18ADADA514A4A5A7AF1BAAA7ACABA1A5AFAEAAA7A8ACAE17A7ADAA5FACAAA0A517A5ABAEAD11ABACA0AEABA3ADA9	..............................._..................
\RCDATA\15037\1033	16B270	5C4A	15C070	9B9A9A9B959797919B90919497909C9454959C9A9A9A96979B9B9F969A91999A959E919A95959B90959A9A949A9E9A905F95	................T..............................._.
\RCDATA\15038\1033	170EC0	9A56	161CC0	ABA1ABABACA5A3AEAFA4A4A2A71E1CAFA6A3A7A1A4AEA6A4A7A6A754A9A5AEA5A45FA8A5ABA3A1A4ABA6A2AFADA4AEA0A3A5	...........................T....._................
\RCDATA\15039\1033	17A918	8026	16B718	BCBDB3BAB3B4B7B9B3BEBBB1B8BC0AB6B2B6B1BBBBB6BEBBB6B8B709BEBC55B4BBBEB6BFB1B8B0BFB6BDB8BC53B2B55FBABC	..............................U.............S.._..
\RCDATA\15040\1033	182940	5007	173740	1DA0A7ACA2AEA0A9AE10A1A0A4A9AEA21AA4ACA21DA1A019AE59A0A8ADA3A4ADA2A4AC5F1D1DAFA2ABA1A4A2ACABABABAC11	.........................Y........._..............
\RCDATA\15041\1033	187948	8827	178748	A6AFA1ADA0A0A2A71CA0AEA5AAA4AAA0A9A2A8A8AEA8A8AFACA5ACA9A117A6ACA4A2A8A8A2A8ABABA2A0ADA2A85CA9AEA7A9	.............................................\....
\RCDATA\15042\1033	190170	6903	180F70	9794999E939A9AFE9E9099919799959393F99E9F989E969A9193989A9AF297979E9E90909D9A9399929E999B9F9C959E9F57	.................................................W
\RCDATA\15043\1033	196A78	6C15	187878	ABA7AEA5A5A2A3A7AAA01EA2A0A6AFA6A2ABA4A7A3ADA4ABA2A6A3AFA2A5A5AEA5AF5BA851ABA7ACA7A4A5AEA5ACAAACA7AE	..................................[.Q.............
\RCDATA\15044\1033	19D690	5441	18E490	9A949E979C9491909D9B9B93939595F1F054F3F79798929A95FF959796979D949F95909D9B929893909D579C9F9FF4969691	.................T........................W.......
\RCDATA\15045\1033	1A2AD8	6B70	1938D8	B6BAB804B20EB1B7B1BCB9BB0AB7B5B5B5BCBC02BEB3BAB3BEB1B8B7B0B9B5BDB5BEBFBCBCB2B8B0B9BDB1BCB7B9BFBAB0B2	..................................................
\RCDATA\15046\1033	1A9648	7B37	19A448	B5BDB0BD05B6B7B6B1B8B1B8B8B0B3B6B5B1BCBBB5B3BEB8BBB8B7B4BCB7B8BCBCBDB1B5B1BDB5B7B30DB0BFB1B6BE53BBB1	...............................................S..
\RCDATA\15047\1033	1B1180	7647	1A1F80	9C999E9E929455919A9E9F909A9A9B925D90919D959C949692959D9A909A9354919A94909A949C9593949E999E909596549A	......U.........]..............T................T.
\RCDATA\15048\1033	1B87C8	58ED	1A95C8	959D9D9F975197979699929696F9909F9A935F91919CFC9A9A90F59F96579595FA9F54999C9097959D55FB999F995295929D	.....Q............_..........W....T......U....R...
\RCDATA\15049\1033	1BE0B8	7F1B	1AEEB8	B9B4BDBBB6B1BFBBBFBBBCB7BEB4B5B0B7BBBDBDBBBCB8B8B7B2B25DB5B9B9B4B257B7B9B9BDB3B3BFB3B8BFB6BBBCB1BD5D	...........................].....W...............]
\RCDATA\15050\1033	1C5FD8	5B98	1B6DD8	A6AEA7A5AEA5AFAFADA0A0A7AAA2ACAAABA7A7ADA0AAA8ADA8AAA5A5ACAFA1A5ACA1AAA5ADA3A4A7A7A7AEA8AFAEA3AF14AE	..................................................
\RCDATA\15051\1033	1CBB70	A974	1BC970	B7BAB5BBB4BDBBB8B5BCBCBFBCB4B3B2B2B3BCB4B5B1BB535B57B6BFB8B5B5B8BFBEB8B157BCB5B2BBBEBAB3B7BFB9B707B4	.......................S[W..........W.............
\RCDATA\15052\1033	1D64E8	A223	1C72E8	909493979E91939A9B98599B9A919890969C959A979D9B939F939599909A9F9F9291949C9693999E9F90929490569E9A9B91	..........Y..................................V....
\RCDATA\15053\1033	1E0710	5D76	1D1510	A5A8A6A2A8ACA4AEACA2A4A2A753A4ADADA5A0AEAFA2A0ADAEA053A9A5A4A7A1ABA7ABADAAACACA1AAACA0AFA1A3A1ADAEAF	.............S............S.......................
\RCDATA\15054\1033	1E6488	A7F7	1D7288	96F7909F905798939898929C9E9D94909994989B959A9390989D98979F929C9B9D9B98FF9A929F9458F7979F9695949F9D96	.....W..................................X.........
\RCDATA\15055\1033	1F0C80	5A67	1E1A80	A6AB19ADA5A0AFABADA7A8A2AAA8A6A6AFA5A0A6A5A4ABA8A2A0A2A1A7AE1BA4A3A8ABA7ABA9A1A9A8A6A8A4A3ADA8AAA1AF	..................................................
\RCDATA\15056\1033	1F66E8	7AE1	1E74E8	AAA3A0A314A2A3A9ABAEA4AAA313A8A7A2A0A9A3AFA6AEA9ADA8AAAF12ABAAA0AB1CA1A918A7A9A0A8A1ACAEA71216A6AFA0	..................................................
\RCDATA\15057\1033	1FE1D0	85E2	1EEFD0	BFB10BB1BABABCB7B8B5B6B0B1B0B2B701BCB0BB5AB6B3B5B7BDB7B4B450BBB2BEBAB2B2B7B6BDB1BC0AB70AB1B3BABEB5BA	....................Z........P....................
\RCDATA\15058\1033	2067B8	9E3F	1F75B8	91945D91939E9B9D96965D9E96989B92949C50909D9892959A959F9496FC97925E9D9099949AFC97999AF6F89A9E96939098	..].......].......P..............................
\RCDATA\15059\1033	2105F8	7C01	2013F8	9B919D909897FA559398939B9CFD99FD9B91FA909B9D9692999E959597939598909396F6939A9794959A9A92999F909C5795	.......U........................................W.
\RCDATA\15060\1033	218200	8782	209000	A7A7AAACA1A1A3ACAE51A3A61EA31151AAA6A1A7A4A0A5A3A0AF14A5A4A5AC14ABAEA9A5A3AAA0A51C1EA613A4AEAAA6A2AE	.........Q.....Q..................................
\RCDATA\15061\1033	220988	98D4	211788	A41BA0ACA8A7AAA5AAACA216AEA9A8A7A0A7A4A9AEA4A71AA6A8ABA7A5A5A3A3A9A5AAA3AAA2AF58A6A8A1A7AFA3A65D52A3	.......................................X.......]R.
\RCDATA\15062\1033	22A260	5696	21B060	9598989A5893959D909B93929A95F394F8F597F89C90F99A94F19F91FB979890979D9899959D929E97919F9C91939E519493	....X..........................................Q..
\RCDATA\15063\1033	22F8F8	A2FD	2206F8	BC010FBAB65E04BD02BEB2B0B4BDBBB9BBB7BDB8BA05BFBCBEB5B10CB6BDB003BFBE5ABBB2B25BBDB6BAB25FBABE0EB305B6	.................................Z...[...._......
\RCDATA\15064\1033	239BF8	9E0B	22A9F8	B0B9B2BABABE0DBFB1B9B7BBB1B0B3B6B7B5B2B8B7B1BEBBBCB6B651B007B80C08B2B9BCBDB4B7B6BCBA0EB3B2B4B9BE0B54	...........................Q.....................T
\RCDATA\15065\1033	243A08	8C1B	234808	B5B3B4BABBBEB3BBB6BBBEB5BBBDBCB5B7B6BFBF03BEBFB9B2B4BDB9BEB7BFBFB6B2B4B707B6B6BFB7B1BDB3BAB1BCB2BABC	..................................................
\RCDATA\15066\1033	24C628	AEB2	23D428	BDB9B3B1B1B0B0B3BFB5B8BBB4B6B5B5BEB5BFBABABFB5B8BCB3B9BFBBB1B7BCBEBBB0B2B5B3B2BC0DB6B8BDB2B4BBBDB403	..................................................
\RCDATA\15067\1033	2574E0	77B2	2482E0	B305B2B8B5BEB0BFBB06BEBCB8BCBFBA04B9B0B1BEBBBFB8B2B4BFBDB0B1B9BCB2B3BCBCB00BB4BA07BDBFBF0BB5B5BEB0B9	..................................................
\RCDATA\15068\1033	25EC98	7631	24FA98	BCBBBDB8B5B7B4BEBCB0B1B85AB953B3BDB4BFBDBEBFB2BCB8B1BCB4B9BF510CB9B8BCBAB6B5BEBAB1B5BD51B2BCB302B555	............Z.S...............Q............Q.....U
\RCDATA\15069\1033	2662D0	AAC4	2570D0	5F9E999195989F9597985C97939D9996979095599A9B9B9B9D989A539A94919E9B969A9A949595FA9957959A979E9998949F	_.........\........Y.......S.............W........
\RCDATA\15070\1033	270D98	8BCC	261B98	9A915F99949E9390F3969F919B999BFF9F9B959F93999B52F490919D979199949B9891FE969F9496929B9496F9FF9E959299	.._....................R..........................
\RCDATA\15071\1033	279968	8733	26A768	B9B8BB00BDB0B2B4B4B7B3B8B3BBBFB8B5BAB400BABD5ABAB7BEB6B8BE00B759B9B656BAB5B759B5BAB2B8B6BBB6BFB6B853	......................Z........Y..V...Y..........S
\RCDATA\15072\1033	2820A0	A0D2	272EA0	AFADA6A6A1A4A2A35FAAA3ACA2A4A4A9A4A05BA2AFAEAEA2A55D5FAAAAA9A0AEA5A4AAA6AEA1A1A5A1A7AFAE19A0ADA4A3A3	........_.........[......]_.......................
\RCDATA\15073\1033	28C178	7561	27CF78	B3B3B8BFB3B3B3BEB8B7B7B0BF01B1BBBBB4B3B8BEB7BCB2BAB4B9B2B2BFB2BABDB2B7BFBEBEB7BAB8B5BEB8B2B1B859B0B7	...............................................Y..
\RCDATA\15074\1033	2936E0	59A9	2844E0	AFA9A1A7A9ACA8A5A2A7A7ABA9A2A7AFA2A0A9A8ABA7A4A3ABA1A3A21CABADA2ACA5A5A8AEA6A4ABA1A4A1A9ACADA4A2ADAD	..................................................
\RCDATA\15075\1033	299090	8962	289E90	B9BEBFB0BBBCB8B4B5B9B1B5B9B0B5BEB2B1B7BFB9BEB4B1BCB7BCB3BA54B3BB53B400B2B954BDB5B2B10AB80AB6B9B0B2B2	.............................T..S....T............
\RCDATA\15076\1033	2A19F8	AB61	2927F8	909092949E9F9692909E9D9E92979B919A9B989D90999B9B989095F497969F979795919D9391969B95569093969CFE9D9C99	.........................................V........
\RCDATA\15077\1033	2AC560	9AC6	29D360	95549E9190989698985D929690FA9B97589B93949E9599FD96F2919B94959893979290949191999C909690969C95969C5F99	.T.......]......X..............................._.
\RCDATA\15078\1033	2B6028	665D	2A6E28	B8B8BAB45DBAB000B4B5BFB0BDB0B4B3B0B2B0BAB6B2BABDB4B7BEBAB2B40BBABEB5BDB1B0B9BDB6B2BEB101B2B2B107B4B6	....].............................................
\RCDATA\15079\1033	2BC688	7CDB	2AD488	A0A6ADACA9AA1BA3A5ACA31CA456A316AAA51050ABAAA9A5A8A5A7A2A4A0AAA7ADA4A3A9A3A6A35EAEA9AFA5AFA2A2A4A4A1	.............V.....P.............................
\RCDATA\15080\1033	2C4368	6DB6	2B5168	AAA8A5A8AFA2A2AEAFAEA7AC54AEAEACA8AAA0A8A2A5AEA2A9A7A8AEA2ABA9ADA8AD14AEA652A6A0ADA7A1A6A2A653A8A3A3	............T........................R........S...
\RCDATA\15081\1033	2CB120	5704	2BBF20	979E99929B9A999D919C969391979C9A9497929D9D9F9A949E93925A5E90989C9B92929E969F9B99969C9895999D90919A98	...........................Z.....................
\RCDATA\15082\1033	2D0828	9ACC	2C1628	B3B3B6B3BBB9B9BAB7B8B7BDBDBD57B0BBBBBBB1BBBAB8BDB0BC51B3BBB1BBBEB6B2B3B3BAB3BEBC52BCBBB4BABFB8B4B3B9	..............W...........Q.............R.........
\RCDATA\15083\1033	2DA2F8	8E9F	2CB0F8	909D9C999F9B9999979E969C9B51999A9B9D96959A9A9495949F919C95949892939890929CFE95919F93999D9D959C939091	.............Q....................................
\RCDATA\15084\1033	2E3198	5A71	2D3F98	9E93549C5E95949F9D9A9398959D5F9590979C93519697959895999E91FB989A919A945E9FF05A92969E979F52919F939291	..T.........._.....Q................Z.....R.....
\RCDATA\15085\1033	2E8C10	5696	2D9A10	BFB7BBB1B2BEB6B7B8B0BDB0BCBEBEBEB4B500B9BB560FB8B3BD0AB9B8B5B7B5BDB7B006B2BBBEB5BCB9BBB9B10BB0BABCBD	.....................V............................
\RCDATA\15086\1033	2EE2A8	5C76	2DF0A8	A0A1ADA755ABA8A5A0ACA15CA4AAABA9AE17ACAEAA5BA01FAAAFABA9ABABA11316AEACA8AAA9A91CA8A7A4A4A3A7AAAFA2AC	....U......\.........[............................
\RCDATA\15087\1033	2F3F20	6E56	2E4D20	B3B9B408B2B25750B5BCB2BCBAB6B2BFBC0DBD00BDBFB8B3B5B9BBBD0BB0B402BBBDB8BFBFBAB0B8BCB2B40FB8BCBDBABFB7	......WP..........................................
\RCDATA\15088\1033	2FAD78	98F2	2EBB78	BEBBB3B5B6BBB1B2B3B405B7B4BEB4B109BF00BCB9BEBBB4BCB906B20805B2B8B4BEB6BCBFB405B1BBBFBEBDBABB0C0F0DBC	..................................................
\RCDATA\15089\1033	304670	87B3	2F5470	A3ADA818A7A3A5A1ACA4A8A6A1A3AA57AEA7A7A4ADAEAFA9A11BA0A510ACABA5AA11A4AEA619A9A6A11CABA4ABA7A2ACA259	...............W.................................Y
\RCDATA\15090\1033	30CE28	6BFE	2FDC28	909894929A9B9A909490929192919B9C909F9C97979B955690919B919B93F893579793945C929C9D9E9F9C9D9D949C959A5E	.......................V........W...\............
\RCDATA\15091\1033	313A28	8448	304828	A7A7AAAFA6A6A0A1AEA815A3A1AFACA214AEA0AFAEA8A2AAA6A2A5A1A5A4AC1BA7AD14AFAFA6A2ACA8A9ACA5A6A8A1A5A0AD	..................................................
\RCDATA\15092\1033	31BE70	72E1	30CC70	A7A913ACA353A0AAA1A9A1ADA7A2A9A4ABA6A5AA53AB115F11A3A2ACA3A7AAA9ACA7AFA0AF5CA8ACAAACA3A9A3ADA9A1A8A5	.....S..............S.._.............\............
\RCDATA\15093\1033	323158	5D85	313F58	0FB5BC00BCB5B5B1B6B8B4B2BDB4B80DB6BBB3B1B8BB52BE53B9B2BBBAB7B6B5BA09BCBFB7BFB8B705B6B1B7BF05BFBFBFBF	......................R.S.........................
\RCDATA\15094\1033	328EE0	81C9	319CE0	9A9053959E909895985E9C9F92F5949A9B949D9194989F969495FE9D9F9C909E959AFD98FC9A9C919C949DF89B979C9D99F4	..S..............................................
\RCDATA\15095\1033	3310B0	816A	321EB0	A2A3ABA4AB1BA3AEABA0A8A8A5ADA4A0ABA3A6A8A1AAA5A6ABA0A3AFA4A6A2AFA2ABADA7A7AFA7A2A3ABAD5BA7A1A0A0A5A5	...........................................[......
\RCDATA\15096\1033	339220	A00B	32A020	92F7919B96FD9A949F979C9997989B919C999396969E9F90949C90929B9495909AF29C9F94FE9B989B919C9897979D575890	...............................................WX.
\RCDATA\15097\1033	343230	8208	334030	A4A8AEACA6A4A7AAA7A7AAA3A5ACAFA4A3A6A4A8A6ADA0A956A518A5AEA6AEACAFA9A6A5A5ADADA5AEA9A0ABA7A3AAA2AEAE	........................V.........................
\RCDATA\15098\1033	34B438	909C	33C238	999590FF989B939799969E97909A9990939E92F4939995F89B9D9394959D9E96979497909A97999F5E9A9197925B9C919696	............................................[....
\RCDATA\15099\1033	3544D8	AE5A	3452D8	A1ABA3A1A6A9A3A5AFAAA3AC19A2A5A7A1A8A7ADA4AAA1A3ABAAA85BAEACA8A1ABA317AFA6AAA85858A3A7ACAFAD10A1AFAA	...........................[...........XX.........
\GROUP_ICON\1\1033	360EE8	22	351CE8	00000100020010100000010020006804000001002020000001002000A81000000200	............ .h..... .... .......
\VERSION\1\1033	35F338	31C	350138	1C0334000000560053005F00560045005200530049004F004E005F0049004E0046004F0000000000BD04EFFE000001006100	..4...V.S._.V.E.R.S.I.O.N._.I.N.F.O.............a.
\24\1\1033	35F658	37F	350458	3C3F786D6C2076657273696F6E3D22312E302220656E636F64696E673D227574662D38223F3E0D0A3C617373656D626C7920	<?xml version="1.0" encoding="utf-8"?>..<assembly

Intelligent String

• mscoree.dll
• WindowsProject975_5BCFB9F5.pdb
• .bss
• KERNEL32.dll
• ADVAPI32.dll
• travelplanner.dll

Flow Anomalies

Offset	FlowVA	Section	Description
32F4	N/A	.text$x	CALL QWORD PTR [RIP+0x3DE9E]
3367	N/A	.text$x	CALL QWORD PTR [RIP+0x250DB]
35E6	N/A	.text$x	CALL QWORD PTR [RIP+0x3DBC4]
4E69	N/A	.text$x	CALL QWORD PTR [RIP+0x23671]
4EBE	N/A	.text$x	CALL QWORD PTR [RIP+0x23614]
5A81	N/A	.text$x	CALL QWORD PTR [RIP+0x3C111]
5B22	N/A	.text$x	CALL QWORD PTR [RIP+0x229B8]
5BF8	N/A	.text$x	CALL QWORD PTR [RIP+0x3B52A]
5C2F	N/A	.text$x	CALL QWORD PTR [RIP+0x3B4F3]
5C66	N/A	.text$x	CALL QWORD PTR [RIP+0x3B4BC]
5D21	N/A	.text$x	CALL QWORD PTR [RIP+0x3B401]
5D78	N/A	.text$x	CALL QWORD PTR [RIP+0x22762]
5D7E	N/A	.text$x	CALL QWORD PTR [RIP+0x226C4]
5DCD	N/A	.text$x	CALL QWORD PTR [RIP+0x22675]
5F97	N/A	.text$x	CALL QWORD PTR [RIP+0x224BB]
6251	N/A	.text$x	CALL QWORD PTR [RIP+0x22201]
62AE	N/A	.text$x	CALL QWORD PTR [RIP+0x221A4]
64AF	N/A	.text$x	CALL QWORD PTR [RIP+0x21FA3]
662B	N/A	.text$x	CALL QWORD PTR [RIP+0x21E27]
6880	N/A	.text$x	CALL QWORD PTR [RIP+0x21BD2]
69C0	N/A	.text$x	CALL QWORD PTR [RIP+0x21A92]
6BD4	N/A	.text$x	CALL QWORD PTR [RIP+0x2187E]
6EBF	N/A	.text$x	CALL QWORD PTR [RIP+0x2161B]
6EE9	N/A	.text$x	CALL QWORD PTR [RIP+0x215F1]
6F41	N/A	.text$x	CALL QWORD PTR [RIP+0x21599]
6F96	N/A	.text$x	CALL QWORD PTR [RIP+0x2153C]
72E2	N/A	.text$x	CALL QWORD PTR [RIP+0x39EA0]
7649	N/A	.text$x	CALL QWORD PTR [RIP+0x20E01]
7695	N/A	.text$x	CALL QWORD PTR [RIP+0x20E0D]
76A0	N/A	.text$x	CALL QWORD PTR [RIP+0x20DF2]
76D4	N/A	.text$x	CALL QWORD PTR [RIP+0x20D96]
76FB	N/A	.text$x	CALL QWORD PTR [RIP+0x20D6F]
772A	N/A	.text$x	CALL QWORD PTR [RIP+0x20D40]
7759	N/A	.text$x	CALL QWORD PTR [RIP+0x20D11]
7796	N/A	.text$x	CALL QWORD PTR [RIP+0x20CD4]
77D3	N/A	.text$x	CALL QWORD PTR [RIP+0x20C97]
7801	N/A	.text$x	CALL QWORD PTR [RIP+0x20C69]
782F	N/A	.text$x	CALL QWORD PTR [RIP+0x20C3B]
9508	N/A	.text$x	CALL QWORD PTR [RIP+0x37C9A]
95D1	N/A	.text$x	CALL QWORD PTR [RIP+0x37CF1]
A66C	N/A	.text$x	CALL QWORD PTR [RIP+0x36B16]
B0C6	N/A	.text$x	CALL QWORD PTR [RIP+0x1D3C4]
B0DE	N/A	.text$x	CALL QWORD PTR [RIP+0x1D404]
B0F6	N/A	.text$x	CALL QWORD PTR [RIP+0x1D38C]
B105	N/A	.text$x	CALL QWORD PTR [RIP+0x1D375]
B729	N/A	.text$x	CALL QWORD PTR [RIP+0x35A71]
B7C2	N/A	.text$x	CALL QWORD PTR [RIP+0x359E8]
BA73	N/A	.text$x	CALL QWORD PTR [RIP+0x1CA67]
BB25	N/A	.text$x	CALL QWORD PTR [RIP+0x1C92D]
C508	N/A	.text$x	CALL QWORD PTR [RIP+0x1BF4A]
CDBE	N/A	.text$x	CALL QWORD PTR [RIP+0x1B694]
CF06	N/A	.text$x	CALL QWORD PTR [RIP+0x1B53C]
D040	N/A	.text$x	CALL QWORD PTR [RIP+0x341F2]
D07D	N/A	.text$x	CALL QWORD PTR [RIP+0x341B5]
D0CA	N/A	.text$x	CALL QWORD PTR [RIP+0x1B3A8]
D211	N/A	.text$x	CALL QWORD PTR [RIP+0x34021]
D251	N/A	.text$x	CALL QWORD PTR [RIP+0x33FE1]
D275	N/A	.text$x	CALL QWORD PTR [RIP+0x1B265]
D2B8	N/A	.text$x	CALL QWORD PTR [RIP+0x33F7A]
D2CA	N/A	.text$x	CALL QWORD PTR [RIP+0x1B178]
D2EE	N/A	.text$x	CALL QWORD PTR [RIP+0x1B184]
D40A	N/A	.text$x	CALL QWORD PTR [RIP+0x33E28]
D444	N/A	.text$x	CALL QWORD PTR [RIP+0x33DEE]
D485	N/A	.text$x	CALL QWORD PTR [RIP+0x33DAD]
D48F	N/A	.text$x	CALL QWORD PTR [RIP+0x1AFB3]
D4E4	N/A	.text$x	CALL QWORD PTR [RIP+0x33D4E]
D4EE	N/A	.text$x	CALL QWORD PTR [RIP+0x1AF54]
DC99	N/A	.text$x	CALL QWORD PTR [RIP+0x1A7B9]
EB07	N/A	.text$x	CALL QWORD PTR [RIP+0x3283B]
EB14	N/A	.text$x	CALL QWORD PTR [RIP+0x32846]
EBE4	N/A	.text$x	CALL QWORD PTR [RIP+0x32756]
F03B	N/A	.text$x	CALL QWORD PTR [RIP+0x19417]
F333	N/A	.text$x	CALL QWORD PTR [RIP+0x1911F]
F3C7	N/A	.text$x	CALL QWORD PTR [RIP+0x1908B]
F593	N/A	.text$x	CALL QWORD PTR [RIP+0x18EBF]
F77E	N/A	.text$x	CALL QWORD PTR [RIP+0x18CD4]
F859	N/A	.text$x	CALL QWORD PTR [RIP+0x18C81]
F8BC	N/A	.text$x	CALL QWORD PTR [RIP+0x18C1E]
F921	N/A	.text$x	CALL QWORD PTR [RIP+0x18B31]
102A5	N/A	.text$x	CALL QWORD PTR [RIP+0x30EF5]
10364	N/A	.text$x	CALL QWORD PTR [RIP+0x30E46]
106DD	N/A	.text$x	CALL QWORD PTR [RIP+0x17D65]
108F0	N/A	.text$x	CALL QWORD PTR [RIP+0x17B52]
1097B	N/A	.text$x	CALL QWORD PTR [RIP+0x17AF7]
10B30	N/A	.text$x	CALL QWORD PTR [RIP+0x179AA]
10B5F	N/A	.text$x	CALL QWORD PTR [RIP+0x178E3]
10C3F	N/A	.text$x	CALL QWORD PTR [RIP+0x305F3]
10C9A	N/A	.text$x	CALL QWORD PTR [RIP+0x304F8]
10DAD	N/A	.text$x	CALL QWORD PTR [RIP+0x303ED]
10E15	N/A	.text$x	CALL QWORD PTR [RIP+0x3041D]
10E52	N/A	.text$x	CALL QWORD PTR [RIP+0x175F0]
1111F	N/A	.text$x	CALL QWORD PTR [RIP+0x30113]
11209	N/A	.text$x	CALL QWORD PTR [RIP+0x17259]
1122A	N/A	.text$x	CALL QWORD PTR [RIP+0x17260]
11242	N/A	.text$x	CALL QWORD PTR [RIP+0x172A0]
11251	N/A	.text$x	CALL QWORD PTR [RIP+0x17231]
1125C	N/A	.text$x	CALL QWORD PTR [RIP+0x1721E]
13BF8	N/A	.text$x	CALL QWORD PTR [RIP+0x14862]
13C0B	N/A	.text$x	CALL QWORD PTR [RIP+0x14857]
13C18	N/A	.text$x	CALL QWORD PTR [RIP+0x14802]
39C38	N/A	.rsrc	Injected Junk Code \| HitsBL=98/200 - UniqueHits=15 - Ratio=0,49
42298	N/A	.rsrc	Injected Junk Code \| HitsBL=95/200 - UniqueHits=15 - Ratio=0,48
429A0	N/A	.rsrc	Injected Junk Code \| HitsBL=104/200 - UniqueHits=15 - Ratio=0,52
42A68	N/A	.rsrc	Injected Junk Code \| HitsBL=99/200 - UniqueHits=15 - Ratio=0,50
42B30	N/A	.rsrc	Injected Junk Code \| HitsBL=96/200 - UniqueHits=15 - Ratio=0,48
42BF8	N/A	.rsrc	Injected Junk Code \| HitsBL=104/200 - UniqueHits=15 - Ratio=0,52
42CC0	N/A	.rsrc	Injected Junk Code \| HitsBL=95/200 - UniqueHits=15 - Ratio=0,48
42D88	N/A	.rsrc	Injected Junk Code \| HitsBL=100/200 - UniqueHits=15 - Ratio=0,50
43B98	N/A	.rsrc	Injected Junk Code \| HitsBL=103/200 - UniqueHits=15 - Ratio=0,52
43D28	N/A	.rsrc	Injected Junk Code \| HitsBL=104/200 - UniqueHits=15 - Ratio=0,52
44C00	N/A	.rsrc	Injected Junk Code \| HitsBL=100/200 - UniqueHits=15 - Ratio=0,50
45178	N/A	.rsrc	Injected Junk Code \| HitsBL=97/200 - UniqueHits=15 - Ratio=0,49
45240	N/A	.rsrc	Injected Junk Code \| HitsBL=99/200 - UniqueHits=15 - Ratio=0,50
45AD8	N/A	.rsrc	Injected Junk Code \| HitsBL=100/200 - UniqueHits=15 - Ratio=0,50
45BA0	N/A	.rsrc	Injected Junk Code \| HitsBL=106/200 - UniqueHits=15 - Ratio=0,53
45D30	N/A	.rsrc	Injected Junk Code \| HitsBL=115/200 - UniqueHits=15 - Ratio=0,58
45EC0	N/A	.rsrc	Injected Junk Code \| HitsBL=97/200 - UniqueHits=15 - Ratio=0,49
4CE78	N/A	.rsrc	Injected Junk Code \| HitsBL=98/200 - UniqueHits=15 - Ratio=0,49
5A618	N/A	.rsrc	Injected Junk Code \| HitsBL=100/200 - UniqueHits=15 - Ratio=0,50
5D2A0	N/A	.rsrc	Injected Junk Code \| HitsBL=95/200 - UniqueHits=15 - Ratio=0,48
5D750	N/A	.rsrc	Injected Junk Code \| HitsBL=99/200 - UniqueHits=15 - Ratio=0,50
676B0	N/A	.rsrc	Injected Junk Code \| HitsBL=95/200 - UniqueHits=15 - Ratio=0,48
687E0	N/A	.rsrc	Injected Junk Code \| HitsBL=102/200 - UniqueHits=15 - Ratio=0,51
695F0	N/A	.rsrc	Injected Junk Code \| HitsBL=104/200 - UniqueHits=15 - Ratio=0,52
76048	N/A	.rsrc	Injected Junk Code \| HitsBL=101/200 - UniqueHits=15 - Ratio=0,51
77178	N/A	.rsrc	Injected Junk Code \| HitsBL=102/200 - UniqueHits=15 - Ratio=0,51
776F0	N/A	.rsrc	Injected Junk Code \| HitsBL=97/200 - UniqueHits=15 - Ratio=0,49
77948	N/A	.rsrc	Injected Junk Code \| HitsBL=101/200 - UniqueHits=15 - Ratio=0,51
77DF8	N/A	.rsrc	Injected Junk Code \| HitsBL=102/200 - UniqueHits=15 - Ratio=0,51
78500	N/A	.rsrc	Injected Junk Code \| HitsBL=105/200 - UniqueHits=15 - Ratio=0,53
785C8	N/A	.rsrc	Injected Junk Code \| HitsBL=101/200 - UniqueHits=15 - Ratio=0,51
79E00	N/A	.rsrc	Injected Junk Code \| HitsBL=104/200 - UniqueHits=15 - Ratio=0,52
81D58	N/A	.rsrc	Injected Junk Code \| HitsBL=100/200 - UniqueHits=15 - Ratio=0,50
8B038	N/A	.rsrc	Injected Junk Code \| HitsBL=96/200 - UniqueHits=15 - Ratio=0,48
9F150	N/A	.rsrc	Injected Junk Code \| HitsBL=96/200 - UniqueHits=15 - Ratio=0,48
9F790	N/A	.rsrc	Injected Junk Code \| HitsBL=97/200 - UniqueHits=15 - Ratio=0,49
9FF60	N/A	.rsrc	Injected Junk Code \| HitsBL=102/200 - UniqueHits=15 - Ratio=0,51
A1860	N/A	.rsrc	Injected Junk Code \| HitsBL=101/200 - UniqueHits=15 - Ratio=0,51
A6BF8	N/A	.rsrc	Injected Junk Code \| HitsBL=104/200 - UniqueHits=15 - Ratio=0,52
A8368	N/A	.rsrc	Injected Junk Code \| HitsBL=111/200 - UniqueHits=15 - Ratio=0,56
A8FE8	N/A	.rsrc	Injected Junk Code \| HitsBL=99/200 - UniqueHits=15 - Ratio=0,50
A9498	N/A	.rsrc	Injected Junk Code \| HitsBL=106/200 - UniqueHits=15 - Ratio=0,53
AA370	N/A	.rsrc	Injected Junk Code \| HitsBL=97/200 - UniqueHits=15 - Ratio=0,49
AA438	N/A	.rsrc	Injected Junk Code \| HitsBL=97/200 - UniqueHits=15 - Ratio=0,49
AA8E8	N/A	.rsrc	Injected Junk Code \| HitsBL=105/200 - UniqueHits=15 - Ratio=0,53
ABBA8	N/A	.rsrc	Injected Junk Code \| HitsBL=95/200 - UniqueHits=15 - Ratio=0,48
ACFF8	N/A	.rsrc	Injected Junk Code \| HitsBL=95/200 - UniqueHits=15 - Ratio=0,48
ADE08	N/A	.rsrc	Injected Junk Code \| HitsBL=100/200 - UniqueHits=15 - Ratio=0,50
BA220	N/A	.rsrc	Injected Junk Code \| HitsBL=106/200 - UniqueHits=15 - Ratio=0,53
BA2E8	N/A	.rsrc	Injected Junk Code \| HitsBL=97/200 - UniqueHits=15 - Ratio=0,49
BA9F0	N/A	.rsrc	Injected Junk Code \| HitsBL=100/200 - UniqueHits=15 - Ratio=0,50
BAD10	N/A	.rsrc	Injected Junk Code \| HitsBL=105/200 - UniqueHits=15 - Ratio=0,53
BB990	N/A	.rsrc	Injected Junk Code \| HitsBL=96/200 - UniqueHits=15 - Ratio=0,48
BBA58	N/A	.rsrc	Injected Junk Code \| HitsBL=117/200 - UniqueHits=15 - Ratio=0,59
BBB20	N/A	.rsrc	Injected Junk Code \| HitsBL=99/200 - UniqueHits=15 - Ratio=0,50
BBBE8	N/A	.rsrc	Injected Junk Code \| HitsBL=110/200 - UniqueHits=15 - Ratio=0,55
BBCB0	N/A	.rsrc	Injected Junk Code \| HitsBL=109/200 - UniqueHits=15 - Ratio=0,55
BC160	N/A	.rsrc	Injected Junk Code \| HitsBL=100/200 - UniqueHits=15 - Ratio=0,50
BC2F0	N/A	.rsrc	Injected Junk Code \| HitsBL=99/200 - UniqueHits=15 - Ratio=0,50
BD038	N/A	.rsrc	Injected Junk Code \| HitsBL=101/200 - UniqueHits=15 - Ratio=0,51
BD358	N/A	.rsrc	Injected Junk Code \| HitsBL=96/200 - UniqueHits=15 - Ratio=0,48
BDF10	N/A	.rsrc	Injected Junk Code \| HitsBL=97/200 - UniqueHits=15 - Ratio=0,49
BF298	N/A	.rsrc	Injected Junk Code \| HitsBL=102/200 - UniqueHits=15 - Ratio=0,51
CE018	N/A	.rsrc	Injected Junk Code \| HitsBL=97/200 - UniqueHits=15 - Ratio=0,49
CEB08	N/A	.rsrc	Injected Junk Code \| HitsBL=96/200 - UniqueHits=15 - Ratio=0,48
CF9E0	N/A	.rsrc	Injected Junk Code \| HitsBL=96/200 - UniqueHits=15 - Ratio=0,48
D08B8	N/A	.rsrc	Injected Junk Code \| HitsBL=101/200 - UniqueHits=15 - Ratio=0,51
D0EF8	N/A	.rsrc	Injected Junk Code \| HitsBL=105/200 - UniqueHits=15 - Ratio=0,53
D12E0	N/A	.rsrc	Injected Junk Code \| HitsBL=108/200 - UniqueHits=15 - Ratio=0,54
D16C8	N/A	.rsrc	Injected Junk Code \| HitsBL=96/200 - UniqueHits=15 - Ratio=0,48
D1790	N/A	.rsrc	Injected Junk Code \| HitsBL=112/200 - UniqueHits=15 - Ratio=0,56
D1858	N/A	.rsrc	Injected Junk Code \| HitsBL=100/200 - UniqueHits=15 - Ratio=0,50
D1920	N/A	.rsrc	Injected Junk Code \| HitsBL=96/200 - UniqueHits=15 - Ratio=0,48
D1D08	N/A	.rsrc	Injected Junk Code \| HitsBL=97/200 - UniqueHits=15 - Ratio=0,49
FE3F8	N/A	.rsrc	Injected Junk Code \| HitsBL=99/200 - UniqueHits=15 - Ratio=0,50
FE650	N/A	.rsrc	Injected Junk Code \| HitsBL=95/200 - UniqueHits=15 - Ratio=0,48
FEC90	N/A	.rsrc	Injected Junk Code \| HitsBL=95/200 - UniqueHits=15 - Ratio=0,48
FEE20	N/A	.rsrc	Injected Junk Code \| HitsBL=103/200 - UniqueHits=15 - Ratio=0,52
FF5F0	N/A	.rsrc	Injected Junk Code \| HitsBL=100/200 - UniqueHits=15 - Ratio=0,50
1001A8	N/A	.rsrc	Injected Junk Code \| HitsBL=95/200 - UniqueHits=15 - Ratio=0,48
101148	N/A	.rsrc	Injected Junk Code \| HitsBL=111/200 - UniqueHits=15 - Ratio=0,56
1012D8	N/A	.rsrc	Injected Junk Code \| HitsBL=100/200 - UniqueHits=15 - Ratio=0,50
101468	N/A	.rsrc	Injected Junk Code \| HitsBL=95/200 - UniqueHits=15 - Ratio=0,48
116B60	N/A	.rsrc	Injected Junk Code \| HitsBL=97/200 - UniqueHits=15 - Ratio=0,49
118DC0	N/A	.rsrc	Injected Junk Code \| HitsBL=104/200 - UniqueHits=15 - Ratio=0,52
122168	N/A	.rsrc	Injected Junk Code \| HitsBL=96/200 - UniqueHits=15 - Ratio=0,48
122A00	N/A	.rsrc	Injected Junk Code \| HitsBL=107/200 - UniqueHits=15 - Ratio=0,54
122EB0	N/A	.rsrc	Injected Junk Code \| HitsBL=95/200 - UniqueHits=15 - Ratio=0,48
123E50	N/A	.rsrc	Injected Junk Code \| HitsBL=100/200 - UniqueHits=15 - Ratio=0,50
126498	N/A	.rsrc	Injected Junk Code \| HitsBL=96/200 - UniqueHits=15 - Ratio=0,48
12A4A8	N/A	.rsrc	Injected Junk Code \| HitsBL=105/200 - UniqueHits=15 - Ratio=0,53
12B448	N/A	.rsrc	Injected Junk Code \| HitsBL=97/200 - UniqueHits=15 - Ratio=0,49
12B510	N/A	.rsrc	Injected Junk Code \| HitsBL=97/200 - UniqueHits=15 - Ratio=0,49
12C4B0	N/A	.rsrc	Injected Junk Code \| HitsBL=98/200 - UniqueHits=15 - Ratio=0,49
12CAF0	N/A	.rsrc	Injected Junk Code \| HitsBL=99/200 - UniqueHits=15 - Ratio=0,50
12CD48	N/A	.rsrc	Injected Junk Code \| HitsBL=100/200 - UniqueHits=15 - Ratio=0,50
12CE10	N/A	.rsrc	Injected Junk Code \| HitsBL=101/200 - UniqueHits=15 - Ratio=0,51
12D1F8	N/A	.rsrc	Injected Junk Code \| HitsBL=98/200 - UniqueHits=15 - Ratio=0,49
12DC20	N/A	.rsrc	Injected Junk Code \| HitsBL=101/200 - UniqueHits=15 - Ratio=0,51
12DE78	N/A	.rsrc	Injected Junk Code \| HitsBL=98/200 - UniqueHits=15 - Ratio=0,49
1422B0	N/A	.rsrc	Injected Junk Code \| HitsBL=100/200 - UniqueHits=15 - Ratio=0,50
142698	N/A	.rsrc	Injected Junk Code \| HitsBL=95/200 - UniqueHits=15 - Ratio=0,48
1450C8	N/A	.rsrc	Injected Junk Code \| HitsBL=99/200 - UniqueHits=15 - Ratio=0,50
17A458	N/A	.rsrc	Injected Junk Code \| HitsBL=96/200 - UniqueHits=15 - Ratio=0,48
17A520	N/A	.rsrc	Injected Junk Code \| HitsBL=99/200 - UniqueHits=15 - Ratio=0,50
17B970	N/A	.rsrc	Injected Junk Code \| HitsBL=101/200 - UniqueHits=15 - Ratio=0,51
17C208	N/A	.rsrc	Injected Junk Code \| HitsBL=98/200 - UniqueHits=15 - Ratio=0,49
17C6B8	N/A	.rsrc	Injected Junk Code \| HitsBL=96/200 - UniqueHits=15 - Ratio=0,48
17C848	N/A	.rsrc	Injected Junk Code \| HitsBL=104/200 - UniqueHits=15 - Ratio=0,52
17CC30	N/A	.rsrc	Injected Junk Code \| HitsBL=99/200 - UniqueHits=15 - Ratio=0,50
17CF50	N/A	.rsrc	Injected Junk Code \| HitsBL=97/200 - UniqueHits=15 - Ratio=0,49
17D0E0	N/A	.rsrc	Injected Junk Code \| HitsBL=110/200 - UniqueHits=15 - Ratio=0,55
17D978	N/A	.rsrc	Injected Junk Code \| HitsBL=97/200 - UniqueHits=15 - Ratio=0,49
17DA40	N/A	.rsrc	Injected Junk Code \| HitsBL=105/200 - UniqueHits=15 - Ratio=0,53
17FFC0	N/A	.rsrc	Injected Junk Code \| HitsBL=96/200 - UniqueHits=15 - Ratio=0,48
18FCE0	N/A	.rsrc	Injected Junk Code \| HitsBL=102/200 - UniqueHits=15 - Ratio=0,51
190000	N/A	.rsrc	Injected Junk Code \| HitsBL=101/200 - UniqueHits=15 - Ratio=0,51
190A28	N/A	.rsrc	Injected Junk Code \| HitsBL=96/200 - UniqueHits=15 - Ratio=0,48
191F40	N/A	.rsrc	Injected Junk Code \| HitsBL=101/200 - UniqueHits=15 - Ratio=0,51
1A70C0	N/A	.rsrc	Injected Junk Code \| HitsBL=97/200 - UniqueHits=15 - Ratio=0,49
1A7188	N/A	.rsrc	Injected Junk Code \| HitsBL=103/200 - UniqueHits=15 - Ratio=0,52
1A7890	N/A	.rsrc	Injected Junk Code \| HitsBL=101/200 - UniqueHits=15 - Ratio=0,51
1A8DA8	N/A	.rsrc	Injected Junk Code \| HitsBL=97/200 - UniqueHits=15 - Ratio=0,49
1A8F38	N/A	.rsrc	Injected Junk Code \| HitsBL=102/200 - UniqueHits=15 - Ratio=0,51
1A9BB8	N/A	.rsrc	Injected Junk Code \| HitsBL=99/200 - UniqueHits=15 - Ratio=0,50
1AACE8	N/A	.rsrc	Injected Junk Code \| HitsBL=103/200 - UniqueHits=15 - Ratio=0,52
1CC8C0	N/A	.rsrc	Injected Junk Code \| HitsBL=99/200 - UniqueHits=15 - Ratio=0,50
1CCA50	N/A	.rsrc	Injected Junk Code \| HitsBL=102/200 - UniqueHits=15 - Ratio=0,51
1CCF00	N/A	.rsrc	Injected Junk Code \| HitsBL=96/200 - UniqueHits=15 - Ratio=0,48
1CD090	N/A	.rsrc	Injected Junk Code \| HitsBL=104/200 - UniqueHits=15 - Ratio=0,52
1CD158	N/A	.rsrc	Injected Junk Code \| HitsBL=101/200 - UniqueHits=15 - Ratio=0,51
1CD9F0	N/A	.rsrc	Injected Junk Code \| HitsBL=103/200 - UniqueHits=15 - Ratio=0,52
1CDAB8	N/A	.rsrc	Injected Junk Code \| HitsBL=101/200 - UniqueHits=15 - Ratio=0,51
1CDC48	N/A	.rsrc	Injected Junk Code \| HitsBL=103/200 - UniqueHits=15 - Ratio=0,52
1F6328	N/A	.rsrc	Injected Junk Code \| HitsBL=98/200 - UniqueHits=15 - Ratio=0,49
1F64B8	N/A	.rsrc	Injected Junk Code \| HitsBL=102/200 - UniqueHits=15 - Ratio=0,51
1F7B60	N/A	.rsrc	Injected Junk Code \| HitsBL=96/200 - UniqueHits=15 - Ratio=0,48
1F8650	N/A	.rsrc	Injected Junk Code \| HitsBL=104/200 - UniqueHits=15 - Ratio=0,52
1F8FB0	N/A	.rsrc	Injected Junk Code \| HitsBL=96/200 - UniqueHits=15 - Ratio=0,48
1F9B68	N/A	.rsrc	Injected Junk Code \| HitsBL=113/200 - UniqueHits=15 - Ratio=0,57
200A58	N/A	.rsrc	Injected Junk Code \| HitsBL=96/200 - UniqueHits=15 - Ratio=0,48
2012F0	N/A	.rsrc	Injected Junk Code \| HitsBL=110/200 - UniqueHits=15 - Ratio=0,55
212E88	N/A	.rsrc	Injected Junk Code \| HitsBL=97/200 - UniqueHits=15 - Ratio=0,49
213338	N/A	.rsrc	Injected Junk Code \| HitsBL=102/200 - UniqueHits=15 - Ratio=0,51
213B08	N/A	.rsrc	Injected Junk Code \| HitsBL=101/200 - UniqueHits=15 - Ratio=0,51
213C98	N/A	.rsrc	Injected Junk Code \| HitsBL=96/200 - UniqueHits=15 - Ratio=0,48
2151B0	N/A	.rsrc	Injected Junk Code \| HitsBL=98/200 - UniqueHits=15 - Ratio=0,49
2154D0	N/A	.rsrc	Injected Junk Code \| HitsBL=97/200 - UniqueHits=15 - Ratio=0,49
215728	N/A	.rsrc	Injected Junk Code \| HitsBL=97/200 - UniqueHits=15 - Ratio=0,49
215A48	N/A	.rsrc	Injected Junk Code \| HitsBL=103/200 - UniqueHits=15 - Ratio=0,52
21A7A0	N/A	.rsrc	Injected Junk Code \| HitsBL=98/200 - UniqueHits=15 - Ratio=0,49
21AF70	N/A	.rsrc	Injected Junk Code \| HitsBL=100/200 - UniqueHits=15 - Ratio=0,50
21BE48	N/A	.rsrc	Injected Junk Code \| HitsBL=106/200 - UniqueHits=15 - Ratio=0,53
21DF18	N/A	.rsrc	Injected Junk Code \| HitsBL=113/200 - UniqueHits=15 - Ratio=0,57
236298	N/A	.rsrc	Injected Junk Code \| HitsBL=95/200 - UniqueHits=15 - Ratio=0,48
236810	N/A	.rsrc	Injected Junk Code \| HitsBL=98/200 - UniqueHits=15 - Ratio=0,49
237300	N/A	.rsrc	Injected Junk Code \| HitsBL=95/200 - UniqueHits=15 - Ratio=0,48
2384F8	N/A	.rsrc	Injected Junk Code \| HitsBL=99/200 - UniqueHits=15 - Ratio=0,50
2385C0	N/A	.rsrc	Injected Junk Code \| HitsBL=105/200 - UniqueHits=15 - Ratio=0,53
238D90	N/A	.rsrc	Injected Junk Code \| HitsBL=104/200 - UniqueHits=15 - Ratio=0,52
239498	N/A	.rsrc	Injected Junk Code \| HitsBL=105/200 - UniqueHits=15 - Ratio=0,53
239D30	N/A	.rsrc	Injected Junk Code \| HitsBL=101/200 - UniqueHits=15 - Ratio=0,51
24BD78	N/A	.rsrc	Injected Junk Code \| HitsBL=99/200 - UniqueHits=15 - Ratio=0,50
24D678	N/A	.rsrc	Injected Junk Code \| HitsBL=98/200 - UniqueHits=15 - Ratio=0,49
24DD80	N/A	.rsrc	Injected Junk Code \| HitsBL=99/200 - UniqueHits=15 - Ratio=0,50
252240	N/A	.rsrc	Injected Junk Code \| HitsBL=106/200 - UniqueHits=15 - Ratio=0,53
2526F0	N/A	.rsrc	Injected Junk Code \| HitsBL=99/200 - UniqueHits=15 - Ratio=0,50
252A10	N/A	.rsrc	Injected Junk Code \| HitsBL=106/200 - UniqueHits=15 - Ratio=0,53
252C68	N/A	.rsrc	Injected Junk Code \| HitsBL=95/200 - UniqueHits=15 - Ratio=0,48
252DF8	N/A	.rsrc	Injected Junk Code \| HitsBL=96/200 - UniqueHits=15 - Ratio=0,48
2535C8	N/A	.rsrc	Injected Junk Code \| HitsBL=95/200 - UniqueHits=15 - Ratio=0,48
253CD0	N/A	.rsrc	Injected Junk Code \| HitsBL=102/200 - UniqueHits=15 - Ratio=0,51
254310	N/A	.rsrc	Injected Junk Code \| HitsBL=97/200 - UniqueHits=15 - Ratio=0,49
255698	N/A	.rsrc	Injected Junk Code \| HitsBL=107/200 - UniqueHits=15 - Ratio=0,54
255828	N/A	.rsrc	Injected Junk Code \| HitsBL=99/200 - UniqueHits=15 - Ratio=0,50
2558F0	N/A	.rsrc	Injected Junk Code \| HitsBL=105/200 - UniqueHits=15 - Ratio=0,53
255B48	N/A	.rsrc	Injected Junk Code \| HitsBL=99/200 - UniqueHits=15 - Ratio=0,50
25A260	N/A	.rsrc	Injected Junk Code \| HitsBL=103/200 - UniqueHits=15 - Ratio=0,52
25A3F0	N/A	.rsrc	Injected Junk Code \| HitsBL=97/200 - UniqueHits=15 - Ratio=0,49
25A8A0	N/A	.rsrc	Injected Junk Code \| HitsBL=98/200 - UniqueHits=15 - Ratio=0,49
25AA30	N/A	.rsrc	Injected Junk Code \| HitsBL=102/200 - UniqueHits=15 - Ratio=0,51
25AAF8	N/A	.rsrc	Injected Junk Code \| HitsBL=100/200 - UniqueHits=15 - Ratio=0,50
25AC88	N/A	.rsrc	Injected Junk Code \| HitsBL=98/200 - UniqueHits=15 - Ratio=0,49
25AE18	N/A	.rsrc	Injected Junk Code \| HitsBL=104/200 - UniqueHits=15 - Ratio=0,52
25B138	N/A	.rsrc	Injected Junk Code \| HitsBL=99/200 - UniqueHits=15 - Ratio=0,50
25BF48	N/A	.rsrc	Injected Junk Code \| HitsBL=102/200 - UniqueHits=15 - Ratio=0,51
25C0D8	N/A	.rsrc	Injected Junk Code \| HitsBL=96/200 - UniqueHits=15 - Ratio=0,48
25C3F8	N/A	.rsrc	Injected Junk Code \| HitsBL=97/200 - UniqueHits=15 - Ratio=0,49
25C4C0	N/A	.rsrc	Injected Junk Code \| HitsBL=95/200 - UniqueHits=15 - Ratio=0,48
25C718	N/A	.rsrc	Injected Junk Code \| HitsBL=100/200 - UniqueHits=15 - Ratio=0,50
25CD58	N/A	.rsrc	Injected Junk Code \| HitsBL=102/200 - UniqueHits=15 - Ratio=0,51
25CEE8	N/A	.rsrc	Injected Junk Code \| HitsBL=96/200 - UniqueHits=15 - Ratio=0,48
25D848	N/A	.rsrc	Injected Junk Code \| HitsBL=98/200 - UniqueHits=15 - Ratio=0,49
25D910	N/A	.rsrc	Injected Junk Code \| HitsBL=95/200 - UniqueHits=15 - Ratio=0,48
25DB68	N/A	.rsrc	Injected Junk Code \| HitsBL=96/200 - UniqueHits=15 - Ratio=0,48
25DCF8	N/A	.rsrc	Injected Junk Code \| HitsBL=99/200 - UniqueHits=15 - Ratio=0,50
25EC98	N/A	.rsrc	Injected Junk Code \| HitsBL=100/200 - UniqueHits=15 - Ratio=0,50
25F6C0	N/A	.rsrc	Injected Junk Code \| HitsBL=100/200 - UniqueHits=15 - Ratio=0,50
25FC38	N/A	.rsrc	Injected Junk Code \| HitsBL=97/200 - UniqueHits=15 - Ratio=0,49
261858	N/A	.rsrc	Injected Junk Code \| HitsBL=104/200 - UniqueHits=15 - Ratio=0,52
2619E8	N/A	.rsrc	Injected Junk Code \| HitsBL=99/200 - UniqueHits=15 - Ratio=0,50
261DD0	N/A	.rsrc	Injected Junk Code \| HitsBL=101/200 - UniqueHits=15 - Ratio=0,51
29B878	N/A	.rsrc	Injected Junk Code \| HitsBL=95/200 - UniqueHits=15 - Ratio=0,48
29C9A8	N/A	.rsrc	Injected Junk Code \| HitsBL=96/200 - UniqueHits=15 - Ratio=0,48
29CFE8	N/A	.rsrc	Injected Junk Code \| HitsBL=96/200 - UniqueHits=15 - Ratio=0,48
29E820	N/A	.rsrc	Injected Junk Code \| HitsBL=105/200 - UniqueHits=15 - Ratio=0,53
29ED98	N/A	.rsrc	Injected Junk Code \| HitsBL=106/200 - UniqueHits=15 - Ratio=0,53
29F888	N/A	.rsrc	Injected Junk Code \| HitsBL=99/200 - UniqueHits=15 - Ratio=0,50
29FD38	N/A	.rsrc	Injected Junk Code \| HitsBL=100/200 - UniqueHits=15 - Ratio=0,50
2A0C10	N/A	.rsrc	Injected Junk Code \| HitsBL=102/200 - UniqueHits=15 - Ratio=0,51
2A13E0	N/A	.rsrc	Injected Junk Code \| HitsBL=96/200 - UniqueHits=15 - Ratio=0,48
2A1700	N/A	.rsrc	Injected Junk Code \| HitsBL=96/200 - UniqueHits=15 - Ratio=0,48
2A1958	N/A	.rsrc	Injected Junk Code \| HitsBL=102/200 - UniqueHits=15 - Ratio=0,51
2FD0A0	N/A	.rsrc	Injected Junk Code \| HitsBL=96/200 - UniqueHits=15 - Ratio=0,48
2FDA00	N/A	.rsrc	Injected Junk Code \| HitsBL=96/200 - UniqueHits=15 - Ratio=0,48
30ED00	N/A	.rsrc	Injected Junk Code \| HitsBL=103/200 - UniqueHits=15 - Ratio=0,52
310088	N/A	.rsrc	Injected Junk Code \| HitsBL=103/200 - UniqueHits=15 - Ratio=0,52
3103A8	N/A	.rsrc	Injected Junk Code \| HitsBL=104/200 - UniqueHits=15 - Ratio=0,52
310538	N/A	.rsrc	Injected Junk Code \| HitsBL=109/200 - UniqueHits=15 - Ratio=0,55
311F00	N/A	.rsrc	Injected Junk Code \| HitsBL=103/200 - UniqueHits=15 - Ratio=0,52
317040	N/A	.rsrc	Injected Junk Code \| HitsBL=101/200 - UniqueHits=15 - Ratio=0,51
32D548	N/A	.rsrc	Injected Junk Code \| HitsBL=103/200 - UniqueHits=15 - Ratio=0,52
32DEA8	N/A	.rsrc	Injected Junk Code \| HitsBL=105/200 - UniqueHits=15 - Ratio=0,53
3462F0	N/A	.rsrc	Injected Junk Code \| HitsBL=109/200 - UniqueHits=15 - Ratio=0,55
347BF0	N/A	.rsrc	Injected Junk Code \| HitsBL=110/200 - UniqueHits=15 - Ratio=0,55
3486E0	N/A	.rsrc	Injected Junk Code \| HitsBL=97/200 - UniqueHits=15 - Ratio=0,49
349F18	N/A	.rsrc	Injected Junk Code \| HitsBL=95/200 - UniqueHits=15 - Ratio=0,48
34C948	N/A	.rsrc	Injected Junk Code \| HitsBL=95/200 - UniqueHits=15 - Ratio=0,48
34CF88	N/A	.rsrc	Injected Junk Code \| HitsBL=101/200 - UniqueHits=15 - Ratio=0,51
400-26DFF	1000	.text$x	Executable section anomaly, first bytes: 488D0D09E40300E9
26E00-271FF	28000	.text0	Executable section anomaly, first bytes: 40534881ECF00100

Extra Analysis

Metric	Value	Percentage
Ascii Code	1194442	34,277%
Null Byte Code	58844	1,6887%
NOP Cave Found	0x9090909090	Block Count: 15 \| Total: 0,0011%

PESCAN.IO - Analysis Report Basic