SO: Windows 8
Nome macchina: WIN-0QHK8MJLS1F
Nome utente: camar
Dominio: WORKGROUP
IP: 192.168.168.10 MAW / 192.168.159.132 REM

k1.exe
518144 bytes
MD5: 58E1E0B122490DD5BF4A81776772B33C
SHA-1: BA127B05543DE7C093D8E9D1F05B28FAC7F29C76

not packed - da exeinfope
x86 - da CFF
Eseguibile con stripped solo relocation info
no TLS
Subsystem WINDOWS GUI
Address entry 00001779
Sezioni: .text .rdata .data .rsrc
Librerie sospette: KERNEL32.dll (LoadLibraryW, GetTickCount, Sleep, TlsAlloc, WriteFile, IsDebuggerPresent
Stringhe sospette: mscoree.dll, ADVAPI32.dll, KERNEL32.dll, WUSER32.dll
(!This program cannot... di nuovo)