Static | ZeroBOX

PE Compile Time

2022-12-14 04:53:29

PDB Path

C:\waro tak\bafisewi\Yit.pdb

PE Imphash

da426df48912de4f1bc39b4ee6afe080

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00001000 0x00155877 0x00155a00 7.90541182217
.rdata 0x00157000 0x0000363e 0x00003800 5.53056519358
.data 0x0015b000 0x001be15c 0x00001400 3.88045666695
.rsrc 0x0031a000 0x000272f6 0x00027400 7.24499307671
.reloc 0x00342000 0x0025dd69 0x00097d69 7.96961524231

Resources

Name Offset Size Language Sub-language File type
RT_ICON 0x0033fa50 0x00000128 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x0033fa50 0x00000128 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x0033fa50 0x00000128 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x0033fa50 0x00000128 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x0033fa50 0x00000128 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x0033fa50 0x00000128 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x0033fa50 0x00000128 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x0033fa50 0x00000128 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x0033fa50 0x00000128 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x0033fa50 0x00000128 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x0033fa50 0x00000128 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x0033fa50 0x00000128 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x0033fa50 0x00000128 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x0033fa50 0x00000128 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_DIALOG 0x0033ffd0 0x000001a8 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_DIALOG 0x0033ffd0 0x000001a8 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_DIALOG 0x0033ffd0 0x000001a8 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_DIALOG 0x0033ffd0 0x000001a8 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_DIALOG 0x0033ffd0 0x000001a8 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x00340a48 0x000005f8 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x00340a48 0x000005f8 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x00340a48 0x000005f8 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x00341040 0x000000ca LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_MANIFEST 0x0034110c 0x000001ea LANG_ENGLISH SUBLANG_ENGLISH_US XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminators

Imports

Library KERNEL32.dll:
0x557008 GetFileSize
0x557010 HeapAlloc
0x557014 GetCurrentProcess
0x557018 HeapFree
0x55701c GetProcessHeap
0x557020 IsBadReadPtr
0x557024 OpenProcess
0x557028 LoadLibraryW
0x55702c HeapCreate
0x557030 ReadFile
0x557034 GetModuleFileNameW
0x557038 CreateFileW
0x55703c SetLastError
0x557040 Process32FirstW
0x557044 ExitProcess
0x557048 Process32NextW
0x557050 GetCurrentThreadId
0x557054 CloseHandle
0x557058 DeleteFileW
0x55705c GetCurrentProcessId
0x557060 LCMapStringW
0x557064 WideCharToMultiByte
0x557068 LCMapStringA
0x55706c GetOEMCP
0x557074 GetStringTypeW
0x557078 MultiByteToWideChar
0x55707c TerminateProcess
0x557088 IsDebuggerPresent
0x55708c GetStartupInfoW
0x557090 RaiseException
0x557094 RtlUnwind
0x557098 GetLastError
0x55709c GetModuleHandleW
0x5570a0 GetProcAddress
0x5570a4 TlsGetValue
0x5570a8 TlsAlloc
0x5570ac TlsSetValue
0x5570b0 TlsFree
0x5570bc Sleep
0x5570c0 WriteFile
0x5570c4 GetStdHandle
0x5570c8 GetModuleFileNameA
0x5570d4 GetCommandLineW
0x5570d8 SetHandleCount
0x5570dc GetFileType
0x5570e0 GetStartupInfoA
0x5570e8 VirtualFree
0x5570f0 GetTickCount
0x557100 VirtualAlloc
0x557104 HeapReAlloc
0x557108 GetCPInfo
0x55710c GetACP
0x557110 IsValidCodePage
0x557114 HeapSize
0x557118 LoadLibraryA
0x557120 GetLocaleInfoA
0x557124 GetStringTypeA
0x557128 GetModuleHandleA
Library USER32.dll:
0x557138 GetDC
0x55713c ShowWindow
0x557140 CreateWindowExW
0x557144 MessageBoxW
0x557148 UpdateWindow
0x55714c ReleaseDC
0x557150 FillRect
Library GDI32.dll:
0x557000 GetStockObject
Library PSAPI.DLL:

!This program cannot be run in DOS mode.
EGRich
`.rdata
@.data
@.reloc
9D$dw"r
t$XPVQ
D$P9\$T
D$P9\$T|
SSSSSSSSh
9T$|w*r
T$\-]1
T$4f9=
T$df9=
D$\f9=p
0WWWWW
0WWWWW
QQSVWd
0SSSSS
t$hTrU
u&hpxU
>=Yt1j
QQSVWh
j@j ^V
t h yU
HtHu4j
s[S;7|G;w
YYh0yU
tR99u2
0A@@Ju
URPQQh
0SSSSS
0SSSSS
0WWWWW
AAFFf;
;t$,v-
UQPXY]Y[
PPPPPPPP
PPPPPPPP
t"SS9]
t+WWVPV
zmT<7_W
)thyL_
r0i1!RR
^6^sJn
IElhr8|C
lix8t@6"
B8B1C
f}hyL_
8R?]EW
Q7G8VA
Q/7V-t
Q7G?V[
`L-)7Z+
[7O:]{
cx#'G0
:{gDcS[
AEc#XV
55$T\O;tH,
8R3_i3
VQ-d9n
&()\u
[7O9]z
jX*[9%
i]/RR\
r+Eb&T
[7O:]{
ax#'G0
Xay02l
6H62`o
HElir8|@
_iC?MN}
hR3B<{
G8j]<iA.
G#hyL_
}c?"bf
)l,3`DZ
}c?"bf
uG?"bp
)gxjHu
hRU/B<
c_Vb!o
r8|@6"
HElir8|@
ax#'G0
Ei##RR]
[7O9]z
lhx8tA&
Q7G8VA
Q7G?V[
dGy42d
[8P|6}W
b+Eb&T
VQ*d#z>70g
[7O9]z
lix8t@6"
ax#'G0
b+Eb&T
b+Eb&T
OHuh.
z@hz,
VQ-d9n
c_Vb!o
v~f$Dc
}Bd?I=
HElir8|@
[7O9]z
b+Eb&T
[7O9]z
jhaqg
9iqZ]yLb
as"RTY
}uK~]:
lhx8tA&
b+Eb&T
(Q"0U[
]kH"fP
^6^sJn
VQ-d9n
9S;^aWd$
Q7G?V[
[7O9]z
CdhyL_
lhx8tA
@@qN`h
BEn{C7{h
[7O9]z
c_Vb!o
lhx8tA
r(i@$RR
9S;^aWd$
r(i+'RR]
W#t.wz
hR3B8W
8hR3B8
l?_! 2
}?"bf
p7%:Z5
!|Wi;V!
Z1hyL_
}?"bfm
.Hu9bs
dLg="Hu
&Hl-A]z_
}u"*$)]3H
qM!W2MT
z\$l}/
e+hh#p
*2%%|Wh
[5.7m{
bI1JHp
r8|@6"
Q7G8VA
.i.`rX
\z}\$o
T%][Gf
nC5d61;GW
2phyp^
[!11>F
bU@z\1
#|Wvu{
8(Rjz9
>7"6qA
;}/7dU
ZGsZ}2J
MRh{jHE
/),(<D
(hDl<hX
?]sB|`
lhx8tA
ZrL*]%m)
}J0?I<
[9bMWT
_Luh4={
;f1R(xn
7sp:#*:
N2>'l6
FqI3hd
Q1aI(/
@I)Q+@c
-]8V/+~
*="b]H$
a2+-|W
T"xLJa
:sD.%|k
zH09of
HElir8|@
MiY"RR*
$Xz!([
Wc%/]g
$Hu~IR
(f4uLUsm
Pby\'r
^2T\ckF
2;%|W`
]Mu/b,A
i(#RR?d
1whym]U
Vqbk}5[
2&*|W7
S;fV@a
'b\ZaX
}]'o]d
thy~)gXf
e{vxlS6jtXH
a,N8g'$Hue
r/6U~I`
{5m(d;
#]Nkup,
&H*gq+
VM]3<v
?"bQamG
a+#gtT
r75_w6c
MgD`(c
n>"btx
UXx#'G0
^Poa)
iH&RRMd
<m0hG?
jQ&O:G!
nWm`+1x:
2I%|Wju
fgl HuW,
rH<)JmR
7BujT3
T)}T's
$n;7o7
cU'B4-
Dqhj65
DPD1.,C
^\7+Ns/
mq@%M57n
gg&>A
|KkXq7
!|Wi3p
lhx8tA
#Io+!7I
W9Vb!o
>b=Vp-4
(RRcFr
4SoehA
s@ibs1
NDhKCr'J
!|W!Rar
blUbHXu
<iV/"vN
<"b #6
$oc?z%8.
8~uS'cS
bSNxfd
(nDrkR*
&]H[2o
~^S6zM
X6{{z`:
"0Knp^
S_J>LNx
&Hu8Q%
KJuhIb
ni#sii
nP8`1d1k
dGy42d
yzJ"Dclp
[Kk!K7
BTBC5LK
42iyL_
Z'){G1
-(BW3S
VQ*d#z>70g
QRR-L%
[8oguN
:u`5<z
#RDek#
g]s1qxy6
96"bLJ
c+!7aJ
#RCp?!
1#--m<
ny,=>|
hkK!-p
4?n&*n
&Hi:JS`
4CArcz
f:R|Fx
o8%^E)D
Pe/r}l
?~S,Xq
Jy/DD0
Q7G?V[
58Hu5z
(g3$Hu
ywhya0g_
]W z"(u8
KKS~VF
Urhc%Bzk
_Jl`G8
h2'w)v
vSTRSb
iV RRDj
b=?9;4
g7$Hu0
'{hAkj-
IElhr8|C
C>S{{2
hecXls<,
^~1jI_
NExwG`
>7)~:4
2@VEu(
]zDS+]
QgbgZ&
9<2r)|W
28*|WL^
$x?i}D
VQ*d#z>70g
IElhr8|C
}b K.[
`odn@<s
2R#|W?n
X$g}&Hu
n7@?:N
#|W)-"`
`xV3Ci
tgfyr!_Y
bE(g!i
3/okKd*+=
iX&RR#
Muh3pS
Cf6@X<^
hM^-Q?w
LUw`xk
z-1D~j^
YBY$fuG
(kTu\
@/F#$}a
)',Gz
MrCRfw
9"bV[z
!|<=1^"%)
}u,=W2
j0a?/
nnO<n)
[Vi,3#
Uh$txL
)q]h!#8
-mbA$Q
iJ"RRw_|
RMcug.}
2V(|W+7
im*4Irp
yZ1`wo
Zj6x37
;ee@hm
%O2QY7~
MmfWw}z
Fjtnu,
brhy'p
l' d+~-
aBU8)'
io8jd&
lz2<@m
+)j|"G#
yA1MH*
_q"w,hzL
U20&|W
f<4]+Q.
cx_$Gp
g?CXQ$
WOm>Hu
"Auhxon
WgIwHu
dV)@_}
)4YC&fs#
)Ig%k
~g$$Hu
7fg}$Hu
bY2?"|W
gvb`)
#Ra0{`{
g/$Hu=
MVu [+_J
XygK&Hu
(M2O%|W
M<FQD$H
EX|\<}
EbF")L-K
g8&Hu[z
]5OyP\
;T}0^or
]"U&^S
qhyej-
i+"RRJ
+Eb&TAQ
Kuho5X^zfo
gV,+Bx
Huhc>p
eK/Ntl
6gR&HuI2
9%U3D
wEqvKt
fF^GL4
=iq!RR+!
?"hU}I
j+qgK$Hu9
_WFTW:I
!QXXpzn
c_Vb)o
SAuhbA
_gR#Hu
3,p4_
g=%Hu7
eOkA21
DuhyF@
.07bi
N7>E"b{S
5Q?issqT
<Wc,|N
DH#b4@H3V
c"JL~I?
Jj%0Cn
Q7G8VA
h`*0:`
RqPTB
.HuZ<f
5=S:Sx\
FfOd&v:
Kg($Hu
=[7?[:
Qk1vor
dSpW,(
=AYKZoh
O@L7*z|!_R
]}a#p~
kS3Uy]2
_1MrgS
Td)YfD
wz0e;
,)I/'M
DH sUYd
\+EB1Z
c 9!1X
aJuh^l.b
)N@x)Li#
`2R,|W
2tYLa7
/TSv9<
a4r}QP
aT?gvcJ
6iuhxon
-V}*UCv
$kL6la
_nS4;I
IuhE1y
885A){
)iR.RR
tg?*Hu
ogg Hu
M@Nt,0%
L)VVY2]"|W6
Y`V]JG
a2k"|W
|1]1z';
2u"|WtS
Gv)4Wi
C"0 Pgk
gMA_cNhe4
K+\~d"
IiV#RR|
c+!7aJ
#Ig+!7I
W@EwRXapq
Z,w3z^
#HuBL:
[.Qn)r
GY1iZ1L.
XD@0N)r
>Iuhb"
GzqKyxS
|jq}$W
#2 "|W
fsUQ9IIM)]
,3:3IjAY
Qr{+or
ig2&Hu
dIuhpx
wZ`//BI%
2Z(|W8
nBWrxE
0)anC7
[7O:]{
r\i^)PR]
L4q\b<,
g(!Hu.
&HX:wH
#|W0\z
>gt"Hu
%B{Ep/
;yK WC
ehp_l.K
5${)s1
N*WEN.E
ZQNptT
C[EgL~
9"b^,`#
[7O9]z
FVO 2cCY
,z@Y|c
6leI?x
<"b\2{0
w{o*5"%'
9x.hSc
o,>kA)
?|UE{m
?"83KWb
#px/gB
[;E?s$]d
puHOerh*
z.62]e"
r78:2y
IJ|Xs$!
&<"bLn`;
8^AsTf
W>"G;,
gc&Hu
ZQEV~)
J(_A
!n<{Sy
o]n+q[
#|W?ZD+;
TDn+"h
?pQ@lb
)$GV3
]lZj}-R
)qqS30
]M GIy
?*tR"c
}4yDz:
pthyt`'
M_=f)1
o?&j=D
phy8Q%*
oZ*)mU1
]Huhqr
JKn'py
D QL?H
G@uh_Q
}~(s<m
2R'|Wm:
m<rr<[h
RRWg/qU
SksiUI
p}J*,&
?"b$Ug
sA;<2
HP/"B_
'V)>kt
4]3x64
;$iu#RR
%g''Hu`r
%Hu[c-t
.C!Cix3
q@PhH
[ye[S*
a2y |W
CNN6j'
MJH[p`
F:^d{UOh:
lH3}>Zg
Kuh%Up
vF *bF>8
+gz"Hu
I?L^3}u-
g?#HuC
9C,]7^
!|{xsp
2B,|W|
_s}ApU^
K,Ua.x
D]vGdd3
rriKa\1
}e|8=q
)MwN;>D
!|{{4|
{0Jh~c
4hgy&Hub
!p&v?0
<vhySr(-
0/o>Qe
d55n!pn
J@ FfY8
2=$|W
|W=pc
#R3 n2f
M8t/,%
4VVv2?F
xIID)p
=[jkg+
&HrJ-m
!=]=B[8
C,p:S6
+2N+|WAk
/2E+|W
gn&Hu/
v<"bI."0
Z?^b-j
0Mjz<;%uL
Y%8>"L
[\C>7];
yqTihQ
]H_U:2S
sWp!R
&@Vu [4]
cCt;UiK
//#8l6
zj:olK
PdB'(9
o:52Z<7
(y8tMm
j8a?/
iA7hRRWg
}y67dW
;T}0^or
]"U&^S
qhyej-
i+"RRJ
DFxoL0
g;~33=
J@TEjx
TRX]Xu[
/.,j*0
gu&Hu3?v
ZQlH:7
#R{;P]&
gz$Hu;$
3yiMGJ
Lf!6CBR T
:i^`?M,
pMY}'nG
Z}?cqc
T[rnIV
bngp'Hu
k1.)jZ
9"b"Yvljc
ldEuiA
Rp)@']
3Xe>NI
#R>B|@,6
gE%Hu%
JBQNt7
2`!|W
4q<_ZC
[q4.,i
.vpm_@
<&>0UG
gD"Hu ,
xzFlNq
.qhyre
r0Uf&k
FhilcZ
2)(|W6
HfM)wKO
g4$HuL
Di'&RR
ogy'Hu
UwKA7x
r7Q8{
UF}y?k
P`c/I>Om
^C,^Ac
`6g"/Hu
i. RR(a
&Zr.Qz
8fS]K]
23(|WN
EHuhF/
h7HzaXU
st?FqL
u;"b;:
F!qet)
Sx-&Km
bi{&RR
1Ole`z
!:C jxp0
e.7%ZD
!m(t$`F
%M|K8V
cKG47A
-nW)<|
#R)Bpmy
Y#EZ6\.H
B\DAa57p
0I)"\x
N$uOt%
2why~I
&HQkIn_
qQrmA"
Nhqe!
] n-F!
6YhUR(
Xrd,[z
xjB%uxR
ia&RRD
uXP|Y}e81pt
gt%HuR5
-Bu.qBs
N7t3]b
sx#'G0
j`<X5T
#QhyL_
8l,A#R
bOJM);
]RVC&H
dShyL_
T+hyL_
Y8ltG#R
?3v!KhR
b$IFm|
[7O9]z
Rw*[uH
K4PABb
84%Knot1
-|U:lv3
Bh7t;]c
b$QFmD
+Eb&TiQ
lhx8tA
lix8tF
`L-)?7
BEnSQh
#RR>o-
.9XkkY
DIx#'G0
b7t3]b
&&Huhy.
VQ*d#z>70g
j-a*%8GB
[7O9]z
VQ-d9n
IuhyMK
HElir8|@
IElhr8|C
uhyLZvR
9S;^aWd$
&"lthy
nA7rs_`]-@
icFRRUb
gu3Q1g
W7t;]c
+Eb&TiQ
Rw*[uHD
]bXLN;
K+!7aJ
@thy._
#IO+!7I$
HElir8|@
HElir8|@
3s>61F9
lix8tF
uhyLpTR
Jx#'G0
^?^rJn
6 yD6
#IO+!7I$
`9S'"V L
HElir8|@
`thy.V
pg]yLb
lir8}@6"
K_ZosK
cWVb)o
b$QlKV
HElir8|@
IElhr8|C
uhyL@9R
[7O:]{
7M:pZx
Q7G?V[
#IK+!7aB
"RRn+Z
b&YD*o
HElir8|@
lhx8tA
dNy52d
VQ*d#z>70g
)-^wJf
lix8tF
b$QlKV
HElir8|@
lix8tF
:K)d(-
VQ*d#z>70g
-~]:|B3
^YOnGb
i]2;e
hK6RRUJ
{g)7Hu
&bl}hy
&blehi
&fPuhy
&H~+r_
X694*N
iT+RR]
^_nhv@
o#I_+!7I4
TthyL_
Rw:[uH
Rw2[uH
\Bi7t3]b
c_Vb!o
IElhr8|A
T;]=mf
Fb#qm[8Gq
j-%u$\-<-
?"w/C>
2i`"RR
Nuh~8 \
Nr\6px{
gV$Hu\
M=Ja'B
Bd:|X{
j?oA9s
jI-3wZh
_.#.v/<7u
DsQ "y
,~h^'/
t5.^{L!(
>"bj~$
;_AT*;
"a2F#|Wq
U,f}IR
Q7G?V[
5iXsX
<Y}X(
1<b33p
TDNHe($-
^@3\T#
;2a(|WAFO
c'QJX5
oHQ**a
#|Wc*#
H\ayg_
G9p=JXo
%`D0&i
eMw}1O-3J
pzg_rJ
i&O&t\
8h5Gt)u)
#RZ$Mr
XC< o@
@\ML$o
u+vs))
9Z;Ksq
Qv1vF4P
3P<19K
?e=?ya
%|Wb&`
_l.ncg'/
:2Qr*?W
jgF"Hu
UQ43G)
'RR#>U93
,2r+|W5
r7"\sf
Vi6$RRk
([x`!;
rSyGU'W
I;:Rd
?elcW7
J,bY!"
mj='OW
sdK7tD
>Ue[X>
#|WKs8~Y
~_w2i |WY
S!_n4iO
g( HuQ
r7t+~u
&&!'1h
g(&Hu)
@lonLe
A2^%|W7
dHuhy$
:"8NK!
7c3/f8
r2P!|WW
shy>/7
i9#RR9
TgW"Hu
r7/+Yj
shyDoU
g9%Huy
hRi'RR
wg($Hu
whyP"F
GdzKHX
2U$|W#
hW)RRUJ
\e^NBCr
+V,E$x
:gb&Huz
u|'w\16
&:ET*_
2(J-zY
uhyBu\L
gU#u-h
Hf-b%A/
?"b Iy!1
|lNlg/"
&"lwhy
V,1(zF|*
3X?H-
f<"b<9
$>~G`?
_)+Mm(
AYAy#i/
<u):o.
CqV7t3]b
jMm2k%
2_!|WO
Vgi$Hu
#Ep']t
9qZ7yU
_iRTAt}
TAMRd&
3g9#Huw
UK`$jpF
}N!X.&
e5]hXa
n}6!@v
I+L-C)
#RRay~}F
UN*Qf}
0hR3BDER
'uk"sA
9S;^aWd$
c_Vb)o
UNh+ng
p"6^eA
lix8t@6"
r"7U_k-1
08o0;?
6Kk=u7
B@B6@1
QvUvNR
F|hyL_
c_Vb)o
lix8tF
&M3ZPsU
lhx8tA
l#Ig*!7I
-_)TVb!o
P|hy.R
*Eb&TAP
q*|4RL
x{RW&mF
#Ig*!7I
^B|Z82
?MlXZ5
j`lXeB'
K`DthK
8lEr"R
t9Fp2Up
8l={#R
^gkZ82
Q>B7_q
PFhyL_
{KhyL_
78l`f#R
N_nh`(
IuhZ2S
&H+{v'E3g
NHQ1APEy
HElir8|@
HElir8|@
jMm2k%
lhx8tA
#IK*!7aB
HElir8|@
[7O9]z
jMm2k%
#IO*!7I$
#RRw.ZuH
ox#'G0
[7O9]z
9,/)ujE
!k'|!@
#IK*!7
.IL-FS
*Eb&TiP
X]&^d,
`4VVva
N{;dC[8d
U0;QEB
@nx]lY
8R3_AO
VQ-d9n
#IK*!7aB
VQ*d#z>70g
2'/qh"l
.ILo-S
jMm2k%
:L;A#c
jMm2k%
Rw*ZuH
U*[4Mr
RRWgHt
Huhb
]0[8Z8
4VVnMiFmd
dNy52d
IElhr8|C
nGbkg
4VVnTFFm|
VQ-d9n
Q7G8VA
NIy02l
nGbk()
[7O9]z
Fa-nIZ
Mr7ii{>
Huhb
<Q_&Ht
G6|D,W
&7WiEoHua
!*f:|n3
_jY=p#
=mK[%K
98j:|b3
Huhb
>R(]rW
S%aqgK[%K
2^na|W
r7iAU(P
=dx{3A
[K~]:|
Huhb
RRWg\(0
Huhb_
N{;gE[8d
4R ]rW
?]sB\4N
?]sB\4N
lLlir8|@6"
Rw*ZuH
I:bf<F
YD!m#;
IElhr8|C
#thy.R
lhx8tA
Q7G8VA
Q7G?V[
gKIuh]
Q7G8VA
8WOo:Hu
DnP>_6
uig9RR
npZ3 e
#uhxt9
RRWO#=
(s%aq'
[K~]:|
r7ib(dH
Xuhxon
faqgK[
- AVR[
<R ]rW
Iuhb
U0;"oj
VQ*d#z>70g
*Eb&TiP
DvMujE
097t3]b
r}tX3%
Rw*ZuH
Q7G?V[
K{QV6`
m"RRw.ZuH
&"lthy
lhx8tA
>(7t;]c
dNy52d
lix8tF
VQ*d#z>70g
OuhyMh
lhx8tA
jMm2k%
tthy._
jMm2k%
61^;st
#IK*!7aB
RRw.ZuH
"&%eFg
YD!m#X
C1Gxj{A
K&-VWB':
9egMgX"Hu
&ODc=[
i]#RRCn
R_Q`)e
$XE4o"
/xG;[%&
(-t\o7 9
Kcir>u
!ZD&ow
ebyPv
UN*%&]
&"lthy
X4VVjfGF
$z2U?D
rRRWl[g
h]&^z,
YL*V@J
&:'iA;
XuhPt9
(R(]rW
Huhb
kH`jiZ
gr7ib7
vraqgK[9K
N{(yx[8Z
7PK[%K
Huhb
,%24x_B
Huhb
N{(sl[8Z
Huhb
gvV>E?
P[Z7uL*g
BnPe:E<
WOQGHu
0R ]rW
N{-}q[8
g"Iuhv
g:Iuhv
Iuhb
R ]rW
{=[=[8
Xg~gU!Hu
l@dn6
iE#RRUb
dGy42d
Q7G8VA
?*8/G>
HuhyL]
!{.qh"l
hR3B V
:gV&Hu
c-!9VI
iM|"sT
7AMiDc
p0v!=#R
.DhyL_
=dx{3#
&:1iA`
4u,<P}M$+
r8t@6"
#I'-!7IL
:$<A#c
Q7G8VA
%wF]uH
#-!7aJ
[7O9]z
`L-)v,
Qx#'G0
&&Huhy&
T]&^f,
(s%aq'
il#RR]
&"l}hy
lix8tF
8l>;#R
.KkzR7
LSDc3s
E;bz9]
`L-)M$
;=x#'G0
jMm2k%
j(a?/
Dns1o^a
Rwj]uHD
\w*y6$
YD)m#$
#6K-_v
=t({Xi
6ijG>%9
^6^sJn
r8u@6"]
4VV`|'F
N{(R.[8Z
?l#R[/
j^RL*,aZ
G#Ml}v
9S;^aWd$
67t3]b
?*8/+6
fKk/a7
h7xr15
^sfv!3
!w0QV|
lj9u]R
',|M4A
[7O9]z
(s%aq'
"Huhy,
cTx#'G0
HElir8|@
lhx8tA
&blqlx
?^Y[lD
o%J3B0
lqhyL_
lix8tF
y+q&"l
lhx8tA
<$)WB#
VQ-d9n
pHhyL_
}w?"bf
}w?"bf
~,YB"s
}w?"bf6#5Y
!|WiTh
}w?"bf
~8l%#R
p3hyL_
O*NCv!5WR
}w?"bfv
}w?"bf
!EhyL_
}w?"bfOJy
lix8tF
lix8tF
`L-)3O;)
$|Q9qW
i5NRR]
[%>0`U
c_Vb)o
)ql;Lu&y&
&blaly
&blaly
9Z;)mR(
&"lwhy
GXL)KBu
jMm2k%
Ny6?dO
nx#'G0
&&Huhy&
R'(ALJPR
VQ-d9n
lix8tF
Z@2!MC
HElir8|@
)g1cHu
[7O9]z
_[b$QF
lhx8tA
8bb]sab
C[b$QF
kEVb!o
V Vb!o
^6^sJn
D9{Aiy L
VQ-d9n
5x#'G0
VQ*d#z>70g
[7O:]{
VQ-d9n
Q7G?V[
T08@N
>9wxXu
IElhr8|C
HElir8|@
lix8tF
XuHthy
>Eb&d9D
&bl}hy
!|!Ll}v
[83a(uW
iB*RR]
%lV&+2
C[b$QF
if%RR]
&&Z@iy.
n~6^&$
%Ov,g.%Hu
!|90Vz
VQ*d#z>70g
jMm2k%
Z@2zY1
gvhyL_
VQ*d#z>70g
",Eb&T
HElir8|@
^6^sJn
8R3_A7u
&Sv9vu
d#z>70g
[7O:]{
,Eb&TIV
?*8DT'xoJ
YD)m#-R
dGy42d
{&d1}
?"bfHc
<?hyL_
EnWj"s{
c8lY\#R
pjye7_c
M08lCt#R
g8 Hu*%1+G
PLf%W7!
"m>H+
#$i*%RR
#rhyG@,M
mYaa2H
^( #U2
m$uV48
#Ig,!7I
3SVb!o
:d=A#c
Yi6hRRw
jMm2k%
VQ*d#z>70g
c_Vb!o
zb`=p,
F=+_J
8R3_AA
VQ-d9n
#Ic,!7aB
IElhr8|C
8R;_iI
VQ*d#z>70g
'5 7t3]b
[7O9]z
\KAO6E
=o/:UV5
Q7G8VA
?]sB!-
YD)m#"
jMm2k%
.&&Abhy.
dGy42d
Q7G?V[
FKgE'Hu_
2&$|Wx
[U'[S$\
(>R?I5
w6 b|0
d9xlt.$
@[b$QFf
yg&#Hu
b^[b$QF
yZK:RS
{,!7aJ
#I{,!7aB
ip#RR]
`Kk'r7
I7tujE
Q7G?V[
5uy02l
Q7G?V[
X5i #RR]
lix8t@6"
ft!akl6
lhx8tA
[)r7t;]c
[7O8^b
p#I7,!7I\
R5Vb!o
'B98GJ
KsQV6`
uwhyL_
Rwz\uH
,Eb&T9V
Eer< ]
B B6!Dl
6yQv!P
c8WMQ-;
yx#'G0
jMm2k%
y6?fV(e
p":^eA
!RR_Ojc
YD!m#yAl
1?i=eK@[
Lx#'G0
>S%9o#
57t3]b
IElhr8|A
uhyL_
c_Vb!o
E4DcYS
Qv5vRV
xuhyL_
GdGJDc
[uhy(Z0
<[L#P@
Xx#'G0
\uhy(Z<
/Eb&TQU
ft!akl
:g^&Hu
p"2^eA
lix8tF
r"7U_k-1
?^YCnD
?^YC D
lix8t@6"
r"3U_k-1
?^YCnD
I_R_v,
porF8l
HElir8|@
i9!RR]
k#Dl}v
8R3_i`
VQ-d9n
h^#RR_Ojc
3Q8;Qv
MwhyL_
j,*LH
Q7G?V[
jMm2k%
lix8tF
!uhyL_
B B(4>h
.>08v!
Ebx#'G0
VQ-d9n
WrjTK@[
6U&o~^wJf
a&~yy;
IElhr8|A
F/gKkur7
YD)m#_[
Wgl]Z9{R"
Q7G8VA
ZKk(q7
HElir8|@
iB!RR]
dGy42d
!L.@7_"
[7O8^b
"P<i-:
k#Dl}v
IElhr8|A
^6^sJn
1L}#BB
!RR_Ojc
p"&^eA
r8}@6"
$4@jrtH,
Qv5vHGpy
qwhyL_
jMm2k%
i7"RRw
lix8t@6"
ft!akl6
[7O9]z
u7t;]c
lix8tF
HxHxW6
5aWlVI
VQ*d#z>70g
[7O:]{
i"#RR]
#I{Q!7
#IwQ!7I
c_Vb!o
Q7G?V[
lhx8tA
!RR_Ojc
jMm2k%
i?"RRwN!uH
BuhyL_
q*,4ZK
xss* T
k#Dl}v
VQ-d9n
p"6^eA
KsQV6`
c_Vb!o
'ut=nB}Up
#IQ!7It
c_Vb)o
Rwr!uH
W159J9
rPEb&T
9S;^aWd$
Q7G8VA
`L-)c)k
o#Dl}v
Liaxs
lix8t@6"
r8}@6"
Q7G8VA
BEn{\b
im#RR]
VQ-d9n
Z@2/WW+CZ|z
^q_lDZ
HElir8|@
jMm2k%
5j^>Y P
lix8t@6"
ft!akl6
eg,6"P
[7O:]{
i;!RR\
lix8tF
lhx8tA
8R3_i!+
VQ-d9n
)Tx/,]A
[7O:]{
1L}7U.
SvhyL_
lix8t@6"
[7O8^b
ft!akl6
!RR_Ojc
};mQ%}
Q7G8VA
lhx8tA
xU,-fR
#]x#'G0
VQ*d#z>70g
[7O:]{
[7O8^b
)k`cD[2
w#IR!7It
92h^VI
KsQV6`
[7O9]z
fT"Hu8
QLuh)M
:f2 Hu
rnm@g,:r
]y6'n>
y &Hehv!
'+ht8RRUN
[8P(]b
Qe$6#RR
y %Huh
!qs_!7a
1UK!Sf
&S~7c
Fuh f5
qthy.I7
2x0A#P&
+I{!!7
X+CoVA
V,g?7
tBnfvEw2
j+Puhy.
#qk!!7
_]`QI<n
<w.QuH
h[/RR]
h+Huhy
}utt0M
Ts2,XFDc
sgC$b?
}ut~ Mq
$-bM D
sehyb_
Ut#ZjJ
v-|`5J
(qhBV*D
]bjc@=
"HujMJ!R
qJncvR,
h+Huhy
PMd!NjW8
`Ba/GT
(&H}h*
[8P'x
UqUnUjk_
+"bp-s
+"bp-rw
+"bH$Q
)q&&^uhyM
Huhy/S
CCb5V7
d^pXJ;
Pu"?5RK
#RR>m^
3m./0-w|WK
!|WD6X
KjHR_R
^A.uP[j
@PhyU 9R
e9(xC
, 3hj|W
)q&&iuhy
r7cC1fB
!.Huhy
&Ouhyq
6kHthy
6kHghy
s3LR"Y`
z?kHdhy
V#RRJP
r7Do_#S^
&sehyy
/|uh%K
r7Pg_#sR
fM[b`Y
D'r?7-
#RRVB-
&HuhyU
D~}Uye
y{d+Pu
5kHkhy
$LM|1>
U7$LrF:r
r7$Ls# R
&:uhyi
r7$Lw#!R
r7$La#%R
+P&>y^(]
^!YM,?|
KR_=wT
0T_7Y7
xUB}dF
PXc7BL
&e*<p#Xo'
8FX{>h
%U*Gs*M
Zr@P13
\opA4I
nP@nyx
&S9C`]U
[-;c#
&TUL]&qv
{9B4tdy
#+"@bROf
5\O`I-F
:V-^Uq
6j>'{1*R
#upR|4
5yWd>;
-eO8tm
Y>hibU(
j,LYy
(yq{ZIh
G[}ic;U
'n*R!^
GB+-x
j.<OjQ
oP|G
Yc.bM"3N
6d F0@
o!&k&%*
*`s\gB
9l)hH"
!XG,br$
`#^pUD
UiMBV6
i8\FG4
%@zRx{
@nOh|c
W?>3~?
+R?,bHQ
&Dok*g
#RtP6_x
bLPOd_T
7X}H49
k{F#RR
I|\5~&
^*=r";Z(
k}rRr\
):8[F+
'z_H"'
M?VKLw\B'
Q);IK={
Q]DyW
3?vgwB
vGM/]K-
.:CzzZEkj
oai,\y
P:e,jx{C,
i+Q!qT
d@op1jz
(|469qJ
Jc'/>*.
R&PLV\
}iVLX2M
+14R$;}
h7?bE\
xqu'0k|
*TY|wv
q_-pV@
x}3Dip
)$o`,1f
Sv^c.-
}f<J# >"
h6e/hTx
#YjHXi
bvq-uz
fw`@)D
OM.m4@
tq`H<
y$fG#
nKBzM58
9G4mWO
j(_f[y
kD,sSN
&HuhyFC
lh2E*`
.IQ/mQ
&Ts'|Z]
Vi^k|"
.oQ5/D
3b&y/
dO*Y ?eo
F{*P#|!
1Fv2^b
%:)G"8
_ 5$*D
k&jk9"&f
877AigY
,,[&}j
ONCtU~gJA[
ve_jkX
`bAtJ=
E+"pE
C8sn`2
LP^*J:
trcN$D
%sF('B
s)Aj0L
;")AYDh
!7:_M(
;|q+&5/
Ipkz3\
U1^5P7
aOru<le
fh?`X*
I%~>'c
y2C`[y
#kJ3KW
|$>m_H
F4gUo7=
FG0j#H
NM?\@a
HGvNow
dt2m!c
C:;{lp
tQLsD'
=RV/4)
nqZxxfV
eH[?Q:uOc
'VET:0
v1a(&4
(41u6=
~~i0Oe
{5]~Dx
k/onS$_m
QI,ybe
~K@h}k
-qE83vZ
\P!.aM
e>M_9$
)c^ \\:
!07))F
:w%#E1 ;
>3bm}h2
&8vvht
,cE@Ie
K2ug>(I
&{Z<*<0[
KoLd37C$
^ZXuKx
v~X9%>
hX'ChC
>jt]d.L
0}8i/5
WnZ2$"1'
(DEeS#
*V/:a0
ab]R6F#
h"{U:17*
9:f]NS
5XQhGc
a<umg~
FxR19
pk9IaF
&pxC6x?
<$%Tv^
z]6'a~R
]IM2Wp
Boq".%P
k=>~@FL
;86Hz/w
pYUOnF
T`\QvT
xY(E)<4
i:&;nz
Ib9c$LZ
.gwwB9
2z}]%+H
Zl?-6 q
(&a>`&
^Ak8rJ
hrkWjH
>@VmrG1
O)9y]2@&
7ziHy4.C-
VMak C
$()T)g"
{}%`Vf
39z)1t
ce_ms~
Bu@@enK
^GDJX;
gqP^vR
e/YLrI
$169<J
$:u8B$
(1.9x2
-VK!}>
c8#F7h
42hLn*
oMU+Ik
X6Xw;v
>0QnZ9
zRQ?<
4!Z+#o
QpUREn
?G;u*|jZ
FvMM<P
q(nNpQJ2e
FUJ1D7N
U~Dg][
(VBlQjl
&Huhyz
m3jM-1i
Lv}IF
& 3e=o
4-!eE]
y.N.x
B!/@"I
q|AqPP5xp
#LS}xFw
(gG.%R:
znNind
5%wWAR
Z.4>JQ;B
92hgy$
WgI< jm
?[?/u
.!\lQ
r.Y}
2UxjyW
pmkSUMc
wU.yi<{
AN%Lhu
[&"1;n
1)4wZs
gi|6t]?
Ep&H!^(;
Ybs19 A)
uK,r%+
pcN'vrl
Z0}+Vi
"JpvhNfJpE
e/&g$:
9,STyxZR
##rm0q
*:x]Y"l
{d,L=&
3r^hUv
W[9Kso
^%kY]fR
Gl:[v;
5LC\'A
CHGp&.
**Clr(o
({b\8dw
.~s}p
tKftv6
wA{4H|
<`Z|}Q
8Cv<fz>
\EG].^
/29i2!
wjSvN$r.|
Bjs#;B{I
);iRlZr
~{K7s<
ltG<x&R
$-?/Ml
',3HxsO+
6#%5d
e&>4JUi^G,
MwHv:7
VA!Zz'
,<[Mxm@jJ
1wIW=S^
tQp^f8}n
eL2F= D
dxJL,
oNz8w#
vv+UI9
1}o_Vd
.6Udzu@
+4&`ei%
XZ~C)UY
%rw",b
{s46.S
%ZQB#!n
r,I^~H
d/cFsE
!#&2ru
aKn.5M
cocE)/
%[ZF7
GRc`K)AQ]
'.ZGe:A/
'hGeR;l
#f@;Z/
{sU2qN
k:t>t:
DI+1!t1<|
LhS.,3!I5]
y3ynD~g
R%$!\c
.lW'`c
Y,+j{~
A[Y-x ;3
::M#wR
sr7%9
*iqW$&
rj4dhN
{}XX$KaA
^o$|l>
Bo?21n
^v4l'j
O3@-aN
s.O]1(<U
]^QGTW
Zs=+5Y
_ro]=s
hkd3qT
S;<Bx^{
%.?P[-
xh11l)
"g uES
Y'1F7>c
W5:z,\
6H4& Q#s
hZ=2>;
&?)tM>Iw
)ls<H}s
Blf@@g
Jij+_J
,:6Y}8
LfTTOH8
|>i6W
93"[{R
nlR-M|S$
!?^|^I
k4~7af
6vCObW
Y#Y:Ii
nKeVTjGG{r
~bFo)(!k!
c)}C!%*
$W\/i&
?[luhy
YS\M\5@
2RneHv|
ki,+b'|H
)T=z#QW
1ST}0=
q[Q<Br
0eMt&7
jU&8=(8
DNFpdl
W!,la#
P6X&'X
f<5<lo
0{xf_ B@
a&-(6H
.aXz#d
O1.&9{
.C\BD;i
,:jXa+
i +MK(
gTCI`{
g;;ho'
#RRwN&
L,ZcqdIr
qjv\,c
s:EJ"Z
w`GzV&|{
z/^SISkt
XaN~x.
f'^kcX
I^31fe4Q
,etKDe
r5'r`.
M%(?=q
:s.=8M>
P@&/dz
'Y*>c^
mrxY'<
N/za-2
yZ I:.-
^L5^E0V
Pd\V3]
v&Huhy
_>MJnB
({g[IK
Uzrnj,
/:%$fg*[
~,&Oq}
|7T]hw
(pu*zF`
ss}N"p
')67e<
oI;MREc
-S~6u
ds!%}f
tUV7C(
k!vV7,
]]}goh
agwnDS
MRq)U
w.kN]L
vIOl]<R
rS8r^
6)11 {
e-BBSe
Qa/:uZ
|N]bBhdc
[ISa/c
Y\a,n<c
qg8ys7
SHa/:uZ
PS'WMY1)
hdc~j3j
g^Vs9l+
JuhyX!^
a/:uI
^_FrS
vI*!IZa,
Antivirus Signature
Bkav W32.AIDetect.malware1
Lionic Trojan.Win32.Strab.4!c
Elastic malicious (high confidence)
MicroWorld-eScan Trojan.GenericKD.64279258
FireEye Generic.mg.a05a3305d0474756
CAT-QuickHeal Clean
ALYac Trojan.GenericKD.64279258
Cylance Unsafe
VIPRE Trojan.GenericKD.64279258
Sangfor Trojan.Win32.Save.a
K7AntiVirus Trojan ( 0059ca7d1 )
BitDefender Trojan.GenericKD.64279258
K7GW Trojan ( 0059ca7d1 )
Cybereason Clean
BitDefenderTheta Gen:NN.ZexaF.36158.gwX@aq9pclei
VirIT Trojan.Win32.Genus.NIE
Cyren W32/ABRisk.AYTS-0464
Symantec ML.Attribute.HighConfidence
tehtris Clean
ESET-NOD32 a variant of Generik.JOOGERF
Baidu Clean
APEX Malicious
Paloalto Clean
ClamAV Clean
Kaspersky Trojan.Win32.Strab.sc
Alibaba Trojan:Win32/Strab.bb4ac12e
NANO-Antivirus Trojan.Win32.Strab.jtxljk
Cynet Malicious (score: 100)
ViRobot Clean
Rising Trojan.GenCBL!8.12138 (TFE:5:C8z95tZPbLD)
Ad-Aware Trojan.GenericKD.64279258
Sophos Mal/Generic-S
Comodo Malware@#1ry3fywg1p1gw
F-Secure Clean
DrWeb Clean
Zillya Clean
TrendMicro TrojanSpy.Win32.VIDAR.YXCLOZ
McAfee-GW-Edition BehavesLike.Win32.MultiPlug.vc
Trapmine suspicious.low.ml.score
CMC Clean
Emsisoft Trojan.GenericKD.64279258 (B)
SentinelOne Clean
GData Trojan.GenericKD.64279258
Jiangmin Clean
Webroot W32.Trojan.GenKD
Avira TR/AD.GenSteal.ctcjt
MAX malware (ai score=85)
Antiy-AVL Trojan/Win32.GenKryptik
Kingsoft Win32.Troj.Strab.sc.(kcloud)
Gridinsoft Ransom.Win32.Sabsik.sa
Arcabit Trojan.Generic.D3D4D2DA
SUPERAntiSpyware Clean
ZoneAlarm Clean
Microsoft Trojan:Win32/Woreflint.A!cl
Google Detected
AhnLab-V3 Trojan/Win.Generic.C5335372
Acronis suspicious
McAfee Artemis!A05A3305D047
TACHYON Clean
VBA32 BScope.TrojanSpy.Stealer
Malwarebytes Clean
Panda Clean
Zoner Clean
TrendMicro-HouseCall TrojanSpy.Win32.VIDAR.YXCLOZ
Tencent Win32.Trojan.Strab.Hmnw
Yandex Clean
Ikarus Trojan.SuspectCRC
MaxSecure Trojan.Malware.195482221.susgen
Fortinet W32/PossibleThreat
AVG CrypterX-gen [Trj]
Avast CrypterX-gen [Trj]
CrowdStrike win/malicious_confidence_100% (W)
No IRMA results available.