Static | ZeroBOX

Name	Virtual Address	Virtual Size	Size of Raw Data	Entropy
.text	0x00001000	0x0004d078	0x0004d200	6.17555641008
.rdata	0x0004f000	0x00013a14	0x00013c00	5.21589399272
.data	0x00063000	0x00033c0c	0x00031a00	6.95210884399
.pdata	0x00097000	0x000035e8	0x00003600	5.63905232154
_RDATA	0x0009b000	0x0000015c	0x00000200	3.31742438835
.rsrc	0x0009c000	0x00001b10	0x00001c00	4.09587984412
.reloc	0x0009e000	0x000009d8	0x00000a00	5.40846304181

Name	Offset	Size	Language	Sub-language	File type
RT_ICON	0x0009c5c8	0x000010a8	LANG_KOREAN	SUBLANG_KOREAN	data
RT_ICON	0x0009c5c8	0x000010a8	LANG_KOREAN	SUBLANG_KOREAN	data
RT_GROUP_ICON	0x0009d670	0x00000022	LANG_KOREAN	SUBLANG_KOREAN	data
RT_VERSION	0x0009d698	0x000002f4	LANG_KOREAN	SUBLANG_KOREAN	data
RT_MANIFEST	0x0009d990	0x0000017d	LANG_ENGLISH	SUBLANG_ENGLISH_US	XML 1.0 document text

!This program cannot be run in DOS mode.

`.rdata

@.data

.pdata

@_RDATA

@.rsrc

@.reloc

D$XHc@<H

L$xH9H

D$hH9D$@

H9D$Pw]H

D$XH9D$Hs

D$XH9D$Hv

D$HH9D$`

D$@H9D$ u

D$(H9D$8t

D$(H9D$ t

H9D$hv

H9D$@v

HkD$@ H

(HkD$@ H

D$`H9D$(v

H9D$Xv

D$(H9D$ u$H

D$@H9D$ u!H

D$PH9D$(w

UUUUUUU

H9D$@v

HkD$@0H

H9D$ u

L$ H;H

(HkD$@0H

H9D$(u

UUUUUUU

H9D$Xs

D$@H9D$8t"H

|$ :}*

D$$kD$P

HcD$@Hi

HcD$DHi

XHcD$hHi

HcL$pHk

HcD$hHi

HcL$pHk

D$\kD$X

HcD$tHi

u8HcD$tHi

HcD$tHi

u3HcD$tHi

tHcD$tHi

HcD$|Hi

u5HcD$|Hi

HcD$|Hi

HcT$|Hi

HcD$|Hi

wHcD$|Hi

D$DHcD$HHi

HcL$DHk

HcD$HHi

HcL$DHk

HcD$HHi

HcL$DHk

HcD$HHi

HcL$DHk

HcD$HHi

HcL$DHk

HcD$HHi

HcL$DHk

HcD$HHi

HcL$DHk

HcD$HHi

HcL$DHk

HcD$LHi

HcL$`Hk

HcD$HHi

HcL$DHk

HcD$HHi

HcL$DHk

u/HcD$HHi

HcL$DHk

u,HcD$HHi

HcL$DHk

u,HcD$HHi

HcL$DHk

u*HcD$HHi

HcL$DHk

HcD$HHi

HcL$DHk

HcD$HHi

HcL$DHk

u/HcD$HHi

HcL$DHk

u,HcD$HHi

HcL$DHk

u,HcD$HHi

HcL$DHk

u*HcD$HHi

HcL$DHk

HcD$HHi

HcL$DHk

HcD$HHi

HcL$DHk

HcD$LHi

HcL$`Hk

HcD$HHi

HcL$DHk

HcT$HHi

LcD$DMk

HcD$LHi

HcL$`Hk

HcD$dHi

HcL$hHk

ujHcD$dHi

HcL$hHk

HcD$dHi

HcL$hHk

D$\HcD$\H=

HcL$\H

HcD$\H

HcL$\H

HcD$THi

u4HcD$THi

HcD$THi

wHcD$THi

HcD$ Hi

HcL$$Hk

udHcD$ Hi

HcL$$Hk

HcD$ Hi

HcL$$Hk

HcD$THi

u4HcD$THi

HcD$THi

u4HcD$THi

HcD$THi

u4HcD$THi

HcD$THi

u4HcD$THi

HcD$THi

u4HcD$THi

HcD$THi

u4HcD$THi

HcD$THi

u4HcD$THi

HcD$THi

u4HcD$THi

HcD$THi

HcD$DHi

u5HcD$DHi

HcD$DHi

HcT$DHi

HcD$DHi

u5HcD$DHi

HcD$DHi

HcT$DHi

HcD$DHi

u5HcD$DHi

HcD$DHi

HcT$DHi

HcD$DHi

u5HcD$DHi

HcD$DHi

HcT$DHi

HcD$DHi

u5HcD$DHi

HcD$DHi

HcT$DHi

HcD$DHi

u5HcD$DHi

HcD$DHi

HcT$DHi

HcD$DHi

u5HcD$DHi

HcD$DHi

HcT$DHi

HcD$DHi

u5HcD$DHi

HcD$DHi

HcT$DHi

HcD$DHi

HcD$tHi

u7HcD$tHi

HcD$tHi

HcT$tHi

HcD$tHi

u7HcD$tHi

HcD$tHi

HcT$tHi

HcD$tHi

HcD$|Hi

u8HcD$|Hi

HcD$|Hi

HcT$|Hi

HcD$|Hi

u8HcD$|Hi

HcD$|Hi

HcT$|Hi

HcD$|Hi

HcD$dHi

u7HcD$dHi

HcD$dHi

HcT$dHi

HcD$dHi

u7HcD$dHi

HcD$dHi

HcT$dHi

HcD$dHi

HcD$lHi

u8HcD$lHi

HcD$lHi

HcT$lHi

HcD$lHi

u8HcD$lHi

HcD$lHi

HcT$lHi

HcD$lHi

D$XHcD$\Hi

u4HcD$\Hi

HcD$\Hi

D$XHcD$\Hi

u4HcD$\Hi

HcD$\Hi

D$XHcD$\Hi

u4HcD$\Hi

HcD$\Hi

D$XHcD$\Hi

u4HcD$\Hi

HcD$\Hi

D$XHcD$\Hi

u4HcD$\Hi

HcD$\Hi

D$XHcD$\Hi

u4HcD$\Hi

HcD$\Hi

D$XHcD$\Hi

u4HcD$\Hi

HcD$\Hi

D$XHcD$\Hi

u4HcD$\Hi

HcD$\Hi

D$HHcD$LHi

u5HcD$LHi

HcD$LHi

HcT$LHi

HcD$LHi

D$HHcD$LHi

u5HcD$LHi

HcD$LHi

HcT$LHi

HcD$LHi

D$HHcD$LHi

u5HcD$LHi

HcD$LHi

HcT$LHi

HcD$LHi

D$HHcD$LHi

u5HcD$LHi

HcD$LHi

HcT$LHi

HcD$LHi

D$HHcD$LHi

u5HcD$LHi

HcD$LHi

HcT$LHi

HcD$LHi

D$HHcD$LHi

u5HcD$LHi

HcD$LHi

HcT$LHi

HcD$LHi

D$HHcD$LHi

u5HcD$LHi

HcD$LHi

HcT$LHi

HcD$LHi

D$HHcD$LHi

u5HcD$LHi

HcD$LHi

HcT$LHi

HcD$LHi

HcD$ Hi

u4HcD$ Hi

HcD$ Hi

u5HcD$ Hi

HcD$ Hi

uyHcD$ Hi

HcD$(Hi

u4HcD$(Hi

HcD$(Hi

u5HcD$(Hi

HcD$(Hi

uyHcD$(Hi

HcD$0Hi

u4HcD$0Hi

HcD$0Hi

u5HcD$0Hi

HcD$0Hi

uyHcD$0Hi

HcD$8Hi

u4HcD$8Hi

HcD$8Hi

u5HcD$8Hi

HcD$8Hi

uyHcD$8Hi

D$HHcD$HH

D$HH9D$ u

H9D$Xt'H

H9D$Xu

D$ H9D$Hw

H9D$Pu

L$8H9H

H;D$0~1H

H+D$0H

H+D$8H;

H+D$HH;

H+D$8H;

H9D$ u

D$(H9D$ r

H;D$(r

L$@H#A0H

H;D$ v'H

x ATAVAWH

A_A^A\

@SUVWAVH

A^_^][

tpH91uk

t$ UWAVH

taL9Chu

L90u H

M/H;M7s H

x ATAVAWH

A_A^A\

t$ WAVAWH

A_A^_

x ATAVAWH

A_A^A\

l$ VWAVH

@UAVAWH

u/HcH<H

H3E H3E

D8L$0uP

VWATAVAWH

A_A^A\_^

WATAUAVAWH

A_A^A]A\_

H;xXu5

ffffff

fffffff

ffffff

vKfffff

WATAUAVAWH

A_A^A]A\_

AUAVAWH

u4I9}(

;I9}(tiH

0A_A^A]

AUAVAWH

u4I9}(

;I9}(tiH

0A_A^A]

UVWATAUAVAWH

`A_A^A]A\_^]

UVWATAUAVAWH

`A_A^A]A\_^]

@USVWATAUAVAWH

A_A^A]A\_^[]

@USVWATAUAVAWH

d$dD;d$ltY

A_A^A]A\_^[]

UVWATAUAVAWH

A_A^A]A\_^]

@USVWATAUAVAWH

A_A^A]A\_^[]

WAVAWH

@SVWATAUAVAWH

L!|$(L!

D$0HcH

pA_A^A]A\_^[

SVWATAUAWH

L!d$(L!d$@D

D$HL9gXt

A_A]A\_^[

B(I9A(

SVWATAUAVAWH

0A_A^A]A\_^[

SVWATAUAVAWH

A_A^A]A\_^[

t$ WATAUAVAWH

A_A^A]A\_

UVWATAUAVAWH

A_A^A]A\_^]

D$ I;R

D$ I9P

WATAUAVAWH

A_A^A]A\_

D$0@8{

p*W4H

u3HcH<H

@USVWATAVAWH

A_A^A\_^[]

x AUAVAWH

0A_A^A]

D$@H;F

kL@8o(u

<htl<jt\<lt4<tt$<wt

|$ UATAUAVAWH

<Ct-<D

<St[@:

u<g~l<it[<ntP<ot,<pt

<utK@:

A_A^A]A\]

L$ VWAVH

L$ UVWATAUAVAWH

0A_A^A]A\_^]

T$ D)s

t$ WATAUAVAWH

0A_A^A]A\_

D$(H!L$ E3

;D$hsC

t$ UWAUAVAWH

A_A^A]_]

s WATAUAVAWH

D$h9t$P

A_A^A]A\_

SUVWATAVAWH

A_A^A\_^][

fffffff

ffffff

fffffff

ffffff

u$D8r(t

D81uUL9r

uED8r(t

vAD8s(t

f9)u4H9j

u%@8j(t

x ATAVAWH

A_A^A\

UVWAVAWH

0A_A^_^]

t$ WAVAWH

A_A^_

WAVAWH

A_A^_

p0R^G'

WAVAWH

fE98t'

0A_A^_

@USVWATAUAVAWH

A_A^A]A\_^[]

9Cu,fD9y

fB9<{u

fD9,pu

t$`fD9+t$I

L$ SUVWH

WATAUAVAWH

0A_A^A]A\_

\$ UVWATAUAVAWH

fD9,Au

A_A^A]A\_^]

\$ UVWATAUAVAWH

f9t$bu

A_A^A]A\_^]

H9L$Ht?H

UVWATAUAVAWH

fE9,Fu

A_A^A]A\_^]

|$ AVH

UVWATAUAVAWH

rsf;\$d

r_f;\$l

rKf;\$t

r7f;\$|

f;\$4r

f;\$<r

f;\$Dr

f;\$Lr

rvf;\$d

rbf;\$l

rNf;\$t

r:f;\$|

A_A^A]A\_^]

WATAUAVAWH

gfffffffH

A_A^A]A\_

{ AUAVAWH

0A_A^A]

t$xt*3

WAVAWH

A_A^_

x ATAVAWH

A_A^A\

L$ VWAVH

fD94H}aD

fD9t$b

WATAUAVAWH

0A_A^A]A\_

x UAVAWH

t(LcuoH;

UVWATAUAVAWH

A_A^A]A\_^]

@USVWATAUAVAWH

xA_A^A]A\_^[]

u1!D$0H

UVWATAUAVAWH

PA_A^A]A\_^]

WATAUAVAWH

A_A^A]A\_

p0R^G'

UVWATAUAVAWH

fB9<A}1L

A_A^A]A\_^]

VWATAVAW

A_A^A\_^

AUAVAWH

@A_A^A]

@USVWATAUAVAWH

H!D$ I

hA_A^A]A\_^[]

UVWATAUAVAWH

A_A^A]A\_^]

UVWATAUAVAW

A_A^A]A\_^]

D$0H9D$8

@SUVWATAUAVH

s5fE9!

fE9!fA

D$pfA;

NfD9d$pu

fD9d$pt+fD

0A^A]A\_^][

UVWATAUAVAWH

0A_A^A]A\_^]

AUAVAWH

A_A^A]

SUWATAUAVAWH

`A_A^A]A\_][

AUAVAWH

@A_A^A]

WATAVH

0A^A\_

E80t"A

fD94Q}

WATAVH

0A^A\_

@USVWATAUAVAWH

xA_A^A]A\_^[]

@UATAUAVAWH

e0A_A^A]A\]

@SUVWATAVAWH

A_A^A\_^][

@UATAUAVAWH

e0A_A^A]A\]

@UATAUAVAWH

H!T$0D

u,!T$(H!T$

A_A^A]A\]

\$ VWATAUAVH

D!l$xA

@A^A]A\_^

WAVAWH

@A_A^_

u$D8r(t

fD91uTL9r

uED8r(t

v@D8s(t

UVWATAUAVAWH

PA_A^A]A\_^]

WATAUAVAWH

0A_A^A]A\_

H97u+A

@USVWATAUAVH

D8t$ht

A^A]A\_^[]

l$ VWATAVAWH

L$&8\$&t,8Y

A_A^A\_^

UVWATAUAVAWH

xWI96tRI

0A_A^A]A\_^]

UATAUAVAWH

A_A^A]A\]

WATAUAVAWH

A_A^A]A\_

UATAUAVAWH

A_A^A]A\]

fB9<Hu

fB9<@u

fB9<Bu

fB9,Nu

fA9,Au

f9)u:H

fB94Ou

x ATAVAWH

A_A^A\

x ATAVAWH

fG9$Ou

0A_A^A\

fB9<Hu

fB9<@u

fB9<Bu

fD94Au

fD94iu

tSf91tNH

tU;\$0tH

WAVAWH

A_A^_

@USVWATAVAWH

tyfD9 tsH

tQfD9 tK

fD9$Hu

@A_A^A\_^[]

x ATAVAWH

0A_A^A\

@USVWATAVAWH

A_A^A\_^[]

WATAUAVAWH

0A_A^A]A\_

UVWATAUAVAWH

L9#t!H

:u A8N

pA_A^A]A\_^]

t$ WATAUAVAWH

0A_A^A]A\_

UATAUAVAWH

D8l$pt

D8l$ptGH

D8l$pt

A_A^A]A\]

WAVAWH

A_A^_

UVWATAUAVAWH

@A_A^A]A\_^]

USVWAVH

A^_^[]

USVWAVH

A^_^[]

T$`fA;

ATAUAVH

L$ fff

L$ |+L;

A^A]A\

x UAVAWH

WAVAWH

D8|$`t

A_A^_

x ATAVAWH

@A_A^A\

ffffff

fffffff

@SUVWATAVAWH

@A_A^A\_^][

@USVWATAUAVAWH

eHA_A^A]A\_^[]

ATAVAWH

A_A^A\

LcA<E3

bad allocation

success

address family not supported

address in use

address not available

already connected

argument list too long

argument out of domain

bad address

bad file descriptor

bad message

broken pipe

connection aborted

connection already in progress

connection refused

connection reset

cross device link

destination address required

device or resource busy

directory not empty

executable format error

file exists

file too large

filename too long

function not supported

host unreachable

identifier removed

illegal byte sequence

inappropriate io control operation

interrupted

invalid argument

invalid seek

io error

is a directory

message size

network down

network reset

network unreachable

no buffer space

no child process

no link

no lock available

no message available

no message

no protocol option

no space on device

no stream resources

no such device or address

no such device

no such file or directory

no such process

not a directory

not a socket

not a stream

not connected

not enough memory

not supported

operation canceled

operation in progress

operation not permitted

operation not supported

operation would block

owner dead

permission denied

protocol error

protocol not supported

read only file system

resource deadlock would occur

resource unavailable try again

result out of range

state not recoverable

stream timeout

text file busy

timed out

too many files open in system

too many files open

too many links

too many symbolic link levels

value too large

wrong protocol type

unknown error

0123456789abcdefghijklmnopqrstuvwxyz

SleepConditionVariableCS

WakeAllConditionVariable

bad exception

__based(

__cdecl

__pascal

__stdcall

__thiscall

__fastcall

__vectorcall

__clrcall

__eabi

__swift_1

__swift_2

__swift_3

__ptr64

__restrict

__unaligned

restrict(

delete

operator

`vftable'

`vbtable'

`vcall'

`typeof'

`local static guard'

`string'

`vbase destructor'

`vector deleting destructor'

`default constructor closure'

`scalar deleting destructor'

`vector constructor iterator'

`vector destructor iterator'

`vector vbase constructor iterator'

`virtual displacement map'

`eh vector constructor iterator'

`eh vector destructor iterator'

`eh vector vbase constructor iterator'

`copy constructor closure'

`udt returning'

`local vftable'

`local vftable constructor closure'

new[]

delete[]

`omni callsig'

`placement delete closure'

`placement delete[] closure'

`managed vector constructor iterator'

`managed vector destructor iterator'

`eh vector copy constructor iterator'

`eh vector vbase copy constructor iterator'

`dynamic initializer for '

`dynamic atexit destructor for '

`vector copy constructor iterator'

`vector vbase copy constructor iterator'

`managed vector copy constructor iterator'

`local static thread guard'

operator ""

operator co_await

operator<=>

Type Descriptor'

Base Class Descriptor at (

Base Class Array'

Class Hierarchy Descriptor'

Complete Object Locator'

`anonymous namespace'

FlsAlloc

FlsFree

FlsGetValue

FlsSetValue

InitializeCriticalSectionEx

CorExitProcess

(null)

COMSPEC

cmd.exe

!"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]^_`abcdefghijklmnopqrstuvwxyz{|}~

!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~

[aOni*{

~ $s%r

@b;zO]

v2!L.2

UUUUUU

"e?<<<<<<l?

Il?333333c?

.i?0@I

d?000000`?

)|B?d!

L?UUUUUUU?

&?PPPPPPP?

0X8b?~

%GoU?*

(T?j?Y

Zod(^?

D W?{W

qS>g?h3

c?FA@s}

UUUUUU

?UUUUUU

?kxG2)

?TY,>5

?!5WOo

?E=$% B

?49HoKC

!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~

Sunday

Monday

Tuesday

Wednesday

Thursday

Friday

Saturday

January

February

August

September

October

November

December

MM/dd/yy

dddd, MMMM dd, yyyy

HH:mm:ss

NAN(SNAN)

nan(snan)

NAN(IND)

nan(ind)

_hypot

_nextafter

AreFileApisANSI

CompareStringEx

EnumSystemLocalesEx

GetDateFormatEx

GetLocaleInfoEx

GetTimeFormatEx

GetUserDefaultLocaleName

IsValidLocaleName

LCMapStringEx

LCIDToLocaleName

LocaleNameToLCID

AppPolicyGetProcessTerminationMethod

A03>A|

Q5rHg,>

Hk=>:

j>>A?1

.>PJ;I:qE>

:>t6k'

])6M>&

CWD>~3

_oD>Kg

N>O=I9

F>qUxv

/2GG>!B

zY;>u:m

P>q_Y~

0><[cZUg^>

Y>kX>M

H[><y5

[*ncd>0

S>$hkDh$h>[2

UA>N0Wl

9>powf

?8bunz8

?@En[vP

?UUUUUU

?7zQ6$

1#QNAN

1#SNAN

UUUUUU

=imb;D

/>58d%

VM>cQ6

>jtm}S

)>6{1n

+f)>0'

;H9>&X

*StO9>T

n03>Pu

K~Je#>!

bp(=>?g

BC?>6t9^

K&>.yC

.xJ>Hf

y\PD>!

|b=})>

c [1>H'

uzKs@>

3>N;kU

kE>fvw

V6E>`"(5

>Unknown exception

bad array new length

map/set too long

string too long

NtGetTickCount

Green to Move!

Which Piece (in form of XY, for e.g. 62):

Where to Move (New Coordinates):

Invalid Move!

Green to Move!

White to Move!

zbbduvhdpbxzvcjfcwgqpsgtjqxwtp

Wrong Piece Selected!

Green to Move!

White to Move!

Game Over!

iostream

bad cast

bad locale name

ios_base::badbit set

ios_base::failbit set

ios_base::eofbit set

invalid string position

unordered_map/set too long

invalid hash bucket count

iostream stream error

.text$di

.text$mn

.text$mn$00

.text$x

.text$yd

.idata$5

.00cfg

.CRT$XCA

.CRT$XCAA

.CRT$XCC

.CRT$XCL

.CRT$XCU

.CRT$XCZ

.CRT$XIA

.CRT$XIAA

.CRT$XIAC

.CRT$XIC

.CRT$XIZ

.CRT$XLA

.CRT$XLZ

.CRT$XPA

.CRT$XPX

.CRT$XPXA

.CRT$XPZ

.CRT$XTA

.CRT$XTZ

.rdata

.rdata$T

.rdata$r

.rdata$voltmd

.rdata$zzzdbg

.rtc$IAA

.rtc$IZZ

.rtc$TAA

.rtc$TZZ

.tls$ZZZ

.xdata

.xdata$x

.idata$2

.idata$3

.idata$4

.idata$6

.data$r

.data$rs

.pdata

_RDATA

.rsrc$01

.rsrc$02

SetConsoleTextAttribute

GetStdHandle

GetModuleFileNameW

LoadLibraryW

GetProcAddress

WideCharToMultiByte

SetConsoleCursorPosition

KERNEL32.dll

EnterCriticalSection

LeaveCriticalSection

InitializeCriticalSectionEx

DeleteCriticalSection

EncodePointer

DecodePointer

MultiByteToWideChar

LCMapStringEx

GetStringTypeW

GetCPInfo

CloseHandle

InitializeCriticalSectionAndSpinCount

SetEvent

ResetEvent

WaitForSingleObjectEx

CreateEventW

GetModuleHandleW

RtlCaptureContext

RtlLookupFunctionEntry

RtlVirtualUnwind

UnhandledExceptionFilter

SetUnhandledExceptionFilter

GetCurrentProcess

TerminateProcess

IsProcessorFeaturePresent

IsDebuggerPresent

GetStartupInfoW

QueryPerformanceCounter

GetCurrentProcessId

GetCurrentThreadId

GetSystemTimeAsFileTime

InitializeSListHead

RtlUnwindEx

RtlPcToFileHeader

RaiseException

GetLastError

SetLastError

TlsAlloc

TlsGetValue

TlsSetValue

TlsFree

FreeLibrary

LoadLibraryExW

RtlUnwind

ExitProcess

GetModuleHandleExW

WriteFile

HeapAlloc

HeapFree

GetFileType

WaitForSingleObject

GetExitCodeProcess

CreateProcessW

GetFileAttributesExW

FlsAlloc

FlsGetValue

FlsSetValue

FlsFree

CompareStringW

LCMapStringW

GetLocaleInfoW

IsValidLocale

GetUserDefaultLCID

EnumSystemLocalesW

FlushFileBuffers

GetConsoleOutputCP

GetConsoleMode

ReadFile

GetFileSizeEx

SetFilePointerEx

ReadConsoleW

HeapReAlloc

FindClose

FindFirstFileExW

FindNextFileW

IsValidCodePage

GetACP

GetOEMCP

GetCommandLineA

GetCommandLineW

GetEnvironmentStringsW

FreeEnvironmentStringsW

SetEnvironmentVariableW

GetProcessHeap

SetStdHandle

HeapSize

CreateFileW

WriteConsoleW

abcdefghijklmnopqrstuvwxyz

ABCDEFGHIJKLMNOPQRSTUVWXYZ

abcdefghijklmnopqrstuvwxyz

ABCDEFGHIJKLMNOPQRSTUVWXYZ

vhdp;2

,ubzab

hdpbzbbduvhdpbzbbduvhdpbzbbduvhdpb

Fi}h^bbduvhdA

Zzbbduvhd 'zb

zbbduvhd

bXbif{Th

qbzbcduvhd

zbbtuvhdp"{bbdufhdprzbdduvhdpb|bbduvhdpbybb`uvhdpbxb

uvxdpbzbbtuvhdpbzbrduvhdprzbbduvhdpbjbbduvhdpbzbV

wv@dpbz

xb"suvhdpbzbbdu

wvPdpbzbbduvhdpbzbbduv

rbRbbd

)jd0czbbduvhdpbz

thdpbzbbduvhdpbzbbduvhdpbzbL

cdufhdp

{bbtuvhdpbzbbduvhdPbz

tvhdpbzbbduvhd0bz"L

dpbzBbdu

jdpBzbb

wvhdpbzbbduvhd0bz

pbzBbdu

jdpBzbb

wvhdpbzbbduvhd0bz"=617<%pbzrbdu

jdprzbb

wvhdpbzbbduvhd0bz"L

dpbzrbdu

jdprzbb

wvhdpbzbbduvhd0bz"L

pbzrbdu

jdprzbb

wvhdpbzbbduvhd0bz bduvhdpbzbbduvhdpbzbbduvhdpbzbbduvhdpbzbbduvhdpbzbbduvhdpbzbbduvhdpbzbbduvhdpbzbbduvhdpbzbbduvhdpbzbbduvhdpbzbbduvhdpbzbbduvhdpbzbbduvhdpbzbbduvhdpbzbbduvhdpbzbbduvhdpbzbbduvhdpbzbbduvhdpbzbbduvhdpbzbbduvhdpbzbbduvhdpbzbbduvhdpbzbbduvhdpbzbbduvhdpbzbbduvhdpbzbbduvhdpbzbbduvhdpbzbbduvhdpbzbbduvhdpbzbbduvhdpbzbbduvhdpbzbbduvhdpbzbbduvhdpbzbbduvhdpbzbbduvhdpbzbbduvhdpbzbbduvhdpbzbbduvhdpbzbbduvhdpbzbbduvhdpbzbbduvhdpbzbbduvhdpbzbbduvhdpbzbbduvhdpbzbbduvhdpbzbbduvhdpbzbbduvhdpbzbbduvhdpbzbbduvhdpbzbbduvhdpbzbbduvhdpbzbbduvhdpbzbbduvhdpbzbbduvhdpbzbbduvhdpbzbbduvhdpbzbbduvhdpbzbbduvhdpbzbbduvhdpbzbbduvhdpbzbbduvhdpbzbbduvhdpbzbbduvhdpbzbbduvhdpbzbbduvhdpbzbbduvhdpbzbbduvhdpbzbbduvhdpbzbbduvhdpbzbbduvhdpbzbbduvhdpbzbbduvhdpbzbbduvhdpbzbbduvhdpbzbbduvhdpbzbbduvhdpbzbbduvhdpbzbbduvhdpbzbbduvhdpbzbbduvhdpbzbbduvhdpbzbbduvhdpbzbbduvhdpbzbbduvhdpbzbbduvhdpbzbbduvhdpbzbbduvhdpbzbbduvhdpbzbbduvhdpbzbbduvhdpbzbbduvhdpbzbbduvhdpbzbbduvhdpbzbbduvhdpbzbbduvhdpbzbbduvhdpbzbbduvhdpbzbbduvhdpbzbbduvhdpbzbbduvhd

d17;4+

gnbdu7

jdwbzb*

fpjzbb

zfmg?`z

lA(bzb*

.xb*k07`

s$(rb2

<FZmsf

p116;7#24!

m#]:ng

uvhdpbz

"t>Ud`bz

fdpb6Y

/771 #=a8[

!7bzmr!

;=#:4+)8-

t4Z3{

+j M?q

whdpczb*W

0j2Y2t

cR!rb2

LD'#,#5,

v?Q[8m=

B;=#:*

"j+Y&e

1rB:zk

%}>S,`

hdpZ"z

#l=M t

&xZ"zm

FD#!)28

U#)017;4#3=

~bbd0E

2epb*

%*76%-#&?

>@m#>316;7#24!

y[eW=8

y/ey=8

hX{[)*

>Ybd0E

QVhdpfu

dxbz*a

hlpb2a

brbb,v

^rkdu>

jzb#;4()91>%<?

h7;6#14 )38

mLi];,

8}pbu5

y?e8=8

h6{?)*

gLq[,>

rMTpbz.

:zbb-v

z`bdv>

~GRduv

h={))*

duvhd`bz*

'xgz`bk

']vhbp*

!2rbfu>

`URzbb,

;=#:4+)8-

p116;7#24!

gT$`d=E

y[eW=8

E2'duy

1RP`pbz

&@Evxdp*

3Fcd`b6

4FB"bdu

,@@bJbb,

j~{bb,v

xncbd8u

);1<;?#8(

epbz+a

@h5;4#3=

,@8czbb

1R(fpbz*

T"{bbd

2L\rbzb*

4@x7,5#24!

$4)):/<'

^z434

]G#`b,

Fz34 )38

C&<rb2

$4)):/

@m!)2152

QN5xb*

4FRjbdu>

&@U~hdp.

"%*76;

TB,5#04 )38

cbduwhd<m

]8`b,N

g. `d=

>FJ%zfl@

sF&rb3

-`,K!j

:%wv _

"j,N>x

aX#xb*

gx%wv

oi4th,

gd#`d<U

T4)):1>%<

g:uE:`b

uvhdpbz

}vhd8Y

whdpczb.W

G[]fu;K

&x-K0j

"j3Y0t

FZ5#04#)2152

epbzcbd7y

:Lt8Y&FJ

#;4()91>%

cduvidpm

9Rx,K>^J

(QVgur

qIUjd8

bzbbd=Me

fAEvhd8

cduvg

u[A`b,

a7Mjd8

mqK`zc

w8X`d=

YGXxbb

gV]wv

fA-vhd1

bbd5%

lA(bzb

gFN`d4

wGZfu>

pKPfp*

}M`b,

Xepb:P

Qrb{bbd=

Wxb`duv

g0T`d=

\fpk~b

\fpczbb

fcfuvh

}[R`b,

ofJ`d=

[fpk~b

[fpczbb

e)b`b,

{bcdtvhd8m

m%G`z#

Sjdqbzb&

azGxbaduv

axGxb#

Qthapbz

AP@jdp

Q&}dp"

&F0tvhd

wkbdu>

aiTjd8

=B2S't

Z*Q!U>[!`*I

wwQfu>

Ls<Erbu

>F"duvh

1R(dpbz

^z434")2152

:k T2>

H%/#$#>;+

Rp316;7#24!

!tyx TB>m'

6^Zmt9RX

4)):1?;>=

;xbbke2LT<

=euyxd<

(QFgt8ruscke6Hka+jmr,Eyy%Pmj""kd?Xk`**ms%5yx$

mk+2ke

dpbus#

bduyy%

s Upb3

?euyxd<

(QFgt8ruscke6Hka+jmr,Eyy%Pmj""kd?Xk`**ms%5yx$

mk+2ke

dpbus#

bduyy%

sXVpb2

"D<u"l=a8j*

}qbb,N.0

y,s3B*

w"7cd=

wB0tv

cL6qb2

@h5;6#14 )38

whdp+y

%/#$#?%))

dpbzb5

bzbbd=

cetwieqc6m

hdpmeb+g

bbduv$

cdu:Sa

dpbzb._podfp

cx/qb2

dpb:1*

@h#/#4%">

#tvh]K

'}>kb8

hdp*C\m

D+CJk

E77%.#'

Fb#7%#7?,

5euvQ|

+h8a|*

bbd=OVk

R;=#:4+

"b7434")114;5*

%/#$#?%))69

"z1#!)017;4#3=

#%#<%(74;.?

5#;2'#.#7%#7?,

g6dwv W

fbdN1lk

#urfd<

itvh I

Lqbz#=%+75%,=$9?

5#;2'#.#7%#7?,

#~ g&ju

zbbke3Pk`/2ms!

cbd4)):1?;>=:.+

4e#>316;7#24!

qNU{b*

@hczb*

hdp#%#<%(74;.?

:712"7<%%#,#5,

Hczb#;4()91>%<99

cbdN5lk

NcduOg

X{bb N=lk

@h5;4#3=

bzb&]~

5j,v#`k

Heuv,]s

3x*y7jk

okbdu>

%Tmk#R(

(7&5;6#14 )38

vhdqbzb

TB{bbd

4)):1?;>=:.

1434")1152

vhdqbzb

&@Uwhdp

zbb%*75%,=$9

4Rgu1R2

&X+C#J

6Fj7#!)017;4#3=

T1=;<#94*7:+

7&5;6#14 )38

bcduyA

&~ gfm

Rtvh(K

bduy@ TR

dtvh%/#$#?%))6?

@U!)017;4#3=

Z#=%+75%,=

6@e#>316;7#24!

^jmtvyyd

r1rmu=f

rmrgzgik`)j*

D4)):1?;>=:(

'j3Y2l

+Q(j,^

W#mtwyy TB3Y0l

mjemu1RH-I2r

bbduv

~GRduv

zbb,N>x

@h5;6#14 )38

`Gpep*

}kgcz*

D1=;<#94*7

p'Cep*

m}[cz*

A2z{b*

}{ecz*

vhdpb2

vhdpb-4*

dpbzb*

bzbbd2

vhdpb3

bbduv$

gttsusj(

bbduvgM1ruKkke2y

dpbuK#

r>s2ke:y$9

mK%%yA-0mj&sTzf$uPmS#Rk\?Hk`&krmtyg

eyx`a+

j;mrn4yyo

`Geep*

Qn=3142

e)qcb,

ouneu>

^B734#)2152

77%.#'=?

oS`eu>

wWtwh,

c4gqb2

Z#6%#7?,

twhdp*

B#;4()8

,Fr7434 )38

T1=;<=:(

FZ5#24!

B#;4(7

Fz34 )38

B;=#:*

`7eep*

`yeep*

ojhtv

R6+1Oa

d!rbzb

}oscb,

Fz34 )38

@#%#<;

mj`#kdvgt:r;ms,eyx&P#us"Dzf"T1mk*Rke4(%

s:"mt?&)ka**mr&

mrf4yyd

r0r#kd>xk` Z#mu5Vgt:R;ms,Eyx&0#us"$=

07)45%!7=%&#-*

2euv W

rbz#=%+75%,=$9?

[3du3[

.@U%=2'*

Fz34")114;5*

T4)):1?;>=

sbzbm

>@U#>316;7#24!

Ldrbz'Q

`k*Gdcduy

@p`zb*W

r`du77%.#'#>;++

^2cdu>

&@U#hdp*

,FZ7434")114;5*

&FD vhd

`bdL1d

&FTtvhd<

Drbz*Q

Jabd4)):1?;>=:(

cb,L:L,

rLepbz*

>@m#>316;7#24!

mqbz*I

hdp#%#<%(74;.?

Qn>3142

`bdu>Q7x

`uvh,I1r

Trzbbd

:Ll%4-#6% 7>%'*

%Y`hdpQ

Q.8jpb

&F8/xhd

hdprbbb

xbzb#k0

7NXbbd

zbb%*76%-#&=<9

duvhd8I

bbd=Me

hhpbzQ

cbdu>g

dyvhdC

Fz34")28

T4()8/

&x2'#,*

#Vtbdu>

'\Hzbb

5DNpbz

Fb5#04

T1<;>=

5#;2'#.#7%#7?,

%Y`hdpQ

!H_vhd

'Y\hdp

#;4()91>%<99

@m!)017;4#3=

H%/#$#?%))

X6.%]g

leuv,\A

4@x7,5#04#)2152

8%/#$#?%))69

@h5;6#14 )38

R;=#:4+)8/

vhd8[M

(1#4-#6% 7>,

exbzbBdu>S

`NKI[n8m

Q~!ODF2

R`du>[

(gpb;<#94*7:+?

hd4[2n

urbkdwgt8rus+tzf(D

s;Bmt=Fgu9Rur"$zg)$

r22mu<&gt0

bzb*alwhd8

s{mr,eyy-`mj"Bkd7Hk`*Jms-Eyx$0mk#"ke>8ka+*mr$

tvidpb

epczbb

oGthd8

$m#?%&*

bzb#_5r

mjbmt=fguqmj"Bkd?xk`*Jms%Uyx$0mk+Rke>8ka#:mr$

yy- mj*

kevgt8r2

"Dzgika+j*

>F"kevgt8ruscke6Hka+jmr,Eyy%Pmj""kd?Xk`**ms%5yx$

mk+2ke>

k`bur*t=

s{ms-e>

aeuvh,

)RX,K|

LD&5;6#24!

8idp&y

(TDB>FB

%x&Hz&g

;=#:4*7:

hhpbzQ

bZbb,v

/{hdK_

4@P4-#6% 7>,

"%+75%,=$

r!g5b2

a@3{b*

(TB,5#2=

3Hk5'R*

_iwh,

udhd8Y

#}vhnz

U!)017;4#3=

*[8Q.g

dtvh([

?bcdu4

b`duyxe

hdp#us'd=

1mk/rke7

#mu0V)ka/Jmr%

#us'$4yy) mj#

gtq#us/

zf!t1mk'bke7H%

s7rmt<F)ka'Zmr%57gu=Rur+44yy!0mj#

%zg%41mk'

epb;mr

uwhd1mj

reuv)kad;mr

Uwhd1mk,r%zf

Tqbz#mu3V)k`

:cbd4yy*@#ur

s<"#ke

epb;ms*%

cbd4yy"

r{bbkd3hk`

Zcbdzg%t

Rcduyy!Pmj

"euvgu=Rur

4tvhka':mr

epbus'

%*76%-#&=

bcdu%

dpb2Yo

pbz*Yi

bzb*_x- ep

@h7;6#14 )38

whdp+y

bduyxd1mkdmt=f)ka,jmr$U7gu6Bur*T4yy*@mj""%zg.$

r22#kd88k`"

gt|r;mshc>

4)):1?;>?

#t8Yw? eu

h5;6#14 )38

bduyxd

kdpgt8rus,tzf(D

s<Bmt=Fgu>Rur"$zg.$

r22mu;&gt0

kezxkanl*

gz$tv

#;4()91>%

Fb7#04#)2152

LTqbz/

RPepb>

@5whd5

F2cbd1

Q.idp/

);1<;?#8(

,czbcduv

Bduv O

fhdp*Q

5#)017;4#3=

aJL{b*W

R%*76%-#&?

w_[wh,I2

i;Bid8Y

zcdu>C

Hqb2[%

[cz*[4

c@Zqb2

mSYcz*Y

<flepb2

Fltvh,

rbzb&k

wvhd4m

emsbz#

Tz,5#1=

FZcbd=

@Pczb*W

@Ewhd9

H%$#,#5,

D4)):1>

B%!7>%'*

X%/#$#>

Fttvh,

^rcdu>[

LDqbz+

L|&5;4*

gVxtv W

Fttvh,

@`czb*W

@Uwhd9

@`czb*

Ltqbz*Q

FDtvh-

w+,vh!C

Fz34 )38

U77%.=

(1#4-#6%#7?,

Uwhd5Q

"%*76%,=$9?

pmAep*

repb>ZP

h{bb!M

6ZBdpb

F|"7<%%#,#5,

-HZbzb

Antivirus	Signature
Bkav	Clean
Lionic	Clean
tehtris	Clean
MicroWorld-eScan	Clean
ClamAV	Clean
CMC	Clean
CAT-QuickHeal	Clean
ALYac	Clean
Malwarebytes	Clean
Zillya	Clean
Sangfor	Clean
K7AntiVirus	Clean
BitDefender	Clean
K7GW	Clean
CrowdStrike	win/malicious_confidence_90% (W)
Baidu	Clean
VirIT	Clean
Cyren	Clean
Symantec	Clean
ESET-NOD32	Clean
APEX	Malicious
Paloalto	Clean
Cynet	Malicious (score: 100)
Kaspersky	UDS:DangerousObject.Multi.Generic
Alibaba	Clean
NANO-Antivirus	Clean
SUPERAntiSpyware	Clean
Rising	Clean
TACHYON	Clean
Emsisoft	Clean
F-Secure	Clean
DrWeb	Clean
VIPRE	Clean
TrendMicro	Clean
McAfee-GW-Edition	Artemis!Trojan
Trapmine	suspicious.low.ml.score
FireEye	Generic.mg.05d614ae9941dc59
Sophos	Clean
Ikarus	Clean
GData	Clean
Jiangmin	Clean
Webroot	Clean
Avira	Clean
Antiy-AVL	Clean
Gridinsoft	Clean
Xcitium	Clean
Arcabit	Clean
ViRobot	Clean
ZoneAlarm	UDS:DangerousObject.Multi.Generic
Microsoft	Clean
Google	Clean
AhnLab-V3	Clean
Acronis	Clean
McAfee	Artemis!05D614AE9941
MAX	Clean
VBA32	Clean
Cylance	Clean
Panda	Clean
Zoner	Clean
TrendMicro-HouseCall	Clean
Tencent	Clean
Yandex	Clean
SentinelOne	Clean
MaxSecure	Clean
Fortinet	Clean
BitDefenderTheta	Clean
AVG	Clean
Avast	Clean

Static Analysis

PE Compile Time

PE Imphash

Sections

Resources

Imports