Static | ZeroBOX

PE Compile Time

2023-04-06 05:01:44

PE Imphash

5f3daafabbcb520fe4d1131686c696b1

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00001000 0x0000113c 0x00001200 6.01278048534
.rdata 0x00003000 0x00001488 0x00001600 4.99309227448
.data 0x00005000 0x000d8428 0x000d8000 7.9942558315
.pdata 0x000de000 0x000001d4 0x00000200 3.49337827068
.rsrc 0x000df000 0x000064b1 0x00006600 7.92272516131
.reloc 0x000e6000 0x00000030 0x00000200 0.723305100483

Resources

Name Offset Size Language Sub-language File type
RT_ICON 0x000e15f4 0x00003d0d LANG_NEUTRAL SUBLANG_NEUTRAL PNG image data, 240 x 240, 8-bit/color RGBA, non-interlaced
RT_ICON 0x000e15f4 0x00003d0d LANG_NEUTRAL SUBLANG_NEUTRAL PNG image data, 240 x 240, 8-bit/color RGBA, non-interlaced
RT_ICON 0x000e15f4 0x00003d0d LANG_NEUTRAL SUBLANG_NEUTRAL PNG image data, 240 x 240, 8-bit/color RGBA, non-interlaced
RT_GROUP_ICON 0x000e5304 0x00000030 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_MANIFEST 0x000e5334 0x0000017d LANG_ENGLISH SUBLANG_ENGLISH_US XML 1.0 document text

Imports

Library KERNEL32.dll:
0x140003000 SetHandleInformation
0x140003008 WriteFile
0x140003010 GetModuleFileNameW
0x140003018 CreatePipe
0x140003020 CloseHandle
0x140003028 CreateProcessW
0x140003030 RtlLookupFunctionEntry
0x140003038 RtlVirtualUnwind
0x140003040 UnhandledExceptionFilter
0x140003050 GetCurrentProcess
0x140003058 TerminateProcess
0x140003060 GetModuleHandleW
0x140003068 GetStartupInfoW
0x140003070 IsDebuggerPresent
0x140003078 InitializeSListHead
0x140003080 GetSystemTimeAsFileTime
0x140003088 GetCurrentThreadId
0x140003090 GetCurrentProcessId
0x140003098 QueryPerformanceCounter
0x1400030a8 RtlCaptureContext
Library VCRUNTIME140.dll:
0x1400030b8 __C_specific_handler
0x1400030c0 __current_exception
0x1400030d0 memset
0x1400030d8 memcpy
Library api-ms-win-crt-stdio-l1-1-0.dll:
0x1400031a0 __stdio_common_vswprintf
0x1400031a8 __p__commode
0x1400031b0 _set_fmode
Library api-ms-win-crt-runtime-l1-1-0.dll:
0x140003118 _seh_filter_exe
0x140003128 terminate
0x140003130 _crt_atexit
0x140003140 _c_exit
0x140003148 _cexit
0x140003150 _set_app_type
0x140003158 _exit
0x140003160 exit
0x140003168 _initterm_e
0x140003170 _initterm
0x140003188 _configure_narrow_argv
0x140003190 _initialize_onexit_table
Library api-ms-win-crt-math-l1-1-0.dll:
0x140003108 __setusermatherr
Library api-ms-win-crt-locale-l1-1-0.dll:
0x1400030f8 _configthreadlocale
Library api-ms-win-crt-heap-l1-1-0.dll:
0x1400030e8 _set_new_mode

!This program cannot be run in DOS mode.
`.rdata
@.data
.pdata
@.rsrc
@.reloc
L$ SUVH
H3E H3E
u/HcH<H
v"l}5!
u{cy#n
.text$mn
.text$mn$00
.text$x
.idata$5
.00cfg
.CRT$XCA
.CRT$XCAA
.CRT$XCZ
.CRT$XIA
.CRT$XIAA
.CRT$XIAC
.CRT$XIZ
.CRT$XPA
.CRT$XPZ
.CRT$XTA
.CRT$XTZ
.rdata
.rdata$voltmd
.rdata$zzzdbg
.rtc$IAA
.rtc$IZZ
.rtc$TAA
.rtc$TZZ
.xdata
.idata$2
.idata$3
.idata$4
.idata$6
.pdata
.rsrc$01
.rsrc$02
SetHandleInformation
WriteFile
GetModuleFileNameW
CreatePipe
CloseHandle
CreateProcessW
KERNEL32.dll
__C_specific_handler
__current_exception
__current_exception_context
memset
VCRUNTIME140.dll
__stdio_common_vswprintf
_seh_filter_exe
_set_app_type
__setusermatherr
_configure_narrow_argv
_initialize_narrow_environment
_get_narrow_winmain_command_line
_initterm
_initterm_e
_set_fmode
_cexit
_c_exit
_register_thread_local_exe_atexit_callback
_configthreadlocale
_set_new_mode
__p__commode
_initialize_onexit_table
_register_onexit_function
_crt_atexit
terminate
api-ms-win-crt-stdio-l1-1-0.dll
api-ms-win-crt-runtime-l1-1-0.dll
api-ms-win-crt-math-l1-1-0.dll
api-ms-win-crt-locale-l1-1-0.dll
api-ms-win-crt-heap-l1-1-0.dll
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
memcpy
k$]c*l4
I4F3n6dmM
Q pxG@
U=#hI
>;2l]9zM
R[P&E
TJub"R
(5"4I TQY
OGw15D0
+d#~Q`jx
9<"0`.vub
wONiw*6
k/<q269
77_bV#L
l62 a0%
<pI a';
'{=khZ
~WI#7D0
zf@,0{
"X(EGZ
~=^(?s[
R{GNYpC%
9\J3LM
0de"W/eQT
,0{0#F
*;^-bTEda
mS-2iR
:BP2.}
!|N>Wo
$D9'ra]
.8<!S5
<PW&4W;
pBJ41WX
42G46'
W^HkW
*!u/x/D^'
WanF3C
ANA:vy
@'uaVok
2~[)n=)
x0^Oz0V
KZzt0,@
1%[OK&
3{s'f8
E$P^Mku
lBBUn=K
9)Y<yy
+Wn/%
"4taeg
&}X2iJ
wgRq`4
`_'B$4vE
shfiMy}w
g`GFf(U
DG-+\Q
:)SYa=T
tLT5n*
K! ')X
yQ%P.o
Q(gM4j
n|[\'-e
*>Z{%o
}#;wxD
^h\?Vs
=YOjd"t
1."Y$R(
d+Vp`qu
v3hC+X
-r.9Ff
)%JKLk}
_SfsV
Yq^*`##x
iIbIR
F4&Ti1
MvTItad
>FrR8
6/V+H,
9@LQ$C
Fn"5Wd
G1A!.@
-#V!c-T^\
ZG$ 8d
g54R?U`
'5{G}-_
g;c_Jt-
W9X<{}tWDr
);np15d
5^O`(
QH(_LH
!D#=G]!
!W]q'2
s^]& _
&gO]>P
,2b/E.
r*0Gvs
gB:+EBE
iidJ$0M[
DM`)-g'a
<t;;#x
7|OmFo
GmMu!j
`3GAksk
8>,[FD
IKBFh1mjV\
sx`;hsa
V9#=<O
$XfB^EcV
mC$LkN
36ffk0R
!X;@EV
<:_4^Ep
r)H4wB
N7/Zv2
}0P*LV]Xw
]GW1*W
U@r6K]D
$u>?^X
~<B.*l
.`~2Q-yOr
<mp/?2
Dz@t
y /T8ve
wa>dzWE
Cl=WT
CY4he`
34Rc<!
4l%>gQ
DVsyt%a
*Pwfy
{~DA~f]
P^|cX<Z
?d'6eS
)BcyJW
-ZIB;`N
:uN)"U
:sT+y"
H}erc^
Wc:#d-Vn
c/&F93
3+S:\
M)Cm(
TsnG ~Vf^
*!B=^>
c;P=Nu+
-qBSH}
YyjwkX
E(Sp[bf
3(z"O@IW\
zb_dePjf
D9[o_(4
6h&O%kPV
AdTykW
\)OTUmFikh}
@T'1-F"
%VxgX?x
r+u,@<q
r%+ *-.
6)*\WZ
k5s"`6
XE=2cW
yiNR{UTx
q#A F n
1I*"\s
9X](#M
A[jT~!z
)HWkws
bThN,Y
~x\RJeX
l1>=;|UB
f:6d1/S
L'3a]1
w)qXKPp
dZGx-#
DIn3;Y
rlP+y1
(YxYrm{
$V?Ha,xl
i($BjA
#=*?^Q
23|'Q2Nth
Cze?3Q
,>\>"[!
yCx4q5
7"scDIyf`
EK3h:;
~*;I-Mb
Of)I\U
IWe^\+u
m;GyE%N
<)V?X?
v?U6$*I
{b5l2^d*
*[&RRA
lAv[fl
-6#FZ+r
0n&jeT
C2Exsha
T<dv;i
A/7_9F^
ip*8CWT
PlO*a}Y9
b*w#f.V
Q}v"X;
jY(:w
<2NVAV3
t"Hbjng
EE<I96
A*l G&7
1o_)=+
J>CzLT}[x
f!g"~pI
#Vkzsv
o8":[K
NX_)7o
a=*So=
QvQ]!
Nobv3p
`kI1?@
xyEGb`
JZJrz)
g2+-1a
dfW)6f.
`ehwtN
2{x0=-
*>"]%e
+{eIdO
;/SdajO
bVwTk!:
`6c9"8
3aw0u+FPh
Gl&(gz
;'T]*^
{&as4Vsb
B-AJ<V:
P )EDM
|`O{gr
Q>|8U<YQV
r;rVNM
,Zi{`;
uGG"qI
*]oo?!
1?(K<C
$>]\H#
hhB*km,
U,$w47d
;Z^Rlx
e>n~
spI87}*3v
MjdgK'kGs
Ct/bx+
8S>(R'
fp.'e%D
t6a4QTw
G06D2Xw
XzR[k]
PCLCq<
J)rkI]
P_E 3ZX
%N10ki
MLCypM
~<z931
~5,ys;4
}8NXY9
8]hv;:
b+M#lj
$Z1+\M
%FMqb&
G\G'S;
kcQI|%
/|lU9]
r,?2!+s
=Lj{3U
5xl@j5
>+BaD+
ltD"mc
LQn*v%
$i^oL^6S_
@C"0]>
YrOSrR
._gzS;
>%=E&GP
u7faxM
XZmK!q
3hh2aQ
@4AK0;
Siax2H
zEYTAf
P^g_i"
vG:(YX
&RyX1)
'^'wK_
XbcyVY
E22[@T?
-5IRg^
5WFSIB
q|vliK
wgLAI[-
aG1@we]
&H y=
UR9Fyj
%= "#K;
$_s G"epl
q^BjuO
OeT%n!nt
j2#iQK
qM?E{_;
T@l8%@_
Lu=$9w
xAeht/b
+u=l@B
DBRHG^
O=Ays)
H[*17d
=Ws_T:x
R'Z5]e
^1/123c
:B;+*8
0Y}_R(Q
~:l[dr&
vb {oD_
ZJ+;dw
[4A46c
8@8J4q[s
l#9V)+q
'/2A"W9
8c?.{w
;RS`lm
15[:kTNyV
Vw!+@h\
xRROCjr
w&9s(
) 2GG2
jo#OM
TT7+4
CQ15Uq
35Y!rAc
lr~6kl
hz4H)!
1r3y[S
dB4VyZ
Pi^P?
,!&;M[tue
&u-=dr
QOgxbo
,sHIPW
[IAG&=
0EWSgY
ACn/}t
cu)*Ek
5#7plp
pw*#b
T"e'ez
|~e?zb
`a\6t
+i&ar3qgX
rQOu#
p104;H@
:F%wP;
&h&P>9U-
|G9.Z{i
'3XzR;f
iJ@5SL
8+kab8
L0,zI
[?c&JJ
W^h\&/
("r-~`;nG
w:~N_b
)HsZkh
/z<ohT<yO
?mEK?K
&4w2>u}
1w1sst
&P}iHM
tW{(<3
"aL9A$
:R-8*9
&es=wBU|x
8J"VX/
!=NbPoU
@=DgP?
LOI8Cvw
9;9V}{he0
1[)+Y%
]=B#?%
4P+!'
b[iNq=3
iafP1l{t
/L/eUK
u3l?F{v
oB;*8ZD
)K:"5-
mvr%)t(
_^Bx4Y
06a.Q5
g*5 qA
wp.bcx;
b/'5G
6KXZo~
sEo4GY
5OQ7]R;
(J(zGE
*)#=/>0
B8t4]u*
[9z92Z
/Qp6n*~^umO
^>JwmA
PA_v*^
4)pJwl2
yWlxJW
pk)t|K
g-G?i>
A>{P_nP
Soi'fX}
_4h,%|NJ:
pa>=Z
3uM"3nE
?#+B>#X
wF"Ls
TWw+"
Lmy&*X
7:Q? E
9ZFo2}
{Ptv(Z
u-P_F~x
0&e1j#o
*r1w('9
CS" `w
31Q S1fO~
H|Ica>~
"F_2tu
]Udkjv
D8Jc[B}
(e?=D+;yk
5c,=ro
(s8L?si|
1(xpv'
Q5S-Xm)
+U;ecW
6J+RS
cyD2qM
XY1@?^
W1qt 9+
//4<YECRRA
[/l(vFW
pxL^K{QW
,a2 t
I{;RmN
aEeybI
x#Mv(J"M[
4[`~&2
1|MFhT
f\Cxlys
`UQA:
4=67|s
MKSWlS;
;yI}32
Hc9{=J
H</ e 3
4I!@TZ
))]wU&p
+3I%v]Oz(
!UO7V|
9kXW"/
R(E8(Z
K"ojSd
2oq%Yr
"ec2C1Sz}
,oy3M1
%t[5Fz
-=p`-k
aZT1E!"b
5_Ickhz
Lk8, o
vHzRP=|(
FcIwjQ
Mfc,f
F LeOF
K{Wqel
^,TcqBW
4CB(fV
?qI\)r
b'atbr
S'K)wte
4hJeq,=
VB.X)S
G[`#d<t
9prL|[
wWai(fzs
32< J#Q
)B/PL>Nd
WD$xl{
ZY"(aN
:SfjJq
[q`)8c
!BNh
$"&%DShQj
~}y$g0
:|82vM
>%0-H~
zAN l0
jb0A~M
`95R8r
sVqQ[
OGlRh
;-ecr<8
*G 7 T
DXLLY,x
(smZ#
||dg~x
&vTG37q
bzvwM;`
NjO*Ee
=(MVamv
:WS1;U
J_d0n
&rYSS3
<1}dV&w
V=r5H!.
i._h1\
WwvpL]K
}AS:5:
"8~$tnt
;0t)Uv~
k3tLnP
A9lnllO
}-X1~Sws
|dj=qEM
?+HwUBt
=<33a4
|)W0M[|bVfC
7tlY"z
]iO`-R
j{p_-
AZ=yXB
6`0|dls
$1}otrz
$6" N2ivF
ljH.*G
2(~>D.O~
u~r2}pg9
]+4l=j
J;*hx0
q$k$OLtzUhof
o*]=cK
9w@fq]E
|Fp}0&
d'HlSFd
<eS1mpa{
H7oKw 1
n.`A'6
c^-o!I
_+}~awn
f2ybX{l
MwR O#?
<$S^uCP
)|^>Ut
cVeL*
F}my62
#1`&rbHRf
6B.)Lw
~zXlthY
~i*uJ=
'5sIYz
@!VPLGO
-x;=T
O:KJZs
i|4K)Q[i
!{z?gh
<f^6Tw
:;nbr*
)vi"8US
#O9[["
/7C>_ w
r!*w=:`
7RS2V
k,)gQ
E4mWXn\
YhX#KQR
@#Q+[X
:h<*Lk
GE'<8"K
)iLvB]
>r"{:c
T6x)Ygd
5R$RJw
+4`G`Qg
Q$m&FdY
z6#1x3
dUJ++D
L3nUsw
) |#J6?zb
A+v\M^
.&W.p-
G%ii%5
J"lp^3
>u~Id{w
"a5_D,
RP"+Y
y-q.|~(:/
wwp-N2
3T%HvQ
Q:K$YT
Xv"yir
.17]L8r
%*xSmX!
Ur\w{
p^[$:y2
0unB;z%
W0LY"R
6sS^(c
)w8Dvy
2#(5UTyzk
\%Oyqp r
.u2DSy
T!AZBe;
mO?y8wx
+eG2@rL
"/]b[ a
$b`+%-
oFY-#B=
i=Nb.gq
z0K(]^J
qe#|jz
S8;tKr
LrB:7j
g`532m
k&KydS
13;%(m
R+'x>i8
-aPKd2
:"X<RX
LBjybT
6jjZ\(
d !x&>f
uT[:!a
Rv<2ZfE
]HOz@U
J^y#0@.
v?j;QB
8G(M^K
V+cA'C
@fr{_?
a!po:_
7-EEqQwy
_hzc(}
v(t,3R
iDv]b`{
aX8%1N
!/P'SbJ
E\z2.!c
aSJf+N
E/&%9$?
3_)V^>_f
!6Hw^$
m6)y7x_
c1**<C
0 :UB2H*Q@
m{6<!Lh
%}4M;J[(
#{vO2 |
|IXQNy
MMrm{
M)h d0TR+
m*OIuF
Ia9]((
R[l!:7
5U7Ws
zMi#5y
0em{p^
"b+VT
6-zkam
Zb2opy
$J90[m
2;W5BB
%?m"o{]
9-%t_@$
AM@9JV
PEc^9V
<S$B2^
=/Y?^Mf
HY(1>u
'y"wXM
i>lk+U!
k\D5id
C7;70Y?
f?:9<
%R$@1K@
Q 6y0r
pAn87H1
P=>A8:@
,9a&\!S+
\(ei O
9UD,*D
mP`6]$
P^*Y|a
TXU_rU
5Wc/~u&
3i%B+:a
9NQf|0
FM8Pyr
jQg3BO
z>ShQo=
7I##X
wk)oe3
6At5*=
/r"7fY
Ob=1KW
f?H1fm+
y,wy])
VuA(s
!$zIF8+E
qHNpoE<
[KMXJS
VZ)2 Sc
TXDp|xjE
mdZa{~\8W
aE0q-6:
}N%U4<!
V)R<aU
9""N`9gk
p'"9g=
a-%=K"B
"(Y~Ml
!P}FS%x
IZ)d5
{lRT>|
nHmtWn
U]y:/?%
hHY]i
5<[zQh
3E10,D
,H x9s
/(*`is
'Dq[%8v=
6CsozzK
5PO4+G
w?2J4a
&;q&~q2
ZVnYcq
))y Ts\
0zj:U+
a!1)Ak
pFaEQy,
hA<ET
9bG/-wF9
}:ZThn(
y8d\Zxd
\H-gXLV
1"L`jm
8)w$M]PaG
i,s8%>
y5[QVq*4b
>5iit
yts\q{[
0#%t4J
Q68$)WI\
cSxZei
<)U(E2L
meZ\cq
'<T8e3,rT
'Vuoko/
aI[y\t
9l@"KP
Jd:&Id1
}^ln-<"
a*mZ"'
j{6Q-5
UZG!9C
72`(U#
!fO-vdj
-o-G g5
;hu4x-t
Z[X1
MtBRGgd
53^ B2
BuWl@Y
o*nE;Z#
"Nb-kH
Q{.>!
j|Yy/}
{Q^ly{
nV|zY%B
FT'=v\
Q-9[>eV
vCE=vjU
+R t.-%
bZXE7|
ScEjZgu
<W*M~T
c)8#(vvy
c7G1 ,
<ZM`Z&v
3=%~NT
W:l(;H
Vz@P*l
8W>+;D
bMtI0y
@('~R?
9$&<<
HO0PRR
$#\rv
C^q{JJM
J6~:s3Unl
qPb4?C
%U^([T
\mCkAf
V"D?eO
/oV[_#
sJC&gI
uddBwKe
}/H[Af
k38Y*=
x1K&tb[
'wEB@w)"
QILs~|
Ev:UTs/
q6+6EME
KaGu77
UZ-R[oJE
"8VgWja
q^&1+@&
-]k>)H=
mZ#XUh
:K$<IZ
54t6kg
f#P\R#,
{LzUgd
s8+wQH
t-u!D4
_42uGI#
;[Rw2m
F'G?8OE
B9FjL"
`#Gzkl
a2$9LK
@2.5&`
4x<:KN
Ke!G$?
btv{D_
_/~@l;
)7P5eU
iQ#`'6
&1_/_6SZ`
[ojj~}
?R(%VL\
'S@sS(
1))/n>Qw}
k,o!9!+
mv&y)
R%Br+"
ScO{K<
]RqS,;0
U]Sp9X
jzM-NSK
1*B>L'
M2:T\4
@w+QaJ
Q8W{?SV
#9{F\"W
*=A 20
Id$"I.[
s, D?J/!e
IZv~Nz
Q$?1&QGj
`9i$kVY
SmY!4q.
(L U,U
0M$@Eu
Ws5"4Z
0IB:lk
ZP!b%z
vyTDAtDU
$r*SeI
}ZQHXg^
g4G/Jg
W*7k>
a%Pcnwu
y)Ka{:S
6u%4k
<C-&y:A
OA#)*6d
6</KG:K
L:qu84
&UuW#r
o8jb$_F
}$wB}^\
oJD%7p
N]cR|EiP
5VeO-X
L[eqzfB
XWpM,V
')Q2x17vc
/dDaq3p`)
5'B1mV
^b8*&@$
"Z'BbZ
S 3a g
~wpYfK
ZZZa&}
_=T+6uG
^ry1?.
bo3*92`
K_1G3=@
Y'}lZG
/YxWk3
\+]Lds
0wIsk-;
(=Y0Zp
;&8''c
4,1'Jcm
:kBxQS
jUGAaZ
Q#AK46;
a^&N nu{
P0yFK1y
&6h-u0YQl
NC3#A.9
*P=pb3
]WS#4u
*,]bQ'q
8"83<,
"|gdiK
P5jd'K
dKF,:`
0{jqFs
1!QcQ?
5#>:DW
~+<Lu0;}&
w*WUt
%|'_*q
A/[d]'
xAMn|Ji
+T6/Q4
I!$C+#.
Q'Xp%
}"js@+
6-L)c/
-a`hZ
Q!c4#8|
orP+7s$.|
oQ]IRe
_g-[oH
U_h?__7Zt
0. ]
F7Q1j.0
Wyo`*h
G#w)L_
-^5LJ&
$;rsD_
=.8~.^m
X>g=tz
*j(Va@tI
AUrNr<W
/y7ZbQ
y!B%Ql
`&0H4ld^
Pcf9((s
6d]?_3s
3OJQDT
_\/>FLD
Le)=p45n{
\eS{p{
-/_]V0
jC)43Y6
?b,2rS
<XQ_V1^
80#6y_8a(
<g`+ a
)%JGu-M
5=?$Sl
Gr`7RY
?<+#;</
'c0SXI
+!x6q>8s*
hXO|'<
/P_XAD
U)%lq<
raQaK\)
cU%*!>
]7/A-a
K9h=uE^f3
{jf.-e
Z9bz@r
F<D{hu]
C`x2O\;El
&W*;bf
L}^lD3
VOBriJ
D2lHUrb
q)hfur
#Q%JV(
H^RtaF5
TBFzY]
.!`w
6^N$<
mr;)~!
ejbQNdm
qA8qzqn
}ypohpc|
VcP%`k
K&)!#IZl
#q]w%0v/
^C+p.I
FU\YYEY
3 #!9K
9?6B6>
J;1G:&O
V[l$~F
#e"uVV
Moqy5<
~EVrhd
~G6U/E?TW
gTqCAf
/89"8
d{IA%yU
!g>Idn
Z!q$M`*
OPpJuj
b#oy:"8
;i;=Ro
-8 yT"
=l;,ru
/%g$dTz[T
Ck1#`a
ukO*bybz
Sr{@?e
LLKl'4
[_$1A,
lLkz_5
9`(N\NOw
PpJ*s
U<'%2'
#$q<[+Z
F@=K7FD
fWb0KXm+&
-c)BI|
h\xX1}
<*s;K'XP}
p_n'9X$
^5WXSr'
J<_#NA>TS
r<*>&9/
V{Smcj
='H YWl
>=v~zna
R1qIWuv
6c8I#p!
i8eEPGA
2E> HY
Q<shT"pO&
!s.-v_
M|Vle@
!N|)e7|y
I2K@Oa
F](9lL
a#n|S7
OvD%Wd
\!GBYrL
A{TlAf
j*MJZ;
>g&(Vj@
d]1 4G
aN%}s!<{
GP8#wY
-[K$G|
-;r(L3vU3
SxUVbY
B7HpdCmd
qQ)pS+
_?ouN>
I?>F.;?
;o]<rz
NbeUVA
'zQ#K3`R
>A$&px>
K/#2K
3ES^EX
[Gyn7j
bX!60 B
H>?z[B
p%|tsd]
pXgP%5
;u;F,hL
~y5<d7
F?ABg[
fbR@wdi
0A$/R:
n\B8<A
!fkDtu
=?fy9Nx
I#%I8:
K&mqIV
NA9!:H$
6pI3\3
~?fru06
W@Qzbl
Ss2!C!/
l),r;I
dSKwetiG
^U]#bk
6J5r68
bW_{a
?`%+>b
>o`&
&(r_x"\
3S"|h-
6hgkpc}
P3yuIW
2w\:D=X
Hw:qEq
HA)J>&C
@N8>rW
x~DLv~g
,4x!ut!
LG!SFo
39;NhM2a/{
M;z8}c
n#Bx^C
U e{QX
H#%iQk
#aTC,
;m1Ih]
|:&uUH
[aWgfK
%4LWp'O
ZGeGW|
#6hgC"?WL
e4I4.;m
d R*FP~$
6`G$cn
%04"+T
"`z"V)nz]
^H;9Tu
9i?Viy
= rpT-
4p@$l5
,XZn%#p
|s=o=GHdS
lL|sqd
7<^#8s
QkL8yn!>
P.2FL!
M:S}LF|
_[Dvc8
3?vU~+X
0r"@II
p` up:O-
0Q7Bevs
:ZAP|V
[uGps5
^VM#+(P{
~6:&zyo
3c];{R
Bv=bqU
0n1IA<
5m?(H-
}~eA:gJ
+ec=po
)Wz+`m
4$/3B^;
q+ipz17
.}$Vh^
g!Dq ]2
eL5V{*
T[L]m\
7>Y?JV:
?T=LJi
dUsljN
VJB,!^U>m$vz
=-.p2B
Oe#Rf}
66>T[Q
:E0@3'
PobWdo
6X0>P
fS7C,/
\Z[wW8
U y4'I
:EJ@.A
$U%.~k
Y\Ol1e
K=P39w
*,goO@M
M{LdFl
J%E-[
D|WLcJ
|Qqw.8
$Toif#7
':XJuiZ
A;qif-\
6b!C?g
h=7)}%
&%RLm!`
L8n7w[
tq>pU
I4?JY/
^?-UjKO
8ta{,}
_Lyv*.
.$MYiK
s6B[x@
=%zHzoo
tvNN*if2
9+9>CX
PW@2RZ
'^Gb$m
G<S-E`K
!f48.#vSZ
A/lcRr{
a9>utV
az70-/
"=mf_#
*7?D))u
fqhv;V
/`Opj,
L%Z'o;Y
2kL9s"^
k)e{4k
kKZdQR
@Nr2$g'-
%`%SC7
dEKzpA
*0OC]X
5I_3}_
$:iGa>]
'js%M1twk
XUa%3ToDD
_(Vl{ow
COMl3$
GG0tuu
__o%;s
cqk[fk
'UZ-<"
0R>FSX
z7o%b>
M_lw-r
>o?4Ih
/7CH-)
"+BK^K
# K@]Zw
C>;x]D
U;m!{q
:"kp<f
m5Cxo;_
$t"]:/
mF(w7Q
*WB35.
$$Gi<n
NyO.7Q*"m
baq7V
XE_aE3
F3m+#;sC03}
'A73xF
3?, ?X
w$QTwG~
ulX<p|
>R8e)#
C=S;_?t
)z*F9c
Y&h/ov
1YB%(J
%([k`<v
J7Zjw}B#R
$/YiyGP
GjyxWy
pTe"3(xF=
JsqdJ<
&ixgu(IcG
0(2:>3
&Uf1Rq
!z5g^KYt
'x[L)7u)
uKM}Zr
dwsuZcV
EH"#VI
0MqxK?
c9Crt'3
9VZ@V<O?
>g!Bdw
eH|f[RMJ^"f|om
MJRgM@
(Ucx#m
`uUQB}
@$T|BZj
dUd)Q\X
8<Y[!;
_&<n@h
i,R>u@(
DH)jt
,i\=D!Wev
8.Knz&
F%)1L)6
4SAIkm
Vu,HLt+
%&?:^^
@0rI?P|
@Ml#7X:
PXwe~)c
^5ELF~
)>o2Wx)
=yeZd~
v +n L-j
nV O5T
#A5W(}
HT/=%Ia
%.+.n
|uDjLhw
+fQhI=JqM
P", >_
wAA%L5
@%sK[x
,n:Ej!nn
(0Qa~>jw,
?OOk3a
y44N:n
MXwJ1j
n. \aP;<Z
O@Z'W(A
@/tikhr
,X#p<O
u8'C/Z;
HgF/jU
yLva\S
ZaiMmq
1]`{_<
wEM:d.
'(EYzoh
{M_pOA
uB-Xy>
?*kO m
33caC(_w\
g#Mz*<
3XsF0
WjDV#|
jP3fZL
>#eg.v
"c"@Y.V~_
&:?D#0w#*H
GS!Lfk
M(E^y\
N,r&wk
av1c;Hnj
tF>Zhe
tA('8B
C\'Z#z
q,QJ`bZau
m;L|U
HwNGMP
m@WTbt
(0Lnx8q
k5>I.C
&Lf&.l
0dG!P(m`{
{YEpw\H
8QH^s2
kk)k:*ux
=>C Rt
;@2+gF_
M T'Nv
!,oF]rt
y6~ayNL
i/L>#'r
Va1)HCM
lr@.<2-F&`)
QT%\#O
&;|r`Dx
>BG(:o
>a"Y=8
b&-Vp3
joAvra
gz LSJ
1+B%(!
=dIWic
P&tba)u
K'le6]
'cF/E6J
~*+1oR
I;d~RD
LC%I:?8
@<fn7r
J++IW:
(^%_2Pr&
ivF 4r&
H/MoT/
"T2#R}
_OzYVROm
c>E3a#
aT,G~\E
cwRObb
TA8(=
NEK<"Fpt
Vl-o+iN
,"Gov)pMG
r08<2BK
xQod2%
t[H=4(K
.7W"_Z
bW3V^Xu\
5T6Gv>g
&;UcK?~
&,\w~-Y
)M[{bW
xhs*9X
ALRoPjx
2/-O}
zF+nEC
,EeRv|SeC
,Mm\ie
r7:8!|
nP_k"h-
&bHI4t)
rg[-:>
HHER+|
3{PT#4M
F<x8P"tsc
rvz;/h
RT%+I"4
c<l*(*E
__=s<0
=0VjUMZ
H_smr$q
0A8eQ+
J(q#T^yY'
LlJJf|g
(c'dBIz_V
tU]0w;
lXK Fb
RlSkvie
>WW.(r
{3iuV1
4d1s<[W
m\Hx9!>
4w+8pZ=
e$-t-/E
9F@C%U
auk=*8
J)rpT$roR
J)W?W
(hj`F|
|"fwe7
0i:m]S
U{xz=G<
R%zmeP
tbN]e^F
E(Xd"zox
3E1[DY
D*EOVnZ
t%r2-Jj
[&cXz_
MKb:-l!s
j,AU+S1
OV1x|
9PJfYD}
'T>"Fn
&)W#x-0rj
z6+?d\
a4yq/A
a#Q8)>
S!>!){
q8}=cGK
9>Sat*
VW%d'7
25)@5Q
df&p)yMv
D*<b"[
r.!=We-
<#[j G
.6;$2[
F>h~i[Vl
NXqt.T
T(MyZD
7el3]r
$~$G&Ye]
I>$1[lR
$NND06B
uMeqlwy
gK#K>TJ
]?]4 P
l<l$|l
h>H1h\i
M>MZf0
SHI-({
Z+P^YpO
(-F+&+
wNxJ_m>}
lD$lg;u
+vKFKU
6)ns}rY
yqc$3Q
a,GM>a
Wji!t
m)UV,_
8l!UgL
V}"|jN
()4e|0
j&9Q_TVT
1GA85^
L`d1yBFvs
!~sW,.
kWD0~`
XJPZGV
*(st|9
h[&%N&GrV
S`Rvcc
<~mPuk
;nTfG8
W'@Grl
zqn*#V
p"D?55\
AEEOT_
-['^QX
61coM*~OT
E*#p U]
SR3Yyw>
gQ`"5U
GLzgYE3
BqZIB:
E]!5K@
qug`B`
12@]U[U
DsXQcz
>' r^o_T
n@B/9d
4ru =4
(PX?w_
tk$w^H
u.-d#Y-
StHK:Y
2): =f
#F;Ikt
:7~RU2w
;V'Vc{
^%3;9~*
;%}eu[>VI
VQ5{#'r)U.
KBs]s%
S`Bm\|
1t<WRZ
VG=wOI
C9v!|*3
htrw.|
g-r;HWj
h,p?*8N
#i)OrT
$^0LlZH{
UuT{9>
@Q%w]H
(G[>wz
o!RdlI
9')SNY
Ia8E/o
34Obr*T
Q $8h[]Ex
z,Zov@Dz
^ .KJB=
MEwRcx
)/(*s7-
Q3{`R5gzj
C1)t\'
ds(6Gat
-a[s=2
2Z[?<#
O[eafhZ
c^\9&?
/{cL",\
K)6`1Os
JO^#:,
G)YhL2q
dvwUk,
']%ITW
9/Pb^]
%$Ianua
R2o]%X
->A#U<zmf
Vr@ ]"S
[KMBu/
+4<8!6
b4i>:[,
V9"yl+V
Kl2r)
9C"(jro=
,/>D h
<<K2!c
&bY@>_2
Q:E)5|
VxF%}(
1G!<I
9o P4l, bl
`xtxOm6
Wa!9G[6
UCB]]O
Wema}g\
<(w`rGS
o[zk27
_[Cgio
Mxd_8Svwc
jN#tp"9
R>D($_&
Ho?*Ug:
@C;*WA
Gr#X*vb*
`au&pbJ
_wz~+L~K
:nP]hQ
"`8n/I
oJ>/9
Ja14'
7>TR#8
L;_#s#:mM
J6ku(2n
A11S3{D
.2,_~3
qLUN0&
oUn%M5|0
Lb#ayq
qR>`ny
"8Y)^.
17H-gS_
z=<- ^
:Q[MJQ
;# W3V
O-"d8/~
oSDU|f
OX'6N
]m6{RE
E}WxJ
7bX;jEdfH
V21IsS
B<60W
sLerSo
$ZZ(BUl
WX$/3$
#e.S|@
r}fW+m#-
0,uYXD`
qUc1R6
goVb}~p
4IRS?+]
UMI%:h63
x)z|38
jr)]oYN
L=joQ1j
PqK$9B62
!{X>|M
5i1PHL
-m.@f>
(<B$BZ
eVT%`D
^TO#z/M
qpp>yW
x6Obo|X
wylsvpA9`
9DfL@de\
?"?u(<:
TUxdhZ
"C U)}O_
4Z2F*o#
|k7Z~K
_>$zs:
STZ8W
6h`1gz
!EECt0
B9F K2A
Qcqjib
58Ui_BX
2E<#UT
u1 t`X
}BcGbV&U
B38&DT
>Ew`$u
/LS^f/
51I4o[Tv
Qs?$jg
:<{je:
SJ,>5\
~&6D#L4SQL
vM@(.P
KwZ 8o
/TRdr h
t/;a%*
@j,+uJ
4#U@d>?\K
J(p]QZo
U N@q&#T
jc%ZI
z(rBLK
6#7"b
WAN\jv
Xo`|h_
WkN07Nd
XHTsT$
q2oR8y
LT?+0Rc
$9`T{@3
g2cm`]
0AFSw3
5oB
;<AHm+
6-g!,-
S#wM@
a>^E]L
T~-srJ
*G=J<T
;=s!v>,Rj
ttw<ma
Kx9Oj:
a2HE/9m
SJ034y
A6l% <
'5BAbKg
XeJaqdS
6"ii0gi
KXQ,:R*
gJ21sP
k#/{GL
x#N/{sG
|pp,=A
+[WfQ)
I.8C-L
T[Y[rY
;?y||
+L2f.F
}$iw_4
"RX_>|
W2I-;W_
1lJs]M
EC11Wx
vg(n`N
T*5ZGe`g
+3ch0
*]4C PSa
'yTn{s
/\8l40
1ujO@\
}BencJ
O6<qV!
jI2IsE
{ZRq2y
:\5E\TzY
$fC $3xP/3^
S/0%-Ic
>sR|cjg
wzN\DRv
4Cc\r
i5Y_n[w
!-c)+_
qYEryds
!Zt6|RK
}v9H1Y
6K2E;^
2jg9t`qqF
ZvvwaWcL
F7mP|C
Lruz0@M
R"bB0>
ahClx
oYDvO
R{:L%_W
o^l,+e
PPWH0R
<Z)3_]
Dz_#9z(
(T3RbNt~
o3zR15
lX#Mc1
W-t%8t
joI?Psa
[YX-(U
Fj*8ZG
`OuoA1
C|^o{i
*Ji_s!
`PzMbm
j2E>(50
[;t}x]
:R1,Tj
9X?2.?+-f
lH.xqA,
B4X#y[Tb
9Yk!;,/u
O)VOxe
o,g6-@oS(
V]F<4XE
MjFi&|
%ZLeS+
Y,(dme,7A/
7\HuqS
F#%?+2E
!W6kt^
_`B'!G4
4BwoA,
w4ez%A
7%{dIX
Hz3\$|!
x_m8,w
z:B-mew
~gI(/F
[1rYF2w\
jQqjau
p;2~5KYW4
lEAxi)$|4
8^GPq /
P 7OSD
$jWe81
0l!^x`
jC$t\C
7+"(Ec
5hl)ao
MN2iQFn1
h@3tm)<
9=4]_^
=P^JWo|
p<(e<s
TXGy\7{k
XVhoGw
WN>`!{
=D1T"H
V+AZsY
4QObR$
+&o`\Cp
<1s/T[Rbg
!|j([ma
PH4T|xl$8
|P({Pg<
i%mG+(
9I/,XU(
@hX=bP
:*QUSlr
%wp^E!}!
*{IpP>Q\T
Mx7=IK
EqfEgL
&=]"[ O
D)Xg ]k
X7 qW"
dYCt:n
F43D)4:
@n=N}W
D^q$r<
8.aU%hH^u
]g~&7|v
2P#K&7
|:P[}xG
d3G&3 3
9 ,E^
>Tw#ysr
4p"+vo
),Wb)&5
[MNK#
|'ln-d
"uIsG
5xzE<s
=sSSdJ
n=<Vs)
K(xd)(i`
W-K<G
!:^eQ!r
m7/_"Z
K6/\"y
L;AzX9
v#{qDFM~
$;N;XR
bE 9J
r ={^pz6
ABBKhM
EU@ZkF
'!r4v->
br$H["
?Ai[eI
iVv9wlqt
(tKrGK
eq*/On
T|1&d!W
:$EB6B
-{yVnp
KsEm3o
>"Yi=r
<I`_s*
%G#t+me]
'orQ1c
,^=xjQ
ti\)"^
<Kb.b]
_[k#<F
FVy{S$`
d@$28;
[sbA-
YyR'^'
IDATx^
CdPn:}
n}`g+LY
2IIiI{{
&RGzzmb
og3t#AF
`:SN6v?
##j 67
),5\NiRZU
|IDATx^
O~K)B%
?aL7<;1F
"&cRI!
H)$MlZ
@:PCa?
1qFczxa$
J+AZa5
$3>7-0
ri563!
@V*elR^
eqgw:J
~Ln92ry
rvJ.^L
IDATx^
" *vQY
YjobJ+
w-IA|D
[";&-X
+1v}}g
<<dZ(?
6L7J+;
FzAyUF
z$t9w}
1LVh,QF
"4uq7E)
a-hW]b9}
rVp6Jh
2o$)?AH
PPO9/7x
a>d%=:
Vshh3J
=x31oY
tE2f~{
Za"{6u
YY5g(u
?ztjqv
k%9CTs
cV%mIIs
(t9-d4
C^bVP\
u#g.gJ
-vQ{A>
<?xml version='1.0' encoding='UTF-8' standalone='yes'?>
<assembly xmlns='urn:schemas-microsoft-com:asm.v1' manifestVersion='1.0'>
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v3">
<security>
<requestedPrivileges>
<requestedExecutionLevel level='asInvoker' uiAccess='false' />
</requestedPrivileges>
</security>
</trustInfo>
</assembly>
powershell -command "start-sleep -seconds 10;remove-item '%s'"
Antivirus Signature
Bkav Clean
Lionic Trojan.Win32.Agent.Y!c
tehtris Clean
DrWeb Clean
ClamAV Clean
CMC Clean
CAT-QuickHeal Backdoor.Agent
ALYac Trojan.GenericKD.66277108
Malwarebytes Malware.AI.4135568704
Zillya Clean
Sangfor Backdoor.Win64.Agent.Vhix
CrowdStrike win/malicious_confidence_100% (W)
BitDefender Trojan.GenericKD.66277108
K7GW Trojan ( 005a21ca1 )
K7AntiVirus Trojan ( 005a21ca1 )
BitDefenderTheta Clean
VirIT Clean
Cyren W64/ABRisk.ERJX-3246
Symantec ML.Attribute.HighConfidence
Elastic malicious (high confidence)
ESET-NOD32 a variant of Win64/Agent.CGE
APEX Malicious
Paloalto generic.ml
Cynet Malicious (score: 99)
Kaspersky Backdoor.Win32.Agent.myunsh
Alibaba Backdoor:Win64/BackdoorX.329dc0f8
NANO-Antivirus Clean
SUPERAntiSpyware Clean
MicroWorld-eScan Trojan.GenericKD.66277108
Tencent Win32.Backdoor.Agent.Psmw
TACHYON Clean
Sophos Mal/Generic-S
F-Secure Heuristic.HEUR/AGEN.1315543
Baidu Clean
VIPRE Trojan.GenericKD.66277108
TrendMicro Trojan.Win64.PRIVATELOADER.YXDDFZ
McAfee-GW-Edition BehavesLike.Win64.Trojan.dc
Trapmine Clean
FireEye Generic.mg.2f2354202272c284
Emsisoft Trojan.GenericKD.66277108 (B)
Ikarus Clean
Jiangmin Clean
Webroot W32.Trojan.Gen
Avira HEUR/AGEN.1315543
Antiy-AVL Trojan/Win32.Sabsik
Microsoft Trojan:Win32/Tiggre!rfn
Gridinsoft Clean
Xcitium Clean
Arcabit Trojan.Generic.D3F34EF4
ViRobot Clean
ZoneAlarm Backdoor.Win32.Agent.myunsh
GData Trojan.GenericKD.66277108
Google Detected
AhnLab-V3 Clean
Acronis Clean
McAfee RDN/Generic BackDoor
MAX malware (ai score=84)
DeepInstinct MALICIOUS
VBA32 Clean
Cylance unsafe
Panda Clean
Zoner Clean
TrendMicro-HouseCall Trojan.Win64.PRIVATELOADER.YXDDFZ
Rising Backdoor.Agent!8.C5D (TFE:5:X2bE3GplYK)
Yandex Clean
SentinelOne Static AI - Suspicious PE
MaxSecure Clean
Fortinet W64/Agent.CGE!tr
AVG Win64:BackdoorX-gen [Trj]
Avast Win64:BackdoorX-gen [Trj]
No IRMA results available.