Static | ZeroBOX

PE Compile Time

2023-07-21 03:17:19

PE Imphash

7c4e296c67498d0ca3bb31360c5368f6

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00001000 0x00001f18 0x00002000 6.01989324539
.data 0x00003000 0x000000c0 0x00000200 0.76529291078
.rdata 0x00004000 0x00097a70 0x00097c00 7.936098151
.pdata 0x0009c000 0x00000270 0x00000400 2.94777328042
.xdata 0x0009d000 0x000001f8 0x00000200 3.78775859922
.bss 0x0009e000 0x000009a0 0x00000000 0.0
.idata 0x0009f000 0x00000824 0x00000a00 3.7859688221
.CRT 0x000a0000 0x00000068 0x00000200 0.259118751737
.tls 0x000a1000 0x00000010 0x00000200 0.0
/4 0x000a2000 0x00000440 0x00000600 1.32508803624
/19 0x000a3000 0x0003ef68 0x0003f000 5.97214502572
/31 0x000e2000 0x00002505 0x00002600 4.56407324666
/45 0x000e5000 0x00002383 0x00002400 5.25520419756
/57 0x000e8000 0x00000a18 0x00000c00 3.69691776417
/70 0x000e9000 0x00000774 0x00000800 4.65249133412
/81 0x000ea000 0x000029a6 0x00002a00 2.46319188159
/92 0x000ed000 0x00000470 0x00000600 1.47382386137

Imports

Library KERNEL32.dll:
0x49f20c FreeConsole
0x49f214 GetCurrentProcess
0x49f21c GetCurrentProcessId
0x49f224 GetCurrentThreadId
0x49f22c GetLastError
0x49f234 GetModuleHandleA
0x49f23c GetProcAddress
0x49f244 GetStartupInfoA
0x49f254 GetTickCount
0x49f26c OpenThread
0x49f27c QueueUserAPC
0x49f284 RtlAddFunctionTable
0x49f28c RtlCaptureContext
0x49f29c RtlVirtualUnwind
0x49f2ac Sleep
0x49f2b4 SleepEx
0x49f2bc TerminateProcess
0x49f2c4 TlsGetValue
0x49f2d4 VirtualProtect
0x49f2dc VirtualQuery
Library msvcrt.dll:
0x49f2f4 __getmainargs
0x49f2fc __initenv
0x49f304 __iob_func
0x49f30c __lconv_init
0x49f314 __set_app_type
0x49f31c __setusermatherr
0x49f324 _acmdln
0x49f32c _amsg_exit
0x49f334 _cexit
0x49f33c _fmode
0x49f344 _initterm
0x49f34c _onexit
0x49f354 abort
0x49f35c calloc
0x49f364 exit
0x49f36c fprintf
0x49f374 free
0x49f37c fwrite
0x49f384 malloc
0x49f38c memcpy
0x49f394 signal
0x49f39c strlen
0x49f3a4 strncmp
0x49f3ac vfprintf

!This program cannot be run in DOS mode.
P`.data
.rdata
`@.pdata
0@.xdata
0@.bss
.idata
8MZtXH
AUATUWVSH
[^_]A\A]
ATUWVSH
0[^_]A\
H3t$(D
0[^_]A\
ATUWVSH
P[^_]A\
UAWAVAUATWVSH
[^_A\A]A^A_]
ATUWVSH
[^_]A\
([^_]H
:MZu]H
tQHcJ<H
8MZuWL
tKIc@<H
8MZuRL
tFIcH<L
;MZuXL
tLIcC<L
Kccccccccccccccccccc
!!!!!!!!!!!!!!!!!!!!!!!!!!
Kuqqqqqqqqqqqqqq11
J*...,,,
OKKKKKKKKKKKKKK
hxxxxx
Mtttttd
]hhhhhl
6@HHHHHHHHHHHHHH
JBBBBBBBBBBBBBB
vqqqqGNNNFFF>
O~~~~~v
vvfLLL0
@rrrrrr
au77777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777
VVWWWG
$+M022
Njpp`,
wwwwww
|HIPP@
^NMB=k
ZB;##!\/
H}|}bS
rrsssck
xlhlllll
3a"$$T
LLLLL0
l}}cPO
]0Yqukr
\\\\\\
I8{c-..
ssssse
%V{}Z^^
p<K<dAs=
<|xxxx
WV6CEE
DE:;4p
5spqvO
OOOOO/
/LOL!(
]Yw(.>v
05wFF'
+6cwss
I<pPdUJ
N5"-WY
k&l:>>
jjjjjJ
vGB,x||
noooowSVW(T
*jjjjjjjjjjjjj
rrrrrrrr
}}}}}}}}}}}}}}}qsssssssssssssss
%eeeeee
Al,,,,,,,,,,,,,
4444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444
6qFA<72-(#
pkfa\WRM
(qqn`[
vrmHSNID?:
~urmhhc\WRMHMC>72-(#
<3.)(#
kvqlgb]XC>94/*%
`[VQLGB=83.)$
zupkfa\WRMHC>94/
}xsnid_
MFA<72-(#
[TOJID?:50+&!
{vqlgb]XS
|wruxvqlgb]XSNID?:
|wrmhc^YTOJE@;61,'"
}xsnid_ZUPKFA<72-(#
~ytoje`[VQLGB=83.)$
zupkfa\WRMHC>94/*%
{vqlgb]XSNID?:50+&!
|wrmhc^YTOJE@;61,'"
|KwqG9
a))'NH
~'OG]&
pz5{w-
c*_!xGJ
I7jupkV
E;~id_Z
d-Uuw6-
LK^Y@6
zirPK68;n
O^y(^J@
nRX~#K{E
<mm^1l
WRMH4d
@iid_Z
@mgb]X
$RMG%U
>zt=|~:4}
C[lZDB
L~H}%+
x>v`%]
]{-eQp
q2nLvx
o9tr-i
@3rh'SCDR
vDGEoU
v,dB~`
q=pn)a
~Lzw}/
}{=pv,
SPKD?:
>8fK15
qPRzul
HYUO+^
xdQL59
dSJD&k
]CvofS
fS6-rni$T<3
L~cG<6
&$]W%]
,C0vzupm
XR"qmhQ
q|>v=:50
822_YTM5
XZE|c^[
|w^ZUPI
cu8 S6
68hs&,^
w&(hs&
c*_!xGJ
jYUPI9
^6_d[^
<6.KE@
0pOF3
[zu, g>
KtnvsMD
}xu-Ki
$.Q:61
jcSMGA
2:~ftz
O9RnhS
}l5Mru)_#W'
XZD6KE@910lhc^
pCRNID
_NUNA;
fQ`"Q,5/*%
JE@;$@M
0>#+oW
J8~w#U*.Fm\BT
>zV:{c$`\
ljxf"^
>94/ \X
-e$R9d
nz.PQ%
HC>;'3&*<
gjX<722
LBn*TW
}et[?:
p%/u%a
em@`?:
ZH]GRMD2/+ZM
o~+UgR
0D=plf`
PV|m90+.&
y%I$U%
>94-Km
4/*'W.
CCupnk
wVs/_"W'
oz'/]H
zoYojm
x%K3B
I-u$J8`
}}0hFs
E$e^YD
t=5i)T
_~|!)e]0
wZmysu
b"1&83
ZBWgb]X
VPdTOHC
Am(Y%|
NFIxwrw
XA;&,VY
ahN-8d
I}P[vqt
vw:6uL
2!zlgR
}xc*"a
m3~#+a|o:
{va( P3~
'~zu`)'f
vpc^[+
{694-C
~}}v;5d;
au%-FC
yhV=8=3
4>6plgR
N6~|oDKE%h
W:+505+
o8tBw?
0::QKF
S>ike\
P1e^ZG
t+^"eh
`OVP*V
fC5.$25
J2~} &
WFIpMH1
e,?J^X
ejt-'f
mi)/.^_
KA1IC>
8+zTN,Q
@J*zsn
J{:6e<
8ud_Z]
Ra48w&
~zup-!`?
-It97f
"g;55x
_q\V,U
xxOI!h
q80d6{
s^~GA9d
ixePJ m
yz&(`U
nUOIu i
FaGA9d
LF&IFAD
CI/LHC
|vt97f
MIC=5|
+!_rkfQ
Yy$,XZ
v?7w+V
Z(3vR#V
4|E?;f
|wb*"e
Jxr7qKJ=
w[6Tic
m)X&}T
Torx4.
^-PSNI
wp!W)d
_tYI94
OJO7ww&
<7"*BT
N%941/
/PK6jqlg
|wr##b
_J%DLG
c*_!xGJ
fq@jjeP
|wbp9d
j)\ cV
}ws>&m
@s"*SX
rysw:<
;RXR(U
{~'/e0a
VlG74,
Msiue~ze$"
PoB<72
t|0.(-
$dzupkFe
=xc^ZU@
yt5A@:J$
[}wb'!
~/_R5t
zy=PKF
j}P0_ZE
t%+c?r
u,Q#fi
9M,(-#
`_zsnK
hR'KE@
mUr?%l%
},Q#zYL
.*% U!
;Rqxvp
S!|sni
mUbLtn~~
NJ7u:50
~M"]XS
NYQK/R
(RVP*_
9PXR(Y
;~wrmh
hB.uL
P93.PQ
u,Q#fi
D@=qwrmT
IL_rrmh
8>-x(^!\
Ru4B?%U
@C.T\V$
Zy48o6
<glgb]
kSnTq FB
#&smhS
ywXyvq,"
~ytoje`[VQLGB=83.)$
zupkfa\WRMHC>94/*%
_Y$Xsni
c]rmh
{~/A-U
5}wr#-a
8xE<7"T=
el~F@:
;a[^.|} ,^_
c$?1p/
H]ojeP
xKVl;6
cf`HC>
q3vqlo
1lA]ojU
K\WR(.1("S
O9iD)0+
XmhaWF3?
8!+KA:46{
=}1NSMHC
jO5p!/
~ysme8IM
~:~yD?:4~9d
}-A,]#
ytojQ
ua ^SO6}
xcF`[F
$n#[2]
{fkojeP
iUlZs&*i
cS>>1,%Q
ebgGnG
XgjQ
HL}xsn
ILTQLE=
k~<941/
Nt%)\O
59eu8 lV
77qu5+
j)\ cV
_OR:ID
b'W!ZU
e]@<YS
oS&*C=
+;Cuql
r3je`[
RXw]&B=
~yt,B.j
ysnpag^
OFa\V
Ajd_Z
MIX^:5
`\WRG!a
{vqti-
NBArmh
qChgbU
nje`Yu
(([XSF
K9qHB2
3;IDW:
78&$F=
ea[B0
784/*TM7'
\VP*_'~
cM1+.&
SRMHA
C>;3mW
8N9(qpkV
PKF3=|S
{vqLWRO
$,T627-
Wbe`[F
Sr?72-
2&%pojg
d7/*/%
$.%@<7
z}tojw
|-\ 6
)!\jfa
kPA{94
;3.+'^
-'UNIL
b]tnhVq
:/{MG#n
F183.*
c\T`84
|8}wrmh
Bpjzb2.
VQLGB=8
|wrmhc^Y
-x-!`?
fuK&1,
IhC>94-!`?
Mx)%d;
=7v-0D3
Yx)%d;
utKFA<%
!v;1pO
Ku84k*
A`;~qlgR
59xW24wn
PKFA<72
=BG/(#
=poje`
HFA<91
2wqlgb
{f+%d;
k_ZU XL
uvqt)]TJ\
mQ<5'"
*x)-<e
nje`e91,'R*
orDhcV
5qm$SWBA|-#
\wZVE@
}},Rj9
G@E;(
q<83.\)T
B6<3\YTQ
ZNtrmh
wbLG2 ih
voj*J?N
yvq LhS
u8+xXSN
|aS^YD
sFic^Y
.Rpkfe
FrnkygAqk{
,r,Q#zYL
|~#)`?
MCL_YD
{PLI5wQ
>A\WR)
uowo@<%+ID
|+^"yXK
BUPK68
zetj,&
~y|%O>
CCMfbg
F01+EJ
ixsmhS
18|gje
_pPL59
p-7~xr
+>zNI@>
x93-'C
q<4\m[MT
izupk~
+&#[VL3"
YUPKNu<
4}w;lT
wRMH19$
mHSNK=;
AKutbL
yvsmhcf
g`]WRM(
`NkS|d
*73'!YTM
<hc^"}\
OycKv;;
pKXSNI
|l[VQL
j_Bz%
_XR(Y-
!a]VSLIB?
WRNJFB>:>v
4/*'_RH
VU>94-)
XwrkfQ
[B,k*
p{66%+
EFCyxu
,c_XUNKDA
bvd$";
.c&P7R
~n^LI
wrmh{61,
-da\E+
R70--%
1GWQH&
("Rvrmh
Q')kZTNH
DrOw\j
iUlZs&J9
^MJAB=8!
|uqlgb
Q[%|SB
E\A#rA(
2<z]PLG28
joky{OZ
fVcngR
DGD?91
{v"*hs
.H4I39MGB732MJE<:>zp
!P&yl!
9#Qvojg
;E9IA<
FN}tql
C3)&Wf
QYHzqlo
79wb&
3[%'zp
271,%S'5=
G=94-K7
HC>;E7
5wzupu+J9
PUPK68o
}b*$\Y
dG."_* W
q<$d?b
48'WM3
Ojwac]'
_G@PNIC9s
wBFB=7
jwrmh}
y(^h%[H
oJ;-!d
RUPKN>O
GVyHVQK/
wu%I$U
bW: kfQ
EDrYS-
|UO)=x!Ie5zsn
wWb+Cs[
~:,j35
nid_Z
<72/!`
Ssw+$
0mjga\WB4of
)!@plg
+vqd-%
3{VOJM
\G&!Wc
FA<53-8
<c]]0eys
JfcAbxr
ZL%]XSN01
sF?:~wrmd
Z)SF0a
!(&03.$
MuOI3o
Vpc0rmh
0svqlW
'RdU_!
(""0,&
AmGmjg#
Mt3D.4
"7+]W!
/F]HLFD
r;)?sG
3"w-B!
|ytor
=5Hngb]
Id\WRM
;z}(V=
bJCF{:
XSKF3;mY%|C
3AXYT-
a\E)pW
b\VT8uojo/O
HC>2qP
t{5DA^T+xxrH
QPLG24@
?94!!Q\
{B%UI=r
8fkfa\
qEMf_Z
gnq8d^
HeLG"/]
h{vID=3
pwrmhy
E}xkfa
D^TOJ4d
N_Jrqh
FGBzyt,
i~kQPM
3;ixbBY
ELI%KB R
yxwn|y
+Z?|qlg
di\d[F
15B>935
O@Esrm
GJ%8ZT
3II2fl
9xupkV
W:BC9YL%
zmX`_Z
W.J]X*
qZOulW
_upc\U
oj^YTO
i(]/bU
zIbrln
+X1=~8)
W:o\W"
t7F<|ytojRf+
{tory5/
xtcmjU
QPHE@;
~v`ohS
ykVRMH
}xsnt7C
}xlG@:
i=83. g
e(;~TOJ
sKMEB?
d*?OHC>
}xei}wq
dRoW|J~Q
zwpmfc
(z//>i
swpk*\
jb*J01
RKFC{.(
?yzupk
x4;(Vj
W"c] ysni
zIje`[
'DA;?r
YLHC60
_p!W)d
^@Q+QK/2
V`YGg+
G*$ojo
M\g*\Lzt
:}wrmh
y9?,PB
pysmga[U
Kcn|z/
B+WWQK-
^[MHC>$
~zu`-C0A
kxsni|
PKF3?py$
nI88}wrmh
Ye\j^2
P=}ws&
{toj}D~xr'
|wrmhS
w5iqd_Z]
hu!% %
ZWQLG2<p"k
eK$vqh
]SNK3.
NJD?:(
?5+@<7
>sKF)l/)
B=$*j(U
HX$zul
oWRXgAs&J1
zk&VL=
aUO+^
l"upig
bO_=73f
;ga]VL3
ad`[^(
}u80`}
GC2}wq
A`;61,
M<6{"#"^:
_ZULB~
tojWYe
Ny,"a
)@*VR
:50)%\
-X-84$
8|xsni
a\WBDp
23/!`?
<5!#b1
98 .eD9
73p'(!]=
~;7t#,
=7vE0>}
MH1=l3
YpF9."a -!`?
C60s%h
R73|)P
F9. g&
FK;zYLH
Y0:g i
c^Y@Fr
@A9%l3:
X1=f'n
ra@xm|v;
9{zupk
}|~{E}
L2yXIu
H1=v:g
BC2<sRSM
p#.QFK;zYLH
A82q#n
r%(WXM
Wn#-(#
\q[VQLGB
ilwre,$
^e(4/
GJzyto
s&(o&3KN
dRO_lrE
2<sRG{FYTO*
kSB1kQ
vpJ\8u
dU;9wq
s[.=94-
=:}wrmh
6z`)X.
mgFA;?r
0;50)-
mgaY(Y
3pjg`]VSL7E
9iGs?7
JcKv;5
x|$J!l
mp`b]X
~xrlf`Z
3=Dwz"
RZ-P1+
-d^XRLF@
zJNgbg
ZBUxto
Q]TBiG
p{:(=l
fkslgR
qplgR
}xs",cB
z"1VXSN0
GJ?+&#!
{fKY~xr/)#
rNYTA#
ZVSMHC>
{u`t}wq
%<6{<i
3?~)YU
-TOI!d
cN,dBI
lfa[VA
-%$]WRE
O}l;ke
GB=8<1
%X.QP$
1vzupm
v]V,Y-
q U'zm
REH)ke
9~wrmT
{n-EOJ
{vqlgb]XSNID?:50+&!
|wrmhc^YTOJE@;61,'"
}xsnid_ZUPKFA<72-(#
~ytoje`[VQLGB=83.)$
zupkfa\WRMHC>94/*%
{vqlgb]XSNID?:5
XVQLGB5
LJE@;61
mid_ZUT=|zupkf
{snid_Z
c[VQLG
861,'"
950+&!
OGB=83.
jd_ZUP
TRMHC>9P
rlgb]X
b\WRMH
QMHC>9<U
-yupkfa\I
skfa\WB1
hfa\WR
ea\WRM$E
WOJE@;
`^YTOJ
ztoje`
trmhc^Y
^XSNID
:4/*%
861,'"
XVQLGB9
nhc^YT/
ztoje`[T
:4/*%
`^YTOJ
C;61,'
LJE@;61
ie`[VQ
MID?:5
@>94/*
b\WRMH
861,'"
HFA<72-L
|wrmhS
f`[VQL/
`^YTOJ1
pnid_ZU
[SNID?
861,'"
qmhc^Y@%
C;61,'
db]XSN
skfa\W
lje`[VE
WOJE@;
RLGB=8
~ytoj+
ogb]XS
uqlgb]
YUPKFA
A=83.)
5yupkfa\/
zq6yupkfa\WRMHC>9
JD?:50
{snid_Z#
c[VQLG
mid_ZU
b\WRMHC>94/*%
ba\WRMHC>
zhc^YTOJ'OJE@;61
GID?:50+
afa\WRMH
he`[VQLG
ID?:50+&!
vrmhSJ@=
Ks<72-(#
cd_ZUPKF
zaJE@;
r'OUQ>
{8[qbw
L/dM{7
hx2?F
!K:rj1&
!b)RD!
-*VSbl
/y\Hw6-
l@;61,'
d_ZUPKFA<72+&!
vytoje`[
~ydhc^YTOJE|
IC>94
ktoje`[V
zu@SNID?:5
xtojWGB=83.)
}xsnid_Z
qkfaXA<72-(#
FA<72-(#
~A44/
|wrmhc^U
}xsni@
xmhc^YTOJE@;
iLI?:+.
JnkaXM
}rmhc^YTOJE@;61,'"
rzafa\WRMH
S_ZRI>;
$E08#$
|ghc^YTOJE@;61,
{v@53.
hm[FGB=80+
hc>94/*
qJE@;6%
stoje`[VQLGB=8
{MHC>94/
_R@C>;7"
|ojUXCFC?2-(#
_ZUPKFA<
qlgb]\
:C>94/*
:ID?:5
ytoje`[VU
[VQLGB
~ytojm
|wrmhc^YTOJ1
NA<72-(#
{vqlgB
EHC>94/*%
F:50+&!
nid_ZA
L3.)$
snid_ZUD
+TOJE@;61
{vqlgb]XS
0D?:50+&!
upkfa\WB
:C>94/*%
|wrmhe
{vqlgb]
~ytoje`XWWVVII<,
(ID?:5
?YTOJE
fa\WR
zupkfa
;61,'"
:[VQLGB=
FA<72-(
m94/*%
1`[VQLGB
v4/*%
GB=83.)
7`[VQLGB
5ytoje`[
YTOJE@;
~ytoja
<tq/*%
XSNID?:
{vqlgb
SNID?:5
GB=83.)
}xsnid_
*?:50+
3a\WRMHC
r72-(#
;pkfa\WR
t50+&!
;pkfa\WR
'je`[VQL
NID?:50
QLGB=83
>94/*%
=83.)$
$xsnid_Z
1`[VQLGB
JE@;61,
/xsnid_Z
.fa\WRMH
v3.)$
*fa\WRMH
q72-(#
1oje`[VQ
$\WRMHC>
UPKFA<7
YTOJE@;
zupkfad
:vs1,'"
PKFA<72
}xsnida
YTOJE@;
)xsnid
mhc^YTOJE@;61
<72-(#
SMHC>94/*%
[VQLGB=
MHC>94/*
pkfa\WRM
Egb]XSNI$
A<72-(#
S3.)$
zVQLGB=8
^83.)$
lhc^[UPKFA<7
LGB=83.)
LGB=83.)(
{upkf_ZUPKFA<
"e`[VQLG"
^ZUPKHC>94/*
VQLGB=8
gb]XSNI4
zupkfa
FA<72-(
>94/*%
_ZUPKFA
HC>94/*
~ytO"60
83.)$
^YTOJE@
~ytojeP
vqlgb]X
WRMHC>9
{vqlgb]
GB=83.)
:50+&!
94/*%
XSNID?:
vqlgb]X
Qrmhc^YT
M^YTOJE@;
C>94/*%
lgb]XSN
^d_ZUPKF1
nid_ZUP
D?:50+&
oid_ZRMHC>94
<72-(#
GA<7"'"
~{oje`[VQ
#mhc^YTOJ
'pkfa\WR
|wrmhc^
-PKFA<72
UOJE ,'"
qID?:50+
VQLGB=8
xsnid_Z
rJE@;61,
|wr=83.)$
|wrmhc^
}je`[VQL
zuLZUPKFA<
\WRMHC>9p
PLGB%,'"
C>94/*%
VQLGB=8
~ydOHF
zvqlOTOJE@;6
qkfaXJE@;61,
}xsnid_
|y[VQLGB=
oje`[VQ,gpn
FB=8={vqlgb]
}xsnid_Z7
^a\WRMHC>cuq
TOJE@;6
~ytoje`}UQ
zupkfa\
|wrmtf`
,nid_ZUP
d_ZUPKF
joje`[VQ,/
toje`[V
ic^YPNID?:50+^{s
KFA<72-
}xtoje`[V
{upkVZUPKFA<
E?:5,!
qkfaTTOJE@;6
\XSN)4/*%
ic^YP=83.)$
NJE@;*%
|xsnILGB=83.
nje`[B=83.)$
hpkfa\WR
zupMea
wqlgb@;61,'"
zvqli;61,'"
Armhc^YT
|wrmhc^
~yt/*%
JE@;61,
B=83.)$
;oje`[VQ
|wrmhS
2HC>94/*
|xwrmhc^Y
~ytma`[VQLG25
uojeT]TOJE@;
nje`[NE@;61,
QKFA8.%
n}toje`[
jrqlgb]X
VRMH3('"
@[ZUPKFA<Q
|xsneBA<72-(
Gd[VQLGB=
Zxwrmhc^Y
Vzytoje`
Dihc^YTO*
|eIHC>94/
|wrmhc^U
<3.)$
jKJE@;61,
b\SNID?:5
kPOJE@;61
|}E<72-(#
}xsnid
ytoj)(#
<3.)$
s<3.)$
!md_ZUPK
'poje`[V
A@;61,'
$D;61,'"
e\WRMHC>A
{fj]XSNID
NJE@;"%
jehc^YTO
~{;.)$
gje`[VQ,Y
zupkfAT
uojeP\KFA<72
}xsv{t
n]XSNID
uoje`\GB=83.
OID?:9$
xtojQVA<72-(
~EZE@;61,
{vqlWZ
{upknMTOJE@;
loje`[V
^ZUPK<
}RE@;61,'b
mlgb]XS
EyTOJE@;
^upkfa\W"
tWRMHC>9d
e_ZUL1
Ahc^YTO
iXSNID?
_YTOJ6
uoje`\
*e`[VQL'b
d_ZUPK&
}xsnid
qlgb]XS
^YTOJE@
>D?:50+&
]:50+&!
_ZUPKFA
nid_ZUP
fa\WRMH
{vqlgb
`[VQLGB
9VQLGB=8
c^YTOJE
nid_ZUP
{vqlgb]
I61,'"
H83.)$
X4/*%
=83.)$
-JE@;61,
<TOJE@;6
5SNID?:5
>?:50+&!
P3.)$
}xsnid_
oje`[VQ
e`[VQLG
;D?:50+&
}xsnid
[VQLGB=
2B=83.)$
^50+&!
|wrmhc^
[VQLGB=
;JE@;61,
&D?:50+&
*JE@;61,
$C>94/*%
Q94/*%
]XSNID?
+=83.)$
0PKFA<
9WRMHC
\WRMHC>
+B=83.
>KFA<7
mhc^YTO
\WRMHC>
S3.)$
c^YTOJE
)=83.)$
O83.)$
7MHC>9
"RMHC>
$RMHC>
(WRMHC
}xsnid_ZUPKFA<72-(#
~ytoje`[VQLGB=83.)$
zupkfa\WRMHC>94/*%
{vqlgb]XSNID?:50+&!
|wrmhc^YTOJE@;61,'"
}xsniD?
{fAL'2
|wb]H#.)
epKVQ<9
zvsmhda[VR-83
nebYVMJA>52)&
~yd_J%0
~ytoje`[VQLGB=83.)$
zupkfa\WRMHC>94/*%
{vqlgb]XSNID?:50+&!
|wrmhc^YTOJE@;61,'"
}xsnid_ZUPKFA<72-(#
{fAL'2
A=951-)%!
alGR-83
{tlka^ZUOH@?52.)#
itOZU@;&
epKVQ<7"
itOZ]D?*
}yuqmiea]YUQMIEA=951-)%!
|tsifb]WPHG=:61+$
|wphg]ZVQKD<;1.*%!
lwS^J1%
z~}qhd_
bVEI0<'
|ghc^YTOJE4QN
[UPKFA<72-(#
~ytoje`[VQLGB=83.)$
{vqLWRM494/*%
IC>94o
|wrmhc^YTOJE@;61,'"
}xsnid_ZUPKFA<9U
,+z)xK
UAQ!1'&%$
}x}E-5
HueUEK
YSMG1?%
raP_,=
ezSJ;x
g'!i~^h.
d'M<\v
AAAA?r
=stijG
mJUIMA
Lohe^[
.QYAI1
(uqk`f
p7g/Y\
Huodbf
HshfbVE
c^YTQK
r|([y
xsnmFA<?
eOJE 0+&!
wrmhhc^%
|ykfaX
opkfSC>9
}xq-(#
~yp~ytO
}xs2-(
|wrB=8
zup|wr
50+.$
wrmlFA<7
}xsnil|wrmHC>
@;63}xsN
}xsv.)$
<72%$
5c^Y$83.
yRMH3*%
~y@ZUPI
FA<9/*%
_mhcVTOJ%
c^YPA<72
nidg<72
~{E@;>&!
mhcf^YT/
|wroa\WR
qfa\%94/
xsni(#
61,/~yto
ZUPK~ytu=83
e`[^~ytw
mhcf<72
6`[VS}xsnid_
rmhc>94
snil$
YTO*.)$
}xcHC>9
ytoJPKF
zude`[
<72'%
Ec^Y@JE@;
YTO*=]
o@d6w9
MyR-s^
dws [g
CF$J@n
<"<eNa
Wg"?XHP
b|<Nfi6Vmm;
yG-C[|
j2>KYj
fC0bBF
z72-($
p{oje`[VQLGB=83.)$
p~gQZP=
~ytoje`[VQLGB=83.)$
zupkfa\WRMHC>94/*%
~ytpkfa\WROID?:61,)#
Fc?:50+.
]nid_ZUPK
zec^YTQ
.GH@;61,'"
ChSTAG
wrmhc^YTQ
|wrmhc^
Y3.)$
$c^YTO
kfa\WR
{uoic]WQKE?93-'!
VPJD~/
roebde[\FK9.
~xrlf`ZTNHB<60*$
|vpjd^XRLF@:4.("
ztnhb\VPJD>82,&
+Ne#Dc;
zqnid_JE@
kfaXVQLOFA<70+&#
}xsnid_ZUPK.]\W
MGB=8oNI
{vaHpk
jfa\W"
xtojeTfa
^ZUPKFA<72-(#
|wrm`[VAD?:')$
ttoje@;61
QpkfcA<72
}xsvLGB=
{vq@;61
}xs@;65
{vq,'"
Wrmhc>945
Rtojm<72%
je`[ZUPKFA<93.)$
~ytohc^YTOJGA<72-(#
xfa\]E@;>
x~ytqmgbg]WRGGA<=/)$
NGB?;3.++#
SKFCG>9$('"
rrmlnc^[UNI$4-(
xyteAB=8
"MHC>94/*%
{vqlgb]XSNID?:50+&!
ic^YTOJE@;61,'"
}xsnidPH?:
gp{fuv
Se`\EA<)#
Q\WR&=,
=hc^Z<2
GbWE7&
DojgQ05
lmTK1&
PKF")*
vvA<9=5+.
yyHDA;4+
Zke`X>2
kzanit
aL498#
&qliCBE
loJP(5
mofbe
UPMOD;>
5PHB?:
mp{hcr
L93,)
MOFBE8
mma^[Y
mzETap{d
\WR.=61
C<72-(
^WRMHC>
C<72-(%'
;4/*%
w~zwqlgb
}zu,)$!
zws_RW
O`]X{tojVI<
[VZKJ1>
NJGA<7
kd_ZUPMG>:=
?940+&#
jfc]XS&Q
f_ZUPK6*
upMUA@9
t}wrkfaDKF?
ifa\WR/;!"
lid_ZU
ke`\WRI
bfXUTN*
}xsNZJ=8
=72.)$
qkfb]X
TQLGB=83.)$
qnid_ZWAD@;
zwse^[
rnke`[^
a^YTOJG3?4%
h_LM9vx
G@;61,
{vsM\UP
961,'"
zvqlim150
Ada\?hw
hQML>:
4?:75.*!
WPKFA<91
LHE?:5$
UOJFA<
VYRU8ep
xsnkAVK&
=xsnkMDC6
=xtojV_VM"
MOFBE
NytqESL)
qi`YAtvC
Gbe`]]?/
dy@Z^C&
iXE%/)
hwbkfq
(snkW78
Vk\_F26"
}xsnid_ZUP=
UQLGB=
q6}ytoje
1~xsnidW$
a]XSNI
nhc^YT/@
PNID?:
>83.)$
trmhc^
db]XSNM
>83.)$
.yupkfaX
uqlgb]
+}ytojePq
a]XSNI
<:50+&
[SNID?:
TRMHC>
950+&!
<:50+&
wrmhcf}
~ytojQ
ogb]XS
pnid_Z]4
\ZUPKF
<:50+&
VPKFA<?
rlgb]X
F@;61,
skfa\W
{snid_
3}ytoje\[
c[VQLG
;3.)$
uqlgb]Dm
IE@;61,g
ea\WRML
y2}ytoje
RLGB=8
~ytojm
a]XSNI
`^YTOJ%P
F@;61,
rlgb]X
@>94/*
hfa\WR
|wrmhc^HC>94/*
pnid_ZQR
N;61,'"
o[VQLGB=
V;61,'"
VRMHC>94
ZC>94/*%@/*%
.jeP@G
d_ZUPKFA<72-(#
[SNJE@=72-($
zupkfa\WRMHC>94/*%
{vqlgb]XSNID?:50+&!
|wrmhc^YTOJE@;61,'"
}xsnid_ZUPKFA<72-(#
~ytoje`[VQLGB=83.)$
zupkfa\WRMHC>94/*%
<D?:61,)#
}wqke_
J6}Q~G<
;qKL/(%
CJ2"`d
3{:pKjd^XRLF@:4.(
}xslgb_WRMDA<721,'
zmhcVUPK6:50+"
{vcid_ZGB=<.)$
anid_XSN
*fa\YOJE
{vs]XS
{vqdd_Z_
"vqlUYTO
YTOJ;61(
C>9<,'"
FA<9/*%
nidAKFA
qlgb[VQ
zupi]XS.3/*-
~ytoje`]WRMHC>94/*%
|wroid_ZUPKFA<72-(#
{vqlgb]XSNID?:50,'"
~ytoje`[VQLGB>94/*%
|wrmhc^YTPKFA<72-(#
zupkfb]XSNID?:50+&!
~ytoje`[VQLGB=83.)$
zupkfa\WRMHC>94/*%
{vqlgb]XSNID?:50+&!
|wrmhc^YTOJE@;61,'"
}xsnid_ZUPKFA<72-(#
~ytoje`[V
id_ZUPKFA<72-
$B]XSNID?:50+&!
kfa\WRM
UPKFA<72-(#
|wrmhc
p=83.)$
|wrmhc^YTOJE@;61,'"
}xsnid_*5
|GR=83.)$
B]XSNID?:50+&!
|wrmhc^YTOJE@;61,'"
}xsnid_ZUPKFA<72-(#
zupkfa\WRMHC>94/*%
?@;61,'
;61,'"
}xsnid_ZUPKFA<72-(#
~ytoje`[VQLGB=83.)$
zupkfa\WRMHC>94/*%
{vqlgb]XSNID?:50+&!
zupkfa\WRMHC>94/*%
{vqlgb]XSNID?:50+&!
|wrmhc^YTOJE@;61,'"
}xsnid_ZUPKFA<72-(#
zupkfa\WRMHC>94/*%
{vqlgb]XSNID?:50+&!
|wrmhc^YTOJE@;61,'"
qkfa\WRMHC>94E=4
{vqlgb]HC>94/*%
zupkfa\WRMHC>94/*%
|wrmhc^YTOJE@;61,'"
}xsnid_ZUPKFA<72-(#
~ytoje`[VQLGB=83.)$
zupkfa\WRMHC>94/*%
{vqlgb]XSNID?:50+&!
|wrmhc^YTOJE@;61,'"
}xsnid_ZUPKFA<72-(#
~ytoje`[VQLGB=83.)$
zupkfa\WRMHC>94/*%
{vqlgb]XSNID?:50+&!
|wrmhc^YTOJE@;61,'"
}xsnid_ZUPKFA<72-(#
~ytoje`[VQLGB=83.)$
zupkfa\WRMHC>94/*%
{vqlgb]XSNID?:50+&!
|wrmhc^YTOJE@;61,'"
}xsnid_ZUPKFA<72-(#
~ytoje`[VQLGB=83.)$
zupkfa\WRMHC>94/*%
{vqlgb]XSNID?:50+&!
{wsokgc_[WSOKGC?;73/+'#
}{qoea\WRMHC>
{vqlgb]XSNID?:50+&!
|wrmhc^YT/
WRMHC>94
fb]X#Z
hd_Z]p
VRMH#N
lhc^Yp
}xsnid_
{vqlgb]XSNID?:50+&!
JFA<72-(#
tpkfa\WRMHC>94/*%
|wrmhc^YTOJE@;61,'"
~ytoje`[VQLGB
|xsnid_ZUPKFA<72-(#
plgb]XSNID?:50+&!
D@;63-(#
{voje`[VQ
rnidg&[Z
}xc.cb
]XSNID?:50,'"
~ytoje`[VQLGB=83.)$
zupkfa\WRMHC>94/*%
{vqlgb]XSNID?:50+&!
|wrmhc^YTOJE@;61,'"
}xsnid_ZUPKFA<72-(#
~ytoje`[VQLGB=83.)$
zupkfa\WRMHC>94/*%
{vqlgb]XSNID?:50+&!
|wrmhCNI
f`[fqli
c[^osnk),'
woJavqh
+&!Td_Z
C;>OmhS\\WR
}xsfSN)
=9<iQLGrHC>
b\_~94
IE -_Z
WR)>d_
YUPk.)
)rmlv#
iePq)$
}xs\0+
5UP+B(#
\)$%Y&!$
?'MHC"
udicV1
EGA4pzva
G?:aplo.625
xvaLVRW
qmH!5/
HcFB9~SMHO
rlOf[U
KoilThd_
^Qicf?
IE +fbG
qmhi)#
=lhe7vrux
F@;j62
PL/0_Y
e;c]X_
#D@=M#
KC6G)#
pkd_RNGB%
:na^Y\
%"Qoh
XohauPM
vB;6bKD
QM(W\Y
3+&cMJ7?
|ypo'
@=<WPK
G@;0ohcR
|y|Y)&!p
F)|ypu
}y|;xup
NH5?~wr+
|wrmhc^YTOJE@;61,'"
}xsnid_ZUPKFA<72-(#
~ytoje`[VQLGB=83.)$
zupkfa\WRMHC>94/*%
{vqlgb]XSNID?:50+&!
|wrmhc^YTOJE@;61,'"
}xsnid_ZUPKFA<72-(#
~ytoje`[VQLGB=83.)$
~{sn]ZUP
"t%i(~
1g:B/}
.s>c>C.s
JD761,
4e5|.{/b
5p+v!t
}xsnid_ZUPKFA<72-(#
~ytoje`[VQLGB=83.)$
zupkfa\WRMHC>94/*%
{vqlgb]XSNID?:50+&!
|wrmhc^YTOJE@;61,'"
}xsnid_ZUPKFA<72-(#
~ytoje`[VQLGB=83.)$
zupkfa\WRMHC>94/*%
{vqlgb]XSNID?:50+&!
|wrmhc^YTOJE@;61,'"
}xsnid_ZUPKFA<72-(#
~ytoje`[VQLGB=83.)$
zupkfa\WRMHC>94/*%
{vqlgb]XSNID?:50+&!
|wrmhc^YTOJE@;61,'"
}xsnid_ZUPKFA<72-(#
~ytoje`[VQLGB=83.)$
zupkfa\WRMHC>94/*%
{vqlgb]XSNID?:50+&!
|wrmhc^YTOJE@;61,'"
}xsnid_ZUPKFA<72-(#
~ytoje`[VQLGB=83.)$
zupkfa\WRMHC>94/*%
{vqlgb]XSNID?:50+&!
|wrmhc^YTOJE@;61,'"
}xsnid_ZUPKFA<72-(#
~ytoje`[VQLGB=83.)$
zupkfa\WRMHC>94/*%
{vqlgb]XSNID?:50+&!
|wrmhc^YTOJE@;61,'"
}xsnid_ZUPKFA<72-(#
~ytoje`[VQLGB=83.)$
zupkfa\WRMHC>94/*%
{vqlgb]XSNID?:50+&!
|wrmhc^YTOJE@;61,'"
}xsnid_ZUPKFA<72-(#
~ytoje`[VQLGB=83.)$
zupkfa\WRMHC>94/*%
{vqlgb]XSNID?:50+&!
|wrmhc^YTOJE@;61,'"
}xsnid_ZUPKFA<72-(#
~ytoje`[VQLGB=83.)$
zupkfa\WRMHC>94/*%
{vqlgb]XSNID?:50+&!
|wrmhc^YTOJE@;61,'"
}xsnid_ZUPKFA<72-(#
~ytoje`[VQLGB=83.)$
zupkfa\WRMHC>94/*%
{vqlgb]XSNID?:50+&!
|wrmhc^YTOJE@;61,))))))))))))))))
r66666
PPPPPPPPPPPPPPPPPPPPPPPPPPPPPP
0tttttdl
)zSSSSS
_vvvvvvN
dgBG8XnkL
gMGGGGGGGGGGGGGGG?
______________
_Wy99999999999999
=yyyyyyyyyyyyyyI
f"""""""""""""
e!!!!!!!!!!!!!
k/////////////
*nnnnnnnnnnnnnN
~:::::::::::::
Eqqqqo
&2220%%
uqq_JJ
WOO7+KO
~zzJhhHHkkk
v[[[A $
]pp`L%!
qTzzzv
NNNGA@@
&&&'''
~vr000--.&
5UUKJJJJKKKIHHHHM?9=
1ssqdf`T
d444+.,$
dTUUUKJJJJKKKIDCG9>
,nnnga``X
||>>>546.
MIIIII
{{{{{{
fbbbbbb>
&"""""
@DDDDD
HLLLLL@
>::::::
.*****
)-----
!%%%%%
&"""""
AEEEEE
aeeeeeeeeeeeeeeY
511111!
/+++++
-)))))-
!%%%%%
733333
733333
_[[[[[
aeeeee]W
9======
KOOOOO
WSSSSSCE
SWWWWWG
uqqqqqa
AEEEEE
(,,,,,
_[[[[[[
x||||||
hlllll@
KOOOOO
$$$$$
377777
.*****
PTTTTT
tpppppp
x||||||
^ZZZZZZ
:>>>>>6
BFFFFF
&"""""
<88888
+/////
@DDDDDDDDDDDDD<7
dddddd
>~~~~~~~~~~~~~~~~~~~~~~N^
\knnnnnnnnnnnnnnnnnnnnnn
::::887DD4<<<<<
7wwwwwi
'gggggY^^^^^^^^^^^^^^^^^^^^^^^
rfgW______
x?SRBJJJJJ
[ZZRRRRRRRRRRRRRRRRRRRRR
,lllll
@A19999999999999999999999
q#""""""""""""""""""""""
C8::22222
>~~~~~~}}}}}}}}}}}}}}}}}}}}}}}eIIIMO/
6222222
Xy99999
2\^^^^^^^^^^^^^^^^^^^^^^&::::84
uJIIAAAAAAAAAAAAAAAAAAAAA1
TWGOOOOOOOOOOOOOOOOOOOOO7
rqaiiiii
lRSSSQK
3jkkki
2d``PX
m455%#
Y+****
Suvvfnf]
'kooom
7]YYYA
RSSSQK
;whooG
jmmm[R
R^^^^W
N++-ya
>F>8}e
xttttq
7nooab
)s6./X/))/
|xx|vrn
,XTB*
~;52!4??7!
of1997
?alldQ
[____E
@MMME;
keeY_-
vxxxT*
f=<<0"*
^ll`BRH
*W\\\DC
BchhDBI
>k``PH
>000 t~
A9r|||l
l_WWx~
D2u{{{
ZTTTDD9
G7p~~~
6SSM}eJXXX
eoEQQMK
s{{}eEQQ
vv@YG"77'
O[[[YT
rv{{yT
o{}pppO
nz~ssqL
qzzzxo
s0;;;-
YV]]!9
22221/
MW{{y`
PTxxxH
d]VVVF
_^^VP!
vvvndRJ
_{E^\\PF.
_]]QG-
cbbb\(
III788
[lggYZ
WVVN,
f~+
_AqqAYWR
D ]ll`VV
& <]lldA
HzzzO(
~t-2{HHHH
CT+/""
uJWddX^&1
o\\PFF"
wo\\PC
~[M@@0<
plc=/""
,hhhDB
|p}}sB
5ywRGKEE9
~K[OAA=
et_CMM!
_mC.9)''
GtLY1!//
w{uuI]
ywb1!//
e{uuIQ
CQ7995
dzttH^
`fhhDR
wU[[[C
AAGII%
F{YWW/
)KIGG?
fdjjJP
agiiEU
rP^^VD
:IOAA=
fdjjJP
CcmmcB
(@vvvE
suxxtR
2HJ>000
}yeU[[
qaoomL
LeSGII
|eRFHH
E2&(((
tLDO?#--#
q`KIGG
I2&(((
]N2<<<
J>",,,
LR'%++)
w{uukJ
A0 ...
sgiioN
IH8666
JK?117
x{}pppG
8@0#~x|qqwF
WK?117
wj^x|qqwF
hz~sss[
uwzzzU
\u5VV.
333101
;;;98<
$rr-8+$$
!8995#
nZZZUF.O
YXXXWD
z>>>>>6
w8^^^I
CCC1<?
.nnnnnNWWWWWWWU,
)iiiii
]]]]]#
xJnee]
___W99
=}}}}}}mmmmmmmc
MMMMM-=======
8JJJJJJ
L66666666
mmmmmmmS
=}}}}}cNNNNNNN
LLLLL 33333331
XXXXXXL!!
!aaaaaeGGGGGGGE<
l=deeY
5uuuuui
9999999?
t`
4}}}}}}}sB&
SSSSS#
>zzzzzzD
BBBBB"10000000
YgccccS
.nnnnnnooooooomT
nnnaW
|pb@6N??
#||||}
5vvvv555)
}}}uQ9Q\]]CNOO1:n
'2222'''
ct44444
ggggggge<88<>7
smll`b^
|@DD4<
FwvvnbS
oY]]]C2
x|||<!
"hiiio
P!32226.
vuukfF
z{QUUK
\ihhlfb
xJKKKM
z~~~|}
_hiiiM
tppptY
QUUEM1
"rIOO%
LyxxxS
ppk\jnnnla
R`\Z7)(((
_l`^(455)
nFQVVN
D(//'!
#MJJJ.
e_WWOI5
d"***,
Jz~~~^
]ZZZB
RfbbBQ
`o"<<4
&RR8-(
_:: vg
1}}ua_
FFFFF>!!!!!!!'
8^^^^^^^^';?ssq
'jjjeF
+)yyy}a
,srrrd@
qp155-
\yxxxpe
y^__GIL
~wQUUU;:
pojiieS]VUUK
d]WVVNJJ
T)3777%
xyY]]]E
eee[^^TL
PPPPUK
pxtuuiog;:::<
vrrrpa
2nkkI\P
ZsrrrX
7zSRRR
{{}mAEE9
tPVV.;;
B7000
-NIIIA=;
is"&&&
Tf^W2>??73
CplKEONNF
5y=17
hpy~~~^
lt}zzzb
lt}zzzb
dr{|||D
jooomX
SVVVDC
l`F+(}xxxD
sEBB""
DpwwG]
UG\>999
7plJ!6!
{q~yyyW
){{k[\TT(
=__/1&..
xeRZZZL
rrBINFF>
}eRZZZL
d}uuIQ
C]ZRRR
fvKLDD8
lemmAI
jz(!))
MyPXXTB
Antivirus Signature
Bkav Clean
Lionic Clean
tehtris Clean
DrWeb BackDoor.Meterpreter.157
MicroWorld-eScan Trojan.GenericKD.68288510
FireEye Generic.mg.07ecd12de259e623
CAT-QuickHeal Clean
ALYac Clean
Malwarebytes Malware.AI.1255799222
Zillya Clean
Sangfor Trojan.Win64.Cobaltstrike.V4xc
K7AntiVirus Clean
BitDefender Trojan.GenericKD.68288510
K7GW Clean
Cybereason malicious.a774eb
Arcabit Trojan.Generic.D412012B
BitDefenderTheta Clean
VirIT Clean
Cyren W64/ABRisk.IYHJ-1625
Symantec ML.Attribute.HighConfidence
Elastic malicious (high confidence)
ESET-NOD32 a variant of Win64/GenKryptik.GEGB
APEX Malicious
Paloalto Clean
ClamAV Clean
Kaspersky Trojan.Win32.CobaltStrike.czq
Alibaba Clean
NANO-Antivirus Clean
SUPERAntiSpyware Clean
Rising Trojan.Meterpreter!8.E532 (TFE:5:GfPDmvfR3RE)
TACHYON Clean
Sophos Mal/Generic-S
F-Secure Trojan.TR/Crypt.EPACK.Gen2
Baidu Clean
VIPRE Clean
TrendMicro Backdoor.Win64.COBEACON.YXDGUZ
McAfee-GW-Edition Artemis!Trojan
Trapmine Clean
CMC Clean
Emsisoft Trojan.GenericKD.68288811 (B)
Ikarus Trojan.Rozena
Jiangmin Clean
Webroot W32.Trojan.Gen
Google Detected
Avira TR/Crypt.EPACK.Gen2
Antiy-AVL Clean
Gridinsoft Trojan.Win64.CobaltStrike.bot
Xcitium Clean
Microsoft Trojan:Win64/CobaltStrike.AU!MTB
ViRobot Clean
ZoneAlarm Trojan.Win32.CobaltStrike.czq
GData Win32.Malware.CobalStrike.VU3Y2S
Cynet Malicious (score: 100)
AhnLab-V3 Malware/Win.Generic.C5459076
Acronis Clean
McAfee Artemis!07ECD12DE259
MAX malware (ai score=80)
DeepInstinct MALICIOUS
VBA32 Clean
Cylance unsafe
Panda Clean
Zoner Clean
TrendMicro-HouseCall Backdoor.Win64.COBEACON.YXDGUZ
Tencent Win32.Trojan.FalseSign.Msmw
Yandex Clean
SentinelOne Clean
MaxSecure Clean
Fortinet W64/GenKryptik.GEGB!tr
AVG Win64:HacktoolX-gen [Trj]
Avast Win64:HacktoolX-gen [Trj]
CrowdStrike win/malicious_confidence_100% (W)
No IRMA results available.