Static | ZeroBOX

PE Compile Time

1970-01-01 09:00:00

PE Imphash

e6efb84c997b145566619aa9dc9a7eef

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00001000 0x004f94e0 0x004f9600 6.10275172866
.data 0x004fb000 0x000453b0 0x00045400 5.20233515192
.rdata 0x00541000 0x004c8410 0x004c8600 6.03224690583
.pdata 0x00a0a000 0x00006294 0x00006400 5.88787644784
.xdata 0x00a11000 0x00006e68 0x00007000 4.53703956386
.bss 0x00a18000 0x00069f80 0x00000000 0.0
.edata 0x00a82000 0x00000159 0x00000200 3.75233948648
.idata 0x00a83000 0x00001a9c 0x00001c00 4.40352475353
.CRT 0x00a85000 0x00000070 0x00000200 0.471394621481
.tls 0x00a86000 0x00000010 0x00000200 0.0
.rsrc 0x00a87000 0x0000202c 0x00002200 7.14014234375
.reloc 0x00a8a000 0x00013d10 0x00013e00 5.42988803258

Resources

Name Offset Size Language Sub-language File type
RT_ICON 0x00a8713c 0x00001802 LANG_NEUTRAL SUBLANG_NEUTRAL PNG image data, 256 x 256, 8-bit/color RGB, non-interlaced
RT_GROUP_ICON 0x00a88940 0x00000014 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_VERSION 0x00a88954 0x000002a4 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_MANIFEST 0x00a88bf8 0x00000434 LANG_ENGLISH SUBLANG_ENGLISH_US XML 1.0 document, ASCII text

Imports

Library KERNEL32.dll:
0x140a835fc AddAtomA
0x140a8360c AreFileApisANSI
0x140a83614 CloseHandle
0x140a8361c CreateEventA
0x140a83624 CreateFileA
0x140a8362c CreateFileMappingA
0x140a83634 CreateFileMappingW
0x140a8363c CreateFileW
0x140a83644 CreateIoCompletionPort
0x140a8364c CreateMutexA
0x140a83654 CreateMutexW
0x140a8365c CreateSemaphoreA
0x140a83664 CreateThread
0x140a8366c CreateWaitableTimerA
0x140a83674 CreateWaitableTimerExW
0x140a8367c DeleteAtom
0x140a83684 DeleteCriticalSection
0x140a8368c DeleteFileA
0x140a83694 DeleteFileW
0x140a8369c DuplicateHandle
0x140a836a4 EnterCriticalSection
0x140a836ac ExitProcess
0x140a836b4 FindAtomA
0x140a836bc FlushFileBuffers
0x140a836c4 FlushViewOfFile
0x140a836cc FormatMessageA
0x140a836d4 FormatMessageW
0x140a836dc FreeEnvironmentStringsW
0x140a836e4 FreeLibrary
0x140a836ec GetAtomNameA
0x140a836f4 GetConsoleMode
0x140a836fc GetCurrentProcess
0x140a83704 GetCurrentProcessId
0x140a8370c GetCurrentThread
0x140a83714 GetCurrentThreadId
0x140a8371c GetDiskFreeSpaceA
0x140a83724 GetDiskFreeSpaceW
0x140a8372c GetEnvironmentStringsW
0x140a83734 GetFileAttributesA
0x140a8373c GetFileAttributesExW
0x140a83744 GetFileAttributesW
0x140a8374c GetFileSize
0x140a83754 GetFullPathNameA
0x140a8375c GetFullPathNameW
0x140a83764 GetHandleInformation
0x140a8376c GetLastError
0x140a83774 GetProcAddress
0x140a8377c GetProcessAffinityMask
0x140a83784 GetProcessHeap
0x140a83794 GetStartupInfoA
0x140a8379c GetStdHandle
0x140a837a4 GetSystemDirectoryA
0x140a837ac GetSystemInfo
0x140a837b4 GetSystemTime
0x140a837bc GetSystemTimeAsFileTime
0x140a837c4 GetTempPathA
0x140a837cc GetTempPathW
0x140a837d4 GetThreadContext
0x140a837dc GetThreadPriority
0x140a837e4 GetTickCount
0x140a837ec GetVersionExA
0x140a837f4 GetVersionExW
0x140a837fc HeapAlloc
0x140a83804 HeapCompact
0x140a8380c HeapCreate
0x140a83814 HeapDestroy
0x140a8381c HeapFree
0x140a83824 HeapReAlloc
0x140a8382c HeapSize
0x140a83834 HeapValidate
0x140a83844 IsDBCSLeadByteEx
0x140a8384c IsDebuggerPresent
0x140a83854 LeaveCriticalSection
0x140a8385c LoadLibraryA
0x140a83864 LoadLibraryW
0x140a8386c LocalFree
0x140a83874 LockFile
0x140a8387c LockFileEx
0x140a83884 MapViewOfFile
0x140a8388c MultiByteToWideChar
0x140a83894 OpenProcess
0x140a8389c OutputDebugStringA
0x140a838a4 OutputDebugStringW
0x140a838b4 QueryPerformanceCounter
0x140a838c4 RaiseException
0x140a838cc ReadFile
0x140a838d4 ReleaseMutex
0x140a838dc ReleaseSemaphore
0x140a838ec ResetEvent
0x140a838f4 ResumeThread
0x140a838fc SetConsoleCtrlHandler
0x140a83904 SetEndOfFile
0x140a8390c SetErrorMode
0x140a83914 SetEvent
0x140a8391c SetFilePointer
0x140a83924 SetLastError
0x140a8392c SetProcessAffinityMask
0x140a83934 SetProcessPriorityBoost
0x140a8393c SetThreadContext
0x140a83944 SetThreadPriority
0x140a83954 SetWaitableTimer
0x140a8395c Sleep
0x140a83964 SuspendThread
0x140a8396c SwitchToThread
0x140a83974 SystemTimeToFileTime
0x140a8397c TlsAlloc
0x140a83984 TlsGetValue
0x140a8398c TlsSetValue
0x140a83994 TryEnterCriticalSection
0x140a8399c UnlockFile
0x140a839a4 UnlockFileEx
0x140a839ac UnmapViewOfFile
0x140a839b4 VirtualAlloc
0x140a839bc VirtualFree
0x140a839c4 VirtualProtect
0x140a839cc VirtualQuery
0x140a839d4 WaitForMultipleObjects
0x140a839dc WaitForSingleObject
0x140a839e4 WaitForSingleObjectEx
0x140a839ec WideCharToMultiByte
0x140a839f4 WriteConsoleW
0x140a839fc WriteFile
0x140a83a04 __C_specific_handler
Library msvcrt.dll:
0x140a83a14 ___lc_codepage_func
0x140a83a1c ___mb_cur_max_func
0x140a83a24 __getmainargs
0x140a83a2c __initenv
0x140a83a34 __iob_func
0x140a83a3c __lconv_init
0x140a83a44 __set_app_type
0x140a83a4c __setusermatherr
0x140a83a54 _acmdln
0x140a83a5c _amsg_exit
0x140a83a64 _beginthread
0x140a83a6c _beginthreadex
0x140a83a74 _cexit
0x140a83a7c _commode
0x140a83a84 _endthreadex
0x140a83a8c _errno
0x140a83a94 _fmode
0x140a83a9c _initterm
0x140a83aa4 _localtime64
0x140a83aac _lock
0x140a83ab4 _memccpy
0x140a83abc _onexit
0x140a83ac4 _setjmp
0x140a83acc _strdup
0x140a83ad4 _ultoa
0x140a83adc _unlock
0x140a83ae4 abort
0x140a83aec calloc
0x140a83af4 exit
0x140a83afc fprintf
0x140a83b04 fputc
0x140a83b0c free
0x140a83b14 fwrite
0x140a83b1c localeconv
0x140a83b24 longjmp
0x140a83b2c malloc
0x140a83b34 memcmp
0x140a83b3c memcpy
0x140a83b44 memmove
0x140a83b4c memset
0x140a83b54 printf
0x140a83b5c qsort
0x140a83b64 realloc
0x140a83b6c signal
0x140a83b74 strcmp
0x140a83b7c strcspn
0x140a83b84 strerror
0x140a83b8c strlen
0x140a83b94 strncmp
0x140a83b9c strrchr
0x140a83ba4 vfprintf
0x140a83bac wcslen

Exports

Ordinal Address Name
1 0x140a80d20 _cgo_dummy_export
2 0x1403ff950 authorizerTrampoline
3 0x1403ff670 callbackTrampoline
4 0x1403ff830 commitHookTrampoline
5 0x1403ff790 compareTrampoline
6 0x1403ff740 doneTrampoline
7 0x1403ff9d0 preUpdateHookTrampoline
8 0x1403ff890 rollbackHookTrampoline
9 0x1403ff6d0 stepTrampoline
10 0x1403ff8e0 updateHookTrampoline
!This program cannot be run in DOS mode.
``.data
.rdata
`@.pdata
0@.xdata
0@.bss
.edata
0@.idata
.reloc
AUATUWVSH
[^_]A\A]
[^_]A\A]
:cpu.u
UUUUUUUUH!
33333333H!
L$xI9A
D$pH9H@w
D$xH9P@v
debugCalH9
debugCalH9
debugCalH9
debugCalH9
l819us
debugCalH9
84t7H9
runtime.H9
T$PH9P
t$0H9V
t$HH9V
T$0H9P@u
D$pH9G(t!
H9H uO
H9T$pu
H9T$pu
H9L$pt
H9L$pt
T$(H9ZpwH<
T$(H9Jpw
r`H9r8
P`H9P8tkH
\$(9SXt
L$(H9A8u"H
H9D$(t
L$@HcT$
D$(8H t%H
D$0HcPLH
L$xHcQLH
D$(H9H
D$XH9H
D$0H9H
T$ H+:
wwwwwwwwH
UUUUUUUUH
X0H9X8
T$@H9J8u2
T$@H9B8
D$@H9H0v
L$ H9Hpw
kernel32H
l32.dll
AddDllDiH
rectory
AddVectoH
redContiH
ContinueH
Handler
LoadLibrH
raryExA
LoadLibrH
raryExW
advapi32H
i32.dll
SystemFuH
stemFuncH
tion036
ntdll.dlH
NtWaitFoH
ForSinglH
eObject
RtlGetCuH
tlGetCurH
rentPeb
RtlGetNtH
tVersionH
Numbers
winmm.dlH
timeBegiH
nPeriod
timeEndPH
dPeriod
ws2_32.dH
_32.dll
WSAGetOvH
verlappeH
dResult
wine_getH
ine_get_H
version
powrprofH
rof.dll
PowerRegH
gisterSuH
spendResH
umeNotifH
ication
GetSysteH
mTimeAsFH
ileTime
QueryPerH
formanceH
Counter
QueryPerH
formanceH
rmanceFrH
equency
HxH9Hpu
T$@H9P
D$#e+H
I9F0tjH
H9QPt#H
rpH92w
t`I9F0tZH
memprofiH9;u:
lerau1f
memprofiH
memprofiL
memprofiL
t%H9APt
K09O0s
L$xH9A
r8H+r(H
Z(HcJ0H
H9D$HA
H9D$HA
\$PH9S@
H9D$8A
t$`H92u
L$@H9H
I9T$xu
M9T$pu
runtime.H
gopau$f
runtime.H
|$HH97u*
gopau!f
runtime.H9
gopau&f
runtime.H9
G0I9F0t
f9J2u=
f9J0u.
H9S@urH
6@8rQ@
8noneuZ1
8crasuF
8singu
8systu
l$0M9,$u
l$PM9,$u
X0H;CPtTH
sPH91u
l$ M9,$u
l$0M9,$u
l$PM9,$u
H+t$(H
0Hc\$8H
HHc\$PH
l$0M9,$u
l$0M9,$u
l$(M9,$u
l$(M9,$u
l$ M9,$u
l$0M9,$u
l$0M9,$u
l$(M9,$u
l$(M9,$u
l$ M9,$u
l$0M9,$u
l$0M9,$u
l$(M9,$u
l$(M9,$u
l$ M9,$u
l$0M9,$u
l$0M9,$u
l$(M9,$u
l$(M9,$u
l$ M9,$u
l$ M9,$u
P+8S+t
x H9{ u6H
x(H9{(uWH
Q H9S u*H
Q(H9S(u
Q18S1u
P8H9S8u*H
P@H9S@u H
PHH9SHu
PPH9SPu
H9{(uF
x09{0u>
x49{4u6H
H08K0u
P(H9S(u
H9L$0uQH
H9L$@uuH
L$PH9T$Hu
D8wBE8
D8wBE8
H0f9J0u
H9S@urH
l$0M9,$u
l$(M9,$u
l$(M9,$u
l$ M9,$u
l$0M9,$u
l$(M9,$u
l$(M9,$u
l$ M9,$u
\$0H9S
\$0H9S
T$0H)B
T$0H9J
l$ M9,$u
l$ M9,$u
l$0M9,$u
l$0M9,$u
l$0M9,$u
l$0M9,$u
|$09w0uc
r49w4u[H
O@H9G8uI
|$09wHu*
rL9wLu
\$0H9S
I H9K
|:PL9zH
d$(t,H
l*PL9jHt
D$HtDD
D$HtSD
t$0}"H
l$0M9,$u
l$8M9,$u
8TRUEt
8Truet
8trueuT
8FALSu
8Falsu
8falsu
J(H9B t
H8H9X@
H0f9J0u
H9S@urH
struct {H
struct {H
reflect.H9
reflect.
CallSlicL9'u
T$hH9Z
t$XH9V
L$XH9Y
PPH9SPu
PXH9SXu
Z(H9F u>
\$0H9S0u!H
Q8H9S8u
Q@H9S@u
IHH9KH
l$@M9,$u
l$@M9,$u
l$8M9,$u
l$8M9,$u
l$@M9,$u
l$0M9,$u
l$@M9,$u
l$@M9,$u
l$8M9,$u
l$0M9,$u
l$0M9,$u
l$0M9,$u
l$HM9,$u
l$@M9,$u
l$0M9,$u
l$8M9,$u
l$8M9,$u
l$0M9,$u
l$0M9,$u
l$0M9,$u
l$@M9,$u
l$@M9,$u
l$0M9,$u
l$@M9,$u
l$0M9,$u
l$8M9,$u
l$0M9,$u
l$0M9,$u
l$0M9,$u
l$0M9,$u
l$0M9,$u
l$XM9,$
l$0M9,$u
l$8M9,$u
l$0M9,$u
l$@M9,$u
l$@M9,$u
l$(M9,$u
l$(M9,$u
l$(M9,$u
l$ M9,$u
l$ M9,$u
l$(M9,$u
l$(M9,$u
l$(M9,$u
l$ M9,$u
l$ M9,$u
l$(M9,$u
l$(M9,$u
l$(M9,$u
l$ M9,$u
l$ M9,$u
H H9K u(H
H(H9K(u
H8H9K8
l$@M9,$u
T$D9T$<
T$09T$,w
L$8u/H
L$8u>H
l$(M9,$u
~(H9z(u&
l$(M9,$u
x H9{ u
-070u!D
-07:00:0M9
-07:00:0H
-07:00:0
-07:00:0
-07:00:0
-07:00:0
Z070u!D
Z07:00:0M9
Z07:00:0H
-07:00:0
-07:00:0
-07:00:0
-07:00:0
2006u-H)
2006u1H
-07:00:0
time.DatH
time.LocL
time.LocH
ocation(H
time.UTCL
8WITAuH
L$(H#L$@H
L$(H#L$@H
L$(H#L$@H
L$(H#L$@H
L$`H#L$xH
;nullu
H9D$P~#H
8Locau
tzdau;
t$xHc6Hk
x8H9{8
l$0M9,$u
l$@M9,$u
l$@M9,$u
l$PM9,$
l$@M9,$u
l$@M9,$u
l$@M9,$u
l$8M9,$u
l$0M9,$u
l$0M9,$u
l$@M9,$u
l$0M9,$u
\$@u$H
J(H9B t
H 9K u3
H$9K$u+
H(9K(u#
H,9K,u
H09K0u
H49K4u
H 9K u
H(H9K(u
t$PHcX(
L$pHcY(H
;fileu
unixgram
unixpackf
;udp4t
;udp6uc
l$(M9,$u
l$(M9,$u
8..uZH
?fileumH
8\\tzH
T$$9T$ w
\$ 9SXu
Q\9S\u
xPH9{Pu~
xX9{Xuv
x\9{\un
x`9{`uf
xd@8{du\H
l$0M9,$u
l$0M9,$u
H 9K u
H$9K$u
l$@M9,$u
l$@M9,$u
l$@M9,$u
l$@M9,$u
l$0M9,$u
l$(M9,$u
l$(M9,$u
l$ M9,$u
x H9{ u
;nullu
<Ot+<XtH
l$0M9,$u
l$0M9,$u
l$(M9,$u
8leaku
T$08J
[::ffff:H
L$&fE9
invalid H
d PrefixH
x(H9{(uUH
l$@M9,$u
l$HM9,$u
l$0M9,$u
l$@M9,$u
l$@M9,$u
l$0M9,$u
l$8M9,$u
l$0M9,$u
l$0M9,$u
l$0M9,$u
l$0M9,$u
l$0M9,$u
l$0M9,$u
l$0M9,$u
l$0M9,$u
l$pM9,$u
l$0M9,$u
l$0M9,$u
l$0M9,$u
l$0M9,$u
l$0M9,$u
l$0M9,$u
Z(H9F t
l$(M9,$u
T$ H9J0u)H
l$8M9,$u
T$08J
9windu
:andru
:windu
:planu9
:fileu5H
:bindu4H
9solauJf
myhostnaM9"
myhostna
:fileu
:fileu
?fileuA
8tcp4tb
8tcp6tZ
8udp4tP
8udp6tH
8unixt@
unixgramH
unixpackH
:dialu2L
8unixtS
unixgramL9
unixpack
l$(M9,$u
l$(M9,$u
I9|$@~
:CNAMuX
8CNAMu.A
8tcp4t
8tcp6u
l$0M9,$u
T$D9T$@w
?tcp4t"
?tcp6t
?udp4t
?tcp4t
?udp6u~H
\$`u H
9listu:fA
<$dial
8tcp4t
8tcp6u*
8udp4t
8udp6u
l$ M9,$u
l$ M9,$u
:uduxA
:tcp4t
:tcp6t
:udp4t
:udp6u8H
9tcp4t
9tcp6u&
9udp4t
9udp6u
:acceu7f
;succu
notfoundH9
tryagainH9
?retuu
;unixt9
unixgramH9
unixpack
8udp4t
8unixtH
unixgramH9
unixpackH9
unixgramH9
unixpackH9
listucfA
N(H9F u_
N8H9F0u:
H9{(uu
x0@8{0uk
x1@8{1ua
@8{2uUH
l$0M9,$u
l$(M9,$u
l$(M9,$u
l$ M9,$u
x 9{ u
x$9{$u
l$@M9,$u
l$@M9,$u
l$0M9,$u
l$0M9,$u
l$ M9,$u
l$0M9,$u
l$ M9,$u
l$0M9,$u
l$0M9,$u
l$0M9,$u
l$0M9,$u
l$ M9,$u
l$0M9,$u
l$ M9,$u
l$0M9,$u
l$0M9,$u
l$0M9,$u
l$0M9,$u
l$ M9,$u
l$0M9,$u
l$ M9,$u
l$0M9,$u
l$0M9,$u
l$0M9,$u
l$0M9,$u
l$ M9,$u
l$0M9,$u
l$ M9,$u
l$0M9,$u
l$0M9,$u
l$ M9,$u
l$0M9,$u
l$0M9,$u
l$ M9,$u
l$0M9,$u
l$0M9,$u
l$HM9,$u
l$HM9,$u
l$0M9,$u
l$0M9,$u
l$0M9,$u
l$0M9,$u
l$0M9,$u
l$0M9,$u
l$0M9,$u
l$0M9,$u
l$0M9,$u
l$0M9,$u
l$0M9,$u
l$0M9,$u
l$0M9,$u
l$HM9,$
x H9{ u6H
kernel32H9
~(H9z(u&
x H9{ u
x H9{ u
H 9K u"H
H0H9K0u
l$ M9,$u
l$ M9,$u
l$ M9,$u
l$0M9,$u
l$ M9,$u
l$ M9,$u
l$ M9,$u
l$ M9,$u
l$0M9,$u
l$ M9,$u
l$ M9,$u
l$ M9,$u
l$ M9,$u
l$0M9,$u
l$ M9,$u
P@9S@u+
PDf9SDu!
PH9SHu
PLf9SLu
~(H9z(u&
l$@M9,$u
os/execH
os/exec.H
Command(H
l$ M9,$u
:|1ubH
l$0M9,$u
l$0M9,$u
T$0H9J
BHL9BPt
P(L9H8
P(H9H0~
s(H9K0u
PXH9SXt
s`H9Kht
HHH9KHu"H
HPH9KPu
qPH9qH}/H
l$(M9,$u
l$(M9,$u
H9X`|%H
|$HH9x
t|A9wpu
E9#~#H
\$P~SH
l$ M9,$u
l$ M9,$u
l$ M9,$u
P0H+P(H
P(H9P0
\$@H9H
P(H9P0u H
P0H+P(H9P
H0H+H(H
Q0H+Q(H
L$`H9A
P0H+P(H9P
P(H9P0~)H
PXH+PPH
WXH+WPH
l$ M9,$u
l$ M9,$u
l$ M9,$u
l$ M9,$u
l$0M9,$u
l$0M9,$u
l$ M9,$u
l$ M9,$u
l$(M9,$u
l$(M9,$u
l$ M9,$u
l$ M9,$u
l$ M9,$u
l$ M9,$u
l$0M9,$u
l$0M9,$u
l$ M9,$u
l$ M9,$u
l$ M9,$u
l$ M9,$u
l$(M9,$u
l$(M9,$u
L$ t:B
|$0H9w
D$(f9P(u
P*8S*u
|$@H9w@}
;falsu
l$(M9,$u
l$(M9,$u
l$(M9,$u
l$(M9,$u
l$@<'tl
l$(M9,$u
uw<,u%H
Z H9J(u
|$0H9w uFH
B(H9O0u4H
H9r@u&
l$ M9,$u
l$ M9,$u
l$0M9,$u
l$ M9,$u
l$(M9,$u
l$ M9,$u
l$ M9,$u
l$0M9,$u
l$ M9,$u
l$ M9,$u
l$(M9,$u
l$HM9,$
|$0@8w uPH
r(H9w(uFH
H9O8u0H
wHH9rHu&
P8H9S8u
T$0H9J
l$8M9,$u
l$(M9,$u
l$(M9,$u
l$8M9,$u
l$(M9,$u
us-asciiH9
8utf-u
text/plaH
text/plaH
text/plaH
text/plaH
text/plaH
text/plaH
distinctH9
L$8tBI
form-datH92u
:--u0H
l$0M9,$u
l$0M9,$u
l$8M9,$
l$8M9,$u
l$0M9,$u
l$0M9,$u
l$0M9,$u
H3t8 L3L8(I
\$PH1C
H1T$0H
H1T$HH
H1T$PH
l$HM9,$u
D$(D3F
|$4F3<
|$4E3<
d$4F3$
L$$B3T
T$(F3D
D$$D3F
d$ F3|
|$$F3D
o\$ fE
o\$0fE
o\$@fE
o\$PfE
o\$`fE
o\$pfE
l$HM9,$u
l$HM9,$u
:T^8rv
D$ffPH
~d$ fE
ot$PfA
S H+Q H
Q H1s H
l$0M9,$u
l$8M9,$u
l$(M9,$u
l$8M9,$u
l$0M9,$u
l$ M9,$u
l$0M9,$u
l$8M9,$u
l$(M9,$u
l$8M9,$u
l$0M9,$u
l$ M9,$u
l$0M9,$u
l$8M9,$u
l$(M9,$u
l$8M9,$u
l$0M9,$u
l$ M9,$u
P8H9S8u
l$8M9,$u
l$8M9,$u
l$`M9,$
l$8M9,$u
l$HM9,$u
l$0M9,$u
l$0M9,$u
l$ M9,$u
l$8M9,$u
l$8M9,$u
l$`M9,$
l$8M9,$u
l$HM9,$u
l$0M9,$u
l$0M9,$u
l$ M9,$u
l$8M9,$u
l$8M9,$u
l$`M9,$
l$8M9,$u
l$HM9,$u
l$0M9,$u
l$0M9,$u
l$ M9,$u
l$8M9,$u
l$8M9,$u
l$`M9,$
l$8M9,$u
l$HM9,$u
l$0M9,$u
l$0M9,$u
l$ M9,$u
l$8M9,$u
l$XM9,$
l$(M9,$u
l$0M9,$u
l$0M9,$u
l$0M9,$u
optionalH9
explicit
explicitf
optionalH
explicitH
explicit
optionalH
explicitH
generaliL9
generaliH
printablL9
printablH
8numeu
8utf8u
optionalH
explicitH
optionalH
explicitH
t$@u|I
applicatL9
applicatH
optionalH
explicitH
applicatuu
applicatH
optionalH
explicitH
omitemptf
optionalH
explicitH
omitemptH
optionalH
explicitH
optionalH
explicitH
l$8M9,$u
l$0M9,$u
l$@M9,$u
l$0M9,$u
l$@M9,$u
l$8M9,$u
l$@M9,$u
l$@M9,$u
l$0M9,$u
l$HM9,$u
l$0M9,$u
l$@M9,$u
L$@8L$u
L$@8L$u
H9P };H
IV for EH
CDSA CTRH
9P-25uP
l$8M9,$u
l$(M9,$u
l$(M9,$u
l$0M9,$
l$0M9,$u
l$@M9,$
l$@M9,$u
l$8M9,$
l$8M9,$u
l$0M9,$
l$0M9,$u
l$@M9,$
l$@M9,$u
\$0H9S
\$0H9S
I H9K
XfffffffH
ffffffffH
l$8M9,$u
l$8M9,$u
l$`M9,$
T$0H9J
t$HH9V u
\$(H+Z`H
~o-wI
<$tI<&tE
5t < t
r8H9Z@t
rpH9Zxt
J(H9B t
l$8M9,$u
l$(M9,$u
l$(M9,$u
l$(M9,$u
l$8M9,$u
x @8{ u6H
{0H9x0
{PH9xP
xY@8{Y
{xH9xx
\$(H+ZPH
QZ^&A!
\$(H+ZXH
$D3T$4D3T$ D3T$
D3T$8D3T$$D3T$
D3T$<D3T$(D3T$
$D3T$,D3T$
D3T$0D3T$
D3T$4D3T$
D3T$8D3T$ A
D3T$<D3T$$A
T$ D3T$
$D3T$(A
T$$D3T$
D3T$,A
T$(D3T$
D3T$0A
T$,D3T$ D3T$
D3T$4A
T$0D3T$$D3T$
D3T$8A
T$4D3T$(D3T$
D3T$<A
T$8D3T$,D3T$
T$<D3T$0D3T$
$D3T$4D3T$ D3T$
D3T$8D3T$$D3T$
D3T$<D3T$(D3T$
$D3T$,D3T$
D3T$0D3T$
D3T$4D3T$
D3T$8D3T$ A
D3T$<D3T$$A
T$ D3T$
$D3T$(A
T$$D3T$
D3T$,A
T$(D3T$
D3T$0A
T$,D3T$ D3T$
D3T$4A
T$0D3T$$D3T$
D3T$8A
T$4D3T$(D3T$
D3T$<A
T$8D3T$,D3T$
T$<D3T$0D3T$
$D3T$4D3T$ D3T$
D3T$8D3T$$D3T$
D3T$<D3T$(D3T$
$D3T$,D3T$
D3T$0D3T$
D3T$4D3T$
D3T$8D3T$ A
D3T$<D3T$$A
T$ D3T$
$D3T$(A
T$$D3T$
D3T$,A
T$(D3T$
D3T$0A
T$,D3T$ D3T$
D3T$4A
T$0D3T$$D3T$
D3T$8A
T$4D3T$(D3T$
D3T$<A
T$8D3T$,D3T$
T$<D3T$0D3T$
$D3T$4D3T$ D3T$
D3T$8D3T$$D3T$
D3T$<D3T$(D3T$
$D3T$,D3T$
D3T$0D3T$
D3T$4D3T$
D3T$8D3T$ A
D3T$<D3T$$A
T$ D3T$
$D3T$(A
T$$D3T$
D3T$,A
T$(D3T$
D3T$0A
T$,D3T$ D3T$
D3T$4A
T$0D3T$$D3T$
D3T$8A
T$4D3T$(D3T$
D3T$<A
T$8D3T$,D3T$
T$<D3T$0D3T$
PXH9SXu
P`H9S`u
CERTIFIC
H92u$f
8S(udH
T$0H9P
D$8H9D$
H9L$0u
T$0H9J
l$0M9,$u
l$0M9,$u
HHH9P@u H
:cpu.u
expand 3H
2-byte kH
T$(H9J(
pPH)HXL
l$ M9,$u
DOWNGRD
DOWNGRD
<LfD9x
D$Pf9p@
L$@H9Y
T$pf9B@r
:h2u3I
http/1.1M9}
http/1.1
http/1.1
http/1.1
s@f92u
D$"tls1f
D$&3 H
key expaH9
master sH9
client fH9
server fH9
inisuqf
CERTIFICL9
CERTIFICL
CERTIFICL
CERTIFICI
PRIVATE L9
PRIVATE
PRIVATE L
CERTIFICf
T$0H9J
T$0H9J
l$`M9,$u
l$8M9,$u
l$0M9,$u
l$0M9,$u
l$(M9,$u
l$(M9,$u
l$ M9,$u
t$HH9H
H9J sMH
t$PH9F sMH
T$78T$B
l$0M9,$u
9x4vFH
T$pH9Bht
XD9X4v
T$89B4
T$h)B0H
P09P4s
L9L$X~
l$`M9,$u
l$`M9,$u
l$`M9,$u
x @8{ u6H
H9=)vx
l$(M9,$u
l$(M9,$u
l$(M9,$u
l$(M9,$u
l$0M9,$u
l$0M9,$u
l$ M9,$u
l$ M9,$u
l$ M9,$u
l$ M9,$u
:httpu
:httpu3H
:httpu
:socku
localhosH9
x @8{ u6H
l$HM9,$
l$ M9,$u
x(H9{(u_
x0@8{0uUH
9httpu&
9httpu
HTTPu#
*http2.TH9
ransportH9H
8HEADt
Z(H9J0t
8Cookf
AuthorizH9
atioud
Www-AuthH9
enticateH9H
:domauFf
httponlyL
samesite
8noneu<H
8striu
Q H9A(~
l$8M9,$u
l$8M9,$u
Z(H)Z0H
8:metu
8:schu
8:stauVfA
:authoriI90u*fA
L9T$Xu
l$ M9,$u
l$(M9,$u
l$ M9,$u
9readudH
:wsaru:f
\]Hu'L
l$8M9,$u
l$0M9,$u
l$0M9,$u
>httpu
>httpu&
9httpf
100-contH9
:CONNu_f
8Traiurf
Content-H9
9closu
:HEADtmD
l$0M9,$u
trailersH92t&
9httpu
>httpu
>httpu/
T$0H9BH
8Traiulf
Content-H9
Lengu;f
>chunu
8HEADA
l$ M9,$u
T$hH9S
l$(M9,$u
l$(M9,$u
>CONNu
8CONNu
8POSTt
8PATCf
H9O8u?
trailersH
l$(M9,$u
L$h9A`s
D$X9H`
multiparH9
HTTP/2.0H9
9CONNunf
HTTP/1.0H9
HTTP/1.1
8CONNu;fA
:POSTt'H
:PATCuD
8HEADt8
8TRACf
8OPTIuf
8HEADtc
8DELEu
8SEARuIf
8OPTIu-f
PROPFINDH9
no-cacheH92
>HEADu
l$(M9,$u
L$(H)H(
:POSTu7H
9CONNf
keep-aliH9
8closu
identityH
identity1
identity
identity@
:HEADu
identityL
identityL
8chunuofA
:HEADt
HpH9Hht
http/1.0H9
http/1.1H9
9readu
rHH9F(t"H
8HEADu%H
L$8I9H@u
8OPTIu
l$(M9,$u
l$(M9,$u
HEADu@
l$0M9,$u
;tcp4t
;tcp6u6H
9CONNf
l$ M9,$u
>POSTt'H
>PATCu
8Traiulf
Content-H9
Lengu;f
>HEADu@H
9chunu
identityH9
Content-H9
:httpu
>httpu
>httpu
l$ M9,$u
l$ M9,$u
l$ M9,$u
8httpu
>httpt
>httpuD
:httpu
T$pH9JxuAD
D$pI9PxtXD
:HEADt
8HTTPu
H9JxuQD
?HEADt1
H!8K!u
H(H9K(
H9w u+H
r(H9w(u!H
\$0H9S
H 9K u*H
H0H9K0u
H8H9K8
x(H9{(u_
x0@8{0uUH
O(H9G t
\$0H9S
l$0M9,$u
l$(M9,$u
l$(M9,$u
l$ M9,$u
\$0H9S
l$8M9,$u
l$(M9,$u
l$(M9,$u
l$8M9,$u
l$(M9,$u
l$(M9,$u
l$ M9,$
l$ M9,$u
l$(M9,$
l$(M9,$u
l$(M9,$
l$(M9,$
l$(M9,$
l$ M9,$
l$ M9,$u
l$(M9,$
l$8M9,$u
l$(M9,$
l$(M9,$u
l$(M9,$
l$(M9,$u
l$(M9,$
l$(M9,$u
l$HM9,$
l$0M9,$u
l$8M9,$
l$ M9,$u
l$0M9,$u
l$8M9,$
l$ M9,$
l$0M9,$u
l$8M9,$
l$ M9,$u
l$0M9,$u
l$HM9,$
l$0M9,$u
l$0M9,$u
l$ M9,$u
l$ M9,$u
l$8M9,$u
l$0M9,$u
l$8M9,$u
l$8M9,$
l$ M9,$
l$0M9,$u
l$8M9,$
l$ M9,$u
l$0M9,$u
l$8M9,$
l$ M9,$
l$0M9,$u
l$8M9,$
l$0M9,$u
l$ M9,$
l$0M9,$u
l$8M9,$
l$0M9,$u
l$8M9,$
l$ M9,$
l$0M9,$u
l$8M9,$
l$0M9,$u
l$8M9,$u
l$0M9,$u
l$0M9,$u
l$0M9,$u
l$0M9,$u
l$HM9,$u
l$0M9,$u
l$(M9,$u
l$(M9,$u
l$(M9,$u
l$ M9,$u
l$0M9,$u
l$8M9,$u
l$(M9,$u
l$(M9,$u
l$ M9,$u
l$(M9,$u
l$ M9,$u
l$ M9,$u
l$0M9,$u
l$0M9,$u
l$(M9,$u
l$0M9,$u
l$0M9,$u
l$0M9,$u
l$0M9,$u
l$8M9,$u
l$0M9,$u
l$0M9,$u
l$0M9,$
l$0M9,$u
l$(M9,$u
l$8M9,$u
l$(M9,$u
l$0M9,$u
l$0M9,$u
l$0M9,$
l$0M9,$u
l$HM9,$
l$ M9,$u
l$@M9,$u
l$(M9,$u
T$0H9J
l$0M9,$u
l$@M9,$u
videoNotH
l$0M9,$u
>chanuCf
:privu
:grouu
supergroH9
:chanu
{"AED":{H
9reguu
x(H9{(u_
x0@8{0uUH
{8H9x8
{XH9xX
x H9{ u@H
x(H9{(u6H
B0H9N8
~HH9zH
~XH9zX
z`@8~`
B0H9N8
~HH9zH
~XH9zX
z`H9~`
B0H9N8
~HH9zH
~XH9zX
zhH9~h
B0H9N8
~HH9zH
~XH9zX
~hH9zh
B0H9N8
z@H9~@
zHH9~H
zPH9~P
~pH9zp
H H9K
{ H9x
{0H9x0
xH@8{H
xJ@8{Ju~
xK@8{KutH
{8H9x8utH
{ H9x
{0H9x0
{PH9xP
{hH9xh
{(H9x(ukH
x0H9{0uaH
H9{@uUH
{0H9x0
{PH9xP
N`H9FXu-
BhH9Npu
|$0H9wxu5H
x H9{ u6H
{8H9x8
{XH9xX
xa@8{a
xxH9{x
H9K u!
x(@8{(u
x)@8{)u
|$0H9wxu]H
\$(H9Sxu%H
x(H9{(u_H
x0H9{0uUH
B(H9N0
~@H9z@
~PH9zP
~`H9z`
{8H9x8
{XH9xX
K0H9H0
{(H9x(uaH
x8H9{8uWH
wpH9rp
H9wPuxH
BXH9O`ufH
H9rpuXH
K H9H u]H
H0H9K0
KHH9HH
H9K uVH
{0H9x0uL
x8@8{8uBH
H9{@u6H
x H9{ u
x(H9{(u
x @8{ u_H
x0H9{0uUH
BXH9N`u0H
zpH9~pu&
B0H9N8
z@H9~@
zHH9~H
zPH9~P
~pH9zp
B0H9N8
z@H9~@
zHH9~H
~XH9zX
~xH9zx
BXH9N`
B0H9N8
~HH9zH
~XH9zX
~hH9zh
B0H9N8
~HH9zH
zPH9~P
~`H9z`
{8H9x8
xXH9{X
xa@8{a
NxH9Fpu<
{8H9x8
xHH9{H
xXH9{X
{xH9xx
{8H9x8
{XH9xX
|$0H9wxu5H
x0H9{0
x@H9{@
{XH9xXutH
x0H9{0
xPH9{P
{8H9x8utH
l$(M9,$u
l$ M9,$u
l$ M9,$u
H9|$(u
l$8M9,$u
@8w u!H
O0H9G(t
{(H9x(usH
x0H9{0uiH
x8H9{8u_H
JHH9B@t
T$0H9J
H H9K u
l$0M9,$u
l$@M9,$u
l$0M9,$u
l$0M9,$u
l$0M9,$u
l$(M9,$u
l$(M9,$u
l$(M9,$u
l$ M9,$u
l$0M9,$u
T$0H9J
L$0u>L
D$HusH
x(H9{(u_
x0@8{0uUH
x @8{ u6H
\$(8S8u
|$(H9w@u0H
l$(M9,$u
l$@M9,$u
l$@M9,$u
l$@M9,$u
l$@M9,$u
l$8M9,$u
l$0M9,$u
l$pM9,$u
l$pM9,$u
l$(M9,$u
l$8M9,$u
l$0M9,$u
l$`M9,$u
l$8M9,$u
l$0M9,$u
l$pM9,$u
l$pM9,$u
l$8M9,$u
l$8M9,$u
l$8M9,$u
8gormu
w@H9r@
w`H9r`
l$ M9,$u
l$ M9,$u
l$@M9,$
l$@M9,$u
|$0H9w
r H9w uQH
H9O0u<H
r8H9w8u2
ZHH9F@t
T$0H9T$p
T$0H9T$h
T$0H9T$h
T$8H9T$p
T$8H9T$p
T$8H9T$p
T$8H9T$p
T$8H9T$p
T$8H9T$p
T$8H9T$p
l$ M9,$u
\$`L9S
l$ M9,$u
l$ M9,$u
l$ M9,$u
\$H8S9
L$`H9A t
l$ M9,$u
l$ M9,$u
l$ M9,$u
D$@8P8
I H9K
l$0M9,$u
l$(M9,$u
l$(M9,$u
l$ M9,$u
l$ M9,$u
l$ M9,$u
l$ M9,$u
l$ M9,$u
l$ M9,$u
H9S u+H
Q(H9S(u!H
Q0H9S0u
H H9K u
H(8K(u
H0H9K0
8nullu
CreatedAM9
9timet8I
9timeu
8NANOu
8MILLu
UpdatedAM9
8timet9I
8timef
8NANOu
8MILLu
8booltQ
8uintt@
8byteu
8floaua
8strif
migratioH9
8falsu
:<-trH
:timef
:bytet
9UNIQu
8INDEu
UNIQUEINH9
COMPOSITf
COMPOSIT
UNIQUEINL
has_manyf
belongs_H9
many_to_f
belongs_M9
~PH9zHu
F(L9B(
8nullu_H
{ H9x uyH
x0H9{0uoH
x8H9{8ueH
x@H9{@u[H
x H9{ u6H
l$PM9,$
l$PM9,$
l$PM9,$
l$PM9,$
l$PM9,$
l$PM9,$
l$8M9,$
l$8M9,$
l$8M9,$
l$(M9,$u
l$(M9,$u
l$(M9,$u
l$(M9,$u
l$(M9,$u
l$(M9,$u
I0H9K0
H9w(u|H
r0H9w0urH
r8H9w8uhH
ZHH9G@uV
ZXH9FPu1
ZhH9F`t
8has_uqfA
belongs_I9
belongs_M9}
has_manyH9
belongs_L9
many_to_
has_manyL9
belongs_L9
many_to_f
8.*uTH
has_manyM9,$ts
<$has_
many_to_f
belongs_M9
l$0M9,$u
t$0ugH
t$0ugH
l$ M9,$u
H90uiH
;nullu
N(H9F t
~~~ct~~~L9
~~~py~~~f
~~~ct~~~
H9BHu,H
~~~as~~~H9
T$0H9J
T$0H9J
\$0H9S
Q H9S u
I(H9K(
T$0H9J
T$0H9J
l$ M9,$
l$ M9,$u
l$ M9,$
l$ M9,$u
l$@M9,$
l$@M9,$
l$@M9,$u
l$8M9,$
l$8M9,$u
l$(M9,$u
l$ M9,$u
l$ M9,$u
l$ M9,$u
l$ M9,$u
l$0M9,$u
l$0M9,$u
l$(M9,$u
l$0M9,$u
l$0M9,$u
l$0M9,$u
l$0M9,$u
l$0M9,$u
l$0M9,$u
l$ M9,$u
l$ M9,$u
l$ M9,$u
l$ M9,$u
l$(M9,$u
l$0M9,$u
l$0M9,$u
l$@M9,$
l$@M9,$u
l$@M9,$u
l$@M9,$
l$@M9,$u
l$@M9,$
l$@M9,$u
l$8M9,$u
l$@M9,$
l$@M9,$u
l$@M9,$
l$@M9,$u
l$@M9,$
l$@M9,$u
l$(M9,$u
l$(M9,$u
l$@M9,$
l$@M9,$u
l$@M9,$u
l$(M9,$u
l$8M9,$
l$@M9,$
l$@M9,$u
l$ M9,$u
l$ M9,$u
l$@M9,$
l$@M9,$u
l$ M9,$u
l$ M9,$u
l$0M9,$u
l$0M9,$u
l$@M9,$
l$@M9,$u
l$(M9,$u
l$8M9,$
l$@M9,$u
l$@M9,$u
l$(M9,$u
l$(M9,$u
l$(M9,$u
l$(M9,$u
l$0M9,$u
l$0M9,$u
l$0M9,$u
l$0M9,$u
l$@M9,$
l$@M9,$u
l$ M9,$u
l$ M9,$u
l$8M9,$
l$HM9,$
l$@M9,$
l$@M9,$u
l$ M9,$u
l$ M9,$u
l$8M9,$u
l$8M9,$u
l$8M9,$
l$8M9,$
l$(M9,$u
l$(M9,$u
l$(M9,$u
l$@M9,$
l$@M9,$u
l$(M9,$u
l$@M9,$u
l$ M9,$u
l$ M9,$u
l$@M9,$
l$@M9,$u
l$ M9,$u
l$ M9,$u
l$8M9,$u
l$8M9,$u
l$0M9,$u
l$8M9,$u
l$8M9,$u
l$0M9,$u
l$0M9,$
l$0M9,$u
l$@M9,$
l$@M9,$u
l$0M9,$
l$0M9,$u
l$@M9,$
l$@M9,$u
l$0M9,$
l$0M9,$u
l$@M9,$
l$@M9,$u
l$8M9,$
l$8M9,$u
l$8M9,$u
l$0M9,$u
l$@M9,$u
l$8M9,$u
l$8M9,$u
l$0M9,$u
l$@M9,$u
l$8M9,$u
l$8M9,$u
l$0M9,$u
l$@M9,$u
l$8M9,$u
l$8M9,$u
l$0M9,$u
P8H9S8u)H
P@H9S@uH
PHH9SHu
PP8SPu
x @8{ u6H
BXH9N`u|H
~pH9zpurH
l$0M9,$u
D$8uKD
8timetQL
8timet
:has_uaf
has_manyH92u<H
many_to_
?has_u
has_manyL9
has_many
has_manyH
has_many
l$(M9,$u
B H9N(
z0@8~0
B8H9N@
zH@8~H
rQ@8wQ
rS@8wS
rU@8wU
r`@8w`
rp@8wp
l$@M9,$u
l$ M9,$u
l$ M9,$u
l$@M9,$
l$@M9,$u
l$ M9,$u
l$ M9,$u
l$8M9,$
l$8M9,$u
l$HM9,$u
l$@M9,$u
l$PM9,$
l$@M9,$u
l$HM9,$u
l$`M9,$
l$0M9,$u
l$8M9,$u
l$8M9,$u
l$ M9,$u
l$HM9,$u
l$@M9,$u
l$@M9,$
l$@M9,$u
l$@M9,$u
l$0M9,$u
l$@M9,$u
l$HM9,$u
l$@M9,$u
l$ M9,$u
l$XM9,$
l$ M9,$u
l$8M9,$
l$8M9,$u
l$PM9,$
l$PM9,$
l$@M9,$u
l$ M9,$u
l$ M9,$u
|$HH9~Xt
|$HH9~Xt
has_manyL9
many_to_H92
~~~as~~~
~~~as~~~I
~~~as~~~I
N(H9F t
H9T$`u
H9t$hu
~~~as~~~L9
has_manyL9
many_to_L9
has_manyL9
many_to_
H9p@u%
~~~ct~~~H
~~~ct~~~I
~~~ct~~~L9!t.H
l$0M9,$u
J(H9B t
J(H9B t
H(M9H t
8autou
deferred
exclusivH9
immediatf
8fullu
incremenH9
8notxf
8notuf
8notuf
8DELEu
TRUNCATE
EXCLUSIVH9
8notuf
8fastu
8FULLtH
8SHA1f
8SSHAf
8DEFAu
L$ H9O
?datetP
datetimeH9
timestamH9
>datet9
datetimeL9
timestamL9
8CLOBt+H
8BLOBt
8REALt?
8FLOAu
8DATEt7
DATETIMEH9
TIMESTAMH9
8NUMEu
9BOOLu
x(H9{(uLH
x0H9{0uBH
H9{8u6H
H9K u!
x(@8{(u
x)@8{)u
l$`M9,$u
l$8M9,$u
l$@M9,$u
l$@M9,$u
l$0M9,$u
8UNIQu
8nullt9H
l$@M9,$u
8timetF
8byteu
8floauI
8striu
J(H9B t
l$pM9,$u
l$pM9,$u
l$PM9,$
l$HM9,$u
l$HM9,$u
l$@M9,$u
l$PM9,$
l$@M9,$u
l$HM9,$u
l$HM9,$u
l$`M9,$
l$0M9,$u
l$8M9,$u
l$8M9,$u
l$8M9,$u
l$8M9,$u
l$ M9,$u
l$HM9,$u
l$@M9,$u
l$@M9,$
l$@M9,$u
l$@M9,$u
l$0M9,$u
l$@M9,$u
l$HM9,$u
l$HM9,$u
l$@M9,$u
l$ M9,$u
l$XM9,$
l$XM9,$
l$8M9,$
l$8M9,$u
l$`M9,$
l$PM9,$
l$PM9,$
l$HM9,$u
l$@M9,$u
>\msyu
>\cygu
;fromt
:mastu
uH<;u0H
<7tc<8
8?104uH
;ENABu
Z(I9J0u
DISABLEDM9
8trueu9H
link_onl
I90u:A
;ENABu1fA
DISABLED
DISABLEDH
DISABLEDH
LINK_ONLf
>ENABumf
l$ M9,$u
8.exeudH
ATUWVSH
0[^_]A\
ATUWVSH
[^_]A\
SUATAUAVAWL
A_A^A]A\][
ATWVSH
H[^_A\
ATWVSH
H[^_A\
ATUWVSH
P[^_]A\
ATUWVSH
P[^_]A\
ATUWVSH
P[^_]A\
ATUWVSH
`[^_]A\
AUATUWVSH
Antivirus Signature
Bkav W32.AIDetectMalware.64
Lionic Trojan.Win32.DInvoke.4!c
Elastic malicious (high confidence)
MicroWorld-eScan Trojan.GenericKD.69531918
CMC Clean
CAT-QuickHeal Clean
McAfee Artemis!6CFC8A19911D
Malwarebytes Clean
VIPRE Clean
Sangfor Clean
K7AntiVirus Clean
BitDefender Trojan.GenericKD.69531918
K7GW Clean
CrowdStrike win/malicious_confidence_100% (W)
BitDefenderTheta Clean
VirIT Clean
Cyren W64/ABRisk.TBMB-7635
Symantec ML.Attribute.HighConfidence
tehtris Clean
ESET-NOD32 Clean
APEX Clean
Paloalto Clean
ClamAV Clean
Kaspersky Trojan.MSIL.DInvoke.anz
Alibaba Trojan:MSIL/DInvoke.e990bf10
NANO-Antivirus Clean
ViRobot Clean
Rising Clean
TACHYON Clean
Sophos Mal/Generic-S
Baidu Clean
F-Secure Trojan.TR/Redcap.hpolj
DrWeb Clean
Zillya Clean
TrendMicro Clean
McAfee-GW-Edition Artemis!Trojan
Trapmine Clean
FireEye Trojan.GenericKD.69531918
Emsisoft Trojan.GenericKD.69531918 (B)
Ikarus Trojan.MSIL.Agent
GData Trojan.GenericKD.69531918
Jiangmin Clean
Webroot W32.Trojan.GenKD
Google Detected
Avira TR/Redcap.hpolj
Antiy-AVL Trojan/Win32.Wacatac
Kingsoft Clean
Gridinsoft Trojan.Win64.AsyncRAT.bot
Xcitium Clean
Arcabit Trojan.Generic.D424F90E
SUPERAntiSpyware Clean
ZoneAlarm Trojan.MSIL.DInvoke.anz
Microsoft Trojan:Win32/Znyonm
Cynet Malicious (score: 99)
AhnLab-V3 Trojan/Win.Evo-gen.C5499237
Acronis Clean
VBA32 Clean
ALYac Trojan.GenericKD.69531969
MAX malware (ai score=80)
DeepInstinct MALICIOUS
Cylance unsafe
Panda Trj/Chgt.AD
Zoner Clean
TrendMicro-HouseCall Clean
Tencent Clean
Yandex Clean
SentinelOne Clean
MaxSecure Clean
Fortinet W32/PossibleThreat
AVG Win64:Evo-gen [Trj]
Cybereason Clean
Avast Win64:Evo-gen [Trj]
No IRMA results available.