Static | ZeroBOX

PE Compile Time

2023-10-04 21:29:04

PDB Path

C:\hx3a9yr\Teleg.pdb

PE Imphash

2d720d38a8fbabead5b576804bc154eb

PEiD Signatures

Microsoft Visual C++ V8.0 (Debug)

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00001000 0x000bcf37 0x000bd000 5.82467047916
.rdata 0x000be000 0x000c8d6e 0x000c8e00 3.62176064619
.data 0x00187000 0x00034618 0x00032800 5.28880708028
.idata 0x001bc000 0x00001486 0x00001600 4.64653667403
.tls 0x001be000 0x00000309 0x00000400 0.0111738187212
.00cfg 0x001bf000 0x0000010e 0x00000200 0.110557131259
.reloc 0x001c0000 0x00008357 0x00008400 5.90805086601

Imports

Library USER32.dll:
0x5bc2f0 GetClipCursor
Library ole32.dll:
0x5bc320 CoGetApartmentType
0x5bc324 CoGetObjectContext
Library ADVAPI32.dll:
Library KERNEL32.dll:
0x5bc030 GetProcessHeap
0x5bc034 SetStdHandle
0x5bc038 HeapSize
0x5bc03c CreateFileW
0x5bc040 CreateSymbolicLinkW
0x5bc044 FreeConsole
0x5bc048 RaiseException
0x5bc04c CloseHandle
0x5bc054 Sleep
0x5bc058 SwitchToThread
0x5bc05c GetCurrentThreadId
0x5bc060 GetExitCodeThread
0x5bc064 GetNativeSystemInfo
0x5bc068 InitializeSRWLock
0x5bc088 FormatMessageA
0x5bc08c WideCharToMultiByte
0x5bc090 MultiByteToWideChar
0x5bc094 GetStringTypeW
0x5bc09c InitOnceComplete
0x5bc0a0 GetLastError
0x5bc0b0 CloseThreadpoolWork
0x5bc0b4 GetModuleHandleExW
0x5bc0d8 LocalFree
0x5bc0dc GetLocaleInfoEx
0x5bc0e0 EncodePointer
0x5bc0e4 DecodePointer
0x5bc0e8 LCMapStringEx
0x5bc0f0 GetTempPathW
0x5bc0f4 FlsAlloc
0x5bc0f8 FlsGetValue
0x5bc0fc FlsSetValue
0x5bc100 FlsFree
0x5bc104 InitOnceExecuteOnce
0x5bc10c CreateEventExW
0x5bc110 CreateSemaphoreExW
0x5bc120 GetTickCount64
0x5bc128 SetThreadpoolTimer
0x5bc138 SetThreadpoolWait
0x5bc13c CloseThreadpoolWait
0x5bc140 GetModuleHandleW
0x5bc144 GetProcAddress
0x5bc14c WriteConsoleW
0x5bc150 CompareStringEx
0x5bc154 GetCPInfo
0x5bc15c SetEvent
0x5bc160 ResetEvent
0x5bc164 CreateEventW
0x5bc168 GetCurrentProcessId
0x5bc16c InitializeSListHead
0x5bc170 IsDebuggerPresent
0x5bc17c GetStartupInfoW
0x5bc180 GetCurrentProcess
0x5bc184 TerminateProcess
0x5bc18c RtlUnwind
0x5bc198 SetLastError
0x5bc19c TlsAlloc
0x5bc1a0 TlsGetValue
0x5bc1a4 TlsSetValue
0x5bc1a8 TlsFree
0x5bc1ac FreeLibrary
0x5bc1b0 LoadLibraryExW
0x5bc1b4 CreateThread
0x5bc1b8 ExitThread
0x5bc1bc ResumeThread
0x5bc1c4 GetStdHandle
0x5bc1c8 WriteFile
0x5bc1cc GetModuleFileNameW
0x5bc1d0 ExitProcess
0x5bc1d4 GetCommandLineA
0x5bc1d8 GetCommandLineW
0x5bc1dc GetCurrentThread
0x5bc1e0 HeapFree
0x5bc1e8 HeapAlloc
0x5bc1ec GetDateFormatW
0x5bc1f0 GetTimeFormatW
0x5bc1f4 CompareStringW
0x5bc1f8 LCMapStringW
0x5bc1fc GetLocaleInfoW
0x5bc200 IsValidLocale
0x5bc204 GetUserDefaultLCID
0x5bc208 EnumSystemLocalesW
0x5bc20c GetFileType
0x5bc210 GetFileSizeEx
0x5bc214 SetFilePointerEx
0x5bc218 FlushFileBuffers
0x5bc21c GetConsoleOutputCP
0x5bc220 GetConsoleMode
0x5bc224 ReadFile
0x5bc228 ReadConsoleW
0x5bc22c HeapReAlloc
0x5bc234 OutputDebugStringW
0x5bc238 FindClose
0x5bc23c FindFirstFileExW
0x5bc240 FindNextFileW
0x5bc244 IsValidCodePage
0x5bc248 GetACP
0x5bc24c GetOEMCP

Exports

Ordinal Address Name
1 0x402676 _LoadEnvironment@0
!This program cannot be run in DOS mode.
`.rdata
@.data
.idata
.00cfg
@.reloc
4VWPQS
~,9~$t
EtSVWu
YY9~d|
\$HYYj
L$8_^][3
tJ9uFVjD
YY9Gd}
>bF;t$
FYY;t$
FYY;t$
YY;D$8t+
>_^][3
QSVWh(
PQQSVW
PQQSVW
t,hB#@
tG9uCj
W9^Lt"
tC97u?j4
tG9uCj
tG9uCj
tZ9uVj
PPPPPWS
tC97u?j4
t{9uwj
t{9uwj
tO9uKjD
tG9uCj
tG9uCj
tG9uCj
tG9uCj
tG9uCj
tG9uCj
tc9u_jX
td9u`jX
tc9u_jX
td9u`jX
tG9uCj
tG9uCj
tG9uCj
tG9uCj
tZ9uVj
tZ9uVj
tI97uEjD
tI97uEjD
tS9uOj
tS9uOj
t{9uwj
tG9uCj
tG9uCj
tG9uCj
tc9u_jX
td9u`jX
tI97uEjD
tS9uOj
<xt><Xu=
<xt <Xt
<xtJ<XuI
<xt)<Xt%j
QQSVWd
URPQQh
V<0|M<9
<0|$<9
UQPXY]Y[
VSSSSS
VPPPPP
VPPPPP
j0Z9~4t
j0Z9~4t
j0Z9~4t
j0Z9~4t
j0Z9~4t
j0Z9~4t
j0Z9~4t
j0Z9~4t
j0Z9~4t
j0Z9~4t
j0Z9~4t
j0Z9~4t
t#9^$}
t#9^$}
uj*Xf;
<j*Xf;
uj*Xf;
<j*Xf;
uj*Xf;
<j*Xf;
t#9^$}
uj*Xf;
<j*Xf;
<ItC<Lt3<Tt#<h
A<lt'<tt
<ItC<Lt3<Tt#<h
A<lt'<tt
<ItC<Lt3<Tt#<h
A<lt'<tt
<ItC<Lt3<Tt#<h
A<lt'<tt
<ItC<Lt3<Tt#<h
A<lt'<tt
<ItC<Lt3<Tt#<h
A<lt'<tt
Tt)jhZf;
JjlZf;
Tt)jhZf;
JjlZf;
Tt)jhZf;
JjlZf;
Tt)jhZf;
JjlZf;
Tt)jhZf;
JjlZf;
Tt)jhZf;
JjlZf;
F +F4+
8^8tb9^4~]
F +F4+
8^8tb9^4~]
F +F4+
8^8tb9^4~]
V +V4+
tb9^4~]
V +V4+
tb9^4~]
V +V4+
tb9^4~]
V.jx_f;
~ +~4+
V.jx_f;
~ +~4+
V.jx_f;
~ +~4+
V.jx_f;
~ +~4+
V.jx_f;
~ +~4+
V.jx_f;
~ +~4+
F.jgYf;
jg[BjG_
F.jgYf;
F.jgYf;
F.jgYf;
jg[BjG_
F.jgYf;
F.jgYf;
PRRRRR
PRRRRR
PRRRRR
ul<0|[<9
ul<0|[<9
x!j$Xf9
x!j$Xf9
PVVVVV
PVVVVV
QPPPPP
ARPRQh
jYjf
Sj)[f;
PPPPPPPP
uSSSSj
f9<H_}
f9<H_}
f9<H_}
f9<H_}
f9<H_}
j"^f92
j"_f9z
SWt@jU
_tqPVj@
M,j"^QRRRRR
Vj0XPW
r!SSPVQ
dr#SSjdVQ
M$j"^QRRRRR
j"[VWWWW
_PVVVVV
j"_SVVVV
PVVVVV
^PSSSSS
j"^WSSSS
WVVVVV
PVSRSQV
PPPPPVW
PP9E u!PPSVP
PVVVVV
PVVVVV
PWWWWW
D8(Ht'
D8(Ht5F
L:-^_[
u kE$<
j-Xf9E
t^j*Yf
f9:t!V
QQSVj8j@
NX9^`t1
;V\uYW
u2Vj@h
9C`u99C\t4
u29K\t-
WHPh8)W
^PQQQQQ
E ^PQQQQ
7;1u"3
CY<u
PVVVVV
PSSSSS
PPPPPPPP
tNSVWP
Unknown exception
bad array new length
string too long
generic
iostream
iostream stream error
bad cast
bad locale name
ios_base::badbit set
ios_base::failbit set
ios_base::eofbit set
Fail to schedule the chore!
This function cannot be called on a default constructed task
broken promise
future already retrieved
promise already satisfied
no state
future
Don't afraid
%x and %p
FriehiUTYuai
public library
vector too long
bad allocation
bad function call
regex_error(error_collate): The expression contained an invalid collating element name.
regex_error(error_ctype): The expression contained an invalid character class name.
regex_error(error_escape): The expression contained an invalid escaped character, or a trailing escape.
regex_error(error_backref): The expression contained an invalid back reference.
regex_error(error_brack): The expression contained mismatched [ and ].
regex_error(error_paren): The expression contained mismatched ( and ).
regex_error(error_brace): The expression contained mismatched { and }.
regex_error(error_badbrace): The expression contained an invalid range in a { expression }.
regex_error(error_range): The expression contained an invalid character range, such as [b-a] in most encodings.
regex_error(error_space): There was insufficient memory to convert the expression into a finite state machine.
regex_error(error_badrepeat): One of *?+{ was not preceded by a valid regular expression.
regex_error(error_complexity): The complexity of an attempted match against a regular expression exceeded a pre-set level.
regex_error(error_stack): There was insufficient memory to determine whether the regular expression could match the specified character sequence.
regex_error(error_parse)
regex_error(error_syntax)
regex_error
bad exception
device or resource busy
invalid argument
no such process
not enough memory
operation not permitted
resource deadlock would occur
resource unavailable try again
success
address family not supported
address in use
address not available
already connected
argument list too long
argument out of domain
bad address
bad file descriptor
bad message
broken pipe
connection aborted
connection already in progress
connection refused
connection reset
cross device link
destination address required
directory not empty
executable format error
file exists
file too large
filename too long
function not supported
host unreachable
identifier removed
illegal byte sequence
inappropriate io control operation
interrupted
invalid seek
io error
is a directory
message size
network down
network reset
network unreachable
no buffer space
no child process
no link
no lock available
no message available
no message
no protocol option
no space on device
no stream resources
no such device or address
no such device
no such file or directory
not a directory
not a socket
not a stream
not connected
not supported
operation canceled
operation in progress
operation not supported
operation would block
owner dead
permission denied
protocol error
protocol not supported
read only file system
result out of range
state not recoverable
stream timeout
text file busy
timed out
too many files open in system
too many files open
too many links
too many symbolic link levels
value too large
wrong protocol type
unknown error
#223Gb
u>m)TY@
#Oo=0R
0^R2FvO
=jk1^C
vJ8E1:
soiE?\
sa*A,^
^'.jxB
78l3fC
{='olD
KSN`)xH
FMu;sJ
0sfEG"V
y1<EcJq
KH`qIm
lh0CwL
UsW;]K
JTk_S/
tyz_4J
~*2NM|
vvSy`~
0b2b>m
1P`+H"/K
D2IA$%UF
csx>T]
Zj)b8p
k{Gn6Q
W72fC
XhvC]v
c@y1VRT@
[((C?R
8v!Wlzg
$T^q#:
)fUnCV
Context callback failed.
invalid string position
0123456789-+Ee
0123456789ABCDEFabcdef-+Xx
0123456789ABCDEFabcdef-+XxPp
GetCurrentPackageId
GetSystemTimePreciseAsFileTime
GetTempPath2W
:Sun:Sunday:Mon:Monday:Tue:Tuesday:Wed:Wednesday:Thu:Thursday:Fri:Friday:Sat:Saturday
:Jan:January:Feb:February:Mar:March:Apr:April:May:May:Jun:June:Jul:July:Aug:August:Sep:September:Oct:October:Nov:November:Dec:December
%b %d %H : %M : %S %Y
%m / %d / %y
:AM:am:PM:pm
%I : %M : %S %p
%H : %M
%H : %M : %S
%d / %m / %y
0123456789-
0123456789-
0123456789-
0123456789-+Ee
0123456789ABCDEFabcdef-+Xx
0123456789-
0123456789-+Ee
0123456789ABCDEFabcdef-+Xx
0123456789ABCDEFabcdef-+XxPp
0123456789ABCDEFabcdef-+XxPp
+v$x+v$xv$+xv+$xv$+x+$vx+$vx$v+x+$vx$+vx+v $+v $v $+v +$v $++$ v+$ v$ v++$ v$+ v+xv$+ v$v$ +v+ $v$ ++x$v+ $v$v ++ $v$ +v
0123456789-
0123456789-
0123456789abcdefghijklmnopqrstuvwxyz
0123456789abcdefghijklmnopqrstuvwxyz
SleepConditionVariableCS
WakeAllConditionVariable
__based(
__cdecl
__pascal
__stdcall
__thiscall
__fastcall
__vectorcall
__clrcall
__eabi
__swift_1
__swift_2
__swift_3
__ptr64
__restrict
__unaligned
restrict(
delete
operator
`vftable'
`vbtable'
`vcall'
`typeof'
`local static guard'
`string'
`vbase destructor'
`vector deleting destructor'
`default constructor closure'
`scalar deleting destructor'
`vector constructor iterator'
`vector destructor iterator'
`vector vbase constructor iterator'
`virtual displacement map'
`eh vector constructor iterator'
`eh vector destructor iterator'
`eh vector vbase constructor iterator'
`copy constructor closure'
`udt returning'
`local vftable'
`local vftable constructor closure'
new[]
delete[]
`omni callsig'
`placement delete closure'
`placement delete[] closure'
`managed vector constructor iterator'
`managed vector destructor iterator'
`eh vector copy constructor iterator'
`eh vector vbase copy constructor iterator'
`dynamic initializer for '
`dynamic atexit destructor for '
`vector copy constructor iterator'
`vector vbase copy constructor iterator'
`managed vector copy constructor iterator'
`local static thread guard'
operator ""
operator co_await
operator<=>
Type Descriptor'
Base Class Descriptor at (
Base Class Array'
Class Hierarchy Descriptor'
Complete Object Locator'
`anonymous namespace'
template-parameter-
`template-parameter-
generic-type-
`generic-type-
`non-type-template-parameter
`template-type-parameter-
`generic-class-parameter-
`generic-method-parameter-
nullptr
lambda
`template-parameter
`vtordispex{
`vtordisp{
`adjustor{
`local static destructor helper'
`template static data member constructor helper'
`template static data member destructor helper'
static
virtual
private:
protected:
public:
[thunk]:
extern "C"
short
unsigned
volatile
volatile
std::nullptr_t
std::nullptr_t
<ellipsis>
,<ellipsis>
noexcept
double
__int8
__int16
__int32
__int64
__int128
<unknown>
char8_t
char16_t
char32_t
wchar_t
decltype(auto)
__w64
UNKNOWN
signed
volatile
`unknown ecsu'
union
struct
class
coclass
cointerface
const
cli::array<
cli::pin_ptr<
{flat}
FlsAlloc
FlsFree
FlsGetValue
FlsSetValue
InitializeCriticalSectionEx
(null)
 !"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~
[aOni*{
~ $s%r
@b;zO]
v2!L.2
IND)ind)S
CorExitProcess
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
Sunday
Monday
Tuesday
Wednesday
Thursday
Friday
Saturday
January
February
August
September
October
November
December
MM/dd/yy
dddd, MMMM dd, yyyy
HH:mm:ss
AreFileApisANSI
CompareStringEx
EnumSystemLocalesEx
GetActiveWindow
GetDateFormatEx
GetEnabledXStateFeatures
GetLastActivePopup
GetLocaleInfoEx
GetProcessWindowStation
GetTimeFormatEx
GetUserDefaultLocaleName
GetUserObjectInformationW
GetXStateFeaturesMask
IsValidLocaleName
LCMapStringEx
LCIDToLocaleName
LocaleNameToLCID
LocateXStateFeature
MessageBoxA
MessageBoxW
RoInitialize
RoUninitialize
AppPolicyGetProcessTerminationMethod
AppPolicyGetThreadInitializationType
AppPolicyGetShowDeveloperDiagnostic
AppPolicyGetWindowingModel
SetThreadStackGuarantee
SystemFunction036
NAN(SNAN)
nan(snan)
NAN(IND)
nan(ind)
_hypot
_nextafter
SunMonTueWedThuFriSat
JanFebMarAprMayJunJulAugSepOctNovDec
1#QNAN
1#SNAN
]vQ<)8
|)P!?Ua0
Eb2]A=
u?^p?o4
y1~?|"
?x+s7
?5Od%
?|I7Z#
>,'1D=
?g)([|X>=
~U`?K
:h"?bC
@H#?43
Ax#?uN}*
r7Yr7=
F0$?3=1
H`$?h|
&?~YK|
sU0&?W
<8bunz8
?#%X.y
F||<##
<@En[vP
?5Wg4p
%S#[k=
"B <1=
C:\hx3a9yr\Teleg.pdb
Teleg.exe
_LoadEnvironment@0
sss66ss[sssssss
sssssssssssssssssssssssssssssssssss
LFgtall
'sssssssc
ssssssss
ss)`ss1ssssss
sssuss
sssssss
ssssssss
ussussssssus
ss#ss#ssss#ss#ssssss#sssssssssssCZ`s
sssssssssssssssssss
ssssssssssssssssssssssssssssssssssssssssssssssssssss
sssssssssss
sssssssssssa
sss)`ssussssssssssssss
`sssssssssssss
ussusss
usssssssssssss
ssssssssssssssss
Z`sssss
s{Gss{6ss
sss$ss
ssssssssssssssssssssssssssssssssssssssssssssssss
sxs_s_scs
sxs_sts
sssssbs
stssscs
sgssssssspsMsasps_spsgspsUssssssscs
sxs_sts
sssss_sFs
sxs_sts]sxs_s_s
sLs_sss4s
sts_sgsUsss
sssssss
sxs_sts
sssssss
s_s$stsssssss`u
ssssssss$s
sxs_sts]sxs_s_s
sLs_sssssss
sFsFsRsxsts
stsssss
sxs_sts
sssssss
sssssgsxs
sLstsss
sssssss
sxs_sts
sxs_sts
stsLsxs
sxs_sts
stsLsFsgs$s
sxs_sts
sxs_sts
sxs_sts
sxs_sts
stsLsgs$s
sxs_sts
s_s_scs
sxs_sts
stsLs$s
sssssssMs
sMsssss
sssss4s_sFs
sMsas_sFs
sgs_sts
sgs_sts
sgs_sts
sFsFsRsxsts
sasestsLsFs
sasestsLsFs
sasestsLsFs
ststses
sksssssss
s_s_sts
sFsFsRsxsts
sssssss
sFsLsLs
s_s_sss
sFsFsRsxsts
sxsUs_sts
stsLsFs
stsssss
s_s_sts
spspsss
s$sLsUsts
sssssss
sxs_sts
sUs_stsss
sLstscs
sxs_sts
stsFsRsests
sasests
sasests
sasests
sts_s$sts
sFsFsRsxsts
sssssss
sFsLsLs
sLstsss
sgsssssMsas
sasests
Mmu+\ss
ssu+-ss
M]u+\ss
ss`ssPs
rPr+ass
PrFp`s
PAF(`s
PPPbs
s4PfF(`s
s4P#F(`s
sssssq
yPyrs
ss"Fuss
gssssss
ss`usssdsss
ssfsssssssusss
ssrsssssssssss
sssuss`"
`ssussPs
ssqsqFsP
rssqssq
gssssss
sssGsss
ss`usss
sssesss?sssFsssssssssss
ss`ssss
1`ssu+
ssqssq
ssssssSsss
`ssx`ss
sssuss`ssss
sssuss`ssss
sssE`ss
lssqssq
ssssss$sss
sssp`ss
sssuss`ssss
`ssk`ss
ss`ssss
s`ssu+
ssqssq
ssssss
sssuss`ssss
ss`ssss
sss+`ss
#suyw+
M`#ssss
lssqsssq
sPAMsss
ssssss{`ss
ss`sssslsssF`ssO`ss
sssuss`
suFbss
M`#ssss
Msss`ossus
ssssss
`ssrssPs
ssusss
sss/sss0sss
sssssssssss
sssu`ss
sssuss`usss
`ss#`ss
sssssss"
p666qf%
ss"Fuss
sPrMss
gssusss
sss9sss
`ssfsssssssssss
sssuss`usss
`ss]`ssrsssssssssss
`ssk`ss
`sslssPs
Kssssw
4666sq
ssssss_sss
sssA`ss
sssuss`ssss
sssv`ss
sssuss`"
sssAssPs
Mss`#ssss
sssAssPs
Mss`#ssss
ssfssPs
(=ussss
bss`4yyw+
(a`sss
lPlPrF
s4PwF]`s
sssssq
ssqssP
PyFuss
F|66qlP
gssssss/`ss
sssuss`usss
`ss?`ss
ssysssssssusss
sslsssssssssss
sssuss`
sss#ssPsu++ss
spsss#ssPsu++ss
sss#ssPsu++ss
sss#ssPsu++ss
sss#ssPsu++ss
sss#ssPsu++ss
sss#ssPsu++ss
sssPssPs
\ss`ru"
sss%ssPs
\ss`ru
Mss`#ssss
rs!sss
\ss`lu
ssuFuss
Mss`#ssusps
sfssss
ssswssPsu
\ss`4y
xy+ass
sssyssPsu
wy%sy+
sss;ssPsy
\ss`ry
ssPssu
swrqPu
Msss`#ssss`s
sjsss"ssPs
sssossPs
Gssssu
{uF1ss
ssPsuF
usPsss
usjsss
ssPssu+
Ms`#ssss`sM
us;sss
ssPss+;`s
$_ss`ru
Ms`#ssss`s
`s;sss
ssPssu
M`#ssss`sf#s
us"sss
ssPssu
Ms`#ssss`s%
us8sss
Msss`#ssss`s
ssPssu
Msss`#ssss`s#Ps
ssPssu
Msss`#ssss`s#Ps
ssPssu
Msss`#ssss`s#Ps
ssPssu
Msss`#ssss`s#Ps
ssPssu
Msss`#ssss`s#Ps
ssPssu
Msss`#ssss`s#Ps
ssPssu
Msss`#ssss`s#Ps
ssPssu
Msss`#ssss`s#Ps
ssPssu
Msss`#ssss`s#Ps
ssPssu
Msss`#ssss`s#Ps
ssPssu
Msss`#ssss`s#Ps
ssPssu
Msss`#ssss`s#Ps
ssPssu
Msss`#ssss`s#Ps
ssPssu
Msss`#ssss`s#Ps
ssPssu
Msss`#ssss`s#Ps
ssPssu
Msss`#ssss`s#Ps
ssPssu
Msss`#ssss`s#Ps
ssPssu
Msss`#ssss`s#Ps
ssPssu
Mss`#ssss`sP%s
ssPss+
s+Ess
cssu%A
ossssss`ssse`ss
`ss'ssPu+Qss
ossu4yw
ossu4yw
`ss4ssPss
cssu+u`s
ss+Bss
cssuFUss
gssssssu`ssAsss#`ss
ss`ssssu`ssAsssy`ss
ss`ssss`sss
ss`ssss`sss
`ss-`ss
ssssss'3+Zss
Msss`#ssss`sF
sssnssPsss+
ssss%sA
ss`ss%sA's
ss`ss`s(
ss`ss`s(
usosss+ssPs
sss8ssPs
y+ss"Fuss
y+ss"Fuss
Mss`ossus
sfssssus
Fsfssss
sssMssPsu+"`s
sssMssPsu+
sssMssPsu+
sssMssPsu+
sssMssPsu+
sssssPs
shsssassPs
su+~ss
su+4ss
ssPu+Qss
ossu4yw
ossu4yw
cssu+u`s
ss+Bss
cssuFSss
gssssssu`ssAsss#`ss
ss`ssssu`ssAsssw`ss
ss`ssss`sss
`ssv`ss
ss`ssss`sss
ssPsss+
ssss%sA
ss`ss%sA's
ss`ss`s
ss`ss`s
ssspssPs
y+ss"Fuss
y+ss"Fuss
sM`ossus
sfssssus
sfssss
sssjssPs
ssMsss
us4sss
ssMsss
ssMsss
ssMsss
usasss
ssuFHss
rPrrs
ssqssP
Ossssss-sss
ss`ssss
sss'`ss
sssuss`usssMsssl`ss
`ssrsssssssusss#sss
`ssc`ssrsssssssssss
sssuss`"
lssqssP
xv_666sq
ssqssP
;666qlP
Ossssss
sssisss
ss`ssss
sss?sss``ss
sssuss`usss
`sslsssssssssss
sssA`ss4`ss
sssuss`ssss
sssuss`"
`sssssu+
ss"Fuss
}sssssP
APAF@ss
PwFss
sPAFss
ss"Fuss
ssqssP
gssusssKsss
sssfsssssssusss
sss0`ssfsssssssssss
`ss*sss
sssuss`ssss
sssuss`"
ss(ssPs
rsuF'ss
rPrlsP
(a`ssss+zss
`ssPlPA
fsssPfP
sssP#F4ss
ss`4y;
P%Fss
ssqssP#F
666qlP#
P#Fuss
ssqssPA
sssssP
ss`4y;
ssqssP
666qlP
s/sssq
"ssqss
sPoMsss
Gssssss
sssq`ss
sssuss`usss
`ss&sss
`sslsssssssssss
sssuuss
sssuss`ssss
sss*uss
ss`usss
sslsssssssssss
ss`usss
ssrsssssssssss
sssuss`"
sssssu+iss
ss"Fuss
666qlP
ssqsss
ssqssPA
sP#Msss`
ssus7s
``fssssus)sD
`lssssssJs[
uss`ssU`
sss%u+8ss
s4yFL`s
c666qf%u
ss"Fuss
ssqssq
ssusss0sss^sss
`ssfsssssssssss
sss=`ss
sssuss`ssss
sssB`ss5`ss
sssuss`
(w`sssP
rPr+ass
sssssu
sssPAF
ss`4yP
%f+0ss
sP#yFL`s
%f+*ss
666qlPA
PAFuss
s/sssq
ssqss%
ss"Fuss
sPPMsss
Ossusss
sssFusslsssssssssss sss3`ss
sssuss`usssEsssz`ssDussfsssssssusssvsss
ussEussrsssssssssss
uss3uss
sssuss`"
ss`4y"
M`#ssss
ssvssPs
%`+Yss
%`+Yss
ssqss%
ss"Fuss
%`+Yss
PAFx`s
%`+Yss
PPFx`s
666ssq
ssssss
ss`usss
sssU`ssX`ssfsssssssssss
uss*uss
sssuss`
`srsss
M`#ssss
`ssyMu
`ssuuOnss
ssqssuw
ssqssuw
yjss"Fuss
s/uOnss
gssssss9sssesss+`ss
sssuss`usss<sss-sss
sssssssssss
sssk`ss
sssuss`usss
sssa`ssN`ss
sssssss
Ms`#ssss`s
ossssss
sss"`ss
sssuss`"
Mss`#ssss
s4yFL`s
Msss`#ssss
sssssssu+\ss
#;+0ss
Mss`#ssss`sF
ssPssu
{;+0ss
;]{;+0ss
{;+0ss
x;]{;+0ss
xPr+Wss
{x+*ss
luPlx+*ss
fuPlxPA+Wss
wuPw+*ss
uPwPf+Wss
PlP#{PPy
PlP#{PPy
PlP#{PPy
ssuuPlP#{PPy
PlP#{PPy
PlP#{PPy
PlP#{PPy
ssqsMss
ossssss`sss
sssuss`"
ss`Fl`s
_666uu
ossssss`sssg`sst`ss
sssuss`"
ssPssu
{;+0ss
;]{;+0ss
{x+*ss
xPr+Wss
IssssPAP#
%uP%+*ss
ssuuP%P
ssuPAP#
#sPfPl
666PAw
`usssPAPy
`sssPAPy
;P;(w`sssu
{xPAPy
{xPAPy
{xPAPy
{xPAPy
{xPAPy
|66ssP
{x;+0ss
;]{;+0ss
ossssss`sss
sssuss`"
Ms`#ssss`s
Ms`#ssss`s
`sAsss
Ms`#ssss`s
ossssss`sss
sssuss`
usAsss
us%sss
ssscssPssu+
Ms`+ssus8s
srssssus
srssssss`s
ssPssu+
ssqswl
Ms`+ssus8s
jsrssssus
srssssss`s
sssessPs
us4sss
ssPss+
qArs%u
Msss`#ssss`sw
usPsss
us"sss
sssssfs+*`s
Msss`#ssss
ssPsssu
cssu++`s
cssuwF`s
ssqsMs`#ssss`s
ssPssu
ssPss+a`s
Ms`#ssss`s
sssssss
sss{ssPss+j`s
Ms`#ssss`s
ssPss%s+j`s
%s+(`s
Ms`ossus
Usrssssss`s$
sss]ssPssuw
s/lswrqs
Mss`ossusws
srssssss`s
sLsssbssPsuF
(Zssss+
ss+#`s
ssusss>sss
ssslsssssssssss`sss
`ss;`ss
us{sss\ssPssu+
M`+ssusns#
srssssus
srssssss`s
sssssss
sssssss
ssssss
ssssss
ssssss
ssssss
ss`F[`s
F666qr
uss`us
msrssssus8s
srssssus
srssssss
`ssSssPs
ss`F[`s
&srssssus
srssssus
srssssss
M`#ssss
sssUssPss
=ss`lss
uss`uss
Ssrssssus
srssssusos
srssssss`s
Ossssss
sssuss`usss
sssA`ss
`ssrsssssssusss
sss4`ss
`ssrsssssssusss
sss(`ss
`ssrsssssssssss
sssuss`"
s&ussgssPs
ssqssP
s/sqlP
Pr+jss
lssPlF
#P#s
ssqssPAF
PAFuss
s/sqlPl
PlFuss
`sssss
sssUsss
sssuss`usss1sss
`sslsssssssusssJsss
`sslsssssssusss-sssEsss
`sslsssssssssss
sssuss`ssss
ussUssskuss
sssuss`usss}`ss
ssshusslsssssssusss
usslsssssssusssi`ssEsss
usslsssssssssss
`ss6sss
sssuss`ssss
sss=uss uss
`sstssPs
h666qr
ssssbskZs
uss`us
9srssssus
srssssus
0srssssss
sssqlP
ssqssP
xv`666sqr
gssusss
sssy`sslsssssssssss
sssuss`ussssss
`ssv`ssrsssssssssss
sssuss`"
Msss`#ssss
`sskssPs
ssssss
ssssss
uss`us
srssssus(s3
srssssusps9
`rssssssys6
shsssxssPssss+
Msss`ossss
ss`ss`s
M`#ssss`s
ushsssRssPs
sss_ssPu
sssLssPsu
`sssssu+
ss"Fuss
}sssssP
lPlF@ss
sPlFss
4%;+8ss
ss"Fuss
ssqssP
gssusssTsss
sssfsssssssusss
sss!`ssfsssssssssss#`ss*sss
sssuss`ssssVsss
sssuss`"
sssFssPssu
Msss`#ssss`s
ssPssu
M`#ssss`s
ssPssu
M`#ssss`s
sssssssu
`s`sssss
jp(ssss
s_sss_Uss
ss#sss
_FUsssssssuss`
sss}4jsyss`sss sss$sssf`ssrusseuss
`ssPsss
ussPsss`sss
sssysss
sss;sss`sss
sssusss
sss`ssslsssjsss
ssspsss`sssss
+`sssss
s*n"aAs_
sEn"aAs
"assss
ssss`s`s
susPs`s#sX
sns`s#s
`ss'rss
s#s{s`s#s
`ssq"ss
s;sDs`s#sU
sEs``ssV
`#sh"ss
sosZs`s#s
`osTs`s#s!oss
s?s`s#s
s`s#sR
sHs`s#sb
`s@s`s#s/;ss
`s.s`s#s<
`#sQjss
s4``s#s
s8``s#sJ
sa``s#sh
``s#sM
`#szPssDs
`#sWpssDs
ssDsLs
sS```sszass
```ssy;ss
``s#sl
sF``s#s
``s#sQyss
``s#s`;ss
s^``s#s
ssss)sT``s#s
s.``s#sn
ssDsQsru
ssDs srus`ss
`ssolssDs#`ru
`ss`sssDs#`ru
ssDs#`ru
ssDs#`ru
ssDs#`ru
`ssFAssDs#`ru
sssDs#`ru
ssDs#`ru
ssDs#`ru
ssDs#`ru
AssDs#`ru
sssDs#`ru
ssDs#`ru
ssDs#`ru
ssDs#`ru
AssDs#`ru
sssDs#`ru
ssDs#`ru
ssDs#`ru
`ss2AssDs#`ru
`ssPfssDs#`ru
ssDs#`ru
ssDs#`ru
ssDs#`ru
`ssafssDs#`ru
ssDs#`ru
ssDs#`ru
ssDs#`ru
ssDs#`ru
ssDs#`russss1nss
?sysnr?sysgl?sys
;DsystwDsys
ys+uGs`s
uGsys\u
sssss
s(ssss
sessss
s]ssss
`ls]ssss
`As]ssss
`fstssss
s`#w`#s
sessss
sTssss
sgessss
shl3`ps
sWessss
sXvH`vs
uesssss
u{sssss
uSsssss
`Usssss
ugsssss
uksssss
uxsssss
`Rsssss
buhsssss
u-sssss
uDsssss
udsssss
87u2ss
s,ssss
u7s;bssss
r0u7scbssss
s{\ssss
sK\ssss
s~ssss
ssssIs
stssss
sKtssss
`#kssss
l`{kssss
y`;xssss
+`{Rssss
`CRssss
LssssIs
`tssss
O`ssss
`]assss
`Uassss
-`xassss
-`ssssssI
ssssIs
ssssIs
ssssIs
ssssIs
`essss
`1`<assss
V`Tassss
ssssIs
NssssIs
s:`?-ssssIs
-ssssIs
ssss@`
ssss@`
ssss@`k
ssss@`&
ssss@`l
ssssIs
ssssIs
`?-ssssIs
ssssIs
`?-ssssIs
ssssIs
`[1ssss
E`+Vssss
3`C:ssss
X`W)ssss
&`ssss
`[Cssss
7`k<ssssJs
`,ssss
ssssi`
`(pssss
`g5ssss
`/5ssss
`epssss
`bpssss
|`_pssss
sussssssI
`ussssssI
uVpssss
uCpssss
u[pssss
u pssss
uXpssss
uzpssss
uWpssss
uajssss
"uvjssss
oucjssss
uKZssss
'u@jssss
u}jssss
s8ussssssI
u8ussssssI
8ussssssI
8ussssssI
MussssssI
ussssssI
ussssssI
ussssssI
aussssssI
ussssssI
ussssssI
pussssssI
ussssssI
jussssssI
ussssssI
ussssssI
ussssssI
ussssssI
ussssssI
(ussssssI
ussssssI
ussssssI
u,ssss
ss`s*Mss`s*Mssus
Mss`s*Mss`s*Mss`sK
ss`s*Mss`s
ossus<
ss`s@(ss`s
(ss`spassus
(ss`spassusd
8ss`s]8ssus
8ssuse
assusn
ss`spassus
(ss`spassus
ss`spassusd
(ss`spassusd
(ss`sB
(ss`sn
(ss`s"pssus
ss`s"pssus
ss`s"pssus
ss`s"pssus
ss`s"pssus
ss`s"pssus
ss`s"pssus
ss`s"pssus
ss`s"pssus
ss`s"pssus
ss`s"pssus
ss`s"pssus
ss`s"pssus
ss`s"pssus
ss`s"pssus
ss`s"pssus
ss`s"pssus
ss`s"pssus
ss`s"pssus
ss`s"pssus
ss`s"pssus
ss`s"pssus
ss`s"pssus
ss`s"pssus
ss`s"pssus
ss`s"pssus
ss`s"pssus
ss`s"pssus
ss`s"pssus
ss`s"pssus
ss`s"pssus
ss`s"pssus
ss`s"pssus
ss`s"pssus
ss`s"pssus
ss`s"pssus
ss`s"pssus
ss`s"pssus
ss`s"pssus
ss`s"pssus
ss`s"pssus
ss`s"pssus
ss`s"pssus
ss`s"pssus
ss`s"pssus
ss`s"pssus
ss`s"pssus
ss`s"pssus
ss`s"pssus
ss`s"pssus
+ss`s"pssus
ssusjpss
MssusYMss`s7(ss`s
MssusYMss`sM
ssssssss`s
ss`st4ss`s
ssusw8ss`s
ssusq+ss`sM
ss`s0(ss`s0(ss`s0(ss`s
+ss`sjMssus
ss`sjMss`sM
jss`sassus
+ss`sM
+ss`sQ
+ss`s=
ssusxoss
8ss`s]8ss`seossus
MssusYMss`s
uPu6v*
o(u%8Io
AsnsrsAsns]#
sAszsBsAs
`BsAs8`
r@`BsAs@`Zs
sCrZuBsAsXu
l`r*sAs
r*sAs8r
r*sAsxr
A*sAs A*s
r fBsAs fZs
r@fBsAs@fZs
r`#BsAs`#Zs
r #BsAs #Zs
r@#BsAs@#Zs
r`PBsAs`PZs
r PBsAs PZs
r@PBsAs@PZs
r`%BsAs`%Zs
r %BsAs %Zs
r@%BsAs@%Zs
r`wBsAs`wZs
r wBsAs wZs
r@wBsAs@wZs
r`yBsAs`yZs
r yBsAs yZs
r@yBsAs@yZs
4BsAsS4BsAs
4BsAs34BsAs
4BsAss
BsAssnBsAs
nBsAs3nBsAs
nBsAss+BsAs
+BsAsS+BsAs
+BsAs3+BsAs
+BsAss8BsAs
8BsAsS8BsAs
8BsAs38BsAs
8BsAssMBsAs
MBsAsSMBsAs
MBsAs3MBsAs
MBsAss
BsAs3BsAs
BsAss
BsAssaBsAs
aBsAs3aBsAs
aBsAss
BsAsspBsAs
pBsAsSpBsAs
pBsAs3pBsAs
p2sAss
BsAssjBsAs
jBsAsSjBsAs
jBsAs3jBsAs
BsAssvBsAs
vBsAsSvBsAs
vBsAs3vBsAs
vBsAss
sss{s`s
s`sAsss]s`s#sssbs`s%sss
s`swsss\s`sysss
s`s;sss
sssSs`sosss
sssUs`s
sssgs`s'sssts`s
s`s+sss
s`sMsssks`ssssxs`s
sssRs`s
sss_s`s
sssLs`s
sssFs`s
sus/srsusqslsus
sPsus8`
`"s`sj`"sus
`jsusc`
`vsusk`
susN`bs`s
`\s`s-`\sus
`tsusJ`
`xs`s>`xsus
`Fsus1`
`$s`s:`$sus
sus)`hs`s
`Ns`sd`Nsus^`
sus5`Js`sZ`Jsus
`Ds`sq`Dsus
`>sus@`
sus.`Vs`s
sus|`ds`s
`dsus6`^s`ssu^sus`u
sns=`rsns
`lsnsQ`fsns3`Ps+s5`
#G#m#9#
PFP>PVP
ss'ss@s#'ss
'sszsc'ss
4ss.s34ss
nss0s{nss
nssWs3nss
+ss}s3+ss
8ss6s+8sss`
8ss``c8ssu`
ssssss
sssssssssss`s
sssssssssss`s
sssssssssss`s
sssssssssssEu
sssssssssss
sssssssssss`s"assss
sssssssssss
sssssssssssEu
sssssssssss`s
sssssssssss`s
sssssssssss`s"
sssssssssssEu
sssssssssssEua
ssss6`
P%sOPhs
sI%}`q%au9wau
wauWwx`
;2`I%hsI%&`I%
U_tSps
U_tSps
U_tSps
gR(hjs
jp(jp(
cgUcgU
cgUcgU
xt_gset
gsRRgk
Fgts{L_
FRtset
F$U_tse$
g_tse$
g_tset
Fg$_ts
tLU_hc
_$tset
tsetLF
x_tget
tLa{L_s
cgUcgU
FLseFF
s{L_et
tLU_hs
stsLsas
stsLsas
stsLsas
skshsFsRsxsts
skshssv
sRsxsts
sxs_sts
sxs_sts
sxs_sts
sxs_sts
sFs_stssP
sxs_sts
sxs_sts
sxs_sts
sxs_sts
sxs_sts
sxs_sts
sFsFsRsxsts
s$sLsts
sasests
sasestsLsFs
sxs_sts
sxs_sts
s_s_ss"
sxs_sts
sksLscs
shsgsts
sksLscs
sxsgsts
stshshs
stshstshss
stshsst
sFsgsxs
sFsgsxs
sFsgsxs
sFsgsxs
sFsgsxs
stshshs
stshstshss
stshss
sxsLsxs
sxsgsts
sFsgsts
sFsgstss
s_sFsUss
s_sksFs
sgs(sgs
sjs(s(s
sUs(ss"
skstss
s_s_sts
]sLs]s$s
s]sLses
sLsksks
s(shsUs
sRs]sLs
s(sLs]s
s_s$sUs
sLsps$s
sLs_sLsgs
s_s]sLs
sesxs]s
spsksUs
sgsksUs
sFsUsLs]sksUsLs
sLsesRs]s
sLsUsLs
sRsUsLs
sLs(sFs
sksUsLs
sesxs]s
s_sFs]s
s(s$s]sLs
sksgsLs
s]sFs]s
spsRs]s
sLsesks
sUsLs_s_s
s_sLs]sLs
sUsLs(sks
sLs]sLs
s_sxs]s{s
s]sLsgs
sUsLs]s
sLsgsFs]s
sgsksUs
s]s$s]sLs
s]sLsks
sLsps$sUsLs_s
s]s_s]sLses
sps_sgs
sksUsLs
sUsLs_sLsUsLs
sLsUsLsksRs
s]sLsgs
s]s$sUs
shsUs_sgsksUs
sLsUsLs
sxsUsLses
sgsxsUsLs
sUs_sgsksUs
sxs]sLs(sxs
sps_s]s
sks_s]s
s(s$sts
sgsksUs
sgs_s]s
s]sks]s
spsRs]s
sjsesksUs
s$s]sLs
sxs]sLs
spsFsUs
sLs]sFs
sgs$s]s
sLsgs_s
sks_sUsLs
sgs_sUs
sksRs]s
sLs(sxs]s
sUsLsgs_sUs
s]sLs(s
sgsFsUsLs
sgsksUs
sLsUsLs]s
sgsksUs
sUsLs_s
s]sLsksRsUsjs
sLses$s]s
sesLsUs
sgsksUs
sLs]sLs
s(sFs]s
sLs_sxsUsLspsks]s
s]sUsjs
sgsksUs
sLsesLs
s(s_sUs
s_sFsUs
sLs(s$sUs
sLsesksUs
sgsksUs
sgsksUs
s]sxs]s
sLsUsLs
s_s]sLsgs
s]s{sesksUs
sks]sLs
spsFsUs
s(sRsUs
s{sesFs
sLsks$s]sLs
s]s_sUs
s]sxs]s
sUsLspsFsUsLs]s$s
sLs]sFs
sLs(sFs
spsks]s
sUsLsgs
sUsLses
sgsksUs
s]sLsks
sLses_sUsLs
s$s]s{s
sgs$sUs
s_sUsLs
s]sLsUsLs
sUsLsps$s]s
sgsksUs
s(sxs]s
sks_sUsLs
sesRsUs
sLs_sFs
sUsLsesRs
s]sLsgs
sLspsRs
spsLs]s
sUsLs_s
sLs]s$s
sksFsUs
s$sUsLs(s
sUsLs_s$s
s]sxsUsLs
sjsesksgs
sLsUsLs
s_s]sjs
sUsLs(s_s]s
sgsksUs
s_sUsLs
sks]sLsgsxs
sLsUsLs
sLsUsLs
s]sLsks
s]sLs]s
sesRsUs
s(s$s]s
sLsUsjs
spsLs]s
sks$s]s
s(sxsUsLs]s$s]sLs
sksRs]s
sLsUsLsps
s(sks]s
sks_sUs
sLs_s$s
sLs]sLs
sLsgsksUs
ssfests
sasests
sxs_stsas
sxs_stsas
sxs_stsas
sxs_stsas
sgs_sts
sFsMss
sFs_sgs
sFs_sgs
ssfFs_sgs
stsLsas
sFs_s_sts
stsLsas
sFs_s_sts
stsLsas
sFs_s_sts
sFs_sgsFs
sxsRsxs
sUstsRsxs
stssles$s
Oss8ks
sxsasxs
stsLsas
stsLsas
stsLsas
stsLsas
stsLsas
stsLsas
stsLsas
stsLsas
stsLsas
stsLsas
stsLsas
sxsgstsFs
stsLsas
sFs_s_sts
sLstss\
sFsgsts
s_sxsts
s_sxsts
sksts_s_s
sFsLsLs
stsLsas
stsLsts
stsLsas
stsLsts
stsLsas
stsLsts
stsLsas
stsLsts
Antivirus Signature
Bkav W32.AIDetectMalware
Lionic Clean
Elastic malicious (high confidence)
DrWeb Clean
MicroWorld-eScan Gen:Variant.Babar.310550
CMC Clean
CAT-QuickHeal Clean
ALYac Gen:Variant.Babar.310550
Malwarebytes Spyware.Stealer
Zillya Clean
Sangfor Clean
K7AntiVirus Clean
BitDefender Gen:Variant.Babar.310550
K7GW Clean
CrowdStrike Clean
BitDefenderTheta Gen:NN.ZexaF.36738.WDW@a0A!gZp
VirIT Clean
Cyren W32/Stealer.FQ.gen!Eldorado
Symantec Trojan Horse
tehtris Clean
ESET-NOD32 a variant of Win32/GenKryptik.GOND
APEX Malicious
Paloalto Clean
ClamAV Clean
Kaspersky HEUR:Trojan-Spy.Win32.Stealer.gen
Alibaba Clean
NANO-Antivirus Clean
ViRobot Clean
Tencent Clean
TACHYON Clean
Sophos Troj/Krypt-ACG
F-Secure Clean
Baidu Clean
VIPRE Gen:Variant.Babar.310550
McAfee-GW-Edition Clean
Trapmine Clean
FireEye Gen:Variant.Babar.310550
Emsisoft Gen:Variant.Babar.310550 (B)
Ikarus Clean
GData Gen:Variant.Babar.310550
Jiangmin Clean
Webroot Clean
Google Detected
Avira Clean
Antiy-AVL Trojan/Win32.Sabsik
Kingsoft Clean
Gridinsoft Clean
Xcitium Clean
Arcabit Trojan.Babar.D4BD16
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Trojan-Spy.Win32.Stealer.gen
Microsoft Trojan:Win32/Mokes.AARM!MTB
Cynet Malicious (score: 100)
AhnLab-V3 Trojan/Win.PWSX-gen.R609369
Acronis Clean
VBA32 Clean
MAX malware (ai score=81)
DeepInstinct MALICIOUS
Cylance Clean
Panda Trj/Genetic.gen
Zoner Clean
TrendMicro-HouseCall Clean
Rising Trojan.Generic@AI.90 (RDML:QcNTopQO0B4j52KIsjtguw)
Yandex Clean
SentinelOne Clean
MaxSecure Clean
Fortinet W32/Injector.ETFD!tr
AVG Win32:PWSX-gen [Trj]
Cybereason Clean
Avast Win32:PWSX-gen [Trj]
No IRMA results available.