Static | ZeroBOX

PE Compile Time

2022-10-24 07:05:04

PE Imphash

87bb85280d56158859c1c42d02178700

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00001000 0x0041d88e 0x0041da00 7.96265031763
.data 0x0041f000 0x00388524 0x00001a00 2.70702592388
.rsrc 0x007a8000 0x001720d8 0x00007200 3.7069277166

Resources

Name Offset Size Language Sub-language File type
RT_CURSOR 0x007adb20 0x000008a8 LANG_NEUTRAL SUBLANG_NEUTRAL dBase III DBT, version number 0, next free block index 40, 1st item "\251\317"
RT_CURSOR 0x007adb20 0x000008a8 LANG_NEUTRAL SUBLANG_NEUTRAL dBase III DBT, version number 0, next free block index 40, 1st item "\251\317"
RT_CURSOR 0x007adb20 0x000008a8 LANG_NEUTRAL SUBLANG_NEUTRAL dBase III DBT, version number 0, next free block index 40, 1st item "\251\317"
RT_CURSOR 0x007adb20 0x000008a8 LANG_NEUTRAL SUBLANG_NEUTRAL dBase III DBT, version number 0, next free block index 40, 1st item "\251\317"
RT_CURSOR 0x007adb20 0x000008a8 LANG_NEUTRAL SUBLANG_NEUTRAL dBase III DBT, version number 0, next free block index 40, 1st item "\251\317"
RT_CURSOR 0x007adb20 0x000008a8 LANG_NEUTRAL SUBLANG_NEUTRAL dBase III DBT, version number 0, next free block index 40, 1st item "\251\317"
RT_CURSOR 0x007adb20 0x000008a8 LANG_NEUTRAL SUBLANG_NEUTRAL dBase III DBT, version number 0, next free block index 40, 1st item "\251\317"
RT_CURSOR 0x007adb20 0x000008a8 LANG_NEUTRAL SUBLANG_NEUTRAL dBase III DBT, version number 0, next free block index 40, 1st item "\251\317"
RT_ICON 0x007aaa38 0x00000988 LANG_SINDHI SUBLANG_SYS_DEFAULT dBase III DBT, version number 0, next free block index 40
RT_ICON 0x007aaa38 0x00000988 LANG_SINDHI SUBLANG_SYS_DEFAULT dBase III DBT, version number 0, next free block index 40
RT_STRING 0x007aef80 0x00000152 LANG_SINDHI SUBLANG_SYS_DEFAULT data
RT_STRING 0x007aef80 0x00000152 LANG_SINDHI SUBLANG_SYS_DEFAULT data
RT_STRING 0x007aef80 0x00000152 LANG_SINDHI SUBLANG_SYS_DEFAULT data
RT_STRING 0x007aef80 0x00000152 LANG_SINDHI SUBLANG_SYS_DEFAULT data
RT_STRING 0x007aef80 0x00000152 LANG_SINDHI SUBLANG_SYS_DEFAULT data
RT_GROUP_CURSOR 0x007adaf0 0x00000030 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_GROUP_CURSOR 0x007adaf0 0x00000030 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_GROUP_CURSOR 0x007adaf0 0x00000030 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_GROUP_CURSOR 0x007adaf0 0x00000030 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x007ab3c0 0x00000022 LANG_SINDHI SUBLANG_SYS_DEFAULT data
RT_VERSION 0x007ae3e0 0x00000200 LANG_NEUTRAL SUBLANG_NEUTRAL data

Imports

Library KERNEL32.dll:
0x401008 WriteConsoleInputW
0x40100c GetLocaleInfoA
0x401010 GetCPInfo
0x401014 FindResourceExW
0x401018 FindResourceW
0x401024 WaitNamedPipeA
0x401030 GetModuleHandleExW
0x401034 CreateHardLinkA
0x401038 SetTapeParameters
0x40103c GetModuleHandleW
0x401048 EnumTimeFormatsA
0x40104c GetCommandLineA
0x401050 GetDriveTypeA
0x401058 GlobalAlloc
0x40105c LoadLibraryW
0x401060 FatalAppExitW
0x401064 ReadConsoleInputA
0x401068 CopyFileW
0x40106c SetConsoleCP
0x401070 GetFileAttributesA
0x401074 SetSystemPowerState
0x401078 ReadFile
0x401084 GetStartupInfoW
0x401088 RaiseException
0x40108c GetComputerNameA
0x401090 GetConsoleAliasesW
0x401094 FindFirstFileA
0x401098 GetLastError
0x40109c SetLastError
0x4010a0 PeekConsoleInputW
0x4010a4 SetVolumeLabelW
0x4010a8 MoveFileW
0x4010b4 SetComputerNameA
0x4010b8 VerLanguageNameW
0x4010bc GetTempFileNameA
0x4010c0 FindClose
0x4010c4 CreateEventW
0x4010c8 RemoveDirectoryW
0x4010cc HeapLock
0x4010d0 GetCommMask
0x4010d4 AddAtomA
0x4010d8 FoldStringW
0x4010dc FindNextFileA
0x4010e0 SetConsoleTitleW
0x4010e4 FindNextFileW
0x4010e8 VirtualProtect
0x4010f0 OpenSemaphoreW
0x401100 EnumSystemLocalesW
0x401104 CommConfigDialogW
0x401108 DeleteFileA
0x40110c CreateFileW
0x401110 WriteConsoleW
0x401114 GetShortPathNameA
0x40111c FlushFileBuffers
0x401120 SetStdHandle
0x401124 MoveFileA
0x401128 WideCharToMultiByte
0x40112c HeapAlloc
0x401130 GetProcAddress
0x401134 ExitProcess
0x401138 DecodePointer
0x40113c HeapReAlloc
0x401140 GetCommandLineW
0x401144 HeapSetInformation
0x401154 SetHandleCount
0x401158 GetStdHandle
0x401160 GetFileType
0x401170 IsDebuggerPresent
0x401174 EncodePointer
0x401178 TerminateProcess
0x40117c GetCurrentProcess
0x401188 GetACP
0x40118c GetOEMCP
0x401190 IsValidCodePage
0x401194 TlsAlloc
0x401198 TlsGetValue
0x40119c TlsSetValue
0x4011a0 TlsFree
0x4011a4 GetCurrentThreadId
0x4011a8 WriteFile
0x4011ac GetModuleFileNameW
0x4011b0 HeapCreate
0x4011b4 HeapFree
0x4011b8 CloseHandle
0x4011c4 GetTickCount
0x4011c8 GetCurrentProcessId
0x4011d0 Sleep
0x4011d4 SetFilePointer
0x4011d8 GetConsoleCP
0x4011dc GetConsoleMode
0x4011e0 RtlUnwind
0x4011e4 LCMapStringW
0x4011e8 MultiByteToWideChar
0x4011ec GetStringTypeW
0x4011f0 HeapSize
Library USER32.dll:
0x401200 CharUpperW
Library ADVAPI32.dll:
Library SHELL32.dll:
0x4011f8 DragAcceptFiles

!This program cannot be run in DOS mode.
`.data
CorExitProcess
HH:mm:ss
dddd, MMMM dd, yyyy
MM/dd/yy
December
November
October
September
August
February
January
Saturday
Friday
Thursday
Wednesday
Tuesday
Monday
Sunday
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
(null)
`h````
xpxxxx
?ZEM-'^
?{yK+;
?765@Z
?e')lW
UUUUUU
333333
?333333
?UUUUUU
?$rxxx
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
 !"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~
GetProcessWindowStation
GetUserObjectInformationW
GetLastActivePopup
GetActiveWindow
MessageBoxW
`h`hhh
xppwpp
_nextafter
_hypot
1#QNAN
1#SNAN
lufuwopojenayijifecuweyosanadel
gucayurefisobapuvaruf
uwipemalovukaf
obelisevop
0.1 %f
fohipavekesiw
wipehugelemigexuhafakojimexuf
uTVWhb
j@j ^V
^SSSSS
tWItHIt9It
QQSVWh
URPQQh
t"SS9] u
tRHtCHt4Ht%HtFHHt
PPPPPPPP
PPPPPPPP
;t$,v-
UQPXY]Y[
<+t"<-t
+t HHt
Y([wsa
YjOfa+
s`"'1vp
U9)=N"O
bl$h>~!+
q,\hWRL
p/6e.
{[( vjVB
)'$L\X'\
Pkd%s,/
K\?RKWz
_3B>91
t`'}rK0
|Hau{_
Z\RE>E
PpY+l]cwS/
r##p#.
GW0XWw
Ju{obk
M}=kwX
7[c3%F
u:ib0Y8
!O"LUdB
ovf2=v`)
JQ8HI1
nz>MG0^H
I~&;t/=MV)
^rO|~D
bz#O0P
c{o7.W^
].Z$&^
~K]Xip
2P%fi8
bplUpI#a=r
a2@Z(9_y0
[VC2dN
Xkpgzd:
fBNtB?3
?CS2\Y
E>O$#5+p
i|j\_PR
*AI@`}
qmU'MF
XGnd{'
Yq3G6w
`~X{nA
$xO&h2
E+^?vq
o+v\P/F
\:#0mA<\
/.up"\?
`~j`5]|
]S"nCZ
IJ' "qv
k3;#,*f
(XKfZvc%
OiA-vp
G50XI/
Of JC%
ko+g=Es=
?QPlq-OnN
)PyEww
`jf;@B&
l`gvkY
n|UH)[M
UJa"1-
G6|wa}6
I[w6^1
\~`i&[(
5aV2}P
.(k@+z
lu2/0M
p'1!S2l
*[g2Hb
SZkO"S*F
#$^a(@`
NBds"2l
FNIj,\
s"O[c@n8 og
03(9JT
&q 2;KM
3e xUO
`j9OY
vn?["TN
,>3Q2Y
Cw/%"
*X&o:n
}Iw(mh7
ICyD:\G
._u\l\C
.l^qIw,
2|69I
k .qyQ
H#^i9
]y-<G2
h//&,
b^qV9'
&}g$o.S
DIP>=H
lq5BYq
4u[9Dc
i{0y5
Y,mf5(
6N<P*+
H\MB~~
^x\AQd
D5O-!`+Z
9g<}Y
}@-V!z
xrv84Gh
o@,KaY
s:)*'$
[kDj%4
R&.=-h
8g]6;F
Y5@Ev`
S^ }h=
Hv#:!&
nk+6z~
?q'ix=
tgf.=(
f~UdQ(
oD=Z%]
9~5yFP
^)i=*=#
m-qU#1
`2P*\h
KC\vZP
J8dpp5\B
0C mk{/
),>QAQ
),i]9p
UZix134
?H^8wf
Tvr>!Gj
a:?Fd-
^{*&|,s
]{DLkw
vz!=#(
5~/ {~z
Gs"Bv_
NDtPCrvWI
I\-ps>[aX
wtQF0R
}Jr2lOp
2hKjG
}:-mx`
EAbT{"8
o_<O{
ee}ZA_sK
/rbe(i
O00os0
1c2,|4
aee*mE
/x5?&B
ln6d][|
7bgTjI=o
|9qEq-X
=yj*a'
vJ^%?2Ypd
\,|oqx
@\,w/~
tVOj<gE
'yH:GDew?
(vNX%Z
;J/@|Z
}6$AZq
.63[q%ug
o,Ny30
hQ (H]-n
HQaN2?
p^Wq^-
YrGP$w
<*+RZe
f8U$;u
#>ABoW
d"CJ3a;MK
(R_=i-DW~
GNf+SP"
,]tbK{h
_-}zo
'UmXa|
d5c @xEYV
a8iizq
~L^gqqh
eo*g1=
H<='%!O2#f
IoR_>@
T $#A[
dR|y,Kb
}XK=Ay
UKE+R
?IQdN!^
8[sN}f
7fR~\jr+
;*]fk~
Bg/Wgn
7Yi VOt
fSj_h1
+b`]]r@
#aQ~hL
rvf'lG
3-2|b-
+(f}G$P
P\|<PW
ZcP/rm`jL
@&uWEl
q.h8HD
5tR.}>[Y
inH~yr
.6v(D(
]YJ9/M(
30Qzr}`4
'Y&`j%
%94]#@
pd$8)Sw
K~mW3q
1k/]e&_
z,r8le
UGcr@D
i;1iN0
w `}d)
czx_ro
`'8 KA%
Ke2k}Z
}MD#\U
XX0v.J
X`+nFN
L\ r\i
YpZv"{
D,k|X.r
Rq>?j^
mlCNTk*
uxBW([
wiy9ED
Kee%_ct>
?mVf#J
Cp3;=0
|ud?RH
nu":EI
!=;"+
e7 ?z$
J-oBy? qH
=?]FLzH
YXdNdn
k`)evj
gh<*V)
PP_h8%
6Pp[@#8E
K8W:AR
vw.74.
~cA\7.
E~x@(8
o#"[)nZ
J%%y6fb
XL2sFv
t Ur1@
FxSjs|
8cz0+K
h1*<r<,
z.BQcJ
NRxri^
"o3d,E5|
AeJ8MXB
z{`N+x
x(It7u
Oyt!LQ
#&t{/m
Kl1zWH
d0D}3
'_yQ>(M
@H>@I)1
X'J7ryf
QC-ESej
rg]0e|
q;-J,H
ryYJ56MQ
hE pyp
jg\SxH
Qq;p@\
Jwg:!<s
}m0gS$nYn@
o=v z
BlkS*
_Q=3^>6$
&6hY&0
YV'qSJ
mQTaZf
%7.n3/
@kz,k8
:86_/*
M<KB{G
oAr.uYa
> 8}pk
dO7gSl
CFn.Zh
BXVw}c
3w|Z9
.\#[:{
`EHc{`
cd`um1
J5nO7:
LjniEi]i
zjBXe-
IP~Xbr
I N:KQ
DLX=Zt
ILwYp9
rur?7S
E@rw|L
b}4u^Izd
[4;@]X
\Jn9%z
:'ann
e8FIs/
z(]w;@
!N+9Jv
#i2,xD
>TqG^$
tsA`$s|
_|.1u5:
n!LQ<L
r);K0Q
JW]26SX
>i,XKBj
~#:^E[
,tN",d
}c4#m>
B1xy50:
aa?u.)Fn
$nn$$[
eFa~My
C_,'^Q
snm}tn
orHt?vL
i4$6|j
TJr`R[Sr
8dfnGX
s'_@TeG
,^'=
[S$"P'
}p6L{p
:5D%t3
jwyftP
?I%sE7
E{2Py[
PUU9E0ip
-]"[}V
UhiIA*
DrW"^0
O!EQb!hf
Xzi+-g
f9|Z#7
xZ;'3%
?4FIvs
[u(#(t3
Ew_QL:5N{
\C:7GJ
)2AM~i
;ws(Fa
!Y]V\z
r[70ZC
T1KAgVL
Q>s]4E
Y]Tsc
#v#8]R
sUtOWD
K%+2 Ky
4c#TwX
`y+h4L
C/^em>\
L!ZW`e7
{Ugc}"
>`1,KP
7Xg}B$
n#Q(v\
eka.jV
\T9Exm)D
XUDd#|
. _+X`
7M'P(
aY#-w
n!'pmlky
u:QJdX
Mr@<8`
"Dl/>>B
h@E;>F!
(b s|5
iO$n>6
rEkv*:
NI{z|H
gp{FNUZ[
&mM}{B
9yy]P7t
XjX`fu
ZFQMjlW
*ZEp7
hkwQ`>
*v}YU'
<<u63LS
/*ggYX
fx.R')/
tX(Mh&
DMM}~<
>Y/^''cG
Tr"Bq\rY
_!aF>`
:]kVkF
AQhD?$
,Vf+{-
hfK$7u4.
94VW<W%oC
wH:lC_
t?CJiC
JMdtLv
0$NF+}
?{5-"
nps/-$J`Y
:-KMPJ
l*&wT5
y(mMSC
u7MXxn
:q>|d)
v7A#cxq
grIN7x
q3+y?5
=sO?\|L
;[1($|
aUG|,N
+)1u0P
c~vlBh
T\rpEt
JztEpGw
j{cjeI
Do99XE
d_;2+M:0
0,VLV7
]Dlw/z
\OK+sW
uRu!4'\
:S>,~=Ve
tq9~48V~S
:R!g$
-{BBL-nv.
PU| _&
$+SFXK
`a&$kW
M;N9Qv
k=P_OL
o*SWm0
S*\G4-e
ViqTY=
Tl '@s
+H.Ik'
4vfPms
fR?.f
k~J~^
*ZJx0z
+G4@z
_tqPd
SP>n'Rgt
YmdqT([=
"wJ]og2
2Dg^_
([B]n;
l[4;eX
YcJWuA
mR_p.P
?5BhS~P
y-f|so
:cL4xF
3NIzz.
7g+LIp
p^vqa~
vBY?XU}
%p.C}JVh
0HzcZ_A
g'm&xg
yc,`lx
os@Q3j
UKfR@;h6g
:;&=e+
YX"dPOY e$g
AU~FO4
Hty5ov
=Vx#@"I
[s<SiI3
2;LHJu
f/YSLc
Y^WIz0
lue84v
B"83+$
iil%*(
c~)<a_%4
Ebv@-
*qz["R@
ycaak}
}z_Ay9x\
d@l>jQ
m4f~_L
fShH\Z
8XtsH8
h; vknne
rXbg68
<?<B'}7'
lqC\S/
m[lS}PplB
jJ`^sn
Uj)a8NQ
e{ooqdN+p1VQ
zCcg+
OO-t*:
`9yAaH
}r4Pi{
m%=,rA
AoZG?s
3\_{}>d
P(DtIx
g6pq=Q
L3y@~gZ
&<\Lz>
[QKC`h.
8R}8Fh
fQl(+?
1ktm4s
q:h,xq
8n'8D&
"~I5ZIMHz
n!%Xiy
{''.c2
"9K0a"
F@04s$
N#!"O|
jRY<I_
&/DuHlT
\.Ko6G[
zp06d
^$|a-#
kYE/#E9
#hT"9+
!f_oH.
@{uy)3
7\?Gdf
O;CKjN
s," lA~L
^9y#~I5
02_9|
9Q/NRUW
2Ri\cx
?bzDwq!
bfyNM3
G$Q"b=]
CKD1n@
6EgVZQC
}(pfZz
!;lb|o
5R&Qs~
D&SU9p
|jt!8(?
{~8Ge
>5rMA<_
Res9OG
gv~SV96I
_?;08k
hFl/l]g4|
pbK$ukk
YLP87a
QRF#ml
va;Nh}
4D_D;q
fFR##s=B
iySJB,)
?j{,0u~zS
pN?~qo
H$A$_hwj4
GO#-RzP
PE66c
Hjb/h:
'<oLZz
oTZ]qz
ahsle)
;V)J.0
bWCy4^
h'=98Pf
doCEiD
"\Z|\p
:/9(KB
"G$]G'
DKS<vz
?6Z?;U
[b=o[p
Ko7Fe8^
g|}>v/EQ
zWnZ,8
[f]ee{
H2kftW
`Z>T`e
/V2~I+
nC"_dF|
frRTfo
dA1L4!
NMH>!T_
E^v#e-1
f#+D~|O
047FB`
Ej*:_FM
'!?`TE
_eZ\(%`1;x_
F!'{}`"
'_\&-m
,n5BgE
X~Hs%n
&,PtO$
FZ\/m}k
$v$bYA
lF.I!|<_
]or[2U
bkUcBz
<\"H$*e
yjCGa
O+[$"y?
mxMY.*a^
:IN?|H
suWn<b
A&O8W}
9WF[Mac
3)nEt'
<;fa\=
AE,1rC
q@&Gxx&
:NS8)O
D,nC:=
OeXV>'U
)I{'}.
L6R=h<f
]JA2Gz
tIiGK1
!Y6'I{
$~l#l
|DTNklO
H_(}fq
xoLC5X|*Z(
-tWQ?K
'};} 6
[]c_-b
fpz)v5K.
p <.PfO7
Owf)>z
o9ZGHW
_}m7XE
?x9"l6
n-VW3
-D=*V'D
tL,@hu
vBPy_Y
c>2I83
j\DIUSzR
,INlr>
>D)r+u<
6:s\^*
PaQC]w
A:0(*G
iS<Rr#
@suU.4
4+wM~S:N
<kv2Id
raQuXy
x+>[eC
9)j4eb
`(rYf_
D.IJ y 3
,)fX*I
G77%49Z
bKax#~
w1ZNy45
n(&f&c
G'VH"g
tISY-fF
D^PT'm
ek7fLm
T;3/#\/
ahPeua;
X)he0
%tmxl_V>
=5%p<3"=
,`P++i
:5p(;ji<
5X@w,Ox
qC&6=BF
{n4f$0O
DuG%*#
{=dUoz]
lJd>}2
<k1|L
c1]Q>a
vofG`0by
SI@p5K,
]%-TqU
i?%PI/
~/1m((
~(VxJ]N
4iCr>CGm
p7tBk&^
R=|->_
HZP_rs
-VOt&J
zU,3@L
iZ'0]}
1>+r*GS
W!%lfbi>
!MNrq{
i|ipF
/$=qy-
(^_^n[
1<$O/~
~zBz,
km\d!)
e0i$=_Q
>odLr;U
4FxNhS
_r~il\
!%:8Ak
_914Xz
3r-!pQ
Scv%<5
K8/sKl
tZy.sT?
ejsp~Qo|
HdzP4F%
\4|}cU0
SZ2Mor
($1zBc
St5->K
#a+Z'8)
G>yfI8
P&5sW{
B-/||d
t!1XoBt
ubf.<O
KQg[AT@b
*D[-d ^7
U18>MrC
a67(<{N
UU@p\c
chvcV5
M]##oV
D7`w1%
e)eHcXB
_hx?"(
f0\]Qt
i>tuvq
h\Ehk
{fqa1CA
T#(=a`
2uXEGs
4~'Rw+@
i7,i18
XL/W8n
Vm(n-*1i
/$zU1x
],778AUQ
$UaZfw
!_]Q33
rprc3\
|!oNQ6
vtjZw5
&v5<,@$
sre4(X
$OFVT9k
~h+C+N
$a!S<=
sC|V{!B
-0j^*m
P\p+rS
"hEwG%
__c=>mxd
<9|n 
Dov..V
S7i=0*
"jh{7v
Xi Jp<
NrG"YT
ss<<,N`
XS-v;w
B#gy:,
hN1A^#1
;oKFk=
wzp=8XM
}-h&f{
iW;wp@&]
h:}k
~}QWyl
VtwB=zWi
<yU!B8;
by)y.a[=*
w\YMoU
G:*w
0EN'yu
ss\Rs\
2Z}P]Q
.Vp$!
0cMRH7
z?tBlLR
$ZB#rL>
i:j+s-
fdy{98
p]?55
rVWa"|
~1]Lw3Q
u^B>[
MLZk2".
qKaGQ6
-KX(1w
/g#U~W
RR"75"6
noYq{1
z_ ~~C
D<B($Vw
*+9h57
aH|?d_
<V{4{"O
%PH%^B
`'JW?{
Lt\&yN
!T[F/|TL+0
4nxBuV
JztE`g
2)6'=D
{)},To
sqQU/ZI
N!R{Pa
(WL5)J
JUkJGX0`
AjaW!a
1@W<$R
Q^k}u3
mxEmKi
V9X367
vx}f[(
3{xKvW
,`tKcs
sf@Nfg/(
@AWH^s
fr_10.
T]WSe=
Q~`p3j
4C;Z3@U
xJJ=:=
XDFa8m3
RtvzU0
x^&<E!+
SYnn_|Y
<W]pP7
xuc8nh#
.\dnu_5Q
?JtP`;:
YX\N<2
]"N~@5
dt{/3b
RR:z~N(R
OCC&lA[
HDo/>q
$\{iMM~
P8!@F9,
!{a)D"
Wt%S7hX
j45z^:
?\pUea
is<]c;n
]\2=r}
T lZlt
|?eV,_
:#^ 5bB
L-?%I=
t,3"`=
,1xMG*
Vp:;t@+
IxH_%
[L<o:t
:f~P#p2
Cp:5'(
7z1TRU
P|Rzy;;
Q_T)k:
.w&3z5H
.g)r/cG
/,7kYW@
ZN-1+D
4Tj/O5+
k5`)okem
2on3,'AKR
n?BwJ[
_$OyY-
KBE-0
Fn(nuYHal=0\
*_$Bzx;
1rQGe
l.A__2
N_m&D:
.t{[*D%
uOEoK/
X}Uj;G
-r7XmIe
vbg1UU
S9.Y/e
ws/{/M!
(Qx "Q|
Pl(}i8<:7Hcy
*_\&nQ
#7i~|CBn(N
A{px%s
/r&p.~P
Wl$`-'
5w&'<)
Bx<TUj
ZlR!Je
Ck\tOQ0
vlmAO#
?6_B k
`UN K*"
4]@mg'
meT3JXjPv
SjO[y+q
f9jkjC
Y|1hZL$(C
%OXymR
FSVjVV\D
o>531
X9[f=-VO
2KxKR/
{MmW6
atV"ZI
h3lA/M
@qU) j
#Vs|ZR
(9I0&}G
}tH$/_
`!([ywX.
d,hp1"
YQ0Xu^x
]zW5v
wsRyWr
UADI^_
w\EG!8{q
Ln39ye
Q)f,cr6k
?$3vB
qi Jcxh
>S)96-
A2:I+C
l1pg@t
F+kvY;
h?6/Oh
Ao?0ld
;Z$mjI~$
}W;Pqs
e/#Nl~
mE{&H`\
^l/q\)3
B(%zCtV
0L=f>`
\%A$#6n8
%B59Y+
o"MDg2'
^lq _m
$6"7B-
AUrPZ!
ob;F]q1
[V#'=K_
Z8+#7%n
[GmJ`[N_
Dik9y6Z3
9{2}PE
>ufsO i
Tx`yG
mLm@j[
?#1 *E
BD]%Fv
P#@Q}u
o]}B5>s[
w:)b={
}}`mzi
!a][2^.
+!?zy
V~15"e
F~{?y0
7[.;M"
yrmF3k
VbH=ye.o
e*n<hL
NAmYX|U
u,HV\2
!KBX0Sq
+%#g[(
As'=ya+
R:G8V
nov#GX
'd\t/A
mju^8_`
sub<(}
6}=<wM
G,l[WN2y
@F?k6a
4i,Pmr
QqAJfXzs
jK.oc
R0PJzK
\).Vh}
s!?FrR
.;K4@xh9#
s0K.PP[
y2go*=
|mG\ v
]/0NXX
KXlW`I
2j 7ir2_Qm
?#66>d
6bPr**z
n;jyK=
!'\]92
)=hj#@
\YU(AH
m!BPw"b
|Jg+,7WS
HN7)au
e$N$iM
h?2L&J
L2$p#]7
l1(udn
c%r2iI
W)Esvz
ff+gXE
7hmCr?
\&=KvPI
e6fGY@y
f=VZ/x
n0a'd..
,)G;+G
&oleL! S
^KqDDdK
CBICM}
|:tHc_
MYd+1m
?[$;8A
% r/99z
VIjg0FY
u0#1/]O
U).NTW
!@R\DZ;
h-ivT
PCIl"lh
Ej~!2M
zDC]'1
9Vg59]
SdITf5
;"l2/0
m!!,0Z
y>H7yZ|
,"Qky',m
O@kwa}
W})F&2;-a
_Nlf`c
38]$ORuq
/\IH\0T
5<~Jul
X-aobu
TNbD`N
W.\=b2
UcXCb|
q| 7de
]<[0O%W
8_`<GR
Y";l%\',
'hV^N8
icoycY
/` rbs
,d;wEw
kYNT\Z
guB~JF%
.og1<fT
Ng>Q6o
$w}p:Z
u8,f>C
.)bx{7AEbO
R-:j_P@
1LT~J*MI
pr %cd
hBb~R<
1;;*6v
ahDOM{#
n^neyh
r4~\@X
$kK2kR
[Qv&hW}
W{5P7t`
7Ljbkl
[*Wp_j)
#`Cyl;e
A`Vn[Lhv
G<l jbk
!7Y4A2
p8v}*gE
o873qN_
"Xw:DJ
7E{9',g
pJ07T.
> }Yzn}
(UnASKL
;~Rv<_
lpxw%*
kIv!Pb
L %1(
f7Q1yX/ Gf#w
tQ!t2O
}7A2-~
gsW/*W\-"
4=p]iP
~5E"HqC
Wji>E8
pBE}%e
Y_TSg"j_L
FQlg@]
.*j5pVMn
M>e$^PA
LEwlCI
|#lw%#
q~_9 P#@[
UOS'h@a
GC)KVtKF\H
^!.}z@
W!C3w5
PtlSK<
hk2'=
1iL]^MZ9 uj
ku1[`6o
Wml_6Qvs[
JixwQd
j.^b!o
Y:MaG|v
dJSE+d
838mqJ
(#zwPt
4pp6MnO
u_xS]V0
AqgrL{
QP$k8J`
q2jDG;
UZm)lj44;
8SY5SBD
2oGbqI
2]>h)=
AO>E}YI
R<J,962#
7iIV7G
$F0Zw1k
pZtiy&M
iE20L~
?o}\:k
~6 n^c
DK!#*b
yDa_c
'dn!hA
*@_Xs'
!8QFI>
9|aL2,PL4
mUXJ.^u
,y"U#H
gN4Ggg
fWIs*|u
h2nMT%bl
8 Xs(#y
":tE@;I
%Rd_$
tGuF5r
I(htg0
l|zH(&M
2:,?Yg">
RwrW[4=y
p~/x}=
rA)6.
@h^~6P5
MkVM-N!
1553d6
;{$ppx
%/6yoV
y0uk8]{
B$":x!
K~YfZx9
M%Zgr
YVL'x
Tu^S%L
"6~z;Hu
D{ZioC
U\/(Jk
LI{SJ{
#I6?ob
%Pb%Qh/:M"
sG!s7,
NhI+\JF
Wj`85c
;]qn,w0
/@TDRA
<)?8Bfk
}-5|+e
qjtN25
p.#<ScR"z
Yv0aF^
;,mVPX
Rlm&ZX
0UCe/_
w`_=tY
/LlMZQ
T?D}n!
ktMUHF
HJnXZtw
r4h7/+
o+C5,e6
,%iDFG1
y[ jbH
b@B#my
`w~D^b
}#6M5
VxzkWh
KkqL;;0
Kn+ck'4(
+~(0K(
l4651o]9(
`nkP%GV
~EdZ&tc-`
-q,O-bv
~^+KoF
f= 9\~
K>C"k@
'%t9yx
*lMoD+
oBQ",H
Am~iN(
A7{o@?+
]=8N-q
]!Gj9Y
HjI=="
Q`cBxD:E
1jTY>
d)K"YQ
mDD00!
^Gh()+
!O1j1#<(
\h-i!F{
hw^cP1
t2cSGZ;>'
{hT(L"
$;b8
bWweQ>
U8]<gFq
0FL^|%
:JM/Wc
]%Uo_ZG
|$nmA5
zFxba8
r"j&[QKc
~d@'HZw
I|$<o*t
1KZE?<i
UH:#N&
AI^asG
C7/8BZf/
PSM$l$L
f_3qYU
6Ig=Ir
xz6#K)
R4Wb6$
gD.jGu
~}X~us
HO-\x>
\)_IT6
jC{h{j"<<o
<L=/>:L
Ydl9K&
p!+DGF'
rRrmH
5XU\GDE
7@f+pPq
mh)_:Y
/:Z&pdP
8'hvM$
uAG;q
'M-XP~
)T:2?31'p#
~JVv]Zy'
"qlI_4
\p\ZU>9
=x8brY?"8&
Oo@8i;
'G"`bi@
g.dmmFQ
&RqOp)
?r[8Q;
%J3>)T
49Cs4R
X]?gl)
53eh#a~
#\bq4/
?DcM/1
\.G2+C
S's?|`Sr
0qD+.Z
VD,6)pSs
z0AyLs
Ct\G6f
Tl\>%[
y~024IB
0L:5D@
+Ak/R: D
> ]/$
(;oqRPY
_J;6v3
w~ }Z
%0tsL7
6&Ya)O
ziAXbq
A)~a{
q3ql8B
A!HU4Y
";oH&P
Op>]\L
` z^W=|
wb7-?k
_Ksx7C
m$V=z>a
l^`1!w
oPqmp(
<vQd"y
\A]4VI
0.CA.x
)RyFST
H(JjXk
[SjY2J
':x!I:RPr}
3G05UNM/
l+ +^ck
p2+N#m
5Ljl!1
v4Hp?d1
k{C"B
gUtqv>
yy%|F5
EQym^L
l 5V(t
5B?iG{
A`a-"X3
~Bv/Lb
IuzD*P
,Gm|;C
N%OQvY
)=D4]x
a*<t35
wLF`>x8b
{FrdW$F
m#3%vG
*L@uR](
Z.[[b\
b+?(& O
>&5?~)
:YGv
oycz{UO
>?5P1
58Lqk3
PW*%uA
[HB+95&
<*>|-O
>\-Gl
i)P,(=z
_EM3WS5
^GrOWh
*u2Z^A
Y$gVU7p
CS'@-]?
jJ~Ftt~6
o]txPB
s@YU~\
a&vL69WO@
hK^yRN
a_b3n,
lDG&FnJ
d5T2oBd
by>Qk<XU
T87/i
cW!'%Z
!}(8/M
J2*[jM
i7;l.v
<U8Vv>2j
m5.uO%
wk'V?B
W>"j[f
?r9aA/UN
{nJ)to
7Ly1=`
yuhn#0U
_W/0tq
=sl3j;
:D8Z21
Ih9_H
RYGNmS
57u#ek
zSF9xz
O#eI7_
/*'-1Ai
au A C
4.XnI8L5k
U<p)K+
cWDKU,q
@gf%Z/rWE
]"Nc{}N
|G\1lk"
Ey}ymKzWc
jAkIH.
I}Zi]?
.la_4*
@W*Qv=
Z|&teM
s?[3u
!q~Pw+
#3@9n&
}NRWBb
roz299
$FI UgiET
[do5@5D
tPdgp/
<T7MZ+
O;G9Rg
p?K,w=r
{@#ar#
]1v.u$
0OCT;gv
eZ1y;e&B
Zb'/%g
Tz,ufQBj
x<"sxyK
_oWW@[:
m#oowE
IgVqcZ
ZiB, ?|
*vB;eAg4+
Mmq3(D
%]<?)/
TdG9F#Z{
zq.q2f
Oo&TPjo/
^]=^S7M
Vr\WQ d`:
E5M1:Z
ztRcK!
021`I[
q&vHUt
mvB6B4(e
ShG6\r
UGn>6.
`^7w3}<
k2/nw;
_qj({m
pLmZgt
Npkkw6
xZ\up3eF
n[LOiP
eq*K=e
`l-4'=
fg`J3M
U-\dC%
39g3 }
1l`M)j
UK$$Xh?o~
'b"+j>
a"^R:s~)=NU
JR5.8;e
L?\,7z
?nt8 u
umHNI/
T6Nh2eic
m%.tIN.K
O]`~OsX
Mz7$s#
&3KOPk
n\*Bdl
/zm;F0[E
*a;&${
~k!4kl&
P#4GF=
]*~@X23F
>#,es)4;
.dS=;2
/;sR7<
&K7$W$
DJ&.U&
4[y-E3
@B5Z@
g/P,3L
g,F6uv%z$V
\Kl4?g$
ooa{e.
d7FS!nz:
,yw5O
!+6d*p
"j0fw_@
P]N)-R
^\he`,
ch}2_I
JR;<aV
Gr0T}2c@r
\{T%15)E6
A}PwA#
)E<p0n
D&X\mN
Yd`}fj
+{){u_
ux|wJ@
"~B:Cj
$TZ]Q+
2PH:c;
/k=>BU
LJ<4htw
M9p'g
De(/J"
x&ZV0^
Nk`#}l
pbiq%b
gIPlm1
H JX:B
rZ1^DK
2YP]1cp~k
kZ]#&ik
YQY3%[
3dSmi{
c9+i,G%
y[8MQn+"
F)94OJAN
z;v<6|7
S]m:#'
VFG(s<
zRAKN=|
U<W>n<n
|(_+HP
L:SH3OD
HPW""W
jaRe1Y
=.1~WW
51c1{{
ieHJt~
P2a{3J>
Ehs^ <acG
Ef,03RD
rx'LTC
yCwr;C
Sp:#gh.
fx;hE,
+*QZ>Bt
#>9:0}
JX)Cfag
^2 /ux
?9"N (
mRi0]S
%{q'FP!
ee*g^)k
L<YpY?
@^GYp1
:unP&pV
~)dHQ@2
UIIMT+
TdRhe;
bKr3g{
Ad3poM(g
T%Wc6(
D|>SId@rq{
@oo'tn
hr8[e
4o?BH;
#G9T^D
3+*E\J
xYHrSO
#%g\O*_qYR
HR7 fn
tn_z#
t5I>lk
ca!~^(
fQh1F7
WG)kmjj
a8 _Mn
'`?q|,N
ysf@l=
lx="FfH
Gi!/<c
@o^\M]
j`]R:^
[\<>/eB
h4DgyU*
{GJ)2X
;2S"Z
CP+-M$j
V9|>epy\uS
;a'`5h
@`&L.=S
l7a;#
Q5Xg02
<#/W"(
x!5bl$
$E5"Lg
_`3:SM
d(s*zI
u^/Qr;
z{"pc&?6
!a_80U
3dB|rT
6l)tJ4w
]5buzS
7b%A#u
UCq0`_
GgFoQ8SU
vi^H[>
?r5RX\h
K1+HCq
L.9vKwb
::H)'x
-o$ze0Y
\#{1M|
d?17&~d
]N\[8?#E0
lZ`y$D
93l@C7
c|n\ZIB
5zO0l,
.KAD[*
0uy++4TgrZ
9Mbl?!
tLTily
GL_;)^9
-W8u'
41_ H~ib
o7kTut
hO;f]H
xeGFSZ
A{LNt-vG
E&]K\y
80|/%en#
Hw#`(X
ds'Zi5
A>.S_@
!K66<U.
P*v0pe
=5F?\r
{{>vu2
$aW0qf
7|'+|\|h
zS}qI:
Ayv?P{
~R+l+8
dJx;{k
(HO\BC
WRSZLs;
;#E9+/
|l8E/IB
YweFy^
k3.`:_
B$OLG?
M>*L>A
l=-LOc
zsWd{5K
2%tXSH
N@VKT]
q61!iu
TXja&G*
'yJYX#
~^OrkeNJ
i8Hb?TOSaB
@'YTzj
lU&]Q
E[gBCVO
f-G)PD
)N-SBu"
6'|JMs5
/fXNIJ
H:AUp~
DVg:lQ{
f0Xn+d
B3psWU
+.@ZiDE
sULl!t
HB[c45
gBN'}'
I`8K{W
A 4r1k
&Gd*FXGZFU
RzsqU=
=+VUb,
lA6$_y
meDpA,
H>d*<(+YUe
Eg'2%~*
^,xelB
DdN-ED7D
B CaWC
|OA^\8
l6+|qK
aNQ^sM"W
^$HE{M=
C\0ds8
+|]Tpy
UJl4b6
p`yv]Rhc
fwYSLh
F>4BF2t
#4p+<J
x:NCIl
t;exqW
Ome^-M
ns.7@|
1V2x:9
@]4CnnX4
Jc}$9Z
#1Unm`5f
dvT/@V6
U=}:xD
6J=X=!1
I^LF/*n
7$gU j
oe[vKf4
f.NV=9
qriFa|
d%j!-td
l`Ywki
@r9P/t*rl
8_H0^G
\)/U[=
MKb3}|
UO%::*g
X%Gy$4A
)!bax
Y-x}NoR
<>;?u.
iJkJ0B
r2q4]mo{
ye`2ZV
nWqK$C
B+z-B!'>`r
;?Y#S)s
hYsyJk
'}1Ffu
I40t~t&
PA}Keu0
j`C3(s
$H&5>TOh
GX2Ce51r
KT}|e'
g$yT$l
@[>H+W
k!Dy7@!.Q
&O2!.,
F1T1 +e
Za0MEV
Z/Uft
B@,*xC
j[*PDaKP
m%}7S
L|EkwXB(}
4$esGylhFI
xwszFp2r
pWCq'mW
,p(03,
HK!-CV
G{?Y8x
n13KLa
z\-ZO|
k0x8dt=
N!'?c)
6tb~4Aa
k^a5Iz;ad
^]f*D`
va4}tlS
oma{v
pCB7+&'
%!Z:<~
I]#S!h
Wif/lJ
Vl|_A[
#1yQ{g
7HvvL@
!|r{yw
Mtn4qJ
sr7u<^
cx~^~P
ZfkM05%
es?~"O
[v%B`g
J\Z8k^
R 7KBE
VN`a}P
$=\a4K?h
PA]>FbN
1Rq>t>
hrcQ<.
t-I|O+9
3r36rJ.
EKkqY
dX<80*x
9mYx^eD_
HWT8SOb
=)[RK%
DGXBt1T
(P{=@1
)ZBY5C
7cU*jw
n[@:je
)av0CY|
`R*_Lh_
e'%[kU@^3
dtVpZPm#
4J[Iy7
E5MGpO
9k\!'g5
]T%?Z$q>
!0"tFT
S@hKm'
^%Nv;3Gw
`>?\eq
z*k8C^OkY>"
3-^7cJ
&N?Ggp
d<Vcs*}
WDa\pnz
#i~A[k
le4rrg
$P&SgJ
5Hv_@1TRO
vM}0{I[
P_~ZA>
UK\A[
$fk63_
h,AIff]
g_u`]BvC
tH52mq]
y-)tN(
-#R.8.l
3Eq>:+
[',5OR
z1;>}>~
Q}fS_t
&H}SA}
~V=jZJC
2zI=7=
!K7-w;
?jNy/E
6Xl00x
%2!WW[
if)oMOs
_=zX[_
iz^F<sS
C`t2"dG
9_\[MU
[oEJ?R2
X%epl+
rEQ%wo4-
'|)oN/
aAh:MT*%
92+So#
9:}vb-
8H-8BkAC-
8:>A}
V[6w{b&
i=u[&M~
<wj&dH
"10<tD
OZ&RZ+
w9E,[Qz
YP1MD:
g(9WDl9:
x?A,WBV
V,TA\D
x=1dYx
i;,e#C
Y%r#Ud
^i@^(V
aIo!T{w
{^0z^sK
e2]#},]
j[_;N?&3
9/V(|8
AGO(D6
/xrMX8
`)O;-5
|+f~>h
rc`}OXmc%l9
tBB+RG0F%W
$_nWV{v
e.Q"O"e
xl2V}1
ctRK0;WD
x%K7(KH
aT`+x;w{_7
x{jEy{f
mqFyS^V
Ez_Qu)
WM(@[\
_e_Y}AV
W55X`q
^94+j
}y8LwH
.a)idw
3C$lFm
Hn0y,
SNGI.d@.
<^?L@t
.PVX+4
:6oQW#
w9sCMv
L";.W]
1##p.1
CyP0Al
C6}{t2
|:LC[9
.,8zC>X
?CA+Sn
/#lc&h
><~3_p=
_<cx{eff
*L3E^3
PBM{c
N\K3:l
ABnm,8^[
;^aCk)
1Pp @]
\97fsg&
,?&<6FNp
^X.IDK
ML+n7JH
6_+d*S
@1 q}
FX_B^9
2NnVWA>
AR~C-.
.1DKHkd
h<#v3<
{v~pY
L+Q8mpV
7qGy9]
JApp3IM
~qia/O1
sgwr^z
A:c1Ht
D..I~B
^$$|*Q
m^EK=d
A'NV|kd|
]TIbW+
UvPf+y
(`:A3gx
B*0XFO
{bOb.f
|Rvu;O
'2$MG2
tQQbM"
XNO;Hql
A)X*k,a
i2&ck
y_oNo$
MCNtM,X;
lH+L:C5
zS>?$l
>l#KU
z[NEf>NG
o0}>{#
g7S~,,
y1'W^l
2cYeU8
x[#>"?
RTinl4?
Qa_DnW
ydbBa0
3>LW|u
Antivirus Signature
Bkav W32.AIDetectMalware
Lionic Clean
Elastic malicious (high confidence)
MicroWorld-eScan Clean
FireEye Generic.mg.f71cca8206e173f8
CAT-QuickHeal Clean
Skyhigh Clean
McAfee Clean
Malwarebytes Clean
Zillya Clean
Sangfor Trojan.Win32.Save.a
CrowdStrike win/malicious_confidence_100% (D)
BitDefender Clean
K7GW Clean
K7AntiVirus Clean
BitDefenderTheta Clean
VirIT Clean
Symantec ML.Attribute.HighConfidence
tehtris Generic.Malware
ESET-NOD32 Clean
APEX Malicious
Paloalto Clean
ClamAV Clean
Kaspersky VHO:Trojan-Spy.Win32.Windigo.gen
Alibaba Clean
NANO-Antivirus Clean
ViRobot Clean
Sophos Clean
Baidu Clean
F-Secure Trojan.TR/Crypt.ZPACK.Gen2
DrWeb Clean
VIPRE Clean
TrendMicro Clean
Trapmine malicious.moderate.ml.score
CMC Clean
Emsisoft Clean
Ikarus Trojan.Win32.Crypt
MAX Clean
GData Clean
Jiangmin Clean
Webroot Clean
Google Detected
Avira TR/Crypt.ZPACK.Gen2
Varist Clean
Antiy-AVL Clean
Kingsoft Clean
Gridinsoft Clean
Xcitium Clean
Arcabit Clean
SUPERAntiSpyware Clean
ZoneAlarm VHO:Trojan-Spy.Win32.Windigo.gen
Microsoft Trojan:Win32/Sabsik.FL.B!ml
Cynet Malicious (score: 100)
AhnLab-V3 Trojan/Win.Generic.R584201
Acronis Clean
ALYac Clean
TACHYON Clean
DeepInstinct MALICIOUS
VBA32 Malware-Cryptor.Azorult.gen
Cylance unsafe
Panda Clean
Zoner Clean
TrendMicro-HouseCall Clean
Rising Trojan.Generic@AI.100 (RDML:r9tuyiI1HDP6cGYvGWDpSw)
Yandex Clean
SentinelOne Static AI - Malicious PE
MaxSecure Clean
Fortinet Clean
AVG PWSX-gen [Trj]
Cybereason malicious.48f8e9
Avast PWSX-gen [Trj]
No IRMA results available.