Static | ZeroBOX

PE Compile Time

1970-01-01 09:00:00

PE Imphash

f0ea7b7844bbc5bfa9bb32efdcea957c

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00001000 0x0093e7fd 0x0093e800 6.19729931231
.rdata 0x00940000 0x0057e788 0x0057e800 5.14300607928
.data 0x00ebf000 0x000af350 0x00041200 4.77337583686
.idata 0x00f6f000 0x00000490 0x00000600 3.61398140699
.reloc 0x00f70000 0x000279b0 0x00027a00 5.44383495481
.symtab 0x00f98000 0x00000004 0x00000200 0.0203931352361

Imports

Library kernel32.dll:
0x12bf040 WriteFile
0x12bf048 WriteConsoleW
0x12bf058 WaitForSingleObject
0x12bf060 VirtualQuery
0x12bf068 VirtualFree
0x12bf070 VirtualAlloc
0x12bf078 TlsAlloc
0x12bf080 SwitchToThread
0x12bf088 SuspendThread
0x12bf090 SetWaitableTimer
0x12bf0a8 SetEvent
0x12bf0b0 SetErrorMode
0x12bf0b8 SetConsoleCtrlHandler
0x12bf0c0 ResumeThread
0x12bf0d0 LoadLibraryA
0x12bf0d8 LoadLibraryW
0x12bf0e0 SetThreadContext
0x12bf0e8 GetThreadContext
0x12bf0f0 GetSystemInfo
0x12bf0f8 GetSystemDirectoryA
0x12bf100 GetStdHandle
0x12bf118 GetProcAddress
0x12bf128 GetConsoleMode
0x12bf138 ExitProcess
0x12bf140 DuplicateHandle
0x12bf150 CreateThread
0x12bf160 CreateFileA
0x12bf168 CreateEventA
0x12bf170 CloseHandle

!This program cannot be run in DOS mode.
`.rdata
@.data
.idata
.reloc
B.symtab
8cpu.u
UUUUUUUUH!
33333333H!
t*H9HPt$
debugCal
debugCal
debugCalH9
debugCalH9
l819uq
debugCalH9
84t6H9
runtime.H9
runtime H
error: H
H9A8vEH
L9h(t
7H9S u
29t$0u
D9\$Pt
7H9S u
H9t$0u
2H9t$0u
L9\$Pt
L9\$Pt
7H9S u
L$xM9H
8H9S u
H9BpwJ@
H9P8tkH
\$(H9C8u
H9D$(t
W0H9P0tK
D$HHcL$
tE8Z t/H
\$0H9K
D$pH9H
D$0H9H
T$ H+:
UUUUUUUUH!
UUUUUUUUH
wwwwwwwwH!
wwwwwwwwH
J0H9J8vtL
H9{8u?H
L9R0wL
H9H8vVH9H0w
kernel32H
l32.dll
AddDllDiH
rectory
AddVectoH
redContiH
ContinueH
Handler
LoadLibrH
raryExA
LoadLibrH
raryExW
advapi32H
i32.dll
SystemFuH
stemFuncH
tion036
ntdll.dlH
NtWaitFoH
ForSinglH
eObject
RtlGetCuH
tlGetCurH
rentPeb
RtlGetNtH
tVersionH
Numbers
winmm.dlH
timeBegiH
nPeriod
timeEndPH
dPeriod
ws2_32.dH
_32.dll
WSAGetOvH
verlappeH
dResult
wine_getH
ine_get_H
version
powrprofH
rof.dll
PowerRegH
gisterSuH
spendResH
umeNotifH
ication
GetSysteH
mTimeAsFH
ileTime
QueryPerH
formanceH
Counter
QueryPerH
formanceH
rmanceFrH
equency
runtime.
QxM9Qpu
T$@H9P
L$`H9y(
runtime.H9
reflect.H9
I9N0t_H
D$PD9D$T
H9QPt#H
rpH92w
I9N0tSH
\$HH9p
t H9APt
I9@8u3
r09q0s-f
,$L9+w
Q8H+Q(H
H9D$@A
H9D$@A
\$HH9S@
H9D$8A
runtime.H
runtime.H9
gopau&f
runtime.H
runtime.H
runtime.H9
P8H9W8t
f9w2uy
O@H9H@
9GODEuaf
9GODEu(f
l$0M9,$u
l$PM9,$u
X0H;CPtTH
sPH91u
l$ M9,$u
l$0M9,$u
l$PM9,$u
H+t$(H
0Hc\$8H
HHc\$PH
l$8M9,$u
l$8M9,$u
l$(M9,$u
l$ M9,$u
P+8S+t
x H9{ u6H
x(H9{(uWH
Q H9S u*H
Q(H9S(u
Q18S1u
P8H9S8u*H
P@H9S@u H
PHH9SHu
PPH9SPu
H9{(uF
x09{0u>
x49{4u6H
H08K0u
P(H9S(u
H9L$0uQH
H9L$@uwH
pl<x&H
ansa_?pH
P2f9S2u
H9S@uwH
ey\p|Z
n"usgirtH
xesXbk"gH
g.<h&lL}H
l$ M9,$u
tiH9=I+
>C:5E1
l$ M9,$u
l$ M9,$u
l$ M9,$u
l$ M9,$u
\$0H9S
\$0H9S
T$0H)B
UiNvX`iH
b yrj.IAH
SAn;:aitH
:ait':v5H
T$0H9J
l$ M9,$u
l$0M9,$u
l$0M9,$u
l$0M9,$u
l$0M9,$u
l$0M9,$
l$ M9,$u
|$09w0uc
r49w4u[H
O@H9G8uI
|$09wHu*
rL9wLu
l$@M9,$u
T$09T$,w
L$`u3H
L$`u>H
l$(M9,$u
e^bh6.1
5l7z3p^
3P<4.1BH
uau8pH
en~ezH
>",",1
thmYtaXlH
R2+<6H
13V{le5H
}SSC7H
OxhbK1\H
R+^}|+dH
u{ntg.uuH
ojly{finH
'js~erH
Lmoqr[i\H
moqr[i\sH
^MnvUi6WH
>qrlx1
eiRAN)]iH
3uR0`iSDH
>j~Dm1
qetG~isWH
TKfE%vqcH
c#nFYnaNH
l]JabZ3MH
7VDYh1
nu`ge=]
{yp}}sq|H
}}sq|u~tH
vwAprqfoH
fozal{zPH
ArH0fJ
~(H9z(u&
l$(M9,$u
l$(M9,$u
x H9{ u
"nThr>H
> `czX"nH
[i+eIH
GntFi!/
_dle9H
TY4We3
TrJt%H
H 9K u3
H$9K$u+
H(9K(u#
H,9K,u
H09K0u
H49K4u
H 9K u
H(H9K(u
whkGEH
UUUUUUUUH!
33333333H!
8TRUEt
8Truet
8trueuT
8FALSu
8Falsu
8falsu
W:l`[
12.970+>H
D$"=5H
Z,K 4o
7INIK1
#KQ>Z[
a_i bH
`it"ow7
%.#34$6HH
Fq~]GUiLH
aXidvH
idvblh
EaisVxlwH
Pu`efFc}H
D$"azH
raK'}%6pH
J(H9B t
D$HtDD
D$HtSD
l$ M9,$u
l$0M9,$u
l$(M9,$u
l$ M9,$u
l$0M9,$
l$8M9,$u
l$(M9,$u
l$ M9,$
_ur]\ytcH
o;nl.H
aJ_6m*lH
lSS%<"dtH
D$ %%H
|huaFhH
^FDHDsggH
tVd_ufbJH
_ufbJtanH
abit?cH
jBw.:e
7VH=P1
-*sOYH
H8H9X@
P2f9S2u
P@H9S@
struct {H
3`Iuh1
qF0|\
Q8L9A@
MG8L.H
p8H9x@
*;{{mH
*;{{mO
p0H952
P8H9H@
c+nn%tmH
+nn%tmXEH
MMf_&".3H
_&".3/ kH
^MHpS##'H
+w-r%H
AZ${Q2
$ )"*H
$(#&H
ir< l~a
xc> .H
t.d+7H
od(s,H
+Ps_B,H
o"+#OH
pQcmNs
,(F.$FH
^>YeGt.H
>YeGt.VcH
huxBUM,tH
oun*sH
3lile:`H
0eDlec>=H
LL.geH
LL.ge1H
)ecH.H
c+o/n.m_H
fg5wIntH
AeL~GY
od*%Pam
WSYtuA_
5eFwcal
oW GxH
d xewH
poi5t?
|ecv.H
:ucalqH
hw;cBR
gCnlycJ:H
CZ>K7wKH
Z>K7wKshH
Nt&o7$
Z;U!wt aH
oR?e9tMH
]knon2 H
he/6tl9.H
6tl9.V9
LAn+)H
PPH9SPu
PXH9SXu
Z(H9F u>
\$0H9S0u!H
Q8H9S8u
Q@H9S@u
IHH9KH
l$8M9,$
l$`M9,$u
l$(M9,$u
l$@M9,$u
l$@M9,$u
l$8M9,$u
l$(M9,$u
l$8M9,$u
l$@M9,$u
l$0M9,$u
l$@M9,$u
l$@M9,$u
l$8M9,$u
l$0M9,$u
l$0M9,$u
l$0M9,$u
l$0M9,$u
l$HM9,$u
l$(M9,$u
l$@M9,$u
l$8M9,$
l$0M9,$u
l$8M9,$u
l$8M9,$u
l$0M9,$u
l$0M9,$u
l$0M9,$u
l$@M9,$u
l$@M9,$u
l$0M9,$u
l$@M9,$u
l$0M9,$u
l$8M9,$u
l$0M9,$u
l$0M9,$u
l$0M9,$u
l$0M9,$u
l$0M9,$u
l$XM9,$
l$0M9,$u
l$8M9,$u
l$0M9,$u
l$@M9,$u
l$@M9,$u
l$(M9,$u
l$(M9,$u
l$(M9,$u
l$(M9,$u
l$ M9,$u
l$ M9,$u
l$(M9,$u
l$(M9,$u
l$(M9,$u
l$ M9,$u
l$ M9,$u
l$(M9,$u
l$(M9,$u
l$(M9,$u
l$ M9,$u
l$ M9,$u
H H9K u(H
H(H9K(u
H8H9K8
RxsDe|etH
tjfup`ZWH
u<ronmLnH
<ronmLnQH
vis`_[
Januu!D
Z070u!D
2006u-H)
time.DatH
time.LocL
time.LocH
ocation(H
time.UTCL
Mc$$M9
Mc$$M)
8WITAuP
t$Ow5M
;nullu
tiN;.
(d 2!H
(d 2!c
@6Tp<v
w?n.rES;H
B/aLpkW
< nzoH
nzotan+H
t!uzxH
i6~QL]txH
]tx_`aRdH
ar_M}DmeH
ClbLKSdH
'rk|nwGgH
gd*LgEndH
aQJ**imoH
e[rd Ho:H
@6d2Ti5CH
StajdH
DpTuT%H
lM.qtqH
frXOSimjH
]ssi 2 H
uK$$d7NH
TuWe_!
VHsiTlBiH
HsiTlBimH
uILVftGdH
fZeoYH
Vnl|nvnUH
07T15:[;H
7T15:[;
2'H07%00H
R{:umH
hZ2C+H
$;.S-OH
#;f`OH
mn+{uH
mzNn|H
x8H9{8
l$0M9,$u
l$@M9,$u
l$@M9,$u
l$PM9,$
l$@M9,$u
l$@M9,$u
l$0M9,$u
l$0M9,$u
l$@M9,$u
l$8M9,$u
l$(M9,$
l$0M9,$u
l$(M9,$
l$(M9,$
l$0M9,$u
l$0M9,$u
l$@M9,$u
l$0M9,$u
l$(M9,$u
l$(M9,$
l$0M9,$u
l$0M9,$u
J(H9B t
t$hHcX(
;filet
;tcp6uV
;unixu.
;consu
;udp4t
;udp6uy
l$(M9,$u
l$(M9,$u
8..u[H
?fileumH
8\??\t=H
\$ 9SXu
Q\9S\u
L=CrLAt
|MN6'|
xPH9{Pu~
xX9{Xuv
x\9{\un
x`9{`uf
xd@8{du\H
l$ M9,$u
l$0M9,$u
l$0M9,$u
H 9K u
H$9K$u
l$@M9,$u
l$@M9,$u
l$@M9,$u
l$@M9,$u
O<AxOXDEH
D$ N5H
0%&3456
%&3456
~>rTL)
>4.0 1
s.r9ng
#tci)LLFH
tci)LLFRH
o[>ty.`nH
'nhiW /cH
f4cuTQn
H@rnGr\wH
:kneg}t[H
WYUunNH
8n<OwG
l$PM9,$
l$PM9,$
l$PM9,$
l$ M9,$u
l$ M9,$u
l$ M9,$u
l$ M9,$u
l$ M9,$u
l$ M9,$u
l$PM9,$
l$PM9,$
l$PM9,$
l$ M9,$u
l$ M9,$u
l$ M9,$u
l$ M9,$u
l$ M9,$u
l$ M9,$u
pe[ tiH
40/>.CB3H
f rGf?_H
l$ M9,$u
l$ M9,$u
x H9{ u
;nullu
<Ot-<XtL
_e,aAi';H
bIyV[iynH
diii3w|nH
3vuswv~:H
c%kpMNH
{nxewxbvH
7-vBn H
l$0M9,$u
l$0M9,$u
l$(M9,$u
x8H9{8
nta|_w
nf]firdnH
9mtimu
8pathu
:path@
>pathtS
8gnamu
T$8H)B
aLA./bs/H
arb A[XH
oYds<sh
%iFo)k
Gphp=zyrH
p=zyrOX.H
weXBJI
Le%czfmH
`~`V/O
T$0H9J
l$0M9,$u
l$0M9,$u
l$@M9,$u
l$8M9,$u
l$8M9,$u
S(H9P(u
P(H9S(u$H
SHH9PHu
P0H+P(H
P0H+P(H
W0H+W(H
P0H+P(H
p(H9p0
\$@H9H
P(H9P0u@H
H0H+H(H
W0H+W(H9W
W(H9W0~)H
bEQiC:@wH
=;0Q(=
nJ% nH
PXH+PPH
H@H9HX
WXH+WPH
bLiZ9:
dRllA>u9H
luT]L@H
trbH)
D$(H9N
H9H sJ
I9@ sML
GxBntdMtH
oBgla("
l$ M9,$u
l$ M9,$u
l$ M9,$u
H9T$ t
L9L$Ht
.]}tNCEHH
tNCEHvp^H
Z(H9F t
l$@M9,$
l$@M9,$
:writf
l$ M9,$u
%/V/sH
D$ FSH
D.BU0=H
Yc;:lH
l$XM9,$u
T$0H9J
<$tI<&tE
r8H9Z@t
rpH9Zxt
8..uXH
8//uOH
J(H9B t
l$0M9,$
l$@M9,$
x @8{ u6H
{0H9x0
{PH9xP
xY@8{Y
{xH9xx
D$>%]H
D$4At1
D$^u8T
57lR(b
B|h;JH
rnJ3ssi
D$"nzH
)C#dBH
/D0[]H
VepmUjvuH
pmUjvu_hH
tM_KGyuXH
[n8WmIkpH
mIkpr{oeH
d_.Dw@o^H
,(iVk?L&H
\c}e)s
5D()!qM5H
ZOe_jyH
_jy#~"[_H
a9m&6:slH
KGW\?n\YH
IZYerveWH
eWRRanU?H
rdwZwv
l$(M9,$u
l$ M9,$u
l$ M9,$u
l$(M9,$u
l$(M9,$u
l$(M9,$u
l$(M9,$u
l$8M9,$u
l$8M9,$u
l$8M9,$
l$8M9,$
l$8M9,$u
8paniu6
8ignou
t$XH95
t$`LcJ
lsscroprH
croprot H
l$xM9,$
l$(M9,$u
l$@M9,$
l$pM9,$
l$(M9,$u
T$0H9J
dqlglH
dqlglSixH
ohCm^msoH
m^msoxO`H
ntaOX,H
ntaOX,&H
MM G5DBH
H9t$H}
r}ex
vu %hi%PH
tHT'YH
PhH9Shu
T$XA82
aHM9aPuUM
P(L9H8
:p:2C9GH
s(H9K0u
PXH9SXt
s`H9Kht
H9SHu7H
PPH9SPu-H
APL9AH
D$p H1
D$\K;1
l$ M9,$
l$ M9,$
OHI9WP~
E9L$0vPM
E9L$0vSL
E9i0v3L
E9i0v3L
E9i0v3L
E9i0v3L
l$ M9,$u
l$ M9,$u
l$ M9,$u
l$@M9,$u
l$ M9,$u
l$ M9,$u
8-infu
HhH9H`u7H
H9Hxu*H
protu f
t$89|$8
L$H9T$Lu[H
D9D$`~
D9D$PA
D$@D9L$@~
*7.-(k
S'Ax~H
U<Zous8mH
d)Yie;>H
kp=KtH
edM>k2CdH
>eY^W1
cW$P a0
\$(8S0u
I8H9K8
{(H9x(u6H
T$(H9J0
T$0H9J(
|$09w0uEH
Z@H9G8u3
\$08SHu
QI8SIu
IPH9KP
l$ M9,$u
l$ M9,$u
l$ M9,$u
l$ M9,$u
l$ M9,$u
l$ M9,$u
l$ M9,$u
l$ M9,$u
l$ M9,$u
l$ M9,$u
l$ M9,$u
l$(M9,$u
l$ M9,$u
J(H9B t
paociywH
e3)u?H
|$0H9w
D$(f9P(u
P*8S*u
l$ M9,$u
l$0M9,$u
8grouu(
8packu,f
8protuKf
H90u^H
H90u0H
H90u=H
H90u0H
H90u=H
H90uEH
H90u=H
H90u=H
H97u2H
T$HHc:
>protu6f
r-LpN<
r-LpN<
~hH9Vp~
%v|cAH
%]valeeH
`zvclEjdH
dspNrwi\H
.SXK d( H
$qC ;mpMH
mpM&o/n H
arX:alH
,y`t}%
}Jid]H
0S4!^A8!H
D$ B3H
j`p1srH
T$0H9J
N(H9F
|$0H9wH
ZhH9F`
|$09wp
T$0H9J
Z(H9F t
l$`M9,$
l$(M9,$u
l$PM9,$
l$@M9,$u
l$@M9,$u
l$(M9,$u
l$(M9,$u
l$(M9,$u
l$(M9,$u
l$HM9,$u
l$ M9,$u
l$HM9,$u
l$(M9,$u
l$(M9,$u
l$(M9,$u
l$(M9,$u
l$(M9,$u
l$ M9,$u
l$ M9,$u
l$(M9,$u
l$(M9,$u
l$8M9,$u
l$8M9,$u
l$8M9,$u
l$8M9,$u
l$8M9,$u
l$8M9,$u
l$PM9,$
l$8M9,$u
l$0M9,$u
l$8M9,$u
l$8M9,$u
l$HM9,$
l$0M9,$u
l$(M9,$u
l$8M9,$u
google.pH9
EnumOptiL9
EnumOptiI
FileOpti
FileOptif
EnumOptiI
FileOpti
FieldOptL9
EnumOptiI
FileOptif
OneofOptL9
EnumOptiI
FileOptif
EnumOptiI
FileOpti
MethodOpL9
EnumOptiI
FileOpti
EnumOptiI
FileOpti
MessageO
EnumOptiI
FileOptif
ServiceOL9
EnumOptiI
FileOpti
EnumOptiI
FileOpti
EnumValu
eOptionsL9N
EnumOptiI
FileOpti
eOptionsI
EnumOptiI
FileOpti
EnumOptiI
FileOpti
EnumOptiI
FileOpti
EnumOptiI
FileOpti
yiJm:|cRH
l$ M9,$u
l$(M9,$u
l$(M9,$u
l$(M9,$u
l$ M9,$u
l$(M9,$u
l$8M9,$u
l$ M9,$u
l$ M9,$u
l$(M9,$u
l$8M9,$u
l$ M9,$u
l$(M9,$u
l$8M9,$u
eq?WstpdH
.hasC(
A+3O #H
/$-2*/H
l$ M9,$u
H3T8 L3L8(I
H1T$0H
H1T$HH
H1T$PH
%q>%l oYH
mustLH
_SXH<H
l$HM9,$u
iEAa>kH
Ibuffe6H
kaveXF>
nalXto
s:ho/zwuH
o\$ fE
o\$0fE
o\$@fE
o\$PfE
o\$`fE
o\$pfE
l$HM9,$u
l$HM9,$u
q`(_hVT H
PYWZEl[mH
El[ment<H
fi0!)H
#2yO pYRH
O pYRn
>) (31
nDsz1V: H
Dsz1V: hH
:rrg'~ooH
#+%8.H
@)&,85
~d$ fE
ot$PfA
S H+Q H
P H1s
l$0M9,$u
l$8M9,$u
l$(M9,$u
l$8M9,$u
l$0M9,$u
l$0M9,$u
l$8M9,$u
l$(M9,$u
l$8M9,$u
l$0M9,$u
l$0M9,$u
l$8M9,$u
l$(M9,$u
l$8M9,$u
l$0M9,$u
E=,1H[H
e- rdH
MBGfL[H
L[xgiFZiH
R: #o|blH
!Z/czH
iUgomeH
`OcasP]TH
ahULww
id*pai:tH
bc:w(<H
rLzeTH
l>ptic
P8H9S8u
l$8M9,$u
l$8M9,$u
l$`M9,$
l$8M9,$u
l$HM9,$u
l$0M9,$u
l$0M9,$u
l$8M9,$u
l$8M9,$u
l$`M9,$
l$8M9,$u
l$HM9,$u
l$0M9,$u
l$0M9,$u
l$8M9,$u
l$8M9,$u
l$`M9,$
l$8M9,$u
l$HM9,$u
l$0M9,$u
l$0M9,$u
l$8M9,$u
l$8M9,$u
l$`M9,$
l$8M9,$u
l$HM9,$u
l$0M9,$u
l$0M9,$u
l$0M9,$u
l$(M9,$u
l$0M9,$u
l$8M9,$u
l$HM9,$u
l$8M9,$u
l$8M9,$u
\H|9FjH
z%UA{H
"n?urL
:numeu(f
:utf8u
:tag:@
:privuBf
j|h wx/6H
x/6i!it H
bo`YsP
exCcXwntH
wntylZ]aH
gi`_ me
> G?r3+H
n st:z3
>Ejlz1
7kcwj1
sQ0o\wduH
o\wdub
adtn<H
^zeres
bZ4O .
o7 lfUgeH
8QBmxBuH
l$ M9,$u
l$0M9,$u
l$ M9,$u
l$@M9,$u
l$8M9,$u
l$@M9,$u
l$8M9,$
l$@M9,$u
l$8M9,$
l$HM9,$u
l$@M9,$u
Ha/\hH
L$H8L$'u
L$H8L$'u
wqattv|H
attv|}
ohd4ga
9P-25uN
l$8M9,$u
l$(M9,$u
l$(M9,$u
l$0M9,$
l$0M9,$u
l$@M9,$
l$@M9,$u
l$8M9,$
l$8M9,$u
l$0M9,$
l$0M9,$u
l$@M9,$
l$@M9,$u
l$ M9,$u
\$0H9S
\$0H9S
I H9K
8&% A
5:RSMH
l$HM9,$
l$PM9,$
l$`M9,$
T$0H9J
|$HH9w u
^rkplT/
sapM{{vhH
htidRph/H
Fi.)AH
XIYt<3
D$.%]H
D$$a}1
8leaku
T$08J
[::ffff:N
invalid J
d PrefixJ
)'05+*H
VICdPT
D@jVWln
7zl~h1
m9^z4Ji
ldMta?H
x(H9{(uUH
l$@M9,$u
l$HM9,$u
l$0M9,$u
l$@M9,$u
l$(M9,$u
l$@M9,$u
l$0M9,$u
l$0M9,$u
l$8M9,$u
l$0M9,$u
l$0M9,$u
l$0M9,$u
l$pM9,$u
l$0M9,$u
l$0M9,$u
l$0M9,$u
C6>JH
#X_o l]
_eglzqaH
hn]Nldd
X>yV;35
H9P0u$H
H9P0u$H
H9P0u$H
H9P0u"H
!-?P_QOH
SDP"6%6H
1FdURH
UPdQtiEnH
QtiEnklgH
=pH$>$p
[E=,1H[H
[E=,1H[iH
l$8M9,$u
T$08J
D$(uMH
9windu
:andru
:windu
:planu9
:fileu5H
:bindu4H
9solauJf
8fileu
8fileu
8fileuBA
9tcp4t
9tcp6tw
9udp4tm
9udp6te
9unixt]
8dialu2H
8unixt}
<$tcu)A
l$(M9,$u
l$(M9,$u
mmdfsv
q DHpH
om ><H
!uc0SpehH
:CNAMuh
8CNAMu.A
>tcp4t
VB!:-f
l$0M9,$u
bNjadcflH
T$D9T$@
CbZ{3H
8windu
?ipu51
?tcp4t"
?tcp6t
?udp4t
9tcp4t
9udp6u~H
8windu
9listu8fA
<$dial
8tcp4t
8tcp6u*
8udp4t
8udp6u
l$ M9,$u
l$ M9,$u
:tcp6t
:udp4t
9tcp4t
9tcp6u'
9udp4t
9udp6u
l$ M9,$u
:acceuNf
;succu f
:unavu
:retuu
~NrvH)
8tcp4t
8tcp4t
8udp4t
8udp4t
8udp4t
8unixtD
9unixu
listuZfA
D$&filSH
">mkl(%*H
(7&H%H
Uen-Mao[H
dressH
F0_C\T(
x^ceqH
{"Ajan
{Nsv@k
ydelyYalH
Yal]md
ysIsWyreH
r64)iH
N(H9F u_
N8H9F0u:
H9{(uu
x0@8{0uk
x1@8{1ua
@8{2uUH
x 9{ u
x$9{$u
l$@M9,$u
l$@M9,$u
l$ M9,$
l$ M9,$
l$0M9,$u
l$0M9,$u
l$ M9,$u
l$0M9,$u
l$ M9,$u
l$0M9,$u
l$0M9,$u
l$ M9,$
l$0M9,$u
l$0M9,$u
l$ M9,$u
l$0M9,$u
l$ M9,$u
l$0M9,$u
l$0M9,$u
l$ M9,$
l$0M9,$u
l$0M9,$u
l$ M9,$u
l$0M9,$u
l$ M9,$u
l$0M9,$u
l$0M9,$u
l$ M9,$
l$0M9,$u
l$0M9,$u
l$ M9,$u
l$0M9,$u
l$ M9,$u
l$0M9,$u
l$0M9,$u
l$ M9,$u
l$ M9,$
l$(M9,$u
l$0M9,$u
l$0M9,$u
l$ M9,$u
l$HM9,$u
l$HM9,$u
l$0M9,$u
l$0M9,$u
l$0M9,$u
l$0M9,$u
l$0M9,$u
l$0M9,$u
l$0M9,$u
l$0M9,$u
l$HM9,$
x H9{ u6H
,2&, >
D?3*yH
83.JSh|
<0*IQi|
QZ^&A!
$D3T$4D3T$ D3T$
D3T$8D3T$$D3T$
D3T$<D3T$(D3T$
$D3T$,D3T$
D3T$0D3T$
D3T$4D3T$
D3T$8D3T$ A
D3T$<D3T$$A
T$ D3T$
$D3T$(A
T$$D3T$
D3T$,A
T$(D3T$
D3T$0A
T$,D3T$ D3T$
D3T$4A
T$0D3T$$D3T$
D3T$8A
T$4D3T$(D3T$
D3T$<A
T$8D3T$,D3T$
T$<D3T$0D3T$
$D3T$4D3T$ D3T$
D3T$8D3T$$D3T$
D3T$<D3T$(D3T$
$D3T$,D3T$
D3T$0D3T$
D3T$4D3T$
D3T$8D3T$ A
D3T$<D3T$$A
T$ D3T$
$D3T$(A
T$$D3T$
D3T$,A
T$(D3T$
D3T$0A
T$,D3T$ D3T$
D3T$4A
T$0D3T$$D3T$
D3T$8A
T$4D3T$(D3T$
D3T$<A
T$8D3T$,D3T$
T$<D3T$0D3T$
$D3T$4D3T$ D3T$
D3T$8D3T$$D3T$
D3T$<D3T$(D3T$
$D3T$,D3T$
D3T$0D3T$
D3T$4D3T$
D3T$8D3T$ A
D3T$<D3T$$A
T$ D3T$
$D3T$(A
T$$D3T$
D3T$,A
T$(D3T$
D3T$0A
T$,D3T$ D3T$
D3T$4A
T$0D3T$$D3T$
D3T$8A
T$4D3T$(D3T$
D3T$<A
T$8D3T$,D3T$
T$<D3T$0D3T$
$D3T$4D3T$ D3T$
D3T$8D3T$$D3T$
D3T$<D3T$(D3T$
$D3T$,D3T$
D3T$0D3T$
D3T$4D3T$
D3T$8D3T$ A
D3T$<D3T$$A
T$ D3T$
$D3T$(A
T$$D3T$
D3T$,A
T$(D3T$
D3T$0A
T$,D3T$ D3T$
D3T$4A
T$0D3T$$D3T$
D3T$8A
T$4D3T$(D3T$
D3T$<A
T$8D3T$,D3T$
T$<D3T$0D3T$
PXH9SXu
P`H9S`u
8S(udH
PrQ~;H
t$ H9D$8
4bo0cH
0cuiP)C
T$@H9P
i(xR(&
L$p|4H
HHH9pPuDH
d5?r7_H
WHL9GPt
D$@H9D$
8sf]cA
8wmpjA
|$`H9\$hu
*RC wiWhH
emp0y *H
AA[coH
y o_ mMvH
Weny]H
/8=74H
p26$H H
"@$/7@5H
>o{i{1
x509> SH
Cw3'0H
ey ^eH
rs"on %>H
-r\0l)WH
>l$Uk1
aE+>x(
7:0u71
1JcpHDH
>(ZXT1
y[nvzH
Eg^JcQ&SH
us*catW
l[uiC8H
/M,c8.NYH
7fj\ameAH
=L paH
sa (1H
zero
ZC09: stH
lfoNj]naH
:tt)mGt
mif rH
_i`bA#c
53\i4+t.H
T$0H9J
D$@H9D$
l$`M9,$
l$ M9,$u
l$0M9,$u
l$0M9,$u
HHH9P@u H
xB(Z;BH
b,vr,2owH
bB3G H
red(CgUwH
L)@pL)
2-byD1
$2-byD
nd 3E3K
2-byE3K
te kA3K
>E3C4D
expaD3P A
expaD1
expaD3
expand 3H
2-byte kH
Bhac_a
VnsTpRoIH
8=<?>A
8+*-,A
l$ M9,$u
fE9,$u
<LfD9x
H9Z uw1
k'CXci
^WdHFZH
Liet}Ke?H
~xchbnyeH
D$"tls1f
}y{aSH
@Slgt<5SH
+n_HG:F
#Co@.k
\[keyH
\[key(
'!(&
s:F=rbH
m:17hS
^jvu"Y
l}cUt{ynH
>.4=)1
-$3)2H
rer+sel
ed unH
'.l0m#H
>XLKJ1
e<lSng
ey?Hln%
6*r H
s> h3vcBH
chfLnE1sH
sQeXeu
',WL"h6BH
keytH
pps/teH
<TLerLifH
iXat\a\jH
F/0>6+H
2fc1b
Xhext,dH
hext,d
n_!S< puH
/<icPkeVH
rL!:$t
T$0H9J
l$ M9,$u
l$`M9,$u
l$8M9,$u
l$(M9,$u
p@H9p0
l$(M9,$u
l$0M9,$u
l$0M9,$u
xB(Z;BH
b,vr,2owH
bB3G H
red(CgUwH
L)@pL)
2-byD1
$2-byD
nd 3E3K
2-byE3K
te kA3K
>E3C4D
expaD3P A
expaD1
expaD3
expand 3H
2-byte kH
Bhac_a
O:VXid_H
id_cKSXSH
tegP4a$H
DpaDt: H
UsPClSRWH
]`@u^H
S H+Q H
P H1s
wakGEH
rnp&ipdH
0A{3a5(0H
XKJV@fH
l$HM9,$
l$8M9,$u
L9\$`u
p(H+X 1
8H9p8~7H
l$@M9,$u
l$8M9,$u
l$PM9,$
l$0M9,$u
l$PM9,$
\$0H9S
N(H9F uC
N8H9F0u
T$09J@
L$8H9HP}
zxIDAT
T$X)BpH
T$TfE9
l$RfE9
H9QH},H
IENDuYH
PLTEuEH
l$ M9,$u
l_tWi H
we k!oOIH
iWc7l`dgH
l`dg;s|>H
[*MzbHH
D$ RYH
R^EbyA\GH
byA\GJbdH
LMrNESH
[UQTUY
M_OWBPHPH
WHLLLW
emYw!H
UUTGEG
+=F(PF;SH
D$ HIH
}`qhCbStH
)U4&60
HC37:SA(H
(I7%T2\$H
LE{KX^Z]H
\EiInAbEH
Aa`HI~pXH
~pXAFbEKH
UTOR&U
D$"IAH
l$HM9,$u
l$0M9,$u
L9L$0s
tx^ tam#H
_=&KymImH
h|*p?%
hs^OK*2xH
zichpiH
w0ded
:wgu|H
:httpt@
:mtlsu?H
:httpu
6Se0PTtIH
T$09T$,w
fl*dpH
fl*dp|pgH
5.0*3.5*H
!-?P_QO
MvHz3H
RZN=0rH
D$ l}H
YvR!Hv
tD4J-H
>_Yt`H
o;k_^PXH
^PXevalYH
8pm6CeGH
L_{2NW
kow\,<
CvbsHnH
jo@ggOurH
FdyDenUZH
dyDenUZBH
AgoD\kUAH
S\FVTV-aH
-adQoV6nH
e}I'%H
"URati4-H
,$ca)2H
ficatkH
YNK-~H
v&{Cux6
RCSrreH
CSrrenf
Me|^vn
eameWH
oixyamaqH
PgtJInOmH
D["'9l%
["'9l%
e8SmrH
7]TZF1
D$.9WH
P]:jekreH
D$ hqH
oGD)VH
oPTweu
YetS$as0H
tPrK/0H
0bsN.X#*H
ityB_LG
<4Y^X!]#H
SgtVol}pH
peghk~KWH
8@(m9A0-H
(m9A0-ePH
KM"/lH
"/lBB9/=H
hreZdg
D$&F'l
7{@fC1
WIS{]qpoH
odGtY\nkH
:^593MH
e*ame,H
rDfUq`HGH
gTdeQJ@
tDetai~GH
SHlwt``
IsDUgYowH
wcRF@plVH
tAPdreH
D$.OSH
nKYQ[tOvH
OvGLde_aH
cdoeqVl_H
,o,/n7:
'P+*;o
WTPiH9?
[+x[18
>BF)D?H
~(H9z(u&
l$0M9,$u
x H9{ u
x H9{ u
E<;"VE
'/Pe/H
`~d`?a
l$ M9,$u
EecNFakeH
ecNFakeUH
Id[rIb<_H
Ind6hakbH
nd6hakb
\ajAxdYiH
bueeHqKtH
T$09T$,w
ZxL+ZpL9Z`tH
L9Zxt/L
PHH9PPu*
l$PM9,$
l$PM9,$
l$8M9,$u
l$8M9,$u
l$0M9,$u
l$HM9,$
l$HM9,$
l$0M9,$
l$0M9,$
l$hM9,$
YvR!Hv
:>1p5H
E[G[r{I
s.fcaH
&P|N^J.H
7M__G1
|eHo;e
SeF1S>H
locDB\H
egzPoqEFH
qEFewdDQH
t!mpfl
k{KS&.IH
D$ )lH
t&-RJ/H
LV=Q_J
NiEeJ7H
estwdv
=imeIH
/< *;$*
.=5>6&,0H
7<B:@1
m[9%t?
exI()..
n3;ringH
em6\R.)GH
"%&-/.H
<hFKAs
LT: `i
^ot dH
eu Mf\]
tq r}:elH
x @8{ uT
x!@8{!uJ
x"@8{"u@
x#@8{#u6H
eatGn>edH
atGn>ed]H
a_dpoeo]H
nDL~_pReH
D$"a{H
G|^iai
ToNtPaH
H 9K u
H$9K$u
H(H9K(u
H 9K uk
H$9K$uc
H(9K(u[
H,9K,uS
H09K0uK
H48K4uBH
H9K u~
x(@8{(ut
x)@8{)uj
x,9{,ub
x09{0uZH
|$0H9w8u*H
r@H9w@u H
rHH9wHu
l$0M9,$u
l$0M9,$u
l$0M9,$u
l$0M9,$u
l$0M9,$u
l$0M9,$u
l$ M9,$u
l$ M9,$u
l$0M9,$u
l$0M9,$u
l$0M9,$u
l$ M9,$u
l$ M9,$u
l$(M9,$u
i.CW'5
lns-9Q
ClbU}T
=>%LrH
5P2U H
DpbgIH
DpbgIliH
Jg>ng^rVH
GeItODm[H
Dm[JoMbrH
3Yu}C3QH
Jd@W\\aZH
aZwPW4BRH
[eceMeH
ndOwMH
>*GU71
PpiayoMH
MXJ}bcUdH
ooHdjmg
ak^rbqH
efuIteH
UqhoXkWOH
WOsamfsQH
Cont-DMH
wykuY]h
ykuY]h
%|zb2QHH
YBsd*aehH
aehV6i^gH
G\iwOrvhH
gheiT0B}H
PiBmFklXH
msyIogueH
A4?r.='
lOovsxPUH
OovsxPUxH
n~zc`m\BH
1:^5RQ72H
^5RQ72(#H
ELnZruEhH
D$"tdH
43mcv+
l$ M9,$u
l$ M9,$u
HcD$HHcL$PH9
Hc|$THc\$LH9
FXU_WwQ\H
9T$(t(H
l$8M9,$
l$8M9,$
l$8M9,$
l$8M9,$
l$8M9,$
@8{ u!
x$9{$u
x(H9{(u
H H9K u
H(H9K(u
Y"=0WH
5(CS3H
fjAledH
Q4admH
D$ tyH
e{4-hvacH
s8?H!b
z%UA{H
:utf8f
:tag:A
L$P}7H
H95&||
H95f{|
EfcQ H
?bZPiXuUH
bZPiXuUQH
eALifAerH
Hp:?:8
5W)hD<
d9DlvU`uH
`uyc}tesH
InknM^nRH
nM^nRX
u^SPteH
7TFPJ1
3thBtH
uTexteH
8QBmxBuH
l$ M9,$u
l$0M9,$u
\$`9\$Hu
T$p9t$Xt
l$8M9,$u
>WOJ\1
|izg:
l$PM9,$
l$PM9,$
l$PM9,$
l$PM9,$
l$HM9,$
l$PM9,$
l$PM9,$
l$PM9,$
l$PM9,$
l$PM9,$
l$HM9,$
l$PM9,$
l$PM9,$
l$PM9,$
l$PM9,$
l$HM9,$
l$PM9,$
l$PM9,$
l$PM9,$
l$PM9,$
l$PM9,$
l$HM9,$
l$PM9,$
l$@M9,$
l$PM9,$
l$PM9,$
l$HM9,$
l$@M9,$
l$PM9,$
l$hM9,$
TldHm"H
MKL42MAH
9TolcfV_H
>o@TE1
0AL_NH
>+6941
KDo_akTpH
~>I#VAL
>I#VAL
K/XITH
L<~d foH
Da|_MXS
3EVEBEp
Tw{E@ElsH
}feITH
OCATIH
OCATIOH
ZWPTAH
erv2etfSH
s_U_ITH
$2!(0
l$`M9,$u
D$pxV4
3E=,1HH
D$hxV4
D$PxV4
D$hxV4
'RMCenH
e3)u?H
tt9ImH
8nou91
SS:idvH
olurjes~H
CZG<%"H
`scedc[H
srcfwvzcH
dzwc;#~5H
s-cbmqH
-cbmqm
ts's*lt_H
Y@ Nine'H
_fhenq_IH
henq_IPFH
tab`f\[AH
Af-cDo
rggaj_oOH
oOf~gymJH
lpi stctH
tct{ank?H
]SRjH
%,-dhl
-&(o#wH
Bk#`;H
Q0H+Q(H
Q0H+Q(H)
RZN=0rH
YVrfo`F_H
D$ npH
eivefuo H
vefuo @
\dc %vH
acrha dqH
ha dqMfSH
RGnm} DvH
o=2) a
co_x# \oH
# \o\zH2H
xGLe:i!vH
x`gd gfH
.v:YS
6lUiCd}
%1Np(
>dd`X1
x(H9{(u7H
<$krbtu
#Xh xH
F=%Oyr
_z"+mH
%h5{>8mH
tU %vH
K@B<os[[H
,e4.aYphH
e4.aYphQH
nuM)rw$ZH
7nx-b1
SnandlH
SnandlrH
7kbkI1
d5in t0
B%;'HH
A@E/1&
&+1+++H
+Xhqs7f
Hcr[Lin
E ]Z{XEVH
cyRptin
8)@bgH
bgIE7XJ/H
~Xv>/j
8A,;;0(
m1ponH
LEroRTunH
Tun[xjy]H
iGiWnaxH
Antivirus Signature
Bkav W64.AIDetectMalware
Lionic Trojan.Win32.DeepScan.4!c
Elastic Multi.Trojan.Sliver
MicroWorld-eScan DeepScan:Generic.Trojan.Tango.Marte.I.DD280D02
ClamAV Win.File.Sliver-9942542-0
CMC Clean
CAT-QuickHeal Trojan.Multi
Skyhigh BehavesLike.Win64.Sliver.wh
ALYac DeepScan:Generic.Trojan.Tango.Marte.I.DD280D02
Malwarebytes Generic.Malware/Suspicious
Zillya Clean
Sangfor HackTool.Win32.Sliver_Implant_64bit.uwccg
K7AntiVirus Trojan ( 0059f2e01 )
BitDefender DeepScan:Generic.Trojan.Tango.Marte.I.DD280D02
K7GW Trojan ( 0059f2e01 )
CrowdStrike win/malicious_confidence_100% (W)
Arcabit DeepScan:Generic.Trojan.Tango.Marte.I.DD280D02
BitDefenderTheta Clean
VirIT Clean
Symantec ML.Attribute.HighConfidence
tehtris Clean
ESET-NOD32 a variant of WinGo/Agent.LO
APEX Clean
Paloalto Clean
Cynet Malicious (score: 99)
Kaspersky HEUR:Trojan.Multi.MalGO.gen
Alibaba Trojan:Win32/Sliver.85a60add
NANO-Antivirus Clean
ViRobot Clean
Rising Clean
TACHYON Clean
Sophos ATK/Sliver-B
Baidu Clean
F-Secure Hack-Tool:W32/SBeacon.A
DrWeb Clean
VIPRE DeepScan:Generic.Trojan.Tango.Marte.I.DD280D02
TrendMicro Backdoor.Win64.SILVER.SMYXCFWAZ
Trapmine Clean
FireEye DeepScan:Generic.Trojan.Tango.Marte.I.DD280D02
Emsisoft DeepScan:Generic.Trojan.Tango.Marte.I.DD280D02 (B)
Ikarus Win32.Outbreak
Jiangmin Clean
Webroot Clean
Avira HEUR/AGEN.1366847
Antiy-AVL HackTool[VirTool]/Win32.Sliver
Kingsoft Win32.Troj.Unknown.a
Gridinsoft Trojan.Win64.Agent.sa
Xcitium Clean
Microsoft VirTool:Win32/Sliver.D!MTB
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Trojan.Multi.MalGO.gen
GData DeepScan:Generic.Trojan.Tango.Marte.I.DD280D02
Varist Clean
AhnLab-V3 Trojan/Win.Sliver.R598949
Acronis Clean
McAfee Clean
MAX malware (ai score=89)
DeepInstinct MALICIOUS
VBA32 Clean
Cylance unsafe
Panda Clean
Zoner Clean
TrendMicro-HouseCall Clean
Tencent Win32.Trojan.Malgo.Vmhl
Yandex Clean
SentinelOne Static AI - Malicious PE
MaxSecure Trojan.Malware.300983.susgen
Fortinet Clean
AVG Win64:MalwareX-gen [Trj]
Cybereason Clean
Avast Win64:MalwareX-gen [Trj]
No IRMA results available.