Static | ZeroBOX

PE Compile Time

2024-01-28 08:02:33

PE Imphash

de41d4e0545d977de6ca665131bb479a

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00001000 0x00006156 0x00006200 6.21616759751
.rdata 0x00008000 0x00001748 0x00001800 4.64166957288
.data 0x0000a000 0x00274390 0x00273a00 6.49659868857
.pdata 0x0027f000 0x00000174 0x00000200 3.06296338813
.00cfg 0x00280000 0x00000010 0x00000200 0.151271325305
.tls 0x00281000 0x00000010 0x00000200 0.0
.reloc 0x00282000 0x00000070 0x00000200 1.37990668076

Imports

Library msvcrt.dll:
0x1400091b0 __C_specific_handler
0x1400091b8 __getmainargs
0x1400091c0 __initenv
0x1400091c8 __iob_func
0x1400091d0 __set_app_type
0x1400091d8 __setusermatherr
0x1400091e0 _amsg_exit
0x1400091e8 _cexit
0x1400091f0 _commode
0x1400091f8 _fmode
0x140009200 _initterm
0x140009208 _onexit
0x140009210 _wcsicmp
0x140009218 _wcsnicmp
0x140009220 abort
0x140009228 calloc
0x140009230 exit
0x140009238 fprintf
0x140009240 free
0x140009248 fwrite
0x140009250 malloc
0x140009258 memcpy
0x140009260 memset
0x140009268 signal
0x140009270 strlen
0x140009278 strncmp
0x140009280 vfprintf
0x140009288 wcscat
0x140009290 wcscpy
0x140009298 wcslen
0x1400092a0 wcsncmp
Library KERNEL32.dll:
0x1400092b0 DeleteCriticalSection
0x1400092b8 EnterCriticalSection
0x1400092c0 GetLastError
0x1400092d0 LeaveCriticalSection
0x1400092e0 Sleep
0x1400092e8 TlsGetValue
0x1400092f0 VirtualProtect
0x1400092f8 VirtualQuery

!This program cannot be run in DOS mode.$
`.rdata
@.data
.pdata
@.00cfg
.reloc
uKHcQ<
AWAVVWSH
[_^A^A_
t.ffff.
fffff.
UAWAVAUATVWSH
ffffff.
[_^A\A]A^A_]
ffffff.
AWAVATVWSH
X[_^A\A^A_
fffff.
fffff.
AVVWSH
([_^A^
AVVWSH
([_^A^
uVHcH<
uZHcP<
u!HcQ<
uVHcP<
upLcB<B
ffffff.
AWAVAUATVWUSH
[]_^A\A]A^A_
AVVWUS
[]_^A^
AVVWUSH
0fffff.
@[]_^A^
AWAVAUATVWUSH
ffff.
[]_^A\A]A^A_
UAWAVAUATVWS
fffff.
+ffff.
[_^A\A]A^A_]
AWAVAUATVWUSH
8[]_^A\A]A^A_
AWAVAUATVWUSH
8[]_^A\A]A^A_
Argument domain error (DOMAIN)
Argument singularity (SIGN)
Overflow range error (OVERFLOW)
Partial loss of significance (PLOSS)
Total loss of significance (TLOSS)
The result is too small to be represented (UNDERFLOW)
Unknown error
_matherr(): %s in %s(%g, %g) (retval=%g)
Unknown pseudo relocation protocol version %d.
Unknown pseudo relocation bit size %d.
%d bit pseudo relocation at %p out of range, targeting %p, yielding the value %p.
Address %p has no image-section
VirtualQuery failed for %d bytes at address %p
VirtualProtect failed with code 0x%x
Mingw-w64 runtime failure:
__C_specific_handler
__getmainargs
__initenv
__iob_func
__set_app_type
__setusermatherr
_amsg_exit
_cexit
_commode
_fmode
_initterm
_onexit
_wcsicmp
_wcsnicmp
calloc
fprintf
fwrite
malloc
memcpy
memset
signal
strlen
strncmp
vfprintf
wcscat
wcscpy
wcslen
wcsncmp
DeleteCriticalSection
EnterCriticalSection
GetLastError
InitializeCriticalSection
LeaveCriticalSection
SetUnhandledExceptionFilter
TlsGetValue
VirtualProtect
VirtualQuery
msvcrt.dll
KERNEL32.dll
?#8,38
I. #;42%
[$)>*7@
!8[Z>\=8
X.$4=^>
CZ6B5=<P?'5
[Z>]MU$2
<67W-$P*
275%)F(
L"*H-4:E.Q;
<"0>C$
*06*!2
W!>>QC4
U?< 0>
* >59)C2
S=S2#U
9*T<<
K$L")%
^W=/$0109?:7W/
6.?,N:,[N3
G95N6-0 !
:>V0&
^;221/"
91;98.(
P3==B
5C>;7##)
=07G#2$"<
E]\<264
$4*.9]_:,;E1
.619.<4
W>%OI'K
041"%1
4F9'L8-
21VP P6#
4<0M,+
]7["I
>1NP ^
M'8%)7>4
18?)8";
:59%65
/ >=:<SI
=/15&Q
5OI\>0
6-Y'2W%T%<
6]4*W;$
#0K3G!:5
;W.]49
@"7_*'8
A<2O/
>;;&%^2
,C-<T?
>!#5^A1
3.;!T,ZV#_
@'.]50[9
G'7+.H+
5)X:<.,/*
IBD_5
76[".1
U::!.7:
^)F'7B
6E*A09
24 "3I
W0U9%$?
2D+?N
<S41*[89I%=
%A. S.JY 3
'.!HI
DYC1'3
A_)WR/!
(?\0;Q
M=+8"+A
\$;77
)7(2Y0P$<8
)%3@+&
QOE/$9
"8086XUE
#'('V^P
2+9;&<
)5'H7)$
J>.3/2Y4
:+^.8.,7/;
5FK#;,H
??^$?!
/3+-0Q%
;WM,9/EU
3+>%WP0
;)>I<,
OB ??-
T6;;8$
[<1M8,,
9/6;T@=Z
7-'&6(G
RH]?)8#1>
#""%4T00
S%4M41
/3.,9
[(TD2#<
-H"#;??$"
@(P2!7&
270%RB+8
W'D'(&.?-]
)\-'00E
-!$>R43#
N>W0-ID9
X.'=E&Y ;0
"#3'0 _
X!PY=4QLI
M .J)HF(
B[#>$L
9[$"SE2
5T13C1'
P152K
F0:8^'
CJ7 0Y
%*6<+-!
8:Z,'7
WEWG,E:%
%<(K)7'
/-!+_?
?(=$K*YA',
.R>MQJC
MZ>U>
M;3E((#
7_.SD
4!6Z0E
\>1 \68Z
6])AJ'
K3-$*SG
N91ZSB?
B,7-G3.;>7
E94HM
=W6:TV(81'#;
O!XA6P!1
7]5*F1
43+'7,M<Z[
!#R@99;.D#*
Z[98*L7,6
19,@L'
+V;(!,
?N%,C8
:+AO .
4>-H&
9/H?315
/ 0FU<
C0 ^&
&[%^,X/
< !N^T; U/1;5
%"GJ*,8(?T
[J4'$3
8Q>7W
G3M8/U+
_+1U:#
\NU2S.6,?
J4>^.Y<&
)97E9HM'
4V7K%+:
'+1:/#4
4_#,)&'0B
R1F';;\
U M13A
<,'!A$
&'D3VR
SHZCV3
."#(-8
>.Z)<EHS
)I608?*
6<ZU1/99
?3\>49H+N
6:5=$;"
-;;*7'V
,./;%?
T+&,-IO
@Y.01)
%%;9J?<[3
12%-,.
+[7B@U$
I+=):(
"9F(!+
W"9Z36W
KE=A=1>+8
@/I3="
FY6".S
=*4$/ !3
8-<<I6
1"8_/
=23UE?Z
@#0R@
:-&8F7,
9&4T(W
08=A]+$
+0I#"\,=
D4PSE#
6KAY2)
9RQ'(.7
^\IU!4
1!E$ <>
!)-"HJ&
3*P=@V@/C
/*-";.,
-=S!>5
+"-4,+
+<'PM[
I"$].6 I
"RE(8X
TY@8<MC,
]5PM9P[
L17,::82[Q
<W"3*3
]U&-@]01Q;59
>_)5,"
7W>/L[%?
";1)1!
]%!M*
/X6E#R
'9/9:4"#%(W
;'3K"3
LDV7S+:
"*<)Z2E>
&[ 3.
!-.7B*
"^XN%O+
+=J0'2
^.PVA/+Q
<">#=9$>4# ._1
2Z)_<%2
$IM;*-Z
*-1C+( F
"<=24;3
*Q^=QNB
:.Z?G1
#:"56;$92:?4AABS#*
UR#[?'
-# K (
,2& $U<
;,? ,MA3'
?,",,^"
'M- U&
&BB$./#<
?W78.>
Z0)B?Q1%&"5
<-<(/J
L#63##91
G:M!*+
O$Y+=$
3+^3GF:)U5>
S2V4H.1
$4UA+6?C3I>
5=U^BRS0E'G
7/)05
\Q/)K&
37T;,<
<6?-8![P
83A!P5(O
(:+I,2>+!*M
T2\51Z
4TE41$
B80?: ;
AH2Q%7
:Q< 3?%C&T_
V6AW."
N-?:P+"0
.6&2Q
$ RS"6?&+K
++7S^
C6:/!"
NE@CI7
C1 "<:Z[
2>0)'J*0
0#%]. +
0T%8>P(0
5#O V#$(?U
W;! &"
'*&%)
UR)H*H)
%8$M+=7
!&:/0/=L3C
J"'&:4
$46I**1
=O<845
'EQ_ 6TA(Y
3>?3BK@W
>0ZS=6.
9-N% 32
=>&B[YK
,I!!,8<*
#':6,
G>B_.N
(6<%#J-
0B71#
IUM>^"
<6#2B5V)
_^-^=U$
"+!;ZB
(-6 9%
=JBK>CL
[P :P,
,11<?*8$7_
43;0OM
::#? >
!^*_PZ@
"Z)7B.-U
2.):9[
*<]+V-<C
1D")5C=;6
2"$<-%
$0V5G9
Z<)73:=
&++G=;8
&,-=\9797
R M*7==9&X
2O091G+
+83',.#7
Z#1DR[
(,3W*T[
??]M%O
:)?,<
0D4016
.1F@B(:1
IE7/ OH0
-8#G.QQ0)"(%
=!+7C"
["/(/N?
42(#-1
!4X5><+
C*+2>1)
"-_&!&U
0<""U;-
5#(9>
W,&,D%=+
O"N #(
EK5@^P(@$6Z+?(
/"6#
"*+N>9L
R]$)1(
."21;"
F?E*_!;L
0<8$;*U
P[(8=?3@")EF7PV?
WE:;*B
L:(6&!
%Q_Q$
T)K)HI
#Z/.3-/L'
3Z:Q 6
P?V%;=
5?<;7%%
,#>]"$))"K
I19BP'I
/!=*P0<
R2/:%6
K<W?W!##
/.5K:6U
S+3D6&_
##DJ,KU?+
6X?;S:*\P
9=8<\M@
W>]^CI;"[<"1
!'!."WF
W,FH&E,
/2Y)3P0<T
8)B695$
QQ6A&>-;
Q4))#(
:*+==/
$M*704
'WM]CO
E$[7\&*(
["08"L3
$,!*2&&Y"
:9^\.!
.5 "36 2.,$HC&J3
R4ZF:T>
?9 ?F7
)34G8)LD
<9[>IV
")V ;'EC
(X)M]5CL<P
S*>(Q9C/+;
:/5&P')#?/#
81 5,'$'#'
Y2,U^3-(
_.<4&7
[<1*"=
06:%$M
5^\3&RW
*"29;;
@R.*61L
/1:'(+'V<
1[HFY1)
E\</#I@5
5<^.AN9(#*,?"5M
48-:-7
:32->0UQ
Q;+9"E
%/$!;?=,Y=
<U#(8]=
;;9@8V,7=
&7W<T7
DS$2[V
TRED7#,"<4%;0:
%,!" ]
IFPA@W
_UH&..'
QMG]>9J6#*6
2L$(,8/$V
8*^139))
#0-Q2=
N]U4G7>S/F
BRB[M
!<-5)/
D::#0F
=75?N8%1
"5!3%.
\P-H9>
0\,Q;6>6
?"RL?!5
7EW-\*
O??01)$;
/1B#-$
?,GU96
Z/<,51IT
!!.Z%$
M=+4B*&
:O,.6AV-
>6M)&M:N
BQ*<>I
X9K?C1
>V^'24
-6'5FO
N;H?G6=2@8"
0(,:*!
!'0._?3
<+J4$! Y7
< 6F-.
!,#&;Q3X<.
9+O@.7
CH97+/
<C%:$D
.QBK9/-Y"
Q*VI"-$)*
Z'["8_?20
2P6P2Z]C(H
*7I3'-W5
B""M=9/
,MF'1/
9Z'7Z]
+: 3RT
['EU3,
?5_)%Q1:
5P; !?YC3,
*#92$V.
0>,:<A
^C2JD,+T
)3P#O%78+9
0-#76:?4
D""<22'
3=A$6>
1G6(3':
8/5Q;R
?*'6@\
4 >)1'
2':8+*
M;'"PT/
/8A.UB3
519>K#!16
;1?+]
.#0#^H
\O=<Y
:_!%-@
]))8/]U&*
W)Q0+$<1?
4$^++U=:/=3
]G6-D"
:J599S
#:^+C8,5 (
<.:(8"5
HP(Z>
#,7597
;M_6#+%6'%[U1<+-&
.T[%0U R;.#L5
:B00"=
06)XL23
@<\\?R%
7V'Z::.C2.
=*2I79
$\86_
6"/%^
0PG'/2&4Q>
6+[9:,
&-7&
;V=$&>
]'4"(G-6
:+8L:5U4^P<]
4R?8Y5B
"<5C^!
?1F?B)
E&>C&H
^[^'6[
U#??<#
$@%SQ '
3D'H$33+:/)1
8S8_5I )
8R ?]93'
3#1[#R
<;PCF
7XP;>6
=2W8"(
/;,1+/
H,785
?\G*__0L;W$,'
>2V4"B
7)-[1\
>94-479<
, =,51/*
F,(<:!
<B8,"BSGZ#I+
T3#7T@#$
>9%#9$W3E>:&
#JF0:
?-[[?!
)@7>_W
MK-A%Q%=$P!I6
]7I8&
)D:PV#%*'
HS@(06+
)(3LY42Z3
S.( *51
BNM=[%W+2
U_/57:
@ X>E;
]#AYB33
'6 Q0<'
?21*4%R
Z\N!-3@Q!SB=
"!6*+"
!$?.2&0^/B>#
;C9;=T-
#_&*85;2(1$-$P
"0"_9>
E-H$/,--/,S
#"ZEV,BU
:RFH!3# PB
<98%OY
T7];.#.;-
<K1&2L4
87B(682
9\7D),U
'1"%/S?13
D\%"86
>,*5)$
@<Y5O#:<"
H"59-"
!=E"1^
:=!^)V
.X<#9+$X<U
GY"U)H7
W87B^-U
TMZ;/5
B@E50?
1?@8'Z
(58MUF2_&
3U"G1.&M
R76>(?2"((<
/>.$.T
J2S:$+>I74/
#)I0&7/
%3%_".-
-7//\7
<=2?J0/
PO)0+B
8(9/'+
!"25'[7
)BI8$
W,="8
W.,+7
,8:LZ*
%,XH#7<
XZ@4?>
P"G<45&9
E_29 )@
##T@2"
@B156<!1
$!=/4<
-22-;#6((5
(CAW19
UH3^(
V#4PIF";!X
)&)!*F
XF$QV1
\";-M0
&I0I2@W_;
#Z<?<<=
G25XX0
4/3Y);;(
6>_M--.
%4"="'
-=3CGW%
I0*+$S
#AUXK49
6#4G#K
G,;,0M-;6
2*\SR0.
*2@9PY&I
M4!&.
>1,,00
9\;526@ !R#'&
]95;47
,Z@T3&?
A;+237
K! %(>
N(.,?'Q)Z
#=RB0J'
\(22C7
07,1>&
:3<7LG+(/
X.SQ%$U
YQM89*+>:"+
6^(\Y<
0;3)821,
-T#S7&
ST3'_)2>
4<9=$0
C %+1E
.;@< B7>
3!#6)T@_
&U&6F4+_X
=4+;VPI
CXO26$
))) GD'>6
;],)0
Q)3)8:C
)[3)0/5!8I
=]%14%;
%@!)UI'
U(;)1H
Z=?Y!M
,JC%1I
%BQ) 945)
F2DEZ?&
^*Z7,'
&:#SR%0
=.,0(
0<.'5O
&@Y>Q
>(Q9K
.L1'
4FO'V:
"GW25_
'6-R\6
*@0$V0
KEZX Z
F;Q>S
$;/:70
R*06;$8.=!;
#>^H:02*0
+)[84>>?>
8=7&9
/((495%
&/>@<"@C
F4W!?6<1*4#W
$#UU-*
7<-#>Q@230<[H=/
>:<=*>3
481"32'
BUB^"Q
2) V_#
O%=7/3:$F
P-S Q#[>K(
OCWD-.Q
<./?4C0:
C6XY:F-
*4'OH4
<649BU0
";A3_Z!&
=P3-.'
+_;0,%&
@M=*"%5
,B3,VS
!/.K$9< ,
^X7S"2
9HP6F)'M
7_,3!;%
Q:%.6A
U W16
QH)"5YPT*
M%)/@"
<2*0A,
Q8635%44
B04<8V/
?K"."F
#V*X,+
E[(!"R
*%W6MI
9ZA%#1#OY
7>^#+DK\G
&=3S]XJ
$T"*^L:JHY
!)1!"!D#
"*&/4[
 U?9.
Q/^R<5%M
8/\:$R,
>Q59!?B
.X.12%
-%E$70.
1*>HEA\Q
)C?,!.Z
<',B>4
<3C,7,+4
<PRR%O?(<Z
"!#8=<4
B%>'(:
*>C7'
X@[22T+
UH<5;
"Q<!?]
$-661"
*;9V<!
K"[%Q%
D7US E<
.PQ#:*[
:?&:$]V-PO0E6
;\@+Y,
X--G:P8
WWB@31
39@P!$'G
HG:8)_
?-;2Z"+]*
.%*&#9
)*;J
#SUQ+"L]
)X6!B#1I,
=W6/-1%K
2U/^-,
;L6':&
"$8PQ8'
LB)6,\AZ
6'?C8"
PZ$&I7
5I%:S;
9.B/*F
/?J'2Q(E -*U$-3<
+8D[.%
,Y<2 -"
"Q3:>L
806O 3,
"0H"YMZ%
3/'7<*L%
7T54"K
6R-=W
16; 9!.(8BC+=I;5
*T=&RVA9>0*
(E'T5!@
;',T<3
+'74$]1(M 6:
,\XC6<
Z0W2>%PU ;M
?9">G
5";]#'T9&
X>,L0H
5*!-(0
$9A/U'
:GB8;!
:9=%%78D
\>M3I#E4>4=(P413
!4F.'0
"3=:\1
' W':\
L\3--<
IO@@.#=(H_W
I!^5?H1&
VM]0OB@
0+!9)<
$_1BK8W9
"?>.U;
C*KHKI
W%F ;-(\0
J_YF!R.'
*R<5#$9
Q39)S(<
1P6A/"
02GJ',_!
&-\U(%
!47('QVB
&5!0F5<
3;-FTR'@
7!?4&&7
%E%-4'?1
%6!,>;
M)I!6#%.
6D*R?T3#
_,ZA/Q
!='TB'(!-
56%-K=/
7G1A)-
_6Q-@4
+VL"]53<
'/63(::(
3-H.K>:W]
G.!#FQ
08#UA
3&\3,S
#$Q%]Y
0@@^0I,
U/!3(-+=
&3!U#-
Q M18
>=%262
_,$.^@
7<A^'1C
727I?7)D/$
&/3D2$:^
76 +;
>22$6F
!V#2&:\
Q%>0!>?47N
/8:?F3'
,B74:'!
=%H.3$Q
EOS0/@
<:!-<&
!56;,<!
4)<-?,.<
!3'E8R
Q8!7>4
R0H$ST3
2#N.Z+,
3>IPT0?
&&/I&9
"?_.1'
:IU9A\49G
9?IK0\*3$E
_[/+T
<75"Y1M
=S#M5,
[Y."5(8
Q379&P
+0N1-C
F$,H*H
H#->W
; >=J#
$$:O'!D%25$$X:#3
# I<12
23B< [
O$0:"6?0
,&0;@
]SG9$>
%!6\I;<
%_)<='',
?V,% C
);5@>>W"'
;M06=P
36S8R#H0L?"
5V,+#]%$
%10'.-0
8-Y),<F
C6-!9>
,YNIW#5ZB
G35("$
"58:>W
7-:52+ )BC
V$'!E
%5O&(;F1'
+#<2U++
CB'"30
L-!'%-
,+$95#J(
+<'NA(!6
Z?^$1%(QW
+B]_8:)>
72642O
)_[11Z4, :7
0RL'(3]5T1*
,&%C)]
=(=_%%
.<-H7;
3H%.'E;
,H<D CI
X2UX *
>7":,[
6T,>#3AYGI
+R[;:"
!=$%8C
?3+7&U
"1&.35="S
8#6;'
'JZD=_
(?""@0_
LA+$Y!
;_$PSA
,2M=5;@
C*PV'I:*)&
*0EV0$%
Q1E3'6.
^M0O['
B-34_"
/:2!K!
M82I5,
/70;M[
BI"(\2 [:D
0:*'/
55/+G-
]1=D=7
0^/N)
P/ WX$8
.#)_((
2[S#_'
B( 3@G!59
,<7^9-
,\>:?.
U;A'^'?]
7*^V)B3,
V4R-<1"*@H;<"#
$I4_<<
C.P ?;$
IK@*#V3
/0IE)"W
"=2W;@/
^$S?'$>,
*E67P[?I
+=7U0RF
8Y2C$(
H.?6;U7"8
)4B1 2* /
&*'#'"()
;E"R37HV=^
*,@!$P
"$14-?
33MF"Q
"*$@0:
/+0@=2%8!
&QB#@
-?+&IAD0
**(45;:
!7'"2%T^
<X[);Z
'Z^+<[,
V2;1/
-4@WPP&>
>+8)78
Q%S&-[
W;$16%1
0\---?=
>Z @ $0,
R;01 %
6#4]$!0K
"0[:R(6.
\-1Z00 S0V B
&Q6LI=86<T<0'9G7;5R
"Q#R4&
?+K-J/%0F!!\
,1[8=[V_<'4
7)1XQ.&%J
;@^!V%G
" 0/;5['$,(N
A-')G*
#2""!F:$W2
&:G-[9Z
K7?!%3Z6$:8?
%.9Q$\
V24R$*9>?
+Y)"ALP
]9='AA:P
/$&3+-.;-
?LF93#&H[
7D20+6
0-,(*.
O;=)I)
!=+\3)1:
6X!M2]
L\Y; 7(44
,D2.8 BZ'
*-U72*1
+$")TU2,..8
C1:#2W7
A.F0<'
S./E!#S
. =< %
E/28>7
)_$V,#+#
-]-B=*
*IH\'V$?'
7P<;D&1
][/,.>7
78BH+T
24%7(Z
*(5X,!D\
21Q'["
L'*4L(
L5 W&/
#,'3)$LPT9
8))#17G.&S
.=J"($
"L^K1-7$-
3F$(!E=%'
:#&%+
:8#!6)6&-
L &#:9.3'\3
*$G )?T
"/>BR98:
Q/N$*%
<27(]
!5S2+(
G-/<(QEZ"KF*
;DI^S0
( O!,_
!9JM<7
0<)C P
*C-[ Z>!0P1@
8B"06"Y
(Q5Z]8
$^[# >C1=
'W5+6#+
1AO&52
2E=1UW
0A4#(2+EX
5U#R_;:(5"404
=!P,!.U
/^& \<)
$G=R*#
H;#23K.T<7
!&@B2,!Y.
&%Z@&0
0.<Y(6N3
3%77!(
3>R15+
&GTS\D
??H$73G
;R%6QO2
# =3V5#@
)8382553(&<
<94"8=0;<;
/3?1)'RM&+
Z9:(M6/N^
+XKH'I[
N^;]#=:
?NG;>'
+VF"8+)
T^QF;C_
$U<Y92
/)K!+G
'.8#YU
+4%G60
4??- !
/I::-PK
@(7$()/
W2!S9C
:_="C=
S96*40$)
YQ62A:-36
4CPPY@
FLLZO^T
YXM;)K%
.=-;H/
"5=)3,QI
+I7%1
&0' R<
(2QGO/
'29<K3
"52%&?)
*!VC]0
4?3H*-1
D$6O^.?]
5+Q0DO
7: "82
5S-"&-<(
9(@5_'
)'5 -H
FZ/" !-
&9E[)
<547'7
H ='31
)L/:<6;G
L(+(N;
;' !M2
7R"57]J
7AV-](B#
'C5<'
+*7CB62(X1
C)^2E4G_8
M*4$F2/<
11-5!0>
@&T%+W2)"?
'9?::8Y
=>_ ##^N/(#< .
3'U;+$
:=8=7782
\6[8-(-;(
;+_.F*
;J,VE@
O%YG=3WW
VZ<06<
3@@'T>
]30E.S
0 C1/>6
]**:0'
U?/*MA
7<$Q/GX
!) F9=630
]401(/8!L5
390^X31B
8X^.0.
%+K#/1:-3
",-\G9BK
"' AU0=8Q#
+YNG":*<)8
"6LQ01E)7T
]2-A"*K
>33&)<
5_GZH$
Y1%M?,>Y
!538^_
5-JZ2Z
0;?23U
6Z-G+]
739(0
=8\2:M
:USE%K9K
6"*$'
0.?A2!
5!=X>^)2
^,9%KF9F
HB6"?J1
:PH#??!82
>EH;Y^
#,CN'>$(W:4
>716CC
!IZ^_
(67=5
"'#1*5
5<"=,<
62R6'.85
;FD1V?#48
>$2U0,
[?:7'%)
(3R.:F
'Q%.9L1
;;*7&;2
5O9R6T^C
79>!72
:>#%S)
(P2 W8
3Q#74QS"6R
X&"/4A,I9
0'PESM<CLI
Q*I><4
[6U-,'AP.L&
=9+![<=P
<P7=0
&C)L(#7
%O,$9J
29O2G!
%,]Z199X/)+B
1Z[)_S%
;2>%?_W?
0\M4#:?;
9'.^,/P1
,$--]B<
9Y=_ @-
6#LM'-L
HK@#'+
(:Q$S:XX7
@!2,G)I
I$.8#V
IHL=83;
;&Q/=6
>&!6P/
&+.):
&<=!7:
!ZC-/'
PI:H%^
>+?N $-$3LDH
#A\!^/34?
ZZI8M\
HWR6H]B>.?(-'X,%:,1
Q'T*I*9
X$@$?K
$/7K?MU$5
' OG;
(8\Q#EJH
(47[<Z
P?#4$&
!4@;W'
,;[P&+
=?T<WB
\ 1YCH"
&&9670\
'#]6R/B
:P-S;/:
1'0&=;
2% "!S0
C 2XJ8
5,/1/C&QM/#
_YH)-$)
6.,\\;
!'7X7:
3^J1#;D;1*7
,'64#'(Y+
"/#?"
L&M32,:9#
?3P*(71Q
Q/./3+
"_2<33->9/<4@^>')
(=4+A=]
1VA!(3;$
3^;?15
*)=Y_%
=?6ZJODN
:8F.IV>S$@
'/PAQ';-%W
<Y_N!S
&(C-)@^$
9V=^)0CW4
:7HBH===
:,3EAI?9%
'.]C?>@
3/<H5.
(!.P0,
$7+$@?/
.F1!#&
+ \^MA8$ S
H"7^1@8S-#96C+=
<76UM/1
Z,[+'
;78A[)
+"&'":I
#< /0/)
*?T?R#&
,3>2M=
)W(X2V
)#9P7
[^-$;+%@$V14
.1#5%34%>7
*72[W'
6-?2-;L
/,?Q!>
R3?C%I-/
5>]B)N8-
[Y#8./33
35F)Y93:3[.,/
%&;+?
?149'V>$R
M$,6?_-Z
HC5P*2
BL0^]5;>
Z$%WR_-:8
04*?9 4%-:
&M="06H9_91
O'>>19$J9;4-
5?)%-.
7P7T$)=
K2>2 <*
.'U3R
<WL QVA
D*XUE"
_4 M&V
D+.JK3
>6[/'S+S<N"">
H "YS7GU<
><^>Q;$
-).^<G
T 1+7
Z8Z"H'
<!*_/?
L:'2M4
K;< 1:
C1-#+<;
,+*?/
.-M!R
2=#49I
,HRU,E!#
#1TS,>
6A'12"
/[29G;*
0E]^C>7^YZ5(
-B$Y3<N0
2-/!78
-?!F85&:
A <K8+^\C
ZO>*-C
GMG'9!3
9I+<F1
*./E%?3C#
20)L2
3("34>D/83
'T[LE[[A
>.%*J9
3@,WS6
K=@&Y%)3%2+T5
8*F![--5/
+(!-U&
(8(Z-8
M1+3B$ P>
>.I#V*'K4
28$-V'
NK^$))6
Z<M$/0
X3_JB8
*:3-QB<
S9*0,--\WT")
-0(S?V
>L?\F#F
%8\KI,
#"99D>
$(V[(<
";&<?&-U'
F)32$#%3
[>A+"Q
Q*)5Y
Y2M*,#P6,>
R;6>1(
R: $4B
632!>K"&3G
<KF5,$
H5> 5V
F&!I;N
14==[9
*35-@S?
,A*#3C(
- Z^1*DA
/>%??7-;
S)#$.75!I
6+=T6IV
@(3,"2,1
%1Q/6V5
@:-^3/
(%77<=]:
(<EV.Y76
I\T?!"*=
58%#/U
Y5;!"1T):R0
Z7XZK07-;2
=(P#YP
2*&*Y2#$/V(
%- :'2
58V*,P/
+82?Q
UE(4 ;7W@:
P=:*I3
&%,[+J
H; 26VZ
?U,4^*=
]Q>*P4"
/R!F5H1
0&]!*%
2W&8W,070>(/
)]V,C4
D $/D*H
[(-9>$
_&>^1Q
#:J?;'4
.74.H7
(#-4:V
-17/9;0
AL3&#7[
Q02 *Q)S!T-L_
* @=^V0
)'-";\
YX@>M2Z3
R@;F/OC
(B5?)2B
-2LB6
A"3ED'
!?!,#^
Q32;G9J H
1Q ]<BK=^
7HB7Q6
,@<^L6",\)F
-! @A18
-4OLTZ
5Z.!08D7T3>1+
50OQ-/
[05^7(81$U*WA
)30?.3
3#/?0;!01A
^,%+]+%K0
:[;02@P7Z"
S#/51&N
8276([!V-
!Q&[SU
&64S#&
/*N6&
(Q2+!M]!
F/&[$>,C
&/.8C"%04
,GCU##
# =Q _7H%639
112#2,
1F:R[;O,)
-:ZR&?
A]&?G-
:0=HQ-.1
LJ\J;:+
.5*!?>
=:RP73]
>^O> "
81&R%)&
*@GG(*6
65P3S^<Q7>
11:VUV
X$/9+?
2IE(3T
.+&K*>@
;Z$:*7
U#:8#;0&
F+ $(?&IW1_CL
S#X85W
L2-6169%
5:#-92
B)')+
>0C0;_
?WI#CT
](5F\$
?=(09
'%$01E
!5+1)'
/[^< J
G:9TED>X
<78J#@-.=<
/14-<7V=
57 <!
0-)O@+
?$HP9,;-1
F=G=]#
^2U4.3
-@B)D:W5
[6Z/XH$
B-VO O
<'A_P>
21&_C:
*@39U$
G&H27D'7
=I0-3(;4
N>>M"9
T$"1;#0@;^S
=;R*HV
0G^G-*3
/T=;(9
+A<"W$
B<L!]XL>)6TF
,(/ O9".
+%462
#9!S?3
3L?$./*.1
I=MQ&L)Z
D2Y(,
A0QP'<*
F&_Q+C
$;TQ4#-3
6(:G1+
UE? \U(,JP
!V8;H6
NC^1\ 6G
>8[C$J3&
,S26 -P;?
3<H%F*.?NB .60Z
C\=!K)
5%(7KF;"1.
=" \LH
64/@>(L
8K:7;EVV*@
/>7!%*$
^3\)MD6_8
G?IC5I
>.52864*7
=#. EM
_3(LC6R:
2!7)'D#.$.
_:^#['6$X
>PH">?]
[Q)>(3'(YH
38<"Q&>
I\=>\H;;
%03=,A
*,$16B;V>DM
6LNP3
1E9(5U@
]0U78%U''
W'OA6:
L)W('@.1
N>H1%WB
;'5$+'!34
8'( 0#)
J[^T(>X
1P6$BV6
6'1PT6<
9"L4,;
_Z.%H
]R<)40
<E "59R0D
T\=WDT#5!3
W),O*9K#*B6(
56)Q3;G$<*^5A
B7"!+/"
1 ,48V4B
C8.7J$',3U43
!,I835?;9
\"686Q=
Q02 -R
B+FL+N4
%?PBNF
))3>8:Y
[E +*A
&;M'C#$9)J
65-_,0"
ZXQ_,DX
<$[W3E(
2SQ4';'[!
DK7[^MZ
*.3>@&>
%6@&5WG
6\P!36
&US8/HZ(%,+
_>35>1S4S
*>:H>,F9
V:]Y;@
O!!Y&96'
[$B30_VH.,:
/;/W,-!
[W&L/Q
7:%#]=5B"#
XLAK ?\
59['7/C
3;>/877%,3
_0.$@H[
1K-%>X/G_7Q
&'U->6*0[
#DM3 "AQ)V@=[!*
3569<*
#:V:X/]
I+U8>K
:W,C<4Q
#'B,-K?34
=G23C=2
31(#/0
W-U:>%9
]81(C;F@>
&9,X=&S
)24 =
%?)80
+34.'7''1^3!
41>(%%
7<J 8F
ZJFO7L=
 ?/,"$*
+/\$N98
X0['R1D
CG+CEI3
".;65<1
+,\:3F/
/%P42,S,
" ;&<$N(
%)+=[
P", @$
#*3+'8
R:IUEL
;M/LN"
<+V_:OQ
!>20///W[
;$1F/>!
".ZT)!N4SZY2=
5,M;?C
;27>C*
7'A$<<
YL4" ?
("-L!0;5
F/_5>/"
K<(5Y>7G?
27+-T,
'V#.5HFU)#S'
5%=:&E Y3&.
?<U"@
9>)D%&T((:Y
-#_J) @[
)!]4--2
03&].HH>@+
3:!7E1(
<@8*.6@M
QD6D(YI@(3
0E0W]6
>#3@6(T%&
=?T$.8
&7&P%VF7:
I(;Z9$
:0?R#>%
?!6/-;
%5=40>70\54
\8'CK6
SF'E8L
,4)2!0
34D-<8
_+_-?9
&Q+9*(XO
C2(X>=*,
8<66<
D?<7$2B
(M@\38X
"AX,6B
/?;4(>
D@$U/G4
UP:8 1]W
Y+EQM
!KFQ;'
P(6^*Z
<&;J<I
;1WR45"TZ@8
N?6V O
Q3F3@4
D$07.M4
)Q M^W
O757'GWZ
$VR7%;"[
;8.Z2:
,8#"P),HT
3_?;&]
0==^?+4L3LST+&L4
=3<F6*+G
"%-$=2-'
8$,)8N
+0)=@>
"P "?%
^"UR!7I00
>@#+.8
+-FIMM4X$"
37M]1;"5)
7?<1$&BZ
]:*E?B
% / =^
F7(><)P
8I-RO"(A(
U?%B3?>
?_'(<N:.
7=+1N*M
#?]18D1P
?/??W;V
,9=4.Z
:Q@/(Z.?
*A$-A;
U#%<:Y9L9
087=V)06O5-
0;;$H0,&
CT"(4K;&!
F1_Y#;;
*.,/0P8@
**23&V2
<?<D>.
><V1%
BL):TE
/%S]=L
-90;6RQJI/
P1?Q'6
R;E!9/
#\&\,;
%)>2>"
2U(#8[/[Z2$
L:5)7@Q8(0
K7(YU@
=#075#
3O49"%#7;$SD+
6=C[I)
>V%2&!:
CP73S1
3D8)3;;#;B
-/ /DI
4A?9<)8W
^1Q179
A5[R;N&
@X*N)N
YY4=</
19?@<=.V
.>\!NGNG'0
)-0]J"I>M
Q8>[+<[,^
V HCE5''
M^HP&==
-)7*4(@
5A<76YK*
2S8@:)
%?!J? 3<;
,*" 7TQ+
Y>KZMOZ,,6'$[
$<.VR@
T4,@&0>2
-G'T#9
>)+*42%U,6
N2*Q.#
*Z((?>%
Y1%6(U
!;%%)8\"/C7?"')
'B <8YN
9"<P7$C
DJZ*";<
2,8\=P/!
U/$:I<
0)=8RW
_13=%%W%> ;
"L67D;>
6#UR0'1
%JX;1A
7!>L6"'
:85+11
41XV&
-C^*VZ6
=> #29$
G"<]77C
.=H5%
&!+-"J
?Y"L2P!
HT?<!*?
B9@Z1A
!#&O8=^
^8;%:23%
/I'>&
8L"%$! 0
$L!92'1
5>_%32>
"4;:2.W
2S1=.I:)
3"$3PU(
!%';.R_
[9?44*.
&0#N>+-1+
GP@4>J[
]-PQM?(
&[SKW
-9B D*
T46%WI<[
I3!;<;
/U#D'V
*=X5&]
6'9Z7&
_%C5+S7
9)P.4>:#O
!7;%12
9)8>347
?31]_ ;U
Q0;CU&)4>
GW1G2=
->O%+%
V=6$Q?*Z[_%
-00CL60/
_N^60#
=:-"8.J_
$6R\!
=>L2+=&<U
_MV=:,0+VR
9("Q"51
Q)=='<:
/?M6%4
"Q1=9!4\ RA
Q<3E=X
+*G^P
47/#>'N<
$Q=;^
^9)!4=
]M0>%H'
(*35:
!3P#\6/[5>
3*1-?]
.R5+)>^]
L8*_3A
6]B$5+;
T$2S$*%
+@:+*2[.
07-+/0
64>KG);X\
F%/S*B
NF2:!U
"*VR<4R<]  3
0/*"_<-/M-S
-/KO>)+.;
@-;<(7
P2Z565_8
>'0%\38G%L&;+,
3B62^3
'2?> GX$
%>?$3$
&;\2+[N
:2+91S7=-7%/
1WBD2I
=\* $ (5
^&5%<=@0
=*-M- 3
R<;;#
<.E">#7="
$-=5B#>-X
4PV#*)
9^"=[3
G.Q9K;
"%Y'61C
;],U)<
#%4K%7C
<,'*[0
&!4\>[<
_+VD.U,
Q"3MEQ
9=+8D2
>424^;
UGI3D!
CZ(*(&
7-0&\>
0!A^=8
=@*8P:;
6U/"62^V.
6,$,?)$
&H 69#
:0")A!.;'
S#1B*'N%>
9\CJA24
0<81/-
4G#P'(
'6*]NM#
.\I8<!
=_39IU
I<?760-I
,-'.X6
9VR0>/
D[!S'-(8
#"RW%"+!
V0$-S7
6#&5S*
G913<DUU
%:!*NA>1X
7(+'<[
)226<%)"6:
"0)%F
2L'/5#
B8$5F$
$6/9X;3
)^3B8Z[L3
(Z >?2F
G(12<@Z
$#3C$I
'."Q'K
R_=O;#U$H
\2H[LHZ
<+%^V:Z
U.:.U=
:)>%+
[1" "
I9E/0,
/-\.BML/
K3;%013
3<__J?=(
=9$?%6#
-U#<.B
<=4ID1$:?^
?P.4G;
"PP%M2P
;$RX"-G
EL7,>-D
';!:+R)\
4!=9?0
4)W!)*U)4
\7_81*0Z
W^<941
R4 (;#,!
W-(VIK5#
2_702!
-8-0'=6B4
G.=Y!_
I%H<0.2U;J0
,VU//[(
6 )!%[0
0>Q682/PL
$,!+4+,]:19
L229X 1
J"N/1C%Z5
Q,-"+#O-
4$%0<5
BK&V;
/F@P(,
+$2<.)[^18
#;(QME?6_
F0L50 !
V>U8$
1'J,';P
!OD>"J&
6"44,S
(/=8**
-15-UB,"$
2IZ^O.D
%*)&.+
O6!"%(^:
/1<;F-
):)\+#Z9" /
9 .'#I7
Q; ;;3
(DDW$S
49+?+;
)/7H*$=)7#
%20[S!,
=R-ZX$Z;#;
G;15E<"5
=-.YU[2&
"Z775P
SU,"#'
<T.;.K_+#
!,0HL2
+.=2["
U84>&U<_N
<IH^$-QA
P- L.R92\4
G%C4)4
>&3\D#+
:%!.3>
M5/.2#
%"/HM?
67&M^U
A8*R&&7
JA>S7*
X;3'-\"
I5-=)C
"L)/ &
E/(P?#%<Z
ESP1BO
0+Z.:9!
6!"J O
'/!$"_
X+?+6X-
O; &-'SFW_>+
[S1(!&$
;/#)"':
,+ $'
.(.^:K
3$!$PR.Z6
E>7@:U$,>
6=19".
2>#3[.
]7+9+)-
.[C4R3#:0
W:;0<3
O@+^#$
^RXU56
)W["2
= 5.22
_61B34T
(3/.33X
6;X>$H.
^GP1=
A&&?@:+
4#K$;+E
V')FXY
H<-'?
SA) U#S&
5"9">1!=%
#D2%"U
Antivirus Signature
Bkav W64.AIDetectMalware
Lionic Clean
tehtris Clean
ClamAV Clean
CMC Clean
CAT-QuickHeal Clean
Skyhigh Clean
ALYac Gen:Variant.Tedy.485656
Cylance Clean
Zillya Clean
Sangfor Clean
K7AntiVirus Trojan ( 005af85d1 )
Alibaba Clean
K7GW Trojan ( 005af85d1 )
Cybereason malicious.068514
Baidu Clean
VirIT Clean
Paloalto Clean
Symantec ML.Attribute.HighConfidence
Elastic Clean
ESET-NOD32 a variant of Win64/Kryptik.EDF
APEX Malicious
Avast Win64:Evo-gen [Trj]
Cynet Malicious (score: 100)
Kaspersky HEUR:Trojan.Win32.Miner.pef
BitDefender Gen:Variant.Tedy.485656
NANO-Antivirus Clean
ViRobot Clean
MicroWorld-eScan Gen:Variant.Tedy.485656
Tencent Clean
TACHYON Clean
Sophos Troj/Krypt-ADL
F-Secure Clean
DrWeb Clean
VIPRE Gen:Variant.Tedy.485656
TrendMicro Clean
FireEye Generic.mg.5dec9f02f7067194
Emsisoft Gen:Variant.Tedy.485656 (B)
SentinelOne Clean
GData Gen:Variant.Tedy.485656
Jiangmin Clean
Webroot Clean
Varist W64/Kryptik.LEH.gen!Eldorado
Avira Clean
Antiy-AVL Trojan/Win64.GenKryptik
Kingsoft malware.kb.a.998
Gridinsoft Clean
Xcitium Clean
Arcabit Trojan.Tedy.D76918
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Trojan.Win32.Miner.pef
Microsoft Trojan:Win64/CoinMiner!pz
Google Detected
AhnLab-V3 Dropper/Win.DropperX-gen.R622355
Acronis Clean
McAfee Clean
MAX malware (ai score=88)
VBA32 OScope.Trojan.Win64.Miner
Malwarebytes Trojan.MalPack.Generic
Panda Clean
Zoner Clean
TrendMicro-HouseCall Clean
Rising Trojan.Kryptik!8.8 (TFE:5:puXfYWFTsfG)
Yandex Clean
Ikarus Trojan.Win64.Krypt
MaxSecure Trojan.Malware.121218.susgen
Fortinet W64/GenKryptik.GQCB!tr
BitDefenderTheta Clean
AVG Win64:Evo-gen [Trj]
DeepInstinct MALICIOUS
CrowdStrike win/malicious_confidence_70% (D)
No IRMA results available.