Static | ZeroBOX

PE Compile Time

2024-04-18 03:31:54

PE Imphash

154977cd00315e1cd7a5ff0dceb81b2c

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00001000 0x00029ede 0x0002a000 6.54460589167
.rdata 0x0002b000 0x0000ddb4 0x0000de00 5.70242066368
.data 0x00039000 0x00014e68 0x00000c00 1.9174224063
.pdata 0x0004e000 0x000015a8 0x00001600 5.37148387829
.00cfg 0x00050000 0x00000038 0x00000200 0.468985322301
.gxfg 0x00051000 0x00001680 0x00001800 4.91360741014
_RDATA 0x00053000 0x000001f4 0x00000200 4.23982306935
.rsrc 0x00054000 0x008f43a8 0x008f4400 7.99879120687
.reloc 0x00949000 0x00000688 0x00000800 4.97816193976

Resources

Name Offset Size Language Sub-language File type
RT_ICON 0x00057e00 0x00000dcc LANG_NEUTRAL SUBLANG_NEUTRAL PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x00057e00 0x00000dcc LANG_NEUTRAL SUBLANG_NEUTRAL PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x00057e00 0x00000dcc LANG_NEUTRAL SUBLANG_NEUTRAL PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x00057e00 0x00000dcc LANG_NEUTRAL SUBLANG_NEUTRAL PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_RCDATA 0x00058bcc 0x008ef0d8 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x00947ca4 0x0000003e LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_VERSION 0x00947ce4 0x000002cc LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_MANIFEST 0x00947fb0 0x000003f8 LANG_NEUTRAL SUBLANG_NEUTRAL ASCII text, with very long lines, with no line terminators

Imports

Library SHELL32.dll:
0x1400370f8 SHFileOperationW
0x140037100 SHGetFolderPathW
Library KERNEL32.dll:
0x140037110 CloseHandle
0x140037118 CompareStringW
0x140037120 CreateDirectoryW
0x140037128 CreateFileW
0x140037130 CreateProcessW
0x140037138 DeleteCriticalSection
0x140037140 EncodePointer
0x140037148 EnterCriticalSection
0x140037150 ExitProcess
0x140037158 FindClose
0x140037160 FindFirstFileExW
0x140037168 FindNextFileW
0x140037170 FindResourceA
0x140037178 FlsAlloc
0x140037180 FlsFree
0x140037188 FlsGetValue
0x140037190 FlsSetValue
0x140037198 FlushFileBuffers
0x1400371a0 FormatMessageA
0x1400371a8 FreeEnvironmentStringsW
0x1400371b0 FreeLibrary
0x1400371b8 GetACP
0x1400371c0 GetCPInfo
0x1400371c8 GetCommandLineA
0x1400371d0 GetCommandLineW
0x1400371d8 GetConsoleMode
0x1400371e0 GetConsoleOutputCP
0x1400371e8 GetCurrentProcess
0x1400371f0 GetCurrentProcessId
0x1400371f8 GetCurrentThreadId
0x140037200 GetEnvironmentStringsW
0x140037208 GetExitCodeProcess
0x140037210 GetFileAttributesW
0x140037218 GetFileSizeEx
0x140037220 GetFileType
0x140037228 GetLastError
0x140037230 GetModuleFileNameW
0x140037238 GetModuleHandleExW
0x140037240 GetModuleHandleW
0x140037248 GetOEMCP
0x140037250 GetProcAddress
0x140037258 GetProcessHeap
0x140037260 GetStartupInfoW
0x140037268 GetStdHandle
0x140037270 GetStringTypeW
0x140037278 GetSystemTimeAsFileTime
0x140037280 GetTempPathW
0x140037288 HeapAlloc
0x140037290 HeapFree
0x140037298 HeapReAlloc
0x1400372a0 HeapSize
0x1400372b0 InitializeSListHead
0x1400372b8 IsDebuggerPresent
0x1400372c8 IsValidCodePage
0x1400372d0 LCMapStringW
0x1400372d8 LeaveCriticalSection
0x1400372e0 LoadLibraryExW
0x1400372e8 LoadResource
0x1400372f0 LockResource
0x1400372f8 MultiByteToWideChar
0x140037300 QueryPerformanceCounter
0x140037308 RaiseException
0x140037310 RtlCaptureContext
0x140037318 RtlLookupFunctionEntry
0x140037320 RtlPcToFileHeader
0x140037328 RtlUnwindEx
0x140037330 RtlVirtualUnwind
0x140037338 SetConsoleCtrlHandler
0x140037340 SetEnvironmentVariableW
0x140037348 SetFilePointerEx
0x140037350 SetLastError
0x140037358 SetStdHandle
0x140037368 SizeofResource
0x140037370 Sleep
0x140037378 TerminateProcess
0x140037380 TlsAlloc
0x140037388 TlsFree
0x140037390 TlsGetValue
0x140037398 TlsSetValue
0x1400373a0 UnhandledExceptionFilter
0x1400373a8 WaitForSingleObject
0x1400373b0 WideCharToMultiByte
0x1400373b8 WriteConsoleW
0x1400373c0 WriteFile

!This program cannot be run in DOS mode.$
`.rdata
@.data
.pdata
@.00cfg
@.gxfg
@_RDATA
@.rsrc
@.reloc
AWAVAUATVWUSH
/ffff.
-ffff.
([]_^A\A]A^A_
AWAVAUATVWUSH
[]_^A\A]A^A_
AWAVATVWSH
G D+gHL
([_^A\A^A_
AWAVAUATVWSH
[_^A\A]A^A_
AWAVAUATVWUSH
H[]_^A\A]A^A_
AWAVAUATVWUSH
H[]_^A\A]A^A_
AWAVAUATVWUSH
8fffff.
HcD$PA
ffffff.
Lct$PA
fffff.
HcD$PH
Hc\$PA
Hc\$PA
[]_^A\A]A^A_
AWAVAUATVWUSL
[]_^A\A]A^A_
AWAVAUATVWUSH
[]_^A\A]A^A_
L;|$xL
d$HtQA
H;\$XL
H;T$`L
,3L;d$(
H;\$XL
T$(H;T$`L
AWAVAUATVWUSH
t$Xt-B
T$hL+T$pI
\fffff.
ffffff.
~fffff.
]ffff.
[]_^A\A]A^A_
AWAVAUATVWSH
[_^A\A]A^A_
AWAVAUATVWUSH
[]_^A\A]A^A_
|$`t!H
|$`H;|$P
|$`wRH
|$`L;\$@
4(L;\$
H;\$@s-
D$PH9D$`
L$ w.M
D$xH9D$0H
L$pL9\$
AWAVVWUSH
8[]_^A^A_
AWAVVWUSH
8[]_^A^A_
AWAVATVWS
[_^A\A^A_
AWAVATVWS
[_^A\A^A_
AWAVAUATVWSH
[_^A\A]A^A_
AVVWUS1
[]_^A^
AWAVAUATVWUSH
*fffff.
[]_^A\A]A^A_
AWAVVWSH
[_^A^A_
AWAVVWSH
0[_^A^A_
AWAVAUATVWUSH
H)L$@L
H+|$hI9
L+l$hL9
L$PtKH
H)L$@L
[]_^A\A]A^A_
AWAVAUATVWSH
[_^A\A]A^A_
AWAVAUATVWUSH
fffff.
ffffff.
fffff.
0[]_^A\A]A^A_
AWAVAUATVWUSH
H9|$Ht H
[]_^A\A]A^A_
AWAVVWSH
@[_^A^A_
AWAVAUATVWUSH
x[]_^A\A]A^A_
AWAVATVWUSH
[]_^A\A^A_
AWAVAUATVWUSH
d$`w`H
d$`w`H
|$pr8H
H+t$@H9
|$psIL
#fffff.
H+t$@H9
|$pttA
H+|$`H
[]_^A\A]A^A_
AWAVATVWUSH
fffff.
ffffff.
ffffff.
[]_^A\A^A_
AVVWSH
H[_^A^
AWAVAUATVWUSH
+fffff.
ffffff.
fffff.
[]_^A\A]A^A_
AWAVATVWUSH
[]_^A\A^A_
AWAVAUATVWUSH
ffffff.
[]_^A\A]A^A_
ffffff.
AWAVAUATVWUSH
l$8|5I
T$0tyA
H[]_^A\A]A^A_
AWAVATVWSH
([_^A\A^A_
u/HcH<H
WATAUAVAWH
A_A^A]A\_
@USVWATAVAWH
A_A^A\_^[]
WAVAWH
A_A^_
kL@8o(u
D$@H;F
<htl<jt\<lt4<tt$<wt
UWATAVAWH
A_A^A\_]
x UAVAWH
kL@8o(u
D$@H;F
<htl<jt\<lt4<tt$<wt
|$ UATAUAVAWH
A_A^A]A\]
S(HcS0
S(HcS0
S(HcS0
S(HcS0
S(HcS0
S(HcS0
WATAUAVAWH
0A_A^A]A\_
u3HcH<H
UVWAVAWH
0A_A^_^]
WAVAWH
A_A^_
WAVAWH
A_A^_
WAVAWH
fA9,@u
fA9,vu
0A_A^_
p0R^G'
WAVAWH
@A_A^_
E80t"A
fD94Q}
@USVWH
X @8u/t
LcA<E3
WATAUAVAWH
A_A^A]A\_
fD9t$b
l$ VWATAVAWH
L$&8\$&t,8Y
A_A^A\_^
p*W4H
p*W4H
D$0@8{
t$ WATAUAVAWH
D!|$xA
A_A^A]A\_
L$ VWAVH
{ AUAVAWH
0A_A^A]
t$xt*3
x ATAVAWH
A_A^A\
t$ WATAUAVAWH
gfffffffH
A_A^A]A\_
WAVAWH
A_A^_
L$ VWAVH
fD94H}aD
VWATAVAWH
A_A^A\_^
WATAUAVAWH
A_A^A]A\_
H;xXu5
@UATAUAVAWH
e0A_A^A]A\]
UVWATAUAVAWH
H;\$8u
H;\$8u
fE9$Iu
A_A^A]A\_^]
WATAUAVAWH
0A_A^A]A\_
H9>u+A
WATAUAVAWH
fB94ht
xXI96tSI
fC94wu
0A_A^A]A\_
T$`fA;
WATAUAVAWH
0A_A^A]A\_
t$ WATAUAVAWH
0A_A^A]A\_
D$(H!L$ E3
;D$hsL
WATAUAVAWH
A_A^A]A\_
vyfffff
vyfffff
WAVAWH
A_A^_
@UATAUAVAWH
A_A^A]A\]
@USVWATAUAVAWH
H!D$ H
xA_A^A]A\_^[]
VATAUAVAWH
0A_A^A]A\^
UVWATAUAVAWH
fB9<I}1L
A_A^A]A\_^]
VWATAVAW
A_A^A\_^
@USVWATAVAWH
A_A^A\_^[]
SUVWATAVAWH
A_A^A\_^][
D$0H9D$8
SVWATAUAVAWH
0A_A^A]A\_^[
@SVWATAUAVAWH
L!|$(L!
D$0HcH
pA_A^A]A\_^[
B(I9A(u
t$ WATAUAVAWH
A_A^A]A\_
AUAVAWH
u4I9}(
;I9}(tiH
0A_A^A]
@USVWATAUAVAWH
A_A^A]A\_^[]
UVWATAUAVAWH
`A_A^A]A\_^]
UVWATAUAVAWH
A_A^A]A\_^]
ATAUAVH
L$ fff
L$ |+L;
A^A]A\
@SUVWATAVAWH
@A_A^A\_^][
fffffff
fffffff
VATAUAVAWH
0A_A^A]A\^
ffffff
fffffff
ATAVAWH
A_A^A\
USVWAVH
A^_^[]
fffffff
fffffff
fffffff
ffffff
vKfffff
Qkkbal
[1!qv
y>X,7 l
&Dq3hZE
MuH *u
@o=''o
}mM1dS
IEin$s8
!Z%F3lKpb
O$@?k~
gMnxg{?
 !"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~
[aOni*{
~ $s%r
@b;zO]
v2!L.2
UUUUUU
UUUUUU
=imb;D
/>58d%
VM>cQ6
>jtm}S
)>6{1n
+f)>0'
;H9>&X
*StO9>T
n03>Pu
K~Je#>!
bp(=>?g
BC?>6t9^
K&>.yC
.xJ>Hf
y\PD>!
|b=})>
c [1>H'
uzKs@>
3>N;kU
kE>fvw
V6E>`"(5
?UUUUUU
?7zQ6$
Error, couldn't launch child
NUITKA_ONEFILE_BINARY
NUITKA_ONEFILE_PARENT
Error, couldn't allocate memory.
Error, failed to register signal handler.
Error, couldn't find attached data header.
Error, couldn't unpack file to target path.
Error, couldn't decode attached data.
Error, failed to open '%ls' for writing.
Error, couldn't runtime expand spec '%ls'.
%s ([Error %ld] %s)
Sunday
Monday
Friday
August
__eabi
new[]
1#SNAN
1#QNAN
(null)
dddd, MMMM dd, yyyy
MM/dd/yy
February
January
Thursday
Tuesday
Wednesday
Saturday
InitializeCriticalSectionEx
LCMapStringEx
CompareStringEx
operator co_await
__restrict
CorExitProcess
HH:mm:ss
operator
October
November
September
December
Unknown exception
bad exception
__fastcall
__thiscall
__vectorcall
__clrcall
__stdcall
__cdecl
__pascal
FlsSetValue
FlsGetValue
delete
FlsFree
AppPolicyGetProcessTerminationMethod
__unaligned
FlsAlloc
delete[]
LocaleNameToLCID
operator<=>
__ptr64
__swift_3
__swift_2
__swift_1
nan(snan)
nan(ind)
NAN(SNAN)
NAN(IND)
restrict(
__based(
Base Class Descriptor at (
Base Class Array'
Class Hierarchy Descriptor'
Type Descriptor'
`vector deleting destructor'
`scalar deleting destructor'
`vbase destructor'
`vector copy constructor iterator'
`eh vector copy constructor iterator'
`managed vector copy constructor iterator'
`vector vbase copy constructor iterator'
`eh vector vbase copy constructor iterator'
`vector constructor iterator'
`eh vector constructor iterator'
`managed vector constructor iterator'
`vector vbase constructor iterator'
`eh vector vbase constructor iterator'
`vector destructor iterator'
`eh vector destructor iterator'
`managed vector destructor iterator'
Complete Object Locator'
`virtual displacement map'
`vcall'
`string'
`udt returning'
`omni callsig'
`typeof'
`copy constructor closure'
`default constructor closure'
`local vftable constructor closure'
`placement delete closure'
`placement delete[] closure'
`vftable'
`local vftable'
`vbtable'
`anonymous namespace'
`local static thread guard'
`local static guard'
`dynamic atexit destructor for '
`dynamic initializer for '
operator ""
SHFileOperationW
SHGetFolderPathW
CloseHandle
CompareStringW
CreateDirectoryW
CreateFileW
CreateProcessW
DeleteCriticalSection
EncodePointer
EnterCriticalSection
ExitProcess
FindClose
FindFirstFileExW
FindNextFileW
FindResourceA
FlsAlloc
FlsFree
FlsGetValue
FlsSetValue
FlushFileBuffers
FormatMessageA
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetConsoleMode
GetConsoleOutputCP
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetEnvironmentStringsW
GetExitCodeProcess
GetFileAttributesW
GetFileSizeEx
GetFileType
GetLastError
GetModuleFileNameW
GetModuleHandleExW
GetModuleHandleW
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoW
GetStdHandle
GetStringTypeW
GetSystemTimeAsFileTime
GetTempPathW
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
InitializeCriticalSectionAndSpinCount
InitializeSListHead
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
LCMapStringW
LeaveCriticalSection
LoadLibraryExW
LoadResource
LockResource
MultiByteToWideChar
QueryPerformanceCounter
RaiseException
RtlCaptureContext
RtlLookupFunctionEntry
RtlPcToFileHeader
RtlUnwindEx
RtlVirtualUnwind
SetConsoleCtrlHandler
SetEnvironmentVariableW
SetFilePointerEx
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
SizeofResource
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
WaitForSingleObject
WideCharToMultiByte
WriteConsoleW
WriteFile
SHELL32.dll
KERNEL32.dll
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
.?AVbad_exception@std@@
.?AVexception@std@@
.?AVtype_info@@
p0R^G'
p0R^G'
pR[|*
pR[|*
p0R^G'
p0R^G'
p0R^G'
p0VXNh
pB]P67
p*W4H
p*W4H
p0R^G'
p0R^G'
p0R^G'
p@\xV.
p0R^G'
p0R^G'
p0R^G'
p0R^G'
p0R^G'
aIDATx^
>{j4XY
sPLkAa
ScPHkBq
^4D"wO
^e$FKF*
d{9rV a
TGCda`?
AB4n61
6ua&\u6@L
D-iL j
lOss|zL
.QT_57
qXVy`)z
uY8 ttcPsR
Jiv0}J#
/)}77l
<9sOkw
U4XZw&
6jr#_
9[RhL=
V6Jz=w,N!
S"]u#_
k^aw:Y
B,BME]R
^[!?&t
-|k$ZF
LMbcf\#
jb\E~d
Bn+%W|
Um.!9Y
=nxBdW
We&>[8zZ)J
k~?jh;
7qjd}/
:'_![SX
G9;[|=
uK|06?
HK*+3V
9v_CAFOA-z
?]l~ 
c>6x$0
Us'SQ3
r~QQ(?
>bQt:|
vm;3za
xEOu=a
z:EH1z
CJW/aM8
|egf\S
(W ^|k
f|M2dyC:
]]'km]!
)^pD71H
?Shdh2
%w" op7
Gb_\;z
~$K-'E
Q|5*Ab
/?We=*
U%7I3%
niCdQ/
rz!.{
_cl?WM
qnn.+9g
r[AHAP66#>
yBn9up
4K"y)=
Y3^##'{
USp+)2
AF2CG,w
pu_ 1
;1(eM]
&!W?(_>
6R7lfl
0;3L0c
1D55Wu
7;4b%zM
?L@t)=
S{p" Sts
o84+0*
mJuq':
E'dDsP
ch/_oX%
q+l==fkF
OiyO&w
mn\\ocT
L\P/hq @9
a7v( EG
"u<G|to
Wsx&y6
jV#r<09
lZq=!E
L$Z?!o
?;w~$A\)
WbN>tnD
:\um'y
}FT_`)
%X>P:5
?JR\P|
Vi(\t$TU
fWC:3J
:0A)[ZQ*
aJtQq:3Q
_Z@@pT
<<<|||
M_,J;v-
a+*oAA
ICB9H/
J|s<2#y&
g v'S|
v(|]{Z
%GK.Yg
o!Bnk~
s+3>x#a
nJ4=FO
5}V*Gr$(Q,
$~"A%D
y.#?tG
q@blZk
5^\$DJ
B;R)>Y
{bq1J,
K(!=>M
%`,j 
Q2ehL/
-2`Fd~N
P7SMbuL
>naHY"
7iKN|2
u%LPe]
CVb-R
4(c4%D
lvp^5/
JUu8q]4Z
RNo0bj
DM*ONN
=iaDcLx
)PG5S}k
Eo2fpE
J- {`X
FN+z2H
v"z}ca(
&qlQCp
iDh7g_
SmQ'nBT
mY(o2)
'Hc'E2X
;P"!T5h
:/$3Q{
Vdt*HC
q>RW28
khiLW?
i,sV%Bxv
#J{i(S
Kz?3d
pu{GF
!YSvtQ.
LK*F%B
.AA+Wy
<U[`OFEEE
X^X~rI&?
Z8EjZj
~bB2"R
mRX{FI
[aHa;0
{ALJL0
toCJG
Aa7Q4F
yg-#swM
z]lU%gA
ob<@<C
{Wrhi=
va($^N
aw2CMq37`2
(y-e|^y0
L/B/U;
.;l<L
fV57a*a
d]7\x
s#jiQ`
&BLwh2LyN
'R((}
_AF9'1
,\pr}l
XholII
*Ir`u@;d
]rp$i
;UG/VM
~Sry4X
T' %A4
7kgC\B
R@3QRe
%:,i|}
0)rgp6
}i 2I{&<
m;sW9j
S!pP^[:
.PbRcB
::,7f;C}y
1H?^#c
ZXA9uEi
l/I%&,
PQ^F@Q
ujiw{f
DrG)Jg
T;-c=R
PCFia0
u3i*,L&
zpw5H3
d-obRmw
</9|!
\DkPip[
SuXbZFBx
,xBl3R@
8Ge@p[
-V@E(q
:!(Ke$
9b=RLw
~W#+G"
r=^>!AcB
!%~2!~f
%k%F2J
RW0UlWP
L[0]&`M
s_MlAB
)=;R;C
a lLjxTbj
v(Y=PK
`N(pD9
9Oc.E7
FE^?L
L,u"rF
@T,!5B
"EE7px
7JGzlp
271%5~
2k&*.y-
e51;Qy
S+N~'G
7NsVlj
cTzt~y
%j-rSy&
'=efJ~
3D(TBA
JxdT<*r
$[*x%<
UPQ4[X
Nc57^Q`|a
g ;h//
KX4n&J
U*A",
DSQ/@9~@
hMMCX$
}<;TGp
r0cYNKNh;v#7
tqF74P
dHuS,x
YRj+)
lk/Xd+
I8$nFG
q},h,v!
3{w!"@Y
`qgZB@?
:s7Xb11]
8+wg!!&
C<BdJ
4'ytI6
EferoG
m(jF|*
Z` w"4
HsR<*R
bUN3M-
H74j(#
*AN\-~S
lK_x\C
>2>;>Mv
Fr@vMY
$hGrD{J
1/*dv>j
IL&9C'J~
6l`mi6
^w^y^=
w~m16*
,nhlSlW'
[9,7f$
/&M+gCy
pBrEj4
kCnPsn
0KLffQU
D{^`w%
f]MaXV
@:]1nI
1oJ6.]
:sqrq
&vc-y
xf)Xs%
9Wi,'i
G}I`b
/)`1%T
D@0!G2
9io}%{id
G5`M9jn
77k~2g
XXX7rxopx
`bYn`B\k
AVqaYyp
s O!g =@
l/S8Q51yc
-0>YuN
fnI)PJK=
{`+e|A
^D1Sm|
&gdj9;
;q;&aa
,ejc]s
3rP1ONr
rP<6;T
p|E:Hz!
utt:qG
G:eZfDh
#???<<@
;a}'I:TI
_lt$rx
UcTQ7#
JGIRkA
]-PcBd`Z
z[BYZ^
yGyKyoB
r$Ot[}
{*L0N'Z
dw^$?O
*IE%BK$C
J:jHkI
PPpdz9
C#+8s5o
s*45*5BF9(@
YS~c7?
&`g5zO_
g;iTgMb
QKh:`*u
ZQv23Z
|'e:FY
};\;[(
O1u1j:j
Hz.EjDw#
r]XgGt
bBX9}3
$tRt]`aB
O"wL&Kn
EPL@as%qU
zD*(l%
^00D%tH
rnW@w^$m
memq*8
,]YlKw
+m[Am+
>k9983B
=5`'O<
SXr8JaH
t"#ZA|
1T8%2[
RvN`DT&
L9>5ip
_`6`)9T
udB[:,+
\RP\[
eu2b@
Pc6y1gm
+&?%:U
O~!a;X
6A/-7]1
}m}qzaMA
m}@OP?L
aI=d3:
Cr){@]
tSMK_c@
]\3\_q
AWr^E>
kyRoeuW_
UI'LC7
vuTW=E
B{SmNv
QC1922=T
]4vcH
Uc4,Ih_
D36t*^QW
bBC@@]
*-t@71
J)P$@9
yw@3h7K
<=)$7k
<C@d7FFk
sumXX?
|xS(zSP
;n3#BMS
ad8$o
A0QOxQ9B!
n**wRcE
v7u1=1
\uwjw~
lZ$woNyZ
#}N)LI
*x3"V`g
oE%ye&J%L-a
\#e#35!
,yj,5g
QKmj%wx
-xsTwV
0:Kvn`
;]=Vq#
=u7MP|1
Q1.;D3
ZR2t,3H
50YH5$'
T&?CtN~
nR{?cX
5%{x!6
_o88q
j=%X7rDZZX
,{sGzdb$
P#I}Vf-
nA<`%V
yiAWT(
RA7mrbfN
`MMy]Bg
q@<@cB1
IGA!i6
_n`L]D
}`wD@G%
b4i` q*
l_|IIa
j7[H$O
&"haW}hg,
\e~p@c
BdK$ove_
H2JB-/ /H
L{s>oP
/nx,h#
Y<=\iR
*oO!>[
4 N*?sa
>ipF0;D}
3"8/(3i
<I(4oV)
^#w/ER
c2(<Pi
)%9 XcY
!iai;
h?}{Kb
$s/tM6
@dzC)q
0{bcI$
v#an1z
<,:4>u1
kCh$Eak
(Yrbv=
Rb:h3W
Dnm6{:8'
2=\)=$
lE%j&e*
g>!yBo1
v!r)FK,I
fy`3@_(+
-h1Te=[Ox
6Q]HS#
y)"tE#
,4u9n>
L]RD_s
5m)G;L
Z9qCV9^9]
?\V.*,
v_Vi2
_:JJHg
0M*l>]G~
Qhr4J"
;-8C`L
J+8|kv
!@HN.</
Dk(nFU%
"My,1hlh
2I9I+H
B3Q,:o
.oBkY12
;g2O?G
>HbxS(&
v"7G:z=C
%K*!_3
r ,26*K
_{"fH[
Ph qW4~
/%yN:H
hL#f]E0
t`;zg[Q
S6>[kV7K/
<z=.F#9
4!!ZUSK
Ls_S&B
UH.kVD
#i*H^
UaC_I^
kYPo*^
U+65f3V
E%s=K;
h#b"Re
"ZRdu%
TbT0mk2
"s!nt4
`:qxYxk
;;}M.5'
n6)~)E
*B`h)
1T5$fH8m,e%
?;!9+w
TK2GG|5>
8vIC=4C
_t0&Kc3
m`Q`Y|
c?IEyBm
0t"5rX:
h@WqJ
u +OGS
Q)`/qM
)\1#>
8.z\"\
,HjqFk
,wH"'vY
>^}K-|
JzAL^@
Pkjr-
qb9\n^
M=Bxow
3JV!dh
AU$FC/
>`jXCA
L_38eM!L
/2w+JH
$3'1ts
?A!ufD
>%6Ncj
Dqx*5I
F R7qZ
X=*t#V
,kLoZ[k
I/Nv9R
oEQ.3at(Q
@,1o\Ep
"4x&p{*
o.0>yF
d\wEAT
6]$t?Wju,
5a|@H(
)~K(7}
%?`)Z9
GrSiqUjg~
'BOfs>~
^;nc7D=
b."b]m
D-*BzK
LJ@Q\5
o'dMT,
]"pl4[
gb-f+NMDe3v9
$5U[0{bFzY
}W<PDS
uv+l$;
}!m:gi`
vIQDd|o
JnA) j
!t>qD\
ni.puSF&
9ufRq
ulUWZF$
X3b}+W*
0%VWbx0)
9?)rv6
8<a%XL
,0k[1"~
@ @-B'V
d3^>6r"
fhI=\
1AH~-S5n
P6lci<
P^jt.2SO
{i&)Z
XPTSkcJgU
PGP5 o
.in4|,B
teC^v|$
l>@.uV
N[jj%6
',cNp#
{4f|VE
&8<G?2X^_
K*hzkpj
izS+)]~
O.pn`
@TV`ZC
9R2wpwR
"L< $6
Y\?9}tn
p.wqNkp
qUO22C7
rF)?Qt
*fA^xOmi%
HigMY!DB
Lj4=#}CF
&$}q6\
M7Y>MC;T
3%p|>Y2v
i~/:DS$*
"YM *I
B'X7Q*
H\uak*
K}pyk,
*P*m~e
H*mpwp
44P<B-
`spr^NV
!3NyU$xgYIO
t,fF+
"oD1.\
5Z>2B9
iDYbEP
Ecx}}YAA
1-'mAm
o~/?FQ0f
GZaZkZ
o7l-p_
Hz2-]e
EuS5D/OH
'OT`*)
RkPZ~i:
W/QxPag
?ds}y [
EhB*&"
p/bn2T
+Iy}4u
3P\[6@r
hW\;uH2'
DPB<<cQ/
uv;@nP
xgM!wKTX
a3|}CK
:t&%7t
jmXxK&r
%8% E$
l<,VArL
&pB`tE
~G2:"e(
iQ^J:ARF
Ql3+/m
r"fk]=`cwvl
w{b9EN
EbOmBg]
[Tk$Y&
:X@.\\
S/mYncF@
Hl3!s}d
C~~:b
oc;SEO
96It{d
Y-eV7U
IHkw}%
8yfnWt/
hl?_(_
A# h]
TN'>P
D.@SFBg
D`DKszm,
}eDwD5
x];xg5b
s;y{ScG
LFMzjC
4a9YNaq
B }k^O
k8tPG<
XnD>p|
o}A&5x
iw2nj_
m:&ck9
,YxsAsG#
bQJz5`D
qCk.q?"(1
p=$wcE{
6((fN:Mt
CZD9`O
r~r5vc|
JEd%e\
spO_xho^
[Zed|4
;Q .&9B'
^#(?)3
oIu]DT
"j'NW^
>HN~*E
g"+=6#6
p`6+e%E0y
Wa`H]*
eAeOmD
-/6Io_
]om),<
Px),):%O
MSbwkO#
?s#acv
ito/)Ol
ACI'l#hP
_0:L7)Ok
'N.^]S
MN,7|3
)*<Z?.|
9~l"P
0[.W~*M\
KJ>s=eM
]*^$v=7C
`tCvpS
-jy*,k
h@,krn
QslIqO f
<Y'BaB
NQ+bj_
<{,S*h@
%$ iKGw
zP>I}v
*oCfr6
xHDd_a
Nc,5$]|
)[_ydb
&b6zI=
0:QHln
%7vh=+<0
>G|i+3
ebLVcd`_
e1fS32
&l=QW!;D
$-l<;_X
"'C,3Mv
%xl*G`
~RQ6}t
LZZ+G)
(+^6&@#Y&
aX_>eV]l=
lr0}s+
p9GX_[
=8W4R7
|HSgA"
yvBxor7
g;%GC<
&IC8Z'
jj&%FcC+
/'an<].
9N2MWM
)f`?DL
'1}H}yy
g_Z3vE
xVr,y8V
)35Yn/
E&dlpL
kKe}@C-
wxag:f
u"$*Y,
`u:6f'2
BI<N!aE
pYD6h2
\ @xg0
cR^s"@
Z4bPx4I
$68n{k
&TfMn^2
Y`PS7;93
u!Pi~$'w
/.VG.'
FbC;o3a=
5ys,Lc
8|/3xE
qT1agw
Dq&-an
g%&9D<+1
gP2JGJ
dndFz.
)4_S\r
k~9;g
\oE0iWx
A6S@t*
d6)P*-
zKGcga
z>q|Nl
92 ,u1
)]FFtGOg`jG
JTPn%QIadnQ
NXZh![C[hr[
e=Ulve
o7Opzo
x5.o`(
$I9)H:r
At9d1T)D!4
"h8TN@4
At9d1T)D!4
6FyY9{
Nw>U-w*
@FFf$)H
J=5$6%
*0\t7DQ.
[}~>R
vH'i uA
LFrc+5?,x!
@njlkl
miha_bi
8^n%{'"0(
T5&&{e
:USeip
?Q?*-Z%
-M&C'M
O-A?40Dw
vCo9pC
4D^B_B
s24f~W
1xti=R1}sN=
)_s>$t
v**uK}
c5{jI*
}j3.,$-.
[WXt\9k]
2<Y|'Z
i( 6j_Z^
@DdDd$I
8:{7`-
7/I@0r
cn\d]n
-\Y%NP
,xqC-ZVL
3I,?-I
/r[4P
<AtverN
P/*l8/
1gSUlh/
E'6':'
k"\"`"
OiH+Z~-NI
?uM0@7
/8>Wd:
.Ziy(L7
[0*)8a{
w !Dhn
2/^~dW
pPhj]Z38
@0eP@Z
|kx.[W
6j\tgJ
:({r#RX
ILqxVm
4846&L
iwCy35
S\lW*$
}9??7o
j=Ti;;
#]_Hf|%>
vA#lcL
Z2R3qmq{
RaNN;
l/gR"F
\_]/d}
J(11j+E
Zm6;4t
(#??c&i
q:eLS<;
5Byx .b
N~`d"j
fgiskx##
4)p(:C
]"L Dji
C\0#@
WB`vCQ1
fvPdRG
'rT0|$
P('2eM:
7kG0,J
:GMn%G
0>PU^{A
{#,=V;
.(ij%l
f g5(uO
D_Bc]G9#.
vx~V5"
vsTYONz
3:RZMMD
Z,WlH
}U(2vB
VU6<fuI<
=r<\pG
ux/yHk
S,Jjd.
#NFhX~^
6?_O=C
,^dva[
:}C:}j
fB20>6
(|GUg|m
X!ti:[
cwsH"ix
A3(y%5A
l::$lr]
~$uyoY
3w'">x
-zy6:"
S2@~u}
!@)6q!Y
}^/M;X
;*"b:Kd
"%7AlB]
oy'>{'
15!<iD
ztqqFfzz6g
hzzoj/
-uIPT.
]OS;p
m^844o
DhPh(>
F%19&!e
+!xNdn
Fc33kX
\v*;yy%
AA"fX5
aISGo;xG%
2)'%g
/1mk=g
HDV?&"J
_o.JN-
msUqy7;
r4'/X2
!H{VL4b3
C%vU^d
dLBo$6/d=
px#[{m
LI$'Gk
.rNFD!
WwD ql
J{\f;I
ViyMF&
'hblnv"
sHuRO
'+{%*q"
r)*3z1
]iEmCb6
^Aa*Yk
%RF_{@Q
/1v;fM
'[Ryo#
X<e7q6<
nwtu_4
g!#egb
hct@S1
`Q[Q7gQ4
7{W^X#
;Q685r
NGrbXf
18WH0O
k!+41_DT
FftR@4k
NUnjens
JD}wy/
_?t_[@
.o.w8(
!g4An{m
rB0a/K
C5 %!9
?;88757
#4W:5e
LFl~*@)]
3PY#X"A
&9J9R:
UT|`fT
7cT|8|cM
*M0(Aw
B@+3y'
Kj)1&u}
K3?4,D6
J2X[m`2
[g;6G#
#=bLOY
:"v)@P
TZJ`S.
G"B)$T<
:~ :['
56{l'O|
a\t$|bX
@j\m@*o
"):!wf+
c`dIiAv
Zofx?^
_2,2t?C
7a=l';m
]m9+W
Cmr;w"E
Om;08E
jaUbde?d
nUP)lz
H!4h^X7
jF@/Kb9
Q;x67'N
ayV;tkD8
-@fHd
ZeI/)n
'CiiF(O
.qB4)[
E@IAc[=R
rzhGv=
{{g?5g
; CR,@
HViV_V
bhE)n>A
h2\I`S
CNJ3;S
(zr`Gb
t?Hb0K
Zk_jRk
Z([~.2
~YGQ9LY|n5
Z<LyJUi
Y-:n=[
wK@5x5
%zv&}U
G.r-!e
y[8OQ`q
h;QJ?f2
JBD&w
3ZZsI
PH_z#z
D@"HA*
<jPUq?,29
C`=OWf
XR"^OHj
,q?J]E
qcSM C
LF)>PBv
g)MRgtg
%)S02A
$@!Q`]w
5BH8yvxbI
T<o'bK
0MXLsg!
#W`/ko9M
Y)==0U2
S^1A<5
g4fS1d
3|],~TQ
ro0rCO
E2,"Io
VJLbv2'
]8b<aH=
>ugFJTS
,q\qz2~
|hzvBZq
{DHwDR
k'0ChE
^g(?u9
ElR}]E
N4 L>Z
9u06#:
4<mC>!s
n,I%9v
QEW!C$
I.Z@#&D
]UD^JQ
fcg*Rf
UE~ZWmo
`mhe#
,wC3-T/
jpgZkx
lF~8d:@-
+29@~"
*S%UY7b
n4'?;*
qqhZ6U
8UQfhM"0
:t4@k,
TdP5R=r
matJ>?
,(c*qf:
Ga+U8-n
pKs{(BQ
30k1@{
k3=\t84
vjh'/FV
9Ce.9=
($'p$ o0,&
On:0wM
JuP702
vK]7o)
ehBtdV
:YI$2_
7i.3H#=~
{SIqVhM
Yb[}J
aqgQa{
}eBe_S
7b!h5K
[hCD^\7
py5t%K
,)CDP_\
\fj0xk#
cMhUpD_
NaTQiA
s+rB*`
KpReAt
l6/&iX7
dV-jO+
tVg"s5
D[dxH|+
?n=Or\{
dx-<&3
W07PG0
gD@>P"7o
@b]k[%
}XRPb0D
)"I!L]
v~7q-r
wVUZE-lJq*
r&|QK{tN%
FX%u!_M
QoXYA6
:KN+2e
>=ztAs'\}
2L8_hY
6d'!cwMY
]j8K>l
U%|HTR
#5R'pV
g'TFdzRv
2s@m%*mn
Gy>W?%H
ROy1-I
B!"Gz
MWPr'+
#JkHJ+Sj
S!iaqO
w,kw"B
XPX#BP
xVlsSG
b2\DZs\Jc
6ah]Zs
5S"dc:
65k(se
1vXQ!q
^s|<g5
x&&vGD
[m!wt
be6I"voqJ
\bzfXVH
#${Ud8Qs
psb3yF
)ooKb`
*3{*g_
0,xU4-
M,D =]9#9
yZxN?1
m~5Q2Z
7RZ^nT
n~~&t/y
HPJLp&/r
gZCZJ\
Tuf~~r=
m_9@Uv
)4SF#4
0;%m59h
TKwl,W,T
Ac_$Lo)2WWI
aS/"y;6n8e*
>kN@_n
tjCjk]|p
2-*b02
crz^Jw
Ur+Tyy
X"E(Zx
S_Z,c#
6]UtaJk5qgm
ppvX729
jD|w":
I0 60Hb
$ fBxwO
w0#ZZ1
!%v#z>
P+B,U]0
!0B68
V^QLC7
%wi{kP
/i#._E
/41?D|
*|CGg)
2-bO6M
M:0S[P
fA3d!g
`CL?(s
P8AvF1vF
`APiWr
#{m;EX
i>,1O#
#-MH.u
mmGF^G
,kGWAa
T%iu5J
IYLWL(
`DPZ4=
(;4q0R
uwkoA&l
TV1gH~:
(nws**Y
S|e@o)N
VP3bX|
nl,!l@
_DSd1
9Iu!sj
tx(+?Ku
tzgaDS
+/v&+5
?K])x;
tpuPVw
W5lh}fN
(/FQGq
2|$NJa
L8#Xq(
@G&IlE
NLbd`\
qHQ)^H
r]q4c/
4;y1DkF
dsk'1tu
H.c;y
ov8=6Z:}
3z!Wl'
d*;M{?
NF:Ysi
uZZ(mh
/^?#D{Q
([%P{[
tHlv[M
Tt&urH0
=H;K88X
KvI}xY~fma
g&hj\N
+-p)L,`
%a"6<J
!rC$HU
W<BtnQ
s?T,k2kBX
l+tGU7l=s{
bcrjCwY
81d(P%*I
6!%s&b
dN7vbl
aL}|&v_
l`54=F
{vehwd@^
s/|U_QF
y@]5,4
!*w.:5:P5
rHaZ9#
9r2gX|
XD|e~S
Mh^>E4
N8li|^U~
}(qJn~$
hM5'871ndt)
o:Jp$U
xQFS9d
iT/&tt
,QJC/E
[2`n2F
PtoN7?:7
Bt,ui7lvul
I-?\@@@
eJwqcDLt
s':h3S5=
6ysnK]F
\IQjxkx
Zs)Mt+
RlhXE0
!`^U+:D<
[>bg5d
[Me^kZ
p$blbl
.iVAs`"
WHc*SN7"
QS6{%|
#[N"Ee
4=A\NptaD
`?aXX'j{
$.n-x$
s|X&]"-
L<$K! GO
h"*Wd<1
Q_@8X=
dcm!_D
qaqn|,
XEYUeOL
3F6))e
XiA3$.
Oee3+4W
sTj$N**T
g4GWCDq
l)TZx0
x<;B#:
t$?XBn
mq4SI8
|<bcp`
H#3_b8
o{2*C5
#aX*v3
|ZV&$q
.CbFEV
asg+{k+
$NOLyk
UJgr2PR
5VYVXt
vdo$Md,
a3]3X3P`
ad)k'[
avfj6u
-u=e.w
1`SE7E
Z82q&`:
g7'n_r
tJ6e\>
H!Ll^qD
++xW9GY
Vi}7Qo
gRdS]&7F7
xSKYN!Av
CbZCml1
2V^Zlz
iDm%]aX
t9p`yA
,5Sy7{
)>MQBP
52W1pRP
+t$)[2
HJajD
0 n<nf
ej%Pm7
1,Zt/2
G(QAFG]
7([=g\d
>F^^H&<
qF\'<
:yjaV8
.qYosD
uCuIp{
UKPE4V
TkQ(^1
+MVufCM
-E|8Ns
vk!6cA
]iVs>uh
P4VB"q
k;CZK?K>
(:\G!m
0=+`nE
4o;SMD
;Fr~B1
eF+\DF
qtP%YS
5h"l@
^V3I!N
Il9^rY#
H#1(R<
y~8H7R
$S bMR
i\x5='
Fg;$k1
L+hMU
BZ'l%)
I#F\)
o(k&Vv
d>fV$E
E9A9B.
7h'(+8
)[Q([}
t]?IIW
H\s@P!
4^#JFY
$@x!X<
9<aqN$Ez$
"(c$(=
0.;&SBm
~\zQuv
|0|`+o
E</l:6
Ave^+$
=tPpdu*2
g.6~W&
5xg-}]
sT=Dg*
X'tgUhr
5BiXl
qtnLh|L~
a$5Tvc0
3%!NKl[
35~eaS
@+B5]|
)saTx}n
x(}e+&
h$I78Drw_I
v:j]k;
|chlEx
F;3A>)F
^w(2clu
6PW|h7
|>Sq/6
;LKL^Q
bn8b\
\^JqZQ
j_g2Q:o<
"{*0kn
?#_C<x
`P/mT8<
"HHSE}
!%T\TNi
Qqz(2d%
3um=K%U
d`X1AN
G0(CS0
|h=D&ekH
go,5U'
Tg>D1}
gj)g/I
g_x=mb
I>LyA_*
*N H27(
#SV7PJi
,t-uA1O
"4+`6e
%PKYc|
f+ZVd$
pNQuVl
3zW%G+
klnoi5
Py1[]!D
v@laS2yy
51QP\f]>
v4&MTH
V/z3E6
+Mp6*>V
;4;=s;S
1te'97+
n_aDRzRvv
R2V)8g
#,S/7]@
uEjj2lJ
7WR[c9
u"A=!;
2lOzgAl
O{'Tf;
G<&q$i
;x3)ut
jvD,`\
'nAX4-
bK}0'}',O
\nE&?#A
6l:'.Of
@+iWRD
WZf,s^
ipA?p73
d@TK$Wf.
jq#('\
zw.&Ul
z az#DW
^724YbT<*
,RHx;[
u4x8h_
JnxzOE
0Q`T0$F
LH8jOr
q"@@SND#H
Antivirus Signature
Bkav W64.AIDetectMalware
Elastic malicious (high confidence)
ClamAV Clean
CMC Clean
CAT-QuickHeal Clean
Skyhigh BehavesLike.Win64.Generic.tc
ALYac Gen:Variant.Tedy.429098
Cylance unsafe
Zillya Trojan.Worgtop.Win32.395
Sangfor Clean
CrowdStrike Clean
Alibaba Trojan:Win64/GenKryptik.906f6db6
K7GW Clean
K7AntiVirus Clean
Baidu Clean
VirIT Clean
Paloalto Clean
Symantec ML.Attribute.HighConfidence
tehtris Clean
ESET-NOD32 a variant of Win64/GenKryptik.GUNG
APEX Malicious
Avast Win64:Evo-gen [Trj]
Cynet Malicious (score: 99)
Kaspersky Trojan-GameThief.Win32.Worgtop.nt
BitDefender Gen:Variant.Tedy.429098
NANO-Antivirus Clean
ViRobot Clean
MicroWorld-eScan Gen:Variant.Tedy.429098
Tencent Malware.Win32.Gencirc.10bfb6f2
TACHYON Clean
Sophos Mal/Generic-S
F-Secure Trojan.TR/Crypt.Agent.czete
DrWeb Clean
VIPRE Gen:Variant.Tedy.429098
TrendMicro Trojan.Win64.AMADEY.YXEDRZ
Trapmine malicious.moderate.ml.score
FireEye Gen:Variant.Tedy.429098
Emsisoft Gen:Variant.Tedy.429098 (B)
SentinelOne Clean
GData Win32.Trojan-Stealer.Cordimik.8VDWYY@gen
Jiangmin Trojan.PSW.Worgtop.ay
Webroot Clean
Varist W64/Worgtop.C.gen!Eldorado
Avira TR/Crypt.Agent.czete
Antiy-AVL GrayWare/Win32.Wacapew
Kingsoft Win32.Troj.Unknown.a
Gridinsoft Ransom.Win64.STOP.tr!n
Xcitium Clean
Arcabit Trojan.Tedy.D68C2A
SUPERAntiSpyware Clean
ZoneAlarm Trojan-GameThief.Win32.Worgtop.nt
Microsoft Trojan:Win32/Sabsik.TE.B!ml
Google Detected
AhnLab-V3 Trojan/Win.Generic.R626753
Acronis Clean
McAfee Artemis!56543167A8B1
MAX malware (ai score=83)
VBA32 Clean
Malwarebytes Crypt.Trojan.MSIL.DDS
Panda Trj/Chgt.AD
Zoner Clean
TrendMicro-HouseCall Trojan.Win64.AMADEY.YXEDRZ
Rising Trojan.Kryptik!8.8 (CLOUD)
Yandex Trojan.PWS.Worgtop!GksZLRFTqu0
Ikarus Trojan.Win64.Krypt
MaxSecure Clean
Fortinet W64/GenKryptik.GUNG!tr
BitDefenderTheta Clean
AVG Win64:Evo-gen [Trj]
DeepInstinct MALICIOUS
alibabacloud Trojan:Win/Tedy
No IRMA results available.