Static | ZeroBOX

PE Compile Time

2024-04-26 22:51:12

PE Imphash

de41d4e0545d977de6ca665131bb479a

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00001000 0x00007a06 0x00007c00 6.13815157152
.rdata 0x00009000 0x00001d10 0x00001e00 4.65162098606
.data 0x0000b000 0x0027e3e0 0x0027d600 6.4913674522
.pdata 0x0028a000 0x00000180 0x00000200 3.12265661837
.00cfg 0x0028b000 0x00000010 0x00000200 0.151271325305
.tls 0x0028c000 0x00000010 0x00000200 0.0
.reloc 0x0028d000 0x00000078 0x00000200 1.42352565394

Imports

Library msvcrt.dll:
0x14000a760 __C_specific_handler
0x14000a768 __getmainargs
0x14000a770 __initenv
0x14000a778 __iob_func
0x14000a780 __set_app_type
0x14000a788 __setusermatherr
0x14000a790 _amsg_exit
0x14000a798 _cexit
0x14000a7a0 _commode
0x14000a7a8 _fmode
0x14000a7b0 _initterm
0x14000a7b8 _onexit
0x14000a7c0 _wcsicmp
0x14000a7c8 _wcsnicmp
0x14000a7d0 abort
0x14000a7d8 calloc
0x14000a7e0 exit
0x14000a7e8 fprintf
0x14000a7f0 free
0x14000a7f8 fwrite
0x14000a800 malloc
0x14000a808 memcpy
0x14000a810 memset
0x14000a818 signal
0x14000a820 strlen
0x14000a828 strncmp
0x14000a830 vfprintf
0x14000a838 wcscat
0x14000a840 wcscpy
0x14000a848 wcslen
0x14000a850 wcsncmp
Library KERNEL32.dll:
0x14000a860 DeleteCriticalSection
0x14000a868 EnterCriticalSection
0x14000a870 GetLastError
0x14000a880 LeaveCriticalSection
0x14000a890 Sleep
0x14000a898 TlsGetValue
0x14000a8a0 VirtualProtect
0x14000a8a8 VirtualQuery

!This program cannot be run in DOS mode.$
`.rdata
@.data
.pdata
@.00cfg
.reloc
uKHcQ<
AWAVVWSH
[_^A^A_
t.ffff.
fffff.
UAWAVAUATVWSH
ffffff.
[_^A\A]A^A_]
ffffff.
AWAVATVWSH
X[_^A\A^A_
fffff.
fffff.
AVVWSH
([_^A^
AVVWSH
([_^A^
uVHcH<
uZHcP<
u!HcQ<
uVHcP<
upLcB<B
ffffff.
AWAVAUATVWUSH
[]_^A\A]A^A_
AVVWUS
[]_^A^
AVVWUSH
0fffff.
@[]_^A^
AWAVAUATVWUSH
ffff.
[]_^A\A]A^A_
AWAVAUATVWUSH
#ffffff.
[]_^A\A]A^A_
UAWAVAUATVWS
ffffff.
[_^A\A]A^A_]
AWAVAUATVWUSH
8[]_^A\A]A^A_
AWAVAUATVWUSH
8[]_^A\A]A^A_
Argument domain error (DOMAIN)
Argument singularity (SIGN)
Overflow range error (OVERFLOW)
Partial loss of significance (PLOSS)
Total loss of significance (TLOSS)
The result is too small to be represented (UNDERFLOW)
Unknown error
_matherr(): %s in %s(%g, %g) (retval=%g)
Unknown pseudo relocation protocol version %d.
Unknown pseudo relocation bit size %d.
%d bit pseudo relocation at %p out of range, targeting %p, yielding the value %p.
Address %p has no image-section
VirtualQuery failed for %d bytes at address %p
VirtualProtect failed with code 0x%x
Mingw-w64 runtime failure:
__C_specific_handler
__getmainargs
__initenv
__iob_func
__set_app_type
__setusermatherr
_amsg_exit
_cexit
_commode
_fmode
_initterm
_onexit
_wcsicmp
_wcsnicmp
calloc
fprintf
fwrite
malloc
memcpy
memset
signal
strlen
strncmp
vfprintf
wcscat
wcscpy
wcslen
wcsncmp
DeleteCriticalSection
EnterCriticalSection
GetLastError
InitializeCriticalSection
LeaveCriticalSection
SetUnhandledExceptionFilter
TlsGetValue
VirtualProtect
VirtualQuery
msvcrt.dll
KERNEL32.dll
;T(8:5
;6%;;.
,= ;)1:NB8+
9&&>32(
4)4B*/:5/
W9A@07
>[M].F"=W7
04D_?!D5;8
_G;; ](
NB%**6
N/FC%09B[+
&T0+5!
^E.E7+
"X89'7
RL^,O+
@5> ^G
NA"W*&
*"W@1. )I
%)4<S9["1
L$F/#&
+=9USW9A
< FY2=
IR _"V
43:%H
NBQS+]<
"0P;(+
A6YTJ\
9HG^-Q
;9%2#8
9/Z1P\*,<
N6/0--Q"K
3--/&;Q
S<2J4J
D_4%!)7
6J8*HQ1Q
0-;3+ ]
4.)H8&Y
0HD. 9
H\#.<1
+7-)W(
%72W=+
(> ;^>
Y ?57D"
/<9AB:
/D4. 9BE3="Q
";&!91
)M9;R
:==9USW9A
0 ;F+8
=A2%*P
00D_2'+;+8
]0#&>#>9@=1?
9;Z'PNG
X]O'!&4
4<<+=9USW9A
4CH;$*
1&381Z&
8+S.!O<^
:ID*1/>
\_,;,7B
K:XO &A1?
+7;1<[
F9.;H;#9G
>L+-S0/6
;\& $D]===.
J4-4@_3%#
8];^#6
T< Y9'
W9ANJ=G ?&
Z)/X9/
GB2+:"
X]M@1!X_^&5;
(IC2 ]"C4
A&, *#
<)#V6'
_3=)4/
>B#?SQ"
9B?LQ"
9USW9A
N%\%,:I
)5'==R
4 @2 \0
#;Z <1
N/D8,09B?L5](2
0,'T(4B#
F&'L'H
:==9USW9A
75)4?
W:X1KBD"D
2%569)
)4BY=!
P..!97
8S#[#-F
/)1 ^G
5 *"K<C'
:==9USW9A
=^$7K_
)M9;Z
"\,B2S;
 7;K4
@>9].
?-H<; ]%
,]9;Z-#2GC
*'-M\L
Q0HVZ;
%([.;=
@^<L(Q
(V$1&.'
5< 2 ^G
@>9NN&;
?,7"-(
,8?J0"
9<B<#,
%%!ED_
(-#03W
5"$2((UC?"
:6 ,;31DS
0.\4B3
G2 _!&0?3%
:==9USW9A
"$2.(UC?-"R'V
%& "GI
S32);?
>NJ>9@=1?
:==9USW9A
0ZA6%4#3P
I;3&^>.?#
+ ];/!#V7#
XT=N80-
[!5 "Z!V
'\,E5
Q*#5"!-
-UG\/\/
W2G@=D=
6H[9=Q/<A
9;I\U :/K
]BFN/
\&_7=9
7%;B@#!;8
75>/1,
E969L18W(
]+_*--
5!7:W!
P^.)-L$PQ
13#"\S
,>B>O
3--+$PQ
07_\@Z
W-B-Q%
V8->0--
.!O#0)'
#:A=<3_
!&70?.$
%NV8L80
O&PW)]<
'%!F;8
0)4B 
>2ZC$'
'2_]12R
E9B?LJY<6
'+.%+B -
T335!]V-
=<I\F$%
Y/K: -^M/
+H7>E9B
)7:9FP?S
O6X/>-
_\V&U#5FW
H8P,<%
- .(2+
) 1;#
\20^=/ 9
#%-311
1.01%BJ8:@
)]N337[
V0&Q:+=
-&B6&6<
P Z=,2/?C
06?.R%<B0-.
11@KB
1;_- '
"#3! $
#8;Y")J
,=Q/<A=
_-0!#5;8
?5P ],WA0
A,=#26
#$/9W1
+H_0DS%D
)4B #
^ ,.F)W
>LF,[
;;1:5S
43::-
6>#>9@=1?
]6 /Y!
V31=/,
/;8RV5A
<'_:X'F)
B)+ ]$<S#I
_&V[#K)
6K[$-Q/<C<,
_!%#;4
])39--
N<516
6PQ]%S
>CQ6+6<
419 B6
W9ANK#6%D
A,<^2C
P ](5E
#3/Y&6I
"HQ/<A=,
(0Y,US
E?!H+ ]
'O!0-.+
)^1?>
+B/76
_)? #$;8
"#31 "
2 DG#6#
^^IR _
V[$ &<
V0&CM&H
)<1\?J
2 ^@H41.
- #( P
@;P ]%
",9AKE?
I?4'<%
I.W$><L\
W=BN;@
;K@790@
809B?L
/_#HQ
!84 $7
XL.+SW1
\*R72#
8PZ_#6
-7#; ],WA
"8=-Q
L /7$
]I$:-Q/<A
^2:,"W%
/8X*4
P ]'<(
62 0--I@
9E[H0\
]38)4B
)5M%/^'
W:XNW
9+ ],WR"
H]V$,1
3?Q *8B
%->.=O-#
8! .'!0<'
-UG3>_
';Q<2)!,1
)0-'9; ],
P Z=)?P
"D(==Q
\E9D*P
4=EET7
2 ^@H/<]
_!16K
YB,$-8
\>0ZH!E9
>6_U194B-
1^#;!0B
]BD%H
S>9)W
#6?S2:
)]N33*[
2 ^G (MF%W,
:_Q2P1,9A>
07_X? 9 +8
F8/6?"
3 (MF)W
:_Q2%1W9A>
S:#9J"E
!E4+*!:<(
#3/Y&6I$9=Q/<A=
)]N337[
T1B.3Z2
<)FX+6
!15K2
3/Y"6J
9=Q/<C
)]N#3>[
H' ^GIU
XN9O9
V)^.7$
P=\> ^
%/^'YV.
E^G?,(Z&7
"09B67
F0J(?11>
4/DC"09B6;
XDY/7B
['(!=
3//5B>+
_.3Z"
3// #?
T1B.3Z2 #<T
"B^0.A
$28#6Z
(>#VR
_E,8:+
06))E1
Z3X/9<B
S.C$I=
<TNX>1,
.2Q>
#>9@=1?
)7F]04
: H8M
6Z" .!O
= ,.!V_
.9)P ]
W9A;4(@?
\8&G*Q
X\4>')"X_B&58:
_\UA 0)
-=\> ZH'E9
O4'1<-
:&\(,)4B
_C2Z1,9A;(
EU,R#6
;ZV-,$:?
S<FE10
=V:W#
+*'>,(
^\UEU.)
8<D=,1Q
6OA31Z)
RTB#$ 7
Y?#=10^G
?G>09B
8<D1)Q
D!'&+8
6OA39-.
#JD( E9B
" '0-,
<)QX7&
].1>H-
?'%$;8
4CH14(
J69 L<
&B[>-
4CH14(
-O'0--
B;#;^,
6X]M@9_
<(4(D+JX*O@
R9=-6-0]0
-7!O<&4,I
]>.D_QK<&
3?<#">L
+)39Z3
<074;B2
0\<:'#
)%![B$S
(,;B>T0
9;Z'U!2?
W9AN,@%9X$
O]0$\E#
5:[ =B
P#P;(+
9]"--,
W(_.-
]>2^H:.
T0/<7
5 P_' D,L&
1+B\9-<
6H88HQ
)Z0P7+
=XR+*P
ENI%&>
86F(664
5=L0\O
'Y?[1=
O"\%9:8
8AP;,4
M%&;?
<=+R.]
X$HD.8
*F;!\Y9?L-Q97
)M09123B
)M091
)M09183B
)M09123N
)M091 3N
&%!G>$
C'0'!,5_76
#<3')4=3
7<;:08
>)4: 1/6[;2
:.!,-)
-)5+):
$#$,3=-
?5#(;3]
3)5)7 1/&!
%#,J7/+>&/
.E97/B:
)52)5
71/;)!,#!
?5-J-.(2
F!G )N]$
>0,+5Q+$
/%;$>0?3 ,?"!+>*)5
:#)2223:I
>>.7&/F
++^-(&250)
[(85#3(2((;A
',%.+0
(&*+"1)
")2*@:#
B8(6;"-
S#)6.55I7&,F
55"4-,%0,=
123'/&
>+30)7
1,%="$
/"%+))
>*'!#5_
75;(,5Z7+7
##5962.@'8
22823;"&<+<
8),#=-<)
<.+J;:.P
9E99*R(
N(E#\
,0#/L'
$ _0#
$0_3#
<?</OD
>E9%*S8
%,_<#!
]<[0-=
_8V 7#7;
?!Q?W1 /H
=ZQ2W0
Q4]3W(
# L#6?
W0+/KD
&<[0-Z
3!*#7X
?%Q>,1
SK]=<(4
V!#?+
,?)/O'
V!4#8X
E?5*ZO
7(;_7*
)7;$2(
,,6>6>
-5R,<3Q6#/
=Q%&6
3/L=#Q, /O
&6)0*
0._*-&G
/; 0-'
"%'(8C
)7>(;[)(
#08)#,#'!(Q
()5?7:
!6*>51
*"7;313<&
1*A*.%"
//30]2#/
;%_+22/*,
<+ ;3Y2
!9C500!
:H1726
=<[>-_7
803,&;
N('</,V
/ +*2%9
#239H1PB0
!3 O:^@
93 #77
;'9]9<D<9!"N
;T(8:5
;6%;;.
,= ;)1:NB8+
J+?E9B
<(0;D(
%SDVG2/(
W ]?W(
S0SW9
<)#<ZP
7.,9A
?>$,%:'/K
";,+L3
.53D>.3
!4#1 @<<
030Y233V
#J#,%&
(/4?MLQL/M;
#709!9R
(?$1%#<8+
(Y-<B#./
V$,O!NJ
J?J7B$
>(8C8>
:)"/0AFYY
5<?!6.
0]%)<,.
S"A%.#/O
6= ,4"
-HF>"_I'
(A^>\36R-
%0Z&&
"-%#93
1FGKA1)C$@
0%=O86/
F"YS8)
7[U$B7IB[@
8#ELOP-
S0:-2A
4/5<=Q'5<
O9S'49?7
M':&X:54
?156<>
E/22 53
+;$%##X7536
$4^/)&
8:N,-V
Q&#*?&
<^#3)<
(6V=/,
U,=5Z
7%USZL7
"'%<? A
!E4+7;
;4%T(Y]>XT
5?-X+#%/,
P+P]/# &5
#);QH'7
9%>=AC:\[!I
E3S0<AY%(#L
T/5#:!J
8N;48;
+[!,9
.E7Z3-
)B+<X[
B\#!:"5
YIY5^<N
A$HC8(#W*
:H+3^.(C
R.\:>[
@#F>3#C
*F)\?/
#)V3IX7"Z<
>@Q7;$
>/3YA&
JF9O0+
@9+<!,\
%?38%Q8
,^"32(
0;/A'
#S/S&&;5G
G=.I3>'
?^2P3( 2_
!X3R)\
?WM9\
:>"6\S!AO H_
4C% 8ZB
_/1B8K6,5$
;#_<';
34X:#G
1%32@<
-<_3W7
2>(S+%
1'K_[5
*:$&-D8)
9= KX&R$(>
D? 8?<[8
<R?#GC
$3=+,#
1!"<D
R(*0=F
?;+,T$
0(K=2-B
2^_QT*
_C[7C_%3#
V#\&;6
9\W \(2>?&!
#1KE6!8=0
M?7DV2
0"_3-%
"9$F!C[F'LJY;
>?I;'%
OBO6D'
#CPUJ\
:PJQ&U[
.1'7&@//
;,?L.,>,
>>&%!=E(ZG
?!,486/
B#(RRR
,+M_-
&N%5K=
<-Y2:0
>(-2&=
WE0&2?
%6ES#G
6C4!J%
'$(<#%-X7-;
S1@3:.2]?
/?A'"$
B'(L<0/\
70+"',
1613;M16
!WH!E
"C2$,&
NI6B#B?
R"5D0!+_V
E+3:D!
J"B3SQ^K!
1C#0"/$
!!*G;)/!\.
X>%%H58+R0#;DXM
H7? 9(4
;RE3W
>(/:!' 4
98 -1(
)$&, @
P"(5+GN
=4-\3K<
(21'N
1909 #
0 >&:Y
1[Y>"4=
-51W [!"
9?-Y _
!S(7_*
42F -3)
E:)J;)734
@S"7#
(4 ,M] 
G&'59
D/(; )0SLC>37
*:Y-4+3
)0W/>=!
="8&A&!;:&O
_/\8&W
'PM'X5<
4MB915
%)'**0
B&JY]-
.6X ?\,59
X.$:K'
6&_*$(9
/F8*A,H_5<
_TL.SR
'LE5%4:C%+0
/_V<S>=
2=)-;[
<"ZM\.
8 "#U:
A8AY3:M
"Y1Z+G/O;
=&:/9;G,
^^%1\?
G4!/%I
Q#X9%!
\_W4)P
%Z0<<,)Z
16%*0X
>AC, \@
?_R ]%
H&P?8VX#%
IH?#32
Y0(F('
'19;0+ 0
O14SVX%"1
%R*0XV/:N
IYQS,0:4
\8B!W F
&7(<=#
X#7562
E[VW<I
N#929*Q[VY
R7G3WY9
S*#;L9
L93P*>0
2 U7&9
V?#).E
HL2]AP;
32'1&$<
L>7-0D'")
9GA# &3?P
F+N^3 \QH#>5/&/
*2N^)5<
R/+OF@"#9
$))=CEZ
G'O:1E0
>:3!!P
( &68
GB8;(3
G .'A<?/>7)
\X8#&
;0Z_T=1:^]P
N(>-'8
A""C; $=
J_$?/M9
;-'T:-
G>'N1B#
P8\FJ>5
(5[WRZ
L-4&)<5!?D)4
8#&X#O+3
[;8,7'
!"F3$K.'6
UB!.I#4
49%9H&:_
J*%;[8(
'7&/#8
_"(X!@]B=//
,\< -K&
;,LD[$
$(SM2W"6'K
J48A ?.
(+7(8]%
6D5/G
+O?("R?
+FJ'*+__03;
09L-#<;+
T9=#L0)!29FO
NX$O:$
[5,=K[4/
[^,%^8F
6,3*I=
T</(:.,
+LP>.*\
9.N^$<
F$O,2 (D/@
1<014"&=*#
_ ?7</
=(;<S=
+1L5#23
>8_*I3
:3*S^1
*=')"V)
0[>.%%3
55_Q,-
_-)F1Q*F
;C=<KX
J)3B]($
G(D/_+
91/5)H
@(! S]<7
H00%?"
//::$'2"
%NF<SA
NX\).
<<F9Q
@ &@2
&=,(47Z8
.&>[6
23\Q#&
RZ%,=4@7%1S
>/4,2Q<S
%,&^EH
)'1\8*
;6S(^"
943H<
3!-,NF
.&0#DJ'_
1#_8E_
*% KDK
F,->0=
-2#LD&(%
-);6]Z=9
KV^19
79%<#$
?A#8R5T6
\9 B9U
Z'R/.5,W1
1K;'>9
2*.F>1&
=F99./
<NQ^0G&
?F.T)14
\B 9DC@.
)(W#7,
YJ 'Z1
)5Y'_
RA;PB/;&(
49/6Z5_
AF1E$9=[9!
:#*783
/=,8&3
&$+Y&&P
'1<%*9I!
3-301
1QR#H0
/D&13:?
:1>:37
"'3HR*P31
<98)-HBS
3<6Q)Y(
5644K
[/5Y%(T"
%27,-&)
_9H0_
:2\6!S
6N <
!Z7X.L)?TP\
-"S'1NE]
8_2#V<)?:5F@5-E$
)+YV;557
O?L7^?Q
!=@A)6:?>'
Z?8;Z-
< Z:3B'"*
3S5_/
M!^0>0=
[1N30$4(7
F2OX'1R?A+?#
K([% 7K
"_^!?T
</:*%D1JF
&:8<+D/..
ZS/8,D
* E0;
0H^5-K
95M6YV"
R<5"%5*I
( 5;R<9Q
G_V5:>
S?F8Q6
:3,+-;R
D_C>:,
41 B'O
)<>#6>48]N
0.&+L8_=1#
E^1;)?9<
8Q<+!(
9(*J&/
>F'U^(>0
A('/S
#3N]]!
'[:G;(!2"RP
\07 I!ZYW0F
EH8A/&%
B;"A:
,FQNY%
%&538;6\6
4=/80<;3&:
9+!R/=/A0,'8_
=*)@R2
E<L,0/)
&-^)?3G
\B$P# AV^UN+[
6;:W>=_@)Z
20!=Y(
?$'O:GG
>[?1#"^
S0;U? K
?.*2(K#9,
%#(IE+?8(
%!451?
5*Q"Y9%
<^6"R8
^(*#\W
6P2:_,=
A= =#EX
(U1;-@
0=<(:V/
HS'@%;
$RQ/L@C'
&9YZ(.
1T4(.;+C$3?
E";U!
)Z'8S@B
;2& 1+2
4UBFQ(
@?P([,Q/)L
2\%5S1:.Q$+
4_)/ 26_
$=5E-/D (
/4,2@&/
930P6DX"2
!;3'? J
-WF=]I
*\89;
?>2 2]
K>)T$.4H
,.!-,V<E8
:71"#?QL@[
:*]J59 G@F
=)B18(
(O_TNFX
<0/&&"
1^O:$3
#M'3) !"<9
58&#-3
>,X;%"P
&S;"R0
&!:+/;B**
579 ::I
-3+[/%
)YV.)3L_ #
.S 5.:
A(U,)-
3)4I^
%+$TB/:+
;8(@2\2
.>?,3-&*&]
#</Y"I$
_($1
KA'9(#D1
K<O4'>
%A<)*
?D"8
Y[2K;?
9 A!I$Z
A=ANCF) Y
;'2)QN
$;7+=$
[,,9$3
,>C8
_4N/8+
";A3,#
=?GZH:
Q-<FU
3*OM(+_
)BT9:<,$
,(0 -R+Z('
U]'*%^
&#;(E*,]?
/' 2?^6
%1&I;
NCX/6\.
'8I,%\U
E4K+2/
2T7+0+4
X<!$?C
=.H@=59
"*-,8KN1!
!C]>$=
R1N2O ?
MC>Q,&C%?
(,(*;;
9^?3'I38"\3
0C)/_"
)$6; $:
1;J'628$
Q8D$.SE
GC9.-
) TZ=#
.-.9B
)8F&.R"?5
A'2(*7'
W0.8>7
"C<;92G?Z
M_1?\O<J5;:>
T^S.K,
031)IX
7<N^;43U8
(5FJ8$
<PX(#7
!D-D974(C
FG=3]'
]8V_(
Q5R''W2
92O%@F
9D04!2=;
=?16'HQ
D8MZI;W
'; 0:ZU
]&5?(O
V?TX!:5C
&2'U]>F
#,/908
W;&8EX$
Z>+!P189
WB:B/'
.@"Z61$
4J]3R(
![ "(
/T/_57#
8\0UZ5
50_;L-1
'R3](F0<
M%*##T--.486
J82?K1
><</=\.
5&& OF
(Q ?<A
B]5S3;B8
2H31-N
9*@^:_
>4.>N"&$
;+*,:O
%<E$<'
(.V"';$
%_ #"DW
G] ,4+
)@9=:R
&%;6CG05X8
DF'6[2
!@B& ZD
3N?#EX
8M=,*6
W4 99&,*#;C
<WJ#7*2%+
85BFY/599#
1Z0,YXO$
24?',)
:$ ^16&
2@=J$7/C#?
;3)%K[Y
W(#99&
='8YA)5
H"Y1VB$
1\BF$<
+1&-*$
DR4&9L!
)'85Z !
:#.]$!
__/^:;
0 94ED*
,)1/D:V2Y/<^<
#)/!ZH/
S6B6=H
T3^<3,019%
(3?X53
![*1-ZT-
*:&%+P ,<
#. @5#
1$/6%3
8$"9*_
%XC!P>SSD
^=2!O.,/#0
3&\4/Z#S34
.7!C,J
.',5#HZ
033U,7>8_
S*4@+A
^#.SSN"<Y
;U[ <%
$'.^&S
2X6KE8O
L>!*(
)YOB$(%
;3S)"0^,"8+KC]4
 :9'0<
:/0 26
X]?"7+
!XV2Y)_&
R+^]"
<[8()>1
]8_#H9)
=@Q99&,/
<;80\
+*'>5/6.
R<^30A
!S#4<M
1<(Q,\)1"& 5
)(1=+O
N2=<'
#9T98<:;/#[@<XB!H8
?2>)#Z3
6A"E^8'+
N(BS+_
2^??5#T%)6;:
-+>=C%J(S
;?0Y[1%
G324]>%&</
U#5N81 4=
T*B$^M?
E$$3G&RJ
'8&7$$
$09UO>A
)-(!868
9"(+^W
,H;:E#
V0?>;1
<,'A-<@
--=F:/G
DH#Y9!
"*Q($E.8
!_3$A'K?#
,7%J.'
'Z;8>RC
48535&C
@/!("3Q
O#6&"O=AV
6!CFT7%
#>#:9B9QV8
-!S?K9F
;*,(>2
C(2</:
AGD_O'!E7
$*;1X<
/H<';>#*D::E"$'Z
D(F5_C(
AZ<\7=*/
:R<*?2+3)@#
7[#A$'00)
2:@9I+%
Q9LF^J)8S
_2G+$N
4&\46$D
P).&(E 7R
&7B#(Y9
:A$H..
SR?X' @I: Z;1
![&/^7?
;,'40@H>E
#./H;+,Y!O'& E9
V)B0P,8&
#T%^LC
!61 N%/>F
=?42TC
\*#T5F
-A#,,%#
M3?3(+RDP'
& ?:ZE
:,"28]8;5
J(FZ""
,0)7A0?
[,$)7<
?&-3#3
@YC=+)Q
<" 7K>'(D
O^=-E(5^.57$;
:;%(\-"BH#
,6+H+C
B(% Z0
#A&9Y7
C1! G&OS
I'"31,=
L!8*7W8M
^I8231"
I^O'G,
R"#5;.1$&
59[_#2.@
^C:=S
;/"[)NA
$8=V6<
B24 !8
3R:"=@
V/W!C;*4E>;>
/DC?2^<(
=PJ./C
#BZ5)'4R
D"/<0['))H8
_/D_6QQ;"'
_I%4&=N$
38[2I%OX
(S+O8^S
+BJ9@@;8#?
O 3,#8
'7YQ0ZY* +<?
K;HHZ]T16 
;4@@ ^
1.&B\&
2#RC[P5X
<>3>)#
Z#_("1
YZ)0^L
?*Z"ZA
E*0]-S
9U/K&B]
4:#[>>9
8@$Q#=
^30=4&Q
U3P@&Y+71[
8B<LH'#-=
9!/$"H!!
'D>42D
?D+3;(&Y
&1:@B-X77
9 C*?:
814 E0
Z55&.S6X1GQH[8
L/;%)E
$/61;<S64
J'=?:,
:-:!M1
H'XL('
,K9%R=
;&)9E>5
:(*0F_
/-1[M*;2Q
=:<9W
*S+&R%\
1%6@ F
14:35'+(
KF/91
<$)-%5
8K W-#
;=?T;*'V
0%25ZC'
F14[M2V
(##Z[9
U7;)$!
-(I,"/
#)K;>,+?
UXW#E[
UXHV6$';(Q!*
7(=K[QM3
/47<8*
,0ZM90<
+3O,P!<!
9J1_ 1
@%+TY<
--&)L,);72*
<<?&%?
+6 F?W-
>"':#
?6( ?X(+=
&3,1AC
TM&^2P 10&?**
B8W>VM9
>9$!74&^
<G+>>*^.X\
ZXY:I93
E+"=<%-
<.B]OIER
3V?7&=F!71
*)2S7PA
.4"A3-9
:=+ ]
*RPA*"S
GH-<?D%
P)X4&[
E'*I_,
<9='&
=/)W(O3
<@"8>%
.TV;<3"\
S*58.L
?XDA3
2;5>(1
V'9EJ<@:
$U"?B'Y
?=\8X8
!N%;OM>C
6#^,*
'9Z<)"
2&OA.8S
OX(0C_
Y&;/9
(6,JQ4@>
>5?=+1\
^H/+?U0Y#
-D>=4F
5]([037;:N H5SE:5*"88
;^O3Y,/!R
D<P*$=5$S+
3:K 2S5*
&;[KC8
"=!@O"[.<#
1*$OCA<
"E4G *NX$E
IA 6!<H
"Q3\F9
:'0F7?
:O-["/
"[4AQ7S
,09W98 E
:1R";P
+U"-'.N;,)Q
19%NV<
,-)S90!W^"6
.XO2(6!P
&.J>?$
('67+9''
0(T\U1
<D26Z3)
G,1?#51I$,
,)9Q)/
U3S)'^
$[F/<(
:(1(0;&
4&2$<D7
0^-?6-
NXZ#(#
+=!_S0
5!C>93SJ&$6E
:721"ZE&
LN!;4
QZ/AD]
$)?(!^6;Z
;P>5*-4
]OEZU<
.><6:I
[^D<GG
E1 /Q&
\2#'"],
<E 9 /<?B>?!Z
;NJ4_)!
><*4'
C5HCX5
X+/<[]=S
"+4!.#=
_.!3(:
CD9<DP
K8"/E#J
T12:KH7
/"1R7(
E."H21#
H'" =3"
8\$""?>
"A[409'4
H&;?'?
8 +6+';='
S8H'H\Y
16=T;),05
= :##1E
;<-@/;5
24 -;RG
(H?24_
49(_=
I9"J?'
YQ<'/5
<3($' ^
PS6CD-U
3=%F0
$5>Z.#
]1$:CF/+
>5.(#4
](S$_LD$N&X
=(:CY$
SN3?$0K
?<)=@)'
'O&[\&
F-8:P<
(,/'>(,.Z
+J'".9/
Z +> ;?
--/V1A
S -'<43
(X/&"&86
>'Q@Z*)
&:?&Q802
9S;'N<D"@82
"K>933
#6%4$E@
<RD[R6< 52
?ZM !':A?0
$U0; M",
N9#-7">41
A0I(;=8
)'-A!JZ
U3P6_[\
-C;$0V7
N?>E.NQ=
-)D"C<
P069Q,6K!3
HL?]U3+
%S#4? 13
2EO"(1G^9B
Q397(5
&-S8/02
&;&677YI 6%5
6//1"5]6
!#D87Z-
#AH%^(
'33.\!/7CD?]3)Z/]8=0_!;
:[U!-V 30
609?#(*O
'S!;@ Z
#\RTWK
YT/<0>
1D@:R;#A="
]S+)++
.9[/(;
"2MBE5\
V4B[!2
+ /;[H9
0<(=)G
-(77(H
YZ3,W+81;X
;".4G1!
8#@$*7
002Z[%<
?D1"1A- 
@/DE'0<
6!=S! P-
F6*<<@
3';.?
(KZ0;
%D$%4)_
]0.4-7" Z
/5+(+
9M?6XUX>3+?
57_Y)9
,U/\3\
:XZ^97
%/';<7'
Z7Z":CQ4
1A#5<)X72*8
!A:;;])
^9P'=3
]^95<X;,9
&]K!PP1
69,(4783?%
5*0"\?
8S/=",#
($0=R1
7K"1&)
;,<!8@
7'&[D1,6\XP3
14=:9S:3&
6+QFEW
6)% *-R
1X:5 20
'5-.X>>=2=
"4X9O'(,<
_PO_(#&,74
=3;R=C
BO[8*)D#!9G98
S<F4@.
U>U5@]
>"Y0(P
#.M/'
CNA2 G@
BZN%)R/L
$'$*882
8;49S
;[6>!6
-8?Z/\5
5!U:&(
>-I(R"
)C&@##
",0R2
>C2$6;
7F(9&/ R
) D0V$9
96!63((<
*%U!0
@2)S;>
?]E]'(2O
N3(2R*!BV(
&<&0.,
ENJ:5.\[C2VI
'$L!AX1;^HM!
O=GA1>
,2%?0>,
-@0X-.=J;8M
'T=V6F!18
(EI2&*I1;6
H]*.TGE
K'2,L:
<%&=<"&
&=9B2U<
Q6(Z 6
I"18^A2#0<#
0@G:B*
Z.YCEP
6=-#,DM
!6!=ZG
=739Y4
$T<?(#,QU
<=3I3Q7U
%[ \2X(
J4&:39
<:B269
:+5/!>
B13%'E
_K\-"6
(')>8&R.
,#)_0.(
Y7)&I 3,9
:<629^
1AL&" X
.])1:M&Q-*
KBXP]>O
:^1.*G
5')7'(^
;,T]V#
/W :'/RV^
,$"%[)8
)@/ C2R
"=W'U-
*:F,@03U?
:KP\ AP2
P14+?D_9^
(]#%#-EX
93%P-"@G0
D)503
'SS.B>
<X<,,7
T<%Y/G)""
W!#"O"D
]A>/ O% W
7G/7')
Z55\47
&$]A3#F
3(J8[-
<>.<89D
805==!-^
!(4)Z37-K P6
2 ?:'
)#,!82-G
*[..$P[U"
1K4E^?;!
'97E$H
T")M&0W/4?:/JRQ
G","\<'
I-P7Z.
8#8)B,!;<$$
<Y(9%R=\*
8+8(4_M3
,&*SK3 /"=/"
U;Q 4+Q=
:?+$'8*@_
947$177%
/'1'1-H
;;0;>8%
.R4^JC]M:
%3=;R"^E
O>-=='\3:E
\>0$>'
>"EXB*/
ES5C+
>W;).-<4ZE.&=3
T?2%G02A<.
N '=)B$5@
$30#.U&9UG^
%72'B^97%1
&?(#1:I/4;
)7":9W
0BZ'&#
)T9894
3:$%F
V.<X'&
7 ! #D-
#.$> C55/
<D5#;[
RT9R7C3
M'02#?/&
_@61H]
=8'6-?-
"\5F6S
-[("TC51WI8)#9
K.822
[#F!)4$7$2
@7500<
;)#D\!
3B]0Z2N785
?8^BSR!Q
#T,#:J=
3(!5B+'.?
?!8(O.
VQ?I>^
Q>!RQA
3D',8A
'G01/5%@&
!!<J>:/#&
>!P;XW
#F.BH/, ?=!V
FE4/8
L# 0\ /
;(6E#/C
#U%0"
K _]N&
*&8?6?
[J1& @
<"/W;J
R==XR-J5
1X)7,X2SS8
<3SS=<"0
Q)Q:UB$
A[?C%U
+89?0+
Q>S6"&64
;9!@/UX6
08G$D?<
7>'<"^[
PL",>.%:"
X4"!,0 4'M
C2)0]]-
<[9'">
,MB.#+P4@P
PS#A5_+6
$QY&V%/
V%XA":
HG:6/8/"_9
[&!#2B
ID. 1CD,N?
B.8=B%5
5]K5$*
\-Z?Z*:<]E
_-<9D0-
,@44B%
R,"L=8#
PU"##
?O%*G?A
+0%W-Z+
I8?@-)
A;"B.*
-. F1V5
FH9M"
:6?L@%Y
8B< )*
1[="=O0
0#J#[?%
5>S#Y?8A
\0%+9L
,8>%S66
$;R%3&
LQ9SVY
\$DO#)':=48
U0/15?
;R#521
:31ER"
DB]?:9$
)3=091
3/ *:0'
@3@"::7%>(
\2^2]"&C?
('E!+2).&
5;E E2
<!D,A?#/=
C++6YI
\H8HI_%V_
,%<<9^
?6&0;;
/ A&:>%&>$
"*#:3Y
G<;I
V#6@/:3
DOI!? S5
B1&1#S 0\U
=;(D^39PO?X
AR4=[)
HI!"E-
QMFH9:
9]G9:5
?*H6#N
,=!.D92ET
\=0P5
4\>?B)$V90""
:S3#/28WJ
;72Q-"
+;'3$/
('"0ZR:
4$9-A)
 &+
)*05F"W
DZ5.I6
D\N'A)IE<
*U3= YS
V$TM)3
>"DY \G)
5#H#U;
$_Q\-]]
(%8([Z>9
$*%)XF7
4+;2+(
*-2*8',,59
A%H%#OXS<#]39>2
-?'IHI.
@Z.WY8
9&&X^>"O
9[8,#"[
E(:%$09
XX2[R,=
?[U<,&
%7$1
?.)\<,
7#Z1LP
!AI=89&
1J;E G
$*7#^3K_HJ
4$9U8^7
,;H%-S
!/YG)788
G*)/;R
:5 WN$>C9[
8P=\[S
'1[/-A
3^<+-L>%YT
\N673<
:-(*/#
2?0IR#$
72@^ $X
>)-K=4
"A:D39+%
*(#=Z#Y0
78CR.S(
49155;
2WV7:(
8+=1H'
-ZPS%736=J=
%1'"N[
.\(RIRV&E
^9,E(V
- 2:#3Z+
.:I_%2'.:
F%),;82
<6]7X?8
<CAI!:
R #,9&
>")+"*
S"C'<;[/&"
_K_VH9&9
79$!.6
A3A3+'0
?LX,9V
62\?(_:
%97?'/
]$:+C
1F*B$+
SH($QQ4^
1._?2=U
0-?B1@
(0UB/TR%K4P.
V>#*,,
S%.81;K
B2&"QQ,.]
8N&[3:
U"<?+
EP)_(,
02Q=:T(&
8."!8?"
E",97,
\A007#
W?8,09',6
R( <%$3JY
^ /D#<"-C9
#4CP#N
=]:$-?4?@
3 =OD'
(-^)"UN^03
?]8(R-
.=B$$?
1>B;/
3R9< 7$
5!/:?E
;F)(,^
^/?!,P4Y
M> 1X^
2PTU_#
!F%N&
+]8L0"P&
<8ZJ&,
36'\DD$5L
D<=3"R
42D1">"
3I7=#O
=3($R;
29$33]C
-=YA:%*%
-?%85<
00&<.
:RL##T"
@DN<=#;2F
3D"3(P$U
N!"23E
4X91</
!'-1[O2
% 8%C&
V&'-$\
!/@?X;#
7\4Y& =
(=.8HJ6()X
.H0I/)+)
7QAU3
R^<"#/
B; I( R
9@P#O
<1"+?Z
>:A<6R
=133ZLY
*3"3P%
$<G(U?
5R/1"1'7>
6$;?&&
WN"@W3E2
P&7MD\>
&P=5'+=6
'9?#T,
A(E=$+
;-<&!H
3=2L3*
JG)3@*ZZ/P
,7111.8K6
$[V)];
2X*:Y..
)+J=.]
\8]KH7'C
*;4B0><7)
(86:3:)[>.
=O4E'39
<1(,5B
;G37&Z;1$2[*(H
$=>1*Q"G
CA027
7>[_=9
364 =
B03K
M =XR"
@<.9>
(%:4M]=*-10
["F15*
;9]\:8
>7OC3=@9
6<2 =3G[
E! L*7
=#W22F%
1/L?8N;1&.
78T&A;M
E3+3,<X
"W\>7%
&W9)'H
=.\!.@&
","_77"0
^6D2':ED9
H;"1\SC
,-,/-U
%*D5 0=%#00
2-6R4#
*W#[8V:
;\1?-6
&Y?>RY
_ 'V3
EW2\%#Y7L
8_?::&=
?C&<'V4>]78
,*ZQY
]]&]*#$Q 6
>89(R.
WL+&-!
)#.!&[T
F-66[4@
1<A@*.
>9".39'
65BB&:(
&(B7<X'
R>K?#>
+%0;N0
S&$(!(K-L/
,*Q<
S(?&=X
W*) 2%
<'G0;I(Z/='
:+&?3A.,
R$:;8^,D,9
T2/E""R)6ZX&&
Z7=FB/
!-=0'
#9MX)@
-D=7B7
03#8-9!
.,5=$&
B-'QB
+U>2/42 #
Z',.H+0
237X"T&OF
O!>F.!D
X'##SJ+
Q(//1&*
?/!!;\
="=,7\R"
C('<2%1
82>22:
C:L%%9
7Q'>Z4
;[\1%?NI57
(:PV]
,&36@Z*
M*/< U
V0+;>3)T"
]<)D/
0,/)0;
3P["+71
*0=7;S
?+?G_
5-A,#,,
!B#X(%I0
Z/<20;021@R=
%6F20@
2#F61\
8-89&""VBB
2S&!03/.
0*!3PZP$=-7Q4
<EIS+(>(
3P0'J@
*$Z2FRB
>'/+8BCB
1&E"E"CA;B[
,!/;W6
_:%;"!
Z[5O*?
;2/>3
)"F74/
5;T4[#
7"37&@
#NF2.3D->S
P1Q/A/:
/Y1 +
ZO0@%@G
H<E)2P1
RX"[*3@2-'*2;
H'-X,;%/4
D8'0>QZ+
1! ZW.>C7
Y#!3$"
QYY 4&9?
Z"8*5'7
U3E1I:7
E/5E4#YY6
03$H.ZR6G
)V:UN7+8 /J
&,=L<H
+<8_%Z.
3G#+M^3P_
^QE911
8\Y'<+:
9S7F)C
(.K:#C
%QI^&-0H!
:@ N3.!
ZC3>+
#D"J3(
X[:D/L_
,?#X6>$N
#U=\&]RL3==,(
C!]X:(=
7-8R@B48
!-(S5BY%
1'JB)_%9
O7'RW&
]0H7:
C^I.0=&
87BJX;
L#N^/3U
-$=&6O
A#'%'^.D
30]U;8
\;7$9^
-\B)>
#CB16
H# +YCDZ"
D2@X#K
#5\]&J=
*H"Q\W
Antivirus Signature
Bkav W64.AIDetectMalware
Lionic Trojan.Win32.Miner.4!c
Elastic malicious (high confidence)
ClamAV Win.Packed.Zusy-10017004-0
CMC Clean
CAT-QuickHeal Trojan.Miner.S32361963
Skyhigh BehavesLike.Win64.Trojan.vh
ALYac Trojan.GenericKD.72541409
Cylance Clean
Zillya Clean
Sangfor CoinMiner.Win64.Kryptik.Vfkh
CrowdStrike Clean
Alibaba Trojan:Win64/CoinMiner.42418721
K7GW Trojan ( 005af85d1 )
K7AntiVirus Trojan ( 005af85d1 )
Baidu Clean
VirIT Clean
Symantec ML.Attribute.HighConfidence
tehtris Clean
ESET-NOD32 a variant of Win64/Kryptik.EDF
APEX Malicious
Avast Win64:Evo-gen [Trj]
Cynet Malicious (score: 100)
Kaspersky HEUR:Trojan.Win32.Miner.pef
BitDefender Trojan.GenericKD.72541409
NANO-Antivirus Clean
ViRobot Clean
MicroWorld-eScan Trojan.GenericKD.72541409
Tencent Win32.Trojan.Miner.Kzfl
Sophos Troj/Krypt-ADL
F-Secure Heuristic.HEUR/AGEN.1371803
DrWeb Trojan.Siggen28.37485
VIPRE Gen:Variant.Tedy.486310
TrendMicro Trojan.Win64.SMOKELOADER.YXEDZZ
Trapmine Clean
FireEye Generic.mg.3b43da1be0c39802
Emsisoft Trojan.GenericKD.72541409 (B)
Paloalto generic.ml
GData Trojan.GenericKD.72541409
Jiangmin Clean
Webroot W32.Coinminer.Gen
Varist W64/Kryptik.LBJ.gen!Eldorado
Avira HEUR/AGEN.1371803
MAX malware (ai score=82)
Antiy-AVL Trojan/Win64.GenKryptik
Kingsoft Win32.Trojan.Miner.pef
Gridinsoft Trojan.Win64.XMRig.tr
Xcitium Malware@#3kmsw4y8kq8u7
Arcabit Trojan.Generic.D452E4E1
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Trojan.Win32.Miner.pef
Microsoft Trojan:Win64/CoinMiner!pz
Google Detected
AhnLab-V3 Dropper/Win.DropperX-gen.R622355
Acronis Clean
McAfee Clean
TACHYON Clean
VBA32 OScope.Trojan.Win64.Miner
Malwarebytes Trojan.MalPack.Generic
Panda Trj/GdSda.A
Zoner Clean
TrendMicro-HouseCall Trojan.Win64.SMOKELOADER.YXEDZZ
Rising Trojan.Kryptik!8.8 (TFE:5:puXfYWFTsfG)
Yandex Clean
Ikarus Trojan.Win64.Krypt
MaxSecure Clean
Fortinet W64/GenKryptik.GQCB!tr
BitDefenderTheta Clean
AVG Win64:Evo-gen [Trj]
DeepInstinct MALICIOUS
alibabacloud Miner:Win/Miner.pyj
No IRMA results available.