Static | ZeroBOX

PE Compile Time

1970-01-01 09:00:00

PE Imphash

f0ea7b7844bbc5bfa9bb32efdcea957c

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00001000 0x008f7f8f 0x008f8000 6.20533325499
.rdata 0x008f9000 0x005780c8 0x00578200 5.15734627227
.data 0x00e72000 0x000af370 0x00041200 4.77650455098
.idata 0x00f22000 0x00000490 0x00000600 3.61283174139
.reloc 0x00f23000 0x00026ec8 0x00027000 5.43969067823
.symtab 0x00f4a000 0x00000004 0x00000200 0.0203931352361

Imports

Library kernel32.dll:
0x1272040 WriteFile
0x1272048 WriteConsoleW
0x1272058 WaitForSingleObject
0x1272060 VirtualQuery
0x1272068 VirtualFree
0x1272070 VirtualAlloc
0x1272078 TlsAlloc
0x1272080 SwitchToThread
0x1272088 SuspendThread
0x1272090 SetWaitableTimer
0x12720a8 SetEvent
0x12720b0 SetErrorMode
0x12720b8 SetConsoleCtrlHandler
0x12720c0 ResumeThread
0x12720d0 LoadLibraryA
0x12720d8 LoadLibraryW
0x12720e0 SetThreadContext
0x12720e8 GetThreadContext
0x12720f0 GetSystemInfo
0x12720f8 GetSystemDirectoryA
0x1272100 GetStdHandle
0x1272118 GetProcAddress
0x1272128 GetConsoleMode
0x1272138 ExitProcess
0x1272140 DuplicateHandle
0x1272150 CreateThread
0x1272160 CreateFileA
0x1272168 CreateEventA
0x1272170 CloseHandle

!This program cannot be run in DOS mode.
`.rdata
@.data
.idata
.reloc
B.symtab
8cpu.u
UUUUUUUUH!
33333333H!
t*H9HPt$
debugCal
debugCal
debugCalH9
debugCalH9
l819uq
debugCalH9
84t6H9
runtime.H9
runtime H
error: H
H9A8vEH
L9h(t
7H9S u
29t$0u
D9\$Pt
7H9S u
H9t$0u
2H9t$0u
L9\$Pt
L9\$Pt
7H9S u
L$xM9H
8H9S u
H9BpwJ@
H9P8tkH
\$(H9C8u
H9D$(t
W0H9P0tK
D$HHcL$
tE8Z t/H
\$0H9K
D$pH9H
D$0H9H
T$ H+:
UUUUUUUUH!
UUUUUUUUH
wwwwwwwwH!
wwwwwwwwH
J0H9J8vtL
H9{8u?H
L9R0wL
H9H8vVH9H0w
kernel32H
l32.dll
AddDllDiH
rectory
AddVectoH
redContiH
ContinueH
Handler
LoadLibrH
raryExA
LoadLibrH
raryExW
advapi32H
i32.dll
SystemFuH
stemFuncH
tion036
ntdll.dlH
NtWaitFoH
ForSinglH
eObject
RtlGetCuH
tlGetCurH
rentPeb
RtlGetNtH
tVersionH
Numbers
winmm.dlH
timeBegiH
nPeriod
timeEndPH
dPeriod
ws2_32.dH
_32.dll
WSAGetOvH
verlappeH
dResult
wine_getH
ine_get_H
version
powrprofH
rof.dll
PowerRegH
gisterSuH
spendResH
umeNotifH
ication
GetSysteH
mTimeAsFH
ileTime
QueryPerH
formanceH
Counter
QueryPerH
formanceH
rmanceFrH
equency
runtime.
QxM9Qpu
T$@H9P
L$`H9y(
runtime.H9
reflect.H9
I9N0t_H
D$PD9D$T
H9QPt#H
rpH92w
I9N0tSH
\$HH9p
t H9APt
I9@8u3
r09q0s-f
,$L9+w
Q8H+Q(H
H9D$@A
H9D$@A
\$HH9S@
H9D$8A
runtime.H
runtime.H9
gopau&f
runtime.H
runtime.H
runtime.H9
P8H9W8t
f9w2uy
O@H9H@
9GODEuaf
9GODEu(f
l$0M9,$u
l$PM9,$u
X0H;CPtTH
sPH91u
l$ M9,$u
l$0M9,$u
l$PM9,$u
H+t$(H
0Hc\$8H
HHc\$PH
l$8M9,$u
l$8M9,$u
l$(M9,$u
l$ M9,$u
P+8S+t
x H9{ u6H
x(H9{(uWH
Q H9S u*H
Q(H9S(u
Q18S1u
P8H9S8u*H
P@H9S@u H
PHH9SHu
PPH9SPu
H9{(uF
x09{0u>
x49{4u6H
H08K0u
P(H9S(u
H9L$@uwH
L$PH9T$Hu
P2f9S2u
H9S@uwH
O[EFRH
sXhkd toH
typeH
El)=}ofH
_id n"pFH
SlbarH
SlbarRhIH
l$ M9,$u
H92t^H
l$ M9,$u
l$ M9,$u
l$ M9,$u
l$ M9,$u
\$0H9S
\$0H9S
T$0H)B
>8s"81
T$0H9J
l$ M9,$u
l$0M9,$u
l$0M9,$u
l$0M9,$u
l$0M9,$u
l$0M9,$
l$ M9,$u
|$09w0uc
r49w4u[H
O@H9G8uI
|$09wHu*
rL9wLu
l$@M9,$u
T$09T$,w
PEL9FH
L$`u3H
L$`u>H
l$(M9,$u
ct fnst
v5AMporaH
IKy L@aH
L_RI_b:6H
coRndc
`>TYUgldH
dS]tqY
o_JadzQH
adzQfsoCH
jequoreSH
>bn9tH
oy4u6HWvH
s@eNVE
{ahKfbfcH
riat2
L2aerrjiH
Mad-ollH
ollzwvAjH
D$&CdtGH
ux#,ens!H
,ens!d5,H
D$.ldH
IpKafH
<irpkenH
rpkenXoYH
Q"iotH
CaYc#S:MH
Envi|H
[]tQUKt`H
D$$JloZH
feFousveH
mk,e#H
mk,e#iH
}uStadw
wrwbtH
SeK0a'3SH
orgblkqZH
ZLOfkpQ~H
m|1;FH
CcVT_H
XZR3\PH
Q0`p4x7H
~(H9z(u&
l$(M9,$u
l$(M9,$u
x H9{ u
taon:3
GetuKC
orOatuH
Oatuon
H 9K u3
H$9K$u+
H(9K(u#
H,9K,u
H09K0u
H49K4u
H 9K u
H(H9K(u
UUUUUUUUH!
33333333H!
8TRUEt
8Truet
8trueuT
8FALSu
8Falsu
8falsu
>%!!#1
m_28125H
Zead[7]qH
tJJZtOH
Upg0TXR8H
k|!7j1c5H
|1a4b&_
>}z~x1
7JINP1
173ba~
m1?4H
#`>EfH
iM{4wK!LH
yet enouH
a]hC<nH
)snAYc
J(H9B t
D$HtDD
D$HtSD
l$ M9,$u
l$0M9,$u
l$(M9,$u
l$ M9,$u
l$0M9,$
l$8M9,$u
l$(M9,$u
l$ M9,$
ejvCc`lfH
F`QVE-,RH
hlaviH
*l_zW4nkH
DepL=RaNH
D$.^VH
L#QiVbR_H
_pKd&aJXH
?<',fidQH
abe2bTH
>zocw1
tJICF$H
8>"Z H
P2f9S2u
P@H9S@
M'TM:u
struct {H
Q8L9A@
#Aar+G
s$shH
P8H9H@
W%<>X*
>NCbYH
Vcje:q
{[HppH
oqJay_2nH
>^]IN1
kpekeH
7AIP>1
vunmt
cemsingIH
z2cjIH
dadj/kiiH
lecmFH
cmFM<un?H
;+SST-
tyUe,
` @,6lE
;'e$gH
3iJ0a H
n+erf[,H
kFyeldB
FyeldB
n+ex oU
e notH
e notB]BH
nN:s.H
stringODH
oQtwoH
| boFl
e.S{gH
ue.meH
/=<e#
=leY3]H
7+)07%H
F4(cNIH
F4(cNIVH
e*.YIld-H
bOJtZTr:H
%eflzc
ef&-"!
gH<tGt
>R:PN1
p[~xo^J?H
tY3J`I
2nSWvgp
JeUZQbewH
c6H6nH
PPH9SPu
PXH9SXu
Z(H9F u>
\$0H9S0u!H
Q8H9S8u
Q@H9S@u
IHH9KH
l$8M9,$
l$`M9,$u
l$(M9,$u
l$@M9,$u
l$@M9,$u
l$8M9,$u
l$(M9,$u
l$8M9,$u
l$@M9,$u
l$0M9,$u
l$@M9,$u
l$@M9,$u
l$8M9,$u
l$0M9,$u
l$0M9,$u
l$0M9,$u
l$0M9,$u
l$HM9,$u
l$(M9,$u
l$@M9,$u
l$8M9,$
l$0M9,$u
l$8M9,$u
l$8M9,$u
l$0M9,$u
l$0M9,$u
l$0M9,$u
l$@M9,$u
l$@M9,$u
l$0M9,$u
l$@M9,$u
l$0M9,$u
l$8M9,$u
l$0M9,$u
l$0M9,$u
l$0M9,$u
l$0M9,$u
l$0M9,$u
l$XM9,$
l$0M9,$u
l$8M9,$u
l$0M9,$u
l$@M9,$u
l$@M9,$u
l$(M9,$u
l$(M9,$u
l$(M9,$u
l$(M9,$u
l$ M9,$u
l$ M9,$u
l$(M9,$u
l$(M9,$u
l$(M9,$u
l$ M9,$u
l$ M9,$u
l$(M9,$u
l$(M9,$u
l$(M9,$u
l$ M9,$u
l$ M9,$u
H H9K u(H
H(H9K(u
H8H9K8
{zw_zmEnH
zw_zmEnUH
Januu!D
Z070u!D
2006u-H)
-070u=D
-07:u;D
00u-H)
azfpsd\zH
time.DatH
time.LocL
time.LocH
ocation(H
time.UTCL
Mc$$M9
Mc$$M)
8WITAuP
t$Ow2M
C]'`5H
;nullu
2"+-cC
EasterMH
rMytap*H
!us1ia TH
1ia T
pxl stH
xl sta}dH
TPhyH
UzOu#H
yo S4H
yo S4@
S#q8n=i
')>imqH
Alw*UC
>6"6+1
nRmeff
ctiJnH
ctiJnaH
9O(a/iH
XX ?n DH
\m$tbogiH
88&S<H
ctiJnH
ctiJnaH
!Wee6]
o%W+.u
iX3jzH
x8H9{8
l$0M9,$u
l$@M9,$u
l$@M9,$u
l$PM9,$
l$@M9,$u
l$@M9,$u
l$0M9,$u
l$0M9,$u
l$@M9,$u
l$8M9,$u
l$(M9,$
l$0M9,$u
l$(M9,$
l$(M9,$
l$0M9,$u
l$0M9,$u
l$@M9,$u
l$0M9,$u
l$(M9,$u
l$(M9,$
l$0M9,$u
l$0M9,$u
-53)KH
J(H9B t
n)"box
;fileu
;pipeu}
;udp4f
;consu
;udp4t
;udp6ut
l$(M9,$u
l$(M9,$u
2ack'tbiH
eO(onlVH
D$"3tH
8..u^H
?fileumH
8\??\t=H
\$ 9SXu
Q\9S\u
>RQ'Z1
@Q_1E=
xPH9{Pu~
xX9{Xuv
x\9{\un
x`9{`uf
xd@8{du\H
l$ M9,$u
l$0M9,$u
l$0M9,$u
H 9K u
H$9K$u
Xo~jw@H
l$@M9,$u
l$@M9,$u
l$@M9,$u
l$@M9,$u
~>rTL)
hQcOJo
\aP beYH
J]ni<mZeH
fbsPhi=:H
8n<OwG
l$PM9,$
l$PM9,$
l$PM9,$
l$ M9,$u
l$ M9,$u
l$ M9,$u
l$ M9,$u
l$ M9,$u
l$ M9,$u
l$PM9,$
l$PM9,$
l$PM9,$
l$ M9,$u
l$ M9,$u
l$ M9,$u
l$ M9,$u
l$ M9,$u
l$ M9,$u
l$ M9,$u
l$ M9,$u
x H9{ u
;nullu
<Ot-<XtL
S~rnksH
w}PregcXH
l$0M9,$u
l$0M9,$u
l$(M9,$u
x8H9{8
9mtimu
8pathu
:path@
>pathu
8gnamu
8unamu8
T$8H)B
/#[N H
[N g>4$+H
GN?_v,
C en1oH
d( hS=P)H
gowkpaxtH
D$"m\H
T$0H9J
l$0M9,$u
l$0M9,$u
l$@M9,$u
l$8M9,$u
l$8M9,$u
S(H9P(u
P(H9S(u$H
SHH9PHu
P0H+P(H
P0H+P(H
W0H+W(H
P0H+P(H
p(H9p0
\$@H9H
P(H9P0u@H
H0H+H(H
W0H+W(H9W
W(H9W0~)H
fWT.NwH
PXH+PPH
WXH+WPH
"&jDNEH
trbH)
D$8H9N
H9H sJ
I9@ sML
blamoLPEH
Ig(XlH
rVr0KH
l$ M9,$u
l$ M9,$u
l$ M9,$u
H9T$ t
L9L$Ht
aA/z8]
Z(H9F t
l$@M9,$
l$@M9,$
:writf
l$ M9,$u
( kiH
( kioH
l$XM9,$u
T$0H9J
<$tI<&tE
r8H9Z@t
rpH9Zxt
8..uXH
8//uOH
c`p&T`u
J(H9B t
l$0M9,$
l$@M9,$
x @8{ u6H
{0H9x0
{PH9xP
xY@8{Y
{xH9xx
l$ M9,$u
H3T8 L3L8(I
H1T$0H
H1T$HH
H1T$PH
ze @iXeH
: VaRYlPH
I/pz"5: H
e?jelH
&pgah6U9H
qz0/`2
l$HM9,$u
<=WraL}%H
`z/`H
o\$ fE
o\$0fE
o\$@fE
o\$PfE
o\$`fE
o\$pfE
l$HM9,$u
l$HM9,$u
uz#Ic,
6M@oeH
a|ix(H
[V4g[ H
h2Edin&H
~d$ fE
ot$PfA
S H+Q H
P H1s
8JLMNA
8ABCDA
_yX+D}
l$0M9,$u
l$8M9,$u
l$(M9,$u
l$8M9,$u
l$0M9,$u
l$0M9,$u
l$8M9,$u
l$(M9,$u
l$8M9,$u
l$0M9,$u
l$0M9,$u
l$8M9,$u
l$(M9,$u
l$8M9,$u
l$0M9,$u
4ei[}]
R4OH%e
?Go34
9m1G[N
%Y8199H
P8H9S8u
l$8M9,$u
l$8M9,$u
l$`M9,$
l$8M9,$u
l$HM9,$u
l$0M9,$u
l$0M9,$u
l$8M9,$u
l$8M9,$u
l$`M9,$
l$8M9,$u
l$HM9,$u
l$0M9,$u
l$0M9,$u
l$8M9,$u
l$8M9,$u
l$`M9,$
l$8M9,$u
l$HM9,$u
l$0M9,$u
l$0M9,$u
l$8M9,$u
l$8M9,$u
l$`M9,$
l$8M9,$u
l$HM9,$u
l$0M9,$u
l$0M9,$u
l$0M9,$u
l$(M9,$u
l$0M9,$u
l$8M9,$u
l$HM9,$u
l$8M9,$u
l$8M9,$u
M{lLGH
x_:<u;L
:numeu(f
:utf8u
:tag:@
:privuJf
w3 G@ H
ugP5RH
ioUj"naYH
aYt9ifoQH
/K_hRajH
/K_hRaj H
nlh!pH
pPp/j X9H
\36&!0"H
e-=r;ng H
=r;ng a
"/H]-W? H
bPoO>a+H
l$ M9,$u
l$0M9,$u
l$ M9,$u
l$@M9,$u
l$8M9,$u
l$@M9,$u
l$8M9,$
l$@M9,$u
l$8M9,$
l$HM9,$u
l$@M9,$u
L$H8L$'u
L$H8L$'u
cr\pwoS
[ U_^kgrH
soyausa
gslr.}ryH
rdglgfeH
vcdya:l
9P-25uN
l$8M9,$u
l$(M9,$u
l$(M9,$u
l$0M9,$
l$0M9,$u
l$@M9,$
l$@M9,$u
l$8M9,$
l$8M9,$u
l$0M9,$
l$0M9,$u
l$@M9,$
l$@M9,$u
l$ M9,$u
\$0H9S
\$0H9S
I H9K
8lmnoA
8defgA
8pabcA
t1[R}H
l$HM9,$
l$PM9,$
l$`M9,$
%Z=qH
T$0H9J
|$HH9w u
FJ'tiH
wum:MRH
fC^B.H
valadH
havhzs!H
7BBJJ1
|$0H9w
D$(f9P(u
P*8S*u
l$ M9,$u
q^V{lH
8leaku
T$08J
S%Z=q
[::ffff:N
invalid J
d PrefixJ
nviO(H
e*i|hH
B3wD< b'H
ctc]sH
x(H9{(uUH
l$@M9,$u
l$HM9,$u
l$0M9,$u
l$@M9,$u
l$(M9,$u
l$@M9,$u
l$0M9,$u
l$0M9,$u
l$8M9,$u
l$0M9,$u
l$0M9,$u
l$0M9,$u
l$pM9,$u
l$0M9,$u
l$0M9,$u
l$0M9,$u
Yk0pRoH
i<sgff
'f$"_wL&H
f$"_wL&'H
r&;2u*dyH
%T.tPH
H9P0u$H
H9P0u$H
H9P0u$H
H9P0u"H
l$8M9,$u
T$08J
D$(uMH
9windu
:andru
:windu
:planu9
:fileu5H
:bindu4H
9solauJf
8fileu
8fileu
8fileuBA
9unixtn
8dialu2H
<$tcu)A
l$(M9,$u
l$(M9,$u
:CNAMuh
8CNAMu.A
D$|}s1
>tcp4t
l$0M9,$u
/howH
tqH9=!
al9d.H
T$D9T$@
8BADCA
8windu
?ipu51
?tcp4t"
?tcp6t
?udp4t
>tcp4t
>udp4t
8windu
9listu8fA
<$dial
8tcp4t
8tcp6u*
8udp4t
8udp6u
l$ M9,$u
l$ M9,$u
:tcp6t
:udp4t
9tcp4t
9tcp6u'
9udp4t
9udp6u
l$ M9,$u
:acceuNf
;succu f
:unavu
:retuu
~NrvH)
:unixtM
8tcp4t
8tcp4t
8udp4t
8udp4t
8udp4t
D$,`.1
9unixu
listu_fA
yjstocesH
D$"pgH
L/L8E%SGH
D$"f23FH
hci9cx
&JKVnH
>rebl1
co$ZEuhKH
{XC4oQZH
eB6]AH
N(H9F u_
N8H9F0u:
H9{(uu
x0@8{0uk
x1@8{1ua
@8{2uUH
x 9{ u
x$9{$u
l$@M9,$u
l$@M9,$u
l$ M9,$
l$ M9,$
l$0M9,$u
l$0M9,$u
l$ M9,$u
l$0M9,$u
l$ M9,$u
l$0M9,$u
l$0M9,$u
l$ M9,$
l$0M9,$u
l$0M9,$u
l$ M9,$u
l$0M9,$u
l$ M9,$u
l$0M9,$u
l$0M9,$u
l$ M9,$
l$0M9,$u
l$0M9,$u
l$ M9,$u
l$0M9,$u
l$ M9,$u
l$0M9,$u
l$0M9,$u
l$ M9,$
l$0M9,$u
l$0M9,$u
l$ M9,$u
l$0M9,$u
l$ M9,$u
l$0M9,$u
l$0M9,$u
l$ M9,$u
l$ M9,$
l$(M9,$u
l$0M9,$u
l$0M9,$u
l$ M9,$u
l$HM9,$u
l$HM9,$u
l$0M9,$u
l$0M9,$u
l$0M9,$u
l$0M9,$u
l$0M9,$u
l$0M9,$u
l$0M9,$u
l$0M9,$u
l$HM9,$
x H9{ u6H
*jDBj%
bFuWytH
M{lLGH
QZ^&A!
$D3T$4D3T$ D3T$
D3T$8D3T$$D3T$
D3T$<D3T$(D3T$
$D3T$,D3T$
D3T$0D3T$
D3T$4D3T$
D3T$8D3T$ A
D3T$<D3T$$A
T$ D3T$
$D3T$(A
T$$D3T$
D3T$,A
T$(D3T$
D3T$0A
T$,D3T$ D3T$
D3T$4A
T$0D3T$$D3T$
D3T$8A
T$4D3T$(D3T$
D3T$<A
T$8D3T$,D3T$
T$<D3T$0D3T$
$D3T$4D3T$ D3T$
D3T$8D3T$$D3T$
D3T$<D3T$(D3T$
$D3T$,D3T$
D3T$0D3T$
D3T$4D3T$
D3T$8D3T$ A
D3T$<D3T$$A
T$ D3T$
$D3T$(A
T$$D3T$
D3T$,A
T$(D3T$
D3T$0A
T$,D3T$ D3T$
D3T$4A
T$0D3T$$D3T$
D3T$8A
T$4D3T$(D3T$
D3T$<A
T$8D3T$,D3T$
T$<D3T$0D3T$
$D3T$4D3T$ D3T$
D3T$8D3T$$D3T$
D3T$<D3T$(D3T$
$D3T$,D3T$
D3T$0D3T$
D3T$4D3T$
D3T$8D3T$ A
D3T$<D3T$$A
T$ D3T$
$D3T$(A
T$$D3T$
D3T$,A
T$(D3T$
D3T$0A
T$,D3T$ D3T$
D3T$4A
T$0D3T$$D3T$
D3T$8A
T$4D3T$(D3T$
D3T$<A
T$8D3T$,D3T$
T$<D3T$0D3T$
$D3T$4D3T$ D3T$
D3T$8D3T$$D3T$
D3T$<D3T$(D3T$
$D3T$,D3T$
D3T$0D3T$
D3T$4D3T$
D3T$8D3T$ A
D3T$<D3T$$A
T$ D3T$
$D3T$(A
T$$D3T$
D3T$,A
T$(D3T$
D3T$0A
T$,D3T$ D3T$
D3T$4A
T$0D3T$$D3T$
D3T$8A
T$4D3T$(D3T$
D3T$<A
T$8D3T$,D3T$
T$<D3T$0D3T$
PXH9SXu
P`H9S`u
8S(udH
t$ H9D$8
T$hH9P
[2 Q?!7
wt.|YH
Xotb8D
HHH9pPuDH
WHL9GPt
D$@H9D$
Hz3Tw_~H
D$$A3(4H
|$`H9\$hu
CQV9 (H
Uzt 3 ubH
cLHnqH
{7 EadH
czeaDX
i\'6 c]nH
ci>Bv[H
>Bv[=5*
"w#7paH
th[ =dH
XhosoejlH
jlyssC
xF09<2VH
B>U]c2ssH
j5jXbH
_-ziZ zoH
s499'nqH
Wa^vVp H
4cH8FH
;zQELH
S 8:A9
"T0J)H
!d~lv<@nH
d~lv<@nvH
xp)6~ 6{H
p)6~ 6{yH
alcdjvxsH
ic/cogwnH
qd9x3s bH
<3Z+yaKH
OK^"#Z
9jeaFH
9jeaFr
ra7d=QaDH
x5P95Bi
4Lm`VnH
VnB;E
xlu2)m
xf09:|
ti6y H
]:'-cH
T$0H9J
D$@H9D$
l$`M9,$
l$ M9,$u
l$0M9,$u
l$0M9,$u
HHH9P@u H
aA/z8]H
m2p\"[
ug0CaY
L)@pL)
2-byD1
$2-byD
nd 3E3K
2-byE3K
te kA3K
>E3C4D
expaD3P A
expaD1
expaD3
ykr8RO]
#k 0tt
c~_ch3
MTX2:yH
expand 3H
2-byte kH
t/t-M9
>)2{ H
aEl%13:iH
2l5nval*H
d.]gfn
/hJcCa>0H
p>C$^&H
7>RH>1
TopoZH
Zttd:4erH
tN\ica
PywE%H
Ero& deH
^]K:aJIH
YnxuPzH
xuPzP$KWH
i*i`eftyH
D$ ~dH
l$ M9,$u
}_Sk'H
fE9,$u
<LfD9x
H9Z uw1
D$\V21
D$"tls1f
2PS>L6!UH
uzsjsr oH
r oV\fbpH
8;c2NDZxH
e06DPRH
9c?: +eOH
Q?B]9N[@H
_t c".
n*ionH
edbPeUmaH
with |nVH
%')%(H
K s=i4
29)9:
elN:,i'^H
e?g;hH
aOse H
inUGhei
cu\tH
Uat"}H
7-:+(-H
m{h{vH
c neyH
T$0H9J
l$ M9,$u
l$`M9,$u
l$8M9,$u
l$(M9,$u
p0H9p@
Io5gPvW
l$(M9,$u
l$0M9,$u
l$0M9,$u
aA/z8]H
m2p\"[
ug0CaY
L)@pL)
2-byD1
$2-byD
nd 3E3K
2-byE3K
te kA3K
>E3C4D
expaD3P A
expaD1
expaD3
ykr8RO]
#k 0tt
c~_ch3
MTX2:yH
expand 3H
2-byte kH
t/t-M9
>)2{ H
aEl%13:iH
2l5nval*H
d.]gfn
/hJcCa>0H
T$XA82
M9aPuSM
P(L9H8
^Fj`cgH
s(H9K0u
PXH9SXt
s`H9Kht
H9SHu7H
PPH9SPu-H
APL9AH
eveQpA
l$ M9,$
l$ M9,$
OHI9WP~
E9L$0vPM
E9L$0vSL
E9i0v3L
E9i0v3L
E9i0v3L
E9i0v3L
D$htBH
l$ M9,$u
l$ M9,$u
l$ M9,$u
l$@M9,$u
l$ M9,$u
l$ M9,$u
8cC8[H
>%tru1
S H+Q H
P H1s
Y%ElQJ H
Xtk]hH
7r'%p1
FdPLJgNH
XVpIaAn`H
An`h |nHH
l$HM9,$
l$8M9,$u
L9\$`u
p(H+X 1
8H9p8~7H
l$@M9,$u
l$8M9,$u
l$PM9,$
l$0M9,$u
l$PM9,$
\$0H9S
N(H9F uC
N8H9F0u
T$09J@
L$8H9HP}
zxIDAT
T$X)BpH
l$RfE9
H9QH},H
IENDuYH
PLTEuEH
l$ M9,$u
UWag!H
UWag!=
LTr+qH
E`UMgIUH
AOPLNL
D$.RSH
SUlP*RT
D$"*-H
NDAMGH
NDAMGI
zV9d+H
=E;QX?FDH
AAR"x&
)2(6:03'H
TECHNO9UH
D$,@IE
.(9().9[H
D$&HR8(H
E5AN-1..H
D$,+8L9H
-O>@.=9.H
06nPIU+H
AU INH
E3T`HL3OH
D$"ADH
yaERLFH
aERLF]cSH
_ISH_LI_H
@\NEROZAH
t+|T)H
UAAgvAtIH
_7?@3E;AH
E/J U4I%H
METmyW
ZMHABIZHH
-IV$D T9H
_zR<'>
D$ 4EH
WzT~ouEXH
D$"UhH
D$"T'H
l$HM9,$u
l$0M9,$u
L9L$0s
&R^>.jl$H
>i_iu1
dQ~mM2!
gcvnnm{oH
CO!+mH
l$(M9,$u
l$ M9,$u
l$ M9,$u
l$(M9,$u
l$(M9,$u
l$(M9,$u
l$(M9,$u
l$8M9,$u
l$8M9,$u
l$8M9,$
l$8M9,$
l$8M9,$u
8paniu6
8ignou
t$pH95.
eT]/p]}jH
}eRfug
^ a/p`H
LD3^H
t H9=`
t$`LcJ
eg:cviptH
oorm8oH
l$xM9,$
l$(M9,$u
l$@M9,$
l$pM9,$
l$(M9,$u
T$0H9J
waQ^refbH
^refbZcJH
H9t$H}
>AlJg1
Ful3=amH
PhH9Shu
4p2v}p6?H
coGe H
8-infu
HhH9H`u7H
H9Hxu*H
protu f
t$@9|$@
L$H9T$Lu[H
D9D$h~
D9D$XA
D$HD9L$H~
msuous
\$(8S0u
I8H9K8
{(H9x(u6H
T$(H9J0
T$0H9J(
|$09w0uEH
Z@H9G8u3
\$08SHu
QI8SIu
IPH9KP
l$ M9,$u
l$ M9,$u
l$ M9,$u
l$ M9,$u
l$ M9,$u
l$ M9,$u
l$ M9,$u
l$ M9,$u
l$ M9,$u
l$ M9,$u
l$ M9,$u
l$(M9,$u
l$ M9,$u
J(H9B t
l$0M9,$u
8grouu(
8packu,f
8protuKf
br+ba3r{H
H90u^H
H90u=H
H90u=H
H90u<H
H90u=H
H90uEH
H90u=H
H90u=H
H90u0H
H97u7H
T$HHc:
>protu6f
H90u.H
F`| uMH
~hH9Vp~
nFt\uAxiH
Ft\uAxirH
P2o: FrH
y ~E=H
^|fcYcd/H
dkf`riH
ex6]%H
arid H
>?51?1
\2n[l}
oUy%v,H
f]u.1%vH
nO,=H9i
u|oielrsH
et jiWu
nAV>ZknuH
vnNjY]AqH
>82B51
T$0H9J
N(H9F
|$0H9wH
ZhH9F`
|$09wp
T$0H9J
Z(H9F t
l$`M9,$
l$(M9,$u
l$PM9,$
l$@M9,$u
l$@M9,$u
l$(M9,$u
l$(M9,$u
l$(M9,$u
l$(M9,$u
l$HM9,$u
l$ M9,$u
l$HM9,$u
l$(M9,$u
l$(M9,$u
l$(M9,$u
l$(M9,$u
l$(M9,$u
l$ M9,$u
l$ M9,$u
l$(M9,$u
l$(M9,$u
l$8M9,$u
l$8M9,$u
l$8M9,$u
l$8M9,$u
l$8M9,$u
l$8M9,$u
l$PM9,$
l$8M9,$u
l$0M9,$u
l$8M9,$u
l$8M9,$u
l$HM9,$
l$0M9,$u
l$(M9,$u
l$8M9,$u
"&jDNE
google.pH9
EnumOptiL9
EnumOptiI
FileOpti
FileOptif
EnumOptiI
FileOpti
FieldOptL9
EnumOptiI
FileOptif
OneofOptL9
EnumOptiI
FileOptif
EnumOptiI
FileOpti
MethodOpL9
EnumOptiI
FileOpti
EnumOptiI
FileOpti
MessageO
EnumOptiI
FileOptif
ServiceOL9
EnumOptiI
FileOpti
EnumOptiI
FileOpti
EnumValu
eOptionsL9N
EnumOptiI
FileOpti
eOptionsI
EnumOptiI
FileOpti
EnumOptiI
FileOpti
EnumOptiI
FileOpti
EnumOptiI
FileOpti
l$ M9,$u
l$(M9,$u
l$(M9,$u
l$(M9,$u
SYRDTQAHH
D$$LSOCH
l$ M9,$u
l$(M9,$u
l$8M9,$u
l$ M9,$u
l$ M9,$u
l$(M9,$u
l$8M9,$u
l$ M9,$u
l$(M9,$u
l$8M9,$u
:httptG
:mtlsuF
:httpu
:httptD
:mtlsuIH
:httpu
jBS)}H
T$09T$,w
=J=L;yH
sE"#H
f-Eb`H
Ay?/4H
D$ lTH
s<~>f)yoH
>f)yof||H
Cfdee\YrH
dee\Yrv$H
c_VTnU
tSecurH
~C}ceKH
6;TuEUDH
^mcDrH
icyPksI<H
PksI<iptH
z\etkH
p4x7`
>MkZ]1
(CountH
QFengS
Q[a`u^H
7 r<DM,eH
$myes0
ZJ3at56H
"o%#t%|eH
>OQVJ1
ZljySHgH
D$"_WH
sFn`ZKt_H
FdiQ7hpbH
M<RW5H
$Apan*EnH
LEg/)yH
)~P<$H
~P<$)H
>S2EN1
jQhY5H
q}*TvH
s0PP <erH
5nQSb)eoH
rkIVKt
deYetsH
SDiLeH
6nG|>RH
M/dePt=5H
ePt=5tYWH
Ra@daidiH
87i4$\7H
UwdaKpP
[yhyea
[yhyea
Ne<fmpBgH
ffwvFqhfH
N{Crea
tqlneqaBH
BjtweWrlH
:6:*LH
pdeThH
seChnH
geNoweOH
I1upDiSH
yodubH
7pusw1
kynnjx3bH
D$$.(urH
~(H9z(u&
l$0M9,$u
x H9{ u
x H9{ u
"&jDNEH
>afZf1
qoinSK
eK\PCH
\PCm04kDH
l$ M9,$u
Zdgws|T}H
}eXpKEy{H
axjajx3gH
D$$.(`rH
*l,b1-U
(o0T"rH
"a8A|t
e7istH
T$09T$,w
ZxL+ZpL9Z`tH
L9Zxt/L
PHH9PPu*
l$PM9,$
l$PM9,$
l$8M9,$u
l$8M9,$u
l$0M9,$u
l$HM9,$
l$HM9,$
l$0M9,$
l$0M9,$
l$hM9,$
N'A H
N'A )}H
{u=rhQ
>>PHJ1
D$,.dllH
nEnmoH
[o]yjy%
nte*&nqH
nte*&nq H
asdo6b
+twHoWH
nZ8 oH
Rr=)>;
mesrTk/H
tiGe#H
.MeskH
e'm...H
wn:YQueH
:YQuecyfH
e+urn<
I{I?aH
neMm'b
x @8{ uT
x!@8{!uJ
x"@8{"u@
x#@8{#u6H
!*ed@H
C2JcDeTH
W"ET.H
H 9K u
H$9K$u
H(H9K(u
H 9K uk
H$9K$uc
H(9K(u[
H,9K,uS
H09K0uK
H48K4uBH
H9K u~
x(@8{(ut
x)@8{)uj
x,9{,ub
x09{0uZH
|$0H9w8u*H
r@H9w@u H
rHH9wHu
l$0M9,$u
l$0M9,$u
l$0M9,$u
l$0M9,$u
l$0M9,$u
l$0M9,$u
l$ M9,$u
l$ M9,$u
l$0M9,$u
l$0M9,$u
l$0M9,$u
l$ M9,$u
l$ M9,$u
l$(M9,$u
-CFt1xKH
|Ue#2{H
|Ue#2{
*5M7RH
5v#0!>
)~P<$)HH
Md e*hk
q2pej 3H
N|QZ6H
N|QZ6\
e_e$aH
AIe bH
G%dD=fWrH
%dD=fWr
a^dQYHm
TRJRtg_tH
D$ weH
Fet@Z^
>C77H1
IVWirMoMH
MYUOiFH@H
H=<U4ge
x]"1 E
d$]dMd&sH
D$&wQHOH
PMe++jg4H
D$"shH
>LV_n1
/ctIcV
&4-G['YyH
4-G['Yy_H
3IN|NH
u_eSxt
*#+lSH
in*-H
nQAru}beH
c_hymqfWH
D$ M(H
3R?pHr
MtPFrH
Xmhieq
o/eb(g2kH
b(g2kdppH
o?MatH
l_tPOTH
D$.tWH
dtDXtbpgH
WlMc:nH
:nrKLri
mYgly`BH
l$ M9,$u
l$ M9,$u
HcD$HHcL$PH9
Hc|$THc\$LH9
X3ly\KL@H
y\KL@jeMH
EefaincKH
t3&<lpdH
D$.2u1
9T$(t(H
l$8M9,$
l$8M9,$
l$8M9,$
l$8M9,$
l$8M9,$
@8{ u!
x$9{$u
x(H9{(u
H H9K u
H(H9K(u
du{~a+7
n?0 ]f
}~wa]Vk H
G lezgzhH
>{c6~1
>g8|j1
a6p<!2- H
<!2- qa6H
\nial,s$H
pc'pdl_iH
f$l|XpthH
_i?L\B^sH
>{c6~1
L9%$,{
:utf8u
:tag:A
L$P}7H
l^en]H
e\1y<UH
^ptUM_a0H
lstrin
phg\tqq]H
>blo1
&6@1:2O)H
)06..900H
"/H]-W? H
bPoO>a+H
l$ M9,$u
l$0M9,$u
\$`9\$Hu
T$p9t$Xt
Br`s( ctH
gn6PKntTH
qEX]O h
l$8M9,$u
jBS)}H
jBS)}MNH
-Y[9{D
l$PM9,$
l$PM9,$
l$PM9,$
l$PM9,$
l$HM9,$
l$PM9,$
l$PM9,$
l$PM9,$
l$PM9,$
l$PM9,$
l$HM9,$
l$PM9,$
l$PM9,$
l$PM9,$
l$PM9,$
l$HM9,$
l$PM9,$
l$PM9,$
l$PM9,$
l$PM9,$
l$PM9,$
l$HM9,$
l$PM9,$
l$@M9,$
l$PM9,$
l$PM9,$
l$HM9,$
l$@M9,$
l$PM9,$
l$hM9,$
nV9f k
# .&&H
&OT_PH
etTnotH
is(KDH
wzTRR_H
f(nGOH
'szyxH
=KMVdt?qH
&Brsi
is ,ot MH
la/:wH
= ;15H
&|MUtDqH
@Dica}qoH
IRB_\rpyH
3+sf FsVH
#-VKERH
8"9!#-
!foXnITH
Xo~jw@(H
dRJZJZ
pemNqg
l$`M9,$u
D$XxV4
D$XxV4
D$8xV4
D$PxV4
N%Z=qH
iVzsXH
soM9NpnH
h is UH
c}sbgH
aA/z8H
y(=[>L
8nou91
{iv>und
YlI&N\[bH
r.{.a`*|H
a<xQ-H
a&\V76
5Ss&im9
-shYud
{Zo[v8-xH
@6N2G$A-H
2G$A-m
QHCkYH
OD0eIH
#a/_nV,6H
>LHxL1
YboTH]FlH
zerew_d_H
d_fqrsoEH
>hTYW1
> ?sHnf
X0cX/H
Q0H+Q(H
9LQ1gH
#PRs0oL
Q0H+Q(H)
?ni!5OSKH
>}u(l1
lO noH
noN f
c|uld#
t 5EBH
D$" tH
7I[\L1
d=.&1@H
ot%HTH
l (n@V<H
x(H9{(u7H
<$krbtu
+H`O-
X3y.`()
x %FvH
7<=,+1
sP0eqM
v;=RzH
2eslE
4; UkH
{iwfK.H
Ia}; wbtH
9sVvn7d{H
;kvXmH
6>J!H
&|SZYK4;H
njsddn
oce-sengH
seng_BSHH
/SdnH
>7+8=1
7LTEQ1
ppllcatH
jgI^f %H
h%ZAxH
;krbtu@fA
Y M9Q(u
r H9J(uH
8krbtu
(kNy H
roSRreH
n:%coH
?Fkxb6H
10;.8".
r/{+tH
c)eP$eQ H
or: failH
6AS0LEH
UCc*9H
@&(|Tz
:utf-u
$extrv< H
N xharH
N xhar
L$6D8L$:
YYK1/H
Az9aQH
l$0M9,$u
%?xnUH
D$>E0C
6owq.H
(odE1cH
*+Ns@ncbH
Ra_,"`aiH
D$ [TH
afet'_jmH
mq]gFUd\H
a[HN[OhXH
lELaloH
6<O[Kg7
.-disH
chbnP!e]H
!e]1\WcNH
)7yf_H
1]`H[H
:httpu
:httpumH
:httpt9
:httpu
:socku
L'&I>H
x @8{ u6H
l$ M9,$u
x(H9{(u_
x0@8{0uUH
si#j(?H
si#j(?
L@2x!H
ger`ubllH
D$ 'vH
HDqn_mosH
FZRe]oteH
ot{<z:
mvlXose
^Z|vaH
&on Ja2.H
606JA<
s4't-RulH
7zxqu1
-lRnsfsbH
lRnsfsboH
np{T\ingH
cX%gthDYH
I?>wH
foat[KJmH
D$ *2H
sNtiyM
,ATI:H
t\Km_fziH
Km_fzibvH
Vd]}d{reH
`GRaZH
5rHmJ5"uH
"8O@.H
Antivirus Signature
Bkav W64.AIDetectMalware
Lionic Trojan.Win32.Sliver.4!c
Elastic Multi.Trojan.Sliver
ClamAV Win.File.Sliver-9942542-0
CMC Clean
CAT-QuickHeal Trojan.Multi
Skyhigh BehavesLike.Win64.Sliver.vh
ALYac DeepScan:Generic.Sliver.Marte.G.05D91351
Cylance unsafe
Zillya Clean
Sangfor HackTool.Win32.Sliver_Implant_64bit.uwccg
CrowdStrike Clean
Alibaba Trojan:Win32/Sliver.accabc92
K7GW Trojan ( 0059f2e01 )
K7AntiVirus Trojan ( 0059f2e01 )
Baidu Clean
VirIT Clean
Paloalto generic.ml
Symantec ML.Attribute.HighConfidence
tehtris Clean
ESET-NOD32 a variant of WinGo/Agent.LO
APEX Malicious
Avast FileRepMalware [Trj]
Cynet Malicious (score: 99)
Kaspersky HEUR:Trojan.Multi.MalGO.gen
BitDefender DeepScan:Generic.Sliver.Marte.G.05D91351
NANO-Antivirus Clean
ViRobot Clean
MicroWorld-eScan DeepScan:Generic.Sliver.Marte.G.05D91351
Tencent Win32.Trojan.Malgo.Etgl
TACHYON Clean
Sophos ATK/Sliver-B
F-Secure Hack-Tool:W32/SBeacon.A
DrWeb Clean
VIPRE DeepScan:Generic.Sliver.Marte.G.05D91351
TrendMicro Backdoor.Win64.SILVER.SMYXCFWAZ
Trapmine Clean
FireEye DeepScan:Generic.Sliver.Marte.G.05D91351
Emsisoft DeepScan:Generic.Sliver.Marte.G.05D91351 (B)
SentinelOne Static AI - Malicious PE
GData DeepScan:Generic.Sliver.Marte.G.05D91351
Jiangmin Clean
Webroot Clean
Varist Clean
Avira HEUR/AGEN.1366847
Antiy-AVL Trojan/Multi.MalGO
Kingsoft Clean
Gridinsoft Trojan.Win64.Agent.sa
Xcitium Clean
Arcabit DeepScan:Generic.Sliver.Marte.G.05D91351
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Trojan.Multi.MalGO.gen
Microsoft VirTool:Win32/Sliver.D!MTB
Google Detected
AhnLab-V3 Clean
Acronis Clean
McAfee Artemis!F970EB941BF3
MAX malware (ai score=85)
VBA32 Clean
Malwarebytes Malware.AI.890899407
Panda Clean
Zoner Clean
TrendMicro-HouseCall Clean
Rising Clean
Yandex Clean
Ikarus Trojan.WinGo.Shellcoderunner
MaxSecure Clean
Fortinet W32/Agent.LO!tr
BitDefenderTheta Clean
AVG FileRepMalware [Trj]
DeepInstinct MALICIOUS
alibabacloud Trojan:Multi/Sliver.D9OKG
No IRMA results available.