Static | ZeroBOX

PE Compile Time

2024-06-17 07:55:32

PE Imphash

de41d4e0545d977de6ca665131bb479a

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00001000 0x00006cf6 0x00006e00 6.20666878629
.rdata 0x00008000 0x000018a0 0x00001a00 4.56258657074
.data 0x0000a000 0x002744b0 0x00273a00 6.48565856337
.pdata 0x0027f000 0x00000174 0x00000200 3.03116420363
.00cfg 0x00280000 0x00000010 0x00000200 0.151271325305
.tls 0x00281000 0x00000010 0x00000200 0.0
.reloc 0x00282000 0x00000078 0x00000200 1.40195248194

Imports

Library msvcrt.dll:
0x140009308 __C_specific_handler
0x140009310 __getmainargs
0x140009318 __initenv
0x140009320 __iob_func
0x140009328 __set_app_type
0x140009330 __setusermatherr
0x140009338 _amsg_exit
0x140009340 _cexit
0x140009348 _commode
0x140009350 _fmode
0x140009358 _initterm
0x140009360 _onexit
0x140009368 _wcsicmp
0x140009370 _wcsnicmp
0x140009378 abort
0x140009380 calloc
0x140009388 exit
0x140009390 fprintf
0x140009398 free
0x1400093a0 fwrite
0x1400093a8 malloc
0x1400093b0 memcpy
0x1400093b8 memset
0x1400093c0 signal
0x1400093c8 strlen
0x1400093d0 strncmp
0x1400093d8 vfprintf
0x1400093e0 wcscat
0x1400093e8 wcscpy
0x1400093f0 wcslen
0x1400093f8 wcsncmp
Library KERNEL32.dll:
0x140009408 DeleteCriticalSection
0x140009410 EnterCriticalSection
0x140009418 GetLastError
0x140009428 LeaveCriticalSection
0x140009438 Sleep
0x140009440 TlsGetValue
0x140009448 VirtualProtect
0x140009450 VirtualQuery

!This program cannot be run in DOS mode.$
`.rdata
@.data
.pdata
@.00cfg
.reloc
uKHcQ<
AWAVVWSH
[_^A^A_
t.ffff.
fffff.
UAWAVAUATVWSH
ffffff.
[_^A\A]A^A_]
ffffff.
AWAVATVWSH
X[_^A\A^A_
fffff.
fffff.
AVVWSH
([_^A^
AVVWSH
([_^A^
uVHcH<
uZHcP<
u!HcQ<
uVHcP<
upLcB<B
ffffff.
AWAVAUATVWUSH
[]_^A\A]A^A_
AVVWUS
[]_^A^
AVVWUSH
0fffff.
@[]_^A^
AWAVAUATVWUSH
ffff.
[]_^A\A]A^A_
UAWAVAUATVWS
fffff.
+ffff.
[_^A\A]A^A_]
AWAVAUATVWUSH
8[]_^A\A]A^A_
AWAVAUATVWUSH
8[]_^A\A]A^A_
Argument domain error (DOMAIN)
Argument singularity (SIGN)
Overflow range error (OVERFLOW)
Partial loss of significance (PLOSS)
Total loss of significance (TLOSS)
The result is too small to be represented (UNDERFLOW)
Unknown error
_matherr(): %s in %s(%g, %g) (retval=%g)
Unknown pseudo relocation protocol version %d.
Unknown pseudo relocation bit size %d.
%d bit pseudo relocation at %p out of range, targeting %p, yielding the value %p.
Address %p has no image-section
VirtualQuery failed for %d bytes at address %p
VirtualProtect failed with code 0x%x
Mingw-w64 runtime failure:
__C_specific_handler
__getmainargs
__initenv
__iob_func
__set_app_type
__setusermatherr
_amsg_exit
_cexit
_commode
_fmode
_initterm
_onexit
_wcsicmp
_wcsnicmp
calloc
fprintf
fwrite
malloc
memcpy
memset
signal
strlen
strncmp
vfprintf
wcscat
wcscpy
wcslen
wcsncmp
DeleteCriticalSection
EnterCriticalSection
GetLastError
InitializeCriticalSection
LeaveCriticalSection
SetUnhandledExceptionFilter
TlsGetValue
VirtualProtect
VirtualQuery
msvcrt.dll
KERNEL32.dll
#4=*F&>
3&-.-4I(29<;<$
Y&7](<7S
* $'8<
NT'/"F'[$1<
603_H?$#=Y?
H0N%;9'
9'_9"[W
W$*O1'?
R5';ZH0BAM
_H?'[@
. /L!!
* %0?9
^* #Y6
USYHP-*-1"
R)21/5
0]&W^9
.? R%-
,=>=!)2
>^!;]6&'+#5
0V\,^SE<
S46O-$
?V57A7[+
HFCF3<3,$
C;H4,:*8;=@)
Y)W5-82-
09,F\!
J]CV2'A3\7
1R89^'
+J-N70
$7U(X9B\
G6G A\
R#^28Q
[H! !39
/:1(4>5
*16?H#
S(=XUL
(<W?#8
;FR#3"
4Q7>'U6
)&AF]I,-7<#3
+'277>
='%&4')
27C,$%
Y:5/
/6&A4]
8G0?%?
Y*F0]EW]
8$;EX4
VNVGG;94@>Z
.G#M
[=Z_*UA *
LF?:6_&R%0?
@- [N(
V7A68%>G
@]N!60
RV7<SY)^!#FG
'=G :+'
<*[)1Z
Y"#;R?7
%TC!1^
?@($5(
;C!,WI
#/6"!Y
B) !,3)(5Y
UUW:9(\
K"-8I!
)G*OX
&YQ I*.+0
W"+;\C ?;X
'"G3?>P$
!/3[3F
"6D:85
:R<B=)PP/?#_
>%S5>0[U
*L ;.9$
+"=$%T
O5_V;(5
@>:60"/&274Z
**E\7!
7WV6/:
D@@)6N/L[?E
G.=2^:
4$&L5_TJ
>5S?>)97
7 +FY+
+M0ADD9
-<?]&<'
B,P'US#[,
M&(9*
5G(@Y8
<+ ->;
P1:1S5
9^*]<A)
3-&2'()'?
_5!=&6
2C_**DS
$('0;1
S)"'^#,.
NY#_;$$1&>
C+1 =A
6\">'X
G'>.P
?)'#)90;
->:90<=04
ICD4F,6AV-
7-)=G67
$_WK!T6FD4
&,-Y*3
&2'9(
*\=.T9
?C.R_.
= ; _!)
Y$A[9H
7W 8 -
/=!S%^
M 3"J#2D'?K@R
'''/@=
#:!-9;?
N;RC-=$X&5
!P,$-T
ZA$U%?% .
6']FN%=
&4*UB82!
(D"Q'U
LP ]!/5
/0!R_?
>A_W@
;YO/W0[
:#R0;H8S_=
_R4'3:[
16-#>.-#
S%?'7-<
(-G"#P
^8N;"E>&X$
);2U^6-
9I1;"-
'S[!>,@E
_,$"IU!5>^L]<7
A:4_I&
"FR(A--[#;
TB5#22.
%+$-E1
#!H.?W
P&[2).5P/8W2^1\U#9
<RU>+.
Y4##ZC
**WF?8
<9''6#9D0)
D25:*>2
$B!@V.A
!R:.##=
Y[0CM
I@4"<G
:337$;
&.!"6#
B>(3W&
#;;6<]MDS:6^6"
#6$$8#+
1ZU<16J
)]&V$H
<+0-8[
1("IR[I
I-^S_3V
:8>-=5
#[7Y_2
) 0;;S[
[D59JW
I>RH$-=
?!*GV-
_3<#3)
#0!+=.1
4]1S54
6(^^,.
\).'+0
#!)8<
.O .7T2W
S,=(7-1_2
7A,QZ
%46+=?1
>8&R
]):2X(:?,
1*$>*W4=
1:T@5C
' 3&&#
D"&&/;D
D_7/67
-H SAHU4_=]
/E#1(8W&"UE
B!$^1[1=
3U<5
/4#G,>
CT!6>8+
A'IQU4
$-(1>TY
VQ""X"-/_9
0=))"X4
0+K3'1
1X:_$2T/)*
9!<$\8<*
64[.?8
;2Y+/6
*A316"!Z4#
3B=&$C
:#[*A<
/\ &//
;W87"!1Z3VC
1*7MR.'HQ
BH[2J$
1?<:730:4<
0ET2*0
S(N,) -
, .?\@
R I?]M^4
W%3G;-
*9-;8
HH1:=&
@2-2;=5
J'$G11
O/S &/&
#Z!<,8&*Z#
#4% 5^
2LDH8W
=!&7:#
$)Z#5O$O&
:#5Y.1+7I
5"#4<!0:
H( Y?;
F$*)7,
!5"FQ^
<>'([7?
?C3G!-9
7\"*3E
P@1!'3
?,#W!(
;< Y6C
I V=</
7<)T96
6&-<8"MT8
1/*=!#%@:' : /)0G31G
63+6)8
,$]1,
#S!,?\3
2IB^+<
,]8["'$#50
E)>?<:HU
E[8#.>-
@8+)$$##
"2?PG
"E:! 9
\@ %
;>$F[*5
35/ 84?8>
\"">70Z !3
)#@@"
R)MSZ"-
>"1M8#?2-F
0$.1--;Q
*:V8([>
3:57)$#C
5\26)3)5>
X5?!>MGT;&?<-
= !I^(
6YZ&9#
'4#S]M'=F3)
'WQ<8%
C._@=6,
":^ N7
#,M+?<]
]J4U=TE
99 GU\
:\;I0/+=
-!>"#"
1# [;S
?=*2+G
$7M*684(
/XU^S]9.+
!0 !>T
Q&=I+_
_D#(U@
H)-6,?
83)%[D%*
('Y#;*4#!I
^,?2(X<Q
-9""<ND3
39A' DE
M0I?*+
,?,(V
X>>-$?
(O,V;PY+$
TB7C_W
SIZ58S
D \'(<
>7?0VU.-)
[2A>5
N9=*7.&33
<B;5YE
&3R$IQ7847
3=0'1&;0(
LG[R:NF/
$0$#49(E6
.\77U3
[N")1H;&J
'@"'D2(Z(*
+.9"%
PE01_'S
./=-21
/0^[Q(^
1]X,:CX$>O
1/81,]H]\
A,0]I?V^!
_0TTA)
$(_:\T,I*
%/;@GR
8\7ZT'
^M-?%2
3\09'3<
3?-:"5Y*'
$62E?S
B4X1I%=7
#_.,;H
-2' !6Q'
^7>>/%
=%<.!97
)F29BR4W
%I/$9$
'? &HZ:
_:EE=7
?4>/"/T)"9B
A1*Q9@
:7S&5,5_.
$3<I'6
*!$JF.
YP"?
6W#YN0
>(]* ,^N9!"+
7F2':7
'4'=.-)5
,[;?\'@
YN9"=+1*.
[)V_%6<FM0[LY <+
]+$0=S
F?] )+
Y,@'E8
$?"5:V
K&7 (>(&PT
5$7;"!++/;
)2:/L7D5P
!!!#+C?*#W1^
/17?5%
^5/:38
;1&V> G!
^:ED=D<0
(0\@)&
+A;3L3
___<:?2'
)!S]AA
< '_$$4SR
,D?: 6(
;84D?8
66<_[.B
5$2).#=
>:, Q:%
%+1560Z4V5^
6B69Z
2]=%QA
)6[9#-%=
D&<T+E
.U#V!>?-
+<%C#)?&A
<$!22^?4
P##;-'
8"H_&5;,K1
N5#?TD+OZ
V&39N-E<>P
BW88R(#IIR47MRZH
@@U#>7
">K&,
=^R(-0#>F4
S(9:F?1
!'Y3C
;?%[<
F:!>2]
R>Q?%8B
C!\:7 O!3
UQ)L4I;
P>H<X>+
9/]]S!W
L3#E9%6
;2E_:1B0M
8E BP%<
#*5^$
<'843?=^
6)?<X6
5P/+-.
*/)-7*
T[F^]2
;0W>#S
W%E@?*-8
I3;0'
)_" TW 8D
):-62:+
Z6)!:38W:
..75 _&@,,
3:-<,
11*>=8
Y!!CGW
Z7%<AJ#5
<@/?O"
P$E-;4
.?1M5C
38](/<
31Q"-.
2)?3<I
?!W=N?VL
&I^=@
.3" W;
93B^-7
(U6J;.L
2%>_T@(#'2-O04
S85+#9
M^2F3=I[
,M[R1>
)Z8>00;%-
)K>,>%
302A#[)Y
C=(B51
>#%=';
73&<2?
<811262
$"8 <?O7
8*?*=)
_B/U[8
G<](4.
T2'$G!
2[R\%0
:4.:>6/"4&
>*.((XP$9
<@_*X>).
R68$I$!5?36
=Q2^*)
4G)5#0=3
%I3*X"
?+/3M54L
2::(6=
"BH((*
1$*5+<
DE"U5:
"8#RVC=;(
&347B5
5![R[9&+
(W,5(.R))
M?.7 -
"!.?Z<
/"A%(1
))[J:_7
=7Z3U&Z
OC^>!T=3^5>
*Y4.&?=
:#: ;#5
0$B%C?
TZ8,2?
N-8 2(
)%)+!*?
"Y)(D
%8A7RE+
H8^<*="8FT!*$
26@8_4&
Y2$4)8
6;<+656?V
&V _ Y
-4.>/==+"
$?)$C(^?
F&.0_F8$*
;V)B$';-3A)
]#,>23-)
>1T177
S!389*:
SDI<6
%&'#7@!)$
A=:)'>-
36=E/-
\#F" /!
X6\9>]E
8+B0G)*4Z<
2Z>H5D
">&//8
0#6>;G&
703=FCZ6Z
W+(Z/G
(<S)S^5_
48=8[
A6V1!?
4Y(+#>
[CD<P]?"
1;&X""
\#QUYW>'>
2+9;3F
('Z#(1?
3$<#<%
^2%A>G*0BY
78..*F+G'/
#)$,:?+[*$
8_6P)*
R,!\E*=^&
")-5AH-
Q':BMV
<.U\H
5>[A"78
G 48Q3WR^S#.T
1$4^#,F
>/[6$&
&OX2BGG
+C9*3$N
82<Z,:UL
).9+6;=D4W,7
D?&&Y[
Y##':=
71+<45
)/6!9P6
$9Y:B=
3G<>''2
3*-8?U
2<!Z8<
A?&5>16
;-%)G0
&(D3*4
6>,,$!8!!Z76?ZL
3_&;(%IX
""4\)"
#+"&'")/,)"M
Y71U*L
$9R7?&
2#",O2>
W[? !T
>0)$34
4/[JE#
P%88HW<&
Z3["3^2
#75Y S0Z*
X,8U7V
@@('XU>'
3^:=L^
@E#WF.H
=",>?>IX
-$(]O!19)
5@6Y?@
2D8C67^
[#;AD-27
1W>6IM
'38X=#
<!S$73
-/7F(
?88.='
]7<;2;@ 0E
93E'(;>D
''J0M,W
J5$M0A
$?4[CM$X;YV0
X@IY(IN
W6[0_.^
3,)83
L6:&;=
1/8*)[:
0%:,<*
6PXG6+
72SXE=#UU
E>R<[<8QFC
,(9H8YV92
@?8.2'=D
'J309"P
+NGP4#
C'5R$>2>
#*YPB00
194@5;S,
$>_@S
3].O?;U
!4<&'O$I6
AR>="6T
A4026#G
44B[@.
/"*0J0<
<7ZG+T66S
=3@B<1
P/!02T<*
V5@.+1
]/'=(+
@ZAX5,
6\#37/
28#>#I6
*F6:-X)R_P&W-P
;DC8CE
3-2463
'G2...#2+
?G,3R
'JE:<+)%3)[B
$:[W%7F[".22 9#E0%
'R)=C'U_>\
UAI-*R
[517.&
:A+U(3@
CZ9W"]
C/4U#2
'/,.>>0G1'@
'27$7/
H/9O?R
EJ&%<F-
A$PX:5
C*>;,1AT
N]?<B</
(7/+9;^
-W/#N<U
P>I\&<
^2-H=#3$
\$S)&R*"
$KW#[6QUD'C
/4P.L0
.;%HZI
8<_](!
#5):WY
Z@.2#E()
_(C%-@=
%A=.#I?'(
,):8>"
35&50<>
#B7-4+"
GT"]8)
)Z854.@ZX
FA?+-3R
E2B2#3"%
?!N7*SS/
6.)#0B0M
S :;:
7D+$E=:,Q
T>@%1"/
6(;B.?[
0/"7-<
'9023(
BNCZ(3"C2
_+1/0(
W!X #7 3_
T!>"%P!
?C*"/"0:
.),.1?
"3$>$5+0 @:
(>&ND$
9)5& +06:F
^@'%S!"K
'"Q+\H
4(V"> GS.
2\+D1T
79 .>F
.31Q0I'
,/^!>.
(W.05+89.
7*(-';6G
>)7->4
S;$$7- 5+>6>
;#',.9G)!<(
2"5H 9+
.)H;40]ZK5
98D.BE5@
/_B )9"
0)/ .?
6G+S_2-U?
9B,0!4
+>-"?^>+
F^6ITV+
#FRG+$2<H+T4N
4>,[<F<3
=9#<; $
.&44//Z
G98S!C
N8 ,)2V
E3H3S+
;0T)H20
^.D)$V]
.R= RY
(5M<+K;3
'-!';3
8LB+<
"(+"ECC
'.+)7?Q
0$3[U*9
U,">U[
/;+D$(
<U?QV
=:!N728Y
(<>@<\
%3E. 2G
<7)'R(D+
A+_4A)=
#G*)!&
$0! FY
6=4><<
X;#$[:
R5;(8;
U(>;4IIA
6+[1V"
[6&G0(+
)3"04?W6'"
@A#2,JU%
Z(-0\
0@>(9/Y
&!J"&
%OF#B6Y$:"*
=7&#DZ_-%_J
X1(0M"
2=X@*%$
)>2 57'
.0 (2U
IV76"P\
]J9:D'C
3X :_%1
</'[39[
]5LF7(W:EZC<L
]((,(V
-3"8 $"
;+(;;T8
,!85%P
_H#%:S
JMQS)8A
/!!DXH
N'T!*/
)Y =#/+,
>9R#U)<<V-
//_ '+
4]$%S^
.4C<?#
&Y(;C6N9
YN9"73
>,A/(^%C159
$B>=9>!9
"?4\&Z#&
&CI/<.7
;9750
-V-,Q"O
<02DGU/
?3P%P$!R
!7#2>*)
R?!+$#!2
8=NQM(Z
&4.WB5\&\ETQ
V'H1QB
%) !46'
&+CV0C."3
=03-[)
7<*UIS@*1G
J_& <U"
E>96'/
];30@P
)91!6D8
$4+=M"
Z&86:(;XF;8\63/
0<+1#D
)5_<9?'
C&_#')7
25<B*:
%/Z/9
\E,V\=
!6^&L8
1E+$1)E$?4"
7"'#"+$/
'(.N*
Y GCG=.
FQF:')9=?,UQ
&&")>*8S>
$V*Y8>46O[
# 8,$GI=??<R
$K2#Z)
)A>)#%V
^3-$R"V
]"0QW"
7.=A-,F<!2
_S*K&N
<B5*7G"
+E,?91:0
4'X?!.R.>
&1 @-2
?73^*
5,:6U//%
G49)\4X2
)<F$%'5^
"_<3] _#\*
5T6F>ZA.
7LS[7S
2 8&212
&3+7!!$
2*62]'
Y#J2XL>$?
+\5"<*MR"
R'''ZTDC
[ 6 79BB'%
.B0&<;
9'E<=
>2.5<W^
LR)7+&4LA
Y*^D+@*
3,G+%<
>*_ ^UD
15.>8%Y5-2]#
FP#4)3/V!0/
7?@[3"
1-AS!$-
!-Q6"(!E(BE64$ ,(
'3+W;6I
$174*>
"82D>>5,96
"ZR<Q:'
5%@:B7]&
P."#4P=_
\U,9>>3.B
MTRZ\)%
TQ$J.]
]:=/#[<
#C%4^0
BY 7R'
H8'0
7?)E.
.5=_>54*#,#N
&I4Q8,
U<O1#=E
X(1]1G
$S,/^*A"
F,:76]
$(YG7"
;\N=&,
:]2 .(L,??8
ZP;<?#;0,
2"7Q?60!6;
+7>CI'\
!_#ZE+
Z=%E<5
(;W3Z?
CU'\K9N
7 C<$7IC.L
<=S#\5
>.![0
1-%+R3
)?:S1#
7 'C1Y2
I=;H1M)
='";7 X
9/?2A@?
5'9Y)D#
/'3B 7
1?*EZ$TY=
<;01(>,
<A68)>
9=R,A*
R&VR8 :
_ 48>)GE4,'
A+#IC<!
?&3:U#;3
/#8.>8
<A(\#'I(4-
<D+062";51
88K@+
4<&DU1[
['6%I$["
-S'(A5PD@;+
S<!?5(&M
+.V:T=
B<'1X
P/].#I
,A=D0\
9<'D$& /\
S5E./.
(B^('X@
)[=B79=
+>X6E
5A??0=*
5=02[&
52A5[-
AQS%-@
&$.D6E8[#(
*7+<%I
#413CB44
7B$9TX+!+
[JG)<X'.#%#&
%1&7&U
@ 2@D?3=
/ER ?$
?AZ9-
_(S.]O
3DA3%P?5
$-.W&F_-
:(C"4]WAT
#.5(!
$M$>85];
!97$_:
3"QZS8:
/*2S+(
(?>?2&<8C
#=B5X!
CI6)2$
F+8]4>
,973]&*
+.B#[D496
'95= 4
<A8[!;%$
H)9.G4(
&(='
Y" %.A
%]4$7
JBV-3R#
P%4.5:
+Y<DU36Z
4,/2R/W_
8? $(<1
/.R? -
*F2-]1
'=4*>%
;(2,88'
+N'!!>
/3#F+'
*8#>))
&]$,<G<
F-_ABZ
89..;1"
1!E;03\8
#YOP<_83
?$(/?
@726&
69E^%,@
T$;BU+A5
??$.Q\
3Y#!A_@
BS4PV/(>-\)-
W50Q)W14
"E,$)2
]2B$$"4
^"3I%#
I$>:<#73
'F8H-4XL
<^N\8P"
I'1;U?
+*$+0^
8 _ ,B
R;,D0/^
>N/8<'R:
8S+1#E
2#-I&CT*<0$
/E<>(V
5+8" )W6
>07;=0
8\R1V9
&<2@]>*
'_?4_;-
^"4;Y8
F''7+1
^-6K,;3
%= !"?
9/M8@%&
D7%8('
XF=<(?>
<3= D&[:
247R#9!
<U0>66
_#+*Y('3%86
$.6=''
UP$H'3_
?.-F"U
:"0:)B
S.9?.'
!U#52X
_$ 7>0
$X@%5;
0?UD6$:&
202 "
U"""+)77\24
S$J)_E
=)R ;
%C9?_)5=
6[#@$C
3<:.Q?
!D2'?8"
"!N#33
^[< 5$
(:4MV&
F'J%R/
?9%7Q\
/R^4=U
<:7YN()ZXHJOS
15?:W-<68B"
]*J@9
ITS42F*
!7/?-87L
;4F"8[<ZD5PT
9$44;?5
N&#D"A+
3;>)L&,
+1!(X
[>)8:H1.#&ZC
0I#!9SL
;,W'^!
&(X?I(
I"@ :_/
$5M0,=I
)9B(<9]3R1-
<P;K24
[/A9?O
^[6974
>5 O"-2
T_J^W+
U8"0]BNF!M.Q;&>E
,Q0'<.
'7C&'6
A.70+(
5+:4SB=
:?+8I('+:0D
/!9I(C
[I^*?"
&'9<&/
ZS5$;6
3]<^%^G!
#\#!6^=
VS-P:C
;;_)]X
7=0(?&V.
J!-(
<;*'.*
((K5S66Q$E
8%^;$$
)]W9G9-V9 H
!PM592>=0Y
*,"G>H
'&8C."YHD
O'28)B1&E
=HI/#7
,1($[J8
%J1^[L
(^=:W7:2#
1#/B3$ 8!M#
X327
6:M"]0EW,(
3&3))3G*0,
, +0"&'
^7PD%
<7_(M
1X%69:
A!: O41
"<-F>6#@
A!#M9E:
.$-7
1=03AN5
<WS(UE0
94Y8H]
9,[#2 +W
>+2%)Y0
7:,]F7
1C%]7D0'[
%+2% 4
Y<_]6)8
Z:+O[<
!":HVM8S
3AT$Z66
=4R8U5<8
MS32_
(:B,M&@&
C:?4-A>
;M13V/
#H-#4.$
23-<,!0:>(5S=
51=4%*=
I.%L!U
.#A/7WP_
->P6@*
&:E1A2
>7-R%5:C
2S5VNPW"@
8@35)V:3#
F?M7_^Y2
2SA5!5
X+9'I$)B1 9I;N?^6^*
,5T<"/)
/?$<F3
!-6%U7^
*T<$1>?>$
M])A;:
<? ,$Z
MZ."3D5
\M[;#1.7)U.R^
66.Y$3
^6:!3U;
#O= 0G6,
A??'>
2"H#[ 4
E.UI4/
S)A!'"
$26 7!^&
:@=?=>(
77HC#3]
],9&#6X'
&8 &\19
X(%.:A;
'W*"""
F0AG]M
P,JM-:
((KGZ1#0
753;U[2>
2-4"FH"
UP24(V
-"%3T#
'0%#=
$1-(;1
%ZEH5
3Z1/.<(
Q-3<*&7
, ;'2F
.(+A,;
T:?I_,.
\=RG!77
+UB6G&
#!<31
L0!E5S
?)75?(
&+B1M=G
05!5=4
! ?TM(_U6
VX')([08-
4#I;Z/
'7[W294)1#
2%);A:<
>,V(3Q(?0
-&!'&;W
QY)01<=U
6;3LB?
<7XK3/%S=$_
&1.UV9
F& <.\
@%68
0[6MPAH
14-35G
Q_"1^
.\,D#?
34,F9?
/2V3/!1
_ W^9)6
R%-[09
8"Q>'
,<81_%
[??Q^S
Z2<!\#U
3N7E/$
)70, J
+M[7]6
7 69$Q
\I,.&)3
50-5?E
+<O6T_,
5J!%((#11
)PT?G=
[ 825")64&
+U'S*"=<
W]9)Y15
!!'1$[]Z
/$72U'
#;<_?&
R+2 #5C*
+)9*7'<
A"*$#A<I
$1G0GW)
#!%'28)
/S-;X
6'5A?$
>#(3TE
9=H*1.
*3SQW"
(+ @?++E.G
= 2_<:
_:&!17R
&V[2 _2
Q (H5"YN1
3/BW &
_Z0>-5
=8G6;.S8!P@
8+%4'"
7T;)>'
$# 9-MG$^% 8A
D17:C
20=762(EB?
HEXA!.
&GUN^^
?67(8G
4""&47
"0,CP0
$)2< XLMM[A
,F&$3@
G:XHY*
/0#EI=9./]#73
S'9%9.
&"C7$@
/A>/%=
VD-#M-
+"<P2E
B];.7=
4;TSCX9
]B%151
BG)H%((O$E6"=)_"
.V%59[6=8
*?,.!#
E&23;E
@.',>I:N
19 ":E&
",)7I/
2E&%=4
)EIJ#Q
--U <2
9;?.%3GI=3&%
=,![DF%.
]875D
(\">1/01*
Y1;)66
U,>;(Y
OYWFZ<6$
PLIG*$)2C:>
^U8I=*
+#JO[@
U:-9A%$?/<L%W!4
^737/91
?.Y9='
41275!4
='-L9!,
V"T7^.Y
(*"[-:
%<-P6I
S%/!U
/5(PZ0.
#X ?$ /;<
'2;&%:D(L!
+1$Z+=
>UR@Y[
-*"=IW
67SF] 2
^3CH&Y
-.VD<))
8T'(!S1"<
<;1$=,
TP-1W1 0
BIX';AZ5=
)T7=8?
5::'9.
+"0"6Q
CD9\+5&
1E/]WQ
H#_)(#
'3315;3
X%9<(
>YR0N-
-XV9G"*
$ E;!W7
5Q$$S,
-/^9 )
4<F=H4
/3>((+
;56$?=.
I=#&Z2
"#I!^<
> U)!O"6
S?G Q
5.<&73.
X-:?B7
73RV=1
IE6=P?$=6>
VH./1F
4^U(T>
257<W;I3
398A5#
&;P8GH
@ 8M.ER
5.C5RZ
:F":#PE5W0
$#D-555
7X&S403
7F)/7/_S
6#'E0:
+6=Y:C>
4<8(GQ
G"=9"8
;N.!YQ0I
[5Q#=
G0<B\<T
&,?09#MV>8/
@ (@3F
0AR .'
&R!2:
<62<Y
13>0"B^"
;?9I.QW>
\=*D2)G
6#%D1$%#)
/:5\013 TR[
+>H30;;
#+/>5+
?6,7[
=7316+
2!-0;#
%!06:
CS7:3;:
>8^6)
!:(X+Z
%P@1]A
/%"'V
G,<< !U=W
63-3;D
[5;BSKO3
,P[<(*<5<0
7&+*"%
2)#4?/Y*:
+- #!&
66)[KN
U89# [J
34?-7&\G)E7
CQZZ;+
N-)I*+
C:87$:2<
(8F(*,4>
"_Y&#A4G&
@?<"WG2$
79=AI3
C\4^!+
1/D.=;
>]0Y@Z
!C"6#"
["S=,T'A
NY??$^":
,(8&;$
':.[! \
;TV=F'$
HC Q]
:95N.0
#"4P"6[
25>H.[@@R
"$K8[&
;SE]:,"^1
F]&U'= ?7#)
,RF ?\+\
/"/3H9
G?C*99
U#+,-)"QA
2>351,)J5
Z*5(;(?
^Y_57Z
!S@^?Y)D0@
M12LM9
1*7E0&
<J>S8@5
9.#.27+
3=;*5 ^
B8G)=822%+65.@<
A<'12/Z=5<
+:?VU^O((4
!"!>=NC[
4 ,<5
]42?^
!]_I;(2%
)/T[74
88K4\!E!
+>!SG'@S,
X+;?%T
'TP+)5
($27G;V(9
_4=/<?2
6A+443-W
A%3_H"J
.R?#:7/7=")W6<
%2?<I
'*&0$N!
-3>+)^\
Y;I:(B4&9,A%
"5\B)
URWJ3M8N170?*
7=$,Q K
'.$ 2E$^1\#
D=41S;
"H:I-;
(2$Z 7.,*%0Z
-E)+,
:!<99/
1S77A%<6W.? R-$
U9>%C0]B3
=U.D*!#:
;R$)J]J
)>(8*RA")
>B-,R/
R1$U##
_=]#)(
#(DAN0)
#O;> 7+
%U/_)4[
+"/X9?
$R+_IQ+
P]":E$
8R;(B<
0=B(8:.$S)?3?2?2[4
$0L(XD%
7BZ6%1;-S$
]5 = 7
<"I"&8?.]
4!()-< A@.47
])Z:27
MP \?F\
S7![ $ ,6%
C'"!-8
??+8'!
R ]5<7G>[!&
#U&18S
(H8]!!
(:"*+^
K$6>N
65#?;\?1
/A-A ]
L&A5+6
ID+25
4$6";&
=/7 IS\L
)- #5E+S*%\>;
BXD+$= Y(
2$R!WDTA
X.(#[W='
:($"
,AH2,W"
6,3)HQ
9D #$3
!755,_"
#)J 8O!
%%X)D%
7!V8&#-3S!S,
" ,:$E
3M_!1?%+&
.9X;9V
A?(J90,>
(*%S\
4CUU[ 36%
P'LQ^Y
'%K,)#>
5I%9K*,E
M$&< N-3
7+1<)->4
?04R 
<F_<#0Z^
'295BJF_+
".-3/C!
^V8H2T7#B+[#I
<80,'Z"Q/+,R
1X"@G=
#%#-)-2Y87-
!ZF*8/,[
=U)=8!Y1
./9A
&,GU8/(3
$\>!M[
!4, /
Y<H4T!
GTX6#!'/=_/C7E8
V/* 7$S
[T3)H
!+$?'#
Z:^U%+
,;.80'_N"
@_*3+!6
3#<>\ 
2 -/-!$
=CA9.V
R8$55J_
I#^&-&2;!
B5.><
-=3JL;A5/#/
5)7Z&(89
8D\&6-4
>,]0,7L5
0%25E;
_X&XZ;
@+#Z1B
/ ^3"?
^XDT.E
1E_+9V$T
D(89P
X=U+]J6!
3[A>*F5>
<:0C=5,S
(6Z4:H4
8*?CR:R [
577R"
+& E8_
?#;7V6
D" U$EO''A
/O0.047
3!Y)9%+2/Y
M/-?: 71) \S+C&C3>
'4YK<1\
*5!F;\V
B7_BA2E
)2]RZ!
E85/T3
$>?!<)+?A9
BT92<R.
3P.#!:U+
=V\:B$V<?V
P78?4/#)
7;B?5)"E
S0:J!-
?#+R!= &
3QD:'Z.
<\&T',
7%!'7[
!0D[@3\CT"
5-"=/
IGZ)9!
2/^(&="Z)<Z#
M!#?$7
)8$:"
52:'H
[,..3#@/
#6U96(T
W%C%:*
$%J ':5
$:%T4 >
_'<'+5
LA%=.0@T=
[E!'"6$$
9S58[[S
!><$7
>925?0;;
U_'6UP
(=8X(O
7!',W&(.F1
4=B([01$3/
<3N?( ?
;%P9?V/
.'#1U
)2+AO]^0
59$;46$
[=*,R>
!1G8]-V
*,2=L#0$
[86?H:
H!$'@%
R X[R4
3,/[+!
S5+[H/
F\0A72
/PZ)+9B93>
B0[(Z9
$#-(<1
K='=P/
FUV-=7
JF(?4
58T@+X:7B,A
J#&?:!L3
\/V.6=(
?2#8($<"2
#F.R#^
:)$_==$
=&$6[$[
0&R1E6=-
W;6@
+ E%S4*#
311*_4<
VA/0-@
:,(1-"
PY;[Q
%(D\CI<
W7+>]
5FN>GE]
761.$\
.P>P$B%
96^F&
()*W3+2&X
$B6,E6
"#!Y-RME3!0#
%3)2+6#
+L&):V;
%\6,G.?
&?=@+7?
@4T'1_A3
*#5#R<%Z5
$S='D(B]1
<!C/2:-5
(!?1?,3:
<'?>5263'
"/*"=Q/-<?Q-7%
]#N2,R:$6.+
9H>,BF
2YF#IQ6(
:"D?I^(
""/)%P
>%F!'+%@8[
U.>>.<%0
"[.'<;
&? 3(5
/A,!0';
!E576(@(
^/G>&Y
?V4-0G@F
B58879+#X"/
W8A[>965T
$SF9<>
B,-"2 X;C
>!^4&FI
1MG[]S
)?O^#%<
,.5/0,#98"'
S7%P$&E
\E;>7^_'7E
CC6*B_!#
H*!KO/
E 4.&+
-%7M=;
] >AY0(
",=W?
$<E1P'9
<N=6"UX"1
2CY5W6["$!
XZ+G"1
66$X O
: ;Q9/X#*
,P)@3'
=2O1.
YN!EH#/[9H!7<0>
3)Y66U
93Y$!&2
>Z>/)X3-
- 3*6(
"S<)J_S
?!&+8U
]?'&UV\
?$>YT&
>!07C&/8
A/P,7,2\K*"<B$
7<<(;@
NV"'%<.
2'<BTP&1
5*98/40
]"Z"<,
W]O#$
ZOD/LM=32A
J 9AZ$
,E(!
%%;%5
!*<[I%
0==D(32
[N:Z-N
]M(725
;S4SD$
O)& 0BX'WP]//
5:(;S)%T^[]&
)2!&<$&T
>"C+(&S#D<-
0C=65W8(
D3 ?,)4
-#^1;;-
P!6[81
]$/$#ERI2F.
)?'L ,;$
A61:F>]3
!6,'<'0&=
W^HBT@
Z<T /$S
6TV 4*(
*VZ M0:-\
"3N<.!/@
"C;D-=
3( :@7Z
#>2042?6
P<+.^,1=-"
BTV&2<N
>T(A=
B0YD!=
/ P.$S
Q(8@
<<68@"
; /\>'#
#W 7](+
Y!']<
':F("R;CN>0
)K2XHY
2&*,13
40WM/?
H,W$#(
^&/;)8/
*)AYDO
;R5]4,
$(5%#+3
QZQ+,#
I"8,D,
/6E6XR6#
9?%6"#
7:'*D*-;O
+0%2H;9
%]<, F[HN[
+23B=>
83V/O1? ^<
B.)YI^
_$8\4
Y88.T"2Y
3##&#B1"
N/U3=;
#("@@I
=F$5$=7=
,'')94#'
8332U/
AQU86*
9P3!'8
S5,580
<P0:N5
HYJ67?$:+:
"F("1+
V%2:A
/(7$YO1
?HB4;@#.
Z8D)?0
) ,#,
Q'C^=)
0QD=%U
$3P0'&)
;,/SGPR4
<G<"&,3(@A
<9=5"?7
FX2;D00C<
M ]$8B:S
'-:2,#
:4*% Z=
86<%&(G
9B(T78#<
I;V '5
<4W) '
B]U@$@9)H%?
1:5\A+*
1#O# X(
734()X<4'
G*:7R_
3E>68
'2X<$))<
$7":5P
4E<WVH
!/>37<
: 7QT<
?$;4!,
Q"88?'"C
8\^.9&
2W7S,3
&4.UV3
Z[#@0.
?1_6 )
(4!-9\
V4;L%2
;:1,%VT
,<[T$6%6(24C
D) /$H 4I-"
<&3/?/
A1A%_+R
7Q'9,0
3+1_2;
7CC_Z8@
..51N7
@;=KG<M
Z "6Z/
.]3);#"8
U 858&
?V3.7>$A
>W5=7]&J
Z:#2.*W4
Y5X0=!0
86<$;6
$'5>!
J?$&9I
)'8FO;
2!!+W65#[
R*6J-
N9...&
[)-'%*7W
>'(O-&8(
?W'?XS
<PR-/0T$:
F= P%
R!>@-(
:1C&8(
-/P:P,@
)64%&5\
):4+$*3
1:7%'!
6>Q?#4.V6
.$4]!^
?'5@G\
Z*H@#+$<!Q
;!6&A6
+RW83_^+
_/ MPI(
UV&0I_9+
%"1,<(_
0^[*$[6
[./=5R$V
R'98WU(
1'3/71
(@:96H@
P*]6>W.:]%26
/5R68+
)1V(CZ
*#/A#
59UB"4I"[U
.4,VL=7588
[839.3
523%"0
G$<#@A^S
O>='T?I3
#>/(^S5'9
0.BO?3
)N\6>T/0A>3
O%")?&
B0BYJ6'Z;
VDV!(<
97-R1$1
)22@V:
Y6?0>) '^.
(EZG)2
=>2V6R
I-ZD#*
MAF6N<A
L1^4N87,
;I-#\,
A>H=:[
#!YQ<?
X0?)%OF-6&\
=9DFY&6
ZK<,36
,-<=((U
X&8+(5"$
1V\HS%
EJ.+O*
&($= O]:
M&*;#.EZ<7]%
6+9>N14
&3"#C ,
J1/+?)
,%$53:'C
]-?B&/.
$==F1Q
*5(H=R%6*H
"47(<;2,7"2
(S.I)\
M"?-2W1?8 7
ETQY;#.
D?E)45=$MO
F-[P&'
J+'>[$
G[7#>-
0,[!(<X&
^=MID 69A
1$/4'>17 /
#-H!!8
_M+:3#--
.0[4"/(
C29?2
C6.U:Z
TW9UUY(*
\*'@<956
WV6>)L(*!+6&?
=,J<;E6\G,
^!QS>
,6F[(<!
?1<R*8
(YU?"@=8>
:8A3P![.
'B(627&<(14C
9XD!
:)53YA9(D;&
?DFI)Q
%*5PY)"065H
5? 4)
0A=$TZ7%6_
5578'4
O<7D=I55_3@
,N=!*)7
:2& >)
+G.= '?
S6Z(6?
^T7?0#+3"
8@37"]
2^4-<B
)<5!4*
:>9U0>9>
&54_# [-
^'6?4ZM"
:[5\A4"%\7]\A
')$$C6!H
#!Q1:
H?,E'V?'
$;)?'U
-8%&XN)
UPW)/*6
(H!]!?.
)S*0##@
<_S#/
(+"3=Y
?=*U<^
!3 A>#
VC6<I:
8K?=& $
)4*=1<V
/Q'9!;
T(A'2^T
-B5. W,%-!24
W/Z-?$4
W-I40;
$%:8@N8:HN
W1D&)7
FEI.TZ7
A%N>6&7
!/-5A%[8)
4[>LB!
37Z97(
\7$1%#:=0'8 &\E\FV=%E)
^F' DK4
6)-85
WEW3 6
5<L!-L+
*WB>4F
<V3!UC
&2F45C&;I75%+
=VT4-:*
- 63,7
A]QLI.
?2),<"
# C@*6
5>KD&',]
S^C3*<9C
*-+$S,
12+XH'!%
0+!Y2?9=E5
C'**P!
+7(,9(,-
!R<*E)'
T+^C%</&
#5W9RZF
E,"GR3-P6,
I(83Z&^=)/
KYV<4E
3T&6>2
?F!-4&H
'^#2=
"E D+T
Y8)905 -
9J+0!9$
!',&#)/2
MA16U'HH
Antivirus Signature
Bkav W64.AIDetectMalware
Lionic Trojan.Win32.Miner.4!c
tehtris Clean
ClamAV Clean
CMC Clean
CAT-QuickHeal Trojan.CoinMiner.S32378657
Skyhigh BehavesLike.Win64.Generic.vh
ALYac Gen:Variant.Tedy.485656
Cylance Unsafe
Zillya Clean
Sangfor Suspicious.Win32.Save.a
K7AntiVirus Trojan ( 005af85d1 )
Alibaba Trojan:Win64/CoinMiner.21cc731d
K7GW Trojan ( 005af85d1 )
Cybereason malicious.e13bae
Baidu Clean
VirIT Clean
Paloalto generic.ml
Symantec Trojan.Coinminer!g3
Elastic Windows.Generic.Threat
ESET-NOD32 a variant of Win64/Kryptik.EDF
APEX Malicious
Avast Win64:Evo-gen [Trj]
Cynet Malicious (score: 100)
Kaspersky HEUR:Trojan.Win32.Miner.pef
BitDefender Gen:Variant.Tedy.485656
NANO-Antivirus Trojan.Win64.Miner.koqvgm
ViRobot Trojan.Win.Z.Tedy.2608640
MicroWorld-eScan Gen:Variant.Tedy.485656
Tencent Malware.Win32.Gencirc.140f37ff
TACHYON Clean
Sophos Troj/Krypt-ADL
F-Secure Heuristic.HEUR/AGEN.1371803
DrWeb Trojan.Inject5.5917
VIPRE Gen:Variant.Tedy.485656
TrendMicro Trojan.Win64.AMADEY.YXEFQZ
McAfeeD ti!3D65E5F78FA2
Trapmine Clean
FireEye Generic.mg.fbfbe4ee13baecac
Emsisoft Gen:Variant.Tedy.485656 (B)
SentinelOne Static AI - Malicious PE
GData Gen:Variant.Tedy.485656
Jiangmin Clean
Webroot W32.Trojan.CoinMiner
Varist W64/Kryptik.LEH.gen!Eldorado
Avira HEUR/AGEN.1371803
Antiy-AVL Trojan/Win64.GenKryptik
Kingsoft Win32.Trojan.Miner.pef
Gridinsoft Trojan.Win64.XMRig.tr
Xcitium Clean
Arcabit Trojan.Tedy.D76918
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Trojan.Win32.Miner.pef
Microsoft Trojan:Win64/Reflo.HNS!MTB
Google Detected
AhnLab-V3 Dropper/Win.DropperX-gen.R622355
Acronis Clean
McAfee Artemis!FBFBE4EE13BA
MAX malware (ai score=88)
VBA32 OScope.Trojan.Win64.Miner
Malwarebytes Trojan.MalPack.Generic
Panda Trj/GdSda.A
Zoner Clean
TrendMicro-HouseCall Trojan.Win64.AMADEY.YXEFQZ
Rising Trojan.Kryptik!8.8 (TFE:5:puXfYWFTsfG)
Yandex Clean
Ikarus Win32.Outbreak
MaxSecure Trojan.Malware.121218.susgen
Fortinet W64/GenKryptik.GQCB!tr
BitDefenderTheta Clean
AVG Win64:Evo-gen [Trj]
DeepInstinct MALICIOUS
CrowdStrike win/malicious_confidence_90% (W)
alibabacloud Miner:Win/Miner.pyj
No IRMA results available.