Static | ZeroBOX

PE Compile Time

2024-06-20 23:14:55

PE Imphash

de41d4e0545d977de6ca665131bb479a

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00001000 0x00006d26 0x00006e00 6.20449051463
.rdata 0x00008000 0x000018b8 0x00001a00 4.58250122009
.data 0x0000a000 0x002744f0 0x00273a00 6.48306708074
.pdata 0x0027f000 0x00000174 0x00000200 3.03283364302
.00cfg 0x00280000 0x00000010 0x00000200 0.151271325305
.tls 0x00281000 0x00000010 0x00000200 0.0
.reloc 0x00282000 0x00000078 0x00000200 1.40709403365

Imports

Library msvcrt.dll:
0x140009320 __C_specific_handler
0x140009328 __getmainargs
0x140009330 __initenv
0x140009338 __iob_func
0x140009340 __set_app_type
0x140009348 __setusermatherr
0x140009350 _amsg_exit
0x140009358 _cexit
0x140009360 _commode
0x140009368 _fmode
0x140009370 _initterm
0x140009378 _onexit
0x140009380 _wcsicmp
0x140009388 _wcsnicmp
0x140009390 abort
0x140009398 calloc
0x1400093a0 exit
0x1400093a8 fprintf
0x1400093b0 free
0x1400093b8 fwrite
0x1400093c0 malloc
0x1400093c8 memcpy
0x1400093d0 memset
0x1400093d8 signal
0x1400093e0 strlen
0x1400093e8 strncmp
0x1400093f0 vfprintf
0x1400093f8 wcscat
0x140009400 wcscpy
0x140009408 wcslen
0x140009410 wcsncmp
Library KERNEL32.dll:
0x140009420 DeleteCriticalSection
0x140009428 EnterCriticalSection
0x140009430 GetLastError
0x140009440 LeaveCriticalSection
0x140009450 Sleep
0x140009458 TlsGetValue
0x140009460 VirtualProtect
0x140009468 VirtualQuery

!This program cannot be run in DOS mode.$
`.rdata
@.data
.pdata
@.00cfg
.reloc
uKHcQ<
AWAVVWSH
[_^A^A_
t.ffff.
fffff.
UAWAVAUATVWSH
ffffff.
[_^A\A]A^A_]
ffffff.
AWAVATVWSH
X[_^A\A^A_
fffff.
fffff.
AVVWSH
([_^A^
AVVWSH
([_^A^
uVHcH<
uZHcP<
u!HcQ<
uVHcP<
upLcB<B
ffffff.
AWAVAUATVWUSH
[]_^A\A]A^A_
AVVWUS
[]_^A^
AVVWUSH
0fffff.
@[]_^A^
AWAVAUATVWUSH
ffff.
[]_^A\A]A^A_
UAWAVAUATVWS
fffff.
+ffff.
[_^A\A]A^A_]
AWAVAUATVWUSH
8[]_^A\A]A^A_
AWAVAUATVWUSH
8[]_^A\A]A^A_
Argument domain error (DOMAIN)
Argument singularity (SIGN)
Overflow range error (OVERFLOW)
Partial loss of significance (PLOSS)
Total loss of significance (TLOSS)
The result is too small to be represented (UNDERFLOW)
Unknown error
_matherr(): %s in %s(%g, %g) (retval=%g)
Unknown pseudo relocation protocol version %d.
Unknown pseudo relocation bit size %d.
%d bit pseudo relocation at %p out of range, targeting %p, yielding the value %p.
Address %p has no image-section
VirtualQuery failed for %d bytes at address %p
VirtualProtect failed with code 0x%x
Mingw-w64 runtime failure:
__C_specific_handler
__getmainargs
__initenv
__iob_func
__set_app_type
__setusermatherr
_amsg_exit
_cexit
_commode
_fmode
_initterm
_onexit
_wcsicmp
_wcsnicmp
calloc
fprintf
fwrite
malloc
memcpy
memset
signal
strlen
strncmp
vfprintf
wcscat
wcscpy
wcslen
wcsncmp
DeleteCriticalSection
EnterCriticalSection
GetLastError
InitializeCriticalSection
LeaveCriticalSection
SetUnhandledExceptionFilter
TlsGetValue
VirtualProtect
VirtualQuery
msvcrt.dll
KERNEL32.dll
="==29
5,$9(1.9-+//
.+@S5!
68&"#%
$L3687
DS5X)8
4<5L2$
(]79-0>
%OO^\\O
1-DS5X
>^1C1
;*?H>E9
X,WYB#"
K2!4#-W#
9),N=D36
5Z?W>
D.Z-CJ2=;@!%
/,G8>$W_
Y!(%L9
,C;H S
V/92]-
=L=X9?,2
,!<]#:
D&(+][5
4-&O:
%=@1/:
;W-?22B
.',!"2
6").:D.(
PM/^R95"A$@P:
N9%?#
-$*[U?\%
6#7!W908
]\5V*5"
GI!^!W
@/D69,(7L
!'\2"+P
]I5& ?
X)-;/VF
?9=-'(.=
I/037$5
5"J(=1@
#M8-#<
[13><[=
/?*#*
/G-='&
8I,2-Z*'
)38>U6&9
5\5))<_
0$-F?"
'2NJ(=
D0%)'
$!"@:$8#
G^'&VF
>'A;?1C2T
5@57O
'3>%G8
^G9!\#L
9D)?9D
:5-1*K>#
%BP%**=
,,,>G$
!1MNY5
$=6R;7:
?'L#']
9 (56.P
/B:7-;>"8
BXFPYQ/
4&)^22\
O!9):*
2#25!/E
PY"(S"
&;#<#C
>.\EI0
E4^!(T.4/L
6=*VF:3?5
-;PK!;
_9#;C'
G+H-F5
\XKV
5$!%##;
D76X;]?
-X,.)R5D
F%*+C2 G"
T--G1SO=
@! O6(
O#(QK5 $
Y7,?<F1
C.); L^
))*Y@.
O*$^GT
#\6AG
=<"VH73?4
>#^@/&
1?>A@3
R/9IW:-7
399G26
T22;6&
O\_4A2=)
3WBRZX6*,,6@0I
0GS<%7">Z'
%=:'_2A:
2=2.@_$@
(/@'"R3M=?(S.)D
#0:"E8:
1FU6:5
3*;8)V
;)$=N1
E'/ F"E"
N#7$6.10
8R>14D
_V?";G
S"B0<N
-#($::/@>
<B^#+0
T;Q[C;Z%
V2K(8X6
X3=>93;
'W&\=C
1H<B(#%@F&
^3>G#-(
Z8!8274
@'E84
--)A[<
8/GC9-N
X6D'T))^E
>8?):%0
'>66><
-C1.+
L-J B23H9
!=9%XS;?
Z)< P(?
C42S22;#
P#)6A/
?W=SX'8-5;
R,;6$8:9
$T!94:S>
%;#C*NC/3X
2)]3A-
2D?=XO
XC%31?
W8L^/J)DX3/
QATU=$6
B>:>$O4^
[#'!_\7
4%!+)9G
-!0*I2
X8,- 9"
H0*N#%T0
>V[P;--.
:F=&=%:
8?3<()
'$? 1#:#W
'&8 N_98
;B<3NR
-V>#EL.99.2
QF"'5V
2=<&TC>
&/,%D([
5E5Z.+
2)+5:!
$N^6(P[
!-S,N3=
@]A3%T'YF(
.F(V-4L@#
)%O=]&@?
ENVA9&
M,VG20
]A&6A&
_^O.3"
XGU'Q:KO
:!?.",6
-_W;?%A:
/1W7\
-,*D0!Y+[
?LN78-
]\&4_!
=#,$@#
5[EP0V
$4.+<$
Q:"*%@
>/, Z@
H!<,+)
*I*=?=
[#($4(G
[1;')4;A
-:A3
N,(152V
5(B=#%
;]]=EJL
")4=G(_
0N\!87
3 1@02
2.(**9!>Z0
?;@+6A
L#7) ,6
+-M&<%#
6,,8<;@
_$1A##H?>7-
E[.F1T
=5?O='4
.C2X-+-:!
V'%-04ZAH
5C8/0H
:68E6%0
!F'?Z
].7R,6
6%9)Y
?,72.G
)*'X]8F
N =?@)780
5;6+U(
8?:D\&
35>,,:"'
8R@!5]
\7.)!1
>/):2&(
#/&9*?!:
"GW"L!=_"
^=[BV8
;"3%8S%
8I'&&;"%
!$ ?V
O(/<9L9
>W[V#_!EH
F+6!D,
#H)>??%+3
,5UO,4
JL-N03Z
&D%<?1/-
&C3E$
O-X.)?6"X0
G$/&7C
)!Z$)0
*,:&;\
8]<75%
-<C4>N
C9S&>?ZG(
^3.$:!
4 <_<63
F!SM8Z9
U[Y?)H.\ *3@ 7.
97G8[L
&"'% -)\
^.,Z#/X
>M<DM
6ML9FZ]U8
)@E9$+%5G &
=1._?X?&
2 :@C9*
V#0#"5D X
F=.*5>
L"7 !K"
98!F=S2,=Q&[
4";X5M-
.=%$=D
^()*>(?P
_=R= /
F 0"P;F%$
1,C-<(36
J;T=!=\
.2Y/*<1'=
@V0]#0
N/>)-
^WYF2>4N:*&
:"+''_;)[%
^ %?F%1
-?@7>
HF$*0,
!1*#V*:
,$%6@5-"''M
&1;C(
41"\"@
9>""9&X6
EW")1)46
*U9!58
!7<&2[
GS>R'0
.;\[5 :
,E^,V R:7
%#W1?L
<$:&=?*
4(7Z;*EA"
4"V)H!
??ZO_
,A+C0;+
38?_7!
3N-!-@
7F955#>8C
*) E6F/
,%U.("G,
:/<[3/!
;@>W;4/
:;Q)/# )
+D\$F
5AE^&1)2
<?F1"7$7%
>=4=;&)$;
U7X']*=<F8@
4/6^:94H
->9!8=
W11*_%
?2E9\&
26 166
^.X)]2
20#FV.5
,$<'GB-
')"?7=C3
7F/E+/
;%=?16
"RF?? ?)
9)9/35
+'%1D<]Y;
%:<P]1
);X' #-1
[.8C,:L]
!/9>R,C9
;#/D>C
76S;''_
0:, >Q#=
Y')37Z
[X93G1
/-"&7
'4D50H5
B6_47BS
&7.Z<6
$7W#&12E>
#;#"_13
=U!B.".&-
/0G1E/_$ U
]]JU>=
<U2([D
N MGD<0
X"9/>8
49;%8')'
X%1TI30G
84 WE-G0
?V%=:1
>$=B H
2)+-JMT);,
(_)(E,>
3>:5A#
.R3S@22;
1L6H=
Y(%@\=&]
./8!55=/F
J=A;EA/2
7=%;-,MC6<R<)
]7%<0<!
79?AO(
"0&^XX
8'_(3E
W4O$X
X:UR9AH@;
@=?HDM-
?N E!A
)8%<9S,!
VF9B%1-H-
O4=526
<?6?;A
@1U04
*",82T
&>#?N-,3$K*F=,.
=,'57C
B.DS]9<
2+#8Y#$^0E5
':/W"_:
#9Z;:$
)/9BR
ER]08#D,
%+@%<1?8!VN]
T"G($),
%A@"]A_
)X3&,7
$+;>"A
RJM_-.^
"W8@]*O
0(3C;
Q[&K4T >
'H.4)8
Q.A,]-7
;K8X,'
:8-[[5E
A@/?5R
YD ?%Z1
&\-6!: #
/C+3]:'@
R>>$A=;6)2
716"9
IBE;4C
1$6R*&!O
0_?*1>
FE/X<:
,(6$#
:C.X&3 4=P!U=*0
S'=CTIDA
%^XY)+ U
(]1+1=
)0E3?1
G_&#;\<4
!.-+*M
:1%6V$
%+L2$;9(
>?4=@.
0&?@7,X
N2(*R:
\%NS!V2*#C>'7S
(+%9
?_B"&1Y
[)'(./,\A
*>GPY)";
3M(>T^-+"
SQ4'4;
5S61#S7H
8 8G9!1
MR%<"=^
YE^, (
3H,1]-,'3
6:2&N4*
3-L==
"N%<;8
0>"*_DW:
Y:F?!$
SF]:-$
:!\;( N>
#8^/-2,
$O%%1=L!*#4D1. M4
751^"*CB'L
6!:E*2
?;\C_-
G92&)/)7)J3)
-V44]X
L5< #C
16'#8'>?)!)
1?3:D"J
&0V46:OMA
MOC#3 R
9B$;Y8.
9&\6UL
2;)>##]
;6-S-1(
(%;;G&6-B
E)4&3*@
T: Y0
$$[6-B+%
-]8?C:M!:[R@-&%
:',\?&
#/V+9$?;\^@
D -#7;$Y
9FI@2?2R<2,1
BN=3#=X
-"-EDDB
*YS &5"O
,!Q-:<G
#(D=%
)$G'$7
:5-T)3/
'UA#B=
O7?C*2HC .9
_U- =X;*
&G=9=7
:?+\ X&
984=&2D
!,=7%6
-?#''$
+TA= "
8ZX$M#&?
-(8<#/-8$
&]21&4
#@ :#
'(8B70
MT6<'3
$-07<>
-F0$7V
F'Y:2C
>T/*
_;X,;)
:.*.V2
41Z'34
6%8BB<>4#
>9_D-:V[R,]%'.(;?:
Z^9SV,C8);=$)8
0\85/_7
5<@*!\
"'.!]'#P\
D<B'($A :*><
&H" 6<
0!=-B9-)
?[?^1W5S:(
%L$$B_;
1Z64E"
)4)823
EE,?60'>7
(WA!;&
/\EE34
DZ6Y+:
%Q;9?3?,&T
@=.WK
)17!@T'6A;'C
G4%=%?
>;6?$7$,8@
Z$&9#9&
5C)%__0
;+X\ (4,
6&3%6 C
(7!,&@.>E
!SY7*C5
U?X/2$
<3)3X0
X>"9E<D
,X^M;$#4Z
5-Y>&#J
19C4$,2S
AA/%#J
D.;1#*T;D=
HU)%*9H
,8?[ %
!W?" !!\<
=?0T!$.
+9@T^-
!^'22OB'[
R,F>:.;)0
A\>>"$
U96"U
%*$!4Y:
#?\8*27
]F=<_N?1$)!*<[
\6A0D.
\] I/=
(:#2$D/
5T^!="&
(L+?<;
97;@#E' YW]2*N6
FI4B>
IC@;4,2G=
##%1?M8
/::'U3I
/X7**'
%48";:S
%#<$+.G
$9$OLG
&)3_%CF!A/B/
"V>GB>
0#L:-'
@,_) A
?0(W!GC
&+82>5
N@ L-F])
<34S!<6
3W2/9#W
=K/>C0+
/L2\#
/Z$6&1"
*!'9;C
O]9(O"
1S%C8J
<_WG?
)32;?37
, E';%!
@$?3 >N]
1V2=>"
1P:$LSN
?'2<D,$V
::5(5@
V&T,&DH
]=)=71#
?CR37?
?.&+L7-#7;2
4<)"$7
,,13D
7%]*<?
!5IW",#D
:#5Y4#GB*6=
@TN%@:
0_V @93#
9#3=@:U
6?"?!,8P8!
5S6=ZP
X#EOB
X,'\?P/YE?
?A7[8EF
P?_J2P
%&_ Y:$
5X@1&X
5 %*8$
-;?Y3A
:;*<[*<
/=G7.P8
E G='C"?
0697*7,
?^,'?@
C$<,OB
#_-G,Y
=#(_V[
#2,.Y*
Z8(!P;
4+:'^9:ZB
35><-KDC+]5
O[= "P
4V:R3X
1^&W8&BS
:3V.OC
?4I;/>
8$'-
3L9=B=
N A';G
<A<=S=
YL-+@?=8
)=C.70
"0G ?>]
?-@,ZFU')$0$
3^5=U:<
=&6&#
4%HG1*&
;<5-">
95L=O9
GA?$>
7(%WA'W7
1A(/-D
W:#^'25
*72UA4
5WS% ')?
IF0<2=1
*[6C(3
%])D*?^!
"<G7BS<]
)E-S-=9E'
9@3D>%"
? !;?U
.$7#3\!D
Y:_G08=)
2F>)/K
:^"8%78
B_421<
R;.??=
<"V_E#
O=%_C+=<O=?
\8;:3@<^C/
2BC?";
3AD_.*!3
#B7@46<[+>
%%?R85U
>Y+4 G-:=9%
G$"6;
B2$ *$LUX
8# <),AH<^%
2]@7 6
3<!">S8?S
!RZZ$DH
)L[:9$Z
G9 "39%'
*-+).
0!UI "6!O(
)!O9PK
3"&E67
#A-#5(1;5
6]=/?V'_2\:
47;6;&&"*(A
'9(J!<A
5//.]:
*0>3R3B8
07I#:Y+
D$\'L<'<
[UF&;&
/EACL"
VXZ(E3.-
S G/W =
(\0+*P
<>$;#)
#=0%Q5B
>S<4;.;*"
4@0>7*
7;:T[8
.7UR('_%/
/:=,X%/
/>U2T6_
0!<Z2R
]53,9%58DL]%=F<Y
PB ,=;
9^*"'./,
H5;B&=
2/;3+>4
BLD/$1=+
AC?*'
:88@)%#A*
>XD;.,2
@1,D:*#
.4I:L=ZP?8
_=0=7
;U0-2<3
#LIN/'S-
ZM#@ 77
D:,XR1
9C7I>.
4>^([
: W?I-V5U
MW/@
>:FX-'
A>.18/-SCB
"X)!6W
F6/)'8Y__
?:7_'6
%8/)(7+R&
S_9GM%I57Z6
[ 9X0*'
QD()$C1
KH9\<Y7L
A!'H/1]V
.F)1<
K8F<<
0?^4,=D?#
@G\:(!W^
%IE$?;8
U1B6$ ;2E_3'
K%^+R/ _6
AT9U_22-
,&V0/
83?ZC5>
]A72'
V(XF83=
2/;+>#P3B:
D*/[&[
U9;'%)E:
C8GG!_Q
YY&-?NC'S
>D?@1N
<9W?:C^
*$/F#(&
1<(W>?
L-\5&1
E1 Z_9
9."O--
CM<80#
]*3"63!
; 32ZBW
X&)+8'
;-<=4)'U;X;
6P3=5""H-
?R,/'X3
">??0A+)
D.-@;9#=ZI
";4B=2
&?LG"=?=9!
512EE29*]"<9+(
'=F$B6
- [_#LC
?=#9+-7.?7 W
*1*0DY_@5
2E4B >
[<6,R_4T
(5L4Y)27
Z6@3Y[
51 @5DP
% >;S$(
:L!Y=7 ;Y
NY*3.WT8G13>88;"0?!<<
9#CY0:
GA74.A\;
7*+6* (D>
-("09'% 40
@5C(XG
B,]? .Y
H%/>6=@
6 _T4*
)-8'(R*:
B:U5@@
#6Z_)
,0))[*<6!9&*
>>GR5U=$GL
)(KZ<X
F8/7?H0
0X1:3(!
1Y &T
6X+'WA?6G"92,.
<,YK6V?/
1<=6<
B<,.L]C.
1)%X3$<
8)HG!:
''JA977
J<D>S! C
7%T#>V_
[6/G2"
C176.;VX?
5#JD35=@6
+($7"+Q(1D8
+N''&W
2"D;8("W'0B(+
MY8H*"2%
"<,4:40
^,\?)&$
)0DG82()29A
W>E,,5
C@:<WB=XG9
[']@682&
Y54Q3;/1+A8E9
&(TG0=
9"L&6C
79G./>.
BX& O7
F*\H*=
< 5\-H4;
(F!_G%B.
6= &/;.
;BXF'8
;:#_61637
(^+$M.
*-^*D&
@!L:Y'P7OX -
'FL;"7.1 8:+B+
))<_.&6
3\(D2?
GZ-%$6
!1_.D<
&;*Q:%6
"(%39
-6ZR"&4"
W%293"M
=4&!<=,:+
BK8-BN_
?-0$%%
P)@A#)
0:,[3W'
8+'; !B&
2>*_G:>EB1
64?H#;//
-? X":
9%&J8V CG
O6^%$="A
(1=^*
+>2E$
_45+]&-
.2;;":)4)
>-=><<:%P'
;;^7"./,Y
0&@S/.,
:^[P>W7"
;3H;Z9
,RC$-7
O1G/=K>
:Y<)CV3(
>9@1#<%%
?N<;=1
.;K&?\:
$ V/A''>24C
X"L$1^''*R?
)8X4+#2
'U$@$_6/
<<59BH
2=0$<>
2CG?(%
DTT^8KL,"^
.)=$8Y.
A ! A4N=8&
?<J4W:
U/^\A'0
=Y?"..
=PR)-6.
_)7'O22
36D6(W#[B4
3(N8G
47AT9Z[,
#L4[DW<
'/ >)B9
?$3X[W&,[D@$
2;\=!H
XCR,(B]447+
?^AN70
QE6': 8
X1:;^]S><
+*4MG4
]?7:()
A$ L4>
.:%&:( [5
8'(A$:U
0Y [B
=.D;$V+%0
:@;;!W9
?D!-I-Y*
'5:$5!+:
?6+B'_&>*1
6+<(%"
)&+8@N$<)
C#$;(5
O%0Y>= 29
U5P?+W
^X/I?G./-
A%F[1@N9_
=:'\<SE
_VF<3E
]2=+5Q)
#D;'GG
M*=*;=8@-0
6B;V&3%
X$)7KN
O+A2
;)W>8Z#&
::PIZ"
'AOZRD
,5/+M
&8??G7,
;G;/])&X
>C=$CU
("D\,FA
4)1MU
X+T,CC
Z^D!"
C>@PI
%!B<X<
A']X%P5+
!!__4%C
&[(^84A
*8_,<"4;@9>1
#P!1'"CLJ0$<0
"1A%>9<
#S>9R\$
$"XO+@J
Q.GB:P &
JS 9(7%
%P&"C1U,
C*F;B#
FH'>]]
<)?F/
9I\16?#
Y :S>%
.17>>@"
0Z%A81H2
>%<\9Y>],
<% [(&?( <
'?S4S<
0 &?2
F ;?= O
^6>CY#
Z)J#H
?3HBM2
;C5&7)_E
*9C7";G
":8G."1RN0UQ
@@?,.O8
D.S4;C
PY4U>]? 5
55\B130
*G)'/5:
6%]F6
<;[X];
[8==6"
XV(<668<=G
$/9M/
X1=2!
S,+.Z?%=
*_X12/
26V5GB"(
<6Z+ /
9?; 0
;.],2.;
[[<A#B+9
1A@"92
"?'6RF0$
&E2#HN
"6)@6^Z 12W
*C%;3A-E\
"(H4X%66G
-@>0 :9
"J;]V=
7F5-E5
I#O;=8# =7-D
#DW$P9
0>0?9&
6;? -0*
%8&V_5>
>^J/$/8\>%ZR
(G&5=C
Z'4>0,
.(#"<]8
$DXX%=?/<
>5X,,SL]G*9
!!75*
+,._15
*7%(_H?M/^!S;
$/Y1&?
+67[8&[=2
1936&\
+86#<="_ ;
2 1EV'"
9[!?3
?>M?W4
9C)@VY%0
*143 =2
/N=3XVR4
L4;AS!#
&L 4=
:+.6_0:
<R ",:
">3 /8/ 5/&0
"])%"\+
(+8&E
3,W6C:!
+"U O%:
3W^:E4
UE)9:88,
()/O<9&*/^
;#.2A7E
3Y+_C4U
KF>)7,Z0/.
&@\*).R
9.N-:/
^'#<^0.
*?;(1>B
,5N#) (
90:0ER
9(@==.
?_5E78B
7:=#8T
6Z:#OR>
2D)Q8'
Q(X*=%
#%JR'#\
?#2BC&FVC1GV[
+69F*W
U:\G^*+":
YP'47J
/:J&=$Z*
6/0&337
=!3!<\#
<$:@U;
&"31 )/F,
:%( =(
"R[_89 <
)E1:400
,;>'9)
2:7;3C4S
!#4[3>)
#=9\@"
>88WL
^:@5=4V
/XF=,>E
@E$34<
ZC&<.3
-L/#>Y
>S#*&#>_O+
*'E>EE
<8ADRF
/*"X<Z
5*V:%'
)11 :=9^
)%?6(/G"A'UA)
4C[%LN(-
6\]E;>":%W41>
XZ/Q!_
78E::]
Q$\:N#9
!($WSX
=[*SW?!#7-
W^!!D"
?18A^7V!R
PF5^1;2L5
93*2]
']*#.P-
)^DT:5;.9/
5=E634
)O/HD;^U2#
=]6%04)M<
\G*<[;6<E<7$&5
,?1@Y<Z
>>+]D;>
<Z))R'*9[/
=/#4B
$ 77_4
?>*66"-+=1)
/GV?QXY78#-2FR
+,3%5
^#)\*"=(\D5
V8='0&C
@.'6)"
=<,4.!CL?
_S1K9[
[L&U"B
81E),\6(%
X%5X!9Y&[H
+!2$./
2%%,H
52M&'#
T;Z!]&-').
^"C!/=2
2=^)5-
'$3!-;' 4
&X#S)E
=_2R-,'< B$YB
:0>^"[>
:36SX7X
8@@<L;
W5"6#]
F<!P",L7.
X /8-.4
/#VFV5
U>MUW:
32%YB=
9$C19;*(PY
#:"4!X
.EIP/1!YR
R&;.)Y6#\E%M2
_12$4:^6 =
(52@E@
3D/[<:+
.!7&$R
%,$]==
R*<#<<ZE
%;EW
5$@&=A
2&8+X#W?A
7">/_<[5@
56+6<=;
%">X=;
]SM;3T:=_
TPE<_H\
8<#G51
5<?&3T?
YN(,Y(!\3
$)#&@\#
4W > )
B!9[)?V*>F
A@P'\52*
C7A.-)J7'
=%E=^ G
2=$ 
5!)=51
!?@)<)@&.0A
.)Y6-.,/
>8,:2#=,
CH98D*
_0B=#
<J(W?<%%C
-?D,;_
F)S7+#Q
'&$@C26
YPJ=?=Z7\9
<E"\@/?
02?_&.!3:!
>S7&D8#9
;,1_!#
LW$=N+;A;X
D ^4&1
^#3JG/%Q
\V>/F9_A$E
N#FR2
?[>>A<
/D7""\7@NX
:;8<[8
[07@#,9
![R ;:>!':20
$%F))5D-<:
87CG/ B7
..M8<-
(,[5'E
C3/TX/
8?S#WE
Z47[*@
*58<)Z9
0DO\#P
L$"<^E
!=X6[6J
,<DG_%5
>NDY_;
L8O41V=
#GD11
N"I#36
LBZ6 $
Y=+492-]!
0D45?=
#V6D&E
:290,O.!
,=_O,?
:E,=,#)&/1
2"]]P@
U ,-^-S-
"%,4B
>:"-<_5
8'_G@/T7
00L% 2*
E6]&$7=
>U;2$UY%
0R5$)9
3\<)B'
+I/@#8
'% )0$
*[3;4^3
&;+5( L
['%V$'='FY
?E0>).P!
0YS>9--:
(73;X!!
EE#0!11]
%50'AY;
O@F.,R
2K9%$^,V'
_M=0,N
2 D]!1
>& C'-3
';:/)U]
%;C:DW?
@"$R&W
%(FG3/HY"Z%
8D:34/V_03
IS;=%,'3U
R-<!"&
#7X0X];5?@
G)2X5&>Z4
0Z-"%%!
0?@XXK
82DD9@&
WC!% C
%(.E&_
:,E"D?,
G&31
4,E1#E
7K]\<
C%@S3]
A$8/D7VG6
69*:W
8(_=7[%
M,7#HC
*"&]]_
"?H.8?3
^6_"<9'
8?W2+V
'J=!:^,
_=9Q0N
5&1A=P
_#5?2IB;(8@[
2$>99"?
<18/#6BCY
%.1(1(W(;/Z$(
9T->W71
\&L3.";@=
7*#-C.
$9;:#Q/%
>74?N?@
7&Q; %
,B(\#<
>?,"<\;
Y=Q??F
"*^""R6,G:"4
$_;0""5
1/F'1/'*#
2;&Y?_
;W#_]L
1*=";GY,
%G><"'
D1^"C+RO?2^2
=V^X*;Q2C-
=T+" I
F B!20+Y
=_E;D&B
-\!?=-
,]>&)6%1-7
BO!.EA
3V;@!:
4/\\#DXE3
.L%TVDMT\T]*
$.'Q)C&K>4#
8:12;30
'5.>%/
)-1,**
='[U7>G.
,)\Z_@FC7A
3OZ:J'>
Y[S?-Y:+,6-X\'<X
J YZA<<M])D
9,'@"'
$@&:!"
-,=]"2?
K&=]'>\@*
>(!1RTJ
;8\' 1D
*@1_Q>9
N2:X!
V: F:-
LD)=*#
!05+82
*!G0<1E7H:
B#%!A8,L@
]77EX\
'6/813#B(
03R6C=
^?#*W"B"
.1)ZH+'<
K J&G.0=/G"_+)>
Q,=&9"
</Z8TN
8><.67FU/9"C
!3Z"(5
!F$8]'DX%+8
?$V,R1=
#GF*9
)Y<"**3
Z )&,17
>>#/^,
/)9?U>
,.,M*7=#
L A8)8
5Y*<-"
&CL..9*'
XC/Z/#
>3;42+
"KKV:0
&2DP(8!U
<@@#$$Z12
1-?_G2=4B
=3/$=VOD
:%>N (:9>5.%#
;-,%7E2
;\<E<F
Y44 7#
'/0%0&
Q:=#=1^ ".%99
*7T>0A%'
/&3R:1
_0&_%:=#JD
XC?V*NE
8B=;\*
^=+O 0
#-!!':
I\8G(E
UL3>[^4;A5
5 /Y!%
N1+%'<7
8(%AC>
#)07 %I5@=(13=U,
@ C2?=((
3EG; 8
=-0/Y5^A#
_E3C*;HG
$__;[%
/7E.!
16SW'A
<C2Z$40)
(/>2U?;
%/UP00=H
M+S6$"0#^M)Y
7;')>,:
4(0CB+
!6OS_ 'J
",GR4*
;3U+[2
0LTN<:
["?%EC@?
2.0V!B
*2.F9#
U?I:13
-E_'@#
. +]9@_
PHY="#
98A"D@
*]P+*5IE
8293#.9&
]_8-7
A=B;>>,;
"%>W=(A
/!+&]C
'XL?/8
EB(9U$Z
8$=6&Z:4$'<;
76.0&S:Z
<^<1;&
&8%?24="E3Y
,A>4 +=
\;/9>@Z$<9^
XH=0*[
8.1R?>
=W,ZXB
Z4.<7>
7G6_!
7-"D.XJ
C7-V=!
<:G!KQ
4\)$.9.@Y?
J0<<&+D
=1D5[16>
'<7:7%]=*
7CY6+2
*9@]_)
$MO?#0
8V6^:&,
>?I*4.(
5* E/.'
[4##3!-W$8/E
>$$3N 9
(>9(&>
$(S,Y8
5BZ\LW
\>]J#6
[2%=>!
!6?E?>R?>X&
791P 7
(7")?(
K(35A=
&2=%_@
5>:?]@
[ U2'\
;.6.4-;
;24\0
G*7=\Z
#=& <Y#
F[*0[&9
E<8<!\?
/:-O,2
#>3K'@;
.1-5/(%5:
2,/N:4@$
_@5=&D*
?<6D+:
P?_$?!
.5$1M
:04]\B
*126/
"Y#X4
9H(=.]
-8$*6L5;&&
F'C,.8
YJH6"4
R^\?1=
$$7H2!*,"W
9[Q!R;,>U
!V?"-GF
$K-)(
*#!)9"",2<
Y4[V:O>
=/1&@[
' >08;%)!
')R2%/7
=8#9#= ]_P)7UA$
6Z#9H1
P?,6O+A3
H.3PO*E$
<.<-@H
^C'%2]>
R<Q\$E
5*-&E[;^?6
8\U!S",>
@6%NH1E
*6:450
8"?8$(X
]6U3.C
&/,+X6
>YR&9-
^8;2"'@
(5XAK-ON
+9 9'G+
J?3;<"
R(,B5)
;Z%3_2"3*>D
CF5]9W
M<023D]#
/62>?S,-'
;D+B"<
*Q6>L>!^ RH[
)X6W/)
$E/@>"
ZSUJ1<U\T*3
%APA#'$
6>&O2&:
D<$DB)1
8=[5$D
>Y49T+&3R
6-&=+F'
[:;[?2
IP(42#
00A;G*2
8:3&='
-2[W?<L
!70%E8D2E
@U-70&
;6##\#
?R'3 \Y
E^FW]-"1>>
2&$'=)
^0@&L
@E!5^'P[%
23]#+(9.
D >'I
*<B5_.A
5$-\8)=
XF :YC@.
%%^##.
B,2T:
/&7(><F
?!;D37;Y
^Z =10
!_ OZ%>"
-^WL4CMB7*"<!
?LD=[#M=?
+2I>&8J?R4.24=;
(X%=R=&
Y[G+H,?CDN5
CZ@2,#"
/96E4?:Y
>+D Y
;N>&:<'
G\;+#8Q6@B1"A&F&
= !FI#A
$9-%6Q!,![
"4?>Y6 5PU
_ S&W C
Y(2\MUZ
#F=(->
K!A-@WZD
8&N!&5
G4(6F4
@6=-^8$
#4"E4;V$
Q*"WH
/;7#)5
O!%5)V
=K%3-,Z_6!
P:Y#[A
TG46-I/
N.!Y$>
G 0O_["0
;K75)F
/. />
LC$>,IY
;)',8V
W5<*QM >/82-!
&-# >4
R*.E'M
?->>V9
_7-N(Y
D%4DS<
0!)'&7(
&*X9<F
Y65V4&
N8/9]-
%YT4")QV2
=/G*$.O/8
_D"$07
"6(AKY2)I":
$3%38M*
:A>9.,
8V?$%?8
"8 5E^Y
V^2*&*>
:=#W4O
!/\(7;"S
&8513"
897_&!
&32:'
).!V%:<7
RY7-[AN0
20(Z:#%8C+EX[
%;B@<
>+">E=
I.:]ZT
?A9PN.
*&-\Z?)
E^?<1D
^%%$T$
]'K;DV
_/-_0Y9.%8WM
^%- J=:
C\;'"
7NG!^8
>@&'S]=<&B
6H,0'
"H]\"P
6$-F'&
)'Y933
- #L9W1
5)9;.7!1$(7W
@7IPYK
*XK?!1
:/=CH=F
G26A)<
D6:G',
@,T@>Z)7,DZ
E5*2>=
_X',)4:
!YQ)>*
\X&'D+Z
,R'/$"
;0!$;M2"
C\S4Y0Y$
-A 'E1
?$>.Y2R%.
%QE.@?2
),?T*\?_XS;#7
"G9.5%<Y
L%\G)75
9=TP")
\?$:V7B #>
C(:%#3
=Z;#%U&
=9-#-8
&!)G9?
-:AD2V
E9V<=
S!?$O-1&?:-1
_".;]9/Q
& 4;-AZ
ZFY'.&R$
+>2#"*,"
W?A[_$
65L4)\
R.&:??C6I3 "U
>>,[*\-_F
U*0!(3=-
;(.[Q3
H?=51#8%
R,>%=1-
)A6=$#.
E >#+
VA&43XK!-
)8'<< &
Q?/05!
F#""86-"VWB
R1'D_W
-YZ?62
;F(2EC8D*
+[+%_)>X9
1>B?:!
)(1 23
[UO,$Y0
)F 0(;
: 3$Q;
70=:::
20L:,[PV.7?
N 2"</
!D3@#F
3#:=1$
4%EW9R2
BB&#&R32:>"K2.9
Q A)8
(\>R^&!
=B+-:7#:!
.=&E#P
N+(Q1+.
)D+X9/
?1D&G8$+
!:E/#_7%'$
J&BY88
")"?%2
>'4F#5
2<</5
)R'4D_&-][
&#WCR8
L-S=DD
;;:?)
(-!$/&*"='"T/<8!
_?8+_)C
66?3+&
%.?%;[Y&
2#77$#F/
,!>2(*1
9#=,22F=
Z<U,/6 RY:
>6=071F
5<+],$
%;(51-
7*\'*<3
Z7:E)X
#]8ES!%
<2^@-+
3!@$&,<-=
1Z-K/,
#Y9I3 ?[K7'
/8^83
4R(F%]=_&
\'P;6QS<
/E#H'"]>
8J_76&)>
@VE,/'
\2&*!"
2X"?1!
C@2>5.3
,%$)60
<&9=\"S
=@3>D-& +X
2DDN6#
80;2 "T
$*2;^#
-3;[2&
A3./@
#_&>7+
ZJ8?!8B;R
2_<>.8Q&>4
3!<<,F,%
0!2=@:-T;"R
1)2@0^3R
<FAV(.O/^]
+6OL3J)*G)
9U>WC;R
F\Z]6F70_\=
83;++"
+_%=1<2<
7^D.22
-#8/3
,NT.0F
'S7!$$(%
>/D9($9
',X,&M]X!<4*
:5,=VA
NE3Z1V
:#"+\<&#R2
R*8E(0X?
9H364]R7$
_A9!2)<
@#^ _
A[&'%L.AF
"E,'YOD
Y .?-.W
0MO8/J
%PB<J;.
%,@J(7C=
_0%+.4<
$<-,B1%>1GU
146V.2
N! 3. :U;
6BA8,O
6GE *#R
,5BQ:8:
%AS2_\G
@Z"/L(
S"4(P'9
;2400Q
=>L;> S*V@#&
$53$7Q
$L=3G4>
T4 5"??
PE#)^
&)9VYM
R;/-\7)
<G2C;,<
/,9,?MB
*?=,)%2
(4&;1<
?:=#A
+2"'.;
B!E&FP^.#04H;
( [!&/70[=!2
9+4[9M_1"
V< % 7
0. 3#,
'C=>O+C
&%!+.,X3$
YR5:=]
^Q2(S(A2
7Z6]9=)
02F:AMT>
3=>)+;
44<<,?V
P09R"9
!EEO?)0C
4;S/0
:7?#<&H/
"4R"E4"
1M?".2U
%,*$L!
!=BT]V
?/]+4RI3
U_]6_X
NSZ7?
^E_<R"(7&$$?B
)_X4 /@L
*4#&<X
/-"5<BT
4R&,R"\]=
%W35?,
7(*SY^
KB/>B1
P@>.P%"&
9<0?2:
,.FNS(8?SV
*<7B&=31>.!,
:V5:1:]
#U**?G
;$=3#(
?+5;[P
<67>_)G
1=F:X
17=(']
$/0(4&"C
%A,IE1'
$>#0MO7
!(>9?9 
#;!2%=-
4 #>]
_3K( E
L11F2*;4?
TC0<->
;$Z+
$:X(,>
'1*!13
71:'=
'^?Y;541Z,
A.E39
6W,+=_
^&-"P4
(5[DQ3&#1
R<=6= -I
8\'7('
Y4$'KJ
A(7KD1
/0F04.
V;>3RY
$48=5]-C03
+9-][+
'>>&4F:?
+ 0*4I
"7*0<Y:'
2?;=
/5:[2,-V@!A4:
*%--:/G[
M =]$2"&T;
S65!@(
28W21X
<48N/;#
3 E8 $
'I/?+9
%[AE>F
@B<;=/
="H439
1=+%(O&+*C2
T^G%+
<:%+_*
"^*1;N,
VG123;4=
><&/&=>
)(:V\#
E6'T819:KH
>.D2Y
\VG< B
I/O7+?>
)B,J*?
O[F]$*
#;S8YVM)
^O.72R
*% 8W_W
>/29*
W5-GS..
" S*![;
)1;D#$.9"
1Q=QC R
6"5'G/
;]GN0(
2%"95&.A0
<X$:;W
PD*U*8'
0+/B'4
D&YK;
+ZM&@#
;Q+:*14+B&
/^&:'(*,E
AA@]&[U
1>?* (
G447EM
!F@XA$
.,W4?$
>!"J47
U[=J.8)[
8\,$:CFZ%E
ZD/*/Z8)
?@74=4
)TH<-?
>77N"?
0+;<>8
=>S>,
-_Y!1'?,^$VN
1A4$4@
;X1S7&@!+
8C%1R4%
Z^A7U?
="I/X)
@IXM'#_V"\
(V14-="6B3F
(G%;2O
72!(%Y
9&1">[7C2
#$=?9<
#8-=('%
Q.C;?-
03D$]2.
&="48
<98&6_(1
99-"H'^
3Q%2C
2-""1$^_%6:
).PJMR
AZY+ ) <9"*)X
0&^?,>
/ T+_2BUNX
]G4!)#E
2&U#>O*>
*5B4:=>
BP(-/
1^"O$+# ?<F#
D^&>+9'%
+ )!D
"8$U&:
@_1LD1
GR3>6]
6@43^27
"5CRJ2!
$$(EI33
/-3*'A'8
%(F019@>"7<
?*10 6
#[=D14
5O1:<L
F8&(TH
D:1-0>
8:3A8?
/"<.G&);;
WZ:@>
'*5[#A=
.%4*'"&%;
1!H%',
D!!;.([
3!=R#-(G";.
!*'HWO
$?\&N
< 4&\[
 3*7N
$;QPS
#9TY7W>V
R83C""
8_4A>-)-
99($G27:&0
5:EN6'P:%
-'?9)800,6
M)C]?
U=:9^@RV
#IW9\*G
E^?-J%A
\D%;!S2
>Q23^&?)/5!#
"J8=.(3>
3!Q2M%
;0581-Y-
"D1=]
6 _4B;
1K2W+%8
5]_PS8_
/9-<*V
036*B)D
>C*,#8U7)
Y&!3-5
"@!9)_
"RW9LZ
Antivirus Signature
Bkav W64.AIDetectMalware
Lionic Trojan.Win32.Miner.4!c
tehtris Clean
Cynet Malicious (score: 100)
CMC Clean
CAT-QuickHeal Trojan.CoinMiner.S32378657
ALYac Gen:Variant.Tedy.485656
Cylance Unsafe
Zillya Clean
K7AntiVirus Trojan ( 005af85d1 )
Alibaba Trojan:Win64/CoinMiner.21cc731d
K7GW Trojan ( 005af85d1 )
Cybereason malicious.e21f85
Baidu Clean
VirIT Clean
Paloalto generic.ml
Symantec Trojan.Coinminer!g3
Elastic Windows.Generic.Threat
ESET-NOD32 a variant of Win64/Kryptik.EDF
APEX Malicious
Avast Win64:Evo-gen [Trj]
ClamAV Clean
Kaspersky HEUR:Trojan.Win32.Miner.pef
BitDefender Gen:Variant.Tedy.485656
NANO-Antivirus Trojan.Win64.Miner.kotlga
ViRobot Trojan.Win.Z.Tedy.2608640.A
MicroWorld-eScan Gen:Variant.Tedy.485656
Tencent Win32.Trojan.Miner.Pgil
TACHYON Clean
Sophos Troj/Krypt-ADL
F-Secure Heuristic.HEUR/AGEN.1371803
DrWeb Trojan.Siggen28.63157
VIPRE Gen:Variant.Tedy.485656
TrendMicro Trojan.Win64.AMADEY.YXEFUZ
McAfeeD ti!63733FF3B794
Trapmine Clean
FireEye Generic.mg.4691a9fe21f8589b
Emsisoft Gen:Variant.Tedy.485656 (B)
SentinelOne Static AI - Malicious PE
Jiangmin Clean
Webroot Clean
Varist W64/Kryptik.LEH.gen!Eldorado
Avira HEUR/AGEN.1371803
Antiy-AVL Trojan/Win64.GenKryptik
Kingsoft Win32.Trojan.Miner.pef
Gridinsoft Trojan.Win64.CoinMiner.sa
Xcitium Clean
Arcabit Trojan.Tedy.D76918
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Trojan.Win32.Miner.pef
GData Gen:Variant.Tedy.485656
Google Detected
AhnLab-V3 Dropper/Win.DropperX-gen.R622355
Acronis Clean
BitDefenderTheta Clean
MAX malware (ai score=85)
VBA32 OScope.Trojan.Win64.Miner
Malwarebytes Trojan.MalPack.Generic
Panda Trj/GdSda.A
Zoner Clean
TrendMicro-HouseCall Trojan.Win64.AMADEY.YXEFUZ
Rising Trojan.Kryptik!8.8 (TFE:5:puXfYWFTsfG)
Yandex Trojan.Miner!7wV1/J+tp4g
Ikarus Win32.Outbreak
MaxSecure Trojan.Malware.121218.susgen
Fortinet W64/GenKryptik.GQCB!tr
AVG Win64:Evo-gen [Trj]
DeepInstinct MALICIOUS
CrowdStrike win/malicious_confidence_90% (W)
alibabacloud Miner:Win/Miner.pyj
No IRMA results available.