Static | ZeroBOX

PE Compile Time

2024-06-25 01:40:02

PE Imphash

404945339b44ee7520ac5937f1ade137

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00001000 0x00013be9 0x00000000 0.0
.rdata 0x00015000 0x00047774 0x00000000 0.0
.data 0x0005d000 0x00a0c168 0x00000000 0.0
.pdata 0x00a6a000 0x00000e1c 0x00000000 0.0
INIT 0x00a6b000 0x00000fb0 0x00000000 0.0
.plp 0x00a6c000 0x000be7d3 0x00000000 0.0
.YRx 0x00b2b000 0x00000540 0x00000600 0.393077277637
.,"! 0x00b2c000 0x00159174 0x00159200 7.8637607676
.reloc 0x00c86000 0x00001570 0x00001600 5.43910272301

Imports

Library NETIO.SYS:
0x140b2b000 WskCaptureProviderNPI
Library ntoskrnl.exe:
0x140b2b010 ZwClose
Library WDFLDR.SYS:
0x140b2b020 WdfVersionBindClass
Library ntoskrnl.exe:
0x140b2b030 ExAllocatePool
0x140b2b038 NtQuerySystemInformation
0x140b2b040 ExFreePoolWithTag
0x140b2b048 IoAllocateMdl
0x140b2b050 MmProbeAndLockPages
0x140b2b060 MmUnlockPages
0x140b2b068 IoFreeMdl
0x140b2b070 KeQueryActiveProcessors
0x140b2b088 DbgPrint
Library HAL.dll:

!This program cannot be run in DOS mode.
h.rdata
H.data
.pdata
h.reloc
59&q(c-&I
1!7FZ1}
U\TDg|
OWB(S
}/mnm5}P
P1=n"V
`zP1=f
8L])Y*
9:"7~V
Y8TMoL-AT
x}z)+
!CD+T_
G}E6t%
@n6:Zp
IoFreeMdl
Ixpd5;GM
&a'N}^
9I&X@"\
b)m*2]
W<bx|{
Aav$Y&
PJNa`=Os8
v$Y&r8/
Mw$Y&j5"!4
w$Y&{1&
w$Y&W0'
v$Y&l&12
uO)?D.
?l)Vtr
'-#(jJ
ExAllocatePool
{`CKGX
{R'Tk:
kgx.-I*
/#<jiU
9qiT>M
(NF<$"
i8S9XEJaA
'+6Y]<
6g<V':
l6ua{[j
>V.k!J
>L#nyH]
MmProbeAndLockPages
kd1@:G
FJt<_)X=#
oCUR/:R
Y-T 7;4@
^wCe3
DbgPrint
dWP=>F
$%f|eJ
(2m6j)
uvn{rz
TOA;x
do'H.v}
j+itt4
D:U1h#*
,+b=P6>
.3q*Z+8P
.qaz!O
*GD\I
sk9SOf?
ExFreePoolWithTag
kP.dg^;
+mkWyY
6+$a8sz
Y.r9H
7nERnO
,X4iO>x
Z5ax#|
[@3;7(~
6 qrp}
yzB/F^
5V7r*ISi]
5 _P2_ c
W\i6t'X
,y!d$j
.2x4y/
\(>G[\|
%;gtvZ
=%`HMup
PHAL.dll
KeQueryActiveProcessors
(KJW6u
&.3Qk+$
/\[>%Q
:gvaF
E;=?VS
M0CV"%
b6QCgV
flJW&>Mar
8i%ih~-*&u
[iPR-2;
Vk7<'a
'dvTd<V
sa-xF0*
q^nGCw~O
z|}U^
:qp:`N
O7ht@u
'0CK}]
.XVBF:
8`tN5h<
I4$Fyd
$&tf2D
-OD-Z}
b4DlO^
%c{S~P
m"'"]]Gl
5MEh5u
mE7u%)[
n,VjBMt
%LD4Tvf
Sb,#_N
uAE<]
u@"CR_-
aQ|`/h
l.*@w2
`5'w\6
O:?=bh
nyE|Z0m
X#!PjL
V.:m3A2F
^L4oU?
kgr{Ds
@(Jtb2,h
*="_+O
Uatm2m$~j
X7OiS
f=c2\xO?
@}Pt>c
Liaj7/
URKtfC
|2aOBN
<Vxi[Bv0
g9=2Fe*!
DjqS'F
=GusIT
\+Qw?o
Ykhk/G
vKZrPWQ
q9";T/
oz]70@
%) J9{
%#AyAG
w.A@eW
=i8bmT
tPky|a]2u
"YJL+]
DwU;w'(e
C1|5"*OP
L[.@"s
9ICqj)
}>PQtSO
+gNxEz
4KN<J!
L":!ag
h_4J>|
:i;3p=
)*Eg<*1
Uq&e>z
9p:?%p
K22{W`w
Bgd"%j
#.m@y<
xab7QA
G.t@LN.
}|,Mt|
79i=n |
i~A[5y^
'os63'kf
u<vfU$j7
eCuTE4
} qEWG
72JL\f
WlVCha
KeSetSystemAffinityThread
6~u.0#
#:lqzP'
/#<j)bp_
ukd)[)
V7d3m$
1sx{#kF
mg$v{\
J q#E%
#g(!1i
[-68A2
h7?44
1,+s>L%
7F?x(0
=z&e#s
$$#8>-d)h>q
" P;.v
n!#7+"Z
0;Z6&-?
!Y5O-!9F%
Y;g'E>n
)w=J4_
Y-5*n U2
>A$A*%
ba9q]L3
CPF\X;
mWc<*.
UepP%-h0u
vux_IZc
"+EVd
B*w]\&<S!
8WfT=S
d]3,7>@o
kFb'-s04
of`)>Qi
bz(E,@
n3$`)g
Sre#/o
\F4jf>
U"C4$N
]F1#"'
qjUGNk
|U4"soTX
*,NmWto)
E k:0U
&}QI(^
@3zOGu5\!
>*vbxu
#yWl%G{
^K~,'x
2nv~Y%
utX!f*D
O'D^sryJ
(s-|`( 6
CPHu?\
\:kA^<
'f2]%i
fz9n1J;8seTH9
<'3D5v
fe=uY0
$'S$.+
;6o|zE
f"EE~:z
?#>F_}^C;
D_hz36
DF!?A_0
X|$l@!
uvL7\I5
&5g%&%}5
bOerAPVi
KX|`dq
>pw*`b
1JH:@R
lH>.+@
b8zM-_
C@v'[gf+
6-knnM/
/=wP8z>nD
-S 5l=
a^'ytJ
W9QMis?W
ntoskrnl.exe
|s{c6x
((;yfa
sXSxKs=
rpj`uW:
Ubt-1U
~-h{mOC\
KN^GeFCS
Jf[KFF
uTd'F
IoAllocateMdl
WDFLDR.SYS
|qqP4
aR.,I^
h}TECr
%r;(>h
Ql=%CS
C\L81k
0h1]\XI=d
_6+iZF
.C7}&u
Y1)t>U
dg?w[r
o+,;1j
VM`3'0
95*|/5w@
kgx.}ID
MiXK`m
yq}b5,
-DTDo$E
W6Cfpi@
l$<I#?
@fR#eb
T<!y09
_>%gu.
of(y6k
,t%H=w)
(U"hvv
>DS?rk
Y*bKxo
jFsao@
Driha.
X9@KD&_
$+;<1>
Z9 {fj
on-6%m]Q
fjd2!1
y(Hy81
,(YusZ
xwX)][
UA[F6g|
2/_hN
zg$mG+
\I =~7
&`%GX3
KeQueryPerformanceCounter
_sZ{Of
MU\Gv*
<mV^GR$(H
v]Zk-</
j*:z|3
>|r ;"S$
'/.R~5
oaN6E:
[G}dQ4c
Tax*{G
~fgY="
Ve6mp,
vz|2%f
-6~u\
tOGI;\
5MXSx%
JrW<!p
8`3 #R}
u-eHS=
to,6H7`
eig1rV
x2YIbz'N
WskCaptureProviderNPI
LKO4Ka
)[@_Ml
NETIO.SYS
ZwClose
5e}dYAX
NtQuerySystemInformation
UQ8! _
jSGI =~7
qk"-|*y
E<A{/^Y7
Y>P6D'
@SK^4o
uh+ribF
$eidu+
l>|OLv
3` |WjXs
ZU}|x]%
VksjHkVN
E@aC`]E
a/i^;:W
tUwTiqr
htIQHjItl
rArh0H
GN#@Ov[
)Wz<>
{<>GJ
,5I:;C
EJ%3'7K[
^.6+bB
ay*!XI
6bkwrj
3'":3/
(oJQ9p
VP i|q
I7:vi|q
A$I;Jm
/wR*WZZk
frpp\^k
Wqet~p
snv@"G
h\KsvN
`e-h(]
vV#+nn
K+Z\MP
sVvR`;
,WyWOdiZ
95rmy)
es:]a8
H9=qgNR<e
? 'z`B~
?.\:]DR
c&xx'Lp
T= cB9
5}E )!
p`KSFOG
1QJ}p
8+_1QJ}p8=
FX%K}p
BX%K}p
&O<jAgECR
hY~n;x
rwfe6x;D
&.Cf #
&.Cw$'
Rilj9RQ
QxD$ ;+
Q{o<ybqK
d:p!r(
pspef|
7dgI%:
<<wZ1o
R%+/.mw
|Tc@9
u6WF^1
H\r 0b
d'fsOL
qb05Ny
B%R#aj
}z+;2&
+I!yKO
OFN^}f
= P]]h
C,%!+h
76un5[
~+9L6T}
(3uppS
acxG1^/
!z'8:@d;j]
ZP$s:uG}
jvC`p8
?kvL`X
YWe%H9i
JZly1Z
?&fY|b
KeRevertToUserAffinityThread
8C~p/"
GKn{ocT
_!ztP
xgnUKwY
H0b ;8
2jk(2SJ
m#[#n$G
0pAU\@
db+T0H
<xo<ku
PqZ|D\
2,YSH
H)rP#t
Oc2#I7
non-7f
mm6TA_0t;
F"h[Ft~
#?3e9B
*/B3Gf
^2>s2'
>13,(X
\(6E2
}=%8QI
.b#"az
Q`d`__
-HAIYzB
t{'8\q
)&mc}q,6
pDx[NUg+|
(+>&i[97%j
%1RMf)
EK3d-.
e ;mQe
*E|cqa
aZbOFF
8=%<k
n$Rp+7
gBCqTn
&>+""2
MJLUc=
s?BIb?v
ZYq^y
U1y$Gr
wR1gn&
@*Vj&4,
@hGvDr
Tv3WLtqI7
{EwRSL
3v&sKN
MmUnlockPages
asaB1
[~a+IR$
[oRBG_v
qE\OSE
J;8se,09
\tk75d
_@ytTO
.7A&|w
{IpY[l
|8*,F5
TpK$!`
~VNZ2Y
lrnEb\`
)2M_^{
nPd_rWmC
-}\8=%8H
zX{R&uS
lEqX@1
*)"8fL2!
E89GHr
s"n:_A
WAQ'6
zj58SoI
|!:y!O
eL9OBQ
s^cfIj
(?u+8n
&EtXks
kQgO04+
t7(\\<$
x^$qNY
9BFnu.
ScjeSA"
\=Ok;N
Dr7E-{
l,=j'
j$h|$E/8/
,O(Lma3K
%K/t?y
_Plx09
\[03B:
f-RWA_
2XA(\A+re@
a{Q-q]
Sa?r.`t
mu^r|Vx*l
-xEwN=1
qHojn6
EJ2xCA,
ppL.yu
$vmV8B
|,}N"qK
iI[[T*(bx
B?~-xG
v_ZZ^n
eGt@Aw
e.(mhpkF)
*x)k\X
/4ac^
(`=N_n
WZ4t/FPrS
3vK^'^
\8MvQA
-)?K^"l
wJ9efVO
MQ'L&q
_37;Fo=
WkJ:)7
A)R{|Zh
U |@td
K*@/yB
;)N\4=
nRbfkJrs
(zwfxeZ
]7, :p
S/><q
.WB}Eq
'd/*?
,K_Vso
:zU}#u
]on~rG
*y[{e4
ua3jl4jj
QvMt$NV
CT:]ky
>];@4[j
O3VgkM*
Q-rx=PR'
TwM9F=
1SXPMf
~U P$?
e(z!*U
P'58*y
Ro6>(*
c124dOT
tI[*ec:
vy^X~V
|r}|sh
8d.'965@
9S[yvv
S_!mn~
U("mMo
Gd1>8
7.A_TM
^fp\MVw
QZkoqC
R*V6Ih
8<;XqSmWT$
*H'LwF
CBA8;up
N<~IVh
RReBd1
03@Z;O
kL5Mk0
JeM(D*
X`}4 G
oJM9#?D
/sh#eI
Y-;g&}
C"(N;G2Q
"j($/X
-ey|,2|
SM+crS
M!:nCQ3
&p4}x|,
6fsH5k,
\c& B4j
*,I[u-
lA5gXu
qgM~x4
--ON+i
imZ{f_2
Vr@4 ht8
Z7jwyGuX&
xY~ukS0
9=Bqz_
%Z`vP|
;W1>1i
FOyzkc
_ZGG9_
v;unDFF
86j7;*z
Tx(/`S
j|SVhS
HFH'w%
EpP;CPaz
"_r&,m,
8/Nj:~
wMJzf]N
86%Mv<
\?8-jqQ)r
4RcEvW-|
G%N6C7H
zSw"Q "
+CeF4[
{&@^\\0
" iTcKZ
+_I@G,n
j`SOR-
.%3F9rR
rqB`La
^\U`}gn
pjMc*>
(4YA~6
s&&Q@C
#MvsU.
Bq/ lR
c|(c@p
Oztlx0.
L3my`F<
!=InGoy
*TI<1W|
Z\rtf'
?alStj
U0)"2k
eQcup
}xuGPw
D1DZsOry
EVqZ4!
fn;QFI"ml
h@:1!a
h,DvMo
$]dv9I
5xM*@F
oZ1Jl9$h_
cRyPXR
t]2@8c
CL1Y&FtCT
M?v(b{+6
Z"|vhVz~R
v'5_u_
"v_7`
D:3gAB
5<h?Xt
m*<kH#N$
(R?GLl
A$."/FO
Tqfn*%
aPg_rf5,0
F`i\MQ{T
27R=2b
N$|Pb{
aj.{Q}
$y4vTb
3BPKtK8
k@02S'6Q
/X_ y9j
[Rj" [4l>
b2,d:S
yPOK\
E"p~JA
L'RX(0
(Rg1!7
|s9 -G
r!GUc>|
^JWqB
MO'>,#xk
@<2aPP
~"Cmg;
hpFOTr9
?K5y5gk?mS
U:?I|j
Khnl!?
.kUIg~:z
rOo9R
)'/GSi0
K[3msL
o/()MDn
2L>H$!
6C|SIs
R%gq@
S?aAX.
$l}mpWu
^b.%]i1
1:GW3
DOY[4=o
RkDq|R
<l%{ D
1MW X
nU:u-J
|z##oAe_~
6d8!q"
TD'PVa
r.p1w^
LeK&{J
I~d{N`
Ee}\A!"
Ki+XC"
:#Pq !
>M.AN\
xHl&\n
9eW=PG
.WKZi]o`6
|Lu-V
sj4PZT
Xi:5S(
t|s=C8
Te6y'DK;
Fk[:sb
LNC'g]in
A(>L\n
-]4i<1
vO}*qA
~gJK%w
>|D~'$
+[lTg'
Qr?D o
+8dn,5
F o$3{
WP&(4e
^:>*aW
-5*[#6
qy)7#C
;PE^CX`
:i8U\;^H
b@=o\c
uU.3[L
uj?BT,
dL'"JR
FhiQ|=f
!=zk-K
.T>_|suu
tRW~f%=
~N2Zad X
Yik! j
[ny9vhr
NjrotJ
l>M|22)
EWCut1|
fU`A6KB+3
5lgXEp&
p%REhd
gnD0Os
o35Ure
wa0HmyL
+-C7Bx<
tH*Hi!
~Xo!oX
'V>-C-
?B%41$
)iN!4(
K=OI8&
qQ*FA*C
\0yq+Xj
:+r1A@
y:`mwZ+
m)Nc+iK
=rrK%Rk
f(us?|
:w0A#K
61xA\u
GpP#A1
K0`-]x
GW);u9
0OiM'Sk
|Wr+VHY
89S7Gw
:o._#K
_8lm-^
=_S#@W
ace!M`
V"&)t6
_ST e.
6Y$q)g0
0n|378
:|{\!%
/uw6]!
ut_AHy
S\a{!-M
~4+5iw0
}'[_Gkq.|
;D.^JLS
4+>9q}4
SYF4;
r*N8l@1
Y<H(o1Q
>0x;#>[
^:yx<=
0X [j*H4
/#wHfbs
eF!H;r*K
I]?_<
w-#=D$
t%85`%
Lsg.8h
i:W`BYe
%"W2\}
ryu>)gWR
yi,Jwef
C<;y+[
i6%dQQ
IZ.#`O
xQm>d.O
[:fSOz
S7ebf^ubZ
'wl|Jy
t"O5$c
mW4!5L
:RUp0(J
z{/(.l2
|t?oJg
c`%Z1
`1mghf
^NWtG=4
pV!Q'$
M|ZN?-
oTY0)z
fVVBW?
{S$fuD
#HJ"3Jy
<3p7[Q"v
h>um|!T
LA)P(
@|y3Gt
dP`MnhB
0Ldy4w.lzj|
gZ/*I<
twFz{(
s2oST.
SQfR6M8
F)p+1
;{Yp S1Fh
XB0Yj;.[
d4[9Gi
5T<G`G5|
^xdP(x^<#Q
|Z)81v
Gd94So
(KKz R
E^;C11
A0fBpg
Z{({:?
=bc&hh
1X/w|w
eUzJ&w#Y`
m`Zs6c*
_9tkY.
9N-Bwu
v]o`MJ/
Y2O!Ug
"jW1w7I}
8'Zd6!
DWE3WP
7i=m]8
]}H@]
/6A*{X
;#ri<E
9l rTxS
B|JeP*
JliZSZ-
cl8kp^
m_m'A'
dHaPNz
j=X~Hx(r
5s`pPv
v+gsoul
-0q_3#F
E,M.if
>mBT^,2
~mV'Si
0*C(dr
IR9+g*
c\HP=\
a:m{&g
V23Wj'
tdym `
I5YmXy
\o|5+-s
OmUY L
oOMWAT %
ZK'l-zD
` qr^
}C[WWKY
-2(r@a`
K1j0ky
>D1h|e
k$=:@a
@3cW4r
=e9yz
DYH6$d+{
Hj<a.
J9SZV_
<^>M;}
Z#o`6=&
P[TkE
vi.$m(
')`_*F
FKV:<s
A/X$+.
1xV'df
7*:kCw3|
"rWXe
w]N|)_
$/bMdR
mXF"JF
2un@+>
OAF0E&
1eDWf+W
|V2cv&N
~2!*C%9
![_D?}
B&Lip[
~S&[5e
W~Iz)y
PF~*'EvO_x$
]jv|;9
5{uDsFD-~e#
r`.6"*9
c:rOe,n
zJPw[&
JAfj;
@sHQ'8
{--Q,%
=jwyJ/D
H<<;#b
bZpTZA3
1{N{su
I5{mo"
%P@C\k
eqG*?m
mnuB.+&
('k\"NH%
B?e2mV
Mb-;$D
UY "7@
ru@m"pwW[
8 _**@
gq>`s}
MM<rS{
qn5=Y{T
Ke]a"0
FX'FOA
Wg~F8M
Q)1/}?
MDz|[6
F6(dss
S)#Z"B
_u<IKK
s]@p04
fmCnyJ
J/n<|n;a
i,}`{!
AK)i&>
10[(hQ
d0`3-s
+zgb?_
(&'!2=
nAS"N=
5\O(y~
Umn3!p
}0vh~X"
[@@CTR
s&h/HH
z2q3Ju
O\rD-]I
g`g&kq
mO#!s^
Z|T0#J
=OV`uUbM
8mQ2f7z
;5/?~13
V Uifa
lO\dx`eOi
HD:Czb
c~k4h\l
e/czJ<h
3I?B)^JpA
z.`eue^
{%GhN.
RzQ44oec
&ns%;:
=rLn3l
l&wM1yg
xPJQe>@
v*e(rig
BLM+&X
4BaHB]
g6X%eK
ysfp<Ob7
kl$'?)
HOn Df
x=VLgm
Z#I%C
QK!|iv
t!042^Z
ODMJqFn
.Nu8EO
?C&\Mz
`do!I/cO
YIH*)Y
]XvRE6_U-d@
S'{>84J
"zwAB2
[xdG-{I
LSf^_{<C
Nd)aER
:>rZ#J
o2)o5F
i17++?V
5tYwRL]
@'=bZ8
=vV'"UZic
Epz8(B4
0?5'9|[
E6Vq$gr
^BUv.48
L_4XEII
D,Mb3y
NRz5NuR
0Gib(G
dirnx?f
P$(.fm
t;UZl2
hBS: (?=
wN~Aqi
#.nFYM
7bDd+*
d(Y>Iy
W 4,'h
6`Y&dEJ6f
3xJ4T=^
AW_I& {
\1x@A#
/(9&EP
wK@5cor
|8aY~6
9P9Iq$
2VY*D&
Ycx3O
gu=bls
spC=6X
?#:c](
5.?iDi
bY]Bis
'Y@~*T
];[KN@g
C4!mKE
98pxXXu<
+.#A!f
IvB=,3
d<4He)
fl*{C,PZ
hr{=3
_ysr13
)<S"@UJ
+x1R_H
(7`el4
1\c9E]
mu|AhZ@
's@7[yI
f"*Vag
*V|=)'
(wb1.
|AwBmwv
W`X'LQ
[It> :?
NOLSE
h[\yv2S)
0oBzOf&
M+iSYt
P_:oop
cush0gcg3[
9V@:en
XEWG0<
SSB^;z>
Uw}k;hc!*j*
C>Uz&\j
Fo>pNq,r
q$vteU
`4f.,IH-w`
"a.z]{
5PX 2m,
"~]1^#'
WQp.IB
CA/B>q
v_(,V(U
I[=9G)
X\R$`b
z-9/ZA
av}tT-5
Nu@f}h
.0!C>eF+V
kLJz>'t
}#/!<ME<1C
ZRQjKy
nnh[B]
Kfndj%V1
']#X90
Ou\g%n9,
@/^R\d
{rt5MV
P;a8f}
eR]iS]h
KK/g/P
a)cJ=(
~M(wZL
5$|unR
.AG<pW6
9i%(Vw&
rC/u(,
hE;YF
7=?=`h^
+4xQ%c~
B4#W1 }
YurFc^m
L.:@%Uz
k$YbSV
z?<WuN/
D|b)c!
Q.KqDv
|H1.lh
"z\#W;3UP
`p%!\
JYQ-?7y5
B,bz_.
6.D$0v
@;TEp0
^|8* C|3
s!{z)4
Z8l4l((
O~qmP~c
-A)iN:
= .vyL-
-xCtkK
mB{LEZ
}\Qad~p
,S [~JF
O.n#~vh
EL\e<:(/
XZ2m`:5
P}+ZpmO
o]LNvDp
<kg'-<>
ieqQk{
6p6)L_
u4?KZ7
7@1e+T
;+k(\2
Dwc33T
#?PC,
l$;efT
z>V/]
wf}lO/
W+B=,~
eA;ilM
kD[U6^
*PLE=qA
')R8_T
7QQ4~Xp-
GF6 1G
q1u 5gyu
_8R]~D
qd<F?J
AEL}O9
dL>K#6}
KQ)\VF
z`(+v"C$
2sIMA9
b<lM"W
[ ,3/UJ
H+C<P
C}8Qku8C
Cf*\/:
%KxBwDuV
UK5"/y)~
)RtCx5
d'j.2L<
?>s'Al
ZE#s)_/
;)Q#^f
^w!_}
KJN#s6
C~u]f]
%xwt~:
$gvMwl
wHJi@T2
_B87-
I$Jq[pk
9V(ygw
(/6F]2
Y~^|:w
O7ljdyC
wVatR%|kqSj@N
D|eH9
fwmE8IL-
0.TS'n
Hf[2b~
c4Z/%1
h?>_+[2
Yo\o/z
L)q?:/
l"c$\\
u*L*]C
,'4;8
0jx_qm
n[OE,w
-gF{hz
.|3Fw
BJx$W'
z*U'e9
+CzH*u
(uMH03+
!^R1bE
>.C79X
'QbJ1S5
2.C2h~
KSvTP`
Ar#k0G
{%,)7O
K7UU;Q
`2([Tl)u
5@#!>S
r-z4.j
WlYZKR
!0d9,.
$~Jo%E
h]<f(;yN
Y[_[Q_.g
7CiA6l
%"tQ2#
+m"G`V
"&JE8=-D
8aV;Jk
oQy +5
ZQb\MN
5`GX#[
SWz)!:
Yfdc)Y
AV5^"%l
zQ$L&j
7z~1z|
l`V:3=
Hg}Eu?
3g5{_uWu
i,['5+
Tt,kNk
r:cC@W
P%#f8t$
?E5+4K'
|;V7Q
:REYpmL
qP?wPG
dTfN3e
Pm~7Jn?n
u!z?]=Li
$+_d,q
# kds/
!Mcbx"Q
'Pavg6c+
zjQCH+
n"i(~[w^
Q-_Mu;"
x?k:KF
O08_tLs
:F6)oj
<UU[$/
yb%,Nr>>>
ie71%"
OD~|'5
L_qTK|
3<q3R.AL
wh$<v}
)<%E5
4Bq?D3
OaRmf$+F[z
"dE*O`
1%b10&D]
c'Y>x q
CsqJEX
eKQJ['T
NT4x/v~
Cs;sno(5
&7EwaW
P_I|{,
d&uY)tev
d: ~K
}" QHh
Lsw0Bo
W1a`}Z
%k^goQh?
Da?4iNO
q?f90d
lS3(#pc
|@+)vES
}0vap4
Lq>0U?
+Vhy>F
aOeZ6
o>;ouA
4p0U.*
><v<I[
R+=Kx&
nDx.iKd
?_8E/y
J#H+HY
=W3A0;r~
N-]N8]
0vWDNX
`+#Lh[
Jy,FJC
ynzTHP
i9`Db0[jq
I}p}OY
DPY^%Z1
_LpF*(o#>
jLd^UJd
xJ*"}@wN@#
>Ca8vx
6N{cu#
uqhb+s
ps9?{[
Z$PVs-
Cx|`I<_
FgtHcEL
%^im:i
UgC8L@
]FfxMz
_+.8\{A
ezrp>,
pkbpMWt
GeCrI+xJ
vUeQ;R
)5o.MD
akI=b>
dN] ?u
6@hwOy7
zOeS,=
hc*;O9
%b0v4'
v&d5=}
U("m*w
k*d_ls]
lC]`wH
j1v/iU
XP6}TL}b
X@EV*x
>R{]Nc
W&s d[9
48/<-F
Z(x_"l
f|@{:yW
OrER;8
lRMp5x
[/U+w%
BelFMF
sHf8({
U%t.xY
k[!OVln
@uV%o
m|[dS"
CZPrU%
J!DlKq
q%q:mH
b?@TXp
_eBm=c
q@MWuL$$
dip:#z
qb;xd~
^sFzYq
:+OtW6
1W);^K
7@z8g/i
+iI?,h
\eKl@/
l%a.Y^
]M!i&6
aaqLq^
VWX(-V
*^;fv?
USuA/
C@J(VO1{
q}VuGp
)"5*R;
-1,VGl
8cB/O>
y.eR.P
)yM~Et
$lhZ-1
*+[9!
=JIJiv
!!-$PS
iLp#i<;
~GG@U$q
4s&er
zjPjr$
XwYA8w
ki9O1eWm+
lM1X'T
N*<+WC
\[K;mv
]t\8'q
l@/'Fn
9P]
e'9rg!9
t[~!qf
vy7+f4>
D>';&u
y"aE=2
N2r7,`D
&A/*n2XG
|j!g/bcS
U?BY-ML
K29&A8
`&;(1v
-()J{K]E
"p4/uS
j,Ff:SD9
vVEw&Y
nD_jB}<
s1Jj?(
=Wpe[!
{7s_'r
Z$x=7-&
I5ma9-
0TXw=2
"''\yyc
,(YlhOT
^SS&wC
PO&>Tk
By-kg_
bJ'U\`E
W?Xha9D
@9GKBo
$7T\Wj
a3M)ig
nqy^)f
TrXw3QfKb
@gY*{)
"Q2?0I
X#V@@t6
3U5#2M
SqcwOC
QkL{i}
.+6gcL~e2bs
cI9kE_
0Vg7-ZF
mj97=G
F]=o+;Q<
[<Q"kKb
+?i"E>
{,)sb:x
SyB.ax
sowMv\
$YpodrY
gk6Mg{X
&X*|26
B#XZ@t
IjkL7WZH]
F}\^hY=q
+67yr:W
Vf06zx
OU[`:'
g1m@+Ae
n!S|0*
XC;,t{
>2+E3O]
{91I;
eR6k.~xR
h9Q0fZ
>Qf#Nt
s$GO}b
MN`$6a
g7Y .p
[h5`9$2v
o#0Ue*
m'h^d@
*'8r;a
FRnii`
9w9gFH{
YK~cfR
/itCZm+
'TX2SU
-YS&J_}
+x"SN!
-#[|e.
2>qP;e
Y>D|p}1Os
$<88**.Pg6
Kd=8:*
auMT-s1
NTM<o'~
T= cz#x
Mi%j0o9
wD\AHH
XKP.D7
Q"t/5N
za:2>!w
*Jwgnr
KfBPq)
yk~3uQ
=p[Q_+:v
Xm _+:v
W2E7$v
iV6Up7M
aHe&/,
d>>$h[G
pI4;ym
WFoR~9
1tn".5
!d~2>%
F;4vb.
%XW!)a
+8NR7~
c$:dSX
(J#2
W6!cBY
H"{VqJ,
IVTzbi
$I#pOR3
$_d8[j
@SkNt{
WdfVersionBindClass
2Qm/.x
VtBH2$
7Xl} @
$Lf\ALew
.^S6Y3
0XSe@
tI:?m0
xU4I5=
p\Y%j"E'
|A:*;
$&GbG4
DS(Qw]
x9V`7$
7a0st'l#7
y/[FPl
RK`yl5
J$F_f>R
H;yv~LK
<qwR]D0
s=m]9e
]gLYjGg
-MP!ybF
B1S)LM
!x?FP4
MR,xk)
._g=0@
SJ@YZh
6v}s=8
e{8?vQ
&hlX]9p
K=[Kp
zy]SC6
F=$tbu
LylJ2X
G`A=~e
hAk<j;*
Z7{d4l
ve|W13(
/+FE((
(ZkA:Y
1)IBQ9'
/sENpv
b^,zXC
ND]3as#
?1A;e
Y^M9tv!
urJGrp#
1Ag-R*\
izx}K,
}qulq/
i$Z{b\
v?Pd-H
d?-lz?
ke3.IJ
<A^0DT+U
zd0p$!q
$63p< 7
hzOb@^
i5H2d6g
VYQfa]
R>m8&I
t]3OYj
M*K/c
}i53l)[
kD#UvKL
Q/+KRV
y):X+Rt5
45~'\H
Ylaz$[W5
4v7~6
*,f(y
a[ |60
TcW$6b
os74s
!{mY8*
K$U(w}
u_MuB!OT
_Q1eto
j-9i `
&n+X*qz
iJDPJr
RD" 5a
n=pDe\
s0mk8
0 %9o]
i&{!kS
Qzqz~^
iG9edS
rmy%CUK
&:gap&,K
%1W0Hl
Tr&|.i
!-+RGn
O[g1:#
-[3Duy
;Kg.4H
Q[_n%@
2s{hk G
IF(wSp
/SqUgD
@H(f~K
I4!sYllgn
pBN!2[)
W)(fR:
3m7h/(
<#YU,i
Af-Nh-
$V%$-@ZbX
`9@LtR
9VjU??9
ln^l~?R
8HwYa>
cK|[6Q]
[!(pVD`
/'/UGav
vrT~+h
>!,cCB
+,q)UE9
6s7s=}4
8X+?X
?={zspj
,~2[sJ
:B%.X9
QVI$O/
(;g}:D
>5y`,A\
Ro6o/r^
K@;fKBfQ0
sT7:p4
toNXd1
D2#a%&G
ju2}Y H]"
UH:T{;W
n3jO.
W`HPnX
hN)r*
y}4$6y"I
O3<L7%'j
)P_s1?
X*WoXSd$
f.I<h7
vS&f*6
6,fB+s
>)mW'v
xkSx^D
]/^26Z
`4K-[PGp
}9(TM_
o9GET\
-&N@2
QObi=Q*w6
?.4=4":U
W7n53K
ajU[bB
Xdj/U=(C
7HQ(@.'
PrnPfUHd
e"3WcU=
brJZRi
6hBJ|G
PRzj /t
lsvpd T
QA,3Lf
KI`NM~i
hs "Ao-
l{^Y?B
>CN7a?
4&SDoD
`#;&'o
5/Crhc)
bwWqkn
/hn~b@
;admD
$zMD2
b=K81_
]c_K%e
7@C.%>
'ohh"G
~"_0FL5
Xn1EnfQ
=9E7`4
Fu)wh0Az/4~
HZCz&05
gV!dGD_
-7ex~)
r,/{2'
dtWU%
8n|Wc
_4k+2q%
|FcSqDF
'k5)7I
i">Fal
ga~zg
LwI7]-Zh
o=!TK}5yRW
4=11`;
%^kz|=S
F8S{/2
Z~)`b;
S?^~*Q
.|Ppi
pOHCS
e>g13.
t7|+ 7
<-AyT"
kY)UKo,P
YWT|%k6
*Q1`)_
Gf0!hl
w|mX;+
*1?5AF
*,Lgji
#UeNC fthw
.vhQ~/]
wXI$GHQ|
t|)U=e
l@AEt`
-Mx0-]
EHHueD
^gr+=s
pCKcKUB
XSfZ:2
FMU@*q
FvlO)H
A:Vun(
+kHDo'k
A3wOck
Z,v9'y
?[83P
!]}90D
eUsI{8i@
.|]hik
sD2Fvt
^{#j])
&`f]_/
u4/]B
)2*e\Wh
ALeS~A
N~J4VP4W=EN<~
gIknjh
dG<jY|.O%
WTp9v%?
b{bH1zB
[;{+w!@.
@LSOJv
HQZlwC#
q!/J!#
oTVq f
CuU D3
g ~O.IV
TJ0$t2i
MmMapLockedPagesSpecifyCache
F[+:NKSz
wVtWjr/k
mq9rF%Z
f^Hvxf
_)$(e
Bvp25'1@
if^DRJ
%`X]mx
enn1gn
sh@Em)
06n+s6
byZR^A
(lw\T:
0zmn{e
+8.8({>m
N&I6,+
?1I7hW
U X&Q\
uRja>)
BO{%^r
g')"z?g
iD4,iq
(8G+N[S
1~NQJM
,!zUT9
{XMVX~~QP
%?;h-J
u\buF_qT
dqDNItC
:g%P{=
Lsf^(O~
?i:VSt
So;#(O
L+L$xD
A_A^A]A\I
HcG<L;
h%[,tH
es_$Ut(
nrNT?{
h-12?H
#AUPAP
xcfHdh
fOZ9a8
z\;oJ[L
16Q 6A
q]* T
-\>P|U
a4fmQ3
A]RAQJ
(STDyZ
>\E%9+
SQ{OT&
4$WASAWA
h<D32H
M$HA}#?
{HQ0KO&
%k1LfA
ARASRH
$"`8bA
_ASA[A[I
~JpOy=
(~OOyw
r9lfB>
<<Z3;K
%9iYt0
iQ1dYVF
b\_!3U
>]KnoT
_1W o6
0Co374
i]NQYZ9
T,3AZA
$]4 @2
PXAXAY
ofS=_a$
+,$1,[
]*8km-O
{/mh*&
'.y'v'
FBeivE
+":0<A2
Ctf<cJ
e+d4V_AZ
hi/sH
ZXz]WP
J16`z6A
0"/&7U
QYkba^
05w,a<
l4cc==
$D3\$@H
h1-'6H
^+7fD3
c67fA3
vTZ~FS-Ck5
!T_Ap]
9W@,>
jAPATPR
j/]!mX
ARARM3
/,TfA3
H'!Wx V
e#e$U$
n"tT?+
~K8&NLO
SO|UcH
'$hN.
W]V-gZ!
\Bb;[5
a1O\Q68
4` 3h
'A^A_I+
#4:kfB
h>E(5H
>2)jF1
D$HATJ
\$xh O
Fdprvc
`a%q1h
<`1>mi
ASAYfD
-@L/*7
"@HMsI
u@MrEG:
$=D1L$
3)9B1
pB@_@E7
/Ma*(:
F.Y.v).
h5/1u6
:^1XfE
z|9B+u
\ylAl~
q}(2Az_
WbyBge
zf=1JaJ
\ch}Qk
A_]AYA[M
=n#%lg
ao7j0f
Gjbiwm
pTgW!]
`=+%P:\
M9oV}>
F8~iK0
VQ2TfVE
{Uv'KR
,kGwL
kfv|[a
c&@*dQ
<fsCmo
#Ud'r\
B9xir>
YQ%kiVR
P1$5WF
d<-%i4
#=@|r4
PH}.W?
BQ\2rV+
t=ECD:2
V@(4$f#t$
f5+4f-
,$H3,$fA
MAQAYL
*h7e&rH
fC1>a4
RgW~b`
6A2<8H
@Q~}pV
!=b3p4
}<v|,5
fT+1k\
8707?@H
.A_AZ_A^H
)oA[fE3
$%e.iI
l$~A\H
ctRxSs%
4tWGe}
AQAYfF
:u2q3
|;a}-2
AVi|qQ
Z>4~j9C
? 168W
v1w:dAV
=fF3TF
LT A[f
YAYA\AZD
@'"1IfA
h8QfA3
t$ __H
A\XAXA
U(ShSH
V.db?M
VeriSign, Inc.10
VeriSign Trust Network1;09
2Terms of use at https://www.verisign.com/rpa (c)101.0,
%VeriSign Class 3 Code Signing 2010 CA0
110921000000Z
130920235959Z0
New York1
New York1,0*
#Take-Two Interactive Software, Inc.1
Rockstar Games1>0<
5Digital ID Class 3 - Microsoft Software Validation v21,0*
#Take-Two Interactive Software, Inc.0
cDXFAR
/http://csc3-2010-crl.verisign.com/CSC3-2010.crl0D
https://www.verisign.com/rpa0
http://ocsp.verisign.com0;
/http://csc3-2010-aia.verisign.com/CSC3-2010.cer0
DigiCert Inc1
www.digicert.com1$0"
DigiCert Assured ID Root CA0
220801000000Z
311109235959Z0b1
DigiCert Inc1
www.digicert.com1!0
DigiCert Trusted Root G40
]J<0"0i3
v=Y]Bv
http://ocsp.digicert.com0C
7http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0E
4http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0
~qj#k"
Washington1
Redmond1
Microsoft Corporation1)0'
Microsoft Code Verification Root0
110222192517Z
210222193517Z0
VeriSign, Inc.10
VeriSign Trust Network1:08
1(c) 2006 VeriSign, Inc. - For authorized use only1E0C
<VeriSign Class 3 Public Primary Certification Authority - G50
Dhttp://crl.microsoft.com/pki/crl/products/MicrosoftCodeVerifRoot.crl0
Antivirus Signature
Bkav W64.AIDetectMalware
Lionic Trojan.Win32.Generic.4!c
tehtris Clean
ClamAV Clean
CMC Clean
CAT-QuickHeal Clean
Skyhigh Clean
ALYac Clean
Cylance Unsafe
Zillya Clean
Sangfor Clean
K7AntiVirus Clean
Alibaba Clean
K7GW Clean
Cybereason Clean
Baidu Clean
VirIT Clean
Paloalto generic.ml
Symantec Clean
Elastic malicious (high confidence)
ESET-NOD32 Clean
APEX Malicious
Avast Clean
Cynet Malicious (score: 99)
Kaspersky Clean
BitDefender Clean
NANO-Antivirus Clean
ViRobot Clean
MicroWorld-eScan Clean
Tencent Clean
TACHYON Clean
Sophos Clean
F-Secure Heuristic.HEUR/AGEN.1370877
DrWeb Clean
VIPRE Clean
TrendMicro Clean
McAfeeD Clean
Trapmine Clean
FireEye Clean
Emsisoft Clean
SentinelOne Clean
GData Clean
Jiangmin Clean
Webroot Clean
Varist Clean
Avira HEUR/AGEN.1370877
Antiy-AVL Clean
Kingsoft Clean
Gridinsoft Clean
Xcitium Clean
Arcabit Clean
SUPERAntiSpyware Clean
ZoneAlarm Clean
Microsoft Trojan:Win32/Casdet!rfn
Google Detected
AhnLab-V3 Clean
Acronis Clean
McAfee Clean
MAX Clean
VBA32 Clean
Malwarebytes Malware.AI.4261116463
Panda Clean
Zoner Clean
TrendMicro-HouseCall Clean
Rising Clean
Yandex Clean
Ikarus Win32.Outbreak
MaxSecure Clean
Fortinet W32/PossibleThreat
BitDefenderTheta Clean
AVG Clean
DeepInstinct MALICIOUS
CrowdStrike win/malicious_confidence_70% (W)
alibabacloud Clean
No IRMA results available.