Static | ZeroBOX

PE Compile Time

2020-09-02 21:59:02

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00001000 0x00331800 0x00331800 6.96153328391
.rdata 0x00333000 0x000a4200 0x000a4200 5.52458011095
.data 0x003d8000 0x00000400 0x00000400 5.30249709668
.rsrc 0x003d9000 0x00009660 0x00009800 6.83076551229

Resources

Name Offset Size Language Sub-language File type
RT_ICON 0x003dd460 0x0000485d LANG_ENGLISH SUBLANG_ENGLISH_US PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x003dd460 0x0000485d LANG_ENGLISH SUBLANG_ENGLISH_US PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x003dd460 0x0000485d LANG_ENGLISH SUBLANG_ENGLISH_US PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x003dd460 0x0000485d LANG_ENGLISH SUBLANG_ENGLISH_US PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x003dd460 0x0000485d LANG_ENGLISH SUBLANG_ENGLISH_US PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_GROUP_ICON 0x003e1cc0 0x0000004c LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_VERSION 0x003e1d0c 0x00000324 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_MANIFEST 0x003e2030 0x0000062d LANG_ENGLISH SUBLANG_ENGLISH_US XML 1.0 document, ASCII text

!This program cannot be run in DOS mode.
`.rdata
@.data
@.rsrc
SVWVfN
L[ZY_X^R
wfIfOf1
_YX[^ZS
_X^YZ[
_^XZ[Y
^_[ZYX
.XY[Z_^Rf
Z_[XY^
X_[^ZYS
f6fH_XY^Z[S
_[XYZ^
(_[Z^YXQ
B_XZ[^YVfNQS
_ZX[Y^
^_Pf%2X
K_[^XYZPW
[ZY^_XPf
^ZY[_X
_ZXY[^
^ZX[YQ
~^XZ_[YR
*[ZVW1
_X[YZ^
[XY_SV
SK[X^Z
%?#c>f
Z[Y_^X
^Z_YX[P
XZ[Y_W
wx#_Vf
_ZY[X^
[^_YXZPR
.fBfBfGf
_^YX[ZRQ
YZVfNQS8
Y_^XZ[
^[YZXS(
ufBfHfNf@f
_Z[^YX
f@Z[^YX_Wf
p^[ZX_Y
_[X_Rf
[XZ^YV
qe^WO_
YXRPf)
Su^VfNQ
X_Z[Y^P
AJ0*Wf
-||S_^Z[YXPQf
^[XZY^
FZ_XY[^S
fHX_YZ[S
Y^XZ_[
2G_ZYXWf
_^ZXQfIYSfK[]
WfGRfB
="yJFf
AZ_Y^[XS
_X^YZ[
Y[XZ_SQ!
{XY_[^Z
$WfO<"
_Z[Y^XSQf
_Z^XY[Qf
fBP@X_[ZY
lX_[YZ^S
_^XZY[P
[XY^_ZVQ
_ZXY^P
[XZ_^Y
[^X_Y]
[ZYX_^RS0
X_Y^[ZRV)
YXRJQf
X[^YZPSf!
YZ^[XWRf1
WVfN^XQ
YZRBZ]
f=LZfC
6fJ^_X[ZY
@X_YZ^[
Z_^YX[Qf
X[^ZYSf
YX_^[WG_QS(
XZ[YSW
Z^_XY[
Wo,vQf
[f%{Uf
_X[^YZRQ
W_X[YZRf
VfNSRf
_[ZX^YRQ
^[_XYZ
X[^ZY_S
Z^[X_Y
Y[SfKf
N[YXZ^Qf
"ZX[^YVf
X_YZ[^VQ
9X[Z_Y^
[YPHXR
^Y_X[ZP@VNRf
_Y[Z^XPQ
fABZ^YXPQ
_X^Y[ZW
^XY[Z_SQ
_[X^ZYWf
%\[nEf9
f=Qj_Z[^XYPQ
SZ^[_YXWfOQ
Z^[XY_S
WfG_[]
_^XY[ZQf
X_[Z^YS
^YXZ_[
^[YX_ZSfKWf
Y[ZPf=,X
^YXZRQ
_[YZWP
9fJZ^[YX_V
ZXY^RQf
[^YZQR
^[X_ZY
zf-h%XVPf9
fFX^_[ZY
^YX[ZQ
Z[XYVfNR
[Z_XY^
XYZRBZ
2^[ZYXQ
_YX[QS
Z^[_YXR
[5/R*&S
[_XY^ZPV!
_[ZY^XS
^Y_[ZXP
O"fGJZf
Z[^_YX
[ZX^YP
_^[ZYX
Y[ZXSC[
[Z_Y^XRf
q_^YXZ
X_YZ[R)
_X^Y[Z
4eI$uf!
yY^X[_ZWf
Z^_X[YSQ
_^ZXY[RP
[^_YXZ]
x_[Z^YXP
[^_YZXQf)
_^XZ[YPR
^[Y_ZX]
_X[^YZS
XZY^_[SPf!
_^Z[XY
gy[Y_^ZX[Q
^[_XZY
_^ZY[X
<#^X_[YZ
A[XYWQ
,%Z^XY_Pf
P^XYRf
XZY^_[S
_Y^ZX[
^[_ZYX
^[Z_YXPQf
[_YXPS
4dX_[^YZW
_Y[X^ZS
fHfG_Wf1
_^ZYX[
Z^_[XYQS
Z^[YSR
ZwZYX[QR8
X_YZ^[Q
XPf=P6f
)X^Z[_YVR
DfK_[XYZ^
^X[YZ_Q
fGf5x
[k^_[XZYWRf
^[YXZ_RP
_[^YXZVf
PfHX_Y^RQ
[X^_YZQS8
^ZX_[Y
_[ZY^XS
Rv[X_Z^YQ
[_ZXYR
_[^YXZ
_^YXZ[R
Y_[X^ZQS
0[_YZXPfHXP
_XZY^[P
_H=f%B;N
'Z_[Y^ZX
C_ZYX^[Q
_YZ[^X
fAWfOR
XZ_^Y[QS
AZ[YVQ
X[_Y^VPf)
_YX^Z[SR
^X[_ZYR
M^XY_[ZQR
h[X^_ZY
#[XY_^ZQ
>PfHVf
_[Z^XYVQf
^[XY_]
Z_X^Y[RP(
h_Y^[XZQf
_^XY[Vf
^XZ_Y[
X_^ZYRP8
XZVSf9
<^Z[_XY
?_^[YZXP
^_[ZXY
^Z[Y_X
^_Z[QP8
Z^XY_[PQ
^[XY_Z
^XY[Z_
P,nWQf
=OfIf-r
1\@fNf
[Z^Y_X
XY[Z^_W
eRfJSQf
;XY[Z_Sf
4bX^YZ[_
[XY_^ZPRf
^[_XYZ
[_Y^ZXVQ
fN[XZ_Y^R
fAY_[^XZQ
[^_YXZ
XYZ[WQf
^Z[Y_Q
^XY[Z_Q
6Z[_^XYV
^YXZ[V
YZ_[X^Q
YfAWf9
-/{ JG
^Z_[XYPR!
[_^YZX
^YX[Z_]
f-;BIf!
^[YX_ZS
PX^_YZ[VPf
fFf=-+
[_ZYX^VfF
YZ_[X^
^X[_YZ
^_X[YZPR
Y_ZXRQ
X^_YZQ
[_^XZYW
XZ_^Y[
^Z[Y_XWVf
ZYX[^_
ZY_X^[SRf9
N|wjfA_X^YZ[WP
]O[^YZX_S
_ZXY[^
X_^YZ[SV
^[_YXZ
_XSQf9
Z^YX[_PR
_Y^[ZXQ
^_[ZXYWQf
YZ^X_VP1
_Z[YX^QS
YX^Z[_
B_XZ[^YR
Ak(bQf)
[XYZVf
XZ[Y_^R
_Y^[XZR9
Z_Y^[XRQf!
_Y[X^ZW
XZ^[Y_
4i[fFf
fC[Z_^XY
_[XZ^YW
*X^[Y_
&?O:_ZR
K_[Y^S
_ZY[X^
@lZX[S
[XYZQf
X_[YQV9
[XZ^Y]
~ZX^[_YRS
^X_Y[ZQf
_[^YZSR
_Y^Z[X
[^_XYZVP
XZ[Y_^
QL?BRf
Z_[^YXP8
X^[YZ_
_[XZ^Y
YZX^[P
<ZY_XP
^YZ[_XQ
XY[^_]
KZY_^[XQ
X^Z[YQ
@fISfK
_Z[^XYWVf
[YXZ^_SQf
PqfCfF
_Z^XY[
[^XZ_YQ
YZ[PQ!
Q<!T^f
^_YXZ[S
_X^ZY[]
Z[^YX_SQ
KGS^_ZXY[P
#BfKW1
Z^_X[Y
Z_[YX^]
&^_XY[ZQf
Z^[X_Y
ZXY^[P
XVfNWf!
X[^ZYS
_XZ^Y[
XY_ZSQf
Z_^QP8
^XYVQf
^_ZXY[
zv,EQf
Y[_XZS
_^Y[ZSQ
R[YXWf
XZY^_Qf
b_X[Z^YQW
[Z^X_YRS
T_Y^X[Z
[^_XYZW
YZ[^X_P
O^[YZ_XSQ
AX^_ZY[
X^ZY[_P
Y^[_ZXPf@XS
Y[X^_ZQW
^X[Z_YQf
^X[Z_YVW
XYZ[_^V
^XZY_[
Y_[XZQR0
dSKVPf
_X^[ZYSR
^Z[QV9
>[_^YP
j^_[YZX
+KX[_YZQR
X^_[ZYS
ZX_[Y^Q
Of5w&f
Z[_^XYS
Y[^_XP%
[#XRS0
vz1\fN
_Z^YX[S
fG_^YXZ[
[^YZXW
_^Z[XYP
15V_[ZYXQ
[^X_ZY]
[^_ZXYSVf
Z_XY^[
_X[^YZWPf
Z[^YX_QfAPH
^_Z[XYSR(
^Z_[XYQ
,]FVf!
Z[^_XYQR8
WfG_XZYP@X
Pf@XZ]
^_ZXY[P
_^ZY[XS
fRfJZ[
_ZXY[^SR(
N^_YXZ[
^Z_YX[P
^[XQRf
[ZX^Y_Q
Z^_X[Y
_XZ^Y[Q
9P@X[YZP
ZX^_[Y
WfGQP0
^Z[XY_Wf
^ZX[Y_WSf
^YZ[_Q
_Z[^XYWVf
!-SCQf
Y[XZ^_Q
[X_^YZSfKVQf
XZ_Y^[SK[P
[Z^_XYRWf
^YX[_Z
_[^ZYXWf
[YZX^_
MOBfIf
fAf=QUf
_^Z[XYQP
E_Z^XY
_YZXRW)
_^[YZXVf
Z_Y[XWQ
^[XZY_Vf
_[YZ^XW
XYZ_^P
HZ_[^YX
ZY_^[X
WfGVRf
XZ^_YSQ
QfAP43
_[Z^XY
^YPVf!
A_XZ[^YP
[_Z^YXRQ
^Z[X_Y
^_X[YZ
fJ[_ZXY^
SfCVfF
_Z^[YX
^YZ[X_VQf
ZXY_^[
Z[^XY_
t]_^YZ[X
^[XYZSQ
Z^_ZX[P
_ZX[^Y
@^[X_YZ
YZ[_^XV
UZX[Y_^
[^XZ_Y
Sf%"'f
Y^[_ZXP
{Z_^Y[X
,X[Z_YWf
Y^[XZ_
yRfBZY
Z^[X_Y
7YZ^XP
^_Y[ZX
_ZXY^[P
[Z_^XYQVf
f%WMS1
_f5svfC
[_XZ^Y
5fAfNf
Y_^Z[X
^[ZYX_QR
^X[_ZYP
[_^ZYXW
[^YXZ_
^[YZ_XPf
^[YZ_X
^XZY_[WS
^YZX[_
^[XYSf
N^X_ZY[S
Y^X_Z[Wf
X^ZY_RS
X!zfNf9
-X[Y^_ZP
42OFf=8
X[ZY^_
KF_f-C
^_X[ZYPR(
^Y_[ZX
X^_Z[Y
^ZY_[XVfFP
_[ZYX^Q
^_YXZ[
Y^Z_X[Vf
[Z_YX^
VFfFCf
_^[YXZS
&^XZ_Y[
,=G[X_YZ
(n_XZ^Y[
[^XY_ZS
ZY^_X[PWf
/ZY[^_X
X_^YZ[
^XZ[Y_
XZY[_RQ
VfF^Pf
_X^YZ[P
8X_^[YZ
[^Z_YX
XY_Z^[R
_^YX[ZQf
}fKfAf
^_[XZY
AmfAWR
Z_^Y[XR
YX[_^ZQf
ulXZ_[^YQ
IO^Z[_XYQR8
DgPf5cyQ
{Z^YX_[S
^_ZYX[
Y[ZQfAS
9Z_[^XY
^X[_ZY
_Y[XZ^
__[ZXY^SQ
^ZY_X[QS
Z_^X[Y
j,h(_PKQP
T[^X_ZY
X_YZ[^RQ1
_X^YZ[
^[Z_YX
X_YZ^[
BRHfJS
[_ZXY^
^X[Y_Z
X_Z^Y[
^_XZY[
*91VFPf
[YZX^_
Z_X^Y[
HJN<_f
Z_^YX[
~fJJHf
TX_^YZ[
X_YZ[^Q
[^_ZXYVQf1
_[XZY^
Z[^YX_P
ZY[^_X
e{[YVf
eSLfCf
_Z[XY^
Z^YX[_RQ
6k,BX^_[YZ
$P<&S!
_^Z[XYSWf
bZ^YX_[
-^X[YZ_
Y_WOVR
oPf5j:f9
[YXZ^_
XY^_[ZPHXWQf
fOP%M`xZVf
[Z^XY_
Y^_X[ZPQ
_^[ZYX
NY^Z_[XPf@Vf
>X^ZY[W
_^YX[Z
_XY^Z[
^_ZYX[
^_XZ[YWQf
8^[_ZXYVSf
{5|4}E
'C3fJf%
(NfFfAf1
_YXZ[^
j,hsS")QPQ
cKbuPf
Of-h|f
^[Z_XY
_^X[YZ
WfG_X^[
;^ZY_X[
[Z^Y_XP
"'[^XPf-
^_[XYZ
RfJWf)
^Y[X_Z
8^Z_XY[
^XY[WV
Y[ZX^_Qf
^[XZ_YRS
^XY_[ZQ
VfF^ZQR
^_XYZQf
_^XZ[YWS
YZ^X[_
if@fH^ZYX_[
XZ[_^Y
PY^[ZX_RS
YZX^RP
_Y^[XZQ
_^XZ[Y
0AC_[ZX^Y
^ZY[_X
>^XRBf
fJfNf5
_Z[YX^
Z[X_^YW
^ZYX[_
[X_^YZ
BZ[Y_^X
[Z_X^P
^_[YZXP
^Z[XY_
fGfIfCf
^_[YZS
Z_^Y[V
^YZX[_
_Y^[ZX
A_^ZYSQf
.T_X[YZ^
_Y^[ZXRBWf
X^Y[Z_
^ZX_[Y
,?Z[Y_^
_[^YXZ
RfJQf!
X;RBQf
[^_XYZS
@^_XYZ[PQf
^_Z[YXP
fF_X[Y^Z
63@[XPVf
4DfFf=e
=Y^|Hf)
^[_XZY
[^_ZXY
?^XYZ[P
Y[Z^_XQf
_^YZ[X
_^YX[P
pAS[RQ
$f^[_YZX
>kVF^YWQf)
4d[XZY_
^_YX[ZR
[^XY_Z
ZXY^_[
_ZXY[^Q
`WfOVNR
XZ^_[Y
^XYZ[Rf
- 65Uf
^[XYZWf
YXZ^[_RQf
-<;^X[YZQ
~WGSRf
_^[YZX
;2fF^P=
4+Z_^[XY
,oX_Z^[YP
^[Z_YX
^Y_ZX[S
^_Z[XYP
*_WfGf1
A_Z^Y[XPSf
^_ZY[X
YZ_^[R
C_Z[^YX
^_Y[ZX
^XY[Z_QfAWP
w^X_YRS
YXSRf9
}f@Nf)
MsP_^X[YZS
Y^_ZXSf
[,}If!
^_YXZ[PVf
X_^[YZQ
V^[_XZY
z,Z[^YXVf
j,hU6bkQP
Ux[^_XZY
^_Z[XY
_^ZYX[
RfBZYXQ
4Z^XYRSf
f%6hOf
YZ^[X_QS
X^Z_[Y
[^Z_YXQf
g_[^XZYRPf
uWi_[^YXZ
[X^Y_Z
_YZX[RfJWf
XY[_ZPf
+[XWPf
PY[^X_Rf
bX^_Y[ZS
ZX^[YRQf
_^X[YZ
X^[_YZ
f=Z_f5
Gf55Qf58
Z[_Y^X
H@[X_ZYP
Qmn^RQ
[Z_X^YPQ
X_^[ZY
3fKFfIf
Z_X[Y^
_Y^[ZXPV)
fH^_Z[YXRWf)
^YX[_Z
Z[X_SPf
_XZY^[W
^[ZYX_
Z_[X^Y
^Y[_ZXPf
^XY_[Z
XZ^_YVQf
_XZ[Y^P
X_Z^Y[RQ
_X[^YZPHSQ
-_Z^Y[X
[X^YZSPf
_^X[ZYV
%_Z[YX^
"_Y^XZR
XY_^[ZP
L[Y^_ZX
^X_[Qf
`i_xB
^_Z[YX
XZY[^_
jU_JKRf
~*NfIF
^Z[YXVPf
_[YZX^SP
_^XY[ZRQf
^_[XYZ
_^ZXY[S
XYZ^[_RQ
_^[XYZ
YQfAYPSf
ZYX[^Qf
}+YX^[S
I[^XZ_YQ
Y^XZ[R
XPf-[4X
_YXZ[Vf
^ZX_Y[P
YX[Z^_
^XZ[Q)
XZY[_^WfGRQ
^X[YZ_V
@f%5vf
X_YZ[^
ZX^Y[_Sf
_YZX[R
/^[YXZ_]
v<7ZCf
ZXY^[_
i=Z^[_YX
_[^XYZQfIVRf
_Z^YWG_P
X^Y_[ZR
^[X_YZ
$O[_X^ZYSf
ZX^Y_[Pf
ZY^[_X
_[YXQfA
QhfCfJ
Z^[_YXQf
[^ZX_Y
SfK[_ZWOQPf
7[^ZXY_Pf@fHS
C^Z_YX[Q
[^XZ_YRQ0
^[X_YZ
fNXP=kp"f
X[Y_^ZR
UrVfFSfK
[^_XYZ
$ZXY[Q
_X^[ZY
Z^_Y[X
Nt^X_ZY[
2^YXRBPfHQf
^_[YXZRBQfASPf
_^X[YZ]
7[_^XYZ
Z5XQR
|^[ZYVf
SSX_[^YZ
Z^_[YX
DL^YZ[RQ
fO_X^[YZRQ
^X_[YZS
_X[Y^P
^_Y[XZVW9
X[ZY_^Q
_[^XZY
2s=OW!
RfJPfHf
^XZ_Y[
#Z[X^Y_
X^[_YZW
HhYX^Z[
Z[Y_RQ
^ZY_[XPQ
YZ_X[]
_Z^X[VQf!
^Z_XY[S!
_Y[^XZQ
9^f=VAf
_XZ[^YSVf
0_ZYX^[P
ZY_^[X
cv[Y^Rf
^Y[X_ZQ
R^ZX[_Y
V^Y[XZ_
[_^XYZ
X_[ZPf
XZYVNf
-[Z_YX^
^[YZQf
_ZY[^XSC
OYZ_^X[P
&^_[YZXP
YZ^_XPVf
N0[Z_^YXQP
^_[ZXYSQ
XZ_Y[VQf
YX_[^ZVf
[ZXY_^P
X^[Y_V
Z_X^VfNPQ
^YZX_[S
Y[Z_^X
:^_XZ[YS
GYPRf1
_^YX[Q
^_YX[ZR
fF[^XYZ
Pf-h)Qf
H_[YXZ^R
YX^[ZS
^ZX_Y[S
^XY_[VQ
ZX[Y^Rf
[X_YZRQ)
};[Y^X_ZR
\[Z_^XY
^X[ZYSQ
[Y^_ZXQ
^[XZYS
_^XYZ[PVf
B|ZRV!
2"dWf)
[Z_^YXPR
L_Y^[ZXWRf
fB_[^ZXYQf
^YX[ZRS9
|YARf9
X_^YX[ZWf
H_PQf1
[^Z_YX
If%Dxf
2_^[YZXR
YSfCQf
m[YX_Z^RWf
>fGfKf
^X[Y_ZWSf
X^ZY[_R
_^[_XYZ
[^YZX_
fCXZY[Q
_XZY[P
^ZYX_[Q
@fBZXY]
fB_WOf
_Y[^XZW
[YX^Z_P
^[_YZX
Z_YQIYVf
_XY[Z^
)ZWfO
>^X_[ZYWVf!
X[ZY^_Sf
X^[YQW
[X^Z_YPS1
lJPfHWf
^Y[_XZVQ
EN_ZX[Y^Q
Z[_^XYPR8
^X_[YZWQ
)Z[^XY_Q!
^ZXY[P
X_Y[^ZRQ
?^_X[YZ
/G@^X_[YZS
_[XRfJS
Y_[ZRf
YX^[_Z
YZ_[^X
[_^XZYR
g_^Y[XZ
$YZ_XVf
I_^YZXSRf
YX^_Z[SQ
_[Y^XZPQ
^Z_[YXRWf
v^Y[X_ZSQf
X^ZY[Rf
^YX_[ZP
ZX_[Y^SQ
_X^ZY[
Z6^Y[ZSfK[
f@YXZSf
V[WfOSf
w^YZX[_Q
X[VFWQf1
[ZY_^PWf
[YZ^_X
XY_^[R
_[YZX^]
[YZX^WP
f5I,IJ0
[_ZXY^Sf
Z[XY_^PSf
Z_Y^[X]
_Z^[YXPf
fJ_[^YZX
fOXZ[_Y
H-p%^_ZYX[
Y_ZX[^Q
_X^[ZYQP
[Z^XYVf
#?YZ^SfK[R
YZXPfHS
0HfJW)
^]_ZY^[X
ZY^[_XP5
O_VfF^
S'W~ZP
_XZY^[VQ
X_[ZY^SQ
^_ZY[VQ
[YXZ^R
_^X[YZSQ
X^_ZY[
M_YVRf
_X^YZ[RQf
[_X^YZPf
Z_[Y^XPQ
K_^Z[YXR
Y[^_XZRP8
Y[XZWS
^XZY[_PQf
O^Z[_XP
[ZP$.XV
fBZ[_XY^
WfOSR9
^YXZ[_S
of%X6(
b!^_XZY^[RS
X_Y[ZQ
_Z^YX[Pf
^ZY_XR
XY[ZSQf
Z_^XY[Q
=(_^[XY
[_^YZXSW
sJeZRf
f@ZX^Y_[SQ
XZ_^Y[Q
_ZX^[YS!
X_^Y[Q
^X_[YZS
^Y_ZX[
YZ[^PR
YZX^[_R
$U_X^YZP
_[Y^ZXQ
M8X_<u
X_Z^Y[P
Z[^Y_XRQ
EO^X_[YZ
^[Y_ZPQ
[YXQW)
_YWG_P@Qf
^Z[_YX]
XYZ[^SR
lcQGfJ
+Ul{fG
U^_YXZ[R
U[^_XYZ
"XY_[VQ
X[Y^PfHX
Z_[X^YPR
_^ZX[Y]
$ZfG<F
Z^_Y[X
YX[_RV1
I->Ef1
[XY_^ZRQ
yX^[_YZ
Z^YX[_WQf)
^XZY[_RP0
SCVfFQ
_Y^[XZSf
^[Y_ZXWf
q_XZ[^YWQf!
^[ZXY_PR
J[_Z^Y
"ZYVf!
^Z[_XYSKRf
^Y^Z[Qf
X^ZYRf
^[YXZSR
_X^YZ[Vf9
@X_Z[Y^QVf1
XZ^YRf
^[_XYZQ
yWfOVf
YZX^_[Q
[^XZYVQf
[_ZXY^QR
^XZ_Y[
X[P@Wf
^Z[_XRQf
RfBZ^Y_Wf
3XZ^Y[_
;[Z^YXP
%"VNWf
_^Y[XZ
mY^[ZXS
Y^_ZPWf)
Z[^Y_X
I[^Z_YXS
cvOfI(
pK|fNS
[^_YZX]
_^Z[XYWQf
%F^X[ZY_S
_^XYZ[RBZ]
^Y_Z[XS
_^YZX[
XY_^[ZRQ(
^_X[YZRf
Y^_[XZP
X^Z_Y[
Z[Y^PV
v[Y^XQ
0^[YSf
Z^YX[QRf
[XYSQf
^ZXY[R
_^[YXZRfBPf
^_[YXZQR(
'^[XZYW
]Y^_[ZXQf
^X_Z[YR
X[Y^ZRf
_^[YXZ
=Z[Y_Sf
[X^ZY_V
_[YXZ^QWf
#TSZX[_Y
_^ZX[YVf
oZ_[YX^Q
_^Y[ZX
PX_YZS
ZY[WO_Q
^[Y_ZXQ
[_^XZY
Z^_Y[XPQ
dA[ZYXQ
[^Y_XZR
X_[YZRS
X^Z_Y[PSf
^_ZY[X
ZX_^[Y
X[_ZYR
#ZPVf1
^Z[_YXRf
_^YX[ZP
A|^^Rf
[Y_X^ZPQ
ZX[_^YQR
[_X^ZY
[_YXZR
_^YX[ZPQ
^[_ZYXV
[_XYZ^SQ
^X_Y[SW9
_^Z[XY
ZZ_[^XYS
^Y_Z[PQ
_[YXSQf
SC[ZX^Y
ZYXPHQS1
^[YXPQ
[Y^_ZXPQ
[Z_^YXRf
[Y_ZSQ
SA)GWG
X^Z_Y[VP
YZ[_X^PQ
"e_XYZ^[RQ(
_^[XYZPQf
Z^XY[R
Z[^_YXW
^Y[XZ_S
FZYX^[
_[YZ^XP@Q
4:Z[^_YXQ
[^_ZXYRQ
X[_YZS
lC^XY_[ZQ
?jfNZ_^X[YQV
_ZX[^YVQf
fZ_X[Y^W
[ZY^X_RS)
[ZY_PW
[Y^_XZ
Z^XY[_Rf
<_^X[YZS
AXZY_^[
[Z^Y_X
X[YZ^P
[^XZY_
9vrq,f1
[Z^_YXQV1
ZX^YWGP
_^Z[YX_
TnfBVf
_^ZYX[
X_Z^Y[RQ
f[_YZP
^Z[Y_X
Y[ZWQf
Aof-vQ0
X_^ZY[
[_^XYZ
I[ZYX^RQ
P:.WSf
[_^XYZR
SC[ZYX_PQ
Y_^[ZX
YX[_^SQ
^ZXY_[
^[Z_YXR
^[YZ_X
J^[ZY_XR
^X[Y_Z
/#ZXf@Q
~[_^YZXP
_^[YZXSQ
@_XZ^Y[SQ
^Y[QRf
^_YZ[XSf
S^ZYX[Qf
fA^Z[YQ
XZ^[_YQ
jZ[X^Y
fKXY^_[ZWf
_^Z[YXR
fJ4<f!
L[^_XYZ
X_Z[^YVf
[ZXYRBWf
b-^[X_Z]
_ZY^[X
fIHfGf
Y_[ZX^
_YZX^[QP
^_[ZXY
[Y_ZXR
^XPf@SQ
_^XZY[
^ZX_Y[RQf
^_X[YZRS
7Z[YXRf
^Z[XY_PS
[Z_^YXSf
_^XYZ[
fNY_^XZ[S
^ZX_Y[S
X_^YZ[
XRfJWVf1
_ZX[Y^
s1*Y^ZWf
^XZ_Wf
^ZX_Y[
[YXPQf
Y_^Z[XWP
^YX_[ZR
:_^YZX[SP
8R^[_ZYXQfIS
oH_Z^X[YRS
[ZSWf!
7D5"fJ
ZY_^X[
^Y[ZRQ
CXYZSW)
_ZYQP0
[YWQf1
Y[X^_ZS
A^ZYX[SR
/wHfGf
^_XZ[Y
^YXZ[_
}X^Y_ZPQ
^YZ_[XSfC[
^YZ[_XS
Z^Y_[WQ
Z_^XY[RP
_Y[^XZPQ
VfNRBP
_Y[XZ^
^XZ_Y[Wf
YZ^[X_PR
^Z_YX[RQf
Z[_Y^X
fIfOPf=
ZX^[Y_
Z^[_XY
f@[Z^_YXVQ
_[XZY^Rf
[^YZQIR
X_[^ZY]
5^_[XZYR
_^[XYZQ
Z^X_[YV!
Y[XWPf
YX^[Z_SQ
FZ_^XY[Qf
Z[^_YRP
OA^[Y_XZPVf
UZ_Y[^X
+^XZY[_
^YZX_[PQ
r_[Z^YXV
_Z[^XYSQ
XY[QWf
zy^[_YZX
X^Y_Z[V
Y[_XZ^WV
YXZ[^_Qf
SfKIWf
1[XZSf
]_^ZXY[
^^YPQf
YXSfK[SQf
WORfBFfNf)
Z_^Y[WRf
IX^Y[Z_
8^YX_SP(
#[^YZSfC[Qf
^Y_[XQP
^_XYZ[
Z[X^Y_Rf
_YXZRf
Y[ZSQf
_ZX^Y[
_^XYZ[Pf
Y^X[Z_SQ
ZY[VQf
[_Z^YXQRf
T]X[_ZY
^ZY_X[SQ
Z^Y[VPf)
VOAEf9
^X_Y[ZP
I_YXRQ
_X[^YZ
^Z_X[Y
XY^PQf
YXZRQf
[X^_YZP
[_RPf9
Z^[Y_XSR
^_XYZ[PS
Y^_Z[XW
i[^ZY_P
^_[ZYXW
^YZX[_VRf
[_YXZ^PQ
Z^_[YX
f%cKfIf
Z_[X^Y
[YZ^_X
_[X^YW
y^fKIf
^[Y_ZX
_Z[^YX
^Z_Y[X
i4X_[^R
^_ZYXS
X[_YRf
[^Z_XY
YZX[^Qf
XZ[^_YWP
^[ZYX_W
Z^X[Y_S
1Z_X^Y[RQ
[_^XYZR
X_[^YZPQ
[ZYXSW
Y_[RQf
[Y_ZX^Q8
_[^XZY
PD^_[YX
[XY_SP
Y^_ZX[P
_Z^Y[XQ
[_YZVQf
FXZ_[Y^]
!IfAfHf
Z^_[YXQfIP
Z_[XYS
+CiG^P
YI_X[^YZPV
[_ZY^XS
_^XY[ZP
^[YX_P
_(XY_R
_X[^YZ
X[^ZY_P
[_YZPQ
^Z_YX[
_^Y[ZXW!
XY^Z_Q
lE2fI
gQCfB!
A[^_YZXR
<8Z[_^XY
ZX_[^YR
;XYRJZ
y^Y[XWf
SfC<-f@
_[^YZX
^[XY_ZRS(
XY[ZVf
XZ[_Y^
QfIYVWf
XZ[Y_^QSf
O_^ZX[YR
N^Y[X_Z
X^Y_Z[P
Y[_^XZ
X^[ZY_SQ
NsB^ZX_^Y[S
[_Y^ZX
Pf@Rf9
[^_ZXY
[_^XZYS
JYX_^[ZR
X[RfJP
d4 fFf5
DT^_Y[XZ
_^Y[ZX
WfOfAf
_YXZ^[
[XSfKQIPf)
_XZY^[
[ZX^_Q
'BX^[ZYRVf)
[Y_X^ZQ
_XZ^[Y
XZY_^PS
+XY[ZR
ZY_XRQ
XZ[^_Y
_^Z[YX
PgXSPf!
VfF^YX[S
XY[QPf
^Z_YXQ
_X[WVf
Z[^_PR
[_ZPSf)
^Z_Y[X
[_Y^XZ
^XY[_ZS
^YX_Z[RPf
U_X^ZY[PS
^Y_ZX[
%^[_YZXVf
Y[XZVW)
_[ZY^X
Y[ZX_^
_ZY^[SPf9
'_^YZX[Qf
PL[_QAYS
^ZXY_[Sf
C_XZ[Y^
^ZX_Y[Wf
X^Z[YS
X_Y^Z[P
Z^[XYSfK
^Z_YX[Qf
Z^_[XYWP
ZY[^X_PQf
[Z_YXQ(
-_X[YPQf
Z^YX_[R
X_^[YZPf9
Z[^_YX]
`^Z_YX[
<@[_XZYRQ
Oo^[XYZ
ZXYWOPQ
]UUfOR
^Z[YX_
9_^YXZRfBVf
^[_YZXW
XZY_WV)
YZ^_QP
x_^ZXYRQ
X_[^ZYQS0
[ZQfARf)
XYZ^SR9
"^YX_Z[
Y[_Z^X
[X^YZR
Y[QVf1
1Y_ZX[]
P%`sruV
_Z^XY[S
_^[YZXPR0
^_Y[ZXPQ
^Z[XYQf9
X_[Z^YRB
aof@f-{K!
_^ZXY[S
x^_ZYX[P5
%Z[_Y^XQ
%Y^[XZS
^YZ_X[]
^_YX[Z
[^_XSf
]PqVR
\_[^YZXQ
3Z_X[^YVS
%ZX[^Y_SQf
X^_ZY[
@^YX[_ZSR
_XZ[QR
ZX_[Y^
Y_Z[X^
)^XY_Z[QR
^[_XZYQ
_[^ZXY
aZ^[XY_V
XY^[RQf
^_[XYZSVf
_^[ZXYSCR
_^XYZ[
_^Y[XZVf
Z_XY[^S
QfIYRV
[X^_YZPS0
o^_ZY[X
fHVfNR
Z^_YX[
YX[^_S
R#hCf!
Z[^YX_
_XZY^Pf
_Y^WOP
~_XY^[ZS
^ZX_Y[SQf
|_XZY[PWf
Y^Z_XVWf
X[_^QPf
^[ZXY_SVf)
qIfIf=
_XYZ^[R
Y[^X_ZQIPfHV
[Z_^XY
X[_YZW
^Z[XY_
1^Z_[YX
^Z[_YX
[^Z_Pf
^Y[ZWf
[_ZYXPS
ZLfAfOf
_^ZY[X
Z^[X_YPfHQf
[Z^YXPf@f%
Y[^Z_XP
^Y_[ZXP
^Y_Z[XWSf
[ZXRWf)
Y^[_XZS
_[YXZSQ
_ZX^Y[P
_Y[^ZXV
~X^RQf1
YZP4hVf
[Z^_XYRQ
[X^_YZ]
_Z[YX^Q
[Z^X_Y
_^ZX[YVf
_^YZ[XVf
_ZYX[^
X_^YZS
ZY^_[WS9
X^YZ[_W
tFZ_WR
^_YXZ[Wf
^Z[YX_VWf)
Z[YX_^PQ
9*AoKf
^_Z[YXV
[YX^RVf
lXY[^ZS
_YX^Z[
8yPVf)
.J[ZY^X_PQ
^_Z[YXR
kX_Y[ZRQ8
"X[_YZ^
_^ZY[XSQf
_VZX[^YP
Q^[ZYXSQ9
KXY_Z[^SV
ZY_X^[PfHRS)
f5;jKQ
^_Y[ZXP
^[Y_ZXWf
^[YZX_Q
[XY_^[
^[^ZXY
Y_[ZXR
YVfFRP
_Z[^YX
[pqfAf
fG^_Z[YXVQ
_X^[YZVf
0Z_XY[^
[X^YZPf
Z^XY[_S
e<@_ZXY^[RQ
_^ZX[Y
_^Z[XYQ
N[^_XYQ
Z_X[^YW
JX^YZ[_
YX_Z[^Q
_[^ZXYP
fF^_Y[ZX
}_Y^[XZSRf
[WoSf=
^_[XZYR
[X^Y_ZVf
H[ZY_^Pf@Q
_YXRSf
XY^PS
YZ[XSP
4*Z_YX[Wf
Z_X[^YRQ
X_YZQf
SfKP<qVf
_Z^X[Y
Z^_XY[Qf
XZ_^[Y
YXZRJZWf
v@fIf)
1[Z^_XYPf5
y^Y_Z[XSR
XY^_Z[
bv|'f1
_ZY[^XPQf
[_Z^YX
fAXZ^Y[_
_ZX^Y[PWf)
^ZY[_XQV9
Z^X_Y[
_X[ZYSR
^_YXZ[PQ
^Z_[YXRfJZ
8a[XY]
4`X^Y[Z_
^ZX_[Y
Z^Y[_X
^[ZYXR
Y[XZ_R
vZ^_[XY
IX^_Z[YSWf
XYZ^_[Q
_^ZYX[
ZX_[Y^
Z^_YSR
X^_[YZWfGR
^XY[Z_SR8
^[YXZ]
fAfNf%Wc
[^ZYX_W
Y^Z[X_
X[_YPVf1
_[Z^YX
^_XSW9
XZ[RQf
^[YZSf
^ZXY_[RQ
#fK[X_YZPV1
*Y^XVW
YZ^[_XWSf)
6XZY[_R
XY^_[Z
[^Z_XYP
QfAf=.G
G@[Z^_YXPW
e^[YZ_X
N^[YXZ
^Y[XZ_RP8
^[_YXZ
[Z_YXQS
7Z^_YXPf
Z^_X[Y
Z_^[YXSQ
^_X[ZWfGP4ISf
[^XYZSV
G_ZX^[Q
_[XZYS
_YX[SCPQf
^ZYX[WQf
RfJZ^XY_RQ
_^XYZWfO
}(Z^_Q
]P^Z[XYPf@
_^YXZ[W
_X^Y[S
zrZ[_^XY
j 6VQf
fOZXY^_[RQ
[^_XYZ
^ZX[YPf
Z_XY[Q
w/uTVf
[XRfJVf
_X^[YZP
_^YZ[XRQ)
^[X_YZQS
&Z^X_[YSQ
_^ZXY[
_^XZY[
^_XY[ZWf
B[XZY^_QRf
vfK[^X_ZYP-
OSCRfBZ[_
X^Y[_ZQWf1
H^X[Z_YVRf9
XYZSWf
TY_[Vf
YZ_[X^Q
_^Z[XYQ
Z[^_XYQ
XZ_Y^[
~_X^[ZYWQ
_Z^[YXQf
JiYZ[^_XWfG_Rf
_[XY^ZRP
_^Y[XZR
^ZX_[YSf
Z_X^Y[S
Z^Y_X[SR
[^_ZXYP
A[Z_^YXVW9
[ZXY_^QSf
^XZ_[Y
_[Z^XYQf
XZ_^[Y
Z_^XY[RP0
Y^[XZP
^[ZY_XV
ZX_^YWf
X^YZ[_PQ0
fO_Y^XZ[P
^Z_Y[XR
[XYZ_Q
X^_[ZYQf
zX^[Z_Y
-_X_PS
'RfBf)
fHf5Q,
}^_Z[XYQf
FbfJ%_9
%_^Z[XYQP8
^Y[_ZX
^ZY_[XRJP
f=*gfIF
j[^Y_XZP9
^_ZY[XPf
{ a2fC
^Z_Y[X
QfIRf1
1_^ZY[XVQ
XZ^[YSQ9
$5X^_ZY[VQf
_XZ[Y^QVf
[ZX_^YQ
_^X[ZY
X_Z[Y^PS
}/Y[XVf
_[YZX^QfA
Z^[X_YVP
Y[X^Pf@R
#@SfC[ZX]
X_YZ^[P(
^[_YZXRV
q_Y[X^ZP
d6cRQf
ZYX[_^
ZYRJfBf
_[^YXZ
^ZX_Y[
[_XZY^Sf
Z^XY[Q
X_[^ZYVWf
ZYX[_^Pf
iP={
H_YZ^X[
[_YZ^XPf%j
$Y_[ZXV
$_ZY[X^V
VSfC[^Wf
!X^Z[Y_RP0
6^[ZX_YPW
!;CWf1
_^[YZXRP
Y^_XZQf
^Z[_XY
X_Y[QWf
e'VfNf
X>fGf)
^Y[X_Z
YXSfCPf@RVf
Y^ZX[S
:ZYXRPf
[X^ZY_
HQAfKCR
^_ZY[XQ
^[XZ_YR
_^ZXY[Vf
_Z^X[Y
^[ZX_Y
_ZY[XPQf
q_^[ZYX
YZX^_[
RfBSQf
lX^Y[ZVf
J#^RJZSf
l^XZYPfHXRQ
^_[XYZ
YX_[Wf
[_XZY^Q
[_^XZYW
*_[^XZY
^XZRQ8
XY^ZRWf
_[ZYX^Vf
VZ[_XY^Q
_Y^Z[XSQ
X^Z_Y[
$"fF^_[XYZV
Z_[YX^Qf
^_[XZYV
_XZ[Y^SQ
ZY[VQf)
ZX_[Y^
^[X_ZY
V[Lt_[RBS
Z^Y_X[Pf
_[ZYX]
^Z_X[YRQf
[^X_YZQ
XZ_[YS
_Z^YX[Qf
^X_Z[YS
XkXY_^[WP
Z^[YX_
9[XY^Z_Wf)
^[ZYX_S
ZXY^[P
Y^_[ZX
Y[_ZSf
X^Y[Z_QS0
=|~<Hf
^X_[ZY
^X_Z[Y
^_YX[ZRV9
5b{.xf
&^X[_YZPW1
[Y^Z_XWfGVfFSf
YXZ[^_WV
e^_PQf
^Z[YXQf
@[Z_^XYVQ
_X[ZY^R
^X[YZ_PQf
\"X[Z_Y^Qf
HPfHXY
_[^ZXYQRf
_^X[ZYRP
@[XZPRf
SVY[^ZX]
_XZY^[
:Z_^Y[XWQf
^Z[XY_Qf
X_[Y^ZWf
[ZY^X_
ZX[Y_WOV
^[XYZ_
lf[^_XYZ]
^_[ZYXSQ
ZX_Y[Rf
X[^_YZ
[^XZY_Pf-N
f-ErWf
*,hZ[^R
ZX^[Y_Q
Z2_^X[ZYQ
X[Z^YP(
ZY[XVf
CY[SK[]
_X[Y^ZVNSf
_XYZ[^R
pldg$}
_YX[^ZV
WO_ZYQR
;[^Y_QAYRP
Y[XZPQf
_[^ZYX
fNF[^XYQW
_YQfARf
fB[X^_ZYW
-N8\QS)
X^[Y_S
|WfOf!
{/fNfC
X^Y[Z_S
_^YXZ[R
QfAWfO
[^Z_YX
X3Z^[YXS
^X_YZ[V
_YX[Z^
_Y^ZX[Rf
6Z^VfF^
_XZ[PSf1
YZ_[XSP8
_Y^ZXSf
uvtf54
6^[ZYX_
^_[YXZ
N^_[YZX
^X_ZY[S
_[Y^XZ
X[_Y^ZQ
2Z[Y^_
^_[YZX
[X^ZY_Rf
^Y_X[ZP
Y_X^ZPQ
>_Z^[YX
<;XYZ[Q
Z_^[XZYRW
^X[Y_ZSQf
_Z[VFQf
Z_Y^X[R
BY[X_ZV
^[_ZYXQ
j_Z[XYW
9_X^YZ[V
X_[ZY^Qf
_[Z^XYS
Z^Y_X[
'U)fCfNf
^_[XYZ
N_YZ^R
,WfGQS
VN^X[Y_ZQf
X_Z^[Y
^XY_[Z
^Z_Y[XSR0
Z[WPf1
ju4yS(
[_ZY^XQf)
^_Z[XY
[X_^YZS
_Y^ZSP
_^ZYX[Rf
YX^_[ZRQf
'X[_^Y
@{hOf!
fAZXY^_[
[_^XZYQ
4DZX[YV
[ZX_^W
[Y_XZQP
_X^ZY[RP
phY[^_XZSQ
Z_X^Y[S
Z_^XY[Qf
Z[_XYPf
S_[ZX^Y
[YZXSRf1
RBZY[^RQf
"[_X^YZ
VfN^[XWSf
ZY[_Vf
[ZX^Y_RJQ
VfFRfBQf
&}X[YZ^
B^XPQ9
Y_^[ZX
Y^[ZX_W
[X_ZY^SR!
_XY^Z[
^_XZRQ)
_[^XZYQS0
]_ZY[Pf
^Z_Y[XP5
Z_[^YXQR
^_XYZ[
2BXYZ^[_PW
^_XYZ[Q
Y^_Z[XSQ
^Z_XY[
%f^YXPQ
f5sMfAf
>H_^Z[YX
^[_YXZQ
A^XY^Q
N_Y^XZ[PV
_Y[Z^XP
fF_^Z[YX
_Z^XY[
^[ZXY_R
A^_X[YZWf
Z[X^Y_
_^YZ[XVf
.%>Pf9
_ZXY[^Qf
ZX_^[YP
K^X[_ZY
fN^_YZ[X
_^XZY[VRf
X_Y[Z^Q
K^Z[YV
Y[ZPS8
^[XSPf
^JY_^X[ZWf
k/^f@,V
X^[ZY_PW
X[Z_YP8
o^XY_Z[S
j_^XZYSV
XZ^[PQ
_^Z[WQf
M^X[ZY_Pf
XZ_[^YS
Z^XY[RSf
^YX[ZQP(
g^[_ZYXP
^XYZ[_PQf1
cZ^_[YX
Z_^[YXWf
ZYX[_S
YXZ^_[
_Y^[ZXP@RSf9
^_Y[ZXP
[XZYRfBSWf
^_X[YZ
XZ^[Sf
d[ZYX^_WQ
ZX^[Y_QP0
[_Z^XY]
^[XZY_
q7^[XZY_
^[_YQf
cfA^ZXY_[Vf
^X[YZWf
^[ZXY_P
_^[YZX
_X^[YZSf
_XZ^Y[RPf
_[ZX^YQ
XY[_PQf
0RBfCf1
^XZY_[
a`XY_[^ZRf
^Y_X[Z
SY_PW1
^ZY[_XVf
fH[_Y^ZX
_XY^[ZPf
6[_^ZYX
VfFQf9
_ZY^[XPQ
_ZXY^[RS(
*qX_Y[ZRQf9
^[XYZWf
*_X[YZ^Q
_ZX[^YQR
_^[XZYQRf
^[X_ZYR
b0^YXZRV
_[YX^Z
#ZWfO_RQf1
P$9XY_
YX^ZRJQf
]X^[YZP
YZ[XVQ
_^[ZYX
^X_YZ[
nBf@f5=cf
[_X^ZYQR9
^[X_ZYV
Z[_YX^Q
^Z[XYRP
^Y[XZWf
X[Z_PSf!
f@Y[XW
2JZ^YX_[Vf
Y[ZX^P
^[Y_ZXRf
[_XY^]
Ie_^X[ZY
[X^ZY_Qf
-Z[^_XY
^ZX[YVf
Y^XZ_[P48X
Y[_X^PW
_YXQIS
t2(X^Q
X^_[ZYSQf
Antivirus Signature
Bkav W32.AIDetectMalware
Lionic Trojan.Win32.Generic.4!c
tehtris Clean
ClamAV Clean
CMC Clean
CAT-QuickHeal Trojan.Agent
Skyhigh Clean
ALYac Trojan.GenericKD.73679807
Cylance Unsafe
Zillya Clean
Sangfor Trojan.Win32.Kryptik.Vs5z
K7AntiVirus Trojan ( 005a5ca21 )
Alibaba Clean
K7GW Trojan ( 005a5ca21 )
Cybereason Clean
huorong Clean
Baidu Clean
VirIT Clean
Paloalto generic.ml
Symantec ML.Attribute.HighConfidence
Elastic malicious (high confidence)
ESET-NOD32 a variant of Win32/Kryptik.HTMF
APEX Malicious
Avast Win32:Evo-gen [Trj]
Cynet Malicious (score: 100)
Kaspersky Clean
BitDefender Trojan.GenericKD.73679807
NANO-Antivirus Virus.Win32.Gen.ccmw
ViRobot Clean
MicroWorld-eScan Trojan.GenericKD.73679807
Tencent Malware.Win32.Gencirc.14137f3d
TACHYON Clean
Sophos Mal/Generic-S
F-Secure Trojan.TR/Crypt.Agent.qjweu
DrWeb Clean
VIPRE Trojan.GenericKD.73679807
TrendMicro Clean
McAfeeD ti!DCD0823F72D6
Trapmine malicious.high.ml.score
FireEye Generic.mg.987780c119053443
Emsisoft Trojan.GenericKD.73679807 (B)
Ikarus Trojan.Win32.Crypt
GData Trojan.GenericKD.73679807
Jiangmin Clean
Webroot Clean
Varist W32/ABRisk.VFQZ-4246
Avira TR/Crypt.Agent.qjweu
Antiy-AVL Trojan/Win32.Kryptik
Kingsoft malware.kb.a.997
Gridinsoft Clean
Xcitium Clean
Arcabit Clean
SUPERAntiSpyware Clean
ZoneAlarm Clean
Microsoft Trojan:Win32/Wacatac.B!ml
Google Detected
AhnLab-V3 Clean
Acronis Clean
McAfee Artemis!987780C11905
MAX malware (ai score=83)
VBA32 Clean
Malwarebytes Malware.Heuristic.2091
Panda Clean
Zoner Clean
TrendMicro-HouseCall TROJ_GEN.R002H0CGR24
Rising Trojan.Kryptik!8.8 (CLOUD)
Yandex Clean
SentinelOne Clean
MaxSecure Clean
Fortinet W32/Kryptik.HTMF!tr
BitDefenderTheta Gen:NN.ZexaF.36810.4t2@aeRMbBpi
AVG Win32:Evo-gen [Trj]
DeepInstinct MALICIOUS
CrowdStrike win/malicious_confidence_90% (W)
alibabacloud Trojan:Win/Kryptik.HSO9
No IRMA results available.