Static | ZeroBOX

PE Compile Time

2024-05-27 17:29:46

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00001000 0x00002a00 0x00002a00 6.29493746437
.data 0x00004000 0x00000010 0x00000200 0.0203931352361
.rdata 0x00005000 0x00000a70 0x00000c00 4.73002713916
.bss 0x00006000 0x000000d0 0x00000000 0.0
.edata 0x00007000 0x0000007e 0x00000200 1.4350467575
.idata 0x00008000 0x00000014 0x00000200 0.0

Exports

Ordinal Address Name
1 0x180001370 WerpInitiateCrashReporting
2 0x180001380 WerpInitiateCrashReporting6
!This program cannot be run in DOS mode.
`.data
.rdata
.edata
@.idata
AWAVAUATWV
faultrepH
rep.dll
HcT$lA
[^_A\A]A^A_]
)D$0fH
)D$@fH
)D$PfH
)D$ fH
)D$0fH
)D$@fH
)D$PfH
)D$`fH
)D$pfH
H;D$(r
)D$ fH
)D$0fH
)D$@fH
)D$PfH
)D$`fH
)D$pfH
)D$ fH
)D$0fH
)D$@fH
)D$PfH
)D$`fH
AVAUATWH
[^_A\A]A^]
[^_A\A]A^]
psapi.dl
Urlmon.dH
D$*dll
Ole32.dl
User32.d
oleaut32H
t32.dll
Shlwapi.H
D$+dll
advapi32H
i32.dll
Shell32.
IPHLPAPIH
API.DLL
winmm.dl
netapi32
mpr.dll
wininet.
@pUWVSH
@[^_]A\
AUATWVH
[^_A\A]]
[^_A\A]]
AWAVAUATWVSH
[^_A\A]A^A_]
D$qdhhf
D$tfdd
WVSHcA<
AWAVAUATWVSH
D$[openH
[^_A\A]A^A_]
[^_]A\
AWAVAUATWVH
[^_A\A]A^A_]
log.txt
john doe
malnetvm
maltest
malware
sandbox
tequilaboomboom
virusclone
wilbert
nepenthes
currentuser
username
vmware
sandboxdetect
john - pc
mueller - pc
hanspeter - pc
malwaretest
fortinet
https://www.baidu.com
00-05-69
00-0C-29
00-1C-14
00-50-56
00-0F-4F
08-00-27
EC-75-ED
00-1C-42
C:\windows\system32\drivers\VBoxMouse.sys
C:\windows\system32\drivers\VBoxGuest.sys
C:\windows\system32\drivers\VBoxSF.sys
C:\windows\system32\drivers\VBoxVideo.sys
C:\windows\system32\vboxdisp.dll
C:\windows\system32\vboxhook.dll
C:\windows\system32\vboxmrxnp.dll
C:\windows\system32\vboxogl.dll
C:\windows\system32\vboxoglarrayspu.dll
C:\windows\system32\vboxoglcrutil.dll
C:\windows\system32\vboxoglerrorspu.dll
C:\windows\system32\vboxoglfeedbackspu.dll
C:\windows\system32\vboxoglpackspu.dll
C:\windows\system32\vboxoglpassthroughspu.dll
C:\windows\system32\vboxservice.exe
C:\windows\system32\vboxtray.exe
C:\windows\system32\VBoxControl.exe
C:\windows\system32\drivers\vmmouse.sys
C:\windows\system32\drivers\vmnet.sys
C:\windows\system32\drivers\vmxnet.sys
C:\windows\system32\drivers\vmhgfs.sys
C:\windows\system32\drivers\vmx86.sys
C:\windows\system32\drivers\hgfs.sys
C:\Program Files\VMware\VMware Tools
C:\Program Files\Oracle\VirtualBox Guest Additions
sample
HARDWARE\ACPI\DSDT\VBOX__
HARDWARE\ACPI\FADT\VBOX__
HARDWARE\ACPI\RSDT\VBOX__
SOFTWARE\Oracle\VirtualBox Guest Additions
SYSTEM\ControlSet001\Services\VBoxGuest
SYSTEM\ControlSet001\Services\VBoxMouse
SYSTEM\ControlSet001\Services\VBoxService
SYSTEM\ControlSet001\Services\VBoxSF
SYSTEM\ControlSet001\Services\VBoxVideo
SOFTWARE\VMware, Inc.\VMware Tools
SYSTEM\ControlSet001\Services\vmdebug
SYSTEM\ControlSet001\Services\vmmouse
SYSTEM\ControlSet001\Services\VMTools
SYSTEM\ControlSet001\Services\VMMEMCTL
SYSTEM\ControlSet001\Services\vmware
SYSTEM\ControlSet001\Services\vmci
SYSTEM\ControlSet001\Services\vmx86
SOFTWARE\Wine
HARDWARE\ACPI\DSDT\xen
HARDWARE\ACPI\FADT\xen
HARDWARE\ACPI\RSDT\xen
SYSTEM\ControlSet001\Services\xenevtchn
SYSTEM\ControlSet001\Services\xennet
SYSTEM\ControlSet001\Services\xennet6
SYSTEM\ControlSet001\Services\xensvc
SYSTEM\ControlSet001\Services\xenvdb
vboxservice.exe
vboxtray.exe
vmsrvc.exe
vmusrvc.exe
vmtoolsd.exe
vmacthlp.exe
vmwaretray.exe
vmwareuser.exe
vmware.exe
vmount2.exe
xenservice.exe
xsvc_depriv.exe
droper.dll
WerpInitiateCrashReporting
WerpInitiateCrashReporting6
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe,13
sf.pdf
%PDF-1.3
1 0 obj
<</Type/Font/Subtype/Type1/BaseFont/Helvetica/Encoding/WinAnsiEncoding>>
endobj
2 0 obj
<</Title<feff674e5b508c6a>/Producer(macOS Version 11.5.1 \(Build 20G80\) Quartz PDFContext; modified using iText
5.5.13
2000-2018 iText Group NV \(AGPL-version\) \(AGPL-version\))/Creator(Pages)/CreationDate(D:20210811145437Z00'00')/ModDate(D:20210918180536+08'00')/Keywords(5fff3640942e02c63nd-2920FFdV34S_VPieROWq)>>
endobj
3 0 obj
<</Length 10/Filter/FlateDecode>>stream
endstream
endobj
4 0 obj
<</Length 107/Filter/FlateDecode>>stream
$8>, 35
endstream
endobj
5 0 obj
<</Type/Catalog/Pages 6 0 R/MarkInfo<</Marked true>>/StructTreeRoot 7 0 R>>
endobj
6 0 obj
<</Type/Pages/MediaBox[0 0 595 842]/Count 1/Kids[8 0 R]>>
endobj
7 0 obj
<</Type/StructTreeRoot/K 9 0 R>>
endobj
8 0 obj
<</Type/Page/Parent 6 0 R/Resources<</ProcSet[/PDF/Text/ImageB/ImageC/ImageI]/ColorSpace<</Cs1[/ICCBased 10 0 R]>>/Font<</TT2 11 0 R/TT3 12 0 R/TT5 13 0 R/TT7 14 0 R/TT6 15 0 R/Xi0 1 0 R>>/XObject<</Im1 16 0 R>>>>/Contents[3 0 R 17 0 R 4 0 R]/MediaBox[0 0 595 842]/Annots[18 0 R 19 0 R]>>
endobj
9 0 obj
<</Type/StructElem/S/Document/P 7 0 R/K[20 0 R 21 0 R 22 0 R 23 0 R 24 0 R 25 0 R 26 0 R 27 0 R 28 0 R 29 0 R 30 0 R 31 0 R 32 0 R 33 0 R 34 0 R 35 0 R 36 0 R 37 0 R 38 0 R 39 0 R 40 0 R 41 0 R 42 0 R 43 0 R 44 0 R 45 0 R 46 0 R 47 0 R 48 0 R 49 0 R 50 0 R 51 0 R 52 0 R 53 0 R 54 0 R 55 0 R 56 0 R 57 0 R 58 0 R 59 0 R]>>
endobj
60 0 obj
<</ProcSet[/PDF/Text/ImageB/ImageC/ImageI]/ColorSpace<</Cs1[/ICCBased 10 0 R]>>/Font<</TT2 11 0 R/TT3 12 0 R/TT5 13 0 R/TT7 14 0 R/TT6 15 0 R>>/XObject<</Im1 16 0 R>>>>
endobj
17 0 obj
<</Length 6384/Filter/FlateDecode>>stream
aUUeXf
DxY8}.
etn1:o
j%AJ;W
<Pn}ia"
#YHOE/[?^
WC,qKqBJ_
EiMKlr
i__b:b%
=#&JcK
endstream
endobj
18 0 obj
<</A 61 0 R/Border[0 0 0]/Type/Annot/Subtype/Link/Rect[286.5625 733.4375 335.7188 753.3125]>>
endobj
19 0 obj
<</A 62 0 R/Border[0 0 0]/Type/Annot/Subtype/Link/Rect[370.375 733.4375 449.125 753.3125]>>
endobj
20 0 obj
<</Type/StructElem/S/P/P 9 0 R/Pg 8 0 R/K 1>>
endobj
21 0 obj
<</Type/StructElem/S/P/P 9 0 R/K[63 0 R 64 0 R 65 0 R 66 0 R 67 0 R 68 0 R 69 0 R 70 0 R 71 0 R]>>
endobj
22 0 obj
<</Type/StructElem/S/P/P 9 0 R/Pg 8 0 R/K 12>>
endobj
23 0 obj
<</Type/StructElem/S/P/P 9 0 R/Pg 8 0 R/K 13>>
endobj
24 0 obj
<</Type/StructElem/S/H1/P 9 0 R/Pg 8 0 R/K 14>>
endobj
25 0 obj
<</Type/StructElem/S/P/P 9 0 R/Pg 8 0 R/K 15>>
endobj
26 0 obj
<</Type/StructElem/S/P/P 9 0 R/Pg 8 0 R/K 16>>
endobj
27 0 obj
<</Type/StructElem/S/P/P 9 0 R/Pg 8 0 R/K 17>>
endobj
28 0 obj
<</Type/StructElem/S/P/P 9 0 R/Pg 8 0 R/K 18>>
endobj
29 0 obj
<</Type/StructElem/S/P/P 9 0 R/Pg 8 0 R/K 19>>
endobj
30 0 obj
<</Type/StructElem/S/P/P 9 0 R/Pg 8 0 R/K 20>>
endobj
31 0 obj
<</Type/StructElem/S/H1/P 9 0 R/Pg 8 0 R/K 21>>
endobj
32 0 obj
<</Type/StructElem/S/P/P 9 0 R/Pg 8 0 R/K 22>>
endobj
33 0 obj
<</Type/StructElem/S/P/P 9 0 R/Pg 8 0 R/K 23>>
endobj
34 0 obj
<</Type/StructElem/S/H1/P 9 0 R/Pg 8 0 R/K 24>>
endobj
35 0 obj
<</Type/StructElem/S/P/P 9 0 R/Pg 8 0 R/K 25>>
endobj
36 0 obj
<</Type/StructElem/S/P/P 9 0 R/Pg 8 0 R/K 26>>
endobj
37 0 obj
<</Type/StructElem/S/H1/P 9 0 R/Pg 8 0 R/K 27>>
endobj
38 0 obj
<</Type/StructElem/S/P/P 9 0 R/Pg 8 0 R/K 28>>
endobj
39 0 obj
<</Type/StructElem/S/P/P 9 0 R/Pg 8 0 R/K 29>>
endobj
40 0 obj
<</Type/StructElem/S/P/P 9 0 R/Pg 8 0 R/K 30>>
endobj
41 0 obj
<</Type/StructElem/S/P/P 9 0 R/Pg 8 0 R/K 31>>
endobj
42 0 obj
<</Type/StructElem/S/H1/P 9 0 R/Pg 8 0 R/K 32>>
endobj
43 0 obj
<</Type/StructElem/S/P/P 9 0 R/Pg 8 0 R/K 33>>
endobj
44 0 obj
<</Type/StructElem/S/P/P 9 0 R/Pg 8 0 R/K 34>>
endobj
45 0 obj
<</Type/StructElem/S/P/P 9 0 R/Pg 8 0 R/K 35>>
endobj
46 0 obj
<</Type/StructElem/S/P/P 9 0 R/Pg 8 0 R/K 36>>
endobj
47 0 obj
<</Type/StructElem/S/P/P 9 0 R/Pg 8 0 R/K 37>>
endobj
48 0 obj
<</Type/StructElem/S/P/P 9 0 R/Pg 8 0 R/K 38>>
endobj
49 0 obj
<</Type/StructElem/S/P/P 9 0 R/Pg 8 0 R/K 39>>
endobj
50 0 obj
<</Type/StructElem/S/P/P 9 0 R/Pg 8 0 R/K 40>>
endobj
51 0 obj
<</Type/StructElem/S/H1/P 9 0 R/Pg 8 0 R/K 41>>
endobj
52 0 obj
<</Type/StructElem/S/P/P 9 0 R/Pg 8 0 R/K 42>>
endobj
53 0 obj
<</Type/StructElem/S/P/P 9 0 R/Pg 8 0 R/K 43>>
endobj
54 0 obj
<</Type/StructElem/S/P/P 9 0 R/Pg 8 0 R/K 44>>
endobj
55 0 obj
<</Type/StructElem/S/H1/P 9 0 R/Pg 8 0 R/K 45>>
endobj
56 0 obj
<</Type/StructElem/S/P/P 9 0 R/Pg 8 0 R/K 46>>
endobj
57 0 obj
<</Type/StructElem/S/P/P 9 0 R/Pg 8 0 R/K 47>>
endobj
58 0 obj
<</Type/StructElem/S/P/P 9 0 R/Pg 8 0 R/K 48>>
endobj
59 0 obj
<</Type/StructElem/S/Figure/P 9 0 R/Pg 8 0 R/K 49>>
endobj
10 0 obj
<</Length 2612/N 3/Alternate/DeviceRGB/Filter/FlateDecode>>stream
TIj"]&=&
D}J}/G
0j&jaj
SwBOK/X/_
~5f5wug
endstream
endobj
11 0 obj
<</Type/Font/Subtype/TrueType/BaseFont/AAAAAC+STSongti-SC-Bold/FontDescriptor 72 0 R/ToUnicode 73 0 R/FirstChar 33/LastChar 177/Widths[1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000]>>
endobj
12 0 obj
<</Type/Font/Subtype/TrueType/BaseFont/AAAAAD+TimesNewRomanPS-BoldMT/FontDescriptor 74 0 R/Encoding/MacRomanEncoding/FirstChar 32/LastChar 211/Widths[250 0 0 0 0 0 0 0 0 0 0 0 0 0 250 0 500 500 0 500 0 500 0 500 0 0 0 0 0 0 0 0 0 722 0 722 0 0 611 778 778 0 0 0 667 944 722 778 611 0 0 556 667 0 0 0 0 0 667 0 0 0 0 0 0 500 0 444 556 444 0 0 556 278 0 556 278 0 556 500 556 0 444 389 0 0 0 722 0 500 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 500 500]>>
endobj
13 0 obj
<</Type/Font/Subtype/TrueType/BaseFont/AAAAAF+STSongti-SC-Regular/FontDescriptor 75 0 R/ToUnicode 76 0 R/FirstChar 33/LastChar 255/Widths[1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1
endobj
14 0 obj
<</Type/Font/Subtype/TrueType/BaseFont/AAAAAH+STSongti-SC-Regular/FontDescriptor 77 0 R/ToUnicode 78 0 R/FirstChar 33/LastChar 97/Widths[1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000 1000]>>
endobj
15 0 obj
<</Type/Font/Subtype/TrueType/BaseFont/AAAAAG+TimesNewRomanPSMT/FontDescriptor 79 0 R/Encoding/MacRomanEncoding/FirstChar 32/LastChar 165/Widths[250 0 0 0 0 0 0 0 333 333 0 0 0 333 250 278 500 500 500 500 500 500 500 500 500 500 278 0 0 0 0 0 921 722 667 667 722 611 556 722 722 333 389 722 611 889 722 0 556 722 0 556 611 0 0 944 0 0 0 0 0 0 0 0 0 444 500 444 500 444 0 500 500 278 0 500 278 778 500 500 500 0 333 389 278 500 500 722 500 500 444 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 350]>>
endobj
16 0 obj
<</Length 426545/Type/XObject/Subtype/Image/Width 1446/Height 2034/Interpolate true/ColorSpace[/ICCBased 10 0 R]/Intent/Perceptual/BitsPerComponent 8/Filter/DCTDecode>>stream
%&'()*456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz
&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz
a]Z-Gu
^UV2IE
q^ui*nH
%&'()*456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz
&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz
[[BnAu
t}F}zQ
zVv94>
NiXw'6
kTeit<2o
?#Qvi*S
+i|Y3A
Fg`02NrOA
BCV=cF
=b(<{$
{SmXU'
;C~5+-*
r3Qd)"1n
qUcBo?;%
U6s4t^
2N}p?/
Y\.@/n
TEeHb!
kDAB[+
lbd!-#
I9o_aV
t;)u-R
9*ZD##
*CRK{q
6N*\D*]D
Rp:Rl
z~uW-#
d*Q>Ps
#Q5562
,JGEe$
6ROBy'
s|fs,C
7S$NZ<1'
0?uz~<
drZY+8
[kh@iKK!
RHv:mM
LfhC1E^
c'8$zg
w/@GPi
BFd>i$
k3>S833
e$q9`3
eE$($ch
$z}=*A2
y.'s:c!
v44]kR
TP&j[-
"/G+!
}:$prd
fesiq"
P=}1JL
qG)jG],
EY._`W]
36JDC(
fk9#YF
C'*FH=T
blZj7z4
/9ge"gB9'
n+D'b/"
6b$.zu
$iyh@
rW$`v$
$f\A,k
-"p0GPF
H,dM`C
MCw-3
q=2=1HK
u7"Q-Zi
hCc|$&
=2E2yJ
x.cWWR
o^(3e%
4B\awu
5w-#>v
)#8##<
{CeI#y4
Z$RgHa
4$jRKr
_^+Nar#
2E[ad#
;M;Rh'V
.xl+z}
M2[3%B
[kdddg
k%Q3HY3R+S&
@p0NrOL
RXw0,z
pGQ@I
J.Cg7r
c9>af=z
Ni$kcZ
@C,_98
7.G<v5hR9k
Yx'<S`]@3
ISo>VA
;TX.2D(A
{zT$[)
r@vPFum9
f6K s
<{qQ`"E
@.'9w9$
4-$ei7
i&_"}O
:ThRew^r
CA'My!
U\NGEo
9<RhC>
"/;GZle
2cs}0F+
]A=}sV0'
py?ZBdA
O~=kCD
46#bXm
.c6>E\
C,apv7
Re4@[
?SF{)U
d_cA$
+}EKw.6(
Gr2zV,
SPlu6W9
=zqB@c0
1G)DlN
#5_"D9
W3&e#i
Pbg\)8lc
VrG\5=
F3U`D)
F'npMW)E
jZ.3B\
jf$1.dm
qUc7-D
5;f;#!
NYU=WN
JRek]x
d.NcnPdv
sCAc6r
2(^A!q
2rk7+lC
W'TU9<
HLRYA=|
IR=q]H
A$Thou
,ZL5Kdx-
6^d,]@+
R&{h`^xemf
B20*Bg
U!qRD
bAssj|
MgsDU;
s[6Irf
JW:c&{
G''?@h!
*,pGPr
o2C!Ps
ZNv%FKr
B+sYc1
@270_`
<r@?_o
K5Q9O8
T4`[^N
jCcBFG
D$QeBYH
Hv 6QLv
JW7D6vb
grlWXB
{WDd83
or[(d
JW.+30P8
8h_VVP
Br3Osu+
@sKb\o
3GWWPc
c&k@NZ
%sNc6H
JJ.>nx
crV5 `
vb=1OR
8=3Y6J)4
Vf;\4
Zw pYw
6O)0`>j
gtmvUx
FnG9uf^
~4k9g
#W,Gnc-
n%y,|2
Sd{ISvG
}>c4A
Tcy$|'
$p:pOR1
b~Ke q
>d|N&W|
@&P7&y
un+Uby
KTie;UG^
zsBv.Z#
z8:jsG
^5wv}n
=kkhv)
g$UI2`
IB6<<Ks
6|=ci4D
pG_|V.
gq6h g
}kDc)\
4mUJ9n
<3h-t}65-
5.6e'csB
P[C0wt
.n;pjnJ
r01Z&+
#eQmr@N
w5!T*;
~^?!M!7
5V2r5!
FH3[$U
**lZDH
x#m.~R
Y%P~R:q
E ltYV
>+bW/M!I
(g(YNNq
mZ$D$n
<RcDlA
VRw75c9
&Db$m#
zqUdCd&%^
qOr(E#
Pk(I7
'*=l=FyF
-|O"BO
Y3SF68
C)#&E;
sEGfU)Y
PMaY^'
2+&$d],
w.C((
UMjqb*r@
U$qJI?x
@Wo39^
j6*2}9
eiW8*zsY
'-Ec:+
-v{4ec
fRI#j%
dfy[w,
~UJv2l
zeN+7!X
:TSG3+
2?ZZ2d
5hwdnB
+$~WV|
H$uuw
v.UOZW
r,Z2zt
7Jd4g<
XlkV6A
jpN6=g
#)P}3T
A%Fp>QHD
#vqb'd}
4VEHabI
xZ={M}
@<U"lI
)5ucjUy&
;6MDx{
ZE=NcS
Q[.k:5
wf`2Frk
E;$c:'
nG4\]Cp$
X6t$WV$
YrH a$
202rh)
a]x=j
GDfU]>U\
oCSvxaY
TCEyNH
dR2KqV
L.swz1
U-ON-X
EU??z
OoZFMjZg
zd"m>s
c*Y6FL
jV/D^W
2,S,O|
eOACfl
p:qUd+
rd2\yD3
D2p6n@
=:}M+>
pu4 YC
0n7.N}A
0Qk2Im!?1
h["U/'^
K4R.GL
##B=k(]F1
RV&YI8S
3Z$24o
v(\1.v
NfCug>cc
vF]DPF
CE9vd;|
w2eIe`
{SD6g\
6M"ky%
6x5V5U
X}zQs6
+xA_3;~lg
|Ym8Ww
G;G%L<
}MwFI#E's
Oh70a2n_
2V-#?;AE
}qZE_s
3JNzazT
X4{[<V
Ek $'Q
jUgcam
#6LdF@O
B7<lUF
N7:i=O
=HUV&[
w3$e!
rzPotL
=3Y62a
&Ub7rN3
t)$CFl
o4yc+
D6XKnz
Q,gq*{
Xw"vP0i
#.YT/8
wg5}v#\
X#I8@p:
me)$Dc
7-#<<xS
Dopq;=3V
4&.S6b#
p2;g=sY0,
Y6O*[
i3cnwS@
\rc:k;V'
P%3NE/
rG=z~U
iBd6rO
r?,z~B
N99<v9
i"\LSoyj
Y6W#&]N,
UVD&jG
2gf001
GPpO?Z
yLSpdw%
1YJ$'r
UsIltB
:Us2te
<g `~
Mo4e~B
6r77br
E9 bO
#>R3jK
:sVG)p@
7w?V<(
p{PKe)
vW?@<8
aA.EV;
tTO&<v
#?JV4{
b$Uw`p1Sqr
9#2.N8
220Gj@
B}1A8_~
1J$[C1
WbR5--a
(b`A8$
+0'\+.
qZ4fH%a
]U?xc=
~j0j:=
SbS4VT
]H9=}}+T
65`UUP
NCEwc'N
)hg\ -
kca`pH
KNR\r1
U7D4lB
I3&jAm
JoQX1
ee&BUW8
X\-.RPpH
`-Dc*s
.2(<d.
2{VM!s
Oo\Sr(g
jv3(("S"
[fI@8
!@2x=O
R.b9c
;rrx<
N:}*yD.
:lL%e@
~=zVff
dJ(qvw
r=j,KEYaV}
]11r>`
PCDR8g<
R@~w|S
SD2Zx6
7(*2pGA
F$7bV9#
G<p=?/j
>P&KvP
OoJ.G0
jD9"`2
S'@`Tm
1a`2O9
<sNK@$V
ZtZkX}
Uep_`
GnqUr.H
R)4((F
g 6V{u
zVn@A#
LU[nps
_@3RJc
&e$gJD
z,tFD"
=GOqSp
GcSsEf\
<u5'\gr
LZNFQ
3!^E`?
)6J2$f
D`/~?:W
nI"2`u
rGoJW"
rFMW0"
G569k
1$:}jyL
%U*7H>
aTO19#
#E%p9^
lW-,"4
z{P3H@
MRBQ!Wi$
ZH"VTRI+
lab8#
}EC@Vf_
r*@b(,7r
_j9lJ.
#wlmP>
FFzVar
R)!Rhm
jW)3B8
Q!-DV%K/QP
&j9X3|
L_(;A$v
qB@8?
B-sR,>
zuJ@ZP8
+,^Y=88
mJCqqu!l
beXnD2~
@=A=Fhq(
S`#Tem
rGAHcR5
:`'O~MsH
%*I;p}
62OQSp'US
{S-25Iw
2T}?.i
PO^zt
I #|@O
@p!WaQ
/p)m.x
R;T\dn
y{Ae?(
`sC`T*
P[j7-=
=MRG?1
@[i!p;
QW$1y>j
Y5`#2a
}k&4>8
q&a]Ki4%#NH
9v?601
E(18>p
WpOPYAm
=3Wq&X
U5`3"8p
lC{{d7
@i3C4J
pN0GBOc
HFL"EiX
k9DW"X&
;y(G_SR
>gR?*v
N)4\dLr
mJv%B[
au=GB{P
r:zzT6
lPfNPm
0e"PI$
m|mP2s
@D%,H'
u 3>Pc
G\1SGYo
9WRI<d
n2==qP$O.
Uf.v:-bY
#=H=p(
U'`"ua
8)',I=
I(>P'w'#
`dwO~*
[Kn!v.F[
h\{k+]
T7`&I6
(FH<R`V
qUbIc)
t?0@y=
J@!8!:
*ZKq{2
T"lE}cq
jN#Hj
V[g8d=@
$nU'k0
r5O0nl
GOBk7 
??nz{{
Pp2O'4_PH
OaMlZF4
=i4C-]
~;UXdS
VasVcp
r@ 0 w9
AZ6W3!
VMXcOBP
ll@'n?
Nr{QpH
H~DPHn
VRE"%S
9 z~4'`
N=1C`4
\W5ZXV%
v0n,nt
bFd(#
'o@Fs
s1$6pO'5
' c<}jK(D
iXDw1Co
,I]YbVY
zT1\-
H.023E
OJ`HDK
1Qs6Rc}z
dynK`s
A$~4Xi
9__LRh
{Vr`2]
CBE&<*
'E?1<zT4M
6%Qr$3
:R pE9b
<`v=Oz
b}zr0x>
#?0`:p3
mwo$a66
Mo208
b-Bwcx
c68CNw)
`PhKgag6
l>bgoOj
pG<T6M
Jwc$ eT
>I\~]*
OBOjCF
Ke6]/p\
;@lrN1
G$V@+bFl.;~t
HHf9%}>
:SZ#C&f[
TDcI$x
WS`=fQ
Imvo-$#
(dtRc^
Z\v-$R
@sFA;9
TcsDR[Y
e@cu;A
=:zU7c6K+l
V1FFO
RLCWx!
!PrXrG^x
=p1UaX
T$QcO
@zVrfl
)4&h3O
pd`w1
&w/P08?
ez_Lw
C@8"3mRGl
d}Gj,
C@h#n\
IaR00pNr
#)hQI&
q@,~L+
$Vc"wBO
=)4A!!
".\>Dx
HI)=A
St`6[k
Z`Oogh
$9 0*x
O|VHeo1
]_if(
GN;Ur$
9$R@<`
hDWW7f_
@>6Vl3
iUp$bJ
l4)PHa
Z7p+4K
lyx;GO
-<>|[
iXN&iA
#*I^:Pgr
j]AWtp
HJaig#
r+!1nU
e?/PiX
!pva~Q
FrGOB}i$
5lV'2n##
zsPQ$S.
8v+4NN
2fu26N
<_SYH
s,gS&(pK1
OOSR&h[
L'2&FF
FA*O%O
)BimbS
};zFe
c&F=Nq
p=ERC3U
>iI0TpO^s
sL[FWV
$GnNpON}je q
eq-c&=
OAZ1$D
rqZ #b
<u5,w5
F={U7p
,e+|x
rr2pzPRD33
irDQnN
BB*_I
/>7HNO
=sWrnX
o,jJp3
B6OP}j
8=GN*@
B`0F[p
/sJ +
MjfI$XPPdu
W`'xV%
2O5jBL
\ `pOr:
99*:`w
0Eir,Le
2UF9~@\
[xfede
\G,*Z ]
o'o\pq
=h3DP]
4Y[Q;y1e
Bk0#iG-
LLl}8?8
$m]]Gr
[_ZCkg
ZW<`Hz
<k d#
:PQN"<
UqXU#$9
W'da\
GROPOZ
,Vu`Y{u
ffV%A
e8?xt?
uigm+\
dIRW'iLd
]@^G^x
=p=hv%
$zp1Z\
#C0ydfY"#
n/btK3
Fvzps
IZ4RTcn1
t7AZK[H
o_ZnW4
Rcc\ewg
Y$A_119
,y$/Nrx
HjAraa
p,!PK!
GA&#0
w `=N:
OOZcB9
+u$Cb[
s`j>T1
F00ppA
"VG`Yy
+^`">b
f)4yR3
AQ`!vp
O0"C$l
@C'O1I$
361/-o&N
endstream
endobj
61 0 obj
<</Type/Action/S/URI/URI(tel:18201783811)>>
endobj
62 0 obj
<</Type/Action/S/URI/URI(http://github.com/HorusLee)>>
endobj
63 0 obj
<</Type/StructElem/S/Span/P 21 0 R/Pg 8 0 R/K 3>>
endobj
64 0 obj
<</Type/StructElem/S/Span/P 21 0 R/Pg 8 0 R/K 4>>
endobj
65 0 obj
<</Type/StructElem/S/Span/P 21 0 R/Pg 8 0 R/K 5>>
endobj
66 0 obj
<</Type/StructElem/S/Span/P 21 0 R/Pg 8 0 R/K 6>>
endobj
67 0 obj
<</Type/StructElem/S/Link/P 21 0 R/Pg 8 0 R/K 7>>
endobj
68 0 obj
<</Type/StructElem/S/Span/P 21 0 R/Pg 8 0 R/K 8>>
endobj
69 0 obj
<</Type/StructElem/S/Span/P 21 0 R/Pg 8 0 R/K 9>>
endobj
70 0 obj
<</Type/StructElem/S/Link/P 21 0 R/Pg 8 0 R/K 10>>
endobj
71 0 obj
<</Type/StructElem/S/Span/P 21 0 R/Pg 8 0 R/K 11>>
endobj
72 0 obj
<</Type/FontDescriptor/FontName/AAAAAC+STSongti-SC-Bold/Flags 4/FontBBox[-140 -305 1068 936]/ItalicAngle 0/Ascent 1060/Descent -340/CapHeight 695/StemV 108/XHeight 446/StemH 30/AvgWidth 407/MaxWidth 1083/FontFile2 80 0 R>>
endobj
73 0 obj
<</Length 1173/Filter/FlateDecode>>stream
MyBS1B
endstream
endobj
74 0 obj
<</Type/FontDescriptor/FontName/AAAAAD+TimesNewRomanPS-BoldMT/Flags 32/FontBBox[-558 -307 2000 1026]/ItalicAngle 0/Ascent 891/Descent -216/CapHeight 662/StemV 0/Leading 42/XHeight 457/AvgWidth 427/MaxWidth 2000/FontFile2 81 0 R>>
endobj
75 0 obj
<</Type/FontDescriptor/FontName/AAAAAF+STSongti-SC-Regular/Flags 4/FontBBox[-132 -787 1015 936]/ItalicAngle 0/Ascent 1060/Descent -340/CapHeight 695/StemV 84/XHeight 446/StemH 27/AvgWidth 407/MaxWidth 1019/FontFile2 82 0 R>>
endobj
76 0 obj
<</Length 1680/Filter/FlateDecode>>stream
z5W\Eh
Z5M@NON\}`p\Z
+'UZ}0
8j9L|7
endstream
endobj
77 0 obj
<</Type/FontDescriptor/FontName/AAAAAH+STSongti-SC-Regular/Flags 4/FontBBox[-132 -787 1015 936]/ItalicAngle 0/Ascent 1060/Descent -340/CapHeight 695/StemV 84/XHeight 446/StemH 27/AvgWidth 407/MaxWidth 1019/FontFile2 83 0 R>>
endobj
78 0 obj
<</Length 666/Filter/FlateDecode>>stream
PhZg4x-1
endstream
endobj
79 0 obj
<</Type/FontDescriptor/FontName/AAAAAG+TimesNewRomanPSMT/Flags 32/FontBBox[-568 -307 2000 1006]/ItalicAngle 0/Ascent 891/Descent -216/CapHeight 662/StemV 0/Leading 42/XHeight 447/AvgWidth 401/MaxWidth 2000/FontFile2 84 0 R>>
endobj
80 0 obj
<</Length 34908/Length1 46716/Filter/FlateDecode>>stream
0B0b0<0
|{aDa
2)W)Rnv
*9]3w~
LsZ.L&w
[!-l`
kM9%h
yCh0hno
.HE.Z#
@Q6;?8U
q+=;J}
,%pj.>D
v'@{a*
.afec1
DCJ5O/?
52CQ%?W
6g*-$
]nJFIXSY+
wv'u=E
v3J$/f
\;z;zz
i>Ms]-
>!|v[K^
d>|~-c
J*V,e.^
K,G{5u8
9Z?EYt
5J|QPu&j
VZI<1*
^P#F<b$@XC
`=Lb42z
1^w2kn
olz0+C
x#&^fh
.>P6R[F.
y_5}%:
IFz<)T8~
VE^19*~
p: _n()
9F4vKqR
"^l^DtM
6aX.c%d
LkU5dN
FaS}jB
$47lw~
*T1.1t*'
c8.F:3
/riS.?KF[b
$3qf=f
endstream
endobj
81 0 obj
<</Length 18426/Length1 25384/Filter/FlateDecode>>stream
nc.V\y
x b|2b
lJ:X#-F
NYrIVJ
^|'yB|{YD
'P-'>^<
><v\J1
65mX=vA
piv}ti[
*k)kaY@i
Z{%KNQy
JNn Ob\
w4CEE^
)$8v9z
zI?h`1
?v]D+'
lV(/CTa
\&xNc3C
x_wZyZ
6NLaa2
Wh W+!$
`660"
?__?3Aw
2{YDV!
z'Jzcf
&UuV][uG
_h\b\k
%:Kb"N*p
IW<Cy(
f/0X>T
`cqS>0
1Q@@rFQS
:b=nUZY
gA]=g+1
ZY;wQM4S
uAM)0r&
5gh:33
!wN.w
(!rYQV
-[&&+:
St%Bq1!
HU[W0F
Hy=0Qz
$lii|uk
endstream
endobj
82 0 obj
<</Length 51483/Length1 70000/Filter/FlateDecode>>stream
izQo+iW
DhYhnh
?&~J|@d
C<N\C<Fl'v
vb+1B4
[+JNSlog
6o-q+z{w
b&bpX2^D
$)~t2d;##
5?R2U4X8
=Y$7tE
N>O-kH7
S?RCQ
QSDfZf
PMLcBS
3Ptm5
rScb9djl
2Ru_X1
:uO{+
m}s8V}gqy
aR-h/z
 T+He
bRz;Wg
`[xzMorP
-=<wGG
C_LVf,G(
0:,7k%
&6Smf
m]A'%5
PMrO]H
n+?:Z*
2/x"@`
^wG+/C
Y}~_MC
}!bk14z
N$].+$
t4=VfnCKK
Xen#?]
M7l<l3
Uvh*|U
^l/b8q`8
"xjN[7
zl_uD!#x"
c{6hk5
@2vf|*
'aqM4"Np
*(s5!V S\
(Z6S_V
vKULM%X
tf!O{v
4G85%1+
A-cmdM
4bo3Gw
'{t'!p
ISMM P
^!`j[Z/
jGy4a-
wIELOK
E#_<Ju
4`d-J&
Kv+Vn2K:[Ur,b
l3rMBl
aOWwQ
TP[)V?
cn$G}.
DA~@AoG
myV4[[
\~!y?9K
TGCc;)F1m-F
nH6$lBH
`h0,5w
6FVF4~@/
~izYQc/E
K%IgG
U`!>|Ll
5VIj.
v]-`:
\98xpp
}4]+.X
A*gM{.
Y- b(S
;BFwjE
!] tom,v
8~@,D{A
`:ll}.
S8a5x9;
Djuh@a
_ {iLZ3
3geX&wY
qG(hn[g
endstream
endobj
83 0 obj
<</Length 15761/Length1 20980/Filter/FlateDecode>>stream
s>g[82C
D]:d|T
6KI#B$
,8grR[)
oD7_w'
"pV%#9
{>+|;
lYr9{g
+DXAP77u
xS4K)^
$wwXQ,
VqgRyF9r
f+:v+y
p-h4Fu
&~L0[lU
Z5A9]V
"1yZ%P
ceFgMD
Tw/5eQ
d2Kud$
.VP9{,h-
;IO\YA&,
kpDnL>4`
-.WoB{
endstream
endobj
84 0 obj
<</Length 31821/Length1 43088/Filter/FlateDecode>>stream
--?]oD
Dj}N('
<&A,!t lG
u^h^x^t
nqUhUxUt
8_6M3~5
D(ip\>
+L SX1f"L
s+I>Y@
[q,"m(
):aahA
m$G3'b
)H{P?Ns+q
7i;5T[+
*keEA)+
;#}?`t
xF/]&_
&P^U5Jxb
;9p,A
s6fs&9
]0trDFQH
Az@6h%
u)j+W]9
W=U\+Y
?>nCzo
E|R<Q%
:oy%~
d>wV d
`e3vHY
:/;J.w
/77<Bb
S9iZT5
3xF1VI;
[pyAGiO
i5Z+qI
zg1>)efz|`M
/M^Zqi
&IEmiaI
s911$Nb
e"G`s
Mgq~F4
lkpgpO
\t%6<K
``@hJO
e\9_p_
$O/rUDl
[:UVub
#!<!&X
'0CGDk
BVloRU0
~GXBoa
X'J #e
}+(bq=
s!4yo|A
+/>j=j
}SW!@"
endstream
endobj
0000000000 65535 f
0000000015 00000 n
0000000103 00000 n
0000000439 00000 n
0000000515 00000 n
0000000689 00000 n
0000000780 00000 n
0000000853 00000 n
0000000901 00000 n
0000001205 00000 n
0000010982 00000 n
0000013687 00000 n
0000014566 00000 n
0000015169 00000 n
0000016441 00000 n
0000016922 00000 n
0000017476 00000 n
0000001728 00000 n
0000008181 00000 n
0000008291 00000 n
0000008399 00000 n
0000008461 00000 n
0000008576 00000 n
0000008639 00000 n
0000008702 00000 n
0000008766 00000 n
0000008829 00000 n
0000008892 00000 n
0000008955 00000 n
0000009018 00000 n
0000009081 00000 n
0000009144 00000 n
0000009208 00000 n
0000009271 00000 n
0000009334 00000 n
0000009398 00000 n
0000009461 00000 n
0000009524 00000 n
0000009588 00000 n
0000009651 00000 n
0000009714 00000 n
0000009777 00000 n
0000009840 00000 n
0000009904 00000 n
0000009967 00000 n
0000010030 00000 n
0000010093 00000 n
0000010156 00000 n
0000010219 00000 n
0000010282 00000 n
0000010345 00000 n
0000010408 00000 n
0000010472 00000 n
0000010535 00000 n
0000010598 00000 n
0000010661 00000 n
0000010725 00000 n
0000010788 00000 n
0000010851 00000 n
0000010914 00000 n
0000001543 00000 n
0000444223 00000 n
0000444283 00000 n
0000444354 00000 n
0000444420 00000 n
0000444486 00000 n
0000444552 00000 n
0000444618 00000 n
0000444684 00000 n
0000444750 00000 n
0000444816 00000 n
0000444883 00000 n
0000444950 00000 n
0000445189 00000 n
0000446431 00000 n
0000446677 00000 n
0000446918 00000 n
0000448667 00000 n
0000448908 00000 n
0000449642 00000 n
0000449883 00000 n
0000484875 00000 n
0000503385 00000 n
0000554952 00000 n
0000570797 00000 n
trailer
<</Size 85/Root 5 0 R/Info 2 0 R/ID [<5ea8932d169b1ee13f90407a9b8047c0><8e3e4fb559ad9e6b9077458601197c26>]>>
%iText-5.5.13
startxref
602702
https://chemdl.gangtao.live/down_xia.php
rname.dat
VirtualBox Shared Folders
VBoxSharedFolders
VMware Shared Folders
vmware-host
Antivirus Signature
Bkav W64.AIDetectMalware
Lionic Trojan.Win32.Agent.Y!c
tehtris Clean
ClamAV Clean
CMC Clean
CAT-QuickHeal Trojan.Dxh
Skyhigh BehavesLike.Win64.Trojan.jc
ALYac Trojan.Agent.Wacatac
Cylance Unsafe
Zillya Trojan.KryptikAGen.Win32.232869
Sangfor Dropper.Win32.Kryptik.V3dw
K7AntiVirus Trojan ( 005b56d51 )
Alibaba TrojanDropper:Win32/Malgent.2a3d24b1
K7GW Trojan ( 005b56d51 )
Cybereason Clean
huorong Trojan/Generic!5275E8365F456920
Baidu Clean
VirIT Clean
Paloalto generic.ml
Symantec ML.Attribute.HighConfidence
Elastic Clean
ESET-NOD32 a variant of Win32/Kryptik_AGen.DXH
APEX Malicious
Avast Win64:MalwareX-gen [Trj]
Cynet Malicious (score: 100)
Kaspersky Trojan-Dropper.Win64.Agent.aln
BitDefender Trojan.GenericKD.73402070
NANO-Antivirus Clean
ViRobot Clean
MicroWorld-eScan Trojan.GenericKD.73402070
Tencent Malware.Win32.Gencirc.1412ad9c
TACHYON Clean
Sophos Mal/Generic-S
F-Secure Trojan.TR/Kryptik.lymft
DrWeb Clean
VIPRE Trojan.GenericKD.73402070
TrendMicro TROJ_GEN.R002C0XGM24
McAfeeD ti!0FBB21DD4FD0
Trapmine Clean
FireEye Trojan.GenericKD.73402070
Emsisoft Trojan.GenericKD.73402070 (B)
Ikarus Trojan.Win32.Crypt
GData Trojan.GenericKD.73402070
Jiangmin Clean
Webroot W32.Trojan.Gen
Varist W64/ABTrojan.BRAX-1927
Avira TR/Kryptik.lymft
Antiy-AVL Trojan/Win32.Kryptik
Kingsoft Win64.Trojan-Dropper.Agent.a
Gridinsoft Clean
Xcitium Malware@#1rcwuq7qekgfw
Arcabit Trojan.Generic.D46006D6
SUPERAntiSpyware Clean
ZoneAlarm Trojan-Dropper.Win64.Agent.aln
Microsoft Trojan:Win32/Malgent!MSR
Google Detected
AhnLab-V3 Clean
Acronis Clean
McAfee Artemis!3D2FB2E11141
MAX malware (ai score=84)
VBA32 Clean
Malwarebytes Malware.AI.3902949423
Panda Trj/Chgt.AD
Zoner Clean
TrendMicro-HouseCall TROJ_GEN.R002C0XGM24
Rising Trojan.AntiVM!1.CC71 (CLASSIC)
Yandex Clean
SentinelOne Clean
MaxSecure Clean
Fortinet W32/Kryptik_AGen.DXH!tr
BitDefenderTheta Clean
AVG Win64:MalwareX-gen [Trj]
DeepInstinct MALICIOUS
CrowdStrike win/malicious_confidence_70% (W)
alibabacloud Trojan:Win/Kryptik_AGen.DDG
No IRMA results available.