Static | ZeroBOX

PE Compile Time

2024-07-30 07:22:01

PE Imphash

203d63d5d9a088e2d84cef737227986b

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00001000 0x000075e6 0x00007600 6.1819039499
.rdata 0x00009000 0x00001f48 0x00002000 4.71606269145
.data 0x0000b000 0x004f0e08 0x004efe00 6.48324401535
.pdata 0x004fc000 0x00000180 0x00000200 3.11050609155
.00cfg 0x004fd000 0x00000010 0x00000200 0.151271325305
.tls 0x004fe000 0x00000010 0x00000200 0.0
.rsrc 0x004ff000 0x000003c8 0x00000400 3.12351086965
.reloc 0x00500000 0x00000078 0x00000200 1.42595751429

Resources

Name Offset Size Language Sub-language File type
RT_VERSION 0x004ff060 0x00000368 LANG_ENGLISH SUBLANG_ENGLISH_US data

Imports

Library msvcrt.dll:
0x14000a960 __C_specific_handler
0x14000a968 __getmainargs
0x14000a970 __initenv
0x14000a978 __iob_func
0x14000a980 __set_app_type
0x14000a988 __setusermatherr
0x14000a990 _amsg_exit
0x14000a998 _cexit
0x14000a9a0 _commode
0x14000a9a8 _fmode
0x14000a9b0 _initterm
0x14000a9b8 _onexit
0x14000a9c0 _wcsicmp
0x14000a9c8 _wcsnicmp
0x14000a9d0 abort
0x14000a9d8 calloc
0x14000a9e0 exit
0x14000a9e8 fprintf
0x14000a9f0 free
0x14000a9f8 fwrite
0x14000aa00 malloc
0x14000aa08 memcpy
0x14000aa10 memset
0x14000aa18 signal
0x14000aa20 strlen
0x14000aa28 strncmp
0x14000aa30 vfprintf
0x14000aa38 wcscat
0x14000aa40 wcscpy
0x14000aa48 wcslen
0x14000aa50 wcsncmp
0x14000aa58 wcsstr
Library KERNEL32.dll:
0x14000aa68 DeleteCriticalSection
0x14000aa70 EnterCriticalSection
0x14000aa78 GetLastError
0x14000aa88 LeaveCriticalSection
0x14000aa98 Sleep
0x14000aaa0 TlsGetValue
0x14000aaa8 VirtualProtect
0x14000aab0 VirtualQuery

!This program cannot be run in DOS mode.$
`.rdata
@.data
.pdata
@.00cfg
@.reloc
uKHcQ<
AWAVVWSH
[_^A^A_
t.ffff.
fffff.
UAWAVAUATVWSH
ffffff.
[_^A\A]A^A_]
ffffff.
AWAVATVWSH
X[_^A\A^A_
fffff.
fffff.
AVVWSH
([_^A^
AVVWSH
([_^A^
uVHcH<
uZHcP<
u!HcQ<
uVHcP<
upLcB<B
ffffff.
AWAVAUATVWUSH
[]_^A\A]A^A_
AVVWUS
[]_^A^
AVVWUSH
0fffff.
@[]_^A^
AWAVAUATVWUSH
ffff.
[]_^A\A]A^A_
AWAVAUATVWUSH
#ffffff.
[]_^A\A]A^A_
UAWAVAUATVWS
fffff.
[_^A\A]A^A_]
AWAVAUATVWUSH
8[]_^A\A]A^A_
AWAVAUATVWUSH
8[]_^A\A]A^A_
Argument domain error (DOMAIN)
Argument singularity (SIGN)
Overflow range error (OVERFLOW)
Partial loss of significance (PLOSS)
Total loss of significance (TLOSS)
The result is too small to be represented (UNDERFLOW)
Unknown error
_matherr(): %s in %s(%g, %g) (retval=%g)
Unknown pseudo relocation protocol version %d.
Unknown pseudo relocation bit size %d.
%d bit pseudo relocation at %p out of range, targeting %p, yielding the value %p.
Address %p has no image-section
VirtualQuery failed for %d bytes at address %p
VirtualProtect failed with code 0x%x
Mingw-w64 runtime failure:
__C_specific_handler
__getmainargs
__initenv
__iob_func
__set_app_type
__setusermatherr
_amsg_exit
_cexit
_commode
_fmode
_initterm
_onexit
_wcsicmp
_wcsnicmp
calloc
fprintf
fwrite
malloc
memcpy
memset
signal
strlen
strncmp
vfprintf
wcscat
wcscpy
wcslen
wcsncmp
wcsstr
DeleteCriticalSection
EnterCriticalSection
GetLastError
InitializeCriticalSection
LeaveCriticalSection
SetUnhandledExceptionFilter
TlsGetValue
VirtualProtect
VirtualQuery
msvcrt.dll
KERNEL32.dll
+542#'
0;<8*+
32-) #58=#
69#L9;
?3:4J6)#L:^
69#L7>
"00/1GB
W9#L:^F
1.C'2)
69#L:^
69#L:^
69#L:^
69#L:^
69#L:^
R$P4&J;U
[-&9:^
+6?@S(P
>21E^8>4
\"C;$9
69#L(GX
Y6D62_%R
>"1E5X>
%_V'96
.=$?=^
XGA;,\
G)]?@E%$
[#:>>
\7P5Y6$
CA^D7!
,I,W"E>
*<C:/
"%.?5V ^
$%RG?Z0
2&$'9?
%QV;2=
9D8/5'
%&&))3
8Z5"1E
9'+&+B
*==3R&%
Q[&DI&;
6AI-2*
;0)#E]
$?9>3
0]Z7:>"
:/?($,#
4'"Y9
\-/FH)
^9E4'^'
P(<&^<$
0^F3+(,
69#L(GXQ
+I/\?^
G8U2,#1
<:-"I*;
0J69#6
[8#H,C
0#!06FA
(&?@:B
2+0@/9$
W%159&
<HS!#"%
2+0@/9$
.A^@7!;
'$ QU/
&\<+I,W+/
*!(Y?C
G;0)#E]
:8_F/-F
_T0+,#
+&7\E
,;^H!"#
&<,F -
]*4OU55#<
FH)8VDC6EM
%16<+?
PU/$<3<A"
.!_%R
U)3,M"7
69#L-?'
&1_=V:/
4&E*4'
Z9'/$;B
69#L(G%J
@%=M[4
!9;-)S
/EE3:4
SL9##8
)569#L
4[X+E(>
"\0$T,
S:^/22
G3*<C0
.%$QX
><ZH-;
@Q;F^-%3
2/0$69
\&J#IZ
^+\A)2B
PU'$>/$
[$^9"<
*$; 2#
_QC'U_
S, 727(9
%9#L(GX
RQ_/<G
_&"&8\4""Y
*>G,>\'
69#L(G
*<P/;#
%42+0@/9$
]-3Z+Q
##F316
8&<67@
?.&!*GB
$HE*$2%)3
(V*6'D
PU+$=#<
,:G4G+
I,\L&,[I.
@L:ZXN
',$C,0_
9'40/0
;^2V+6
[S]W&H
#L:ZXN
L_;G?3
=[,'[7
-N,?:8K&2?
]60"/G
:7#/E#
;LI;F73:7
])7L:^
22$C#
G,6?@/5
;^\FI+
P%\;=G=
,6BX$<2
5F?22=
13@/;&$
"&7.9?
_%&=$0S
_>5V$
D.=^R\
?&P6**
?'"<Q(
65&C)+!
2.US+0
'JE=96
*_<HE=5
6J0\=
N^70L:
<55G,2
R?$P523
?63FH&P#?
!!^%+I$[#GF5T
-2^_%;9
7W5&J8H7
)]9#L:X"-
"C/]&0!&%
(,CDV%%2
?-2++:
0+Y(69#M(U'
%'Q+93
^#'L:^A
)G:$?<
8VF,=&)
=4;:=P
5=^0"1E.)
.9$J'+B
=Z&(_&/=
5%;^7G1E
:$%R5
?21E.)
C \$"
-=JF(Q
"CV5?^)
,)A5TZB
YKC@@_/+Z3:6
V9U'_J
76?@E0!%
)GA$^'
>:'JXY7L
^%@2@M$@
69#L/G$*<
"[6(-'
*@"2#>
?_2W-/\
653K0T
['^1)V
6F[8AC
=U3Y% '?,
J-&GU5+
/8A \$2
%3469
T2XP/1?RB=P
GCW*<Q
WFW%GB
600<W]5
)^=!--
.%W]5X
8#6"%C/9?
[2V*<C1 7
^\GCAI)
&<P*"-B
$E@3:6
5$? 93
@$6I$:(
62$C/
VEG8G0\
&Q0''2
$0N<,2
4R6;,^
9()&PO
</>>)5/
'+:.),Q
4&N_<% ?,
^)^B9*
&>VG,Y
G3E4^EA
(F;76032(
$P%"P4/
830?SU-&,(9
?L:YJY8Y=
$6EA:5'
&( *'
((G3:7
3!69-L;
FD\F)&?@
ZGR*<P2
CAI>H?
-UE!7P
_$25+"
<>E@3:4/
_$25+"
<,E@3:4/
-UR!7P
_$25-:M';
[[4/Y)4I,^
-#^5:'
_>21P^)
9#L!;<.*!
./^1D%
'G)%&* 93
4)G;?
V0"WG25
)+&)3Q
65!9:^F
4Z-#KU
5,*8GC
C,(9$2>)3?69
)D)%%'
</9>7%/
S!683L
'<$43 _
9)#L!;>,*&
WF"/>1Q
,13@78
@Y[=]C
_&!5#/U-
/!@F_"\Z
5B?="=
4Y$4$U_
%P="=
(T9#7%/
G3E4V0H
2,YN69#L%]0
G>]?@/5
G2M_]+B#
?_5U#/
5:%2O
64&</G;J;<&
5\@J;."$
*8[D:OA
@$,5Y5
_G480_
9D48^'
Z>.<E)
-."/*2#
_'7\69
.;4%R5
0&!B 9F)2*'
.9!/*^B
$9FA#^'
,13&/\)
]9$=*^B
^!!7:
"CLM'8
[)G>$?7G
&Q07<2
]-0"W^
3^^31$
418 ,2
$^1'!AG
*7]69 HU
&29?$T;$
_%UH']
)TA!-%
^0$#RC7
"*5<$&
%? -
QP'C)G,
$5/L:^
:$%R $G.
CL!;>,*;
'+8W),Q=
#L(G+.?<&
RA(H0%3
^GCB__
.%U,5
63;K'+
'G)%$N$
'+:.)*P
2.%U<5
:^<G?<
69#KR+1:3*
?,,"5
S$=;?21E+
+B"5E<9<
2)H' 7
@WF8]C
P'\:>G
I&.%U,5T
^0$#RC
713?:^
,50=&&
?/<+%_7
)TR!-5
^0$63@J
!0$60@JP
5-:L';
G*]?@/97
V,"(^8W
69#KR+99#*
)D!^'
@#<>51Z
^[;&'
/Z-#KVT
_%UH.Y
<11*Y2
0!WGD-
)+&)<&
%73)W^
'!_==P
?/<Q)/E
^0$#RC
RQ37 "
0^^H, +
^2 E=P
/7ED-E
2+'=69#L%
6?@/97
"P:;$21E
469-I9
X&N93
;^3V8&
&D)3:4
<)6"4^
Y$)3 _
&F#EGC6
?^N'X
Y%RBY1
@/>Z1P/
&J#I3^1
Q#(&GB
;G2^$*
5,**4B
J)&EU6^
'3:7,65FI
3.5=\R#L:
%';A"C/
3:6Q65FI
R)3+>'
''^%D!
3G-%)*
"*R-<
&H'3:7
<X/46
6F#F"@
Y)6I5+
?^N3Y":
Z2*<Q
$"A;5\
*"B95)
'L:ZXN
9'40%3
9'40,3
*"@=5)
9'40 3
5%;;+21E
Y##07<
''^JD5
XF6^?3) B2.)
Q_Y";%H
G2@IZE(
-R-P#H)
9>@== ]:
9\C<-,
?E#SY!Z-^'
")$<A-V
/A?^X)
$6)#LV
?ZV0OW
&]"7%P
$]7$$
G;0)#E]
;1<6 7
)FX6E-6S=
^^+A;5'
>H-55&,
2$$3)?
J29*G
-Q 4^H*&Q
PY<3+BS
G)&<93]
H7;#'$3
09?&F70N5
?CD^X)
4&"\&8
9+9JE<Q
-55"(\4
)5V(.!
*1X)Y2
88"3>7
UG%R>,
?,G"%,
%0Y)1$
>%/8%/\'5"24
?0$292
:72*&8,5? /S$!5
;&.19(/!
/0 C +
62=*>;3;
-?Y,.0,
4;6]2$(.%031,!$
Y(+ , +:&)2
8$24>!"
5"8$$(0
5!-"'8>
!:)#/6R!$'
C3"<83"
C24)=?=1R96
%$N=!/8%9
1+*&'5:
</" %&00)2$
2!/ :;8
P<6$:2!
51))=1R%3
%2 ';17
?+/'5.#0&=
4*%?.1
9W<:/
-.^<:/
?,G"%,
(>!)G=
69#L:^
69#L:^
69#L:^
*7=657L7
03^1GC%
+*4*63'LP;
#[%&
*6)68'L
*7S667LV
69#L3^
1\^#GC
%*4W62
H@E%04
3@[%5#
H@2527
';^'/6
7#^&GB1
6+^$2CE
64DL)+
@@&50J
-^CV*?
7'^$Q6
*7566DL
;BW*3"
95$56
1X^=GCA
64LL*;
"^C&*:
?'%$$6
5;B/*="
1+^#2CE
62#L'^
';C5*9>
6/^#2C
%*4U65
0;B5*:2
?:%'&6
69#L:_
?,"P%/
69#L!GB
?"0P%/
?/CPP/
69#L:^
?-2P5/
?/>P%/
?-AP%/
69#L0GF
&)U!#
,- 0""
1*!7,T
$=?3E""
^+$ <?;4&<
/&#0]/)
:$>(/Q")9#L:^
P=)5?!&
)G>F%,E
-="14)
, &-*;8:=>*?,
3(&27:6
^27C0!/ +(_7
C,1*!9)6$
;$C2%?E%
?/+ 0$$0
+/4&-0
8*)9#L:^
,)$=>"3)Q
1*P4.%ZD$# <1
7*9>)3Z&!
G 3??-
3:92,5
3:4]+34
?@#?Q0(
<4$3Y$
:\+&=0
U_C5Q0;)G
/&*D1_%
_ZVQ\+
0_A5Q;+)7B
BN)=->3
&/+:^1'
B$$_ T
6P_!GF
69#L:^
69#L:^
69#L:^
69#L:^
69#LS_=
69#L:^
69#L:^
69#L:^
69#L:^
?3:6Q>9#L
^5/;)3
>3:4W-R#L'G
69#L:^
69#LW_=
69#L:^
69#L:^
69#L:^
69#L:^
69#L:^
69#L:^
69#L:^
69#L:^
69#L:^
69#L:^
_%V4F;%
I%<JM;
!'YT52
V-K8X
4!(%M2ET
69#L:^
69#L:^
69#L:^
69#L:^
+542#'
0;<8*+
32-) #58=#
=0^@4C95[
3,Y)'4
-)!4#0
)#(%Z4
+4C915[
6^ ;$?"V
&,Y)/
5$@&T9
69#L:^
^0&Y)?
)">>Q]?@0^3
:IH%;7
69#L:^
69#L:^
69#L:^
%>..9/
!?)8=X.')6&
":27"%
1\)^1
TP5$ L
> V=:GK>
E1DF+?5!?
,=Z2!-7
,$DG? #Y
+BE6$!,$
]^N*[Q%>
2I ?0/R
->&$(+
)<0))P-&
=7-#Q?]"
GQDP/>^+"$
? ::&,(?<
:&/<T=
6D%^!&
#=8
S$69<;
6\![&-6
4Z"X(\
9#?6V6+D
"1>2/")2[V
/VP^79
3,.[',9
#=3A),
=@'2-Z\
;\;(",;'#
P;>9N1
@-GCZ
W93..:
/]E#G=
3*^;<62
AE@F'&(
-[8UE#<*
Y2%R07
.R62C#
^AG!2Y&
_;TWJL09*0
R $?9<
L:^5W6])
.43L.?
DW%E?2%
B"@6":
<-;J)4
#.E=%G
?_)I:'
]A5*S[ID
XG=-^&7$AF%WWJD.':91F
'!ZP'8*FM
O;$>"-
)#,8&#Q5 7
18.EB4#
^573:A
&)8SJ[
:.T\#&>2
>5$/X#-@
3$#U*1)
($-Y8J:"
=X31,=72
>E 8:
S'.?:2
O3]5)?$
][Z,9
RQ3 J>&$7*+
0$*Z^0VI
+R2CT<
?G:2M"E
*^4.?9 M1T
6#>@C
#/>A!F-P'G8
_>(+C84UV"'3
<"&U$3H
0"-WWN
Y&("9[
40)08I $">
4 ^,A03-
-@?$^%$
41/=8)9^;
9=_B;>-
[W\+B$
9^@G<;
>QP9:%6E"
B=\8[4<0+4.
ZD<0#R;
,2UW;0
/ 7).^+
;T7]_
X)135^4
6B#&#$
>1E7-;#R
=A$48
)&20A;"
I'-2W[
)_A-S<]5E$L
+*C*SI\
84"??"
43G,=0
SA) /Z:G68
+;2OW?J
':R'+
YML,(8
05M]+E& =
U<$B2=9?
/6:5389
Z(;1[2?N0
BW:)C9
5D&2K;4
4,V %B
7OF5,>0
< #9(&
#^]. ,
(#/'_"X
@?>%V8
CC34@V
)(!G52(\8"8
X'[,&I
%?,>"Y9X
#_6E/,
C$&[9Q
=(A4*\
0/0&"*
\%%!T
<X$IZ?
&#[J-^
_V6Z^'\JU'
3(#V -
:\"<E5^45
TA>,GX
<\D.X2:2,
N",^5U
-%F5%/*G-
7Y)65'
%>.;/7
8]Q#'P;
%/9)"Z
;&^,Z30^*S
AGFC0
$BV6!3
6))%#*' ,
,3(1P-#0
L$/46C&D^
:+M [I-6!
[XV,Y
,V6B_IY@
]X7KH\)
.\^+Z-52$&
7_49C6:P+1@
!$):%Y
CS2?=1,
(2R"L1
8&'5.I$+>>>
V$0->$3V
)7IP&C
?'21;.6
@V%!,%
V<7P'(
<VZDD89
'-^85U#AA
-.?8
]>62B*
E/D(&
: (W6630
^S#?V$
Y@)AYC
]&!)U1 [
(!1#3'M*
S7)+=-9
"<'3N[#,M
# +B_1?W?
74#?+_:P_?^
"-^FP4YAJ0.
=8SGB:]B-(=;;1P
1)!(;
.?;= AM"(
D%9'2XI
68+))Q1<$ '>P
-H+49 7
5A93\$
4)!&0=
)+%-#V,
;;)98+
&I&X$2DF
,PS(&$
U<N:\'
,$7C@_
,);A#EA
?; JV+*X31K\
3?J#:#P
^],66/@/Z*
R;)&X
9#1G2Y6@9
R0I$$ ^
9'RU=A
9&Z !0
)!;)>'
8#2[&\X&'I
$(1_3#
/>FB,:45_5%,"6
^="0]<0
!<L.$])
4M9GU&5F
0FY'W%N.;%Y@\,
*\<)"B'
8/'; )9
)0,0= <
P16&G(1=<*
$8#S]
.07I. 41
C5-4<]0/
TT2R$@/*
96DSY!
2(QT*J
0081 >%
9 D&$H '
/!%<D!!)
53-%!9
S 86;T0&
HUT>5!@[O
##6$*#
@\)L$#S;
1-=>0]
'!^)38
7 #1S.*4
:4#-S9
#,6#:+S?
E.S1_,M
1$6)0\
*'98;++BW
+X0\$X!3
2P*S3=(
"C6?+6:.
>%F_/I
-- ;GE.
_BGOE3X<
Y*N89_/
8;JVWM#';%P
%$0="
P_,4OR
_]4R"$
3_+&6(
X7>->QP96X*S
1.P+Y.>?6
$<\,!U
8:6^:Q
"B@7A=
*'%#
 .;UP
+^4<\%-
JW?@29XC1*#^
#H# #I35
/1*^J3
(22FA-"
_*\&\CT
5%U5C!'=
'%%[1P
3US9,8$^:^&6
78(23[NC+R_!V
%*>,>)
;<R 5*43,
^)F^"W
Z'2)53
85_RQ\%
^ ?7([+
"&^;Y.)(4QU4"P)@
555='",
? !ZR,
[S]7+I;["^
S.",(
WG7)G
+%+ ?4(X]
5FM,IH.
42 2 :#2F
)63(\
:KH)"
9-0-<$$
Y+*.ZU
EA&3#&
1').*0??>^Q
)% 68
@>]X%V
&T$Z:U1
%Z0J?.:6(
[+.LX^
2[<+!A
:>8;%4
&=[,"0
PK&WG
& 77+H
D4Q;,*C
E&&W)V
SE\YU$?
0&.Z10>.7
6(+]5R
.\% OE+<
ZD]."4
)",%8"R
!2-2$0 >DM<34&;&:\
0;!0ZVI
R93'#-.]:4
#)J'J CG/
I.M^\;
6<EZ"(_
P7+:@
Q]X63,1[7
14#; @
J+^>J!@+
5".- 7Q
J5=#P(
,>=A?:X
"@:$0<=
<'<_$
Z7(!?+
'X[>&8
\,5D'*-(
[S&,Z]
.5)>;2+
74F,C,\O
?-!G")2<
CRC#9=
,!'&TJ"
#>6+_Z8
'%'-J!9
Y_')WS
I>=C:;P;
99#()0
VKC@>U
>((%3W
;=3_.9!
6;&A_V
*%-L)HG5P
YR/?.*D7&
X8/!>/$H
B8]7('
C17(50'-
\B^"[#=H
=_T0D#
$>N)("W
"L,ZCK
0<3> NA:#
GC?((B'
K;G7#@
(R7.W&&
)3 M"6
<-9(CO9
6!\P#]$7;/[
4(=5T$:/
EE@,7P6\
>Y3.V.>
<.$)5>)#
Y!(; )85
"\'(3+VZF
Z";?!
(G<)2</
472_1M
MNU?K,5(C
;U8 089
!_F(( [9=\%
(:)47*9
/>P%G S4,2X2
H47( ?&/8
'868B$
U!=+<>-
"?;%+?
<3+82%/:J
%^%#-6@
>A=[)*
W:J1;7
46&('8
SU'6?#-)%#^
S=]636
TP Y7/
4,:C#-:
@& $_=1
I(%9$!)1 )
7>$2YY\5
<Y97-9Y
2 0:/
[?-[09&$
3!$6Q*^
B:]/36
.R&O:4*
6Z&1D'
&UEG*;!
>'D],)&=
6,7"F#
D1'>!)
2SV]\40
=&871&N/
ZT=5Z'
/B[T)2
7<].7(J
+4'([#
;S^Z28
#+8 7=V
#E:>T3
;@$>5&,8
17;BN ?GN
,L -+6
0X[4Y&
PCC".89
I9$!7=C(
F66%"#E3+
>;07*>/6
&3:K<?
=0MO5%+P
%!P&%>?"7M
QY)<<7!G.3
D=-]C+
%Q^P9ZT0
<?91D""
U#-F<6^)
1&AP=
>\H![
30<TP=
#(_'"3
+*?4FMA7?#]J*
$"*UG0%*
XC3&8$R
Y%9%& $%
G 0F,[
L]@R.'
1+Q[?/
?'<>3''
2UP-4-
%1+YDZ
"!;&G(2]A
Z5 T)U,
?F0&15-
!H49];
'3(*3$5
+ Y7UX
RS0 :C?
[,#..$
#<0GNC
/]',:#2
-&:](
3?7<#_$+
X'R!+M;
Z4(B\^
<NB'!6=
>6=!#_
_% _)8
6H[^GUDS
4-0YX=9
;R%$AL1/
'"=6@Q
>07#!'#
E;.*1T7?3$>
^H_5)*,
^^)%&\+R/#,T
>5+VA2
9>9!C%[P#8
2'?6";D=<0#&T
!Q*T;RC
;;J >S
>(E49(
&5( "S!
)X)7R0
:H=T#3
Y"]4 ^
#2&-Y%"!3
X_,]AH
4Z&8%)
X\;(51
4"57]!8
PW(6/P-143<
74!Y1@E
;*Q631&
@ )N<["
"$3G"29+#H#
X;>%<>W
[:>9 4
\X-190L
?&,A9>G5
9&RHY.
5P%>=/*
88[U+8Q
>D6_#3
925:=
)03X:\
)3:%+D2%0
2#0TYN#)
W?J"!:\.]
V*7NAY
5+2=!)KS
=-? ?
_Y K[\
UF&*$
=8S/7S
5=8J=-E%
%&('!N
9!'>;+3<>\9&M
>4@>I
PB\@G8.V
]^-'+&
\7'Q&W
5,#>9=05)
S8'"?+
A%'?:M8
"8)+%R:%WC
\C#&:Z0R
9[XJDW[+?P
6;F5,HD[Z
T6 /17;
/X=?G+W49
9C:G-4
0;YF'
-Z1.Q\
X5X:I
=<#,\)
FD5E>%S?8
<;U% V*
< &F_-
S>&V/<
4\:*!$>M!
2',BJ79;A4
<<*2\:
&+4(Y."
%,41A6
S5Z\8
Q4!422C82
2#$$^_
.Z($6,>
:T0^+IP;F
WV.NG$X
)\;1RS[
PF^C ;
&&&=%??
;S"YY
P[1(<4%=%E$
%/2DQQ0
'?,S,6
+)@6<[37E
M86)+;F_7.'%V0
#61D)"
5P["7H
R'(+C=.!
JN[D&3,
;XTN*YC92::J%<[
89!Z2-)(
->["5=1<
2(5&#&-
$E>_,&
>2X^?$BD1%
:E:%>+;
<["6__X=
:Y+PA9^
-:=40, ,
F9+.)8?
1..D2
(5@2)2
;80%:,BG/$
5&#WU
+' +(<
6)G8" 97F$
]?!0G'
M6 *4)^
[':G0.I"
)]:@,Z
909;97T5SA $C@
%9?85<-LK;%%7
=%%$;P
VSH$1?>8
=>_4,?3<8T0@
0^;FB7
;8!B,,8
ZF+ECN
^Y!Q&0
_I%3<8
1>5 JS
04<.*#T
/+XD$.
Z7D!+$
7![_>"
V%+9C1>4
4\""8
BS!;D?&=
<$_\&
8*^F:M\
< 9@(.#
N9H3#.:'>BF
4DRIY$
-\S5,<3
4+8*?/;R
-'G;.I
<8XI\#+
%485I'5
[*,G6N%"
9'>(1_8?
-=[XGE0?
3 )-&##B
8B8'!T
,=AH(*
,_%Q8,
'59].
;*!Y6'
"-<49 +H
^B4)^J'U
\*S7K!-E6
9!;ZT^%7
(Y8=P)"
) _DY)%
?@8?52'F1
UM;#)=
?U4=57
)*4'';E;8
+&4K&/&Q
&H1SE0
8*;'F'
65.:##
:,T_#G
.15 8$.?
B(=4J3\\
0XC$$B:3+
<1>)?9
0?08 =
' E]]N
@DS_33
V<#Z*$W
-$=8PT
/G-/(^
O7T-<5(
PL?2\'
)!2.ZC3
5X%)3,28[4G=?
^2+"P9
1_?()\
=R?JUC
5$+04
+Y(X=[
'* @Q
5%<89,(1&D'
#A3:>#
^G;5.C
5\>%!>
Q]0<G4Q
@H::%J3
# "QX?
;>CG<5!&>(8$V7 6
_[88#-:
4*7[/E
&6 ;KQ
,$Z#2<
QI1"+$4 +
!I(9!8
^0-'=6
8#( ():
L(B>==
&X4S]$@I79+-!
%<"[?->
"(;&0
B5(B1'X/2:6<;W
97W'Q-O
.<#BCG?
B%H9'5
&2WXR'
V(FNA9
2>E4%
*(8^'0
Y$V6;_
*;QR^7R'?
E#&.-I!FB$
)08)+4)
>S;+J$BA
9(5_A$"<[6:#)^;(
*A<69
NAR7(B]'
&_7""7?35
1#"0-()
(DR>+1
'F%#-S
SWQD X.
)&"2%2
9._4#@'
0*2@"2S,[BH
4"C5X?
<\="6!
^ZT7>
2'%6"%
49^*#!
#;;6+>.
_4"??%F)
P^<10[
X<;0-9'B
[:XA;!R
X)%6_H
G@[3;2
QQ:'":N_1
U-6(F"+(
?(X$;%
C/$U&%
47P64LJ
]#W#%$;&C=3
;>G6F1;I>
,(6T6@P;/V,+
26%I*[3
*'B:)9)
[F2%&%)$%
86B:Z'
-7L7_!T
I?8K10_>16
%^60]K
&,= 22
<6'5X%
<F^%H;
9S!&*A
W !5!O6"'0:
T)2V+'
2=#()31;
*Z7Z@&T
7;.UV-
!7#)C'^(
ALW5XQ
&/_7S6 X<L
(P/I&G
>0 )4 .
^_A54B
$77ZH\*0
R/J&Y5
Z3-#Y3
.^<C9-2C
DZ&-!^
::O953
)>$9QE
&.5736
.$KQH
[F&*G1D
;&M[4\
=BH3)9
! E7#^
+B4:P*
8+%_'S:JZNT)7?X
-$T3A!
?>E<#+
G6AM64
*, U3++
M2MM_'E3
?=M_ =#
 D ?$
?74N@>
9-:0V<
</=;28/
8W@^;
:;2Z\&
Y^0!$]D
=P]V'7A
6!*0-]77 2
9&_)=;!
0:;$1E2:
&G5%53
:9/M6XF2
6&,,U9
C8X?. 9>LP
3<-5E(!&
;Y8CM792I
22Y6/)
^/\6Q7X
E4=2AH
=2((@&8\;=
U^G#)<%6,E _WE
GQ1+2+F)GO
:00&ND 1
4\Y2&8
%+$;E
0%:2"(
7X6J089
GK)^JR
[HSB.(
+5[]7*-
<[[#=)
?L&I.%,=C7
N==S%Q
$X$?5GB5A%
M:MPE70
._70Y*
?X3#D4P!+<4=9"&
(&1Z>S'\
0F/.1$?
>!"H:_
4!&C2)
RP'V8#:%>
;( ( &
*Q*X#>"1;(;
1? 54Z< <
23+B]0?
Y*5XEO2
R\C63QXED
!0(R$
'6:A)9
A,.2=,0?Q
47!<?B">
<)*@$ H_+/9\GX
JU+4'H:U;
<,?>%($R
+='=*S
2?+%T(
;,M<R
"<N2-$>5
JD)$C&
FD<<+Q
:=B7*=< (
*1>D+5B+
0 4 ^:0>
4".1:&
?Z;F=)G
&\?5--6
:BP5B
C4$<9=
6GB*6 5<&
?-GE7$
I,9V3,JL76
"E%76*
!);%-<$
3E_,A#0X(6
V9B]%,
- X6C$S\%
G!N9-
*W6C6,#
895CS<
Y*M!1-
J 3 )&C
!NH>B& ?
)HCER"Y
?.:H$
$;R (-OY $+
>)/L'5
?<53#3^
#%-U?5
?C["#&
'EA"A)
3R3V0';6
2O<"&(E/3!
)3^?<
=;'3N.
22D#/9 99(6
$AD!Q#
M2#!;,"+T,
0[0*E/* :
@/=8++
_R!LL]
&*%"BYQ
4#>,ZBU!,]
X3.7_4?
0?X4=*
!%636@;Y>1(#0
$%Q8":
'-6U41
?\B"XC
=B1*#)
Q"J8K0;1
722E06F
.<E#*\
?+2&,-40'Y/+
\4"3-7,
6#;2/#=
/"?29%R
28*]$=>
!I0C5%H$
-?__%0=)X+.P=
Z06/P*,>9$
O/ KP)[XB31,5H
77H)PO
&F/A</7
?5%N_6
& 669F+
Y):N$"
=$^$9
8%<3_9;
B ;Q=X
Z%/!'M
A-=669
1-9^[Z(T9S^-
SFS PX?
0H#^R
R"_XO-Q
W((:49
;=?86=
L*^;%;[J[
F3S_'?4
/HR?\"R
,3 W2@
,V>8 I
.,8],"
-8C*G$8
(=5I3>
<?V'4^T8AXG=<P8
X(5X8
8?-5$5
]47O2%
[_+01P
*V"/?@<
Y8=971
8R(S%>-
KP%K,)$
%ZF+9!AL!
8\,=#/
)]FP2:'E-!_F##/'
8SP80$
#"&3(#
'#7)GB
:^*J48
P1Z'$>@
C*%!(T
2A[0(<
(;<-]Q
\?P)=+/
9C2+!X
X9#8/'
L6T<Q[
)53;%)
ZB&A["
4PG#;
&)+..-
'(/B2\
'#.9
X2%(X]
)2*[6 #P"#RI
D&,<922
')7-#@
*AO:#6
7^60:$
&2H67#2
"1!]E H^
C^%+5
&Q%?6"
03[FS7
%2>6(:
H#K$I%P=
++25- _
"_H?8Y
+'-6S?(A
J0 8V8
% /6II
823+(/
]U4"[
"XX72W33T!
U3J+N7M([
SQ#7>!
""1[%^
B8&G;B
&!:]?
S%T6*Y:
=V$[#876&8
Z)BR&<H#,>>*9
->:EB'
*(!*$'YE
(DH(>'VW
,5R,3
$2$Q-M
T"P:%#
!V9 3
(;0D#DO
_4 2&$(B
/T8%6,
R&.@LSG
G! ,]>S%0
WY#3.]
^1L#+S
YQ)$63
Q_@G$'"
5$4>B<!X
D2D9)+D*_1[
3Y'^Z;
&>_HXD
_9)!9+V"
<!<7A!F3
*6;_KB
*(!7(:
*4680L
@0\#'-
%/D60F!
W$-Z5-^;P
I_4+N&"
4E5',
S# S>=
U9R%<0S
"@E=;*
-@V,D:\5U
J'R3Q+_=
$*!Q;="+5PQ8
R&\NDX>
->%%X)3&W;
)4)057=56&#Z
\&<2/>F
1#='M5A/
)**H-P.=00
06)XUI1Z,\^ G&%!
6P:5:C"
WG:#1_
;DQ#?!1
#!8XU-
)(DR0*
&[*/HF[
9;!\)S8
"7(@;)
5,Y-N0?)
>%NE4
/,FF=3Q(
)3:28)EF
=[X&87*
%<E(6/
97?&5P6!J;
1.3<=1
];$5W
$(9$>
7+CP>%
%-%Z$%
9,80 81
!%?O>2
GM$GC1
7V&-#Q]
:T=2"<
/$&\Z?
\)+. 6Q+N#H"
&7@0A3R
$<D$3;I D?.
[_92^\&S#Q
=0E64TF
/"!- .Q6@
Z%$*-<&$5-?
'#H<G<#)
.* <"9?1
-ZE6"8
)-_PT!T
!F8&#:E
G=0P$F42:
;"X^?*
R03]-,
6(G\XPW")<Q4
==7 &X@?+
#W3/'G
\#H,E1$
5_7$.Y
-&#;4,
?%8[395
B]6A-M
.F./6B"'
V49>C,]?#
ZO2+.
.;>S8'::Z
&'?Q11#
\*_==-
7RZ'=K
$16T27;
S^?F(P>
Y5'(9B
6T:OT_B
3:>'6!#V#
X'28?
'!^@2P
VC->@3%
,' #;
1?<:6=7&B
;I3Y"9
]#&XU<=
#UP*&QF
/',PP
(Z\.PV
.?4:GRB
51$6@G-Q
$<ZZE)E
>;DC2?(6!;]
7-))'@4
7Y"<:<
>)L(.<
?(9^55
Z>H-%-*8
52 P%+Z>
?\>6$P
'%GC68<6#?'
0/$,!1
0]S5&?
L''&&:[
+*ZH<4
*Y.XH$
9ZD=MAD"9*&2;/!
CS#3A:&F
<)DH>5P
'#*+>Q
^2L?^=>+
(5 $QV=Q
$+SV[EU
'X?<:Q^4E=/'
_3E.$
!_Z(I]$B
R3LWT
*Q/9_/
444E>'0
;:.'.6
#971#$
$<*=N50)
& 7)_
3U7238'9
J $3<M2\
+52>J%
1%", %-
T)F.:3\
,"4W)=
$0),>8^L
%-WX *-> W&5
P@)BIH$!
<G;^H]
VRYSG(9G
8BTGX%
7:%"(
TD+-6(
R:29>P
GO2G$R'
) ,-*Z?E@
P2D#'Q&
B=[&!,
X3%=$'"
<B Z??8
'*)GB3-\%#(>'\$
8>V0@V4
-%[^9D
J0Y989!^6X;
*2^=%4&
81#X3A2,
(F<0 -
:$0.8"D
D;F8TG
&!2I:8%/%
"-@A+%V,
;"T$3%/
-U9J';<
(XZS:#^
"^EE0'2$#
%>!/.,*=
&<]@R74
)G1/[
;$:6_"S?
A)#(>%C
J</G5/
=7B=D)
+2"&2%
,GVPQX&&
:3[=7R
=%ZV?'F=/
8,>6$
WCUPC&$68C??5
V#_GC6
0.W2\T
\8>3E>
ZW7<:<*
*2>^6Q
76B&'
3H[]*,7Z
\)3)> X
7$Z>_)>
$!7;'P
/T/^#+94
S1[Q/>%9
9!^9*?<AV
#S*)1*^0>&>+
U_F3+(/#&B
766UCU
S*!209W
E^R$89
W9F,;QV
-Q'@A3\
98$=R!JT7
\<^8#9)5/4'+D
/B(&XZV
?'D=@6
GIP#K31X
>1\#&8
-=6/&)
$B'&$9
3/_)4(&
,/?X)
U"T33 0
GG)=-Q
'$(%$7P
#ED"!=
5 P([X6$0
=3(;R!
9'.3^_
6\,XJXX=
'2[%:+ V
XLR0)"
>*<U:K
=:!19B/6&
9Q''*.28
),V:(M7U
[(#0[(
5[2/)_
;#'@5^M!
!!!EI
<2;?U;8^0
V3<7G6-!*
'-\X]5
[W_GR4
\*2-!,=)
/>E=\<Q.
:%%1+9
@QU:_26)P3_;
@,2VEH
^KH#K6*D.,?
$D#3?*
7$Z5DK
4##:#3=
YZ$8%$W>"D
C-""">
>L1,D"E
% DBAM
]=X+^R
R?W4'%6
)8_7*?R
)\55;$E
XW[61Q1$CR<
;-<#R:
=,8>.P
"W;5X>
(@^:XY
$88^$3@
$+ *5
X!185 Y< 5
7?%U#"\
P<:"C.^
.83L&= /;=-
Y-'K0-5
-D:+N9.)
:\/-0R
H*87;7CM%<E
3<( 4*
9!/ ;)'$
5Q"$R=
HY%-@0PY
J1;8>4Z!
2 27^'S>
+839]K ?2
!33(>D^:B
![^BU
Z$1'"Z
'3:&+&
AI2!(;;A6C3'
^+AI9/8
[YYL#,
)-)-P/XC
Z#$<:+
R7Y8C'"?9
8\WBC!
!2-)XX
0F(8\"
8E^<S
;+SV:0
Y/(P;F
,="$$5
0XZA"\*
/)S"Z9J2,R=
>CJ<S?
$#%6NA
'(?7-8L
C-?$'H
+-.4',E
<&I8,M$([!
5F9<46:6?'
XGU:3')86/#V
&,<-G(
S:$<G C
B9"&*4
:2(_E@^>;<
3G"3V!
=4WE(_
%?<#U]=
A;"5M5!
*X<;]W,
:U'3-#
+<X'2!
2$_"!Q38F
]7??"R
,4B F
#9?4 _
<3'69V!
@"LU,"
[Q ,;&
R)A3&]
R813*,
"4:@1:/
?GXD]]M
8A <QE75
"?'"6_
$=%BZP
6%YSW#Y
K9<%(7<<H?
U;;1T9
>;&!M(
TF),H\2E
7;:5S./V.1310\A
IG(4S1
.$7!MWG&
43T6B?
;>.^0P$
1>!'4)\
/>%<B_
1( J209(
5:[.'"
U:!3&39
/"$R(#
%0]89'
A!]%((
#)2!AD
)S^70%K'
NG-9T!
#O&[54
E(IX*CS2
_QG.*9
.RXB>-Z
*!B;Z9
=@%?DR
);&*B^9
&M1^&>
/$D)/7
71&B&2[;
>"-(PA
J4!?#Q3HS
B3G:Q2
*,76^\4R])
&+#1G)>"
:!'\)+
-:AR43
= 4133)
53$5(7_
*7B'+,?#5J#,
JSUC#"
#G */<(+5
WAI6'"
'4'\U!
" 5*6-#)
VW@5B)Z
2?^7_0
G"^.*[
8IR+ <2?-A*=Z
D,ZO"=G
"5&,LH!
$H /=5%1
9>G'>!]A3
_B'5Y/-^
6$(>6_4*
XE+)>^
^ 0'7!'6F
U%BE,Z
4"^ ..Z
?G,9>):7
QD-.$AP7$
.0^;:R$15[
9N!Y*/Z=:!V'?7
"W0!4;]
9P6!<(-,
7F0N,283@0
<9=Z9"9[J
;+!&D
Antivirus Signature
Bkav W64.AIDetectMalware
Lionic Trojan.Win32.Reflo.4!c
tehtris Clean
ClamAV Win.Trojan.Genkryptik-10016533-0
CMC Clean
CAT-QuickHeal Trojan.CoinMiner.S32378657
Skyhigh BehavesLike.Win64.Trojan.rh
ALYac Clean
Malwarebytes Trojan.Crypt
Zillya Trojan.Kryptik.Win64.48468
Sangfor Suspicious.Win32.Save.a
K7AntiVirus Trojan ( 005af85d1 )
Alibaba Trojan:Win64/Coinminer.f702d2e2
K7GW Trojan ( 005af85d1 )
Cybereason Clean
huorong Trojan/W64.CoinMiner.cf
Baidu Clean
VirIT Clean
Paloalto generic.ml
Symantec Trojan.Coinminer!g3
Elastic Windows.Generic.Threat
ESET-NOD32 a variant of Win64/Kryptik.EDF
APEX Malicious
Avast Win64:Evo-gen [Trj]
Cynet Malicious (score: 100)
Kaspersky HEUR:Trojan.Win64.Reflo.pef
BitDefender Gen:Heur.Mint.Zard.25
NANO-Antivirus Trojan.Win64.Kryptik.kqljel
ViRobot Clean
MicroWorld-eScan Gen:Heur.Mint.Zard.25
Tencent Trojan.Win64.Kryptik.16001249
TACHYON Clean
Sophos Troj/Krypt-ADL
F-Secure Heuristic.HEUR/AGEN.1371052
DrWeb Trojan.Siggen29.11587
VIPRE Gen:Heur.Mint.Zard.25
TrendMicro TROJ_GEN.R002C0DGV24
McAfeeD ti!3B0503A6C2FB
Trapmine Clean
FireEye Gen:Heur.Mint.Zard.25
Emsisoft Gen:Heur.Mint.Zard.25 (B)
Ikarus Trojan.Win64.Krypt
GData Gen:Heur.Mint.Zard.25
Jiangmin Clean
Webroot W32.Coinminer.Gen
Varist W64/Kryptik.LEG.gen!Eldorado
Avira HEUR/AGEN.1371052
Antiy-AVL Trojan/Win64.GenKryptik
Kingsoft Win64.Trojan.Reflo.pef
Gridinsoft Trojan.Win64.Kryptik.sa
Xcitium Clean
Arcabit Trojan.Mint.Zard.25
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Trojan.Win64.Reflo.pef
Microsoft Trojan:Win64/Coinminer.RB!MTB
Google Detected
AhnLab-V3 Dropper/Win.DropperX-gen.R622355
Acronis Clean
McAfee Trojan-FWHP!EB7EB5ACECB0
MAX malware (ai score=80)
VBA32 OScope.Trojan.Win64.Miner
Panda Trj/GdSda.A
Zoner Clean
TrendMicro-HouseCall TROJ_GEN.R002C0DGV24
Rising Dropper.Injector!8.DC (TFE:5:qANomcoTHvR)
Yandex Clean
SentinelOne Static AI - Malicious PE
MaxSecure Trojan.Malware.121218.susgen
Fortinet W64/GenKryptik.GQCB!tr
BitDefenderTheta Clean
AVG Win64:Evo-gen [Trj]
DeepInstinct MALICIOUS
CrowdStrike win/malicious_confidence_70% (W)
alibabacloud Miner:Win/Reflo.pyj
No IRMA results available.