Static | ZeroBOX

PE Compile Time

2022-10-21 22:55:24

PE Imphash

11ea841ebb83b186805cc0d8a1a3d4a1

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
UPX0 0x00001000 0x00086000 0x00000000 0.0
UPX1 0x00087000 0x00056000 0x00055400 7.93756753083
.rsrc 0x000dd000 0x00007000 0x00006a00 4.97674405167

Resources

Name Offset Size Language Sub-language File type
RT_ICON 0x000e2d04 0x00000468 LANG_ENGLISH SUBLANG_ENGLISH_UK GLS_BINARY_LSB_FIRST
RT_ICON 0x000e2d04 0x00000468 LANG_ENGLISH SUBLANG_ENGLISH_UK GLS_BINARY_LSB_FIRST
RT_ICON 0x000e2d04 0x00000468 LANG_ENGLISH SUBLANG_ENGLISH_UK GLS_BINARY_LSB_FIRST
RT_ICON 0x000e2d04 0x00000468 LANG_ENGLISH SUBLANG_ENGLISH_UK GLS_BINARY_LSB_FIRST
RT_ICON 0x000e2d04 0x00000468 LANG_ENGLISH SUBLANG_ENGLISH_UK GLS_BINARY_LSB_FIRST
RT_ICON 0x000e2d04 0x00000468 LANG_ENGLISH SUBLANG_ENGLISH_UK GLS_BINARY_LSB_FIRST
RT_ICON 0x000e2d04 0x00000468 LANG_ENGLISH SUBLANG_ENGLISH_UK GLS_BINARY_LSB_FIRST
RT_ICON 0x000e2d04 0x00000468 LANG_ENGLISH SUBLANG_ENGLISH_UK GLS_BINARY_LSB_FIRST
RT_ICON 0x000e2d04 0x00000468 LANG_ENGLISH SUBLANG_ENGLISH_UK GLS_BINARY_LSB_FIRST
RT_STRING 0x000cd2b8 0x00000158 LANG_ENGLISH SUBLANG_ENGLISH_UK "compact bitmap" format (Poskanzer)
RT_STRING 0x000cd2b8 0x00000158 LANG_ENGLISH SUBLANG_ENGLISH_UK "compact bitmap" format (Poskanzer)
RT_STRING 0x000cd2b8 0x00000158 LANG_ENGLISH SUBLANG_ENGLISH_UK "compact bitmap" format (Poskanzer)
RT_STRING 0x000cd2b8 0x00000158 LANG_ENGLISH SUBLANG_ENGLISH_UK "compact bitmap" format (Poskanzer)
RT_STRING 0x000cd2b8 0x00000158 LANG_ENGLISH SUBLANG_ENGLISH_UK "compact bitmap" format (Poskanzer)
RT_STRING 0x000cd2b8 0x00000158 LANG_ENGLISH SUBLANG_ENGLISH_UK "compact bitmap" format (Poskanzer)
RT_STRING 0x000cd2b8 0x00000158 LANG_ENGLISH SUBLANG_ENGLISH_UK "compact bitmap" format (Poskanzer)
RT_RCDATA 0x000cd410 0x000005ec LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x000e31ec 0x00000014 LANG_ENGLISH SUBLANG_ENGLISH_UK data
RT_GROUP_ICON 0x000e31ec 0x00000014 LANG_ENGLISH SUBLANG_ENGLISH_UK data
RT_VERSION 0x000e3204 0x000000dc LANG_ENGLISH SUBLANG_ENGLISH_UK data
RT_MANIFEST 0x000e32e4 0x000001e1 LANG_CHINESE SUBLANG_CHINESE_SIMPLIFIED XML 1.0 document, ASCII text, with CRLF line terminators

Imports

Library KERNEL32.DLL:
0x4e3644 LoadLibraryA
0x4e3648 GetProcAddress
0x4e364c VirtualProtect
0x4e3650 VirtualAlloc
0x4e3654 VirtualFree
0x4e3658 ExitProcess
Library ADVAPI32.dll:
0x4e3660 GetAce
Library COMCTL32.dll:
0x4e3668 ImageList_Remove
Library COMDLG32.dll:
0x4e3670 GetOpenFileNameW
Library GDI32.dll:
0x4e3678 LineTo
Library IPHLPAPI.DLL:
0x4e3680 IcmpSendEcho
Library MPR.dll:
0x4e3688 WNetUseConnectionW
Library ole32.dll:
0x4e3690 CoGetObject
Library OLEAUT32.dll:
0x4e3698 VariantInit
Library PSAPI.DLL:
Library SHELL32.dll:
0x4e36a8 DragFinish
Library USER32.dll:
0x4e36b0 GetDC
Library USERENV.dll:
0x4e36b8 LoadUserProfileW
Library UxTheme.dll:
0x4e36c0 IsThemeActive
Library VERSION.dll:
0x4e36c8 VerQueryValueW
Library WININET.dll:
0x4e36d0 FtpOpenFileW
Library WINMM.dll:
0x4e36d8 timeGetTime
Library WSOCK32.dll:
0x4e36e0 setsockopt

!This program cannot be run in DOS mode.
FLPTX\
v}[kBS
`wRTytR
\4*It2
9^Xt=[
L#PCTq
tQ6tC~){Pd
*V^CXj\@
!z$Z}>
dh,rPP
2FEg^j Y
@*d@u/
\X^t0?
~Tt SW}W)
h(b89iJ
v:byg,j\
8F0ti!
A>y6>_
7VP_+8
L4dVGHPQN
a|mqVA[
> tfjB
YGFf-|
\>?|PV
78%tNXN
|$pAU3
?#tRf9s
M,jkOP_[
\rjE0j
f9t!C&_Hu
.!&$ZQy'
GAe@YJ0
`GwT&x
iuGVj(
iBGBGC
u%l!12Ke
htkHu=vy
}5_0xR
X$_tE
:_L=t]
x`KbBc<
00_Wh>s
u]=P'|
@zF96f`
2222.
CN{(O7
YsVEJk
Ot4Gt1Ht(
NNKA=VSB3
f0f;f>u
$FC<w
gP PQ8T
`g:,-x'
n;LtXMb
[54idWB
Rt'St!Tt
3l0Q?I
gA+c=v
$NS}[Y8
H1v[8
T\H0Ys
<fXh1M@
-qaS5d
i*[ecH
fb&@.@u
*wD{D`:
Bz6O`<
t*&R 25
LP$@k`qM
H(09ad
>?6$d>
[RIBPt
$(,(G:1F4
,yd6E,
=4fki*
U/i?+
VKlapi
z8Poq<H
$8~MJ
p>RA0Y
LpT5j;{@
D\F{Bd|
0r *e3
 !"#$
&&'()*+
--./012R3345566789:
>?>@ABC
HIJKLMNr6
Y@ZE-]
axOAl`
=DtK=Kk
j#/A]
j@s5M{o
&>ygmhp
t!l2^!^
4GDjNl
<P4/>mXP6
DP|O\(
KXjweb/
~tbUmPT
jw[R>!n
Ax_UK+z
lRj!Yf+
i-'#5T$x
`~EjaXp
6t*8t(
+w?th=
dSttl
(fK?*
<dt8x!
esyD8![<
C.`dhlF
$(,esyF0$<
@DHP#qC
syF@dL
-@DH<#
r`dhl.
i^FDhWP~
q<-G5v@
32X\Lh
`6qd-G5vh
CHLPsyF
HLPry.
C.48<yF
esT-/X\d
(8qq,0
48<,H!
\6=*LP
<p4m$00
?07H0>
O4R!%g
-yM=V;
j[$mxgZ
VQ)Hb8
0F (n00
@HPX`<
|v`~p0g&
SiCNS-
KFQ3D<--
Q?+Sfc
~uyc{C
VH(82*
3dE01V
tjA[jZ^+
EgD`JZ
v\wRMj$
9u(v?VS>P8
=QY=OI=M
@hGJNX
[,e|];
FSWl*-
(=Xp4?
u24&:a
IRh:*H
%-O:Pht
RWrA4mU
1EA*G
d'}1vQH
zBw<zW
@,J>PGR
;yP|?X
L^:Vth\3P
_@7bM\
vsS\A\
HtOMt"L)
ld\TLD
<`?xd5
ks~R~h
;24{kwT
Np.~l!
ySP'@,
?t!h7s
`G]3VQ
+j.yb
@*<v5!=
u62<;Yx
w3Zv&j
8t&h0NB
tF:9UA
t"htHjl
6u#~}i
fnt'jo
VWHD?48YY
v=t='FG
Ixge&g
H`x2f
4Yr8<v7E
EWdK`r
!=uTn*
Q\*U4M
,\/(%$
v64 VE
/@/w|#
({NPi^T<
%^;6s?A<>
Xl0<X,
v3LItE
o<3?2c
v6*mMh1
'u?9%t7
rW~J]i
.S(5>@
b]uXVh3
6`+B\fQ
XHr>>V
8 7<Ct
%<`KG+Xs
jPj7TF
<@nw9
s1$l$<F
zlSy7\p
?8- Zl
h=`n|(\
mcB8]U!8u3
jf[[GAfsYi
} kE$,E(B3
']58$4R
&VR7uK
;75V ><
rrrr\`dhrrrrlptxX
L8<@ed
~';_t|%S
~0Aj'Z3&y
DJxT'[
Sp0HC:
dvf<&",
3[V>YC
^bS&#v
u'YFx?,Y
YURpTX,
[Y0!G2P
5LinI]
q60qQZ
!ZPBV4
,_Q*WR
Ws%4#$
[HA}+0^PD
UQPXY]Y`
*/K@F.B
O8u^A
J%dB&/
VAEUTV
8I<arm
ft?Y-@
C%}XmRg
0WSO@
B.!e=`
=7mHp2
fA$]@6
>o{HxM
M,HP14c
PCQF|
EAUqLq2
A9"D9{dt
oA%A!N$
a@ANVc
ht$74X
Q~F U1J.mj
.~>D4l
*Cvl;
UuG0Nu7j
c`.)lA
^I8f)@
'Q"tDLe
A.yGD%
b;lCR01
ltA=no
]ZKKyf
$1j1[!
1^S;V=
VZ1u!R
pt5j'Z
S<,tn9
Q$xS`%
V#L>U@
-cC-t<
;_AHt9
P1r"j
:p*zzM
J zQ)D
/|]Gtmt
S6^0!Y
%srknC
bH(HBF
hA8H,u
YCa:A
NAMufd
5R,-C'z
pk>N1{
PZ0Ffz
x%)>V~
m*@Nj4>
\3`j5i
4#U|Vr
$390m6(#
i>}A`"
2HjpSS
U'Nbq%9.:D
c+`Au$:
P@IyG_
rpqKoyC
'4,s"MV
N[wnG6
FHf68^
cKMDXI@
[+Ks4t
g_9Vj9dh
+\-PCRE
YJ;7i|
rJspC& x
AuB9|.
{xJ;0@{
0V42I*
qi.xl|9Yi
tmtDd(9IL
t&V$NA
++vJ6,N
rr2048<"
t3iZ;P
<8@BJbxt
hNiPSx
8oeFJ
&;2ZT:
ztAwl@
Z=NX^{a>
CuhL[
xy%Ct]
yBnFM-
@t!`|n
k,tltD
=)rBf/
g"p(i.
|R&9$C+
w{wqGL
%'t72)
jh$Jtsn
C&i1/i
,:tw3t
Yam=@
*-Yerh
(a;;*[ pHN
t'Oe`[
r9H=[q
t"+RQH
E0#@K3
KS=Q7u&
GMWDB}
mQMJ}j
-j$|F^SO
fD_tTMs"
B&\djx
#$x-`b
E3$7(#q
a{#O_XA
;t3LC!
*6[p=D
uj^@4(eO&
2at6`X
?t4{HX
G\Bq0N
%9G r0
ti=6/r
@o>RW>@
@+1-(`
;;J s%
2R`Z.Hx
<x@P8
`S;m.#
3fyvU2
YlYwQ
T:H:t7
{8?wm8
)hi1RF.
yg:p#@
uLdXj$I(
mLmSkM@
Gg{cS9
#CnOr/j
!MV)$Xj(
]bMHN&
c\UQ(o
Px#`=l
+d#S(6
H,sBoE
r!bRVuy4
_G$g26
9 vhat
:z[8$a
"BPA<H
\J\98`i
Al/XD A5JE`
ibP3h_
7lW#Zr
6m;'1*9u
a;Zf0r
b"W%R
7Q[3N=
A9xh)p
m]i-8i
U*^xVU
>dY0j%
vzL1$)
)X.t=2
YhmhlA
my1j;Y
r,0R)W@
+.j+4*'w
8/[q.Dz
tG<9\v6wsV
9_6R@`C
olFl);%p
Y~3!(8Y
(!i]0uO
VSS S\
x423(7c
,@000 (
,M%6n|Y
$9j_h8j
F,F0N@
:NHL@o
X.tG?@H
;]'/`(
szrCl@
lpy/"`
7c}WK?
:5/ZV%
uPj<Qdj
brV^>'
ZtHtb5
|Z$0^[D.f
AF`XC)
Z9N$Wx
!K TEt
X%uR:v
X`H%qC
<~5=Po
y:h]j:
9hHSvd
~G!'U`
00/@5p
WXbxbG
x@t9@
|. xX9
77fw)W
"t|<%tx<'tt
p<&tl<!th<otd<]t`<[
t\<\tX<
tP<_tL<
u2%#~MOM
obYqqiQ0GI
Vy{|JP
<'QSP%T
dH&3"Dq
vf|[@q0
ft 53
P)d>J+2!Ja/
a9RiV,
Oj*Yu.E
`O5"|w
[^>Rh'
(4g/H.
/slxr}
m[M|j$
24&Vh
SS@li]M
AzHZt|
""WF-p
k:DE*N@
E!@4PB
H_^TJO^'
@kjm,pn
e$cH;!
($Zfuw
90?;Po
O .x@W;
SX~i%'
-bs"G(S
HoY;rI
yu=!5C
!b)HV2
2WgebE
Z[j,/P
pFoZ"-t
@*']0%
Ql@ihf
`yjTZb
!\Cya,
*SE"\-
>oa# zt
};GLu
\.hlpt[
F^V'&$;
P_8DA,
/dhk9Q
%u'WV+
't6SSe
U"GWW7
(b,([g
Mbu$JLb
<evPm0
7_"ZD=
fHSU$
LSZahoy
GP[QQQ
8"tcYY
0jX88So
G$9@&i
RyTBBB
4$4:$v
IDHwu@j
:{`^PCS
+:X%pf
pRM!iJ=
8[x`qW
AtYatTStKstF
rsQ74S7*
v`{<QRH
L@F^r0@
%&K:5|.
f;6Z\2
Y4@4<V'
@m44y8L71
v&%K|u
X20)P@
trReHT
CWxXLG
N)r$#,'8
<S8PHE
iX.C8h
I.<iMm
e}-jlD
G_VS[GF
cj\(1V
Z5D-()k
4<<@@m;
Jk&T"X
?o3dh
89990@P`5
R`POOzv+
)mcST%
Nt,NNQ
*IC~"7j,
>Mi`k8@
ZI%RhF
UJ:jpS
_}h$XI
C<TjZ)tC
$p $_p
_2Lm(p
Dsu'" t
Vgu 8>t6Pt
'<A#q8
.C'G\X
Xkh#Ixx
[tE`9H
2u{ 9*
n``'Vh
D##U08
z=3'8J
q(*6yn
SW|<8~
|$:_x{Az8
FeFT7m
s<Q8;M
m(m<mDeeeemTm`mpm
MT[ipwy
Nqy}# KD
lQSc'J^
8<@6IX
<PyFFFTXP\
RHfT@>
pl`!=`
l|u|e
XF<u[26
8~0/^{`e
Ix!u~W
npr~E`
3ri/56
&nP+'U
ftKm'9%u
()X[w?`=
{jNYu(A
9HMp&II^:
.% CK
w$'Pd$L:
SPioL"
F!1bD/l1\
+@`oQ@
.\Mo-I
e%J;vV
$Yj@FZ
m)$/F{
bvgUSA
`4S80K
ZUFKFX
MO-j=6
1F0gc#Ko
l-jvP,
B3-7./,
P4H AFF&48<[
`DXddd
tQV)2rU<
HNN*H(8h
u8u(2o
8^PB\R
NPjS-{
Lm}imA
t_Y{`$
HZ:}$CW
8'0V)D
UYNF9nb,
t)Yt"$
g6$Q8<
(@VYa&WM
AWp-!|A
=2%n#,
U([0;Zo
FxD0r{C
rJ#skN
,$Uw+
^U+.y
'0V7!)3o
S]Gwq"q
^Vj$jA(
]60$u1L
t8Wchg
6-6%|7
,!,a#G
U`R%`0
M"WtR\
(GHup*
Z8vM3<
moIha[
}P(teRuf
a@h8[i
mVYK+l#
jT=HQV
En8Dj]
sHnH-Zu
JLH8S1
li3S`z
3M}Zu\
S9q4uF5
u4 j Wo
LyoofLN
z&}Qs$0
xeN4^D.
/`F'Z0
LV6eDW)
kEwlHl
hZ+_s7
DQ`iU"V
AazAl^@.#
j/njDN
VGoe9Q
.$7j;Q
?h$ki\
<hmdDGbD(
n7E;n<}+
4;8$L
|y^nP-D|KE
O,A7auA
w,9G0~X
;\5ZRc
nXj]Zf
/PSD}N
GetNative
SystemInfRkernel32.dllD^;|
d7eGb{
0[:>:]]
"y=FSP
?>O*>0H
"];#R;Mm6
?/N'="A07
K!vg7j7
:"OO]mI1
/wX-Sh
3okzMx
1QMnige
~m^Z#.?
OP&x~l
:&ce/W>R
bad alloc
CTl8o`~sG
rExitPrRes@RoIn
soOUSa
fmodov
:known exB
Dec_uTygr
PMM/dd/y
(,HH:mm:=
g345I;
STUVWXYZ[j
\]^_`abcdefghijklm
vwxyz{|}~
?V#wlsA
4cOExe
>mapho
L.dStackG
W5poolTim9^
4u*64GFi
_ByH<dlu>S
*.h=Ww
rvk<:+
abw*fld'xd3
0_c_hy
Ymfr?y0
nPb'n6
(null)
700WP5
]vQ<)8
74>U".
)P!?Ua0
y1~?|"
?x+s7
k>? #J
uIJzR8
O=o;:8o
7643Nn'
1o0.-+;
o*)'&o
vr$#!
||{z?y''''yxwvNNNnovutt
?srqq99
pooonrrr;m?llk
vjojih
ddocb''
ba?`__Nn''^]o]\
NN[Z?ZY
XWWoVr;99UUT?S
vrrRRQoP
MLKJol
?5Od%
?|I7Z#
g)([|X>H1
AxuN}*
r7Yr7]D
&?~YK|
CqTR;?
<8bunz8r
1WY$?]
?#%X.y
<@En[vP
?Dj0Q:W~
D>V:e:
ZEM-'^
o765@Z
D<xZu`\@
@~7Z8>
(ddd???m
|u?!u$
n\jVa?\
@N.>??rQ(9
\ '?>?Prr
??>@N.
dd">?F&
>??\X$#=
2??=D2%
vuZEeu
bu?P/Y
9r ( 0!8"
#G@#H$P%
X&`'h)p*
9r P(V0W8Z
#04<5H6
9rT7`8l9x:
J K,L#G
8NDOPP\r
&/H!8c
#ggDD
Tj8`awv
D[P"Pd
S/s?m!
Nn'npp_r
ooiOs?kv
E2'GZ/;.
n/h_*L?-
KbO.pP
NgRWFR
rRo-mG
.vE&tTA
rwsm_M
P/fGCo
7mEssgY6'Hn
0B_OgnXr
H?LGAvmvpU7/B_P/o_k
iK.sapx
uvwt7e
Bnok?jj
guGpw
jBoxWvA
cWindowLas'Ps
uh_O,U
bje,cz
Y:/(A6
$gNRE\
h)P7WN
+@UQLy5
_~A%My
@LXht{
y(,048
PTX\hty
(8<DTxy
__based
p&calstd
fastvo
tr64nrerict
v[unJign
>Z ws
~^f|h||
-/%oh<
`tyRof$
&lo( s$c gl
oC/>ds con1
HN@\ Qp
1#SNAN_
F/Q((I
89~+0]NnO9(
%@?r2;
";rrrr&
rrrr/7
S.xC _
vrYY?^^"
NNNKK\\
t''p~o
''#LLL
o0_0_0?@
ODDI/I
vr;C_CC?_vr2
AA?n'
G/Ga`
MORRQQ
TOToT_vr
cOc?c_
'v,cm@
$@P?!H*
23rrrr4567r;vr89
"Zk/kO
B.234B.
_kJ$\L33
lkk?'G
'oG-djGR/
$--%"!'
y@P\dp
<0@P`p
$0<DPX<
#Rn*'+
+w{Z`X
e+?ne@r9b
_abcde
OEw5 d
^YA?WY
j[b#C+7
C?Y"0
VlWOB*`
7ihG*6sGMSr
Wow64Disr
"vert=
afld-pah=$%
,d AutoIt
~"A[Fg
{JP6iFaTVkB
acgB:c
3OAkEp
\r#S"[
O s:&*/
Qkkbal
}{)H[)
~L}h/N'
numsci
ACCEPx
,OMMIT
`RUNhKI$
D]rHEN
nd of p
Zkt*n&c)
outoP<in {
} quantifiK to
?miss{
1K&th-3
k_Qy(? o-
`t(s)
;sUTFm
> 255n(
vm 32`
DEFINEone0
HWLSUpm
VERB)q
vi2JaS
q2[|;6
~d_1i?
>= 0xd8
.H?Xuh
Nomofo
lVugiuhm
_Abr8z
m!$i_(yJ
u~NkRNl
o`RejX
Vietkl
Telv@+
fpsspucw Y6
p_;??%
ZhA\?tG_
JPe*6A
6{s3e{i
7Modulei
F.mvub
/_j12
_3cSK
_?S/U(34
V2m#w'Q
ORegD_
Key8adv
5H!??%
dkVQh
b#SAdFK#D3
f':7.S
`7s7-X
CPNO_A
START_O
_MATCH=?
g7RECURSION?CRjL
SR_UNICO
82<.>B6
/!5ACn
l/mV p
y,@Pdl
L$P%T&
Ixx@o
AV^_@X
{s.ak[
eODSCc
"Vm?sw";Sb
r:gW`=|
+{ZiX1
wtC?bf
Kc"C+e_
dcs*&J
8fwS8M%
[I$ZasX
HAU#5+
bOULpj
XOg;Mm
t^I{,',
RUQeY(
r)Diva
oadA5AddrsSl
F ,C(l
-VnWyi"Qu:
help32S
m[Q}Zvi
6z%9As
N9r;hiT
)#Paxp
O]S@K
mx=%;no
zlAdjunTok
X%dyS$
07dyjq
chBlt8
OzrDArc
LSIDFr
v#GU22
oxyH&k
>$ycKn'
0yHkBpOB
_No<fy)W
=.bonB
YSub%C
]lZoXb1Z
P)5 {*
`?d!Visi
%7*$h@
%deekUnr
,D(QBci4
UV?tFD
.I?D<4D
h6+1j$
+>,.//22b
C9J9r3
%c=/Kr<
5iM+7#+5
##@,&,//,))
X,RP(0
O^+U^"IR
66r[w.,'
R=oQ1W7
oo"ad:
ii7!ll
<*-('(-)/)
H%d=j@
ED9M`Cx
3-@-#34
&#I0.C
@_Bu2<.
m$ge<\
,&Z18.
(9#|:q
!*(" 'zA9Q+
MH>2z. ^)
5P3(8J`$
#H\9C7f
4H85,"
`^A*)%
#bj/XG
XPTPSW
wwwwwwwwwwwwwx
wwwwwwwwwwwwwx
xwxwxx
jjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjj
jqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqj
~~~~~z~zzzzzzzzzzzzzzz
vvvvvvvvvvvvvvzvvvv~zz~zzzzzwzwzvzvz
knnnnnnnnnnnnnnnnnkv~z~zzzzzzzzxzxxxx
nGGHHH
nv~zsssssssszxzzzzx
nGGGHH
nv~~~~~~~z~zzzzxzxy
n..GGHHH
nv~~ssssssss{zzzyyy
n...GGHHH
nv~~~~~~~~~{{zzzzyz
n+....HGHHHH
ssssssst~{{zzyy
n++....G.HHH
~~~~{~{{{{
n!!+....HGHHHH
ssssstts~{~{{{{
n!!++.....HHHHHH
~~~~~~{~{{
n!!!++....GGHHH
n!!""....-HHHH
!!"".....HHHHnv
ssssssss
"""+....G-Hnv
""""..-.-Gnv
ssssssss
"""...-.nv
""""..-nv
ssssssss
nU_[_[D
!""".+nv
nOTUTU[[ED'"""+nv
ssssssss
nCODOSSSWWWWXWLWaanv
n;;>D;DDDEESLWLLLLnv
ssssssss
;;:::3***3444nv
'''*"31nv
ssssssss
'*nv
mnnnnnnnnnnnnnnnnnm
ssssssss
jurrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrruj
juuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuj
juuuuuuuuuuuuuuuuuuuuuuuuuuuuuuu
jjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjj
J>>>>>>>>>>>>>>>>ACA>>>>>>>>>G
>S]]]]]]]]]]]]]]]]]]]]]]]]]]]>
>S]]a]aaa]]]]]]a```____R_R_U]>
>_]]QQQQQQRQRQQQ_``__STTRRRR]>
>\]FIIIIIIIIIIFQ`LLLLLL_TRRR]>
>_]I$$$
IQ```a\a_`_URR]>
IQ^LLLLLL___RR]>
IQ`_``a\a\_SRU]>
IQ````ca\a__a]]>
IQ`LLLLLL\]a_a]>
$$$IQ````aca_a\]_]>
$$IQ`LLLLLL]`
IQ``_`a\a`a
IQ`LLLLLLa\$
>_]IE=,
IQ``````a\a
>_]I66;;80-&&7IQ`LLLLLL`\
>]]I11255880::IQ`````a\ac
C]]I****,+...-IQ`LLLLLLca
 ""IQ````aca\c
C]]HIIIIIIIIIIH]aLLLLLLa\
C]]]]]]]]]]]]]]]]]]]]]]]]]]]]>
C_]a`a]]ac]a]a]a]a`a\a\a\ac]]>
DKLKKKLKKLKKKKLKLKLKLMKKKKLKL>
APOOOOOOOOOOOOOOOOOOOOO
>>>>>>>>>>>>>>>>>>>>>>>>>>>>J
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
<!-- Identify the application dependencies. -->
<dependency>
<dependentAssembly>
<assemblyIdentity
type="win32"
name="Microsoft.Windows.Common-Controls"
version="6.0.0.0"
language="*"
processorArchitecture="*"
publicKeyToken="6595b64144ccf1df"
</dependentAssembly>
</dependency>
</assembly>
KERNEL32.DLL
ADVAPI32.dll
COMCTL32.dll
COMDLG32.dll
GDI32.dll
IPHLPAPI.DLL
MPR.dll
ole32.dll
OLEAUT32.dll
PSAPI.DLL
SHELL32.dll
USER32.dll
USERENV.dll
UxTheme.dll
VERSION.dll
WININET.dll
WINMM.dll
WSOCK32.dll
LoadLibraryA
GetProcAddress
VirtualProtect
VirtualAlloc
VirtualFree
ExitProcess
GetAce
ImageList_Remove
GetOpenFileNameW
LineTo
IcmpSendEcho
WNetUseConnectionW
CoGetObject
GetProcessMemoryInfo
DragFinish
LoadUserProfileW
IsThemeActive
VerQueryValueW
FtpOpenFileW
timeGetTime
SCRIPT
VS_VERSION_INFO
StringFileInfo
080904B0
VarFileInfo
Translation
Antivirus Signature
Bkav W32.AIDetectMalware
Lionic Trojan.Win32.Generic.4!c
tehtris Generic.Malware
ClamAV Win.Malware.Generic-9952838-0
CMC Clean
CAT-QuickHeal Clean
Skyhigh BehavesLike.Win32.TrojanAitInject.fc
ALYac Trojan.GenericKD.66127665
Cylance Unsafe
Zillya Clean
Sangfor Trojan.Win32.Agent.Vrjj
K7AntiVirus Clean
Alibaba Trojan:Win32/SelfDel.38afbc9b
K7GW Clean
Cybereason malicious.53cf14
Baidu Clean
VirIT Trojan.Win32.Crypt5.MKJ
Paloalto generic.ml
Symantec Clean
Elastic malicious (moderate confidence)
ESET-NOD32 Clean
APEX Malicious
Avast Clean
Cynet Malicious (score: 100)
Kaspersky Trojan.Win32.Agentb.mfic
BitDefender Trojan.GenericKD.66127665
NANO-Antivirus Clean
ViRobot Clean
MicroWorld-eScan Trojan.GenericKD.66127665
Tencent Clean
TACHYON Clean
Sophos Mal/Generic-S
F-Secure Clean
DrWeb Clean
VIPRE Trojan.GenericKD.66127665
TrendMicro Clean
McAfeeD Real Protect-LS!54FB16A53CF1
Trapmine malicious.high.ml.score
FireEye Generic.mg.54fb16a53cf14d68
Emsisoft Trojan.GenericKD.66127665 (B)
huorong Clean
GData Trojan.GenericKD.66127665
Jiangmin Trojan.Selfdel.rvj
Webroot W32.Trojan.Gen
Varist Clean
Avira Clean
Antiy-AVL Trojan[Dropper]/Win32.Dorifel
Kingsoft Clean
Gridinsoft Clean
Xcitium Clean
Arcabit Trojan.Generic.D3F10731
SUPERAntiSpyware Clean
ZoneAlarm Trojan.Win32.Agentb.mfic
Microsoft Clean
Google Detected
AhnLab-V3 Clean
Acronis Clean
McAfee Artemis!54FB16A53CF1
MAX malware (ai score=80)
VBA32 Backdoor.Bladabindi
Malwarebytes Malware.AI.2852723073
Panda Clean
Zoner Clean
TrendMicro-HouseCall TROJ_GEN.R002H09ET24
Rising Clean
Yandex Trojan.GenAsa!NHzzuRkQa3Y
Ikarus Trojan.SelfDel
MaxSecure Trojan.Malware.206601952.susgen
Fortinet W32/PossibleThreat
BitDefenderTheta Clean
AVG Clean
DeepInstinct MALICIOUS
CrowdStrike win/malicious_confidence_90% (W)
alibabacloud Suspicious
No IRMA results available.