Static | ZeroBOX

PE Compile Time

2024-06-15 00:13:00

PE Imphash

de41d4e0545d977de6ca665131bb479a

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00001000 0x000082d6 0x00008400 6.15554065346
.rdata 0x0000a000 0x000032cc 0x00003400 4.629249091
.data 0x0000e000 0x00282ea0 0x00280a00 6.4868804721
.pdata 0x00291000 0x0000018c 0x00000200 3.24301374973
.00cfg 0x00292000 0x00000010 0x00000200 0.151271325305
.tls 0x00293000 0x00000010 0x00000200 0.0
.rsrc 0x00294000 0x00000408 0x00000600 2.71109355521
.reloc 0x00295000 0x00000078 0x00000200 1.42080409226

Resources

Name Offset Size Language Sub-language File type
RT_VERSION 0x00294060 0x000003a4 LANG_ENGLISH SUBLANG_ENGLISH_US data

Imports

Library msvcrt.dll:
0x14000cd10 __C_specific_handler
0x14000cd18 __getmainargs
0x14000cd20 __initenv
0x14000cd28 __iob_func
0x14000cd30 __set_app_type
0x14000cd38 __setusermatherr
0x14000cd40 _amsg_exit
0x14000cd48 _cexit
0x14000cd50 _commode
0x14000cd58 _fmode
0x14000cd60 _initterm
0x14000cd68 _onexit
0x14000cd70 _wcsicmp
0x14000cd78 _wcsnicmp
0x14000cd80 abort
0x14000cd88 calloc
0x14000cd90 exit
0x14000cd98 fprintf
0x14000cda0 free
0x14000cda8 fwrite
0x14000cdb0 malloc
0x14000cdb8 memcpy
0x14000cdc0 memset
0x14000cdc8 signal
0x14000cdd0 strlen
0x14000cdd8 strncmp
0x14000cde0 vfprintf
0x14000cde8 wcscat
0x14000cdf0 wcscpy
0x14000cdf8 wcslen
0x14000ce00 wcsncmp
Library KERNEL32.dll:
0x14000ce10 DeleteCriticalSection
0x14000ce18 EnterCriticalSection
0x14000ce20 GetLastError
0x14000ce30 LeaveCriticalSection
0x14000ce40 Sleep
0x14000ce48 TlsGetValue
0x14000ce50 VirtualProtect
0x14000ce58 VirtualQuery

!This program cannot be run in DOS mode.$
`.rdata
@.data
.pdata
@.00cfg
@.reloc
uKHcQ<
AWAVVWSH
[_^A^A_
t.ffff.
fffff.
UAWAVAUATVWSH
ffffff.
[_^A\A]A^A_]
ffffff.
AWAVATVWSH
X[_^A\A^A_
fffff.
fffff.
AVVWSH
([_^A^
AVVWSH
([_^A^
uVHcH<
uZHcP<
u!HcQ<
uVHcP<
upLcB<B
ffffff.
AWAVAUATVWUSH
[]_^A\A]A^A_
AVVWUS
[]_^A^
AVVWUSH
0fffff.
@[]_^A^
AWAVAUATVWUSH
ffff.
[]_^A\A]A^A_
AWAVAUATVWUSH
[]_^A\A]A^A_
UAWAVAUATVWS
fffff.
[_^A\A]A^A_]
AWAVAUATVWUSH
8[]_^A\A]A^A_
AWAVAUATVWUSH
8[]_^A\A]A^A_
Argument domain error (DOMAIN)
Argument singularity (SIGN)
Overflow range error (OVERFLOW)
Partial loss of significance (PLOSS)
Total loss of significance (TLOSS)
The result is too small to be represented (UNDERFLOW)
Unknown error
_matherr(): %s in %s(%g, %g) (retval=%g)
Unknown pseudo relocation protocol version %d.
Unknown pseudo relocation bit size %d.
%d bit pseudo relocation at %p out of range, targeting %p, yielding the value %p.
Address %p has no image-section
VirtualQuery failed for %d bytes at address %p
VirtualProtect failed with code 0x%x
Mingw-w64 runtime failure:
__C_specific_handler
__getmainargs
__initenv
__iob_func
__set_app_type
__setusermatherr
_amsg_exit
_cexit
_commode
_fmode
_initterm
_onexit
_wcsicmp
_wcsnicmp
calloc
fprintf
fwrite
malloc
memcpy
memset
signal
strlen
strncmp
vfprintf
wcscat
wcscpy
wcslen
wcsncmp
DeleteCriticalSection
EnterCriticalSection
GetLastError
InitializeCriticalSection
LeaveCriticalSection
SetUnhandledExceptionFilter
TlsGetValue
VirtualProtect
VirtualQuery
msvcrt.dll
KERNEL32.dll
;8':0.
@?-,<:%*
I."V29$
!8:49!"5A)!
?))$%7;F
E;O>TR
<7L>11
<7L44"<!
Z<7L=T9
<7L=T1
S:% X%
<7L=T1
<7L=T1
<7L=T1
<7L=T1
?/\<Z9$
P!%F'S"
+&Q\0!:
*\\\A2/
&#:DZW
K^;=L_5_(<
1CYVJ7+
[3^V)>1
M__<;'X
&62_&
<7L+M<;5
&)4C(;- ?
@<#0!Z
/18[PY
9.&2_=55K
R @M^:>;/3
?[&O/.Z
WJJ'0AJ#
CY<<3,
;S\1U(?$
ST)#)6"
03O.)]1:"
R<V5@<AJ!!Z
^<A1 \%3"
>"=%A
+G7L"P
8.73>?3'
2J9" >L
*S_-@??;
X>1(XA
V\3 EAJX($;$2 (
1+,3O0,Y
1*J!&2_
W1.D>
^76Z2.9
3H5".1
!"=)*,]90,<
X2./$!
<I1_U1
VC'#7"
XX6W\8
<7L+M<
8CH*2.
Z(]6;*$JQ
1C]2K6(0AJ#
&.,M.83
.)*17)$
-*'7$(U
#15L_5!F+,
L&,'+.$6?-
][(#!S[[
,!4@P%!!
Q0$U@Z3
Q/FL.*+
[3Y #63
9E'6@,*,
G3O.)]
DK\7#
FW13-2
;+ <5AJ
_CT1( ,0
1U0[]$,
8Y!.>
:>R=M^+
VA@3,MS\4Q!
!Y5Q6&
! EN.5X
S;DB^[8
:A/-\="
@<$1/!Z
=.G3O-M)F
%"!Y,K?
;*X@6$
<7L*5\
U<3B"UE
[3H) >1
+-0,%Y
F7'#6(=
31*8E:8
)*,]90,<
<7L+MR
,+%,?>
\%D</>
E(5807O
,+J</>
^P>;82_\
RY,X3E
7L=RZ$-J
)*,]90,<
N$GU?:
6'G(0=L\Z
1%9(&Q\=
F3JY-0>L
!X>LU]
>,%*]
A,< DZ
"101\2
Q="U1*
%,:%EW
.2"#7;
7H7=-E
Z*2.?>
!64=+%
"<7L+M<
&2_0=J
<7L+MZ
P.=!5
E*.;,^7(!
@HT-
3W1^J<:
%E,H?[>O
4@7(1^
+2&'[>
2J'_0&
E;#%3$
A39B"D
5'!^:
)*,]90,<
9<&*I]8\
>;9/SQ\
:G9Q-#
0P:D[SP
V6)<;M=
?[R36Z
A2"?^A
']3$%/\ZX[M
\CJ<0*#
AJ!T&!$<
T:=$09$6
UG6C:<
IAB.&4
"2$+=T1
<^?_Z2
96#<3L=M1$
&C+5!;'Y
AB :9; 3
9VYES)
_?41+2
SX99=:
V6%<3L=
/_13S"
R<X3E
<8&2%.
F?2E<>HQ_X
UA3AA<
[,/@/9."4
Y\=-0D*
<7N=D
)!#TS"
(;E8<]
2_TK#D
V6%0ISV '
;*&@7#
>\MJ"8B-
)=# =5<)
G3N.(3
*T>DMS
'62_=(9
M\4\=(;
6C-<1Q1 'D
/51)#Y>
*)"(7%
.2?56'
E(5<>>?
E?**+
:2*J&0A
96V<7L=!
&&K-*+
X\>ZI)<7LR-2
W2%$R V
[@K+1R
^<,Z$!=
<#_UY
<7L=R\A
YK'A<
$2 &J1
</ 69/
S2(=9E1
2_0!C=?
/E+L!#
7L,M@ 2J
S\!7&Q\4
4*!6O=V3* ).
';62_<-%3M9A
0'K3^$D;&"
J";$1)
,IM=T2=
<%&C+5!
ZPG=?W
'0#52Y4
_(X8>1
X9(]K@
+$G3OQP[>
2K-5%$+
</>CX!
S"DH8%
#1/1)S2_=(8
='0!
F^-1>1
)S2_=5
.Z/&G7L=
AB :?;,3
.6?55'
'( AJ#
0VDHL"W[
W2%$' 9
*&P+?"
+[$3X=<E1
6![9=
&#5(7!
$,S$%E
+[ ,[%$.1
,^_?B,#
42\=/ >L]%%
WRSX0E
< 4D>
,5<2;O
[)>.^
^?_7% =3E-
5G7L+MD
G3O.)/
8>:.+D
E>L"BB
2_=5#C0/EJ1
B#7][+
\CY4F?2!
&'GP4>
*8**."+":
+!?3C5
B4+"!2>-
@[R[$0.1
4,1K&&&
![M;%
#YAX8.)
0]A[; =3.-
<$*><!B_BZ7
<%&C+5!
SR@?1R"\
86PYY,
D?<$(E
<7L=T1
%K&6%%"
-3IV-.1
)G0,E#
*1>Y=J5/EAJ
![?,6Z;
<7KW!;;26"
)=XEW80
/,!<$2*0
</>C<U$
M^T<=;
2JC$<0
;)\J<)-\;-.],
/$$^A>KQ<
&K)%($,,
&,?00
'0!72\4
.2?55'
)G0,E#
*1>Y=X%/ AJ^:[%(
=^OV7-X
%M1&FE*Y
_">[* <7LP!&12S"
BY&(;W3
,$O-!Z
#YTI:#;
,V8[X3E
'0!72X4
$<A<!>
S!$92<"
I6'X=V
#%KV@=/_^!5/<
[<?G7L
1&<-&"
&']R3>Q2
9"6 !
42X=60>L+5
![?,6Z;
K$!;!-6"
*X:V\B,EAJ*.
TA@)^_Y
U<3B"-
<4MTT^
1>JQ9:! &MY
"5<?L=
07L=T2
?C#\/6
7>72]\
(W2$?
H5G3OQ (&,6"
<3O-)8
?8(@6^
<@Z'\%SA
,2'++MS@4Q"=
'FAL)!=
@)!_>
B;_<_.
,>:L&F
'@"I])7
^<A[#
!/:/62_
L*!G7L&
#^11U1
_X'',H
8+V5W%
.[U<,7L=
PE)L!*+
M,:Z91<
?Q*!-2?
2X%=JB*0AJ**<2
2J'</>C<^&;-
:?L.3
'@"I+(
_>-4X
8>$L:3
;G7L=T1
=K5S&%&-
2X%=K73 AJ
2Z0X3E5=
!H?=T1
6U$136Q\=
8>$19F
=)=?N6*1
=K5S%%&=
-<G3O=V9
>Z.<,7L=T1
MQQ*2
1-*M]
</ 69/
S>5B^5,
2.9=&-
"!2,P
S<!)*,]90,<
="@<;H2Z7&
??N:0
U@);#A
R\'$:/4
B#6P^!<J
",P$!#7S[
%G9GJ/#)
U[5T2\
>@IUXCY
)?>$8U
42 @C>
#I @J1_
G3O $-
7I @J1_
<7L=P1
G3O(6Z
)(4W>,5+4!
1*3:4%!G
'#!'S5$#
<A280/
36$5M%9
>96A.!$=?* :.5
(6*Z#8"4R=-6A
%'-=# Y 1$J9$6)1 ?(7**
>F>".;
2+1+23
0]<$03
-Z?>S
?6>\-G>$^@&
P=!4$)
&:0$"'
)47$C=%&&.-
<%)Z-"4V=.&$0
8( .)*
_=/4.,*"7
#!=9.?$2*
S>$$P:031
8,+$.3*6'.4$
&#*^.(
);:$K<2"
=!"5D.)?'
!:Z%-$S4-#
.7'&@#
D8/](;&9
9=*&I04#
94 )?:
8"*9?.-7!9=6
.>*&'#"'S
*4"=19
?P>\-Z?
#E@J1_
<7L=T1
<7L=T1
<7L=T1
G3O2![
*L>^<D
G3OQ$'
<7L+!2F
:LX598
@7OQTX
7+L3!2
G3O=TZ
G3O,1[
EL%5<'
=?L>!1
G#O^TZA
>E-86#+
23L2!15
:\%V<<
3E-I6#3
GHO>!Y
>-36"7
1HL?11@
?>-/6-7
E,"6.?
@G>=T1
!Q AJ1
<7L)M1
5Q AJ1
DQ0AJ1
G3OU$!
G3O()Z
7Q AJ1
7*)'_)
8-<Y-
7L=T2C'
P?6>*.%=2
2K%0)6:'*6'E
*)R:"E-
W0)<3O
![2'0P%5
2&%34341
"(%5./
=?0&K5$&
.$5*0*
,12*+!(
![D*3)
<"$"+)!(0/
<7L=T1
<7L=T1
<7L=T1
<7L=T1
<7L=T1
<7L=U1
V,3O(.^
_0>L _
E*)V,3OQ.=
7QEAJX
E(=V,3OL#R
_0>L<\
VG7L=V
E/HV<3O
<7L=T1
<7L=T1
<7L=T1
<7L=T1
<7L=T1
<7L=T1
<7L=T1
<7L=T1
<7L=T1
<7L=T1
<7L=T1
<7L=T1
;&,AO/H^_
+X5S/$ B
"^09#+^2
<7L=T1
<7L=T1
<7L=T1
<7L=T1
>G?M>^23
586--_
N2_+-'
I /70;
<#EI15'G+9
-+$S,(6(64%_0'
=4><!6/++<
0-=#-.:2
13'2/#0
=!351W!
U$%)Z&;
G:!&@0
21*3=54
S>$'G^
T12'+/
#GJ*8?
PZ36&"!<!
%FB -*D*
B182Y(
G=I1%<
Z="42)9
&74D&1
19XG1<_?D
82+TFB&Y
20S(.5
,%7:<
'2=54&
11$?&L<5+
].<5%*3<9 R0.5
))54&?'
:(7.(;
3&$.2:2
0$Q>' :
+,?#\0]
(4"K.6
$?MV8\&1<&
+WZ "$\C#
=.>*%"3/!
(>T,EV18!3;
?8CTXG
4E+10=I
:F C$!
*49-C?+C@
1\ 8Z %
%SR'0!)>_@
%;/C:,$
*67G4!1:
75>6#3!#5
2*)646#3[
#31(07
08?51-
=!$-'/0
0'#)#5
6-%@2(
,#:TQ[
+9#%Y]%
$-N5=42%/Z1+$*
*P@6<#BMX>B
BUB>1)
E.ODL;Y7
R X(;
V2@8)X
" ?;"57
C7)SYJ(
=$3/( $K&
$N+'#"
;O <[&!_()
,['5VZ]
A8D"U.
$Y"A@^
747>6*
=$5:>$2>3
>=\,G:
?;R-=7H00
7.<0,7S#8
(%$:6# X$: : %E
=$5:>$2>3
>=\,G:
?;R-=7H00
?'D 3%4>!
)?'<**+'"
<2 V&5# Q
Y<=2DR+>,'
-.17<G
\75!42 R
3+0*730
(70;E=9#5<'
Q2_C6J=M[
<+T;I-
\/^#$'
Z5Q(@9H
E<$0)63K
#5D(Q]
?-#%1-4
\56"& E
$"<X3J:
TDS-"#
.>(58=%$.+$0.*+0
[0(&#5
-#6$!(,+/Y
R?##F;31/,
BG0?A9
/PZ7'&*U%V
,/, 34
:)7&4*
!-\0900L+
@Z2R$:<
4J'<C!
%(.T*$S
JW>I!+$
<*LT92 8
\F>&"0
4=$)!T,
;."\!1
%F56*^
WD!SE'">
+>1AO2*$?U( Y(
3A=T!?$8
K=!300
&/?(/5+Z
+/,1$:0
5X>47";%6I9
!%51),4%&:^ (#)6:!H
9>4"7>>.
.$4=?+
6"?=,3))0
=!$-'(
%5$&(!&%5<
,-$* &%7
=!?87>-
37.>*3B602
2>];>+-
2%:?;,G
<3$$:8
0!"J2>'D
$#4S8(%$#%4*+5
,/'=2*
++':09
.-0.H"
2J1""#<!J4-1E4!]7
;)\34K3%
[,6?(:
>_7#'8+D1+#+O<
$.<!#I,!&
2 "]?6WG1C
:BAI6R?,(
5(C7D
&^?S\;+B*
)6;CR+;
*-S> K
"'#E#
)A\F%3>C7
3F0"8'
/X]:N?
<2&9]%771
%U5#DA
?'D 3%4>!
9/2"7&0*%#0
[F*0P# 
'"7*,86<
/\+01?':(
<>FA==
.17H>1>X
?=@<G>
75>::5
BEB<XF
BRI9.FM
GP?@1""2
5/D7Y]^
T'%K*%"_
0SX>Y%V
U. *]JA(
D /'4=2<
 '5ZF
M6> ,5'
-^.[H^<;N=
=! C%5
N2_+-U
"1,5(5%
.426=#H3
]"51;+<<
"8$0.*#U*?0
'C0?R'/7"0-6I
.+?]'%)'.9
*")%0=&'
;!Q2*#
"=?52
.>%#%00":1>8;76
2%:?;,G
<3$$:8
#4S8(%$#%4*+5
9(%H),
?F!-=32Q
U-1Y/:
N#,&@
#3$ FV
75CL=[#
:5]=K*&!
+*ISB W
54*[$..$
]*?3BI?#
$&(E:<
-G2%&S0#>
*($BM0(]M[Y2
[M=/=C+
;.?D#
&/.-#A8
V2)+VJ
*(EAU;:
2 [?-)4.;-5;..
=+<8>4*+0+31
Y 0EZ
:)7&4*
53'607
+81 3 $
J?EEJ1_/
E#"1'
+88$W6.
$%)^,>2
<.$%><#2%9:!=30":9;]
!<E2H1
O'&^<6
Z32)<-^
;&XEJ9YQC
39?WF%UC,:&1
)"ZQ"M
/;5?'J
Z\%8F[37A7ITR/
6*9F"#&
X(@;B9-
" X'C$?+>
@?E2
F;L>%.0!0
G&%&&9
78#'*0%
:)7&4*
S:#0X?0
I) '">5
 V[F(
6V)776*\8=F
0('V*&6
."I5#DV
3R>$+=
23.6E!1
$:3 21
+2#@I!]
R!1'Y* 05!>
!,=!762
1"<*4"
;*XY+=
6$9;3,
=%S0IQ=
Z10>011
5$P&C%-1B<
53AJ&7_
-)6'F9/
&:3&-G.
46 =03
=,\8&->
'?2H2%7E
5G7R0#!
DRC"U2^X
QS!'IX"
'<7#<X
?R'/7"0-6I
,)8;,1>$
X<-9^2.
*%08M5W9
</<)
.)42.*Y
<3+:[
+] 5;*0
**=0%FQ#
'<S%:
80F;?%E1$F
:BP991
2K;8'>4
B2*_##
<,:2]<
81(#[B<
T%J%Y$$
X 8G:?
&;[!*CE.
>DQ )<A
CH<X7
;8':0.
@?-,<:%*
I."V29$
!8:49!"5A)!
?))$%75
"Z]W1+.X>
G=27'X
U+%[;*33RE%U5
N?5)M8
G=2D$6D
/^[;,
<7L=T1
<7L=T1
=]E,Q63
<7L=T1
K6#&?1
5<7L=T1
272D1SQ\
?-7&86#
<7L=T1
<7L=T1
<7L=T1
<7L=T1
'7>$>6
J1#]0/
U98#3-P8>
T!1C$)A,
-_IJW $
/-+<9#4
Y?*;D7
'*)^&'
_H\\9?13
*$8R5,
SAO*-
!^;A:ZL
>8!#1U*
GS);7%CL8=
\9/$W6
L=+2#$
5S'G57
.]95,+PZ
51+<,-
$1%I*[+
(/;)X8 =
>FIKV$
>K[7B6*\2
09<4;WDG
+#"&7C%
8=%2:;D
00W]_;
A'87M>7&'/8<
%3>;'1)
=#$+X[3K!I[
W#D39\
V+: 2<>.
K4,X='
"TA%Z
7N*.-&
T92=Z\=6:1:>
\*8=:5
L=2YE2.
?Y=C7#
8G;*S"E
F2.*S,
/1V1"(6
(IA*75
L*>!T1
-? /X:;
#RX&1(66=!
G3!#$@
TU :)
H:B.P
T:$IY:-
7*1AR3I
8#8#++G%
]:T<_M$
8ANZT4
/#5AS@
XA1Z*6+
#VN U5
98SR:
EFP5=5
*+&8*T;"
.Z=8%+N6
9>%&!;
A=5/Z85
7T.F%&&]?
5^8-Y:
F."\'&L
ZM/MSDSP
-3.&$]
.-,!#
$2309 1
D7$)Y_G
B<D5)S
"Q"_3A
GBHL5/
$O'F33
*\:<)*;
'8A<!6/G
2.,<\!
5B-<$E0Y[
ST"/"2
DUB=$?
<=] )
Z8C 7@
_,;?HS3
Z"2^=2
=J#8G!
$I1$,ZC
'Y2\1&
P^'R;"V.
0;DQ#;A3M5.&G+
,0-3F/
%8>!-\
[#;;&@&1
&<*\/6
0C;BZ?=
.<6CGPN<
8,-0'?P)"
%A7##
)!^8,S791E
7U>X-W
3O("9<
Y(.Y,*
M #[ +
3$<1ZYE7
4R2,#5
,VX\T3QC
?4)0$
B I:5:!
'48>):.
7,B<*)]6
@+C:>
5$ $99
,4$>2.Q*
Q!F+9
1Y5"O*W
99D?8776?<
; ]!?]S)?1/8
;SUZK
)U5)/:(
1*;G;33
(S_$!*
G3!.QZ\
$&5?_.\
$*^Y#[!
Y<\0<H;"!:)
=%\";?4$&\
&--9SC<V/IB; X5
_'6(#_#ZC
AE>&)\8)V>
%A'%918\]6
#.199)YMV
0;Y9J.
*/R\@RQ
;90"K)
05>163U
?_@V?"%%1
0)?R-X-CD#
)[ J,0[K'42
X=(#$8"C
,0)>_9
R-)]:63>_2
SW3;:VXC
.$(&3'
2$$>X 1&
S?;(04
A?Q3];0V
7<_E9!)
S1WQ"
?+%0!,
/ 9]_Z
S!>;9Y
25.:
-0F3)
;@E7("
!L/I-GU
EI)Y'_Z-+
#,<+_EU;%Y!
#"16N@
$7U@.B4W
?(;!2^"<
L=*3/:
0-LZ'8
I?R?1
+9B .A33
_4,,*
=+$%#5
I1!J"]
.S4<3)H
" #M#1
J,!*&$
4/"4.
:N6W=!7(
?U%_"'$38DL;J^.
Y19N.A
2:E+M2
Z:'87/
K.V;C*
82,'$
FAO$^.
#,"86
41J<$!
M/5'P8
.(IPQ=
!]E17F,
#F!V&3
0>3$X)
SE6K!F#
>4!)51
I9%+46 GV$9L:
%83W"
Z&7U^(
;>6<O/;
;_""=!
(4 _.!
5GA">"1-6
#=%\<3<
/$,BSX
#-U7'F')D82;
,G"I,8
>P%3[=#1
*^6;$.T
I#61[;
/1?%U)
6.#+&8;
>SM<!4#
'UD0!X
91:J*/"
H%G#
8?1*%5&
O ;BA+Y+X<0
=$BZ?+
C!T.>4
%$7!-Z-
;'3_S/L
?CB!9!
(203,3
A-/^Y31
[-=RY.#
(-AB=.
!&24?' =?ED
_'S-\
:Y-$";SUY>:
0*#8:3(
B4+!Z4
V!)F %
;,@"O.
0EI1!9
-)'3E
,$<%*
L![78
@I8!5'5
^]:W46^F
^27(VL7#S
;&+KP.?9
*XD? *K
[M?*&-.=E0
]048O>
=1':;4-;=-2
'$/6%2
W"%?3#3,'J
U<5N;?
.G"*EZ
T/48#GX
LM?Z=]
1*D 2>%T#B
1O!M9.?0
^23(%G
!;GQ\]
"5)!@8
3:C&:.66 3\5H
KX5(?2<
'O^2/JT
Z$:!?<,-X[
_#TM=%<
1)Y..8B
9!>28'
&=?6JC<<DH^%*'U
95; 1^Z
6!?!$-
;R%TX\
_.#$Q.3D+/
.U<$MTQ
5//%-
+.N'#
&29E4Q
!81:>\7)Z-
(O9G?.
#6>&<#
0 >2,Y_+
\44;!
&D/)SE;/
DV0%R?6J
\K=T8
1++<3:96
Y&74!
F*&M6
0>!]A.9$"
@36 FU^
M'OS+$@+
_5),^
+4C9$
=I,#/Y
85DR^<
/7 -<T
8J]=;"
-^*S-S
S8?"?(.<
<5S$RZ
^+<7:%
'>ZD'7
X*<#,8
<>$=*[!
6Q2^3<66E57
4"!>0: "\
9(^GG(!S
]Y17]Q
.%=346
=74)?:1
\]&LT/
CA8B/
6\BAL^W1
2?-212
>7S"**A
? *?)%
()7Q["Z2
1[)^U
:>-Y#V
=^9T8
V#76+#4^
3T2Z;>
S;4;/0<R
='6;%
#-FU27
9.'"15
F0C@V1B2
+4&6%R:5*J
'#8R?9R
*6Q8X!
!>#,20B(7
3;&O.5^9!
02\= =9
Z#"4<
+5+648R/!
,(:<.>5
8$H1P(>
;"#6U"'_
:02Z,%
# )H_(
B!.X3!
,.N0Q!M9
?.%[U,
.]Q">$5"
/JZ3E*ST2C
)E-2+!%
F <D;/
%#Y5'?>/
.U3_(3
P0/2-;
>!:./<
&R@63D
B@'=81Y
/0#%3)Q
%\(!\%
%#0)X$
EH5Q#$7 .
;:)G *!?
%B[47-
201<2.S)!>#
-7*1**2;&
:?6&/;
C35*^#
]Y&J@<
BVB]U3
CTG6;:
X+.;;BW?=
7^$V.%
_=;VD&
1 ;%E&>
*R404"
69'SNG
-<&J?F
$ <)2-^
;=16,%
NS<>+8
!FWO>E0
)?N&:_.I2
[R+[-&0
8%9'-JP
15EGJ(
;1R,Z);
[=#O!V-
R9F-Z)
3"A;O'
<8OS'%2S
;&A(>
8"2:TQ
33&G_$#
&==>A:5
^M<KIW,\7R9
AQ1Z>+
C#P&Y<
'X1)8-
O;O..&
"4Z?0"
#&?;2(
"^<M,!
[[-8?(
T7&8&;
!0/!*< AO
'M+\6*')
14=#:BJ
?.:Y\'"M<15
1\":-
A;?T?BP
M5_ :P
76.:[.
Y;9#*1
3?](3B"
8 06U%79
*#%:+N!
W-UJ(5
R2I) F=
!146+37K
$Q%=?C
%?>RC;P&
-9&AF@
IM!\Y>.@/[
SC@*DF8[7*
=UY!8*,D2O]*;,U,
*4#? ,>##-)
M%^ MV1.
.WX#I1$
*86D#>:<S3
\S*<:1<'
?R)<64
X-7**D
+.))<6V99"
J=>9;1)%
O^TX#;
$C $<CE<
5%*\B
UR[4!T!!3=&
7=;#S23U-67
P>Z$V=
0!U]+A
6"!#TZ
,C6Q-
?E-;[/
; !&()
.>'^58?S.
7D32*$$P
-EM6=9
7:VO$#-
9;+@0?
[D U&_
)G5K?;
["3Y35%Q
?(\?J2
<]*XL)3#0
+1A@T2I
YX_='A<$167,
J($.[+*
:)\,-Z
C4/>??7>
'96P_,G
" GB)-*I
?-:%,1
8@AS->
+7?3($
87&%0[
.%3<3CL
DJ,=;G
4,*S'
!RR, ?
0%(?_L36-<
G#;"Z:
E%AFZO
T=GR?;J'_X&:
-1Z7\G"2V?
<V-^6'&!
;Q!?%[
4'=1'?
\[5'()D:6
1]'#D!7
WZ9,T+(
&UZ3Z"
WX.9S!4
A=U1&T
XBW!,
ID0(<;*
>31R>
J<BVN[
_(!7+.
&& <A5P
_+7?*<
)\R+=N:B$F5=3,
9'K"7:
;#,%@%*
]'.'57N>
%<"F>:?
I$_=%E
..=8>7
#R=RX<
*:"X%;]#8>FS
6N]!>4
/<AQ":#
1A(1>?A
I32Z,-
, C3;5S
=,W]\7%
7\_*!:F?#%/=>
4Y<($5= 9
G<'G:P
.$SJ$%X
=+R@-P
37UL?=>
)" >*
52T7=7
KW'<I)VRFI
S 4 !(N?\
<\6M";*%+]
0U<75<.
-3 >9!=.(G
P"@1M%]
.X'=&%
$]2KW
)6(3C&
ID.E,$
;#PR8M&Z
6%5#4'4
-6NQ5\C/Q
N&H&G$
D9!X4[[
_A$,&_<2
%@;0(^
&D?9?8
!*75?A
&\!( ?>
')AHQ2
J1 '',(#
<)X\=&70"!
6'A9M3
&G=;:.,
/D&X2'
W#5;45
$'\<(>
67#:>68[/%
E3CY7:
%R,6#%
''R-^/.9- =C=
0;3G:C0
8Q<B?\5<?5
[;$08=,!3
ZD'4%?@=41.
@$FU2>
X,Y%^B/1 X
L4[A18'Y
7>W9&,
7VK*B 1=
;9]"-=
"T>8A;$
Z-' 68
6)% 60
_D!.>T
)Y W!=. <-
^C#\4"(
FZ>5'4R
6!*;9V
<[0R05
8GU>#IF
+.1$^+
K,6/ZA*
%X?6.Y
9X\;*0
'Z=#X,Y
%&1!<^'
/?B= _Y
J^LE)2
L*'B-)S[2
BT%["!
%%(><_A
O-M@=0
%655873
)D*+&\$
$3.;(N
@.71,A
^3>8.=#!T)
"$;<5
:+"%XA
ZX ]2"7
0XD%NC4175=4;
/(Y\891G7
K)K70A
/"$[ A
/%-&:=
.]">&^
!R%***
6/\\/$
=J!(!%
LN-@?+
9+3.C?
H,2</6
J&#@#0,<D
903&.
6$F.B([-
/G/_')#
<-&)\7.7
%@+07](
+QB<;?
39Q3^CH5
1!8(81
+A!.8B7=)S;2
-81;K2
+\0D:6
;G7&0-
<!BPJ;+
*_1.T
PX! >9!
?^YS16
?(./"#A
2\92'
$):V)6W0
5%.<0,=
.>,:9-]
!%Q+Y+
"Y.=-:
>)27/Y^^D*
[RR%Z$
2*P,[=8W
/J5#<^
)>"' 5
M].\!#/(
99E"-$
8."<>P
?)SD2J
'!4 >/Y
7$%AT
%+L(9*
D$7=#H
G! "!7
+!EU7Q!
=$$*>T!Z
8.Q$**4*
C-!8%:
3 :*\4
C52.4<
2O!:=7
AU*D5/
,2 2;Y=+B,\!
ET5D !
&//<0!
1!)[-31/R[B
_?K#6C-;
28SX%<9<
1*ZB@O
!5;*8*)"^'
_.[%[ _@
;,@I3>
B(6.=+)3
'/+"*C
)Q: 0M-
PY7R*=^
,L?V)Q
.52HOT
C,4I;Z
9O$,,M)
I"!"+/=@
?>%:.-,
1<;S! !\
]300'7
$<2*22
.8_+$]:
)] 31"4-#
N19["+
35,EP#
9.2M?
$$8<;%
*1!=!"
-9<)1?
'\E9*;
^\ILZ"&
+.7&U93
G2@8S?)
0,_D)92410)7Q1A
Z>W..C=
' "VD6H"%TF
6^Y=/D
Q;-=+D
19<8)&
8[X0:
(;!M<
S/'/R?
RRP)D J;
(6FP"
,];*UP
X\1T+G=
5/&*-#=
# % U*
O@!<L=T
6U_Z146
83WH G%L15!F
: #QY
3_DW3<=E\; +"
Q&GV2??*7
?RI_;@
S*<:...YGW
DM$^?F
&:3A/1
74@^>R
Q;C$B"*E
6*I0>7=
):9*>V6G4
;*W;$<<6H"
8.SA61
T!3)]U'
5;4=?
7Z;YG3
9+<#Q%&
F2J$/0H#
# =?E'
Y,1^240_
13 'O?T
$-DBWD:
%[G04$#F:+
;-23))
[0]Y(M
"[B FZ
6?4?:K
Z.!@';>!$':
" BM#;
33KC%
X$A)05
PX.83=
Z*G(+*
<>#!]$D
R;-4/Z#&
Q#.B5&A
!:*(AZ
9KW 9M
,0412<
:;B, <
'1;YY]6
6FEMZ'
!T,Y#!E
2&-U>(\
>2R\/!
C!I";%/> ^
F?;=;]
#F%,R2
6G^=4C5
]G038E=/![
Z4()+
62:-^)1U
5=/2+YA
!-;29Y
PY3RZ.K:
[;6/Y:[8
;2I! 8
($!T&
$]=76(A>
;,+Y4/F
E+O N&
I@? >
$GD11+F
>;> 0$
>3P'_L;$A
!.#!.
U\458C<5'
%-QZ_+$J
67&2;75
W)_/$4
P@1^4>
D"6S$ P
\-A7B9F<NS
+[Q]^&
/)" .,#]"G
BV%$/+28
5*+P!=
$2?4+8
,>3K.!'%R
+M$5=7
\"9'O<D':
85%9-9
?9@<!
YIC9()%
++C.=G-$?
,!.L%/G(
W#*J'&
=:#6FI
$&Y%,BC<
-, 'P@
76C(C/
'P_4+4C6
=5'A'9'R
3 5B&+
:\%\Y
'8BV99
#0RZM;#
;99/>[<D4_
.]&!?;<2+!
I##(<Q$.E!WQ
3ZC"J/*/
IA-$%>Z%953
6^6U.@
A-(;<F)6
:-+6M=>(
7X.(8V9
3?4Q>:K/DB
&91M([A
3#^ )6\43
F0M<6"_/
#=W9;;
AOV(-0
*5P-(%
&<;/&90U
%(VD3.2Z7C-Z8
#H*[M8KS1
G2%)_)I.
;<Z"W
,U ;V2-.
4%?@N>
6<%R& 3: $'6
R9!6 ))#.#
Z^^%Y/
^Y+"<!
!S6<4P
[7T1>"^
(>$BK*=&
*T=65F
+:;(X$ G
T%J!J2(0
>2ZL7D
=4SR8[
5_.#,9
0R?X?/
I '/X!
9;%$)1\<
.:1SI@
@K>V_;
8]9V=["
%F/53X
JQT8EU#'-*"
I^8"9
7FK6<1)\[.
<:@5DA' %
""75#=
<AGU0'
_)'^2%B(@7H0
EJ8<\[T<'A
98AS<%3'
C$A3-1
D1W/^7
.D&I51
F-)##@=
=U02+\F
C3I6;?*
S>>&=!FV
)3$ *3:^!
29=0U!
#02;0
7#:/HM*
(?5= ,
]Z+=.!
.C9+7#_
*Y31\A,
8 6,:\;.-(DA
)<F'65
2;]3;#?@&8&=
31Q_=U
3$0==*
P@9=-'L"'$
6291,2=+)#F**
4_68-JF
G7@^0-NW6?!
]%6^=%
LC+A(!
8--#3/>3
&:&P>!>
*Q83(
J;@?@8U8
(&-W.4
&>_O J%<>.0
'&=)3"
$-1%C&"/
/?3[Y;
7:L.RA
S,>Z0.W(!
U]C!1Q(*
63I@6
-%IX8TS
8'DBO,5
_FVN?$=
$'!Q'!
30L--9=!.<C>0?"C
9".H@LIR.
1@0D ^6
SD61"BU=
&-_ !4
',DEP8G
>'@2
X7@;
205=A4
=(+8=1
%$+%/J
Q%76;%
)AT&][
$;5X'=
LXT=3M
2?>?;#$
@EKP?\%2S
@TZ'!?C
%))>,H
\&-\5%
#+0J!6
<(2%
WR;PVZ
$0PX%(#'(<V
K82*C+
6G;8R0
M,77%"\;'
!+C;\E
>S>V$HO-%X
F7T* ,8>.
^>Y$;X\
/I,E/
,]T<;_!=^>
#\B(4! DQ'
Z9.%89
</:IYZ
[=!7$L3
D3+2)0_
Q' [$$
3AB*'T ,
"[H:?!1
G(=$*
<>.3" ]9
8+__%3+)( #<(
#.")^=
:,8*/'_@2
Y/I$E)5
$F=<52/
%!3M'1
E!! 2-@7
BVC&; PZ74
Y,/<&;!)?
-!HO]7
<**]#%/_
Q'B&&4!/
!<\59:M7
""L:<>
\1<#T2
7H"8)N&T$6.7
.,A8[
$4)5%3'
V/?33 ;B
?B4_)*)5
6)SC!
[1$^;
!#'ZM8#0?
B&M0J/R:!
3V3.K
?:(14;'-
%E#6+YG
="&2W7@'<6,190'/G
&/A$.5
&,;7-95G;5
-0.4,V
:U9>%@@B:
P>5*E6
>$=<
;T8C6!<?
)'_>PX=
BK " J2
:/)?3*O
$])[R_&>W
RT_4S !
-?E5G;*]
>4-1>,
6$D?8"
:$^X2G
;6G7#+:A
FB):TGI9/8
PI1 1'
!0=9 1
<'<;#*7X9
_Y.Q '
/-'Q0+E(*/TY$
.;^ 'B)!
5_T@>1#.
K&C=4C
:03*32
?%&4B034AJ
*M$]'<
"2E;S
9!.(;1
7U)SC
B^>8N!<
Q+Q+G$XB
0?+RUD
4.K#S,
CE6?G?
Y+)5.2
7"1< 7
"%< [45_
:'6&PG
MX:_A;
!$W65"'
F.*+X8&S
; FF+.+
/=%07[AJ
%$2P*/&
*96%9[
"5*<!G
Q15*OG
U$AR&>;
,BA%O>
)%)2/\
70<S-"
_6*-27
=<R %/
<26 D(
__X U'+-_#21^8I P
*'"9B;<
7/7'2Y_
[>>3^6
!I0:89
&!?7QN!
M!2&'I
>_FW9!
=;8]DV8
S F%C,#HAU
U96+;-@=
/WZ@T6
3!]5J
5)Q7'
J:ZDP"
(B$==*;
23=J$+!
-\/'13
#<>+ M
3>,0:/$
+ Q>>,
Z*4 B+>
$JV#0G
UJB#$#O
==B7,&
> ;"?
;X !=12
_=-BU9P
#=!19;
<#FD/G
'G20 ^
)?<;<57
$"4D<U
=&.-5<":
3+3/1
564XETS%_
E )1#F?
>B_;T= ,8=A!
/%/"I8(
(+F77Z
=$>(7&
=B?!^X'[Z^
"1/1&"
@I%0(*
;U.3?!"T
31C*5<76%
*";L(-
(MC>7#!Z<
['H0(T
Z :!%R(7YC
+57L+_^
WF77H>8=
M%DU[>;F
!)2/^9
'S&5>X
A0421G!
6) %9
:&_2=
%G97?:
;8<,!.U
=&<!S(F%#
&<' +\E:3 %2;Q7
X(2$66C0
S$A$52+%G
&19";,
+!S25>
=' 75'2R4
\:#1> &D:!
'G;3-^X9$
:'A%)+)
8J]/7S
7+"TD#
: )&
RK(".&4]*
18[B@+
I.)T]
07)7D0))
%(MVDY
92-4?1
,%>WZ/:[
>,><*8.Y
*S*]:84C:#
5[+(G=+S7ZD
;3EZ"/
:;#%.8-
G KR^"
( ZE2-S1
%MA CY
RJQ[F4
-'X>;-
&4(ND?63%>
2/?XU8
S#V0IO>
_:-8)#
TS\6DP9C.$=L
9[>/$9
<K**=$
9J87\
0R.U3%S
7<.*&\IXCG
Z:_%E."H
"!(C=A
;."3,F
'!9'U=(A3.
"EK_.&C
H,"&[&'
#785
[.:*6M1
V@$K*#;$R
(7;*>#
Z5NDK5
W7Z-(&
>W)ES8O)/
B26-[*
9<>+YL
\K@0A
2?!<Q)
<)5.
:63>S]
(S0F.H
R>]91^
Y%$,).^4%(
2#&(TL
!05S<-\
@D2.M87
;B*E3
%.#)WS1(*
9='2="B
?(] =
-1+,<;*,
1EIY\9
/*>"!V^
A!0/1#
3.U $L
$%JM&34
!=75'-
C#]? R
]/<Y27
V3:;)
.9>. IX
+[FLL5Y4.+
$&)FEW
EV<0%R#&
#=+\XE6
=)$>E62'
9$N;9X
[22XU1&
_Y#:;&
:#MS#%&
VC35LI
C87]'G"X]
C\"*U8
H^CI#6>_72NY
'0(5<^
*_Y%,T)><#
==%TR1+6
VDC->D
77,P,8
Antivirus Signature
Bkav W64.AIDetectMalware
Lionic Trojan.Win32.Agent.Y!c
Elastic Windows.Generic.Threat
ClamAV Win.Packed.Zusy-10018533-0
CMC Clean
CAT-QuickHeal Trojan.CoinMiner.S32378657
Skyhigh Trojan-FWEM!61D3ABFF46A6
ALYac Clean
Cylance Unsafe
Zillya Trojan.Kryptik.Win64.46792
Sangfor Suspicious.Win32.Save.a
K7AntiVirus Trojan ( 005af85d1 )
Alibaba Trojan:Win64/CoinMiner.75f8a945
K7GW Trojan ( 005af85d1 )
huorong Trojan/Generic!104AABEFF59BB5D6
Baidu Clean
VirIT Clean
Paloalto generic.ml
Symantec Trojan.Coinminer!g3
tehtris Clean
ESET-NOD32 a variant of Win64/Kryptik.EDF
APEX Malicious
Avast Win64:Evo-gen [Trj]
Cynet Malicious (score: 100)
Kaspersky HEUR:Trojan.Win32.Agent.gen
BitDefender Gen:Heur.Mint.Zard.25
NANO-Antivirus Trojan.Win64.Kryptik.kpuodh
ViRobot Clean
MicroWorld-eScan Gen:Heur.Mint.Zard.25
Tencent Trojan.Win64.Kryptik.16001249
Sophos Troj/Krypt-ADL
F-Secure Heuristic.HEUR/AGEN.1370826
DrWeb Trojan.Siggen29.3034
VIPRE Gen:Heur.Mint.Zard.25
TrendMicro TROJ_GEN.R002C0DFT24
McAfeeD ti!B1A351EE6144
Trapmine Clean
CTX exe.trojan.kryptik
Emsisoft Gen:Heur.Mint.Zard.25 (B)
Ikarus Trojan.Win64.Krypt
FireEye Gen:Heur.Mint.Zard.25
Jiangmin Clean
Webroot W32.Trojan.CoinMiner
Varist W64/Kryptik.LBJ.gen!Eldorado
Avira HEUR/AGEN.1370826
Fortinet W64/GenKryptik.GQCB!tr
Antiy-AVL Trojan/Win64.GenKryptik
Kingsoft Win32.Trojan.Agent.gen
Gridinsoft Trojan.Win64.CoinMiner.sa
Xcitium Clean
Arcabit Trojan.Mint.Zard.25
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Trojan.Win32.Agent.gen
Microsoft Trojan:Win64/CoinMiner!pz
Google Detected
AhnLab-V3 Dropper/Win.DropperX-gen.R622355
Acronis Clean
McAfee Trojan-FWEM!61D3ABFF46A6
TACHYON Clean
VBA32 OScope.Trojan.Win64.Miner
Malwarebytes Trojan.MalPack.Generic
Panda Trj/GdSda.A
Zoner Clean
TrendMicro-HouseCall TROJ_GEN.R002C0DFT24
Rising Trojan.Kryptik!8.8 (TFE:5:puXfYWFTsfG)
Yandex Clean
SentinelOne Static AI - Malicious PE
MaxSecure Trojan.Malware.771626.susgen
GData Gen:Heur.Mint.Zard.25
AVG Win64:Evo-gen [Trj]
DeepInstinct MALICIOUS
alibabacloud Miner:Win/Tedy.Gen
No IRMA results available.