Static | ZeroBOX

PE Compile Time

2024-10-04 18:08:22

PE Imphash

b237ac2118704db9e7609540658f5790

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00001000 0x000164b6 0x00016600 6.18486671971
.rdata 0x00018000 0x00005eec 0x00006000 5.11410788769
.data 0x0001e000 0x0052d968 0x00528e00 6.48865721834
.pdata 0x0054c000 0x00000198 0x00000200 3.6129282684
.00cfg 0x0054d000 0x00000010 0x00000200 0.151271325305
.tls 0x0054e000 0x00000010 0x00000200 0.0
.rsrc 0x0054f000 0x000003c8 0x00000400 3.1182911646
.reloc 0x00550000 0x00000078 0x00000200 1.49434928027

Resources

Name Offset Size Language Sub-language File type
RT_VERSION 0x0054f060 0x00000368 LANG_ENGLISH SUBLANG_ENGLISH_US data

Imports

Library msvcrt.dll:
0x14001d8b0 __C_specific_handler
0x14001d8b8 __getmainargs
0x14001d8c0 __initenv
0x14001d8c8 __iob_func
0x14001d8d0 __set_app_type
0x14001d8d8 __setusermatherr
0x14001d8e0 _amsg_exit
0x14001d8e8 _cexit
0x14001d8f0 _commode
0x14001d8f8 _fmode
0x14001d900 _initterm
0x14001d908 _onexit
0x14001d910 _wcsicmp
0x14001d918 _wcsnicmp
0x14001d920 abort
0x14001d928 calloc
0x14001d930 exit
0x14001d938 fprintf
0x14001d940 free
0x14001d948 fwrite
0x14001d950 malloc
0x14001d958 memcpy
0x14001d960 memset
0x14001d968 signal
0x14001d970 strcat
0x14001d978 strcpy
0x14001d980 strlen
0x14001d988 strncmp
0x14001d990 strstr
0x14001d998 vfprintf
0x14001d9a0 wcscat
0x14001d9a8 wcscpy
0x14001d9b0 wcslen
0x14001d9b8 wcsncmp
0x14001d9c0 wcsstr
Library KERNEL32.dll:
0x14001d9d0 DeleteCriticalSection
0x14001d9d8 EnterCriticalSection
0x14001d9e0 GetLastError
0x14001d9f0 LeaveCriticalSection
0x14001da00 Sleep
0x14001da08 TlsGetValue
0x14001da10 VirtualProtect
0x14001da18 VirtualQuery

!This program cannot be run in DOS mode.$
`.rdata
@.data
.pdata
@.00cfg
@.reloc
uKHcQ<
AWAVVWSH
Hc=FZT
[_^A^A_
t.ffff.
fffff.
UAWAVAUATVWSH
ffffff.
[_^A\A]A^A_]
ffffff.
AWAVATVWSH
X[_^A\A^A_
fffff.
fffff.
AVVWSH
([_^A^
AVVWSH
([_^A^
uVHcH<
uZHcP<
u!HcQ<
uVHcP<
upLcB<B
ffffff.
AWAVAUATVWUSH
[]_^A\A]A^A_
AVVWUS
[]_^A^
AVVWUSH
0fffff.
@[]_^A^
AWAVAUATVWUSH
ffff.
[]_^A\A]A^A_
AWAVAUATVWUSH
#ffffff.
[]_^A\A]A^A_
UAWAVAUATVWS
fffff.
fffff.
[_^A\A]A^A_]
vm{5jvt
QLQ>I>SH
'lzl{5jvH
X[XnXi\H
(/53()
TFDVSH
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
AWAVAUATVWUSH
8[]_^A\A]A^A_
AWAVAUATVWUSH
8[]_^A\A]A^A_
Argument domain error (DOMAIN)
Argument singularity (SIGN)
Overflow range error (OVERFLOW)
Partial loss of significance (PLOSS)
Total loss of significance (TLOSS)
The result is too small to be represented (UNDERFLOW)
Unknown error
_matherr(): %s in %s(%g, %g) (retval=%g)
Unknown pseudo relocation protocol version %d.
Unknown pseudo relocation bit size %d.
%d bit pseudo relocation at %p out of range, targeting %p, yielding the value %p.
Address %p has no image-section
VirtualQuery failed for %d bytes at address %p
VirtualProtect failed with code 0x%x
Mingw-w64 runtime failure:
AAAAAAAAAAAAAAAAAAAAAAAA
EEEEEEEEEEEEEEEEEEEEEEEE
MMMMMMMMMMMMMMMMMM
CCCCCCCCCCCCCCCCCCCCCCCC
iiiiiiii
ssssssssssssssssssssssss
MMMMMMMM
########

dTR_XfRcUT`^
33333333333333333333
K>KMJO@>O
%%%%%%%%
{{{{{{{{
{{{{{{{{{{{{{{{{////////////////aaaaaaaaaaaaaaaaaaaa
?@CE@?
////////
99999999
DFC7D92C<
OOOOOOOO
????????
kkkkkkkk
oooooooo
]]]]]]]]
YYYYYYYY
UUUUUUUUUUUUUUUU
}}}}}}}}}}}}}}}}
eeeeeeeeeeeeeeee
WWWWWWWW
GGGGGGGG
mmmmmmmm
ttt+aotb_+`lj
gggggggg
________________
KV^USVHK
^PUKV^Z\WKH[L
##1plfurvriw1frp
+rma^qb+jf`olplcq+`lj
GRZQORDG
PLFURVRIW
#.6-+. #
6(-#.624/# 3$
)/. -1$
-*.*!/
4&+!,402-!
*& /,0,#1
!xjoepxtvqebuf/njdsptpgu/dpn
[a`R_cVPR]NPX
ZVP_\`\Sa
VRL[X\XO]
{'{lsljvtthuk5{lsltl{y
5tpjyvzvm{5jvt
UPUBMBW
A<A.9.1/9<08
QDQSPUFDU
3:E5676?56C
ppp'nl'ghkmhg'\hf
+,/1,+
lll#O^aanV#Xdb
RHZWLYZR`
NWLXLa
7yjwmj|nl~{r}
K@?62=2C>
__C_specific_handler
__getmainargs
__initenv
__iob_func
__set_app_type
__setusermatherr
_amsg_exit
_cexit
_commode
_fmode
_initterm
_onexit
_wcsicmp
_wcsnicmp
calloc
fprintf
fwrite
malloc
memcpy
memset
signal
strcat
strcpy
strlen
strncmp
strstr
vfprintf
wcscat
wcscpy
wcslen
wcsncmp
wcsstr
DeleteCriticalSection
EnterCriticalSection
GetLastError
InitializeCriticalSection
LeaveCriticalSection
SetUnhandledExceptionFilter
TlsGetValue
VirtualProtect
VirtualQuery
msvcrt.dll
KERNEL32.dll
"#?6:&3
$3R4039
:#8?-
,15( %?9
D(K-Z1
PU,/8]
D(K-Z1
D(K@Z1
D(K-Z1
D(K-Z1
D(K-Z1
I=W,?C
!V5?7BB
EGWHC/
%6=5A]$U
DO%=??=5V?
?H(=6A^A-
@?9"$?=
D$R(+ DQ?,?@H
5?+U,#&"
?,K-Z2
VU18V!QF/QI .*
4[,/;U^X
ZIY"DK
?'V5V?
"=5A4IQ
6.'JK]
WZF T1=8AM=W0"
QU,/;T
LEJN5>
EKP115V)V X
18:/K9!12
;/B=21
H. 5@?
[YQ,J>Y
#0=5V4E;
+*%2?8
%1<Q*
\U4SB+
D06;7
&5ATT
?;M:J=
6Z.S<1
PT96=)V8A .;1
Q, =08
.6S3=I
%&0=!Q
;"32J8]
D).<Z9
75$6.39
24/(K.;1
!!-5AT;*"A?
!3)1#-Z
/E$CP7
"A%L2($
Y-D4>P7
1'(5!7
$UE 
.7BB_9
,3] 9U//K;1_*1=VQ'5-Z
01$&7-
H8;O]M9
<8ZUB/A
<)X5A4I
QZ%N5Y
>7O; Q
3MQ-"",
S5K<"1
! A3V:
5%3.69
J"%*8[P
,/8]+:
TZ0K+"Y
\=!;<'1
Z^X,E%P*A=
F&)*8&B
?'OB 2
>5X6A^
C@!F9"
6]])"3
<<6<O]^;#
Q"$00+0K^
X<=5A4I'
Q1=99?
@?>*7?=
=!@%P2
A9:G
?@3UB/AQ8
,3],9UM/K>
U^9=;(
;'VM%<
5+=%V!V
W(%]BI
;. !3)1#-Z
5CQ[U=$
/J<C^Z%E
?]@!*4
XS3%!W
5*EVRV
G[I-Z?
. !3)1#-Z
*=ZU??9
[?.HE 5
!,\'"*R_
+YI-)6
/K;P9R
YO>@&W45
4**@R=
1@_-U
,/;U^XL4+5
>SKUU+D
1%"<UTW#E/
)$;M.?9
=-D%4>C
2/:?JA$(Y>@
)";B.?9
61).9'
GE+28Z9
S?JA$(Y
$+. !3)1#-Z
K;;8P3
Q3 OLG!
Y6Z^D>%
ZV*D(K2!
'34=!Q
K'4.43
K%KD<4P7
N /."3
'D2V!Q
ZQ1,/9^
6S:$'H9+>H8
$R%Q'N
S[F;,-/1
1!%9%A
J=8@Q$
5.=5V!@V;B>
?6101$&7-
.Z1-Z2,'
+)?=5A4W
D(K-Z1
,4CC&-!/K8
(7=(/1T
,J;)*;5C#PV-2
)V5/P3.
-F'%'F4
5OB821
T)?AV'&7
/;?6?=
U^Y=8*
D1-*.?9
<H+9O,JB
G>#".(
!4-<@/
D+JF[1
4:-"4Z$
VC.?:?
P2,(?=
-<=8A;
P96A4I
S@K;)@
3/9KGQ.
9W3.?:
Z_9)%&1K
_U4+-);/
%W:G>!
X%D+%#&:J
45:'.8\
9-+"+:
@K06#8
+!=& 
LL#/DK
A*G>.Y.+61/
?,K?C4
2'D(06
6K;#2+3
&!A(36.
9#--D!
,/"]4=&>>
4()/K8
,/8]+&1
K>%=#6
Y$,J8C>
%(K-ZB6
F"P%'%
="+!%2
[P:":&.
? A3+
0L0_>?
=*=J=
["$SK-Z@,
&3'=!Q
;*/(K6?C
)V @5J
U4][1
*3MLB-9
?=;7 D
9D4I?'C<K"*
U3'.!>
<]4Q88=5V
,J;)++5C#PW==
)V5/P3.
-F'% 1'
!\*'?=
)V XZN
VOK>?
Y7F!/$;
J=8A>
54/2
I9 A3+
Z;*"J=
&<?(K@#2>
T)?AV" ;
@?>2"J=
)=5AK%%
,.P0L4(1
\NU$J=
'5OB<"1
PU=%V)V5/P
YKD$>+7
%)-5A4I
QB.OCJ=
R;.9I
U3"-E75*
B="MGD
P$Q9K
,M4C%-
!VEET3
?=8"?=
K\>X-D
32$8=D
9?(K?C
[D(I.;
-D]$3G;=)V
*BK4Q1
:C],.1D
(C/-68K
?= U:0
40K-Z2
MW6#6.
)BI'+=
\*=-D!
5)X5A!5
X)X5A!5
2?YG/2
UC"<1$>
LP4,/;8
\A042.
?%7>0
R!)4,J
M6<";7
%V3AK8
9!,&$;
"W42.
I8CB0
.=NI%>
X-C<%U=#V)V
*BK4Q/4
--*F]E4N%
,J<C>X
[($4K-
X"2'D(,9
BFT($<?@
#5K=="1
F)"0FDZ3$
0G3?+7
3'XI%_
,H+(E J
S\5FKP+
Z5/R6.
11AV;;>
,/;Y^3
0W+.?'
<HM5#,L
]JE<<;7
G<*ME
(W/K8?
<Q38
0U44-4A&
,J8C^E-
D(K2YE(
>5K%>"1
D:-5V?
5S":>52
X_9-]>
4X-D4-<
_[_+4%
"<=!Q)
3(! K-
<3]^5;
%T+&(<
3MQ@"9
E+!>P*"
%<=-D*%
0+9C1K
7+(C!"_E3P
D?!9Q71Z4 ?1
<XIGI]
B?]&(2-
"Y&N(?=
<V!Q2?7
DN;8^2
"@'),,
BU:<5A
-Z2?](G!
<F!U)
/8]5"-
47;%OA_
ZV*?(K8C
1R/:\)
,S8"T9=D
*5!1Q
U$Y+>*
M6[;"? A3'3
3+8)2UA
32+W:D
RAS1&.
^(--DKPWF8=)VI;(Q
7W1A207
)@0> ? A^; Z<
'K%=>=5V
X-D+-24N!V
."-Q)
E.9>5*>
")9+-#8
%=/$V5V64S
,/8](:^(.
P].Q&.
! AXU)
!Q;X-4
01$&7-
#(K-Z1
/K;//X
J=$3U7
,/;U_=HK.5
#>5*55
#,\CKK
,/8](:
]W3>3U*
5%3.69
/K;QA
^3;\I&5
*P*5-
M6[<I?0A3'3
338)2UA
*BK4Q1$? 8
?0A3+
".9.P3
*BK0Q,4? 8
"09D50
30ND^:?Y >#:+3
5C_ >1
,S8")9%D
60K54X5A!5
)@0;2?KA
,Q#D:9
PU=- B
7;&:;K
5C#PV=8
)V5/P3
.= Y*P2
2(ND^:?Y ;%:
. !3)1#-Z
,)"VI.?:??
0L0/%2< 
4$<?@%
)/VI.?:?
0L</$"!
*5!1Q
Y\5=-D
,J;X_!5F!
2?]0F3#4;
(00I.?9
MWS#&/
Y)%".
=5A6P2
+!=$ 
",7/,'.
G.VUB
Z^3SDO2>%
.HER *
K9'%T%
+!=8 
-)V4G'CB'
""$>.
%K.$21
*/=C$L<?#
ZP5,/;8
+-CJ3&
C7K%<--D
*<6<PV#
"V4=M2&
:C]W,1D
]0D!"Q;
VW!FQH+
W9Z&+
[RA 42.
% !-!Q
ZS4/0K-\
B?;U^2
24I.>=
2@6?_Q4
D/CFPB
' S5.?9
X3,J8C>X
X0X5A!5
).UE
,3],4;;/K;QY!J
](46.
PS*N4M
1[I",K-Z46
M2[="#0A
;#3 J8]
"-] *6D
M%0<2 KA
"V4=W2$
2<Q0H.
F!V!Q;
:1K: E
;([#?8
A.K=2Y-
U Y+E=%*5-
S9-Z1"
)WIG[/"/1
5 ""V!Q)
3P*.P
'1#=!Q;
WP/,/8Z32
"V4=P2/
,/8]+&1
X4,J8C>
5[!G(K-Z1
SP6,/8Z32
X4,J8C>
[$"(K-
"V4=Q2
$/(U"/9
X-C<5T=$
5X!=6P2
K'4,S#
/KC"<SR5
$V;7%D
J.YBU]
0P\B&W1
6S:$'H9+>H8
7G3,6;.
6[IC')&
<<=)Q)
U2-?FX
@-5..
:40/29
("('.-";
@D,#,#1
AR6T[!
LE/")]
B@0* ,
XO?=-3%
UM]='46
C;&6I:$
%=!QD.%6</&HY.GK$
8LT+7-
,"@U^>=;2
]9%%&,J
+2(1WI=5
*)>"/>Q32
+:LW)3
.D$/P7
.D4/P7
.D</P7
C 8K-^E
,/>:P".
$;2"#3T-3
3*2(32 24:3
85*2?::
8(2*B41(.3&
>!Z.%#
F.&><.
*=1/&0
%7)>236/8&,=39
.19B74
/58,'
"3#"156
8? 1*6F[)5
N9$*5>"
3#7*J+"
7'=0$VZV
>SK-Z1
1 35>54
!663)1)
4'9":3
!&0!81
8& =<)>;4
1'S27!+<1)&"7*
,%6:7*
W+#7154
1:5%/50>
6>0:C<3%0(4I
537-;16R309= :.471 #3
09-93*6*!! .6
2655Z23Y
C:#8_<%3]<64& 55V#7Z99';2>6"
"8.3 ')?6
4#1+=1/.'5
!-'9"*3" 2
#0=#5UZ
D(K-Z1
2A=U U4T
W3U&O/
D(K-Z1
D(K-Z1
D(K-Z1
!L*K
EW'BZ3
DO4[&3
<:G ]7
?)1-]B
5V5?(K-Z1
%VI?.H-C=
?(M-[1
)A-%1G.
VV_?+>-C
Z0>G?
%VA?.--P=
.BL K1
.9L'K'
)V%/( -X
5A152'.
V ?(0-X
%V!D(7-Y1
A.P1'.
A(P1&.
V9/(+-Z=
,J9=?-.D
D(K-Z1
D(K-Z1
/K99RX5A
D(K-Z1
/K>\R-5A
,J99_=-D
D(K-Z1
,/84MY-
,J;-_--D
D(K-Z1
/K>=R=5A
,J8T_=-D
D(K-Z1
,J>?_=-D
D(K-Z1
/K>5R-5A
D(K-Z1
/K8?R=5A
D(K-Z1
!Q $7I:&14
*7*C?2
6)G5>!$31)4
&1&#%%3
&&3Z=3
1&Z1?9
01D(K-
724*3K8
I.9"+4*=
0)B-#;**
X-D#3T
!Q5&V=6
,J;$ ("8%
3;09"O3:262
8!1,7=!
+>?9>(0<>#6!
3)C=6)242
0#4:+6!+D
79.230
'7<B4")"&#0=2.
5V:67/<
>.1<>%2",#4:(
(3)('$
//8[4=19
.(B.Z5
/8#/K8
57P8$,J8
/J8_4=!9
1@-/T.T29/
P&S/L8
$"T,M8
D(K-Z1
D(K-Z1
D(K-Z1
D(K-Z1
=5A#:>
,J9=?--D
,/;]<2-
D),%Z1
/K>\7-5AV'
,J;-#=-D
D(K-Z1
D(K-Z1
D(K-Z1
D(K-Z1
D(K-Z1
D(K-Z1
D(K-Z1
D(K-Z1
D(K-Z1
D(K-Z1
D(K-Z1
X) 5=?DS
/;8N+<
D(K-Z1
D(K-Z1
D(K-Z1
D(K-Z1
D(K-?9
#S )D
.V%WH1
2!E<I1
+*?0H:
(S82P2/
"H5:.$1
$/49?).
?-V1U9
42"/)8
0 >8*5/-
T91&"4?">1( -B*$
*'%#T"
196-::
(X%B>'-
S546V(7Y
8:49J*#8
46'*.2
1%6;;L
.G>Z60[!*@XT
S@8,I.]&
1!UJ@#29(48
-39S
=VO@X\U -
L/S6*+.%/
67312671/55Z-1
&<3S3T
?(%4[595/
* 8&!33=:3T[
"!42$!1:;
.R526$
D$J9 B2
--U:D$
!. !43
W*=@Y%
1!J*/@ ;0C5>
'+-#72WJ
? ^*2=
>35M&0
%@>2Q$3
#+.85!*
3."6#3
&418&6*$)+;"4%3
1 I<*5?
<">=+#
B#&6'0$
31 1$:
61+H0*:)5
&2"Y$6-<=3
=&/ 7:
1&780)623I
TI/,J-P:8
2@D-P(
K=4G(
1)&+;<4=Q0
U;J F, /
QZB=:6
6;.0?C5?
,_3WTQ
)+)/0H:
5=-@
,J*]5+!
)D8H-9%)4-
80&::8!)G:7"
*"3=3?
%565R#!Y-
!# #Z;6
*9O7-"8
=*4H!?21$
!=B)$/_(&
6-34%526
*&9+4#?
2"#W7558?% 1O8J!
-5/)93$"%
V-U:D$
DI.![B
AP52@+
EV+%$*44
502;(%
L*=5DG
6(60U96(5
8"=4UI
1%K1">
;"71-%
+P!M,>\
6*4'3Y
09".;*2#=%4Q0
P&?7:(&"S2,?!
67#3><?5
107)D5
09&786-
14"04%
90--B-
47:3+!8R?*#1>5
1&7>0)"67
* $",.
2$.5''S
4$U-)"2
..8!?.31!6
32&/7
6>##-'1
673*G ! 4%7747
/1H;^
.3 ">
2!E<I1
-F7*W11JG5
:3=?>$.V^3=5
:&1/'>:!2
5+;W!V=
>%C-2(!
/H0-0[-
$&94'#8W
"#"967[
07!565R# )>)0
V?3XF,**
/2T17)
:1"+,1
5*:5 /BB
=%E6P]
9%767
=3)2B%'T+ -K(2[
5QG;WZP
X=*UI#
6\+: 4
.4 $(6
&_4*)7
%";BE[@
;9<3!7'@
O2&#?)/&
S8+%0
D'508N9(7
+[52:3
+4"4/0
?.#8W12Q2/
63" ,3>
&28%V4#
$03*U7
/=1-1($,G92",'4
%]6S"%"
#!1[.!Y=6"
J!2#D J- =
)P)?8U8C
:*.#31
-7)C)??-E=%":
$*A--:
;6*&44
+$9:34
#=8:3[1
6S2#! )&&2
86.91'R/
0&83)
8!1:7-
=427"33
TV =&#M@+ 2:@$+
W6/>%Q;
ON[;;:27
/ >-?:
'4;*0S
;BW3T/
GI!+"=
%:2423
7! 8"=7#
/2N)701
?22!%
*&:79#<5!
5U>--%
=1"0)<249/2
W'6RA+5S
\66%1=D$U
7:.'!5
-07S4"F0
85&/ 7
=%*9N&
N'6524&
YZ'%/+
<5$/6\
)CD$T#@F/Q
#%*(3@?]
YO((@>.
//9#<U
;W"5SU
6203]&
,J<\5:792
+K"A>67S'J4\
+)0%)8
+6!+>
;55$<?
"<7! 8*1!
-2&3?&>59<)O%=
69:" <2<0!
/1)$=())
//"_2Y%
/$Q C"
,)B6%6
?F1!Q#
#S )D
@BJF6-
7:Q21$..K#@
NN@>A
U4 G&;
]">4*)5
)1/5OL#00(-O8>T
5X+>);.-
2*P^(-
7AQF04;
<I9G'Q
/5$,=)C+0*
311(&6:
46:./0
8?$-!>
84)%1:77+"
/&T96&"0=">=)9
+P!M,>\
&>+?ZV
]'D4"7
T9Q>4:2
9G<>>MR++/
3+0)%"@-B6
#Z:!3C
S)U'"(8
?#%W>4V*
%C2JWNEC.
"#?6:&3
$3R4039
:#8?-
+5P?17J
5ER0)DA;_
;AO:*7
25P?1?2
7/>-1A!D
WWI?+C-/1
D(K-Z1
D+K-Z09%
D(K-Z1
D(K-Z1
D(K-Z1
/>-D436D
49W=%+
-P!(<D82
/H??%>R
LQ1PM@>=5Z $
5Z )>[(
^@S6<X<7T3#
&#8.%]%
V63 6\!+1"%M(
55$*[_?
B5747$/
TMAP@2,*?
3;7S79R
:?X1W
7; CTW#1"
R)U'7;
7O+9D;
#/\08
X&L)+>.(=
@@Y&23
>X]1LN
)C10?;=E
J!!:#1
BVK1P-QK
,#1';(
G*\C7>%
/ $I;%*
A=F+X
554-M.\1F>X
)G=7SU
9("#$
M:7FUM
R8.EF!
-!=(&$<!
+,*K2V.
*$1=0#@7'
M&3;;3
@Q940066R>
3W:FW<;^[(
W;'Z7
%L2(&A
'K<^<Z)?
@0K9_9
#'9ZKD) <
;4-3,D&"
-CK-,(Q8,
%A"Z.DXQI_C9*5
;0=4<P%[
<1MS3"!/2;<(
-(;>"HC
,J3B=F?-;$
!4!TLB
JH\]ZU9
&1=,-M
0Z--M/5
G>T##;
9=-':L
?G=QA7#
" A%?!%
*<\P01
\P)'UU0
$B60"%"
,1&/535
'MI_G-
&0/)F1]$>=
$(F4O_
?0]<-(7&(
100/NFV
%>95X 80A^)E4<PR.?:7
888+D<
7=B8(Z+6E[
=W#11)
?1 J@
"O)5X?15$I&VUM
$+"!%8"=,!K
?.$'I& ;/(#-
! 5P)%1A
54(6K8CP
';!>I
"5$OCC<
!MPU#,"
@<*)"EK!Q\'J
273=U?%
3/9;!<2
6W/^A)4#
-,WD#
2=X,E6
0(-NC'
$:-I@>
62"D*+[-<
P(-A14-B;
?=C.%--(E"#,CO0"
.#801:8L
^#O6O8/
JO*M[/[;<!<*.*G)
=G$$(7
%/;,!EC==:%2
(1%&<Z
?9V.%!
/KXQ&4#
&4L=$??996F8+
J =\B&
*R:C;I(7G)#
!6(<>G6
D98-#8
5-T(;:
1 2+\O8
-7E_ -1
JE*9")
KE?43"K@
N>)$+#
-81"#V3
3'K;,Q
3?.,>W
'-(.A
9?46$'*
*D.S-&
7:K8D44P>GT
;3?$I3
M69%%
X,02>%W
Y3Y-3\*.B
,QX$/ G\6
I)E*NB
B,3\%@$PR*
_*@0T\:>?
;)M3QC
;.0!E(8
4''&7A36
9%F:(XT
20!E00!?Z
H+7 0K
+7)E&V
-.30M3
M?EN<0
-5')TEO
Z.?+65
&+R9.]
*$/.+U1]#
U'"-UJ 1J>
U$/QHS
?"[<_,
4+<3S 8
##0/$L
H3U?_,=L:
Z)=T+66
8)-B"F-
#.)#;:Y
QCNTL#E\*
J352^,;
Y+16R1/\N!
;SPE/9
KK4U!:P
59K2Q4X1
$HK!Z2
(_(1)*!
%V?!+;1!
V,);"
W[R_>*
'57@>60A
,/'GU!
=W'3:F%0
'D+W3E4
0,<?0"
+8'('6:E%
!+<"X1
\)2=@10.X
$KC_()
'13?E"-)
RJO1P@#U
%+)705.
;<,G2;
/O &/+[AG
?\=*.'3
7()5<Z
3?>R5&-
*5:1."I
5WU1/GB(
@W9<3^
(2@!18,
;OE2QL!
&53FH@
&U338I
2;[%AQ(;
$4P-LG
=C?)VF
,5!)^]#
8<.- ;
96(<7#!+
M_ ](
.$'@)NA/F
6"=7"-
:704?:$
9 =@1Z
!=58=
R7@:N7
/F,?,71@$;
/#=<G#
MCM"4Y
%!9VS+2\
'$>>.:D
M2?O
15<$-6D
- \B!>
M)#+"<<
+2^C0!-#
Q-YA- 4N7
T1)1"A
\<C6%$
EBS/+'1V
Y3Z<^P(
-T@>7'?
%=>TS00
]6&3$3
4?>,6&*
Q=@6')
GUK2]0
&! 8D2A+,
06L&N!%/
7(T30:
T9FQG583
2^;%'2
L[*2;,2 2;6
& CV74"
</5$NX
B3Z<4
C#<?!;S+U$">
*W>D$#3QIC
H9J'4W0
+]Y(- 04+
D!Q6 L=
/S@ZMA2
1;>$1#
&65<?[
Q[^2?5
#<>8G>
)T6!P#8NTZ 5!QB=
C01)_!
S21],Q
N6GY
%K9?;$3
9WWP//
#-Y.71K
&:Y5<"=4
%$2&4
0?/.E/+%52D9. T
J35$P8MC
B(.)&&
"4'=0*
+;.&!46-[1
J@)AN1!@
,2B;?.^
0%:G$55
%6*_S9P
#(<1>QY?6
0A"(,E.
F /U>-
/V.)-7
#!!XTA71[6?+E=I2X@
3JVZK%\
/335$VF50U2>
P4HXQ>
U'<>J:
Q??-9K(
%W -'"
K?Z$K&N
415>@V
10-VD.#-3
#!K&^RYU?O*]
U_?7/[
)BC>/>
*"+SEW
-"-^*3**1$
-0ICQH
[17:-;P
$1()T'.
5Q<]0<
9@*?"=]
'#)=BQ
#K#HNYM
#W/5<Q
!R&"T5S
1".4"!
):C^(;P:K
6V>/D9
X33?[<(6
>;O%@]"V8/07#
3-E*"1
> "5 <13U
$3SA"[/
6E1?23+'H
Q=F$%7
V8 # _
5;I=C4
H6EAP4F
+R4OM,-
L0;'6
^M?53V.]X$
!2Q,5G
(,5>9;U8/=4
OU1B5&1
H:W80&
8'#C1*
%"[)T4
8$(2)EV
]E(C2 ! 0
+A&3E&
]=X-5U8
!$9 H
* %D+8
-YD 01
ZIY3&&
06+Y:@Y@
[17PUV
"O#=%9
=E-<<1
S;* V6-+8O
W=K(T$8![
?*.IO1
:'"MK7=
85&'%CK:'
M!"#4:
<?[?;QJ*4)
'+*A-J
\*G51;,9
!;#>6P)X:0
8T7]1CW'%
4%?03JP
!<C##;BY"WQP
817?)
X?6PM4N#N-
9$5B,C4
83:+7 F
H([A9=
25 F0Q
M72%02;
68$-1G
0*6MT;$<$
54@46B?)
'+9<D5'??'D
N21VR(DS(L*4H:(
,N?=R
AR8+F 4
-M%:;WP!
*-X:\
$6#K;
(6&#-1\
3]=4VG12)!3/1
!H>!V-
1<GW;D-
/=VMR
4=:!K-
6<7X'C?Y
%#!($(
S '?0?!]J2
K4TA=,V.&47
'8( %'G1!
RI!# M
-N2!3Y
T?]M)X2]H
J"=">5
.1]5P\
:$;R%V
E;P$%
&7!08:#&4
;A)H'H-#.A;/9GJX#<'+
/%4^/
!)%1=[
&#SA)*"
22"%3 )
";3I#C@
D?384 -%#::S.1%4#
1N245Z
-?0&$>
%T&0UQ
6>@ =-
+S.42#]
E8$=!00
?R9:#-
3,"('\%
1 :%N#66
N63:7 &T6@S
'?WQV '
$P^"?[T)P
:32"@\V
6Q?,9N9O
]<818+P
)Q69N=&
"&51<#4
=4<3!!
0%F!/1C5
R)ED7N
,C)!7&K
6A4!R=N$
+@#P\!=
$/1H"(
D&[-!9==K6FD%(V
?*T(4!6-.0E<
90)'K=
9?7!0;
L#>-" &"P
1?6]GH
!I5,N'
TTT!CWJ
(*8T;C
QM:'%!(
0B_/Z3+O
<5:W,%
/$_' >"4
'^>!?G.M
?<M-[X
SYT1=).
\?> (-
4#.A?C
:O69T#D2
V\5!9&:
B @7/48
!4!0'*"O1/0)627
-OAFFD
Z3@1!)2!40V#;
L#")8=4"!'.M
3I#&?\('
5V3$F4
)2)FP5=,
&? *6)
.DO@#2-R
Y!P1@-
9Q<K@:
,:A+3G
@O<2V*
"85+!1D
]**.NB )
^1E1P7#?
8+,]4J4UW>+U
]X0\!6-
6F(4#*
H3GFZL?
?QR"%:
I'$I<<\
*..,K]MU
V%?"Q'
<&U'344
3%O;;-%K6
#820T-( ?
G?/"2B5#+
,K7+EM
3%D0)/
6/!#@Q
"/,O<[.90D)661%=P
-)@,<3
6)"!Y&
R-1O/(
7?.SR-
K+4"RB6
,@K1&6>(/[-
6+'B4(1"[OM+
57= 7['/7U0;)AS4S
$HR@56
<J-EM;
/"F#*+
DA519
BQ?04C
3T= WP:
$943Q4
#%/-Q
1J1T-<?
!>0)P#BN
5076%.\W@
>=:$**I
%%I"3+T
.4&=!5
,?GP0)
@I"]5.2
6<4A)(
:!.(D*#+8I
3T.L:(<3
R1D2"Q
Z;$& ?
2@O1\5$
M> 18]
>N*&;#4(/&_%*
+3Q=);
999$[Z*0(
?'C@5\
#=?&YG/+
IK?8RP:>G
+M# $,*51
,#.AN>>_
61%-Z"
")?%U;&
.RH!=A&
>50?L6# 2
6.%^!#
*R+O=)
&@.G@/+ &K4%
K\*(-#!
?6% 4(Q2
VP!?5/
"0?%C4
P7ZM?[
@4OBA.
.^>6**C:
Y-7.'&
QPN25!I22
66A@7^$QMB.G(4=
9%1*0
!)>6D7R
1?D.*2(-
K6<9Y1$XI
6E$J(*H&7
(?96.J
Q%@8!9
L<;F&&"
9!3-=VQ
@66TB=>(-9#+>Z
%,=%9D
+S4-LKG
/6</GW1"#E
NW6VH385
"$E-LP'
7'\43">
2H=[&/FJ$
VW":Z<
D@L*23%=(
']#Z+,?J+
"C".)3 =
6#G <Z
+VV4K#
;EINMCC5:
;5B..,"</B"-
$Y5^W72:
IY."%)&&
\UTU>&#U5?34%
MDGR2)4
.?T/&.
!+8#:U=O
EC3;#0(
&?1TA'!K$_
$*%E3[
"CSM3P
*HG!$
5+;%/$'H(_?,
W(&-1=*
#Q7,
#3?A$(('
#H")&F93
:(.SD.
#3P7EE8I$;' <)& ;4U5/
94YI>B
0?)'2N
D<NM9=
28,0/6
#3??F+
[H#37
8X96)=
>7X[';
.68\.9?1$D
^*"V,?'\(RBA
*71A+(6
; *63#62-$!T
??44S'
Q,,7"!U
9N*M:X
,&20!6?W&27=6G
.1JYT%=J
P%CFI0A
G*R30$-
\V+/+%
''7%^F
N%E%'SZK
^L$*!=E\
V;I263
O%$)4%!S(M
RC6,NH(@;A77
66\E!PX
>HEX7:3@
;?=S":@
E#C /2Q
.<?2)
7><-U#!N:3',
]_/&2
324E6W
R_G26]
1E;7-6
>FO+N
*6[$.T#>
E);*/()T@@
5=.%9#+*
#-(0&PK
00#3C
-U3?]>U
*#DG)H
A-"!*076
SQ0'?#M>=
R5%=6S
+C7A 422
4$:+9%&.
6?+B.>H6
9U9N1+#Q.Q
T!\7?$]4
-" ?'1S[8
-K$-0>!
%FQ',N
-,AH:X0R@'-S-
8(9+X,
"0U'<)Y
I";/L5M'
&-5F7TPW2
?**/1C>*6/
-#IA9B2-
<]!T[\
('WNB<
98I9R&
(D F/-
>0N[_9C?L?D?6P
ATKC:0-]0B7
ZM)<63, KW
3. [XL
%3UC1[O2%6
!&5UD3
H"*N67<
,L(1^9B
* .!G(#
6&U"\T
<[\8(5
328T"&
8SQ.-A
^06*"-
.^>1=V:T6E
%%.:(@
(1%8 +!1F.
03=6E!*:1
*"BJ P$
X.;6<B
!+*]#'$
R;4VJ /5
R6U*8>-
&:#3*1V,&CF 7BCG
=<;::V6
>*'M2D
M>! &($!
C4588?;M]
T*,JGG.(
$V(*<#
2OOX]!
]MH42A0>
=6"Q*(=2+9?-
(DI(B1
0(=21!!7
2.C*&=:5
:&C&!O#
47(.C$-
-I+B&:;
=*_:T%<#
@;ZXTF
KO>0!7
A+G;8;
#L#Q;>
&17X0<W(
$'=0-UU
S83(UM#F
5U2"1.7
%93/8Z
1(-4#$3
>B/"=%
CA#WVRA 6
(1576W,=
/[QE-" -&#/
PCC:+B#
989K <M
2R!>E#
4UB%R3+#
+!P%B5'
N!&1'
XNNK;EG
,'H* A+#4T
I<AL,W
:3 T30
"10(0;
-84@=F!
;D8>;>
GG)Q39K@</
;Z"&%7
&:M3@I48+
+] 7\!.5
'3J$]?B6;\!2
>*(6*E&<
\1/' C5%+P:;
&#+2C.
UB/5$
N'_^Y6@O%O"!
<32/S<?
<$1'^N
8J-)2)0
5&2D--
$8;&@"9M
*0 -B+
$7()_-
F)"E1EJ
T/8.0U
.E9+647K
-.$43,3"(
6-*40Z&]
]B/ *>C
!P12<F3
D630(1.4%
!##]A2
4U$/ ^
<A8!,2
'B"1<AL
6#4M 3
$!9?#6HB";!6'
>1/W4CO
Q_C&H;0AK#
Z53/H0
5;0?#")#
2&9&B$-
#X)?78
*<(*,<
8_D;1YN
T7 J8+>(0
YN#B4S1
9EF7T.
>1Y\QSH
K7':'T*:
$>2;B
%!#0$)9LJB]:1
,,%2IU"G
R_'O(O
;^5H="D1
A3KI@0
D*VW'W
\H(<V)8
O9;4D4
B*R!1
^^[V&*,U\
*=NA2'!
EJ37A
TM,VD<V
5'3;4T;2@$/=
4X4 W?
MIM#N1
KG>--]>Q
DN].F >+-
N8F4$"F
(9=4+T)
A!-E&O=+
DB2:)1B
UE?1*65
%7J90N ;W
%P27A6[0
>C+-S=
AKV6C?
1KOD6(
,+](Z50"
G >*&A0
"" V*
$5(44G@
>]Z:+/92
#$0B>Q
7"V?,(
H"@12Q!
S\$,S878,9
D.= '(
&'*4-;-!G4
=63&<3
>IUXG!
4-.IFE
44#P)R#,E-
!6\Q4T6K
,(12-4
G:). 0
))"X&=$
&IQ"9?
!]>8%+
5B(2P12
G\Q$ &<^
<?'N1*2
6'(C%2
<J%;-@%9
*[#>PRQ&;
: H0\0
V,LX99
6Z/#,LW1
808<@_B
$3M9 GM'
9=/&&3/0
>:1 6
+M<2+
V*#A&G
TB#-6P#3II
'?U9"
**%&8+#
"<$6 %
;='9/&B
M4G2+&R@K
/R7,<U
1V$0UZ1"
16+/!9
Q-CNM"K
&DP#/'
$4^,>
:'3/3M-/
#4W48-
FEL#3!
#1[J$C147I
0H21@5
$18;G+
0QF.->
Z$/(AT;#E
!?\:/8;V1
W8; 0X
7*BV(7
1;6/8Q
L0.C3(
VV&&8/2?:UK
0<6!RA=4
256F37
E+0/79
M??L5O-
;/\6(H&
/\B?14*%[S
5$Q+5C-/&=?
DC\,RB
&4=1&O/C]'W;
.7=R11
(C\%$+AP&
^(#43 'T-(
D/%&!3
3*B1%H'7
$X>:);
./;<[:
Q+)F:J_+
VE.B-S/
'0%L:2:C#
K$?1+-
$OH%H$5"0/
6?1U-[X
^@2QS%O
@84QH
<O5GT76DK
1,1]#
"$?&%V=H
T,Z-=3-O'
:$+ .8.9?+F
!$-&.N
86-;$>UFJ=
3$?FZ70
N1&*'@4;
!H%Q$+
&<YU>_QB*%&E
-S-8F#/<:%>,=0=1M/
0>$2+*
">)";5H
1%#0:<C
5!&+*0
'2<7+=3
% $/*7
B"9.[;9
1,4E#Z12$
P$3/+G\5_(
T."7:_
PU.B T
%8S-I4?P
5C"1Q4#,5?
"3'60 1
?T3W-11
NX<B1U
;R53SK
@-'!R& 2MF?;)
,>%.P.%>
7-89!?-
/X21[K
X'/8P69C6
"\)'313?O\V
^?!]&5
A27$..B
R//J4]
=&_V#%=
17Q$<*
'\;T-*"@
P0RZ0;&
FX5B3
"[@J@%I)W5#[K
1$F3R7"*"*+,N
R5#. ]
5K%-X5
-1!VM_#
",P#.B.-"
_!0J &L
(#T;6N
+357O5+>-]
,#(N<4:W&
?G$,:L-&[
7 34;%
O(4S&
QWP'@D
-K[R36 !
2.&/!.?:R\&
R .V2E
!1E0R6
'!-&
W'"@5
6!185U
":4-5 %
"9TF \\
1#J-Y7%X8'A9
)'>$5C
R<1?\0*81
7,$O=&
P/@C/4)
G'L.8&86
0']5\61
>-21!<37
1 ?+>*%$
&1#=>P
+IX "#.:17?
C %#.;^AT
!TB!9G
1C98(0
-."2?W
M&*U/K
V%V%0"
@K0')W-
)3DD!6!
\\!;[;
"%8$<&
%1C5!*
37<$ @
Antivirus Signature
Bkav W64.AIDetectMalware
Lionic Trojan.Win32.Reflo.4!c
Elastic Windows.Generic.Threat
ClamAV Win.Trojan.Genkryptik-10016533-0
CMC Clean
CAT-QuickHeal Clean
Skyhigh Trojan-FWHP!1417D38C40D8
ALYac Gen:Variant.Tedy.617597
Cylance Unsafe
Zillya Clean
Sangfor CoinMiner.Win64.Kryptik.Vdir
CrowdStrike win/malicious_confidence_70% (D)
Alibaba Trojan:Win64/Coinminer.27bb4217
K7GW Trojan ( 005af85d1 )
K7AntiVirus Trojan ( 005af85d1 )
huorong Trojan/W64.CoinMiner.cf
Baidu Clean
VirIT Clean
Paloalto generic.ml
Symantec ML.Attribute.HighConfidence
tehtris Clean
ESET-NOD32 a variant of Win64/Kryptik.EDF
APEX Malicious
Avast Win64:Evo-gen [Trj]
Cynet Malicious (score: 100)
Kaspersky HEUR:Trojan.Win64.Reflo.pef
BitDefender Gen:Variant.Tedy.617597
NANO-Antivirus Trojan.Win64.Kryptik.ksokwe
ViRobot Clean
MicroWorld-eScan Gen:Variant.Tedy.617597
Tencent Trojan.Win64.Kryptik.hj
Sophos Mal/Generic-S
F-Secure Heuristic.HEUR/AGEN.1370827
DrWeb Trojan.Siggen29.48313
VIPRE Gen:Variant.Tedy.617597
TrendMicro TROJ_GEN.R002C0DJ824
McAfeeD ti!5F7C6CDEA3C4
Trapmine Clean
CTX exe.trojan.kryptik
Emsisoft Gen:Variant.Tedy.617597 (B)
Ikarus Trojan.Win64.Krypt
FireEye Generic.mg.1417d38c40d85d1c
Jiangmin Clean
Webroot Clean
Varist W64/Kryptik.LEG.gen!Eldorado
Avira HEUR/AGEN.1370827
Fortinet W64/GenKryptik.GQCB!tr
Antiy-AVL Trojan/Win64.GenKryptik
Kingsoft Win64.Trojan.Reflo.pef
Gridinsoft Trojan.Win64.CoinMiner.sa
Xcitium Clean
Arcabit Trojan.Tedy.D96C7D
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Trojan.Win64.Reflo.pef
Microsoft Trojan:Win64/Coinminer.RB!MTB
Google Detected
AhnLab-V3 Dropper/Win.DropperX-gen.R622355
Acronis Clean
McAfee Trojan-FWHP!1417D38C40D8
TACHYON Clean
VBA32 Clean
Malwarebytes Trojan.Crypt.Generic
Panda Trj/GdSda.A
Zoner Clean
TrendMicro-HouseCall TROJ_GEN.R002C0DJ824
Rising Trojan.Staser!8.7FD (TFE:5:g2ZCviiLSKR)
Yandex Clean
SentinelOne Static AI - Malicious PE
MaxSecure Trojan.Malware.121218.susgen
GData Gen:Variant.Tedy.617597
AVG Win64:Evo-gen [Trj]
DeepInstinct MALICIOUS
alibabacloud Miner:Win/Reflo.pyj
No IRMA results available.