Static | ZeroBOX

PE Compile Time

2023-12-07 03:59:20

PE Imphash

a5790df2473430964461fdb6c7d163b4

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00001000 0x00020dbc 0x00000000 0.0
.rdata 0x00022000 0x0000da00 0x00000000 0.0
.data 0x00030000 0x00004bc0 0x00000000 0.0
.pdata 0x00035000 0x00001b24 0x00000000 0.0
.vmp0 0x00037000 0x000eeb65 0x00000000 0.0
.vmp1 0x00126000 0x0010ee70 0x0010f000 7.91307443464
.reloc 0x00235000 0x00000024 0x00000200 0.347650024595
.rsrc 0x00236000 0x00000589 0x00000600 4.01673707309

Resources

Name Offset Size Language Sub-language File type
RT_VERSION 0x002360a0 0x0000036c LANG_CHINESE SUBLANG_CHINESE_SIMPLIFIED data
RT_MANIFEST 0x0023640c 0x0000017d LANG_ENGLISH SUBLANG_ENGLISH_US XML 1.0 document text

Imports

Library KERNEL32.dll:
0x14021c000 GetTickCount
Library USER32.dll:
0x14021c010 FindWindowExA
Library KERNEL32.dll:
0x14021c020 GetModuleFileNameW
Library KERNEL32.dll:
0x14021c030 GetModuleHandleA
0x14021c038 LoadLibraryA
0x14021c040 LocalAlloc
0x14021c048 LocalFree
0x14021c050 GetModuleFileNameA
0x14021c058 ExitProcess

!This program cannot be run in DOS mode.
`.rdata
@.data
.pdata
@.vmp0
.reloc
@.rsrc
wm]g|#
ep.W.5
-S0vRL
f_Ec9~
q4H[-}
HA*er1
5W')xA:
Yzh;=}
CJ^I x.
B&cm;c
LWO2fF
/D=&D=
LocalAlloc
FVqC]Y=
dU;2t[
l8<S*
4?m;+j
e01QM
$2_u8Ad$:
l@>3BR
Yo$S#-
4?#!UC
f@[.+"/
W,+Ow O
C5#0So
yE#3$K
q;CKKz
UXd#lD
U 3<[
\.2(^I
A_pBBB
[sD#~0}
YH"zs
(#h=N7
{S8vYA{A
uYvki)
@Nc\\n
Uf\;yG"
07H{gi
05*f_)
hXo5GV8W
"t1vI5d
{a)so1C
2j>::<
r7"|sS
OI @Z
J54J Z
ts:}X;Q
fvn[q@
aWOT:gi
W"Y-|2Y
-*Kj=2
8"3~'~
z$.Y(ST
a4j7FN
IF@{:'3pu
2k?=3\
bYOm92
Q$(J7h
4[c5J,
A"$FI@
A%)'>#M
}d;OHYi
u{fH(5[32
s+bB@#YX<B
"w?k"%T
7ef>OO
RG_KM3
#$O"$ux
Orpw7j#8
!C#A\#\
"?7#SOC
,p38~
:K\(tQ3
<oN_<ei
@OGHS\H
v$ptO'
B$kou{
k DPnG
E/c~{^
@Oav4v
4]3O@j;C
lZ51R?5
Nc+ 3*
V8d~10nU
"_|i"O
N<26=m
>.h|Z?
!?<}(&
]#(F{i^
GetTickCount
sn/ks"/+
[9zSSB
]2z{Cp
fS+AiZ
ExitProcess
'CQ7`
',B=qf
cm;cBO
'][W;<
i5alB`m
YeBL"7E
f:8(j^T
6Ad$rf
W2=;TK
q,6'?>[
*@D[p:B
N{Lou2q
9y]NP,
B>#d8Y
4Fb="s
-Scq9:
LmK:<=
%5?EgZ
D8@I?"
bXnYs[B
.nKQ>0R*
O22mop
OO&8Kj
G9#bKJ#E
iO[%'WC
*;`[td
J_<!?3
Fs_x{vK
I6#O(*
N)#~m=
?ILFV
5[MO=.
"M%[7!
$;fJ\!
Z&IC8|G;Q
=$hN7 <
_?JtV:U
uXLZJ5
u'4Tpl
*vTB<F
du%7;NE
k-r4{h
Q&([R5
Jiy@.46
B6(8;nr
;:-6&D
Ky=?x&;
w)J;sh
svK1#
AhK)^A
w[i#wk
}=#x\9
<#w:4;O9
>a/>o;9_:0
#7Rj;l?N
;hj]~n4
{!20l[r
Q;pD'Yg
/$v{4#
7;_!lz
A;^h>*
YIAd{2#
(Jzw++
oCF;4u0
!-N;CR
Z73l[j!
;(-lr<&
|;S]G-
Qz~;t8
2p!'-;
@&;jL0
XLa(;+:
c~t+Y[
=dyOMe_v!M
c2[k"O
i?zW%o
e;VwbxcJ
nq/}iI
{dnHcD;*
@p102l^
2~V};K3
|[T^"41
s~;VxB
O"@%B{'
hj{83lW
;T%HyL
Xt;OAd^
;Eos-1C
aL4R<{
\s:f%T
x<ZPd}
Q!;dq!
uHb)^H<
J1sDH)>5
1p9;7Y
u\hU; >
z,;%ge
]*CC";
|<jKd;
;CTi^#
>a7Vl9
v;zt8:
;ry<v_
*;dRB&
h;:^`a
rlTH1e
rLIuXZ
fY+F4
B!;Z2ox
ud:l;'
y}u#XL
-3V;0
7y#>V?
S6NoSI
EPc cW
;c59d2
_sJ&Qj?O
myyIG%
L%u6T"
9`;ZEQ$
[5x;2?S
9\ix_F
E~B;>]
cH/`"l
tGRYs
R+fi`q
^S!LR'
#s9+~j3
'm{{/2
kTH3Ps
3@7Y{w
>:{s'J
R/I-Ro@
y8]G[$
vYf&T}
ilA<@M
M,]#7b
) T]QL'l/
"6OO<m
TOmCXc
\axK^-
/W+SVz
VIBy=0g+z
oK`vHJ
@$4Ba4}OC
kO?L1@]
FM jA$
AsF1sA
Y^o.;b
"ug;j<
J-oFo
JIHONML;3BA@GFED;KZYX_^]\;CRQPWVUT;[jihonml;Sba`gfed;kzyx
~}|;crqpwvut;{
*)(/.-,;
"! '&%$;+:98?>=<
#2107e
#Q:(9E
)M-J P
l)c;D^3,
#BkbVP}5?
)4;@+1
^X_a]*_
hsiZ[B
PXrWs+V^h
UE\:{2!
{d"x3Q
?4B;$
;R#-<;
D;59ix
.Wp>;*
w/,yZ;u\
~@;RkQ
?ZD~^KGc
p;!'i_
BAOZsM-T
;&ZL/K
{6&W;sM
$XZ;[t
|*U;kN
2t$,j6
o{~[>^{
):cS-Y
'oBSR+X
Kep9J7Y
3i7(U~;
Pv;1m-
$;n1+p
1B=;}X
+=Oa(3
sGZT1^;D
yS&;G8
0wH]2~;
bC;<v0
xkL;g-
}$;8r
+uo=#;V`
P,V%JJC(
)mKGl}
IGkY;e
:*;k|1
S86:;Ws'
$V;[K=
[)$_<e;
UrqJNw>
2;xyh"
CgX-OS
O&XZ*{G
G8;os
[Kj,)5
/R(E;v1
uTv{QESCy
4_1~R;?s6
~IU:{n
;B{9l%)
/K;$&#M
/^uG%@
4?RKR;Z?(
L?s{q#
:zH=Wg
",;wi\v#
i*Z;h<
(&x=.)o'
@t7zB>
=JkH)7"
93;t7l
\;u`MO=
fJ|2;
Jh#)7e
;AI{1
OU9_9oQ
N*K\J!LJ
]#gY;l
'4;oJj+
9=8<!iw
>`Syk
h{VuCY
/q=1'k
;B~:=v
> ;:NH
2c+V;B
wQ{-"u
jUkwlO
{xBR}o
:R9#;j
cTI[xd
>sJ1{N
ZSE\(T
7e6P_?9
@DG]7:/
L|P;`
iK;=XV
T;V|5p$
$PR;)'i7x
T{R@fc
=kL%^R
{D"U;/
+;_iZgl
abIhj'
F6L\zmS
SwAg ;%u
{QhVx;
D>O|OT
-;{yHDf
R;oe \
TEb)k;
fIREcD;
yg6^KQ
Qi:x+({&S
skA;4.Wr_
"r4ksJ
[.3Eh,3
"L(76k
lDBj"a
V|,Z];
ve?\O;^
@I;hb-Y
j_<.['d;
OCXD;/
v+5&LB
;#-NO5c
p{8m?3
'nJ:@LO
Whpq;|
L;FS`26
TQ{H;I
;CJfuW
eEt<;lv1
]9L&;S_
2~nI`
=Rj6S;
R:,[s(4m
GaA{O<
,0J?sO;\Zi
;[!ZhC;l
J<;PbR
^?el4b-
}`IP"@U
=CUa(h
Xyz ;J
B$zWo{
.{\;6"
~J>yV#
sY '|w
wYV>X;
aI)NAu
6;w $?
e8\=G;`
d/;!?e
;{~PKm
<2h;Q3
;t:8gk
PExoMA
FvADSm5
4;LHV$
V;&A:Bas
(;x8fl
5wuD;(
_(I1;H4
@}}Bk|
s'Hov{
f;pJ<+
e;q3m]
}=#0%9;B
WM'[{*
th#p{+
"2S@,4
7;[m(=W}
NYixZ6
#/#;ST
8~72n!{
;=#x,i
nkmOG-q
u;Tf@[
GfhxAU
F3;2d8EI
[AoqV;a2
is~U;f|FM
u+4r=6?`
{]R3;,
G&9$P`}
;-\2<i
*OlHNy4
NCOtY.8
:7yHI+
Y;i+@
Bn MVqKr
L}+{uo
{jev;CcF
j=N2t?
;~97!&
Ad&)`7
Wgw;l1
N k%x;:
Lat6Fj
c=Q&O#s
0|n);'1
sNv~q;X
.-(gS*bd;
wj;8Pm
f2X;,Fe7
G\=;7$
7`j-^;
5'zp+1
C}C-=b
Ok:;a,
hH;K\x
"T}5~
S?OUIc
0mQw;+5
$ D;V4
gcE~UH
j\;9Zx
[:;+q(
X04phc
'\5V;<
:Wx3=p
^>;aI(x
;BKXM"
2JM04KY{~/}
T7fT"P
@}XhOX
:?,-;LP4
>!UB#;
c;KF\f
;g!,YR
c"+a;-m
/;s}M
YEx*=/
i=v;Is
q9\L|s
^i;bld
dU;R87
V3jG60T
JUq(6X
<GQv:s
%uQ3b{g
Z"da;-7[
m)#WX;
9L;6Zy
c?!2;
V';K5r>
x:WO9{
7;~*m7z
QZ#6;j
bjj@Bj
95\.!]
m=F@V+K#
`>R;dYT
?!4Ik6
VS8T; z
M0&Iy4
;Un^27
Nr2t{93
O("A_[t
u)Ikk;
VGhr T!
AcGfh;
b'8!\;0
'W]c4|
;KY*u^
DFC/hR;
I;Q@:gC
e;WM\
^?%$Q;
[=`z;.
[@-*LmK
bgP(.
[a;kTuJ
9;+W87
f;w`~B8
}1;gQN
LC;j>:K
;qn6(?
;O(.}=[6h
M"\_Oi
;@B1vS+|
@5=;F*
A #9m1
)3QD;=
DM?;{)
;ndvY2
+4{eu8
@"UGJT;
!Z.XWC t
#0SJT{-
H4Bm
[UX~;8
xa;:1D
SJI6g#
81Rs;}
;X]N/Y
;'zVf2L;
'<^C{
XJkb74
vDX1G*/V
SKS=cwIWE
y3"{o0W
XJ& r;
kO;22e?Sm
wIz" :
1rl{U@g
tB]i1x
|]a?E}
JUl4J_
!;Ki7U
;mGBy8
<64_I;
3Ca5/?
^@j;*P>K)c
}K,ox|
vCwj$~;3
GYfruo
N*2o'i
ANJmG:;
;dO\H[
Nz0{s=
J T^"<
7n+VhC
6w&,"$
i+/j;
;#pfPz
R*(\v+
Oy\^(b
xb;\A1
L{UE]l
>B#+{^
>w~k)?6r
i,x\/E
XJ$u{
-/%Sc
Mw7;e >p
N&Lm+M
o>GYfS
Ir_~;q
EH7n;!
.7w#,\u
aq7Ge7
wM{}+#
[A:;D([
]Uk;E1[
*7*IC%
uJjAm7['
*a\/b<
:ec{Fh
$UWme;>
;fc:^8>$
m IZk;
?FsmU]$
+; 6KL70
PCi]l;S
;4AG!sa
/8&;~P
O+4Vv;
;+My`ZAF
+gT#x;
7t7d,n
}j6 ,.
-;X5h2
t,;/Ih
Mip;{G
`Jhv9{N@
H*!];
M;QC3!
";5^AR
)Kj@]G;
g;EQ_=Sw";
ZlOEG"
QKJ>oE
.`fSU=4
#"^whPS.
fibrk%
t.[M0S#
VH>;}#rta
!\6Ghz
o>E;d^a
pPK;,p
h6`YAJ
-etnE=
],m0l;
w9?V;l
;6h4n
dp+5x;
JL<+M![]9$
O5yNIv
)*;_X{
Y,j_%,
D} :;g
u;<+#4
M=d;ucF
uYk7yM
;nIG1t
TQfiI
f;_qM(&x
;v2_36
fJ}Q*L
5ZU#wC
;TM/u8
mx!+6j
Ixp1KH
<;&JiS
dF$;+h
{+E8:J
U>P~h^:
<>lG\)
{v$8;s
]yl;>+gJ
M:;T"(
r>nYeZ7
|&;Z\2
z7yI%;
RQk+c[
oq$6ys
hTMB+}
Ik-HFh{
?qyl2;%
hgOG\mK
9&4Y];
.24Qnc;g
]acSr;
4lBXoI%
6cD-;/$
#/TOL
;.hIOB4;~
ECbK`C
[K+X`St
3LvX-#
/^{troY
&[x=SL
<R!b'@
{OtQT+mM)4|
a;"ZF$|
_kuW;v
2EIb;!
;-"L'zd
\aW@=k;
nZOO8x
g\ETh2
s!us2F
1"/%\A
!E_x';
g+5Y5+
+vB;|$
w[]k<a
@USMZ"
9t~;\C
ru;:G)
/;gIiZ
Q;_9i!F
@=?Sx\
aL=c;qd.
0v+~f;(
Wc6oXe
S-`;"
<Mo`+;
X/'4KDq
?o3Vnv
T ;UFfS
-W;Qnx,
bo0J<Z[
b_[,E9
D8*X?
w@+d6c
v0eG5=
;& :0uJ
aRcJUJ/!#T
FQrLOA
O=$>,&
N{#!hG;F
C=irb;
|vsYp;
Lm74#K
L:%n"I
`-5{61/9
$F$ #+
5_;y)AC
N-}=#(;
OQ;,ib
0E5FQZ
~aKN(ui;
\N +jm;
+Tcj;xBF
!>0s1,;
R1]&k;c
uIB*<
6H"9Uqh
MQa!io
)+{1d9P;y4
24iCN<
{^]|v;1m-
mi;[_A
;|,PK%
C9Sq1p
5nkr;9]
W;~Xc&
X5d[;|e1
6h~H;R
A/?0x7];
W;w2TjzxE;
H8SlhAP1
;&i3|h
;iBJ'z
}860';
Nf^:c>
%HiPgty9
P1[;Wq
,;Yrd$
vWj&B6
lEO}6gC
`J8T*VU
r8v=N]
bpUZ?q;
?Qhu%{
K;58:]G
KR+Nh*K
_KL'XS
)SYe(I
#O,.J/[uv
Xs%BKg
&TZE{}
KSuzw;
A[H$n+
60[;}p
@vge!f
{?D:;n
Bsu{
W2z4wB
r%;f3P
/W*`t1
$;!L F
1;UgPqr
W8j><;K
!|I;w=
LJ}2)K
G!;4&)#F
X2A?r;=i
1Y6v;2
hR:;<&Z
+(;Cm/DR
9C`;?C
"HT*{?
O54l;"
V4XRn!/
y)0";
jE{3g9r
\/2W;|
!.;*ENr
;hYF$"
}1;K_a
a;!o.~
[SAwZM
EoL8;z'
@.p=QU
1#0q"
Da>4K3
1};;FY
Mwu,5yH
58;T_y
U;1%w,
3j~!xQ
*>PD;n
y^4mK;
`P(D\;
;H[a{,
HqD\ie
"gP;1+X
;,Y2X
'IN s(]T
`1vS=;"
|;wZTA
C@";mk]
{+U{=T
/q)&@}<
58H@:K
@;j~P`
\kRb P
N{svX
";J[_z
u>$?{+;
EwdC ;
L<?@toC
q~b/+>
!C=S;ys
KYP;&C
M{%>(O
~??vp;
7 !L]^{
t;v[X=?
Ws$fq;
;5*"0}
KXM"|{
>O#!I;H
c`D5./
G[:iu0
z+f<?[
{Gwi|9
J;Da,@
;3HLOE
5rW;<d\i3
do;^i2
L=;aSC
MQKN+_-q
^EBRZw
%;5R$(
ZYd;cXt
G[P1W;
];>Q<k9
_t57{6
dl.)3;1
i6#aK1
0rX|ZQ
"|G);vz
p;vG1$
*66R ;o0p
;}<y{=
HDwo$p[
~|qbG3
EH8;w:
P#^;Td
ph[YT%;
}7\Y K
^L;~K1
hy;sh\
;,#P@d
50PnpUm
zNY;RL
`@;ASiQyp
u;\:PAn[;i
S;{>(V
)KH7;#
Lj=v;!
9]=;34
;:M'zl
!+n;}%H
-#'];. =/)!
fdN_$?
;<7Tt4
(h"<8ss
!1{?Xg
4w(yJ7
19$_':
ODy#Yy
i!<S/r
qWNCqi
w{frs}6
90X'\u
n+vX6D)
DVrW\%
u^$4+;
7.{E9>
a=KGs
.~CG^2
7#GkI1~
>6Kw{{
y[@4Zk
87;zI<
EY8>WB
c|:>{D
#di3N0
B52.[T?
}1.t:OO
;bCQ=R
T_`;8A
_;b\G!4
;h\SMX
;6d+2S
6[O>#(
Z+PK8;
%t;~1z8
9tntE
A#BQ%K
rn=zCd
R7C`;H
;AiK4L
K';|?[.
B+tk}}4
iSUo#*
@"]T<{
N[_0hM
EC6&9k\
JC;3A57
Nm_\M.
(;RdYT}_
&gh;H{
%63I8#y
\#D=?Rt
yS)asi
biS;U(
&W']-Ke
0;aSu5
)rcT{w
=YTIx*
#MkN(\
`*7#W;$
`+z'@;
WkL5P'
-^Syre
;wnrxW[B
=w;"@M
HZ5u`w3
\;^pK1
S@;3$b
oILm1S
7GO\!{
94{P$v
}sh>Oy;
g-?+];7
;$!'~G
mMR:;7Q
+#SIJ(
\N/Fe{
.4(sTK
7TYw;L
|yz(I"1
{u]H1O
v[CZ^C^
O%f$Oy
&ZDUr)
kMPR;t
;#tv*6
iZIuzE
Cxes7;6ZlA=
?C*bWP
XrGJ\:
'ZT;qm
zcmG0^
5FdBge,
>`)d;2
\;M9{%
:mGJl'
;.24={
?3CV;a
+LM~$X;
Jmo;"dO
=O`"-+;
`,wSX-
*;?5O#
sq.Y:
P2'B+"J
kyYCB;2
ic~;>_
9Jz^ +
!`)1K[
B,+%x;
N~W[rb"
h{I;Z_H)+
.A3U(9
>#\;cue
J{L54n
"b?Kx:
Ss!UD(b
T'6;80n
(\N^NgB6
e;l%h9
H&Vh{7
J|U`kU.
4s"Hg;:
k;?;KP
c);{}=[
+%f^+v
yK5Ho6
D\2fh<
IrN:'
Vl-v@
a;+ dOQ4vI
;z~bY5
O];6Ga
;caPT,
c;.0hBP
B)FS<h
W!5b;OCX
AeRZxO]
"/V0xm;
^w=(^SN
r7vIv6
\OjKIV
+G;/Pd
;Exrd?
ZLLa){
kC;os5
b,wV)Z
=;(uO@
4#i+;"
\ISd;SR
;s&`]A
R|;?Qg
KCz;gSX
enXV{~
7;=K1b
. 7p;J
J%ZksH'
0"9uv{$
(E!R;>
$w,;Y/
?JV`+=
_L!cK.<Q
bdL1HR
4J~PVh
sWYIgJ
;mBO!o
U_jS]#6;
k.;COd
[xvPmT
Z\?9e'#)
47#"G7Q
kA`Z( a
V=Uw;Y
L;n)'i
);S#Y-'j,!
;J*MUB;0
8rP5g;
E;|%hq
Fk;ASx
:G{~0{%
g7LiC3
txr;E.
]&pOE;
;%e'Sf
i%#Kv;
"L7;t>
$"{.`Jw
o7:^;H
fH#d-R;
hCE;os}
BvEtB=
r6dV][
;97k-A
G;px6<
s3LJW0b+
8]<N4i
[I\24@O
(yW#];
f{{qB;SN
:^X+;W
I;]RNk
.)o9';
$;G[mVL
vSW;Ux
cGk%Qf
<:;D]V
o;8k)c#Q
s"o5=B
];GJ3Ci
Oqt; 2r
@-+a;.
(%/L;Z
;f@4w%v
}bdvS2
m;RC1&
[L<98'
;/c~7D#
m,J7LG1
f;7Z#g
D4/*\h
%|;~vt
i$MH#<
1D&#''
Z.;O\V
k{I)i'L
EW;1@g
a-&\;X
>j* mQ
!P1IBG
Eo;*LB6
8B;,:\
%R;:<k
[zRPe;
t?wmk.
B'ov\7
S-;B>
5cj;)Yq
?ZP{@c
(kSP'b
[ q#t
w^H=3\b
1J;rRa3Kq
:~A;P|Y
F5+;EW
O\j5z;=
\(TGTQ%4
M"sm=T
?[k=, ;
2;LCQU
2\]2cZ
+m\-Q0#3
L< ]h
Q>;(%7
DfA;_Y
@G;i"tf>vqw;
o;_G=/
+i}Oy;C
@("1'%
k~p?U@
7}\nr;
4wJ;5/T
_:;0rs
|;xEX:
;d$UM>h
{Z1w:j3
!;B6Ksv
<|P[\NDF
;&Ys.Kt~
{!b*Lz
%wmv;
1{sO?CE
cH5+x;
;NpR|t
;p{Y'i
#}@y;L
h8F*|^
x^;WeI]A
C]iPz0R;
Uw[%;C
(ptAtw2
u\iC>;
]&kz/?
zOfB7;
JMO.J2("8:#
Q{u/,5
+$[h#>
.=sH"|@N
\0,;(*}
X,Oc%YS;
l,2Ug;
79KtTz
;=RG$^u
,B_IAt;>
0#h!;Q
C}9s;X
.rtqGA
;Jj_-Qu
';J,iM
Ke@{/F
Ym;GWeUkN
{#,);G4
<f9j;Kd
[;`B\K}V
}=KTu5
v`;_Al
\w6.L,
$;,Zc=zN
Y[/;ui
;Pz:h{!g
@M+;hp
<)u9&l'
;fy+.8Se
v,OK"V
N;GA=
i*kfss
"T,o`1
nDS^/-
qxW;&hT6q
qX1;Cg
f&Z);P
I&*9b;%
"'o^sP`
te+BXD
E?6`cSj<`
Ou2z>T
)u_[=Noh;
YWQa;Ew
Lfu0WRw
Wg;%H)
YW;B-nQ
A(N",Y4{
B`[/mx
[Dant8
,07's;o
Ya^zHn5
Q%#"mz
n2g[LH(
~`N;$,
`M{(g}
^'Yef
s~s[H@
;/b<@gA
[-*ig9
$H(,c:
Yz1 ;iX
rl/;%?(
kk!T;F
/l0y+5
SP}W;!
x#DUv;w
\jd[@6
8SxXk}
X;P98v
;0:GCXl
kYSuj#&;
0[-;1
"#^{:=O
<oeX;r
"q;laQ
P;X=qp`s![;
{\DHj;
;_u ]Qy
=4)|O<
ts-bft
[u0jh
;L,mqk
6q~4#R
<,u;'~GY[
/;(*#.5
;vI#Y!
u{Xk[K
$B[A;RW
5=\kp;
~>;TEb
7*\ozL
w%g9B#
G/B#Rh
Ua|;H3
U[:H.b
fJ<c?#v?
#}u{S)=
{;aRc|;
j%;. *
^7)Mg+
g1sE;6
p;/ V`
.wc;rv
fk27`b<OB
I;PL79
;UwL/X
!dV5:n
>(8VFU
5ck;)j|F
F'yn;H
XuBj+R\[
[NoS!;T
`K4};H
#;mQ3C
iNQ*y.<z]&5
e#3;kOc
D;("u.q:j
2U4=Kr
zL;|2&
=OaY:{:
'wsQW;
;e&E6
>wdB<s
BX{PA`
ui%;5)@E"M
X}>ZQh
n>CD m
*;5s%F
w5%b(;
qesa*;.
@DG]W6;
C'+;1r
."CX;Y
}.SPT;
'+;\%w
F%]]E;
SM;ZA"
k2D;-Z
#="rH
.$hO2\
q~Y;-J*
>sHr)~
S:Og^N
&F@j-N;
N8e!tn^{!
LyJD~R3
+)n5UU
2O1#N B5
4Pd;@p
H_;|X&hJ
l;m<R&/)C
;?<-6j
bx+gP1c
)>261w
d;h.Kag
Oh;vE'
+C;t8r
6z/{Fe
_G"'0{
CO(1h$^
~@T>{b
9<WS53
QVG; b
x?\';I
}"IlB#=
.NS 62
*67eG9
$E;r_e
.K#@;,w
%&;8}n[
^%79]U[
"?;~iaR
Wy]s+';
{kL;:v
zdw p&
;ycF_b
%>9G;!
V;s>3$/
WMiCl!
WF_8q
)u;5K&
g8iEAC
H~n82
B$==w\_
bT.MK];#
;/-<NC
6aV2tW
DzOb<$,
O+5o9(Zr
G*C;gQa
C=;?3b
r];[M}
jdB;QMh
H^kUQ$
v;C+U3?)
>Du[{%)
O>WDBx2
_a!?]'
8=45~8
J4M)N[5
KeKgF@
jzg9)V?
2S?&XC
0cP;6t
(;qOZ#
8KW1y"
B qcxh
b{jlB'
EYb?k{j
Kt]n15r
+b V[H
.ohDoIY
~H&N C
m2;,5h*
oF#5VO
btia;
APy#9Sz
vl;_YTe
yHPr,^
;'J4oY
(O8Zg;
j^6pt(@86
)\*Ko1
;AbI3t
=;p,KC
}9v;sf
UJft?'9
#A <,c
;)C-Hi
;.+NI{
_AR5=u
fq;LVX
"FH;xro
6Qoi;\
a;QkX4f
u5];$C?
>;rj|".
:+iY;5#
sl7!;d
@Oj;p$
X CE8w
*{JQ+r
$)|;N+
)=?E;/
~(5!;n*}W
E~ogPI
0jkd;,
i][O1T6I
NtL6siX
+;}zq6k
U_;-=
=Dk}8T
`&sh{;
Rf`;P&
fA_I4;` n
$zh{Pm
(;uUDO04
y_C[A><+
^| ;*W
&`{^aN
<~:b;J1f
;VERLh
>B;QU^2
]86;@a
dKM6tK
;g1%k<?
1/-;O4v&s
;[laVW
)v&;\ws_
[d/T!|.
;xstRC-;
3YK7i;
o};R3H.
w]_Ag;O
{[lS8=;7
t;^aKN
nx,;^B$
ln;!cF
'fkq7
;UAoe{
LFl+~U
_1!'(x
sNk2]m
;$NT/6Fp
+%B#*;)
d#&UVW
Sp;Uw2
L>0qkE
=Zd'\;
<KKM]G;
i&6+nX9
WqIqU4
4;!]f@C
SV8;kqc
Ynr!{$
x#J@sI]
p3;k Ws
t\{)f3
<VZ;DOX
qU4[dF
w:fF>L
1;)("U
v;nXu.
t?)GIi
g5{0\
$p,pk$J
;erdF2
i@zUKa
?a(}$o
xBB*2o7
U&LDR;\o
e#g;L_(
[eGU6`
J$4y#I
du;`)?
,;:dG}
8K{/5
;HQgq/wT
r9z;-&6
)V+P;]{*|
(D5g!m
m^-;Bs6
[yAU=5;
2XhL;cG
CY-!;g
<.,SE{
!V~G$^n
1A%w;m
6[$c1m
(6x8f%;
"\78<:
%/k[;1
;sc(UP
&tMF#;
a;Zxp&@<;>
D{?f>K
+N(ua;S
;OMw<%S
+;Ut:B\1
];dLe5
4rXIJ
=5;,Fd
83AW>QAX
`;5Rn[O"lW;
uVPLA@_
;Y4?Ce$t
oq4e; 5
u,$[vHu-
N37Qe7;
5qBf<K
6S{nUy
}A&;v*
"TW=^6
3%;~AZ
np;06z
;g"]6q
=^TIl"
dw; bz
;V>)wbq
Yyw{{Z
?1!0UMq;
.H;VRd
^<L;UZ
}n)/;I%?
z5y#s\
A;ve5-
-;\R|z
_<]NRp
Zl,;:S
?!#AB57
.f;IJ7se
hm];k[9
Weyd'|
1u#';1K
;h"HrC
);Ur6[
5k;-W!wO
!6s}Hc
\,`jyK;Cq
(6C;7=u
Ri,J#h
.JC7u;5S
+iwJW
;lWioq
?BtDZ.
M[?Y#g;Jc
OB1;UA
32"a:K
Pec}@*
oA57'{
rRs;"D
,7X:?2
~H XwtjY]
i4a:#a;
BI2}{]?v
45Hr6T
M_15jJ
2H?yM'
6#sjq
;s6_oq
O2;[I
|AU;yz
P;CicLm
21aX9;
!LJe.$R#
8~'7c;
G]w-;`S
S>O*2V"
x\^`+;
zY[};i
BXz;#q
#[K[9!;y
JUS;]R3,
;?<!"h
&J0w!<;
8ZU~Ht
3]d5;kp
7?{Nou
Ng;_iZkd
%4;hzM>
ey{3izV
RxU';[]g:
"=G;-n
}tN;q%
;^A#& Kc
eF*!)(s
?V,Ll
k9t[LB
P2&*#l2
f-x{9%
/1Uo*;F
dU;OQs
KM0*m;w:
i8[SAg?;
[7N;W`
?4.( 6[;
>+;{IQ
DO9,>.w
&?r$iU~
1S;jO7
]|F:;B
4SI{.;
JO+{'D
d,Zb;}H
laJjN(G4B
W]O]!8
Eg2T:Y}
1]UQ$*Y
I;Av26
Ce-#];
sr@#V"
Zz{7B#77
]RWs;j
OzNb{fXQ
bvI>B*
>[?*9?2k
4;4sy|!?
}s_A:U;
{RM-^;
H;.q[^
;HlwyL
EscN;t
ZF)t;
v1;HU^2
c<:rjM
;h]2l0
;8F+Jyz"
L59;uTp
(;25PlO
dKLoqe
GZf0SY
'v;V:<
Zhr5{I&
(L7k{R
".{kNH
"aT6d3
+;ert8
?CADL
JW\[H)
O"7L4$
x1H!/%
L@Qd%r{
@Mf#T
;/~Py;
9`;+\2
:-?;bd
;Q:[imT
fP;k$o
)o Q~;
/L;\26
Me{a*
J!Z;,%?
K;c^k7
wC8G)/
9n#tI-h
;U7T-v
CX@^JI
Q0;FP/
%Gw{;T
[ph1;v
/(;4Oy
l0*rsz
,aV;M/K
[66{;x
7O329B
_;T!X)
ewZS;V
TTJJ= -
:#;@+0vj&
HZk#SF
5{=sp
Z;l'h{
3bt^[,]z
\;^j6Y
WF<l;z
aBU/5$
,{t8Qk
8{;5_
SDkW;dF
ZAv{iJ8d
=];6GOv&
oN;1jUm
#`{'uo
};nl,T
v@r$X;K
*>;&(9
kq[-("
0]V["/
;d6ZyK-
>k1%6#
9;e3.,?
,Wpk< ,
x!;VFN
{OTIr;
\;952&
_i}Xf'
/AW%;~,
,9sm<;
D]A^;T_
^0;_)Z
o}@C+;
K;6]jz
ogk'a+
i4N!ic
M;DqE_c
c<;hBL8j>
7ymk*;
0BD%hl
o2;T K36
]he@F!
#\7{Fd
;g+1kz4
D#t-=]
1kf;0
9s|:035
oj\=tU
$_J\js
_Mn61d
"ERQG#
l7@d{6
-;z)gv
d;Vt8j
/JwK;&C
";n~,9);
;*_O-|m
!J1B{B
h;Tq]:
;"?l^A
XF#j;/~
E"&SC
O<V{\sy
l:Al7\xo'
/xu_i#
%!;Dls
CMO+5x
G;wV9fo:
qrV,Qg;
<~;aC9
i+ d;OQ>
VH|;jl'$f
;hnSP5
78'I#t
h]~;5'
b,sL(;!S
\h;}N$
?4#(_u
1<2g*"A?M
;!<}?[
1VG ;by
#2n;.D
n2@;kO
W36{ELm
;FYm[,_
~@ko'L
7;9MlFv
C6;pkm
<P{jJ+
{cX0^P
Q7Y;?z
_u{K<;
GCqYo-I%_
EJ9G){2
kxmar;`
6dB#Rx8
y;0do!$.
cb%^OT)
}3AQW;Z|7
w:V,nr
7L/ft&k
{}tAL<"
1R;=i,
!;JZ67
ZWY;I7K
%;(}Ny
=;o)Gx/
!N!}s'
Pv.24A
4)E;`Q
Z?F;On
q<;80V
p$;$^0}a%
G:;t_q>
&8m,:;
^;!L0J~
k{'lr;
=ms6;H
A9vlVp
8='1iK
@2];[U
;c+em>
|Q;F+%
0qRH+h!z:
'ly;3]
tRS9;?
{ix~i7
kUXBT;
Y;xJ}/Q
wS;H=M
_;:W8?
K^}/;i
T^=;WtQ
(%G/.;y
m;0*WCx
2>q`41
44Z9OY71
}6;Yr&
a5wKtw
",3!d
uY{r&x
"#2~#p;
{';zd!
%$+gy-
fSPj*;P
6WI3%"
D'=W#mMF
rdo;pk
!2jq[h7
)1XwC[
KtD;b6
/;ej86
b3YM{n[>lu{
Gac"vM
;bX* ^
gpIt=&
[2YA$L
|O6;WV^
3f}R0;%
BHx$&u}
CI/UHv
HF;r"4
GetModuleFileNameA
?3I]3h
$(>!.U
jp@RBl
J^rpe
#)~d)g\
[i9s(w
Hs/r`w
)[e|I[
43mw"A
<DNcj/]8<W{
CT4QEe5
<O&9/<
slL{W<H
WgKXpnL
/i@w!^
8tLwR{
ug<yLb|
i@@I=X
#2(>@1
Q)B=(L
JnNgg-
GetModuleFileNameW
USER32.dll
Z|LN^h]cSd
a&4a[5
>_5(*j
<|&Z@5#
"yMK;]
-H20u:
)O4jef
PDB7FV
HNGb$j
B__gi^
({`-,?L
|$;{};
:Dbv$AK9
;+a_=J
NX&NK`z
z@$+1'E-
s9Dt.n
D@Xx$'
}@31.X
+IX8;"
<@31/X
.^s7eX
#_31_X
^3&eX8
7^C1eT>H#
M!?SAQ
+%0F6N
CAuser32.dll
7-"auK
D*ej0
ClI3xh~
0%dxvk
`Op\qb
FindWindowExA
68Hz*thn
"VaZMV
Ci~l1O
E[>FPlP
L3h|#M
8a($zN
R-)~d)
B'e*@E3
JE9t`^
JQLRDO-
HV&`tbw
CRbl'K
'|*}>t
x?q@pB
GetModuleHandleA
h\ZOfVxHRb
L,K92`
V;ithz
M}S!v
F[A6,[
5* ~)e
7=X|W+
bM4$Ka
+_]Rav
:<dz(^
F`U|LVf
&[A6|w[
u6tq{Iq;-
O`>FP>
fVxh~&
(F.@yK
ULBu>4
\^io-:
tH6Kj_
dRG-"H
^or#;f
\#jZ ;
nOhCsk
JI;HONML3BA;@GFEDKZY;X_^]\CRQ;PWVUT[ji;honmlSba;`gfedkzy;x
~}|crq;pwvut{
*);(/.-,
"!; '&%$+:9;8?>=<#21
07654,[{
&vc)KR
H"#z[O
?y$y-y*yy
[K+3[d{
)Eu|q{
=!k;YLU9
s1,"AG;
Ksw~h'
Ss+V)<
W0&#7P;
SkW#n;
a;> K}
[;K"?z;
)+5M;W
~;N\Lj]
-yV;U'
;d{&:Qx8
LoadLibraryA
dt:28+y
RMqLhC
<f;b7~
f!u*x}s
geZi$`v
%+Fz5ID
LocalFree
^L"gnV5
m J{)W
.<Z.EZ
F4B\CH~
3GE5wkY
KERNEL32.dll
0"C1FUe
[bXz]@9
Vj@p*><
VlOWq?
k{4Abp
0"8,VL
M%lgq~m
<?xml version='1.0' encoding='UTF-8' standalone='yes'?>
<assembly xmlns='urn:schemas-microsoft-com:asm.v1' manifestVersion='1.0'>
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v3">
<security>
<requestedPrivileges>
<requestedExecutionLevel level='asInvoker' uiAccess='false' />
</requestedPrivileges>
</security>
</trustInfo>
</assembly>
VS_VERSION_INFO
StringFileInfo
080404b0
CompanyName
Microsoft Corporation. AlI rights reserved.
FileDescription
Windows
FileVersion
10.0.19041.3636
InternalName
svchost.exe
LegalCopyright
Microsoft Windows Operating Systerm
OriginalFilename
svchost.exe
ProductName
Microsoft Windows Operating Systerm
ProductVersion
10.0.19041.3636
VarFileInfo
Translation
Antivirus Signature
Bkav W64.AIDetectMalware
Lionic Trojan.Win32.VMProtect.4!c
Elastic malicious (high confidence)
ClamAV Clean
CMC Clean
CAT-QuickHeal Clean
Skyhigh BehavesLike.Win64.PUPXVO.tc
ALYac Gen:Variant.Tedy.511541
Cylance Unsafe
Zillya Trojan.VMProtect.Win32.93364
CrowdStrike win/malicious_confidence_90% (W)
Alibaba Packed:Win32/VMProtect.743b5365
K7GW Trojan ( 7000001d1 )
K7AntiVirus Trojan ( 7000001d1 )
huorong Clean
Baidu Clean
VirIT Clean
Paloalto generic.ml
Symantec ML.Attribute.HighConfidence
tehtris Clean
ESET-NOD32 a variant of Win32/Packed.VMProtect.ABO
APEX Malicious
Avast Win64:MalwareX-gen [Trj]
Cynet Malicious (score: 99)
Kaspersky Clean
BitDefender Gen:Variant.Tedy.511541
NANO-Antivirus Clean
ViRobot Clean
MicroWorld-eScan Gen:Variant.Tedy.511541
Tencent Malware.Win32.Gencirc.140863b2
Sophos Mal/VMProtBad-A
F-Secure Trojan.TR/Black.Gen2
DrWeb Clean
VIPRE Gen:Variant.Tedy.511541
TrendMicro TROJ_GEN.R002C0DJ624
McAfeeD Real Protect-LS!8911E8D889F5
Trapmine suspicious.low.ml.score
CTX exe.trojan.vmprotect
Emsisoft Gen:Variant.Tedy.511541 (B)
Ikarus Trojan.Win32.VMProtect
FireEye Generic.mg.8911e8d889f59b52
Jiangmin Clean
Webroot Clean
Avira TR/Black.Gen2
Fortinet W32/PossibleThreat
Antiy-AVL Trojan[Packed]/Win32.VMProtect
Kingsoft Clean
Gridinsoft Clean
Xcitium Malware@#1vyu9xsq66ldo
Arcabit Trojan.Tedy.D7CE35
SUPERAntiSpyware Clean
ZoneAlarm Clean
Microsoft Trojan:Win64/VMPAgent.RP!MTB
Varist W64/ABTrojan.YKEZ-3496
AhnLab-V3 Trojan/Win.Generic.C5257311
Acronis Clean
McAfee Artemis!8911E8D889F5
TACHYON Clean
VBA32 Clean
Malwarebytes Malware.AI.1951864450
Panda Trj/Chgt.AD
Zoner Clean
TrendMicro-HouseCall TROJ_GEN.R002C0DJ624
Rising Trojan.VMPAgent!8.1ACDF (CLOUD)
Yandex Clean
SentinelOne Static AI - Suspicious PE
MaxSecure Trojan.Malware.222427546.susgen
GData Gen:Variant.Tedy.511541
AVG Win64:MalwareX-gen [Trj]
DeepInstinct MALICIOUS
alibabacloud Clean
No IRMA results available.