Static | ZeroBOX

PE Compile Time

2024-12-11 03:02:55

PE Imphash

8e3dad4d4ea6736338bcc4aca7b446c9

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00001000 0x00020450 0x00020600 6.52001806077
.rdata 0x00022000 0x0000cab0 0x0000cc00 5.14408862891
.data 0x0002f000 0x00024e70 0x00000c00 1.94399486217
.pdata 0x00054000 0x00001854 0x00001a00 5.05726260581
_RDATA 0x00056000 0x000001f4 0x00000200 3.67109580196
.rsrc 0x00057000 0x005b2f58 0x005b3000 7.99933014316
.reloc 0x0060a000 0x00000688 0x00000800 4.93494249615

Resources

Name Offset Size Language Sub-language File type
RT_RCDATA 0x000570a0 0x005b2ac0 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_MANIFEST 0x00609b60 0x000003f8 LANG_NEUTRAL SUBLANG_NEUTRAL ASCII text, with very long lines, with no line terminators

Imports

Library SHELL32.dll:
0x1400222c0 SHFileOperationW
0x1400222c8 SHGetFolderPathW
0x1400222d0 CommandLineToArgvW
Library KERNEL32.dll:
0x140022000 SetLastError
0x140022008 WriteConsoleW
0x140022010 HeapReAlloc
0x140022018 CreateDirectoryW
0x140022020 SizeofResource
0x140022028 SetConsoleCtrlHandler
0x140022030 GetCommandLineW
0x140022038 GetStdHandle
0x140022040 WriteFile
0x140022048 TerminateProcess
0x140022050 GetModuleFileNameW
0x140022058 SetEnvironmentVariableW
0x140022060 GetTempPathW
0x140022068 FindResourceA
0x140022070 WaitForSingleObject
0x140022078 CreateFileW
0x140022080 GetFileAttributesW
0x140022088 Sleep
0x140022090 GetLastError
0x140022098 LockResource
0x1400220a0 CloseHandle
0x1400220a8 LoadResource
0x1400220b0 GetProcAddress
0x1400220b8 GetCurrentProcessId
0x1400220c0 CreateProcessW
0x1400220c8 WideCharToMultiByte
0x1400220d0 GetSystemTimeAsFileTime
0x1400220d8 FormatMessageA
0x1400220e0 GetExitCodeProcess
0x1400220e8 RtlCaptureContext
0x1400220f0 RtlLookupFunctionEntry
0x1400220f8 RtlVirtualUnwind
0x140022100 UnhandledExceptionFilter
0x140022110 GetCurrentProcess
0x140022120 QueryPerformanceCounter
0x140022128 GetCurrentThreadId
0x140022130 InitializeSListHead
0x140022138 IsDebuggerPresent
0x140022140 GetStartupInfoW
0x140022148 GetModuleHandleW
0x140022150 HeapSize
0x140022158 RtlUnwindEx
0x140022160 EnterCriticalSection
0x140022168 LeaveCriticalSection
0x140022170 DeleteCriticalSection
0x140022180 TlsAlloc
0x140022188 TlsGetValue
0x140022190 TlsSetValue
0x140022198 TlsFree
0x1400221a0 FreeLibrary
0x1400221a8 LoadLibraryExW
0x1400221b0 EncodePointer
0x1400221b8 RaiseException
0x1400221c0 RtlPcToFileHeader
0x1400221c8 ExitProcess
0x1400221d0 GetModuleHandleExW
0x1400221d8 GetCommandLineA
0x1400221e0 HeapAlloc
0x1400221e8 MultiByteToWideChar
0x1400221f0 HeapFree
0x1400221f8 FlsAlloc
0x140022200 FlsGetValue
0x140022208 FlsSetValue
0x140022210 FlsFree
0x140022218 CompareStringW
0x140022220 LCMapStringW
0x140022228 GetFileType
0x140022230 FindClose
0x140022238 FindFirstFileExW
0x140022240 FindNextFileW
0x140022248 IsValidCodePage
0x140022250 GetACP
0x140022258 GetOEMCP
0x140022260 GetCPInfo
0x140022268 GetEnvironmentStringsW
0x140022270 FreeEnvironmentStringsW
0x140022278 SetStdHandle
0x140022280 GetStringTypeW
0x140022288 GetProcessHeap
0x140022290 FlushFileBuffers
0x140022298 GetConsoleOutputCP
0x1400222a0 GetConsoleMode
0x1400222a8 GetFileSizeEx
0x1400222b0 SetFilePointerEx

!This program cannot be run in DOS mode.
RichjO
`.rdata
@.data
.pdata
@_RDATA
@.rsrc
@.reloc
L$ SVWH
L$ SUVWH
H;Q rI
t$ WATAUAVAWL
t$HA_A^A]A\_
@USVWAUH
H#\$PA
A]_^[]
L+\$@I
L+\$@I
L#\$PA
H+t$@H
H+t$@H
\$ UVWH
C(+{HI
|$ ATAVAW
A_A^A\
@SUVWATAUAVAWH
H+D$8H
XA_A^A]A\_^][
@SUAVH
SUVWAVAWH
xA_A^_^][
xA_A^_^][
SUAVAWH
XA_A^][
USWAUAVH
A^A]_[]
d$4L;}x
D$XH9D$Pu
H9D$xu
A^A]_[]
|$ AVH
@VWAUH
@VWATAUAVH
A^A]A\_^
USWAUAVH
A^A]_[]
]xH;}h
H9D$0u
D$`H9D$Xu
A^A]_[]
|$ AVH
UVWATAUAVAWH
H+|$xH
0A_A^A]A\_^]
L$ SUVATAUAVAWH
H+l$pH
0A_A^A]A\^][
|$ AVH
\$ UVWATAUAVAWH
A_A^A]A\_^]
SUVWATAUAVAWH
uDL;l$Hu=
A_A^A]A\_^][
WATAUAVAWH
@A_A^A]A\_
@UWAUAVH
l$`L+m
A^A]_]
WATAUAVAWH
0A_A^A]A\_
@USVWATAUAVAWH
H+D$hL;
A_A^A]A\_^[]
@USVWATAUAVAWH
A_A^A]A\_^[]
WAVAWH
@A_A^_
l$ VWAVH
UVWATAUAVAWH
fD9,Cu
fD9,Cu
A_A^A]A\_^]
L$ fD9
L$ t$H
t$ WATAUAVAWH
|7fD9=
fD9=[d
fD9=Hc
A_A^A]A\_
fD9=f_
8uDfD9=
u/HcH<H
WATAUAVAWH
A_A^A]A\_
WATAUAVAWH
A_A^A]A\_
VWATAVAWH
A_A^A\_^
WATAUAVAWH
A_A^A]A\_
H;xXu5
AUAVAWH
u4I9}(
;I9}(tiH
0A_A^A]
UVWATAUAVAWH
`A_A^A]A\_^]
@USVWATAUAVAWH
A_A^A]A\_^[]
UVWATAUAVAWH
A_A^A]A\_^]
@SVWATAUAVAWH
L!|$(L!
D$0HcH
pA_A^A]A\_^[
B(I9A(u
SVWATAUAVAWH
0A_A^A]A\_^[
t$ WATAUAVAWH
A_A^A]A\_
vyfffff
vyfffff
fffffff
fffffff
u3HcH<H
E80t"A
fD94Q}
@USVWH
X @8u/t
WATAUAVAWH
0A_A^A]A\_
S(HcS0
S(HcS0
S(HcS0
x UAVAWH
D$@H;F
kL@8o(u
kL@8o(u
<htl<jt\<lt4<tt$<wt
<htl<jt\<lt4<tt$<wt
UWATAVAWH
A_A^A\_]
|$ UATAUAVAWH
A_A^A]A\]
WAVAWH
A_A^_
@USVWATAVAWH
A_A^A\_^[]
UVWAVAWH
0A_A^_^]
WAVAWH
fA9,@u
fA9,vu
0A_A^_
p0R^G'
WAVAWH
A_A^_
WAVAWH
A_A^_
WAVAWH
@A_A^_
D$0@8{
p*W4H
p*W4H
t$ WATAUAVAWH
D!|$xA
A_A^A]A\_
WATAUAVAWH
0A_A^A]A\_
WATAUAVAWH
A_A^A]A\_
L$ VWAVH
fD9t$b
t$ WATAUAVAWH
0A_A^A]A\_
D$(H!L$ E3
;D$hsL
t$ WATAUAVAWH
gfffffffH
A_A^A]A\_
{ AUAVAWH
0A_A^A]
t$xt*3
WAVAWH
A_A^_
x ATAVAWH
A_A^A\
L$ VWAVH
fD94H}aD
UVWATAUAVAWH
H;\$8u
H;\$8u
fE9$Iu
A_A^A]A\_^]
WATAUAVAWH
0A_A^A]A\_
H9>u+A
l$ VWATAVAWH
L$&8\$&t,8Y
A_A^A\_^
WATAUAVAWH
fB94ht
xXI96tSI
fC94wu
0A_A^A]A\_
@UATAUAVAWH
e0A_A^A]A\]
T$`fA;
@SUVWATAVAWH
@A_A^A\_^][
WAVAWH
A_A^_
UVWATAUAVAWH
fB9<I}1L
A_A^A]A\_^]
VWATAVAW
A_A^A\_^
VATAUAVAWH
0A_A^A]A\^
@USVWATAUAVAWH
H!D$ H
xA_A^A]A\_^[]
D$0H9D$8
SUVWATAVAWH
A_A^A\_^][
@USVWATAVAWH
A_A^A\_^[]
ATAUAVH
L$ fff
L$ |+L;
A^A]A\
@UATAUAVAWH
A_A^A]A\]
VATAUAVAWH
0A_A^A]A\^
ffffff
fffffff
ATAVAWH
A_A^A\
USVWAVH
A^_^[]
LcA<E3
fffffff
ffffff
vKfffff
fffffff
fffffff
__based(
__cdecl
__pascal
__stdcall
__thiscall
__fastcall
__vectorcall
__clrcall
__eabi
__swift_1
__swift_2
__swift_3
__ptr64
__restrict
__unaligned
restrict(
delete
operator
`vftable'
`vbtable'
`vcall'
`typeof'
`local static guard'
`string'
`vbase destructor'
`vector deleting destructor'
`default constructor closure'
`scalar deleting destructor'
`vector constructor iterator'
`vector destructor iterator'
`vector vbase constructor iterator'
`virtual displacement map'
`eh vector constructor iterator'
`eh vector destructor iterator'
`eh vector vbase constructor iterator'
`copy constructor closure'
`udt returning'
`local vftable'
`local vftable constructor closure'
new[]
delete[]
`omni callsig'
`placement delete closure'
`placement delete[] closure'
`managed vector constructor iterator'
`managed vector destructor iterator'
`eh vector copy constructor iterator'
`eh vector vbase copy constructor iterator'
`dynamic initializer for '
`dynamic atexit destructor for '
`vector copy constructor iterator'
`vector vbase copy constructor iterator'
`managed vector copy constructor iterator'
`local static thread guard'
operator ""
operator co_await
operator<=>
Type Descriptor'
Base Class Descriptor at (
Base Class Array'
Class Hierarchy Descriptor'
Complete Object Locator'
`anonymous namespace'
FlsAlloc
FlsFree
FlsGetValue
FlsSetValue
InitializeCriticalSectionEx
Unknown exception
bad exception
CorExitProcess
(null)
Sunday
Monday
Tuesday
Wednesday
Thursday
Friday
Saturday
January
February
August
September
October
November
December
MM/dd/yy
dddd, MMMM dd, yyyy
HH:mm:ss
CompareStringEx
LCMapStringEx
LocaleNameToLCID
AppPolicyGetProcessTerminationMethod
NAN(SNAN)
nan(snan)
NAN(IND)
nan(ind)
 !"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~
[aOni*{
~ $s%r
@b;zO]
v2!L.2
1#QNAN
1#SNAN
UUUUUU
UUUUUU
=imb;D
/>58d%
VM>cQ6
>jtm}S
)>6{1n
+f)>0'
;H9>&X
*StO9>T
n03>Pu
K~Je#>!
bp(=>?g
BC?>6t9^
K&>.yC
.xJ>Hf
y\PD>!
|b=})>
c [1>H'
uzKs@>
3>N;kU
kE>fvw
V6E>`"(5
?UUUUUU
?7zQ6$
%s ([Error %ld] %s)
Error, couldn't unpack file to target path.
Error, couldn't decode attached data.
Error, couldn't find attached data header.
Error, couldn't allocate memory.
Error, failed to open '%ls' for writing.
Error, couldn't runtime expand spec '%ls'.
Error, failed to register signal handler.
NUITKA_ONEFILE_PARENT
NUITKA_ONEFILE_BINARY
Error, couldn't launch child
Qkkbal
mj>zjZ
IiGM>nw
.text$mn
.text$mn$00
.text$mn$21
.text$x
.idata$5
.00cfg
.CRT$XCA
.CRT$XCAA
.CRT$XCZ
.CRT$XIA
.CRT$XIAA
.CRT$XIAC
.CRT$XIC
.CRT$XIZ
.CRT$XPA
.CRT$XPX
.CRT$XPXA
.CRT$XPZ
.CRT$XTA
.CRT$XTZ
.rdata
.rdata$00
.rdata$r
.rdata$voltmd
.rdata$zzzdbg
.rtc$IAA
.rtc$IZZ
.rtc$TAA
.rtc$TZZ
.xdata
.xdata$x
.idata$2
.idata$3
.idata$4
.idata$6
.data$r
.data$rs
.pdata
_RDATA
CommandLineToArgvW
SHGetFolderPathW
SHFileOperationW
SHELL32.dll
CreateDirectoryW
SizeofResource
SetConsoleCtrlHandler
GetCommandLineW
GetStdHandle
WriteFile
TerminateProcess
GetModuleFileNameW
SetEnvironmentVariableW
GetTempPathW
FindResourceA
WaitForSingleObject
CreateFileW
GetFileAttributesW
GetLastError
LockResource
CloseHandle
LoadResource
GetProcAddress
GetCurrentProcessId
CreateProcessW
WideCharToMultiByte
GetSystemTimeAsFileTime
FormatMessageA
GetExitCodeProcess
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentThreadId
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
KERNEL32.dll
RtlUnwindEx
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
EncodePointer
RaiseException
RtlPcToFileHeader
ExitProcess
GetModuleHandleExW
GetCommandLineA
HeapAlloc
MultiByteToWideChar
HeapFree
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
CompareStringW
LCMapStringW
GetFileType
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetStdHandle
GetStringTypeW
GetProcessHeap
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
GetFileSizeEx
SetFilePointerEx
HeapSize
HeapReAlloc
WriteConsoleW
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
.?AVbad_exception@std@@
.?AVexception@std@@
.?AVtype_info@@
m},XjD
%Hjgjd
+_40E95<
.eR3pE
\~j\lYL
t(Nh6|
7,sh1F
5&3wI5%
mig+<l'E
4=|`W6
1wgNo.2
4HVN'@
e7,tE0C
P7NA 0
DK3a]zM
>gAb3k6
Y"r35Q
\Q&0&J
e'a8RW0jbM
MhA])v
/5"J;]
)3HfE]
Z$jQ8/
Q"Clp 9
5Fo;2Fi
#P>yeq
cc1r?"
Pk\hH@z
}viYp[
&uyd(D
t3I3X3
rqZcb)
]W`\D
@:^y&j
\,cyO9}
'(nq}.&
D>:<7
.iNGv]@r
5l@~9@
i,-4W_
=<g.3s
>|f(s9
9,oaZ}
_zqj(+==
t[sWm<
P2b8|{oqdq
(dQyHHq5
`5RO{tP
@,r&r?
7c4HI:gi
k$uHiD>]
&d?8?
3[^D^>
nD4<5N
Ik`h7Nf
?h#SzY
ab[.9[
]yB"40'
*F33%.X
=6\7&"q\
nbQ#:u
hQcY@o
-G8F%A
0I5KO't`
yUY?@T
_6,!~N.
szO[huZM
xl/-1$
r`OZ:D
;m4~$^
X2Jr0@
;/zrx
#zkKh(
0)kB5K
-e")YGDr
)!K+-(WO
k~Lk(4
8a23}O
BP5:jh
{*SC#}
<=9B-M
18I?J}i~&X
m*A2z
EDn?rKI
O]$r@w
]Co{VK4
%5wt9d
tdU{P>pj
`x1togu
,JV%y
5n4bSi
]XOAZ7~
635G_i
Jn(Pt@
1q'KN;
,1+V5cx9<
\pwY(P
1)~=FA
.lr]8"1$j
s%=H#0
jBE/w0
z:db3'
Ab&1r+
vj,f16
Cj'$_;RUmuT
-3N)bO
7dw&#kmI
5%4/VE
8"eN"k
QU2b3,`
(d,t,M+
8lMLSW
K0GvZ5
:p7{,w
(pkZP+@\
cw6J;DC
VU<NN[G{\
UI ]u%
y+2vIP"
;]K1bq
<rDA=
TmS:i5
?(T;n
xZ?wX,
<7pa@)
7ylfH&XNKT
kBEbIU
sc+#v`
UUfz~c\
G_<h$d
wR`18m
U\:VdW</
N<&QOh
4An*s
ed<u7,O
<k0O4~
VfL=J~
Hlwvh\
qIq]2.
T6z3:l
G$k$6t
XAItUW
!)UPiO
F+=659
7y@uu$
6F"X4yeF
'2<_2\i
L7V9og
LF\&5&a
C~-u>
b?ti@=A
RVFii'0
&/}M&7h@
6P)?z*
E>WT\W
l5MO/{,|Xj
zfzyZa
9lt=55
r1!2M!
-Fd$I
UN~;af
Z jbtRc
JVJN@W
SmimOr
Zn\"[u
h!Z&@AY
Yf=JiN
Df,L-^&
"0o`?o
K3]b/c
QW.5HD
Hnp(Hn
)9*HA^
/J,N2[
e`9\&'
u0!B.K
`)C+b}
hT!W^f)
'ht@400gS
1^Gcul
n|628LBU
+fqXA%
duF*q
|o32>|
dhcoUI
~Gk)"e
)sYV]p
7}t'n;
P SrBy
6@rA
j'Wk|$]S@~t
K.hdZo
@6M`Jy
0N#a4P
=%*hV{
I`EW"'
@4oEPB
V9Qj6d[xqv
b.;Utc
i:+*Qe
e6"~k9
?L<m>y3
Acj}Ww
56yF"6
+@?)5l
1$)uUA
h}{|+
zDK]y0
mpZy&B
w=tDv!
wWI-}.
zp^N:.
pbZD4&
*>LZj~
*:HVj~
majorM release numbeincrovel'alpha', 'betcandidate''containing_diectory of the binarystaloneboon icat usagefilecos_bundle_
OS app no_asserts--python-flag=docstrsonsu
p 0xSKs
9mbgiu|1
LW4ho3=
-!`+!"h
L[:|+.
6GMjLg
1234567
kkk<=]EjGjjJKjSdU|W|YZ[\]^_`ghijklmntstuvwxyz{|}~
Qkkbal
mj>zjZ
IiGM>nw
v$F}%g
=}9i~]
>p.NB;
t/v2Z%
c9JxM3.
if . >= (3, 8):
else_ (def _(, , , rys =;_ == 'METAD'nel.txtos..(tctecoroup
_old_GW.Enhanced(.
attr(g'._s & 0x0020sTrue
(,e SIN,
q1"DDD$
xG=A>@
}H/nLPN
t]]FM@
ZG"|(H
3tyEt&`Q
](}az=3
g(s)+:'>='weef<<Mo%dEptIib
O|O:#p (d
ziO:PyIU_dLoadLibrExW("%S");S'id
yicirlyCrl.
-<RMSs<<Rs h<>
Sp //_cGEN_RUNNINGCLOSED
REATSUSPENDCOROf
$(,048<48@D
7HLPTX\`dhlptx
 &Hh
O(%P$x
P"@(p*
d(llsfvew1
23ptr64ung(
=><==[]>++-*
/<<>,~^||==/%<&|=`vfb'
`ofu`v` 'a'irtapeh `ud`EH
`RTTIomni`d
at "" <=> TDe C(ArrayHirchy OL`ym
8Rascefbrl
FlsAFVS
bad"X!
k#c8L2
[aOni*{
~ $s%r
@b;zO]
v2!L.2
csuc__tx_:fa_vusduei!
\ i)aY
,I(A~*
^+>)DD
PIJZW9F
DeZJB:
@G;wsK`[d
lzst0hd2tg0yftxa2nswufcsdg
bxvbpoe
LCMapToLCI
pPGeTerM
NANn(S(sINDe+
dRRPRRv
S"M60Go%r\D
yxc^C6
^]dF/mMw4
@E/a52
F1&ow:
SseensrhuitnnpprrhsqvtubstvtavyzumfkiskywutpgtenanloyvABEsCdDERFLuH
UStTNbOpPBR
aTDOJVsYBOnBJTABWKHLAUHQBVHIRT
#He*Xl
X_5h| xb
HFXpzedgikymoqsyzclyiaczgkumreubbgijnpwscordcsghmeryuvteusiehmguhlauympekrygnrmttlnspnsklijnsqlpvvwkytthrtuupvxsthstu
01#QSD10
lEM62.p
|YPpHr
T;i+h`s<
X9WcY8i/
KpRh4G_
.:S(8@/s
2V.'N6
~\'. =Ni
UCmclu.0
k-U%$ml
|Y.i]E
132"""6mr
J^kHvR\
^,4\`@
j9B5"$I
o#x>-
H`D@ra
qLxkg9
:~[<~?Y.
y/DsXt
Z=O{j`5t
=UWV9[
,63\'"
kP$nrjR
!A"$F~
6N,:1z
SUe\LF
B[^\s`=
Agh<.nv
PAK<lP
Q\bYC(
:b&9:fs
ae^*2n
)HA9eT
Z<1v~w<^
{+C]S~/KF
JsJH+?J-q
MeCH1~S'
sy8#MK4t
S_|wOv
8@E?t*
i7N_z^
p~hc&7
hcg~hm@b
W|c/U_
!8q^-7O
WWo'Ok
-@_n'A
A<%K,#|
sB?Un3
AF(3c~
eTzjgL lLRV?D
yFT|IF
C^|l&!ln=
ibfbfX^`p$
A@F8LR
Vj";XF
4j_}b:]
KC2:c9
|F;BFB?D%
1L[IqoP
SPQ4sO:
CD;.B?
=r]:.[kJ
%A2tW
z"WP-=
v[Od_V9Zf
=MsS;
T<*`D1
\IZI8|
t7kNtV
52_sSk
|87530H
YQp_DJ
\MZM8~
eX^F&D
oljhfd
EE<;CD%~
FrMUUT
KTQJOP
c3o)=
"o6sM\
{CQzX)
e2QK'^
u<e3U6r
3gvF!4
Jl}@O,
{RR_^9'
'Nt|>e*4FP
k\,cnH
T~+8s-:
oz,E[I
[%)*"b
AoZY9y
hDICD7
@91KJ'
9vSElS
3.7#ag
g4?sIn
^>G?tq
|vQppJa
$[JL,r
l>yl>Bb
A k8CzZ
-^99Y
qJ]R)x
^owHOa
a]"#_]i
$0jN{-8
T.T#XUb
C}7|<p
,V^M|q
Q2*=M!
j^WgqP8
SbY' 5
e/qISlZ
:ZkWVgD
?`XJAF
D5gZ$E]Rw67B
DXJ@~XM?
:sPQpW<~
?E/|KP
$Xj@FE
cD5om,-
#9BtjMm
V/){2E[
IcX[K}h
c8~sX~
4af,>=:
S@FD"B
g+d+d3%Yq
(w6vkg
crm_/,
Lb^|Ln
UE{"Z[dUD
nGqbOqC
'}I$X/
pO,pcX
;K%vk4
Q.T'"O*r
Khdx'aV
LFqMc~:
Uhy5fR
Mw4%)6
Q&F'J"U
%czEOYx9R9
dkTBSB#H
i]HqX+
zIoCC|
K$@$M`
vg,"*`q]
B$+dX1
|E:Ey'
}6ETB)
K/B5_2
7 2]WTR
]+>6F%Cl
(k'78ICD\D
uE.SW[
cmUm^&
$"pQJh
!A:Z%%
HI${iGdD
"IIH=w
N~{?6
F0>V7
g:'A%'
0UR=,G
nF~l`L"
/z#;@8%
)Ks?z,p7&
F~XWY4
ZAUEV.
gp3JEd
".Bq<o
g^M7u3u
:-">=(
E9tf\[T
f=FEyb
GydYE[
D2XO{
y[Hvk"k
:PL+:#
7jTAugA
iV!aurq
x^V'K
U-)}YYx
46E6tr
_ XY='CP
}=z[;O
k%6SvJv
"!F;Uy
^_0B>
^e%Qw0}T2N
eBZFGi
XKG6QR
hXWrJ'`
PLR^G>
wuu$(V
TFe!H9
Kl|rjnJ
nPQJ "
oyt#x=
4#_r:{|7T
9)`SN91
JKM9|G#
SObBRr
\0-.z[B
F0j"E$
0pJ7%%
PN|)J=
cU4ARd
#HKJUKJ
!Ty.<~G
@,U+hX
)](L7h
y&dIa%jE&W%t
;UyTUn{
7<t6ST
2T5(Yy
Aa%pl`
8uL2""
p8 Pdy
%j5KfS,|K
4uOuy
_}OD/uC
TsBA}M
\01O'o
;3UQcG-Xj
5B&'%-
+|KuoWp
SoXViq
3Ija0n
97,p]yI3
jj<K+7VO
:=OZn,
sPP27wlxn
mlYU}4
lv)U{<&
MZg9vI
`poTQ.
K$,@-a-
_m{8vb
4SmZhX
*(ex(_
YW,{:z
A/eG|\
_^#y4&Ch
jW=P4S+
SPu/lb
)%(9)
vlQQiY>
L+F&'
2n(GUr
*jEA3ql}d
f'V77w
R?R2TZ
W^A\qO
3MmLCX)F
E$1HR"
?jY(]B
b?HCOFG
X*%[|Kd
#%Z5GX
U&^9QG2
5_o</8
}2(o2x
T~xaN%)-e4
W~YU+49
|x[Lo@(
*XY7IX
a6OM1$0'M
T3h^T5
h1EE'(
4^#$JA
tN@@rO
/SQheZ
"EUvI#
`rF]SB
~JU6-sva
t&KF\<&.
,e\<LA5
7Q<3WG
lg)ABfeQ
L|da~K-
Q':Q6>e
pU&-kr-sz
=48%Es
M2Hu1S*
XU 0I"5
aOh^WM
X=+/9Kx
(P+$Em
`S[f<,
<<0h[$
TP]o_2
_[!m{{
}@]:nI<
X#%%%!!E
bJO#DX?
kIY;JTE,
XEhE/6
|v_!q.
byzw*_
^~d>)LZ
dp'A3%
7V>BVb
eN3\~,
D9.DqX
cFuSsk
U6dsrZ
u]La=UgYT
92GFG{
JEC1rU
m)&vn
FCoC{p
V,5DPq>[
(C;W36
\L6QF<+$9?AmT
,fgWNh
hmOfZa)
:407hTwC
Jh>K">
TKl;tN'
s'Y{*ye
OkIJz1
2Pq9}?&
iXZ|^
UWl]B[
!FQTo
$QFLbh
UTRXPI@
(l^jfl\b
C]z%jj
.eeCXT=
wHoq)+
Z5c%Gy
,s}+hF
#gr@mH
("m#sz
33+5V[#
l("/_f
gWiRfa
A:6r-{
E}?h6p]
$R3;]_
bf(/+@j
$64!QOs
g+>-wI
n.>hrS@
y8leZ
*"je&;
tt&&C}(
^t@fAZD
y?CRYg8&
:%WcgN
iK`m?r$
l2(gYB>l
N}T&$u(
(g%Dxh
Mub2&7
%y^gt=S
&+e}^[
(\&]YS^
{r9#MK)
(6/c=
[R{belj
&l5Kxs
%2s0fR
}[ki^itdE
{vTZ95
1)MI:
6KB_av
LPNGG*N)I;C.
V*S S$!
B1u@eQ
?n~[sr
evl'Oa
blJ.ze
QAL%+XjU
pVD4|+
OSPOO+
m$JP3$
ZhdfxI
hv8+1dR
,#oe`}
# $!#$
00/J\x[
\j3\Ya
2+(+R`
u({_ K
[snZ;V4
EtQOMT`
n4)lrq
(]v. (
OC=yS4\
77m.+6
/XJSs6
:2+6=5.t
q/R8YZ
mvkW`
~-2tV'
Yk&kT(:,
'OZ+Q[
qhSG,9J
`cTV0qG
iFS;;K#]
is>B;{
"r$'3U
?wg^M7
Hb :Gy
o4Moi*
O!(G Q
S-Dg)a
q|("-b
YyI,u1
~+Co9-K
c;ay0WcNq
;`6]s%
{R+Z_-
iAY1F3a
?j3u$n
HC):i3I>S=
YY+Che
-]hE2&
\1!.,M
$,oT~/n
P-Q(3<
XI*/`)
!etFtz
E9](0$
a.8B&
k'(M's.
_leK{q
#MaZ1EHi
So\:Nwh
ie-ES#
<;*5cU
SH!0<Q+
CAxs[o
7;l-%I
).^U7a;=
auus,.b
"H@H,e
|b]MR$
}'u7e8j?S
St~IAK<y
9b+0 !>s.
e7=B[CQ+
T^K):?E
93>fNpLF
GW)X3K
l"}Y`5
pC#Sbq
mz#UDe
4:'}>C
1a?}D8{pL
22D2Q"
p.ez/6
2pHk(s
gOAA99
c-Y%DU
upbuBllF
AD*c1/
4.):npWW
4v9[1w
"c.cQ
=@UQ2?
h8MV7Uhu
$+&NJ!
Cv5/KmI
Y7&zJ!
\>D-jK
WQ3ZNF
UJj4/q
@2&T[W
ihdBYS(t
W+pWLO$
~doj1g+s
hHRQ:V
b)^)`
CdC~:/
$9xI"D
>?E(sa
mCfA^H I
tS`20oa8
(_Zi.{
2'rL,}q(1
cDcxcu\
I0-s*4
7isnB`
| 8'SP
7$,YB5r
>qAIol
&&o]${
A0at/X
"j$BXE
MGg25:
?I9Z|@
6nDeOb
Bq%k:4y$
Q6b>5YB
pPqvuil
;JDw[&
:Ad*3v
^P1%C'
}pZE#{\
S}&R%)
rEGb%>
nt|2SoH~&_
2QpJ^$
=5zlS*
]I4B4a
4cw&i%
%d3@/(
=l 79@
ClM5lV
JOl|9]
<mUP|r)i
$mAV\o
s g|d\e"
E9J;`4
z;M<`2Gr
VCBc5B`
dqGcl3
yC}f+r
YmqD;)m
,bB)zb
[|ysg ]u
GpOEK{
=XPD9m
:d!H*.-
[)^{]9
E2bu'\
Sc{iRG
]loKQ+
&-V%m$
UF!aUz
DzX,#s!
?>=<;;
Hqnljhb`
/.-,+OgS
bQ5gor
BjQp[`
E:5!B
<Ki{9H@
R,-;DE
GE1I $
Ig[Hl/
L_h|`9x
}Ee_6U
2Wxwe*g
bk&FrV
J4.4-4,
FWIVHb
HLWiP"
N/4DC
-W1?bfh[1p
H8rU}&wM
D(q<h|
>W`F`u6
"nZa!M#
Ce6{x%
nOfB["
;HA!lt
x@0`V
C+Cn!JHMe
R,YcikE
;m'+H{
3ov2 m
@EXBH1
% Lxfo
m+H8
bExuvO
#LFuX'
XW&bR-
(i|vLY
&"$ebW
3e!k@f
<Enh("x
hUQ4d:3
{PH1Mg
s,{!v\
Pz9hl'a
7]"aHS
Vl</KO
BrRMBR
4BB!c;
@xq0E
-S|a5vz
-L;_$s
't\ Mn!,
-E7,/JK<l
!x].-m
t'g-Ig
U_O)o/b
B3.IH&
,N+U6?
7&C""2
G&wi*MBf]
dKlm.2
0^BT$+y
Qw~>o3
eQt[@QX#p+z
-;i?}+
qwTLQ:
]l==L/7L
Z00P\W
'2U_oGC2
7wxk9s
\)LL(
VIW01Hsk
:1:L%K[
6Wik)q
U!?9ou
|*ihhj
m6.98%(
ePNl<_
=cY*r1
hrGv .
ZWrCwmf]]
tmal[
qn}E@`
Yfv5T*
e-iGds1n.
B@H=EFR
Y=S7*j
b*nK'@
f5f']9
#5jDL%"
;[xkN|+
:gGj/En
Od<pCC7*3E0
4]_)Q{R
qSfM=Pw
Dp&%LRy
;nj?;s'
{nOxB<
ig\.c3
D8vX%b
_qdV;k2}b
Z9chre
d y^Ua
ewN*||X
t='*E3
rx}wt
].!>g{
htmfu<
y1?Iv)
GgURnr4
WPPF.m;
WOk,?$
"QT<6'*
qnf*J#
-~mICW
7L~4P]
0_hZwN
/ !6db4
mHenjC
?Pl0F?
Pd6m8!
E6h$QSQ
!@%okc9a
CV2EPwn
n=b)?
h&kKST
Zvy#u0/%62A
iF?M}J
q[.09|
3_G:JS
Vh6_]6
Yn,LLo
.HaDF<W#
VQG=&m
T-2?$?
jwyvE'q
'Up_Da
y!\!zd
W-7@U&
N3T[HU
WDku}~
4cI[yK
]n`esc
X'W@D
zr"<hO
<vQ!
7GI!Rht
0[\teb*
Fw>*$N
;.t\yf
f[H]G7
w}VPm/
$4~&"[A%[up
D89;1.9|JJJ
2mZ14-pv
mL&8W[
sDn"2M
Vp\MXr:&'
y{5."QF/
8[TL;PQ
'((J,~|
)L,_R@Q$
GA~XQ7
eOl_@;
777-P8
6W&csePP
qIlI2e
9a!We#
cXG6#$6#
q,rk\{
E5q3@'
BSyqi?
H;t*EP
qX_q"<
lW_;4M
Az3w:X
31FP ~aA
|#)PLN-
*D^IZ(
Ld@gJt
tXmWaL
!vy['U
''K?Eq}
4Gkj=}3R
yB\JA>p_
%!nauyCD
EReg3_
5jkv3Y
sxjj(.9
7Y&qv3
"Le'MAFN%
E^6wB8
#y2&54]N
:dC_1
Q*IzC'
A}SUV*
T(E$Lj
9AgBV2
FcG\v?X
Vt"uqk,
|,sm_LF
j;5ALXud[
L]M>Qb
{kq_;a
(1j5B5
1@PKCA
q+QcQ.
dB%D%S
r:aS[\
JIPfD
cro`i(
x2R1_Q
+=l06#bI|
0tWWlc
g1yPGz
:}Q,R4t|
}#&!hF
bf+\"3j
m_\u@h
kfYrg6
3AVzb"
4U;CZxX
?#,-O/=~M
r`[\u6
Pz)BKA
Rh8gZ!
TRjT);-
Z(=M/9
ebYRdhY
pZ >/,
\@9rUzY
"*FH`g
@xd#>~
O)]MbvmL
}sfuVA
J^kX8N9X
&g#m:K
H<[8~,
<5kekm
ddb^|R
-'F0YM%
_?;J/"
1AR+.T
89AT'9
CY&9!5Q
wW< PI
F{[lB#
f{ M}5
W3e._C
t(9II
IUje!E
=f)f|/>
cl @voS3
c/3chsnk
4(tY]>
JgbL;c
w5Z#n8!a
4!mo=&S
DDgW[Q
pYYCGx
%b=Y.W
C3=U,r(
t3}K'q
':dg~,
yr:<Yd
i2)UH.B
tA':lfZ
-o*`kJ9w
h>v$6<V^
9DEH(k
.@*WL{
(qd=27
cKtwIn
Ts+SUa
6p!gw8B
d~Zc~a
K*%[nn[/
b>EHw'i
3d:XVQ
1P~y0\
R^ja-(
-^S<W[1
:e_(^r
n9z+|3
hlLn<"
"`?VLp
N9[{dy
uej,{s
j(5\K`
m<+4S"l
D\Sn@Mz
WFLlLow
, |pY
Fgq,o[
W+jv*<
w1m>jAY
Zr5/H4
`DD=8ak
XZ,*HweK&
q9@vAw
qL{Svn
7\U*OL
@dsKP-/
j}4 FO
$z.S0]<
Fn3#*P
~~~n@Kf
NB[qel=
bH?>Am
9jedwK
>*TeXJ
b,xAM
q7zj!4
l2{N&r
F"M#MVZ
NdSl$}
uarEVr
W_gw\=
bb~31?
xUKN`^T,
{o3o/fd
&Q:*FD
no|H$Y
^:K11<
\F*E:EQE
G` )(@
|*KL{<
%Jn"uI
3YmH|7
T(6iqo
cJfDW0
;-R$w1>
-Q@RB@
mc*VnB
t!EgI?Zs
i_ckkZ
FLMnnU,1Vn~
6J] 3W
X:_c#5M
ZeQ{uh
6?q:Cr8
J)Yi^D
QSr4!*t#
kR$Qn}
9u?<{@z7
h%}J|?X
_d +qV
NGan64
HU [A[
vn2|AY9
@t^[oi
zh~d_f
|8q kc
w.<D>
Qh!5*
<34]~nT
U)#&5+
$/-{i.c
+v%<Wi
,S!2Vm
wUG`so
E",cvD
3i+i;!
Ut9(Tt
u$DP4o_
Hi`-"/
d1fDah
!-KC;V
zkT[X<
W2mvA9
:wuj?Iy*B1f*ngUO
U{:A[x1I
W(Lmx19p
AosW|e`wT
Vfx`Bk
945h:^
^?#*p.
AUgmyw90
=R7z'IXtI
`/\G)E
] #D(Bq
1.WX)
T7R1S_*
S:^hW|t
:Q&WNS1
hwT<Q027
l6@1k=
t!{M]Bp
UiGf
E53%$f
vQId#=
*.**+R
u1^gFL
"fW&)Y(
`d/6DW
=bQIBP
',TpmwN
MQb7%G
lQ4*Z2
LRK?QV
>0d=$E
+h %K=
8F9'sA
?Q*l yH
,*&gu=
ZOY-0/)=
Qj'X1f
r`O3rI
x*iP.ol
_V9#:c
d;a}S.V
nWrF_?
qtu!\]y^
9H !AA*R4
/PZV3&
Df|.,^)
7tN(#S
31liGd
=pyB{7b
Ifd69Y
!;Frsff
\l^gC3
5;+Y?>3
9?v" -&V
(*JzbL%
E([{M:PA
<Mr`=N
=5w}v/
fiG#{r
^t%b,m
m:y0Ud
Ok%WFx*^
zH`gY
s fY2@
Rhf'zq
XDx:V!
: Io9QS
HVxqo7d
|pF=;q
[p%mm<
~Vzmnc*
KRZhM%P
rr%nc3
9Y$G`q
>wU|P=OWL
c/WVHU
_5MuB3
NvAt{g
lPo1^)/
dI0RY/
R_B10=
$kic^#
q_S=iTD7s
{!\Ks
*qTg-U
Lq(C@I
lU1g30_{
22D[#'
q2.H}vrd
s,d?[I
j{P"$#a
H Z]H'
'+fjWwi
Lj\tZb
5pBX;r
ZHccpW|
KDoRD<k_
[0[-?T
|d}(B\8
!+7ZSN
UcLw0!
1@6?<>0
c+pe;7
DY`#(.
m'w''V}k}Q`
5EQ8J+
pU0w/a
4twrqY
U$9"Q1'
ixm\@n
$$pIhR
X=uESU
++5~YU
LcrrZl
<[ZpZX,M
qBl!c34
tw;6vFQvDD!
e3"x>6
k^3$p6
[Do8d
_fJ\s|
s0(EKg
GFWRu5
vbdWo$.
([a9o[
rn$nQbK
93>i=? J
!eEY+`{`
ACS) [L
,}1b~W
GG5}M|
(Vy$yD
e<i#Pv
p" P8A+:
#S]Ak/=C1#u
Bx2gnr<
G]nayjO
:QWLPS
ys0y8!J
0FD/@E&*
+)s,?c
2&.aF>&
me`~$=
0PGvp]
y$0_2u
OYHS*M
+2VSzx
WSW]^OI
mW55N-P
Dg'R0
Y.="ry
Ve]OX}
Z/*#*s
1?}nf5,
_S#c!N
q)^Xy|
7YsM^1
N4xT.P
zULtK_r
uS_<R%
*F^=[>
Ss1zDqX)Jg
#B?<Fkv`dy
y fb}x
pFl8o`Pe
"%Pi$Ctn
3B@pgV
7ZJ:*G
y}bHp`
jE/.-,
_)";sp
R01_'.S
Ys[v]
=PkIK%
fQ{mw;v
7H$=\N.xC
\&T3nC~
hYdK\[)
=eDX)P
I[hdNB
&-rNg9
(I[yQ9R`f
^OcKokZ
~~"P]TE
T*zTJo
=cVu$h
F*{'t2
XZtMHt
!N@#b'0
iN>o+C
N>w5vHi
TdF!2C
@ImPOI
Bw!k.m
z0?T]jDIX
zy$beP- U
FcKD P
k'eG0@
`hBD0C
`O>odz;2
`FF`L6
TlgI*g
?bQtP:
)DJK/O
h<PK7y
i^H!?x
V 3p`.>iVJC
YI\emjvG
60`>U0&
fVu`4/_
HP*4t@
@UW7^o
f{V2AL
kV]gB#
NeJxE
S!aq{K
z4G`fw
$eTQJO
&:JU@L
(yE=%6
fSBq&u
fypTH&
i5x)(k
9lX<DFV
%s%!lFN
}%SbMp
bicnbI
7bO+"C@
fi&>qP
#lg!20x
m{}.*6
GCr:Y?
hHezVY
Yl?|QR
Hjz(RX
`{K\EI
6gxU@@
1~sdnV8
}}Q; X
L gUG]
L;U#J"M5
Kb`_Y%6
)u6y&M
}u\&CW
^HcInUt
Du}C^z
'1*?7#O6I
{X{ YN
pff&MS
Wd=Z41
J$#d_X0
5Knq1"
H3<n11
my1|77/
fm=5Z2
M-Q|`F
Kv[GulM
iIMG;;
XAe](9
_:n&s;9
10&]_4
7bV>PI
w9m2'L
rWMDeo
?5,_U^8
EIQX9U
Ik_($p
gjA<zb=
FCpPfp
<G?VMU
xhcu1$
qUnu,HC
b1OY"i
"zsEyL
BCAAAAAA!bF
"*#Pdy
-)('&#hR
>=984321,j+h5OC
H 2"34q
J.&FvtG
T,\3d
.4RcJ$
\qf!vNX
#PI&,'
%zh_6g
k2QJP1
XUQMI)
V~U}T|S{Rz
)kzX#>
"7LL:aM
zjZJ:*
HGFEDCBA@?>=<;:9876543210/.-,+*)('&%$#"! 
QRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
#$%&'()*+,-./0123456789:;<=>?@
GHIJKLMNOP
a+hY)J:"
QRSTUVWXYZ[\]^_`abcdef
ijklmnopqrstuvwxyz{|}~
BCDEFGH
1192#C
"$&(*,.02468:<>
XZ\^`bdfhjlnopr
stvxz|~@
YZ`bdfhjlnoprtvxz
atE{2'
QQ+G]K
rI@@@`
V/OW`cW
,hJNdJ
:d~ O!&+
-<E)Ex
Antivirus Signature
Bkav W64.AIDetectMalware
Lionic Trojan.Win64.Agent.tsGi
Elastic malicious (high confidence)
ClamAV Clean
CMC Clean
CAT-QuickHeal Trojan.Tedy
Skyhigh BehavesLike.Win64.Generic.tc
ALYac Gen:Variant.Tedy.631642
Cylance Unsafe
Zillya Clean
Sangfor Trojan.Win32.Save.a
CrowdStrike win/malicious_confidence_90% (D)
Alibaba Backdoor:Win32/Redcap.b492fbf9
K7GW Riskware ( 00584baa1 )
K7AntiVirus Riskware ( 00584baa1 )
huorong Clean
Baidu Clean
VirIT Clean
Paloalto generic.ml
Symantec ML.Attribute.HighConfidence
tehtris Clean
ESET-NOD32 a variant of Generik.NFCFMNM
APEX Malicious
Avast Win64:Evo-gen [Trj]
Cynet Malicious (score: 100)
Kaspersky Backdoor.Win32.KryptonC2.l
BitDefender Gen:Variant.Tedy.631642
NANO-Antivirus Trojan.Win64.KryptonC2.ktzlot
ViRobot Clean
MicroWorld-eScan Gen:Variant.Tedy.631642
Tencent Malware.Win32.Gencirc.10c07d1f
Sophos Mal/Generic-S
F-Secure Backdoor.BDS/Redcap.ipzap
DrWeb Clean
VIPRE Gen:Variant.Tedy.631642
TrendMicro Trojan.Win64.AMADEY.YXELKZ
McAfeeD ti!AA50C900E210
Trapmine suspicious.low.ml.score
CTX exe.trojan.generic
Emsisoft Gen:Variant.Tedy.631642 (B)
Ikarus Trojan-Dropper.Win32.Agent
FireEye Gen:Variant.Tedy.631642
Jiangmin Clean
Webroot Clean
Varist W64/ABTrojan.VXCY-1890
Avira BDS/Redcap.ipzap
Fortinet W32/PossibleThreat
Antiy-AVL Trojan/Win32.Agent
Kingsoft Win32.Hack.KryptonC2.l
Gridinsoft Trojan.Win64.Agent.oa!s1
Xcitium Clean
Arcabit Trojan.Tedy.D9A35A
SUPERAntiSpyware Clean
Microsoft Trojan:Win32/Wacatac.B!ml
Google Detected
AhnLab-V3 Trojan/Win.Generic.C5705604
Acronis Clean
McAfee Artemis!D68F79C459EE
TACHYON Clean
VBA32 Clean
Malwarebytes Clean
Panda Trj/Chgt.AD
Zoner Clean
TrendMicro-HouseCall Trojan.Win64.AMADEY.YXELKZ
Rising Clean
Yandex Clean
SentinelOne Static AI - Suspicious PE
MaxSecure Trojan.Malware.315573171.susgen
GData Gen:Variant.Tedy.631642
AVG Win64:Evo-gen [Trj]
DeepInstinct MALICIOUS
alibabacloud Backdoor:Win/Wacapew.C9nj
No IRMA results available.