Static | ZeroBOX

PE Compile Time

2023-06-19 03:14:51

PE Imphash

55347c971789434361ebf2c1c21a714b

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00001000 0x000320a9 0x00000000 0.0
.rdata 0x00034000 0x00009819 0x00000000 0.0
.data 0x0003e000 0x00043f40 0x00000000 0.0
d0 0x00082000 0x000c6e2a 0x00000000 0.0
d1 0x00149000 0x00000038 0x00000200 0.22401940744
d2 0x0014a000 0x00136a50 0x00136c00 7.99007465462
.rsrc 0x00281000 0x00000ba4 0x00000c00 4.65084087909

Resources

Name Offset Size Language Sub-language File type
RT_ICON 0x00281448 0x00000128 LANG_ENGLISH SUBLANG_ENGLISH_US GLS_BINARY_LSB_FIRST
RT_ICON 0x00281448 0x00000128 LANG_ENGLISH SUBLANG_ENGLISH_US GLS_BINARY_LSB_FIRST
RT_GROUP_ICON 0x00281570 0x00000022 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_VERSION 0x00281594 0x00000380 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_MANIFEST 0x00281914 0x00000290 LANG_NEUTRAL SUBLANG_NEUTRAL XML 1.0 document, ASCII text, with CRLF line terminators

Imports

Library KERNEL32.dll:
0x549000 OpenMutexW
Library USER32.dll:
0x549008 wsprintfW
Library ole32.dll:
0x549010 CoCreateInstance
Library OLEAUT32.dll:
0x549018 VariantClear

Exports

Ordinal Address Name
1 0x405ab0 GetModuleHandle64
2 0x406080 GetProcAddress64
3 0x406680 GetThreadContext64
4 0x4064a0 ReadProcessMemory64
5 0x406000 SetLastErrorFromX64Call
6 0x406730 SetThreadContext64
7 0x406220 VirtualAllocEx64
8 0x406300 VirtualFreeEx64
9 0x4063d0 VirtualProtectEx64
10 0x406150 VirtualQueryEx64
11 0x406590 WriteProcessMemory64
12 0x405740 X64Call
!This program cannot be run in DOS mode.
`.rdata
@.data
`.rsrc
8]I& e
Jb;kY(
%^DJ%2Z
=_=jqi&
S<+kx:&
mFJDB2+
B!w9K[
H[#V:oX
q.|&I^
$Ss0R0'
C@=9~1
%9o],;
.<\f.!9
|Zl]dx
$!*5'7|~
6A37|m
t3 `sq
Y3;m2-
T6\:e(z
`@:h:`'
IA1jh@Z
+kV&%O_
EDP5}z
vjgW,n<
\6PG|$K
2/n9"J
6&K#MP2
=m8]IZ
p8&}?Z
{o:Gs
r:/?#q
K3*$}d
rc&d6a
_-R}EHCA
2mr"IS]
-UWq:\m
Z%gv+,p
HW"pMM
m@RN0M
(<e*uR=
'c=`lXr
=D#jP7
yu{gx?i
IFn_;C)K
|P/Y_?N-
EEkAI;
nO>Mt^8
>!:(M.
Z&>q'r
T%W+KH_l
ri[&\Xp
J2"$DYR~
>=%%n"
|yk|T#
_rp9r1
OU}6v|}
S/tlmJc
Z3{H>l"V@
X2!RA?
}#zJaAoO
cXhJxJ
"?zQo.P
fGJE&6
GetModuleHandle64
GetProcAddress64
GetThreadContext64
ReadProcessMemory64
SetLastErrorFromX64Call
SetThreadContext64
VirtualAllocEx64
VirtualFreeEx64
VirtualProtectEx64
VirtualQueryEx64
WriteProcessMemory64
X64Call
RAZORSERVER32.EXE
a1ZXFGlSD
%lr^,f
]3Lc[$&
~2 5EHO
!t@+OW
,U\pBpn:
Fa).D"
Z}hd
M5j IX
q3>89%
Z~;!e3
?xkC46Dk
"2If^!
}p&KBn
h#V4fh
z}a%bq
3>lOl:
b8VA_g
Ys_R"!
8,R9i%
d-Fv5$
AZ85F-
Y@NwiG9
` =-&>
4$|;(`g
WB]Og2
aa.:CV
Z[Ho@UR
42ZC//
f|<h"4
XYsI^e
byb-ZqQ`
r.S>1"}
yn]2%Ef
*]gY>=
z<9>hm
T\,w%%
{Sd-8\E
F6m'qf]
+kxbl;'
V=pk#}
.N;nZq
<ve$>0?
'zI'6s
Aia^bryo
)^<^1&
29(<lE
OLEAUT32.dll
)@h/Dxf
`I8;Rz#
!0$<s
wHD9T=H
'gt&|s4,c
?*gzfQ!8
&6}O+h
OpenMutexW
KJ\"ec
5htpNU
|3<{gA
$gp;EN
A(`ge-
|k+8R4
4w=kD3
6\:5rB9
'X*.t
{L/K3f
a@})o
zn5qi
<,hXM8R4
!_~`OI
xh#Y][=Ja
G4'~(k
g@#;tv
NTZU5x
\*MuCJ
5CG;e\
@GE_%}
wgpQijO
,E@p K
?.fa#q
OI\49m
^dz=p|
YEH wu
m_gJVa
~(-%.0
UF,J]fV-
(H~L-9
R'u;BK
h2=4QD
m?8[{
NW/ rl
a\D\;*
0DMp`86
5g&tTCx
%F"r'"v-i
fOv5e-2
ov2)a=
-q+#7 0
I)5cQl9
jM.>u'}"=e
v0Fjp]
AZ4q*3
59IJu9
|*7Ovj3
0*G?`b
]z[o9
l<<Kx+
&rSg1.
<DU`'{
8O|`>i
~Lf1*r
6veW}:)
E"r'Rf
B)c5:}
9!n,~Y:*
bAcG\Z
fk?u#|
KvZ[BP
c1S1Fm
-<4?8[t
dT/m?0w
(J3cl
Tt7];TC
hG0 kY=d
QJ"uoa
PZb0q#YMa
,cG rQ~
K BnPW
O-796#
Wnr6IfV
,\ZO+,
9?vc_:
o=g0+s
0GlD3A
tT;<h
9aA{MD
S@HC^
rNp#%7/`
`X'%WX
)*2}'I
Cq[Lw_(R
pHv')n
Zh.uRB
eO27olR
+Kh2\Kp
{,^}d,I<'Y
D/7x"L;
x{34vC$vU
k0J+8<`
[0z,#d
mWi~E]
9#biw`
q^)1~|
.SG~]D9
p(G=cL;
:;-plkT
wsprintfW
q9Fp'<
I.-m~<n
c`X'=3
1fa5g=z
-^D`'4D
N, r z
lQ7Ps[O
5jg<q%
;Y;Y.W
F7;}Q
L8yUy[
?]7Q.S
325?|
$XOtL3
L.L32U1=
DcK<^r
lh!Z4e
]pNC.ou{ta
32/n1LA%)I
wQFgU98
H:mvN%q
zG74_8
b7.!As
_7`zt{
BQ;]2%}
bI=U(E
JNOX@g
6/K`'j6
=:{T0[ZK%
V;zHbE
X|[8(z
7"Ma_H
75Gh?|f&
O8#f$v!
=:/@w'
0@WlT+
Z@8r^9a
KN~&I{Q.
|"VRbA
c3X*`?
0@6\*.C-f
v87@h
+(UQvq
<i]6R*
4+-WYb:z
Y_9Ne=RhV
-$w\6}
h&:((H
kj$F)FBy8
W3k>3g
,7*Fb&
g,f[o5
a/K_>@@
{l]oEb
#q+LO7h
`Au#4bjY,
eSZvl
%EB!V}
iN-5z0f
x leFQl
D6|S$4
K)+YN'u
T>X'{3
^DJEPX^
?BJL91
s3 :4{\
$_=_8;
XaxdnVlR-
'Tdun
-rm]&T
Qhm}vSG
(/.8ey~A
T1tNp_
+hYcF}
n0O`0[
w :4#
Xd^yUX
H*&m4>
1,O)Od5
(P5H8|N
vy9ole32.dll
dCr I!
}U"p*ERj
C(2<[X
l"=$qKg
,S3rac
UMt<;I
*QO`'h
QPR _p
Fa1ZhB
$HZxoT
y@_'x
t$&fA
)ma F{/
+2h'V:
#4B2i;
b(~Q&~
r%G%zeM:
FAC1>~
bkvHE
8k"EF6y
E7OZucG
sAkL}/F
U/q6%ev
L|owJ9
<g0+kx
R$wTa$
;s+G3`$
S0*h;D
osprb9
0[0gl?
+,X#A7
~E>)9~
zsN\uj@
1c0IM?
emuL2C}
tNX@ve
}\\R3f?
)+UZH!
)2^eY`
]:@~R!oT
L_tT#i
@[sr M
"J,iDCQ
{5,mpv%
7%3yiN
Psa_C8
*"JtLXXo
3%xJo<
3sDo3E
uElBRD
blxhV^
/i=iCO
<V3b=L`
wcmIqJ
j7#<e6x$Sk
twIqk]
73?|lO
pey703
h~!S##
iLo9`3
[jTd3-;
s^\R%=
#6t'hY=
{;NRCQ]
ir^=8R6
LeKl^W
=puil(=
x#&mbQiQ
qe1jO}
a2t6:l&U
|$mOKR
NRN&V|
p_jcGy
K1O#uJR
G~;`=N
=0o`9(
8[>A_m
,*kSdC!a
0>XR_O
\&e&Md
CT)%^7*f
*$%|[[B
Z1_Y(QTI
_U}W\-h
$Sl1J/E
usHFP8
f\"b$`v
>Y}CNF
Ckcr%HP
D*+,U
gw>S}jP
HXargAn
X_?M4z
^'DG1A[
1E[/tZ
gD9Hn=M
m\3 YS
otjE'!
#.55j:
q.<FTsC
R5~?m{
!q& ZY
xjz<Ox
^jE~ ZT
8c},Ig2
|-#XuL
78%`[NYg
MRXc+)
OfG?>X[
*Ae52G
_DA0[CY
|qaF(7
DzK+Vl
{w>nr7K
-FuhhM
=LBtfKt
p|Thin
E#O-Ax
*2<F%
yd<+0o
6k`QW~
S[7a0U~
[+4`6t
.!{I/D
2vQO~3fD
itp(XM0\
ah[Q]>>
m8L6~9
FOE3zR
45|AH1
\~ ZKe
^etvTw
3&Qx[-_
ui[i BL
/XL:de
"yP+z
2}F dC]
WvwKb<@
#me{x.+j
emZe%aO
vE;xIw
'J0*DGtF
w"A9Z*
R5-. ^o
DU{UOAn
%Q0^"\b
gU! ge
!S;}-y
w5,7rD
iD;}$M
xz?+m'+
#J@b:{
*,V|^=
y+xapnP
{GYtY)[|*c,k
/_)0CsQP
g& Y'-
<DOMX
x%@[r,Y
~->9LA,
Y5iG@1a
,4CGX4
P0X[{?hcW
(=&D;;
T;ZG"K_Hp
4DJ0xm-
3Te31`9W
0Wvy?y'
^~X%-p=
#`{jiE
0!^Y7Y
wqR~`b_
!C:8uU
:>pU>\
'GlvhU
6I2}c@YO
Ue7Xv70
6Dt$dN/
@qrFc8
O,6Q]I*X
xg,KD]
7(J`#i
*q:{v <
4*h6GE
8-qO`e
),A3Wc
)tR4PW4S
<D4]Q}g
;d1B7q
aG.pS%
5_zx-b
p?1tIf
m}^6)D
ef>ciw
seA&;dp?
NK<u*i
L*"ici
]'-G\]
g\/*2(
')*?H
$ws_m2
Me&*d.
%e~],H
?B}IK8
\hVCb`
3=m7tg
o+5Ln^aY
<j$D,s
})PhVr
3}8\2i
e6c;qe
v._c$_9A
ZJr\%r
! jda
jSbX[.l
GzbJ@rq?i
-, GN/F
as-(eb
`'Gz>0
,V9yJ+
=F;A'H#
C VGsr
%7Q-SS
V=2eq(b7
e'h%j)
z# @NC
jon12\
91ble(.
x:DT_{u
?'9:U8Y
TFy[hJA
`CXN5CD
Mqas/T
Xv:s[@
W!?7_g
:x7}"gc
&+U6lg)
${aS6L
'GacUc
G_R-i
"FdOl$
k2I uG
Qn(yL[
L4%]@
_p]EN~<
P4FCsv\
:K$[x
!C*&G"A
!rR+/`
I|u>i|
9JTd3D
_mFD22=HXJ
U\Bf2[RS#
MR/{@.
Ia`J~;u@k
z7[[-;DA
w6gd/:
P}cZcn
6XJjC(
bmQf0b8
bkCr)c
O2x|`_
_+Crm
+D6%!B
A=0y<fy
{rnY3~R
fBB* pA
"lt3SV
8qDQm"
(5j)D
/'qJ49"<
35-Sec`
Z(mNHZA
st/I6,N
yjK:x`
~5a1{N
wayW{L
*nh_-W
+"}[bK
:AFpDa
h1NN,uY@
L=V)o
bONzWK
ir;_o9
@b*),$6,
gpbR$]
?C@Ctc
,JtoH
Do!)&iD
5Kxq:u
1&)vG;ssp
m1z_il
'k@s\#
2`E'Psy
0!g'jG7iqDMs9<
ZHk@Qy
Oj_0Wx
Vx0tKU
XRUG0q
P<3wU6O0&1
TO=(]=
<D[?BQ
Y7(bu95m
~G6ll4
.R!^Rk
q(B"i@
VfJYs$*b*uC
#p|Zp8
aC'0G
PU%1G,
=WKWGs
?/-**$
n|q?dml
y!ukms
=a_>C6i/
0&~T0
pT!&8<<m-
7&NReL
CU+>*B
{)gOX q
SJqu]3r
'3`':No
&Nx/vM
y"Y_< Q7
2XCG1D
FD,brT
x`>3/SvA ,
tt{qB&Gi
:CR7x.
>]k'#V
Yg^fL2$
>zfddc
%r*$WBG[
NIQX"}
8_`:n
+'j[>@
z{n[?D|`
Au-R1R(a
tVT'/R
0?_lQAAA
sXgb$z
=ZU1w%Rp
L[qFi(
nC$at
#p8_6^
a(Rn&JB
7DS^DD
Y:4-}`D
ELu3h`7T_
w%/n)!
2kq2@C
NB:kI
x#g)Tq
x/41Z6
3u[i7)
G\y ,T
~&CrM;
v:A^.S
7F_P*cX
K><7zF
$7+Q"S
Q,2n]:
KVW*q,u
lLU9.l
kd]{:H
V@xSIJ;
3TNPC&F
su/^N
m|Mwwt
X5K\ ao-
Vs?0M}_6
jtbpEMz
HCx/7xM
>#5?R
0rUUar
m@2GL:J
g:eh\Rw
Lm.T2;
#.cEac
Y^v1.L
~4mluv
qtm;RI4
Ccui'@~
v~66)V"Y
#s*|DO
IkO@nk
T`N5%G
:(BWLc
ja^h,3c
Y)2XUy
swEanrN
<* <<z/
"P;VA7k
@kQ@te
q}QU?)
m]2M=L
[kCN(GQc
o^5.a=
0{9KOD
I;iT6u|
j'bEgl
H,a@~a
|eUcN~
BoX9G
ZRLtgm6
+ehDf/
[=6{Z^Z
uOr4*q
rzSa?p
7EtY$b
f;\`ZJW
Svt-c9>
0)"@@V
,c"$2l
>GY1z2
B*ra5x~r
(\nhbC
V@&$ql/<+
=9Ek64l
2YdL-/
X1b;O4"
{HdZ w
jWX/\+
Gu;QzT
C`7\vE
ObChbl
Y3B ^a
-4YiN&9A
`n?@t{
ZY[pNF
-6i]sLi
EhN|\:
oFi0:[
[0O;5(6S
\5D%#x[
Y`bt]P
_{[n7&
^9I%wp
W]C"vTYW
Fgmx+T
9UVBbx
y%fR+.
y@j]6f
*2<k3/
KdyI<K
a"=bXH
-y]mh$
y`oAgi
Q7JTuh>"w
$XM:`e
LhswY-
hp0t\P
Iu%`<-9
5Q(B`Y
QdPy&8
*fz!j]
r3'sF|l
Kyx`?3
,t4*h`q
am_6j;M
;Mnsg%Cjb
Xr($Zb
ga*g^<
f3ww:P
qKb7,Z
.(:BD$S
,L,C"4
%)2l-f
X!;pXj
rze59e
199<8 {
Vhl:aD
002};a^
ghAj0))"
/QOoV:
q%_0R5
l^S2in
>eOtXb
dZHeb@
_Li2Z;
b@Y9=t
$P.m5=
h*fn>[
%-`Xw*
;zW38L
e6U'c%
CzlQ#mq
-FkG[km
z7XmG{
gNr|ff
O8`=?O
3K7&^~o}
SB&DdLk
wT$BN*
k40g1E
i]!IX$(
}|%`(X8
*e=laX
N~McZb
$@8Bl%
!I/ro/
~eJ-Tq[
oJ6$ac
=a+gYm|
EE"vDo
,ioNK"O
xZn+~U
@u[Ku&{
Cdtq,'
j&Q!)s
{XwV&5+
%)!1#wf:
)ds*KT
RG$|*&
F9c1cs
c;(;HQ
E$:AHH
a~2jq)
M2Kz$i
ytnV$%f
pC. gM
\3d'\*T
R@y+uC:
g&9&oD
hR853r
+t;8nr
P]|BS
IW=oXGTH
xM I(h
iamS# HJ
:g\W$
4U,1uM^5)
<Q&k`6
dX]B&ANFG
?zRbHK=
URGAo
{qG[rn
@=bL*]
ek*H?R
x5ZBZS
PCc_r#"
Mj&\YR
]w2nns
e*qfsWI-(p
obVB}`0
mN_h1D
j`=c57<
nr]5pf
.*nkY5}
OGiI@6
DwuAt
twA)\N
6=.6/<E
c(]@a#
lktGy
4oP[9)
)*o}"7
6cr%S~
@P"?~>
3!WAQ~E
0NR*Az
FS$kDJs
=k;K>",
\6D`B?ve
sWqmFl
`#ILi;B
6{(<R
jINi-,
4WNX#8=
f8vdCo
]{<7p
NUZhhU
6M-w[r\
yf{n;6
l7Zu-]
/}SECI
L~7gg;|
=}Wp{_8 7
JXtNYz
Lz+Z/mJ
4wcuE;3}
r^?#"</
a-?p.x
tjWjtO8
`v-ey.@
{s3&cE
/D$H`#%
{mS\&A7
9^54-=4
Ww$`q<=
?ydUb%
6WT5NZg
K.1AZN
@WyI}b
h5ka9$
c}5'$us
]Cv`k:f
9Y+YQ4
l'xwuKM@A
@FMc$NE
L[u,`9r
|jtREm:
6nACY8=
#$QGFW
VG&jmo
DBaWcX@
)&K ~p
qVy4rhfV
|7NX](
MMYJCJcj
l{YK 
jgr1rPQ
%]tM+26
T/41fH8
_Ooqs!
_~iwc-
Mo0DHr
}e["7$&
idyq+[
E0FHvw
inE!~Y
1|SR^IU
2{&j5O
wZJ5>4
e)lmKz
q+c{x*J
`PZ)R>
%/?:o-
>**}_
kHO$so
a c'kt
169S{
=}sH\+
Fy)h(>
7yJIS6c\
2>0R++
l-KPk}
I[0S3+ Y
CESraj
K$Hp8}
9Mo4Ltd
kd\]Qj
xTNDYP
9;g0B8
"A3}$
KEprZ+q
Y.6-vfwd
tR,w-E
J&oKV2
TS;9c
qR1!2YQL
?/yNdm
I%abe,
O$N_epp
kVc5VQ%Xd'19
=G$zA
y{$Zh3
ufV@GB
H>.Iak
@O<|<%
Hy39a6
2AJK?hF!:
1D:[@yH]
'C}x]iA
vw3,|VL
?V@**3
Xk(DX/
#Bsql!
L<X&sq
P`f^4$yy
J[B%<T
C7CJ<^
")~,I?8[
p <A5^gxs
aJ{$;E[0m
}<PgUIh
C#62R>
>(VB\U(
H6bO$Qe
X\n1P]
Jg1!TW
megq2H'
yD-IJfK
+9&Pu)
z83R:k
SX9xI<F
fD(sRLi;
$="]/8
5&3\GY
q9O3=4
{cBfzZ
9F.pII
Q;G<P\
_fP,^1
k5v%@Ql
rO"3%x
'/D}g\
bj-H<+(<
UXz'*#b
<Zkr5Iw
&R"H8F
d:H6O)
`{Wb!8
"u*i&j
jf|`%
d~E1yvP]5
hAheI*!
qJ&t1l;
XtOwZT
*:[P/z
6kzUmw
"\V6;5
d*"fi*?TK>
Oh$W3e
d=GKN\SV
^Z=Ao7.|W
[MMt-G
f#8JAF
8K\j!ghV
e)#ro`
)kTO5F
+`,;p:Lz
7l. :n_
37LJPQ
|<GZ`[3
evk4N0
{&EiMJw
$nBzO*
~c.CLd
BW<,g3
]4pv|{v
{1:}9P/?
GI19i]
ux*s?h
p%5nEyY(*
"7Jt2B?
||HP<K
VsFPCG
V1LsMH
u*%H(D
pRo\/#
Om:+F<
{vn,nVRp
^ZH:bUQ
5l%XQB
c)jdW-
`wlXS>lFx"M
j4IE]49~
1h4T(faaQ=r
0sI$u
:5C'{C]{
~zQ7]Hp
PEj{h){
aq.`3T
[![!lT
N&>"#[
{N*Q{_1
jXBg;9F
V;^_qE|
y7Yh$Q$g\c
IH(Q^^(
6<O6'e
KJr!uxE
Rr/BS@
nqN5v*
NEBxdkt
y)+8w
scnV'R
zKSTWI
ZW9$7
mCl5YX
jhblAl
SpA^2M
t&)tJ-
uVs%,%
RQacb\
kd(5B'
!.>qrb
{N%P}D
k(1@kk
^X`mzr
Tv[q)?
-TCl35
H8Gw3
Pauf>
Z"-"J<
C?m2G?K
%-M(Ja|
a?8syY
sAr1hr8
37;WJ`
1eG=<,0
qTQCzdF
R]6.Z}V2
!p`CLx
EM{e 8
^uz3MW
K?gSw6%
@JQVVfX2
eE*+2#,!yL
:0.U)oND8`
%`UE&,
/OY*2
W?YGnF
g12m9K
6,)fT
1.LDwK
P~ zOg
/oL-$n
l)!"?1
Q!AKLd
"Xs@{@x
6tEm:u
-0)!.w
p]$48v0
gI+,&i]
YzFGvI
-]{=4`
kJPE#
QAY}dv
DZw@x,
8Or%6w
j%+Y@X|
xDK;RZ
'1-%P*
JV7/Lam
_?8QS?}
83(%e:
}F_=w
TSz$~Q
$!9M ,64T
5ZU2/n
<kER!L
;$~7tp$#
3+BhG>
#GnP(@
5Yzif%
g=4> [<
ep|b}N
5)Mg ?G`?
b9Xsde
Dm[IO
PBqliI
Fw*>Q-
d9IJP=B
q|9-4n
x2hza)
nc*&VM.
QctpDC
*G`tXz
>>Mu9"
o+Z)T
~XTM.(
~:D2B*
NZ2Ec`
H|QT$VE
e~dEQWr_
PQAYC[
IENuzK
yu&Hr
s6V0PY{
?k!OrJ~7
WFM/C<
p>7`Td
yR!,{v
<0&i0~
y*xYi:
6C,WZd%
:$AgWPf
}mwBh(;}
ISetV z*z.@R
/CS*`U
/u6no|
Klqjg\svt^
TxaT-P
n*`)"a
I,/s%o
*#o:Orb
Q%;|8~
O=$cF
m0N(uB
R(.UgC
}ga;7Q
[`\gdlK
MnHaEy
b,3[|+
r_m/T3=
u!z`;W
Dyc0J
>i]gW3)]
FX&'f
KBCpp(
a9"+(k
0x-~`q
XF)uun
=_c;JLd
#Xfo&T
2> W+K
P+(C9vi
%y)ti^&+6
zi=A}@
v^1_:h3i
)oTz}+
mcy3ey
y[lU{J
UaN7atl
WuMfx
>_x9E0
!N@~XXM'
v& 0KI
u<mKYj
:"-!c+R
cbe|B+
Id-@L@i
Y*.JwI
O 6U_s
5!8nKn?X
X&p^yr
?.KcY|
2l]"K<%AX
?@1/T7
W{~PXd
!Y%mJ>
n5T \1
r8dw>\u
x&fP@z
`Ukj>Y
:dWQS
d7Oy-b
vzOVk*\\
w/kj o
gI"vrf
FAQ1L3R
$_{<8j
oQKF >
M@L0`
)t-Lvq
=1i/tD&
?S0S_
y)=f$8
+%=2C/?
BeSGl
\dIR]/_m4v
~L]60A
28j*pa
h b;IGB
yp0rVI
c;$w"~M>
V2R`o=V
7MZJF24
4^j_<a
/-vi(DR
i51yfH
dK%!][`
h 'f*8a*N\
Xx\-8
X)b3DQ
ZnJZ@G
Y>gj=}
zXFv3
4Km68
GZa,Ba8
=2glvRE
Vj8V\#
*pV'*36
6DOWdC
QDGyCjU
~bi6[r6~
V;^so.
*8 {?w
!I{ g~
?/x}4v
t4H+$(
L1=[Rf
$u >`8
f3W'8>
hobz^GZK
Mf0"'
'#wyZ"O
Zv<jet
B"1xw3
V]},*x
gY"$>{Ez
F-i"P5;
%s' :Z
\J/GuF$v2
xbw-6@
EvTp_7
-\~4%T
(O)wIM
mK.v*-o
QaLv*v
k!E_3+
qj=UOCtK`YY
NeMvr
?(0.qn
_v|*4A
LDkU-+=
"E_ZtDc
)1IuvHC
s^t-RB
PF(U7=vb
]T(\6
wL2AC=E2
9#1!!o#
J:J#UN
]a#v-tn
Re hLM;r
?w-NgCW
V5Cg;s
dam9$%
)Y;kCU
fKElRwW}o
&^OOvL
Ubf#%`F
UW`nE[
SU,[UIB
u-b`DI
'hi7ZJ
Bd{W;8M
M3_gU8l.
ie~p*.(;
C<arFGd
hrv/4#^A|$R
i/wJ`p-
t2S9&
42EU/x
-!@&nl
9frWQcgU
lif#9,f
gA))L(
j^OD,{
IDm,!?
0S^v:I2>
9Ay;9q
!%+mp(
MXE|Ij
@nh.X
q@Da"Hz
r*+eLZ
.J7g0,
DC@)R~
9"]K`
"m/Y@ 9x
h-Rr-3[
G3i<*|
M6n>Ys
H61V<n
6zbysw
|@[`u@
S{1FIZ
k3@h\-u
~#V9KQT
6bjUOp
Np2X3]
IbH8bE
dn(-~; F
<?X/4t
ZB^:A0
#+`k))
>9J%8
=P#9Lp
hD9'I/
k(z]_r
I2#SS$l
<x}UWeMs
u%G'l6
q@wpey
9<\N6u1j
uNy5A<
72]40^
)Vp>h
dLh!!(
K$AMNJ
g_LO;`^
:FE5DQ
1H6nQ8
f/`x}[{
Ke[V&/C
L?:YWr
2{HQ(1
C:dzzI
8]*,mL
w6m22b
isJdp:
nDw>Xb
&urX%
BvgePF
8YQ]hK
MA(Jib
lR\9p,
rGl:*X6\
.i|fenk
@v;`ox
2US#f
i>z! c
O%iTzD
Ih5\r!
dgV*Ym
q,]EvF
1,PI<zr
F0CNm6
pSp`e@
(qn{?p
wl;)*l
t3Sc r
9LsaKMf
vdZZa{
V9,6SA
X,%ES(
iw44R~
}Iv0%p
pdG/]wB
!({d4EF#
R:b+ifX
2-&}M,
XR0c\-*
jp/[Nkj
/=Q[*+
4#zCL(l1x{
TFV\y6
<.s`:gr
q_;cUbs
D `',E
@3l\Tza/
O.HuB<
c'WD>TO)
v$)c~h
b>FBi|r
gl\%zy
J/m$%b"6
src;NP,I
h-fcZn
C3^`Zs
[Qe?(P
1<Q[uz&
s]@,E"
j,M>u!%
@\8HTX
HD9W9^o
QLT*4)
uB2 d
\w7kijNI
[eV^3p
t}ngV<e
+%wq-@tw
VMkF"X
s&:cDzy,,
be\MvC|
\_]Uu
>P1f|U
ClqT$p
{c(1E3,
w5h=1O`2
PK5)rH
}27zm!m
;9Xli,
l(MIIj
/7~nv+
#TzWV-(k
3 eh*\W
/>%!MZ
tv\:$7^
fH,?JI
5W5<ZTe
u.eph.W
4N7rCxl
~fkkbi
VTb.|{
U5#*z5
w5@E#A
W(Au_e
ctSw8A
[tm.__
YTk }`
ep"tj[
2+{/zc.
(bTW;,V
NAau]
1b"Ai*n2
@N)f|HW
`HOy[
RTQY6!
3|4DrL
O*aSiDN
e{#@uj:
ZH#=f0
cNUTd|
&8>H{v
A0vC`.
W.}tUBD(l
|k_FVr3
&gkbUH
w7%u"
ZM,|8E
bV3kka
krv*S>
fOK7iP
d{(Gdg
c$|)l8
@]1hnh
X;Lg_
6M'A.9Yz
TCr(w9
&2OaBA
WXw R
|</m?0w_
~.{6bQ
Ny2V6e<
uk;sm)u
U} c::
fqJ2m/}
Cz'}Z
JWKJV-
ZM$vWP
l8XG$+)
*YFtyC
$=<pd
C* =xS
O7'm_Y
qz`*+^G
n467+o
f1+%ze
KV.bLM
&8fqJ2m
lDY#>QH
AC1>ya.
^4R=Rv
-9\${ao
|<fd?p$1
0pm}vr
g;cA`p
`ZjEfb
-qPr?:I
#LZs5b
T<K>0nc
#NeWI9`
CGvt+?
d~@s(%
%iP*Wj+
UgTl/g
(M6[LQh8
Djmzx[6
3Ce\<C
x7+&Sv2
c+s.@BX
2zP;.*>D
aBK0yb
{_xW_u
#Zw%X1
n?VZ$Lf
NA=q<Ba
1 zRD
=yWS8|
]6e&4#
d36|8`F
"PE/3N
bV~Hp_
j6NI\|
??QhY+kVE
33kh({
0h=$0imA5+
Pn\FIP
fO 5G8
EdhS9o
tN' Rf
%F0E1z
Mkp/~[W`
\*woi-DL
!tZM.91(8=
!!;^O!]G!
o06$/Q
*4i5r#
N[CEsg
DIhHcl
G_`cbB
8>C_v^
5+v[-
m+i7Dn
Zf0;vr?
EA20&U
3FKsG$
2r3GA=m
RSnT2{X
_rZ$wB
|r%m#?9
AN6lDb
08i3(,
xxDb%JJ
O9\dAq
_92"H1
I`os$$$
(.:<Re
a<yFOR
iAHXTU
mPv{mNk
v^-A$a7Q
+2j?7-Y
vvjFnG
$5S5 '
.#folT0
m9Q]26
@:}pVO
0^'mn9
4UX-{N
{hj6W6
sV$/<>
GHhkR~
FZ%oes
ZW3QaR6nL|]O
0\;I*yb.V
bFeD>qi
*yBS3|
c4bER~L
9A1#xh
F4! ~OC
Y~|0/H
)o%+M5
jb~(iNU
w5] f9
ASc,x{
<vhKo6sK+d
NWHZ_q
^lC97t
;<Wu;E
hmK9P{g
*)).FO
w&1R]6R
zaO{'(;
[O`$~!
HsAn-9el|'-+
ec^F".`\
=hy~/c
9fH^D>
ETlG{qu
~4'uMB
V^+iAqs`
f/4uLU
g/Up8W
%:N~'u
d:(:K{[IN3
/r|yTp
UDWEaY
a/g[YX
r*0o%h
F"1xw-
=@l<r=
9yjPn!
z)TP7`
v4fI>n
IO+OJD
Bfvg?P
`H?m7
r(&a]4-
r{`@Ds
CoCreateInstance
OHzPG|
3Y3U*v
+,>(KC
,d?1X(
+n]34`
wEtdorz
[aeSaQ8
"#8w8w
){!^qa*
p{7;Tc >
)h:`'G*
wDUn&M
+EA!zL
J)]oz.*
(I &/>
TN#kl6
+OI#fpS
h7)56f
lv<=HQB
Q}%.>uOq^
(O7b+
L#4D]
;Q7H@_G
'D1t$
%bx23~CS
\[v3sX
XSJ-WX:
<Vj@zmV
6ul8:H_
(gCTo]
r0psX:
mKz(r5
EU(87
B0gok^
koiF6m
?0wG<N
kQo8#K
':W}w~>
$<s!{T#
@'=Pp3
FE{#L6h
[72ts'Ux
)C%riY"
d?]?pW/p
%'U21Qr
AVAUAPH
4]AL$X%
T3b2=
k<^<Ck
Rs>1RL
)lMV8
en/Iv
I3mb%]
CjavEb
.fkZcA
Y!~Dz5
UT~DSh
{<\)$p
c@Z89%a&5M
MYt>hO
mg`|f&O
b9s%Zu
j--8Xh
F)3o,<
@"@Wlt;A
b$L7e8/o
~dg_ j<K`
RB_3w{
6(?/d~p
X% EQ>
gv.AC1
J,h32"
kY`%eLK
_:~a:UB
K)k9n'
F)[_ef
l4[AO(,B
~lN!6Vuoa
j&G9g8
e|#bML
`'4,cYg
F/4i:#s
mD\,_N
Q\${9k
rurX a
<pbAVNm
T<.;S@
QPME-z
^Ir*E7BQ59
K j<Cl
KI;lw
n7oi^0
2?U/5H
97jVh>
u_2kEXE
>m)I<1e
n~5W5BN
R<ssl4
#0^6ac
%vx^E8
u4f<{:
']}:)a
USER32.dll
UTQ(wh0_
qi&$V
_0X#q,h
+a7@kK
dSo"9K[
32!EI,
e940l,
h6y=Qh
}zwg?0
)2}Z9y
ugw<v]s
}jBX[#
CP>^}Gy
{pH4 n
FK.%v&?B
@B0hp?
l[O@=O}
\?$T=xD4
a>!arHv
A>7Z3?(hMp}
5k*Lq%#
C9gh/O
NYbR)SC
WAPAV@
ab*-79
dL"jjk
|#A#\s
` 3a;4s[,
?,wiF!v
~#?[OQ
{"1c@\9
b"1+%jJ
Ss02@/8p
ixl|7e
s3 b0O`
A^AXfE
~j!E=h
qf]%X_
Cd)nrTk
R$wTa$
;s+G3`$
{!ifS9
e];Y;Y.
7-#|cs
)k9VAi
e-,/XW
;(i+y.g
{B|zF5
io&3[V
v!c1^N
$C@0Cb
87"p>G
{<@7|K
v~l|Fy
!~iCpw
TPD!ar
o5[Lw/@
eM:X`p
N W|D;
ix%J]-v
aT,sI!
.^K#:^R
VK)p{34
N.!YH<
{)s$?/d
#z279zk6TU
Zam0\G
9fyi"X
APw'L.L
r8|T#
.=S3!`
\Y@?7(`g
wn:X:M
D'=P(uC
OSTk*L
b3l!Oc
CTo_$v,
|fe}2p"}b
yzJ1c9
IK9^NR
V{erR;
t7:"/x
J(J=1.F("
L>t[,\
^~=?MB
g~?%+$
v=_EKD
,1]YDy+
3EA=!F.
KERNEL32.dll
$+_qXO
W<X([B@
pg?PbH
kvoZ)
}&X1Lc
3sB)kEb
v]1.i7
&P4fLL [G
^1p:Ly
,H6Yd?
*=/9q&
9|U!:qY
A|qB*Uh
1is|e_#
R_)[MC
)S@)mq:Jd
IT|Wc}
q,\v$w
B6QkXL
4}VfI#n
x-@&%$
>5p><|,Q
PGtRO&!+50X
Trge51
/jk?w'`
zl&{NB
W`'fNqj
qAieE]C"
%BISPM
cr }H2#(t
\5Ng.{f
[ zU>v<
~T-1Z-#W
ph2~X 
h(x {.
GQ^sfS
y1yNk+WH
[36Qiv
u9N?W
1'E*"K
&|FYZe
QNK-Xf^
U)`r'V=
[9|>bm{
/%iuY4
GYo[Pl%xt-
}WOF<h5
e^vnB
Kt3Wm\
j$\R,U
;p"C[mS
PECqe&q
8ndM()_E$
c[hLM>4zZW
V@m8d
'bghM:6G
i-')eq
le,M"f
\iY)SCo
3gE^QlLl
=m]pO;
r"I6Oaa2
NXmM%na
L)@C[
,4r,J6e
]uc&Ab
ffm2n<6n
ZD7_{7
'e&T"BY
H_?@/b
u86qQ'
19C:?J
EtuqQm
;q>Ee.
e;Zij]n
`/eXP*
'2SZ6Me
wdH54uCw
C,v~x&L`
C=g/z4
9K?-D5
`_6[Wk
Ji(=3)
u[DzlL
/mL*uk
SKW]'Fd
XY]]Rx
;32E.1n
S{|vyz
z[|wTN
DKzSnDY
AY}rf,
^]wrUS
aP>9A!+9
].t`m.
|F=3q_
G}xL_N
!C~~f`n
Kp^bmjMX
C@MC^c
PiiVx.3
nshW?3
Bp~h:
glzqlv
]I5|8)
z'f!|(
Iri:]Cq;
57,eJi
&{T+~
PS(T\C
.*7PIq
pFMKj;
#n3Z\
ZAa=sV
:TQ98~m
YX-j?R
kS@:m&
9{ZTSB
q'S53@9
%$)4rT ]
]7T`Gb{
7F^S=G)
6ayYiJ
&y(:
^'f-yP
l@pB~Q
(.~u+-O
eChGP`H<^
+bV:$>B)
Ij%[G-
D8@+c
;."g-x
\4Iais
q.zLyY~|
x 7s4Z
%e?nBf c{z
YO1QNKXsjA
t%c h5
$-_B"fM
5",'X/
gha&Q)
nkYsT7KvW
*V8eIN
Pu>VSo
V)Ji}\
7p>%#[
Wtrm.f
Oqtd1\
yCZU!I
Ai!f{>n
wSe-4:
bm/6nA
}Q_n>=@
"PV*Pi
YMwjv\
|gmf:L
edz1RM
SGirb^
<_fd6A
3aE_iE.t
:GRc=F
|:n(I8up
iAY\p]q
FI7>w
N>T>p^
ZKP`vh|q
hD9} u
?D7u]rn
KeFr(|e
<l<JE1D
c1#2)8
MEhoy5
Z37G^{
n>~XT{
Ze2h;
y@-L@^8
+7/Sv*xL
X80k5I
P3"G]0'
h`[Q6[
}~V0;/
Antivirus Signature
Bkav W32.AIDetectMalware
Lionic Trojan.Win32.BypassUAC.4!c
Elastic malicious (high confidence)
ClamAV Clean
CMC Clean
CAT-QuickHeal Trojan.Ghanarava.1742817168832fa8
Skyhigh BehavesLike.Win32.Generic.tc
ALYac Gen:Trojan.Heur.nD0@tOdDrWni
Cylance Unsafe
Zillya Clean
Sangfor Trojan.Win32.Agent.Vl8u
CrowdStrike win/malicious_confidence_100% (W)
Alibaba Clean
K7GW Trojan ( 0059f91f1 )
K7AntiVirus Trojan ( 0059f91f1 )
huorong Clean
Baidu Clean
VirIT Trojan.Win32.Genus.XSJ
Paloalto generic.ml
Symantec Trojan.Gen.MBT
tehtris Clean
ESET-NOD32 a variant of Win32/Packed.VMProtect.BC suspicious
APEX Malicious
Avast Win32:MalwareX-gen [Trj]
Cynet Malicious (score: 99)
Kaspersky Trojan.MSIL.BypassUAC.akz
BitDefender Gen:Trojan.Heur.nD0@tOdDrWni
NANO-Antivirus Trojan.Win32.BypassUAC.kwjnpx
ViRobot Clean
MicroWorld-eScan Gen:Trojan.Heur.nD0@tOdDrWni
Tencent Msil.Trojan.Bypassuac.Nzfl
Sophos Mal/Generic-S
F-Secure Trojan.TR/Crypt.XPACK.Gen
DrWeb Trojan.Inject5.13844
VIPRE Gen:Trojan.Heur.nD0@tOdDrWni
TrendMicro Trojan.Win32.AMADEY.YXFCXZ
McAfeeD ti!033D584799E9
Trapmine malicious.high.ml.score
CTX exe.trojan.bypassuac
Emsisoft Gen:Trojan.Heur.nD0@tOdDrWni (B)
Ikarus Clean
FireEye Generic.mg.398ab46e27982dfd
Jiangmin Clean
Webroot Win.Trojan.Bypassuac
Varist W32/ABTrojan.JMCI-4891
Avira TR/Crypt.XPACK.Gen
Fortinet Riskware/Application
Antiy-AVL RiskWare[Packed]/Win32.VMProtect.a
Kingsoft Clean
Gridinsoft Trojan.Heur!.022520A1
Xcitium Clean
Arcabit Trojan.Heur.EC8FB6
SUPERAntiSpyware Clean
ZoneAlarm Clean
Microsoft Trojan:Win32/Caynamer.A!ml
Google Detected
AhnLab-V3 Malware/Win.Crypt.R696482
Acronis Clean
McAfee Artemis!398AB46E2798
TACHYON Clean
VBA32 Malware-Cryptor.Inject.gen
Malwarebytes Malware.AI.3993337220
Panda Clean
Zoner Clean
TrendMicro-HouseCall Trojan.Win32.AMADEY.YXFCXZ
Rising Trojan.BypassUAC!8.EC23 (LESS:bWQ1Oq0FJ06W3JE9ck7pxt/gx3o)
Yandex Trojan.BypassUAC!8P91eGX0H40
SentinelOne Static AI - Malicious PE
MaxSecure Trojan.Malware.300983.susgen
GData Gen:Trojan.Heur.nD0@tOdDrWni
AVG Win32:MalwareX-gen [Trj]
DeepInstinct MALICIOUS
alibabacloud Trojan:Win/BypassUAC.acw
No IRMA results available.