Static | ZeroBOX

PE Compile Time

2025-03-23 21:13:03

PE Imphash

b237ac2118704db9e7609540658f5790

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00001000 0x000121b6 0x00012200 6.23456298542
.rdata 0x00014000 0x0000313c 0x00003200 5.15204408435
.data 0x00018000 0x004f8498 0x004f6400 6.48205343415
.pdata 0x00511000 0x00000198 0x00000200 3.61741065022
.00cfg 0x00512000 0x00000010 0x00000200 0.151271325305
.tls 0x00513000 0x00000010 0x00000200 0.0
.rsrc 0x00514000 0x00010c48 0x00010e00 3.52241255231
.reloc 0x00525000 0x00000078 0x00000200 1.48845172165

Resources

Name Offset Size Language Sub-language File type
RT_ICON 0x005140f0 0x00010828 LANG_ENGLISH SUBLANG_ENGLISH_US dBase III DBT, version number 0, next free block index 40
RT_GROUP_ICON 0x00524918 0x00000014 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_VERSION 0x00524930 0x00000318 LANG_ENGLISH SUBLANG_ENGLISH_US data

Imports

Library msvcrt.dll:
0x140016b00 __C_specific_handler
0x140016b08 __getmainargs
0x140016b10 __initenv
0x140016b18 __iob_func
0x140016b20 __set_app_type
0x140016b28 __setusermatherr
0x140016b30 _amsg_exit
0x140016b38 _cexit
0x140016b40 _commode
0x140016b48 _fmode
0x140016b50 _initterm
0x140016b58 _onexit
0x140016b60 _wcsicmp
0x140016b68 _wcsnicmp
0x140016b70 abort
0x140016b78 calloc
0x140016b80 exit
0x140016b88 fprintf
0x140016b90 free
0x140016b98 fwrite
0x140016ba0 malloc
0x140016ba8 memcpy
0x140016bb0 memset
0x140016bb8 signal
0x140016bc0 strcat
0x140016bc8 strcpy
0x140016bd0 strlen
0x140016bd8 strncmp
0x140016be0 strstr
0x140016be8 vfprintf
0x140016bf0 wcscat
0x140016bf8 wcscpy
0x140016c00 wcslen
0x140016c08 wcsncmp
0x140016c10 wcsstr
Library KERNEL32.dll:
0x140016c20 DeleteCriticalSection
0x140016c28 EnterCriticalSection
0x140016c30 GetLastError
0x140016c40 LeaveCriticalSection
0x140016c50 Sleep
0x140016c58 TlsGetValue
0x140016c60 VirtualProtect
0x140016c68 VirtualQuery

!This program cannot be run in DOS mode.$
`.rdata
@.data
.pdata
@.00cfg
@.reloc
uKHcQ<
AWAVVWSH
[_^A^A_
t.ffff.
fffff.
UAWAVAUATVWSH
ffffff.
[_^A\A]A^A_]
ffffff.
AWAVATVWSH
X[_^A\A^A_
fffff.
fffff.
AVVWSH
([_^A^
AVVWSH
([_^A^
uVHcH<
uZHcP<
u!HcQ<
uVHcP<
upLcB<B
ffffff.
AWAVAUATVWUSH
[]_^A\A]A^A_
AVVWUS
[]_^A^
AVVWUSH
0fffff.
@[]_^A^
AWAVAUATVWUSH
ffff.
[]_^A\A]A^A_
AWAVAUATVWUSH
#ffffff.
[]_^A\A]A^A_
UAWAVAUATVWS
fffff.
ffffff.
[_^A\A]A^A_]
[V[HSH]H
'h}pyh5jH
_NQQ^F
1=/<9CDH
TPQIPT
252H2C6H
&.4*40'H
'm4zlj|yH
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
ssssssS
AWAVAUATVWUSH
8[]_^A\A]A^A_
AWAVAUATVWUSH
8[]_^A\A]A^A_
Argument domain error (DOMAIN)
Argument singularity (SIGN)
Overflow range error (OVERFLOW)
Partial loss of significance (PLOSS)
Total loss of significance (TLOSS)
The result is too small to be represented (UNDERFLOW)
Unknown error
_matherr(): %s in %s(%g, %g) (retval=%g)
Unknown pseudo relocation protocol version %d.
Unknown pseudo relocation bit size %d.
%d bit pseudo relocation at %p out of range, targeting %p, yielding the value %p.
Address %p has no image-section
VirtualQuery failed for %d bytes at address %p
VirtualProtect failed with code 0x%x
Mingw-w64 runtime failure:
kkkkkkkk
p`^kdr^oa+`lj
/"/1.3$"3
AAAAAAAA
EEEEEEEEEEEEEEEEMMMMMMMM
CCCCCCCCCCCCCCCC
MMMMMMMMMMMMMMMM
iiiiiiii
ssssssss
################
LBTQFSTLZ

33333333
%%%%%%%%%%%%%%%%{{{{{{{{{{{{{{{{////////////////////
aaaaaaaaaaaaaaaa////////
99999999
OOOOOOOO
????????
kkkkkkkkkkkkkkkkoooooooooooooooo
]]]]]]]]
YYYYYYYYYYYYYYYY
UUUUUUUU
#zzz1wrwdody1frp
WRWDODGEORFN
!xxx/cjuefgfoefs/dpn
!"%'"!
ZNYdN_ROfaR`
YJWMJ\NL^[R]b
WFIIV>
hhh\RdaVcd\jT`^
?K=JGQR
D@A9@D
ppp'ZageZ['\hf
4=2>2G
0" 2/"
lll#igZcYb^Xgd#Xdb
JJSLHULY
__C_specific_handler
__getmainargs
__initenv
__iob_func
__set_app_type
__setusermatherr
_amsg_exit
_cexit
_commode
_fmode
_initterm
_onexit
_wcsicmp
_wcsnicmp
calloc
fprintf
fwrite
malloc
memcpy
memset
signal
strcat
strcpy
strlen
strncmp
strstr
vfprintf
wcscat
wcscpy
wcslen
wcsncmp
wcsstr
DeleteCriticalSection
EnterCriticalSection
GetLastError
InitializeCriticalSection
LeaveCriticalSection
SetUnhandledExceptionFilter
TlsGetValue
VirtualProtect
VirtualQuery
msvcrt.dll
KERNEL32.dll
 F G#
!"8.7R'?:
<4#3:%
*', F$
^3!'<B3G/
&G0G#Z
%&Z!A
 F0G#
 F0G#
%&Z!A
!F=% +6
=4#)?::
 F0G+
%&ZLA
 F0G#
%&Z!A
 F0G#
%&Z!A
 F0G#
%&Z!A
 F0G#
+[5;Z7
3CX=)-
H+74Y?
*<TB(
-,A+=
O,4,+&
!=ZNW%62
6! !A#
N$ 1<'
=*%_. *YG
)-D?<
"Z!A#
4KKX$%5D6*#D,=,
%(F0G%
%!.#0Y=+
C8?BS#
%-D6 .
RMVAG,7
J\G\+>4$
T@R-!X
"W!(4)1D6
0Y=).-
>@ F"[.
6 ?^)5
B#$*%- A
[+*;N
)=-[.#D]
7!>SFEC
&K/G'
7/*@9@$
@ +?.8
+K$>7
<C)$6
;1<;#CY.1%3YG
*+)=5 F$<$8%V3/
<&@&Z.(
L2A8?P$<
+B'=,8
X!F,Z3Q
_4=0:\
5-3OWA
-=@ F"[
\4KP &_
_-5'0%/<38%
(%!J19
!_PR('
BU4/D]
#$]% +*
G;"0G"
5@% !&G
=?: 86
#=?: 86
WE# ZG
1KSF0G#
)^N5#
.0U'/'
RL8_<$;[
]>\/<L$B
<&!F4
_6YA</
5:*:,F
*[!=+EZ
_7Y%B
&A,Y3
N#8.<'
$97:'4
# +C+>+
M,)J]"W&
^*W)@&ZJ
9!:C,<
*'A50F I %%4
@V1Y9)F[F3$3
$UX!A&
!_!A#
W'7*/%E6$
2 F"[
=SFZLS&
F0#34$
1?+>!<^
L630.$$
6N,?$
9D=#!%
3]-0<;
F\[*M!*>
PSL9#4,
<EP)6L$@?%4!
(%!J16-
#(D9F0L;U'
>,[:I5*!
Q17!+;
"T%9(J
5:%&Z!
)G?D]=
 AX3%
T>-).&
G,>:*
#0B'5T&
5?: 86
0B&1&A
02#H-@]
5!@!A#
)[4Y" ,8
OW%)=15 F
503%$![2
J9$#ZL3
D=ARJ^.
<TC$FX(
4A7 X,
3;['$9">
K8<!&0P$
/%4^2%<
:B&RK
 F0G#
:B&RK
''<W:.3&
9*MV'5=!:
(Q"RD6 &
3NW!:]>=
GT !A#
'%$.U3UF
%&Z!A
SC6"'"W
L]*/7%0B
H'@^""
'(Y=#5
D;#0G%
E'!P"Q
@&1+<'
PR=="A,
 F"C1
;!7U#-4
!]C#E07<TY
%%[J@
' NWAB!6
38TA-<+6W$
:&1*-,
FLP=/H
1501(1
$;QQ!0
5[SG#D
CY=).^$,
2B%5"[F
^.H5>=?!A
>=%=).
L5V3. E[Q<
IW7\[N
:8ZLSK
";:*A#4 !#[
-/OV&=:(Y'
&!8T@
#&Z!A!
(%U?0""_
J0VJ4E=
/5!EG_2
60883;
&R..>0
"Z3]%
R9 F0
>8!A&
J]#030Q$
4#<F0["
30B2&$
2D^&H@
+WC^!6
Y09&?6A,
:9=!A
$?/"W
6437!2
&Z!A[7
&P6(43CY
C;+0G"
8U:.6[
LJ*/L%
Q#,*+(
3>]<D/>
A 8$G'
ZQ0;(<
38T@,>?
!628X8
%&Z!A
#'(J!D
>26&_F0G#
!60>56Z
-/-:E.R
+6(4VCY
)6S9]\_
!#/D;
Z9; :"(
^W5G6$
 A:LQ
!!$E;;
'Y40?X(%*
^'4;'$$
%5%""9
H'@\ "
4S1*-,
I 4Y=-5
-! F"[
S<L5$
G;31(2
P1(,3CY&
4&_F0[
@(Q'RD6 &
*VCYR$^6<$,
>]0:AF F;
>%AK&<#
KZC82CP6Y33CY
G<_7?Y
*"<Y=#5
%5'S"1
K.@&Z3]S
7+AT5,8
%%ROR;
%%D6 &
9/"#[K
5_@!!EK
@.%&Z!
!!EG0%
$%.6/1
H53=!A
6 $Y=%
S:=L@
Q15?6
-%76A/6\
8"=YX"
9(M X7W)%]
LZ;E!)
W@54S
=LG%#;E
,&Z!AY
G#0'?2
^;0T6,
3]X0%S"<<;
O4&('<'
:K^_>=$A
0$Y=).
[LP=/HQ-
#"K]%/V
$' NKB9>&
[0)/$$
G=3'<Y
/!A#>93
;"W#&)S2
-/-(5=3
=).8%A^=60 ?
=/4Z*=
B*6;),
C84AD.=,
@%*+R7@ F"L
%&[LBE&"#;
=/" [K
/A'BP"P )5]
;X48:,
7+AT(,8
%5%2"0
C#Q='4
#6_2!A
=+3U2#CYPR
*.M6**Z!G
,>,D"3K
ES/ K
6BOK8X
65'BP#*
W8TRN"S$
)QR!6$
;!7!ZWH
%,()&U_
<&!-68
)%&Z!AY
-+NR56_"@
> GY=-1
L[4S1.X,
)=6Z0+<
$#BT;W
H@\1!$ B#$
IS*&X!A#
38T@)D'N20
-/NV(':0'_
8LKK=S
!]#E3'&P
OK'9>&
_32-,;
'@W6Y9)B%]9">
=S9/"5
+1H@:A
;-%".5
%%?2AZ1;
)&STB>
3+&SZ1
/@&Z!AY
0G )/!
<<A%(S
&6A"
.4@P>=/L@
#CY=)(
Q#,"$S
*MT3&^!A
:>_7Y%9%1>
=N(:
5:*Z!] #
=/"(A]+ '
]X;:)5
!\,37%$$
%&Z!A
S3-M6A/
&Z!A
I5$F0G#
6**Z!A
N,US(5
&]P7;T,
KX=).8
"(AJ+ '
9Y!A#>&#
!6285=Z
"Y!A#>
1;6]53CY&
!\,3;;Q$
,C"*6
%&Z!A
S9-_6A/
';[.DQ(
 A\[XZ
,0#-4$
3]X<5R
+3X5#CY=%
G#3_<2
=/"#[K'
!#,E(G0
W_:#+X
=/" [K;
L<^* (
E[G3P8$$
Q6HL&4,
!!EKQ&
!C^<;T,
/D#(8.6
GGA"'[
=?: 86
NRBXS-5
3]X0%A]"G;
3]X<%E
[=).8&
-/-/%?-
@[0_32$(
BWFFM\
:E/_>5?<
S@E""<;
87@$;:2
Y]0+,$
$#0$S
5[!A#>
+4A"@Y_5@
%5%"";
%5&_2%
B^1_;!
-/-/%?-
"(A]+ '
3Z!A#>&#
!62857Z
4Z!A#>
5&Z!AY
,3CY>8^
.% F_<
LC]Z!A%
7J(":?
,82@T$
*3!5 F"[.
"2CS?R=:]
L=3B%V
%,(7C&_
NP7HR
0<01-[
H&%XRN"S
.R6:A(
58RM(9<
*3CY=5
*A=L@
=9-(,A!,
!(5"W
 F0G
%&Z!E?
Y]=Z6,
, -5TE=L
&Y>'$?\'P-' A
U- _)=
\,*06*>
+4A&X
08<?$P&6
K-@:^'4[>
3;['$;F-,
1 T%Q1
$%.>)@
:B"R,*(
Z4J67&
0H$%%-!]S
>UKY=)7
_"!!EK
%G9"W
+6=*VCY=9V25
@2A)R @ F
$$M72R0
+67)VCY=
/G^<10
RH;X!
>T?;U'
:*[ 5 F0
3;['$>
@<Y$'
.J[<0G#
4&Z!A
O%(F0A
+F,3-Q
C^S;0F
!+R83,'
G6E:7-
D]<.&#+$
5%$S&>
;A.*,8
K *0G#
C84E13X,
J8*0G )
8Y=)V15
3;['$9F+,
!8Y=#4
C84SD6-,
 F0G"
4401=2
7$&Z!A
C84R16-,
:B&R($
Z4J:7>
'$A/!;
$ F0GX$
3;['$9F.W
Y=)V15
$$M7"R 2@]
2P[?<[=
-/KU+5&
![@;7&!
'#=/24
);HF* W#
%(!!!>1
!<@<C0CF-
K "3J
&$V?C0
%'N<
3U0,^W
%/<38%
S0 ?($
VCU2(?Y9(
K%3;_<
_6<3);@&_2%
?QT@+=
03<))6
&G9"+,>W
(6T[(&'
\.R75
2>*;F\E3
+C<,(%
%5&_2%
=I5.8+2
5@C"$>
0Z?T.P(_
\+!L5./R1
&$V'<")
!;/@0L<
5@](SU2
%! $[49
:\']P8.
E0#,4$
,/$5*
D:20)G
E03,4$
,/H5*
D:29)G
8*.A6Z!E\
,/$5.
D:23)F
8*HA6Z!E\
!&[!A
"W&8SS
!&[!A
"W&,SS
<!&0#4
*8'.$#5
Y*723==
9:&' 1
(11<)95#
)+#&#=
$(6P)4"
&9&C)&
9'36=+
3?9!$??
-=*6/;"
*<'_+;
;?63"7"(
;(!*:X"
G=>JG=<+
0(2R=$
0+#*#>
6-+;<!B%-=0
*2;' +,,$0)!:#/(/
7#!4;/5_?&
< <<-5
:!17,;
7'2Q_1?A(
*."8 4
()0%84#3_9-28?'
\ :5 +8
%(6'!!('1%
5=20-#"
)"R6!//-'#%>>
'#""0$8?8
8+!35&/(
%&Z!A
)U;(!_
"W&8_S
 F0G#
%&Z!A
 F0G#
%&Z!A
 F0G#
%&Z!A
 F0G#
0H15&2!CS
VCY=)-
J+;FQC
^&!(,B/,$6
' !F[
WH'&Z!A
&@\,!#0BY
HU Y!],
@3CY=)-
^%!+<B
&\!@
VC =%1
!* B_,9,
5VCY=)-
 F0G#
VCY=)-
 F0G#
(@\@!&_B^G$&
4HW%/!]
 <!K,
KVCY=)-
 F0G#
/@\]!&
5'"!FS
*VC#=$
%%\/!#0B#<$
:5^"!%
95^2!*(B
#C7=')
(F8<#-
2@]^!+,B
V@>=)!
@]^!!,B"
#C+=$-
(F>,#5
7%]3!*
,#C%='R
_F G#6
%%\*!'8B:,$
"5\<!&
H*@%#!
>#B9=#R
(F/<#2
25\$!'8B1
%&Z!A
 F0G#
>-N F0G#
%&Z!A
%&Z!A
"W&U_6
%&Z!A
 F0G#
%&Z!A
%&Z!A
 F![+
%&Z!A
"W&>_6
%&Z!A
 FP[/
%&Z!A
?&&+;*!#\9=&?
-2; ";R
!093< ,F0G
'4&6%)>3
\=6B5+0W
,%2!#(>6
6+3=?>##5(,'
"/"3:"X,
?99%#:"#5
;(!02;+
3YZ!A
(#42;="W
<; #00G#
J??6F
3&#-3!%
,022F";<
CY=%2=)
J$35 ?5 F0G
?+/3*<"
)[:3;3+&
.!&):9337/
.2;3#+;/( !
"2Z7 8
<!(3H"3%?:3;3
H!0)/93+(?
=<:C;3#+[
,B3D/
%&Z;:
"W#!>&
5 B3 /
'3Q-4??"&
$&&P .!78
'6'2<'
$@-2'=
!&[!A
 F0G#
%&Z!A
 F0G#
%&Z!A
 F0G#
%&Z!A
 F0G#
%&Z!A
 F0G#
"W#U>&
5 F[F;
%'=)A
"W&U26
?Z,% F
 F0G#
%&Z!A
 F0G#
!&[!A
 F0G#
%&Z!A
 F0G#
%&Z!A
 F0G#
%&Z!A
 F0G#
%&Z!A
 F0G#
%&Z!A
 F0G#
%&Z!A
 F0G#
%&Z!A
 F0G#
%&Z!A
 F0G#
%&Z!A
 F0G#
%&Z!A
 F0G#
*E'=:'!D%*&/
/W]& WY+!]
%&Z!A
 F0G#
%&Z!A
 F0G#
%&Z!A
 F0G#
%&Z!A
 F0G#
%&Z!*(
^;VA64[
W%'O'4
_:IF!
Q^%H;F
",4'^"3
/0"4)7
%=80 <%+
5?%(%!
'6,,;-
6>1;3 &(:+U
$1'W"Q
#,"3):=#06.
=:%5<,\
*"%<#"!;/"]0W69V
8S3Z:1
U/ 4[,/
5'3.3!<](
/A,KP
(D/!&:
'"V339
-CNXT.R<;?1<0C
:!U10'
0SC6%:
,A&#\(
+ 5-/$[1.
<06!';>"
R%!/R*"
/0(&:'; +?<
<(55'1'8K$??U
&!02=$"+
,#20+>>%7
]8\?5!T6
6,S[68
/:]3/,%(+:\%O
$8"X20V3U3\
*L $[
Y$7Z14
%'$-W<9
_7(;R*;*&""%
"/B$;
>>###=7,$2
04$&--B
/*;%."
8<C0?,.
I;$&&.$#Y$7?#"%4/5
' ;R.71
5@9#'
<Q3ZW1
5;6D#W
B)"3?=
Q+'?A;86&>^
$?0 (G
"!]@=(
=3+TS*7@
/4]ZK1"
=!']-:/
1326;Z
"#-!$=4
4& X3,
8+,6(%=5C"+&
#" _3)!
'!77&>5#Z&0&.!
5 : 3]?E
7%K+,6
2W04>&
K!8 &R
>$_D?,.
50C3G3
/G/1]G
901;"-
:Y=1\E#(-S
F08^4 $*S
]N$^*Y_.M9
:\>*71
@836F::
0'.K(&
,<"8>"/
<7>*]&
;"%?L+(
0UG^2Q11
;+',:?W] %
_E\)G
%."_?XT
'B^097
*;-,&:
T9>#' -50
!!+ 0U
%?5+ "$
31>[)2
S?6$.,.
+8 \!7%(
'7&>5#Z&0&.?C/
:=.%8E'
/)!(3=0($0"0&567(/ 22$B#@,9
?=0*Z$Z'&K7YU35%A
)%1;0D
/%]9#FF7&3"!
U=0$9N-Y
'<885'
?)%FV^S
L?[4[&&;
G?3/Y%#
_WG:4&
9:9%I3AYY
3):1?%
"Q1-5:[
!7=/;@'
0^3;)$
"*/F3,
#( #9%$
9R3!X6O'F-
8B^)U;
&__6+[
U#Q.1:C<
.-"C*
&.&Z#'(Z6&#
'9+ &;,4Z=.%
?>+63+! *,-1
F &3>[/2^ ([
7):67,!
-0(#2!#;9
3F/ 25%_9"
@0G<GP
A";T !>)
U ]M(_U
1H1_,7! 6Y
&7P"+-00
".B_1M
#D3_:
J/<. [S
-LJ:4>
!+:YSP@F
R,*)J=AX
-3>X!]=
?/0Z>Y
#%V83F
',?%'$
3++"!8
>6:!1TA)
!3L*G895
5(<><3
?+* _3)&
[5:'0T<S49+U
:%8&3.
3T8^>S5%=%$8=ZW-2
G\8$5
-!C?67
&S"*/F
&G!4_
95#R3!!?(
U=S!B%
5-9Z/$3.-(
V'UA,%=24
5 ';#"
4?K7J/
57,\:!
="/?"%
&$)5<]*
" @R@+-
:7Q2;
<<1I(X
Q;9J"
"%7==N=
0'*7RB"9
:; +8&
!!R4L*
\2' T1
-<-20^,
.+&(X-
]"%.'"9F
T!(^KZ
(,*@B(
56<0UY)
VCXN%
678B3X
$C:M]]#42
+:\62
3>< E8
#321.2;"$/+)!
-1-]:K
<'8,L<Z?
7?2^1'
,%3!6!
Z1);> '7?
5&4.$)!?0 ;
<<0S195Y47 #(>53Y&3_<)"R35[
#;&2"..
,-;+-(&:'; +?<GP
QAV/2*
,71.(Q5=R
"I"]=W26$4
/V"D94
9 1G=
<*+=%
%!+2(G;
_$^:(G
7@Z8&)
41"- :8
?+* _3)&
0-6/E/
/7-R
]?-$S711'
<$?57
?& -4<
%-'8':"?W-4G
+06J:#3)
#,"3R 6$
<0?0!!8I<0 ?M<("6S
6.(%5>:%
;$9@#K
*\O/+U"
.1=;G"L
L+<,:8_
R-WJ(4*!5 *5"8F
,*3< (8TG)/
@"-<^!
''5(1A*[=
\8R'!?Z
6PCY1
%D.;&-
E81,R#
5&%1\"E@2?
%@_D!)
G,2&1
T^; ?.1,
/D+;"S$]
]1&V!>%
!587;!',
57"3$:&7
3KBR$-_5$#
%-&>'9
94$)1+
(0%#:&
&_&<,1<
(;2%4(:
01 ;;"1
!&0%:1'8>%3'!
;17'X1Q
.:%,"79Z
,?3_;]
R$M#3!%
=[2-;
#5!%;6!5
59*3/*-
&%W%-1+3&(
+&8'=2
5;$.--''
6-,;:%]
7#^02&>
]=UE L$
*##;4,
?^='<_7
!Z.V<;
#>\9M!4Y
R%LK$*T
"\$80)
.%_E#&%
/!9*T>
&5-P?\O>%#
?"!\[:
&* >*-
UW3C1+
Q25&;C
#46&!<
>&G!4_
-ZJ$#5=;B
:,#7<
>=5:<C</
)/T875'
65$A03
)!;0 ;
 F0G#
3)F688
6$5#=B+
14,<"1
2!4;#Q
7)!0,&<
=4!"%2'<
?"/!-%8 -T?
:&Q_=/&
*$08?#
913)=
#._76
!,<3 8"
9*06.*
*'35,9
2=1'(967
%-6 P R?&0&F %3S6-
%&Z!A
 F0G#
%&Z!A
 F0G#
%&Z!A
 F0G#
%&Z!A
 F0G#
%&Z!A
 F0G#
%&Z!A
 F0G#
%&Z!A
 F0G#
%&Z!A
 F0G#
%&Z!A
 F0G#
%&Z!A
 F0G#
%&Z!A
 F0G#
%&Z!A
 F0G#
%&Z!A
 F0G#
%&Z!A
 F0G#
%&Z!A
 F0G#
%&Z!A
 F0G#
%&Z!A
 F0G#
%&Z!A
 F0G#
%&Z!A
 F0G#
%&Z!A
 F0G#
%&Z!A
 F0G#
%&Z!A
 F0G#
%&Z!A
 F0G#
%&Z!A
 F0G#
%&Z!A
 F0G#
%&Z!A
 F0G#
%&Z!A
 F0G#
%&Z!A
 F0G#
%&Z!A
 F0G#
%&Z!A
 F0G#
%&Z!A
 F0G#
%&Z!A
 F0G#
%&Z!A
 F0G#
%&Z!A
 F0G#
%&Z!A
 F0G#
%&Z!A
 F0G#
%&Z!A
 F0G#
%&Z!A
 F0G#
%&Z!A
 F0G#
%&Z!A
 F0G#
%&Z!A
 F0G#
%&Z!A
 F0G#
%&Z!A
 F0G#
%&Z!A
 F0G#
%&Z!A
 F0G#
%&Z!A
 F0G#
%&Z!A
 F0G#
%&Z!A
 F0G#
%&Z!A
 F0G#
%&Z!A
 F0G#
%&Z!A
 F0G#
%&Z!A
 F0G#
%&Z!A
 F0G#
%&Z!A
 F0G#
%&Z!A
 F0G#
%&Z!A
 F0G#
%&Z!A
 F0G#
%&Z!A
 F0G#
%&Z!A
 F0G#
%&Z!A
 F0G#
%&Z!A
 F0G#
%&Z!A
 F0G#
%&Z!A
 F0G#
%&Z!A
 F0G#
%&Z!A
 F0G#
%&Z!A
 F0G#
%&Z!A
 F0G#
%&Z!A
 F0G#
%&Z!A
 F0G#
%&Z!A
 F0G#
%&Z!A
 F0G#
%&Z!A
 F0G#
%&Z!A
 F0G#
%&Z!A
 F0G#
%&Z!A
 F0G#
%&Z!A
 F0G#
%&Z!A
 F0G#
%&Z!A
 F0G#
%&Z!A
 F0G#
%&Z!A
 F0G#
%&Z!A
 F0G#
%&Z!A
 F0G#
%&Z!A
 F0G#
</(;3&!
2#^&+ (27
()(:54U2)4
P>3=%A
0*,RN
$?[@!=
%<Y?4D7^8!.
S&^-0T0PA
\A%5L4%
K"FY9(&Y
D;F.,>+
5=X/>0)M?-
B=3)(#
]%SQ!$E
L6 2H4;9
7Z$&(@
46')8M
>QTG&%
T9;!Z,'
3X,3Y;-
7E^.^
,<@!K
$&!"6?!&
J2(],//"L
57$D:</R
71%<='86<;3/++_
 8V00
#6#^(*'(
V+M1.K
&3?A.
'8"@$]0#
<-4041#
=0I:56.)*0<0'
SB4; *
D&E_$
@ J],+
[9*27&:(*2
7 J'5(:B&6"W#=
7Y>([+AQ
'07L"(
3.(-0>
&]4LW"
"T2;D (%#_
/?[8"!3
 F G#
!"8.7R'?:
<4#3:%
?3(F1J&
:9K&4!
'!%/72
".<V,0
>P=RJ8$9
".9(F1'&
#9K&49-=3
=)O5,F
!&[!A
6$/<\=
 F0F#
7IU%R!:
 F0G#
< .[%\
%&Z!A
 F0G#
;U-%!
%%Z!A!<?
 F0G#
%&Z!A
 F0G#
%&Z!A
 F0G#
%&Z!A
 F0G#
-R(,/W;U-%!0
4K%,.SVD6 &
9F?NT
K0A(30
250T3M
<G;&9"]/
-]C'6$
C%MC.9
#:G!YU=='*
D,$.)$U
:?K/G?S-R$9:O
56S ![ 3L;
6B'-=<#R2(2>),'*
/>@;!&
56:7A5%
2<5.3YU5#
#%-&(,
Z "[#+
44;*R*7
&8#>S?
S 9*J'F/
TC?+24
'W;#+(&V
+XZ=K<
J^/"%/8
)1R'/$#?S=
>5$G:?
L/)4!/0
(E/7 '3
;-F;GY
,K&0>3WCA?_1^
6#:_*8A1=B-P<-8'
51$)J5[-'>DQ^*
F&97/!A
A!,D%$
ZSA]K#
UD$G;#
WK.5"8:
&R%6&?X!5
G?$?S"
$^)B73
!J1; 106
4\GQA[
"(&L4:
%3/*=]
L3*Y&V
7PX( W]
Y@=$8,
'+L]-R*
#%#\$<
2%U?!1
!&*!]
: "^C<
=&@1+'-3QL
&%7&BZ]N
32K>"1
--*EMV)4O
?+M4Z>"L
5.,0.<^@
B]4"6'
LREG'
$3"5?1:Y
;B,,0A[
DEFLF%
F83ZW
4;X[67
X?@SC.
"[Y@"0
& 8/K-
P8>=0Y
78"B4^
2 37_&
#696'>ZL>
&(2.),2,Y&(
](+08<[9$
4%5K/1W>Z-N49X
/P.[:!-N[2
<!@_<B
+R(-%@Y
G--!*.
/!3"$$ >
L.&:1
>1N5:01
B?M.!
,99)AN_
_-Y#79G
6:+Y.R9"
6;0Z_2.
:B)$(6
5?;S$*
@%4;-
G+$418
)U$R?41$
:UR7*>
!%-;)Y
6'Z,#3'01*?C
:>8G:+*
:,Y).!+
-%:!
"0#S(K,
/Z/P#%
@\'J"[@
6['?&?VC
$F%*"[
>C+7.8
5#VT!6U = 3
3$(A[<T2
.*%*@!<";
'"Q52Q@
3;D%<+*]
;,>3/7
*F+*91
)@&"L :
)$873
*<L!*-
3.(%":
J-!%<7ZT
J1"D)%
^IWH%#
5+$'L*
0J!=&^
OZF5Y"13
8^>4<"
;7%M6
8'0:?H7,1%9
4L[!036/:*
(VG8 ,*
"W0^.&
WA"%Z&
"T8:C.==
^.<R$"
$,K0]0[,
,+C&"#
/1!L-)*
<G#4:H
=$"R7Q
=D?&.3
U3",<;
/0SIRY
?!:>A/
8 7G8-2
/'?%>[
;_=$!
"''H,((
@"X)(&!
-3$"_S-'$
!.516#&'
1"52!=
Z;<4K=&(Q
RP,.?
\9&")JG-75,
9#%"/"2
XR;/J/
$Z>*=\
(-(?Q?
!A$ :L
?SKQ"\
;.868\_
4)7_4&
)D4# 70
G"%+B0
#.2[,Z
5S-1.9!>\S+
..PA]S+:$
/&B&6>7
)97=>'
"P F[$,*
A0$=32Z8X
;$W$1* 9
-!8/<
?!1)<@
C%[35 :(
B*MR?:
'9"$,#
S>&&%*
$JSAV[0J
>0+'?P-
KR<#;2W;YT
<4'#$_
522.('/-
A-=)S!
XY"#=7,6
+9>GE?
54(1S8
^/!W>6";
,7"%/(
" -,.2-9@
6*+:!B
RMG0?C6>
6Y%#V!8$
$<?)S!
;R(XP1+
(/],D>
?_[612B
B=%.;[8?
:!$[:(9
(8%2['
/.QD8@]
<:7%Y\
6Y! :^7
HCT8!K(=_EF
$'_,-4
5>>Z:;5] ;
=N^$AV&Z
?0=)+$Q
=%!";@;
RT %U)
%N+#%/C=( W
?16<_ &8G,
1+3*"#-!Y]
A=>?9
!569Z6
7?Y3)&
G"]PS-+
2 /=".
A\>EY6A9
4\#=?\)
&,C&:"
1^23:\
514C#0=67
^'./1S9
-,3?&L
))&8R.(
)@8<91
N."("4'
]R'>4J
P9<-$HET
B#?*A+(2
)N+<F"[?SE/'
5,7.+,<1=
=-*F8#S^-
>Y*7#T1
$[Z>F!&
&17>I.
")V?D4
#/006[%
+J;C;;/
@VD]'5@
Z?"C<]
5060S3(G<9
'7+$VF
B+87&:
W!^:I<
6!--6<L
=4(-0R
Z/?S8Z-
*6L%!9
&$A\,?'7
50>!9".
!"[?Y!
DA9/1,
E;.)T
!$#Z+T
])&"?6& E-^/1!
=\- <>G*4
2GBA7A
& ,,-
&"]0=
'#S78:*
! 4F:3<
0X)^0!;9
'(RD\(
48#W3C]
6\$#D(!1>*B>
7,<1#":J:5
U)P.6=/_.<V3Z* 2!7;K_0%
=&N/.-4_G(
&2)Z;6;
#"SA3;T
-<$4+USD%<+'
(@=-+Z#
.=<=!
Q)=QJ+
%/UE_&
[@0C&P$.@=$
:GR@]F
KV@-3B9
!$!?"6
A3<6\/3
R8)38
,]-N6!(#
F*<[48>5
D107F;
. =G?;
->,?X0
[T'#5S
?<45*$0
;(NZ6'[A
=#!:[FXT
AT+"Y8
![ ATG)
9].A3C
+ =T-5
$" SB_G
&)!<;;$#7
B= (G&4+
Y?=97[
?&$)AP.7=
U(:5*6
G+3-M*
T0OE#V0P
?D>8-6
#'0'L
KW59=K&9
#&M[5$
$#6$!/MU
9.5%A(/!
;/59B1
[K-==
SD&E[!0
D_(J3E+@"
/(H"A-1
6U%^1X_6("^
5"%788D=
0J%4 "
,Q&^%2"
PA#;<0
.9+J>"!
C51:1
#;?@((
0#B ?2O**6
>QY0S%
?M=KY
01E-'8
Y-A9?]Q0YW!&
F8@3#%
5+*$^SR3'.
!XDX$()/,5
71L= ?
W$C)3'5
(U115;D
T(FX\R
2:&0B0
S(*= 8
>0%#>!
9I@VBT:
A-)&6>
3#< B&:G%>9!%58
_=.=&!*!
ARC"7"0
:%0#?>
6>J,%(%L-%/
?V1D_&
??!0H@X
2SSP"'
-!Z*= #I"
F!>!(Q
.*U,H;T@
XS)V[
(A/26+6Y5(3
'49<4_;#
"QJ^#-
, +E^+&ZD+
D8%3-S=P
7136) ]5
RF)J<@VX#
=VJ_>5
A_B'-)-
MD)F =
S@*< 4[=P
[/;.7[8%((
"94L2%]9@3%G,
8I",A*
R'4_P=DGF
,&JMJ1>'Y6
$N-%.
7&ERL,
6@_L,]
.$Y*H4
619*J-:
K"_0;.
YW<0#+
=$E3]
C!N<%'
S<UE&W!
%VM:\/5P.
F$G 0'.
&1)"^4;
[5#_>8
:P?X!$
>'7"!0
?0=&;*
B.Q.?R6Y
0)349G
6'!>%D>!\
6X 0#;
$$:*(D;>
#Q!11TF-?M&
93<7<5*+
S]>&QQ1[7
O/"T+%
&>-L1
&Y/<!A#?
1>9Y-=]
;0-6T>:Y
!!)F_1
-C^A%E
P74;SS
($05*?
(5((.%;Q;R*5*
U('2%Y6Y
H)CU=!&
A,!45&#
-:K!RD=?$1A/
Q' 6K4MO5,3
$#8@31(A#
ZU6?(P"^$YW
<>@^B168%
? A91%6]:!H(*@(B
Q'B!8;
U+%$^C
@)#+[1
;$'Z/.G
$W@'L77.
7'/>=]$
'-W(U%=[
":+@=:R
+AR3.2VH
C!E*./
; %#5#
A2.'$43
<7]Z!U'+
[LY:
">1,E))V
''[4<
U $5-@
#3B;1&
AP&',)1
&-&L0*A
0F/7'7
?QW7(U_J68
V,2F7W%:7#R
>")Z-R00
2XM(_Z
U@&?,$3
RQE&>%6
!83?W,
*]3*6>U$L
Z6*?@&
QS7'58 A.0,<7J*3
%#!D"+
:3@5<G9
R!)ZI+
?,&N>SJ5%<
#. (!"(
+"),5W
!)S(,E
Z3%'/$
_M!9*-
SD?'%2. !
&!+J4>.
$;5'+02
Z> A!(:!>
4?<!'0!_T
\-J8 L
$@'.$3
(S@R&!
_@%<%8
#%:=&B<2Q:3+6
:%82BS_
C;+*1C
@=$'' *5
C!(V4M<
'&%/3@.8#
.W'XY5:
W33)$
YC,75;-
F]\6G/
/;$/\E7>
")QOH
_'[V$7A
><A<@8
Z5/A4,3/(
'+!5X&'
1(;$!$'
)9*6&-)
_S4('+&
8?R0W4F
&I*E*-/10'Y'&-
=X<&[1T6
(W[3*1
C##J_IJ
6D''+.<
;.@],'0!0)RE>C
S/97<'
!Q1"' :RK
X&>G0(1L
-:+T::
V#:<;I
>): 9$@"G
<,);68
[9,\0/
$ 7 $)
,<>53S%&
$%-7%$\@R-0S
1=!#-<-#
G I V
G"D(91
AU1U=^
$&<$!<S
1'U41D
+92?P3G!M
\25 =Q
-2F<M0A
7&M_XXD(%
)9)3_W6(!
7"1/?'!
#MJ;;&<5
^F^_;U/Z
;LXI R>
.@:/&Q
9Q7U :^
D:&15"^/
$S<=&9
;L%,)Q8&.^ +F/
0!(:$,
</_4?'D#
[+]_19
)Q LY%81"
:C"A3!E
</F/U0L4"L
9"]H72+,
1/.\YZ
D*&[?=
>9%C9-G
SSHM\+/L&,O
O! <6&5,
'/-56C?
8=%8:!(
'V;")/#T3P+(44
5G@2*
W%F9\=
N?#58A
+ ]'+&
0!Z: ;
L(*.(;4
@89B/%
& 8CP)M<
%R">,
O!&!("P
"TSI,
G8-+Z73
!%$;*8
2S/!@:
6$)K"K9)
.$9;O"
_ ,5T>
.5JYVHT
(#M.AF%
#+X/&
AZ[:Y\*,
A"G
W9E ]7%
,S6=HF
Z>R_+8
)">'2X
S=R'-,
??2:95
3 ? ;-
E=HRG
]1UW2:;
$G][:K(
-D9*:1?
__)V3_
@V95--
SAH8#(1D#
$R8??,3
"!9D*;
._($XA
^3(,9K*
R"+[6>
1%?S3-
4(]\?K9$<
::G:*#5^4
!77_58
+8EQ(!
/5;S4&*
=75-;5$0*
-5L1Y9*4 8<
=1#;V'Q$#I
'&<P9H%/6>>
T&!!#
&'+(C
E(AQ6S
V+4D=\%M7?
!H*6X(&.%&6
!=;O5D%'
Y_4]2]
0:!&_M
\!:7KT.
!<*G"!($I
.6)Q7\
,:+,AG=D318;<L]."W
+7.:-D
9Q'#=Y6"X\
:$!$;4(
'(A:K:7
9,C949
@*+.((+$*%>C
!9'4$H80!%A!,P
I RYL
7$$B+ A
V0H>(_
E(_JWD
J/;J%1.505&,9
?!"]537(
7D#*T0*
"7B]9A
.>.7(
9!=%94MVA
*-R,:#
Antivirus Signature
Bkav W64.AIDetectMalware
Lionic Trojan.Win32.Miner.4!c
Elastic Windows.Generic.Threat
ClamAV Win.Trojan.Genkryptik-10016533-0
CMC Clean
CAT-QuickHeal Trojan.Miner
Skyhigh Trojan-FWHP!CB1AB881DF77
ALYac Gen:Variant.Tedy.523105
Cylance Unsafe
Zillya Clean
Sangfor CoinMiner.Win64.Kryptik.Vszr
CrowdStrike win/malicious_confidence_100% (W)
Alibaba Trojan:Win64/Coinminer.77b069a8
K7GW Trojan ( 005af85d1 )
K7AntiVirus Trojan ( 005af85d1 )
huorong Trojan/W64.CoinMiner.cf
Baidu Clean
VirIT Clean
Paloalto Clean
Symantec ML.Attribute.HighConfidence
tehtris Clean
ESET-NOD32 a variant of Win64/Kryptik.EDF
APEX Malicious
Avast Win64:Evo-gen [Trj]
Cynet Malicious (score: 100)
Kaspersky HEUR:Trojan.Win32.Miner.pef
BitDefender Gen:Variant.Tedy.523105
NANO-Antivirus Trojan.Win64.Miner.kwkdek
ViRobot Clean
MicroWorld-eScan Gen:Variant.Tedy.523105
Tencent Trojan.Win64.Kryptik.hj
Sophos Mal/Generic-S
F-Secure Heuristic.HEUR/AGEN.1370827
DrWeb Trojan.Siggen31.4006
VIPRE Gen:Variant.Tedy.523105
TrendMicro Clean
McAfeeD ti!23FA323EEA0A
Trapmine Clean
CTX exe.trojan.generic
Emsisoft Gen:Variant.Tedy.523105 (B)
Ikarus Trojan.Win64.Crypt
FireEye Generic.mg.cb1ab881df77d5e5
Jiangmin Clean
Webroot Clean
Varist W64/Kryptik.LEG.gen!Eldorado
Avira HEUR/AGEN.1370827
Fortinet W64/GenKryptik.GQCB!tr
Antiy-AVL Trojan/Win64.GenKryptik
Kingsoft malware.kb.a.768
Gridinsoft Trojan.Win64.CoinMiner.sa
Xcitium Clean
Arcabit Trojan.Tedy.D7FB61
SUPERAntiSpyware Clean
ZoneAlarm Clean
Microsoft Trojan:Win64/Coinminer.RB!MTB
Google Detected
AhnLab-V3 Dropper/Win.DropperX-gen.R622355
Acronis Clean
McAfee Trojan-FWHP!CB1AB881DF77
TACHYON Clean
VBA32 Clean
Malwarebytes Trojan.Crypt.Generic
Panda Trj/GdSda.A
Zoner Clean
TrendMicro-HouseCall Trojan.Win32.VSX.PE04C9V
Rising Trojan.Staser!8.7FD (TFE:5:g2ZCviiLSKR)
Yandex Trojan.Miner!ln79aBUTstE
SentinelOne Static AI - Malicious PE
MaxSecure Clean
GData Gen:Variant.Tedy.523105
AVG Win64:Evo-gen [Trj]
DeepInstinct MALICIOUS
alibabacloud Miner:Win/Miner.RK8PHU
No IRMA results available.