Manalyze report for 7a9f5206d8dc4ff21d9a1b1e9ae17d2181763e4969259ced5d7be82cfafa2461

Summary

Architecture	`IMAGE_FILE_MACHINE_AMD64`
Subsystem	`IMAGE_SUBSYSTEM_WINDOWS_CUI`
Compilation Date	1970-Jan-01 00:00:00
Debug artifacts	Embedded COFF debugging symbols

Plugin Output

Suspicious	PEiD Signature:	`XWD graphics format` `HQR data file`
Info	Interesting strings found in the binary:	`Contains domain names: .eq.github.com eq.github.com github.com golang.org https://go.dev itab.github.com`
Info	Cryptographic algorithms detected in the binary:	`Uses constants related to SHA1` `Uses constants related to SHA256` `Uses constants related to SHA512` `Uses constants related to AES`
Suspicious	The PE is possibly packed.	`Unusual section name found: /4` `Unusual section name found: /19` `Unusual section name found: /32` `Unusual section name found: /46` `Unusual section name found: /65` `Unusual section name found: /78` `Unusual section name found: /95` `Unusual section name found: /112` `Unusual section name found: .symtab`
Suspicious	The PE contains functions most legitimate programs don't use.	`[!] The program may be hiding some of its imports: GetProcAddress LoadLibraryExW` `Functions which can be used for anti-debugging purposes: SwitchToThread`
Malicious	VirusTotal score: 31/71 (Scanned on 2026-08-27 22:00:04)	`AVG: Win64:Malware-gen` `AhnLab-V3: Malware/Win.Generic.C5884994` `Antiy-AVL: Trojan/Win32.Agent` `Avast: Win64:Malware-gen` `Avira: TR/W64.Malware` `Bkav: W32.Malware.1EE17563` `CTX: exe.trojan.tedy` `Cynet: Malicious (score: 99)` `DeepInstinct: MALICIOUS` `ESET-NOD32: Win64/HackTool.Agent.CL potentially unsafe application` `Elastic: malicious (high confidence)` `F-Secure: Trojan.TR/W64.Malware` `Fortinet: W32/PossibleThreat` `Google: Detected` `Ikarus: Trojan.W64.Malware` `K7AntiVirus: RootKit ( 005cde0c1 )` `K7GW: RootKit ( 005cde0c1 )` `Lionic: Trojan.Win32.Generic.4!c` `Malwarebytes: Malware.AI.2641332124` `MaxSecure: Trojan.Malware.684922395.susgen` `McAfeeD: ti!7A9F5206D8DC` `Paloalto: generic.ml` `Rising: Hacktool.Agent!8.335 (CLOUD)` `Sophos: Mal/Generic-S` `Symantec: ML.Attribute.HighConfidence` `TrellixENS: Artemis!0D89E12C9EA9` `TrendMicro: Trojan.Win32.ZYX.USBLF926` `TrendMicro-HouseCall: Trojan.Win32.ZYX.USBLF926` `Varist: W64/ABTrojan.GNXR-2083` `Zillya: Tool.Agent.Win64.4531` `alibabacloud: HackTool:Win/Tedy.Gen`

Hashes

MD5	`0d89e12c9ea9d78c9780294f016d74f1` 🔍
SHA1	`92758a964a034f1b23ed6305d98a02e2fba7b043` 🔍
SHA256	`7a9f5206d8dc4ff21d9a1b1e9ae17d2181763e4969259ced5d7be82cfafa2461` 🔍
SHA3	`bc34e6f9b3ba7861287cc8c1e3f487d8a4e86a069b8c6299d516f6a863e9d495` 🔍
SSDeep	`49152:hN5pvUC7nLCtMMJ4tp/OeEObK7K1KpCb5ErjL1xkMACKjsU/ElHQ/v:hNLMQlSoErF0hKC` 🔍
Imports Hash	`ed8b780a3ce7ca4aba78a21f6bc3d4e0` 🔍

DOS Header

e_magic	`MZ`
e_cblp	`0x90`
e_cp	`0x3`
e_crlc	`0`
e_cparhdr	`0x4`
e_minalloc	`0`
e_maxalloc	`0xffff`
e_ss	`0`
e_sp	`0x8b`
e_csum	`0`
e_ip	`0`
e_cs	`0`
e_ovno	`0`
e_oemid	`0`
e_oeminfo	`0`
e_lfanew	`0x80`

PE Header

Signature	`PE`
Machine	`IMAGE_FILE_MACHINE_AMD64`
NumberofSections	`16`
TimeDateStamp	1970-Jan-01 00:00:00
PointerToSymbolTable	`0x362c00`
NumberOfSymbols	`3807`
SizeOfOptionalHeader	`0xf0`
Characteristics	`IMAGE_FILE_EXECUTABLE_IMAGE` `IMAGE_FILE_LARGE_ADDRESS_AWARE`

Image Optional Header

Magic	`PE32+`
LinkerVersion	`3.0`
SizeOfCode	`0x106e00`
SizeOfInitializedData	`0x26800`
SizeOfUninitializedData	`0`
AddressOfEntryPoint	`0x000000000007FB00 (Section: .text)`
BaseOfCode	`0x1000`
ImageBase	`0x140000000`
SectionAlignment	`0x1000`
FileAlignment	`0x200`
OperatingSystemVersion	`6.1`
ImageVersion	`1.0`
SubsystemVersion	`6.1`
Win32VersionValue	`0`
SizeOfImage	`0x23e1000`
SizeOfHeaders	`0x600`
Checksum	`0`
Subsystem	`IMAGE_SUBSYSTEM_WINDOWS_CUI`
DllCharacteristics	`IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE` `IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA` `IMAGE_DLLCHARACTERISTICS_NX_COMPAT` `IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE`
SizeofStackReserve	`0x200000`
SizeofStackCommit	`0x1000`
SizeofHeapReserve	`0x100000`
SizeofHeapCommit	`0x1000`
LoaderFlags	`0`
NumberOfRvaAndSizes	`16`

.text

MD5	`dceaa7e95182451cdf1337119d91b2d8 🔍`
SHA1	`ac0650e767fcf725e2197aa03fc17486c9b2ebd4 🔍`
SHA256	`ea472242c909f6cea0213ed0fe2a8e591ef907af89fe3a96553f6187b2ebd5cb 🔍`
SHA3	`4ff8bb2212310f3109e4b5f9cbdf08cdd2b818facf9913db87d9134646a6ae5d 🔍`
VirtualSize	`0x106cd1`
VirtualAddress	`0x1000`
SizeOfRawData	`0x106e00`
PointerToRawData	`0x600`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_CODE` `IMAGE_SCN_MEM_EXECUTE` `IMAGE_SCN_MEM_READ`
Entropy	`6.27501`

.rdata

MD5	`28ebd3f9a7fd0c46e77bdf32dd993d36 🔍`
SHA1	`d987fdf16f25924a4a001b55fa5383f2fbb3b004 🔍`
SHA256	`6e273527f26e7b838dfe09061dd9a78945e4e417a2ea7085f96e07c541dbb6b7 🔍`
SHA3	`054776918ef45ae4c77c414560d8dcd3321e1b5677451666c1fbcdf065b666b8 🔍`
VirtualSize	`0x1409d8`
VirtualAddress	`0x108000`
SizeOfRawData	`0x140a00`
PointerToRawData	`0x107400`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ`
Entropy	`5.54901`

.data

MD5	`078554e820802c56d4f332331492ab87 🔍`
SHA1	`ee932d5a311056185f75b09461d3425d96187722 🔍`
SHA256	`a89b9a603b2c4b40809a9ce2e0ef43fa65f6f00ce8fd90e3f20ef9e40cf29e89 🔍`
SHA3	`d8f094ace30938fae8aa627306837acdede71134db019a4175cd4d1991c4cd88 🔍`
VirtualSize	`0x2071720`
VirtualAddress	`0x249000`
SizeOfRawData	`0x26800`
PointerToRawData	`0x247e00`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ` `IMAGE_SCN_MEM_WRITE`
Entropy	`6.95148`

.pdata

MD5	`efdbd4516e70a60cabb491e0c9a0ac12 🔍`
SHA1	`c97ec522205e11cef84c7b1fe7ab96ef68d6ac40 🔍`
SHA256	`99ad26ebd5f54676d3ca5d5a580283cee2909ecaed3252e8abf31b8d01a4d25a 🔍`
SHA3	`6943be1a6a12ca29feed30408b1ba7b460cf24e00db9159e8537fffe886c0e1a 🔍`
VirtualSize	`0x6b58`
VirtualAddress	`0x22bb000`
SizeOfRawData	`0x6c00`
PointerToRawData	`0x26e600`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ`
Entropy	`5.45218`

.xdata

MD5	`875986b6aa8406da709204fc267cb554 🔍`
SHA1	`e185da949a9305b3e1babb938d87387ec397b13b 🔍`
SHA256	`c2a21d8f08197fd21272ce371cc941f74ec08f61cedc4e10ea5f96ac8e79eb3f 🔍`
SHA3	`b30812475288ec12e274bf81ae291f9cae67035e54c5c2a536604d5c26c486d9 🔍`
VirtualSize	`0xb4`
VirtualAddress	`0x22c2000`
SizeOfRawData	`0x200`
PointerToRawData	`0x275200`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ`
Entropy	`1.76358`

/4

MD5	`bcddef00414a946919302442928e542e 🔍`
SHA1	`b0fbeae40093e8241edcbdeae94ba06880dedf04 🔍`
SHA256	`fb7bf682d27ba8920146a9b134a183cd2109b202916488b9b3a4f7d623f0b484 🔍`
SHA3	`7d5b252590738bde977b6dfab9c3034c2ad82b952980a3585c1dc88e1f06f005 🔍`
VirtualSize	`0x154`
VirtualAddress	`0x22c3000`
SizeOfRawData	`0x200`
PointerToRawData	`0x275400`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_ALIGN_1024BYTES` `IMAGE_SCN_ALIGN_16BYTES` `IMAGE_SCN_ALIGN_1BYTES` `IMAGE_SCN_ALIGN_256BYTES` `IMAGE_SCN_ALIGN_4096BYTES` `IMAGE_SCN_ALIGN_4BYTES` `IMAGE_SCN_ALIGN_64BYTES` `IMAGE_SCN_ALIGN_MASK` `IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_DISCARDABLE` `IMAGE_SCN_MEM_READ`
Entropy	`5.67257`

/19

MD5	`0f802ddafc0753f0a2c0949f8192114d 🔍`
SHA1	`feff599b569d1da08962eb5f4940711c0a281494 🔍`
SHA256	`77cc7ccef8502d42ad948fcf8a2afcb1a44d1f5cb6357ca339d8e03cbe5b1582 🔍`
SHA3	`29414fce58d6dbd782084b3d314da0d67136d21d2f5fc7030d08b11fb12773ce 🔍`
VirtualSize	`0x38819`
VirtualAddress	`0x22c4000`
SizeOfRawData	`0x38a00`
PointerToRawData	`0x275600`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_ALIGN_1024BYTES` `IMAGE_SCN_ALIGN_16BYTES` `IMAGE_SCN_ALIGN_1BYTES` `IMAGE_SCN_ALIGN_256BYTES` `IMAGE_SCN_ALIGN_4096BYTES` `IMAGE_SCN_ALIGN_4BYTES` `IMAGE_SCN_ALIGN_64BYTES` `IMAGE_SCN_ALIGN_MASK` `IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_DISCARDABLE` `IMAGE_SCN_MEM_READ`
Entropy	`7.99563`

/32

MD5	`ab7de810a546aeeb3a567fb9d9e49d38 🔍`
SHA1	`b0804cab016743b0af7c5bb59d18ece5d0124b8b 🔍`
SHA256	`c3e3b3ffa695f46b0fd17d31ceb68ee06bf5b1940a99bb81135d0386f6aeac7b 🔍`
SHA3	`88df31ac09ef2daf682fe973bc53a5845367addb319693d3c9994cbfb9184b78 🔍`
VirtualSize	`0xabe9`
VirtualAddress	`0x22fd000`
SizeOfRawData	`0xac00`
PointerToRawData	`0x2ae000`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_ALIGN_1024BYTES` `IMAGE_SCN_ALIGN_16BYTES` `IMAGE_SCN_ALIGN_1BYTES` `IMAGE_SCN_ALIGN_256BYTES` `IMAGE_SCN_ALIGN_4096BYTES` `IMAGE_SCN_ALIGN_4BYTES` `IMAGE_SCN_ALIGN_64BYTES` `IMAGE_SCN_ALIGN_MASK` `IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_DISCARDABLE` `IMAGE_SCN_MEM_READ`
Entropy	`7.93342`

/46

MD5	`40cca7c46fc713b4f088e5d440ca7931 🔍`
SHA1	`3aaa1650bfaf5325fa9cb3a1a284aebcc92aebf4 🔍`
SHA256	`3e3c5f5d419b70e588da0ef0e3d9ce1a5863a5624febc16cd0c007cd14e89015 🔍`
SHA3	`a0e18fe9f6ac46417d52cdc99cf9ae56edb5a53f788995a085b10f88f348a0e4 🔍`
VirtualSize	`0x30`
VirtualAddress	`0x2308000`
SizeOfRawData	`0x200`
PointerToRawData	`0x2b8c00`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_ALIGN_1024BYTES` `IMAGE_SCN_ALIGN_16BYTES` `IMAGE_SCN_ALIGN_1BYTES` `IMAGE_SCN_ALIGN_256BYTES` `IMAGE_SCN_ALIGN_4096BYTES` `IMAGE_SCN_ALIGN_4BYTES` `IMAGE_SCN_ALIGN_64BYTES` `IMAGE_SCN_ALIGN_MASK` `IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_DISCARDABLE` `IMAGE_SCN_MEM_READ`
Entropy	`0.855685`

/65

MD5	`24e19a1b9611cfa9b59a6fa48a95cdff 🔍`
SHA1	`612a0ddffac7607f8cff0085a6a0f08933f182d3 🔍`
SHA256	`22f6dfd052fffc769f7abb580a355bfa465f8fa9ea2334011ac27606588bf6a5 🔍`
SHA3	`f5bd9d9300cf301943f94a61a9f7c2428af877c9b02ac11d0dfeee93e8d87e73 🔍`
VirtualSize	`0x5ec11`
VirtualAddress	`0x2309000`
SizeOfRawData	`0x5ee00`
PointerToRawData	`0x2b8e00`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_ALIGN_1024BYTES` `IMAGE_SCN_ALIGN_16BYTES` `IMAGE_SCN_ALIGN_1BYTES` `IMAGE_SCN_ALIGN_256BYTES` `IMAGE_SCN_ALIGN_4096BYTES` `IMAGE_SCN_ALIGN_4BYTES` `IMAGE_SCN_ALIGN_64BYTES` `IMAGE_SCN_ALIGN_MASK` `IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_DISCARDABLE` `IMAGE_SCN_MEM_READ`
Entropy	`7.99801`

/78

MD5	`585b467d02da14016c0b4c726f85a587 🔍`
SHA1	`7227ddd5a30ae0bf34035814975dd8784625e1bc 🔍`
SHA256	`c8ad08bc87a15494719e5a8a00c52cebdd71ec77ae9bd8079038fd62762f6675 🔍`
SHA3	`e15eaee6a03c16b43292f173d2866889e941a5700041782c5d3d365bff113f7b 🔍`
VirtualSize	`0x2cb9f`
VirtualAddress	`0x2368000`
SizeOfRawData	`0x2cc00`
PointerToRawData	`0x317c00`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_ALIGN_1024BYTES` `IMAGE_SCN_ALIGN_16BYTES` `IMAGE_SCN_ALIGN_1BYTES` `IMAGE_SCN_ALIGN_256BYTES` `IMAGE_SCN_ALIGN_4096BYTES` `IMAGE_SCN_ALIGN_4BYTES` `IMAGE_SCN_ALIGN_64BYTES` `IMAGE_SCN_ALIGN_MASK` `IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_DISCARDABLE` `IMAGE_SCN_MEM_READ`
Entropy	`7.99643`

/95

MD5	`d09964a80728a4305ff6f315d4678aef 🔍`
SHA1	`9812439fa09bf472673f7892249d12783c17cf79 🔍`
SHA256	`909eebcdf082c873dc9cc7f935a6ffbb7136371b4e48b993757f8167d2668eef 🔍`
SHA3	`d48f65df41abb765711573a2368102262c331ed2eda2cd01a91767c072de03c8 🔍`
VirtualSize	`0x16b81`
VirtualAddress	`0x2395000`
SizeOfRawData	`0x16c00`
PointerToRawData	`0x344800`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_ALIGN_1024BYTES` `IMAGE_SCN_ALIGN_16BYTES` `IMAGE_SCN_ALIGN_1BYTES` `IMAGE_SCN_ALIGN_256BYTES` `IMAGE_SCN_ALIGN_4096BYTES` `IMAGE_SCN_ALIGN_4BYTES` `IMAGE_SCN_ALIGN_64BYTES` `IMAGE_SCN_ALIGN_MASK` `IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_DISCARDABLE` `IMAGE_SCN_MEM_READ`
Entropy	`7.99344`

/112

MD5	`0ac5fe89810bac1063ba53be0d69bbc5 🔍`
SHA1	`228a5332da6ca480913fb39a4c45325caef26e88 🔍`
SHA256	`73965934c5f18982a59c10372f457126de1560ab1e1b4f80b17ce8864020d822 🔍`
SHA3	`5d3d9847da3b7d7d74fb50707a0fd37958f0780b715fac48c069413326f3f239 🔍`
VirtualSize	`0x165b`
VirtualAddress	`0x23ac000`
SizeOfRawData	`0x1800`
PointerToRawData	`0x35b400`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_ALIGN_1024BYTES` `IMAGE_SCN_ALIGN_16BYTES` `IMAGE_SCN_ALIGN_1BYTES` `IMAGE_SCN_ALIGN_256BYTES` `IMAGE_SCN_ALIGN_4096BYTES` `IMAGE_SCN_ALIGN_4BYTES` `IMAGE_SCN_ALIGN_64BYTES` `IMAGE_SCN_ALIGN_MASK` `IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_DISCARDABLE` `IMAGE_SCN_MEM_READ`
Entropy	`7.59746`

.idata

MD5	`da955ad2ab1c1cf8bb7d60be36c34f17 🔍`
SHA1	`333ca7e2627511ed4d49c5a5efbe6638300d90e1 🔍`
SHA256	`4ef6a1de95c3dc3fb7e2c05281f0f974ecc340e1522983a9c6cfe051c4d5c96d 🔍`
SHA3	`ca396eaf4b480828e8ac8e6e5212528f67f58b99e45d8aadcd7121f563effc06 🔍`
VirtualSize	`0x57c`
VirtualAddress	`0x23ae000`
SizeOfRawData	`0x600`
PointerToRawData	`0x35cc00`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ` `IMAGE_SCN_MEM_WRITE`
Entropy	`4.31367`

.reloc

MD5	`bc02d54e27a9e579db58b2fb1bba1dd5 🔍`
SHA1	`6853084306876bd4f532ead24914adb1df469a1b 🔍`
SHA256	`6fe0829607cd9fb131dab05e69b1f99e2f3bf827730c9beaa72d11871e8b46e8 🔍`
SHA3	`bbf1542e87e15efc89439ef4fc535685d791ef3b48f539118a507ffedfdf1590 🔍`
VirtualSize	`0x59e8`
VirtualAddress	`0x23af000`
SizeOfRawData	`0x5a00`
PointerToRawData	`0x35d200`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_DISCARDABLE` `IMAGE_SCN_MEM_READ`
Entropy	`5.4367`

.symtab

MD5	`f24b66918caa8c0cb1744ea7ebeb328e 🔍`
SHA1	`8764c2555ea3c4893fe726ee776d19884ab7c3ab 🔍`
SHA256	`230ec28ed36d55b67da63de0ff95262b0137a31f20f564baea50cc938cf78f3f 🔍`
SHA3	`c3f5f9ab524910e39a2674604cf6cbbb607ec1950c7e7eaeb366d993b3fa23f9 🔍`
VirtualSize	`0x2b7ef`
VirtualAddress	`0x23b5000`
SizeOfRawData	`0x2b800`
PointerToRawData	`0x362c00`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_MEM_DISCARDABLE` `IMAGE_SCN_MEM_READ`
Entropy	`5.24167`

Imports

kernel32.dll	`GetProcAddress` `LoadLibraryExW` `WriteFile` `WriteConsoleW` `WerSetFlags` `WerGetFlags` `WaitForMultipleObjects` `WaitForSingleObject` `VirtualQuery` `VirtualFree` `VirtualAlloc` `TlsAlloc` `SwitchToThread` `SuspendThread` `SetWaitableTimer` `SetProcessPriorityBoost` `SetEvent` `SetErrorMode` `SetConsoleCtrlHandler` `RtlVirtualUnwind` `RtlLookupFunctionEntry` `ResumeThread` `RaiseFailFastException` `QueryPerformanceCounter` `PostQueuedCompletionStatus` `LoadLibraryExW` `SetThreadContext` `GetThreadContext` `GetSystemInfo` `GetSystemDirectoryA` `GetStdHandle` `GetQueuedCompletionStatusEx` `GetProcessAffinityMask` `GetProcAddress` `GetErrorMode` `GetEnvironmentStringsW` `GetCurrentThreadId` `GetConsoleMode` `FreeEnvironmentStringsW` `ExitProcess` `DuplicateHandle` `CreateWaitableTimerExW` `CreateThread` `CreateIoCompletionPort` `CreateEventA` `CloseHandle` `AddVectoredExceptionHandler` `AddVectoredContinueHandler`

Delayed Imports

Version Info

TLS Callbacks

Load Configuration

RICH Header

Errors

[*] Warning: Tried to read outside the COFF string table to get the name of section /4!
[*] Warning: Tried to read outside the COFF string table to get the name of section /19!
[*] Warning: Tried to read outside the COFF string table to get the name of section /32!
[*] Warning: Tried to read outside the COFF string table to get the name of section /46!
[*] Warning: Tried to read outside the COFF string table to get the name of section /65!
[*] Warning: Tried to read outside the COFF string table to get the name of section /78!
[*] Warning: Tried to read outside the COFF string table to get the name of section /95!
[*] Warning: Tried to read outside the COFF string table to get the name of section /112!

Leave a comment

💿 Transfer # B3213 from Coinbase. NEXT ->>> graph.org/Bitcoin-Mi 16 hours ago

💿 Transfer # B3213 from Coinbase. NEXT ->>> graph.org/Bitcoin-Mining-08-27?hs=aa468d1febacc0e575f805c91d6d6197&  💿