- EXE / DLL Checksum is different (so it is recompiled). - 0x2515c3F8858052B5978520ff9D0A910a7Ac5C6c2 wallet inside DLL at 00210D18 address (you can check in WinHex). So it is most likely redirecting (stealing) to this wallet.
Beware!
THIS GUY IS THE MAN
LOL so instead of paying claymore we just pay you instead ? lol nice try