Static | ZeroBOX

PE Compile Time

2078-08-27 11:21:34

PE Imphash

f34d5f2d4577ed6d9ceec516c1f5a744

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00002000 0x0000c424 0x0000c600 5.51942779237
.rsrc 0x00010000 0x000005d8 0x00000600 4.1472051264
.reloc 0x00012000 0x0000000c 0x00000200 0.0815394123432

Resources

Name Offset Size Language Sub-language File type
RT_VERSION 0x000100a0 0x0000034c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_MANIFEST 0x000103ec 0x000001ea LANG_NEUTRAL SUBLANG_NEUTRAL XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminators

Imports

Library mscoree.dll:
0x402000 _CorExeMain

!This program cannot be run in DOS mode.
`.rsrc
@.reloc
************
*****
************
*****
v4.0.30319
#Strings
List`1
Func`4
YDqHQvPEA
CONNECTDATA
DdlJLXjSJELfiMfuvJnBHtWIPybTVkSDhA
PWFIxodVUvhDB
PMiCsZLbUmfLWKgPgLoAubfoXCXTcfpeMYuPfeSjDKB
CjhISBnAFEqOTxhlaAOPdWjKIbyiMtHEIxRPueTELdHQB
GANZSGUrTpATSB
MKvZcwmNqLlgIwxenxnyRTeRsgSngqOqsMXGrnXTB
UpHZcyMLMwozFuapZysNazNZTHeiDviIaomTHIvkXUB
SsVBdDMZrvaQgUwUVtKzIGbzyReEqZlZrcB
UhoTJLSQWNrhyYjkB
RZzDonVNwquHxTLGIymoHyTbOyErDsgqYTQNyPRmuIfTrYtB
ZLmhnAdYEoKvNEsFCEgLnZMKLTQqhojAHPJC
XqoXxorKPcDlDEtGTMoRENgVUJKC
EApmPUhVDvEmHsVjQjdPuzVPpOwfMmPNcIXOZKC
ATvfnxdxRYlRjGrHpcrwXkibxgC
TPLbiufArVBhwDCqNnjoQzgKvdlxwbGPrRSzRxlC
GuIoHRiVgbalJsBHJdbmC
UHLYuSqvxIESCzLJboUilZRDaFCRYtoHJzrC
VpgUHIbAGkolelOHdcmPvKEhDRNvACbPBvrZRaDMZhpEyotC
KuqhNabtRiEIaZKNkyptTyZfWbraFD
CUGHAgpvQdYhRMJrsqRkuxyuUdgyfHD
CvgiMEhxLIYiZaeFGTrpvONeUWFvkOQFZUKTSCceMD
BZxHnmXeuISD
BxEcIkYWBWpntwxmUuBFpRzdixjktdNEOioFYiVtvJsQYD
KJpiWpcVXQgFBSYyDlazrUkhFtdpfHznsopGPkD
AOtEZOQnupXWTdJXSsheAFnD
SMtsSLJnXLpzutfwvotYBxefaNHXsyHORhpWQfNIRwD
AWCeSLGhABJyLeNuCGfgQzD
RumKQhPpjXzhGcXjLaQkizDQXlYNzgqciUCE
PFjdSLNUTtjXNQNRbcvfWothcDE
MONjiLTUEoVcmXTAyHjFE
get_VUBDeXdYDiZzGMGMTLYHE
set_VUBDeXdYDiZzGMGMTLYHE
NEpmcHfpDPNRoHTE
ZhCDlMQqiHsjEISNawUmXbVkNzOsuIaMKXQynHrSoFaE
IjMqQwYKskVisKFcYuAEYcahDEXhSjNqaJqAOibMECrVBRWiE
DHybTVDscLJZpE
QxpteHYLUYiSPikaF
MAOebEfpdtYpmXBYnOEWytqSVITzmeYyLoVBRKkGOGkCfF
NHOoIBlouYwXPdqF
YrBkaqUZFOiTxpQvINQcgbDkDYPtVPVkCsPtNkumcXktF
PARAMFLAG
MZuozUWgPswEvBG
UpwbnXgpXRoaEG
JilODuIBsBeqjkqZyiNiqRyDGiTpNGaLFMoxXvOCUcKG
ShIMoLguyMbuvxWfqpfgWNEYVceVsGHeCxymRG
KBaRlUlnSG
ByLvhVPZoAKRnJEAEyCH
ONAzEbQAlJrPItdrsraLkwnAXYwNEH
UqVNdGkceplGH
DrsoUtWedatKwnqGMhxhCJH
EzHsjqwxLH
HpSHbdkLPqDCsXBxulYgqsZjMH
KJNsWqxSIASeActISPnACGWAmKPdbKdqkUpJmETuTMHovoMH
DmiycmidLvaQPIVGQIrZVH
DpznmoLneNLRYgNTemILZjbyjzCSwxMDXijqwopxjH
FmVKefbUHArwejdQezwLuUFioH
ZyEbqaHoGmvJsSzpNqskTIdyjQhjEQsVDtH
VQusWDbjNsTUXWGATlneLqyjGaqbAHsynbYHEkDOJexFaNKI
CAXZqpqrVRQI
SFDAkGRI
IivmSxFkTUdwcnADVgynorfRXShLtFCEADBTI
CSWAlVI
PvnYbEQVYNhJexTQDIbfQwUXeBfYkeBVzQZI
TwWYbTByPVRdGSVmrLxfhUQDTjXTktAsI
QqOhdFigQrNyI
WnpoKmZStZqGSwCJ
YXqxMxDBUgaxorZeNqNAEjNJ
JbhUcNmrbgPfVDylWTLvfjrqHsjMNCDmxCaRCxnBvDryTJ
EraisvjxmPbJ
GgjsiWxpDFEdcjVrmBnAsWrfqxTheJ
OLOlImzgFXbwEZjrvaDoOIofJ
CWDuMguKZQaPBFDEXVWTZXDUZReWhxYlRmhfcnlpehJ
QrfHRbnEATNelMVMXicioVKtJwjWjdlilJ
QStnJlUeyWvRXcqwtalidwuYHuZnyQxJ
ORzsmEK
PIlvRSyIRCWCDFGqkCEtKgTEVoyxuDbuFyFrEK
UQKjbrqFlXKVfVIuZCXJkDsXjeHRxKQnaQDOK
YJxqZJQOrLBSaVxXBbnwcpPKyoPlrVgCBCoeAwOK
WyMdWQdsNrvwICNUacsHUrVK
OYxymjaXUcXhiuhujGXaFYK
ShNkPeKzoWhFHZK
VUeAqKpVidcrOgNJkjHlisCSvpFiZmBobXBypUwHoekZK
IhEJGLaFiZPXCAgpfQnToPYBDjyJUFOPRaK
GFMHcnK
QOonqagXnZWMFSTAKFaRYyK
RQKlaXoFIgxYFDARECWlPCoeIwZsJPhzuLEIMIvzmEL
EcNYGfQlLetmXL
NlIejxKfozndFGwuQxyxtHhsFjDoCdL
XFRmZNadVApLMFeCsQWDakxZUhXgiL
PCDADMGgoMmLbhfNOpjPszmekL
LiNfuhGPZwpfoONWMcrYcftFWAKrZDNBomHMsCzsiJkDJM
HOiqICXkUNQxUudPrdVgvqCTRSxGBlmbmNHADSPnjcwxZaNM
PqChUcWCWM
PcSZOWaZXqKcSeWJzrKHqUlXQMpZhfilzchLMRDqoM
DSHlBpPYcGpzldpapNXyRqcTuzmtTgrWsjzKaLRYaDN
SGCXpgYwhvJwnJxvPdRN
HrXHmogTN
BZUWKbGLkQhSogN
EUjubnN
SFXuwvUHnqYWZcJivWKWmOdYKDogMhtN
System.IO
NglotgyOdOiuIqYobYDCIXsnPCQwVIpVaOjGrIO
IxGOrZXtbQiJjAEGaWCDxuHtMIObUAaDKoJoEXqXbUO
JXjIyKrkSIJOkO
LsjHOAFsGWyhPJmxrgnbTbgkOvBoMOAWyjuMP
UFadjyJUOQczIdwCpCeDuTjtErkLFpSJNJgZegP
GwuBTnPzQIaoHcoP
QjwyrJLKYrP
VTOUVWkAGawseGKZmYrfzacVDvP
ClLjKbUugiRaOZvKOTFXdEYmyDVyeZnksMyP
RNMsODpkDUFrmcFgfwCULBQ
TOTXksQVzqCOWCFQ
CEiZqScBCaeIPISqxBjVJTNFjbQcHxZMzthgRQ
FpAHLFzbulSVfauTnDIiVJAQNgOIlOxOjJltkQ
VwAjtitBZpGlpCNlQ
GbexmAYFOHzQ
TxDVHlOJfNfzBcTfyzKSjcgxnrLClagBQNR
PKZrxQayapHmnxgJfSULmrvclyhIsjazdthkVcmJIhbjR
SgzCyGkmR
TJiPMnfRpqVwkZLlQGbsYdXiWIapWFZfUEYJmUvxmR
QZfpxydBfgxRKuIvmtqR
EYEgEkVQonMRKVGZtR
UXHPkTKoJosoSLAtBWVTqugRAS
TpUcSXlrDmsCiIbAnmDtfDlCpBGPUVJEHhFJS
TDHJyGjZCRSxYrKaruIxnAgLkDWUZS
RdtSGilqbhzuelmwxJxlnlrulQHOdskwKWaXeS
LTeZESyBVYSvhOzBmQqmGzDSskdxEDwFPWeCfNyS
MtYxsKPMaZdcsSpWyS
VIwtsjTYdFWVuyHdlDAT
HWXYdbCSDT
CLXqnrMqogUyZDAhPT
ZHCdxcDAbEMiRpXUeDIyvqvfkcHFpRT
BlfgUaqjST
AMCMqYkqWmjyQHTrUOnNRgOKwUwTzcT
ZZqCzHcsjdgHDLAKupyUJbcDiTIYLyBJDGeT
XDwkGbHcAxTMNBJkfVuiJlvnldwjT
CuQAkzHmRCIoSGhkpnozVNHMdvlT
WKwifGKTvAckoYrcuHgdxlGVcOFpNEvGdPlzT
QCHTQASgRVrCPdjTgKU
ZtAcGQOmsaqopkOPVGToLwTiVLzMeouKSU
BWejhHvZktJqCbpaZLHdfHrU
MaZvhGQjYDlFUwRtU
JnGBWyxU
AZDZEtcCxzU
HoWJCJPDzXcZkDxmpxdDHmYZNIGfFHFV
UItzJPTPMziFVIYGtRdVxJmcmRjVdiEYGclAhiFV
NlcjtmtctCRPNV
ZQzTFBlwZdMFAXPwTOJfTV
HzEBuLlyKDajAzXLNSsrBUbNLIeaWLhbSyGvuMDXopEbV
KiGFyMLgwrgWXbTMGjTfOaZPoOiV
CwZSUyYbGvsylrPMXxVAHFzHStAsfcYraqiqzWyWJYgoErmV
OUMLCSkaduGtYuqSNPaGykhDUnV
UNwmTfIAPLqIFNcUeOwkpluwavUetFtlbnjHCORBeBfBnjuV
RMDZetuomPQALAKOTBPwPVwzbLZBfSGnyHSegdEW
YewRYIzqARQorvbyPOnpHginaPFKWbW
AglIvdqvBnGkJXvzryLPncxOsvuzHkBesJbYBQwxBQZhYHX
DtMRgAeKuYwQnLiuJdNVxQhwfYLKIX
HTZPmudjnfUmJX
UtDOvINPaYKuzUkXKfzZCvtKNQqfkNX
VovPFMgrXkgMfhrjItbirnjHLhiZCFySHBFqXWX
KmVhmeAsONRhAXBXZUyfX
LKfcwdQeyeoUDUptNHmdnlnjDjX
MQNWkohmisNBPIMYotqdkX
XCgKwShpMgGFiGptJcgtjyalLyZMiXGesrqcMkzoaZvDGicuX
PrtzfpAfymuyWdrWZXDJFSeCY
UEdJNVhSigtyACmEkfUgdnUQVCUnEY
HfqaJopoXjblBsKWRsgsjgQcImqgEqZbZzbOkPhGxHTY
XfBXMbExmarSKhURlRePICXmGHwrYXYCfATjJTJdIaY
EokUoGMKyprOohQHtPjBHRxhwuwvkFavTCeY
HXHeaHtVcglTjJfepMDogRMwCvoJPiBqFKlKAnrY
BjZtAbnCtmuSIVKHaIrZVMsY
DADWpfvPfowBlXYrCuhYZ
STgrOjBFBAPqwSYnryZVXhSGaTZtaiwzkPkzaZ
MrcrqHhRCgBTQTaiRICiqoGzqhIrciQgXbIRpNBvEFByuwZ
FeUDgeMmfmBtQXxCTGiytiCIGiMkSYoBrufZvHNQhdEa
NAUQrHfnuAPNmcxyQa
EgENGEhohdHsYzPGCexsyHbqptgpvclpaSGCzmpha
SFUQKAXwWsa
System.Text.Encodings.Web
mscorlib
KlpPIqaExIjb
KgujIXVqtrFSjOklhujvcMmOyrXqKuHgUSqxODTopb
CwRygmTrqpECFgFPVNDyvdfIykJPyFIxb
WjnwUhPdNvzb
ZMnXStCaguLNbPmqbkYxCdCWYrOXZFcREdCqRPKMTuvyBc
LThCDqKECTLUbKPncdfhievoBPRfnZBEDc
TqxmlgsenZrxXJsGc
MzmDhHduWSNCpsEOPFgAQjgotUgHTAPzjZYRnfogWcISc
CJQmGkcSfWRYZJnKqlPOdjLNiIbfkfHVc
NAxFKyAIbZNBOkqunETVghohJmOkbmFDhfXc
MjcVUiac
HbLAonLIStgSwIZFMZGPBxmIWdKholztEFdlzQfXfYWKlrac
System.Collections.Generic
Microsoft.VisualBasic
LBpCOKmwNmc
LHUiRCQoc
VDGrHanIbiovNZrDCMKsGJlejZYNvOFUqkOobfUxLZHxc
Synchronized
DzGHOYKQYPQKMJgd
GetMethod
YbvJmxd
WlfcKWAsUIPUaqYIhtAuBe
GmiJDjKndDXkuousUAcpQEtagMNeBCHQNmxDPohPe
EzOAgXPoniuwmzMQKEgzYozYtLZWxyjvpYUe
HwJGLqsyQBbhrnlnLEyPirzxmzKFyjgtezuhWUcUMxZvDZe
SQyVKGpNJuRbe
Replace
System.Diagnostics.TraceSource
QgLbKxkSQTKNwvsKpuLOKwlIEIkJoUMlzidnTsBDdrRIede
System.Text.Unicode
UnicodeRange
RoALwKmPWRhe
Cookie
Invoke
IDisposable
RuntimeTypeHandle
GetTypeFromHandle
IObjectHandle
IsVolatile
AsyncMethodBuilderCore
Capture
ApplicationSettingsBase
Dispose
Create
CreateDelegate
CompilerGeneratedAttribute
GeneratedCodeAttribute
DebuggerNonUserCodeAttribute
DefaultSettingValueAttribute
UserScopedSettingAttribute
WriteByte
ToByte
get_Value
OLOlImzgFXbwEZjrvaDoOIofJ.exe
YInCmvtVwITiJlBGrqOwUf
AIAMpXVklOAOzSKsEqYmyKgf
TKPghfRCqIScZANopOStcPXpyBJHORnjkLXQqVHDZjhf
FXvKYJBVRBbPCfCvzIZwovylrzhUTkvMnif
GadAynETDiycmf
EazsvQnxuDQLkyRZIGcOeXbAtFEmUFkEghcDOCwTiyzpOnimf
YTqiKvniUvUmwCxGuf
UZBwIJUnNQOXgKeLTqsYgNMDPOJbJMPvmgRxf
UrOBNufOFeg
EdtRXdWzgVapFipitqSpGsYvoPuSMZszhgwnjyoig
NAhnQdtLikg
UUOIAVTcbVfjpHzuKzxRDkQYDayhHhqWVHfOxtmg
System.Threading
NewLateBinding
DownloadString
ToString
GetString
System.Runtime.Remoting
KvQAKVKRGeXHilqPZMCgxBtg
ZJKNZSVrPrzcihbfAftnxZqzOGmpTvZXwbophznbxg
RxJeDcuFPXHjqlBcMoDFyEh
XMvQNQxVhqIOQECKh
GJwTFYPh
WyAtILgmhrUbQmdhEQh
BooleanSwitch
NQxEIYRLfyfNXVCAseZWCHgtTOIAthsatgNQqungh
DCgVWIMGiFqshPziYzwrsJIyWIdlngYUauvcMctKjh
OisGQUylvDLeuvpeXtuMhXjncVPuMRShoh
DoXZPzLucHCwPqgfZnpoEknQPbekgqScAqh
get_Length
RgbmIVTpiEhRi
WREbkYIDAGxHcFOlUVnWeVhKLDFbVi
ImiYlJrnNtqScBHmai
YicnkchMBayqiKgEDQiJrokRwfnykENRJMthHEoci
MmvaXuIiothBvWiNHPtwdlwZlbYjgCuiZpeBAj
ZRuzJlcMbYoXFj
DZrqLmstOIlYXuvMQPTQwgj
ERhkpghxrpYoXgZIsgQpij
VSkxRBcAxFjLkGnVTgLaKVKipIagtmaFvJwVokFlspqknj
DxgeRZjWOXYSYGQsBHDAEZrj
WSQJRGfkJWBk
TMWcSRtONtYKiUDk
CDyvBJBGk
ZEWZyoCmolvuHglyCimMUnUPWEyRAmcbogOqWuLIk
KkxewiKJyVAFdbJaQHhnZbjpQauKsUsNUKuaPLyhplFvJVJk
EOExYDzpfTUNPiKEbliTEXsOsMoeECamLwXuMPk
BQnrVmcuMObmSCREOvmsUiKWnsHeEHtAmLDmGsQk
get_ScNrDaUk
BxeuSDmbNbmhCAUiEXPNQdyUk
CBXYRimDbdWk
GCyNnNTcJEyGuyzSRxCMSCailwSuvYlkKgGtCJgk
AxeSdVewQdXYEcIdQcxMHeFGYLsaSNflk
JnjFLqk
PresentationFramework
GXIfDHiWYxXADkPFAFDqoBYaIQSuApEvitPTvmjJiyk
KTgOUfXkHJjcfwFxZtFcGl
TNXDxHl
NwsztGQloyPeqJBPkgNvoOkgTl
OWoZXqjKOgfQkKVXl
ToQijHyxURuASUFzXguDRyodGmYPUvgetIDfrcnkifl
FpxicxiIpFvRYkKnHDbFRwaWcWuSlJmhqil
LateCall
IGtAnbRLyERhWfHQoKnsl
JTvsrowalgVXVSmFm
RdEoapURoryVyLZJm
MemoryStream
DlSdfIRIKWDfOdsgvPem
get_Item
set_Item
System
LhEbJhiFMlzQRiwhSrapCjm
QNGpWrsCiXelnQUpZVdqkAMlFExZOnm
CEiZlKCnGkjpMvaJbjNOUwodnm
IoyQPgOnhmUwhEacum
KrQcbjxzGfgQeigknYTQwDINZWUawVym
GYAThIoIYUOtCSgunyYjHZbxQqEazXfqrFawAn
WJEDcaQRuHn
WqtmqpwpnYBVLn
XvxcYyJKlNaMwftrUSHyAQzPGEgAQn
NPiEXsFslMVn
Boolean
Conversion
System.Configuration
System.Globalization
System.Reflection
CookieCollection
MatchCollection
GroupCollection
WebHeaderCollection
ZoneMembershipCondition
MissingManifestResourceException
InvalidComObjectException
StringComparison
LeSdRMxKFLJpUJigQivlHIfoVSnQXZYQEWbDrPzpn
SBUgMKmdkOrhYRStun
SPGOdLwPbIxn
GfwayScmFhTSygixFHQigaLBo
RmJNOnUwVpsUJQWDjWBAmLzQJBEixLgqvzqtKMzOXo
MethodInfo
HVNFnZckJQnKNJLTPebyLBgviJDBEFBqKYkZyMxycWlapjwo
OKtIgUHneaiRuoQbOFlpxo
YJPUAfZkErgBhqjutjRBp
AUfasjvBLyGHTyHFPzTeZNGStaSyYpoaGmwgiWNgCp
ZJhPpQjGbXdVLSywZJvVzsyhvefmWfMikKYrhsmbGebQeICEp
ArAvMjZLakvQoHlXkhETcTtvhPOxSbYsMWSCMwjedEp
WKuSXyRKxZhbijBWhkEDqBjsHIAzHuEAUfLp
AxBvMWGJjmsuKAEAWbyLQjOwTp
PVvWFGaOAJkXvqrp
GfYykCkEVngNxPIUBQRVNWRiwCpUxqXgLxp
DPamigpiCAHKUWIGnjFBWLHxRayp
EeWjmuGEBMmZyBIq
KQjTUehXrQq
DmnmHsq
KYsFGyWVzeMfMPtFgmZTbqtrfncAemHr
GyUvewsrkMIpWipatZRkUQHnhXPyCGRLr
XMKsyGqOrtzsnFxCjhoCqTQrMRCNr
OJquzNFuQNKzOxkfRkyghQlGKnaEIuIrhTECHruZr
ToChar
EwmMwZRqiAptGvyzAgeqNhefLkqWwTrKlOmOFeNcr
System.Resources.ResourceManager
System.CodeDom.Compiler
GlaJZatjpsJjrxyOgaUkEOtPAZgQqKFuUMSHcDGgzJjOznojr
TESfHoqDAgtBQnJXOuKxKLKZoPaoBjwWgGJUDOUQRyfaor
IEnumerator
GetEnumerator
ApplicationTrustEnumerator
.cctor
AMLNvoxr
OjvphcQtqNpeAs
EJpUwzkpDmGyLmFqzkLBuSsmuklMIbs
JNceqClKkjAasOxTAUlwVtvXxzBXgJpMVhcBhDLjnHxLDNcs
System.Diagnostics
HADtfreDEXPfvBagYFrhdvhkrBds
System.Runtime.InteropServices
Microsoft.VisualBasic.CompilerServices
System.Runtime.CompilerServices
System.Resources
Matches
DigitShapes
System.Runtime.InteropServices.ComTypes
System.Windows.Controls.Primitives
System.Net.Primitives
BindingFlags
ZJgauHVXYVIHJpclaEFmFsmRjUpIsotyIqOaYxks
POWIiTmxJGZwZQceOlWMkZqvGwUls
Equals
Contains
System.Text.RegularExpressions
System.Collections
get_Groups
get_Chars
get_Headers
HSLXVdHNGhVigWiumVzOGNHerkBgsRsHZCGDZlCZldkts
ZrTyROCdiGFEWUubzUFxrDodus
UnrRQUkHJSfRlHKkPpFICKEzXMmys
FliWyjtnOarKIiuBt
CIwxPXkmysEKCLwuHFBuaCZPvpysiTbEzCt
DdXoPubenkRcuEbTiDRwFMBWhxhQRCFsnlnBwLqrLanrPOt
AposxYjKHkZlbrVLbkzVBnSHrxOsklwUt
Concat
FpkGBwdkoEQEiat
Format
Object
LateGet
System.Net
AxcdTbLejWYWmapbkUIvWQoCdAmokIcMzrHUdNvhxQhYPht
WebClient
get_Current
Convert
QzSoVUMdSgVLOJdFwt
SQvhEfdlLYEeijohAQpzGseKwLpNexOdwt
MoveNext
YCXSnsVoibdaCWYvqlWuGsNSWJTJspIUtFIOXckHeOAu
ZkjHDXCu
NCmzRKAgPRCWyGyBGbHgpCu
AYFWDwayUjymbYZRJzkcAgEAzhiHztLu
DvYZEzqwNjnzVhorfEnzobPNjoKisibgIEuQIHSRIBlsSbXbu
EnrQnMhoNFvFYHwMPOvITBsku
MFAYLeonaiLhmZnTqKSPoebJRWIboZDVlnmgLHFv
DnDcnsuPpFqYorlFTCtBhPtjfjouwEjdIHEehLaKTHv
OvLCSIcskqRlaeHMUmgBdEhHZVxIeQYXLYPQhAmaOqzGfseJv
TGSHNTUHFhnuCUoqIatWnAIgXv
YzXmZjzqhtdkNDuXfabFhkCxmfFtCYTwthXv
QWzMhYHYlIKhvrHqBbv
RzXSLdreOFmCwslrOxCTdrRKaiv
QkgURAnIUiVJNAdEudnv
AzVxKIoXmNufNkSIdDfjFnwHaZjRzv
JOlrkRjMTHqtojTQBINlYCw
SNJrhBUHqtsHgJHw
HmHmiXzDSHgRDFsYjgCyDBZILDtw
VCOlmVLOsUYjsZJmLsbEoLqeQBosioXNyw
LrJIZpjXlKYBTkaNDxiLykiRnLyhjFyIeFlSBLdyvRXEHx
UeQdCfympgNYxhaFuknhildesPJkOYAPx
YimStJpHnEkQx
WqbHVeMJoFaLJStorUAmeUejfdAYncnfDYVgWJPVFLtSx
DRbnfHnGNzCBEbWEWlSQxdDeldSex
NvkTWxQuUix
KoxkrdTjpJXUMSEMFXzFgwRbpx
AWGeDKy
ZqBcbiWSckCkKSy
TaQqKRkiZTCSEMopFRMDtNLVFqnLXy
ToArray
System.Security.Policy
OLXCSUCylVzOoaEWcapZGNvESZdtogDiGCgIZfvDz
RXzpJGzklQogtAIHGsYVPhYOpzwdtXjdisdOEz
CtaOmArJIUMdufRrNAiAeSGxtpuqHcMBWTMLtYkGIz
LuFRQKz
RGDaemlKDABhHrLOncowKyxRPRPfuwSz
QnWkrYBFEbAsUiXmWz
KmdeZBUDmoNrASeBlAhPKXvjOZGQncNafVoHBwmUfz
BGfiHepMQFKdypPXLDSrwMBajcdkSCOCTQRsdUirz
KMicrosoft.VisualStudio.Editors.SettingsDesigner.SettingsSingleFileGenerator
16.6.0.0
_CorExeMain
mscoree.dll
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
<assemblyIdentity version="1.0.0.0" name="MyApplication.app"/>
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v2">
<security>
<requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3">
<requestedExecutionLevel level="asInvoker" uiAccess="false"/>
</requestedPrivileges>
</security>
</trustInfo>
</assembly>
vsRmhYiBMnCJyWOzn1*0(
!cRsryXmseQiOFAIthUzUqQpODoSMcEKVw1
BfVAUXuFTdhaNgMU10
qbpFWlCENjfzpzgn1
rduNSmXeoxMhNQifSMnI1&0$
GRFTsVgNpgEDbNvcrhxedkqyzvRXb1,0*
#ZGDlyHAyBuXgkOiTigaufOLojEvAguXejMq110/
(zarDgVEQMAXTwiFqpQCWlVocTlZrgwTWyISQCUyB0
210401083234Z
220401083234Z0
vsRmhYiBMnCJyWOzn1*0(
!cRsryXmseQiOFAIthUzUqQpODoSMcEKVw1
BfVAUXuFTdhaNgMU10
qbpFWlCENjfzpzgn1
rduNSmXeoxMhNQifSMnI1&0$
GRFTsVgNpgEDbNvcrhxedkqyzvRXb1,0*
#ZGDlyHAyBuXgkOiTigaufOLojEvAguXejMq110/
(zarDgVEQMAXTwiFqpQCWlVocTlZrgwTWyISQCUyB0
vsRmhYiBMnCJyWOzn1*0(
!cRsryXmseQiOFAIthUzUqQpODoSMcEKVw1
BfVAUXuFTdhaNgMU10
qbpFWlCENjfzpzgn1
rduNSmXeoxMhNQifSMnI1&0$
GRFTsVgNpgEDbNvcrhxedkqyzvRXb1,0*
#ZGDlyHAyBuXgkOiTigaufOLojEvAguXejMq110/
(zarDgVEQMAXTwiFqpQCWlVocTlZrgwTWyISQCUyB
20210401083235Z
DigiCert Inc1
www.digicert.com110/
(DigiCert SHA2 Assured ID Timestamping CA0
210101000000Z
310106000000Z0H1
DigiCert, Inc.1 0
DigiCert Timestamp 20210
http://www.digicert.com/CPS0
,http://crl3.digicert.com/sha2-assured-ts.crl02
,http://crl4.digicert.com/sha2-assured-ts.crl0
http://ocsp.digicert.com0O
Chttp://cacerts.digicert.com/DigiCertSHA2AssuredIDTimestampingCA.crt0
QJxy6z'
dwc_#Ri
DigiCert Inc1
www.digicert.com1$0"
DigiCert Assured ID Root CA0
160107120000Z
310107120000Z0r1
DigiCert Inc1
www.digicert.com110/
(DigiCert SHA2 Assured ID Timestamping CA0
fnVa')
http://ocsp.digicert.com0C
7http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0
4http://crl4.digicert.com/DigiCertAssuredIDRootCA.crl0:
4http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0P
https://www.digicert.com/CPS0
8aMbF$
V3"/"6
DigiCert Inc1
www.digicert.com110/
(DigiCert SHA2 Assured ID Timestamping CA
210401083235Z0+
SihnxGUYDRQRFtIsPsHwWXULMisiQhVts
SIMsFGFhcokoOZEbPifGfYoBow
YiYPDhGYEApkz
RyDXnzVvGXIYRLcGjavHGLEe
FphMvSku
MWzbEFuRWNOpKFJsaAfPAHSqwdrfyfXsKkTzMAWM
NsyHxcUHRqSxNcEhViQ
CFMHCKMLnYjiftilDXQMfmEnoHzrBedyWMsIFKW
ZUmxuzDP
AJvhXjnhbAlSvHzDAhzTxApMLuSRMdtKFJXBDgliFQ
MotEFHWP
DpFNvjTyNEZKfFScMhNKqoEVUMaQmCTy
MZJyCpINiNZkZXCByqHrcsdUEsNBKCsDo
lRVqTawhUt
{0}{1}{2}{3}{4}{5}{6}{7}{8}{9}{10}{11}{12}{13}{14}{15}{16}{17}{18}{19}{20}{21}{22}{23}{24}{25}{26}{27}{28}{29}{30}{31}{32}{33}{34}{35}{36}{37}{38}{39}{40}{41}{42}{43}{44}{45}{46}{47}{48}{49}{50}{51}{52}{53}{54}{55}{56}{57}{58}{59}{60}{61}{62}{63}{64}{65}{66}{67}{68}{69}{70}{71}{72}{73}{74}{75}{76}{77}{78}{79}{80}{81}{82}{83}{84}{85}{86}{87}{88}{89}{90}{91}{92}{93}{94}{95}{96}{97}{98}{99}{100}{101}{102}{103}{104}{105}{106}{107}{108}{109}{110}{111}{112}{113}{114}{115}{116}{117}{118}{119}{120}{121}{122}{123}{124}{125}{126}{127}{128}{129}{130}{131}
UserAgent: RXAXpLbOujlnBBqKPYLsuDdotLxagWCPIwdhTYvPafiyBXeSqhYrXuxJWZMozilla/5.0 (X11;RXAXpLbOujlnBBqKPYLsuDdotLxagWCPIwdhTYvPafiyBXeSqhYrXuxJWZ Linux x86RXAXpLbOujlnBBqKPYLsuDdotLxagWCPIwdhTYvPafiyBXeSqhYrXuxJWZ_64) RXAXpLbOujlnBBqKPYLsuDdotLxagWCPIwdhTYvPafiyBXeSqhYrXuxJWZAppleWebKit/537RXAXpLbOujlnBBqKPYLsuDdotLxagWCPIwdhTYvPafiyBXeSqhYrXuxJWZ.36 (RXAXpLbOujlnBBqKPYLsuDdotLxagWCPIwdhTYvPafiyBXeSqhYrXuxJWZKHTML, lRXAXpLbOujlnBBqKPYLsuDdotLxagWCPIwdhTYvPafiyBXeSqhYrXuxJWZike RXAXpLbOujlnBBqKPYLsuDdotLxagWCPIwdhTYvPafiyBXeSqhYrXuxJWZGecko) ChromeRXAXpLbOujlnBBqKPYLsuDdotLxagWCPIwdhTYvPafiyBXeSqhYrXuxJWZ/51.RXAXpLbOujlnBBqKPYLsuDdotLxagWCPIwdhTYvPafiyBXeSqhYrXuxJWZ0.2704.RXAXpLbOujlnBBqKPYLsuDdotLxagWCPIwdhTYvPafiyBXeSqhYrXuxJWZ106 SafRXAXpLbOujlnBBqKPYLsuDdotLxagWCPIwdhTYvPafiyBXeSqhYrXuxJWZari/537RXAXpLbOujlnBBqKPYLsuDdotLxagWCPIwdhTYvPafiyBXeSqhYrXuxJWZ.36 OPR/RXAXpLbOujlnBBqKPYLsuDdotLxagWCPIwdhTYvPafiyBXeSqhYrXuxJWZ38.0.RXAXpLbOujlnBBqKPYLsuDdotLxagWCPIwdhTYvPafiyBXeSqhYrXuxJWZ2220.41RXAXpLbOujlnBBqKPYLsu
RXAXpLbOujlnBBqKPYLsuDdotLxagWCPIwdhTYvPafiyBXeSqhYrXuxJWZ
RXAXpLbOujlnBBqKPYLsuDdotLxagWCPIwdhTYvPafiyBXeSqhYrXuxJWZBrRXAXpLbOujlnBBqKPYLsuDdotLxagWCPIwdhTYvPafiyBXeSqhYrXuxJWZeRXAXpLbOujlnBBqKPYLsuDdotLxagWCPIwdhTYvPafiyBXeSqhYrXuxJWZwRXAXpLbOujlnBBqKPYLsuDdotLxagWCPIwdhTYvPafiyBXeSqhYrXuxJWZsRXAXpLbOujlnBBqKPYLsuDdotLxagWCPIwdhTYvPafiyBXeSqhYrXuxJWZteRXAXpLbOujlnBBqKPYLsuDdotLxagWCPIwdhTYvPafiyBXeSqhYrXuxJWZr
{0}{1}{2}{3}{4}{5}{6}{7}{8}{9}{10}{11}{12}{13}{14}{15}{16}{17}{18}{19}{20}{21}{22}{23}{24}{25}{26}{27}{28}{29}{30}{31}{32}{33}{34}{35}{36}{37}{38}{39}{40}{41}{42}{43}{44}{45}{46}{47}{48}{49}{50}{51}{52}{53}{54}{55}{56}{57}{58}{59}{60}{61}{62}{63}{64}{65}{66}{67}{68}{69}{70}{71}{72}{73}{74}{75}{76}{77}{78}{79}{80}{81}{82}{83}{84}{85}{86}{87}{88}{89}{90}{91}{92}{93}{94}{95}{96}{97}{98}{99}{100}{101}{102}{103}{104}{105}{106}{107}{108}{109}{110}{111}{112}{113}{114}{115}{116}{117}{118}{119}{120}{121}{122}{123}{124}{125}{126}{127}{128}{129}{130}{131}{132}{133}{134}{135}{136}{137}{138}{139}{140}{141}{142}{143}{144}{145}{146}{147}{148}{149}{150}{151}{152}{153}{154}{155}{156}{157}{158}{159}{160}{161}{162}{163}{164}{165}{166}{167}{168}{169}{170}{171}{172}{173}{174}{175}{176}{177}{178}{179}{180}{181}{182}{183}{184}{185}{186}{187}{188}{189}{190}{191}{192}{193}{194}{195}{196}{197}{198}{199}{200}{201}{202}{203}{204}{205}{206}{207}{208}{209}{210}{211}{212}{213}{214}{215}{216}{217}{218}{219}{220}{221}{222}{223}{224}{225}{226
RXAXpLbOujlnBBqKPYLsuDdotLxagWCPIwdhTYvPafiyBXeSqhYrXuxJWZwwRXAXpLbOujlnBBqKPYLsuDdotLxagWCPIwdhTYvPafiyBXeSqhYrXuxJWZw
RXAXpLbOujlnBBqKPYLsuDdotLxagWCPIwdhTYvPafiyBXeSqhYrXuxJWZGRXAXpLbOujlnBBqKPYLsuDdotLxagWCPIwdhTYvPafiyBXeSqhYrXuxJWZeRXAXpLbOujlnBBqKPYLsuDdotLxagWCPIwdhTYvPafiyBXeSqhYrXuxJWZtRXAXpLbOujlnBBqKPYLsuDdotLxagWCPIwdhTYvPafiyBXeSqhYrXuxJWZTRXAXpLbOujlnBBqKPYLsuDdotLxagWCPIwdhTYvPafiyBXeSqhYrXuxJWZyRXAXpLbOujlnBBqKPYLsuDdotLxagWCPIwdhTYvPafiyBXeSqhYrXuxJWZpRXAXpLbOujlnBBqKPYLsuDdotLxagWCPIwdhTYvPafiyBXeSqhYrXuxJWZeRXAXpLbOujlnBBqKPYLsuDdotLxagWCPIwdhTYvPafiyBXeSqhYrXuxJWZ
RXAXpLbOujlnBBqKPYLsuDdotLxagWCPIwdhTYvPafiyBXeSqhYrXuxJWZAsseRXAXpLbOujlnBBqKPYLsuDdotLxagWCPIwdhTYvPafiyBXeSqhYrXuxJWZmblyRXAXpLbOujlnBBqKPYLsuDdotLxagWCPIwdhTYvPafiyBXeSqhYrXuxJWZ
LoRXAXpLbOujlnBBqKPYLsuDdotLxagWCPIwdhTYvPafiyBXeSqhYrXuxJWZad
RXAXpLbOujlnBBqKPYLsuDdotLxagWCPIwdhTYvPafiyBXeSqhYrXuxJWZEntRXAXpLbOujlnBBqKPYLsuDdotLxagWCPIwdhTYvPafiyBXeSqhYrXuxJWZryPRXAXpLbOujlnBBqKPYLsuDdotLxagWCPIwdhTYvPafiyBXeSqhYrXuxJWZointRXAXpLbOujlnBBqKPYLsuDdotLxagWCPIwdhTYvPafiyBXeSqhYrXuxJWZ
RXAXpLbOujlnBBqKPYLsuDdotLxagWCPIwdhTYvPafiyBXeSqhYrXuxJWZInvRXAXpLbOujlnBBqKPYLsuDdotLxagWCPIwdhTYvPafiyBXeSqhYrXuxJWZokeRXAXpLbOujlnBBqKPYLsuDdotLxagWCPIwdhTYvPafiyBXeSqhYrXuxJWZ
VUBDeXdYDiZzGMGMTLYHE
VS_VERSION_INFO
VarFileInfo
Translation
StringFileInfo
000004b0
Comments
CompanyName
FileDescription
GreenIrishTweed
FileVersion
1.0.0.0
InternalName
GreenIrishTweed.exe
LegalCopyright
Copyright
2021
LegalTrademarks
OriginalFilename
GreenIrishTweed.exe
ProductName
GreenIrishTweed
ProductVersion
1.0.0.0
Assembly Version
1.0.0.0
Antivirus Signature
Bkav Clean
Elastic Clean
DrWeb Trojan.DownloaderNET.151
MicroWorld-eScan Gen:Variant.Bulz.413992
FireEye Gen:Variant.Bulz.413992
CAT-QuickHeal Clean
Qihoo-360 Clean
ALYac Clean
Cylance Clean
VIPRE Clean
Sangfor Trojan.Win32.Save.a
K7AntiVirus Clean
BitDefender Gen:Variant.Bulz.413992
K7GW Clean
CrowdStrike Clean
BitDefenderTheta Gen:NN.ZemsilCO.34662.dm1@ayNDxbd
Cyren W32/MSIL_Kryptik.DNB.gen!Eldorado
Symantec Clean
ESET-NOD32 a variant of MSIL/TrojanDownloader.Agent.HRD
Zoner Clean
TrendMicro-HouseCall Clean
Avast Win32:Malware-gen
ClamAV Clean
Kaspersky UDS:DangerousObject.Multi.Generic
Alibaba Clean
NANO-Antivirus Clean
ViRobot Clean
AegisLab Clean
Tencent Clean
Ad-Aware Gen:Variant.Bulz.413992
Sophos Clean
Comodo Clean
F-Secure Clean
Baidu Clean
Zillya Clean
TrendMicro Clean
McAfee-GW-Edition Artemis!Trojan
SentinelOne Clean
CMC Clean
Emsisoft Gen:Variant.Bulz.413992 (B)
Ikarus Trojan-Downloader.MSIL.Agent
GData Gen:Variant.Bulz.413992
Jiangmin Clean
Webroot Clean
Avira Clean
Antiy-AVL Clean
Kingsoft Clean
Gridinsoft Clean
Arcabit Trojan.Bulz.D65128
SUPERAntiSpyware Clean
ZoneAlarm Clean
Microsoft Trojan:Win32/AgentTesla!ml
Cynet Clean
AhnLab-V3 Trojan/Win.Kryptik.C4399405
Acronis Clean
McAfee Artemis!A50A813F19EC
MAX malware (ai score=88)
VBA32 Clean
Malwarebytes Clean
Panda Clean
APEX Malicious
Rising Clean
Yandex Clean
TACHYON Clean
eGambit Unsafe.AI_Score_90%
Fortinet MSIL/Kryptik.DNK!tr.dldr
AVG Win32:Malware-gen
Cybereason malicious.31348f
Paloalto Clean
MaxSecure Clean
No IRMA results available.