Static | ZeroBOX

PE Compile Time

2021-01-10 05:31:09

PE Imphash

f34d5f2d4577ed6d9ceec516c1f5a744

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00002000 0x00056094 0x00056200 7.63522560378
.rsrc 0x0005a000 0x000005b8 0x00000600 4.08472301815
.reloc 0x0005c000 0x0000000c 0x00000200 0.101910425663

Resources

Name Offset Size Language Sub-language File type
RT_VERSION 0x0005a0a0 0x0000032c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_MANIFEST 0x0005a3cc 0x000001ea LANG_NEUTRAL SUBLANG_NEUTRAL XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminators

Imports

Library mscoree.dll:
0x402000 _CorExeMain

!This program cannot be run in DOS mode.
`.rsrc
@.reloc
I`aXY
>Z %Whya8&
EBH%&+
fY jyYDY%
\fa }P
@fY =@
K`eXY
W7XY X
YZYfY%
J);Z ;
APuZa8a
Z >^Mva+
K/5W+
#+Aa8l
lSystem.Resources.ResourceReader, mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP+
x;bn$TOGE
*@p$\BP
N2}HX#9
vK&Ast
`U}.D
|nlLb1
I"|G>6
MyYa7y
&4Rlp{+
+u:-=qE:
Uw$I[\Y
7F0$!b
l'e<b-
poofHs.
`4Jf$n
#2'bwT\
Vk"|D00X
Es4{LS
|'VyW9m
G825/I
JzIwd"
ur{q@3
0T4(G
Q"T;>B
mu9K6x
lD[YZmO
8pP:x[
]&tH-y
b?$b,s
0QjT[%
_;z;|F
4a5ar[
Gp6PQ_
?wc5-9
FB7+JJhI
|-}y8e(#l
z7 6"i
d(w,._L
|&qa-2H
KYpW}z
vL/!a_
UAbWln
FykPq*
oz_wGM
E`h*U
Z5#F3w
{>BhZyf
HdczBY
<Mh5(yj6"
8l<$f4
/71;[Ux
]=!dE&
P.mJ}X
J&=T0Ou
t(~h,wD
0_^9+8
n6/j]/
s}(/:eQ
uS5pOM*
xH4Hj8
t9m{>F
5usSviVn;n
ZD]-W}$
yhflY5
gQ77OR
xaw6Ue
Wtf5F+
=gaa]|
/3ucqO
P;N"|5.
6H{V=5
L:EO]| o
zQUZ`YD
ST1]]%
"SCgN8
D]>}hY
cDV']DJ
#ze>zg
lB?[>{
M?P({e@
?7c|s1
=Y!wTx
>*:R[/
HuWtim
gzPj.Xf
D:'Pb[|"
-g6wPp-
"JuzM{
jM{tX7
~eroL0
_z +eW
0ot@hEU
F26n#G
}{lFn4
?s#ivd
!~;YI\
#DRL9RLs
zde,kI_
\ fuR0
3}^=T)
[eyNz 1
qI48~fr]
[X{K"p1M
?s:DUH
!x^JL
+;RbWE:
]Ef4gXR
oW)`0<go
L7h3"A
`^8{)a
hWP_E {
7ED\-g_
l tiAu
2XM<(_
*/1Muef
SChO#n0
8YE?YD
14l<ks
<qW6q-KZ
sWhBlp
R|:/s
%f*grT
vk*Lq&
C~NKs^J
Y8w,f{~
wv!eG_
o$n|k^
iX29A&
W<bE0`M
+e=S(%@
?'v)+z
lA;?5=
y;@B1W1
hcVX1N.
']i35%
M4nmE[I
{X%"LX
.blz,^
{xm}oG$
Cr6}Jz
:cx2#u
>:AV6b
uG(WdY6
b;7=F
mY^DtS
'+qONI
RbElke
E4/4@m
y_h\H&%
nPXk]8q
DV45+o
u8(oC5
/;T'ju
>A+vT*
)SQbnQ
6]^NN_
8AnJ#(
")~{=O
G%OVhe
f_AB1"LP/
Hw_,y)
ePg!!?
?9@!^W
izhM],
`2(.8
kG9jzzBx
,tZOsz
W^.x8Wg
k9&5L9
a([UDb\
ikM\tMw
QlOY/I
rk69BR
] "2])
nGapJc
iCTx1g
>;fV#8
&o87!gqZ
?Xz[?9
C Os{
sP>TAr0
!t)5`Z!
3ocGTne
uqHalE
S2r|Rv
ENZJOz
YQ|X$w
:~IDG6>
8s[d/?
&CE.mT
m*nk|5
vI,!`"
BNW&z8
&~MY+G[<v
M(^cP<
&)&\!9
&ZAL/9@n
*|W0&/8w
s=dCBv
%SG#6m
<;=Mx\
\0J}_X
HeB,A>
#gJFJu
*Y'>G9
YdU,,\
jw!;tF
zdR@<N
*J#27[
Q':ms2)J,R|
)F2P06@
gA71SR
*3NL*kHu
m5"J5)
znhuMA
6}1EoKb
#avQt(
1OF_AN
g_*#.e
.Alk;'C
v$L3`iv
KG~XE4
1a_g[n
}+]1P#
1>b|FC
1ZO$~v
<8EsOPzF
KR0DP8
-xLU$WLZrZ
g0!?:<
-'XR(
j5@A:k
NQ,IIF
COa.%*
*#<@kW
ogG|Q
W>L.(.c
gmFReNB
]@,Mi;
`FPEq)
[qxAp_y
s_Gxi
t}U5K&K
b-h2Wd
hbA2]s
XNYQ!P
>sSoH,
:bq(=J
*#aL6W
6czi!j
Cq(1r.Ir
)Pyh8Z
tmL,/
L)wHB(+
ltGu__
hB}rBa
Wd @a1
KBmc^!
w^pmP($
'rU-+.
-(qCbai
';X5p5
3C.BC#
r9'fVtk
g{$gS\
:0x*g[
Pv+,Sjq
,p~dK'
{Xh+GY
n5j_xf
g~z(Wo
@}Y+JX^
o2 I/u
IAO82i
TBw{I`
\e~W-
lBghr~
:q1N7_
lH9[Lz
3'<O 8
/mtV6?
XA+dUd
}RaJT~
r1lqG3]/
(u*bjE
#8_mor
{ISEcO
uiuaWl
JhtniDy
~l0a9u(
$_Sh5~M
YlbW"n23
8p^0-.
*ms1S2
+///=V
b.[w{\
r1}#OXH
)f:{s"
Jv[OnFC
9^(4f;
w]@=XO
7T25u_
hEoyC\
qZBM}
~`?hv*]
v`)soQ.
R h_49
a4%.%%
HZ~T7;:
0i's?e
sC<^$fK
o7|LPV
)CFr}K
n+>F~44
k"/"\
QRMjE,>
u6@%oq s
)Z3-}.
_?OYOK,}
#*ALS"
cKN_}G
p/'$;A
(*J%2K
oU4a{Q
W9m9g[
UO=/g?
K*XKnAV[
_&9sC2J
9l@|]SF3
1\Z,)h
&?LB^+
G6qcs61Xtd2po33Kv78zjH1sSCXG3ab0g2qtl5xFwrxN3omXyIYSMQO8E7KqjvcSBCJ5MKsz
3D0coxxi8a4CJxPnqpm5HpAOeM1e0Kois7cNXpjTfHjVrQ0X2RpoG2MOC
7b5S185WcKVBQBFTZ8FyqNVnlio8cz5OLuqHhNZuiU7zC0Bni6nMIXF4GR0ST52
XH9pd74LtePVZolthAkpLtF6p5BPgHawbLc3AfKkBbmxH2el
G3SVXkxBDAq5pymDm3OMqsC9An3Haz5ajjZWHbDtx16emnfvAto7QZJg0
V2zquWNPgGYP5K0nhxvqXfIHHzK7KJZ1oyGT2HRtRWGYW3xd6w0e4KF8tsj3MPFWzgtQEqtag
ZAY23WB0AhS4HetQtUrXhCR3s9KhZaCk
33Ek07M1eOqE3YOq66Z2ImW1oJ3
kf{njwrrsvyuw
ke}meyqjuvrq{yr|
wc|qe~nf~kg
pd}ndyqfvtkrzsn
{y~|yy}}u
k}|g~xf|vgxphzniylk}mn}rp|vm}}my
py~t|~z}
sd|rdyqeuugsymp
z{}yx}zwy{xt{|q
vz~u{|x{|v}
q|~o{{l{xj{ujytkuomunntmpwnrvsuvvsw}tu
wx~z{~
vu~z|v
udyvdvufsyir}po
~zy{xwzyvv{wqz{n}~g
sz{rzytyyrz|q|~qz{qywoyuoyrpwrrsosrotqnvspxqt{qwzs~{r
tv|xxy{
yexzeuzhs}lr
{}}{wzxvxxutzvozzm|}f
sw}pzxozvqxvpyyqz{rxxtxtswrtxpwvqyqozpp{nq~os
vz|v|xz}u|
{z}{uzytwytszuozyl{|g
sp}ss}tw|sx{uy{qxzn{vnztoxuoxxqyytxvwxrwwqyxp}vq
|w~|t|ztxztt{uq{xn|{i
vm|rnzrrytwysyxtzxqyxn|un{soxtoxwryxuyuzyqzyp}zp
~s}{sz{tw|us|wq|{m
wk{slytqwuvwuxvvzwszwp}up|spytpxvszxwzu|zq}{q
~r|}sy
tv~vt~yq
q~~k|{h|yiyvjxvovxtvwvuxyvuzxs|vt|tsyuqxwuyyy{u~{q~}r
jz}f{{gxxiwxnuzsvzuuzxxxyzw|yw|vuywtxyvyzz|v
iy~ey}fwzhvymu|qv|sv|wz{y}z{|{|yyyyvy{xz|{~w
ev~fv{gu{lt}pv}rx~v|~x
~{{|y{yz}z{||
fu|gu{ku~nw
y{|z}|||~
zkz~jq
fu|gu{jv~ly
w|~y~~||
viz{hr
hu|hv{jw~k{
dt~`t|^w~[|
sg{zes
pv}ku~jv{iw{jy}j~
vn{xp{rq}ou
ix}ey{b|~_
rf|{cv
|x}tw{nv|lwzjxzj{}i
zs{|tw~uvyvzvz}u|~p}|l~zj
sd}}by
zzwyxqxznyylzyi}|h
zw}}{|
|vz{tt{wp{vm|wi
ph~vc~
}r}|qv|tr}tn~ui
{l}}ow}op~ri}xd
}n~|mx}qs}rp
zqy{rr|tl|zf
|jx~nt~pq
ws{yuu{vo|{i
{i}{hw~ks~nq
wo{yjtzim{ii
vv~xwwzyr||m
~l~yhzzft~ir~lq
sjwuhqwhm|hm
xy{zzw||s
q~{mzxivyfr}ho~lp
nk|qiuugqygq
{{|}|y
~tzzpvxkszio~jn
oj{shvxgv~fy
yx}zvz~oy
~wxztsypp|lm
qk|vi|}g~
vv|wtx}nw
~~|}~{v{yq{uo~qk
suzurv|mu
u}}p~yn
qtxtqt{ms
~x{}|w}
ps}osvrqrynq
|v|{{x|
ntzmstpqpwoo
{u|{zy{
~m}}lvwkurnsntsn|vp
{q~zu{{zy|
yjytjwplvmrwmy{o
zr|zuz{zy}
ui}qhznkzkp|lw
~r~ztz{wx|{x~
t}~v{{wy|yv~|w
{y|{w~{u
zq~xt}{u}}x
xn}{sz
rm~ur{yu|
lm~or{st}zx
hm~jr|os~vv
x}|x}zw
~z{~zyyyyxxzwu|vu~st
z|yz{uvztvyuvvwuvyrv{sx}sw|tw}yx|~{~
t}|w~vx|ruzqvyqvwruxurwxsyzryysyzwzz|{|~|}
sv}ouznvynwxpuzsryvs{yqzxr{xv{y{|{}||
qv}nvzmxymxyov{rs{vs|xp|wq}wu}xz}z|||
|v}|xz~wv~xu~ww
px|mwymyymzyox|rt|vt}yp}xp~xt}xy|z|{|
|w|zxxzvsyvryus~xv
vx|{vz
ws~sw~pz{nyxo{xo|yqy|tu|yu}{p}zq~yt~zy|{|z|
}wzyxuxupvtnvsozuq|xu}{z}{
wv~tz|r|zq{wr}vs}xvz|xw}|v~
|u~}z|}|y}
~yxyyrvumstjsrkwtmyxqzzuz{|u|
x{}v~{t
w{|||x}
{vy{ouwkrvhqthutiwxnwzrw{yr|
nuzjqxfpvftugvylvzou{vq}
jq}fpzeuxfw|jv}mv~tr
gr~ev|fy
{c~~^y
uq}zn{~jv
v~~v{|wvy~sv
}vz~|v}
{cz}hv
|q}{vy{}uz
yez|jv
gt~gr|hr{lq|mr~pp
{q}yvyy}vx
yfy{lu}ls~kr}irzhpwjpwnoxnqyqp{pn
{p|yuzx}xw
xhx{nt}oq|npzlpwkntmntpouppvspxqn~sj
}q|yu{y|yx
zjz}oz
yjw|pr|ro{rnxonuolrqmrtortqsuputn|vk
r||v|{}{z
~s}{u|zv|zv}zv
ug{ylz|r~~v
xi~ykv}rp}ul{ukxskurjqulqxoqxqqyrswpyym
ov~pw~qx|q|ys
qe{vjyzo|}s
yj}{lt~sn~wj|xixviuuhqykq|op|ro|uq|sw~p
lt~mxzp~xn
jv~dt{arz`t{at{bx|ez
oezsixxnz{q}}q
zk|}ms
wh~ygzwhwwhs|lr
jt{n{yl
mw|gvxduvcwwcwwdzxg|{k
nfzrjvwnxzpz|p
yf}whzxhu}mt
gr|lxzl
u}~pzzjyvhwtgyufxug{wi}xm
oiyrluwouzqw{p~xr
vh~xix~nw
fq~lv|l~{n
}r}zm|vlzuj{vizwi|yk}yn
qlysotxqszru{qzxr
wk|~q{
mv~n}|p
xo~wn~xl|{k}|k~|n
ts~tqyussysq|ts{rwxr
p~~q~{v
xz~wvyxxs{wp}vq|tuxt}wu
}z|yz}t}|p~zp}wtyv{wv
~q~{t{xzyw
}v|z{{x
y~}}|y
p||pw{ru~ur
v~~v~{s{ysvyut|wq~un
}y~yy}vv{vuwvwtzxr{up~so}po{n
tx}swytyvxytytr|qqznryk
rx}syywxwwruyotxkvwg
ry}vv{vpxxlxvgyuc
um|vi{ud|s_
vw}uv}ww
~wzzvyzx{|y
|w~xw}vx
zu}vz~u
k{{k}yq~x{|u
myzo{xu}x
qx}pyyr{wy}w
sx|ryxu{v}~w
uy|uyxx{w
w{}wzz{|x
y}~z|{~}{
}z}}|~
z~||{{}{w
{z{~}x
x{{|{y~}u}}s~
yw}zzy}}v
w}~o{~hx~dw}bu~at
qw}sz{u|{s}{u|xvyyyu|~s
u~|m{|gw|cv|bs}ar}ar~cu
os|quzsxzryyuxwvvxzr{~p
|~}s~zkzzev{bt{aq}ao|ao}br
lw~nw~sv
uv}xx|yx{z|{y
op|qqzstysvxvvvwtw|qy
}}{~{r}yjyyeuzbr{bo|am{bl|cn~eq
mv|mw{ow{sv|tvxvxwwyvx}ux
oo|qpztsyttwwtvysw~px
}{z~zq|xiwxdsycpzcm{ckzcjzdk}fm~hn
n{}oxzoxypxxtwxtwtuzsv{qw
pp|spzvryvtwytv|sw
}xz~xq|wjvwerydoyel{ejyfhzfi|hk}jk
}p~{qzxqyvryuvxuuyqv|ov}mw
rr}uq{xsyytw|uv
zv|}{z~
{w~}vz}vq{vkvwgqxfoyhl{ijyihyjh{ki|mj~ql
zs|vs{uu|tw{sw|nv
ut}xs{{ty|uv
xx}z|z{
|w~zu~|t{}uszumuwiqxjoylmzmkxmjymi{oj{qk~tm
vv~tw~sy}rx~mx
xw}{u{~vx
{t||vuzvouwmqxnpypnzrmxrkyqkzskztm}wo
{|}{~|{
{w~zu~xt
zt~{vxywsuxpryrpztozvoxumyumzvmywo|zr
zw{xxvuytryvqzxqzzqwyoxxnyxoxzq||u
yy~xyyuzxszzrz|ry~rw}qx{qx|qw}t{~x
w{}u{|sz
sw~sw~sv
yw}~}{
qt{uxxz~v
z|~}u}
p{~k{|hz|ey~ew
hr~nvxrzux
ru~wr|yo}{m|}m}|n
|y{~rz
lx|gxzdwzav|au
ft|kxvp{su
ly}qs{vqyxmy{kx}kz}m}|p
~|}ww~pv~iv|euyauy^u{_t~_t
du|iyun|qs
lxzorxtpvwlwyjv|jw|lz{o}wr~uv~sx
x~~x~|w~}v
ps~is{dsyasy^t{^s
dw{i{un}pr
m{~ky{kvvnqusosuktxjt{jv{mxzp{wt}tw}ry
x|}w{{v{|v}{v
rq~kqzgrxcry`s{as
ey{i|un~pr
{~~v|~s{
p{~ny{mwxlutnpsroqtkrvksyktzowyszuv|sy|p{~k{
wz}vy{uy{u{zv~{t
{q~vp}opzkqxgryes|et
e{{i~tn
||}xy|ux~rx{pvyotunsqooprnotlpulrxmtyqwwuzty}r|}o}
vx}ux{tx{uz{u}|s
p}{p|upyqqxmqykt|jt
e}~f}zj
}z}zw|xu}ttzstwrrsprpqootontmpunrwptxuxvy{s|~q
tx~sw|sw|ty{u}}r
p{{qyxqxurzrt}qu
~x~{t|{r}xrywqvwpruqntonvpmvopvqswsuxyyu}}r
rw}rw}sx|t|~r
ry|s|zu
}r}~p}{oy{ov{oqypnxpnzqmyqpxttyvwy}{u
|}z~{w~xu
nq~pn}qn~sm}sq{wu{zx{
}y~zy{x}|x
iy}h{zj|zo
ju|ixxkyxp|tv
mr}krzkuvlvvrzrw
nq|mqymsunuusyqx~qy
nr~pq{oqxostqttuxqy~qz
|~~}{}~w
nt}qrzqrwqtssuswyp{
pv|stystvsuruwry{p|
q}~ryzuwxvvuvxqwyr{~p}
}t{ywywxxuxyqz|r}
|v}yz{v{zu{{r}}s
|x}y||w~{v~|s
x~}z|z
sy~wv}xu}yq
|u~~zz
sw{vuzwszxo|xn|zl
|wz~{v
pv}rvyusxwrxxn{xm{zk~~l
zr||xu~|q
n{|o~yq
pu|ruyurwwqwxmzyl{{k}
wl|wn|wqzytx|yr~}n
m{}q{zr~wt
pt{rtxurwwqwynzzm{|m~
vo|unyupwvsvyvt|{n~~k
m}}p{|t{xv}ux~nz
rw~vt{|ux
os|rsyurwyqw{o{|n|~o
xt~uq{tpvtstvvszxp}}k
~q~|t|{x{vz}s|~l}
j{~nyzrwvxws}{s
ps|ssywsw{sx}q{
xw~utztstuvrwyp{{n~
|x}z||v
d}~h~|k|wozsuzoz~o
~}|}}|}
qs|ttzytx}ty
uxzuwtuzqx}o}~l
un}qs~mx
}{||{||~y|
rs|vuz{vy
v}{v{uw~qy
}y|{y|{|z{~|z
yx~vy~uz~s{
tt|xv{~xz
|x}{w}{y{{{}y
z}|z{{{{x{{w{}v{
vu}{x|
~z}}y}~y{}y{|{z{~z{
xw~~y~
}z~z}~y
z~}~|{
~|}|~y{
z{|y}xy
v{|v|ww
s{|s|wu
z~}z~zy
o}|q}wr
|z~~~z
x|}x}{x
ow}pu{rs}rs
zz}{~y
yx~yw}}w}}w~}y
xz}w~|v
mt{nryqq{qq
yy}z}x}
yw}yw{|w{|v||x
kt~lqznoxpozpp~sq
xy|y}w|
xw|xvz{wy{vz{x}~{}~|z
|x~zy}t}}o
sr}oq}mo}lm
mn{nlxplzqo}sq
xx|x|vz
xw|wwzywxywzxy|{|{z}y|
x|~v|{v{uz{q{}o~
~~|~yz~sw|qv|ptzmt{lr{ko~oo
nl|ojyqkzqm|tp
xw|wzvy
ww}vwzwxywxzvz|x|{v~yw
uz}uywxzsz}q|
~zz|zuzzpxxnwxmvwlvyktzkq}op
ok~pi{qj{sm}vp
{q~yu{wxvx}qw
ww~ux{vyyvyzu{|u}{s
vxzyzvz|t|
zz||xv{xqzwmwukwukwujwwjuxkr{oq
pj}rk}tn~wp
}p~zs|wvww{qu}ns
vy{vzzvz{t|}t~|q
xv}zyy{|x}
vx}vxxyvryunxtjvrivsiwsiyvjwwkszos~ut
zq}vsxuxss{pp}op
xz}w{{v{|t}~s
|w|}{{
}x~~y|}w~~z|}{}
qw{svuutovtjvrgupfvqfxqgzuixvjuyot}uu
upzstupwrnzqn~to~vr
q}}q~zs
z{~y||w|~t~
xx~yy|yw~zy|zz}|
mvyousrslsrhtqesodupdxpf{tiyukvxou|uv
tm|qpwntulvulzwm{zq
rz|s{xw~u
ty}tx~wy|x{}z
iz}jvwluqosjpqfqpcrnctocxof{siytkwvpv{uw}yy
rl~onzlqxjtxkx{ly~p}
sv{vyy~zu
pz~qx~tz|v|}y
fz|gvviuolsimqenobpmbsncxnf{rjzslxupxyty{x{
mm|jp{ir|jv
rr~uu|}vx
m{~nz~r|{v}|y
d{{ewvfuoisijpeknbnlcsncxmf|qk{rmzspywtzyw}~z|
tr~{sz
n|~s}{w
c{{cwueunhsihpejncmldsmdxmg}pl}qn{rq|uu}vw
d{zdwveuogsjgpginenlftmfyli~pm~pp}pr~su
e{{eywfvqhtmgqjinhnmhtmizll
}zy~{v~}u
x|zv{vy|t|zu
g||gzyhwthvphrmjokomlunl{lo
y{|z|xz~v|
yxyxwuzys~xu
i}~i{{jywiwthsrjpponpvop{mr
{t~zuyzuu}vt
k}~lz{jyyiuwkquppuwpt|ow
}~||~xz
}r~}sy}su
n|~lz~kv|mszqqyxry|p{
}}}{|zz}yx
nt~rs}xt}|r~
{z|z{{x
zx}x{|y}}z}
zt}xw|yx~yy
zq}ws|wt~xu
t{}ow~ou
zo}wo|vp~vq
}t}|v~|x
zz}}v}~t{
~v}{s{yowznuzns{op|pp}rq
|q~zm{vlzum~tn
yz~{{zy}vx
{u}xs{vnvwmuvmrvnoxppyqp{ssyrwytyywzzz{{
x~|r|zmyvkytk}rl
u{~w|{u~wt
yv}ut{sovtnurmrroosppuqqwsstrwssyswyt{zu
{z}txyovvlvsk{ql
r|}t~zq
xv}tu{rpvrnuomrooppqqrqrsstprxnsymxyn|zp
~w}wuyrsvmtrlypm~ln
ww~suzqpvqounnrmpqnqspqsprumqyjszhxyi|zj
t}zrzupwprsnwon}lo
wx}svyqqupotmnrlpqmqsnqtnqvjqzfs{dxzd}{e
nSn2NfqLk4IIPSy7DRQ6ll6xXm0vP02A8T3QJCesGRLE64oJ3G03sSOB
9pux35tCIT4hiyA6q0Ta1zb6q1JJIaqE14Tg34LVlC8
suebz6Ck4uvJNwGM5j31w0ywfnCuo67z0yY5W1dKXFJHJJSG78iCHH81404M3a5654SiYK8EG2dr0
nVU56ph5r2ypAp5QP6JLUN931xKe4YwbAXMs17nZi8Xj21KSS8ngio
afkNJeD0TFXovcMYQc2wV8aA8m0LF3Q2eB4Nb4e4eIDdfNi8FkWDz1BlEjOpm14i7dJur76f
6RM46o5ECGohNNmATI0p7cmXooBD6RGn0E1u7zH4bkk4PB
QquY9F8Jex8Qcm2Q38AqIU0LmB4NX00Hm23fM2QhB4g68iycsUz5O
l4zi47Kv5m50xi1WD01mpN63LEWmnCL41Ia8zxIcXYI3AS4PtWQ8
v8YH4WzkqH2bB7pH2qZ2ZPQE23
TG2R5W0PSC03ab0zRYl7dOIzy9FxgsTO0dgdx86FKrWFMv
v4.0.30319
#Strings
VisorView.exe
mscorlib
UnverifiableCodeAttribute
System.Security
<Module>
.cctor
ynDSpWYSoBrQlXYiYnroaxdvuFTu
Attribute
System
kJTUYEGUouVNpdrkAinpckCEmOiy
System.Windows.Forms
mEUUGhYrLGCnnBjOKqBciLzyNnXB
IaXVtVpQdaQakxBQtDXWBymOmJwjA
IContainer
System.ComponentModel
qYZqbZNxfvGsxcOpCMvtNcJLuzCR
TextBox
gTajCvYefegGPKIimDgtlXfXRuRT
Button
CagkLtCipmaMBZOWphWXGrHGlBeI
LinkLabel
hOxMsFQFeCQOhKaiQsttfYMUClex
VCAFIosXFRYnYRogzurhBcrplmkJ
EventArgs
RQqXUgThNXkgdwcDQeTCodndcQaHA
Action`1
mtEqiZSjlsvlssbzdcRudVTAgcdjb
yVXZEyHquRJoYtpPFNudbJskxTfl
ciKZmxyuAstmdWgAQgVvHCUtgnlu
List`1
System.Collections.Generic
pDXlPisKILNoTuOiDVBMUQIkgyOP
PKILnAzvofxAIrdwHweqZQLuhVRj
YyJdrBFUImlJMXEoomlHmpdkwKzdA
LinkLabelLinkClickedEventArgs
uJoirfzzxLUpaZdEJnHAIqpHopDr
Dispose
PGYzhoKkyRDgwjoxAcdqzJtYASBRA
<button2_Click>b__8_0
fNJsBTojwrNgSXDtJYMxNWGckbKV
Object
nZuqXIrDjRQoaEpvahpLhzMygRdsA
UNLcfICDlcmmpUZNWnxEekxUpPTPA
jbqxzjnCwUegLVWScgrKEERWaIraA
StringBuilder
System.Text
zZlrAmdVlTkOMQBefCzefctyWQzuA
NUnCKTwEWXhfFCDDlmUCHVYjbBIj
PhUEGFaSBsvhRCguFcKhJEaYBxPe
OGswDfVIWICJBjXHmIQIzdvSFVHZ
gsNJdtUJcjZukEiHPBdejpotmCLs
XSbJvGJoAIeEWvGGodbKEYSarNDC
ValueType
evSGtgMvenhpsYWyNgHhYkqRgdjB
wsvbdaWrHqujuNqpceAyjPrawkaR
<>9__2_0
<>9__2_1
<>9__2_2
<>9__2_3
<>9__2_4
mrKRRKwmvsgILekRNFNHtIdwskGm
iMMMcclsTQprgeaXoXaHifizPEZg
JopckloSQPcSjeVtwXCKjGqUcOrF
eiQuTwFgAHtBzadhUQREkpigDzNv
hyeLjJQPoqkqyZZEfHfwBgzqgteaA
<>c__DisplayClass5_0
HWPmKzsDjpgLfIneONXTxiSZsHNsA
iHMQpgmywJAseJkNcFymaXUSEINn
ssliSQKUdVXywdWxasrNogEdfyXB
DxfhkGKyYWUdhMcIckUfbpeCNILM
Resources
VisorView.Properties
ByTBogamkXLPUJGgHfXJatXdTzEhB
ResourceManager
System.Resources
bQBtCJAKnAnYCRXXfkUOmAbpjtl
CultureInfo
System.Globalization
bJaffIuTlNAHkcuXbRkrtFgexJULA
XnfZgqJqKJXlQyuWJUmCWImuBAAH
quWQvRjmMtJPjhpjLgdUCFCqGvncb
WhbbjSNjddyNXQPhefimDbtXyzOO
dFIEabkCMZTAEUAuefQJuWQcfCaF
Settings
ApplicationSettingsBase
System.Configuration
ZoeTmwryurHeWBedPeeYUwIWjtHIA
VVIjSLKJbnqCRlPzJYMpiuFdIamC
Default
hYaBfnCubzyZCLIteMjTpFhQeoAT
EHUDNhTCeumvxyeQwvuWPkkJgeHv
Random
zCgYGoBuTRoWDeeORGZUieHilpnhA
pBSsbNFiPAoZHauWnVAlbCQTCLTA
RQlDyXFOyndvYsPKpfcRIlRsxeBGb
Dictionary`2
fIRdKXCXqdMnmjRejPIJFQZfxxdtb
yASnXkVVrKsYsfvHUErbemOWJKxA
Assembly
System.Reflection
jlhXsrzoalmgARREBBqEGqrpWhSl
EGhLYEDjOCHEGlDBKpbjyUCLOcMA
uHRcavDWgYHswPgOiajHLbQroyniA
nuYrjOzMqutNzCJUvHMrlOldlnvh
hBDUsQhBnaFIZJKvPInKQsTOMUfS
wFEYclJzusUjGYlEqjObgzxhkydD
dYcNvdyjsIukayyFzBARFjwZFlEq
XCknBbZdkmJUgurugCUHiowFfUuH
WjhwIFcDZhxGChUECOnubtokGlls
SfJOlHSWVqrOjWGtglzIlJWDattq
uwfCKBsWtuAmIqpomRgnrOtNupoA
jKSnYDQYJpcrNuWCViKykeGxcinD
oeiFCLCULbKObAElflabKJuAqUInC
rWdCOQSkOYchKWEBxwZKqGKtINCi
ZpwzPsTKsrcZSCmfEakzCPIKUXdKc
VJOmWWaAZpAEEhZiyrJLHxhFbvgbb
ySoDoTQTFAHdteQolcYtiqLCwQDJ
TyxxBmgJSniBFchoyPVPxWmmqeCm
IEnumerable`1
bnvBVEbBGmMRsvDSszXfazRFoVZX
KveGZVgcLFeUYCViOkxpoCyyOpwV
Stream
System.IO
<FilterResources>d__2`1
IEnumerable
System.Collections
IEnumerator`1
IDisposable
IEnumerator
XngkEdyEktIwNDECNOMFdLNAqZvoA
ZMwprMcwKHDilPTQuvIeLIxfAnqIA
iOjDEtFUSNadmTwluDOcDWLsLTQG
RCPLOMWgTDSrrAlYUMzfRhBNjfde
MOwpCICEQzHvxygBhCJKBhVrGReZ
wRDLZXtxGpEmicgdnQuDEcoaJxSo
cdXUpFPUmRhImecUpKwTdmOjsQKK
ttSJxsMusvDvHAUMZncHlmaiFkDGA
IDictionaryEnumerator
System.IDisposable.Dispose
MoveNext
uITAKbuGESmLLGwpzYNIVsSHxdWj
System.Collections.Generic.IEnumerator<T>.get_Current
get_Current
System.Collections.IEnumerator.Reset
System.Collections.IEnumerator.get_Current
System.Collections.Generic.IEnumerable<T>.GetEnumerator
GetEnumerator
System.Collections.IEnumerable.GetEnumerator
ThTduZeGbXHPIfNyBKKfiMfENIbTC
WZQRdrHcYoFcziWNgMvjHoHVWLPf
VisorView
CompilationRelaxationsAttribute
System.Runtime.CompilerServices
RuntimeCompatibilityAttribute
DebuggableAttribute
System.Diagnostics
DebuggingModes
AssemblyTitleAttribute
AssemblyDescriptionAttribute
AssemblyConfigurationAttribute
AssemblyCompanyAttribute
AssemblyProductAttribute
AssemblyCopyrightAttribute
AssemblyTrademarkAttribute
ComVisibleAttribute
System.Runtime.InteropServices
GuidAttribute
AssemblyFileVersionAttribute
CompilerGeneratedAttribute
STAThreadAttribute
GeneratedCodeAttribute
System.CodeDom.Compiler
DebuggerNonUserCodeAttribute
EditorBrowsableAttribute
EditorBrowsableState
DebuggerHiddenAttribute
kJTUYEGUouVNpdrkAinpckCEmOiy.resources
VisorView.Properties.Resources.resources
Reverse
Invoke
Enumerator
Resize
Predicate`1
Exists
Control
get_Text
String
Normalize
TryParse
Process
Environment
SuspendLayout
System.Drawing
set_Location
set_Name
set_Size
set_TabIndex
EventHandler
add_TextChanged
set_Text
ButtonBase
set_UseVisualStyleBackColor
add_Click
set_AutoSize
set_TabStop
LinkLabelLinkClickedEventHandler
add_LinkClicked
ContainerControl
set_AutoScaleDimensions
set_AutoScaleMode
AutoScaleMode
set_ClientSize
get_Controls
ControlCollection
FontStyle
GraphicsUnit
set_Font
Padding
set_Margin
set_Padding
add_Load
ResumeLayout
PerformLayout
ReadAllLines
AppendLine
Append
ToString
set_Length
get_CurrentCulture
MemoryStream
Delegate
op_Inequality
Application
EnableVisualStyles
SetCompatibleTextRenderingDefault
GetTypeFromHandle
RuntimeTypeHandle
get_Assembly
SettingsBase
Synchronized
set_Item
get_Item
Thread
System.Threading
ArgumentNullException
Activator
CreateInstance
GetExportedTypes
ICollection
get_Count
BadImageFormatException
SeekOrigin
get_CurrentThread
get_ManagedThreadId
DictionaryEntry
get_Value
GetType
GetResourceSet
ResourceSet
NotSupportedException
System.Security.Permissions.SecurityPermissionAttribute, mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
SkipVerification
WrapNonExceptionThrows
VisorView
Copyright VisorView 2021
$45802242-81b4-42a5-a0a0-017bf7af26df
1.0.0.0
3System.Resources.Tools.StronglyTypedResourceBuilder
4.0.0.0
KMicrosoft.VisualStudio.Editors.SettingsDesigner.SettingsSingleFileGenerator
14.0.0.0
_CorExeMain
mscoree.dll
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
<assemblyIdentity version="1.0.0.0" name="MyApplication.app"/>
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v2">
<security>
<requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3">
<requestedExecutionLevel level="asInvoker" uiAccess="false"/>
</requestedPrivileges>
</security>
</trustInfo>
</assembly>
Bu1Yy558f
HCb570xfhhnAc
LfGx1f9y5581QVW
XKZeNAG2PnEpgHC
s47JUW33gWf
http://tensorflow.org/api_docs/
textBox1
button2
Train model
linkLabel1
label1
Tensorflow Lite for C#
VisorView.Properties.Resources
VS_VERSION_INFO
VarFileInfo
Translation
StringFileInfo
000004b0
Comments
CompanyName
FileDescription
VisorView
FileVersion
1.0.0.0
InternalName
VisorView.exe
LegalCopyright
Copyright VisorView 2021
LegalTrademarks
OriginalFilename
VisorView.exe
ProductName
VisorView
ProductVersion
1.0.0.0
Assembly Version
1.0.0.0
Antivirus Signature
Bkav Clean
Elastic malicious (high confidence)
MicroWorld-eScan Gen:Variant.Bulz.395405
FireEye Generic.mg.884bc3566abbe575
CAT-QuickHeal Clean
ALYac Gen:Variant.Bulz.395405
Cylance Clean
VIPRE Clean
Sangfor Trojan.Win32.Save.a
K7AntiVirus Trojan ( 700000121 )
BitDefender Gen:Variant.Bulz.395405
K7GW Trojan ( 700000121 )
Cybereason malicious.66abbe
BitDefenderTheta Gen:NN.ZemsilF.34678.vm0@aKb6FWk
Cyren W32/MSIL_Kryptik.CHW.gen!Eldorado
Symantec ML.Attribute.HighConfidence
ESET-NOD32 a variant of MSIL/Kryptik.QME
Baidu Clean
APEX Malicious
Avast Win32:RATX-gen [Trj]
ClamAV Clean
Kaspersky HEUR:Trojan.MSIL.Injects.gen
Alibaba Clean
NANO-Antivirus Clean
ViRobot Clean
AegisLab Clean
Rising Trojan.Kryptik!8.8 (TFE:dGZlOgwAux8xwSyhfQ)
Ad-Aware Gen:Variant.Bulz.395405
Sophos ML/PE-A
Comodo Clean
F-Secure Clean
DrWeb Trojan.Packed2.41837
Zillya Clean
TrendMicro Clean
McAfee-GW-Edition BehavesLike.Win32.Generic.fc
CMC Clean
Emsisoft Gen:Variant.Bulz.395405 (B)
SentinelOne Static AI - Malicious PE
GData Gen:Variant.Bulz.395405
Jiangmin Trojan.MSIL.vswe
MaxSecure Clean
Avira HEUR/AGEN.1136898
MAX malware (ai score=88)
Antiy-AVL Clean
Kingsoft Clean
Gridinsoft Clean
Arcabit Trojan.Bulz.D6088D
SUPERAntiSpyware Clean
ZoneAlarm Clean
Microsoft Trojan:MSIL/AgentTesla.DK!MTB
Cynet Malicious (score: 100)
AhnLab-V3 Trojan/Win32.Generic.C4370576
Acronis Clean
McAfee GenericRXMJ-NN!884BC3566ABB
TACHYON Clean
VBA32 Clean
Malwarebytes Backdoor.NanoCore
Panda Clean
Zoner Clean
TrendMicro-HouseCall Clean
Tencent Clean
Yandex Clean
Ikarus Clean
eGambit Unsafe.AI_Score_99%
Fortinet MSIL/Kryptik.QME!tr
Webroot Clean
AVG Win32:RATX-gen [Trj]
Paloalto generic.ml
CrowdStrike win/malicious_confidence_90% (D)
Qihoo-360 HEUR/QVM03.0.95AA.Malware.Gen
No IRMA results available.