Static | ZeroBOX

PE Compile Time

2021-06-03 19:04:06

PE Imphash

f34d5f2d4577ed6d9ceec516c1f5a744

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00002000 0x00014454 0x00014600 7.20497040016
.rsrc 0x00018000 0x00010e68 0x00011000 3.86042562694
.reloc 0x0002a000 0x0000000c 0x00000200 0.101910425663

Resources

Name Offset Size Language Sub-language File type
RT_ICON 0x00018168 0x00010828 LANG_NEUTRAL SUBLANG_NEUTRAL dBase III DBT, version number 0, next free block index 40
RT_GROUP_ICON 0x00028990 0x00000014 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_VERSION 0x000289a4 0x000002d4 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_MANIFEST 0x00028c78 0x000001ea LANG_NEUTRAL SUBLANG_NEUTRAL XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminators

Imports

Library mscoree.dll:
0x402000 _CorExeMain

!This program cannot be run in DOS mode.
`.rsrc
@.reloc
] 1073
YHJ jXJ
Fkmz/}
Lv]@$S
Gk+w$2
xOI~{]
I?^y(9
|#gzZ+Toz
s3O(pi
#Qb[BW
a[g_/b
^|?aQh
jGALh
2p"}%Ad
1tZW5R
J&bK@
$' ;qa$V
6[}bu<
|7@G;r;q
.$dJNU
TMfs)D
oHH(Ev
}?1o@*.
oNFuq
.f*l<
Ceq5},m
,!Wo.O&
}N2,$vy
N?bJ=t
2ioa+,
-xk8DrZ
JY+s9N
+X&{]81
]x"|d3
e/yg%$@
/\9z&r
+|h66a1R
MW%\4.
_F V05
FuA/g"
2L7H)V
Q[GXR_
0t|8k#
eSYItZT
qlPza%
<@9]r)
`D#x}BA
H@TI-hnm.
1+_E$H1
"],*vD
P[BP3+P
W*/o+N
zjPxZ@
5EZ5`X
dWbA|B
0W'k@Q@vq
Y_cX*j
Y_cX*j
VMDj^m
VvCD(
Z?_b`
Fox2(
ntdlT
X l.dlT
NtCoT
X ntinT
ntdlT
X l.dlT
NtCoT
X ntinT
Z?_b`
_bj2
_bY*
Z_bX
_bj2
_bY*
Z_bX
v4.0.30319
#Strings
#Strings
#Schema
SystemString.exe
mscorlib
SuppressIldasmAttribute
System.Runtime.CompilerServices
<Module>
vdJBBEDvNrKkoLKNJqNFalgbMrBUBqLT86K?#wOsRxFJbd2$U@1zl"
jAxcKnyfblkCpqGocmVfDILQOpFl$ Rg$/We7O"$ Uw_Ylc6!n6<!
KZJavyZtFAbcoexEZGExVdVPEaFCA)CvU=>|x)IMigV~hwzPf:E>R!
lduYIDqdWhrCoaqBBSalxgnjUmdc?1)Wx=Ug=qJsAd/bi39=[@yE
GCHandle
System.Runtime.InteropServices
AqysMFcOxQvmJqEDEBGMfGZcNCqC8=1_4&d2@ G;4>f:f"[v"0*F!
nfuydrlltQARABdGUEbbZIJYwMqBA,2[["Gw"xtXZ5hpI^9FX2*\}(
Assembly
System.Reflection
ResolveEventArgs
System
VoAiWXbcdWqCLvxoTuwJbjAlVKECdJ;/Nuct2]DI1DF}u7*mcz+p
.cctor
iYlXCZRbWFaffHSMNQwyNoycvYbjAYGs@T?t)-eY^~VD?LC1(u'4&&
kHKaxwePJKIqjcwSAQjNDFHcWeDveYQv9S>>4:U1g n'(Ppf`ncTY'
epMTrWDLYKipcWdaZbmQRjpVaSgfAMa49B3|zP(3@r}#A=!! 6'N3'
VirtualProtect
kernel32.dll
bJxDimIdYFgIUdvqWlsPTkDABCYE&I~!M+O,-k~&&at,V`3OBt+V!
CHltQYFdQCGUHDdfSNPtZrHvueCI2[;UV<&+^Z%v8cb:(JT^?IzU"
bHTjpNBkBwLUNNhDAixDcetRaIuo$Dv?4rDVQzt/xZZwV-mEr^&L"
NrmcOhCOlHmIudxEbdySXCQCEFLCbzxIRU<'1`2=yw~}UlZh8!!RB#
xyXtDMEgGwLaJVooZOAQBeEiBMmDWlIA#Fe];zhX9yBV24w:gF9K
XiKDBneYstEAxdwSOlKArbuZoFyNA4o%8{Kf_AF7SA-H@+^[1X|KC#
QFVBaHgcwosEdIhelkjVotBJlNvrAROli@KmkUr[[";7"lU zD-RK$
HKiekiITRkqLnBrCDHWXWAVpPiIe>E"7EZ)^&/EN3"r-<-a'aF~9!
zvXTFbnsYgmUUFHBXceqCjizYULI=<C#Qmcp]WT@(6Fy"8D$*nL5"
ValueType
eGpuOhRKiMJKVIAJmedQqivbqMvR*ZCCGjmY^zN'D+_1'_L,90(T!
HPHdOVuQkXqMHlnwhywRgehvqPXvfTLb`w:u!nDGGS{iZFIew>B`$
WddAPNJyCspjGGvEybocJMApUjLlbkUVx+Wxq$+Ht|(;Ix5d?^XW!
StbLNAymJDfcjgedFZTWQvycNdXoAvmUP^QUNVSSSQGxlrU$}}mVv#
HpJYMAiGdSIOKxFzYjnmuBLOcIJIA^x-N>i](%#v/ ;vuEki|N%R@!
iCxGBSaknqyAebALcWPchyFlKSblu y8NQUumfE*14SN>"cJ]+-g&
WdgXSMMbqIqlvbFiESNvyKTSBFOIA+0iVL<8gr3*y9W045*mn:|al%
pktxIZzkzIagJeMHtfVZfbfyEMUQAc7Olr8ikP"duc0&vr8&Cy`Lt#
iSvrNYitYYQUUtAZzhsVlqPsBuon_HA2%536'-/tMlKQ(6 0ma37)
Object
CDaYUegxkbHENlFbmcLROVueVwaw80g@AC,qCz p CUFV'0 YOF (
OMzYkYXozlzixhMOQcGrElSalSaIAL:;OLP%s}& vihbb1x jG@&t!
TSYMDHLAdgSjWQCfOQSkfkUpHHBXDm0'!%FM3K3V0g'%0YG)om--0
Stream
System.IO
ZcoBzeZxrVLQKKAVKlHHtxoINSWl2Fy"ADw5:L+V"#^@8;G;!'RK"
wxgmFyoPDChBZBiWTeEviAtZrmzeKCHs&?0UHkx4=g@$;;!ppAsa
tfUnuUZoCLjDulqwFEYGpDDqGtYF&Q`*b%<D@e3_1Q:ZZA < l\z!
eEnnVuuqYiVqMirXnrjPjqMxPRPH3P&i{YCF"DT%1T91F^m#=Z:2#
YukoseWOWwVxgnghtIeWEEMONGWiAv,Qi&2X:&o}ssIE$(:#~`xH-(
JHYaOqCunLugdSqQctnsrlJWSpfUAXQ48wDq{bu/?O4u,RE;FB"oI-
MhKbEKxqpjrNclNIUGGQGGDsDOAiAJK>#n=r;C!a \D%rb[<| ~1z$
yemhnCQVjZaWrHUMNkRdIlrdYkKiA?F7*^Q#(F>_$x)x0,o;QW7B0%
IOrqIUTANHpZsoGECFDzHDxIWauV8D/v<+pH<%_J*vBd19Z{#2I?-
ztmAaXHmezExeDQNssAowvYNFjxgb5<QO|D?CMIESj|[tw2/-R/kg$
DezpNVBMiojifBIjHPcXIygmqsxbAhy5zd(^e_ke<`,0e7:e7Y?r,#
KCrgAXEWbGlJPFDSWEQnnpFHDqFhA+N9IX'X b_)+@N64!$oRr-m+,
MrtIxRziRXLQJtchhAfZJdZHNKCwAlNAY)qLzh2-2=$UO@$_<^!K-$
vmpTrLTJFBDztBbYCXaqnyQcAanFU`wFPdDU<2kzBf62eI@*y-o]
esQBLrPiTZlbNNFlXQHhQlrsjvNbi6Gdhl( HS1<>Z)0BxT7?wmt
XQvPPdYeoaycniBwcKYwgzlKfPde%+qpU~QAeay99:EH9;ra'{Wi
aeBSPtxUeQXskTItZEIlUdjzsSyV5Ur@/$K&2f]IJ_'<\s'y[rK{'
xKPBSmagvnfkMhOKCyFYxCODeccQb3U`P7J*uK]&vF-,TKR-z;=Sg'
UvEFZOUnuPsNbwNetLkSlsVvqBoWrwJx|%7*j\Eb_Eoo>i{-a#gV!
TDuBmOdOmgpOhPtBZMiFDCLkGCKi^2ev<=D,IWS n8~NdaDfSN+P"
wNEBNeeTplBstHDIHAnNINziJKCfi=zpK{>(;Lqn6jBzbF#g12:i!
EAYFUEbEhptiFWazxnlXpIlsLOpQA:$VTlX|o_iL;Y;ICI!z5W-:y+
sKTffyZoiYVZJqSavFJUApQwsxGC`Xs$"&yP^tlsuu'Y8}\I({$
mpwQZxHuuDbuETifgsVmzUoTDZMewFw>I>_vXkD4aaw9}(^~#x~S
tOtAkcePeqQqLscyXSzGMeDXBhsWASY]cUC4y(1 BC/d3E%w|p/yC6
hrsoBgopSNZCSerOcNwdMDYSOSScO 55Qg[?^<jg]8od,rY!^|`\
XbXdJUagWEFMEyFFtIlgsbLrvzsTPitcp(?f#'F ]-&{}*ChqiI1"
ZtiXJAZteBnfjpusBlKbattOyhfe@$M`@P$!z&Mes2jU9*`I`M37!
hiYuQvARPvFkqfCDkdoTeEdZIQGoC7xU/B])oHu(h%?Ml9G}J%3f$
LFDSDQxGUXxXPbEXnovAuKcZsBDFF<'j+kn[+,@]FLkk8a3ptQ^0!
ZNOoQolzNiQwiejRZvOCSLgBRFsi-6B{_I`ZY>ESl8pcjX`1p2QI!
jetHKjhzlFGpdqzvGHznlsnVymStA Fyd]Tqs8my6,9t T(9Gvg8Z&
ZyYcjJhcHfClLLfSiJwgevIIbFMVxmv[vw#Si2>^p>iq,/BT:Zva
VToPciDWiwfHbLOQbsOpxPyFeACdA<,959;RSY+Q):^s'^(Y]T7DB*
kEQHDnVFQqhhFVijvsoaGLFqAMOeeFmpiF63:}J:3$!Qy2>@3xR;
NcEpswkAmywLjqHfqbTZRslRISUiAhwj_/M_$_-Yts =>j%Ba-neD%
zpXkCuMdBKjITLJRNHoNgpPicjuH_`/73vCc@EVP98Xrp"\xmUE;!
RAxkFtsEHyfLSPdsKzCRBUYWkaUL~6$me_-x1[%\Mch{|T*`~C%[!
flTNMpmTUoJvvyFGTcEAaWQClYyAAS"0)$0]va{c9;Nd8V:HRD^G$(
DyNQcdNQmACpMCDcreiMSETFCIEjb^N\IY2t}fS`<F,K5v98N#Rcz$
GyqYIcEEjXeamXmfhCBAFgnylmVzAX#u6aJy*v5uPUosl!=*oYC0-%
AhcnxwAFzRcZyrDNrIZmqaDXPdXmH-3G*l+[f@&BWNmL"kETD(4Z%
IlpaukSXWEAAMYdsIpAEJfYggtnRz{g,]zF<T'Hfe$'[F-\~"Q v
OtCrKFjsYxoBMrEHrmWdvywYdfrmBIzPp/w^QxLBO2QPCMUej(0g"
xdWMGZqgDdiMKCzSwGsNwgMIbOQXckh>zI?T1:'%T^,X8kel%:ZK"
SayUCFCRHdiUAHccZElmFWwgEUR%k;%jXhd?J);3_z=`{Fcj:/"
lenPaPJtIoyOqtmoPKBTFFIiAAGL35lXD2_([3_]icjFpT>;&>JY
nEoLgxseBJGEpDnoXXThBNBWeUFbA/mWf[m7P^>{2VwHlW1h44F"h"
QUCRwdhRAgVjXEdDaHcWhjArcbhCb%KPMG7$|kU46~XG0QNWZ 9M$:
XZCTqXunJXrswyvvrCmoEoMNWInC!6!NZ/9Nf(w3Ti_#}dlWhhqj
NDodQyCOzpIvvfnEhJqiMBOIPiicL][7AlD:(jM;5@gpg%9~Zz&l
jkProAFqTFlAvYkxhzhJwPwauAjA,5o5*t5b)=tRe&_ 9O\Mk&BU
sGNUJvUHMGLRfXuKIJXZFYQunUIjCX@x";0!vv)9lJ^*)@^:/OOh8
UcnCeDHRSMnFFfzEUfcQAKPdZUIiBPh ,LG-@tF^!adFea|#|Pn(L%
AQszSQNhaTuurLpDlWPQgBWQzani)e}1P0(I)Y3bVV1ND6?8`OY#"
MGplCSNewtoOeMeSPtfYUDqEabrzz_=Z!vJYI4 EpB@&z;d,v1VQ#
juzQSkUbnFXCNAjKcABLGJcIMhkiAAJs6Y1zAD!JJx!GVZRHY^=h/%
BiADelbZQtpqrkvhftZswBxPlnwCHzw>UOHe)y71S;UCs Hq2cg<
YxYJaAftDRaQFWNAfaoYFHxpYNnobUVe#kYZR8T3r~sm@:D "%Fs$
AJAcnAcLYIsnkRAbQOSZCVSxZjtaAZSvyNI`4-5(IP{RR*pz07OOE'
mFkrLxiFwLIVgPYIAoRHDUUPtbrj7n/5&5W;F^_hu%r/:#6^ns,s$
IslzDwtyicagHcQvOhhimqZFxSbyH@SbeIkc3"-4"m:k7y3Vv#Da0
ClqHcYzbHkQXCfWEZZcTrySHRbOj<BktFcp5U@bgGRJ+\$y0#JL'"
HoqhTQRmmnvTJJqHpFMXqGwjSyqqZ-A8l2d$?Dxg\81f"|aYIUII$
GvRKydszzeKPXwaZytrdGaDoZKkH)SRGU!&3SX->1nwg1Y<'S6-Q(
aiWUHXPgeAQKGytLlHTcEIVqeydiAGvld<$FO8Bh~mJ{-_^f\&W# %
AEQnhvSuqHtUvBTHfcJhrchBPLaRN]T9 '@gjb3sZH9!-7[Q8z`g%
GvAihlLAKHhYvdPTxebftYJgyDeDA@6+9K(4PNN"=TL;1Si't;LdE1
byLQttsgMfCwWGytFvHLBXRiCMJvYNXk10}J1(X`K]j'"6#8 F;)'
JMnlROVQufRpGOWtiTcknRulgPkNRf9NbfP* 50d<mAM5mm,E>R}&
RyOMjvBRcqQPwsVdnFXSbrgHEHTqHsz" !x1gloZKsWN0~ ;^8M6'
ODVPUXyEJKhsUtycgPsOSQMkvhLNp)%H-3+FFUp\?[IaxVvzO]H<$
xhZBnPehjZYPhpsqdbJcLldDZlaqA?QtO!LW}80YVI$AjHG*gLK5[%
XjMjjQxAFxFEOZUfchevZPhWrwMpBr) n R#U)%$Pgo*7_z ZK68#
gJGyEIqhmBzQlzuQeQjaFDjyJQGQc@b;tsuMJ_Ow]@]6i*@E&d'j$
TnGjKyVhNZxkRhgyQGINfhfGXhkD@R*u[|IRBS}7Eg@8#$:=%p[n
niwGLMbNFirOiBuQEOIZXTxTsKfzg,['-a%0ON1/,2pDtV\/|%w9#
NcqBLUfcwToOCeGfJaJRanHcDNBHEXKaL6M",nb9n@_g%Dz{HNJ4h3
ciWKGTJpigmqbmTmtmBykQludompEavR'h;gy[g/];UPYKwy={V7#
gfuWFrfZIjfTKZiaoMWJwtSdJjcLUmcHE;5z&"JtkISN-[X)7Xem!
spsKvFHZZrijZVZgYybTZOesJTjHcLSK|$4|}185bA!c0nz=}P$i%
fkxoNctkMeWZEoXliOXkuCaitXcMI!kVU,16Wl?d*IO!!"G}ua:I(
ZQVgiHoLeEQPVMEHBDljEwnplpquAh1B;JiMi0t!F4Z#7A)&35uZy$
WkSBxREaxNKoYzUdvDrTDhpEYFAvb\TfcZL}?D&hdX,M?e\7&0nd8'
mRtLmjsPEtthQgTQbGvuSYwdBsedEEHv1 V1v7Fi' (!9`0z3) "!
mrUesXgbkHSaGIdMoiWLGESUJydsue#u:9,]Ph<z]luC</f-D=5r!
HNZoQXhIGTjiUOqgfBQbMAZPQXznB%pR^)K@H9$NvKK%[;#RFT:M)
slfJYWHlShqbYdLjoHuGpjLblrtq;H/Bxrb'Em\N{o]1 0ItM}tO$
iPvljXakFkTJKlHmSpEjwgDmwPrdq&/_cqCL72+_3t#K91[/_Y?c
SECcQWxkoKZZIkGrqUcQkyJjteJlf3L1R9X[4Dfq(QGlh^k\9Y<,"
OdCvNdSaWRgVBqtlidRResNRyRUX2qxF;(lN-RZ<c,{+3|&R|8S^$
KmdTyQsHhsbIICyLyueQDkOmyppX<^ G`2W{(l4j|4[?tBDnaG=S$
dlXyooGGrkCqWQSTyTjWkkVxzAMj&_Tu;`_=[\!\V<c>NaKP39PJ!
lSlVNrbuDHVPJfOvYqeUZZVxnEWU9#E<sE{>DR%@WC<&d@ftaPR:,
SpfgrFYxWOBvEDSGfTEAgAhbhAohbZ5cw0Wr)~7 jt2mz9fdY"!Sy"
eBAojWURvcCkMDPRbcFsssWYMsrq wX3%pJS{UrAz2Uv( o6Fw0K$
NtQaQLkhckQVIaIZERJoKITcMKvzBF^#z`G,9_<98T+6j%m0f|DFw*
bQiBCPxAwFsxfBzFBLParwrmotjmcUmJZ?iIFYi'%r'|$}}&mc)=%
AaHnVNUsxljIgbpOvmiglGAMCFWL-Kz$xN5CISQ,Fleaw%QJ@vp0"
QsPErNKDLyztWENDkSrYEmhuiRSWLtVW)r,r(,J?<#_y),TQOf:P#
mGraxNeTcfZaTtQPrAFtKIUVRimL5_&5Ei<$wRf]Rewt_H\T<'*T
cWnZoOqvhYHhukBsbRJakmwGiDiK=G,\+o^w\bMe$95nU1K[43Wd!
gxymssgUQfCTpyoOvYLBRbaqACHDA&rY_{gXJ"b9P&^]Xjrt[3`ZL"
DtrtwpibiXkYpzHHnxtZzkAfxVJdF-IEI_8*VWuiLZ,K)b&Sq&(R#
GWSBJEyXHywJPCJszMbEOPvzdaHQL\#HlQ&zynHY:G75BSvI{?Fl$
ZcDXELxfiSJRkaZlFfgpydPDhGhwtM'P~$j}dlQ ,_VEC(1|rdS_"
IuWgZllcceaQNbhEBEPDnRMygjiLv&fk19DmqY%"O|0<p]0|{A&X!
OkCWgErHkHzvCPAomdaQyExbSvJAN;J*Z|09 <gDTc,^1AFi<H50
lqwUNwgDaAnIgcwxUErxahGREfzqO QL5=/=)-,wy"^)/=CzVw,[$
xFCpMUgMrMYHIZYwXNMWcFUcgMWbAo{f48#gcLPDr!ih!,#SjE~(p%
sNxRLHRJfqAuqAcDFQddAXvNqfbj/bIdbPW?O>*8-P!# '#5d*[,"
EelaQpfiwubRMGAYjUmHevxduIFkA2*y+7 0]5-dN@F5(|qiCSF`m!
OxdDjNuluaVjfYfcTXqTDEnriIXInO1n6Q3}Un;!ASB%d9rY1]x}!
uocbQyEuSgJuWVijdkkxIZuCmxexA YopWDGzUS)!?S{$?axq1+;A9
RCAlDtzoQQAbDmNrAmswyNspSFHJfr^I$]JM0@P Q7H_M"CcWTRv!
kpJQiZMZBCpDoIcccjniNHSoEvgCAcx#%<6KLzo1 fkc;[VnFG[70"
KFQfdDdQNuvOUsOUwNllGgnPKyzlvuJMdo$0ecduc-3tCsFM~i&S$
TvGUytjymehULppxTCHGIwjOspyCAJh2aO;=[$'8!su!-2lwE#6q$A
JkSdyCmqVGDIMdtFtiiXIGzTLGuQA+q`ADB"BN^5r/<k5y:LuN<!Y&
QhGJefJegWGDCMljOibiNBVJcjCgA6SX^W4cYx'|NCEXwWbBBts1j"
fKvmhxNkshcRVZKbSIzQULUnocLO5dSsqfRMQdz@@5p #xX\$ +(
RORULiPyKhtSPqgBiAVNxadEvyYdd(68o:= Ea`?R_a%8w;eZsz;!
WnmekRDVTLOeOhbGQEurTmaHXAWr6= MfjNp-)R*?6);!W^,0NE`%
FixfAgWkCJRpoVfkzKTSOFlkjoIjA0i;FaP6fDy_J-{M~#z'aS;fP#
RBHREzhkLWMTbJPePfwhGvSbmvRm%6Z)56w:2Z;Sl[8uG5v>,[ih"
rJIcNoeFUbtpSkeKbSlDwpuiZDZYepB%C>thEmjeQvm*H5CWk0C-#
VnkAqRMeFxoHmksMRCOuGkTeciNBZC8ZsHaqPY#CWJ8Lxb(9,,7~
JaDiwrNKGWgIShrJagmTBtmcNtzBAXA0MCWHrbrn_"DU&LZ[m[1je#
ePmCbXHXIBpceGJjfLMLuvdpAsjFA(w}Ad?:`-sU b"G<0Fe"M;8m'
uBqsUCQsSehedismcDclEbSuVoaUsR[t8#:#Y1$_9,Y=a,zN=Wek+
cNHVOLgNbXSIaSlnCffcfzwcZWnMS|XXr-?}6RW#l1`S_Ews(P4y%
EgdgYmUDRGEVchjtPvoqDqYuUFEVAb${L7rC^'zOTQ;v,YqihI0`J"
rhFoLQtmTqkBmbqziUaEPKUjekhBAC}b8neD0onkp9Oo7\B2jcC\A#
dHbDadyZMychZPUWZPqdMRRjUFmNkKsoGC0Bs/ZF)t`qix0jM:8=$
fahVckRgogWFijvbImieVsXJGrNU_mWi1,Jm;lE?7Oz$;aTxBAd\&
zihfNFWltbQjblNopqkgbqncpOZtWiyz%n (m(iTIc K "}W{`-6%
KLojDreHdriFrTSiPHlFpfNnpqOr`Hk'e/B9]BM`tm`I>de#S ]j"
emCToHIcQfCrJKGSDQGCZEhSuMHpA/^~,)2'l g)%pPr~c<rkT2`+*
zFlpzRVMrIiWhuedExZBglFraiUSs{w9!p]UL:"c =|B'|3:]_TV$
HKlntPlLvSxJqFjYeTPIKVqfomFr:dI&>+g&NxM;jN]<z9nC(qC>%
bXVqzdkgsDBuXbTccPlpTDSsbSqx[*dK*yE9N^%)&3E@&?ld1h\e&
gcdckwVxKkOewCIoMAJlYouNusMUiE9I1\(BkIG@B;>P=V~U2}Ot#
rrkAzjVdsuHVcFAPllCSDqsZJzjRo9M9 ^2W/8ma:'KX)J`C!#GE+
lwDnhFzMZHQAgxnpYnkcBqqRdnoz&q:c!%AFfn39={l&DS-m:b(u(
yWCdRWbOchuKKFAyIHWafiLYqQKeA9 %N2Y']&`)9Pk%d%A*R^hP2&
GcwqxGAyjZxtuOmdPuYAdikxufrl!([M+6&AFAuS6U)&8NeSQI_C$
niZoCxHGHRkJksCFyXrGXnYhncCd_Dw V6x!F}yk+<C\+6#Eg bG"
skGurvKzzfrJvVmBtDnnNNcauOjU7\\we68E7\5y\! pG^k=6QS&
jXdeXjHLfBkdWbRtDEyTwrbREKxHb$!1JSe!O@[lfBqbK!P{9v!@W/
HwiDJBWxnRPqyeepHsFQRizjRgfNUc'x5}5Dw6g{[RDuv*C}/R"
QRHRzINMAnzrloiUYGDOZPdkinyBAfGZIZ3V:y/Wc$'ND&'^=A9]/)
MnOuSkBNdOBgDjnRErQtBEmwArbSjYTY"D,y60+uhB>mk9B{{;(/$
ShHtyfxSYPcpSHhnFfPAAUHmQaJG4>%I?36*L1VfLk8k<<N|/4#g
mZRlnONFxFYfmEDxODxuCBGaNwWuA{tBO<TS*r*}G^_Ne;d\tiSB'%
TsReMZUWmfFRGdKBeRXAxJAoNxwcRuA/P>t,9`B*f$QdHmDcot,H
SystemString
AssemblyTrademarkAttribute
AssemblyCopyrightAttribute
AssemblyProductAttribute
TargetFrameworkAttribute
System.Runtime.Versioning
AssemblyFileVersionAttribute
ComVisibleAttribute
AssemblyCompanyAttribute
DebuggableAttribute
System.Diagnostics
DebuggingModes
RuntimeCompatibilityAttribute
CompilationRelaxationsAttribute
AssemblyConfigurationAttribute
AssemblyDescriptionAttribute
AssemblyTitleAttribute
STAThreadAttribute
UInt32
GCHandleType
Module
GetExecutingAssembly
get_ManifestModule
get_Target
LoadModule
ResolveSignature
AppDomain
get_CurrentDomain
ResolveEventHandler
add_AssemblyResolve
GetTypes
ResolveMethod
MethodBase
GetParameters
ParameterInfo
Invoke
Encoding
System.Text
get_UTF8
get_Name
AssemblyName
get_FullName
String
ToUpperInvariant
GetBytes
Convert
ToBase64String
GetEntryAssembly
GetManifestResourceStream
get_Length
Buffer
BlockCopy
MemoryStream
ReadByte
MethodInfo
Environment
GetTypeFromHandle
RuntimeTypeHandle
GetMethod
Concat
Equals
FailFast
ParameterizedThreadStart
System.Threading
Thread
set_IsBackground
get_CurrentThread
Debugger
get_IsAttached
IsLogging
get_IsAlive
get_Module
Marshal
GetHINSTANCE
IntPtr
op_Explicit
get_FullyQualifiedName
get_Chars
RuntimeHelpers
InitializeArray
RuntimeFieldHandle
GetString
Intern
GetElementType
CreateInstance
OIADNAIS3q
.NETFramework,Version=v4.0
FrameworkDisplayName
.NET Framework 4
1.0.0.0
WrapNonExceptionThrows
_CorExeMain
mscoree.dll
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
<assemblyIdentity version="1.0.0.0" name="MyApplication.app"/>
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v2">
<security>
<requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3">
<requestedExecutionLevel level="asInvoker" uiAccess="false"/>
</requestedPrivileges>
</security>
</trustInfo>
</assembly>
LAPTOP_COMPUTER_ICON_188754(
VS_VERSION_INFO
StringFileInfo
000004B0
Comments
CompanyName
FileDescription
OIADNAIS3q
FileVersion
1.0.0.0
InternalName
LegalCopyright
LegalTrademarks
OriginalFilename
ProductName
OIADNAIS3q
ProductVersion
1.0.0.0
Assembly Version
1.0.0.0
VarFileInfo
Translation
Antivirus Signature
Bkav Clean
Elastic malicious (high confidence)
MicroWorld-eScan Clean
FireEye Generic.mg.192157321ae17032
CAT-QuickHeal Clean
McAfee Artemis!192157321AE1
Cylance Unsafe
VIPRE Clean
Sangfor Trojan.Win32.Save.a
K7AntiVirus Clean
BitDefender Clean
K7GW Clean
CrowdStrike win/malicious_confidence_100% (W)
BitDefenderTheta Gen:NN.ZemsilF.34722.jm0@a4dbsro
Cyren Clean
Symantec ML.Attribute.HighConfidence
ESET-NOD32 a variant of MSIL/GenKryptik.EWGN
Baidu Clean
APEX Malicious
Avast Win32:Trojan-gen
ClamAV Clean
Alibaba TrojanDownloader:MSIL/GenKryptik.62dcc6fc
NANO-Antivirus Clean
ViRobot Clean
AegisLab Trojan.MSIL.Voda.a!c
Rising Clean
Ad-Aware Clean
Emsisoft Clean
Comodo Clean
F-Secure Clean
DrWeb Clean
Zillya Clean
TrendMicro Clean
McAfee-GW-Edition Artemis!Trojan
CMC Clean
Sophos Mal/Generic-S
SentinelOne Static AI - Malicious PE
GData Clean
Jiangmin Clean
MaxSecure Trojan.Malware.300983.susgen
Avira Clean
MAX Clean
Antiy-AVL Clean
Kingsoft Win32.Troj.Undef.(kcloud)
Gridinsoft Clean
Arcabit Clean
SUPERAntiSpyware Clean
ZoneAlarm Clean
Microsoft Trojan:Win32/Wacatac.B!ml
Cynet Clean
AhnLab-V3 Clean
Acronis Clean
ALYac Clean
TACHYON Clean
VBA32 CIL.HeapOverride.Heur
Malwarebytes Clean
Panda Clean
Zoner Clean
TrendMicro-HouseCall TROJ_GEN.R002H0DF321
Tencent Msil.Trojan-downloader.Voda.Dxcz
Yandex Clean
Ikarus Trojan.MSIL.Confuser
eGambit Unsafe.AI_Score_99%
Fortinet W32/Voda.EWGN!tr.dldr
Webroot Clean
AVG Win32:Trojan-gen
Cybereason malicious.16148b
Paloalto generic.ml
Qihoo-360 Clean
No IRMA results available.