Static | ZeroBOX

PE Compile Time

2021-06-19 21:49:19

PE Imphash

f34d5f2d4577ed6d9ceec516c1f5a744

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00002000 0x00089934 0x00089a00 7.89810151432
.rsrc 0x0008c000 0x0002168c 0x00021800 4.66697607496
.reloc 0x000ae000 0x0000000c 0x00000200 0.101910425663

Resources

Name Offset Size Language Sub-language File type
RT_ICON 0x000acccc 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000acccc 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000acccc 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000acccc 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000acccc 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000acccc 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000acccc 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000acccc 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000acccc 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000acccc 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000acccc 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000acccc 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_GROUP_ICON 0x000ad134 0x000000ae LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_VERSION 0x000ad1e4 0x000002f2 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_MANIFEST 0x000ad4d8 0x000001b4 LANG_NEUTRAL SUBLANG_NEUTRAL XML 1.0 document, UTF-8 Unicode (with BOM) text, with very long lines, with no line terminators

Imports

Library mscoree.dll:
0x402000 _CorExeMain

!This program cannot be run in DOS mode.
`.rsrc
@.reloc
()tP^
(I.kV~
(iiF18
(*9JC~
(&t(E(=
(]ldM~
emoN M
b <AM'a
q*af &z
.Wf aL
X hB%0a
@a V20
|hX 5 4va
b e~x9a
q*af &z
(Tgk9~
v4.0.30319
#Strings
AssemblyProductAttribute
System.Reflection
mscorlib
System
String
CompilationRelaxationsAttribute
System.Runtime.CompilerServices
Boolean
RuntimeCompatibilityAttribute
TargetFrameworkAttribute
System.Runtime.Versioning
AssemblyTitleAttribute
AssemblyDescriptionAttribute
AssemblyConfigurationAttribute
AssemblyCompanyAttribute
AssemblyFileVersionAttribute
SuppressIldasmAttribute
AssemblyTrademarkAttribute
ComVisibleAttribute
System.Runtime.InteropServices
GuidAttribute
AssemblyCopyrightAttribute
df82b671-35e2-4ecc-9eba-c7eb86d03ee3
NVA.exe
<Module>
SchemaRuleProducer
Rzfyslvirdpzjmrihjsmoh.Producers
Object
Schema
Rzfyslvirdpzjmrihjsmoh.Common
RoleExporterPool
Rzfyslvirdpzjmrihjsmoh.Pools
System.Windows.Forms
InterceptorStructFactory
NVA.Factories
InvocationWriterLicense
NVA.Licensing
Rzfyslvirdpzjmrihjsmoh.Messages
ExporterRuleProducer
Settings
Rzfyslvirdpzjmrihjsmoh.Properties
ApplicationSettingsBase
System.Configuration
<Module>{6DB9B37F-2762-4068-9A8C-54D97370E642}
StubRuleStub
NVA.Stubs
FilterMapWatcher
MulticastDelegate
WriterWatcherResolver
NVA.Resolver
<PrivateImplementationDetails>{52EBB1D7-579C-452B-823A-AA869F234792}
__StaticArrayInitTypeSize=256
ValueType
__StaticArrayInitTypeSize=40
__StaticArrayInitTypeSize=30
__StaticArrayInitTypeSize=32
__StaticArrayInitTypeSize=16
__StaticArrayInitTypeSize=64
__StaticArrayInitTypeSize=18
<Module>{83500e4a-a98b-4ec4-943b-a5d276d8dd44}
_Resolver
ReadConnection
SetupResolver
MemoryStream
System.IO
CryptoStream
System.Security.Cryptography
Rfc2898DeriveBytes
RijndaelManaged
SymmetricAlgorithm
CreateDecryptor
ICryptoTransform
Stream
CryptoStreamMode
get_KeySize
set_Key
Encoding
System.Text
get_UTF8
GetBytes
ToArray
IDisposable
Dispose
RuntimeHelpers
InitializeArray
RuntimeFieldHandle
PrintConnection
set_KeySize
UpdateConnection
set_BlockSize
CancelConnection
DeriveBytes
RemoveConnection
get_BlockSize
ConnectConnection
set_IV
AwakeConnection
CipherMode
set_Mode
ManageConnection
RateConnection
DisableConnection
FillConnection
exporter
IContainer
System.ComponentModel
context
Button
PrepareConnection
SortResolver
EventArgs
ConcatResolver
reference
PerformClick
compareitem
FillResolver
EventHandler
IntPtr
add_Load
Control
set_Dock
DockStyle
System.Drawing
Single
ContainerControl
set_AutoScaleMode
AutoScaleMode
ResumeLayout
set_Location
set_TabIndex
get_Controls
ControlCollection
set_Name
add_Click
set_Text
SuspendLayout
SortConnection
InstantiateConnection
MoveConnection
CloneConnection
set_Size
RestartConnection
CalcConnection
ButtonBase
set_UseVisualStyleBackColor
PopConnection
set_ClientSize
OrderConnection
RunConnection
set_AutoScaleDimensions
TestConnection
InitResolver
Application
EnableVisualStyles
AppDomain
get_CurrentDomain
ResolveEventHandler
add_AssemblyResolve
SetCompatibleTextRenderingDefault
PrintResolver
Assembly
ResolveEventArgs
GetExecutingAssembly
CopyTo
GetType
InvokeMember
BindingFlags
Binder
PatchConnection
DestroyConnection
LogoutConnection
GetManifestResourceStream
ExcludeConnection
Thread
System.Threading
GetDomain
CreateConnection
CollectResolver
m_Object
ResourceManager
System.Resources
indexer
CultureInfo
System.Globalization
AddConnection
CallResolver
GetTypeFromHandle
RuntimeTypeHandle
get_Assembly
AddResolver
GetResolver
ResetResolver
GetObject
PushResolver
ConcatConnection
InitConnection
CountConnection
StopConnection
ClassLibrary
Hpxulzkohcpxcoe
SearchConnection
FlushConnection
ChangeConnection
Console
WriteLine
VisitConnection
.cctor
SettingsBase
Synchronized
DeleteConnection
CallConnection
PushConnection
m_Watcher
Module
VerifyConnection
RestartMerchant
typemdt
FieldInfo
MethodInfo
Delegate
CreateDelegate
GetFields
ResolveType
ResolveMethod
MethodBase
get_ManifestModule
PublishConnection
MemberInfo
get_MetadataToken
SetupConnection
SetValue
ListConnection
MapConnection
AssetConnection
InvokeConnection
caller
Invoke
BeginInvoke
IAsyncResult
AsyncCallback
callback
object
EndInvoke
result
m_Writer
CalcMerchant
$$method0x600031a-1
$$method0x600031a-2
$$method0x6000338-1
$$method0x6000338-2
$$method0x6000346-1
$$method0x6000346-2
$$method0x600035a-1
$$method0x600039c-1
$$method0x60005c0-1
m_e049d7a2790e4044848f960882dac241
m_4f859e28360b41b0b16569af0638a395
m_bb5112e060c44391a97053e4c4e5cd85
m_8eec8ad8a6d94ed7b77c4ff8164575b0
m_70eac028089546aebb6e1158dde3171e
m_2ded98d16bd0420f830a6b363935d112
m_81a5cf746ca54a248676e54a32d54916
m_3d43844cfa474f6a801de92524de022b
m_5089eaf77a76405e895c5e97078f64d2
m_bc9f91fcfbca409893dee4f9ca0d5a0d
m_75b4bdd8f34740ee9b6f7c7f13c2ca39
m_1ca1cee079eb44439cca748c45a3f4c3
m_4ef8f701870c46a7a73d6b9778c1bcb7
m_9975bb78bbb74ea49dc3e3fc0d850b69
m_51f819c22d3c4000bec33dff62e6990d
m_2671b357c6af42acb046003471c2ab33
m_6a09a517519d4e4b82b0957d7a284fc7
m_d38d266d7ee142fa8aa5002f5e24694e
m_03a881046ba5456582b39eca2c75e99e
m_ca8f2985a8834e5aa87dc83037bf9475
m_f98fd4f7ccda46e8998092b8ad55b88d
m_6703eb654ae54eb589148a9dbba31947
m_78eb39398ff94bfaaa2f479d6c088d65
m_076dc0fad69445c0807c115ed7763444
m_e4691c214c1a4d66a03c6dc28b4f74bd
m_956743b22b8343bba9ca4137003af1de
m_5024de7363b14953b857f65a3eee3d23
m_52248f573acb40698ac25cc5dc70e04b
m_02b1e43944d449a6b3da0c98c56b8c96
m_52eaef435a7f40f0ab7ea2b1fe709a55
m_938bcc8e25044d5eb368023756c1eec1
m_13670583f00642e289b7ac2244a44ebb
m_5bf54c5efe174543b19d5415286062ec
m_d6a96279018f42be9ee9f2eca346c481
m_5d552961893547abb5ee7c8fc8e2ea3b
m_205d8d74f7a244a7bdcaebeb95db5ace
m_0204f296f2b24408ae05ed3ae77bdbe5
m_32039d8a90df4fa4b009958491fe5d09
m_a5c61cea844141de865dcc2882f5b325
m_1d03efc37e864f4b9bf95a0a10ee13cf
m_6238138950ed495f883ee10a7c646b43
m_ea84c17850184c6491903c38ec3d15e9
m_b042bce1aa394cc7b29bb31a5c8d5515
m_e729d93c5f554dd19ccba41394a45c66
m_3e04e5e609b9445f86fa6d5563dba4ab
m_8c00d237c56a458e875ac0466f97ae29
m_be00376e91a84bb7864339d6c9b95613
m_629c1a99895c4abeb04c252961a9a832
m_bbd00dbf3e34485fa3798411d0fd6be7
m_ac9367a58ae64df09fb884f2497e92fc
m_0f680f0b8a3344f5a94a2e0e2379a127
m_ecef8411ca6744ddb9857d7bd836d763
m_d356861d5d584dd3b4aee59e2ff56e3e
m_830b3ec25e574bde8658097877a2d327
m_2cb34ce3df234bba972f6c364a519ec2
m_09d75aa7f65e4f88889e09e48c1e1cdf
m_182dd8183adb47d1a83f5de008f43ad8
m_24427a9da4994768a59a763f24526897
m_3203b87a43db436db6b1e3bcb580633d
m_a0f9ed4e07d8407d85fb825a1e407ecb
m_450a5c2120d549278c8d605b6084310f
m_dd3de446bea74d2a87956f2b25c7b681
m_575f3b7034654abf9d38cac0237e74b3
m_440a6ac28e414fa290a8495fca0e18df
m_e0db835dccd447508fb2ff9c3a38995c
m_318d637fd5214b85ab0ab6a75e14c1c0
m_ac3e175c5f9240738596048465cc6ce5
m_5e46187446cc49f8a0fc4c101bce5759
m_47a7376b06554614a9f8464960380a25
m_c8356b4899454ef3b1b6869ecdc71e6d
m_dad59bf49a9941a7bc6ac9975938729d
m_46eae15572b347da955d8f34c6ffd060
m_c69a891fc7f9404b85c430e28f4deab8
m_de21ea4011e142fea9a7708212545e9a
m_93457e3d99db49f7b17991a6351312b5
m_6a7df3689a0e4fdbadfbd3ea9a7e581a
m_0479549a52c045389c84986f4ac2e390
m_2a0e1415572b4c77a950f3db9fc1711d
m_77067ba9fd934fad9aa45845b5064d16
m_2de5c038653e456c806dfa0c1bf55517
m_55bdd67d50664c209bae90883de71626
m_a82ac5a66e96436090b4a5bb7435df40
m_0bc3c80118c741008a1738b970344560
m_0d99b9859be74d88a00e1631e494a6db
m_e7ddc68ba14c4d20854314db705b0386
m_ce19184b60634a648d6e7e35116d5556
m_2ec644b3d9e04d12b9e40a032ff86156
m_6552207b412a49a0a55eb9d4187599be
m_f8eafa32e87a46e08d15f5d316a7278b
m_36708c3f615c4e2096b318c1fdd59239
m_bd12bacedc964578aa589b0650e33c55
m_a7e5d44c3a42437fa04f65b32c51edb1
m_59012253b35848808d8aff507794e36f
m_f0688ff80bbb4d6db4b537f4c89241c0
m_b27e213a69b94edd902c4207aabdb534
m_a29a1cdfb150442586bd75600b460f30
m_f577f9b253a044dc804e5690cab530f4
m_ed033f80566e40e68c0f41d13c95f566
m_b43b5d1bd4cb40ea92981ecb73e0d945
m_8c3fd0aeec1b425bbc50d16e49ffe4be
m_dd42c59e19ab469d859ffc0e150e32ba
m_924d50d0179747aca725034ff2042694
m_8a7efa5601af4df2b3e8a6caac0d3924
m_472721820f184ed5a45555d8ed7c33aa
SortMerchant
r0466fb9edf264d39a8ea83ae877f9c8c
CloneMerchant
InstantiateMerchant
MoveMerchant
STAThreadAttribute
GeneratedCodeAttribute
System.CodeDom.Compiler
DebuggerNonUserCodeAttribute
System.Diagnostics
CompilerGeneratedAttribute
Rzfyslvirdpzjmrihjsmoh.Pools.RoleExporterPool.resources
Rzfyslvirdpzjmrihjsmoh.Hpxulzkohcpxcoe.dll
NVA.g.resources
aR3nbf8dQp2feLmk31.lSfgApatkdxsVcGcrktoFd.resources
Rzfyslvirdpzjmrihjsmoh.Properties.Resources.resources
WrapNonExceptionThrows
.NETFramework,Version=v4.0
FrameworkDisplayName
.NET Framework 4
1.28.2851.9944
$e9e044ff-fef6-4a80-86e1-d7c5a8a8ba8e
3System.Resources.Tools.StronglyTypedResourceBuilder
16.0.0.0
KMicrosoft.VisualStudio.Editors.SettingsDesigner.SettingsSingleFileGenerator
11.0.0.0
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
n^#k7$
gfC#NH
Z^a;f
C;FPCf
XDo{Th]
&.A$tl
3R+<dD
=b:)iL
n*q7&A
o+ZD7)
=J[}>E
=AaGKu
Gz_emi
DE_/<;hP
0+.$$Z
HKip^}
#27|^j
j<rnu\
\r,U~`
'AzJnY
t=&I}*
b9sY:I
/#'$:{
}6qEpP
/!|W?q
D)3ONQ
{eO9Oe
?d^m_CC
zQ<@,q
uODF-r]
rz:\!)
$<d2cHH
\6G.@*
2{t=BA
bjF.L>G
JyH`u,K
iuJlX%}<h
LO,,W
j@z4.:r
S!|kM<
<1?7d[
1MfJJm6
0&Y*,sC
~&(S2;'
54&t[9
vzF+-X
j!}5yi
_>`B@b
Di{xdV
+ISm-2
O-VjZQ
|~%]IE
q!k[@G
u5,p<'
7Dq:%E)
+,&9.yX
2L6Rv
\L:BA)
$i+$hwU
<'4d--
[E.-yt[
wi*~0?
{VA]n_
\caP
n|f1$;
v^SqyS
Z|/PG'
"$~@NL
ti5?JbSw
B@2o'>
!zvETd
>sH(h%
a8u#>Q
`k%8OV
<s#<^b2m
GDp_)Wlk
&wJ.NBJ8
HF!kNt
AQQ{v!?
D.eA/cDk
T$tX B|C
WH"`ILZ
Vm(J\"
y_Bo`~
X'vOX\
G@p0'%k
WJrrQH8p
$r<?XS]0K
tR/WcO
~a8Ch`:
5m(J?>|
Y\9Z:U
OJ<nZP#
Pyif7`
{'c{;}
i)kq3\P
hB%XS1
G]xB*}P
M#t.el~
)a\_#?
I@kc$Z4
]b%7yF
o@kxi)k
%CRQnx;9eR
yrC=YX#?
Syie%K
tB/Gl3
Jb{y".
;7'n]A"
Dw,M@0
@xp\*e
U,@$,^Qi
9IYz}v
-,2)kr
&,vArr
>$3&qL\
W=Hlen
oKY%%
D'g|#E
UN$F'&
3{YHd5O
q,my7^
Z(|2Rj
.%#G\^En9
SKmIVs
mlB~:Ruq
GY=QSp
?H}WO/
G}_S~D
AOw9V.S
_F'AA>N
tDY+Em
GuFs?@8
.gY:*i
@u,!x%JG*
S/O0l$=
4fRk:Fd/~c
Wz&ry=}
9iziH.
tm1<~{
:.UE1jLF',
#}u|=2<
ywZs>m
qe@~o,@W
"/41U]
0v>9=E}
9F7-w8
xoz#hp
+{]y4HH
~ OB8C
1j@ B:'YvV
7p""Ll@
9o$AaM=k
lEG~*)
]'i@&3
%(fBLZ
Pwjk^!
8^}#,SI
+t>H-:
MGWMJ6
QI'%(
SUc[^jf
i)2,Jq
_#gu;b
rB*B(D
Mh-TP7
TRT/q&
m]^B_V
CtKjj,
]kykW(
39{<Duu
U,0b3\:
=D(~L]
MEeTY)g
^7h\U
q<{_"E
{&*YaU
)EG&f
A4[6A`$
=5MwOc
]EK\@O<
XTRR,i'S
mTh\8B
jM%N!v
hSG}iD
ge%rb#
eGfKkc
Uw`",'
~UH|oXL
u*]u>;
MMAGoX
9E$b*!
kc915-
TmF/|I
00dc~
pM@2^?
=:k&O
?hsPf@
z('JNt
H8H!A"
nW6YB}F`/y
zilKi'
,ct\u3
Ucp;{]
KnE4cn
jM(5J=
w2XX5=
E!5^YK
)|t|UTC
+EmC ^\/2
cb?r(^
e>m/q]
lU(`E'>S
AZpTJ"PM
hQ{XZ0
gs[Fv!
/S@U?G
e0"X&+m
AuvQfa'
p_}fnw
ci.sOx
bV;[U
J4N&h%
DQ@BvF
zG G;U
K%Q2d{
Aw*F_C
`@L`o-
5n7Qw%
SL-=z\D
l})iOB
n->[J&
x$~l~=
GUF[`f
A'Cpu
:GUsRJKK
Kx&lq6t"v
SO`770
l=qU+Z<X
1rvJp&
!h<#Mb
)s=q&aG
IY_P\`_
+rU1S-(
AZx/16kW
OEN/(/H
j3(!r{k
%oLRaCI
0*!Ru
:{By^n8B
A7c46L
zHMIMM
Ep>Kr"
t6&$w&
S9 T2sp
R,-K,
*o6 x}
sgs8"-
INbXdi
j9:k+Az
T~0o[*g$
1:Y,B|w
:cy!_"
HkVi,)>
b`sH2@
=ACN|y hFE
~s{'%|
~4d;wd
pOi8.>
DnFMA"\~
U{-6!E
[2;<;U
dW~C27.
?(#"9G^zGD
7OamC;
6 'E}Q:
_kp=oI
Y<p}%?
g9%=z-
B.z,|B=
WV=RS]
V\&q]=
#gm%8!
c >K0a
(POLivE
$;t-BE
@,i&=}
^{?P(;~z
LOc\fu
;CuSiS
GmXxQ~]
6Qz+{*
^lHhg5
kh}*p1
<<Ty8f
T"d'es
u$Z3dY
MB<FLHuAgj6%`
c<85<j
BosGWg
cZk?}er
T_OfP
V,pa^_
A:6p
.y/qqr
p(=hK1
_pID`V
"jgyF8
rU2mo6h=
[\?^gZ
FOdd?{
O$)C8j
ZNy: H
OXwSz~
5X0,[8K
$ERz8T
'uZ~FW
Y<*u9t
3Kc*Vo
;%6;g0
SZF^ky{d
cG9+Z_nv
vu+%%cr
r0`e}R
J[9-bu
2&k/D_
pRq>+X
I*<~&$
koI}ZF
Y~wht*
,%WGEq
I\4LEJ
y["M2v
I@b8kv
_$~]>t
m$VTd@
sUJMr@
>(45Rv
`y\ 93u
f,Ke CP
}r0~j{
VCR%Oz
0gAU`l
dR'nm`
Q*[j{p h
mvHpnT
)r6GSy-g
;b&!QV
MHt?H<
]0OcD!V
}/h0i0
T J=}f
nuP*5r
6??e/U
O+'!7x
_FRa_j^
bZmf5R
KZio{Ky
4!X_.2
KP_Ior
LSAMzU
{AJsBZr~"
uCx_{
|`f]m^
y[Z@Ky
<A%)y0=k
<f_1lN\
Hy'sOr
(>~9F[*
7*]j@||!
YENW*d
{XApCM
O-8:rY
ng5Rcc
1=@= \
S(]z&'
S> MJu3h
*:&q]4
Fn[T96h
Q,oD~(
7k#[4R ii#
^z{<{K
WG/-w:Qv
80CM6<
9`j yT
5BTW>
) R^yZ
j{GZnA
Q0 )iX
:{T+pKc
$,)'*l
{bOf/0h
WuJoiK
iR/A$EI
x)~7G
QM4{]!U
])/CoT
\nA.a6T
HQw&/o
fDw_ne;
X#sU.X
bRLJiL
,2F,Ij
R3Y1U/
Z([\8l
u:G9.K
hFg$T,
ib]s_
1<\Yhs)
jr&_Zt+
P!>)+~
E9g0-w
!Oci75q
9KV-A?
}E#LG}Hz
7eM* >/
x<rv{nn
:f(c#m
#|="tS
Bc#36V
d'czy?
K8_tqf
f<M*63
DJ0l+EY
XDMtD$T
l0BXSuhmN
`.wNY}
%,5]3F
A&ZW`C]
f&EQ@r
ExVenO
X'KTk_
)j}t9F
r^LITap
*49?4H
$2MK{}9
/_#'))7
@Dv-}b-
lf83{6
LJ4o%a.
yi45&7
+;){H
yBfag^x
2GVal'B>
Pp;wb*
>`E~D+L
bgoWkp
X9.w9q\
G&HDai
0il>U:(
C14;+L;OiJ
?(4\MN
U'i}HC=
@}R$ok
9oOI[Z%n23t>
g|%iSm
ZQ}(q
<H|_hlo
:D@)5Q
_QA/:a
a^7.5!
D [eBw
\b3*!!;
i'[O0K
7$?9d>!
S*EP'Xc
G^:8x#v
~)I_w-Q
}`Ief
UiB][
i=hOyS=
K[%j`gG^
uF8/[,
1/Ry7ec9
]#|u}W
jhV<4u
tJS.(X+
G9n#5e5q
QW2E7y_
54H3\-
o_rr.#@
uB6j/S.
Uu$B):
.p)(UO
_mqWdzq
NPH-7
'uk-y6
M'F#Du@
fD~4fv
mIRCN2
kTB^*=
&Zep9]'
#BQhn>
$@98Si
1~y!?o
|w>*"x
gsHK`q*
A6%KK
`-+AD-
O&Nj.e1
f[lq7[v
2&fgY
5JM;>6
8=1`=Q
J164C(
`x]qY3
o7..bR
tb6N+
<hz[_<
fnR_Hqy9
%"nx7?
7V}\u0
RaV5H_5
CJ:PM&
D[q*6
IFDOyx
)c{,~2
iHc{d>
nh?-US[!8
1bid.l
[&j`cR
-*<y\X>
nsf?R3c
kmXk_p
}lWs6:C
-mUP*M\
(fG9SOC
gIfC,z?
9y %4nO
"mz<dW
RR4z$a{
vAGb=8
AH=@N?a
lCL]{A
sa&{#v
*&x/@:
S0%KpD
N[m@0-
ys#I Ms?
sf;/tB
F<x|zR0{g
^,X!wVUck
\![bTD
D`sT*<
'x0]D"
liS{=t
^MSSs*
#7sn[?
E<7BlTN
wWgn,+tQ
B/o!D`
inA&.V
NY[F}7
q6,EHB
uQW^@(
Qa-lw@
:Chre\4
@qAZu33
Wdrh,1N
7osaL9
N4}wHaJ(
BU5"n6
jws&P.
=>+`9e
_t6rm
`4vK$s
Zz|^C=
9y!(pFX
CI#or5
]_O>$s
y2{mxK
wy<$]j
fHiV_E
P=iK>(
pNR"*j
Xa6 >C
y6_o',=
XkGv1-e
xXM ^Mg
[gEjLI
\yo,6:
U`g2|3
.nlZ]_b
7tZ=6:
]R9Iio
vG!V%+
dNsLdg
8 hT$LM9=6I
g9;47X
5OJ82L
B&v5e,
8Zf00@,
%x?tpaPe
}rb-gz
LdQ?Ej-
"yNF%=
WRsE:A
d%M5LPF
"H/U}
~L$NqLN
Y1tpQx
L2erD
)Fy}`Y2
'W:r$X(Dte
RvTX0w.W
T:n9[y2
+vBejk
CLlD`G
1Z#w^_
p>{{og
}HBD&
A*sla7
_u#M#kAb
'`J|Cn
}ipH*(
Iu(ePQg
U-$pjA
9+KE{<{x
8SEuu3
,`)-?J1e
yEemrxe
] 2&BG
0syGmu
O~L?'T
G`~YJr
uW@BnC
b&ShK=C
5ep!Qz
^{}UBy
Wocs1g
l8oEBX
+k\q\@
Jj3xQRc
.,X-1W$.i
aTWx<|
Net;XBj
ZD|lW"H0
v[)177
Z35t@W
pYT6;EM$
#IX%Lg#
M":$21
6*>&1+H
T8U* 7pSl
_0h0%G
Cme},E
X\nQHx
,8h%-B
8Mo`YM
z#iPm-2
g+f8Fn
'x,pI~
dKq)'7
xVlW@w2
-)]6~'
%>f&=J
5kWxw"
3G:&{B
&q8[e>
HE9UA9P
_S!B`6
eGv$q-
8v;P_xM[%8j
qxNP'+
AUTvqKL
HsjmMh%
MC}24(
D_l!e,\
Q)ytt%
^+|^t5$
Io7l\v
;)$3(9rY
Rg5hy/l
Y9@o*%
Q={&:8A
#}xbJI
KetdK9
2gIx6d
8AE<k!
3p5-2+l
YWzR27
=)8ph;
!;h-,tsx
Z8nOfg
](^'%7QH
b<Q{,q
h-EN`L+
}\.{Ka
&Tc~vY
7.'Am'~
FwMR~t
EVn*8T?
O^jP,]
Cyqyr[6
hX$A8slB/
e~nLTS
+s>[V/
a(JW36l
}q*.WU
/7rL'R
W^EX6@
AhgIFu
J|rH}R
)*G"{W
,#5D9w
>[:Xx)
c=F}gH
mA]L=:xS'
S6/%1L
HxgIrX$P]Ex
1F3`jo
X/[5$a?
TC6U>_NfL
EW6m9z
iOl,^
0tCK+F="F
,K"To%d`/
h$MLx4i
'@%[>4
jpNgX*
}3+kA\
zy%d'|
xu;rGR
>f?'0a
(<VEd~e&
Yxmu^5J
uvL5o0Kd
Jj7;]x
qeUNvH-
SXN*FH
mT{B}z
~V0d{*N
o>GZcg
N3EIgT!R#
}v_&yeh
j@AjL*@Dz
'08T`r
@0v=jLl
#"2{Y'r
|8j'o9
9-snr`3
`c7.ly
*t/P_Bz
&1{k)V
#%ejo
+Sit4f
^]QyK|
dg>yuLG
z7Gx5
b.3={j``
HV/2q
RwUrne
4)HZk[
U>,/}[
kZpptR1'
Jpef}*
],O~$d
SngeSWT
,ISwL
2uRUif>
n[^K)=*
t,2)|Ky
X|_dSG
~:=#|D
2p,Sm5
J^:1?\v
`2H8_';^
.PQ}!A
c!<&]
} =6dK
f.Zy$4
v} uB>VZ*K
=@MncsY
|z'jB~
A.Yz+6
\ZxhO
cUM>WmZ
'H+ "u
q'[O9,p
=B\F^t[A
??4ozX+
mNk]nb
!nDT]'
QX9E`
ew*uepL)+
{t~Qc
7`)5Qy
C)x|wnQ
([|d3\#
$jWC-42
#<Eb6$
S<BXN
<9S0Rx
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
fSystem.Drawing.Icon, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3ajSystem.CodeDom.MemberAttributes, System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089mSystem.Globalization.CultureInfo, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089fSystem.Drawing.Size, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Icon
IconData
IconSize
System.Drawing.Size
System.Drawing.Size
height
ISystem, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
System.CodeDom.MemberAttributes
value__
System.Globalization.CultureInfo
m_isReadOnly
compareInfo
textInfo
numInfo
dateTimeInfo
calendar
m_dataItem
cultureID
m_name
m_useUserOverride
System.Globalization.CompareInfo
System.Globalization.TextInfo%System.Globalization.NumberFormatInfo'System.Globalization.DateTimeFormatInfo&System.Globalization.GregorianCalendar
System.Globalization.CompareInfo
m_name
win32LCID
culture
m_SortVersion
System.Globalization.SortVersion
System.Globalization.TextInfo
m_listSeparator
m_isReadOnly
m_cultureName
customCultureName
m_nDataItem
m_useUserOverride
m_win32LangID
%System.Globalization.NumberFormatInfo"
numberGroupSizes
currencyGroupSizes
percentGroupSizes
positiveSign
negativeSign
numberDecimalSeparator
numberGroupSeparator
currencyGroupSeparator
currencyDecimalSeparator
currencySymbol
ansiCurrencySymbol
nanSymbol
positiveInfinitySymbol
negativeInfinitySymbol
percentDecimalSeparator
percentGroupSeparator
percentSymbol
perMilleSymbol
nativeDigits
m_dataItem
numberDecimalDigits
currencyDecimalDigits
currencyPositivePattern
currencyNegativePattern
numberNegativePattern
percentPositivePattern
percentNegativePattern
percentDecimalDigits
digitSubstitution
isReadOnly
m_useUserOverride
m_isInvariant
validForParseAsNumber
validForParseAsCurrency
Infinity
-Infinity
'System.Globalization.DateTimeFormatInfo+
m_name
amDesignator
pmDesignator
dateSeparator
generalShortTimePattern
generalLongTimePattern
timeSeparator
monthDayPattern
dateTimeOffsetPattern
calendar
firstDayOfWeek
calendarWeekRule
fullDateTimePattern
abbreviatedDayNames
m_superShortDayNames
dayNames
abbreviatedMonthNames
monthNames
genitiveMonthNamesm_genitiveAbbreviatedMonthNames
leapYearMonthNames
longDatePattern
shortDatePattern
yearMonthPattern
longTimePattern
shortTimePattern
allYearMonthPatterns
allShortDatePatterns
allLongDatePatterns
allShortTimePatterns
allLongTimePatterns
m_eraNames
m_abbrevEraNames
m_abbrevEnglishEraNames
optionalCalendars
m_isReadOnly
formatFlags
CultureID
m_useUserOverride
bUseCalendarInfo
nDataItem
m_isDefaultCalendar
m_dateWords
&System.Globalization.GregorianCalendar
(System.Globalization.DateTimeFormatFlags
dddd, dd MMMM yyyy
MM/dd/yyyy
yyyy MMMM
HH:mm:ss
(System.Globalization.DateTimeFormatFlags
value__
&System.Globalization.GregorianCalendar
m_type
m_currentEraValue
twoDigitYearMax
Calendar+m_currentEraValue
Calendar+m_isReadOnly
Calendar+twoDigitYearMax
+System.Globalization.GregorianCalendarTypes
+System.Globalization.GregorianCalendarTypes
value__
yyyy-MM-dd
hh:mm tt
h:mm tt
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Size
height
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
fSystem.Drawing.Icon, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Icon
IconData
IconSize
System.Drawing.Size
System.Drawing.Size
height
T"_u}\
I#EC^%
k0skaa
!Ek-fy=
hLbZj0K
#1Z0,0
<%oX2
xW--eip;0
4jORbMhG
|#ado}
$S0sjaa
K{%eha
gE|}??V
v[?vS/
An=#%=j
c36j7f
D$z3bi
7$;0kf
.7OPd!
!G9_\QJ&
r4r.6'
=?O {uf<
ua)nayo
tSR#`Zj`n
=%i{]B
$=Y%pe
((((((((((
((((((((((((((((
((((((((((((((((((((
((((((((((((((((((((((((
((((((((((((((((((((((((((
((((((((((((((((((((((((((((((
((((((((((((((((((((((((((((((((
((((((((((((((((((((((((((((((((((
((((((((((((((((((((((((((((((((((
((((((((((((((((((((((((((((((((((((
((((((((((((((((((((((((((%
(((((((((
(((((((((((((((((((((((('
%XO#((((((((
(((((((& #&((((((((((('
((((((((
((((((&%;0
((((((((
(((((((
tdWLHEGKUay
N ((((((((((
(((((((
(((((((((((
((((((( C~
)(((((((
(((((((()
*9J[fqxzysh\I7
!]vA ((((((((
(((((((((&&%
,%(((((((
((((((()
%&((&&&'#
.$(((((((
((((((( =
((((((((
(((((((
(((((((((
(((((((
((&(((((((
(((((((#/o
((((((
((((((((#
|bcL3"
(((((((("#%
.!((((
((((((&
!#%%%'%%#"
@((((
(((((k
gP@1+&" #)-2CUk
}#&(((
((((@
`%%((((
((((@
%(((((
((((j
#((((((
&((((((((
((((("
+4DMTZ]\YVJ@6*
&((((((((((
((((((((&%"
!%(((((((((((((((
((((((((((((((((((((((((((((((((((((
((((((((((((((((((((((((((((((((((
((((((((((((((((((((((((((((((((((
((((((((((((((((((((((((((((((((
((((((((((((((((((((((((((((((
((((((((((((((((((((((((((
((((((((((((((((((((((((
((((((((((((((((((((
((((((((((((((((
((((((((((
////////
//////////////
////////////////
////////////////////
//////////////////////
////////////////////////
/////////////////++/////
////////////////+5@,/////
////0&
"&),,,+&
5+/////
////(RdUK@412:HUj
t0,/////
//// u
xT$%,/////
/////+E^p
E3,/////
//////
(3<BA7+
s)-////
/////,NK/
+.////
////#S
rhbacir
f;+/////
////%P
/////(CYhv
KeO(///
////.
+131+
///.1clVI9-%"!*1@LXj
///(?\my
(/////
///(&1;=FDB8/#
&-//////
/////-,+*((*+,//////////
////////////////////////
//////////////////////
////////////////////
////////////////
//////////////
////////
2L@<?EN=!
73'#%*;RV+
4MQUSOG*
PICDKT
,:BJHA9)
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Icon
IconData
IconSize
System.Drawing.Size
System.Drawing.Size
height
"vSk!=q
@Dh,>=q
e&M<2B
z_~Tt3
>?W8u
qqqLxyy
qqqLvww
qqqLqqq
eee#stt
tuua_``
tuuaVWW
kll7xyy
vwwvlmm
eee#qqq
tuua_``
vwwvVWW
tuuaVWW
eee#_``
vwwvqqq
eee#lmm
eee#_``
DBRfhn M
_CorExeMain
mscoree.dll
%<JOJx
M tabP
{NVejZ
5p^2P)
y5$4rv
~U~mQ&^]I#
L/}{^E3?
MV\\#|
q<@!@M
1td>6=p
>V=UXh
Fc@FSd
---------------------------------------------------------$
9998998998998998998998998998998998998998998998998998998990
9889889889889889889889889889889889889889889889889889889880
8988898898898898898898898898898898898898898898898898898890
9988988988988988988988988988988988988988988988988988988980
9988898889889889889889889889889889889889889889889889889880
9989889888988898898898898898898898898898898898898898898890
$-8888988988988988988988988988988988988988988980
&5998-
"-9889889889889889889889889889889889889880
099898890
-888898898898898898898898898898898890
&8898898898-
-89888988988988988988988988988980
&9898889889880
&88889889889889889889889889880
!98988988898-
88899980-!
'98898898898898898898898890
4988988989*
88898899899890!
*98889888988988988988980
"989889889"
99898898889889988"
!498898889889889889880
098988988*
98898898988988898884
0988988988988988980
889889888
9980488888988988889998
-9889889889889890
88898898-
-9889898898898
-98898898898880
98898898&
-988988988890
4988988988980
98898898!
!889880
"989889889:8*
88898898890
88898898!
4888898-
"88988889998
-898898890
88889889$
!99889898(!-88994&
*9899888889-
88898890
08898898-
(8889889"
9989898998*
88888988898
8988980
&98988980
-9889884
988988988999-
"8988988889!
88898880
88988989
(9889880
99889888988898"
9898899889-
-988988980
88898898
9889880
9889889889888895
-9888988985
$98898898890
*98898880
9889884
98898898898989898
$9898898989
8989898898890
98988989
4898898
998898898889889889&
9889888989!
589888988988980
88898898&
!989889!
9889889889898889889-
8889889889*
09888889889889880
!89889889
8889888
9889889889
589889889-
8889888989988988988988988980
98988988"
"898898
998898898"
0998988980
0:9889888898898988988988980
&98898898
9898898
988988988
*98898899-
49889889889889889889889890
98898898&
988988"
99889888
!98898889*
4988988988988988988988890
&98898898
0:98898
9889889*
98898989"
498898898898898898898980
988988984
88988985
9988985
88889889
88898898898898898898880
988988985
59889898
988988
59889898
8889889889889889889890
888988989-
09898889!
88898890
8889889889889889889880
0:9889889&
!98898898
88889884
49889889889889889888980
-98889889$
0:8988988-!
88889888
0:9889889889889889898890
&98988989&
88988888990
!88889884
0:98898898898898898889880
88898889*
88998889-
499889884
09988988988988988988988980
098898894
'98889-
*98898898*
099889889889889889889889890
"98988989
0:98988988!
8989889889889889889889889880
49889889-
-&"$(0999989889884
98898898898898898898898898890
!98898998!
8999998898889889!
&989889889889889889889889888980
098888888
98888989889898'
49999889889889889889889889889880
498898998&
998898898898"
999898898898898898898898898898890
8888888890$
988898898$
0:988988988988988988988988988988980
8899898:9980&
----&!
)9:9898898898898898898898898898898890
-988998899999-
)99998988988988988988988988988988988980
!5889898888-
-:998898898898898898898898898898898898880
!0:98899-
"99:9898988988988988988988988988988988988990
!-8999989889889889889889889889889889889889889880
*&"&&-0989898898898898898898898898898898898898898898898880
99999:9898888988988988988988988988988988988988988988988990
8888888988988898898898898898898898898898898898898898889880
8988988898898988988988988988988988988988988988988988988880
:898898988988988988988988988988988988988988988988988988990
8988988988988988988988988988988988988988988988988988988880
:898898898898898898898898898898898898898898898898898898990
9898898898898898898898898898898898898898899898898898898880
!!!!!!!!!!!!!!!!!!!!!
'444444444444444444444
'444444444444444444444
#,34444444444444
#03444444444
'4440&
#33444444
#')/3343#
034444
03,#))!
'4444&
'444440
'443#443
4443434444
443444444
44444444
#44444444
!444444444
%4444444444
'4443&
,44444444444
#3444444444444
%334444444444444
!#',344444444444444444
'433444444444444444444
'444444444444444444444
#############
(1111111111111#
"+1111111#
+1111#
-1#111&
-1111#
+1111#
(11111&
*111111#
!11111111&
(1111111111#
(1111111111111&
! !
##########
'.......
*-.....
'---......
######
!!!!!#
jA;?mxn
l;+na
~M1yf^
RG6iLH
l(oIoAj
b|1S$:M
(.lJFVR#&G
\Jj[N-R
;41Gt+
qIDAT=
v{0<LY
<?xml version="1.0" encoding="utf-8" standalone="yes"?><assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0"><assemblyIdentity version="1.0.0.0" name="MyApplication.app" /><trustInfo xmlns="urn:schemas-microsoft-com:asm.v2"><security><requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3"><requestedExecutionLevel level="asInvoker" uiAccess="false" /></requestedPrivileges></security></trustInfo></assembly>
Olsuooyatgnjdecmtar
Rzfyslvirdpzjmrihjsmoh
button1
Rzfyslvirdpzjmrihjsmoh.Hpxulzkohcpxcoe.dll
Rzfyslvirdpzjmrihjsmoh.Properties.Resources
Spotify
you have smart car
$this.SnapToGrid
$this.TrayLargeIcon
$this.Icon
$this.Locked
$this.DrawGrid
progressBar1.Modifiers
$this.Localizable
$this.Language
$this.GridSize
$this.TrayHeight
progressBar1.Locked
Spotify
VS_VERSION_INFO
VarFileInfo
Translation
StringFileInfo
000004b0
Comments
CompanyName
FileDescription
FileVersion
1.28.2851.9944
InternalName
NVA.exe
LegalCopyright
LegalTrademarks
OriginalFilename
NVA.exe
ProductName
ProductVersion
1.28.2851.9944
Assembly Version
1.28.2851.9944
Antivirus Signature
Bkav Clean
Elastic malicious (high confidence)
ClamAV Clean
FireEye Generic.mg.4057325c09951e44
CAT-QuickHeal Clean
Qihoo-360 Clean
McAfee RDN/Generic.rp
Cylance Unsafe
Zillya Clean
SUPERAntiSpyware Clean
Sangfor Trojan.Win32.Save.a
K7AntiVirus Riskware ( 0040eff71 )
Alibaba Clean
K7GW Riskware ( 0040eff71 )
CrowdStrike win/malicious_confidence_90% (W)
Baidu Clean
Cyren W32/Trojan.DMFJ-3515
Symantec Clean
ESET-NOD32 a variant of Generik.CJCZBPF
APEX Malicious
Avast Win32:MalwareX-gen [Trj]
Cynet Malicious (score: 100)
Kaspersky HEUR:Trojan.MSIL.Quasar.gen
BitDefender Trojan.GenericKD.37126274
NANO-Antivirus Clean
Paloalto generic.ml
ViRobot Clean
MicroWorld-eScan Trojan.GenericKD.37126274
Tencent Clean
Ad-Aware Trojan.GenericKD.37126274
Emsisoft Trojan.GenericKD.37126274 (B)
Comodo Clean
F-Secure Clean
DrWeb Trojan.Inject4.12853
VIPRE Clean
TrendMicro Clean
McAfee-GW-Edition BehavesLike.Win32.Generic.jc
CMC Clean
Sophos ML/PE-A
SentinelOne Static AI - Malicious PE
Jiangmin Clean
Webroot W32.Trojan.Gen
Avira Clean
Antiy-AVL Clean
Kingsoft Clean
Microsoft Trojan:Win32/Wacatac.B!ml
Gridinsoft Clean
Arcabit Trojan.Generic.D2368082
AegisLab Trojan.Multi.Generic.4!c
ZoneAlarm Clean
GData Trojan.GenericKD.37126274
TACHYON Clean
AhnLab-V3 Clean
Acronis Clean
BitDefenderTheta Gen:NN.ZemsilF.34758.Qm0@aua6C3e
ALYac Trojan.GenericKD.37126274
MAX malware (ai score=86)
VBA32 Clean
Malwarebytes Clean
Zoner Clean
TrendMicro-HouseCall TROJ_GEN.R002H0CFK21
Rising Clean
Yandex Clean
Ikarus Backdoor.MSIL.Quasar
eGambit Unsafe.AI_Score_91%
Fortinet MSIL/Kryptik.ABOJ!tr
AVG Win32:MalwareX-gen [Trj]
Cybereason malicious.40634c
Panda Trj/GdSda.A
MaxSecure Trojan.Malware.300983.susgen
No IRMA results available.