Static | ZeroBOX

PE Compile Time

2093-10-26 14:19:00

PE Imphash

f34d5f2d4577ed6d9ceec516c1f5a744

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00002000 0x0006f384 0x0006f400 5.70036766477
.rsrc 0x00072000 0x00000612 0x00000800 3.56846092758
.reloc 0x00074000 0x0000000c 0x00000200 0.101910425663

Resources

Name Offset Size Language Sub-language File type
RT_VERSION 0x000720a0 0x00000388 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_MANIFEST 0x00072428 0x000001ea LANG_NEUTRAL SUBLANG_NEUTRAL XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminators

Imports

Library mscoree.dll:
0x402000 _CorExeMain

!This program cannot be run in DOS mode.
`.rsrc
@.reloc
j&&rh8
.I+Na(|
+Ec(|
+<\(|
+3C(|
+!I(|
3N_(|
+EQ(|
+42(|
+"_(|
..+MP(|
+DD(|
+;[(|
+21(|
3NL(|
+<U(|
+*=(|
3OV(|
+F,(|
+=/(|
+4b(|
++\(|
+OU(|
+F%(|
+=!(|
+4!(|
++<(|
+"=(|
.A+O?(|
+Fa(|
+=,(|
+49(|
++T(|
.&+O-(|
+4C(|
+"4(|
.&+NG(|
+Ea(|
+<c(|
+3J(|
+!\(|
+=3(|
+4/(|
++S(|
+"-(|
.@+M$(|
+;,(|
+)'(|
.I+Nc(|
+= (|
++0(|
+"+(|
+=X(|
+4'(|
++-(|
+"1(|
+O*(|
+F6(|
+=L(|
+4&(|
++/(|
+"(|
+N5(|
+42(|
++H(|
+"T(|
+OK(|
+F (|
+=Y(|
++](|
#!I?>g
.A+N](|
+E_(|
+<*(|
+*Q(|
.J+OQ(|
+=2(|
+4^(|
++'(|
./+O3(|
+==(|
+4=(|
++V(|
+<4(|
+3](|
+*-(|
+!J(|
+O,(|
+FT(|
+=3(|
+4'(|
++$(|
+"7(|
+=((|
+4$(|
++1(|
.&+N-(|
+E0(|
+3*(|
+*=(|
+!D(|
+F[(|
+=_(|
+4M(|
++$(|
+"2(|
+O;(|
+F2(|
+=G(|
+4b(|
++$(|
.@+LD(|
+C/(|
+:^(|
+1R(|
+(T(|
+'(|
+O=(|
+F4(|
+46(|
++=(|
+"[(|
.I+NO(|
+E1(|
+3N(|
+F1(|
+='(|
+4a(|
++_(|
!-Dbm5
.@+N6(|
+<T(|
++c(|
+"*(|
+N+(|
+EA(|
+;F(|
+2"(|
+)H(|
+ P(|
#!Sv?c>
#!Sv?c>
.0*9(|
.&+NO(|
+E@(|
+3!(|
+*`(|
.&+Oa(|
+= (|
+4F(|
./+Oc(|
+=*(|
+4V(|
++X(|
+"`(|
+ED(|
+<M(|
+".(|
.J+OA(|
+=0(|
++U(|
+"5(|
.7+N;(|
+<)(|
++1(|
+"W(|
+4X(|
+"K(|
.&+M7(|
+DG(|
+;c(|
+2G(|
+)^(|
+ L(|
#!8)CZ
#!8)CZ
.0*1(|
+O;(|
+F^(|
+=3(|
++C(|
+"#(|
3O/(|
+FV(|
+=4(|
++$(|
+"@(|
+O*(|
+F`(|
+=;(|
++(|
.&+N'(|
+</(|
+*B(|
+!b(|
./+O`(|
+F:(|
+=$(|
++D(|
3N2(|
+E](|
++G(|
+"6(|
.6+L (|
+C3(|
+F%(|
+=W(|
+4X(|
++ (|
+"Y(|
.A*W(|
+O\(|
+FQ(|
+=C(|
+4\(|
++-(|
+".(|
+<4(|
+3/(|
+"2(|
.@+MN(|
+DP(|
+;G(|
+*G(|
+!6(|
.A+O3(|
+FD(|
+=:(|
+4c(|
++1(|
+"9(|
+MI(|
+D/(|
+;[(|
+2F(|
+F9(|
+=K(|
+4P(|
++P(|
+"S(|
+N!(|
+4&(|
++;(|
3O'(|
+FD(|
+=b(|
+47(|
++)(|
+" (|
.8*@(|
+OG(|
+4L(|
++3(|
+"*(|
!m;g1z
+E2(|
+<>(|
+3Q(|
+*A(|
+<9(|
+3b(|
+*Y(|
+NQ(|
+E&(|
+<.(|
+*%(|
+!`(|
+<"(|
+38(|
+*(|
+!a(|
+ER(|
+<'(|
++=(|
./+NE(|
+E,(|
+<T(|
+3&(|
+*8(|
.8+N8(|
+E>(|
+<3(|
+3K(|
+!P(|
.!*9(|
+FL(|
+=7(|
++c(|
+OE(|
+FX(|
++<(|
+"M(|
+N;(|
+=P(|
++((|
+"(|
.A+O-(|
+FU(|
+=b(|
+4S(|
++<(|
+"c(|
.A+O'(|
+F/(|
+=H(|
+4D(|
+"J(|
+O](|
+=0(|
+4I(|
++C(|
+"B(|
..+M](|
+<[(|
+3D(|
+*H(|
.I+M(|
+DN(|
+3?(|
+!1(|
.A*#(|
.H+M#(|
+Da(|
+2](|
+!;(|
.I+N%(|
+E7(|
+<7(|
+*6(|
+MU(|
+D!(|
+;](|
+2&(|
+!D(|
+ML(|
+DC(|
+3a(|
!hu(zo
!hu(zo
+F>(|
+=(|
++@(|
+"D(|
.I+N6(|
+EF(|
+4J(|
++B(|
+"(|
.@+M>(|
+DI(|
+!((|
+MI(|
+D)(|
+;T(|
+2[(|
.!*A(|
.@+N=(|
+EJ(|
+3!(|
+"F(|
+E&(|
+<.(|
+"\(|
+NT(|
+*\(|
.@+N%(|
+EU(|
+<W(|
+3H(|
+*#(|
..+N6(|
+=$(|
++^(|
+"H(|
+=](|
+4a(|
+"(|
.5+L$(|
+"X(|
.&+OK(|
+F6(|
+=X(|
+4U(|
++b(|
+"O(|
+NM(|
+=%(|
+4[(|
++R(|
.8+O8(|
+F`(|
+=M(|
+4[(|
++F(|
.I+N"(|
+E$(|
+3A(|
+*K(|
+OA(|
+F)(|
+=D(|
+O8(|
+=_(|
+4,(|
++.(|
+OV(|
+F"(|
+=?(|
+4A(|
++U(|
+F (|
+=9(|
+4$(|
++1(|
+"@(|
!YT+
.I+NN(|
+=_(|
++U(|
+"3(|
#!nkvjy
#!nkvjy
.1*G(|
+EK(|
+<6(|
+3+(|
+*&(|
.8+O$(|
+FB(|
+=$(|
+4L(|
++M(|
+"!(|
3M8(|
+;V(|
+*F(|
!4ZQ3D
!4ZQ3D
+F,(|
+= (|
+4U(|
++ (|
+"S(|
+FU(|
+4)(|
++Z(|
+F&(|
+=9(|
+4H(|
3O1(|
+FD(|
+=b(|
+4U(|
++D(|
+"Z(|
!{.?`*
+ED(|
+<&(|
+*7(|
3O"(|
+=Y(|
+4D(|
++*(|
+"H(|
+FE(|
+=$(|
++/(|
+"R(|
![?A~%
![?A~%
.8+NO(|
+E@(|
+<)(|
+3U(|
+E&(|
+<K(|
+33(|
+*I(|
+!U(|
3M[(|
+DG(|
+3B(|
+*(|
+!$(|
..+Mb(|
+<K(|
+3N(|
+*!(|
+)M(|
+ /(|
.8+O[(|
+Fa(|
+4U(|
++O(|
+"[(|
KDBM(Q
.I+Na(|
+Ec(|
+<\(|
+3C(|
+!I(|
3N_(|
+EQ(|
+42(|
+"_(|
..+MP(|
+DD(|
+;[(|
+21(|
3NL(|
+<U(|
+*=(|
3OV(|
+F,(|
+=/(|
+4b(|
++\(|
+OU(|
+F%(|
+=!(|
+4!(|
++<(|
+"=(|
.A+O?(|
+Fa(|
+=,(|
+49(|
++T(|
.&+O-(|
+4C(|
+"4(|
.&+NG(|
+Ea(|
+<c(|
+3J(|
+!\(|
+=3(|
+4/(|
++S(|
+"-(|
.@+M$(|
+;,(|
+)'(|
.I+Nc(|
+= (|
++0(|
+"+(|
+=X(|
+4'(|
++-(|
+"1(|
+O*(|
+F6(|
+=L(|
+4&(|
++/(|
+"(|
+N5(|
+42(|
++H(|
+"T(|
+OK(|
+F (|
+=Y(|
++](|
#!I?>g
.A+N](|
+E_(|
+<*(|
+*Q(|
.J+OQ(|
+=2(|
+4^(|
++'(|
./+O3(|
+==(|
+4=(|
++V(|
+<4(|
+3](|
+*-(|
+!J(|
+O,(|
+FT(|
+=3(|
+4'(|
++$(|
+"7(|
+=((|
+4$(|
++1(|
.&+N-(|
+E0(|
+3*(|
+*=(|
+!D(|
+F[(|
+=_(|
+4M(|
++$(|
+"2(|
+O;(|
+F2(|
+=G(|
+4b(|
++$(|
.@+LD(|
+C/(|
+:^(|
+1R(|
+(T(|
+'(|
+O=(|
+F4(|
+46(|
++=(|
+"[(|
.I+NO(|
+E1(|
+3N(|
+F1(|
+='(|
+4a(|
++_(|
!-Dbm5
.@+N6(|
+<T(|
++c(|
+"*(|
+N+(|
+EA(|
+;F(|
+2"(|
+)H(|
+ P(|
#!Sv?c>
#!Sv?c>
.0*9(|
.&+NO(|
+E@(|
+3!(|
+*`(|
.&+Oa(|
+= (|
+4F(|
./+Oc(|
+=*(|
+4V(|
++X(|
+"`(|
+ED(|
+<M(|
+".(|
.J+OA(|
+=0(|
++U(|
+"5(|
.7+N;(|
+<)(|
++1(|
+"W(|
+4X(|
+"K(|
.&+M7(|
+DG(|
+;c(|
+2G(|
+)^(|
+ L(|
#!8)CZ
#!8)CZ
.0*1(|
+O;(|
+F^(|
+=3(|
++C(|
+"#(|
3O/(|
+FV(|
+=4(|
++$(|
+"@(|
+O*(|
+F`(|
+=;(|
++(|
.&+N'(|
+</(|
+*B(|
+!b(|
./+O`(|
+F:(|
+=$(|
++D(|
3N2(|
+E](|
++G(|
+"6(|
.6+L (|
+C3(|
+F%(|
+=W(|
+4X(|
++ (|
+"Y(|
.A*W(|
+O\(|
+FQ(|
+=C(|
+4\(|
++-(|
+".(|
+<4(|
+3/(|
+"2(|
.@+MN(|
+DP(|
+;G(|
+*G(|
+!6(|
.A+O3(|
+FD(|
+=:(|
+4c(|
++1(|
+"9(|
+MI(|
+D/(|
+;[(|
+2F(|
+F9(|
+=K(|
+4P(|
++P(|
+"S(|
+N!(|
+4&(|
++;(|
3O'(|
+FD(|
+=b(|
+47(|
++)(|
+" (|
.8*@(|
+OG(|
+4L(|
++3(|
+"*(|
!m;g1z
+E2(|
+<>(|
+3Q(|
+*A(|
+<9(|
+3b(|
+*Y(|
+NQ(|
+E&(|
+<.(|
+*%(|
+!`(|
+<"(|
+38(|
+*(|
+!a(|
+ER(|
+<'(|
++=(|
./+NE(|
+E,(|
+<T(|
+3&(|
+*8(|
.8+N8(|
+E>(|
+<3(|
+3K(|
+!P(|
.!*9(|
+FL(|
+=7(|
++c(|
+OE(|
+FX(|
++<(|
+"M(|
+N;(|
+=P(|
++((|
+"(|
.A+O-(|
+FU(|
+=b(|
+4S(|
++<(|
+"c(|
.A+O'(|
+F/(|
+=H(|
+4D(|
+"J(|
+O](|
+=0(|
+4I(|
++C(|
+"B(|
..+M](|
+<[(|
+3D(|
+*H(|
.I+M(|
+DN(|
+3?(|
+!1(|
.A*#(|
.H+M#(|
+Da(|
+2](|
+!;(|
.I+N%(|
+E7(|
+<7(|
+*6(|
+MU(|
+D!(|
+;](|
+2&(|
+!D(|
+ML(|
+DC(|
+3a(|
!hu(zo
!hu(zo
+F>(|
+=(|
++@(|
+"D(|
.I+N6(|
+EF(|
+4J(|
++B(|
+"(|
.@+M>(|
+DI(|
+!((|
+MI(|
+D)(|
+;T(|
+2[(|
.!*A(|
.@+N=(|
+EJ(|
+3!(|
+"F(|
+E&(|
+<.(|
+"\(|
+NT(|
+*\(|
.@+N%(|
+EU(|
+<W(|
+3H(|
+*#(|
..+N6(|
+=$(|
++^(|
+"H(|
+=](|
+4a(|
+"(|
.5+L$(|
+"X(|
.&+OK(|
+F6(|
+=X(|
+4U(|
++b(|
+"O(|
+NM(|
+=%(|
+4[(|
++R(|
.8+O8(|
+F`(|
+=M(|
+4[(|
++F(|
.I+N"(|
+E$(|
+3A(|
+*K(|
+OA(|
+F)(|
+=D(|
+O8(|
+=_(|
+4,(|
++.(|
+OV(|
+F"(|
+=?(|
+4A(|
++U(|
+F (|
+=9(|
+4$(|
++1(|
+"@(|
!YT+
.I+NN(|
+=_(|
++U(|
+"3(|
#!nkvjy
#!nkvjy
.1*G(|
+EK(|
+<6(|
+3+(|
+*&(|
.8+O$(|
+FB(|
+=$(|
+4L(|
++M(|
+"!(|
3M8(|
+;V(|
+*F(|
!4ZQ3D
!4ZQ3D
+F,(|
+= (|
+4U(|
++ (|
+"S(|
+FU(|
+4)(|
++Z(|
+F&(|
+=9(|
+4H(|
3O1(|
+FD(|
+=b(|
+4U(|
++D(|
+"Z(|
!{.?`*
+ED(|
+<&(|
+*7(|
3O"(|
+=Y(|
+4D(|
++*(|
+"H(|
+FE(|
+=$(|
++/(|
+"R(|
![?A~%
![?A~%
.8+NO(|
+E@(|
+<)(|
+3U(|
+E&(|
+<K(|
+33(|
+*I(|
+!U(|
3M[(|
+DG(|
+3B(|
+*(|
+!$(|
..+Mb(|
+<K(|
+3N(|
+*!(|
+)M(|
+ /(|
.8+O[(|
+Fa(|
+4U(|
++O(|
+"[(|
.I+Na(|
+Ec(|
+<\(|
+3C(|
+!I(|
3N_(|
+EQ(|
+42(|
+"_(|
..+MP(|
+DD(|
+;[(|
+21(|
3NL(|
+<U(|
+*=(|
3OV(|
+F,(|
+=/(|
+4b(|
++\(|
+OU(|
+F%(|
+=!(|
+4!(|
++<(|
+"=(|
.A+O?(|
+Fa(|
+=,(|
+49(|
++T(|
.&+O-(|
+4C(|
+"4(|
.&+NG(|
+Ea(|
+<c(|
+3J(|
+!\(|
+=3(|
+4/(|
++S(|
+"-(|
.@+M$(|
+;,(|
+)'(|
.I+Nc(|
+= (|
++0(|
+"+(|
+=X(|
+4'(|
++-(|
+"1(|
+O*(|
+F6(|
+=L(|
+4&(|
++/(|
+"(|
+N5(|
+42(|
++H(|
+"T(|
+OK(|
+F (|
+=Y(|
++](|
#!I?>g
.A+N](|
+E_(|
+<*(|
+*Q(|
.J+OQ(|
+=2(|
+4^(|
++'(|
./+O3(|
+==(|
+4=(|
++V(|
+<4(|
+3](|
+*-(|
+!J(|
+O,(|
+FT(|
+=3(|
+4'(|
++$(|
+"7(|
+=((|
+4$(|
++1(|
.&+N-(|
+E0(|
+3*(|
+*=(|
+!D(|
+F[(|
+=_(|
+4M(|
++$(|
+"2(|
+O;(|
+F2(|
+=G(|
+4b(|
++$(|
.@+LD(|
+C/(|
+:^(|
+1R(|
+(T(|
+'(|
+O=(|
+F4(|
+46(|
++=(|
+"[(|
.I+NO(|
+E1(|
+3N(|
+F1(|
+='(|
+4a(|
++_(|
!-Dbm5
.@+N6(|
+<T(|
++c(|
+"*(|
+N+(|
+EA(|
+;F(|
+2"(|
+)H(|
+ P(|
#!Sv?c>
#!Sv?c>
.0*9(|
.&+NO(|
+E@(|
+3!(|
+*`(|
.&+Oa(|
+= (|
+4F(|
./+Oc(|
+=*(|
+4V(|
++X(|
+"`(|
+ED(|
+<M(|
+".(|
.J+OA(|
+=0(|
++U(|
+"5(|
.7+N;(|
+<)(|
++1(|
+"W(|
+4X(|
+"K(|
.&+M7(|
+DG(|
+;c(|
+2G(|
+)^(|
+ L(|
#!8)CZ
#!8)CZ
.0*1(|
+O;(|
+F^(|
+=3(|
++C(|
+"#(|
3O/(|
+FV(|
+=4(|
++$(|
+"@(|
+O*(|
+F`(|
+=;(|
++(|
.&+N'(|
+</(|
+*B(|
+!b(|
./+O`(|
+F:(|
+=$(|
++D(|
3N2(|
+E](|
++G(|
+"6(|
.6+L (|
+C3(|
+F%(|
+=W(|
+4X(|
++ (|
+"Y(|
.A*W(|
+O\(|
+FQ(|
+=C(|
+4\(|
++-(|
+".(|
+<4(|
+3/(|
+"2(|
.@+MN(|
+DP(|
+;G(|
+*G(|
+!6(|
.A+O3(|
+FD(|
+=:(|
+4c(|
++1(|
+"9(|
+MI(|
+D/(|
+;[(|
+2F(|
+F9(|
+=K(|
+4P(|
++P(|
+"S(|
+N!(|
+4&(|
++;(|
3O'(|
+FD(|
+=b(|
+47(|
++)(|
+" (|
.8*@(|
+OG(|
+4L(|
++3(|
+"*(|
!m;g1z
+E2(|
+<>(|
+3Q(|
+*A(|
+<9(|
+3b(|
+*Y(|
+NQ(|
+E&(|
+<.(|
+*%(|
+!`(|
+<"(|
+38(|
+*(|
+!a(|
+ER(|
+<'(|
++=(|
./+NE(|
+E,(|
+<T(|
+3&(|
+*8(|
.8+N8(|
+E>(|
+<3(|
+3K(|
+!P(|
.!*9(|
+FL(|
+=7(|
++c(|
+OE(|
+FX(|
++<(|
+"M(|
+N;(|
+=P(|
++((|
+"(|
.A+O-(|
+FU(|
+=b(|
+4S(|
++<(|
+"c(|
.A+O'(|
+F/(|
+=H(|
+4D(|
+"J(|
+O](|
+=0(|
+4I(|
++C(|
+"B(|
..+M](|
+<[(|
+3D(|
+*H(|
.I+M(|
+DN(|
+3?(|
+!1(|
.A*#(|
.H+M#(|
+Da(|
+2](|
+!;(|
.I+N%(|
+E7(|
+<7(|
+*6(|
+MU(|
+D!(|
+;](|
+2&(|
+!D(|
+ML(|
+DC(|
+3a(|
!hu(zo
!hu(zo
+F>(|
+=(|
++@(|
+"D(|
.I+N6(|
+EF(|
+4J(|
++B(|
+"(|
.@+M>(|
+DI(|
+!((|
+MI(|
+D)(|
+;T(|
+2[(|
.!*A(|
.@+N=(|
+EJ(|
+3!(|
+"F(|
+E&(|
+<.(|
+"\(|
+NT(|
+*\(|
.@+N%(|
+EU(|
+<W(|
+3H(|
+*#(|
..+N6(|
+=$(|
++^(|
+"H(|
+=](|
+4a(|
+"(|
.5+L$(|
+"X(|
.&+OK(|
+F6(|
+=X(|
+4U(|
++b(|
+"O(|
+NM(|
+=%(|
+4[(|
++R(|
.8+O8(|
+F`(|
+=M(|
+4[(|
++F(|
.I+N"(|
+E$(|
+3A(|
+*K(|
+OA(|
+F)(|
+=D(|
+O8(|
+=_(|
+4,(|
++.(|
+OV(|
+F"(|
+=?(|
+4A(|
++U(|
+F (|
+=9(|
+4$(|
++1(|
+"@(|
!YT+
.I+NN(|
+=_(|
++U(|
+"3(|
#!nkvjy
#!nkvjy
.1*G(|
+EK(|
+<6(|
+3+(|
+*&(|
.8+O$(|
+FB(|
+=$(|
+4L(|
++M(|
+"!(|
3M8(|
+;V(|
+*F(|
!4ZQ3D
!4ZQ3D
+F,(|
+= (|
+4U(|
++ (|
+"S(|
+FU(|
+4)(|
++Z(|
+F&(|
+=9(|
+4H(|
3O1(|
+FD(|
+=b(|
+4U(|
++D(|
+"Z(|
!{.?`*
+ED(|
+<&(|
+*7(|
3O"(|
+=Y(|
+4D(|
++*(|
+"H(|
+FE(|
+=$(|
++/(|
+"R(|
![?A~%
![?A~%
.8+NO(|
+E@(|
+<)(|
+3U(|
+E&(|
+<K(|
+33(|
+*I(|
+!U(|
3M[(|
+DG(|
+3B(|
+*(|
+!$(|
..+Mb(|
+<K(|
+3N(|
+*!(|
+)M(|
+ /(|
.8+O[(|
+Fa(|
+4U(|
++O(|
+"[(|
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
v4.0.30319
#Strings
IEnumerable`1
Collection`1
IEnumerator`1
List`1
inputData1
Microsoft.Win32
UInt32
ToInt32
vhost32
KeyValuePair`2
SortedList`2
Dictionary`2
inputData2
ToUInt64
ToInt64
ToUInt16
get_UTF8
sNonUtf8
IGWRVuF
AYMGEA
CPSAUJPA
GIVWWTSA
FWYDXDTA
EWOWWA
UNNWWR
GXQWER
LWTGKB
AFWAWH
XQWFZOB
MBLyOB
SFIONyB
NEyWFE
uLJYBPJ
yuIKAP
LMXJCC
ONRYUDKXWJC
IWVYSIEPEKC
GWLQKC
CFSuKC
FUZAHTC
WWFDDWC
VBGPyWI
yLFNIDWIAD
BuIuKD
BXKNVT
TDLuQWVOD
JSQVHH
NWKGuMB
RTSNWD
SXWTTXD
DuYCWS
WuSQLU
XQMZHGSME
XMSUWWTOE
XyuVMRUE
OACGuE
MWDHSGW
NUHWHR
YJLRWXV
MJGyWB
FZWKDF
WJWDLF
EPWLHMF
LEJWORF
UMWAWV
WWTPAuF
XQQBWE
WIRVWW
uWGTWS
TVGWIRKR
AWTUKS
LTSURNZEG
AMWZEG
LRXyGDRRVG
VYPTIW
WDCyWT
QCEYGCH
SWWOEH
MYOESuB
JCuBIH
ZGTDyVM
GyIFXH
WSuHuH
ZPYGyR
UuyATyQY
UNUYUKZSR
QFNTBI
VVIEWNSRFI
get_ASCII
PMRAWHZKII
XSPSII
NICIKNI
WTXUTI
JBUyWMQ
OERCWC
XDKWTS
AMyOWu
BHHQPWGZSJ
GTUQENLQWJ
QYXWET
NFGDMK
CCWCQK
ySWIPQK
QKZBKy
WSZHWK
yCWARu
VBDEZK
MTuMDLBUW
BHVNWNQL
FHBMTZL
QOWWuL
XZNRESI
UAWONK
TMERSuByAGM
OPESSTWQNM
SZVASZM
LLWSSSV
FRWWWS
YXVKGM
TVLUON
WWOMPR
AJWCZWJMDO
ZDJVAJ
System.IO
WNPHKKO
MWTuKO
yJGWyMUD
HVHWWX
UIHKYyO
XYVAUX
SJJPBu
AIJKEP
LVWOGP
QGJBFIOP
ZOyZyI
WyNYQP
XJTJNJOM
CYIIEVP
ZUCUWD
GWyWWU
TuWFSS
KIKJGSQ
UPuIWTQ
PuCCKWQ
KWANWQ
SRuBYQ
LWSXyB
SKyQRNDS
CNGWWER
EVSuIR
GFWLTAHMR
YGFKWYNR
JJANQV
MXBJYV
WRBOAS
IKLSCWAS
LSOHXWSBS
AOCWES
VHVLYMG
TOMCDLS
yQCCIATK
MSIIPS
ySTuQRSS
WRKLYJVS
VWyVOVS
BVYFIWS
VHZTTWS
BSyNQY
PLALHHUSXS
MMMyWKW
CWZEZyS
JHARAS
NANVYGW
KWIJKE
CWQKPy
SBuSLZIQ
RWKQTXKX
CWHXHY
ALGJNT
TWCZHQT
HWEVGCRT
DLJERT
RAZEZT
PQAHuT
EPOCCu
BQyUWW
YWVFQJu
ZNEyNDFOKU
IEROFDDS
HXYAuU
TAyWQV
IWBNUV
PXYENW
SJWDWE
JuURBW
ETSULWEW
yRHRUVTWNFW
QQCFUWGW
WWWWWJHW
VABAMHW
TPRSEBT
WIWFKW
FZWYWWMW
SZYIKMPW
SAVWQW
OKQVSEGT
XFVHSW
HZWUGW
UWYPFUW
YCTWUZWW
BDWAWZW
CreateFileW
QBHOCBSuW
BTGFCTuW
UHXOVE
BWADYPZE
MWWyFH
GJHIWXL
LALYuNXVX
QXHUOI
VDWCWW
WSQZBY
WACYDWIFYFY
COWSTP
ZSIWCJT
ASyKQR
CKXQHDN
LFWEyN
OERXNyR
FRWYGWAZ
FOCXWIZ
VEMuZIZ
yIZQAOZ
WWYVRZ
OLXMVU
cbData
ProtectedData
encryptedData
cbAuthData
pbAuthData
tsData
postData
PropertyData
System.Web
mscorlib
System.Collections.Generic
Microsoft.VisualBasic
DownloadStringAsync
pszAlgId
dwProcessId
get_CanRead
Thread
RijndaelManaged
get_IsAttached
add_DownloadStringCompleted
System.Collections.Specialized
Synchronized
chat_id
get_IsInvalid
TrimEnd
ReadToEnd
command
DateTimeKind
GetValueKind
RegistryValueKind
UriKind
set_Method
method
Replace
CreateInstance
cbNonce
pbNonce
TryCode
set_Mode
FileMode
win32ShareMode
dwShareMode
ZipArchiveMode
chainingMode
OpenMode
CompressionMode
CipherMode
XmlNode
get_Unicode
get_BigEndianUnicode
get_Message
MailMessage
AddRange
EndInvoke
BeginInvoke
GetEnvironmentVariable
Enumerable
IDisposable
ToDouble
RuntimeFieldHandle
SafeHandle
SafeFileHandle
GetModuleHandle
RuntimeTypeHandle
GetTypeFromHandle
Rectangle
hTemplateFile
sProfile
profile
AllocConsole
AttachConsole
alwaysCreateNewConsole
get_MainWindowTitle
hModule
ProcessModule
set_WindowStyle
ProcessWindowStyle
get_Name
libName
sProcName
procName
TableName
set_FileName
lpFileName
sFileName
GetFileName
fileName
get_ModuleName
lpModuleName
get_MachineName
baseName
GetElementsByTagName
get_FullName
get_UserName
get_ProcessName
GetProcessesByName
filename
System.Net.Mime
DateTime
ToLocalTime
unixTime
ReadLine
AppendLine
WriteLine
Combine
LocalMachine
DataProtectionScope
ManagementScope
pszBlobType
uploadType
ValueType
SecurityProtocolType
GetType
ResultType
set_ContentType
contentType
OpenShare
Compare
System.Core
Capture
NameObjectCollectionBase
ReadOnlyCollectionBase
ApplicationSettingsBase
get_Response
HttpWebResponse
GetResponse
FileClose
Dispose
Create
MulticastDelegate
EditorBrowsableState
Delete
get_CanWrite
CompilerGeneratedAttribute
GuidAttribute
GeneratedCodeAttribute
DebuggerNonUserCodeAttribute
DebuggableAttribute
EditorBrowsableAttribute
ComVisibleAttribute
AssemblyTitleAttribute
AssemblyTrademarkAttribute
TargetFrameworkAttribute
AssemblyFileVersionAttribute
AssemblyConfigurationAttribute
AssemblyDescriptionAttribute
UnmanagedFunctionPointerAttribute
CompilationRelaxationsAttribute
AssemblyProductAttribute
AssemblyCopyrightAttribute
ParamArrayAttribute
AssemblyCompanyAttribute
RuntimeCompatibilityAttribute
set_UseShellExecute
ToByte
get_Value
GetValue
set_Expect100Continue
ZipArchive
Remove
vhost32.exe
get_Size
cbSize
Deserialize
Resize
SizeOf
get_ItemOf
LastIndexOf
authTag
System.Threading
UTF8Encoding
set_Encoding
IsLogging
System.Runtime.Versioning
FromBase64String
DownloadString
ToString
GetString
ParseQueryString
Substring
System.Drawing
ComputeHash
set_AutoFlush
GetFolderPath
DirectoryPath
get_Width
get_Length
dwMinLength
SetLength
dwMaxLength
StartsWith
AsyncCallback
callback
TransformFinalBlock
get_CanSeek
AllocHGlobal
FreeHGlobal
Marshal
NetworkCredential
Decimal
GenericAcl
cbLabel
pbLabel
System.Collections.ObjectModel
System.ComponentModel
System.Net.Mail
WaitAll
kernel32.dll
bcrypt.dll
System.Xml
LoadXml
set_SecurityProtocol
set_EnableSsl
BufferedStream
FileStream
GetResponseStream
GZipStream
GetRequestStream
MemoryStream
get_Item
FileSystem
SymmetricAlgorithm
phAlgorithm
HashAlgorithm
Random
set_From
ICryptoTransform
row_num
Boolean
TimeSpan
Screen
FileOpen
SeekOrigin
origin
dwInfoVersion
System.IO.Compression
Application
get_Location
System.Configuration
pszImplementation
System.Globalization
System.Web.Script.Serialization
Action
op_Subtraction
System.Reflection
PropertyDataCollection
ProcessModuleCollection
NameValueCollection
MatchCollection
GroupCollection
WebHeaderCollection
MailAddressCollection
KeysCollection
ManagementObjectCollection
AttachmentCollection
get_Position
set_Position
dwCreationDisposition
get_ContentDisposition
CallingConvention
SearchOption
caption
WebException
CryptographicException
ArgumentNullException
get_InnerException
get_To
CompareTo
CopyTo
FileInfo
CultureInfo
pPaddingInfo
FileSystemInfo
MemberInfo
set_StartInfo
ProcessStartInfo
DirectoryInfo
System.Linq
ToChar
ISymbolReader
StreamReader
TextReader
MD5CryptoServiceProvider
BCryptCloseAlgorithmProvider
BCryptOpenAlgorithmProvider
provider
StringBuilder
LocalStateFolder
SpecialFolder
sender
Buffer
buffer
ResourceManager
ServicePointManager
Debugger
ManagementObjectSearcher
DownloadStringCompletedEventHandler
System.CodeDom.Compiler
ToUpper
CurrentUser
browser
StreamWriter
TextWriter
GetDelegateForFunctionPointer
BitConverter
ToLower
JavaScriptSerializer
BrowserDir
GetLastWin32Error
set_RedirectStandardError
SetError
IEnumerator
ManagementObjectEnumerator
GetEnumerator
Activator
.cctor
CreateDecryptor
IntPtr
System.Diagnostics
AddSeconds
get_TotalSeconds
get_TotalMilliseconds
Antivirus Signature
Bkav Clean
Lionic Clean
Elastic malicious (high confidence)
MicroWorld-eScan Gen:Variant.Bulz.325483
FireEye Generic.mg.150d402c22f8ad26
CAT-QuickHeal Clean
McAfee Artemis!150D402C22F8
Cylance Clean
VIPRE Clean
Sangfor Suspicious.Win32.Save.a
K7AntiVirus Clean
BitDefender Gen:Variant.Bulz.325483
K7GW Clean
CrowdStrike win/malicious_confidence_60% (D)
Arcabit Clean
BitDefenderTheta Gen:NN.ZemsilF.34126.Cm0@a8PlAZn
Cyren Clean
ESET-NOD32 a variant of MSIL/Spy.Agent.AES
Baidu Clean
APEX Malicious
Paloalto generic.ml
ClamAV Clean
Kaspersky HEUR:Trojan-PSW.MSIL.Anagra.gen
Alibaba Clean
NANO-Antivirus Clean
ViRobot Clean
Rising Clean
Ad-Aware Gen:Variant.Bulz.325483
Emsisoft Gen:Variant.Bulz.325483 (B)
Comodo Clean
F-Secure Clean
DrWeb Clean
Zillya Clean
TrendMicro Clean
McAfee-GW-Edition BehavesLike.Win32.Generic.gm
CMC Clean
Sophos Clean
Ikarus Trojan-Spy.LunaStealer
Jiangmin Clean
Webroot Clean
Avira Clean
MAX malware (ai score=84)
Antiy-AVL Clean
Kingsoft Clean
Gridinsoft Clean
Microsoft Trojan:Win32/Formbook!ml
SUPERAntiSpyware Clean
ZoneAlarm Clean
GData Gen:Variant.Bulz.325483
Cynet Clean
AhnLab-V3 Clean
Acronis Clean
ALYac Gen:Variant.Bulz.325483
TACHYON Clean
VBA32 Clean
Malwarebytes Clean
Panda Trj/GdSda.A
Zoner Clean
TrendMicro-HouseCall Clean
Tencent Msil.Trojan-qqpass.Qqrob.Duwj
Yandex Clean
SentinelOne Static AI - Malicious PE
eGambit Trojan.Generic
Fortinet Clean
AVG Win32:SpywareX-gen [Trj]
Avast Win32:SpywareX-gen [Trj]
MaxSecure Clean
No IRMA results available.