Static | ZeroBOX

PE Compile Time

2021-09-15 17:11:06

PE Imphash

f34d5f2d4577ed6d9ceec516c1f5a744

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00002000 0x000b8e94 0x000b9000 7.38118487539
.rsrc 0x000bc000 0x00000aa2 0x00000c00 3.84467881484
.reloc 0x000be000 0x0000000c 0x00000200 0.101910425663

Resources

Name Offset Size Language Sub-language File type
RT_ICON 0x000bc448 0x00000128 LANG_VIETNAMESE SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000bc448 0x00000128 LANG_VIETNAMESE SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_GROUP_ICON 0x000bc570 0x00000022 LANG_VIETNAMESE SUBLANG_NEUTRAL data
RT_VERSION 0x000bc594 0x00000324 LANG_VIETNAMESE SUBLANG_NEUTRAL data
RT_MANIFEST 0x000bc8b8 0x000001ea LANG_VIETNAMESE SUBLANG_NEUTRAL XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminators

Imports

Library mscoree.dll:
0x402000 _CorExeMain

!This program cannot be run in DOS mode.
`.rsrc
@.reloc
|+uai(
I<ga@#
<UOG@#
[XZ_bX
[XZ_bX
[XZ_bX
[XZ_bX
#:V7ir>
[XZ_bX
[YZ_bX
[YZ_bX
[YZ_bX
[YZ_bX
[YZ_bX
[XZ_bX
[YZ_bX
[XZ_bX
[XZ_bX
[YZ_bX
[YZ_bX
[XZ_bX
[YZ_bX
[YZ_bX
[XZ_bX
[XZ_bX
[XZ_bX
:S{A#
[XZ_bX
[YZ_bX
[XZ_bX
[YZ_bX
[XZ_bX
[XZ_bX
[YZ_bX
[XZ_bX
[YZ_bX
#6F'Wd<
[XZ_bX
[YZ_bX
[YZ_bX
[YZ_bX
[YZ_bX
#98TK
[XZ_bX
[YZ_bX
[XZ_bX
[XZ_bX
[YZ_bX
[YZ_bX
[XZ_bX
[XZ_bX
#sL[^;
[YZ_bX
#*}&|`@
#"Is'.
[YZ_bX
[YZ_bX
[YZ_bX
[YZ_bX
[YZ_bX
[XZ_bX
[YZ_bX
[YZ_bX
[YZ_bX
[YZ_bX
[YZ_bX
[XZ_bX
[YZ_bX
[XZ_bX
[XZ_bX
#,jY\g
[YZ_bX
[XZ_bX
[YZ_bX
[XZ_bX
[YXnZ>
faYXaf
[N3-aifeYZY
efaefY}
8XaiXfY
\BaiZ}
eXYeY}
DwP^_[
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
\5X:S5X4Y2a
rt'N#A(N#O"I
{8P=_6P=Q<W
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U9T?l
Q8U7^8U
u&O")@
;R4Y5Xzd
tL%H*C
o<K&D-U?
}.3^<U3^
B/7^8UF0
Y4V?Y4
A(N#O"C
h;D)C*L!M /X
~-D)K"
S:W5\l
X5S:\1]0
q"C.L%C.
:J#=P<Q:i
Z7U<:!
?O&8U9T?l
g4]0R;a
\'J I/B.C0
i:K&D-K&Z
"6[/B)z
}.G*H!
W0]7^8U9TR
Y1\(E.}
0D-C.B/D
[2T9U8D~
|/>S1X>S
p#J'E,E
rt'N#bd
]4J'K&M
v%L!CJ
R3^<U3^
X1W:V;"
o<U8z7
Q0]?V0]
u&'rg{
Z%H"K-@,A
S>R?dp
\,A%H#p
]&K!H.C/B
J'E,xV
d7^3Q8^3`
$I#K*6
)D0>+6
:W=I4I
C/B)4]0R;X5
\7A)E(B
}%L!;*G*F,D
S9[2U6V;O
4Y5X2a
:W;V=n
X1W:V;
k8Q<^7Q<P
_/B Is
;V3^5f
~-D)K"D)E(C
~-D)K"D)E(C
~-D)K"D)E(C
~-D)K"D)E(C
~-D)K"D)E(C
~-D)K"D)E(C
~-D)K"D)E(C
~-D)K"D)E(C
~-D)K"D)E(C
~-D)K"D)E(C
~-D)K"D)E(C
~-D)K"D)E(C
~-D)K"D)E(C
~-D)K"D)E(C
~-D)K"D)E(C
~-D)K"D)E(C
~-D)K"D)E(C
~-D)K"D)E(C
~-D)K"$
H!L-D"O?!
Y0]?VH
D)D&Oi
>W1\0]f5
b1X5W>X5Y4
V?R0Y?R>S
h;S?^8
D-@"K-@,A
T=P2[=P<Q:i
_6[9P6[
g4^4W?Q
8Q7Z6[
!H.C/B
Z7U<Z7?
M$C/D*
%L*G+F
}.G*?V0]-
z)@-M$"OF%v
>W1\0]f
+F$M'J
3Z<Q9T
,A#J,A-@+xp
]4R?S>U
n8VZ7\
6[7Z-~k
/F M!L't
c5YU8S
rr6e
{(A,K"
wc>0#J(z
$M+F*G,
(FJ'L[6T=
`3V;M/
)K"D)M
A,N'A,@-F
D-AS;}
N"Pk9p
B+F$M+F*G
_4h1]_6P=@-F
;V4];V:W<oe
a3[]0\1K
V3^4];V:W<o
7Z8Q7Z M&u
f5\1%L*G
w$M B+
J'LB/
M B+M
^3Q8^3_2Y
5\:W;V=n
^7Q<M ?l
@"K,A)D.}
*HJ#E(
Q8U5\:W;F-~
b1X5W>X5Y4_
f5\1'N(E
g4%H*C
h;R?!H
o<U89P6[5X3`
C*L!K&M
Q<^7O"N#
M$I)@&K
~-D) I/B,A*y
v%L!A(N#
T9[2R?S>({
#J,A+F-~
9T6_9T
`3Z7U<2_3^
j9P=1X>S
b1X5)@&K
:W5\:W
J#E(D)({
S>\5r
S>R?L
/F M!L
t'N#A(
Y4V?Y4
T=[6Z7
H!G*F+&u
o<U8@)O"
<Q=P;h
.4W~t$
l5GzH.
&O)D(E*y
V?+F*G,
<U3^$I"q
B+M D)B
D))@&K
x+B/M$A,
(E'N(E
;R4Y1\7d
0V;?R9j
k8Q<^7Q<
z)@-O&
J#N,E#N"O
T=P2[=P5X0
D);Q.<Q=V
,A#J,A-@+x
\6\?W1\0]5f
/F!M"P;h
j:T:X1W:
q F+G*
n~M J(
J)A(]kj
N#O%&gN
#O.H*G)
Z9Q8M!L'
I!H&b:
m{]6Q=
Q>S?ku
N(F%dZ
/C0^M=
J;ewz
"7R@-8S
m@*H*4
}/G"@)O
y!M"K q
(5T:W6]
kQ[4S?T
L-R<[K
$Z6Q=f
M!Df{:X6^
5V=n,_
j~pE*I!G
(C&L8B
U\A)P=
E>Z8[G
61Y5XF
3.I%J'
v)9T6_
>W0]6eR
5Y3a 6
8&S=_6Pv
MG,A-^8
X5K&J'M
<r!N$g
A+7[6]
N'1X>S
Z;;R4Y
yO)D(
`5`4^2P9_k
g>^8_1]0[A#&T
tYH0^3]
wXI1]2^
f-@"Kf
B9)@E
UP>T@+L
N&I$OU
B0]6eE
D)B(W:X1
8D"O#N
N0V0]1
x N#N:^OS
jr:Y3a{
:M%I,D"O#
M/<P=VK
D>9%H$
_4`4]E
Zt]2Q9
K.D)<W
'R(E)Du
y+C/E,J'
Z2\0]o
~.G?RS
N)E*?
)B%I%]+
5<_7R5
T8R5XI
>^8_G$
~j<"L"
$a2;]0
H&E-6[7Z
I`+BGW
|*G+F-
$2_-O&@
L)I$H%
AD)K"\$
)_2^3XD
v)?R0Yx
};R?T@
7U/C.E\
_=A-@+
$I7Zl|
1\)D(Et
p!L J<W
8Y7[1b~
f#0!I%
(4R?S>
\5T=[6
X-@"Ks
^0^3_,
+>]5T1]0[
?V2_4g
{)A-G.H%
c.G*HZ
H=*>X6
\)K"Db
H"G%L*
Z4Z6_9T
jR8S6\
GB"\5X
Cr73$C/
O#B,b^
z7]1[{
n}4a3[
.E*H#=
vWZ>T9T0
_.D'O!L M
P=@-A,
\J#E(Db
&P>]*L!M
c1Y5O&@-
+I#O"a
%g"24`4
)O F+G+
8^.H%I]
L#9T6_
N,.B/D.Q>]5
B^K>F0^y
\'M B+b
3_2Y"?.M%
\5X:Sn
7[:T"_
O#B,_+
C);W:Q
.K#N"O
yB7;Z4
}\0]1\
~.H&Df{
_3R<X5Y4
>mZ8[
K:$'O*
PV;W:R
UP<8^3:W
<oW!L.
6K.D)}
C:k'+C&cO
0[>TP$4h
J.D)Y+
lW"6U=
O'K'N(E
jRm@*H
o2[6Tv
G-A+y[
1Z4Z9PK
H%I# aQ
3V;&e74Z9
~CF&<[7rm
#q4&8T
"X^'K(
<!H&K>
y3Q&L!
- G+H=
U7_:X4Z|
9O#PTf5\1
/C0^-~
,|X!M8
H!d\*M!
]W=N$I
0F,A-F*8m
2;(E)D
M+C&LY
0sW4Z9
O#B,b@%I#
U5Y<Fa
0q)F0W
"G9Y0^6
L!dN"E)
m!du!I%
A'b@*B
04Y;R4
v,Bs
*[;R?S
/F88R@,
(A?I#O%
)3^<U3
ECBZ7\2
=G*H!G
`6T8UV
n]L2R=\
n>(I$F/I
~&O&vX
_JP;W
|6P8W<
H(G-._q
/a5]2Z~
8v$N%O
mXVp#P<
+BGUA,
u|v%L!
^PD0_5
^4`4]E
@*M)mG-
r L I9PQ
#)E*H#
W;Z4RT-X
c1Y5WS*_
g&<]3_
N-B*)X
W;X6]#?jRH0^
2h4^5Z
Kt?L-Q9
2W;Z4RT-X
|0YI a/P>T
bL&N$P
gr3O0^4
ED P;^
RT?Z8l
{zp#J'
'L/G!a
P~K(K#]7
q7SVx$D*
Kh=U9s
X!^>Xw
Ot)A-O;RW
k9PR%d$]3_
sn XG,H
&M0Z<f
c9x\x|Y
4_:X4n
I!M/[2wG@-
X7\2Yk
;hz(G&
@:|0_4
6wAD*H\
_JH:^4
.E(B$^'b
[Q?s M
.VW=Qs
3rt0[>
1#P=Q:~
v(VV=Wy
{*TX6\
CF}M&Lg
Z0_4ZI
h=U9[G
|u}.G*
tV?[`~
8r"O#H0N;
} J,V/Z
lem>W:
bj&N&v
DVB%Im
I{Q?T:Q
-G"P<f
]LX[9U
aT<_7i!
!bR_4W
qp3a.E(
>jVc2\
}t~-D)
L$G/I9J?
n[N^_;Wt
aRk1E:\bV;W=
4uo4_:
@,K'cd
J*G+@(6s
2qKM"A
8iIP>Tx
+I,F b
dac;X4
f:VDVz
9lDW>n@
9y N:
w!H&J<L7.r
RB!I/W0u<
g7_3QM euH%w
gL!| J
J{/i2c
h<UM$e
)(H+C=
/ZpJ.Da
Q#Q>T?
2K)L&@B#f)
?Y5X1l
FyBKY=Up
P,J'K&
'@-A,\
{5pl4a3
pM-Ajz
zApR2\
!e Q9R@
XA*HN"
mVWwL'B
/a$tR;ie
h7^7Z8
y6}N]A)
z)IY6U
9x2lD+Hb~
w*'4]QS
d'eF-P
@J?O_6fL
6+F*G,
O%C.BD+
t[8[o|
zp#J'E
YWoD+A
u4jdI&N
3>-DJH
u^-@"K
cM"Aev
<=.GKI
lV9_2^
G=eM"O
L[!I+B]
W<K&D-
Kw Gg~
%'J(A'
fC%H#p
mP?U*>S
gFCkR6\!
#N"O$'
H$F/I9Q
9:W;V=
r\+G*A
0P2[=P
w{(A,N
0L*G+F
4Z3^<U
0L*G+F
#gwv'O
g&ztzT
$R;V4]
#*9P^\
C I/BC*
@,A*y
?P9_2^
FP/I$H
K&K s/>
d@_Mw}
;C*G%L
c/m\-1
&J'L&
1R;]0q
3Q=P;h
DU/B)z
}{sC)
8D)K"D
L8z}0Z[4u
1=T9[2
&L"m9P
/5W>X5
|v%L!C
n1X1\>
lx-Eez
bL$B/CC$
z.nz+Ck~
;E(J#E
6ZXSX$:
%>R?Tz
=/I$H%
|]>W1\E$
2R>S8k
@+F-~,=
e*gd*4
#J,AQD
[T<Q3ZQ8
52[=P<
;I+B$I
F*F+@(=
8,J'K&
9Z3U8i
p>M+F*
.B/D;5(0
;Q7Z6p
A'J(A<M
o2U7^8
ND)O"f
=N#O"I
Y2`&J\
(J#E(
%B/C.Z
}<T=[6
x98%4'NDF
75W>X5
79T6_9
j|{Z3a
e8RHR
[>T90[
N+<^7Q
J(K#]C
V5]<iA
qspxow
5T:Y1X
l|<S9k
m?W;Q8^3
6S2\;nh
{,+F$M
8V<Q=n
O -@"K
m!H%Gt
N$J"a
)=I"q=n
t(B0=T2_
X6U=sE
I$G/J?
:T:W;P
syy N"
.C"L+G
:[;S6[
~11\>W
^*L!M
Rc2O&Rc
}MG M;y
H%>U3
ms@+F}P8Uy2S>
g_W0]w;O
f+F+x)@
\j'J'rA'J8q
v>W:ZV<o
@K(As<O"
>7*G)@
\G$F+I E(C.E
|.W*G+F,
%C.R?T
O&K(A'J&K
+A'J&K s
Q1\>W0](A*yp
Q8U7^T5W:!r
h;>N*C
4U9T?l
3^<U3^u
u&O"@)
8U9T?l
o<U8Q4
l?V;Y0
_6P=Q<
:W;V=n
W>X5%H
Z7U<&K
o<58X1V;V; r
0Y?R>S8k
V?R0Y?R>S
dBoC.E
W:JC%H$I
YP=_6P/c
e6_2P9_2^3X
e6_2P9_2^3X
vrP*L!
R<R0Y@.B/
y(A,N'A,@-F
{(A,N'
%H*C%H$I"q
/B.C(|
X1\>W1]2`
V@.M%D*
,D*P9^4`
q"J(R;\2f
]@*Q=R@,
X5W>W:U8S
o<U8Z3U8T9R
d7_3R<[7\2Z
U7SD*E
YD*I%S
E-A$N)E*H$x
q#R<_7Y
_\>sXx
$X:Z\C
]*"~AB:
_B?KA_
ZF+';0
Qs$j
W*xp|2
/,0h9@5
c>RFn3
ng@]&>
[ZIzZ%
O?THBS8S|
_N[60:
?plFc!
6]DH"-v,W
I&u\w
^FM:O%
xyK-V[
(K! LG'?
x7V%B9
SU<"0?2@
Q0-O5),
sHqMF8
#g|vR8Q
Qe=JHq8
c_,tT-
D<C+!f
,"Mw_0
v.A/\,X
%<"<#T}
]}w;k
2Cwo;t
%j)-yp
5NVDR}/
[jhh[O
!.bwqU
74/2Dm@
Rb9%S<r
JLzr9D
M@(%yL)
D!sO|M
YLsp>X
;O7q6}
`pUZq&*
m=w8<l
~t&`JA
Q;ccI?r=
B1(5Y:
%=gq#X
#Q"PW+
>H$~0M
,Q3ueI
wz"y=@b
N#MH{EU
KT,oW;
1|sV\]{
O/a\yzIkB
hf$xn-@
T?-c]L
&vHZ]1w6-i
.2kMn/X
1p-i7-
`(yMP`C
Vev1"L
?BYP`d
B8zaikq
-.h:ed"8
f!d\2B
;"|z>)
joEk#j?/@
rQshdV
. '/+r
US/9_x
isOSIb
W-[=w?/
YvO?^`
@Yz9;+0
+I=f4P
[J4i`s
$)lhE2
%>B5&PB
Ktzy^R
mTOiM8
n7,_`8
0qH~qo
bI^f.4
M/J@juM@
*`>&a=
(/W,V@
ED>F/t
V(xZes
,I% 79%
[ q2l:
wD)o)Q`
J2~Hgm&
.8nQUU
:p@V/B
,j|nyL
fKt:r$
bOo`wn
aq~8SN
2[Jca5
ALBE_3
t],Bhn
%J:GVK
9$kPU0
POh69x
~KZSki
jo\ymB
QQOD*ubl
v2oURk
m{ZU:MXS
$6U(TL
W2"1mi
^)(r_kG
'1_|UXO"
*>CtVxj
Tl-"T8
FRf-<M
]Z2, V
SlI>mz
NFFyf`
D^!ma|
NC_(D;
WDkz_Z
z)h5g6
2$z1s1p
foLiMa*
uj~iw
d6h6VGP
i~[^9a
VB22GW
I:`Nt;
3D*xw6
KR9=]Ib
syS/O
i?W@L=
J+7psJY
" "VS
Uw~<r\
r4zb,
2hxn:o
qH\xra1
7w@Q0)
b8Qtn~h
}<4/^G
;g7n{D
33YHze
[QTO2/
$c+`:o
pMmI/U
@k_@HC
4!r4:n
n<IKG=
Dro2W
X/re0M
E+b;ivd
jEBP,U
r(Sv?_c
bO(YK8Ol
*`@1D~md
K"cUZN
k#4Q%M
z:Ej]Q
2/-`;,
Eb<;-O
O;"6cU[
8*8bif
{]mk#|
:&KXBF
Ce\!uNb}
EYb(Mj
8-1}<^W
4r[j1Y
`A\+%+M
1ql$X3
kZR2KI
h}]fZ~T
~"^gZ!O
Hw|?h`
LtLY=s
*?Xnor
qqI_eta[
]k#}D|
YD&fUY
YCj8~Ug
i9(0B^8J
x;MDXe
^nmeQ3
,f?s=^
]g%QP1
aK@4$IFm8
vJF!7s
jHevw3L
-;'mvc
B}%W@-
rJY9(c\
jwZ?@o
sJA)?:|eFo
*<.&S=
Z?@'J^vA
ce0(O&
1K?-ii
ki9bLm
qaR&8B#
ey-'ya,
A^PpW Ef7x
y<.Taw
=ue-E
wSBQqL_
J*gvZN
2TY62J
,tU!0=
Xlx9mM
(c"BiyU
.uM&/e
|~,'oD
a*"=7Yf)j
-%g5\t1
OK+cZCp
>=ze]Z
nL'@0
5^6!Z$
U?/)et=
~B2`3H_
VW+95OvR
xsLo"^j
#dG&TSL
G',Fv|
2Gl#biU
n=qJ&3
e%d6[hes
'{lq('i
(/*-pZ
"d9KrG
*iGupt
KKS?J+
J!np$(
jL@OW)
nmI*zE
E?oEk4
ze^^/1
PemSsf
0(Fl9a
N{IrCW
H`@aj.2,&1g
Pf6^+s(pfS
%1?fu:
lPkX;<g
7*ph%*B
?U9bEE
jj[6,q
)">v^
^,TY,,o
c6p=GDp
Dwx4.hpR"
JzPz&k
y'L^{K
a (b;z
@`9%cW
9e&a.a
eiB<ndUj*y
b{sX9)
p6V;Y7C-
r)OM/'
je!n50
{MCJ<\.
Vv`QI`
T&3^}=wz
;-%g:>
n4M)/:
T)rBZn
wtEY+0cN
Tpj#&8
(n`[kp
cCV>A8
\i887Q
5< ^]x
7/u??h
@;Dv%'
RA$yCl
Akn)M7
Az_e5[
J_e<g7
sQ!"o>*
jXl|7r~
N]3[a2
FgQ,FX<
/"/s4l
z`Y*.X
tF[o^l
lyGb@`~bL
6as${\K
.GW~tj#SbU
37&2<v
ERn^Mg
uq[8y}E
$-*}gm
RkBH |
W4#Bbe
P"nvP(
:k%;8~p
_tFXf$
/1T5j4
n*A}u
z~k|S_7
5:&\%
:Ws7 a
s4oJLl
I=vH~@U
iR77Z?O
=*g=WS
,<`Ksl=qg+
.HPE>@1
z^d^pX
j4e:Q\
J4K(NS
!Mc)2^[
7f/cO?
B%Z$/U
GTVdhr
UTem+~
*TT^oQh~
3H66JC#
]Z@/:A
\w(ZH
9ms_b8
{9WuAc
- vXDvb
h(*I3rW
F*4y!yH
?A""-
"aPU^Z
+xt%7*
$Ly[N/
b"7tu?
'&3PF/
L(?(-X
jT!HJ<Pm
QC{_yv
GL ;}%
X3p5 lkQ
GN%+21
lrQgwWO
C:A%W^
0(%@.
-;M\N
`H|T)L
@v1N0\
QlOqN]z
T]I{K[
3fauk%
*"LnkM
o?\F
Aq'dI
CyP_Je
|W"24,d
##AG,gCbx:
.e|2of
KUZw1MQ
sB9Z9'
fhmm\.
p`Ry^95
E+)pQ\
|W$^@hG
l+EC${
]R0m,m<k
j&RG6n
.afwN
oP-<4]9
7T22*E
Gxu !d
c&^kbl
}Kme?"
8R)uT[
vsxWe3
M">-yG
[8$4?hc
*O8ZC#e
K4&VX=
XS`H-7
*KRB Y
?Pd\28
m`VGSc
WU-#>!
hFgd"z
&q/GL]
e}3&Ue
s?ciXs
3jrRjE
vRi@Xf
?})ygoHm
|y{?1I
2ne925
#>8@"
)s=PD0
l%MIdG8
h15?o
"W~Q)Eu
Iys8y#G
yVlz6N
`4d.u~
:s8IIK>t
Pxm!XUg
LM[?pB
kgo3Fz
JQLR;d
m\3=]:
c-p*XQ=
Ac&Ny6
\zeh4d
YPF8ry/
mXfF^-
X~8pp
\Vk*L!
FTj".%u
`DN\^x
&Q ^~&
arN^j{0]
cboCwf
WNlGGB
3fKa6j
A#SPc@
!moX'G
@J}*VsSmW
{?)aezI
$G+F^"
Bh|Pi1
p-((7DM
$28D.+,i
,Z"A;X
6Gl#|.
_:quGB
M=P)a:xs
z@!Z|;
@ D&aEE
Mu0*<v
^qp|[h
e3]uAE
%TQrCZ
p~Z}rBwp
|}hQQC
g-runs
J[1!Dl
sR(^W[
(#F.$$5
N\hmfRd
FJsNnr
cj+)p?
P0uGMs7!ZE
UI\Wt@
wH1uMk
ppg_;
=dba^R
7_TDd+
Q)N-rV
kDKfWPP3
KJUV"G
Q5r2U"
P(h0QO&`
x&JUy4
elI~-y
^4nVP*t
D00v3|
KpoC&>.B=
WVgQ>r
XOuQ"0
veoXQ
]\MfQ*
6d)I;5
UIo^k0u
/M`kZ/
}Lh?p'
0s'>k]
&^~<y<
{]_?9";?
}k!%vQ
SZ5yg1l
9b}_MCB"N
||:&jc
u<0<EK
%-Nn+<w
q7RrD+
ZKt1t9
j1-VmXd
s=0fk]
gA\N%r{
&1wYDwNDl
>K&6%LV
"mdFB
Q7v&,+
JR-#&B
!,u{#N
ya<oo'~\7'
qu? z'\
*_D]p[
6jn2NI3?
psK#W4
{rh{%'_R
eE2 71
VL'4d9O1
7"dvfg
.R6q!g`
`EY?4
?P46B4
OB3$SH
wW*3HZ@:7h
X`Bb{gH
VqY$b^
i{U.#T
YyE5$-
6J=>-
2FgAF,]63s'k
FED.EK
z,YC9
2@M$09W
[5RX}
Cj@L?
dZ]S^`
Ab*W7=
9dB9g8
=sSq3
{RV9/j
Qvu]1c
f+s(LA
D5[*W8
NjBK#2
-/A}&^5
2I^c?8
<*K10x{a
|i'+}V]g
D633lI
_DO<'|H
=&xFV2o
7gr16t
w&a#&Cqdv
6/")0
ov:n}s
-})@uL
e9BQZ#
MB;MW,
S&K.nD
N5FI.I
0>D?])l
>nYUm%
v][O #
eFFy^4
#YM%uW[6
1&+<p0
ik;9x{
:Q<3Um
=wdng)
KcKc~3
bFxV>}
!wHIHUO
f8iKYc
D|QR,0V
ZH"K#B
c)hI<&5
(^t-{G+
?ZrUnw.4
x8$V_p(
>f'u5c
txA,D5x
>j7]iv.hq
9V#f{/
xU*RhY
cytBV,
k*=k|cA
bjw:/u
#pDO4c
8q);Vh%a
(6*F3O
%u)p?i
I{v]_z
W}>ldx,z&
E@~q'B
VDav^NZ
X1+Tf.
B^pwgn
D#L_3
.t8]TPW+
a_H>qo
}S,o*]\
AhLq#
Td9mM{
upQ@dD
?TOjn_(Rh
SM2@^_
^*xrt8>
&>x+U#
"*\nA5
\ |(]+?&mJ
wt#),1
5e9'bGv
ssVW_'
=&\6#\
Eu"Mot
Pd3VN!
|(LL`9
-*9[$^
w|09{,=
CmIc/JQ
b)xf!&
+I/?=
B-b&g+P
B`9_W7
1|~Ua:
g_,c:&
1\MjHU
!96*&t
o*=o"_w
l@!-/.
6[)g,@
DJW&!k
"["s@;F
VFP1cd
s6ps_
luFsXu
v4.0.30319
#Strings
#fsdfsdf#
#gdfgfdg#
#gdfg#
#fsd.dll#
#fsdfsd.dll#
#fsdfsdfsd.dll#
#fsdf.dll#
#fsdfsdf.dll#
#fsdfdsf.dll#
#gdfg.dll#
#ghfh.dll#
Ldind_U1
IEnumerable`1
ArraySegment`1
List`1
ToUInt32
ToInt32
S_INLINESITE2
Func`2
FieldName2
M_Item2
ReadFieldLayoutRow2
LOCALE_SABBREVDAYNAME3
<enumerator>5__3
Ldelem_I4
TargetsAtLeast_Silverlight_V4
<prefix>5__4
ToInt16
get_UTF8
Ldelem_I8
SPM2359
<Module>
COR_E_TYPELOAD
COR_E_APPDOMAINUNLOADED
ReadElementByRID
AssemblyRefMD
ListClassLayoutMD
CodePageUTF32BE
S_TRAMPOLINE
CERT_NAME_UPN_TYPE
WriteShortInlineI
S_ATTR_FRAMEREL
S_MANREGREL
S_ANNOTATION
LOCALE_IDIGITSUBSTITUTION
S_RETURN
System.IO
IsMemoryMappedIO
GetDateOfNNDS
imbifmlmkS
COR_E_DUPLICATEWAITOBJECT
VT_STREAMED_OBJECT
M_AssertFT
FILE_ATTRIBUTE_REPARSE_POINT
COR_E_ABANDONEDMUTEX
STATUS_NO_MEMORY
<>7__wrapa
ResourceData
Get_DefaultQuota
mscorlib
Set_BigBlob
dnlib.DotNet.IMemberRef.get_IsMethodSpec
System.Collections.Generic
ThrowIfGeneric
get_IsStatic
GetProcessById
lpNumberOfBytesRead
hThread
get_CurrentThread
thread
Replaced
IsImplicitlyDereferenced
get_Speed
IsCancellationAcknowledged
get_IsAttached
_locked
_isClosed
MDOnAllTablesSorted
FormatCustomized
ParamRidToOwnerRid
GetClassLayoutRid
bigGuid
set_IsBackground
set_Method
DynamicMethod
DefinePInvokeMethod
ResolveMethod
SetGetMethod
GetSetMethod
NetGuard
fsdfsdfsd
NetworkInterface
get_IsInterface
Replace
Get_HasEmbeddedSource
LoadResource
FindResource
SizeofResource
FindRdasdsesource
Get_UnmanagedCode
Set_UnmanagedCode
GetHashCode
SetCode
CryptoStreamMode
Xenocode.Client.Attributes.AssemblyAttributes.ProcessedByXenocode
GetValidShuffleRange
Change
OverlappedDataCache
EndInvoke
BeginInvoke
Get_MethodSemanticsTable
Get_PropertyTable
GetEnvironmentVariable
Nullable
Enumerable
IDisposable
M_vtable
set_Visible
IConvertible
set_HaveWrittenPreamble
TypeDouble
Get_Handle
get_Handle
RuntimeFieldHandle
get_MethodHandle
RuntimeMethodHandle
GetModuleHandle
get_TypeHandle
RuntimeTypeHandle
CloseHandle
GetFieldFromHandle
GetTypeFromHandle
UriSchemeFile
Get_ConfigurationFile
Console
PermissionSetTriple
get_Module
DefineDynamicModule
DbiModule
GetModule
set_FormBorderStyle
get_Name
ResSetTypeName
Get_CompareName
Get_BaseName
EnglishName
FindTypeBuilderWithName
ObjectName
FailureArgumentName
TimeZoneKeyName
AssemblyName
GetDirectoryName
Get_MaxSupportedDateTime
ReadLine
WriteLine
MemberwiseClone
get_FieldType
DefineType
CreateType
ValueType
IsSubsetOfType
M_DeclaringType
get_DeclaringType
flAllocationType
get_ReturnType
Get_HasReturnType
get_ParameterType
GetType
System.Core
EnsureInitializedCore
GetUserStore
ResolveSignature
SetLocalSignature
M_culture
MethodBase
CompleteOnCountdownPromise
Dispose
Truncate
CreateDelegate
CreateSymbolReaderDelegate
MulticastDelegate
set_WindowState
FormWindowState
SingleQuote
STAThreadAttribute
CompilerGeneratedAttribute
UnverifiableCodeAttribute
UnsafeValueTypeAttribute
OnDeserializingAttribute
BabelAttribute
SuppressIldasmAttribute
ExtensionAttribute
AssemblyInfoAttribute
YanoAttribute
DotNetPatcherPackerAttribute
BabelObfuscatorAttribute
CryptoObfuscator.ProtectedWithCryptoObfuscatorAttribute
DotNetPatcherObfuscatorAttribute
DotfuscatorAttribute
CompilationRelaxationsAttribute
SmartAssembly.Attributes.PoweredByAttribute
RuntimeCompatibilityAttribute
SuppressUnmanagedCodeSecurityAttribute
Get_Minute
MillisPerMinute
System.IConvertible.ToByte
Get_IsUserValue
ShadowCopyDirectoriesValue
SetValue
M_publicKeyValue
get_IsAlive
_positive
imbifmlmkS.exe
get_Size
Get_FullTableSize
PackingSize
Set_BlockSize
dwSize
Resize
SizeOf
fsafafaf
fsdfsdf
AddByRef
get_IsByRef
Get_AssemblyRef
ToAssemblyRef
fafffffffff
gfdffffffg
SentinelSig
System.Threading
set_ExternalThreading
Encoding
IsLogging
Ceiling
Get_IsAggressiveInlining
FromBase64String
OutputDebugString
Get_ConditionString
ToString
SerializationInfoString
GetString
Net_uri_UserDrivenParsing
SelfReplicating
MessageArg
IsMatch
gfhhfhfhfhfhfhfhfhfhfhfh
InsertHash
TransliteratedEnglish
Get_StackBehaviourPush
get_ExecutablePath
GetFolderPath
MaxPath
ObfuscatedByGoliath
get_Length
Get_Month
Popref_popi
AsyncCallback
IOCompletionCallback
callback
GetDeclaringType2_NoLock
Set_IsCacheEnabled_NoLock
RemoveAt_NoLock
Get_IsReadOnly_NoLock
HasFlushedFinalBlock
FlushFinalBlock
MemberBindingMask
NumWaitersState_BitMask
IHasFieldMarshal
get_IsLayoutSequential
Decimal
YieldInternal
SetHandleInternal
BreakInternal
GetDataPtrOffsetInternal
DefineLiteral
<>3__globalQueueTail
advapi32.dll
kernel32.dll
Hash_coll
NaNSymbol
PositiveInfinitySymbol
Control
GuidStream
CryptoStream
MemoryStream
M_memoryStream
get_Item
LastEncodingItem
System
Get_Subsystem
SymmetricAlgorithm
ICryptoTransform
WriteCheckSum
InvalidEnum
_CreateEnum
BeginWritePEChecksum
get_MetadataToken
_IsValidToken
AtNmToken
TimeSpanToken
Get_CancellationToken
M_evToken
lpNumberOfBytesWritten
AppDomain
get_CurrentDomain
M_parsedVersion
GetKeyReadPermission
Application
get_Location
Get_Instantiation
System.Net.NetworkInformation
NineRays.Obfuscator.Evaluation
Get_IsNoOptimization
System.Reflection
ManagementObjectCollection
Get_CallingConvention
OperationCanceledException
RuntimeWrappedException
EncoderFallbackException
Return
CharUnknown
System.Collections.Generic.ICollection<dnlib.DotNet.Parameter>.CopyTo
GetDynamicILInfo
FieldInfo
MethodInfo
FileInfo
FileSystemInfo
MemberInfo
ParameterInfo
ProcessStartInfo
STextInfo
DirectoryInfo
GetInterfaceMap
M_argsMap
PropertyMap
get_AlwaysCreateBlobHeap
YearDateSep
Setjump
CharInCategoryGroup
System.Linq
set_ShowInTaskbar
tmBreakChar
SingletonChar
System.IConvertible.ToChar
SysChar
LastChar
Get_DataMember
HasReadHeader
DESCryptoServiceProvider
Get_FormatProvider
_MethodBuilder
ModuleBuilder
TypeBuilder
AssemblyBuilder
SpecialFolder
TaskExceptionHolder
_expandedBuffer
lpBuffer
ResourceManager
Debugger
ManagementObjectSearcher
AllowHexSpecifier
AccessChecker
ResolveHelper
_keycomparer
CreateProcessAsUser
get_IsPointer
BitConverter
IResolver
GetResolver
ToLower
IsLower
GetTokenFor
Set_CurrencyGroupSeparator
IsSeparator
ManagementObjectEnumerator
GetEnumerator
Operator
.cctor
dotNetProtector
Set_Constructor
get_IsConstructor
CreateDecryptor
Get_UIntPtr
System.Diagnostics
GetMethods
GetAllNetworkInterfaces
System.Runtime.InteropServices
System.Runtime.CompilerServices
System.Resources
imbifmlmkS.resources
HasVariables
EnableVisualStyles
InitNames
WriteAllLines
Get_s_systemTimeZones
Get_Types
S_SICtorParamTypes
GregorianCalendarTypes
EmptyTypes
set_Attributes
MethodAttributes
FileAttributes
TypeAttributes
MethodImplAttributes
HasCustomAttributes
GetCustomAttributes
SavedBytes
M_blockSizeBytes
GetBytes
Set_CurrencyGroupSizes
BindingFlags
GetMethodImplementationFlags
SetImplementationFlags
Get_ImplicitThis
Get_ScheduledTasks
M_DeclarativeDenials
HasImperativeDenials
KeyEquals
GetParams
System.Windows.Forms
Contains
PointerToRelocations
CallingConventions
Get_ContinuationOptions
ExportAddressTableJumps
dnlib.DotNet.Pdb.Dss.IMetaDataImport.GetScopeProps
GetCustomAttributeProps
_groups
M_mdMethodFixups
get_Chars
_WSchars
UpdateIOPadBuffers
GetOptionalCustomModifiers
M_illegalCharacters
GetParameters
Anchors
get_IsClass
AssemblyBuilderAccess
hProcess
GetCurrentProcess
lpBaseAddress
GetPhysicalAddress
lpAddress
StartAddress
Components
Get_Status
HasDeletedRows
S_LPROCMIPS_16t
Concat
IsCompatibleObject
ManagementBaseObject
_stateObject
GetObject
ManagementObject
object
Select
flProtect
System.Net
OffSet
CharSet
Get_IsSet
BaseFileOffset
M_ChunkOffset
StartOffset
MaxOffset
op_Explicit
System.Reflection.Emit
Net_uri_SchemeLimit
SetCompatibleTextRenderingDefault
IAsyncResult
result
System.Management
UnterminatedComment
Environment
Get_PrivateExponent
get_Current
CheckRemoteDebuggerPresent
IsDebuggerPresent
Get_IsEvent
NumCount
Nullcount
GetSlot
ParameterizedThreadStart
Convert
BindableSupport
FailFast
WebRequest
GetPropertyRidList
GetConstructorList
M_host
set_Timeout
SuspendLayout
ResumeLayout
MoveNext
System.Text
S_threadStaticContext
context
RegistryView
set_CreateNoWindow
FindThrow
ParamIndex
_bmPrefix
PreserveSyncCtx
cachedOsFallbackArray
ToArray
get_IsArray
System.Security.Cryptography
DefineDynamicAssembly
_callingAssembly
GetExecutingAssembly
ILOnly
InstanceMethodOnly
Get_Company
BlockCopy
InternalCopy
State_Try
CreateDirectory
Get_ImportDirectory
_capacity
op_Equality
op_Inequality
_VersionCompatibility
BadAuthority
OptionalAuthority
System.Security
SuppressUnmanagedCodeSecurity
MutexSecurity
IsNullOrEmpty
198 Protector V2
System.Security.Permissions.SecurityPermissionAttribute, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
SkipVerification
WrapNonExceptionThrows
Antivirus Signature
Bkav Clean
Lionic Trojan.MSIL.Tasker.4!c
Elastic malicious (high confidence)
MicroWorld-eScan Clean
CMC Clean
CAT-QuickHeal Clean
McAfee Artemis!E552183D16E0
Cylance Unsafe
VIPRE Clean
Sangfor Suspicious.Win32.Save.a
K7AntiVirus Clean
BitDefender Clean
K7GW Clean
CrowdStrike win/malicious_confidence_90% (W)
Baidu Clean
Cyren W32/Trojan.JHLF-2867
Symantec ML.Attribute.HighConfidence
ESET-NOD32 a variant of MSIL/Injector.VRI
APEX Malicious
Paloalto Clean
ClamAV Clean
Kaspersky VHO:Trojan.MSIL.Tasker.gen
Alibaba Clean
NANO-Antivirus Clean
ViRobot Clean
Tencent Clean
Ad-Aware Clean
TACHYON Clean
Emsisoft Clean
Comodo Clean
F-Secure Clean
DrWeb Clean
Zillya Clean
TrendMicro Clean
McAfee-GW-Edition BehavesLike.Win32.Fareit.bc
FireEye Generic.mg.e552183d16e0d662
Sophos Clean
Ikarus Clean
GData Clean
Jiangmin Clean
MaxSecure Clean
Avira Clean
Antiy-AVL Clean
Kingsoft Win32.Troj.Undef.(kcloud)
Gridinsoft Clean
Arcabit Clean
SUPERAntiSpyware Clean
ZoneAlarm Clean
Microsoft Trojan:MSIL/AgentTesla.JPW!MTB
Cynet Clean
AhnLab-V3 Trojan/Win.Generic.C4631686
Acronis Clean
BitDefenderTheta Gen:NN.ZemsilF.34142.Um0@aumWGpdG
ALYac Clean
MAX Clean
VBA32 Clean
Malwarebytes Clean
Panda Clean
Zoner Clean
TrendMicro-HouseCall Clean
Rising Clean
Yandex Clean
SentinelOne Static AI - Malicious PE
eGambit Unsafe.AI_Score_92%
Fortinet MSIL/Agent.AES!tr
Webroot Clean
AVG Win32:PWSX-gen [Trj]
Cybereason malicious.3992de
Avast Win32:PWSX-gen [Trj]
No IRMA results available.