Static | ZeroBOX

PE Compile Time

2021-09-15 19:50:10

PE Imphash

f34d5f2d4577ed6d9ceec516c1f5a744

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00002000 0x000b8644 0x000b8800 7.38027613736
.rsrc 0x000bc000 0x000009e2 0x00000a00 4.21351753749
.reloc 0x000be000 0x0000000c 0x00000200 0.101910425663

Resources

Name Offset Size Language Sub-language File type
RT_ICON 0x000bc448 0x00000128 LANG_SORBIAN SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000bc448 0x00000128 LANG_SORBIAN SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_GROUP_ICON 0x000bc570 0x00000022 LANG_SORBIAN SUBLANG_NEUTRAL data
RT_VERSION 0x000bc594 0x00000264 LANG_SORBIAN SUBLANG_NEUTRAL data
RT_MANIFEST 0x000bc7f8 0x000001ea LANG_SORBIAN SUBLANG_NEUTRAL XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminators

Imports

Library mscoree.dll:
0x402000 _CorExeMain

!This program cannot be run in DOS mode.
`.rsrc
@.reloc
n08ai(
@L@Y(u
@H@X(u
5S@uO@#
@G@Z(u
@Y@Z(u
x9"g S9"gai(
^@[(u
Q@X(u
@B@Z(u
`Z@Y(u
[YZ_bX
[YZ_bX
[YZ_bX
[XZ_bX
[XZ_bX
[XZ_bX
[XZ_bX
[XZ_bX
[YZ_bX
[XZ_bX
#whsh^
[XZ_bX
[YZ_bX
[YZ_bX
[XZ_bX
[XZ_bX
[XZ_bX
#|Oq|
[XZ_bX
[YZ_bX
[YZ_bX
[YZ_bX
[YZ_bX
[YZ_bX
[YZ_bX
[YZ_bX
[XZ_bX
[YZ_bX
[YZ_bX
[XZ_bX
[XZ_bX
#agtpr
[YZ_bX
[YZ_bX
[YZ_bX
#GRla<
#C=b#w!
[YZ_bX
[YZ_bX
[XZ_bX
[YZ_bX
[XZ_bX
[YZ_bX
[XZ_bX
[XZ_bX
[YZ_bX
`q@Y(u
[XZ_bX
[XZ_bX
[XZ_bX
[XZ_bX
[YZ_bX
[XZ_bX
[YZ_bX
#C(/5d
[YZ_bX
[YZ_bX
[XZ_bX
[YZ_bX
#7&JN,!
[YZ_bX
[XZ_bX
[YZ_bX
[XZ_bX
@y@Y(u
[XZ_bX
[YZ_bX
[XZ_bX
[YZ_bX
[YZ_bX
[YZ_bX
[XZ_bX
[YZ_bX
#t{5Au
[YXnZ>
`aiXYe}
XZffaef
NLFTaiYff
fXYeYfe
fYaff}
Wa^_[
d\!^_[
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
1\<W4\:V
p[3Q=|
r<W4\>R
}<V2_<W4\>R
v7]9T7\?W5Y
<Q<_$G/
Q;]0S8[3A-l
^3P;X B.
o.D M.E&N,@
[1U8[0S;Y5t
x9S5X;
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
o.D M.E&N,@
}s1[?Rbc
E./G%I
";:P1\?T9
Z1R:X4u{
N%2Z,_
J D):;
Q9e01[
D.J'K;S
r2X<Q1Z9Q
L$2^u
$I*A"J(D
E/C.M&E-
6]0X2^u
N$@-N%F.L f
[0C+I%d
k"H,A"I
M&E-O'
!4_4\>R
t+A!L/D'O^
R#H#K)E
D.J'D/
(>S(C H*FI
2C(C+I%d
O%9T7\?W
m$N*G$O
[6U>]5
l%O+F%N
?U)D'L/G
7F.D(i
+A,G,O'E)
=W+F%N-E
:K ;S1]
=W+F%N-E
E/K&E.
3B)B*H$e
"U?S>]6U=
i(B&K&
4^2_<W4\Ob
\1Z1Y;W
R?T?\4V:
m"H(E&M.F)~
r3Y=PYR
I!e44^?}
$89S80
/23Y>.
&M/"<?>T17,6
u4^:W4_
7)M C(K#@,m
>N-F&L*F
>T1]?U7`
p1[?RI
C)L!B)
2Y:R0\
W<X5V=^6T8y
V<X5[0S;Y5t
O$G/M!L
l-G#N-F%M/C
>T0]>U6^<P
]6N&D(a
1;V.E&N\
K!I+Gv
G*B)J"
'&L!L/D?=Q
:;QA+H#<"
$O,D&J
@-M&%M/C
p6+*@ M.EF
\4U9@*N#D
Z2M!]7S>]6U=_3
+F%N-E'K
d%O+F%N-E
G-I$G,O'E)h
G-I$G,O'E)h
G-I$G,O'E)h
G-I$G,O'E)h
G-I$G,O'E)h
.L a"Y
' G%N,@
X2V;X3P8
K!<M.E
>T0]<W4\
[6V>]5
Y4F-N&D(i
0]>U6^
B)J"@,e
N%F.L [1U8R9Z2,
J B/,G
Z0H%E.A)C/n
2Y:R0\
@*N#@+
\<<V2_<W4\>Rr
9T7\?W5Y
v7]9T7\?W
]7B/L'
98R~#
Z0(E%N
}s2X<Q
!N/E!L
@-N%F.L a
%PT9Z17_=Q
O$G/I%|"
V<X5V=^6
T>Z7T?\4V:
]7S>]6U=_3
/D'O)E
D)J!B*H$e
'J)BY1S?G-
wH$2X
:Q2Z8T
:W4_<T^2s
;V5^=U
F,H%6]>V
^U=_3>T
U>]5 L
K C+I%"H,A
W<_7s
wI%+A
T9Z1R:
.D M,G$L
P:^3(C H(D
&M.F"N
@*L!B)
N$@-L'D,
I#G*'L/G#O
J D)J!
e$N*G|
*G$O,D
T>Z7T?.F$H
s.D M.E&N,@
T88R6[8S
/D'O-A
\1R9'O
Z2P<7]
_5Q<_4-E'K
[1U8[0'O-A
:Y2Q9W;z
I#G*A*I!
}<V2_<W
8P2^u
}s2X<Q2Y:R.B
y8R6[8S
T91Z9Q3_
&L(E&M
J&>T0]
T9:Q2Z8T
4_4\>R
]7S>]6
F,H%F- H*F
I!C/9S
"A)K'f
f'M)D'L*B
H"F+H#@(J&g
C.=U->]2s
G*I"A)K'f
V<Y5W=^6T8x
/.D M.EF
O%A,K C+I%d
+uE\sLc?
ElY5R@#
CS@$PKns b
B'K):Y1S
;W5_TW
x:Q6sX
!$O,BZ
d{>_5W
J!F,G,O'
9S1ZPK|
=_8[O@
T:Z2iR
+G%O$L.B
3WRc}x#w
)L!a#;
U@%I"I*B
4Z:Rj}
[7U?X0P
D0T4V:{
:%H!D?
A+I"8T
\2R:qF
| L0N,@
@L#A+Il:X
C2Z?SH
%O-A#]7
@|>\2R
gVK#H&]_
r*J*B6W
XW6_>=|
n/Fm(M'E.
@N-A#H
v`+E(E
3`"IEO
+E|lj\
H/?\4V
C$F%M/
3,E(Et)
\2Y:R0
"#G*I"
0_7U9x
)C0!G\
+%S5X;P
mFh%OC%
-U8[0S
L6R?\7
7W9Z1R
kC8R1^
UN'E.K
XS:Z3iT
WL&E*j
)Z;T7s
)B!^-z
X?3Q=|u
I& H*F
5H#H&=V5]@
tC-P=mx
<h+B'I
?[6U?'
%F.L!+
zD"P4^=U7
UW5Y;h
oA'K)A"J(}75a
aW=Y4n
<_7U:F
F'P3^u
K*B LF
!K*G+A%H
%E%F-Nl
h"="I.
D/K;M>
.Q4W?]w
U?]6L a
P5_=UL
]8]-N%F
25_=V0\
|!K)A8I 'K)
%|<&K(
H#@-N%
'(A$I}
9S1b()
;Q3d.'
+P>f5;
W@#P)R
l1V2_<
}SL M.~
A;:;R7
N%B0K C+
v;A%H+
H!D)iN
Z?^6VS*
E'M/Hu
R'O,B6V
ax3=!J)
] 1U8[
HK%H%d
%`$4W?
#I+D>]
DU8T8P
G=.6]:
#<X5V=
O*B L
\C#@(Jl
j9;X0
w7^;N-F%
[&F.N_
`X3Y;T
>X1\?T
-@$P4Z8T
WB#I+A#O
!P&M.Fj:
Y>F%M/
)J#B/#G#Nf
6lp!K/
"Q4]@!`
Gv?W4Z
#cB^4
S4M.F$
Y5X;Py-
VJ<5_=
I#A>Pu
| 6U=_
)D!M&M.F]
C*D)J!
o-a/(D(
:q3,E(}
B3J!B*I
Q<w/*C"
M/E'gw
/P,N"c|
$g82Q>
$$G,O'
N?S7Z9
s6?6V?
B:X4u
;T7\2Q
C+=^5V
53P;X0
i<U>]5$v
s;n#0T=
aD'L/_s
q0rX D0
U)B!I+
z<W1\?T
k+B=X;P3\
<B'K){
6A#L/[
>>T8TO
p,0H#@
0`|qpx
U@"O,G]
K C+ImH"F+`
WE!L/D
S:]0S8
QSS1S9
d%gW,P<
1!M/E>
D-a-A+I
!<w-/H+
+*@<R'M/
?8Q4Y0
A&F/N"0
H,E(EO
p3:J)F~
b}l-H-A"Jt
V|0:R:Z
r3Y=P{
w}) G$J
|. I+A
d&K/B!
+@$M0\2MAA"J*
6!J)F~
'c$?\2ia
, e\7U>
-M1^ J
H7^>WJ
%#@+H
D/c%K"B
n%$K)iv
}-;\vO
?H,A"I
&s2X<
OcI'K"U8W5
n%]F0S
.|]1SW
m!7]8\
o(XL(k
g4wX8\1q
$HC_C-P
h<J)B9
[LGN5[
P;F.L8
<0z6\I$H
x,%Z@.
0sTJ*G?
B)N$_e
,g)X2Q
^6V?]F
;T7\5=&K(
H=H3R;
p-D@)U3_
,_^H,A9
P9\1p/@E8f
}/}$I#
N:YF$Jb
S:^H c
VQ*_L<a
.[2W;p
"Y+[5X
":X<X;h
I+*I-vd
TC*J#AB
C<Y;TN]
z1o"L/
o.Y2w d
r=X<UO
ZQ{/I,
e=R2ZQ
H~*o F,
C9~Y5R
g'N*\4w(]A.
^s1c+J"z
=X<U7p&d
D/K;M>
CA_P5_u
Y3R?~)BG
bI^@)L)
&ZTW>^
1^>V5r
O&F/M6l
Y6V>]J
>U7]>k
e#5u?w8S
q+4)C'
lXRO1]:
D/K;M>
umDIRA#
*.E'MFF
5=R2Z9f
v2FF*n1\
=N'E.d
6mBG-m
l{2Z?SH
zvs^4
P;S1Z8i
q/AA'u6]
n}L)N$
:qFL"d
S*C(F%c
MN(L%G@
9ik2u }
t4L<`8{
CF/L"A?QQ3
Y>\gS1Z
J*J"A>QU
)F#O,\4tn2u
y9\`T8
:Z:R1n
mU,e1^>
!N+G$d
>X<U7p&d@`
6^>V5r
TA&L/Y/_
>Y<QX1U
@;uI#B
|)fC"K
hVJzN'E
Y7U?\I d
$O.CJ<
D/K;M>Wu
MGf\8]
J!E=SP
t!F,g^
71`"Iu
V!s$nIR
vxx9S7
@g(Cd|
OEAtZ@.
^u5Ut7^w
6sT} I
YP0T9Z
#$@-N%
w,nP:Y
U=^6TM
c_1R9ZG!
N$G/M6s
D-I$GA
8,^RDn
`C?lnM0\
SUQbQ7[u
>tS[3X
E!B*H$
7snR2_
<:Q2Z8
N$G/M6s
q*m\2t
PVRcX>T
{0bP:YY
R>]6UR,
k9S>]6
%G+j$#
_q-X9Rj
h:T9Z1
R9[7v1Q
q3i]@,
QqO>zr5`
FM=ee&Mf
Qq*@$I
*YRws!a
_'D,N"
*^qys4Zi
$:Q2Z8
0Z>ST"
;1R9Z2
1T9Z1g
*t0{u
#$@-N%
>F%N-E
%I)c_%7
!I+G*#
-$I*A"
"c*n[+1
a1R1Z9
jM-E'Kq
,@#H+X6
uB B.ox
R2Q:Y1
8Z1R:m
;D M.E
kT>]5WP
ZQQmu6]
Z]4\>R
;U6]>k
ue#I-@8O
V.M&E-
7g-! Jg
z\7Z9RF*
!y.D M
-A)K'f
c|}<V2
a7I$G,
1S?~8?
iV<_7UN
=+H#@(
+3P8Z6
<V2_<
<j?9[G
l(k[,1
W! JOB
9-N&D(
JU3Q=|
GV+@#K
gx9S7~
r]4V:{&>
Bs2XQ8
p_3P8ZK
bU5]?S'I
60[8P2
dU5^=UL
I'g1P%"
V(C H*
<,O$G/
4];P3[r
J2[8S0
6Y,O'Eb
#g1V<
S8V6U6^<
cJ#A+I!
G%N-Yn
q1Q5X;
a}2S<_
l6T9C
_"<X5V
xR?z"q
S2[:k#
Q-E/K>
1E)K!-E'K}
3.E"Pl
?X%M/C;
B+I"U2
_v/F#O,
{!M/4g
^5W4\c-
$3R;ZK
)@$P4tp
R:Z3iZ
;TA#LC(
3P,D&oL
a}&H!D=u
SN0\@(
D.`'C(
{/K 3Y;
pSQ1Ym
Z0t2P;d%F*a#F+0s
-X:Qu
r0Q=L<W:
fFA!JUS0\
TSN,D*\
'r-H%B=]5CC
Z@ M-F"Jh
v3Y=P2Y9Q3_v
u!\;P3[8T
Q2YJ"@
[?RY2Q
\6R?Vw
G-H%F-N&
g%O+F%N
D.J'D/
A+N#<W/G!M
_5Q<_4
E.M%G+&L
X5V=^6
>S0[8P
\6>S/D
Z0 M.E
].E%M+G
i$N*G$Ol
K!E(K C+I%d
l.E"_<W4M0]
Y1S?>T0]=V1Y;W
*A"J(D
Q2Y:R0]
T>Z8\8\
x%X0R>
D.J'D/L6f
K!E(K C+I%d
K!E(K C+I%d
K!E(K C+I%d
K!E(K C+I%d
K!E(K C+I%d
K!E(K C+I%d
K!E(K C+I%d
N%B0T@$M0]
d-G"P;P2[A-k
_5^6S@
q/F*G#I2Z
L0Y@-m
N%B0T@$M0]
Z0T9Z1R9[7v
Y3W:Y2Q9[7w
[2W;Y3Q:Y6x
x .R:]
}#I+D'L
TrZT;(
i0}lVWP
dh0jrlF
+dojUG
I$_Cn
|GH`g:
J^}0<B
zp{`)*
xdh(jJR_
P%Fx^D
7SJ}{C
PgGW@z
~xERv)
a"^e4m
,s!;05
.#h$n$.
%G.%H0W&
Ro2U'E<
*.br+=
iy'Zo}
KLAX>cm
H'aUIHdf
f/AX<-
:G>nI
: 6|A]
R0G~Y6
G1Tye&
CN3JhL
<i6#x~h9E
+k+LxEW
iHxKD}r
G :kzN{
fv])~s
UJne*V
,<HP$e
?*MfCl
tL/(_+nq
Zq *J
e"U%+b
+13ghd
uK951&
=vK<c8A
7S6)5Z3
-wXhaIb
-`\B}@S\
3"IV$6
fB$mxFx
}_$IgB
|/dYs^7E
$mq@L5
r@q]"S
PGn*eL
$nJFy,
WhA6- ^
{V'gRI
\V?U G`
D.VDwvu6
!|Z{rc
PRL)yL
*v0smm
?=/-mx
Xq]W+6A
qUt^Ie
jDXWj6
@9s[PP
)DF/tx
j%L**UO
q=Cffd/
P0!h\b
,14xPN
XN9-NW
/-tNFn
P013p=
9]fX2p
G{\q!|
"0h@~?(
Y=:wy]
J=^+w3P
r#JZ.Kx
XjuK"z
H]7JkH7
J?s$&s
)M(Qdw
Hrrkjb
T$G6Zq*
!`tTPe
*m"zG"
y7O1H*
uP1Xtm
B@lXL5U
B6R5<@}B
Rc4coJ
_$/:T=
5/es-=
F-SFf*
yQe'Pi
#iFoa(
\Zf <X
C~>PBe
XAX9L`
+Msy+H
gF<^Xt
2,Rv7H
:43osy
6DcB'B
h#si(b
,v2d7t-`
Iaq1ZnNN'
c(tQ%.E
Z)\4$NN
#2]w`Y
7A="M)
*DLEk}
83k^10
%5jJ-b/
MP&^!h
c@B5n
%4k/YG
6A1Ym~
eg!B9(
SBsVr
mj7`rit
bnjH2Z
8NB9lC
~SG)@VF
xn"l,G
k"^4uZA
re?Ozm
|`;@f
aK.;V]A
@}AQu@
j?,`s+[
81[ c9eO
nXR+8#zW
QjSZ;p
Q>3y)2
kyC@yEk2X
PSAROk8
R@P{}/
iKj/Mk/;
Cyk?6Y1?
dVYzuY
yFq76r
*{tzlrm
gz5b,"
KmUG3M-
$?m|xZ
PoB{.q
iA7:(K
[+OTa|C
Qrr!dE@
+Z}x}<]
'1ea]R
]<;e*k
1&yoe10
1b*]rd
mZE!k%
&s2\~i
|PW.FD
v\|Au'>H
gsZY"G&dis
Ea\qb{
Q~fCviG
-2p%)`
Dw;W'i
iaq3km{
hk+]sYx
QhZi0@9~
TZpq!5
Ki;BFX
pyh! +
D(#3@[9Ji
+i`1,?
bVM< F
[#@=;`}
-dt,^,
*DZ*9(|S
ne9/U=[CK
v&r/&q
MtE-Fs
peXH;U>
?7vl+"
LkV`F0
/{[CRV
$u5RpC@
ZkHVTU
pR/i!o
nbK{g/
,1wA%NQ
.Thz\o2K
%wQ&w1j
\s{_ovq
|Mb.{(5s
>@ JZ w,5
<ij`TM
gC"Du
O%jChFR=
F3C]B4
h,3Gfs`
pgCC>/3
g*Z2OLJ8
>Snqx2}
xW0GAV
+/LD}c
VAG0m>
<p9z\{
-J5X)|
'A6]k?
j/AeXgW
(D+w!,
RhiM8c
h,sSTB
[3K}rx
6}(?04
XqU|mUGN
^85."U
..6zY*
>^]U?@
x=;<=y
>>4<DC
,.H=LL
M`iqi]
CV[G,.
uD?SOg
j#zL|}
)L8^m5
]y,*>G{\
:.]=cz|
!^,CY@
Z.~Cxr},
RP"~sv
7J9`Tp
=L&NKV
V>l:Yi
Zyn8H]
$%Uk>Q
% 9sP7
`-D'u{
t8YTww
)P?yO'}
3W>X_<
O%'':Z,
p80lnK
Mzp]cL
v&c{F_
nv>6;{
PP6=~_[&Vk%
($'p|ME
=>/hjKk
ZRwPaC-
L(&8jRi
m<t$E@
sUf5W2vU\
.6:p{Xg?f
Pg81c=
6qy0Yh
_vaCZ4
9ll`NJ
@oHbq9j
P{AEvX
RUmKw0
1!`dP.z1>[
Bziu|B'
j/w6(#*k
3R/7e9
wJ`s1W
P\%pe+
DiRq u
(zUo)w
?Jc~eH
|q{ETM?
e())`]^-
0@-$'(w
Xg0s!{O
4jXC@m
AXv,^u
]:`4NQ-
j!L9jU\r
Wq#j|<
F{_f6]
Ty1M7qH
KY0X_C
j/xrQs
#Y9Vc0vR
Bf; (R'
GUI7h3
C1Yn>q
:.w=(r
V-ss<7
?2o/%=
oDtNP`
]& 3(%KgQY[
A;YtG((\_
}J`C`?
6~{+Js2%
n#}hqj
%Ai(=r
J|(Gq]
^P$}~pa@L)sTK
I)v6 v
<+3XYX
d,qGx9
^aoQ'Z
nA%HbFxv=
~9uynH
;Szo4O
,K3RD!
WUb, r]{
_]i$SY
\ZqV$
0V07wU
U5m,v1
:qP-eHK
%Op<M2
a1hx_`
Wf#=>.
?sYka
@~mPtX%
T;C'oq
Lv!K.M)
_$]7@O'
7 ;jd1
MPCGb@U
u3!Y{]
d`pcu
Jm[Dc}B
nXq|.z
N^TV1]$
Cy3?8<c
rE767=
s.`=3%
[-mUsg
}Vi+j
>t5MV2
^K0s?}
5zS9AU}eA
+!,46WU`
Ok&k2!Qv
>_-7=TK
mhpb2n
G4(%-(
b MGdC
W;RZ{V^
"g&%8e;
II3qo n
FBf#)Y
:#=#g,
xJV-Vyk
(x8)_u
5=8?it
8 2?j-
ga7|0k
@.kjB\
3m^-Ds
x@oEcRM
ZJ6(6XB
M ,|K2
tbSTrJU
D<b%263
A@mq5x
\\EL?9g
7Pnw&n
H~?4`*
$D>Y_
pu*v\25u~k3
z~T4ZH
{EL!Vw
?|P9#j
ZCSH#s
5#oYOnI
.PgikCR
L'kF'av
["J68j
6kl2{xq.p/
4H_s}d>[X
ci?}n
h2Z"%R
z>oQJve
4IKafZ|0
P8w}#;
Co%"Mk
F`v)YS
|G65]"!l(y '
&uJOC1
;\]9ub
uu:vPB
}PzzWw
G6w*/)
72Rg3"
9+e>z&=
uDu+>.
!!vs+8
MBa<ng
iO0<*z
n,u/@J
x xmw
2S{_Ft
@z+_6[
Q[ej*gj
MN?KLJ>
nBDE9
j@PIQP!
93f:l|r
p1%[4n
~f%Vy
RSGHHlM
O<y[sB
}\V?TjS
>5"NM-
L-\<7h8
CzkAgSz
/^\9P
_VNQ0
29 t{t
Ost?ku
(tliH\
W/>?!(&
!rQ6g2
qgr Cv{X
`a"az+
^\c0Nz
9L<bJR
$GQu~F
a4W{QNn
n8CZ*}
DOCg%"s
f)m{<>jX/^N
/&Ff_A
bDn|/<
A4E,Oo
*6~T+^
/iI|4sY
RCgQf!
.x/jbAG\
|S+rOMo
e*&j?uJ
2+,ud8n/
[oaeLY
'Z^JU)
{/n 9M
W/>._1
%HMT_7`
-@D>+Q6
N=i][q
?2hM2[
45\4#<
v'e,o:g
NT5w9:
`KIL<2
C[qOVp?{
[<pwZU
.A4` }
SM.KA0
5lR#/W
`*d'A
SfRb<v
]}2SwR
R l/O
mur@a%
-6bH-w
T>lLta#3I
zod 0v
-lRf9F
ZO`k B
&!o,r$D
7 e/L#
&eYErdf
\~=c|-(
|i`L4K
>K\kCR
b*-air*
:*JXc~
zr~\am
U7gAQQ
/bJ9D!T'C
BXPK]*3RWNr
)STgS$rU6
YPUr;E&
5$PaQ@K
|(N=FF]
d$QZ0Z
B}MmP5h
i73caMr
5vJ5Zd
tc*&xp
tPf@%U7
Z2<*v]V
Dt5h=AeC
I}#^nw@
agb.5V
a )rF.
$>BmTV
3`8m'h
QnfSNj'
PQr}-JH*
jY04G=
4lQ*CN
u8FQr/
1%zrO_{
Eh_!:}W
zTO}ECr
6@L`3(]
(|oqPW
M%'#0O0
]g%)k}
D2M-:1
jq"-5ZT,WL
79I]GT
XP2Dc^
D%BWX=%
tl2'|(e
3p,uKO/
$u%D<I
O8izdk
7 `y4n
ZQVOKa
`pP)F;
,<Y)*%Wd
2K[k~^C
S$Y3Ez
_q3,'P
,D!K<a
D(wJ-k0}
D_7^Pe
kMCy)z
"F]nWXW6
X~802Q
U?e$s
o^wO2]
3D;<rE
/%Bpw{
e"qzE.
-%ix;N
t-\XART
q`7nWG
gn<=qz
I1>bi=)k
A]gB,\
'mVuV
et-L}m
ie}~*l
DT7X%6
n.=Kp8
%`djc}
dw;n|v
"E_/o)
/L[<Xz
0C/uJm
| +UhS3
7kEw>
#@mZbo
)AeJ3hu
ui\0cu
hp<+w_
\^/M8L
)%4fF`
^-c'1%
j^#Ib_
F&J2$'-
~ATP-~
PFkea$
WH S8g-
VR4x|
D4 }4y&
PKzp+X
6ZBU.N
d:PAah
n `P?(T
Easze.
O+-o}
Bb}N&:
~!p})q
W6>E+8
`1X?Gw
`OPe.
sR[Utwx
k/lY+o4
xvdGDs
\CK?9!
8.$<y4
GFrYOG
*r*n,^
Fdu$t#e
-u;{xZ
gU7~^]|
S4FX#spQ
$,O8dW
TZh;@d
Xusp|~
IwiJ]xy
Mt,MFb
gtAB/`
n9n<8,
_d_+^D
A!x4F$7
K;Cpg5z:
?#'T|
x]Yq#
3>t*MXf
O5P*sT
tfQ RUL:
~vIk)|
ZpXWi>
a'^rPw
5+rTvm
42!wM&
x>twO9K
kwRbQL
NX";K,
9eAXe>
&">78-
}5MFN4
U'@I
4cY8k~
&;7^]3v-QT
f)ER2#
f[4bt.
)P>L]Q
_7R~ik
qr#etO
'S;0:C9
v4.0.30319
#Strings
#fsddddddddd#
#fsdfsdf#
#fsdfsd.dll#
#fsdfsdfsd.dll#
#fsdfsdf.dll#
#fsdfdsf.dll#
<SortRids>b__45_0
PrintAsI1
<FromAsyncImpl>b__1
IEnumerable`1
Queue`1
List`1
M_hmacsha1
Get_Reserved1
S_BPREL32
ReadCompressedUInt32
ToUInt32
InternalReadInt32
ToInt32
Oleaut32
LOCALE_SISO639LANGNAME2
Conv_Ovf_U2
<>9__191_2
Func`2
Ldc_I4_5
<path>5__5
S_LPROC16
ToInt16
LOCALE_SDAYNAME6
Tuple`6
LOCALE_SABBREVDAYNAME7
<Initialize>b__89_18
get_UTF8
<>9__191_9
<Module>
HOT_HEAP_MAGIC
COR_E_TYPEUNLOADED
YIELD_THRESHOLD
SE_GROUP_RESOURCE
Get_SREGIONNAME
STATE_DONE
MAP_PRIVATE
STREAM_DBI
System.IO
ERROR_INVALID_PARAMETER
LOCALE_USER_DEFAULT
LOCALE_INEGATIVEPERCENT
EXTRA_SECTIONS_ALIGNMENT
S_PROCREF_ST
LOCALE_IREADINGLAYOUT
OSVERSIONINFOEX
SearchCriteria
Get_IsUninitializedData
Get_PdbFileOrData
Get_UserData
mscorlib
<.cctor>b__c
FCallIsDynamic
System.Collections.Generic
get_IsStatic
IsAsync
Set_Id
ResourceId
GetProcessById
lpNumberOfBytesRead
hThread
get_CurrentThread
thread
get_Speed
get_IsAttached
IsMatched
ExecuteLocked
MarkAsHandled
Get_IsDisposed
ResourceManagerInited
Set_DomainInitialized
Get_OrigRid
Get_IsSizeValid
Get_IsEntryPointValid
IsInvalid
Stsfld
Get_OtherHeapsEnd
set_IsBackground
DynamicMethod
DefinePInvokeMethod
ResolveMethod
Set_DeclaringMethod
GetMethod
NetGuard
fsdfsdfsd
NetworkInterface
get_IsInterface
Replace
OnlyAllowedOnce
SpinOnce
Set_Sequence
LoadResource
FindResource
SizeofResource
GetHashCode
SetCode
CryptoStreamMode
LegacyMode
Xenocode.Client.Attributes.AssemblyAttributes.ProcessedByXenocode
GetBaseDirectoryOfImage
CalculateStackUsage
EndInvoke
BeginInvoke
InterfaceImplTable
Set_ENCMapTable
Get_CodeManagerTable
set_FieldLayoutTable
GetEnvironmentVariable
Enumerable
IDisposable
set_Visible
get_Handle
RuntimeFieldHandle
get_MethodHandle
RuntimeMethodHandle
GetModuleHandle
get_TypeHandle
RuntimeTypeHandle
CloseHandle
GetFieldFromHandle
GetTypeFromHandle
Get_ConfigurationFile
Console
get_Module
DefineDynamicModule
set_FormBorderStyle
set_WindowStyle
ProcessWindowStyle
get_Name
_frameworkDisplayName
AssemblyName
GetDirectoryName
ExpandPrime
IsPrime
ReadLine
WriteLine
ConvertUtcToTimeZone
DynamicScope
BeginScope
IsCorLibType
ReflectedType
get_FieldType
DefineType
CreateType
Get_CustomAttributeType
ValueType
get_DeclaringType
Get_HasMarshalType
ArrayMarshalType
flAllocationType
get_ReturnType
Get_UserType
get_ParameterType
GetType
Set_ArgumentType
Get_ContentType
PropertyType
M_isUncShare
System.Core
M_methodSignature
ResolveSignature
SetLocalSignature
MethodBase
VerifyCodeBase
Get_ApplicationBase
DoNotDispose
Truncate
CreateDelegate
MulticastDelegate
set_WindowState
FormWindowState
_isWrite
STAThreadAttribute
CompilerGeneratedAttribute
OnSerializedAttribute
UnverifiableCodeAttribute
UnsafeValueTypeAttribute
BabelAttribute
SuppressIldasmAttribute
AssemblyInfoAttribute
YanoAttribute
DotNetPatcherPackerAttribute
BabelObfuscatorAttribute
CryptoObfuscator.ProtectedWithCryptoObfuscatorAttribute
DotNetPatcherObfuscatorAttribute
DotfuscatorAttribute
CompilationRelaxationsAttribute
SmartAssembly.Attributes.PoweredByAttribute
RuntimeCompatibilityAttribute
SuppressUnmanagedCodeSecurityAttribute
RegEnumValue
SetValue
KeepAlive
get_IsAlive
MarshalManagedToNative
Ajdmckchbl.exe
get_Size
dwSize
Set_RowSize
NInitialize
Resize
InternalIsBaseOf
SizeOf
fsafafaf
fsdfsdf
AddTypeRef
TypeDefOrRef
get_IsByRef
fafffffffff
fsdfsdfdsf
gfdffffffg
CModOptSig
System.Threading
Ascending
Encoding
IsLogging
Ceiling
CreateFileMapping
UnrecognizedGrouping
FromBase64String
OutputDebugString
TokenString
ToString
GetString
DirectoryString
gfhhfhfhfhfhfhfhfhfhfhfh
Get_CharUnknownHigh
ScanBackslash
get_ExecutablePath
GetDisplayablePath
GetFolderPath
DontCompressPath
ObfuscatedByGoliath
get_Length
Get_TryLength
InlinePhi
ConvertGregorianToHijri
AsyncCallback
callback
get_MaxStack
Runstack
Get_DeclaringType2_NoLock
SetUserEntryPointNoLock
FlushFinalBlock
BeginExceptionBlock
HelpLink
EnclosingMark
SortedMask
CodeTypeMask
ClassicBindingMask
FieldAccessMask
FreeHGlobal
IriCanonical
HasFieldMarshal
TryParseDecimal
GetDelegateForFunctionPointerInternal
Ajdmckchbl
GetEndLabel
Get_Cancel
ProcessAll
SetAll
advapi32.dll
kernel32.dll
Set_PositiveInfinitySymbol
DummyBool
Control
DataStream
_unmanagedStream
MsfStream
CryptoStream
PinnedBufferMemoryStream
Ldelem
Set_Item
get_Item
System
SymmetricAlgorithm
Get_SignatureAlgorithm
ICryptoTransform
Conv_Ovf_U2_Un
_readLen
NextTextElementLen
get_MetadataToken
DeleteToken
M_cancellationToken
ToPublicKeyToken
lpNumberOfBytesWritten
AppDomain
get_CurrentDomain
MajorOperatingSystemVersion
MinorSubsystemVersion
Application
get_Location
System.Net.NetworkInformation
InitializeImplementation
NineRays.Obfuscator.Evaluation
System.Reflection
Get_Direction
GetCollectionPosition
CallingConvention
_unhandledException
RuntimeWrappedException
m_exception
FoundDatePattern
M_completionCountdown
M_DynamicILInfo
GetDynamicILInfo
FieldInfo
FilterApplyMethodInfo
FileInfo
FileSystemInfo
MemberInfo
ParameterInfo
ProcessStartInfo
TimeSpanRawInfo
DirectoryInfo
AwayFromZero
Backjump
LocalFindAndPop
System.Linq
TryGetGenericVar
set_ShowInTaskbar
AdjustYear
System.IConvertible.ToChar
EndAddr
DataMember
GetFileLineNumber
Set_ImageCor20Header
ReadHeader
M_exceptionHeader
Set_CreateSymbolReader
DESCryptoServiceProvider
MethodBuilder
ModuleBuilder
TypeBuilder
AssemblyBuilder
SpecialFolder
lpBuffer
ResourceManager
Debugger
Get_ExecutingTaskScheduler
IContainer
ISignatureWriterHelper
SetExecutionContextHelper
ByteEqualityComparer
CreateProcessAsUser
SymbolWriter
GetFunctionPointer
get_IsPointer
BitConverter
GetTokenFor
Set_SupportsLastError
Processor
IEnumerator
GetEnumerator
.cctor
dotNetProtector
get_IsConstructor
CreateDecryptor
HasMethodPtr
IntPtr
ByValStr
M_iAttr
System.Diagnostics
GetMethods
S_knownWords
GetAllNetworkInterfaces
System.Runtime.InteropServices
System.Runtime.CompilerServices
System.Resources
Ajdmckchbl.resources
EnumerateDirectories
dnlib.DotNet.Pdb.Dss.IMetaDataImport.EnumProperties
Set_Variables
M_localVariables
EnableVisualStyles
GetSubKeyNames
M_iEndLines
NonNestedTypes
HasNestedTypes
EmptyTypes
set_Attributes
MethodAttributes
FileAttributes
TypeAttributes
MethodImplAttributes
GetCustomAttributes
GetBytes
Indexes
ValidIndexMaskOffFlags
BindingFlags
GetMethodImplementationFlags
SetImplementationFlags
AssemblyFlags
<>3__paths
m_fInitLocals
Equals
Params
System.Windows.Forms
NotEnoughParens
M_ScopeActions
CallingConventions
Get_MetaDataOptions
FileDefInfos
eventDefInfos
get_Chars
GetOptionalCustomModifiers
GetKeyAlgorithmParameters
GetParameters
__Filters
Errors
get_IsClass
AssemblyBuilderAccess
hProcess
GetCurrentProcess
lpBaseAddress
GetPhysicalAddress
lpAddress
Get_StartAddress
IsWriterInProgress
M_WatsonBuckets
Set_PreserveStringsOffsets
MaxRoundingDigits
SetInterfaceConstraints
Exists
Concat
Get_IsCOMObject
ManagementBaseObject
GetObject
ManagementObject
object
Select
flProtect
CreateResourceSet
CheckSet
CharSet
GetTarget
ParseTimeZoneOffset
M_ChunkOffset
ToOffset
TryOffset
M_copyright
op_Explicit
System.Reflection.Emit
SetCompatibleTextRenderingDefault
IAsyncResult
EnumResult
result
ResetConstant
RegexReplacement
System.Management
Environment
StartDocument
get_Current
CheckRemoteDebuggerPresent
IsDebuggerPresent
IsEvent
SetEvent
LastEvent
Get_EntryPoint
CtorCharCount
Get_ExceptionHandlerCount
EnumFieldsCount
keyCount
IsolatedStorageRoot
ParameterizedThreadStart
Get_DateStart
Assert
Convert
Get_MayLeakOnAbort
FailFast
M_publicComTypeList
MultiDomainHost
SuspendLayout
ResumeLayout
MoveNext
System.Text
ModuleContext
context
CallConv
FromBinaryRaw
ReadAssemblyRow
GetInstructionThrow
SecuredPathIndex
LocalIndex
Get_ElementIndex
M_encryptindex
CreateUnix
LPArray
SafeArray
ToArray
get_IsArray
StrongNameKey
System.Security.Cryptography
DefineDynamicAssembly
TargetTypeAssembly
GetExecutingAssembly
InternalAssembly
MainAssembly
NestedFamily
BlockCopy
CreateDirectory
M_RootUserDirectory
op_Equality
op_Inequality
System.Security
SuppressUnmanagedCodeSecurity
IsNullOrEmpty
198 Protector V2
System.Security.Permissions.SecurityPermissionAttribute, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
SkipVerification
WrapNonExceptionThrows
_CorExeMain
mscoree.dll
"""""""""!
""""""""""""""
"""""""
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
<assemblyIdentity version="1.0.0.0" name="MyApplication.app"/>
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v2">
<security>
<requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3">
<requestedExecutionLevel level="asInvoker" uiAccess="false"/>
</requestedPrivileges>
</security>
</trustInfo>
</assembly>
Ajdmckchbl
GetEnvironmentVariable
-1057683390
1057694037
1159832520
1159776717
-896284348
896416146
_ENABLE_PROFILING
Antivirus Signature
Bkav Clean
Lionic Clean
Elastic malicious (high confidence)
MicroWorld-eScan Clean
CMC Clean
CAT-QuickHeal Clean
ALYac Clean
Cylance Clean
VIPRE Clean
Sangfor Suspicious.Win32.Save.a
CrowdStrike win/malicious_confidence_90% (D)
BitDefender Clean
K7GW Clean
K7AntiVirus Clean
Baidu Clean
Cyren W32/MSIL_Agent.BCR.gen!Eldorado
Symantec Clean
ESET-NOD32 a variant of MSIL/Injector.VRI
APEX Malicious
Paloalto generic.ml
ClamAV Clean
Kaspersky UDS:DangerousObject.Multi.Generic
Alibaba Clean
NANO-Antivirus Clean
ViRobot Clean
Tencent Clean
Ad-Aware Clean
TACHYON Clean
Emsisoft Clean
Comodo Clean
F-Secure Clean
DrWeb Clean
Zillya Clean
TrendMicro Clean
McAfee-GW-Edition BehavesLike.Win32.Fareit.bc
FireEye Generic.mg.61095557481992f4
Sophos Generic ML PUA (PUA)
Ikarus Clean
GData Clean
Jiangmin Clean
Webroot Clean
Avira Clean
Antiy-AVL Clean
Kingsoft Clean
Gridinsoft Clean
Arcabit Clean
SUPERAntiSpyware Clean
ZoneAlarm Clean
Microsoft Trojan:Win32/Sabsik.FL.B!ml
Cynet Clean
AhnLab-V3 Clean
Acronis Clean
McAfee Clean
MAX Clean
VBA32 Clean
Malwarebytes Clean
Panda Clean
Zoner Clean
TrendMicro-HouseCall Clean
Rising Clean
Yandex Clean
SentinelOne Static AI - Malicious PE
eGambit Unsafe.AI_Score_93%
Fortinet Clean
BitDefenderTheta Gen:NN.ZemsilF.34142.Um0@aGkVNXhG
AVG Win32:PWSX-gen [Trj]
Cybereason malicious.b50ec2
Avast Win32:PWSX-gen [Trj]
MaxSecure Trojan.Malware.300983.susgen
No IRMA results available.