Static | ZeroBOX

PE Compile Time

2021-09-28 06:38:54

PE Imphash

f34d5f2d4577ed6d9ceec516c1f5a744

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00002000 0x000aa914 0x000aaa00 7.28804388854
.rsrc 0x000ae000 0x0000f752 0x0000f800 7.51847689749
.reloc 0x000be000 0x0000000c 0x00000200 0.101910425663

Resources

Name Offset Size Language Sub-language File type
RT_ICON 0x000b2880 0x0000a9cb None SUBLANG_NEUTRAL PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x000b2880 0x0000a9cb None SUBLANG_NEUTRAL PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x000b2880 0x0000a9cb None SUBLANG_NEUTRAL PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x000b2880 0x0000a9cb None SUBLANG_NEUTRAL PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_DIALOG 0x000bd24c 0x00000076 None SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x000bd2c4 0x0000003e None SUBLANG_NEUTRAL data
RT_VERSION 0x000bd304 0x00000264 None SUBLANG_NEUTRAL data
RT_MANIFEST 0x000bd568 0x000001ea None SUBLANG_NEUTRAL XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminators

Imports

Library mscoree.dll:
0x402000 _CorExeMain

!This program cannot be run in DOS mode.
`.rsrc
@.reloc
Q@Y(o
X@X(o
R@[(o
H&_c@#
R@[(o
@W@X(o
`W@Y(o
@[@X(o
PF
Fai(
iFJV@#
]@[(o
[XZ_bX
[XZ_bX
[YZ_bX
[XZ_bX
#4:H3a
[YZ_bX
[YZ_bX
[YZ_bX
[XZ_bX
`y@[(o
[YZ_bX
[YZ_bX
[YZ_bX
[XZ_bX
#ZAV{pe
[XZ_bX
[XZ_bX
[YZ_bX
[YZ_bX
#f}Tez
[XZ_bX
[YZ_bX
[XZ_bX
[YZ_bX
[XZ_bX
[XZ_bX
[YZ_bX
[XZ_bX
[YZ_bX
[XZ_bX
[XZ_bX
[XZ_bX
hs@Z(o
[XZ_bX
[YZ_bX
[XZ_bX
[YZ_bX
#TMg|,y
[YZ_bX
[XZ_bX
#P|$JN
[YZ_bX
[YZ_bX
#ajGE5
#e@G-=}
[YZ_bX
[YZ_bX
[YZ_bX
[XZ_bX
@zJmA#
[YZ_bX
[XZ_bX
[YZ_bX
[YZ_bX
[XZ_bX
[XZ_bX
[XZ_bX
[XZ_bX
[XZ_bX
[YZ_bX
[XZ_bX
[XZ_bX
[YZ_bX
[XZ_bX
[YZ_bX
[XZ_bX
[YZ_bX
[YZ_bX
[XZ_bX
[YZ_bX
[YZ_bX
[YZ_bX
[YZ_bX
[YZ_bX
@D@Z(o
"T.iV@#
@F@Y(o
[YZr}F
@E@Y(o
B=u} -=u}ai(F
[YXnZ>
@"1cA#
EcaiZa
}O!aiYf
HaiZaf
ZXYfeY}
BdAFaiYf
DaiXfXYY
aafef}
YaYaae}
~&g^_[
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADPa
l?P8J!
d7G R9S>U'@
d7G R9S>U'x+[<@
&L!J8_
{(X?M&L!J8
k(X?I"H%J8V
\,K9R8U>L+x
_.I;@*G,n
[+L>U?R9K,
e6F!S8qf
v%U2@+A,G5R
L'M K9n*
N%O"I;|
Y2X5^,=n
~-I.\7]0[)N
.I2Y3^
f5/H*A+F-_
N%;V=O({
1\!S4g
mx+[<>H
o<L+;G
T$C0[1\6D#pL
9R8U>L%v
z)U2@+A,)
8<W5X3A&u
Y!F4_5X.
W<V; o
Q!F4_`
V1;P:W<NX
O/D&K R5fQ
g*8:]'L&K Rx
]:H#I$
59R0]6D#pO
vs3K&E7P
O7P"I#Ng
_8J![9
M1!C$N%O"I;
^3X*=O
22Y+F-_8k
Q<W%r7
I,=?X"I#N%Wl
W<N#H:]
D&A+@*G,^
w$L+Y2X5~k
[0R?T&A
{(P7E.D)
48S1\7E"q
5%G J!K&M?3
l?O(Hk
D/=P;I.}!
k8H/]6
??T6[0B%v|]
^8)K,V=W:Q#
E.D)RY2
_4V;P"E
L!6D#p
.C)69Y
4S"$.1
;8L=5k
0B&P<J
C3l0\7[0B%v
l?O(Z1[6^`
Z+M@,G+A4S
d7G R9S>U'@
E5R K!L'U2aq
(C"O$V
3^/]:i
^9D/E([
<5X,^9j
u&V1C(
N)W<V;
\)N<W=P;I.}
s4F s
[(O=V<Q:H/|
r!Q6D/E(C1V
Q6D/E(C1V
r!Q6D/E(C1V
r!Q6D/E(C1V
r!Q6D/E(C1V
r!Q6D/E(C1V
|+ G5^K
8&=o G5u
B2U'L&K R
E5R K!L'UN
\;@'M B,K
<[*B)EF
^.I;Pr
I:^,G,
o<L+Y2
t'W0B)C.E7hJ
>Y+@*G,^9jy
B2VT@J'L>P
X5^,>m
,K9R8U>L+x@
E5R K!L'U
>,\;I"
I9^,G-@+Y
m>&A3X,A*X?l
*M?T>S
W0B)C.
F-G*A3
z)A&T?
>U?R9K
S4F-G*-_8k
y*Z=O$4Y2@
]-J8S!L
]*M3X.
h;G Q:H%M?H
rH&mx++L.E/B'U2a
b1A&G,<Q:H/|
{(X?M& M&T
:]/D.C
_/H:Q;V
)B(E.\
_8J!K&
p#S4F-
e6F!S8
u&&A3X
.E/B)[
M&T3`
N%O"I;
_4^3X*
F6Q#H6[0B
L!*X?l0W%N
V=W:Q#0c
}.,K9R
v%U2@+%H#Q
^5/B)[<o
e6>Y+@
T3A*@-B0W
F!%N$I"P5f
X3Y4Q#D
e6$C1Z
m>6Q#H!L
,\;I"H%N<[
^5_2U'
I.\7Y4
y*Z=O$N#H:
1Z0]2@S
;\.E/B)[<o~=[
8;(X@b
Q<W%>m%N
rH&mx+J-_4
%w'@2Y"O$V
]/E_3x
m>F!S8
&v&A3X
N>ZX4~
a2:]/D.C(Z=n
W0B)C.
N%O"I;>m
m>8_-F
B2U'L&K R
B)C.-_8k
y*D#Q:
I.]7^4`
u'X@3Y/B(S5g
G7P"I#N%W0c
]-J0[4S9L+x
i:J-_4^3
4S!J M&T3`
ab2Cj(
N&M!@2U
6^-K0vo
U(D/Z}m
Q}U4G-
w%V28S9T
q.~u N
4_3Yd~
/E0^MD
q#K,^5
m P+@g
(KK-`Q[
2Z)O4t
W,^:I[
N=[{V-`
|z6S"J8
_0X*Bs
oSQ<W;h
'A4`"v
/*C2V|
P7e`/_5`
n)F,HO!
z<T@3i3
$w&W1C
D~]0X+@
3V$C5c{
g{1\7[
AvE1]7E
C0D0[.
3E0[7L
F@-H&E7P
X+A,9R G
+5_6\O2
,H&NQ/
U3B*Xp
&0\7[1
w[X*N=
$<\/E/
P9L(W3
UK-.>~*
"=P<W:
B*N=WUA
<W;EG)
I$O#8Z
W+K9R8
Z$B)[u
"Q7e*F
P&K!L'
J-J8S9
&0D!S8R
I6F"ru
B3U(>T9R
=R#E8I
b3D$VR-X
Z9S"E+PO
7H0C@|
P!G-F,Ac
`'X@3I
4E#Bj{
U)C*Ge
9J;]0F,A*
I:^-^H
5?M*Xl
<U8J-~
2K&M?X
]>K J'
>T@3U?
M@,Gt
u#?T&AX
o!:P=V
L#A&T?
S"J!da
7$U3B)
JL)D*V
^6]1R G
t S5^.I;
[,L<W=Pt
2]9U?K,
rkX4Z2
h],H;]
K=X3_)[<o
,v* M&
aV[2A'
:Y3B%Cs
;Z3B&e
I0]0X~
C-;P"E
s\-H;]
Je8I/u
'Q,G5Rv
L/U%B0
p2>([=
#.I;P:
#Z1C$w@
#R1C$w
;D)B0W
0I#R6P G5
5_6\-_8k
0o;'N$
b2C%S8R?
/F*X?lb
z-=M?Ff
e;#W+Y2X
lD;#$O#
ZA.E/B*
yb'W0B
k8HF>W>Tx
-1m"0;R@
P#I$G,^9
CY<oxC
U'L&Khb
V&Y#+B0
'X*;Q<
}%%9S:
CT>,)E/
Y>T9R
L(ZPn
=W&B&O
;L,g4Cn
UC&M?X~
F)N<W=
,B*Y=n
/G!sxW
;#G!#`v
r L>n2Z
m L&J!S
L;\.N+
W&N%H8?p*G!T
.]7^3W%B
O%P>U&A
<B0\/H05j
fy(X?M
F7P7QS
Q#H"Ol~
NA31W&
\+B0\,K
Y>V<X*
P4U(D,
p{0D0[
{!>9T?
A]NB"J9v
M>Z):P=V
a+;]-J
9?S9L+
<O>V=N%W0
+C/E5R
Q!^Lv
H%f]2b
L<[)Ba
F7Q$O:L?
9*A-G4S
f\&N%I"e
tu0M6R
g-('X@
=#O%XW
7\F{!R6
S9l?G!s
l@HX&N%
>lF)\<
L'm|)Z>
8F.E)W
w<V/^6
j%O"I%
|NAS"F5
;C%'dz
kP4T(D
F+@2UNB%W<nD1E#
-FC.[=o
OPRR9L,/
;R@,v'v
0#R:Q=
1"S5H!
m?P7Z&d
!>U9S![
@0"P;Q
=H$W1b'5_s
%X4_1Z(O
5E#R:PR.t
7<!L'U
I K9)z
2mG<]0r
~1kz
[,L=V<Q
YfM!K;QP3
M2C;L&L!bI5h
=Q;J.-
-G6R~Q
\7[1[j?Q7
R@/E8t
.]7^+@2U{
0s#V?N
#DFp#S5
y*J!SLv
AO<VE0C
"eN R"J
+dT0Y,
,__@-`
N%I#QK
].J9RM
tXW#W?S
[*B)DD+d
>U9S9<<L+
MR*pVN%O
U&B1ZE
=:K-`#
D/C)[Q
<O%P=k
C*H$VF
u36i;a
6G!T?j
D5R5SQ
@'Y?Nm
x;K!L9
By#EH'Mx
M>P8K8
#S9T9g
i:J"I<
CKu#J!
jsX4Z2@<d,$r
@Bb&V2
w%^aZ2
Z~1CD0^
Q%O&K5<ss!H;
FEHM Qo
fR)jG*
;S?U'U
+B1WL>Z)
-_9L?'
1tWC&v{
g"DG.i<M
p$U2U3qc)];
@g/mA,Gc
Y-G.C=D;k>[*
QRBQ<O
U)C*GA(g
3,H&N<p
&3Z)O4
D6R!J5M>
M)E/uM
mGU)O
^)]7^K
8[+A,A?B=-
y+\;^*X6
/P%O&K5<s
yB/Mfv
IFf7_3
L=Y,L
qtK-`
y'JEKh
O|Gg,`
b-J(DN
]GKO$P
yV)O>m
N?X?I;Sf
c<Q;RW
h}P>M+
hW=Z:L,
0g od\[;
[,H#N:=r0u
gY2}VV
A.D0B:^F
HPfJ#J`
l'L/jH
|o5k8W=
w<vF6^
xnv%U2
Q9u@-H
+C't'`/
\9U?M?a)
9lQ\=o
>Q7Fu+
U=gP=X
NAQ^;J
5"I#N%
YlHm@1
S-J:je
<W%B5(7,
B(B/DK(
U%BT"0D
k8H/]
LI:yb3D
K8hJ#R
t>K!L'
~AKmQ>V
t]1[U3
u?J M&
KpXIMu
CHR`X7]l
4YSA~ A
=nNu S
Q:W<N>i
lY1C$w
P8vV?Vx
&?R9K,
mVdX,H
BMWa_4`
?L'M `
bc0@'y
~4kQx!T
q9T&M'
=w(nx!T|
>G*A3T
M_(C1Vx
'V1C(W6
=@'U>T
Q.C(Z=
2_4F!"
7?O(Z1
.-t?rq
og4D#Q
H{'W0B>P
T$CU!3E
FC@ku(Y{~
7:]/D.
(B0W=e
"-J8S9
;<W=P;
jS7E"q
Y%O"I;
?0]6D#
4.\7]0
2_4F!"
71"RVD
mV#H"O9G
|g3C$VR4
b5U8S!
v2K9R8
'l5E"P
VP1[6]
pO5R K
-%W<V;
j_2Y+L
n5=V<Q
*7E"qt
;<W=P;
IF,K9R
9R G8+4-
S!J M
_[2@+A
L!RY&e
;+A,G5
A_*@-F
R,F+@2
#L<[)
_[2@+A
&K&M?m:
D6RD*82
X,LC.)8
]"I#N%
1O$N#Hs
@([17Z1C
0_0]6Di
mzA-A+Y
J(D7Lm
'A4`"(
Q:>U?R
]3H"O$
YeQ8K!K
btF-G6
5C!K&r
@x!T@*
i9J!L"J9_
hB$w{D5^
<U8O;\
oBW/|:
TK?N)c/D)<t
pl-F+5E"
J?N)}<U8]U1b
fDT=P]T2a%g
mC#pv5F-
:i^-J4
p#u4E.P_3A
JN;P|2X*
O/H1Z0]5GL<[q
F&A*A+F,^9j
.4Y)[<o
*F+Y>j
}_0Z7\.I
T$C1Z0]f
u&.H:Q
*I;P:W<NI
(?U8S!F
-@+Y>m
m>N)R5
a2"%U>S>T&
#)$?M)z
a+>T9
`3#D6]6[,^9j
}O$N#H:]
y*Z=O$N#H:
+F-_8\
>T9Z%B
n=M*8S9T
a2B%W<V;P"E
n=M*X3Y4_.J
~-]:H#I%O
P;QN7E"q
g)N<W=P;I.}
A1V$O%H#Q6e
A1V$O%H#Q6e
A1V$O%H#Q6e
A1V$O%H#Q6e
A1V$O%H#Q6e
A1V$O%H#Q6e
A1V$O%H#Q6e
[,L?U@.F5S
X'A;P9UF4R
k8G![0
w$S5g9L(G+A4T
~._9L(C/E8`4E#)B(E
2VB62H
;V<Z)S
c1F"S9X6`
y+^:M'P>Z)
k!Js R4h G4`
^-KA*?S@2T
!K:b2C%X4_3Y,L Q7F.E)C2V
stI$|#
q!nB?F
Na<nix
yIb@X)
e'gg$i
zHj^0!
R_}*cK
zsE)CQ>
Zo0l54
;VqE|I
]5lL<G
F&JS}1g
]DYag)
X6(]U0
\aSpQr
wc1,@mOV
1Z`_5lI
,:ro]6F
Xq~"aN
;9[L=E
5AZ*l0h4
|g'3%;
6;m=[81
yp5 F3
#heyDB
.hOS0L
`!(g,i
a|E|hE$
v3n^^s
,bZBKd
h9jlX)A
NAz}H2m
9g!uF3
hlgPe'
Ge4*6A
{H;y:
jHWNtJl
!ZwB4$2
wT>}B7
{z4hRO
lI5k_/'
f_7Od)1y
sMoCYX
\'(;Sxr
s<xhds
gN!&s~
e00_X}
XSq]+`
lTrv0g
}i`m!mR\
Rd}+k^
~zI!'n
Jd1=V_
!,i2g=
!)00,4
M<,ge>
sq{'p'
'grPZN
v\iEG'
w#[MbP
4zBtt<T
hmt$#,
[-i{@w
m4r3N4
-'-Z_8
]!^0?P
GV-K"?
K]STz=
VF0wT&
ta`fr&
B1M~$PC
07_CJK
3MYzFjzJ
/~g56
8nm/NR
oUD!(=U
S-5QqdHi
4G'Q}kL
f}=x&-
(*@7t(*
;[EjwQ<
yC5\b?
NNo&x$=
!P|epvA
pc*)@L
1S8#x
.a?++U
s&eR(_
sO'l'/
Uh"?sr
oiN[9_??
{'CZi$
})=,Qh
Ic}l"~
}'Br5)
p.(3U7
J><f?3
-"vdE;&~9k
Y+FZx=
C]#Br*%
{^YGye_
j\_+*B*
#-3Ie C$
JY*PC1
6H&!^>
(QCrgSUH
epSj+,
Y5yjc:#u
lqJ1v9
[ofOS-
rMA(41
8tU~&"1
JG0au?
P[!z*o
0>;wA'z
\_:sJ!
s!w8aq]q
&W%#?:+
(d*fh l
]I",g6
GqXT}\
LhF{3<O
jp8]W(
$fX,&n
5Y>l{Q*
oIg78ECS}
z}gq>W
v's.,)
fd!H=rO
os~7r5
&Tw)^[l
JmZ*#ZsR5
ZVyLO2O
l3X?]@
l'FP&3
xH]=ci
:h}5F|
a]GqC:
@+D=Cq
!enNTTr
-bIk?7
[; qVtc?
#0P{/\
qT {Gx
>i3Ijp
=m`' oN
;m;KY
3bwIrQB
_ITN!0vj
}Jk(@DF
R[N:~N
/i/MLBY
W59KNZ
5Q}FHO
]_^?syd
o1bJ5.6
TW)i1qQ
"<gPxM
<5'WDv
!}+d&<
(im.dWu
4Cl'3*N
Dj{/2yI
XlH}NJ
(7g+Btj
F_HH2J
<k$IU:
g%]t~L
^87[y;+
?-Kn] 's
}[GO./L
_)[dIeI
%U*Op}
yyJol=
12B]MA
4ZqY/-
fO]T1@
"G?3+iK
CSm4}1F$
EoD= s`
x9nb.x
/]7\'6
u"Hi>.
ZwW+t'
+~SqnV
^]"^znzn0
E?vni;
JD-,GU
g#lJ'}
281].P
!Me8:&
}"}SjT
rayyq@%
R+VhhX+a
n%I6u0
kMr~M:
ihiG`"n
kl|:Q%
+b:hwE
R$UXA\
EnR^K0
NzNmQ B
g@0+l{w
[G6RV!
5.^j)j
ijFS0W
)oAx/"C
@>Fd||
[)::Y
F"IM`>
>}!>;y
BWZ1d
=;Tn%R8
Zg>;6(j
%}mOfPs
En?[sz
}Fi/a&J
XL5^D9/vl*
t?}&c]t
@QQWa>
4@e12%
v\_QSFtc
>u+"<$
-M"&DO}.
(Iob Y
evr5hY
MAAYiN
l(-""r ]r
D_:@3l
2VE3vk
NBLAL
yGqcIq,r
,|_Uug
Wz&j^U
q 3I]z
&Q<,jnGe
7$2:\i;
$&ii/M
RdZ %5
?Aj~5"
BJozJZ
~6C]c
<{O1S
YlY+3e
"t1-?@e;
sQ"N<s%g
",O.P>
mC"q:`4
/utYXa
QApV-r
YW:#)}x
$4]bp5
%j9x8D
_ev+WR2
w3-1fi
o"5Uv|it
7u}`H;
}b^aT[5
|j(<Rn
AQ5KnS
2k#=l[
DwJ!<+}
$'A(m^
|<srhP
.rrD\:
A}ZQq/
4!HG;
.;lxKL6W
d9(T5!,
ZWj`@k
R_m0=<
Woh;!e
fx swp
M6QPA
nQ3-o|
Tnk'6oU
,5uRSE
I$!(s
~;],O0y:
fQ{+`$
H6i}|P
n6.N$0
X@,n/^
4eQeh=
j> l(m
G1G8=(
Vhk,Z}
fq$.nd
oF7@@?
pNkpdd
6;,6Vw
& u,>:Qw
a8hVT_
fy?fpu
!Bm9`;
v[e/ I3s
UpBO+,8nfO
E&nz)%
ZQJtm.
Ph0T.Y
sv@.L
ysOa !
]1JunH
KVpFS|
@X -0yS
)?W`d~
abyPWH~
Oek=0?
7^?uO!+
WAG)]u
U,JG]E
{LE=wC%
[TTSi
uKIuq}
z[la.r
UBsd6jp
U/B-u<
<0pcD}$H
\0ANNd:v
K4P7qo
q;M3X
8}%p(M
!~ 3GAZ
3bNj1B
nz;#j&0X)w
P[6$3R%
FJCMm,]
lz'@Aqo
nv:{LsO
^1TeP;q
lv9@;I-4
tx`d'*
(M`xruj
dqL7|n
RIUp9i
UT"(W(
&3)?Pd
Rb`0u&
GR[[j+P
|q5zU|
$/wqoP
X~46;5^
Ul$ZgLm
sgdYnJ
zm,bI*
WExHtP^
+KDl:+lu|\
'M5aT.TAp
G{rN*56
:!,Y@
uMJO1H%
q&MemI
0"ulq&
8*h|I-
S5KX*h
7,:AO_)
a-YvC{x
lTM#+|
bTDjj
%D}dV!M
nZ7@'5i =y
JwIw/\>l
Z-uF)=&
"a5lY6
K;m#O
?!Ezt^&
}E>Lt,
eq=,/r
+(_1N?
3U\=g]
h6F}iQ
@9EI!2g
DJ2Ce8C
0^dxl;
d@FTh:K
FnSEvw
$crn!k
^}$}^Q?
,Sm?PWe
urF$+sJNC
YUx.y`
b2P'xCi
VG9^YzS
sDv%0A
u'[{q+
~{(Z}{
}o-F7i
M$4X@Cf
JE\hpx
A3b$L-v
7RD5XOKD'
8OX'Tt
6QtG5o<
OVY(~Y
"FG.45q
gq*bQ{
*@Y#mzF J
r~>s8pN
h6p?`+@
=:qv^O[
h{'zC8
`0qUrM
'=F((z0
Lj:GI|
i1FVuR
hX)it$x
sC?.;i
N4;kLB
myh'm0
SGdkd"
}$$=pt
iUhD:0
|Qmnl)&
En<\MZep(8
ru_SS^O)
NCNF~
j=9E<d
R]6yp5B
5oO}Ul
}dRyj'
jZzV-G-
~,(!Pr
Z7Yie
<$DTU
tD%9%n
5zw2X2
bfRH>z
S#c__w`
AN^t7L[X
hM<RhJ
8x>%Y5
<Rp0LX
Zj;mWs
mK@u|
6[9qH
Yr p,qD
-Hf`O>%
7Mzn.,j
;~qEKZH<L
?@l?T8
v3p(g0J
7z6Pf>
'YW1G/
+v+P1"
&,Ng##lE8J
jR5kg[4
H(P[mr)s
>U &d]
@|1?<T
"Tkl7O
eul\Zd
>(FaJ
Fjhivo
OFDI"K
uU>Gcm2
JNm;1/K
"9*e/r@4
^|'8]~E
IR5U?Oj
j:QLq\
(aX#dx
ei{dOX:
,%+MkP
nM84>j(
H]Y6l=
J=(l!a?J
MR#wQ7u
kj.6=C
plWj~~
uVd]c0r
Fg&{3z
iM00Kh
|!~:!Z
i'v yL
(eRY9V
d=[Ghy
aZS)h_
aQ+S\4
GF(g.sP
k5h[&bM
LT^WgC
lXbsRJH
+B+B6w\
c8&174gNbD
<6?Xpl
A%i,wk
yT:_>g
{).}h"
"h"~T%JX
j>Mva
PW#9@E3
w9PDah}
IE'{+
S]YEI\"
>o(+v
P`1*5y}t
%T=>f/
DIQ+\m
Ut^_)%
7Me&"T
i#]{thI
tt_eQ3
@ARk\-RXy
:?or*){
M.8'Re
#h!yi1!
cZ*I#g>
zPym!d
]DFP4v
>2]rE'
XcKL6z
N+C;"l
?+T/0
k2!=11
<w^OrE
_PP]CF
mdUBw)3F
#]pymK"/7_
(T8tMlRYe
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
s P7E.D)B0W
v4.0.30319
#Strings
#fsdfsdf#
#fsdfsd.dll#
#fsdfsdfsd.dll#
#fsdfsdf.dll#
#fsdfdsf.dll#
<Initialize>b__89_10
<emkFmAnekfj>b__0
<Maifan>b__0
<Mabin>b__0
$$method0x6004237-1
$$method0x6004239-1
<GetMemberRefs>d__281
S_RESERVED1
<Mabin>b__1
IEnumerable`1
EnumEqualityComparer`1
IEnumerator`1
List`1
CS$<>9__CachedAnonymousMethodDelegate1
<GetContactInfo>b__12
WriteUInt32
ToUInt32
ToInt32
198-Protector-V2
Func`2
GetAddressField2
CS$<>9__CachedAnonymousMethodDelegate2
<>c__DisplayClass13
CS$<>9__CachedAnonymousMethodDelegate3
Reserved4
LOCALE_SSHORTESTDAYNAME5
<FindAll>d__5
ToInt16
CSIDL_PROGRAM_FILESX86
get_UTF8
<FindConstructors>d__279
<Module>
FiaefaiaddA
AgAFSSmlekA
CalculateFC
COR_E_THREADABORTED
get_ID
set_ID
MethodDefMD
ERROR_PATH_NOT_FOUND
LOCALE_SNAME
TYPESIG_NAME
aAokFSjAkbF
dmdrddnfIlF
cokbkgdiknF
fcArgdbejAI
Conv_Ovf_I
rmdrdapfbeI
DX_MNN
System.IO
POWERPCFP
NO_RESOURCES
CSIDL_DRIVES
hmpdkrdfbiS
BIDI_CATEGORY_OFFSET
FILE_ATTRIBUTE_REPARSE_POINT
CSIDL_STARTMENU
CSIDL_COMMON_STARTMENU
UseOptionX
CSIDL_DESKTOPDIRECTORY
get_Area
SSfmFidkkfa
IsUninitializedData
rcdata
rinankFfdIb
hhhhhhhhhb
mscorlib
iiAAAmrligc
Get_Magic
System.Collections.Generic
get_IsStatic
get_Id
set_Id
GetProcessById
lpNumberOfBytesRead
M_head
hThread
get_CurrentThread
thread
lFbdbeomlad
npfrjbkakcd
dddddddddddddd
fsddddccwwasgggggggggggggggfasfasfasfasfwwwwwwwwwwwdddddddd
icdIhoolFed
cnaFkklmced
get_IsAttached
M_overlapped
Set_IsSorted
Get_IsSynchronized
GetNextFreeRid
IsAccountingInfoValid
IsManagedEntryPointValid
ReadField
<ID>k__BackingField
<Guid>k__BackingField
<Average>k__BackingField
<Phone>k__BackingField
<Email>k__BackingField
<Flags>k__BackingField
<Last>k__BackingField
<First>k__BackingField
Get_UnderlyingField
command
lIdldAdnpnd
set_IsBackground
DynamicMethod
DefinePInvokeMethod
ResolveMethod
Get_HasOwnerMethod
GetMethod
method
NetGuard
Net_uri_BadUserPassword
fsdfsdfsd
fsdfgcfgggggggggggggggggafafasfafsdhhhhhhhhhhhhhhhhhhgsdgsdgsdgsd
get_IsInterface
Replace
LoadResource
FindResource
SizeofResource
mySide
GetHashCode
SetCode
CryptoStreamMode
Xenocode.Client.Attributes.AssemblyAttributes.ProcessedByXenocode
get_Average
set_Average
EndInvoke
BeginInvoke
VTable
PropertyMapTable
Bindable
GetEnvironmentVariable
Enumerable
IDisposable
set_Visible
Double
Circle
get_Handle
RuntimeFieldHandle
get_MethodHandle
RuntimeMethodHandle
GetModuleHandle
get_TypeHandle
RuntimeTypeHandle
CloseHandle
_pinningHandle
GetFieldFromHandle
GetTypeFromHandle
Rectangle
TypeSingle
Console
get_Module
DefineDynamicModule
hModule
DefinitionModule
GetDynamicMethodsModule
module
set_FormBorderStyle
set_WindowStyle
ProcessWindowStyle
get_Name
C_mscorlibName
lpApplicationName
functionName
lpName
KeyValuePairsName
CountName
AssemblyName
GetDirectoryName
ReadLine
lpCommandLine
WriteLine
get_Phone
set_Phone
rperpe
Set_GenericType
get_FieldType
DefineType
CreateType
ValueType
get_DeclaringType
flAllocationType
Set_ReturnType
get_ReturnType
lpType
get_ParameterType
Square
System.Core
CreateStrongNameSignature
ResolveSignature
SetLocalSignature
GetMemberRefFromSignature
M_neutralResourcesCulture
MethodBase
Dispose
M_minDate
Truncate
CreateDelegate
MulticastDelegate
UnimplementedState
set_WindowState
FormWindowState
STAThreadAttribute
CompilerGeneratedAttribute
UnverifiableCodeAttribute
UnsafeValueTypeAttribute
BabelAttribute
SuppressIldasmAttribute
AssemblyInfoAttribute
YanoAttribute
DotNetPatcherPackerAttribute
BabelObfuscatorAttribute
CryptoObfuscator.ProtectedWithCryptoObfuscatorAttribute
DotNetPatcherObfuscatorAttribute
DotfuscatorAttribute
CompilationRelaxationsAttribute
DefaultCharSetAttribute
SmartAssembly.Attributes.PoweredByAttribute
RuntimeCompatibilityAttribute
SuppressUnmanagedCodeSecurityAttribute
VerifyTypeAndValue
Get_DescriptionValue
Get_IsUserValue
SetValue
HebrewValue
get_IsAlive
SetMinThreadsNative
CaseSensitive
SizeOfStackReserve
gSpgrkjmkr.exe
get_Size
DataSize
EnsureDestinationSize
dwSize
Resize
SizeOf
fsafafwwwwwwwwaf
fdfsasfaccggggggsfasfdf
fdaffcgggggggggggggfasfasfasfafafsdf
fsdfsdf
GetSigOfFieldDef
MarshalTypeRef
get_IsByRef
fssssssssssafffffffff
faffffhhhhhhhhhhhhhhhhhhhhhhfffff
faffffffssshhhfff
djkkpImrkgf
gfdffffffg
aFbloicfkhg
System.Threading
Encoding
IsLogging
DontWriteAnything
Ceiling
Running
FromBase64String
OutputDebugString
ToString
GetSerialNumberString
GetString
Net_uri_UserDrivenParsing
lbpnSIliFh
Cond_Branch
hhafaccgggggggggggggfasfhhhhh
get_ExecutablePath
GetFolderPath
ObfuscatedByGoliath
myWidth
get_Length
ImageStreamLength
ecAldIjrFbi
CreateThisFromUri
emkFmAnekfj
lkkfkpdecgj
kmrmcrifoij
okmIAhFfimj
rkddkjnolpj
kImcoikhAak
AsyncCallback
QueueUserWorkItemCallback
callback
StringHandleOnStack
ResizeParameters_NoLock
CreatePublicKey_NoLock
HasFlushedFinalBlock
FlushFinalBlock
ddlnaIlgpdk
eFAenISorlk
HelpLink
jIkdnkdccok
ofjjhmAcdSl
Marshal
GetNet1xXmlStringInternal
ParamsAfterSentinel
get_Email
set_Email
advapi32.dll
kernel32.dll
AllowCurrencySymbol
Control
blgkgpAkjAm
ImageStream
Get_EndOfStream
CryptoStream
MemoryStream
Program
jFbcldcdddm
System
SymmetricAlgorithm
ICryptoTransform
Rem_Un
Maifan
get_MetadataToken
hToken
GetPublicKeyToken
lpNumberOfBytesWritten
BeginStrongNameSign
AppDomain
get_CurrentDomain
AcdFrgfnain
_Version
Application
get_Location
NineRays.Obfuscator.Evaluation
Get_TextSection
System.Reflection
TypeExistsReflection
ReadOneInstruction
MdSigCallingConvention
RuntimeWrappedException
DllNotFoundException
MissingMemberException
IsSingleton
Set_FullDateTimePattern
Get_BytesUnknown
ijFeakphldo
GetDynamicILInfo
FieldInfo
MethodInfo
ScoreInfo
startupInfo
MemberInfo
HasUserInfo
ParameterInfo
hResInfo
GetContactInfo
ProcessStartInfo
DirectoryInfo
fmIfermASho
oFmoAllhSIp
FuncMDTokenMap
get_USHeap
Get_GuidHeap
StringHeap
kbdjaonfFfp
hhjAikajdkp
fmgockcdekp
ljiajgdjmlp
cIcoSApkkpp
DoPopup
startup
strtup
System.Linq
set_ShowInTaskbar
IFirstWeekOfYear
MarkFinallyAddr
Get_ImageCor20Header
CustomAttributeReader
DESCryptoServiceProvider
MethodBuilder
ModuleBuilder
TypeBuilder
AssemblyBuilder
SpecialFolder
TypeDefFinder
GetYearMonthDayOrder
lpBuffer
ResourceManager
Debugger
Get_IsOther
SizeOfHelper
IsSubsetOfHelper
CompareOrdinalHelper
ByteArrayEqualityComparer
CreateProcessAsUser
get_IsPointer
BitConverter
Get_IsSetter
ibaerjgIIgr
GetDemandDir
gSpgrkjmkr
mlijfkoSImr
Fkindlpcgmr
GetTokenFor
IEnumerator
GetEnumerator
LoadFactor
.cctor
dotNetProtector
get_IsConstructor
CreateDecryptor
roljmfijorr
IntPtr
Get_Hour
System.Diagnostics
fdsaffcgggggggggggggggggggggggccafasffds
fdfffcfagggggggggsfafasffffffdfsfds
Get_PreserveTypeDefRids
GetMilliseconds
GetMethods
InitializeEventMethods
Interfaces
System.Runtime.InteropServices
System.Runtime.CompilerServices
System.Resources
gSpgrkjmkr.resources
bInheritHandles
EnableVisualStyles
Get_HasSpacesInDayNames
EmptyTypes
lpThreadAttributes
MethodAttributes
TypeAttributes
MethodImplAttributes
GetCustomAttributes
GenericParameterAttributes
lpProcessAttributes
GetBytes
Get_LegalBlockSizes
GetAllTypeDefs
BindingFlags
dwCreationFlags
GetMethodImplementationFlags
SetImplementationFlags
Get_HasThis
Equals
Programs
System.Windows.Forms
WinMDAssemblyExtensions
System.Collections
CallingConventions
get_Chars
GetOptionalCustomModifiers
GetParameters
get_IsClass
TestClass
AssemblyBuilderAccess
hProcess
GetCurrentProcess
lpBaseAddress
lpAddress
sssssaffcggggggggggggggcafafssss
sssssccggggggggggggggggggggggggfafasfasfgsssss
students
HasGenericParamConstraints
myRadius
radius
ReUseDeletedEventRows
Concat
SetFormat
Contract
SelectObject
GetObject
object
Select
flProtect
UserResourceSet
CharSet
myHeight
height
op_Explicit
System.Reflection.Emit
SetCompatibleTextRenderingDefault
FirstOrDefault
IAsyncResult
SetResult
result
s_Invariant
Student
student
lpEnvironment
InvalidLowBoundArgument
InitializeComponent
get_Current
CheckRemoteDebuggerPresent
IsDebuggerPresent
Set_NativeEntryPoint
MaxCharCount
ClassesRoot
InternalGetDirectoryRoot
textToDecrypt
Encrypt
ParameterizedThreadStart
Convert
StrongPort
FailFast
get_Last
set_Last
contactList
arrayList
LoopbackHost
get_First
set_First
SuspendLayout
ResumeLayout
MoveNext
System.Text
OpenText
context
ewasfasccfgggggggggggggasfw
M_throwOnOverflow
eaaaafdgggggascccfasfasfasaaaaaaaaaaww
TooFewHex
ToArray
get_IsArray
M_Body
Set_StrongNamePublicKey
secretkey
System.Security.Cryptography
DefineDynamicAssembly
GetExecutingAssembly
SetPermitOnly
BlockCopy
library
CreateDirectory
lpCurrentDirectory
Get_Capacity
op_Equality
op_Inequality
System.Security
SuppressUnmanagedCodeSecurity
IsNullOrEmpty
198 Protector V2
System.Security.Permissions.SecurityPermissionAttribute, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
SkipVerification
WrapNonExceptionThrows
_CorExeMain
mscoree.dll
B0E&L?<
bN@5'a
4iaL3/
PynNu3
hvZrjZ6
T%|t+-9
;;pG 
&x5eaG
=n-?fG
?>Ri,Q
C?<T.~
u;,fM\M
g{jr=
vAI)U[?
Jorze}Xv!3
WqeZv/}
E>).r8
l$4q,L
+3i\Ytmg
Uq|?\[
CY>dG@
KVZp#*X
aC[uXw
dZL1#1
JKFqGP
=t|ht;
"lG}NB
s/.sF7ZBB
~:>^Lm
(c6FwC
y5Q"aD
8>&lM~
rCN^n(
&7]}R9
dIA6UUiaP
!q`+E;
A7b%%N
iGK^a)g
=@/tQ^8
'SNoiY$0
\`xaS#
'.6n:!rY9
4'Gs[M
-]70#)C
Al^P4F
Q~x9 x
E$&>-N
)mIDAT
!jE.s
[O?,h
8Q~,v+;
$`P!hl
SH%O~Pp
ASA)#n6
2^[cZn
0dx(.v
D}V/&S
@9(p\\
tn^i5_3z
X"G#we
fdh,-]^
DQ!XeJ
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
<assemblyIdentity version="1.0.0.0" name="MyApplication.app"/>
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v2">
<security>
<requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3">
<requestedExecutionLevel level="asInvoker" uiAccess="false"/>
</requestedPrivileges>
</security>
</trustInfo>
</assembly>
gSpgrkjmkr
GetEnvironmentVariable
-898676580
898752795
_ENABLE_PROFILING
_PROFILER
-801333032
801247326
-865677963
865710301
-1792791884
1792683052
-1943348763
1943309469
-848937035
848830836
-313481952
313440452
1281142984
1281162255
Antivirus Signature
Bkav Clean
Lionic Trojan.Multi.Generic.4!c
Elastic malicious (high confidence)
Cynet Clean
CMC Clean
CAT-QuickHeal Clean
ALYac Clean
Cylance Unsafe
VIPRE Clean
Sangfor Suspicious.Win32.Save.a
K7AntiVirus Clean
BitDefender Trojan.GenericKD.37673745
K7GW Clean
CrowdStrike win/malicious_confidence_90% (W)
Baidu Clean
Cyren W32/MSIL_Kryptik.FOQ.gen!Eldorado
Symantec ML.Attribute.HighConfidence
ESET-NOD32 a variant of MSIL/Injector.VRI
APEX Malicious
Paloalto generic.ml
ClamAV Clean
Kaspersky HEUR:Trojan.MSIL.Tasker.gen
Alibaba Trojan:Win32/Kryptik.ali2000016
NANO-Antivirus Clean
SUPERAntiSpyware Clean
MicroWorld-eScan Trojan.GenericKD.37673745
Tencent Clean
Ad-Aware Trojan.GenericKD.37673745
Sophos Mal/Generic-S
Comodo Clean
F-Secure Clean
DrWeb Clean
Zillya Clean
TrendMicro Clean
McAfee-GW-Edition BehavesLike.Win32.Generic.bc
FireEye Generic.mg.062e63a1422126e3
Emsisoft Trojan.GenericKD.37673745 (B)
SentinelOne Static AI - Malicious PE
Jiangmin Clean
Webroot Clean
Avira Clean
Antiy-AVL Clean
Kingsoft Win32.Troj.Undef.(kcloud)
Microsoft Trojan:Win32/Sabsik.FL.B!ml
Gridinsoft Clean
Arcabit Clean
ViRobot Clean
ZoneAlarm Clean
GData Trojan.GenericKD.37673745
TACHYON Clean
AhnLab-V3 Trojan/Win.Mardom.C4656510
Acronis Clean
McAfee Artemis!062E63A14221
MAX malware (ai score=84)
VBA32 Clean
Malwarebytes MachineLearning/Anomalous.94%
Panda Trj/GdSda.A
Zoner Clean
TrendMicro-HouseCall TROJ_GEN.R06CH0CIS21
Rising Clean
Yandex Clean
Ikarus Clean
eGambit Unsafe.AI_Score_95%
Fortinet MSIL/Agent.VRN!tr
BitDefenderTheta Gen:NN.ZemsilF.34170.Um0@auoEDXaG
AVG Win32:RATX-gen [Trj]
Avast Win32:RATX-gen [Trj]
MaxSecure Clean
No IRMA results available.