Static | ZeroBOX

PE Compile Time

2021-10-08 01:26:03

PE Imphash

f34d5f2d4577ed6d9ceec516c1f5a744

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00002000 0x00068e44 0x00069000 6.57461711839
.rsrc 0x0006c000 0x00046580 0x00046600 6.62987649662
.reloc 0x000b4000 0x0000000c 0x00000200 0.101910425663

Resources

Name Offset Size Language Sub-language File type
GOOGLEUPDATEAPPLICATIONCOMMANDS 0x0006cb18 0x00000004 LANG_KANNADA SUBLANG_NEUTRAL data
RT_ICON 0x000afa4c 0x000025a8 LANG_KANNADA SUBLANG_NEUTRAL dBase IV DBT of `.DBF, block length 9216, next free block index 40, next free block 0, next used block 0
RT_ICON 0x000afa4c 0x000025a8 LANG_KANNADA SUBLANG_NEUTRAL dBase IV DBT of `.DBF, block length 9216, next free block index 40, next free block 0, next used block 0
RT_ICON 0x000afa4c 0x000025a8 LANG_KANNADA SUBLANG_NEUTRAL dBase IV DBT of `.DBF, block length 9216, next free block index 40, next free block 0, next used block 0
RT_ICON 0x000afa4c 0x000025a8 LANG_KANNADA SUBLANG_NEUTRAL dBase IV DBT of `.DBF, block length 9216, next free block index 40, next free block 0, next used block 0
RT_ICON 0x000afa4c 0x000025a8 LANG_KANNADA SUBLANG_NEUTRAL dBase IV DBT of `.DBF, block length 9216, next free block index 40, next free block 0, next used block 0
RT_ICON 0x000afa4c 0x000025a8 LANG_KANNADA SUBLANG_NEUTRAL dBase IV DBT of `.DBF, block length 9216, next free block index 40, next free block 0, next used block 0
RT_ICON 0x000afa4c 0x000025a8 LANG_KANNADA SUBLANG_NEUTRAL dBase IV DBT of `.DBF, block length 9216, next free block index 40, next free block 0, next used block 0
RT_ICON 0x000afa4c 0x000025a8 LANG_KANNADA SUBLANG_NEUTRAL dBase IV DBT of `.DBF, block length 9216, next free block index 40, next free block 0, next used block 0
RT_ICON 0x000afa4c 0x000025a8 LANG_KANNADA SUBLANG_NEUTRAL dBase IV DBT of `.DBF, block length 9216, next free block index 40, next free block 0, next used block 0
RT_ICON 0x000afa4c 0x000025a8 LANG_KANNADA SUBLANG_NEUTRAL dBase IV DBT of `.DBF, block length 9216, next free block index 40, next free block 0, next used block 0
RT_ICON 0x000afa4c 0x000025a8 LANG_KANNADA SUBLANG_NEUTRAL dBase IV DBT of `.DBF, block length 9216, next free block index 40, next free block 0, next used block 0
RT_ICON 0x000afa4c 0x000025a8 LANG_KANNADA SUBLANG_NEUTRAL dBase IV DBT of `.DBF, block length 9216, next free block index 40, next free block 0, next used block 0
RT_ICON 0x000afa4c 0x000025a8 LANG_KANNADA SUBLANG_NEUTRAL dBase IV DBT of `.DBF, block length 9216, next free block index 40, next free block 0, next used block 0
RT_ICON 0x000afa4c 0x000025a8 LANG_KANNADA SUBLANG_NEUTRAL dBase IV DBT of `.DBF, block length 9216, next free block index 40, next free block 0, next used block 0
RT_ICON 0x000afa4c 0x000025a8 LANG_KANNADA SUBLANG_NEUTRAL dBase IV DBT of `.DBF, block length 9216, next free block index 40, next free block 0, next used block 0
RT_ICON 0x000afa4c 0x000025a8 LANG_KANNADA SUBLANG_NEUTRAL dBase IV DBT of `.DBF, block length 9216, next free block index 40, next free block 0, next used block 0
RT_ICON 0x000afa4c 0x000025a8 LANG_KANNADA SUBLANG_NEUTRAL dBase IV DBT of `.DBF, block length 9216, next free block index 40, next free block 0, next used block 0
RT_ICON 0x000afa4c 0x000025a8 LANG_KANNADA SUBLANG_NEUTRAL dBase IV DBT of `.DBF, block length 9216, next free block index 40, next free block 0, next used block 0
RT_ICON 0x000afa4c 0x000025a8 LANG_KANNADA SUBLANG_NEUTRAL dBase IV DBT of `.DBF, block length 9216, next free block index 40, next free block 0, next used block 0
RT_ICON 0x000afa4c 0x000025a8 LANG_KANNADA SUBLANG_NEUTRAL dBase IV DBT of `.DBF, block length 9216, next free block index 40, next free block 0, next used block 0
RT_ICON 0x000afa4c 0x000025a8 LANG_KANNADA SUBLANG_NEUTRAL dBase IV DBT of `.DBF, block length 9216, next free block index 40, next free block 0, next used block 0
RT_ICON 0x000afa4c 0x000025a8 LANG_KANNADA SUBLANG_NEUTRAL dBase IV DBT of `.DBF, block length 9216, next free block index 40, next free block 0, next used block 0
RT_ICON 0x000afa4c 0x000025a8 LANG_KANNADA SUBLANG_NEUTRAL dBase IV DBT of `.DBF, block length 9216, next free block index 40, next free block 0, next used block 0
RT_ICON 0x000afa4c 0x000025a8 LANG_KANNADA SUBLANG_NEUTRAL dBase IV DBT of `.DBF, block length 9216, next free block index 40, next free block 0, next used block 0
RT_ICON 0x000afa4c 0x000025a8 LANG_KANNADA SUBLANG_NEUTRAL dBase IV DBT of `.DBF, block length 9216, next free block index 40, next free block 0, next used block 0
RT_ICON 0x000afa4c 0x000025a8 LANG_KANNADA SUBLANG_NEUTRAL dBase IV DBT of `.DBF, block length 9216, next free block index 40, next free block 0, next used block 0
RT_ICON 0x000afa4c 0x000025a8 LANG_KANNADA SUBLANG_NEUTRAL dBase IV DBT of `.DBF, block length 9216, next free block index 40, next free block 0, next used block 0
RT_ICON 0x000afa4c 0x000025a8 LANG_KANNADA SUBLANG_NEUTRAL dBase IV DBT of `.DBF, block length 9216, next free block index 40, next free block 0, next used block 0
RT_ICON 0x000afa4c 0x000025a8 LANG_KANNADA SUBLANG_NEUTRAL dBase IV DBT of `.DBF, block length 9216, next free block index 40, next free block 0, next used block 0
RT_ICON 0x000afa4c 0x000025a8 LANG_KANNADA SUBLANG_NEUTRAL dBase IV DBT of `.DBF, block length 9216, next free block index 40, next free block 0, next used block 0
RT_ICON 0x000afa4c 0x000025a8 LANG_KANNADA SUBLANG_NEUTRAL dBase IV DBT of `.DBF, block length 9216, next free block index 40, next free block 0, next used block 0
RT_ICON 0x000afa4c 0x000025a8 LANG_KANNADA SUBLANG_NEUTRAL dBase IV DBT of `.DBF, block length 9216, next free block index 40, next free block 0, next used block 0
RT_ICON 0x000afa4c 0x000025a8 LANG_KANNADA SUBLANG_NEUTRAL dBase IV DBT of `.DBF, block length 9216, next free block index 40, next free block 0, next used block 0
RT_ICON 0x000afa4c 0x000025a8 LANG_KANNADA SUBLANG_NEUTRAL dBase IV DBT of `.DBF, block length 9216, next free block index 40, next free block 0, next used block 0
RT_ICON 0x000afa4c 0x000025a8 LANG_KANNADA SUBLANG_NEUTRAL dBase IV DBT of `.DBF, block length 9216, next free block index 40, next free block 0, next used block 0
RT_ICON 0x000afa4c 0x000025a8 LANG_KANNADA SUBLANG_NEUTRAL dBase IV DBT of `.DBF, block length 9216, next free block index 40, next free block 0, next used block 0
RT_ICON 0x000afa4c 0x000025a8 LANG_KANNADA SUBLANG_NEUTRAL dBase IV DBT of `.DBF, block length 9216, next free block index 40, next free block 0, next used block 0
RT_ICON 0x000afa4c 0x000025a8 LANG_KANNADA SUBLANG_NEUTRAL dBase IV DBT of `.DBF, block length 9216, next free block index 40, next free block 0, next used block 0
RT_ICON 0x000afa4c 0x000025a8 LANG_KANNADA SUBLANG_NEUTRAL dBase IV DBT of `.DBF, block length 9216, next free block index 40, next free block 0, next used block 0
RT_ICON 0x000afa4c 0x000025a8 LANG_KANNADA SUBLANG_NEUTRAL dBase IV DBT of `.DBF, block length 9216, next free block index 40, next free block 0, next used block 0
RT_ICON 0x000afa4c 0x000025a8 LANG_KANNADA SUBLANG_NEUTRAL dBase IV DBT of `.DBF, block length 9216, next free block index 40, next free block 0, next used block 0
RT_ICON 0x000afa4c 0x000025a8 LANG_KANNADA SUBLANG_NEUTRAL dBase IV DBT of `.DBF, block length 9216, next free block index 40, next free block 0, next used block 0
RT_ICON 0x000afa4c 0x000025a8 LANG_KANNADA SUBLANG_NEUTRAL dBase IV DBT of `.DBF, block length 9216, next free block index 40, next free block 0, next used block 0
RT_ICON 0x000afa4c 0x000025a8 LANG_KANNADA SUBLANG_NEUTRAL dBase IV DBT of `.DBF, block length 9216, next free block index 40, next free block 0, next used block 0
RT_ICON 0x000afa4c 0x000025a8 LANG_KANNADA SUBLANG_NEUTRAL dBase IV DBT of `.DBF, block length 9216, next free block index 40, next free block 0, next used block 0
RT_ICON 0x000afa4c 0x000025a8 LANG_KANNADA SUBLANG_NEUTRAL dBase IV DBT of `.DBF, block length 9216, next free block index 40, next free block 0, next used block 0
RT_DIALOG 0x000b1ff4 0x00000076 LANG_KANNADA SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x000b22c0 0x0000005a LANG_KANNADA SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x000b22c0 0x0000005a LANG_KANNADA SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x000b22c0 0x0000005a LANG_KANNADA SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x000b22c0 0x0000005a LANG_KANNADA SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x000b22c0 0x0000005a LANG_KANNADA SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x000b22c0 0x0000005a LANG_KANNADA SUBLANG_NEUTRAL data
RT_VERSION 0x000b231c 0x00000264 LANG_KANNADA SUBLANG_NEUTRAL data

Imports

Library mscoree.dll:
0x402000 _CorExeMain

!This program cannot be run in DOS mode.
`.rsrc
@.reloc
Ivan Medvedev
q(ai(
##c}3e
@U@Y(o
@J@X(o
`Y@Y(o
@_@[(o
@@@Y(o
Q@[(o
5A4!@#
@T@Y(o
@K@X(o
]@X(o
_@Y(o
@P@[(o
`[@Y(o
^SPf@#
P@[(o
@M@Y(o
[YZ_bX
[YZ_bX
[XZ_bX
[XZ_bX
@tqOA#
[YZ_bX
[YZ_bX
[XZ_bX
#mL)!r
[XZ_bX
#|R|XL
[XZ_bX
[XZ_bX
[YZ_bX
[YZ_bX
#Lq{t
[XZ_bX
[XZ_bX
[XZ_bX
[XZ_bX
[YZ_bX
[XZ_bX
[YZ_bX
#,tycxT
[XZ_bX
#$]#zk
[XZ_bX
[XZ_bX
[XZ_bX
#_V'9=
[YZ_bX
[YZ_bX
[XZ_bX
[YZ_bX
[YZ_bX
[YZ_bX
[YZ_bX
[XZ_bX
[YZ_bX
[XZ_bX
[XZ_bX
[YZ_bX
[YZ_bX
[XZ_bX
[XZ_bX
[XZ_bX
[YZ_bX
0b@Y(o
#A#?9fB
[XZ_bX
@r7gA#
[XZ_bX
[YZ_bX
[YZ_bX
[YZ_bX
[XZ_bX
[XZ_bX
[XZ_bX
[XZ_bX
[YZ_bX
[XZ_bX
[YZ_bX
[YZ_bX
[XZ_bX
[XZ_bX
[XZ_bX
#qa-9tE
[XZ_bX
[XZ_bX
[YZ_bX
[YZ_bX
[YZ_bX
[XZ_bX
[XZ_bX
[YZ_bX
@@@Y(o
[XZr7G
[XZroG
#U,3E_
#|"2FZz
[XXnZ>
x8vM{@#
\.`q
APg!ai
PaifXY
aiXaY}
D)yA#
D)yA(v
qbO9aiaf
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
9&_5[:{
z+J N/n=J%O
z;Z0^?~-J%O
z;Z0^?~-J%O
z;Z0^?~-J%O
z;Z0^?~-J%O
z;Z0^?~-J%O
z;Z0^?~-J%O
s2S9W6W
!_6Y8yi-:
~l*=L?Oo
];U?oX`
mIE(^u
>~^S5I:Z
h6rr-7Na_+E
_mF>G~
k0LbG&?Jb
AM*E/n
(.E%e3S;OG
v8V7^E=
u-]f`|z
v8[C3pj
y9\H4aY
}kc}?T6x$O,SK
s9Z<~~
6Z<~,UD7
l.LEDWO
a+G'gi^
/J,n\{
p:]=}<
&(N0rw!
@>X:|gW
Y>`"Q%
v,I)iak
PD&hND
*E%e~f
G=~ K$C
@{$?P:+b
dQ7X3r
B!A+E$VO
^<-\N.1
]P2s G
+^ A+E
NH#M,m
;k+J N
r5[;z)
uC$L&hH[-
ovHHR-
?A3R8V7
bx"d8
I5[2#{
S.@!Q~
#b1GrX
pb"C)G
k~R#B
A0_?KX
H)h;t.
)4>P1n=Z5
kxa3U
\6q/-L&9
oFs-C"
nH'f5R
=o'V=T
X!C*E<
Li$'XD
PS<~ b(
@l!N!Aw
;$]R^?~
uqS?nU
LER%B-
eLa&A.?
6t2,m>
&A J!x
d&@-G)
9V7&"]
$M(B,M$
(}ky67
%+=|/H
+d7P?U
A+E<}
?v/x5S=
WUQ8z*
RS6]4m
6q~Wq
w.a:^2
X9S=1i
V7C,[2
w-,g4S
-j9^10#>
y0S:ULC
a]<T:[
)[_$N
w7WU1c"q
7nSR3r
T7^1P)
0w-L,F
c%em>Y
24Z;z)?
F0Z4U,3[1
lf/I'N
ZHl[1_
IO4u K
B%J80<U;
^^+D s#
H)Kp]d
pfKv9k
;]{x&>
s*;T2]L
Q7Y4s7[Z{R
.7~"I(
hv2Y5\>
6~!L#B
H1_6hS
#@'h<\
kr G(B
v3K,G*#LI
+^ L-l
H!'9U?
LEj'?P
j!P@+j#,?]
4`"D.Xp2a
>wx*L#
h1d&H)
wN.Z5_
x1bQ6Y
:lVL+
cv+M#H
rm?I&L
#z>2]7
DFr8R<
|*/K!O
{RI)H*
w_.F,B#
O&F2^5
_-_US:U%
b[B(i{
bn J$
ZHH>U<
x1VF'f|
Y9TRT5g
;5p"M-
H|9W:\
2uW&G-
h'Wm,M
gk<]7
dyD*A0
%|uR<]
tMB>P1
3-L*E%
~EF]7v
_6=q~
WUCX2\
$=+"]
vL1_6
(F'fMz5_
w6S9W'
nu%B-G
Zq/N$JC
p'F,B#b1
f E$e
=[1_>$
S(7X2s
v/PN)F
}@!K%D
UN(G-l
'I(fn|
@GC6W=
`(O GF
\7Z<}FsU?~
9pEY8y
Pz9V9S
F<5o<[
9%\Q~^
ZHFi({
8wEs2S
r` A+E
BESV7]
pu4UW
O.Dc}lA'I
X9(%Z2
c:bP?U[
6ohR3rh
bfO H(Z
r5M'\=
\:O!@t
"D+A{Z!
#j8_0Z0B
z3,F(j
4S:U5$
M$ L$O
3qqn/|
E"eg^@+
<]-C"c
T6Z1 Y
!Q~.@*k
k\6X9(
]]@!O.o
k)H"LE
H}&H"c
{)+ J$
b7$=R8&
[q3S:l~
`6_w.@
9T4Z;GK
Z1[5Q
>h)F,B
62E%K"
;J a}S1
&>T:[S
J#?Q0d
w)`9Q6Y
p7K!V7
#>J$Eyd2u
D2t(gY
.g*"E*
C O%d>
t2G J$
IsD(H#
AZ<S9x
gFl+xp
tU4^0Q(
r~8X:|
Y0*L#I
AB$G.A
3&vV/l
}T9Y8Z
OU8h)~
O|j4bx
l,$DCf
!q.DL}
v3;\OA
QMQN.
HsT"M'
$5:I&L
Vs`~[a
k<^?C>
sT2y4nz*%_
Y|2-,tA
5r24U?
b%13R8
ol5}/I
noV@+F
|5T4T<
H)J!P1
K!g!4g
V<R3r!
()8Y2\=|
[t6f~M
56X*~)D
r5+X9S
apK!N$
XLbOfp>
%\i,K$
Z1^4.\
W4[I'A+E
TV@$f6
#z/;U4
y/7j9^
|/InO&g
^!N$ey
t6f~M
|URE-M
8}.I&L}
mDE?S3
o.O=)C
/f#K*k
, 5,g{
zXa1V9S
FfB s
p F)Cu
%?O%dx
yH)C-LF
U/?^
B_%c}]
KB(F'f
Nf|jD=W9X
.XDug`;
k-T0.#
X9SGc"O
,edT2n
blmrXw
B Jd$r
}/m)0F!<
E-C*@
Y3]<}
C|$8Nn
x!MJ}(S
c::[-?
G$P[nk
l,B=.D
&>R0sM
g!_)lmk#Q
V7]4 i$
H_6xVT:[
AX3^|U
+]<}.I
E@0[WN$J+j
[S3s]R=W
+X~=X7
7mF3U;
:lP]>Ux1p#D+
UC<S9x
!y@y-fh$
` (4yX4
u%]))Z&
ZM8~3P
$#)xJ?v
[U|aF
`?fon<
_|[DN
|6%}3=
"TZR.!h*
OJ07rf
ZP+:4N
tIzX|H
m?7sh
ecEdHd
KS=H0V
T^|#zzV
0#gL>C
S%GnfI{NV
JASS;>
J]v1\;^
_x=/t=
Y{Pa}V~
kZPs_;U6
$p|B`J
mc 2@d
!v2M+q
!T*KH2W
tdyF?l
\0Sc}#
=}IN$<8
o31D&s
,/OdPy9
5%(,{in4
4bj0a+k*a
S.V6HjV
JAE?-N
t!1FF]}
@qj}eh
@mvr0%V}|\
Np!<GE
g$|=H*
/cs,WJ
^~,&0"
!sj7oF
dIJIhI
O7OR:iBc"
m(k-%:
iGz9+Y
O7vm^%
pprAT
gmy]DEX
J%$u}O
h8ZDQU@
'rXl%7
]Te}iw
s$5Ng
[a;=}CO
k4&ikM
'4,`kHo08
cMV`%]P
(5QpGrC/
Y7xLQp
fgsLCo
h1pcDd
CK'7Uh3'%W
19imso
w#m,M;,
[- Rs
m="={Off
_V@)3B
Un"5P^
[{$YW+G/5
v4.0.30319
#Strings
#fsdgfgffsdf#
#gsdf#
#fsdfsd.dll#
#fsdgggfsdfsd.dll#
#fshghgfhdfsdf.dll#
#fshggdfsshgfhdfsdf.dll#
#fsdhfsdf.dll#
#fsdffafhghgsdf.dll#
#fsdhhaffdsf.dll#
#fsdgsdgfdsf.dll#
#fsdfsdggfdsf.dll#
<acmmlSAemde>b__0
<Maifan>b__0
<Mabin>b__0
$$method0x6000054-1
$$method0x600427a-1
Get_IsClr11
LOCALE_SMONTHNAME1
<Mabin>b__1
IEnumerable`1
NullableComparer`1
IEnumerator`1
List`1
Get_AddressField1
CS$<>9__CachedAnonymousMethodDelegate1
<GetContactInfo>b__12
S_LDATA32
ToUInt32
ToInt32
BitsPerInt32
Conv_I2
198-Protector-V2
<>9__191_2
Func`2
IArraySortHelper`2
CS$<>9__CachedAnonymousMethodDelegate2
M_hash2
__StaticArrayInitTypeSize=13
<>c__DisplayClass13
CS$<>9__CachedAnonymousMethodDelegate3
Get_UInt16
ToInt16
LOCALE_SSHORTESTDAYNAME6
get_UTF8
<FindAll>d__9
WriteMethodBodies9
<Module>
HKEY_DYN_DATA
lkIldFpdFkA
S_LMANPROC
S_LOCAL_DPC_GROUPSHARED
get_ID
set_ID
LMEM_MOVEABLE
STD_OUTPUT_HANDLE
mjkmiFAmkcF
cnraIdlprnF
Stelem_I
megprcbdcbI
mdgmckAjgcI
ORDER_DM
FORMAT_MESSAGE_FROM_SYSTEM
IsProcessorArchitectureARM
System.IO
gfjhckboFAS
gojAajnaAS
MAX_TABLES
SEM_FAILCRITICALERRORS
melAaappSaS
mIajefrFdiS
S_LPROCMIPS_ST
set_IV
FFapdkkbcaa
get_Area
rcdata
mdcilFIcmIb
almodmemSSb
bdpmFbfAkdb
kggjglrbbgb
mscorlib
FindMostSpecific
Public
System.Collections.Generic
get_IsStatic
cllbehnmrkc
kicopAkbnnc
amkISdlmgoc
get_Id
set_Id
m_ObfuscatedId
get_MessageId
AdjustSessionId
GetProcessById
S_allSystemTimeZonesRead
lpNumberOfBytesRead
hThread
get_CurrentThread
thread
Embedded
SpAiionFfed
get_IsAttached
get_OriginalStringSwitched
M_toBeCleaned
Unescaped
Stopped
WasSorted
StopRequested
fshghd
lAfdIhFbikd
<ID>k__BackingField
<Kind>k__BackingField
<Average>k__BackingField
<Phone>k__BackingField
<Email>k__BackingField
<Last>k__BackingField
<First>k__BackingField
set_IsBackground
DynamicMethod
DefinePInvokeMethod
ResolveMethod
_exceptionMethod
GetMethod
method
NetGuard
fsdfsdfsdfsd
dhpidbpFmIe
get_IsInterface
Replace
_stackTrace
Appearance
NonCasInheritance
LoadResource
FindResource
SizeofResource
mySide
acmmlSAemde
GetHashCode
SetCode
CryptoStreamMode
get_Unicode
CodePageUnicode
IsCharSetUnicode
Xenocode.Client.Attributes.AssemblyAttributes.ProcessedByXenocode
get_Average
set_Average
EndInvoke
BeginInvoke
GetEnvironmentVariable
Enumerable
IDisposable
_hashtable
set_Visible
Double
Circle
get_Handle
RuntimeFieldHandle
get_MethodHandle
RuntimeMethodHandle
GetModuleHandle
get_TypeHandle
RuntimeTypeHandle
CloseHandle
GetFieldFromHandle
GetTypeFromHandle
Rectangle
Console
get_Module
DefineDynamicModule
ResolveModule
hModule
module
set_FormBorderStyle
WindowStyle
get_Name
WebName
GetSymbolStoreFileName
<>3__fullName
lpApplicationName
functionName
lpName
AssemblyName
Assume
ReadLine
lpCommandLine
WriteLine
Set_Machine
ToStringNone
get_Phone
set_Phone
rperpe
get_FieldType
CreateModuleType
DefineType
CreateType
ValueType
get_DeclaringType
flAllocationType
get_ReturnType
lpType
get_ParameterType
Get_IsType
Set_DocumentType
Square
System.Core
ResolveSignature
SetLocalSignature
Get_ProcessorArchitecture
MethodBase
Release
Dispose
Truncate
Create
PrepareContractedDelegate
CreateDelegate
MulticastDelegate
ResourceHelperState
set_WindowState
FormWindowState
_complete
_isWrite
STAThreadAttribute
CompilerGeneratedAttribute
UnverifiableCodeAttribute
DebuggableAttribute
UnsafeValueTypeAttribute
AssemblyTrademarkAttribute
SecuritySafeCriticalAttribute
BabelAttribute
SuppressIldasmAttribute
AssemblyInfoAttribute
YanoAttribute
DotNetPatcherPackerAttribute
BabelObfuscatorAttribute
CryptoObfuscator.ProtectedWithCryptoObfuscatorAttribute
DotNetPatcherObfuscatorAttribute
DotfuscatorAttribute
CompilationRelaxationsAttribute
SmartAssembly.Attributes.PoweredByAttribute
RuntimeCompatibilityAttribute
SuppressUnmanagedCodeSecurityAttribute
set_ReadOriginalValue
SetValue
m_value
get_IsAlive
CharInClassRecursive
WriteFileNative
BeginIndexNotNegative
TypeResolve
UnsafeMove
gojAajnaAS.exe
get_Size
VerifyFieldSize
CalcVaListSize
dwSize
Resize
SizeOf
fsafafwwwwwwwwaf
fshgdf
fsdfhghfafgsdf
GetSigOfFieldDef
get_IsByRef
fsdhghdsdff
brdaamkdAgf
lekkFjomamf
kjljeebooag
clplgrgImcg
gfdffffhfffg
gfdffffffhfffg
gggggggggggggg
GenericSig
mAbSpAldlkg
apgjkAIjdlg
System.Threading
Encoding
IsLogging
EnableJITcompileTracking
Ceiling
FromBase64String
Get_String
OutputDebugString
ToString
GetString
EmitString
ContinueParsing
norhrAfgirh
ScanBackslash
get_ExecutablePath
Get_AbsolutePath
ObfuscatedByGoliath
myWidth
get_Length
FjidIimhcgi
pfrIoSoSjji
mncrmrlpgli
nrncglpFami
AmIdcAnSkaj
kjddddddddddddj
fIkhnnbbjFk
fIirfmppFk
jjmkFSadmSk
AsyncCallback
AppDomainTimerCallback
callback
Fogkkmkjlck
FlushFinalBlock
mkdogberbgk
ReplaceInPlaceAtChunk
WriteInlineTok
MemberBindingMask
Marshal
Set_IsFinal
mfjjInidjcl
akhcdFgnpdl
mdgjjkbfkel
ParamsAfterSentinel
get_Email
set_Email
WaitAll
advapi32.dll
kernel32.dll
Control
omeSamIidIm
GetReaderFromStream
CryptoStream
MemoryStream
Program
System
SymmetricAlgorithm
ICryptoTransform
Maifan
get_MetadataToken
hToken
SetPublicKeyToken
lpNumberOfBytesWritten
AppDomain
get_CurrentDomain
SatelliteContractVersion
GetSubKeyWritePermission
Application
get_Location
NineRays.Obfuscator.Evaluation
System.Reflection
CustomAttributeCollection
CallingConvention
MetadataException
RuntimeWrappedException
GetDynamicILInfo
RslvCodeFieldInfo
MethodInfo
ScoreInfo
startupInfo
MemberInfo
ParameterInfo
hResInfo
GetContactInfo
deprjIknemo
CharSetAuto
AlwaysCreateGuidHeap
nbelkSerecp
DoPopup
startup
System.Linq
efFhmgmkcAr
set_ShowInTaskbar
ScanDollar
RsrcReader
DESCryptoServiceProvider
MethodBuilder
ModuleBuilder
TypeBuilder
_EventBuilder
AssemblyBuilder
Decoder
lpBuffer
ResourceManager
Debugger
IMetaDataListener
ModuleDefUser
CreateProcessAsUser
GetReturnParameter
IResourceWriter
get_IsPointer
BitConverter
IAssemblyResolver
nFionAprbgr
GetTokenFor
ITokenCreator
IEnumerator
GetEnumerator
ArrayEnumerator
Activator
.cctor
dotNetProtector
get_IsConstructor
CreateDecryptor
IntPtr
C_ticksPerHour
System.Diagnostics
GetMinThreads
SetMaxThreads
Get_Seconds
Milliseconds
GetMethods
M_listMethods
InitializePropertyMethods
System.Runtime.InteropServices
System.Runtime.CompilerServices
System.Resources
gojAajnaAS.resources
M_resources
Runcodes
SetCompatibilitySwitches
DataDirectories
VTables
InternalEqualMethodHandles
bInheritHandles
EnableVisualStyles
EmptyTypes
GetAssociates
lpThreadAttributes
MethodAttributes
TypeAttributes
MethodImplAttributes
GetCustomAttributes
lpProcessAttributes
M_CABytes
Rfc2898DeriveBytes
GetBytes
get_NumberOfRvaAndSizes
BindingFlags
dwCreationFlags
GetMethodImplementationFlags
SetImplementationFlags
Get_AssemblyFlags
Equals
Programs
GetGloballyQueuedWorkItems
System.Windows.Forms
System.Collections
CallingConventions
CaptureOptions
M_exceptions
bytePos
_GetCustomAttributeProps
get_Chars
GetOptionalCustomModifiers
ExecuteCallbackHandlers
RuntimeHelpers
JitHelpers
GetParameters
get_IsClass
TestClass
AssemblyBuilderAccess
M_access
hProcess
GetCurrentProcess
lpBaseAddress
lpAddress
students
myRadius
radius
Concat
AppendFormat
GetObject
object
Select
flProtect
ResourceSet
CharSet
DefaultKeySet
Target
TimeZoneOffset
myHeight
height
op_Explicit
System.Reflection.Emit
SetCompatibleTextRenderingDefault
FirstOrDefault
IAsyncResult
CheckAddResult
result
HasConstant
Student
student
lpEnvironment
YearMonthAdjustment
InitializeComponent
get_Current
CheckRemoteDebuggerPresent
IsDebuggerPresent
EnumCount
textToDecrypt
ParameterizedThreadStart
Convert
BadPort
Get_IsImport
FailFast
get_Last
set_Last
contactList
get_First
set_First
SuspendLayout
ResumeLayout
MoveNext
System.Text
cipherText
context
M_prev
ewafffsfasccfggggggggggggggggggggggggggasfw
OffsetLow
ReadAssemblyOSRow
NumOverflow
NativeGetTwoDigitYearMax
CanTryUnix
InitializeArray
ToArray
get_IsArray
iCurrency
set_Key
InitializeKey
EncryptionKey
secretkey
System.Security.Cryptography
DefineDynamicAssembly
GetExecutingAssembly
GetDefinitionAssembly
Family
Mkrefany
BlockCopy
library
lpCurrentDirectory
op_Equality
System.Security
SuppressUnmanagedCodeSecurity
IsNullOrEmpty
<PrivateImplementationDetails>{CD7EE549-4D39-47B9-8608-CBE326FB971E}
198 Protector V2
System.Security.Permissions.SecurityPermissionAttribute, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
SkipVerification
WrapNonExceptionThrows
_CorExeMain
mscoree.dll
&&&&&'+'''
'''''(,(((
(((((****)
8=CC<9
2+22/?
?/22224+440A
B044445,551@
@1555566663:
;36666
"""""#+###
#####$,$$$
$$$$$77777%-..-%77777
FA?;0;
!$"_!!! eHD@>B
!!$RQiQQQ$hIGDDD
#$QSZVjVUSQLC?>0<
%RTVY]\[[[X%
%TWX\\|*)))(
LJIHHA
+kkondL+{
hbC?JK
mddbbf
273^5543guonrc
134437N7`8886Eetta?1477879POpOOONlF<;DbMNNOOOP
pssqqk
341110
jONHEH
gg
mPNGGH
_\qq^]]]\mPMHGH
[]]]]_aaxxaaaa^LHEDDF
^_aaaaa_a_````]
!]`__a_+(&&&&&%
"#&&'(
*bb)+*'
&()))+
RPNMMI
,npvsjS$
jbFIPR
mkkQPR
KK5555
nkkQQP
55556?:dd>=>><vtplko
89:=>>:@C;fg????:s}vuzl79;AAA??BUBhgCCCC@Lp
~lF8>CCCCCCC
Y{{YZYYX|iLLiuTVYZYYYY
w||yys
444944
\EHHEHD9D]
]HHHIEIGG_
_IHHISHSS_
kk|}_JLLSEEII_
kkkpll}}nnnnnn\FFF89BFE_
llllllprtu
ttttttXBB66878BW
!mmqrttttsovu
uuuuuo
!mqssuuuvo
*******(
$(*****
#(**,,
aXLHEJTU
-''''''''''
%&&&'''))
/H~OOMMNK^H
11112b@:0VV/00000
a[[[ZZ[[[
/0000002@A<<yy<<<<:<
2:<<<<<<<ce>=zy>>>>>>S
S3=>>>>>>>=ejAA{|AAAAA?U
U;?AAAA?AAcj
hhhhhh
MYbddhhhhhhi
dZHHHH
',*#"##"#,""""""!%dHZGFGHH
 !+"**#"#*''&!+
++++++&&!% l__]Z[Z[GGIFa
 %&&++"+&'$$$$
!%%%%%% $
feedd][[_[Ze
$ &&%%$$$'&&&
++++++&&&%$
iaida_]^[[^i
$$&&+++&&+''*+-
--------,&%
iegf^d^^^^_k
 %++-----+-&/}0}
~~~~~}}00-,
ihedf^a^^Zdk
$%+-.00~~}}00/1
kfea\^[Z]]]l
*#0|~
feaa][ZZZ]Xk
ea`]XXHIYXIb&*.|
~l`XXHYGI
''//0111111
A(())))))))(((
((()((()B
<<99<9<<<<<<<8
4558889<
========7
457::==?=====:>
468:=>
\\\[G33
_kead^ZZ\[dS_
jgfigg
\ffdem47;?
=;;;;;;;;;;;;77
bhba^``]aag
4467:;:;:=;::?
cYYY22Y
OPPJJJJJJJ
JJJJJMM
OPMJaba
c``a`a^``]]ZYG
gjjjggjd]c
PVOLffhKKLKLLKK
LLLLLLNOQNttVP
QQQQQQQMMK
JKMOQQQQQQQUVUttWV
UUUUUUUTTMK
KMPUUUUUUUUVVoWwttW
ooooooVVVTL
LMPVVoooooooWpqpwwtr
qqqqqqqppnO
MRnqqqqqqqqqqrrr
sssrssrrunn
Nnnnrrvrvsvrsszzv
zzzzzzzyunn
Nnnuvvzzzzzzzzz
C]58W-
j#*=R9b
$DL1Za
QA$!)"1
R h$I*
>q{?1U
dqBT_
EC6IRP Q_
0jH]O5
gZ$\v(
ykK;isQ
CHBTK4BT
wy'sdg`J
J53~"K2
hIjTfmb}
W~S9i}
"AijKj
stX5E3
U!Ah'B]
:jG524#G
}.*:;L
-}%Vb~
(Ums?CQ&c
d.hQ7D)
")3G(a
yrr4c&
\PP"Bj-)A
&(umKA#C
uG(\%)/
IsaQg8
}P&m.e
ag<o3U
]r^L%!
DVfAij-
/;t;,U
Ys9/SJq
#5]TbR
&D&*L413
8x)'OG
g|sLU9
j}=c@\qY
oo-u]?q
2vWH]G
{*Ibg:
yTj1Ee
1n@nP2
5.m_`k
;N=*V,w
HT$&.>
VWWWUVefee
#K4[W`)}7
fov`?!
DFK:oR
9}pL<z
{S^nNU9(
@bK{rn
#|i%t}d
&%_o)@
]JN\l<
^'big%
/JEZvF
|/*|CZ^
P.SAoW
ZqT/X45
LoG7d_)`
X6"[MAu
nA0Y,>
X|gl<(
&0_6^>
@xcAxj
%0j)w0
\.ftSe
}0XUw.-
,@v_C5
)nu3sp
=\'EF0
4VDqrrTZd
W|z$[q
Xwi*:J
Tvtk0M6
MG+4a]
h<zCfo9
uR$ft(
ktRx$K
2]T^91
ipS\2
M~g"We
b2Sj:
CB&;!{8^:6
o?8Yz6
$x7F*o
Q^=r8U
z`3dbT.
p[\ao{I
@Nr>qD
t%J>d8>
%O$$v/
yxDFdU
Sj7)2"
Qo'5xO"
}`Ta4
d#coF,
:*{wT\
H/'#_G
bpLHQLr
+k!ztYH^
*****+4+++
+++++-4---
-----////.
:6>=6:

*****+4+++
+++++-4---
-----99999,2222,99999
#V
^%" &
#a\l\]\Se&"
7X\\cfaqaaaSeO
#R[``fsnznnn_Z
Tcijosoieeeb
W^ehpC0,,,
+0CL5'53/
-115LM>(@?9
.8>??MMD)EE;
1=DDDNUK*JIB|hPWW&Zx4EGGKttHAAA<!lgg__e
2:;?Ft
rl^Zbp
zqhhhu
QjQdQQO"e
$7OQmw[k[[YOOg
6RT[[w}aoa]]SuWP
QY``ay
vrrrqh
Viqrrv
"!NN!!!!
!!!!!_^hhZ^Z^N\$ (
5PZ^^X^b^no____Vc6$" (
#MY^^__bqqxynqnnbe6$$"U"^filnont|~
yyyym[
"Uhsxyzy}|VXNNNNNL
'6NNXWA.-----
---.AA/))./.-
-....AH<**<<<2
0<8<<<HIC++CCC:
0=>BCCBJJC++CCC:{va]]\mt0>>BCCCJQG,,FFF@%jea][]
7BEEFFGRSD??????3ofXVXa
19;???DT
sae][f
sfae[m
OkPabNMMM$zvmoqz
45ONOOkpPgiWWWW6m
45WWYYWpuZiiYYYYK\j
5PYYZY^u
qwwllll`|XLU[m(clllllq
yyyyyyo
awyyyyy
!$#RR!#!$$!y222,,%"5
!$$$$!PSS
SSSSSQ{5320*,%*R
%-OPjSSSO
||||||
R432.+.,R
'OSll||||}
ii42+%,*R
y50,"""%R!j
{{{{{{{y
.Rvx{{{
D>>>>>>>
==>>>D
\EC66BCCB?
?>BBCBF\]FE77EEFEA
>AEEEEFF]eKW88WWWWH
CIJKWWWKefYZ99ZZZZT
?WXXYYYYYfh^_99___[V
wR0%",.3
@X^^____^htdb::bbda[
G[aaabbbdt
rp;;pqqpc1-
uw-1Lbdoopppr
s<<ssssqn
Mcorssrs
g`VVVVVVVVV
LTUUVVV`g
.yRi334,R
&()xx))))()
{{ywuv{{
#))))))('POP
PPPj1j
&1PPPPPPNPmjk
kkkjji0
%jjkkklkkS
xxxmlzi
,&jlxxxmzzl
|||||l
35,kmzzzz
I//(&'
!   
H*/% %'&
!(2,,BFD1-1-11--+'!
??44408'%&%@
!')+--1,11'-522III995522421*'
JIHH>84>4/J
!+,02249119,AA;;
AADAAAA<;9,
H??8>44>
(,29:;A<;::<:fhBG
hgjijggE?9
J?B>8>>@
!*09<AFGgggFE
IHJ>@?84D
!19<fh
JJHD4?8488>
JIH?8404080
I@8800/*//*I:Fi
J4**%
j//3443444440/
$&./04/0//H
WWTTTTTTTTTUTSS
STTTTTWW^v[[KKK\ZZZZZZYVe
STWXXZ]ZZZ[v^vw]]KKK]]]]]]]\X7
UVXZ\]]]]]^wvxw^]LLLb]mn]aa`Yc
VX\]a]n]]]]yx
}nnLLLozznonnn`c
VY]nannnonnb}
}zzMMM{{{z{{ppkc
9:40&0*
Y\mnozzzzzzy}
FJHHB>0444@8>
6U`mo{||
"Ykpu~
~sssttutttutrrd#
_dlqqssuussu
JB>???BB
B:4/**( %(%8
! $$''''')'''%
**%((%&( (
$''''% !!'-13
5;9959553*?>BD>B>>>>>8.&&
$)1335>55522/'(--2
;;;;;::;2*
%)/48=;;;54--(-22:
C=<C=EA;;2
%-35?CAEAA>:29-9;;=
fffffffEE<,
$)35<FGggffE=;;;=ECf
jgf<E<hhhj
wfQcWK>
xiUcl\M
64/u<:2
64,vD?6
n\vOD5uD>1
OC3vPE8
k-ZklQ0
Lvw({=YLEA
:4ano
U'N?M$
#l~6`i*
4xoO}9<
-y.EH}
7ZkhZKi
!EYrxx
#C9I[X/
vm]sQ%
`;;;iA
gZ@=,RF
22%jIY
<Tm[lj
[7xo$=A
XOf-yk
aeF O)
n~U74UK]
3X+nP]
/3_T"B
hQlo}h
a~9-?GM
u&sKfE
p)!G,
BGGg x6
F<"f+z
&?3N?U)
Zr||L?
X8\{4e
s^fXSK{
w@Ai0
b?7k-Mp
_fn^h
d2aoo/
%'{sVu
^I]7L&
,Tj*OR
VG#Zki
xLkimA
"g>_$zm
fCTF^w*
0Na[qy
5eYr|t
x'>j7i
<88L^@
I;coC.
Q*`Z,W
-9g/sD
SaWvJa
U]qeoc
C"E$]@
Ryr$(E
e6=A)XV+
SJsxxH
dUeMdQ*R
/H&!Q+j
:I"[A0
J7bk-j
EA)DLFc
F:jp"`=L" u
#%)wt0;
%.//qvq
Br D^>
t:WG.}
GGGkJ@#g
E:SJX.
1\JQ\a
/\IJd{
J}?k-^{
{\\\`!
k190,v5$
}<s4C3m
1+@( 5a
J2eeg$aC
;DA|rQ
B]98Au
MY`DHC
)ro9"LFc
Y,o.>D
+8gsv@
*SI|'1
"(Yn;
C\^^b2
,"qJ<a
=9^QRNJ01"
*\]]a2
1;_c5i
b6?@3j
[WJ1S|
:'f+UH
Xk@dpu
3EP%d2#:
syOON
'899A]
O=T;S"
,DD8;;
MLy!YY
J7D8=;
.\\pTZ#
ZTtyy)
LUysG[
______________________________
_]cfggggggggggggggggggggggggfb]__^W<ABBBBBBBBBBBBBBBBBBBBBBA<Y^__`7FLMMMMMMMMX[[[[[[[[[[[[[VF7`__a;IOQQQQQQQQKGGGGGD?90+'
I;a__d8HNPUZUPNNNGGGGGGD?90+'
H8d__e3EJS&
&TJJJGGGGGGD?90+'
E3e__h/@G%
$GGGGGGGGGD?90+'
@/h__i-=C
CCCGGGGGGD?90+'
=-i__k*6>#
">>>GGGGGGD?90+'
6*k__l)1:2!
!2:::>GGGGGD?90+'
1)l__m.455555555
(+,,,,,,,,,,,,,,,,,,,,,,+(
Rp__jrssssssssssssssssssssssssssrj_
______________________________
xwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwy~
ztpppppppppppppppppppppppppppppppppppppppppptz
sqPOSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSOSqs
uNW`bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb`VJu
vE[deeeeeeeeeeelnnnnnnnnnnnnnnnnnnnnnnnld[Ev
|EYcccgkmkgccccaXXXXXXXXXUQMHDA9720'%$ /cYE|
}CX__f^,
,^f___XXXXXXXXXXUQMHDA9720'%$ _XC}
\ZZZXXXXXXXXXXUQMHDA9720'%$ ZT@
+XXXXXXXXXXXXXUQMHDA9720'%$ XM=
RRRXXXXXXXXXXUQMHDA9720'%$ RG8
*IIIXXXXXXXXXXUQMHDA9720'%$ ID5
;FFFDXXXXXXXXXUQMHDA9720'%$
1=BBB:"
":BBBB#
&6>????????????????????????????????????>6&
!(34555555555555555555555555555555555543(!
0324;579999999
+?IJKLOPQRRRRRF9-D"
N9*<A@BCGHMNNNNNE9
(-,.1:68999999
F]b`a`b__^^^^^^^^^^^^^^^]F
@futxsxwv{z
|~rkkkkkcID9*#
qsvgkkkkkcID9*#
pngkkkkkcID9*#
[ihkkkkkcID9*#
YVhkkkkkcID9*#
WUhkkkkkcID9*#
RTBJkkkkkcID9*#
5MPQ"QPN7<
%13K!K32.,-+++++++++++++*$
nnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnn
njjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjn
nkheeeeedddddeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeehmnnmgiuwwuuuuuuuwwwwwwtxtxtxwwwwwwttxtxtxtxttthgmnnngf5'66000066555755555555555555555555555555ggrnnsi'0<@>>>>X>>=@@@??????????????CCC????????7'isnnsi'<BAZWWWWYZABCabbbbbbbbbbbbbbbbbbbbbbbaC:%lsnnvj%=>XV[_`_[VX>@@99995<99955''%!
?<%lunnvm%0>V[^LHL^[V;=99999<5999955'%!!
?7%mvnnyn"04U]DJQJD\U4<<999<5<999755%%!!
<5!nynnyo /3TKDRqRGKT3859995<5999755%%!!
synn|t
.2TEDq
qDET20799999999775''%!
t|rn}t
IS1/7799999999755'%!
t}rn~u
N-.&%999799977755'%!
t}rn~x
FM,*$#
")(+++()"#!!!!!!#!!!!!!! !!! !!!!!!
{{{{{{{{{{{{{{{{{{{{{{{{{{{{{}{{}{{{{{{{{{
nnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnn
6FFF?+
.FC@@@@D-
)<<<<,F:/! *97
"""""%B>21=B$
';EE;&
.J2E[fgY?)H&
&^EdR5("2Oa?\
,VRiVfZ82)7DIihOe
6LXcafPGFF'
.$##..#QffNaaYY3
8ii;fhfi
ii1iiii
biiiiiiiiiiiiii<bhhi<
+S@====<====ThiNKfda]4,-ATUiN
;iiiiiiiiiiiiif<M`YSYafWAdi1
++++++++++Ni`<CPPJMB<[iN-
-bi`L>::>L[ib0
0Uiid[YdiiU0
0<TfiifT<1
111111
8jB?4Pht}veP4?Dd/
8pSNY|bD0$0Da{YGSp-
zaZknS?2***1?UrhZaz
!KKKd}whn~\PD?101?DP[tnhwe
!C;;;C!!C<;JUxso~qbZSB31Hjy}xn~os~,
:/.../<</..Xv{{qqrnh[NBHP
"`~qq{~R
U}}}`t{vsn_WG
`~`{~i
D~~~Q}}}}{sp!
6~Q~~{
~~~I}~~~~~~
~I~~}
Q~kfffffffkfffkhkffkff~~~~I{~~}}w|,
7~I~~v
I~~~~~~~~~~~~~~~~~~~~~~~}Qn}{{snmN
g{Q~~q"
OcNMKMMMMMMMMMMMMMMM_}~}g^{wsnf\dY9(=g~]g}~]"
R~~~~~~~~~~~~~~~~~~~~~{vIltole\Zkux~~iI{{~I
"""""""""""""6"""6",6t~{gRnnlea[behnnRcw~t6
I~vt^RehebabhhgR]vv~L
7g~ts`LXaebcbVL`ss~g7
7i~rrl]QLLLQ^los~i=
=g~~nllkhhhnn~~g=
=Qt~~~vnv~~~tQ=
=Qgs{~{t_Q>
>>>>>>>
U
???DAAA
ZZZNZZZMooo
]]]O]]]Oxww
---,'''
444S777
===)@@?
hhh6ooo
QQQ$QQQ&fff
&&&u...
1111***
666P999
===0??>
aaaEaaa
aaaEbbb
]]]TOOO
^^^Teee
5AOP<"
/LECCCCF!+
%(((( D90
,,,,,.N;'&:M-
3@RQ=2
,iWxb;
1_wEg"
?a]~c}kC8%7FKr
*<8<,,<_c{u}bZEH8++O
9#!!$ $$`
_wukgA(
?^ICCCCCCCCCb
`X}xqiQAMeab
5Rsssssssssst
}D_nkbfipfE|
@@A@AAABBBBBMv
nDW``__VCm
nZECCGZm
YYYYYY
4c>.!Ge
eG-">c-
%{bZsxJ.
3VxsXb{&
*=...=+*=..EV
xbXG>. ?Lmpvw
< <)$)2  <<
te[G>?I5'6q
leeeeeelleeeeleeelee
7S`FEEEEEEEEEEEFEEEEEa
weac]NBO
9T~~~~~~~~~~~~~~~~~~
xsdaXio{
B;;B;BBBBBBBBBBBDBBDD
dWwwsdbabdstwVd
ZJdsdbbbesdVZ
bEXbdbdbYEb
xt[GFEFI[tx
wusslssuw
YYYYYYY
!W|D"Vy
gojAajnaAS
GetEnvironmentVariable
-454901593
454936221
_ENABLE_PROFILING
_PROFILER
-192934876
192866883
-466918142
467067227
1818415504
1818424471
239507816
239468935
564737094
564747492
-1056442696
1056505341
-200831946
200869216
-1097027239
1096972988
488544997
488609046
1740181798
1740195670
-275230159
275098654
-252354046
252360428
411980466
411977158
-397263
444308
-1464771674
1464641379
-1914051822
1913935257
-660275081
660116463
26691182
26630268
-1673717128
1673738631
-1721834666
1721786252
1630344827
1630290192
-749123369
749010205
-1875661174
1875675405
665994487
666003199
700587159
700606478
-563987649
563893497
-1347900339
1347942456
-2130386915
2130329642
-30060244
30038481
-1653846547
1653774975
-1438668900
1438813918
-1299600258
1299612024
-427475370
427461253
1006947378
1006938166
-1128857000
1128930899
-106517314
106472570
677248595
677222572
-274395141
274241483
1422755231
1422760655
1548451371
1548423435
-2128097063
2128115013
-1328269617
1328108994
1298071871
1298030772
1850838251
1850846633
-615008709
615058842
1390138704
1390097676
-1779045178
1779070937
879484480
879442402
-286829265
286834422
-1277543774
1277503624
421837359
421825622
-1555223124
1555278346
1269857621
1269847686
-116525831
116536831
-1855705821
1855657567
-1450648997
1450591884
1065933648
1065913675
-740869942
741001795
1120917606
1120871465
167217285
167206788
-1329672188
1329686521
1203945457
1203943042
-1494824462
1494855315
791334424
791301495
126140208
126154643
-1811283393
1811408373
-1680476516
1680499240
-1439462385
1439463621
640820938
640836108
354698856
354684771
314965701
314885641
-356489089
356434065
-1908878220
1908929411
-11506998
11428928
-787424677
787402602
-729861582
729912659
-1435495680
1435477129
610154904
610169450
-1202266849
1202418324
-1560005181
1559871878
287663390
287661558
-1049101989
1049164994
1988440387
1988457820
533828984
533850161
-1127441290
1127449112
1182194520
1182141029
-752096412
752267610
1587945613
1588005021
672109637
672110712
-703836753
703764930
249472402
249449849
-1979564913
1979518936
-1595790752
1595928279
849041950
849021905
610209498
610141599
989238216
989310354
1301934493
1301848910
1916315842
1916392571
2140660332
2140585974
-477177339
477339816
-2075607502
2075464438
1312776405
1312802428
-1634437346
1634338086
-814781919
814917380
-683126977
683138981
438600501
438592347
982350449
982278066
583194086
583173496
-656744578
656719972
296449602
296455898
-699240812
699155890
-1548869065
1548825561
1420179427
1420218231
709368220
709431415
-379626775
379744643
-994643135
994773369
1003077587
1003027955
663564006
663560845
1371238018
1371226806
-554668596
554679636
1172709034
1172778986
1858409683
1858367743
-1102190508
1102254487
1924439586
1924402563
-1280397768
1280402485
-837983378
838025760
-1908476102
1908439539
1435010738
1434977744
377401299
377403605
-1148743696
1148818586
1759492503
1759458891
1941276781
1941304227
1652126482
1652048871
1092022001
1092091462
-96971304
96890815
-808638108
808659523
1100365947
1100423708
2117241221
2117254247
1664687561
1664680098
-708889875
708906621
-797646171
797587982
1754322713
1754323946
-38539798
38577524
1093801790
1093869337
-2068748843
2068710052
-133561422
133651801
1109799432
1109812654
-315749393
315728350
56432910
56365258
1608116638
1608057533
1814106388
1814119674
-615289432
615356299
-529854088
529921763
-721351287
721292824
763350737
763266034
-129903985
129971288
699632166
699650058
396100712
396126378
-115288340
115321444
770658038
770684611
1062166142
1062163387
1160724832
1160772285
-1992209646
1992188218
1834178655
1834190944
-1835168629
1835203267
702436339
702498782
-2140151680
2140260607
712527781
712517827
-1998791251
1998841095
1381400786
1381402068
1515758244
1515769675
-1252641042
1252758536
1504496714
1504493867
2069054360
2069084631
-1499756807
1499772440
2040107547
2040083586
-1596375559
1596330028
Antivirus Signature
Bkav Clean
Elastic malicious (high confidence)
MicroWorld-eScan Clean
FireEye Generic.mg.8720826b89bda1da
CAT-QuickHeal Clean
ALYac Clean
Cylance Clean
VIPRE Clean
Sangfor Trojan.Win32.Save.a
K7AntiVirus Clean
BitDefender Clean
K7GW Clean
Cybereason Clean
Arcabit Clean
BitDefenderTheta Gen:NN.ZemsilF.34170.Rm0@aOngQdkG
Cyren W32/MSIL_Agent.BCR.gen!Eldorado
Symantec Clean
ESET-NOD32 a variant of MSIL/Injector.VRN
Baidu Clean
APEX Malicious
Paloalto Clean
ClamAV Clean
Kaspersky Clean
Alibaba Clean
NANO-Antivirus Clean
ViRobot Clean
Tencent Clean
Ad-Aware Clean
Sophos ML/PE-A
Comodo Clean
F-Secure Clean
DrWeb Clean
Zillya Clean
TrendMicro Clean
McAfee-GW-Edition Clean
CMC Clean
Emsisoft Trojan.Crypt (A)
SentinelOne Static AI - Malicious PE
Jiangmin Clean
Webroot Clean
Avira Clean
MAX Clean
Antiy-AVL Clean
Kingsoft Clean
Gridinsoft Clean
Microsoft Trojan:Win32/Sabsik.FL.B!ml
SUPERAntiSpyware Clean
ZoneAlarm Clean
GData Clean
Cynet Clean
AhnLab-V3 Trojan/Win.Mardom.C4678009
Acronis Clean
McAfee Clean
TACHYON Clean
VBA32 Clean
Malwarebytes Clean
Panda Clean
Zoner Clean
TrendMicro-HouseCall Clean
Rising Clean
Yandex Clean
Ikarus Clean
eGambit Clean
Fortinet MSIL/Agent.VRN!tr
AVG Win32:PWSX-gen [Trj]
Avast Win32:PWSX-gen [Trj]
CrowdStrike win/malicious_confidence_60% (D)
MaxSecure Clean
No IRMA results available.