Static | ZeroBOX

PE Compile Time

2084-12-01 21:41:15

PE Imphash

f34d5f2d4577ed6d9ceec516c1f5a744

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
V11!-\x08>\x01 0x00002000 0x000066fc 0x00006800 7.99341158054
.text 0x0000a000 0x0000a3a8 0x0000a400 5.90688903207
.rsrc 0x00016000 0x000016b8 0x00001800 5.72938735905
.reloc 0x00018000 0x0000000c 0x00000200 0.0980041756627
0x0001a000 0x00000010 0x00000200 0.122275881259

Resources

Name Offset Size Language Sub-language File type
RT_ICON 0x00016130 0x000010a8 LANG_NEUTRAL SUBLANG_NEUTRAL dBase IV DBT of @.DBF, block length 4096, next free block index 40, next free block 8553090, next used block 511935363
RT_GROUP_ICON 0x000171d8 0x00000014 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_VERSION 0x000171ec 0x000002dc LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_MANIFEST 0x000174c8 0x000001ea LANG_NEUTRAL SUBLANG_NEUTRAL XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminators

Imports

Library mscoree.dll:
0x41a000 _CorExeMain

!This program cannot be run in DOS mode.
`.rsrc
@.reloc
-Hi|O
k*U[s$
V<c|}C
ID&d{yU
=P{({z
/_J:$o$
nGn5Gy
'ck<Zt
1}\)E:
G3j6uY
Iaw?QM
\7XUk[
;?z,[z
^Mv3s
J<-bWC,
C8"miJ
A4Z.q8
D4zaQ-"
Lf-*N7*_
kbbdkp
iwf4tT
pPncXP
I@wg[W
Hkli3M:s
e21PY*A
;_l\:Vb
)GnklB0G11
P;c*R4i
Fc;3w2
;U47DGZ
#.?J~%
t;?`xT
LU8ap5
'454I*
dYyFkP?
k#fdn
KZ R6a
OwZ bG
(<A9Z c
.Z T|m
_CorExeMain
mscoree.dll
v4.0.30319
#Strings
#Strings
#Schema
isfd0sd.exe
mscorlib
SuppressIldasmAttribute
System.Runtime.CompilerServices
<Module>
feAChJOVcgRjvJnEafFQrxEXxyhH,t4+F69wY)5'qRKoV$o8L/k[!
kOCUPwMeTRvSAXOTzABfeJdlMfJUA$a)Z"@D^#b&jj)qdM&b5?E[R-
PvVgJheypqTiWCoKqvAfJBBzfSzgAR6BrMiMUek`Zlfo8m2~xIxZ9#
Assembly
System.Reflection
gRlFFgDxyBHnXVznjuSYpuuhDVmIasWzw0,O-L%6-$U(9#m}s5z_)
.cctor
tubouZhjjxcUuCXBuOLGDJZsNoQzAk,?mr0A(1f3eJ>u4KT'Zy?3N*
xIIGTutbqchLqbvVdJMnniyKHMAzq'\'"WY[g'5a?^QnAL_k)F$0#
zvmEEWvzkjeJLtTYesmZQpSIihGy{wO4D,!q$4hEk^/[!Xp)TkY\'
VirtualProtect
kernel32.dll
hCDmrQUJaERLnlIxNywLoxUALZnMG[0384da:RUNsU)YBPo2j'*5#
pCSNSfypQVxABSevpoDjZtvDsoDDEVYzi7A):gr\a,{YMJ>exq-^
System
RuntimeTypeHandle
TWSufwKfeObJGCqUvEEWKymSxyKV)jt5G8d}TN<p_R(40<K$:c+z$
YkeaCHDxwnTXunGVzhceMOjoqqcSA`Tinz:w/uZOLfTUe=UBoGGdc%
MethodInfo
eifoFgPhqGjhMJoniVjCXGIfajwAA&T*G/:tCBIt-zk5cr9^RWi);%
MBLnhhjlPnbiTCByaKiphCMcAbbMBHZJmq'sza7NNfQsA[{-\LsCo$
MethodBase
vUftjGqCEdWlixmsoEFfcAPBjryBbwgOw~*}@E9)Ee1?bRWZfzJma*
WAXKiWUoZvAVqDuidFkRefStIoKjARYx_PrAdap$An1;_X7Y`EC)T#
aQIgpaeDUeENrYboDaLBPegAVhTn(e6[/MLL"0;xb*jB#n#wty'O!
Thread
System.Threading
ParameterizedThreadStart
JAKsjGpcDiWbuuHMsLwxaaZzNdjDRLmA&E1*r+q/#s>%/;*ZuXW=
OTLcbAIIMgWSWFICCDDnPDptgqLDHN<,p-bayvlbVC|45DPsC3B@
nBZExDANAqDTjPhQiAwccaDjIbgUBU%N?jRZ)s\&1=rs}Y?wRT4(A(
wZIHrNcFvscqwMKqwcJUJhWfkYcUAC6D#slmWu$'xc_r:p}j9<,[
YbqdXfEpSvgGfeWzFYbbGKeDrBGdCNg[~1D=pe2(sVET#=&',?oN&?
QkMCGJwscbTqXAnFnqiNXbuQYZVVpN!R|u9;G{-ZD|WC+L2 l%|B-
jOdaQMCtaVpdksUOmVucWQZmCXqZu6iVrl#,XkeK/n=y&<lJO83$$
TFdwPOBBTCLKnhDgpNuslWSgLLjg@Y*Q\Dj\J~q]Dy3^=IB0Q4gc
ekTzocpvYDGCpFWzvZegcWGGVoIG3bM_|1|!B95bM}-K?b<^&}&
pzSdnvBdAukEngsyqtIynOmaiYRvs$%g}`7h3~"aqg1buW$1K4HC"
EnfQyupOkvlbnpTtjqfqenCGOvIHZYKtGUDS} /;$KK?CN*D@V3##
UjAQTuEnJRiHEEyhtRcLjUfwTzvmAH>Blq1:NlF%temawpVh,_w1('
KyngtMESmspjTRZHsBUDXpsKyFdqf91&4XREQm`IHbmFtKtu^T;/$
HGxKItIkLTlRUbRykpGbZrQkgbvtp_wV{46n+^Z/w(ajKa'J7[I,%
heehcSlULDiiSEDVleTkvgwpmeDiA{E&sdNSRPG%2`-y#hwk]C$U2-
Module
LXuvuaKZVQevZNdFQyrDrhXJtkAgv@"}m4|j6_n~pt`_VmT:Xc+^
HHpzoFnlaGFXehIMgesQGzlEfkugbj4[WzN{el+g`@@cue0aM2"iq,
zbAYHkpolMoyEUXFfMccAghUelnM{,hZ[D&mvcrA20,@NYJ"TUby%
JVjPVBkRacsYScpBYhyqmeHPDwgi+c})+I7Io(6OV'+o9GO#v>&2"
hgeBjDDYOZmUuBBKGQxgGfGFzvxpAsOIG4K<8%0m R08A:G}TPi#e'
IbbOwavkIQfyHxubHqApDAIKdKLmX=T+?"(c8,Dg=*@WcJB0jYp/!
tnzbFSGgntObqSkXqJKoBAWIOELx5R[%j@lamae\~ly0GLEtXr~h
lcIfdTkfSZNWzVYwwGEbGXVdbhwI]b|1Hm$R!DADF1(:Yf06$ {2"
UMflgLAbhLGkzeBWpDbUVzccypszhf(k+!QIFY bBVquP2W] a@S#
YZbVvxZfpLvQuUOmEkateZtgAMEHVo1rST73)w/%Fq6Oqb$A[`pz"
igaBZobYkmlBWgKUsloDHuBAVBwy7J]#UQx&Q|8,i<]76Fv)JHK2!
byzyhsppXWLJVmnIEAnbDjMdNKCOuFeYkD188L,zSjTuz$2L;L|4%
VKfiHKmybRetXHLPmhJSwwSbxHNM#*50R$Co!s/0V+_)!TO)a~xz%
gYpNmjgIBzVMMZZzHiZiSPAKQXINO2&Sc,7TW+j7>AVDeq84D#Mz&
ResolveEventArgs
NnVaNjLPeetdwzMoRouzLNTEzfnL#=>S[4SG1E,m0K69;W)<t;}@"
cScZbizQqPlXdZHtvqsXTfNgmSrMo@u3=M?CDlqF~c(iY-~:}30g(
ictBtDvUTWfWOGVSmeqZdukiAXAomE${r/{@~htrY#oarPMM$vvu!
ValueType
HpCVziZZoWgniyFeXkVEPBALmcrJ>~N/E*%Q#syoG=@$,L|FRgjI%
mZMKzRxZivCXZWqbsuaVVRxceGEH3XHIH" $Wzh5){i,=H2OU&cF(
RjbWIFXrcxIMdcMAcDiCxDWEQwZpAtwU<n:^Y=t7=>:C{J8pV)1sP*
mfuWFthiqEGyteivAxRvxhGJumjrAs{6u87&Xm&Q[Wp~zwE~TC\E%
EImkHEEpsSgejgaiLGTbKdZdVojkA6EqtVBUWLS}TS1VbsC*X}/@[$
cvkBYGgvQeBRdBPqJGGLRxocZcZvcZqBNimdeHM~zu2\T"dCQu^V"
HBgdzsSLDVXtHGzcuUCqMtkSmBmT`gGC/BvbD7~00 cr9qna0<?i"
WNXYdzOHMBuBQHqkcfVAiUOclWGFbf;87KK#`h`7+nuq5x+)f*e4RE
luukUJzFyyvxWyAsROPDZqPDfrtdA(R")R)W"ek0F_afl/pNV:'ec*
YryDKzpJobkTPAmOuJFCssNllEhG\+mjg3f\SI%4,]&JPUe*a{o1!
gadmVUgJRBYjBWiogKEzioEQUKqi{R55)o:vXthVAAE^ELWHdF5}!
Object
IOQEYqbidaLSkmeWYtokQFkxhtpjn Z^_k?o?%Yea8L,y%1CA KU!
IIBnqlUkePOHKFjsURcdvlPdmpmW'b6uW$4EbR-86,' ,C5hSA=9/
hoVJvNwIaIGcJdHEgmkLGDxgsklAbCKPE~!*K+k8%#0">i6Va!Eo(@
Stream
System.IO
mshAgGOWQtLyOOjmtDvTJwWIGAdC3G&Ld>x_,2,0&5c3FT!)Bw!
seLBzPnONmbTPbyLhDUzeEbbhDwDA7HtCVKi^AlPmh0 ^Q7R=eLEa!
DhQwzOKbyEERRuaTlKFvvqLkHpVmDu@s|0Fyx%|?5%76VO$F]((<(
zEUJqrDVVmIpfuDOBGzRjTJOnQfos3pjKzVJw|$4]z:*d_=FBLVc$
OHwsAvyWOmobJsAUEneFjTNTsmkD-=w3*{f,[EX ^g!a6")P~35K
VpMCSqIQiSfOdYyEowaJuytIjpJvNT!`3b3mB#qNJ@&C'f9O-ixD$
yelhRWlyFNbfVTVErJEwHGWxnSgRu"7^Ze\4T;T;hpWd Yj@Wv1w!
xfidxhrayqxaBBXMmhtROFRcaoMC?&b}mC S/3H-<9O}:ZU!Aml)!
PpBdvAtFEyFdbTUcsjGEZJUpZJiXX7\}Nar!WQi#D7EJ&h!`3^~E$
cjXwrljCpCgVjSiJZXVKdTvUBnGn_0TaIcikzzUv=nL\-,wS8[2A!
QragTDbRKaioGiewNyIHTJVaNAbBb+2uv^YB%m{NkQ90V 4BBi(L3*
khaxQdFRQyDnLAaarsPJZCpYGETk?6G[ifZ+KbHf}i,Y>vZ=|hv!!
gMjDKIlfFfHIOIFGAgcFRAhTYfkQk`,>ty<"yb~T6Zv}n>8iJUk4!
HZkRUbwgpcNxRJbpkcrWKBpsFBIDA#CmfO=s,3Hv!'GWC^G<i5Z6r"
yrFyjJpgEDbyjOgzBnhmxNKBnXXK5{PYZG?v0uWPlEPIUa0h\W01!
onjFcEluMBZOnnWCVKEeRgfhAJLz=37YXV}Z@:;weRzjQAbukvPF#
kuGtuoBrbTmBdoELoKWeCRxABFsf]/^1G8(s#yq]c<uR ;h0'~[<"
KHbivxvFUAzTMWPfUisjFCstMZYHAN&,*m)OPx)8THU^Sb(dU %!l0
bjuPeJlGTveHttVYJIuyvnAFVyag$@I:BU'FK"7,yp6xK2M6%@,w#
CbrgTLiiztlBuBtDTWrwyRzleMYxAj${\|]/(5r8/*2b-9OXAI-tt-
GLDAlhsHYeAgRlJcXaEdrOIluoyshtL>UgN@AG+e-W^)q6_rk$ ($
fYdRfqYYVBVJtDzAbBdTDoirapMb}*[-i~:1ljVBq`kv9VqU,y_7
oRNlqdnJimMguqrRcjgSQlimCbwFIdG{QAT"e0Iw$H79FlV?sLSv
zWFDRvgHafWljAymDjBGWylvYbcsA; `X{[NI[7ahEK|'nK_3_i\/%
mcYuEtuhmiMpqHKRCNWGQwTfLQzES8'wU=("_De%%RL<TXJBEx;O"
eJzBzxcwBKkzIEBurcviWsKPvXFjAaSs3aL7HR]DjL?yE!m}8l2Z0&
eVBWLKuqmcGSyzRSuAElsWgxJaRtI&<>~Iqu;>O\[n(|@5;yK7)j'
rliwZFdzoxpDjcBpziAluxVlcPIcA(z/)+9(YGd1C;*$+n_Eh7KbD)
mhHyJWoHWDfhsaNPAXFIXegUcNMjA?4BTH@Op45a,KV%~RfZ"+85X#
nqSKYltuxuEngslJCObPtYueeTmcgd@0>eE$0Ds/[_xt5e^3k]6X
ItMMjqRYjlLYodUTUgsWRCsNksZRbmvWoFdiO85,"F:ClH4"fsTV#
bPJuBesyNspwoqXqSIlnLeGqxXHN{abXC6=r,55U[c\1` 8t38:^)
YAXEeRJhJZkQlHDAegUwEVQNUbZHbb$J,XWwr`6o1PLC#)&dVjSkf#
NrspdjOxQuQjkeNQKUhbyOSSgUgUB)k[M6+h_IS! N`(N&K)T'TM&
ohnbdZaMHiAqhHvFtpXybRJGAEMObMKC*FCzZ7Y[k*ZGbgZp^!+BG"
XgfVZlBuYfbEEjStfywaNNsmTTtXbtSd/,J@Sd0| 3(o-,^,e@WA'
ylGHvrVEaPOPERvaQtEXgbCYEgYA?s!RKZT9(r)Ha~G*:k$Jfd/0
QKDjgWeUtdRrqIpJtNvCQxMKQbuQbGVk8[L({}SZ#P_]+`Z<X3o&%
SPiChBaraImRpoyMNQFoiVnHbakk|Twc:UymPq[]*-xD1{4I`11Y!
EPWBqzdxzfbKyhqEUxuDNOXOktXxA@ZnK{IG/7V Ay`F5[^2!d>=H(
QeXcyHfYRkgaUIVGqUhlxzTOhZIC4HbQbSulUOxDX\[h]!]1~"H|!
YFIGIRWRQBAQRElnrOPYAkislxAcb6*@LN^2|t8NHe59'3@(a1=yf*
WoGWeGYlwXgCVDyFoZzutFXAllmkAR}`3294wt\6-Ela=6]P<L<9W0
uztwSvaUEQAwlXYRrbpQbotHdALhA]**!?K{B6IkwJ2ky>{==zH4'$
KuzjHCAdbRgTgdaILzHFOvQYstyEA'R"T^ !gX^Sd/-!'_'E2r9V"'
iaPpXRdzNiTrSntqovZbaEQwmHhTIu!Z#((bAK7vo"=hQ_=0S-^*(
QVTjcpRFaJslLsCiWvrcwMjGlBGprSv/OxIaxq%J",>A<[eUhJ+p%
QnSPfBjBEXiqqFUlvxsVoYPRgOFNAhB\58(9))(?7h}33k>2tB#JX1
dkNmRTMgsPjzYQTbQNgkeNNuxbhXk1@"t)sGTC80fYJ(MKSRw1PC$
DpJvnAJJJGDLwGbWkpRlvImUvodWA6~'_t06^-l*)[6CZP5%oV11I'
oqNcxmULblFHxGHundljOrAFpJmXAqwLYq9z=;DU\NQ9K{/&pbzn;#
qIEUNfQOMeKWjctYkYdwCNUNaogk*8z8(XDb?J,3XVM<YIv-V3?t!
uTBcwXCCpwgKYZeunmZOuvVDFSiFY&foT`%(q}\2jq[&R7`zVd36!
PEGPFlrUFuDJPVLDRuzHgjNPBzpjvt@f}o&~uB)`oFBcTC#J<l[]!
tTtduPTENKqHUDlOWSogOAcXQtviW&UC^b-ZrWT><lrf/0+C-+4q#
kxoqGIoFFbLqnrjSqGwhHtZhBLsNAaM(r-,mb;e/1o`OGOee'3257"
OOWjCsAOVLRunWCEFquaabgWRzzIz <194b6p<1h8X0Yw:CK6%8O$
xUbZNJTmiIjVpHDCZcDAHSnOsEkTOCsBHI-Iz& hDXR^!O0q~RGe"
aKRKwHXDQRTEEIjDpxITGbDsgauJw#J4%N4%2@27vwEE#j6VM*ri"
FhVGkhxcNwJAAFTeBcKprpJYEsjXhop@e?C>7vD2|1FVwAaV)KO,"
KnCHgfNDyXGlNEXXKSpPgcAsPLwDAV,ZQc p7~3('J@+KYjcfW%0?+
PwsekoycidwFKfObPNhArFHSwiVJ4 G7Gw{N}m0S|@0~FOc-F{<,!
tOFgCuTQlBBVCiOnDONhGTOiFhhjA&5dZCV!,T!'-l5|>0=jxk"qM#
rGRBfqFsJXLOmbOudFaHgeojSArHB]Pd?aM/XL>wv<sks%H;=#%4}0
KKLhyeDFzJKjhgTWyTZABAjnmvncZt1Ik^F#Rrseh;KhVT/@c}/o
ePmJKtsKVOFgtIKoMAZkXDOChqKFA{L=ziES)TCq^|U-Za{%hT]9+%
gLKRAPEgyEEUhLiETnBLVpSdxOrE[-5-++]3')nV+iP(8|EYwQ9b
GTdyiIJEKArLLRMxJFTiGgEuPhSGA#B9&)E@B|D<ad_4@MKA453s`#
aFwDapaLpBQvRBccYDmJiMdGfqad[,o@C(| )6)Z-,T66WNL~G(*!
iaHdozoTGQbbYAjRpGcrtnmKZWffA"fJa7AO#>w8%kLk_<q$W\X!1'
fToLDqgrzlURPymxQJAZuXrMVVNn1no2e{Pied-bi{f|-8Q$n+Qj#
MuUdCvapXsazKSagyRJSuTlelOXGb8|dJ9B]Ni,8+YIctO~VW(&rN-
VxmdneHoMhOGlaOnKUoUebmLiOfmbh 9O9];xER3=ji!(AfOM$;l;(
TgJymPrLOotfTUGiaDhSejSRSJXDAD3Fc2D&~g7B`X&Ae6\G%Nrz2#
glZHhaHLLHKxhiZaOQJssCIaKKLH9*)YS!%zTt%$q;%p-M=B"Lnn%
eVoAQgWITsTXYHBSMkibTZRMGKMNi QpO^Cz}d21tXDS'Uv\\\%#'
xiCstfaOHGEfUNBzctQIXjbFBNyJAC=%"9<ilT lDnO$rT:bC8R2E$
DdnVZPOtGsIjxfGdIlpbbWtVvlAHRN1^rHTvOx(i8yhs1g, DAxX!
MSfYSaVEUPgYSQDXBcdjKrjdqVduA\|/F3lyv62TVY`xEAP7$}V#_$
QjmaPadRtrNtPQbjQgdecGYOmmTuA|0{~$s$Soa@?rwV=Ecfd-iG!%
obGjZeRwVuWuFDhWLocrxNfqUSFvkB@n=_Z8,E@y8%Z&Y^Gk&TJ<$
HOLkKcqrQUvgHqdznWANrLnQYFZOxKp%Y aX)s%tQoA^Y653DRJH(
KcIzoEujmgWkEJnspwhHZhGBvuhWh-NMVK(OK7)>TaoGU'j+>tG//
qvYdPrjUrsnJwEsKlGShOXcbuJWKAI}lxaF4= 4[)I#sbQ*T7U#%2(
BDDHVMfXCPNgNDoYkzbpcWAdkewiV)6\lItx8Ht0gpg=gY$%?(?L!
QRBTKnVJPLuJbTIuhORctjkPBIikTf|xw\TK2U*nOtgp=/,W0<CR
hkfWZHgRzsgoNxdYcEbRyyITOKcyix]Jb4O7_?Xu/ZkY)^/xFnUm$
Process
System.Diagnostics
vTckaNkgBxESWoxxBDPWVZaNFCpp/ay7HMGzePni}qt0TN8]l`"I!
KSgjcGmdoKVBLzBSLxnWaViVHWjtHP[Yh$G(n^DksL@K!;&S|!7s$
iEPElFLocgNGusJkJLlYZqLYJiutAeVuZ2!1YrU;Y7l}JCbZr;b*%
EBCYSVoZIUqKbgORDAuBDHgWyTsS'-lF\G/X+BS}uvjSR8ZM+4(s!
ATNgKSvZNhbzyjzWWhfzKDBmvrNWT42jv(FDGc/<aFn{I6|~C;5F#
yTMzUJrsGfGJAwhqvQHblZjxDOEPGBVPRJ;jA`X\C]]TYUeuS)}\#
Encoding
System.Text
KeXgKQUnRdEClDBYFJUEsdzZXyRYZ"FJ~TV)eJ/av~F>jsE{0{:t!
wOhELSYmFFDsjAsbZlPYKOygXtM_N0pY@[lXw)su*U@:hV?v%&&
CRllWXOHNaDKilHLzIWEcHPqERRS!$yWDv1:UZi/IP=t%q7bwZb!"
tkEQGxSoHSCDNaZsBamuTCWtFCFMAO?JRM2zt+L)BrCHqo)^Vi<8X$
WJBrAINuPESiRaoQBfuwdTGPXEOoA!?x<v/6f0(5XKX6'kiB!p?6@2
WebRequest
System.Net
MSDgyVGjSRgpJEJfIMzyKQIGzoBJAB9`QvV@phu6~RMB=#OV++-?l/
HttpWebRequest
kWOfqwmnGGOBOBDlMkrEmiWoLakFykBca7]T>^|0K >Sd$,aCt,A!
WebResponse
MIDoUAUJWJbaZiLLqLaIJTzvjiLcbx~^^)FU^~YhE!\=_lzF($*4l"
yWDAArdTnUkHdRSyYxQTDBqpaOox&@@pY +"xpkmpOB&LEROYvU{#
Random
IjpnxPemlGrnMyQHgrgGrjtwyVzr\bQ$z'AC)" zM' *b7&*$P{A
GGabDBSNAZvssAwbHCHpQToZljge)g%3>R6%BOcDOp\Z/B 0!kSt
WebClient
qfgapvrxDfQPOkluAPSnxUweQWduS+oS/S(h1j0DC;rvc(}?_p4,#
GJSRYQtPVYkXjIoDsstypwiEBvxF`>pRb7(4!v}t+j5A$q,;:tWq#
bVqryrDbfPhEzjzibNXkzlnhGpzEAoK7&w9XE^d#qgeY0is_A5*C$'
NTcIZDXnqVHFXGwBLOkbgmbFFIIiAXQ}nD-0S2!RdVZJuePwMzX4+%
ziQamCifmlfEqCoFCkVfHqRzCgArBMR#=~G(cGH%K*4;^+Cqvh>mR,
ShellExecute
shell32.dll
vnUBRSCSSwrnJOegrfoYRAdTDeHdbwWj#-M:8Oe'0W MwXljSh](~+
kGyjPQFJSVaomBrolfmgatznDLTy,C %J2ZxZ3k4py3?KJ"A(052%
PQNeccHvIbdDVEroosHzhVrJkqrKAJx`/wH!'mx38=,]VV(V?@QC71
KjCXRhlvfgGmlxJesFAbzRaeEZSoP6b~a:ggC1UZuua~/[&s"H]d'
WwquyxgjGhcAbOkeMxkTWJOHwlkQZioGm2}`,b1PZYXM9J-tPc?W'
XXxDtsRqeuHlzREBHVtWvKOXjGRubz[7[4kU}Q?@an#whV7PPt%J#
QmJXqfFlPNsUieLPqDPWkzgzjEdVz9p&Q>:f2!w-cXi~V!sE;LVQ'
NipPgKyfBzgLzcGKNPlbASVUdGLKA#qYnv?6PIBccJB|QQPn\%#!6%
WhBiBIlgunFEwgwgsaguudQTmdkfA2&-bj&o/_t%37KAU$g1r#Q} *
pXISiZoDXodWRBSCQGWNESeyXUfoA*k! N2q`wJBZVzv2]'~_"z]7&
HttpWebResponse
hHGlNdkYctCzvANXmdeTDDkGonOsy`+pWgD,?Y_IF#& "%~=r$/%,
LtXVELMxZRSCDaucgsFZmDiQUZcbx{~fLN/T@xfc?_uSB,8?@J:+
StreamReader
fQHaBTRhLesAzwABkCTJXViYhxKVIHZ1FLn@}{UCDF{RT>|]Rsn !
UrIsUzqfMyCHRXQEZSGlVpSBAWtvv9jg kt\9TX~:@nxKOj^vn/s!
NOmwdAzdrwLagOOOkWjuoVHjIKNPt}7QX4 _u&_jZTSU'q(8Yptn#
TextReader
JfiCullOqZRCtAeiDMBbsCGWpakB!G8V7*~e-6:%*uOd^]H~&&E3
IeUeTFHdIvMLuWBMoOwYTSUZjiyvALjn2`Oy4$+?6\!uIMVJHBA_5&
xmhtVjrpwvuiJoUCmnbAuKlwcIcJ&&5ow**5Cst1AZ?"#HG [(3*%
WrUEOXeJLRzNEcsCeZlCVkJDNSjBbv7D8BTR6^!#!SVa]XX]x@T:]'
gNOdEmuNPNoqCkflqeBRRExJHuFx_~zC[INZ%&Jkb_a*R#|ax/<_!
EjbQdteGkGKOpWghTSubSVxjjwVH+@"2o7SbvZ]#>W)VQXX]Y]xS!
jMkBiJBYOAKkXeKbcRJVHTqlFfWgA*WUo+I<br?-j~Ag#PQBAK*v9"
BOeahmLAwKzSjUcpZEbqwGwCyLFy|wwsE2%;:Go!w7P{?Kb(8ltG!
CsUUudkuFPFvyUiwaqpiCDwVrNYE)_`:I]?J4buzs7OKKx~7FSrg
NHfBsIwCCMJoFQdPmXrUIdeSFkPqH[c+Pw-_h)-\T-=d\8j L5f%!
PIavBCSTWKUTmZQVXHOSSNtfjNhv<wsXZ&j0%z)q|J-zAZFeYNdO,
YLAoEZHRGytSDEklGMAeTRWKtNukP#>Dd/%T,x6)>YH>1G+NjW,5/
nvgRqXjPxWkXjCZlzbbJpBGaRPTnSKWAp7sQlz_3)iG?tEWd,)Fv#
nEwZYDIELjZFvYWKQOvugPlLsFub"_fd:^>e<ZtJxfen*$@8gm8&
TVdGGuzqIKLWkhbazohupsYGTQJFl(}),5\P^hiMfsKS= t<\2Dk
!5t#f{nM!blU`rYZNR {{j"!
Attribute
isfd0sd
CompilationRelaxationsAttribute
RuntimeCompatibilityAttribute
DebuggableAttribute
DebuggingModes
AssemblyTitleAttribute
AssemblyDescriptionAttribute
AssemblyConfigurationAttribute
AssemblyCompanyAttribute
AssemblyProductAttribute
AssemblyCopyrightAttribute
AssemblyTrademarkAttribute
ComVisibleAttribute
System.Runtime.InteropServices
AssemblyFileVersionAttribute
TargetFrameworkAttribute
System.Runtime.Versioning
Environment
String
IntPtr
op_Explicit
UInt32
GetTypeFromHandle
GetMethod
Concat
Invoke
Equals
FailFast
set_IsBackground
get_CurrentThread
Debugger
get_IsAttached
IsLogging
get_IsAlive
get_Module
Marshal
GetHINSTANCE
get_FullyQualifiedName
get_Chars
MemoryStream
ReadByte
get_Length
RuntimeHelpers
InitializeArray
RuntimeFieldHandle
get_UTF8
GetString
Intern
GetElementType
CreateInstance
Buffer
BlockCopy
AppDomain
get_CurrentDomain
ResolveEventHandler
add_AssemblyResolve
get_FullName
get_Name
op_Equality
Replace
GetType
GetCurrentProcess
ToString
Convert
FromBase64String
Registry
Microsoft.Win32
GetValue
Create
set_UserAgent
GetResponse
SetValue
DownloadData
Combine
WriteAllBytes
Exception
GetResponseStream
get_CharacterSet
IsNullOrWhiteSpace
GetEncoding
ReadToEnd
op_Inequality
Substring
ExpandEnvironmentVariables
Discord Link : v1.0.0-custom
WrapNonExceptionThrows
isfd0sd
1.0.0.0
.NETFramework,Version=v4.0
FrameworkDisplayName
.NET Framework 4
ggg {{{l
nnnl```
KKKhKKK
1rrrv|||
dddg___
qqqvQQQ
1fffvppp
$$$!~~~
zzzA&&&
{{{k===
NNN>LLL
***O O
vvvVttt
'''G{{{
{555g{{{m===
zzzj555h
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
<assemblyIdentity version="1.0.0.0" name="MyApplication.app"/>
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v2">
<security>
<requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3">
<requestedExecutionLevel level="asInvoker" uiAccess="false"/>
</requestedPrivileges>
</security>
</trustInfo>
</assembly>
VS_VERSION_INFO
StringFileInfo
000004B0
Comments
isfd0sd
CompanyName
isfd0sd
FileDescription
isfd0sd
FileVersion
1.0.0.0
InternalName
LegalCopyright
LegalTrademarks
OriginalFilename
ProductName
isfd0sd
ProductVersion
1.0.0.0
Assembly Version
1.0.0.0
VarFileInfo
Translation
Antivirus Signature
Bkav Clean
Lionic Trojan.MSIL.Stealer.l!c
Elastic malicious (high confidence)
DrWeb Trojan.PWS.Stealer.31267
MicroWorld-eScan Trojan.GenericKD.47186266
FireEye Generic.mg.592bff278b2bf255
CAT-QuickHeal Clean
ALYac Clean
Cylance Unsafe
Zillya Clean
Sangfor Suspicious.Win32.Save.a
K7AntiVirus Trojan-Downloader ( 005801c61 )
BitDefender Trojan.GenericKD.47186266
K7GW Trojan-Downloader ( 005801c61 )
CrowdStrike win/malicious_confidence_100% (W)
BitDefenderTheta Gen:NN.ZemsilF.34218.eu0@a4pRpbd
Cyren Clean
ESET-NOD32 a variant of MSIL/TrojanDownloader.Agent.IFK
APEX Malicious
Paloalto Clean
ClamAV Clean
Kaspersky HEUR:Trojan-Spy.MSIL.Stealer.gen
Alibaba TrojanSpy:MSIL/Stealer.a68f9bf5
NANO-Antivirus Clean
ViRobot Clean
Tencent Msil.Trojan-spy.Stealer.Suxv
Ad-Aware Trojan.GenericKD.47186266
Emsisoft Trojan.GenericKD.47186266 (B)
Comodo Clean
F-Secure Clean
Baidu Clean
VIPRE Clean
TrendMicro Clean
McAfee-GW-Edition BehavesLike.Win32.Generic.lc
CMC Clean
Sophos Mal/Generic-S
SentinelOne Static AI - Malicious PE
GData Win32.Trojan.Ilgergop.HA2GH4
Jiangmin Clean
Webroot Clean
Avira TR/Dldr.Agent.mqwiq
MAX malware (ai score=85)
Antiy-AVL Trojan/Generic.ASMalwS.2ADF06B
Kingsoft Win32.Troj.Undef.(kcloud)
Gridinsoft Trojan.Heur!.03011281
Arcabit Trojan.Generic.D2D0015A
SUPERAntiSpyware Clean
ZoneAlarm Clean
Microsoft Trojan:Win32/Sabsik.FL.B!ml
Cynet Malicious (score: 100)
AhnLab-V3 Clean
Acronis Clean
McAfee Trojan-FTYX!592BFF278B2B
TACHYON Clean
VBA32 CIL.StupidPInvoker-1.Heur
Malwarebytes Trojan.Crypt.MSIL.Generic
Panda Trj/GdSda.A
Zoner Clean
TrendMicro-HouseCall TROJ_GEN.R002H0DJE21
Rising Clean
Yandex Clean
Ikarus Trojan-Downloader.MSIL.Agent
eGambit Unsafe.AI_Score_99%
Fortinet PossibleThreat.ZDS
AVG Win32:PWSX-gen [Trj]
Avast Win32:PWSX-gen [Trj]
MaxSecure Clean
No IRMA results available.