Static | ZeroBOX

PE Compile Time

2021-10-25 08:50:37

PE Imphash

f34d5f2d4577ed6d9ceec516c1f5a744

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00002000 0x000b0424 0x000b0600 7.96261109378
.rsrc 0x000b4000 0x000a2e52 0x000a3000 3.38410252104
.reloc 0x00158000 0x0000000c 0x00000200 0.0980041756627

Resources

Name Offset Size Language Sub-language File type
RT_ICON 0x00155e08 0x00000468 LANG_KANNADA SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00155e08 0x00000468 LANG_KANNADA SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00155e08 0x00000468 LANG_KANNADA SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00155e08 0x00000468 LANG_KANNADA SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00155e08 0x00000468 LANG_KANNADA SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00155e08 0x00000468 LANG_KANNADA SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00155e08 0x00000468 LANG_KANNADA SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00155e08 0x00000468 LANG_KANNADA SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00155e08 0x00000468 LANG_KANNADA SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00155e08 0x00000468 LANG_KANNADA SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00155e08 0x00000468 LANG_KANNADA SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00155e08 0x00000468 LANG_KANNADA SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00155e08 0x00000468 LANG_KANNADA SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00155e08 0x00000468 LANG_KANNADA SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00155e08 0x00000468 LANG_KANNADA SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00155e08 0x00000468 LANG_KANNADA SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00155e08 0x00000468 LANG_KANNADA SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00155e08 0x00000468 LANG_KANNADA SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00155e08 0x00000468 LANG_KANNADA SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00155e08 0x00000468 LANG_KANNADA SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00155e08 0x00000468 LANG_KANNADA SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00155e08 0x00000468 LANG_KANNADA SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00155e08 0x00000468 LANG_KANNADA SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00155e08 0x00000468 LANG_KANNADA SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00155e08 0x00000468 LANG_KANNADA SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00155e08 0x00000468 LANG_KANNADA SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00155e08 0x00000468 LANG_KANNADA SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00155e08 0x00000468 LANG_KANNADA SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00155e08 0x00000468 LANG_KANNADA SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00155e08 0x00000468 LANG_KANNADA SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00155e08 0x00000468 LANG_KANNADA SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00155e08 0x00000468 LANG_KANNADA SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00155e08 0x00000468 LANG_KANNADA SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00155e08 0x00000468 LANG_KANNADA SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00155e08 0x00000468 LANG_KANNADA SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00155e08 0x00000468 LANG_KANNADA SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00155e08 0x00000468 LANG_KANNADA SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00155e08 0x00000468 LANG_KANNADA SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00155e08 0x00000468 LANG_KANNADA SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00155e08 0x00000468 LANG_KANNADA SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00155e08 0x00000468 LANG_KANNADA SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00155e08 0x00000468 LANG_KANNADA SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00155e08 0x00000468 LANG_KANNADA SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00155e08 0x00000468 LANG_KANNADA SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00155e08 0x00000468 LANG_KANNADA SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00155e08 0x00000468 LANG_KANNADA SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00155e08 0x00000468 LANG_KANNADA SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00155e08 0x00000468 LANG_KANNADA SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00155e08 0x00000468 LANG_KANNADA SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00155e08 0x00000468 LANG_KANNADA SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00155e08 0x00000468 LANG_KANNADA SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00155e08 0x00000468 LANG_KANNADA SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00155e08 0x00000468 LANG_KANNADA SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00155e08 0x00000468 LANG_KANNADA SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00155e08 0x00000468 LANG_KANNADA SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00155e08 0x00000468 LANG_KANNADA SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00155e08 0x00000468 LANG_KANNADA SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00155e08 0x00000468 LANG_KANNADA SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00155e08 0x00000468 LANG_KANNADA SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00155e08 0x00000468 LANG_KANNADA SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00155e08 0x00000468 LANG_KANNADA SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00155e08 0x00000468 LANG_KANNADA SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00155e08 0x00000468 LANG_KANNADA SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00155e08 0x00000468 LANG_KANNADA SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00155e08 0x00000468 LANG_KANNADA SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00155e08 0x00000468 LANG_KANNADA SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00155e08 0x00000468 LANG_KANNADA SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00155e08 0x00000468 LANG_KANNADA SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00155e08 0x00000468 LANG_KANNADA SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00155e08 0x00000468 LANG_KANNADA SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00155e08 0x00000468 LANG_KANNADA SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00155e08 0x00000468 LANG_KANNADA SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00155e08 0x00000468 LANG_KANNADA SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00155e08 0x00000468 LANG_KANNADA SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00155e08 0x00000468 LANG_KANNADA SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00155e08 0x00000468 LANG_KANNADA SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00155e08 0x00000468 LANG_KANNADA SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00155e08 0x00000468 LANG_KANNADA SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00155e08 0x00000468 LANG_KANNADA SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00155e08 0x00000468 LANG_KANNADA SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00155e08 0x00000468 LANG_KANNADA SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00155e08 0x00000468 LANG_KANNADA SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00155e08 0x00000468 LANG_KANNADA SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00155e08 0x00000468 LANG_KANNADA SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00155e08 0x00000468 LANG_KANNADA SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00155e08 0x00000468 LANG_KANNADA SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00155e08 0x00000468 LANG_KANNADA SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_DIALOG 0x00156270 0x00000076 LANG_KANNADA SUBLANG_NEUTRAL data
RT_STRING 0x001562e8 0x00000178 LANG_KANNADA SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x001567f4 0x00000148 LANG_KANNADA SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x001567f4 0x00000148 LANG_KANNADA SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x001567f4 0x00000148 LANG_KANNADA SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x001567f4 0x00000148 LANG_KANNADA SUBLANG_NEUTRAL data
RT_VERSION 0x0015693c 0x0000032c LANG_KANNADA SUBLANG_NEUTRAL data
RT_MANIFEST 0x00156c68 0x000001ea LANG_KANNADA SUBLANG_NEUTRAL XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminators

Imports

Library mscoree.dll:
0x402000 _CorExeMain

!This program cannot be run in DOS mode.
`.rsrc
@.reloc
Ivan Medvedev
XfYff
Xfa !$
Yfaa 3W
XfYfY
aZYff}
vkfZf {
ZaeX 0
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADPD
2JHV&!E
3Yn'.W_
oj2:(O~npm
/WPX<~8?;
f!]1<l!0
B%=b>
(`rvhq
uABjzky
2# 'z1&
>4iJ^m
kxB|lG
[.Is)C
!JE"ef
>WGN}'
C*WbU-N
PqO-"^^S
UajFWM
>VY<^eB9
=CLSe|w
.U;S?3
/&A_-@mB
.WY:tp
#}#SmF
Ic|mIU
"yYrjk&
}4=-b\U)#
~)%sgy
*T};S
Bl=)Eh
;J}v-{
*!lyXr
_`A%iF?
4<L17`
'\/djn>
;.r2r=M
uy/c!f<vl
;_+w=22
Qkk%jG
+RZu<Fy5e
HdGUTS$'g
1k/C-wv
ee0Er,7
,ZLZH96
8p(r4p
"y0.H{<
=1"lh%:p
55l@d0A
+RZu<h
cLw@^4
K3P#$]
R[,I%C
`SNl^c
14BcZL
lO{zD!
hX8Wlj
sNMcQj
~bgqA'
TQ:bO~
s.:6,p
&>gP?HP
}bIdXG
/k$#4D
-q" d.R-j
":0vQg
VB22$dK
1}]0]]
c3{L`g
wx;4M.%)
dbxu$;%
(JlE\0b
<DjtCy
ICZ%Q
WER=gd
gZ}tq|
r q*|UA
#|W<OD
\aXNHM
^]R@,w
&dWyVbD+
=i)7~kk
ZWvKI(
Y*m-/N
u"WG)w
sfx:e2
V('d9p
8S8M\Yh
VP>Y#v
Cu7y`l
{?p#iWA
xsshagY
c,/+Y`
:g#;W8N
%[1=-x
61CU?@
g2I[g]/p
A~UxB<
BYdg.}@
8h&Dn
l4:ePB
,M;,zO
[-a{B~5
Lxo=qw
,<}h)|yQ
r~*;\6
W[4_uI;;
8~3V/X
xg;$-X
5=XOMN:(
2kJ`$h
K(Wr:W
c'4)uT
4:\CsF
sWe),#
frbi}8
u5yF>"N
j/K``po
pU[,*9
MBV[sY
x!H2]z` ]
uOD{bs
M>b0o2
+2S|9yo.J
M's%:dS
Jt,V]9kg
@c!"d9`DI8
{Pq-%V
[h6](
&Ds[g:<
jCwxqU
2Kx&obW
K;Zv9qT
qZT=YZ1j
:tGO{`
[bc@pGs
a>UNR<_
H=\ACk|3
x*K`\C
/P"G)^
5sw0KX
=-pjbL
,ErSn>l
Zz:Du08
BxdjQs
gW.mvn
X+3iR]
XI`oSn
>UYpzs
>1PRC;
M Ex%]
>5~}q=
lg#I_(
7CG#F<
J=\Rkz
nU2&_tQ
RTTZK/
0VYyA9
<YEW}l126
\w3jLU>(
Ws,"dE
Xb;)wA^
*F21n6
LSDQ65Y
F[s0vM
K*j2=:
t<5NYq1
qAFAn&
C"xV.H
a>UNR<_
@5{s|eDW
*tIz/sQ9P{4
(!$2AS$
`V!)(j
ASq#?WY
3.z7 S
cnUsL0
DSB^(ic?
\.r4sX
$\6oq0
Nhsp&"
Ld~7+$
-[AZ&T
3/UAjg
MgsWZy9
GyzIRb
jcQ$/m
p!|=,Cs
GZDW)a
:%F%%_
0k1A z'
@H!dT+
+`DJEyt
SUp9*U
hN'AwaSsQ
G9Pmlg
)pY?Sw
eW{,~8V\
hPY_7K
tE93vg
i!Hm.!
q6-D][
yoAc3v
U*ty66,
~wU=tt
Kjs[G&`F
f;u`DH
4<fG"B
4!qX),
mjy<2~
tz#.w'
;%:Eq8_#
|yL ExS
VUI/='
C3h3Zh'm%)
mp!zap
|x'/s9
rx@Sh4
5f:k2?
6i-N")M
[cO`cS
[g'us
YF,|D\b.
L(?-4O
:MH@k0
jQVna!
GMC`,R
Ccy1l'
$3E.`)
N.!W K
DsFEh-
te_.C~FD
gbmY5_rV
6Qg {!
up+SE0
D_$:xW
n(:"aKL
5,*RXX
S/o->1
Pufk#Me#n
A;:BPx
@_'j!8
=3i2Z]|>
t&`U |;
^9e^Z:
)E9/F9
DW{OE1
d@>/e#
~|YK};
F^"il6
z"gZfZ
MH#!SO
w@xZ`xm
Lp\eIPw
$g}K}H
_jOv*I
E~_lcg4!
JRgK']
w"V>p6
oJh>JJ
yk`Y[=
}uQ9t]y
i/s:&t,
5O[Jqsw[
<,9P5`
A'vguV8
D[i0AG
-ooZ%d
W``GC
Mh5+B-
h"wzBG2
330#K3
fC%T~F
izK*p^
k`Ki@b
gTj&uw
i^(Q
Z>kJU{uv
7"],>.
bs.fSC
YAZoE}
E[Sj]d
#T4Z1$
}_pDF/w
oY]cKi
8&eoF}L
^hZ_uJ6
0)PIHn\Q
32Dgjt
h\KKSQ0
ZuqMUxCSU
p-q3i#
;CmvWi
_vSD1#
&L]:B[
Yad.wp6
7g=@h-
l#V;Clls=q
c3f|I(
Ke7~5|Q
K?S28NOO
zBz?f}
hz$54M
fN@4Q"7OZ_D
I\eM*q/
Y?+2Z5K
,R4IJF
2JX;.3Q,
e3S6Q
gTj&uw
MBiulq
+nJ}R6
Z+oM([m(o)
VP2y_$Gi
1BKJoL}
Wf.V@$
jdburl
!DtxK/P
_F3nS5
WD^'9G
/*[<^c
]$+Q(Ok
XE6OY\
TVV*gGH
&l|T
GWeVY'^
GWeVY'^
,Y!{\
E)LnB)boW
g0kxg&
\2=7b{
ac:v/g
+p8</3Gr
p'4l=6<F
{R7j!J
`{Ch1"
P)9*0{
JSZGe@
m4b ;^
E37&_*
.C+Tc(
Xw)7Dy
dKmY2I!&
,FET1
Na4+5%w
wu!jcOd
}UUjHdze
{NZEV
r^*5|_
n`"~o_
hb+=AR
!>+ESS
_C3rPe
&9!o;,
2SJ@Bs
xzNYt_
]Bel+x
AM<<j4
W?XZxh
_+kRGe
2G-?#}|@
SrvIcP<
#Q4/PaYQPqHX
^<P46-
r/9[g@la
Y+^I)k;"
dI&*'1
"z!A"9>
wH0ntH>
^=S1;j
d?gK>,`
FwN|U.k
<ab8eq
LdVeV|
/26o/&]E
fnT`ob
P2*._j
Dsxb68
np*Wv)
=kK*^<
.dXhul
[UUjHdze
kT[:s1
j;f]Y+
__c~sj
ksaq?c
v_@$Sa
cBMHOD2i
b%1Y8v
A++GmP
~$<%s0
?Y1+|g
NXwKx]
R [ln
%fR2JF"r
yg^O_A=
HG&d30
wvK;K2
\q?#85
MD0`01
4`rh"Zy
LrN]z&
~Rnp(~
&/!;r>
ph&PY
g!PRms
\P~_p<2
hW@c4]|
!Q*_63
I<b)#s
I*B{6.
Q*v2;!^
o:R8Ql
$"P:ZD/
B)IiF<
c3f|I(
p-q3i#
:S/n\I
#=a'Oa
CPg2&]j
;0WZ8oq
C!m8bt
4=Vjcs
L)Jd!M>D
Xp1{2c,
3-G#jCWk3A
1?8Fx;
('t3CC
%`m?n;_m:>U
HSq>a|<
96Ns?c/
S047bc
)p=Rb^@
oX\_`1
26)}!3
/-?8R-
}h3o7
c2jHMde
_fM5#
ni$ES&
F;SLwo
o"kcd1P
A?keX#p`
O}7B{t
@L1D4!
? eH=z
zo@ pz
wnm/f!
uLN+Sh24]
k`.%1u
(`=&eP9q
"0rEo1
IHCLJ<;
g="}2.
]B?U:
^d+Njv]
z6Y]5.
@Xc7_`^
(Itj:$Di
aghG,t"
tPHj8>
l5PJgv&
sqIc/3C
wo#K?a
,Zh8J9B
,sf-WQ
vR_`+de
@fn.Ls_
%B/x@J-V%
cuC4\}
hP3UDt
wlUM$lvT
MDedF^^
/Cb@'EH
(E+bJ8s
f,F:=A
H<nBK5
UY~^tR
u]Jsw#5
a4n3sFK^
KlCb^2R
-gSg`|
MA]EQB
qk%P6y
m5\*[_
4wz~ VI
7;_76rit?
:>aUKp
G=xxWiX
?;i5X\
-`B\*UJR
;G]b3q
PXeI|mYE
H`m*9p
^1>ti=
CkZX^ywu
"a\pya
th'3mbx=q~
A[S;}LP
tq2#Qi
~GCfF;
D(~r6Q
"1q).6D
X:B6L_
O$K)%B
7m/^R=
i"T(:^_
R4P)hbFe
CNJb8Ys
P#T?O#x
]'!`_{
5XB"C=T
'mti2u/
WVg*&#@F
(PBak'9
o[5'^n
y({q
_O:4ad"(
iw4A<q,
u7[(XH1
:<hv>
i#MIM
"Y@,ju.
;@qD[a
`leBjw
}"%+>}
q$`o,/
)=1lmh
Zi!_?K
^=S1;j
x2UM1e
qaiQ0;
bJq5-jv
F;lg54o
nRn29A
+jkVLMO
@}KvC0
C{%Kgr
)~UP-"
c3f|I(
6(b-xZ|,
+edC@-
&fAXC9
+jkD>>NfS:
PORd$5
J1>beeX
INx{n8
tS&xR4
/=jNFx|!c
} $u_S
; *$MEA5
!dM(RE|/
5X(xU0
D??AF6
in<tK\
Ad"+3{
;/Zu|)
Xv9Q_
6}"t8-N;p+
15xdRqp
4}+g;(1
V+`"1ls}
b-\we'4
{R7j!J)
v|AGtS
d'<NUm"j
*\8`w}i
XDwc-W*
sPIsN}
pP6_mU
_4h6^~
=[SCwK|g$
%Vm3 EZ
fQI :D'Z
pyg@!+#
`lZa&R
\%Lfg1*(
|/9 gN]
TH^e*v
&zI1Q21
#'Pc$2
y}Z%oM
*T0fO"
*k-0Fs0
p_NH=t1
Zt7~4.
HZ02C?]pg
qWt'|8
5Wn1*R
pl`z(
||cRPzy
A@.k(7
=vg,Wv
kj5N1d
c~P&"i
l\HNeX
Wqv/}=
TJl{*5
Qlb"$<3
5r[!)H;
um~fxL
#;2,kr
]JKZVU/
O_"?+.hvJ
tb2TnN+
8IjI>H
"S67_W~0
<0T:`{
P66Z(C
d{yM[y
8m>(Z"
5UzFrq
2w4(KB_
2?zdiSb8
dpsN!`
%{nQDr
JpZ"vx
dL,J/gA
!2zJ<}
riUytS/b&a
42kFfa1
db\eCP
|^F+dh[$?Z@n
Dqy']S0
]!jM^G
s;RKu\
M;6ltR
5pYb-A
;uGrss
o9crjr
?>z2$l
uO}JC^I6
[{4)?=en
/o]VCx
xPYpLzv;
wyJcH^5
mLe&<P
\VTO`'
-^#FYD4Xn
c[8|2|qH b
G(VR7@
4R vQ$
T/UA8C/
C6'9")
3a1TEI
OcI{dv
ZCovt@
%Vr{p";!
w(xyh:
{58.Vt
E44|l
pzu9MC
$2e7FW
zt#rO2
hKwNEnf
za_\J)!
Sw@`b=
NtqYHp7
<tYz!:
apXbm|
JT0$2D
>OQM-5
XNy;GPwrB
}fkB$@
16.UvQ
K;;QD@3
7LiN /
'w}rdH&
V!qv*:w
XnGpg
iYB{>R
SE2qIs
``qs8q;Ra
92 G|L
ajQ>]'k
V/F;!!
TCNIS%
f5W-88
zdxx41
mNA~s78L?
8l0E[]
I9]qWk<n
2V1hk
X=GnnN[p
)8G4+*
FZ^a~$
d7aPDr
"E[2>^
^i0s>S
~N2{B7z\B
v7o>.h^
\)"{$k
]J`TEK&
Kq^h59
8;YR6F:
i]ilk+
;$\E8jd
|8zE[\
&`=u^2:
D.sAdR
/WC,4Kp
2H(#jcl
2H]\Xn
cPsu$X
:"SXO9y
/)S3kd
Yd^+II(h
D63TB`
!YlCmy
S0`:{T"H
9cj\ks$6
mH6PPwH
PbF5Xs
^GT-R.
9"km?>
G{?,L]E9
+/4D/p
|@z3B
n8PIo#
iSb_&e%
ApVH7f;
up/*qv
6(L(5{
</u>ZwM
(2JM,;d"?
oWr'y6
_SelgDi
*A#k8I
I:G-!S]
,lmO[zi
F;:P=<
e~1IMN
;+DQqT{
$R^HqcR
6D3GO)\6
SMa+bsJ9
pWNl5@
|P7*@K
es6A7-
BI$fOC
u"$<7'
.Nf>3
C_pDs%4|
lJ4%g=o
Y2AwTrN"
8#+6$S
[R{D2
x7:,|m
G$&[ce
i$yE]C
*yNTg"
'Qef_@
M:Ll\U
.Cb\m2o:
%;PYTh
4qFTi\
Z7e5n`)
&[j1imq
CP5'N,
X"tk<`
m6Ja_o<4]%
M99*Y=
D$V=,%/uR
'Kv-.j
804|A^r
xbpJ{"
;:g6;E*
ppYo^Z
C7 1dp
/deOL^
T8mtua
ULL2#;
,y5.H^}
8Oust<
:t$H)n
=|-FW8
gxw \QK
x?Q(~$]~
'U?XBK
[<8J=T|
>opTdD
. O pH
jL[Uac
5aihFF
GO3/vb
)phzX|
$8zXkzM
j`JG'
_jy@,Vy
p'[gi`
`)wLoJ
KDhv'$
bJ`*!
1^GIvp
@w+eM
8rKY\
vFcGp6=R
LU?\2$|
KqSHGc
|6"Rl
ge^4D@Zc\
3mU&=
XcHnbh
D4dV]!'
VwANaK
?-PTI\
yzUzn|
iiq|dP
PWYN[\OG>
&`D8u9o
^D;{%I
<4-X;^y(
'&+kd;
8h<PFS'
Q5pJvn
j'w!'
.P~Nak*"
AxZJsR
"zLo9W
`([HV,JPde
Z]K\]`
!r.C2@Ty&N
K kx>z
rTYRlY
p;]A~^cG
XEqQ?a
|U?vPKZb
dA"y3tE^55
{U|?V[6
i<mnYp*N=d
L@rF+r
3j96V'"
}@}6<O~
cvC6-y
"%+dO3
V2'OwIP
KDr(I
n8b0Kl
ZzV{C"
|d%PSI
5E:njT
`;aYx\"
n+N)@(
[[z(m:y
7 2/pNcJ7
/%`oA-
CJ*9v.S
h(T\+m`2
+[*||D
B}EWa#'
aa#+.Q+)
`a~8aC
eUM95}
Tkb?He?c
H0;ytj3
%T(U$V
:Wea^w
lxs)]AY^@/nW
R9V,2M4t
VC5Jpm
?Z9c:B
:pwTk'
WBG>"i
("RTSO
^ZkjvK
7U(#.$
v)|R)!
a7MPT7t]
0lE?vu9
'<`!*?
8M=aNX
dS8>rA[
>4hp6ee
cm|(D
cg\"MO
<Dlae5
HL%? /$ds
:;M{R.
r{`s~w
k#x;",
Kat(E\
Z/d_.|t,~
ygNS6;
V\=NQZ
Uu= Z&~p
Rtr6\ 0p
u(D]cO/}1
!$s1|}
Pz#Q{s
'F_{(v
(i*Wrg
IWVnmiA
JTxA*y
M5J?{n
q|mF[|
`fa{Gj
9~l{o\1`X
'^Ux3%hc
k>^)0%
DGehK&uF
Hmw6[~r
]VQid|
kJ{F1Y6
8-Z r5V
&Kel#)
HMbJ50
@pqT$K
CjOU+h
_iUnkV[~1D3
4mJ+v~9
oz%3<%
eS&{uq8
'1>ju0
[bvo5>
fQJA1<
yUTS34
nh2=J
dz"u#MI
2*,(cu&3?
!n})'tr
Z(3_B#KT<
bLy3Y#dh
V8l=<Z
uVbA1H
;x;7snq
rgBk&q[
TQypXy
&w&8]3
/1m)c
WRT^Vl
63&a-Q
2n3CSlq
D>R6R4
@v.e|3J/C
UhwygA
M;D\W$y
}4(L3Nj
Zy&lVe
zu{,D,
&-B(F@
agIO<_
%ZKO8x
,SS1V|
whVnhT
"4J<tn<;
(Hrw9[Z
yMD]t<
|CyZ7X\
-7s\3J2
fvLA]iY
Om3a][+
!;J'b3
qM{w:%Ay
=*Z&9pt
Xf27lA
0]R/9Ghs
|3xb9%
j^PS.#
/.VCo)
f %AmQ
^~:()9<
6x>?[7
Y @?Le
hv[_YZ
\X83-+
wcB \M
.4SglK0\A
s1(df9
h'<$+Mm
N<(= o
FbIQ-zM
kj|H;E
jieypfu
B!0Vl(
yh0p)AZ
F7nG{h
S@l`9E
`2l;H*
Sjc$a!
?so45q
**1?)h=
KUz#oH
$jV+N)94
g5sxH0
usF%t~
++aMJm
j]sZ*Xo
dB<7mF
3]ap*Tj
BO(Pf\
nUS7"<=
OI0t}8:
Z9z{pk
);F_4G
y*k{i3jN
CZYU.]
923~Y1
SWnBmO
w5e/)B
/Mh?j+
qbij\UO
<fpZg+>
`oD,4C
Y\<q5
I!qp1-
:U,<qvM6
'Ot7[
Ezhi.5E
KV'Ege
^>.IOL
~B@6 H
KUxs.e#we
,G[u&n
r6E%,#
cPNO:c
)WYMB:
zuS:`o
!%FJNz
3g^\*p@
?!V^<&
kQG[`X
IGX-4d:
psLE|e
4W_7sW
3Kb&:/0
`?iP1=
J^yDyd
q]w*ff[
n(eV1D[
`dtyE
4(*urQqY
bQ\GR
):!B6M
|*.Jz7
3P*g0@a
jpfpQ{
9Ibmff
Cji Eg
Fy<\0Y}[j
k#Tpi
^ q-mp
5 <x^r$
8~X\]d
W-*c}sj
B<A;JR
=!j)C~@
f]=;/$
Q#wd,K(
,0J)CW
Jxna:Z
oksxo
>%Oz}]
jiEC5NR
#u&sQP
|rioV@
\toHyr_L,e
a!&K5;|
3>E@*^_
s[obve
7;'eD,
Db,K-=
*Sr6z^
-p+VI*
8DG)c@"
+2~Em""
E04#>1
.DD-}D
-56a\A
+:xNgiab
n3rv[n
$JXu'[{
0>"Z_-
QA?IXI,
[f_Z}9
ck*Pbs
Y/4tm
8Lmun(
\o5W?K
a";j7O
Pyw0-[
?k5*id
<0sABp
E37`|i
d32u C
"_A=c4c:Kl3<
'kxQG8.
nx+opO
znu<DO
gH{RPR
<agLC2}
=4nH7gK
Xmt)08
*|EIUDJ
Q^W2qIgy
ULxsO>)
E]|e6J
^b5R_\
{ip2sr
R.=3$^
t)D\NMo
v4.0.30319
#Strings
#gdfgdfg#
#dfgfg#
#fsdfsd.dll#
#fsdhcfsdf.dll#
#fshghhhgfgggghdfsdf.dll#
#fsdfgdddddfchafhghgsdf.dll#
#gdfgdfgf.dll#
#fsdgdfghhahffdsf.dll#
#gdfgdfg.dll#
#gdfgfg.dll#
#sssssssss.dll#
S400_X0
<>9__267_0
<Read>b__8_0
$$method0x6000022-1
IEnumerable`1
ToUInt32
ToInt32
TreatAsI2
<field>5__2
Func`2
<>m__Finally2
LOCALE_SDAYNAME3
<>9__191_3
<>c__DisplayClass3
<GetOrCreateValue>b__4
UInt16
ToInt16
get_UTF8
<Module>
WIN32_FIND_DATA
FieldRVA
CSIDL_COMMON_MUSIC
COR_E_CODECONTRACTFAILED
COR_E_PLATFORMNOTSUPPORTED
ListFileDefMD
ModuleRefMD
SEEK_END
ERROR_PATH_NOT_FOUND
ERROR_FILENAME_EXCED_RANGE
LOCALE_SCONSOLEFALLBACKNAME
NULLVALUE
INITIAL_SIZE
get_ASCII
ReadInlineI
NTE_FAIL
UTF8NoBOM
GetTimeOfNN
Get_SCOMPAREINFO
System.IO
S_MANREGISTER
MIMECONTF_MAILNEWS
Bne_Un_S
set_IV
COR_E_OVERFLOW
MS_CLR_40_PREFIX
SLEEP_ONE_FREQUENCY
REG_EXPAND_SZ
SizeOfInitializedData
Get_IsUninitializedData
CultureData
AddressOfRawData
M_daylightDelta
mscorlib
get_IsCharSetNotSpec
hgdfgdfgc
System.Collections.Generic
get_IsStatic
Set_MessageId
GetProcessById
_numRead
lpNumberOfBytesRead
hThread
get_CurrentThread
thread
GetStubIfNeeded
CreatePathPrefixIfNeeded
RijndaelManaged
get_IsAttached
Set_IsConsoleEnabled
NoResultOnFailed
IsCustomAttributeDefined
TmUnderlined
Is32BitPreferred
Async_ExceptionOccurred
Get_IsDisposed
Get_IsCompressed
Unstarted
Get_Observed
Reserved
gdfgdfgd
fshdddddddddghd
BindToField
SkipChild
set_IsBackground
DynamicMethod
DefinePInvokeMethod
ResolveMethod
GetMethod
Standard
NetGuard
IsIdnAce
get_IsInterface
Replace
AddSpace
TypeNamespace
GetNamespace
OnlyAllowedOnce
Sequence
LoadResource
FindResource
SizeofResource
GetHashCode
ReadOpCode
SetCode
set_Mode
CryptoStreamMode
CipherMode
get_Unicode
Xenocode.Client.Attributes.AssemblyAttributes.ProcessedByXenocode
IPEImage
EndInvoke
BeginInvoke
AssemblyOSTable
SortedTable
GetEnvironmentVariable
Enumerable
IDisposable
set_Visible
HaveWrittenPreamble
Double
get_Handle
RuntimeFieldHandle
get_MethodHandle
RuntimeMethodHandle
GetModuleHandle
get_TypeHandle
RuntimeTypeHandle
CloseHandle
GetFieldFromHandle
GetTypeFromHandle
_checkedConfigFile
StaticIsFile
Console
get_Module
DefineDynamicModule
set_FormBorderStyle
set_WindowStyle
ProcessWindowStyle
get_Name
EnglishEraName
C_UsedFileName
CompareName
lpApplicationName
GetCultureByName
M_daylightDisplayName
KeyName
AssemblyName
GetDirectoryName
LastWriteTime
Assume
lpCommandLine
WriteLine
Get_IsPrivateScope
EndInliningScope
DbiScope
IResolutionScope
Get_Type
get_FieldType
DefineType
BaseType
CreateType
ValueType
get_DeclaringType
flAllocationType
get_ReturnType
get_ParameterType
VariantType
Get_ElementType
S_callContextType
DataToNewType
Refanytype
System.Core
Get_Datastore
ResolveSignature
SetLocalSignature
MethodBase
_CodeBase
Dispose
StandardDate
Create
CreateDelegate
CreateSymbolReaderDelegate
MulticastDelegate
set_WindowState
FormWindowState
STAThreadAttribute
CompilerGeneratedAttribute
OptionalFieldAttribute
UnverifiableCodeAttribute
UnsafeValueTypeAttribute
BabelAttribute
SuppressIldasmAttribute
HostProtectionAttribute
SRDescriptionAttribute
AssemblyInfoAttribute
YanoAttribute
DotNetPatcherPackerAttribute
BabelObfuscatorAttribute
CryptoObfuscator.ProtectedWithCryptoObfuscatorAttribute
DotNetPatcherObfuscatorAttribute
DotfuscatorAttribute
CompilationRelaxationsAttribute
SmartAssembly.Attributes.PoweredByAttribute
RuntimeCompatibilityAttribute
ToByte
WorkStealingQueue
LicenseFileValue
HasValue
SetValue
OpenSave
get_IsAlive
Relative
rparmgejep.exe
get_Size
columnSize
dwSize
Set_RowSize
SizeOf
fsafafwwwwwwwwaf
fshgdf
fsdfhghfafgsdf
TokenToTypeDef
ResolveModuleRef
GetNonNestedTypeRef
GetGlobalTypeRef
get_IsByRef
V1ToStringFlag
gfdfffffhhhhhhhhhfhfffg
Get_LocalSig
System.Threading
Descending
Encoding
M_encoding
IsLogging
NoInlining
InterfaceMapping
FromBase64String
OutputDebugString
ToString
GetString
BalanceMatch
FtLastWriteTimeHigh
Get_CharUnknownHigh
ComputeHash
get_ExecutablePath
GetFolderPath
Get_UserPath
ObfuscatedByGoliath
get_Length
DataLength
_ByteLength
c_maxKeyLength
UseLeapYearMonth
GetAscii
CheckAuthorityHelperHandleAnyHostIri
GopherUri
IsCharSetAnsi
AsyncCallback
callback
_optionsStack
FlushFinalBlock
TransformFinalBlock
M_block
localVarSigTok
MemberBindingMask
InternalOptionsMask
Illegal
Marshal
SfcdSScbdil
Get_IsCallConvThiscall
kernel32.dll
Control
IsCOMObjectImpl
CryptoStream
MemoryStream
get_Item
System
SymmetricAlgorithm
HashAlgorithm
ICryptoTransform
ParsedTimeSpan
TryParseExactTimeSpan
get_MetadataToken
GetMethodToken
hToken
Get_PropertyToken
_token
FileNotOpen
lpNumberOfBytesWritten
Set_NegativeSign
_AppDomain
get_CurrentDomain
CheckSubTreeReadPermission
MergePermission
Application
get_Location
HasInstantiation
NineRays.Obfuscator.Evaluation
ProfileOptimization
System.Reflection
ManagementObjectCollection
RequiresAtomicStartTransition
CallingConvention
RuntimeWrappedException
ThreadAbortException
GetDynamicILInfo
M_EraInfo
TaiwanEraInfo
FieldInfo
MethodInfo
AddScopeInfo
S_currentRegionInfo
startupInfo
MemberInfo
ParameterInfo
_EventInfo
ProcessStartInfo
DirectoryInfo
rparmgejep
Notonerep
AddFixup
System.Linq
set_ShowInTaskbar
RealGetDaysInYear
Get_FileHeader
MD5CryptoServiceProvider
DESCryptoServiceProvider
MethodBuilder
ModuleBuilder
TypeBuilder
AssemblyBuilder
SpecialFolder
FallbackBuffer
lpBuffer
_buffer
ResourceManager
Integer
Debugger
ManagementObjectSearcher
AllowHexSpecifier
M_defaultScheduler
CreateHelper
IsBaseOfHelper
ReturnParameter
PdbWriter
get_IsPointer
BitConverter
ITokenResolver
ToLower
GetTokenFor
STimeSeparator
ManagementObjectEnumerator
GetEnumerator
Runoperator
CreateIterator
.cctor
dotNetProtector
get_IsConstructor
CreateDecryptor
IntPtr
AdjustHour
System.Diagnostics
AllocateMemberDefRids
GetMilliseconds
GetMethods
Get_Interfaces
System.Runtime.InteropServices
System.Runtime.CompilerServices
System.Resources
get_Resources
ReadResources
rparmgejep.resources
GetCachedAssemblies
EnumerateDirectories
bInheritHandles
ReadFiles
EnableVisualStyles
LeapYearMonthNames
Set_Lines
Get_s_systemTimeZones
M_ignoreTypeLoadFailures
CountCaptures
GetPropertyCandidates
lpThreadAttributes
MethodAttributes
TypeAttributes
MethodImplAttributes
GetCustomAttributes
lpProcessAttributes
HasSecurityAttributes
Rfc2898DeriveBytes
GetBytes
Values
CodeStartOffs
M_Flags
BindingFlags
dwCreationFlags
GetMethodImplementationFlags
SetImplementationFlags
Get_InitLocals
Equals
StrongNameUtils
System.Windows.Forms
Contains
CallingConventions
get_PEHeadersOptions
GetMergedPatterns
FieldRVAInfos
get_Chars
MatchChars
GetOptionalCustomModifiers
RuntimeHelpers
GetParameters
_GetPublicKeyParameters
get_IsClass
ReflectionMemberAccess
AssemblyBuilderAccess
hProcess
GetCurrentProcess
lpBaseAddress
lpAddress
EnumPermissionSets
GetRequirements
GenericParamConstraints
InternalExists
ReAddRows
Set_WrapNonExceptionThrows
Concat
DateTimeFormat
ManagementBaseObject
GetObject
object
Select
flProtect
Get_Product
CharSet
GetScopeFromOffset
CalculateShift
tmWeight
M_strCopyright
op_Explicit
System.Reflection.Emit
SetCompatibleTextRenderingDefault
StrDefault
IsDefault
IAsyncResult
result
ToUpperInvariant
Constant
SystemDataOracleClient
System.Management
CheckForColonInFirstPathSegment
lpEnvironment
Get_HijriAdjustment
Argument
get_Current
Arg_RegSubKeyAbsent
CheckRemoteDebuggerPresent
IsDebuggerPresent
Prevent
IncrementOverridesCount
GetRepeatCount
SetProfileRoot
InternalGetDirectoryRoot
ParameterizedThreadStart
FilterStart
Textstart
Convert
FailFast
MethodList
MakeSeparatorList
SpaceConst
AllowAnInternetHost
Localhost
M_deserializedFromEverett
SuspendLayout
ResumeLayout
MoveNext
System.Text
InternalAppendAllText
context
S_isTaiwanSku
ReadEventMapRow
TwoDigitYearMax
IsHexPrefix
InitializeArray
ToArray
get_IsArray
M_expressionsArray
set_Key
RegCloseKey
System.Security.Cryptography
DefineDynamicAssembly
GetExecutingAssembly
EndFinally
IsReadOnly
SetPermitOnly
ConstrainedCopy
BlockCopy
Library
CreateDirectory
Get_DebugDirectory
GetRandomDirectory
Set_RootUserDirectory
lpCurrentDirectory
op_Equality
op_Inequality
IsInfinity
System.Security
SuppressUnmanagedCodeSecurity
HasDeclSecurity
AtEntity
IsNullOrEmpty
198 Protector V2
System.Security.Permissions.SecurityPermissionAttribute, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
SkipVerification
WrapNonExceptionThrows
_CorExeMain
mscoree.dll
fffffff`
ffffffff`
ffffffff`
ffffffffffffh
ffffffffo
ffffffffo
fffffffffffo
ffffffffo
fffffo
ffffffffo
fffffo
fffffo
ffffffo
fffffo
fffffo
fffffo
fffffo
ffffffffo
ffffffffffffh
ffffffff`
ffffffff`
ffffffff`
fffffff`
ffffffh
:IDATx
:|p5ARy
ffffff
ffffff
ffffff
ffffff
ffffff
ffffff
fffoww
}IDATx
+=BDD<|
ffffff
ffffff
ffffff
ffffff
ffffff
ffffff
'''''''''''''''''''''''
'''''''''''''''''''''''
'''''''''''''''''''''''
'''''''''''''''''''''''
'''''''''''''''''''''''
&&&+.131.+%&
&&.33.&$$%%%&%&%%%%
&%%%&%%%%%%%%%%%%%%%
3+&%%%%%%%%%%%%%%%%%%%%
&$&$&%%%%%%%%%%%%%%%%%%
%%%%%%%%%%%%%%%%%%%%%%%
&&&&&&&&"
&&&&&&&&"
((((((((((((((((((
((((((((((((((((((
((((((((((((((((((
((((((((((((((((((
3''%'%+'%'%
-'%'%'%(&%'%'%(&
/'%%'%(&&&&&%'(&&&
%%'(&&&&&&&&&%&&&&
'(&&&&&&&&&&&&&&&&
''''''
'''-''
'''''''''''''''''
'''''''''''''''''
'''''''''''''''''
'''''''''''''''''
0&$&+,,*$$
,&&**&$&$&$&$&$
.*&$$&$$'%%$&$'%&
&$$&$'%%%%%%%%%%$
$&%%%%%%%%%%%%%%&
"&&&&"
"&&&&"
%%%%%%%%%%%%%%
%%%%%%%%%%%%%%
%%%%%%%%%%%%%%
($"((($"
*$"""#"#$"$"#
""%$"####"#"##
$"############
"#$"##########
%%%%%%%%%%
%%%%%%%%%%
(#!""""!""
#!#"""""""
""""""""""
##########
##########
+%&'##%(&%
##########
##########
!!!!!!
!#!!!!
1IDATx
y5??|u
oe2XZK
OHRIu?
P@O=Vp
+Ix5;w
RHH)t4f
ffffff
ffffff
ffffff
ffffff
ffffff
ffffff
########
########
''''''
'''*''
$$$$
$$$$
3IDATx
,@DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDU
-565u]
Ry]na/
[1drYS
>;;mJ9
/_>9Y
DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
<assemblyIdentity version="1.0.0.0" name="MyApplication.app"/>
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v2">
<security>
<requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3">
<requestedExecutionLevel level="asInvoker" uiAccess="false"/>
</requestedPrivileges>
</security>
</trustInfo>
</assembly>
rparmgejep
GetEnvironmentVariable
_ENABLE_PROFILING
_PROFILER
Area =
{0:F2}
87654321
managed
gCruuNmBAw2VEedNRWiBhunnOdCzpxG4nQsaON/ugQiN7Dq2iXuLHZzGDumzqbL7lgxmDYw+ZSG0DQyqgHcM23IoPNJuVG2dFQpqoUX56KxKB3m0oOsCEPZP1c7TdkR+
rparmgejep
native
update
NX7Tb8nuePRtwAihgrB2gHNbiwc4TtLTumLy0QRzaSdSe7oWO28jSwVA//aNK6rH+6/kLNH/RBMpfoZ+cZFGYflR6RSqrpo+8gbGHgQddZmhrdSssIpdH/3BJ/qMQ6+ZHF2pobg+WaHbBprJ/Da4iw==
update\update.exe'" /f
3urZpF3Aw3eeC7dx6rzRUg==
update\update.exe"
Select * from Win32_ComputerSystem
Manufacturer
microsoft corporation
bbbbbbbbbbbbbk
mmmmmmmmmmmmmmmmmmmm
bbbbbbbbbbb
cmd.exe
9xIAlmQdVwEaMIy/OpvtyTZBJ7zA450K0wnbIfJglAzm8f1U3/OO7iZtmi52byfK
9xIAlmQdVwEaMIy/OpvtyXbS7alVLXZEY1NAR38wL1dDXyIs6cBy6q4fMoGzlXFN
DynamicDllInvokeType
xw+1nQe6ToHaBbbWwjt5EA==
CIbCsmimIkAL0yfKXvO7PBovZF9IumOrSdS7vEVSwYw=
2ne6jjwvFb6nswX6bDyFm9m6dsZXj+4QF+xh9xygFcr8PP7BCwtd+BaBwAEmhmIN
w3ahxKbFWkIDKXLO0diO30xxpRt9iQF7wMPSEVyj0cuSDIK6Yd8ropvB5Jt0UxwS
sJ+/7/SO380dFtQILgd5r3cD3s6bZ2ipmFMkcvsOniLzAOzKRNOF1RlLnqXpeKAj
7IH2PLJItTg2i4n5dYctpITXsZqgW2ppofS5bq8H3ck=
UA59bobvMiodKsmWGbr/U4YslXQrvmRAeyI4THqbyFT0GEkfRJv9fwxklh9npVDJ
wdQ59mSbhlMvQzvd2LbOFtJT4YChYKdI3gEwczCideTqt70QObCTMRhyLiiZszra
ieejSFF8K2SVDPh21r1S1vd8dt8ihDrDoOecFa1qatHcOP6jVzRsNWDZINXcXh3w
/ileqh8NwflVN9dsr95iIrofNT7LcUTh8swz43dl3Fc=
X9vzXMX9TTVShgPoRVX5PgcuS0vEaImjPbXGGUCGg68=
G57yZuukx8Aein0hA0lIOQI8dPB/9W2EcOrHpstN5XtRTsIvEkBIkWjDAp/o0kiB
PuTTYConfigBox
PuTTY Configuration
MS Shell Dlg
Select destination folder
Extracting %s
Skipping %s
Unexpected end of archiveThe file "%s" header is corrupt
%The archive comment header is corrupt
The archive comment is corrupt
VS_VERSION_INFO
VarFileInfo
Translation
StringFileInfo
000004b0
Comments
CompanyName
FileDescription
LimeBinder
FileVersion
1.0.0.0
InternalName
LimeBinder.exe
LegalCopyright
Copyright
2020
LegalTrademarks
OriginalFilename
LimeBinder.exe
ProductName
LimeBinder
ProductVersion
1.0.0.0
Assembly Version
1.0.0.0
Antivirus Signature
Bkav Clean
Lionic Clean
Elastic malicious (high confidence)
MicroWorld-eScan Clean
FireEye Generic.mg.517aa302ce274d9e
CAT-QuickHeal Clean
McAfee GenericRXQK-ZC!517AA302CE27
Cylance Unsafe
VIPRE Clean
Sangfor Suspicious.Win32.Save.a
K7AntiVirus Clean
BitDefender Clean
K7GW Clean
CrowdStrike win/malicious_confidence_90% (W)
Baidu Clean
Cyren W32/MSIL_Kryptik.DMC.gen!Eldorado
Symantec ML.Attribute.HighConfidence
ESET-NOD32 a variant of MSIL/Kryptik.ACNA
APEX Malicious
Paloalto Clean
ClamAV Clean
Kaspersky UDS:Trojan.MSIL.Tasker.gen
Alibaba Trojan:Win32/starter.ali1000139
NANO-Antivirus Clean
ViRobot Clean
Rising Clean
Ad-Aware Clean
Sophos ML/PE-A
Comodo Clean
F-Secure Clean
DrWeb Clean
Zillya Clean
TrendMicro Clean
McAfee-GW-Edition GenericRXQK-ZC!517AA302CE27
CMC Clean
Emsisoft Clean
SentinelOne Static AI - Malicious PE
GData Clean
Jiangmin Clean
Webroot Clean
Avira Clean
MAX Clean
Antiy-AVL Clean
Kingsoft Clean
Gridinsoft Clean
Arcabit Clean
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Trojan.MSIL.Tasker.gen
Microsoft Trojan:Win32/Woreflint.A!cl
Cynet Malicious (score: 100)
AhnLab-V3 Clean
Acronis Clean
BitDefenderTheta Gen:NN.ZemsilF.34236.un0@aSwYakfG
ALYac Clean
TACHYON Clean
VBA32 Clean
Malwarebytes MachineLearning/Anomalous.100%
Panda Clean
Zoner Clean
TrendMicro-HouseCall Clean
Tencent Clean
Yandex Clean
Ikarus Trojan.MSIL.Crypt
eGambit Unsafe.AI_Score_100%
Fortinet Clean
AVG Win32:RATX-gen [Trj]
Cybereason malicious.b03a07
Avast Win32:RATX-gen [Trj]
MaxSecure Trojan.Malware.300983.susgen
No IRMA results available.