Static | ZeroBOX

PE Compile Time

2021-11-01 18:32:46

PE Imphash

f34d5f2d4577ed6d9ceec516c1f5a744

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00002000 0x0005c4a4 0x0005c600 6.39129055557
.rsrc 0x00060000 0x0008b7da 0x0008b800 4.55742879272
.reloc 0x000ec000 0x0000000c 0x00000200 0.101910425663

Resources

Name Offset Size Language Sub-language File type
RT_ICON 0x000ea134 0x00000568 None SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000ea134 0x00000568 None SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000ea134 0x00000568 None SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000ea134 0x00000568 None SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000ea134 0x00000568 None SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000ea134 0x00000568 None SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000ea134 0x00000568 None SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000ea134 0x00000568 None SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000ea134 0x00000568 None SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000ea134 0x00000568 None SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000ea134 0x00000568 None SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000ea134 0x00000568 None SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000ea134 0x00000568 None SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000ea134 0x00000568 None SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000ea134 0x00000568 None SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000ea134 0x00000568 None SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000ea134 0x00000568 None SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000ea134 0x00000568 None SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000ea134 0x00000568 None SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000ea134 0x00000568 None SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000ea134 0x00000568 None SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000ea134 0x00000568 None SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000ea134 0x00000568 None SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000ea134 0x00000568 None SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000ea134 0x00000568 None SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000ea134 0x00000568 None SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000ea134 0x00000568 None SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000ea134 0x00000568 None SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000ea134 0x00000568 None SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000ea134 0x00000568 None SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000ea134 0x00000568 None SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000ea134 0x00000568 None SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000ea134 0x00000568 None SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000ea134 0x00000568 None SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000ea134 0x00000568 None SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000ea134 0x00000568 None SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000ea134 0x00000568 None SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000ea134 0x00000568 None SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000ea134 0x00000568 None SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000ea134 0x00000568 None SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000ea134 0x00000568 None SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000ea134 0x00000568 None SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000ea134 0x00000568 None SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000ea134 0x00000568 None SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000ea134 0x00000568 None SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000ea134 0x00000568 None SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000ea134 0x00000568 None SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000ea134 0x00000568 None SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000ea134 0x00000568 None SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000ea134 0x00000568 None SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000ea134 0x00000568 None SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000ea134 0x00000568 None SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000ea134 0x00000568 None SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000ea134 0x00000568 None SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000ea134 0x00000568 None SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000ea134 0x00000568 None SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000ea134 0x00000568 None SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000ea134 0x00000568 None SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000ea134 0x00000568 None SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000ea134 0x00000568 None SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000ea134 0x00000568 None SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000ea134 0x00000568 None SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000ea134 0x00000568 None SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000ea134 0x00000568 None SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000ea134 0x00000568 None SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000ea134 0x00000568 None SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000ea134 0x00000568 None SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000ea134 0x00000568 None SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000ea134 0x00000568 None SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000ea134 0x00000568 None SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000ea134 0x00000568 None SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000ea134 0x00000568 None SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000ea134 0x00000568 None SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000ea134 0x00000568 None SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000ea134 0x00000568 None SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000ea134 0x00000568 None SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000ea134 0x00000568 None SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000ea134 0x00000568 None SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000ea134 0x00000568 None SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000ea134 0x00000568 None SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000ea134 0x00000568 None SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000ea134 0x00000568 None SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000ea134 0x00000568 None SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000ea134 0x00000568 None SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000ea134 0x00000568 None SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000ea134 0x00000568 None SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000ea134 0x00000568 None SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000ea134 0x00000568 None SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000ea134 0x00000568 None SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000ea134 0x00000568 None SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000ea134 0x00000568 None SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000ea134 0x00000568 None SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000ea134 0x00000568 None SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000ea134 0x00000568 None SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000ea134 0x00000568 None SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000ea134 0x00000568 None SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000ea134 0x00000568 None SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000ea134 0x00000568 None SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000ea134 0x00000568 None SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000ea134 0x00000568 None SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000ea134 0x00000568 None SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000ea134 0x00000568 None SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000ea134 0x00000568 None SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000ea134 0x00000568 None SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000ea134 0x00000568 None SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000ea134 0x00000568 None SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000ea134 0x00000568 None SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000ea134 0x00000568 None SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000ea134 0x00000568 None SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000ea134 0x00000568 None SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000ea134 0x00000568 None SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000ea134 0x00000568 None SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000ea134 0x00000568 None SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000ea134 0x00000568 None SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000ea134 0x00000568 None SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000ea134 0x00000568 None SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000ea134 0x00000568 None SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000ea134 0x00000568 None SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000ea134 0x00000568 None SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000ea134 0x00000568 None SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000ea134 0x00000568 None SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000ea134 0x00000568 None SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000ea134 0x00000568 None SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000ea134 0x00000568 None SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000ea134 0x00000568 None SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000ea134 0x00000568 None SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000ea134 0x00000568 None SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000ea134 0x00000568 None SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000ea134 0x00000568 None SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000ea134 0x00000568 None SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000ea134 0x00000568 None SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000ea134 0x00000568 None SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000ea134 0x00000568 None SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000ea134 0x00000568 None SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000ea134 0x00000568 None SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000ea134 0x00000568 None SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000ea134 0x00000568 None SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000ea134 0x00000568 None SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000ea134 0x00000568 None SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_STRING 0x000ea69c 0x00000178 None SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x000eb208 0x00000014 None SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x000eb208 0x00000014 None SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x000eb208 0x00000014 None SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x000eb208 0x00000014 None SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x000eb208 0x00000014 None SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x000eb208 0x00000014 None SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x000eb208 0x00000014 None SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x000eb208 0x00000014 None SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x000eb208 0x00000014 None SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x000eb208 0x00000014 None SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x000eb208 0x00000014 None SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x000eb208 0x00000014 None SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x000eb208 0x00000014 None SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x000eb208 0x00000014 None SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x000eb208 0x00000014 None SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x000eb208 0x00000014 None SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x000eb208 0x00000014 None SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x000eb208 0x00000014 None SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x000eb208 0x00000014 None SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x000eb208 0x00000014 None SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x000eb208 0x00000014 None SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x000eb208 0x00000014 None SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x000eb208 0x00000014 None SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x000eb208 0x00000014 None SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x000eb208 0x00000014 None SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x000eb208 0x00000014 None SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x000eb208 0x00000014 None SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x000eb208 0x00000014 None SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x000eb208 0x00000014 None SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x000eb208 0x00000014 None SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x000eb208 0x00000014 None SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x000eb208 0x00000014 None SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x000eb208 0x00000014 None SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x000eb208 0x00000014 None SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x000eb208 0x00000014 None SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x000eb208 0x00000014 None SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x000eb208 0x00000014 None SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x000eb208 0x00000014 None SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x000eb208 0x00000014 None SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x000eb208 0x00000014 None SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x000eb208 0x00000014 None SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x000eb208 0x00000014 None SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x000eb208 0x00000014 None SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x000eb208 0x00000014 None SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x000eb208 0x00000014 None SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x000eb208 0x00000014 None SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x000eb208 0x00000014 None SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x000eb208 0x00000014 None SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x000eb208 0x00000014 None SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x000eb208 0x00000014 None SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x000eb208 0x00000014 None SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x000eb208 0x00000014 None SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x000eb208 0x00000014 None SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x000eb208 0x00000014 None SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x000eb208 0x00000014 None SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x000eb208 0x00000014 None SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x000eb208 0x00000014 None SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x000eb208 0x00000014 None SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x000eb208 0x00000014 None SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x000eb208 0x00000014 None SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x000eb208 0x00000014 None SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x000eb208 0x00000014 None SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x000eb208 0x00000014 None SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x000eb208 0x00000014 None SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x000eb208 0x00000014 None SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x000eb208 0x00000014 None SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x000eb208 0x00000014 None SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x000eb208 0x00000014 None SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x000eb208 0x00000014 None SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x000eb208 0x00000014 None SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x000eb208 0x00000014 None SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x000eb208 0x00000014 None SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x000eb208 0x00000014 None SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x000eb208 0x00000014 None SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x000eb208 0x00000014 None SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x000eb208 0x00000014 None SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x000eb208 0x00000014 None SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x000eb208 0x00000014 None SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x000eb208 0x00000014 None SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x000eb208 0x00000014 None SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x000eb208 0x00000014 None SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x000eb208 0x00000014 None SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x000eb208 0x00000014 None SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x000eb208 0x00000014 None SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x000eb208 0x00000014 None SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x000eb208 0x00000014 None SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x000eb208 0x00000014 None SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x000eb208 0x00000014 None SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x000eb208 0x00000014 None SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x000eb208 0x00000014 None SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x000eb208 0x00000014 None SUBLANG_NEUTRAL data
RT_VERSION 0x000eb21c 0x000003d4 None SUBLANG_NEUTRAL data
RT_MANIFEST 0x000eb5f0 0x000001ea None SUBLANG_NEUTRAL XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminators

Imports

Library mscoree.dll:
0x402000 _CorExeMain

!This program cannot be run in DOS mode.
`.rsrc
@.reloc
@[@X(y
`V@[(y
`W@Z(y
`]@Z(y
`Y@X(y
4YHAa@#
#}Q1"
'-ai(
@R@Y(y
xf)
xf)ai("
#wLmDRBg@#
@_@Z(y
0Ieo@#
#50/7i"
[YZ_bX
[YZ_bX
[XZ_bX
[XZ_bX
[YZ_bX
[XZ_bX
[YZ_bX
[YZ_bX
#Jpbv
[YZ_bX
[YZ_bX
[XZ_bX
[XZ_bX
[YZ_bX
[YZ_bX
[YZ_bX
[YZ_bX
[XZ_bX
[YZ_bX
[YZ_bX
[XZ_bX
[YZ_bX
[YZ_bX
[XZ_bX
[XZ_bX
#iME[o
#V>9KA
Pp@Y(y
[XZ_bX
[YZ_bX
[YZ_bX
[YZ_bX
|~ZA#
[YZ_bX
[XZ_bX
[YZ_bX
[XZ_bX
[YZ_bX
[XZ_bX
[YZ_bX
[XZ_bX
[YZ_bX
[YZ_bX
[YZ_bX
#LKZ@\
[YZ_bX
[YZ_bX
[YZ_bX
[YZ_bX
[YZ_bX
#^z#?#
[YZ_bX
[YZ_bX
[YZ_bX
[XZ_bX
#o_30l
[YZ_bX
[XZ_bX
[YZ_bX
[YZ_bX
@4)aA#
[YZ_bX
[YZ_bX
[XZ_bX
[XZ_bX
[XZ_bX
[XZ_bX
[YZ_bX
[YZ_bX
[XZ_bX
[YZ_bX
[YZ_bX
[YZ_bX
@dcAA#
[YZ`(]
[XZX(l
[XZX(l
[YZX(l
[XZX(r
[YZX(l
[XZX(l
[YZX(l
[YZX(l
1/aiZY
YaiZYf}
eYYfY}
aiZfZXeY
ZYYaf}
YQpaiXZXZY
vk2aia
ZeYZXf
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADPrJR
ss2dmqy\*
Rb~]D6L0
ltJ8:U
9e@'_&@
g6S9PFJt
W{{*q/P
4{.nM+%
?toqFv
4CuUR:-}^
_@9^Cv
<+_U8~
[>}"1;m
kiKA4GV
ngN%=B
WF$eE4;
JPrMAS
Pb"6
D.b=hk
@kXH[:
#bi3NE
6=)j*MOGQ
#4mM.M
h|3NI+
h|3NI+
OE%>4g
|k!{E8
"y*/aH#,nK
LUF}3b8Av
Z*0am
,gdoA!
pR:$Tn
*Q44R?D
d:t>M3
9k\Ic'4
Bhq5D/
_NyMfp
]0!\YO_
h.r/z/#
iplKDH
Lh?\&%
0Hooe%
"*=A]}|c
Eqa `MHY
pOsMu9
iplKDH
Lh?\&%
0Hooe%
"*=A]}|c
Eqa `MHY
0Hooe%
"*=A]}|c
Eqa `MHY
t:'gHm
iplKDH
Lh?\&%
0Hooe%
"*=A]}|c
Eqa `MHY
iplKDH
Lh?\&%
0Hooe%
"*=A]}|c
Eqa `MHY
iplKDH
Lh?\&%
0Hooe%
"*=A]}|c
Eqa `MHY
iplKDH
Lh?\&%
0Hooe%
"*=A]}|c
Eqa `MHY
pOs)+P
iplKDH
Lh?\&%
0Hooe%
"*=A]}|c
Eqa `MHY
~P_|}{'
Lh?\&%
0Hooe%
"*=A]}|c
Eqa `MHY
iplKDH
Lh?\&%
0Hooe%
"*=A]}|c
Eqa `MHY
iplKDH
Lh?\&%
0Hooe%
"*=A]}|c
Eqa `MHY
cgPT6,
.LQH0}
:Q_|C-
gtF^8B
,rj`.-
]D!\(D{E
,C0y0'8
.l$~GP
*^)<T^Xa
65w]kD
&`iz3K
a#O"H.
bGCs8-
3ovU$+
ZkcX)Pej}
-`RSmC
46eVt;
zt,<{,
+vK5Y7
jG';O#
A?t9*2(~
D)BMj!
yPs)&=
ioQdzo
<Nb}:=
"Wu^+)"
Q"3VPZ
S1j>0'
hSFB0i'
y@f1+
ZH2dsE70
;&fr2?
\$gJeq
[aU\/(
-dtP{%"q[
`U]R+.
*"YUZ$
bif{sB
&Mn z(
?1X{UM
C)(6%'
A5M4*tg8!
y,[cj'W
<CLH`V
3Llku$J
,=[b/V9
$),kf
?:%vaj
"I&Pct
R6h7Lc
OA*,%0
t2j? %J
|geI&i
*v.R^V
@<B yg
%+#wn?t
WmDX-
K,Ma*q
0(Y$?'
C3&DmHU
?N^K4: a
*I>A;EyCY
~:i>Kk=
ka{cg'b&
\DdL/@
8tjz82q
Tedcco
=]3tYY
:;!H;e
A-Eqqm`
C<8U_N
b{a5PC
%t*MzrE
/Fj3JB=
i<}ByH
z@:cUWrD
XQSq%b
"O=qV"b
A@2w%wsZFM
;e)U^3Kv
}'{"$?
"m@mN4
':=/Sr|/
&5=iG^
0wRVcBhx
*Yuh&{Y
xc~d}?
zxN<5}C4!
{sUIXe6T
@98^&c4
0YC%44
LC";@R
4OJr$Q9+
k[xo4M~+>l{
NpzzN
UD+S#s=
b-ORML
y^NH%ahu
E,6kxo
/sPHpN+
#(?Wm%{
'z]@<~
P`BI2/
nue9w*
fn-S<64;w
cGr]{.
HA59}
rhwyKPT
|IGtL!
y1QO{.
n0J8LN
(GH1:U_C/0
Y}owNv
i$l#\3pE
JDz7!RQ
{E;%os]
X}%6
y)'/[3
=FtHo60<
-b^{F/
([yV$x'z
2k~`}<*
FtHo60<
$(FtHo60<
"Vd8h-
y)'/[3
i]@-HM
p+A0f~"&E
Dx<vJA&
y)'/[3
i]@-H9
@r[JX~Ts
i]@-H5'
yG|VfT
2,!Q[[
DTLo/>I
"0[~%nH
{LXQ l
@8DBoX
N4Ltax
C=O(&R
Tk4;ae
T~mGa}
cTX['xp2eS
XRtEy8
Ki&,|@
d^7Q}.
DNVG#Lja
B}a`|c
rsW^pw
*e/SJ@
E{k6~E*K
O"J~s{
aO.CF9
*y1:*.
Bp<c&p
.?cC/[
?0WHd>
v4.0.30319
#Strings
#gsdsa.dll#
#fsdfsd.dll#
#faffafffffffffg.dll#
#gggggggggg.dll#
#hdfssssh.dll#
#khk.dll#
#lhl.dll#
#fdsfds.dll#
#jfffs.dll#
<InitializeCustomAttributes>b__19_0
<joAceSripSI>b__0
IEnumerable`1
ToUInt32
ToInt32
198-Protector-V2
<path>5__2
Func`2
CreateSymUnmanagedWriter2
FindAssemblies2
LOCALE_SSHORTESTDAYNAME3
IsAMD64
Popi_popr4
ToInt16
get_UTF8
<Module>
IrpljmrdpFA
Get_IatCorXxxMainRVA
CurrEC
ListStandAloneSigMD
LOW_SURROGATE_END
COR_E_KEYNOTFOUND
STD_INPUT_HANDLE
WAGROUPING
OPEN_EXISTING
get_ASCII
joAceSripSI
SpkdkonhbbI
AAnnieFpmdI
iepSmikfrpI
SetMethodIL
OSVERSIONINFO
System.IO
E_POINTER
pmlFkgoiIhS
grrigSmkahS
S_WITH32_ST
S_BLOCK32_ST
S_RECTYPE_MAX
lkfhhnjeeha
RawData
rcdata
dgdimFkFkdb
kpklScdamhb
mscorlib
odroiaSkklb
Get_IsNotPublic
System.Collections.Generic
get_IsStatic
FromFileTimeUtc
CreationTimeUtc
AffbmFAfpFd
AlgorithmId
GetProcessById
lpNumberOfBytesRead
hThread
get_CurrentThread
IsHeldByCurrentThread
thread
nrehgrnkddd
RijndaelManaged
M_whatsCached
get_IsAttached
M_parseDeferred
IsCompressed
IsAuthenticated
IsBoxed
Set_Rid
GetPropertyMapRid
TryResolveField
<ModuleRefTable>k__BackingField
hFgImenAcmd
command
set_IsBackground
DynamicMethod
ISymUnmanagedMethod
DefinePInvokeMethod
ResolveMethod
RemoveMethod
GetMethod
method
NetGuard
get_IsInterface
Replace
LoadResource
FindResource
SizeofResource
GetHashCode
SetCode
set_Mode
CryptoStreamMode
CipherMode
CharSetUnicode
Xenocode.Client.Attributes.AssemblyAttributes.ProcessedByXenocode
M_propertyInfoCache
EndInvoke
BeginInvoke
get_ModuleTable
GetEnvironmentVariable
Enumerable
IDisposable
set_Visible
get_Handle
RuntimeFieldHandle
get_MethodHandle
RuntimeMethodHandle
GetModuleHandle
get_TypeHandle
RuntimeTypeHandle
CloseHandle
GetFieldFromHandle
GetTypeFromHandle
M_file
IgSidmaIole
Console
M_isFixedDateRule
get_Module
DefineDynamicModule
hModule
module
set_FormBorderStyle
set_WindowStyle
ProcessWindowStyle
get_Name
InternalGetTempFileName
lpApplicationName
functionName
lpName
AssemblyName
GetDirectoryName
M_utf8name
M_stringname
lpCommandLine
WriteLine
TrailingNewLine
WrappedTryRunInline
AbfepIoklne
set_Scope
Get_IsPrivateScope
rperpe
get_FieldType
DefineType
CreateType
ValueType
get_DeclaringType
Get_CatchType
flAllocationType
Argument_NotExceptionType
get_ReturnType
lpType
get_ParameterType
OsType
System.Core
InternalInsertNodeBefore
M_methodSignature
ResolveSignature
SetLocalSignature
GetResourceLookupCulture
MethodBase
Dispose
Truncate
CreateDelegate
MulticastDelegate
set_WindowState
FormWindowState
STAThreadAttribute
CompilerGeneratedAttribute
UnverifiableCodeAttribute
DesignTimeVisibleAttribute
AssemblyTitleAttribute
UnsafeValueTypeAttribute
AssemblyTrademarkAttribute
BabelAttribute
SuppressIldasmAttribute
AssemblyInfoAttribute
YanoAttribute
DotNetPatcherPackerAttribute
BabelObfuscatorAttribute
CryptoObfuscator.ProtectedWithCryptoObfuscatorAttribute
DotNetPatcherObfuscatorAttribute
DotfuscatorAttribute
CompilationRelaxationsAttribute
SmartAssembly.Attributes.PoweredByAttribute
RuntimeCompatibilityAttribute
SetValue
get_IsAlive
fmhahFbpbk.exe
get_Size
DwPageSize
GetSaveSize
MinSize
CheckGroupSize
Set_HeaderSize
dwSize
SizeOf
ekdlkaoiSSf
fsafafwwwwwwwwaf
HiddenThisParamDef
CreateTypeRef
get_IsByRef
fasfkkfff
dnkSkbnlldg
mddSlpddrhg
FieldSig
AadlmhaIdig
foekhllIcjg
System.Threading
Encoding
IsLogging
Ceiling
NoStringInterning
FromBase64String
OutputDebugString
ToString
GetString
ffhkSfmrog
VarArg
cAhIIiIkrIh
fAgdehaoFah
keeFmSnihdh
hmgIblhgldh
CharUnknownHigh
hhhhhhhhhhhhhhhhh
lhhhhhhhhhh
kkkkkkkkhh
ComputeHash
get_ExecutablePath
GetFolderPath
ObfuscatedByGoliath
get_Length
ByteLength
Format_StringZeroLength
bidbdknebci
orbmhordodi
WriteInlinePhi
mAjeiiInmhi
ConvertGregorianToHijri
SeraikFAnij
iebmpknrrnj
ddmkdkkpmSk
AkaImipinbk
fmhahFbpbk
AsyncCallback
callback
GetFileLock
FindParamDef_NoLock
GetFieldTokenNoLock
FlushFinalBlock
TransformFinalBlock
TimeMark
IlShaiikkIl
Marshal
Get_Ordinal
GetEndLabel
MinimumLevel
kernel32.dll
PlatformPublicKeyFull
Get_PositiveInfinitySymbol
Control
GetPropertyImpl
Runcrawl
mmhdprneiIm
CryptoStream
MemoryStream
Program
ibFjhInnmbm
pikpmrFcgcm
lnlilbdFgdm
get_Item
System
SymmetricAlgorithm
HashAlgorithm
ICryptoTransform
hlbSkdlmSAn
Srbnkfgagdn
ByteLen
EraToken
get_MetadataToken
hToken
GetRegularToken
M_checkDigitToken
PublicKeyToken
BeginChildren
lpNumberOfBytesWritten
jjvvvvvvvflhhhhhhhhhfffffffffffffffsssssvhn
AppDomain
get_CurrentDomain
Application
get_Location
NineRays.Obfuscator.Evaluation
System.Reflection
ManagementObjectCollection
Set_CallingConvention
RuntimeWrappedException
VerificationException
jbImikgbkpn
StripSecondsFromPattern
lniihcbkhdo
GetDynamicILInfo
FieldInfo
MethodInfo
FNeedFileInfo
EnableRidToInfo
startupInfo
MemberInfo
ParameterInfo
hResInfo
ProcessStartInfo
DirectoryInfo
afdAlddlbko
dogdkmAAamp
strtup
System.Linq
kdohFSgmaFr
set_ShowInTaskbar
TryParseHexChar
degfkdfpkcr
ResourceReader
MD5CryptoServiceProvider
DESCryptoServiceProvider
MethodBuilder
ModuleBuilder
TypeBuilder
_EventBuilder
AssemblyBuilder
SpecialFolder
Binder
M_depadBuffer
M_lastBlockBuffer
lpBuffer
ResourceManager
Debugger
ManagementObjectSearcher
Set_CustomMarshaler
DummyMetaDataListener
PathHelper
get_IsPointer
BitConverter
SetErrorMode_Win7AndNewer
ToLower
GetTokenFor
ManagementObjectEnumerator
GetEnumerator
.cctor
dotNetProtector
get_IsConstructor
CreateDecryptor
fmhAFlgoSpr
IntPtr
UnsafeGetArrayPtr
M_iAttr
EnumMethodSemantics
System.Diagnostics
OtherMethods
GetMethods
Namespaces
System.Runtime.InteropServices
System.Runtime.CompilerServices
System.Resources
fmhahFbpbk.resources
HasOverrides
bInheritHandles
GuidStyles
EnableVisualStyles
BaseTypes
HasTypes
EmptyTypes
lpThreadAttributes
MethodAttributes
TypeAttributes
MethodImplAttributes
GetCustomAttributes
lpProcessAttributes
GetBytes
BindingFlags
dwCreationFlags
GetMethodImplementationFlags
SetImplementationFlags
M_denials
CaseInsensitiveEquals
System.Windows.Forms
Contains
CreatePESections
CallingConventions
CompareOptions
GetGacInfos
NestedClassInfos
SetMethodProps
get_Chars
Set_PEHeaders
TableHeaders
GetOptionalCustomModifiers
GetParameters
M_separators
get_IsClass
AssemblyBuilderAccess
hProcess
GetCurrentProcess
lpBaseAddress
lpAddress
FormatDigits
Anonymous
Concat
ManagementBaseObject
GetObject
object
Select
FrameworkRedirect
flProtect
CharSet
set_DefaultGrantSet
Get_NTHeadersOffset
PA_Shift
op_Explicit
System.Reflection.Emit
SetCompatibleTextRenderingDefault
IAsyncResult
Set_AsyncResult
TrySetResult
result
ToUpperInvariant
Get_HasConstant
System.Management
lpEnvironment
InitializeComponent
get_Current
CheckRemoteDebuggerPresent
IsDebuggerPresent
ActionToActionObjShunt
M_iNameSpaceCount
GetLocalCount
textToDecrypt
ParameterizedThreadStart
Convert
FailFast
GetMethodRidList
AllowEmptyHost
LoaderAllocatorScout
SuspendLayout
ResumeLayout
MoveNext
System.Text
Get_Context
context
RegistryView
ReadAssemblyProcessorRow
BreakCanThrow
_InputBufferIndex
OpenMutex
ToArray
get_IsArray
set_Key
Serialization_NullKey
secretkey
System.Security.Cryptography
DefineDynamicAssembly
GetCallingAssembly
GetExecutingAssembly
M_ISymWrapperAssembly
BlockCopy
library
_category
CreateDirectory
DebugDirectory
lpCurrentDirectory
SLocalizedCountry
SetCapacity
op_Equality
op_Inequality
VersionCompatibility
System.Security
SuppressUnmanagedCodeSecurity
IsNullOrEmpty
198 Protector V2
System.Security.Permissions.SecurityPermissionAttribute, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
SkipVerification
WrapNonExceptionThrows
_CorExeMain
mscoree.dll
RSJLRSJOMSJ
TRRTLRRROSLLRSORLRLOO
[TUUQ[WNUWTURNWOSSOLLRSMLMLLM
Q[[TttU[t[[U[UT
[NTU[T[WRSTSO
!T[[Tt[U[UW[UWTU
tRtRRRUR[TT
#\]\[[utt[[[tU[U
Uu[U[[U"
Psuuyu{u]y
y{wuy`
d[\\\_]]aaaaadddddddddd\]
7777777777777.A@$77
88888888888886%K?58
::::::::::::::,CF*:
}UUUUUUUUUT;K?Sl
UUUUUUUU-EF+t
WWWWWWWWV<M?9
XXZXXX[XXHEF/
yyY<M>
ryIFEQa
|||x<M<1
eddd^]!'"
]]j^j]j]j^j]j^j]nd
HHHHHHHHHHH
H7 .%
H<"""""0,
H@>>>>>>/&
HD1111111,
HDAAAAAAA2'
HHHHHHHHHH,#$
HCAAAAA333+(
HHHHHHH3HH3-
H5H5G5D3H3
338383833
WUT@-~
555PQ^
TWCFz:
P]SUUP\\
G=7^1o
H(**j4
z(:ujG
93%B"-
;'N|i?
.|*;;3
j5JfvH
rrr //
;"1j*c
'4CyX)
n^/`wR
54@Uu5
2e\LLL
?8C]g?!
Lc!PaIv
()+,DBZ#R
O>y2:*
O^o>N2
H6&ei#t?BV
k5`9y-
:8U\\?
:a5kL7
S'CEU5
7_[jw8
7^C_:b
\%@'HH
5PRQ/'(
sb99hx
q~VQNW
V;(UZ`X
npBuy-
8#!cV\
B^aUf|v
]>%51
1cG=j0
uB+djBL~z
AQ]=rv%X
W;,L0Mj
T,p&8&
b.kuY=
~~o;3$
iL>nyo
5 HDb&
J$8["=%
l@c~=j
,:YK]$}
CEMU=F
y(B]Xb
6|u~,X2
a%!7I%
Q5$@eI
Sp!p4gx8
h76n)@
|3SiQp
>x"0 9$Ee
q}j{<1
vR[pJl;2
Fg1AD#E
'd)MBH
V DJj:%
PSRHkP
Dgb&6Z
\`jcU)
.,_3 =a
aRDjPLH
<#s~E}m
P|TAb:S
V]xRVYD
b[fi_(
2Qu9"L
qYMxhQ
nUN7`\
Ch*oBj
Qw:1|R
fLz*]P
/^"!9o
lV[~UuUa^
2P/x7d`
wF+}m[
nvmcZe
d^-Pzt
oI';Te~
m/=wo]n
&6z#Rk
>5^bk\
?X2'1U
={u,4
M-4~-_7
>aO`A6
{oJvw?{
D{mz8}k
v%Ld:w
(*U#))"
S[[;mu
e<Cv0Z}
1@%%`$
t)i)S{W
r<^s\XS'
z?4%QT42
zQC(Hz
5=UY*8
]*7(*j
)RiIL
M;oKh p
<GMb")E
sH`IG[
DGc~&q]
Cq5(IR92
%e1mfA
h'aJpu
IL,VT(
6I:W\b
-D]Xg6
0"KblG
a)6C*P
sq>$P
U H==6
`9rQ
Lr"4;'
"l,:9$
4`kbG$*
1(We
?^5KW
f;5hFO
P=?.>&
Xul;PW3
=fN"t]
<p}wDml
/sl@qW8
,\sTI!
)rlDkDm
6Yg[[9
."v"p<u
_Y;h*(
ojm&hdd2eab4fcc0gcd)gdd#hdd
lfdIc`Ze[WTsZVTs\XWh]ZZ]_\\U_\]O`^_Lb_`Fd`b?eac;fbc8fbc5gcd0iee(ief#kgg
\XV{]XXs^Z[i_[]^a]_Vb_`Qb`aLdbcGgcd@hdf;iff9igf5jgg/khg)khg"mhj
_[Y|`\\ta]^jb_`_c`bWebdRgceNhdfHjehAjfh<lhi9lij6mij/njk(njk"plm
a\Z}b]\uc_`kdac`fbdXhdeSiegOjfhGlhiAmij<mik9okl5okl.plm'qll!rnn
c^^vd`alfccahdfZjfhUkgjOmijHnklBqmm>qmn:rno6soo.sop'tpp!wsr
ebaxgcdnjfhckgi[lhjUmikPokmIplnBqmo>snp;toq7tpq/upq(upq!ytt
hddyjfgnlhjcmik\njlVokmQrnoHsoqCtpq?uqr;vqr5vrs-wrs&xtu!
ieeykghnmikcnjm\olnWqmoQtppJuqrDvqr@wss<xtu6xtu.yuv'yuv!
kgg{mijpokmepln]rnpXtpqRvqsJvrtCwst8zuv'~yz
rnnTzvw#
tss{{xy
qnmN}~y
qmnM}~y
oklM|~y
qno.(M\
LHHX&('$
^Z[:~}}
ono}~{z
dbbK~zz
gffQlih
cab@}zz
_^^Ggdd
ZZ]E||~
p655
pH;;
p-pK
hdd*hdc!ied
~~knji
pfCC
pcpop
ZZ]0nnq
//k+p
^*'Wzz
GJKKJJJJKKKK
IhghhggPPOKID
OGQRRR
DKKKIG
IPhhhgQP
(\U)&Siq
qq~~~~
qq~~~~~~
qq~~~~~~~
qq~~~~~~~~~
qq~~~~~~~~~
qq~~~~~~~~~
qq~~~~~~~~~
~~~~~~~~~
~~~~~~~~
~~~~~~
((((((
(((((((
(((((((((
((((((((
((((((
(((((((
(((((((
((((((((
(((((((((
((((((((((
((((((
((((((
(((((((
(((((((((
((((((((
((((((
(((((((
(((((((
((((((((
(((((((((
((((((((((
((((((
yyyyyyy
yyyyyyy
UUUUUU
"""UUU
"""UUUUUU
"""UUUUUU
""""""UUU
""""""UUUUUU
""""""UUUUUU
"""""""""UUU
"""""""""UUUUUU
UUU""""""UUUUUU
UUUUUU"""UUUUUU
UUUUUUUUUUUUUUU
qqq~~q
UUUUUU
UUUUUUUUU
DDDUUUUUU
"""DDDUUUUUU
""""""DDDUUUUUU
""""""DDDDDDUUUUUU
""""""DDDDDDDDDUUU
UUUUUUUUUUUUUUU
ffffff
ffffff
333333333333333333333333333333333
333333333333333333
333333333333333333333333333333333333333333333
333333333333333333
"""DDDwww
"""wwwwwwwww
wwwwwwwwwwww
wwwwwwwwwwww
wwwwwwwwwwww
UUU"""
wwwwwwwww
UUU"""
wwwwww
wwwwww
wwwwww
UUUUUU
UUUUUU
UUUUUU
UUUUUU
UUUUUU
UUU"""
""""""
"""UUU
&&&JJJzzz
JJJJJJJJJ&&&zzzzzzzzz
JJJJJJ
JJJJJJ
zzzzzzzzzzzz
VVVJJJ
JJJJJJ
zzzzzzzzzzzz
JJJJJJ
zzzzzzzzzzzz
JJJVVV&&&
JJJJJJ
zzzzzzzzz
JJJVVV&&&
JJJJJJ
[ZZ{|{
zzzzzz
JJJJJJ
DDDZ[Z||{
JJJJJJ
DDDDDDZZZ|{|
zzzzzz
JJJJJJ
DDDDDDDDDZ[Z
JJJJJJ
DDDDDD
JJJJJJ
zzzzzz
JJJJJJ
JJJJJJ
JJJJJJ
JJJJJJ
JJJJJJ
JJJJJJ
JJJJJJ
JJJJJJ
JJJVVVVVVJJJ
JJJJJJ
JJJJJJ
JJJVVVVVV
VVVJJJ
JJJJJJ
JJJVVVVVV
VVVJJJ
JJJJJJ
JJJVVVVVV
VVVJJJ
VVVVVV
VVV&&&
VVVJJJ
&&&&&&
VVVJJJ
&&&VVV


UUUUUU
UUUUUUUUU
DDDUUUUUU
"""DDDUUUUUU
""""""DDDUUUUUU
""""""DDDDDDUUUUUU
""""""DDDDDDDDDUUU
UUUUUUUUUUUUUUU
ffffff
ffffff
333333333333333333333333333333333
333333333333333333
333333333333333333333333333333333333333333333
333333333333333333
RRR333333
RRR333333
RRR333
RRR333
RRR333333
RRR333333
RRR333
RRR333
333333
333333
RRRRRRRRR
RRRRRRRRR
333333
333333
RRRRRRRRR
RRRRRRRRR
lmnopqrstuvwZxyz_`abcdefghY
i+jkPQRSTUVWXYZ+[\]^
BCDEFGHIJ+KLMNO
3456789:;<=
$%&'()*+,-./01
||ZYYY
Y|||ZZ
bbbbbbQQQQQQQQQSXL
````````QLMMMME/`ZZZZZZ`Q
M???:!`QQQQQQ`Q
ME??<!`ZZZZZZ`Q
PEE?</`QQQQQQ`Q
PEEE=/`ZZZZZZ`Q
PEEE>/`QQQQQQ`Q
PMEE?L````````Q
RMMEE/!!!!
RMMEEEEEEM
RPMMMMMMEM
RPMMEEEEEP
bbbb'LRM]WW]MPP
bbbbZL
LXbbbbbbZ
bbbbbbb
bbbbbbXQQQQQQQQQbbbbbbQaaaaaaaaQbbbXQQ/aaaaaaaaQbbbQaaQaaaaaaaaQXQQ/aaQaaaaaa`aQQaaQaaQaaaaa``aQQaaQaaQaaaa```aQQaaQaaQaaa````aQQaaQaaQaa```aaaQQaaQaaQa````a`QXQaaQaaQaaaaaaQXbQaaQa`XQQQQ/QXbbQaaQaaaaa`QXbbbbQa`XQQQQ/QXbbbbbQaaaaa`QXbbbbbbbXQQQQQQXbbbbbbbb

:,)('%#!!
@40,)&"
?741-)'"
B9863/+(%!
EBBBB<1.*'#;
5BBBBAAE
B0+./ABBBAAC
DEDDE>

<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
<assemblyIdentity version="1.0.0.0" name="MyApplication.app"/>
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v2">
<security>
<requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3">
<requestedExecutionLevel level="asInvoker" uiAccess="false"/>
</requestedPrivileges>
</security>
</trustInfo>
</assembly>
fmhahFbpbk
GetEnvironmentVariable
-966492074
966500434
_ENABLE_PROFILING
_PROFILER
-819007418
819170624
-1599428093
1599537442
-1742129381
1742125994
644986969
644993455
-1505120902
1505105107
836350139
836346156
-1482056700
1482161923
1844101259
1844100473
-1952245671
1952316200
276896635
276925322
1263530239
1263533370
467489880
467528598
616807323
616797204
-692372739
692415372
-1270085010
1269990282
1944591709
1944618974
-2048900735
2048826202
-1566528619
1566507586
-834765523
834766046
349885292
349864057
2101900019
2101897200
622732887
622798443
-1947981973
1947924024
1752774549
1752697243
-622092616
622124928
1614967070
1615006968
474430166
474434719
365455755
365520771
-2135251151
2135193422
335950745
335962843
634719054
634780822
1592286849
1592313695
-1702145578
1702135716
721041302
721098345
-1289155499
1289141528
1987429875
1987354541
-1927170772
1927229132
1708786040
1708841306
1120356078
1120390417
-1253916338
1253836637
441391423
441437325
2036256656
2036331848
1775679324
1775681991
636705593
636717989
427640005
427576058
2027359800
2027367032
1873989793
1873960214
363727297
363794767
-2009628473
2009652552
1410156859
1410196019
-2035620793
2035552659
-831773776
831720017
-479165715
479078993
352581799
352577283
1025789156
1025785488
-1862876635
1862847167
1393249172
1393184743
2005946394
2005987902
74911508
74946729
932031913
931967305
-1729043342
1728907992
-780480133
780645098
-1722796241
1722714605
-191570384
191536258
1337553379
1337545172
1164498816
1164560316
-1733892167
1733926865
-245175217
245185609
1500631960
1500624497
-382101450
382166967
1530649054
1530586536
-1067151021
1067142741
-972733514
972707713
-1018821960
1018730360
2076399013
2076399259
86020816
86097632
1138487998
1138425987
79467777
79440778
-336511611
336499123
517680764
517714003
-1814594881
1814586113
-1701185851
1701206360
847037152
847049000
-109178754
109176954
1548200748
1548186327
1577207407
1577262724
-776418330
776429144
1752775472
1752797171
-666260111
666302872
-37211958
37177003
-1154277790
1154300120
-652167542
652036059
223437199
223375560
-2025378160
2025501018
-565271690
565231377
-590059757
589986231
380891407
380855266
-1550615659
1550616201
1244226122
1244229675
599607214
599628650
2101455998
2101391964
-355120143
355086682
-1976478079
1976510887
-504098827
504074058
1762012317
1762070928
-864217562
864086910
-1166512893
1166532645
743344617
743332905
1450089751
1450065803
944439086
944397208
961443306
961442134
-1310707991
1310625286
-2118493476
2118455928
-451487902
451512307
1826354005
1826258978
1313447364
1313458069
-1649434565
1649457196
289851185
289843384
-1049717819
1049734038
-2080962833
2080958787
-646031613
646156809
1951546270
1951594917
-563629761
563640333
-729750556
729760420
-968147811
968220578
-1921952712
1921992138
1747392898
1747346241
-1995386350
1995396881
-1889402852
1889522524
1120433919
1120477174
1994984126
1994942008
-577105634
577085132
566107384
566112941
108699994
108700300
-1794899689
1794833027
1878909806
1878823782
-1572382879
1572454997
269251883
269281032
-1132255196
1132222484
-1339596372
1339722986
-1865032762
1864916968
-2136663909
2136532984
1126502821
1126538706
-419151363
419032557
-1789078080
1789098343
1393093546
1393057314
1815543801
1815485542
2130544880
2130523920
-1330313374
1330361427
1683786635
1683868639
1068221386
1068204996
-1523232318
1523307511
393652364
393659101
1251390383
1251406597
-26519896
26653864
940895666
940949109
-1893955684
1893816756
-692223473
692115858
1173524466
1173606165
1218900490
1218884793
572174583
572190594
-381669139
381528091
-46300869
46314483
1865940118
1865873168
-2104018962
2103986231
517203083
517159134
-2037610241
2037570033
1876876953
1876841340
693854866
693780835
-1989502670
1989431303
-1550393763
1550428216
1732572167
1732638304
1054479584
1054521605
-99382516
99463230
524197283
524184962
1799048178
1799039967
749931251
749970408
-459925426
459898631
1425956277
1426003817
-228925544
228866860
-791985518
792124830
361374142
361416515
-1172752652
1172597411
-1856601856
1856587832
1571835645
1571903674
641607771
641660603
1485777783
1485806214
-797764587
797805911
-277410839
277395107
-486978423
486933928
1142399535
1142369571
1020022372
1020032788
1264787492
1264809901
-651505398
651627303
396650704
396648781
1181076022
1181076470
346888138
346911578
1952080044
1952085660
-1592935160
1592950357
-218778094
218791960
-1554290353
1554439816
-177314636
177233582
167199140
167124196
56308157
56239900
1950684951
1950699001
978186443
978187573
-1445404119
1445267258
1254462436
1254399262
883149303
883156842
-677434532
677456970
1286346124
1286406286
-71562319
71447017
148924953
148915673
1541560477
1541615859
-1280915986
1280854179
1656284176
1656275966
-715648284
715466473
-372830672
372865781
-621183002
621168037
-698416884
698533170
-524664621
524656740
-888254592
888368436
1027914187
1027989497
-1637818814
1637810786
-1657911679
1658052700
153412045
153400055
-122628785
122575786
1234534402
1234562814
249232612
249212041
-214245857
214201366
-1260605985
1260611964
-1983047192
1983065929
-246167224
246178794
-1452661523
1452587332
594203764
594193775
-763941296
764015048
-1234926238
1234776592
613897513
613813383
-910138577
910079671
-462472216
462441700
409449937
409464837
-822611395
822609250
-1121543066
1121536631
-854615066
854689289
109219901
109310831
-1872798584
1872887557
1997116973
1997113459
-927034206
927190688
123107683
123158464
912037026
912031125
511110873
511052989
1383061005
1382999323
1154143930
1154147714
94327961
94356591
-776645819
776669667
-2077643677
2077500549
170140670
170219571
389407605
389349068
1030073678
1029998371
-33231334
33182754
-416854391
416937467
1183210979
1183197771
856016809
855957304
-2028210673
2028212691
205415526
205453761
-1690536991
1690401549
1407015048
1407056899
1630751070
1630677967
998464154
998456834
791689515
791707110
1814994081
1814996054
911299583
911324523
1668166234
1668213161
2078227943
2078157771
37806208
37772039
-1038123906
1038192376
759370742
759372799
-1857730966
1857784968
1975613215
1975609361
2119515443
2119537610
-679146825
678992992
919501054
919516298
-741848153
741801591
430336761
430314146
-1165250879
1165401925
1001577516
1001557911
-15929921
15888574
63497405
63529709
-1034997413
1035010425
-723037884
723036203
-33766033
33736661
-1004979527
1004972787
1093778237
1093751579
-1277626433
1277665324
-320635781
320690685
1748737560
1748731811
796040624
796022317
-1615775696
1615790499
383529163
383527137
-337485774
337447050
62933467
63001521
-1128886494
1128911214
-1994224656
1994254104
1307063520
1307089904
-1214016341
1214039585
-1909032613
1908969066
-1921472119
1921460497
-891002044
891006670
-72104243
72193286
-245948336
245905763
-653050931
653023495
195575328
195579896
1259352422
1259400188
-203143443
203143362
125433623
125390952
352569557
352472177
428212146
428154785
1226241547
1226209936
-1982938506
1982928816
-901696620
901676590
-641694940
641561631
1195728267
1195710902
-1025272128
1025330571
-255638355
255666324
-1483014253
1483162175
-957110693
957101023
-132075588
132093133
779059435
779086155
-309190889
309153438
-1149441852
1149494372
1102856904
1102925783
-688523833
688650440
-1341314462
1341299872
-439720650
439624025
-318171233
318203902
-1299214967
1299244443
-2033521903
2033503190
-1019045869
1018970475
-935170834
935101066
-394328667
394279062
1647878627
1647895900
1472826415
1472816816
-1628129282
1628100773
1954382078
1954325398
-1486979573
1486971790
453445506
453502405
899585711
899599992
922319252
922317061
1744504241
1744506962
670605320
670680260
-397442183
397506428
283843709
283775269
-1983418995
1983442165
-322385269
322431826
143268984
143282026
-1645548655
1645527581
2115760268
2115731913
964639701
964607491
-1396172389
1396169802
-1070795550
1070803192
-486186864
486270226
-106208594
106195045
605278872
605272519
1487487560
1487490194
1625133124
1625132149
-324479755
324495159
746665812
746699863
250527346
250524216
1882090718
1882136429
-1172720141
1172727028
404237362
404292823
885808434
885845274
-401197756
401100839
59183216
59187947
-576892733
576861201
-2087739390
2087736708
-832953905
832835025
-256684390
256718257
1882386444
1882377375
497836338
497883158
-1576440351
1576528506
1066469383
1066512129
1304102745
1304156199
Antivirus Signature
Bkav Clean
Lionic Trojan.MSIL.ClipBanker.7!c
Elastic malicious (high confidence)
MicroWorld-eScan Gen:Trojan.Mardom.MN.10
CMC Clean
CAT-QuickHeal Clean
ALYac Gen:Trojan.Mardom.MN.10
Cylance Unsafe
VIPRE Clean
Sangfor Trojan.Win32.Save.a
K7AntiVirus Clean
BitDefender Gen:Trojan.Mardom.MN.10
K7GW Clean
CrowdStrike win/malicious_confidence_100% (W)
Baidu Clean
Cyren W32/MSIL_Kryptik.FZU.gen!Eldorado
Symantec ML.Attribute.HighConfidence
ESET-NOD32 a variant of MSIL/Kryptik.ACKH
APEX Malicious
Paloalto generic.ml
ClamAV Clean
Kaspersky UDS:DangerousObject.Multi.Generic
Alibaba Clean
NANO-Antivirus Clean
ViRobot Clean
Tencent Win32.Trojan.Mardom.Tdfl
Ad-Aware Gen:Trojan.Mardom.MN.10
TACHYON Clean
Emsisoft Gen:Trojan.Mardom.MN.10 (B)
Comodo Clean
F-Secure Clean
DrWeb Clean
Zillya Clean
TrendMicro Clean
McAfee-GW-Edition Artemis!Trojan
FireEye Generic.mg.cbf1876a063270b2
Sophos Clean
Ikarus Clean
GData Gen:Trojan.Mardom.MN.10
Jiangmin Clean
Webroot Clean
Avira Clean
Antiy-AVL Clean
Kingsoft Clean
Gridinsoft Clean
Arcabit Trojan.Mardom.MN.10
SUPERAntiSpyware Clean
ZoneAlarm Clean
Microsoft Trojan:Win32/AgentTesla!ml
Cynet Malicious (score: 100)
AhnLab-V3 Clean
Acronis Clean
McAfee Artemis!CBF1876A0632
MAX malware (ai score=89)
VBA32 Clean
Malwarebytes Clean
Panda Clean
Zoner Clean
TrendMicro-HouseCall Clean
Rising Clean
Yandex Clean
SentinelOne Static AI - Malicious PE
eGambit Unsafe.AI_Score_56%
Fortinet MSIL/Kryptik.ACKH!tr
BitDefenderTheta Gen:NN.ZemsilF.34236.6m0@auNx0SiG
AVG Win32:InjectorX-gen [Trj]
Cybereason Clean
Avast Win32:InjectorX-gen [Trj]
MaxSecure Clean
No IRMA results available.