Static | ZeroBOX

PE Compile Time

2021-11-03 01:39:59

PE Imphash

f34d5f2d4577ed6d9ceec516c1f5a744

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00002000 0x0005b934 0x0005ba00 6.38822107382
.rsrc 0x0005e000 0x00040eb6 0x00041000 6.72463327639
.reloc 0x000a0000 0x0000000c 0x00000200 0.101910425663

Resources

Name Offset Size Language Sub-language File type
RT_ICON 0x000982a8 0x000063c3 LANG_INDONESIAN SUBLANG_NEUTRAL PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x000982a8 0x000063c3 LANG_INDONESIAN SUBLANG_NEUTRAL PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x000982a8 0x000063c3 LANG_INDONESIAN SUBLANG_NEUTRAL PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x000982a8 0x000063c3 LANG_INDONESIAN SUBLANG_NEUTRAL PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x000982a8 0x000063c3 LANG_INDONESIAN SUBLANG_NEUTRAL PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x000982a8 0x000063c3 LANG_INDONESIAN SUBLANG_NEUTRAL PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x000982a8 0x000063c3 LANG_INDONESIAN SUBLANG_NEUTRAL PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x000982a8 0x000063c3 LANG_INDONESIAN SUBLANG_NEUTRAL PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x000982a8 0x000063c3 LANG_INDONESIAN SUBLANG_NEUTRAL PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x000982a8 0x000063c3 LANG_INDONESIAN SUBLANG_NEUTRAL PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x000982a8 0x000063c3 LANG_INDONESIAN SUBLANG_NEUTRAL PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x000982a8 0x000063c3 LANG_INDONESIAN SUBLANG_NEUTRAL PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x000982a8 0x000063c3 LANG_INDONESIAN SUBLANG_NEUTRAL PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x000982a8 0x000063c3 LANG_INDONESIAN SUBLANG_NEUTRAL PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x000982a8 0x000063c3 LANG_INDONESIAN SUBLANG_NEUTRAL PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x000982a8 0x000063c3 LANG_INDONESIAN SUBLANG_NEUTRAL PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x000982a8 0x000063c3 LANG_INDONESIAN SUBLANG_NEUTRAL PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x000982a8 0x000063c3 LANG_INDONESIAN SUBLANG_NEUTRAL PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x000982a8 0x000063c3 LANG_INDONESIAN SUBLANG_NEUTRAL PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x000982a8 0x000063c3 LANG_INDONESIAN SUBLANG_NEUTRAL PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x000982a8 0x000063c3 LANG_INDONESIAN SUBLANG_NEUTRAL PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x000982a8 0x000063c3 LANG_INDONESIAN SUBLANG_NEUTRAL PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x000982a8 0x000063c3 LANG_INDONESIAN SUBLANG_NEUTRAL PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x000982a8 0x000063c3 LANG_INDONESIAN SUBLANG_NEUTRAL PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x000982a8 0x000063c3 LANG_INDONESIAN SUBLANG_NEUTRAL PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x000982a8 0x000063c3 LANG_INDONESIAN SUBLANG_NEUTRAL PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x000982a8 0x000063c3 LANG_INDONESIAN SUBLANG_NEUTRAL PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x000982a8 0x000063c3 LANG_INDONESIAN SUBLANG_NEUTRAL PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x000982a8 0x000063c3 LANG_INDONESIAN SUBLANG_NEUTRAL PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x000982a8 0x000063c3 LANG_INDONESIAN SUBLANG_NEUTRAL PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x000982a8 0x000063c3 LANG_INDONESIAN SUBLANG_NEUTRAL PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x000982a8 0x000063c3 LANG_INDONESIAN SUBLANG_NEUTRAL PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x000982a8 0x000063c3 LANG_INDONESIAN SUBLANG_NEUTRAL PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x000982a8 0x000063c3 LANG_INDONESIAN SUBLANG_NEUTRAL PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x000982a8 0x000063c3 LANG_INDONESIAN SUBLANG_NEUTRAL PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x000982a8 0x000063c3 LANG_INDONESIAN SUBLANG_NEUTRAL PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x000982a8 0x000063c3 LANG_INDONESIAN SUBLANG_NEUTRAL PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x000982a8 0x000063c3 LANG_INDONESIAN SUBLANG_NEUTRAL PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x000982a8 0x000063c3 LANG_INDONESIAN SUBLANG_NEUTRAL PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x000982a8 0x000063c3 LANG_INDONESIAN SUBLANG_NEUTRAL PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x000982a8 0x000063c3 LANG_INDONESIAN SUBLANG_NEUTRAL PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x000982a8 0x000063c3 LANG_INDONESIAN SUBLANG_NEUTRAL PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x000982a8 0x000063c3 LANG_INDONESIAN SUBLANG_NEUTRAL PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x000982a8 0x000063c3 LANG_INDONESIAN SUBLANG_NEUTRAL PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x000982a8 0x000063c3 LANG_INDONESIAN SUBLANG_NEUTRAL PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x000982a8 0x000063c3 LANG_INDONESIAN SUBLANG_NEUTRAL PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x000982a8 0x000063c3 LANG_INDONESIAN SUBLANG_NEUTRAL PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x000982a8 0x000063c3 LANG_INDONESIAN SUBLANG_NEUTRAL PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x000982a8 0x000063c3 LANG_INDONESIAN SUBLANG_NEUTRAL PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_GROUP_ICON 0x0009e8f0 0x00000068 LANG_INDONESIAN SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x0009e8f0 0x00000068 LANG_INDONESIAN SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x0009e8f0 0x00000068 LANG_INDONESIAN SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x0009e8f0 0x00000068 LANG_INDONESIAN SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x0009e8f0 0x00000068 LANG_INDONESIAN SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x0009e8f0 0x00000068 LANG_INDONESIAN SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x0009e8f0 0x00000068 LANG_INDONESIAN SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x0009e8f0 0x00000068 LANG_INDONESIAN SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x0009e8f0 0x00000068 LANG_INDONESIAN SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x0009e8f0 0x00000068 LANG_INDONESIAN SUBLANG_NEUTRAL data
RT_VERSION 0x0009e958 0x00000374 LANG_INDONESIAN SUBLANG_NEUTRAL data
RT_MANIFEST 0x0009eccc 0x000001ea LANG_INDONESIAN SUBLANG_NEUTRAL XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminators

Imports

Library mscoree.dll:
0x402000 _CorExeMain

!This program cannot be run in DOS mode.
`.rsrc
@.reloc
^@?ai(
v;?7(M@#
@X@Z(t
Hism@#
Ps<0 rs<0ai(
j#(4h@#
@C@X(t
@_@Y(t
@O@Z(t
@B@Y(t
`_@Z(t
U@[(t
phj@#
[XZ_bX
[XZ_bX
[XZ_bX
Xx@X(t
[YZ_bX
[XZ_bX
[YZ_bX
[XZ_bX
[XZ_bX
#a+=^4
[XZ_bX
[XZ_bX
[YZ_bX
[YZ_bX
[YZ_bX
[XZ_bX
[YZ_bX
t@Y(t
[XZ_bX
[XZ_bX
[YZ_bX
[XZ_bX
[YZ_bX
[XZ_bX
[YZ_bX
[XZ_bX
[YZ_bX
[YZ_bX
[YZ_bX
[XZ_bX
[XZ_bX
#]eDWJ
[YZ_bX
[YZ_bX
[XZ_bX
[YZ_bX
[XZ_bX
[YZ_bX
[XZ_bX
[XZ_bX
0|@Z(t
[YZ_bX
[XZ_bX
[YZ_bX
[XZ_bX
#K!q'
[XZ_bX
[XZ_bX
[YZ_bX
[XZ_bX
[XZ_bX
[YZ_bX
[YZ_bX
[XZ_bX
#aBM!f
[XZ_bX
[YZ_bX
[XZ_bX
[YZ_bX
[XZ_bX
[XZ_bX
[XZ_bX
[YZ_bX
[XZ_bX
[YZ_bX
[YZ_bX
[XZ_bX
(x@[(t
[XZ_bX
#p=9xW8
[YZ_bX
[YZ_bX
#nH'Y\
[YZ_bX
Pi@X(t
z_o7@#
[XXnZ>
#-\z/ES
[XZ`(N
[XZX(]
[YZX(]
[XZX(]
[YZX(c
[YZX(]
[YZX(]
[XZX(]
0m@[(t
[XZX(]
3T$saiZ
yaifXf}
ZYfffe}
D'aiZY
caifYYf
|j|A(v
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
y8\8q7Q!S5E
y8\8q7
b+M+[)k
V0@2T$e
o.J.g!
G!Q#E5t
G!Q#E5t
j*L%h(F.\:J
8@$m'?
O?M'-F"D
B2@"(C'A
V2{95k
'-_9?t
Z))Z<<}
=-]/?B
B i/Ee
M"R 5E4J.gQ
e$@$b$B!S3
a'A17Q!O+
X!'7\8\
Y=t2E5G
V0:2V%X4C
A%?b&?D/3E
e#E+L!
0@2J0_;7$b
3Y?E-
X3<"=F
=c%C/R-1i
N<Z 7@
s.4}"8
H.^{V
B#C1W&g
22T$aw
^.\65pz
Z<L>X(iY>x?{
#C'n F6.H8h
>M%0t
};]-H.^
~?[5o#
M*J8^.o
@$/f *
P":?w
o U-L9
e,`M1;5
*c%9>E
0T0y?Y)
C%K9_(a
E%C30R
pT&@&g
[9?S7M
)`&?'(N>u
L*P"D-
uz<Z ?S
VY5/_85j
P6F30*
J8^(i/8L
h.H7E#S
U)1?Y)b
}?v0L)T I
k-K12P
~^8H0C,[84
y=M?O?V
z}9]9o
n^,J0d
C3A!Q2F
O)O'C2`
=M?Oa D i
y0v2B0V
X>N,J:{
$T&63n
a;{ E4s
yo(9V
ZN(X F6f
g!G-Lo
v?o+[)O?
C'Ce!G7];K
R4:2V#X6&E
Y?E+E+?[9F
%C37;M
h >+[)E
:G5S">D
[;K9_/n
e$<02t
F F)H+a
K6F4H,e
/n(N4F
r3W"k+%q
F F(F,B&<K
y)Q H(N)M
l-I)8z
I/^!G0
n(N87I(b
.g!=:?H0
m=t2J:
X#BO)Y!
(N>J,\
s2V2{=
{&@0qn
8K74N4J.D
5S#Q7F
$T&?4E{
>x=M?Y
%l*F6$
c"<z3u
qY?>L*2A%A
!8[>w'
e7E#)h
h V0@2T#b
X>N#E5c
^8 !E!b$
"k-E5
{V0@,J
~?U1PG!Q
aR4D0V
yi($h!g
r9p6J: h
IH:\&A
X=t2N>$"Q
>W'O)1W2V
4Q!M+3P3W
a'A R2
}8R0n!D
9_/[1?
2B0V^:M
2"R B0R)K
^&S5;p
>v0V$.
<!h.D!N
vv7S1n
Z)[38Q1U
+D i/I9H
S7~'A1
}(I#>R
M+[#h
e,Y?MA!
q&_9?C
l9_.\:"
q0T0y?9
r/#2z<P
%E24J'a
6&B&k+K
w2.5{=Q
v0V"P6
A#+A&V
T28J,\
P#>a)L)Q&L
;r4L0:F8v
=3)Z<B
x^,J4b
E^8H97
326?Dk
.*Y+C)@i
;]:J.<!
Z)[38_
S5|:K1
Z<D#0*X&
:K#%+J
R"P5 K
I/_#2<}
m$X>N<|
r3X:s5E5G!Q
B$T%7E
X(Z28s
c$:-\.>C
<O.U"I
i_9I;_.\,7r!98<.X
z=X&q6%T
y$189G
3/<t2J
U%S.9X
u#/8a'
+<5k$1"
{2T$R4
zI>Y*Z7
*c%9I3?>p
A%l)<Bqs
3\)N+98o
/I0@2TN
]9p%C1-2
I;],Z4?l
9#i/?8
u#^"35+
UK&:4b
T2B)>G
p <,"^
X\1-n
>N(\96l
F P!"<
[_=u4R"r
&+Z(H%_*I
;^,J0`
.];K5S#Q.3
D@&p7Q!u
l-I-d"1A3U
_'U)!%]
y]9p0C*G
R+b$>=B
{<Z*H.^7S
R%<ML*Z"19g
6R6y,E5G!&G#i/I/Vh
T0y5I9E
;Y+M3Jn
n(N4?H1
I/_)O?m
)`&60D^
4D6F#U
J,\*L<l
&_9I+M=|
Q4}5-W
X>D%:"
FI;]'S2V
i'C'*l
k-K1<I2
T2BR$/F
Y?I(J3a
Q#E+Y4(
W1A)'j+O%Y
=M?O)j
z43N-e
4D6O$5M)
8K:H(A&/E
q"C3;J6p
|/8=#/7
?v0L&V-
m+]0W'f$0T
X(Z2/`
?Y)W38U
X*L2];\
o^\(<R
)1x>X(Z<9x
V&T1&7O+
$T&:7m
b$V%D4u3G
<Y)U L
U'A'P6O
''n(N>L*G
x9M)`&
6Q5v#>=H
M*G+<B
Y4UR4D0C.o
*O=['U$
<W3t%<;B
19p6P R41p
5E7G-l
n(Z)P a'3U
Y)[30c
8^.^:?Z
(X*F#Y,?b&?<D
*O=['U$
1D3A!:
N*&Y?EY?O
??v0V&T2/n
l-I-9_9!f
&&o)O?M+H
u4@$m+
\Y?O7>I
=B0V"R)%&`
EC5H/_
qVu&M$
}.[65@
iO?M%B
7Q!V!<MJ,\(;F
2B1CI
s5G6Q!`&2V
Z*X41b
7G5I/n
D{,]43:
5E7K(`
)O)1V0@
!Q#;#u
u6]6F#A
CE7F!Q
5S#Q52_
2U1r':9D
c5Q5r#@
3U%Z-@
;r4H"R1
p6H;^.o-9K
O?M!>q
:J9K'1j
b%V)H3
W%C/], #e
qVu&M$
}.[65@
iO?M%B
7Q!V!<MJ,\(;F
#H:\(X/#$b
W P-8k
(X*F#Y,?b&?<D
(0y?Y)[=:{{
vP R.K
4R"R63^
-d":>D
O3D*U3V
?H-3?'y
C'=a"3>$
A'W%C a
W-6w >"
{2C(.2
b%P1A"@
2 P":7h
R2VH'@\'P
oM).K
-]/C X+F
]/I/X>W
%U'7=|
J&./J.]
^{+M+3T2B
(0y?Y)[=:{{
6Q5v#>=H
M*G+<B
Y4UR4D0C.o
%J8^*Z1-
$:(X*BP4(
!)`&@0B$A
z;O+b$
%;@/]1
/_-A'f
z;]'J%
b$V%D4u3G
2B0L2s
9L;I)B):X
(M?Y%S*&)o
X!O$/`
Z"k-K;I/L
q0D i/
U0y5F$U!N
O=['T/Ir
/H9_)\0,*l
[+Y>&z
J:H$,$?[
o%;0@2J
Y%-1U1n
H)`&?<B
&.!G7l
H)0-?J
4C1M=|
g?F.^2E
^.K4K*f
\#@ Gx
L*I6?H
Si/I/JD
aV&T(E
)B&o%27
h!g\,^81p
}0.#Q7=T
T&@&T 3k
=,e#;#
X41<Z*Z."0v
]"R+9_
1P%0110J
/>=[+O
'..^S
H8J"?M
-c%9I;]
E#S !;
H.^,J'f
@$m!0
}}!X-U
/7/J.]y
>w1M,K
$:!Q#;#'C'dR
|3-"P6<j
g F,K&V
-Z!) F6m
YP4}5@
B!\"'_
9L T<G/L"<Nk
O?M!>u
>X(X>E
@/]16p
I%Y<9p
{5@*k
a<X<k"
8\8g!(Z
v8]:1xp
i"4O(/H1+M)`&@0B$
K,\-KD
} 93.B
]5eIm
B ?=DZ
)H'8^-8h
_&N</)h
X,I&U 2O
d#:\O\:J
pg$C4j
F8I%*k
s=a!1.U
]92g!(O1U
\+Y54j
0B&R#M
y25/Q54o
u'@0<G*L
.H8J,\
R3U%Z<
7F4H'W
&U'76i
>G2/?y
#S!C3:
9o)E$5;s
/#8p6J
o&A2/T1y
(^9Jz"G
J,e#E5G!Qx
<23@&P
>v0L+M
?C0V N
^9p,9=
=C&>E#*
S5&-<V
}72I(^)C
>N<Z*k
XB;J-!i
O<S"ED
M*O{@'X
(;E!4=Q
K2%65m
:\,Z+P
G$n)0(M)W
r<O+\/
n(\;L?E6x
A/];?~
:F*&>Z
U3C1WY
}-L,,[&+i
K.7w ?#H
A*@)I/
L>X'V2V
Y=t(8J7>I
c ;]'+M=|
j+O*>b
g"':gw
7G5O W'A
s2V2{=[+n
Y C4G"@
p)0&,-\
%B26=0`
~#[)N&4.b
H.^^:s5
v7S7~8^.Z<L
A/Ie#G#
_h%02/;
1T0y?R
c f$C"
l/5>w1<
z;^:s5
Y(Z63[.5
O,f! Q7A
E!i f"B
0V&][?v
p1T0y?
v7S7m'.W
}s',;r4I&H
U398L+X+>
!P">;c
~BY.J
X&/f +
F[?v0H8J,\
~3u;J8^
1/B/I/
I:\";0S
t.5>6=E
Y(Z6 6<X
d$@$c%g
[\N-9.q
G4R"Y=}4r66Q
w6R6};]-
F P"D4u
t={X'U3};_;b$B2
0?M%/C
`<G/]1D
c*lW&T23r
u1K%D,4
U A"8\
l41/84d
U3C1W'f
e,jG6D"
@$/f 286ER 7_
R!S/9M
0K;I+J
^41)>4;
=Ya(n*J
b+mX'U34u
C'2{=G-K"<q
I&C%26K%0p
^&V*=m
B&f/i11
iv0V&7Q!`=Y
V"R F6w
XzF5T%
];J$D1i
X++W1'f
i/I/J$
_/]1.f
M?YK$!>P
\0/U ;z
~'0-J,16A
z,Y-J#E
n'W&M)H/
M+Q#3?
'n(J$X;8r
:4D6N2k
5D6J0F"@
.W$B(A
M23D+B
QY>N<Z
w1W'R4D
q0P4};\,^8?~
Lx#;K)/"N$@
>B2//
={L/(:<}4D
w(nF"x
^,J(iJ
P".S/_
;)S+[B
_92X<X
{2$h.G7D"R
K;I.^
/5F69_
9T$1W%c
@$%cW'K,\
l,G#l)O?
r3K.f F6
\3z<M=
`&/_!7
&.Y)J,
9,b#4DV-n/:^
=D3C F
P#G8D3C F
Y'C!X(D"G
T*NU6E1WJ
GI!V/Y
v-I3r@
*WB2?Y|;p
@7G4RJ
0V&T21X
1U1x>E-C
b7L*Z(Nx7
2t>)[=M
-#j,J:7Q
&B&o)I!'&L
[=M?Y&_
Zt2M=B
jV&M+:Z>Z
Q7Gqa
F6D"<u
=.g!'W
',^8(i
:s5S#;]
:H.^e
h13U%W1+j
S5E!G$/
5S#Q71p
3W3z<D4
N(X*L&g>.(n
\8q7Q!P6
s4jN&5Q
O+b$B2=[%L
1U1x>R
y?Y)[=
.g!G7?A
(L(a';3
8];K9_)P
p1U1r40
)M)`&-]
F6D"<}
*N*c%-]
:H.^e
#9 PQ7{
=[+Y?9x
1x>X(D"%%
8yL(Ul
_9I%C$5
4>xM=k]-l
AJ,\.H"c0*$b+[
0V&T2,m
>A:^;}s
)l*ZpC3r
'n(N>6Pz
t5Q5y7
z;_;l*q
B0N<Z*k
X>N<Z$e4'
p1?[.C
)Jq-Q5
#E5G!K
4.g!G7?Q
#C%U'A+b
*Fi%E!
K0T7Q!S5?v
P08+FR
<Z*X>H
6/f F6>PK
3R4D6P
oP3<|y
M#?Sh
s8[!_l
Y)9;$M
i$/J;l
~;E i/I9H.
f1 R4D
2T$V0:s
L'n(N>
y>X(Z<
j*N*b$
\.H7vi
3o.I-
5|:Y)x
??[?r4
1?[?t2u
t;}/O=[(i3E
p7q+K9_.o
y!E!e#
b*l3;I/]
M+[$Bk'C'h.W
,"k-C3+o.A%
H.^"DJ
E- i/D4
$9_/\:
V"k-J:
%S5E6P
q;O)Y*L
+b$A1o
>B0V%df
B$T%C:\8\
{{-k31C%O
c*Ih)!*Y
z8FC%)ME]
r"b'=R,;x:G
j"-I5V
:Gp(3UQ
~4B'>"H
+[?Ty,
I9^l,
%5+Bq,
Xx;5D3B1j
~,O*/Q
(hM-&,
+lO>D"
Q7r.G
$!};g
?{Tb$
P5E-K;z
Fy7S7O
H,H+YJ9K-
m,%:~7Q!T,g%A%
k$T-d"
}<A%k-$T
=M"D3r
@$l*A0
I/^R5C
E!Q#DU
x9]9p62>L*P
<Z*X>J
v7E!.c
C%U'A1p
F P"D0q
3U%W1=|
8^.\:F
z;^:?T2B0V"c
6R4D6P a
o^87v
|7Q!C%B
h)Md{\
UBgquh
#X}wfMN}^
TkuMLmF
@Op}MjQ
xGydZepS~
Wh]mtN
yUwM}]h
ssZOGD>
H.ooN;
!Xi^oq
XJWpq`
WtSOVd
ojOif"
* Ur~O
J8o`d;
B2xvC__
Uc^DH`ZGnba|
xJoNEz
.HG|vpm_i
KENYPaVX
,ifXhdC
SMksgp;
,vqZf{.
vx_LFCPp)
.ujdr'
VsZOKV
WrEei0
>NMl_G
X@aKKm
&QbSFwyK
N>4un8
UBgqto
Y?`SxCtB}b
Ny|A\8
@$QYb,
!rq8=l]rO
]d|FAj
Zy}ch2
;K@zGrik,
EWy8{li_
ssZT_j
@lkFW3
#X}wBeXdv;
BlEznS#bExJpgPb-
8 \pH.
Q\:|YPacE
RGdpLnd)
Zy^b`/
cT{ShOn
+{`GE|+
5zpBgF
tl_aidZ>
WXqjo-
&QbSI|
UBgq7|S\
eUBLM+l_|8
VCL]L}R4Z
rAuMLm
{^q0jPjX
Ur~8o`Uo
.Yj[zV(
\nfR^IzK-
3WDNKI
VJRGdp6
%uRy]a
*tsX(kN
=YNHQHyN;
]Joi@gZ(wk[
/\ys5un-
8YlMNPw
6ckpRx
&eDw6cHD7
s2V1xU%4R
J:(N>\
u4P#)o
t5Q$)o
v7S&&`
[?v'W
o.@$`&6F
M+;I.I
Y=)`&1
{q8Q7
v?L*-_
s:O),^
j+B&e#
\8d":J
"k F,^
u<M+.\
N>R6%l
v?L*-_
y0I/2@
^.B&5|0V
YL<!G
T$)O^
7G(N4u
a(A'*X
V&'A$e
t=[= R
.J!h$B
T$8\+b
L<C'#j+
N>R6%l
~7D"%W
L(?v&@
8q*L2@
O?Q5$m
6F'A'f
o"\:8>T
]';n F$Eg&0@
Z*Y$=T
q3U$:N:{
J,Y#==n
H.]'8B
^:p5E'G
O&i/G6(<
S4};E.\7?f
D"N4:B
K'7C$C
w6P4<>G
vX=B,*Y
+Q0 _)
[75/3?d
Y<u3U%=Z*V
~7*K;/
4?-I8k
}<X<e"D)
<S'm+/_)E4W3Q
m+M%l)3'R-\
_7+N%!h
]6F28,Q1U
@$F&#7q
{$^8G4P
!?/Zj
9Y6}k
=p3U20
dK%@
V"D(@"^
Q4?-K)
y.K(V"B&`
?V0k+E39W%b
>[8+T
L.R$'Q
6W#6(F(L
P&:m#=;
X!9G2J9j
m#>I-=;Im9_
U+Y#=E
N"<n ;C)G,k
K3U$[.
R28CR
2N&o(D,Z<K
W28q)J0A
N">w/7
M'<n%;3/
=W3z<Z*X>
H.^+M<}
t5P4};]-
Q7G5S"c
`(N>K-]
m,H,e#
P6F3U%d
^:s5S#Q7%d
K;3U$e
f'C'n(
e#D4E#
F6<Z)h
O>:>W
u)/?-+;Z
z/?/=;+J
%H06&G
Z<L>X(i
Z<L>X(i
Z<L>X(i
Z<L>X(i
Z<L>X(i
Z<L>X(i
Z<L>X(i
Z<L>X(i
Z<L>X(i
Z<L>X(i
Z<L>X(i
Z<L>X(i
Z<L>X(i
Z<L>X(i
Z<L>X(i
Z<L>X(i
Z<L>X(i
Z<L>X(i
Z<L>X(i
Z<L>X(i
Z<L>X(i
Z<L>X(i
Z<L>X(i
Z<L>X(i
Z<L>X(i
v4.0.30319
#Strings
#fsdf#
#ggggg#
#hfd.dll#
#fsdfsd.dll#
#fssdf.dll#
#hdfgsssssdf.dll#
#sf.dll#
#hg.dll#
#s.dll#
#sffds.dll#
<hbdkgFmbaaF>b__0
<GetSafeEnumerable>d__25`1
IEnumerable`1
Rows`1
$$method0x6004239-2
ToUInt32
ToInt32
198-Protector-V2
Func`2
Resolve2
Tuple`3
IsProcessorArchitectureX64
Reserved4
_isAppEarlierThanSl4
ToInt16
get_UTF8
<Module>
FSpIkaAgdaA
bnfdIlAfrdA
NOT_CANCELED
CRYPT_USER_PROTECTED
S_DEFRANGE_SUBFIELD
COR_E_DIRECTORYNOTFOUND
Get_SPERMILLE
LOCALE_SSHORTTIME
fprfpAddIF
hbdkgFmbaaF
cIFmngImfkF
WAMONGROUPING
oSFdkcffgkI
LOCK_ID_DISABLE_MASK
System.IO
HKEY_USERS
ERROR_FILE_EXISTS
COR_E_FAILFAST
LOCALE_SMONTHDAY
emkipmbApma
rcdata
SlckmkfrhFb
kkdkkdhlkFb
mscorlib
eacpgckiAlb
oAkmdbmSimb
IsRawBlob
adbccbIAabc
get_IsCharSetNotSpec
ckkjdgikdfc
System.Collections.Generic
get_IsStatic
AlgorithmId
GetProcessById
lpNumberOfBytesRead
hThread
get_CurrentThread
thread
get_IsAttached
Get_IsStrongNameSigned
CtorSecureRTClosed
MDMemberDefRidsAllocated
IsCreated
Add_RunWorkerCompleted
M_isInherited
UnderlyingField
_Build
Imipohnfhmd
command
set_IsBackground
DynamicMethod
DefinePInvokeMethod
ResolveMethod
Set_RemoveMethod
DeclaringMethod
GetMethod
method
NetGuard
fsdffsdfasdffsd
gmmnjmobfAe
get_IsInterface
Replace
BinderNonCreateInstance
LoadResource
AddLinkedResource
FindResource
SizeofResource
GetHashCode
SetCode
CryptoStreamMode
Xenocode.Client.Attributes.AssemblyAttributes.ProcessedByXenocode
GetValidShuffleRange
CaptureGroupOutOfRange
ActivatorCache
EndInvoke
BeginInvoke
NeedPtrTable
GetEnvironmentVariable
Enumerable
IDisposable
Browsable
set_Visible
HaveWrittenPreamble
get_Handle
RuntimeFieldHandle
get_MethodHandle
RuntimeMethodHandle
GetModuleHandle
get_TypeHandle
RuntimeTypeHandle
CloseHandle
GetFieldFromHandle
GetTypeFromHandle
Get_IsNoMangle
ToSingle
Console
get_Module
DefineDynamicModule
hModule
module
set_FormBorderStyle
set_WindowStyle
ProcessWindowStyle
GMTName
get_Name
Set_ModuleName
Get_BaseName
lpApplicationName
functionName
lpName
AssemblyName
GetDirectoryName
ReadLine
lpCommandLine
WriteLine
set_Scope
CreateScope
EndInliningScope
rperpe
MakeGenericType
get_FieldType
DefineType
ScopeType
CreateType
ValueType
get_NativeType
get_DeclaringType
GetEnumUnderlyingType
flAllocationType
get_ReturnType
lpType
AppDomainManagerType
get_ParameterType
ToObjectType
System.Core
ResolveSignature
SetLocalSignature
MethodBase
Set_VersioningManifestBase
Dispose
ParsedDate
Truncate
CreateDelegate
MulticastDelegate
set_WindowState
FormWindowState
STAThreadAttribute
CompilerGeneratedAttribute
PrePrepareMethodAttribute
UnverifiableCodeAttribute
SuppressMessageAttribute
UnsafeValueTypeAttribute
BabelAttribute
SuppressIldasmAttribute
SRDescriptionAttribute
AssemblyInfoAttribute
YanoAttribute
DotNetPatcherPackerAttribute
BabelObfuscatorAttribute
CryptoObfuscator.ProtectedWithCryptoObfuscatorAttribute
DotNetPatcherObfuscatorAttribute
DotfuscatorAttribute
CompilationRelaxationsAttribute
SmartAssembly.Attributes.PoweredByAttribute
RuntimeCompatibilityAttribute
_GetByte
DynamicBaseValue
GetEraFromValue
SetValue
_GetPublicKeyValue
get_IsAlive
ConvertLayoutToNative
SetThrowOnRelative
fprfpAddIF.exe
get_Size
HeaderSize
dwSize
M_maxSize
Resize
mmmSgFbSIf
SizeOf
fshdfhddf
fsdsgdgfsdf
AddMemberRef
Get_IsByRef
get_IsByRef
mkobiIIflgf
Ipdjdjagmmf
nlrbIigkiof
khfodSegrrf
hknrmjmciAg
mrAcjergkcg
ghhhhfdffffffg
CModOptSig
elmoIjdllig
System.Threading
Encoding
IsLogging
Ceiling
FromBase64String
OutputDebugString
ToString
GetString
ripSblaigch
FtLastWriteTimeHigh
gbiIgokpplh
ComputeHash
Rehash
LocalPush
Get_AutoFlush
get_ExecutablePath
Set_ManifestFilePath
GetFolderPath
ObfuscatedByGoliath
get_Length
GetMonth
kajkbAhdSAi
AidepkjimSi
nrjpSdlfrgi
blbmdpSgcji
rhFaFpcfaki
IsCallConvWinapi
MinAdvancedHijri
kidgceampgj
kdmrgighfij
creobddpamj
fjkSFalfSIk
AsyncCallback
CancellationTokenCallback
Set_DecoderFallback
callback
FlushFinalBlock
nArrfkgdIfk
momjbhirkfk
lgFSrcgdfgk
jmkAklciSkk
hkknglfFIpk
ValidMask
DwActiveProcessorMask
Marshal
Normal
ReplaceBufferAnsiInternal
Principal
AddStringLiteral
okpFehbcgdl
lainbbojkkl
kernel32.dll
EcmaPublicKeyFull
Control
GroupToStringImpl
DataStream
CryptoStream
MemoryStream
geapmlncmam
Program
rggfenFmmcm
Stelem
get_Item
System
SymmetricAlgorithm
AbFmframllm
ICryptoTransform
get_MetadataToken
hToken
GetSigFromToken
lpNumberOfBytesWritten
AppDomain
get_CurrentDomain
rgorlpdimnn
AppWasBuiltForVersion
Application
get_Location
InvalidOperation
NineRays.Obfuscator.Evaluation
LoaderOptimization
System.Reflection
GroupCollection
ManagementObjectCollection
IsArgOperandInstruction
CallingConvention
RuntimeWrappedException
MissingFieldException
SetInnerException
Comparison
dmmAmSkrddo
GetDynamicILInfo
FieldInfo
MethodInfo
startupInfo
MemberInfo
ParameterInfo
hResInfo
ProcessStartInfo
DirectoryInfo
keabckpbpfo
deIaaIkkgjo
PropertyMap
set_HotHeap
M_iMethodsToSkip
SystemNetHttp
M_Group
_group
strtup
System.Linq
set_ShowInTaskbar
DaysUpToHijriYear
PeekChar
GetLineNumber
Get_MetaDataHeader
Reader
DESCryptoServiceProvider
AddMDTokenProvider
MethodBuilder
ModuleBuilder
TypeBuilder
AssemblyBuilder
SpecialFolder
CreateParamOrder
lpBuffer
ResourceManager
Debugger
ManagementObjectSearcher
Get_Listener
AssemblyNameComparer
get_IsPointer
BitConverter
ToLower
GetTokenFor
Win32Error
ManagementObjectEnumerator
GetEnumerator
SetOperator
CreateIterator
.cctor
dotNetProtector
get_IsConstructor
CreateDecryptor
IntPtr
System.Diagnostics
GetMethods
Get_HasInterfaces
System.Runtime.InteropServices
System.Runtime.CompilerServices
System.Resources
fprfpAddIF.resources
bInheritHandles
HasModules
EnableVisualStyles
Zeroes
EmptyTypes
LoadPreferredCultures
lpThreadAttributes
FieldAttributes
MethodAttributes
TypeAttributes
MethodImplAttributes
GetCustomAttributes
lpProcessAttributes
GetBytes
SectionSizes
BindingFlags
MapToSpecialFlags
dwCreationFlags
GetMethodImplementationFlags
SetImplementationFlags
AcquiresContextFromThis
Equals
Get_AllStreams
System.Windows.Forms
MaxLiteralTokens
TooManyParens
Contains
CallingConventions
CreationOptions
M_genParamPos
GetParamProps
get_Chars
GetOptionalCustomModifiers
GetParameters
Get_IsAnsiClass
get_IsClass
AssemblyBuilderAccess
hProcess
GetCurrentProcess
lpBaseAddress
VirtualAddress
lpAddress
sssssss
Get_CurrencyDecimalDigits
S_UDT_16t
Concat
Set_DateTimeFormat
ManagementBaseObject
GetObject
object
Select
flProtect
CharSet
NTHeadersOffset
Preferred32Bit
op_Explicit
DecimalDigit
System.Reflection.Emit
SetCompatibleTextRenderingDefault
IAsyncResult
result
System.Management
lpEnvironment
InitializeComponent
get_Current
CheckRemoteDebuggerPresent
IsDebuggerPresent
_EnumCount
textToDecrypt
ParameterizedThreadStart
Convert
FailFast
IgnoreTimeout
ReliableEnterTimeout
SuspendLayout
ResumeLayout
Get_Input
MoveNext
System.Text
ModuleContext
context
IsTaiwanSku
cxvxsssffffffffcvcgggggggv
ReadFieldRVARow
Syntax
ReleaseMutex
_prefix
ToArray
get_IsArray
CilBody
secretkey
System.Security.Cryptography
DefineDynamicAssembly
CallingAssembly
GetExecutingAssembly
InternalAssembly
BlockCopy
library
IsSubsetOfPathDiscovery
CreateDirectory
lpCurrentDirectory
SetCurrentDirectory
op_Equality
op_Inequality
Get_HasAuthority
System.Security
SuppressUnmanagedCodeSecurity
InitializeDomainSecurity
IsNullOrEmpty
198 Protector V2
System.Security.Permissions.SecurityPermissionAttribute, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
SkipVerification
WrapNonExceptionThrows
_CorExeMain
mscoree.dll
hhhhhhhhhhhhhhhhhhhhhh
BQUhhhhhhhhhh
FZYWhhhhhhh,&&#")TZY\hhhhh-**((>9E[ZYXhhhh//.@VJJRS[ZYhhh2113dC:7Af`[Z]hh455+L<::7Jc[Z]hh;60
L=<::Jb`[^hh;8
PD=<Cgaa_]hhh'
OMKeGHINhhhh
$hhhhh
hhhhhhh
hhhhhhhhhh
hhhhhhhhhhhhhhhhhhhhhh
NUVUUO
TVVVUUUP
]WZZZZZZVVG
X[[[[[[ZZZVK
\_____[[_[[[LE
```````__[_[ZCe
gaa``aa````__[H=
haahhhha`c
jhhhiihhh
kkkkiiki
rkkkkkkkf
yyyyvt
ollllmml
yyyyvvvt
rmmlmmmd
}}||yyyvvt
sppppmm#
}}||yyyyyt
uqqqqqR
}}||yyyv
pqqqqq
}}||yyv
~qqqqF
'2.**)
.422.**(""
/5422.***(!!
1&88542..**"("!
@:8522..**("!!
I:542.***("!!
B22..**(("
D***((!!
B<>?;977
a_deeeb
gffeeeeeeX
gdfjjeeffffb
cjjjjjffjfeeeX
hkkjjkkffjfjjf]\
immkkkkjjkkjjfff^W
mmmmmmmkkkkkjkkjjPP
qqqqmmmmmmkkmkkkjjZM
pqqqqqqqqqqmmmkmkkkaSJ
nsssssqqqqqqmmmmmkkkhMJ
psssssuussssqqqqqruurQMJ
ussssusssssssqq{
uuuuuuuussusss
uuuuuuuuuuuuuw
uuuuuuvvvvvuu
vvvvvvvvvvvu
~~~~~~
wyyyyyyvvyyyx
wyyyyyyyyyyy
{yyyyyyyyyyl
yyyyyyyyy{w'
|{{{{{{{{{Y
}||{{{{|||
|{{||||{{I
|||||||z
}|||||||7
&0;@;>
,1@@;;;
!)3@@@@@;;?
(2>@@@@@@@;;;0,+&&&&
%2<DDDD@@@;;;444444.---***$$$
"!)?BEDD@@@@;;;;44444.--***$$$$
58ADDDDDD@@;;;;;444/4.--***$$$$
?EEEDDD@@@;;;;4444.4...***$
THEEDDDD@@;;;;;4444/..-****$$$$=
LDDDD@@@@;;;44444...--***$$-
UDDD@@@@;;;;44444.--***$$:
[FDD@@;;;;4444/...-***-D
UE@@@;;;;444/4.--*-D
LU@;;;4444...4FE
UKLLNROOKG
C3-QNZ2
=i|tC`
Cab%D_
deONZ2
kwNf389
|!~K!s
uyXg]d
K@2AFI=
gI5d.C`
V~^2G
pryO3y
dF(%X-
ql||/B
Nhn96c
2lDa$G
l*)$bo
J)%T.@
04,04"
? P(*Y
Q"&Z9(
F4?7/5
HP@Q@mN
n5/MEV
"Z(F"Z
L=D(U,)
?CP+ud
-ZC[IWx
r%~y<[
H^"bU
SrzxK(
fC'<\O
DGtq|
@/H7(f
b+~Li1}Z
'=qp'>|
c@cZS~
0=-7;/
e]wQZy
K^zewu
9\^6,T
kCDn>*
=VQ&~Z
u5dV_?m
gy_AX
;!!${~
B7e7jBO
`.Bg F
MX\VXn)
h*,-+H
CCCCCCCCCCCCCCCCCCCCCC
$.-CCCCCCCCCC
+333CCCCCCC!
/335CCCCC
'#&3331CCCC
(?>><7333CCC"
!@,**,A3334CC
>****>9336CC
>****>8336CC
;,**,B2220CCC
%)CCCC
CCCCCCC
CCCCCCCCCC
CCCCCCCCCCCCCCCCCCCCCC
MMKhwtv}
MKWVVVG
]NVVVVVVTd
RSVVVVVVVVDz
NVVVVVVVVVVEJ
RVVVVVVVVVVVK<q
\WVVVVVVVVVVVW<;
UVVVVVVVVVVVVV@9e
WVVVVVVVVVX|
NVVVVVVVVa
VVVVVVVVa
QVVVVVVVZ
nggggggo
WVVVVVVVb
gggggggg
WVVVVVVI
gggggggggg
[VVVVVV
gggggggggg
[VVVVV>
gggggggggg
WVVVVW
gggggggggg
XVVVV3
gggggggg
nggggggo
jlpsu{
C8AF^`fimr
!(01457=B
$$$$$$$$$$$$$$$$$$$$)
"$$$$$$$$$$$$$$$$$$$%
$$$$$$$$$$$$$$$$$$$$-
'$$$$$$$$$$$$$$$$$$$$*
-&$$$$$$$$$$$$$$$$&-
+$$$$$$$$$$$$$$+
-%$$$$$$$$%-
,-/../-,
a]gnnnay
cgnnnnnnn[
ggnnnnnnnnngX
cnnnnnnnnnnnnW
ggnnnnnnnnnnnnn[N
adnnnnnnnnnnnnnn]S
gnnnnnnnnnnnnnnnngPG
gnnnnnnnnnnnnnnnnnWLh
cnnnnnnnnnnnnnnnnnn]LG
gnnnnnnnnnnnnnnnnnnnaLGK
dnnnnnnnnnnnnnnnnorroHIC
gnnnnnnnnnnnnnns
nnnnnnnnnnnnnn
dnnnnnnnnnnnno
gnnnnnnnnnnnn
nnnnnnnnnnnn
pnnnnnnnnnnnk
mnnnnnnnnnnn~
dnnnnnnnnnnZ
nnnnnnnnnng
nnnnnnnnnnD
nnnnnnnnnj
onnnnnnnn1
onnnnnnnY
onnnnnnn
tnnnnnnM
nnnnnn
unnnn9
&)))&`
{5>@BEJR\qv|}
#))))))'l
$(.4;=@?EOU_
##)))))))))&
&))))))))))))))))))))))))))))))3
#&)))))))))))))))))))))))))))))/
#))))))))))))))))))))))))))))),
#)))))))))))))))))))))))))))))*
-%))))))))))))))))))))))))))))*6
0))))))))))))))))))))))))))0
2))))))))))))))))))))))))2
8,)))))))))))))))))))),8
6+))))))))))))))))+6
:6+))))))))))+6:
876<77<678
qv*wrk
JPz={upkFw|
|"H5n+6&
f+ss:
C0a pf
$E8aP`
5$B a P
hD ">|- p
EpdYuo
< 3O P
vZ#m#a[K
EMR+;%
dis7Fh
a'Ed`94
89i!!H
?ANg8Y
!GVQ8%
gwBMw
0~y23p1X
]P};@#
&OoiTq
qi"}!;
&-NL>
IDATB$
LMn{5K
fff---fffffffffEEEfffbbbIII
lllAAAiii
mmmeeePPP
eeecccrrrhhh
cccfff
bbbMMM___ccceeeeeefffffffffeeedddaaaTTT
#5CPah]I9'
IDATx^
#""""""
`;Y]1]
gggOhhhciiigiiigiiigiiigiiigiiigiiigiiigiiigiiigiiigiiigiiigiiigiiigiiigiiigiiigiiigiiigiiigiiigiiigiiigiiigiiigiiigiiigiiigiiigiiigiiigiiigiiigiiighhhhhhhdgggO___
aaadddi
cccj```
fff---fffffffffIIIEEEbbbfff
lllAAAiii
mmmeeePPP
eeeccc
cccfff
bbbMMM___ccceeeeeefffffffffeeedddaaaTTT
#5CPah]I9'
XIDATx^
(VUV_*;
ZO'"""
gggOhhhciiigiiigiiigiiigiiigiiigiiigiiigiiigiiigiiigiiigiiigiiigiiigiiigiiigiiigiiigiiigiiigiiigiiigiiigiiigiiigiiigiiigiiigiiigiiigiiigiiigiiigiiighhhhhhhdgggO___
aaadddi
cccj```
3U59UV
{1:6.~
H{o*\/
z@4pAQ F:
uiqkw
f5pH+c
'~HQ7a
0phqN{
Ig5pH;;}fX]
*|5Y~h
v9ooe^
J;"A*3
C~5iGt"
ffffffffffffffffffffff
ffffffffff
fffffff
ffBCC@VJHHETc\[]ffIDA%VLJHHTb`\^ffIF/
ZPLJOeaa_]fff?
&9YWUdQRSXffff5#0+*8M><;:=fffff40.*)'$!
fffffff7.+*($ "ffffffffff61-,ffffffffffffffffffffff
1))))**)H
R....++++R
uqqqqqqp
||y|yyywww
vuuuuqqF
||||yyyyyw
vtttttk
||||yyyw
uttttt3!
||||yyw
}ttttd
tvvr#&:G
xxxV"4ALh
zm />PPPg
{?-<KPPLLL
o'6@PXPPPLLLEECCB===;;875=
2DQWXPPPLLLLEECCB==;;;77
UKWWWXPPPLLELEEB===;8;7N
`ZWWPPPPLLLEEECB==;;;I
fZWXPPLLLLEEECB==;;O
aPPPPLLEEECBB==S
cLLLLLEECBBX
a]]^[YXX
gWWWWWWWWWWW
h__aaaa_aa____
?&2GVi
|#0AOdkk
3,:O\kpkn
u'9HV]ppkkk
%6IS`pppppkko
Q5:R^npppppppkkk\VUOOOOFFFFFF>>>;;8;;
0<N^lvvvvpppkkkbbbbbbZXXXTTTMMMEEEDBj
JISoswvvppppkkkkbbbbbZXXTTTMMMMEEDD[
cfrvvvvvvppkkkkkbbb[bZXXTTTMMMMEET
owwwvvvpppkkkkbbbbZbZZZTTTMEEEEK
{wwvvvvppkkkkkbbbb[ZZXTTTTMMMMm
vvvvppppkkkbbbbbZZZXXTTTMMX
vvvppppkkkkbbbbbZXXTTTMMj
xvvppkkkkbbbb[ZZZXTTTXv
wpppkkkkbbb[bZXXTXv
pkkkbbbbZZZbxw
Kj,sEM=
Mj.tBBA
Mj.jI_4
Ok0kBBA
Mk.dKa2
Mh-xJ]5
Mk.dFT9
Mm(?IY8
Mi-wDH>
Oj/xBDA
Pp,@DI>
Pl0fBBA
Oj/xBBA
Qm0eBBA
>0+3-&
sGZHpD)
VCR2=-
GHx-|]
1^|HQA
(@j4%W
8w]6Sn
?5luFpP
"b-Csn
AGGG.
(xJ:T=
v(#0&w
HWM*[i
Go'G.+
2wyp<J.
.yp>+B
Tv%"dO?
tBr,*Q
[|x!C0
Z6\OG/
1VZ5])
$*xzE?v
WW<F!D
@e _2~e
>3@`PW:
/L7mN!
WsFZ^Q=d
T1$ZND
tPGtXA
oXBhS6
I:,P[x
?LS'uW
z:qO-ukR
CwO7z{zq
?b||<Pfll
@_'*o8
<Z[[Q9T5d
Ul$I{&
^=Q)ZP2&
p~F:jO
hhhhhhhhhhhhhhhhhhhhhh
hhhhhhhhhh
hhhhhhh
:GRO96
hhDEEBXLJJHVe^]_hhKFC$XMLJJVdb^`hhKI/
\QMLPgcca_hhhA
&;[YWfSTUZhhhh4"0+*8N@>=<?hhhhh30.*)'#
hhhhhhh7.+*(#!hhhhhhhhhh51-,hhhhhhhhhhhhhhhhhhhhhh
4++++--+M
W1111////W
{vvvvvvt
}{{{{vvK
}zzzzzq
{zzzzz6"
z}}w$'=L
\#7FQo
r 2BUUUn
D0?PUUQQQ
s(:EU^UUUQQQJJHHG@@@>><;9@
5IV]^UUUQQQQJJHHG@@>>>;;
ZP]]]^UUUQQJQJJG@@@><>;S
ga]]UUUUQQQJJJHG@@>>>N
la]^UUQQQQJJJHG@@>>T
hUUUUQQJJJHGG@@X
jQQQQQJJHGG^
hddeb_^^
bRRRRRRRRRRR
cZZ\\\\Z\\ZZZZ
;%-CQd
"/>J_ff
0+6BWfkfi
o&4GQXkkfff
$2DM[kkkkkffj
L16MYikkkkkkkfffWQPJJJJBBBBBB:::77377
/8DYgppppkkkfff]]]]]]USSSNNNIIIAAA@?e
EDMjmqppkkkkffff]]]]]USSNNNIIIIAA@@V
^alppppppkkfffff]]]V]USSNNNIIIIAAN
jqqqpppkkkffff]]]]U]UUUNNNIAAAAF
}uqqppppkkfffff]]]]VUUSNNNNIIIIh
yppppkkkkfff]]]]]UUUSSNNNIIS
~pppkkkkffff]]]]]USSNNNIIe
rppkkffff]]]]VUUUSNNNSp
~qkkkffff]]]V]USSNSp
y~kfff]]]]UUU]rq
~xyyz|{{xs
Kj,sEM=
Mj.tBBA
Mj.jI_4
Ok0kBBA
Mk.dKa2
Mh-xJ]5
Mk.dFT9
Mm(?IY8
Mi-wDH>
Oj/xBDA
Pp,@DI>
Pl0fBBA
Oj/xBBA
Qm0eBBA
V[;x{;x&
c-IxL)
=8NPd!
&Y[M,ZE
<ILNJF
Leb0X?
4GQ.`D
X>/y"0
x|u7V>
2 c0nL
"19\(M
4-YZ3}
pQv%I0
t\e* ]>rG!
7+P~~2
*4Vpo@
_t6:N>
\G$2DH
("29W5t9
@E W0~e
`@S+2}f
IDAT2.Z
El8g9f
WsFZ^Q9d
M+V;[`
I:"P]x
fTshic
;jA@5o2
}okkCww7
E@Rp@Tt
t7TUUaAn
DG#6v0F
Amrz@XV
@tnj`P
_3:A=V
(m!I0Y
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
<assemblyIdentity version="1.0.0.0" name="MyApplication.app"/>
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v2">
<security>
<requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3">
<requestedExecutionLevel level="asInvoker" uiAccess="false"/>
</requestedPrivileges>
</security>
</trustInfo>
</assembly>
fprfpAddIF
GetEnvironmentVariable
1748361199
1748361683
_ENABLE_PROFILING
_PROFILER
273729089
273727403
-146268713
146190225
-2000057836
2000089065
800601963
800612688
-1692853750
1692726807
-572653153
572622920
-578102765
578131691
-740370479
740523820
-1738534636
1738495437
713971740
714028395
1054467026
1054382129
338278799
338256232
1574596968
1574584390
1352451482
1352514466
-1918606124
1918563639
2006462564
2006497376
-588244954
588240151
2007530751
2007557013
-1834975541
1834883366
-1177177992
1177241739
1651935486
1652005974
-26862446
26754112
-1878569449
1878577517
2134395918
2134432868
2034392578
2034414587
-2021426277
2021477035
-1054608218
1054616663
1191178745
1191114681
737335558
737299851
406277968
406205306
264917768
264927977
264293673
264266859
-1128802875
1128901157
-1434779786
1434729819
1208557536
1208562074
-2107112733
2107020706
-1197400505
1197256540
276015386
276006650
868352677
868441828
580003645
580014762
-39297058
39281461
1317915614
Antivirus Signature
Bkav Clean
Lionic Clean
Elastic malicious (high confidence)
MicroWorld-eScan Gen:Variant.Ursu.216192
FireEye Generic.mg.ffd5ac4a81ab3184
CAT-QuickHeal Clean
ALYac Gen:Variant.Ursu.216192
Malwarebytes Clean
VIPRE Clean
Sangfor Trojan.Win32.Save.a
K7AntiVirus Clean
BitDefender Gen:Variant.Ursu.216192
K7GW Clean
Cybereason malicious.a81ab3
Arcabit Clean
BitDefenderTheta Gen:NN.ZemsilF.34236.Nm0@aekGftfG
Cyren Clean
Symantec Scr.Malcode!gdn33
ESET-NOD32 a variant of MSIL/Kryptik.ACKH
APEX Malicious
Paloalto Clean
Cynet Malicious (score: 100)
Kaspersky VHO:Trojan.MSIL.Injuke.gen
Alibaba Trojan:Win32/Kryptik.ali2000016
NANO-Antivirus Clean
ViRobot Clean
Rising Clean
Ad-Aware Gen:Variant.Ursu.216192
Comodo Clean
F-Secure Clean
DrWeb Clean
Zillya Clean
TrendMicro Clean
CMC Clean
Sophos ML/PE-A
SentinelOne Static AI - Malicious PE
Jiangmin Clean
MaxSecure Clean
Avira Clean
MAX malware (ai score=81)
Antiy-AVL Clean
Kingsoft Clean
Gridinsoft Clean
Microsoft Trojan:Win32/Sabsik.FL.B!ml
SUPERAntiSpyware Clean
ZoneAlarm Clean
GData Gen:Variant.Ursu.216192
AhnLab-V3 Clean
Acronis Clean
VBA32 Clean
TACHYON Clean
Panda Clean
Zoner Clean
TrendMicro-HouseCall Clean
Tencent Clean
Yandex Clean
Ikarus Trojan.MSIL.Injector
eGambit Unsafe.AI_Score_65%
Fortinet MSIL/Kryptik.ACKH!tr
Webroot Clean
AVG Win32:PWSX-gen [Trj]
Avast Win32:PWSX-gen [Trj]
CrowdStrike Clean
No IRMA results available.