Static | ZeroBOX

PE Compile Time

2021-11-02 19:46:46

PE Imphash

f34d5f2d4577ed6d9ceec516c1f5a744

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00002000 0x0005bf34 0x0005c000 6.38964253216
.rsrc 0x0005e000 0x00040eb6 0x00041000 6.72463327639
.reloc 0x000a0000 0x0000000c 0x00000200 0.101910425663

Resources

Name Offset Size Language Sub-language File type
RT_ICON 0x000982a8 0x000063c3 LANG_INDONESIAN SUBLANG_NEUTRAL PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x000982a8 0x000063c3 LANG_INDONESIAN SUBLANG_NEUTRAL PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x000982a8 0x000063c3 LANG_INDONESIAN SUBLANG_NEUTRAL PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x000982a8 0x000063c3 LANG_INDONESIAN SUBLANG_NEUTRAL PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x000982a8 0x000063c3 LANG_INDONESIAN SUBLANG_NEUTRAL PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x000982a8 0x000063c3 LANG_INDONESIAN SUBLANG_NEUTRAL PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x000982a8 0x000063c3 LANG_INDONESIAN SUBLANG_NEUTRAL PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x000982a8 0x000063c3 LANG_INDONESIAN SUBLANG_NEUTRAL PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x000982a8 0x000063c3 LANG_INDONESIAN SUBLANG_NEUTRAL PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x000982a8 0x000063c3 LANG_INDONESIAN SUBLANG_NEUTRAL PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x000982a8 0x000063c3 LANG_INDONESIAN SUBLANG_NEUTRAL PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x000982a8 0x000063c3 LANG_INDONESIAN SUBLANG_NEUTRAL PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x000982a8 0x000063c3 LANG_INDONESIAN SUBLANG_NEUTRAL PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x000982a8 0x000063c3 LANG_INDONESIAN SUBLANG_NEUTRAL PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x000982a8 0x000063c3 LANG_INDONESIAN SUBLANG_NEUTRAL PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x000982a8 0x000063c3 LANG_INDONESIAN SUBLANG_NEUTRAL PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x000982a8 0x000063c3 LANG_INDONESIAN SUBLANG_NEUTRAL PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x000982a8 0x000063c3 LANG_INDONESIAN SUBLANG_NEUTRAL PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x000982a8 0x000063c3 LANG_INDONESIAN SUBLANG_NEUTRAL PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x000982a8 0x000063c3 LANG_INDONESIAN SUBLANG_NEUTRAL PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x000982a8 0x000063c3 LANG_INDONESIAN SUBLANG_NEUTRAL PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x000982a8 0x000063c3 LANG_INDONESIAN SUBLANG_NEUTRAL PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x000982a8 0x000063c3 LANG_INDONESIAN SUBLANG_NEUTRAL PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x000982a8 0x000063c3 LANG_INDONESIAN SUBLANG_NEUTRAL PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x000982a8 0x000063c3 LANG_INDONESIAN SUBLANG_NEUTRAL PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x000982a8 0x000063c3 LANG_INDONESIAN SUBLANG_NEUTRAL PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x000982a8 0x000063c3 LANG_INDONESIAN SUBLANG_NEUTRAL PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x000982a8 0x000063c3 LANG_INDONESIAN SUBLANG_NEUTRAL PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x000982a8 0x000063c3 LANG_INDONESIAN SUBLANG_NEUTRAL PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x000982a8 0x000063c3 LANG_INDONESIAN SUBLANG_NEUTRAL PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x000982a8 0x000063c3 LANG_INDONESIAN SUBLANG_NEUTRAL PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x000982a8 0x000063c3 LANG_INDONESIAN SUBLANG_NEUTRAL PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x000982a8 0x000063c3 LANG_INDONESIAN SUBLANG_NEUTRAL PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x000982a8 0x000063c3 LANG_INDONESIAN SUBLANG_NEUTRAL PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x000982a8 0x000063c3 LANG_INDONESIAN SUBLANG_NEUTRAL PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x000982a8 0x000063c3 LANG_INDONESIAN SUBLANG_NEUTRAL PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x000982a8 0x000063c3 LANG_INDONESIAN SUBLANG_NEUTRAL PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x000982a8 0x000063c3 LANG_INDONESIAN SUBLANG_NEUTRAL PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x000982a8 0x000063c3 LANG_INDONESIAN SUBLANG_NEUTRAL PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x000982a8 0x000063c3 LANG_INDONESIAN SUBLANG_NEUTRAL PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x000982a8 0x000063c3 LANG_INDONESIAN SUBLANG_NEUTRAL PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x000982a8 0x000063c3 LANG_INDONESIAN SUBLANG_NEUTRAL PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x000982a8 0x000063c3 LANG_INDONESIAN SUBLANG_NEUTRAL PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x000982a8 0x000063c3 LANG_INDONESIAN SUBLANG_NEUTRAL PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x000982a8 0x000063c3 LANG_INDONESIAN SUBLANG_NEUTRAL PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x000982a8 0x000063c3 LANG_INDONESIAN SUBLANG_NEUTRAL PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x000982a8 0x000063c3 LANG_INDONESIAN SUBLANG_NEUTRAL PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x000982a8 0x000063c3 LANG_INDONESIAN SUBLANG_NEUTRAL PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x000982a8 0x000063c3 LANG_INDONESIAN SUBLANG_NEUTRAL PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_GROUP_ICON 0x0009e8f0 0x00000068 LANG_INDONESIAN SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x0009e8f0 0x00000068 LANG_INDONESIAN SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x0009e8f0 0x00000068 LANG_INDONESIAN SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x0009e8f0 0x00000068 LANG_INDONESIAN SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x0009e8f0 0x00000068 LANG_INDONESIAN SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x0009e8f0 0x00000068 LANG_INDONESIAN SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x0009e8f0 0x00000068 LANG_INDONESIAN SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x0009e8f0 0x00000068 LANG_INDONESIAN SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x0009e8f0 0x00000068 LANG_INDONESIAN SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x0009e8f0 0x00000068 LANG_INDONESIAN SUBLANG_NEUTRAL data
RT_VERSION 0x0009e958 0x00000374 LANG_INDONESIAN SUBLANG_NEUTRAL data
RT_MANIFEST 0x0009eccc 0x000001ea LANG_INDONESIAN SUBLANG_NEUTRAL XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminators

Imports

Library mscoree.dll:
0x402000 _CorExeMain

!This program cannot be run in DOS mode.
`.rsrc
@.reloc
# t}lsk
*3_A[(t
ObKS
bKSai(
@S@[(t
_U*k@#
`P@[(t
@N@Y(t
W@[(t
##c}3e
`W@X(t
.4dB
4dBai(
@D@X(t
=?A j=?Aai(
[XZ_bX
[XZ_bX
[YZ_bX
[XZ_bX
#aBuU=J
[XZ_bX
[XZ_bX
[XZ_bX
[XZ_bX
#{s"EaO
#mCN8z
[XZ_bX
[XZ_bX
[XZ_bX
[YZ_bX
^SPf@#
[YZ_bX
[YZ_bX
[YZ_bX
#{ulaQe
[XZ_bX
#Ey*K
[YZ_bX
[YZ_bX
[XZ_bX
[YZ_bX
#LsqFX
[YZ_bX
[YZ_bX
[YZ_bX
[XZ_bX
[XZ_bX
[XZ_bX
#qUsC/J
[XZ_bX
[YZ_bX
#E;BcV
Hx@Y(t
[YZ_bX
[XZ_bX
#Wn7t 8
[YZ_bX
[XZ_bX
#EbQYv
[XZ_bX
[YZ_bX
[YZ_bX
[YZ_bX
[XZ_bX
[YZ_bX
[XZ_bX
[XZ_bX
[XZ_bX
[YZ_bX
[XZ_bX
[XZ_bX
[XZ_bX
[XZ_bX
[XZ_bX
[YZ_bX
|~ZA#
[YZ_bX
[YZ_bX
[YZ_bX
[YZ_bX
[YZ_bX
[XZ_bX
[YZ_bX
[YZ_bX
7?RA#
[XZ_bX
[YZ_bX
[XZ_bX
[YZ_bX
[YZ_bX
[XZ_bX
[XZ_bX
[XZ_bX
Ky]A#
#|"2FZz
[YXnZ>
[XZ`(N
[YZX(]
[YZX(]
[YZX(]
#,K]}Q
[XZX(c
[YZX(]
[XZX(]
[YZX(]
[YZX(]
Zm 0ai
mZ8aieeaef}
'AaiZaffYf}
KaiZeYe
aiYYXe
eXYfe}
%|0_ai
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADPnw
X>VY=M&g
X>VY=M&
s5S;r4P@+h
`!?yw>x
|:\4};_/D
\.h(?v0R"I
z<Z2{=Y)B
U'!G/$b
|:\2{8\
c*&B2Y
_-$B*c
|7P8g!C0
~8^4{:
a'=+<z
P8q3,\
;r4F#B
W%Y52{7)F
k"T0@+a
]8H#7;R/G
[+:Q#R
k"Y=M&X*l
;]5v$84a`
f D*c"P
/Y=M"X#9X)Z
\4}1+@
Dc"DJ,D
1-X:''a
|>MO*C
a'A)`r
"k-?>O
V>w ?8})V
|:\*YS
)`&8;J
>W?v&BV
I/=a!E$I
F!>%_-
3z<N(2o
|t2T2h'2;$[!^
J,$m+>N
<-]0G5`
L*8q&<
(a'96W
ZmY5R
p#A)8.J:G)
N>Z*7e
#j,>N%9@
PF"R/n
c5^m+
b O?T
e&O%?>
~1/l%c
:+Yo)`&
;r4O$U'A$L
2r4R0y?05^
|*)1&g
u?v0T$%#
9_7~8\,G
d-[>N%G4r
g"EWZ?w
?Y1r!>=O
<|:\*c
f/%A1Y
5Q9p&B2Y
3U=t+O?C
g!E4:e
H3z<N7
E!G Z
wK#j"F%H
5{=[)`
c%9Q:l
{=Z2{=Y
_,H8SW"d
GQ5E.D6p
&~8\"?S
t={C(i
H62_-k
ot4!Q
o)M<2]
YL(X)h<j
i >&V=v
<]5|0T
s5R&^:/D
~$&^85|:^
k/H-?R
E#2{=H8S
z<Z1h.J:Q
l*B*;K/_.
y0ND4_
uk-I3X
x1OI9R
2L6F-f
*Y1x8\
+n(N i
A''l)M3X;:W
-d"<B)@
t2V"?S!a
P";]5|
};]";z
U=Q5E.\
E$]*=H
q8K/_#b
K$4`!S
4};^"A
q,^#E-d
y?['J;5s
L*8q7S
p-7Y>V
j,@(a'A
=S O$[
O)7~\0
V0&o^=M
W%+M%[
Q5C}0T$4P
s4_43Q
b+\3,q
x Y'Y1]!V"
{2E*0g
_;K B%
w-#/e#=
|:^-!G
{=Q.M~
5M(X)T(k
2K.^+j
8^m!4W
;]5r!?>O
J'Z+:]
|:^5i#6:>q
^-4t!-
v/K12-_
5B%D]9I
W%_9&R
;]5{*?G
t2V%;o
z~&W">
(a'9>D
<A'![)Y52{7)Y2X
)7R"?k
q&,+L$c%-J
u3U=tW35u4&
5>UP"d
[ A!J6
y%R+/.GH
L$m!9A
u";?x=F,6m
rz<X"6r
~X>O%d
U1A W%]
g.^$V:
$m+EW<}
=M5%1B
7i.J4L
]#^%R-
w};_)/i
7=Y)8f
F.g!E5^
]#^%R-
w};_)/i
=[3i(5o
|=O+=0Q
|=%"(@
O+[0^,j
^"m*;A
t2T6l%A G
G$[,>9
),d"@#A
A%U4_/f
j#$$T?~
J,.g!E
F"R94F
H:8^6n(-A
Z,\)Gb
Z2{9]-5m
_![)^4
87.4qa
W1_"8H
q8_7~Z.9*7E
}\4}5>F
R.^!;G
a'C)1k
{: yw4k
X0y>5/
J8:\4l*/C
9I"YQ
7i.J4R
)`&85Q
O).g!E
G#S85G
K9;]5k-*>-O<z
7k!48'
<u3M*4
z=\4}])47B0v
D P;6D
F4.H X
Z,\)Gb
8S;r0T$>x
F"6!"/]
vQ9p0A)1h
,I!h'2;
r3W!=u
T*G'U"<
@ 5s$73Z
U'[*=t2V
y?Y'X A F
d#F.gC
t2T)`&B
tS;r.7?C
V4g#F#=k
"y?[!"
N"7u"=9T
r5T<uU!,*X
30+Yo
x+I#5m
q7Q&o)M
C13U=c%"65W$b
T!?`(K(8h
oN>y H
?$l*N7
4j 370$9
U=t10*
O=7Q9_
|:R0y9
t4O,<l
)9)s5Q
v0U";y
sV>w+<D
X(X-55
y(M%l#6?
+.f >;K
_,J"a 3<
3e"F0N
S/4t!<8U
E7-K#Y\
l*B i)
U'[*>p%:
:Q9p2V&<v
055E.o
9>21S f
166F-l
^|'=7I
r,&I.F
<G*c%A
n(C/6W
A%U>;I
#x>Z #
]+Y :F
b$@&<x
Y2T<k&1:
_7~7.H
+b$63K
<O'n$@0J
e$C+bF
u-'J+C
g%R-I$d
j,H.4p
u3U3d$=<R
N(-d"F
N*Z1,^
};S1x8
v0U";y
G"Z+9Z
b$@*.j
?U'7Z(n
D 6x(:H
Q5;(.\
1u3WL
{=[)8'C3N
45]()L
p&4??>
5H i+O?C
X+:6R"?r
F 7z%k
8^6u3U
|+Z43N
r4R:s5Q K
D,W$!P
E,e#=MJ
R6F-C1
(29_7t
$'C3N?
^m*9F
`&B15^
};S(0e
F#Y.9_
^LR f
~':*(n
=3 i/A
P7`)o-M
J#S8^:M
w1U$<y
Y8(h.J4_
Z1x4F0Y
K+[0G5s
3z<N+<u
>VO+T
H'<p%< J
u4<R2Y
G/f F5H
"7w =<Q
{/I!h.J:Q
&;@'?m
[#QC#
F/f D#A
Z*"B#T"5
"H9S%Y G9r5R#J
1X1y3X)C
0:P00)o
C'W<}[
&o)C3R
=H2V@S
(a'?0H
n;]5r2
,e#C"D
};_+/h
`9_7t0
T;r*8J N"S
H i+>I
/f @n
i.J03b
a!r=\5
i)M==o
!9s+VZ
x9 R4=k B!E
q6P2h!&E!^
iY32M
w0V4l#
mQ,d"@
K.^+Y
Q4D/O"W 8`
@(a#(L
$m+K;1H-Z+2m
w2!;P"X
X1W?l(
};_+/h
G"R3L>Y
h.)4p%<;E
Q5E.oH
z?\-c%X
T=u48I#c
@2y?[+@
tA:(;]+
2B)^,K/<]
q7S"5v
O)7~2,\7u
<Y*B/^
"G8T7%
D,e"2D,f
\1x(K;P
=F2._-k
}:)777o(L6
l\!>}
W0y?[+@
k-K"k-I
x@#@%S
1V>w @
:[3z2VJ
V1A*<N
~-8=*c
K&T!=H
_7~.71
x!G/f]9I"U'a
8q7B2Y
'0;?zz
<yw4r:J!
sv0V4j
>"k-?<9x
^.<6A*0i
8]5r!;:Gx
yw3^-]6n
r37^&=b
;q7M*)W
|'(-4c
q.h0@+
5S;hP4D
VY,\7b
ft2],\7m
h.D!2b
W>w'0$>c
UU%N13P
2{=O,)h
f F.g!E3X
5],=<U
#O+[V
W5i 4A
[+7-8A
]4}5>5As
V!Q"R9]
s5S9p6Rx
,e#6F-X R)+V
r|9_-<K.^+W!
t{=[)M
'm+I&5c
M,P%3@
`&@&o)M
-?v09?)h<
`&@(a'
]5|0A"*A
+%0x>P
Tb+5T$O
U[?O$T
x-8 t5G
?M"D,e
B*c!3>N
S/1z;L6L
9?;A#jK
=Cu'S7
f,\89:
E#j"=P
B$-d!E5^
M)L'.\x
s+L$m A1Z
F!Q::Hv
49Q#T2
eX<e,Y=
3S:s$9r
R0y>Zh
`)33C(i
{'Au:=Y
F.g!Et
G/f D3X
<u3W'L
#j,H8S
I!h.J4_
:##QM+
,36RQ:
Q5/D%(/IP
Ap6P8q!E&
g-dNW'L
d-b@"j
zF.g!E4_Z
&Q9p6R
!?VY=7\,&!G7~4E4_
vU#X*t
V>w1Ul
)B+LC(
};]/^C
\4};_):
8LD3y
U/G2{\
7~9]/"c
Z2{=Y#@
)ZS4<Vn
2P%k-I9R
z<Z2{7;
y9W?N$>
QK'W<|
x6DZ8P
u<+'W<|
<s5QtV
o)M;P/$b
i #F6]
N&o$@A
I-[0"&`
v0V<uK
Y1x=Y!6w
Z2{4P-
g!E4_\
z<Z+b^
7?yu<
C+b!Eu
i/K6]!R
l#E+&`
c=?yv?
w1W>w\
Q#>E-d Dc
[*!Q:z
*1u:;^}
W283!R
I6H'm^
)?A!B!
_5S!Pe
h4];FO
`:JN0E
p]18NR
T*$FW,
#6?:[:
m">{&t
GA* R
O(Ns:
A'#PS5
O!?KR4
'I'E8^
?C7ER-
D7UX<
4u>Y)B
b-F6],H
j,J,P!D4_!Q"C+bz
9j@!Q:
`$B(a#G4_
C'S7I;|
m#8\*A
1x=Y J
}4N)$O
w=>Z)B
$mU0?T
P.mY>
c)*,W<:G
zq6*)R9x
LX)R9x
p6P.g!E5^m+M%l)M
o)O#j,H8S
9_3z<X(C
p6P8q)M
f F*c%A1Z
i/I!h-I
u3U9p6R"I
z<Z2{K
l&@!h*N1Z
mG!0y'C
>(XDFweUn
F. #Gnc>
E!|^ZuDcN)
K rAJ@
O)R\]g
`NzojE
N%uHQhnUf
4PBn@sxR
$TPRc6
!spgkhg:
@(ruT;
fH{F]]
Y`GiMG
/iAtdk=
vqZ_rEcf2
%U_}C^Y
kqHoJ%
rA]GaMP
>UPxiTd
&tsTkTx
cw1yiBm(
]-ZcqKu}EDc<
Zu3|d$
-KL|tq
VjcZv&
{f z`Zk
O?hqcR
2yn'rWj;
2nwa'M
RbwL}Vl
Idd-|Yl8
]tpEuDYPysrk
l_\gUJ_;\x|
>fh]Gh
"csh)lkPl
P\IzT=
pUwlU%
,vqXLnYw1zufk
,`JTDj
fAlOTL
nc%T}wBgZNV
BawOJq,
pk}hTT}
o^[Ngq
*Nc|qoE
1TSxIrEbU>
w]_-|[v`
,XZk-\u
\{VZuH
wuEpGdW<
}WY+~Yty
}Nh`d3
3yh]~Ip[
pj[Z\B
xTXLO:
/Zs}Li\7
@(ruTIzL
v7*L*5|0T
x1=Y)Q#[=
B&V0.\
r;J.,G
T&+M%[
v?@$t5@
|5A%(C
S8L>K-
R:f :J
X0o)@0Q
^5E7B$
Z1C1J,
w>K/2Y
q0;A'!h
O=[=(a
Q:N<M+
?B)^,];I
[0D6C% i
f/_;>U
t=K//D
Y=M#B0v
]:=g!;K
[?B)^,$B
~7D 0[
I"C1,J
S8L>K-
a(A%(C
B&I"Y+%C
Z(A'"k D*A
+]/_9$m
{2G#3X
J!@2)O
E#>w'C
W<]/<Z
q8Q58S
Q:N<8^
B$?v&B
U>_-'A
[0D6C% i
K-8q-I
G,@2G!
`&5E$e
8^,e"9
n(D,8~
O+Q:5G
J!@2.H
H,O$[)'A
[3m+E5
{$T"L'c
H :n(J,9j
{8Y1v':A%d
S X08l
Z$i/J8E
3P&o"D$>
Q33zm
}4Z0=V
j$B*c%A
\2)/;/1*=Y?Q
|":C!B0t
])O(?d
l$T"M]
Ki*.^#
I!,`!%U,
_3U"\2T
=]26O
Z"j)/_$G5U3=t.@/2?H
-S-V7n
xi)O&a
{2#]3Y
8^2z$#N
v")=9\
8Z2z44>U
AhK-Y+i
}3M#h,F.=z
>V<s.C+8v
<S5n <D-j
c"\08K
|,:H!C#W/*U
z-;^-(i
I+%l">F%d
M)Y2;I
i/I!h.J:Q
b$B*c$@0[
k"B&U>~
,J"k-I9R
X3@2D"
4R:s5Q
2{5Q K
71*%V(K
0%+$U'7<]
#X2")H
?2=!7#
g!G/f D4_
l*L$m+O?T
g!G/f D4_
l*L$m+O?T
g!G/f D4_
l*L$m+O?T
g!G/f D4_
l*L$m+O?T
g!G/f D4_
l*L$m+O?T
g!G/f D4_
l*L$m+O?T
g!G/f D4_
l*L$m+O?T
g!G/f D4_
l*L$m+O?T
g!G/f D4_
l*L$m+O?T
g!G/f D4_
l*L$m+O?T
g!G/f D4_
l*L$m+O?T
g!G/f D4_
l*L$m+O?T
g!G/f D4_
l*L$m+O?T
g!G/f D4_
l*L$m+O?T
g!G/f D4_
l*L$m+O?T
g!G/f D4_
l*L$m+O?T
g!G/f D4_
l*L$m+O?T
g!G/f D4_
l*L$m+O?T
g!G/f D4_
l*L$m+O?T
g!G/f D4_
l*L$m+O?T
g!G/f D4_
l*L$m+O?T
g!G/f D4_
l*L$m+O?T
g!G/f D4_
l*L$m+O?T
g!G/f D4_
l*L$m+O?T
g!G/f D4_
l*L$m+O
v4.0.30319
#Strings
#fsdf#
#ggggg#
#hfd.dll#
#fsdfsd.dll#
#fssdf.dll#
#hdfgsssssdf.dll#
#sf.dll#
#hg.dll#
#s.dll#
#sffds.dll#
Digit200_300
S400_X0
<kdaIhefiemg>b__0
<>s__1
Sigma_1
IEnumerable`1
Lazy`1
ToUInt32
ReadInt32
ToInt32
198-Protector-V2
Func`2
PutInteger4
ToInt16
<Initialize>b__89_7
<pathName>5__7
<GetAssemblyRefs>d__278
get_UTF8
<Module>
Get_HasFieldRVA
LOCALE_IGEOID
LOCALE_SNATIVEDISPLAYNAME
S_ANNOTATIONREF
SiAdknmclIF
ERROR_HANDLE_EOF
niophrkmcaF
fmfdFFmmdiF
rfnddakgiiF
ddrfnhedmlF
Set_UI
dIirmjadrkI
System.IO
InlineR
djcolSiFkAS
S_PROCREF_ST
Get_HandedOverChildReplica
jcAmFIkrSja
rcdata
ClrAsmName_Mscorlib
mscorlib
System.Collections.Generic
get_IsStatic
apdaShIogkc
kfeehnFIfmc
hgmiheogpmc
gScSknarepc
TimeZoneUtc
M_AppDomainId
GetProcessById
lpNumberOfBytesRead
hThread
get_CurrentThread
thread
cpSpeIfipdd
get_IsAttached
IsClosed
RunWorkerCompleted
GetImplMapRid
FindField
Get_UnderlyingField
InheritDemand
command
C_ticksPerSecond
set_IsBackground
DynamicMethod
DefinePInvokeMethod
ResolveMethod
AddOtherMethod
GetMethod
M_entryPointMethod
method
NetGuard
fsdffsdfasdffsd
bkaFSfmboae
get_IsInterface
Replace
Get_TypeNamespace
LoadResource
FindAssemblyLinkedResource
FindResource
SizeofResource
FCallDivide
GetCaseInsensitiveHashCode
GetHashCode
SetCode
CryptoStreamMode
Xenocode.Client.Attributes.AssemblyAttributes.ProcessedByXenocode
_UserMessage
SetMethodSourceRange
Net_uri_PortOutOfRange
ekccpmjokke
EndInvoke
BeginInvoke
ImplMapTable
Set_PropertyMapTable
GetEnvironmentVariable
Enumerable
IDisposable
Stable
set_Visible
get_Handle
RuntimeFieldHandle
get_MethodHandle
RuntimeMethodHandle
GetModuleHandle
get_TypeHandle
RuntimeTypeHandle
ResolveTypeHandle
CloseHandle
GetFieldFromHandle
GetTypeFromHandle
SafeCertContextHandle
ToSingle
Console
get_Module
DefineDynamicModule
hModule
module
set_FormBorderStyle
set_WindowStyle
ProcessWindowStyle
get_Name
FilterTypeName
M_langName
lpApplicationName
functionName
lpName
_GetIssuerName
AssemblyName
GetDirectoryName
ndeIdeongme
ReadLine
lpCommandLine
DbiSourceLine
WriteLine
Machine
rperpe
GetMetaDataType
get_FieldType
DefineType
CreateType
ValueType
get_DeclaringType
MetadataTokenType
flAllocationType
get_ReturnType
Get_DontCompareReturnType
lpType
HasOwnerType
get_ParameterType
System.Core
GetMethodSignature
ResolveSignature
SetLocalSignature
Set_CurrentCulture
MethodBase
Dispose
Truncate
CreateDelegate
MulticastDelegate
set_WindowState
FormWindowState
STAThreadAttribute
CompilerGeneratedAttribute
UnverifiableCodeAttribute
UnsafeValueTypeAttribute
BabelAttribute
SuppressIldasmAttribute
AssemblyInfoAttribute
YanoAttribute
DotNetPatcherPackerAttribute
BabelObfuscatorAttribute
CryptoObfuscator.ProtectedWithCryptoObfuscatorAttribute
DotNetPatcherObfuscatorAttribute
DotfuscatorAttribute
CompilationRelaxationsAttribute
SmartAssembly.Attributes.PoweredByAttribute
RuntimeCompatibilityAttribute
TimerQueue
GetOrCreateValue
SetValue
get_IsAlive
ArFfhIFdpk.exe
get_Size
CheckGroupSize
SetSize
dwSize
Resize
SizeOf
fshdfhddf
fsdsgdgfsdf
Ldelem_Ref
get_IsByRef
pmphfakjdef
mIbgjAnfArf
kFdkrAhaFSg
melnIoafgbg
dSSAknSSoeg
ghhhhfdffffffg
rjSFFhecagg
GetHashCode_FieldSig
LeafSig
TryGetGenericInstSig
kdaIhefiemg
System.Threading
get_ExternalThreading
Encoding
IsLogging
Ceiling
FromBase64String
CreateString
OutputDebugString
IsWellFormedOriginalString
ToString
_GetUserString
GetString
Spiankrekog
mdokhkfSmdh
FtLastAccessTimeHigh
rallISfkmh
get_ExecutablePath
GetCanonicalPath
GetFolderPath
ObfuscatedByGoliath
get_Length
ddSbFpiIIdj
Fjjpljjjfnj
drgkdmAjprj
orlmldhkdFk
afpjbnnlmFk
AsyncCallback
EncoderFallback
callback
GetInitialValue_NoLock
FlushFinalBlock
FirstDayOfWeek
lISdkmjlimk
ArFfhIFdpk
kdjkkImmipk
SFkShdInAIl
SkkggAFrSIl
SkmrdajnbIl
aAdFbmeikIl
Marshal
GetExceptionForHRInternal
bcSidkhijkl
kernel32.dll
Control
krbephApkFm
CryptoStream
MemoryStream
Program
dklSemmIkdm
get_Item
System
SymmetricAlgorithm
HashAlgorithm
rgraglraelm
Sjiikmdaklm
GetFirstPerm
ICryptoTransform
omkhAcealAn
kFFnklikicn
get_MetadataToken
InternalAddTypeToken
hToken
set_OriginalToken
Set_PublicKeyOrToken
M_leaveOpen
AddExceptionsFromChildren
lpNumberOfBytesWritten
AppDomain
GetDomain
get_CurrentDomain
MDStreamVersion
Application
get_Location
NineRays.Obfuscator.Evaluation
System.Reflection
ManagementObjectCollection
CallingConvention
RuntimeWrappedException
Get_Description
firSlmdooon
Get_CharUnknown
ConvertTo
GetDynamicILInfo
FieldInfo
MethodInfo
M_accountingInfo
CancellationCallbackInfo
startupInfo
MemberInfo
ParameterInfo
hResInfo
ProcessStartInfo
DirectoryInfo
fSirehcakgo
strtup
System.Linq
set_ShowInTaskbar
AnIfomoddar
GetDefaultYear
Number
Reader
DESCryptoServiceProvider
MethodBuilder
ModuleBuilder
TypeBuilder
AssemblyBuilder
SpecialFolder
IAssemblyRefFinder
StrongNameFreeBuffer
lpBuffer
ResourceManager
AppDomainManager
Debugger
ManagementObjectSearcher
UriSchemeGopher
TryGetValueWorker
DefaultScheduler
ZeroWidthJoiner
CreateComparer
ChunkComparer
PositionPointer
get_IsPointer
IRvaFileOffsetConverter
BitConverter
ToLower
SystemResMgr
GetTokenFor
IsSeparator
ManagementObjectEnumerator
GetEnumerator
Operator
.cctor
dotNetProtector
get_IsConstructor
CreateDecryptor
Get_UIntPtr
System.Diagnostics
PreserveMethodRids
MaxSeconds
GetMethods
System.Runtime.InteropServices
System.Runtime.CompilerServices
System.Resources
ArFfhIFdpk.resources
CombineHashCodes
bInheritHandles
Set_AllFiles
EnableVisualStyles
AbbreviatedEraNames
HkeyNames
_capnames
Get_ShortTimes
EmptyTypes
lpThreadAttributes
MethodAttributes
VerifyTypeAttributes
MethodImplAttributes
GetCustomAttributes
lpProcessAttributes
MaxMinutes
NumberBufferBytes
GetBytes
GetIndexes
BindingFlags
M_invocationFlags
dwCreationFlags
GetMethodImplementationFlags
SetImplementationFlags
formatFlags
M_pGlobals
Equals
System.Windows.Forms
Contains
Columns
CreateGlobalFunctions
CallingConventions
Set_Options
Set_MetaDataOptions
CheckFromAsyncOptions
InitializeNonExistentHeaps
get_Chars
TrimEndChars
HexLowerChars
ImageSectionHeaders
GetOptionalCustomModifiers
GetCustomModifiers
M_illegalCharacters
GetParameters
AutoClass
get_IsClass
FileAccess
AssemblyBuilderAccess
hProcess
GetCurrentProcess
lpBaseAddress
lpAddress
sssssss
NamedArguments
ReUseDeletedEventRows
Concat
TryParseExact
LoadObject
ManagementBaseObject
GetObject
object
Select
flProtect
CharSet
Target
GregorianOffset
op_Explicit
System.Reflection.Emit
SetCompatibleTextRenderingDefault
IAsyncResult
result
AddConstant
RegexReplacement
System.Management
lpEnvironment
FindDocument
InitializeComponent
get_Current
CheckRemoteDebuggerPresent
IsDebuggerPresent
M_Event
M_iCount
textToDecrypt
ParameterizedThreadStart
Convert
FailFast
m_Rest
SuspendLayout
ResumeLayout
MoveNext
System.Text
context
cxvxsssffffffffcvcgggggggv
RawMethodSemanticsRow
ResolveMethodThrow
RegQueryValueEx
AllowHexPrefix
ValueForDebugDisplay
ToByteArray
ToArray
get_IsArray
NativeBody
CilBody
PlatformPublicKey
secretkey
System.Security.Cryptography
DefineDynamicAssembly
CreateAssembly
GetExecutingAssembly
BlockCopy
FromBinary
library
UnsafeCreateDirectory
lpCurrentDirectory
op_Equality
op_Inequality
HasThreadAffinity
Net_uri_BadAuthority
System.Security
SuppressUnmanagedCodeSecurity
IsNullOrEmpty
GetOwnerTypeOfProperty
198 Protector V2
System.Security.Permissions.SecurityPermissionAttribute, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
SkipVerification
WrapNonExceptionThrows
_CorExeMain
mscoree.dll
hhhhhhhhhhhhhhhhhhhhhh
BQUhhhhhhhhhh
FZYWhhhhhhh,&&#")TZY\hhhhh-**((>9E[ZYXhhhh//.@VJJRS[ZYhhh2113dC:7Af`[Z]hh455+L<::7Jc[Z]hh;60
L=<::Jb`[^hh;8
PD=<Cgaa_]hhh'
OMKeGHINhhhh
$hhhhh
hhhhhhh
hhhhhhhhhh
hhhhhhhhhhhhhhhhhhhhhh
NUVUUO
TVVVUUUP
]WZZZZZZVVG
X[[[[[[ZZZVK
\_____[[_[[[LE
```````__[_[ZCe
gaa``aa````__[H=
haahhhha`c
jhhhiihhh
kkkkiiki
rkkkkkkkf
yyyyvt
ollllmml
yyyyvvvt
rmmlmmmd
}}||yyyvvt
sppppmm#
}}||yyyyyt
uqqqqqR
}}||yyyv
pqqqqq
}}||yyv
~qqqqF
'2.**)
.422.**(""
/5422.***(!!
1&88542..**"("!
@:8522..**("!!
I:542.***("!!
B22..**(("
D***((!!
B<>?;977
a_deeeb
gffeeeeeeX
gdfjjeeffffb
cjjjjjffjfeeeX
hkkjjkkffjfjjf]\
immkkkkjjkkjjfff^W
mmmmmmmkkkkkjkkjjPP
qqqqmmmmmmkkmkkkjjZM
pqqqqqqqqqqmmmkmkkkaSJ
nsssssqqqqqqmmmmmkkkhMJ
psssssuussssqqqqqruurQMJ
ussssusssssssqq{
uuuuuuuussusss
uuuuuuuuuuuuuw
uuuuuuvvvvvuu
vvvvvvvvvvvu
~~~~~~
wyyyyyyvvyyyx
wyyyyyyyyyyy
{yyyyyyyyyyl
yyyyyyyyy{w'
|{{{{{{{{{Y
}||{{{{|||
|{{||||{{I
|||||||z
}|||||||7
&0;@;>
,1@@;;;
!)3@@@@@;;?
(2>@@@@@@@;;;0,+&&&&
%2<DDDD@@@;;;444444.---***$$$
"!)?BEDD@@@@;;;;44444.--***$$$$
58ADDDDDD@@;;;;;444/4.--***$$$$
?EEEDDD@@@;;;;4444.4...***$
THEEDDDD@@;;;;;4444/..-****$$$$=
LDDDD@@@@;;;44444...--***$$-
UDDD@@@@;;;;44444.--***$$:
[FDD@@;;;;4444/...-***-D
UE@@@;;;;444/4.--*-D
LU@;;;4444...4FE
UKLLNROOKG
C3-QNZ2
=i|tC`
Cab%D_
deONZ2
kwNf389
|!~K!s
uyXg]d
K@2AFI=
gI5d.C`
V~^2G
pryO3y
dF(%X-
ql||/B
Nhn96c
2lDa$G
l*)$bo
J)%T.@
04,04"
? P(*Y
Q"&Z9(
F4?7/5
HP@Q@mN
n5/MEV
"Z(F"Z
L=D(U,)
?CP+ud
-ZC[IWx
r%~y<[
H^"bU
SrzxK(
fC'<\O
DGtq|
@/H7(f
b+~Li1}Z
'=qp'>|
c@cZS~
0=-7;/
e]wQZy
K^zewu
9\^6,T
kCDn>*
=VQ&~Z
u5dV_?m
gy_AX
;!!${~
B7e7jBO
`.Bg F
MX\VXn)
h*,-+H
CCCCCCCCCCCCCCCCCCCCCC
$.-CCCCCCCCCC
+333CCCCCCC!
/335CCCCC
'#&3331CCCC
(?>><7333CCC"
!@,**,A3334CC
>****>9336CC
>****>8336CC
;,**,B2220CCC
%)CCCC
CCCCCCC
CCCCCCCCCC
CCCCCCCCCCCCCCCCCCCCCC
MMKhwtv}
MKWVVVG
]NVVVVVVTd
RSVVVVVVVVDz
NVVVVVVVVVVEJ
RVVVVVVVVVVVK<q
\WVVVVVVVVVVVW<;
UVVVVVVVVVVVVV@9e
WVVVVVVVVVX|
NVVVVVVVVa
VVVVVVVVa
QVVVVVVVZ
nggggggo
WVVVVVVVb
gggggggg
WVVVVVVI
gggggggggg
[VVVVVV
gggggggggg
[VVVVV>
gggggggggg
WVVVVW
gggggggggg
XVVVV3
gggggggg
nggggggo
jlpsu{
C8AF^`fimr
!(01457=B
$$$$$$$$$$$$$$$$$$$$)
"$$$$$$$$$$$$$$$$$$$%
$$$$$$$$$$$$$$$$$$$$-
'$$$$$$$$$$$$$$$$$$$$*
-&$$$$$$$$$$$$$$$$&-
+$$$$$$$$$$$$$$+
-%$$$$$$$$%-
,-/../-,
a]gnnnay
cgnnnnnnn[
ggnnnnnnnnngX
cnnnnnnnnnnnnW
ggnnnnnnnnnnnnn[N
adnnnnnnnnnnnnnn]S
gnnnnnnnnnnnnnnnngPG
gnnnnnnnnnnnnnnnnnWLh
cnnnnnnnnnnnnnnnnnn]LG
gnnnnnnnnnnnnnnnnnnnaLGK
dnnnnnnnnnnnnnnnnorroHIC
gnnnnnnnnnnnnnns
nnnnnnnnnnnnnn
dnnnnnnnnnnnno
gnnnnnnnnnnnn
nnnnnnnnnnnn
pnnnnnnnnnnnk
mnnnnnnnnnnn~
dnnnnnnnnnnZ
nnnnnnnnnng
nnnnnnnnnnD
nnnnnnnnnj
onnnnnnnn1
onnnnnnnY
onnnnnnn
tnnnnnnM
nnnnnn
unnnn9
&)))&`
{5>@BEJR\qv|}
#))))))'l
$(.4;=@?EOU_
##)))))))))&
&))))))))))))))))))))))))))))))3
#&)))))))))))))))))))))))))))))/
#))))))))))))))))))))))))))))),
#)))))))))))))))))))))))))))))*
-%))))))))))))))))))))))))))))*6
0))))))))))))))))))))))))))0
2))))))))))))))))))))))))2
8,)))))))))))))))))))),8
6+))))))))))))))))+6
:6+))))))))))+6:
876<77<678
qv*wrk
JPz={upkFw|
|"H5n+6&
f+ss:
C0a pf
$E8aP`
5$B a P
hD ">|- p
EpdYuo
< 3O P
vZ#m#a[K
EMR+;%
dis7Fh
a'Ed`94
89i!!H
?ANg8Y
!GVQ8%
gwBMw
0~y23p1X
]P};@#
&OoiTq
qi"}!;
&-NL>
IDATB$
LMn{5K
fff---fffffffffEEEfffbbbIII
lllAAAiii
mmmeeePPP
eeecccrrrhhh
cccfff
bbbMMM___ccceeeeeefffffffffeeedddaaaTTT
#5CPah]I9'
IDATx^
#""""""
`;Y]1]
gggOhhhciiigiiigiiigiiigiiigiiigiiigiiigiiigiiigiiigiiigiiigiiigiiigiiigiiigiiigiiigiiigiiigiiigiiigiiigiiigiiigiiigiiigiiigiiigiiigiiigiiigiiigiiighhhhhhhdgggO___
aaadddi
cccj```
fff---fffffffffIIIEEEbbbfff
lllAAAiii
mmmeeePPP
eeeccc
cccfff
bbbMMM___ccceeeeeefffffffffeeedddaaaTTT
#5CPah]I9'
XIDATx^
(VUV_*;
ZO'"""
gggOhhhciiigiiigiiigiiigiiigiiigiiigiiigiiigiiigiiigiiigiiigiiigiiigiiigiiigiiigiiigiiigiiigiiigiiigiiigiiigiiigiiigiiigiiigiiigiiigiiigiiigiiigiiighhhhhhhdgggO___
aaadddi
cccj```
3U59UV
{1:6.~
H{o*\/
z@4pAQ F:
uiqkw
f5pH+c
'~HQ7a
0phqN{
Ig5pH;;}fX]
*|5Y~h
v9ooe^
J;"A*3
C~5iGt"
ffffffffffffffffffffff
ffffffffff
fffffff
ffBCC@VJHHETc\[]ffIDA%VLJHHTb`\^ffIF/
ZPLJOeaa_]fff?
&9YWUdQRSXffff5#0+*8M><;:=fffff40.*)'$!
fffffff7.+*($ "ffffffffff61-,ffffffffffffffffffffff
1))))**)H
R....++++R
uqqqqqqp
||y|yyywww
vuuuuqqF
||||yyyyyw
vtttttk
||||yyyw
uttttt3!
||||yyw
}ttttd
tvvr#&:G
xxxV"4ALh
zm />PPPg
{?-<KPPLLL
o'6@PXPPPLLLEECCB===;;875=
2DQWXPPPLLLLEECCB==;;;77
UKWWWXPPPLLELEEB===;8;7N
`ZWWPPPPLLLEEECB==;;;I
fZWXPPLLLLEEECB==;;O
aPPPPLLEEECBB==S
cLLLLLEECBBX
a]]^[YXX
gWWWWWWWWWWW
h__aaaa_aa____
?&2GVi
|#0AOdkk
3,:O\kpkn
u'9HV]ppkkk
%6IS`pppppkko
Q5:R^npppppppkkk\VUOOOOFFFFFF>>>;;8;;
0<N^lvvvvpppkkkbbbbbbZXXXTTTMMMEEEDBj
JISoswvvppppkkkkbbbbbZXXTTTMMMMEEDD[
cfrvvvvvvppkkkkkbbb[bZXXTTTMMMMEET
owwwvvvpppkkkkbbbbZbZZZTTTMEEEEK
{wwvvvvppkkkkkbbbb[ZZXTTTTMMMMm
vvvvppppkkkbbbbbZZZXXTTTMMX
vvvppppkkkkbbbbbZXXTTTMMj
xvvppkkkkbbbb[ZZZXTTTXv
wpppkkkkbbb[bZXXTXv
pkkkbbbbZZZbxw
Kj,sEM=
Mj.tBBA
Mj.jI_4
Ok0kBBA
Mk.dKa2
Mh-xJ]5
Mk.dFT9
Mm(?IY8
Mi-wDH>
Oj/xBDA
Pp,@DI>
Pl0fBBA
Oj/xBBA
Qm0eBBA
>0+3-&
sGZHpD)
VCR2=-
GHx-|]
1^|HQA
(@j4%W
8w]6Sn
?5luFpP
"b-Csn
AGGG.
(xJ:T=
v(#0&w
HWM*[i
Go'G.+
2wyp<J.
.yp>+B
Tv%"dO?
tBr,*Q
[|x!C0
Z6\OG/
1VZ5])
$*xzE?v
WW<F!D
@e _2~e
>3@`PW:
/L7mN!
WsFZ^Q=d
T1$ZND
tPGtXA
oXBhS6
I:,P[x
?LS'uW
z:qO-ukR
CwO7z{zq
?b||<Pfll
@_'*o8
<Z[[Q9T5d
Ul$I{&
^=Q)ZP2&
p~F:jO
hhhhhhhhhhhhhhhhhhhhhh
hhhhhhhhhh
hhhhhhh
:GRO96
hhDEEBXLJJHVe^]_hhKFC$XMLJJVdb^`hhKI/
\QMLPgcca_hhhA
&;[YWfSTUZhhhh4"0+*8N@>=<?hhhhh30.*)'#
hhhhhhh7.+*(#!hhhhhhhhhh51-,hhhhhhhhhhhhhhhhhhhhhh
4++++--+M
W1111////W
{vvvvvvt
}{{{{vvK
}zzzzzq
{zzzzz6"
z}}w$'=L
\#7FQo
r 2BUUUn
D0?PUUQQQ
s(:EU^UUUQQQJJHHG@@@>><;9@
5IV]^UUUQQQQJJHHG@@>>>;;
ZP]]]^UUUQQJQJJG@@@><>;S
ga]]UUUUQQQJJJHG@@>>>N
la]^UUQQQQJJJHG@@>>T
hUUUUQQJJJHGG@@X
jQQQQQJJHGG^
hddeb_^^
bRRRRRRRRRRR
cZZ\\\\Z\\ZZZZ
;%-CQd
"/>J_ff
0+6BWfkfi
o&4GQXkkfff
$2DM[kkkkkffj
L16MYikkkkkkkfffWQPJJJJBBBBBB:::77377
/8DYgppppkkkfff]]]]]]USSSNNNIIIAAA@?e
EDMjmqppkkkkffff]]]]]USSNNNIIIIAA@@V
^alppppppkkfffff]]]V]USSNNNIIIIAAN
jqqqpppkkkffff]]]]U]UUUNNNIAAAAF
}uqqppppkkfffff]]]]VUUSNNNNIIIIh
yppppkkkkfff]]]]]UUUSSNNNIIS
~pppkkkkffff]]]]]USSNNNIIe
rppkkffff]]]]VUUUSNNNSp
~qkkkffff]]]V]USSNSp
y~kfff]]]]UUU]rq
~xyyz|{{xs
Kj,sEM=
Mj.tBBA
Mj.jI_4
Ok0kBBA
Mk.dKa2
Mh-xJ]5
Mk.dFT9
Mm(?IY8
Mi-wDH>
Oj/xBDA
Pp,@DI>
Pl0fBBA
Oj/xBBA
Qm0eBBA
V[;x{;x&
c-IxL)
=8NPd!
&Y[M,ZE
<ILNJF
Leb0X?
4GQ.`D
X>/y"0
x|u7V>
2 c0nL
"19\(M
4-YZ3}
pQv%I0
t\e* ]>rG!
7+P~~2
*4Vpo@
_t6:N>
\G$2DH
("29W5t9
@E W0~e
`@S+2}f
IDAT2.Z
El8g9f
WsFZ^Q9d
M+V;[`
I:"P]x
fTshic
;jA@5o2
}okkCww7
E@Rp@Tt
t7TUUaAn
DG#6v0F
Amrz@XV
@tnj`P
_3:A=V
(m!I0Y
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
<assemblyIdentity version="1.0.0.0" name="MyApplication.app"/>
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v2">
<security>
<requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3">
<requestedExecutionLevel level="asInvoker" uiAccess="false"/>
</requestedPrivileges>
</security>
</trustInfo>
</assembly>
ArFfhIFdpk
GetEnvironmentVariable
450946258
450953173
-793111780
793103103
_ENABLE_PROFILING
_PROFILER
-2125092154
2125199001
-77338449
77476288
106621316
106601656
9195924
9218025
1012291758
1012319641
-1478230675
1478314403
-1818245134
1818350697
-1719836173
1719883295
-267089592
267055586
1353879043
1353899836
-1430141894
1430131426
2132862461
2132819368
36895231
36853458
1622040949
1622030387
-937628035
937638556
-514812732
514822254
284764045
284694422
-1596248705
1596311599
1971887957
1971977565
-1756440006
1756564197
2054705851
2054732859
917053828
917005968
-428959699
428973220
-1524107102
1524179469
1300897538
1300923793
-1383482706
1383507811
-2008202400
2008213387
-1058511194
1058407771
913632934
913590368
-204730124
204718241
-1574941019
1574836983
1870024626
1870035360
-366084228
366089874
1020395569
1020421899
-32556238
32556711
-166133602
166143155
-1165234615
1165284412
-773260304
773275396
-998819241
998917294
-1977800056
1977786103
-889565336
889566633
-371226797
371297482
-1200962442
1201092435
552725014
552677778
1860854425
1860891072
-594278316
594228833
590596355
590573497
-1571731531
1571699150
-2105734998
2105700989
-1127131474
1127173703
-932756047
932782547
-964521175
964633187
570799774
570816737
614265914
614315722
1902366969
1902347547
-1759158311
1759135499
-898972210
899002349
966488064
966413496
-636508637
636567403
-947073477
947081217
1460475426
1460470864
1761628744
1761645686
-1536214112
1536270221
-1733387578
1733414998
1579922385
1579903785
553754909
553733183
-1011650421
1011806203
-2017035661
2017009262
1363964291
1363982547
-439910297
439919765
-972013147
971913842
294125498
294083173
-1490352259
1490348312
-876275458
876223225
-1828325497
1828439649
-983254949
983289693
-1919031592
1919085907
1276181262
1276242590
-468907944
468972642
-420756224
420792703
-85152326
85023409
864339830
864400095
884984868
884997343
1702405475
1702375888
695138545
695198688
-685197054
685145371
-524082688
524089178
-1482212244
1482180714
31984468
32029937
2095527963
2095525487
444404726
444358016
-1144791127
1144825529
-396292704
396268428
1384914486
1384961991
693004012
693019320
-1712842355
1712799398
2058110079
2058137248
2023890316
2023957355
-61552226
61558423
914646135
914664359
-1120857073
1120830753
1072607035
1072611832
-990626527
990592647
-2095724698
2095744888
-1082443314
1082509979
-1233201130
1233241050
-76918434
76837165
1537852086
1537777503
-178531093
178646332
846060617
846047722
2073169170
2073189686
-599971824
599967168
-1804933217
1804905827
-538575607
538445379
Antivirus Signature
Bkav Clean
Elastic malicious (high confidence)
MicroWorld-eScan Gen:Trojan.Mardom.MN.10
FireEye Generic.mg.c398ef0c8a4d040c
CAT-QuickHeal Clean
ALYac Gen:Trojan.Mardom.MN.10
Malwarebytes Clean
VIPRE Clean
Sangfor Trojan.Win32.Save.a
K7AntiVirus Clean
BitDefender Gen:Trojan.Mardom.MN.10
K7GW Clean
Cybereason malicious.c8a4d0
Arcabit Clean
BitDefenderTheta Gen:NN.ZemsilF.34236.Nm0@ayLNfrcG
Cyren Clean
ESET-NOD32 a variant of MSIL/Injector.VRN
Baidu Clean
APEX Malicious
Paloalto generic.ml
ClamAV Clean
Kaspersky UDS:DangerousObject.Multi.Generic
Alibaba Clean
NANO-Antivirus Clean
ViRobot Clean
Tencent Win32.Trojan.Mardom.Sxxw
Ad-Aware Gen:Trojan.Mardom.MN.10
TACHYON Clean
Sophos Mal/Generic-S
Comodo Clean
F-Secure Clean
DrWeb Clean
Zillya Clean
TrendMicro Clean
McAfee-GW-Edition GenericRXQK-ZC!C398EF0C8A4D
CMC Clean
Emsisoft Gen:Trojan.Mardom.MN.10 (B)
Ikarus Trojan.MSIL.Injector
Jiangmin Clean
Webroot Clean
Avira Clean
Antiy-AVL Clean
Kingsoft Clean
Gridinsoft Clean
Microsoft Trojan:Win32/AgentTesla!ml
SUPERAntiSpyware Clean
ZoneAlarm Clean
GData MSIL.Trojan-Spy.Snake.DCBAVZ
Cynet Malicious (score: 100)
AhnLab-V3 Clean
Acronis Clean
McAfee GenericRXQK-ZC!C398EF0C8A4D
MAX malware (ai score=83)
VBA32 Clean
Panda Clean
Zoner Clean
TrendMicro-HouseCall Clean
Rising Clean
Yandex Clean
SentinelOne Static AI - Malicious PE
eGambit Unsafe.AI_Score_92%
Fortinet MSIL/Kryptik.ACKH!tr
AVG Win32:PWSX-gen [Trj]
Avast Win32:PWSX-gen [Trj]
CrowdStrike win/malicious_confidence_90% (W)
MaxSecure Clean
No IRMA results available.