Static | ZeroBOX

PE Compile Time

2021-11-07 05:23:25

PE Imphash

f34d5f2d4577ed6d9ceec516c1f5a744

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00002000 0x000f59e8 0x000f5a00 7.90435526664
.rsrc 0x000f8000 0x000004dc 0x00000600 3.75439339249
.reloc 0x000fa000 0x0000000c 0x00000200 0.101910425663

Resources

Name Offset Size Language Sub-language File type
RT_VERSION 0x000f8090 0x0000024c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_MANIFEST 0x000f82ec 0x000001ea LANG_NEUTRAL SUBLANG_NEUTRAL XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminators

Imports

Library mscoree.dll:
0x402000 _CorExeMain

!This program cannot be run in DOS mode.
`.rsrc
@.reloc
KDBM(u
Y_c
Y_c
v4.0.30319
#Strings
__StaticArrayInitTypeSize=10
get_Id10
set_Id10
Entity10
__StaticArrayInitTypeSize=20
__StaticArrayInitTypeSize=30
BBF53E52B5265CC086F4ED5817C26530615505D9D43DE23E3A4F0B957AF96540
__StaticArrayInitTypeSize=40
__StaticArrayInitTypeSize=90
4E168AC258E01B8936855B11D96A0A3CC136BAE2C1C0444AC4D9A541DFA37A90
8DBBB4D475F8A3F6D96DAAED2DBE70050FD07AFBA607AA9EEA8D2274AEACCEA0
AC795E9669EB1DF798C02E4674C8DCACBC19606EEC5319CDE5C013FBBDC56EB0
<>9__0_0
<TryFind>b__0_0
n>b__0_0
<.ctor>b__0_0
<Init>b__0_0
<DistinctBy>b__0_0
<>c__DisplayClass0_0
<>9__2_0
<GetScanArgs>b__2_0
<>9__5_0
<ListOfPrograms>b__5_0
<.ctor>b__0
<.cctor>b__0
g_E_c_
DECB45FCB70E8E983C4553B3CFB6A87FF3B1218EB9722CF15426EE98A9553701
EF75241BA6BD1625A1A8267A4BDB5F8258738F1F99B68B5A3C1DFC73975ACC01
get_Id11
set_Id11
Entity11
81980601C64AB4287E860768DFC6CA60F27E76014012E9F5A9DDCF95752E5941
3CD1C70F09B91817271F4D17F1FC1518FC6A4B5EBEE22D8D507AFD1959157A41
61DF1D35B67849E6958D82133DF2193EDE3DE23ADF16B3BD446A5EA556424C41
358F8B546C235383B6CF6B6218150EC7D9B499220AD5FDA426617058DE0DC871
E1C6241389F45BF0368756075C6F46D2E586461C421942B956E17709F29B6DD1
<>9__0_1
n>b__0_1
<.ctor>b__1
<.cctor>b__1
Func`1
IEnumerable`1
IOrderedEnumerable`1
ICollection`1
IEnumerator`1
IList`1
ChannelFactory`1
get_Id1
set_Id1
Entity1
__StaticArrayInitTypeSize=102
__StaticArrayInitTypeSize=12
get_Id12
set_Id12
Entity12
__StaticArrayInitTypeSize=22
__StaticArrayInitTypeSize=32
Microsoft.Win32
UInt32
ToInt32
__StaticArrayInitTypeSize=42
B4672E390AE958C75DE0EB7F8ECE55EC2F37483B45C39A77D4E19E55A4749E42
1BB412143382AB525B1AB1B07AB235AE8F39A9AD97A9A1FDCB8B16A59C014152
C36AC7D18D98A297375D1AB1AAA79310DDB1DCDEA1410C98DA8F51F3069E8252
__StaticArrayInitTypeSize=52
9CFA266E1C0D46351B65205946940BD03389017F85B40B3C0F27FC7B6DE67F72
__StaticArrayInitTypeSize=282
<>9__0_2
n>b__0_2
<>c__0`2
Func`2
IGrouping`2
KeyValuePair`2
Dictionary`2
get_Id2
set_Id2
LSIDsd2
ImageToByte2
Entity2
8150398FC349FFAF50C51484EB02305FC7868C1B032BA06A3C87A764028FCA03
get_Id13
set_Id13
Entity13
asd44123
BDA766955CF8786D95C6541A1ED2CC9820388ECDB57D27B3F76343CA561EA633
358F794B19B6B44F344D690A7C57850378C8B58BCA7073A9B36C77FAADB3B753
38DE2962329C28744D656A17953529F5F5CE1745F1A447200E9303ADFE4FA763
A5122D81DFE6F054FDFEA49E964CB773692CDA2D2B23513128736E8A46A8A1B3
64845EDCADC189570C2316307BF55BE0EB2016759CE79F4B49D35C64D0D7B1B3
70DE0569EDBA691CB7DF3537734256234FB3C42ED859B50504D1419E600FE9F3
7784A75652692259A3315D2F7CA9446EB86CC5A9110B2343F2011AF1B58D6BF3
<>9__0_3
n>b__0_3
get_Id3
set_Id3
Entity3
__StaticArrayInitTypeSize=14
get_Id14
set_Id14
Entity14
__StaticArrayInitTypeSize=124
__StaticArrayInitTypeSize=24
sdfo8n234
2A6892F5816AA6BFCBB9A723F813236867DE7E0B584186FCA56C32DE88F1B544
__StaticArrayInitTypeSize=44
FromBase64
ToInt64
B2A83F7A8DF70388FE40B967A9DFF09AB5D2D99AF89604E9866A27E0AB5A3B74
5E8463FDC1E5A0B045A2A95CAE106EAB5D96C90386EAF5B7832EFC577F1514A4
get_Id4
set_Id4
Entity4
0BC5C4881C6861CF939463C71FD1B10430ECA86418FDC324C302F203EC539115
get_Id15
set_Id15
Entity15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_Id5
set_Id5
Entity5
B507EB66983C00A93BEE84B04919DD0B529FD0C1B179BB026E18274A9D647106
BDE4B995CAC3FD83107D6A4E42CCF2DC9D0F81722028C3F6E2292D807678E616
3AC41153E386B53D939A1262A34351F9A5F3466B6D76703D879FE3A307435816
__StaticArrayInitTypeSize=16
get_Id16
set_Id16
Entity16
3989F78F62882E7EA86562E0955EB7720033BAAA327F5CBF077571A452600F26
__StaticArrayInitTypeSize=46
__StaticArrayInitTypeSize=176
__StaticArrayInitTypeSize=76
__StaticArrayInitTypeSize=6
ADC5E0C344755D609CE374EC1E597AE5559FCC3C4FB287372B5BBF7FE30D04B6
get_Id6
set_Id6
Entity6
BD3C5560B20826330532BE84108CC33F6102317E3217FABA0814E374B02BEC17
Entity17
5C73B8C72CF5F3CC5DE8FA422C09818ACEE1BE5282BF02688B6FF4BFE07F7757
DB0143CB66E37E9D444812C849E0F537F49802160386291E002E694E06634767
99257E973EE0EE9F8B9AD3331BDA6DFEAC83700722D7C5D3147D557E28725187
49A1EF205B4556772877A5DF18C42716511A1D2CC5DC4FCA1E2B9D9AD3D050C7
get_Id7
set_Id7
Entity7
__StaticArrayInitTypeSize=18
__StaticArrayInitTypeSize=28
__StaticArrayInitTypeSize=38
__StaticArrayInitTypeSize=48
990A0B80582D6FD75E41D0CB28156C2616D5580669061E0B65076B273E455568
BF091F103CDEA841886E339BEBAE8DA0A60316DEFB8E1D57922A82178CEC7E88
get_UTF8
get_Id8
set_Id8
asdkadu8
Entity8
1B0F4E0836F436456B48BB1099E41BFC8ED359D6632C86565CBCBBC8EBAF3439
3C76FC41D752AC999F076B7C301F543F2E83FD68970E6C33FEF100FACEE0F789
C8FC2074879EA24D3947AAF00BA31C82475AE0B283FF1021B380D30B694DA0B9
get_Id9
set_Id9
Entity9
<Module>
<PrivateImplementationDetails>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0084183C49F2A35CF0898EF45127EF3C2B54427BE15A7C9C0374FBC6C5F0160D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_ASCII
LocatorAPI
TotalOfRAM
BCRYPT_INIT_AUTH_MODE_INFO_VERSION
get_JSON
FromJSON
ToJSON
TryInitNordVPN
PartNordVPN
TryInitOpenVPN
PartOpenVPN
PartProtonVPN
ExtendV
BCRYPT_AUTHENTICATED_CIPHER_MODE_INFO
BCRYPT_OAEP_PADDING_INFO
BCRYPT_PSS_PADDING_INFO
System.IO
get_IP
set_IP
BCRYPT_KEY_LENGTHS_STRUCT
value__
Guarda
cbData
DownloadData
ProtectedData
bEncryptedData
cbAuthData
pbAuthData
mscorlib
dsf9jb
DecryptBlob
ResFac
Graphic
Atomic
System.Collections.Generic
updateId
pszAlgId
taskId
get_SessionId
set_MaxBytesPerRead
Thread
Download
managed
BytesToStringConverted
<Id10>k__BackingField
<Id11>k__BackingField
<Id1>k__BackingField
<Id12>k__BackingField
<Id2>k__BackingField
<Id13>k__BackingField
<Id3>k__BackingField
<Id14>k__BackingField
<Id4>k__BackingField
<Id15>k__BackingField
<Id5>k__BackingField
<Id16>k__BackingField
<Id6>k__BackingField
<Id7>k__BackingField
<Id8>k__BackingField
<Id9>k__BackingField
<IP>k__BackingField
<PostalCode>k__BackingField
<geoplugin_countryCode>k__BackingField
<postal_code>k__BackingField
<country_code>k__BackingField
<geoplugin_longitude>k__BackingField
<geoplugin_latitude>k__BackingField
<Name>k__BackingField
<HolderName>k__BackingField
<Recoursive>k__BackingField
<Tag>k__BackingField
<Month>k__BackingField
<geoplugin_region>k__BackingField
<Location>k__BackingField
<Pattern>k__BackingField
<ip>k__BackingField
<Year>k__BackingField
<Number>k__BackingField
<PassedPaths>k__BackingField
<Actions>k__BackingField
<PreStageActions>k__BackingField
<TaskProcessors>k__BackingField
<Result>k__BackingField
<os_crypt>k__BackingField
<geoplugin_request>k__BackingField
<encrypted_key>k__BackingField
<Directory>k__BackingField
<Country>k__BackingField
<geoplugin_city>k__BackingField
RecordHeaderField
ReadToEnd
Append
CreateBind
TryFind
method
Boulevard
TryInitDiscord
PartDiscord
sdf934asd
sdf9j3nasd
Chr_0_M_e
serviceInterface
Replace
IsNullOrWhiteSpace
Binance
cbNonce
pbNonce
source
get_PostalCode
set_PostalCode
get_geoplugin_countryCode
set_geoplugin_countryCode
set_Mode
FileMode
chainingMode
SessionMode
X509CertificateValidationMode
set_CertificateValidationMode
set_TransferMode
SecurityMode
get_postal_code
set_postal_code
get_country_code
set_country_code
get_Unicode
get_BigEndianUnicode
get_geoplugin_longitude
set_geoplugin_longitude
get_geoplugin_latitude
set_geoplugin_latitude
set_Message
AddRange
EndInvoke
BeginInvoke
ReadContextTable
Enumerable
IDisposable
ToDouble
RuntimeFieldHandle
RuntimeTypeHandle
GetTypeFromHandle
ReadFile
DownloadFile
CopyFile
profile
SetConsole
hModule
get_Name
set_Name
procName
fieldName
tableName
lpExistingFileName
GetTempFileName
lpNewFileName
fileName
GeckoRoamingName
ChromeGetRoamingName
GeckoLocalName
ChromeGetLocalName
get_FullName
ItemName
get_HolderName
set_HolderName
ChromeGetName
GetProcessesByName
tmpFilename
filename
WriteLine
get_NewLine
Combine
LocalMachine
DataProtectionScope
dataProtectionScope
OperationContextScope
pszBlobType
ChangeType
HardwareType
ValueType
MessageCredentialType
set_ClientCredentialType
SecurityProtocolType
GetType
get_PropertyType
FileShare
Compare
System.Core
get_Culture
set_Culture
resourceCulture
get_InvariantCulture
IdentitySenderBase
Dispose
X509Certificate
get_ServiceCertificate
certificate
DownloadUpdate
CommandLineUpdate
DownloadAndExecuteUpdate
VerifyUpdate
Create
GetDelegate
MulticastDelegate
EditorBrowsableState
LocalState
Delete
DynamicAttribute
CompilerGeneratedAttribute
GeneratedCodeAttribute
UnverifiableCodeAttribute
DebuggerNonUserCodeAttribute
DebuggableAttribute
EditorBrowsableAttribute
TargetFrameworkAttribute
ExtensionAttribute
SecurityPermissionAttribute
DataMemberAttribute
EnumMemberAttribute
CompilationRelaxationsAttribute
DataContractAttribute
ServiceContractAttribute
OperationContractAttribute
ReliabilityContractAttribute
ParamArrayAttribute
RuntimeCompatibilityAttribute
Execute
get_Value
GatherValue
GetValue
SetValue
ReadContextValue
get_Recoursive
set_Recoursive
Remove
HYnGsbePx.exe
cbSize
_pageSize
set_MaxReceivedMessageSize
_sqlDataTypeSize
MaxAuthTagSize
set_MaxBufferPoolSize
Serialize
Deserialize
SuppressFinalize
Resize
SizeOf
IndexOf
sdfi35sdf
ReadOff
get_Tag
set_Tag
authTag
get_Jpeg
System.Threading
NetTcpBinding
_dbEncoding
GetEncoding
get_CurrentEncoding
System.Drawing.Imaging
FileScanning
System.Runtime.Versioning
FromBase64String
ToString
GetString
GetHexString
Substring
System.Drawing
ConvertToULong
FileScannerArg
scannerArg
Search
GetMd5Hash
ComputeHash
profilePath
GetFolderPath
rootPath
get_Length
dwMinLength
set_MaxJsonLength
set_MaxStringContentLength
get_RowLength
dwMaxLength
set_MaxArrayLength
length
StartsWith
get_Month
set_Month
set_MaxDepth
AsyncCallback
RemoteCertificateValidationCallback
get_ServerCertificateValidationCallback
set_ServerCertificateValidationCallback
callback
OpenLink
EnumCook
ScanCook
updateTask
TryCompleteTask
AllocHGlobal
FreeHGlobal
Marshal
X509CertificateRecipientClientCredential
Eternal
Revival
cbLabel
pbLabel
RedLabel
System.ServiceModel
System.ComponentModel
CreateChannel
IClientChannel
IContextChannel
maxLevel
kernel32.dll
bcrypt.dll
System.Xml
get_SecurityProtocol
set_SecurityProtocol
FileStream
MemoryStream
Program
get_Item
set_Item
get_Is64BitOperatingSystem
phAlgorithm
HashAlgorithm
Random
random
TryConfirm
RootNum
rowNum
DecryptChromium
resourceMan
TimeSpan
get_Screen
X509Chain
GeoPlugin
Reimann
get_geoplugin_region
set_geoplugin_region
dwInfoVersion
GetWindowsVersion
version
get_Authentication
X509ServiceCertificateAuthentication
get_Location
set_Location
pszImplementation
System.Globalization
System.Runtime.Serialization
System.Web.Script.Serialization
IsValidAction
UpdateAction
SecurityAction
action
System.Reflection
PathsCollection
ManagementObjectCollection
TryGetConnection
EndpointConnection
RequestConnection
connection
SearchOption
searchOption
CryptographicException
InvalidOperationException
System.ServiceModel.Description
System.Runtime.ConstrainedExecution
StringComparison
get_Pattern
set_Pattern
CompareTo
FileInfo
fileInfo
CultureInfo
pPaddingInfo
FileSystemInfo
GeoInfo
DirectoryInfo
PropertyInfo
Bitmap
MessageSecurityOverTcp
get_ip
set_ip
CopyToTemp
System.Linq
get_Year
set_Year
get_Number
set_Number
GetSerialNumber
MessageHeader
CreateHeader
AddressHeader
StreamReader
TextReader
MD5CryptoServiceProvider
BCryptCloseAlgorithmProvider
BCryptOpenAlgorithmProvider
CryptoProvider
IFormatProvider
provider
StringBuilder
SpecialFolder
GetFolder
ByPartSender
sender
Buffer
get_ResourceManager
ServicePointManager
DesktopMessanger
GameLauncher
FileSearcher
ManagementObjectSearcher
Gather
FileCopier
System.CodeDom.Compiler
Spammer
FileScanner
NativeHelper
SystemInfoHelper
CryptoHelper
ToUpper
CurrentUser
GetDelegateForFunctionPointer
BitConverter
TaskResolver
ToLower
JavaScriptSerializer
ITaskProcessor
IEnumerator
ManagementObjectEnumerator
GetEnumerator
.cctor
IntPtr
base64str
set_ReaderQuotas
XmlDictionaryReaderQuotas
System.Diagnostics
Fields
ScanPasswords
System.Runtime.InteropServices
System.Runtime.CompilerServices
System.Resources
Spammer.Properties.Resources.resources
DebuggingModes
AvailableLanguages
TryInitLanguages
PartLanguages
languages
MakeTries
EnumerateDirectories
GetDirectories
_masterTableEntries
_tableEntries
Cities
Spammer.Properties
GetProperties
ExpandEnvironmentVariables
TryInitScannedFiles
PartScannedFiles
remoteFiles
TryInitSteamFiles
PartSteamFiles
TryInitTelegramFiles
PartTelegramFiles
GetFiles
profiles
GetSubKeyNames
TryInitHardwares
PartHardwares
hardwares
TryInitInstalledSoftwares
PartInstalledSoftwares
softwares
ListOfProcesses
TryInitProcesses
PartProcesses
processes
System.Security.Cryptography.X509Certificates
ReleaseUpdates
GetUpdates
StripQuotes
FromMinutes
_fileBytes
ReadAllBytes
GetBytes
ReplaceEmptyValues
dwFlags
settings
Redlogs
GetScanArgs
TryGetArgs
get_PassedPaths
set_PassedPaths
FindPaths
browserPaths
remoteTasks
TryGetTasks
Locals
get_Credentials
ClientCredentials
System.ServiceModel.Channels
ScanFills
ListOfPrograms
Contains
System.Web.Extensions
System.Security.Permissions
get_Actions
set_Actions
get_PreStageActions
set_PreStageActions
System.Collections
TryInitFtpConnections
PartFtpConnections
StringSplitOptions
searchPatterns
patterns
get_Chars
get_OutgoingMessageHeaders
TryInitDefenders
PartDefenders
defenders
scanners
RuntimeHelpers
TryInitInstalledBrowsers
PartInstalledBrowsers
installedBrowsers
TryInitBrowsers
PartBrowsers
browsers
loginPairs
SslPolicyErrors
sslPolicyErrors
get_TaskProcessors
FileAccess
success
GetCurrentProcess
GetProcAddress
GetRandomIpAddress
EndpointAddress
address
TryInitColdWallets
PartColdWallets
AllWallets
GetArguments
bFailIfExists
arrays
ElementAt
ParsSt
Concat
ImageFormat
ManagementBaseObject
hObject
ICommunicationObject
GetObject
ManagementObject
cbKeyObject
pbKeyObject
object
Select
CheckConnect
Unprotect
mYDict
System.Net
offset
set_RecursionLimit
TryInit
cbSalt
get_Result
pcbResult
IAsyncResult
__result
GetStringInt
GetInt
WebClient
System.Management
dwIncrement
SqlStatement
Environment
get_Current
Content
EntryPoint
IRemoteEndpoint
get_Count
set_MaxNameTableCharCount
GetRowCount
OsCrypt
get_os_crypt
set_os_crypt
StringDecrypt
BCryptDecrypt
TrimStart
Convert
VerifyScanRequest
get_geoplugin_request
set_geoplugin_request
ToList
set_SendTimeout
set_CloseTimeout
set_ReceiveTimeout
set_OpenTimeout
cbInput
pbInput
cbOutput
pbOutput
MoveNext
System.Text
cipherText
chiperText
ReadFileAsText
cbMacContext
pbMacContext
ReadMasterOfContext
OperationContext
createdNew
GetConsoleWindow
nCmdShow
DownloadAndEx
HYnGsbePx
endIdx
startIdx
startIndex
rowIndex
Phoenix
GroupBy
OrderBy
DistinctBy
TryInitDisplay
display
InitializeArray
ToArray
Consistency
get_Key
OpenSubKey
ReadKey
chromeKey
stringKey
RandomKey
bMasterKey
hImportKey
BCryptImportKey
BCryptDestroyKey
RegistryKey
get_encrypted_key
set_encrypted_key
TryVerify
System.Security.Cryptography
get_Assembly
BlockCopy
CreateShadowCopy
entropy
LoadLibrary
FreeLibrary
Armory
DbFactory
ChannelFactory
SenderFactory
get_Directory
set_Directory
baseDirectory
profilesDirectory
TableEntry
SqliteMasterEntry
get_Country
set_Country
country
Registry
get_geoplugin_city
set_geoplugin_city
op_Equality
op_Inequality
System.ServiceModel.Security
System.Security
System.Net.Security
set_Security
NetTcpSecurity
Entity
CreateDnsIdentity
EndpointIdentity
IsNullOrEmpty
BCryptSetAlgorithmProperty
BCryptGetProperty
BCryptSetProperty
pszProperty
property
System.Security.Permissions.SecurityPermissionAttribute, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
SkipVerification
System.Security.Permissions.SecurityPermissionAttribute, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
SkipVerification
WrapNonExceptionThrows
.NETFramework,Version=v4.0
FrameworkDisplayName
.NET Framework 4
CheckConnect
EnvironmentSettings
SetEnvironment
InitDisplay
PartDefenders
PartLanguages"
PartInstalledSoftwares
PartProcesses
PartHardwares
PartBrowsers
PartFtpConnections!
PartInstalledBrowsers
PartScannedFiles
PartColdWallets
PartSteamFiles
PartNordVPN
PartOpenVPN
PartProtonVPN
PartTelegramFiles
PartDiscord
Confirm
GetUpdates
VerifyUpdate
Entity12T
Namespace
Entity&
Entity8T
Namespace
Entity'
Entity10T
Namespace
Entity'
Entity11T
Namespace
Entity'
Entity14T
Namespace
Entity'
Entity15T
Namespace
Entity&
Entity1T
Namespace
Entity'
Entity16T
Namespace
Entity'
Entity17T
Namespace
Entity&
Entity9T
Namespace
Entity&
Entity4T
Namespace
Entity+
Namespace
BrowserExtension
EntityTUwSystem.ServiceModel.SessionMode, System.ServiceModel, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
SessionMode
GeoPlugin
HardwareType
EndpointTUwSystem.ServiceModel.SessionMode, System.ServiceModel, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
SessionMode
LocalState
OsCrypt&
Entity5T
Namespace
Entity&
Entity2T
Namespace
Entity&
Entity7T
Namespace
Entity&
Entity3T
Namespace
Entity
RemoteTaskAction&
Entity6T
Namespace
EntityA
3System.Resources.Tools.StronglyTypedResourceBuilder
17.0.0.0
HolderName
Number
geoplugin_request
geoplugin_city
geoplugin_region!
geoplugin_countryCode
geoplugin_latitude
geoplugin_longitude
postal_code
country_code
os_crypt
encrypted_key
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
hSystem.Drawing.Bitmap, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3aPADPAD
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
IDATx^
5edd\S
UO^NoG
T1K@/K
]_\7q}
PA&WB*S0
KVf:23
\mj%lZ
m*&nW3%
uFT:uL
OC.SKa
cR#dQ#l
hV!dT
(1)PfQ
Z9|d[1N
kR#bQ!b
3PJnSa
&l*vcge
GzKqfA
<3,xn^
hpk&5z
3CGC !
.c:l)2bW
btzJ9A
&|w[;~
B;3Z`a
"`wP@c
yzAD'AX
o~1^ZP
~rr5~tl
cQ33.F
cR hU"
lo?~q`6~sl
rriTI>t
~{~1~{
!l)wcO
EUEXV]
&l)3`s
xiU-^]
(~rj!~~f
v/~vz+~t
(=v!Qh
}y/~wi
(6*QdR
6l(uaS
~tf-~~
%>6Znn
(1d2q}
N=Zl*4
~tz%~ya
Le"X..
a{G566
/4a(jf
iID^c"
phQbV#n
~|j#~x
]>VU{0^d
.,*t`Q
TcMG%V
V,(uayu
@;yNmv
mxqM3>
t$ Ec
UdYeLc
t$`aXP
ckk!vu
~{y?~y
0+}&CO
M3QfNC
T#A\+A
f!nNcJ,Wf
yaTDrP
wqq#..m
"M6bZa
JZ133333
'b}a$f3
qyG7E.
]yR}d
O[9^vV
YXXXXX
&q~]'^
Y,,,,,?=
daaaaaa
pS^GKK
daaaaaa
D{&~?\
t~@2z2#
YXXXXXX
j1#G~.Z
6&DaWf2
u-xgK'>
daaaaa
YXXXXX~
hahs3E
TaCm6fk20]
YXXXX~
C.f<>,x<
$bMI:6Tdcsu
daaaaa
)VGXb4
daaaaa
ry"p9D
YXXXXX
YXXXXX~
(kS$;Z!
daaaaa
peW/>\O
GLF9b"
X<TKdN:
uG7C/C
XXXXX~<n
8P$g_Q
tc*^XU
1\=<I
|]1>][
")gJCp
lm)>^[
+(_4+_L
6n!l#e
+(_4+_L
daaaaaa
Lm,NVF
*JNM4C,
YXXXXXX
daaaaaa
vW&`GY,
c[^(v0
XgLG9`S
<vm{=M
YXXXXXX
boU<eOY
#vg9ag
qsg/+7
by%>]R
c]xiM7
Dm5V.h
W[[qcO
+;:pmo
27lKr"
kjpac#
U!&lzM
U^f(w7F
MMlL@:
D>/E~fHq
&YN32wdx`k
,R\{'d
qkW9nm/
,R\{'d
;;zqwg
|hW`=F
'$ m.B
jqsS#non
+spmE6
lJscMDhC
qia"..
i#Xw6"M
Ih/`Q P
Wk:qy}'.
r|5V6I
^ZYD(Ppye
[pgk3no!
;V$9`4
76%zcs
6'c59o
bq,..M
Af"dxX
Wksqe}1
Bg5,rQ
lAsu$Z
g`cQ0V
pcS)nm.
B\_W4I
W*7uf!
ps}9nl
;+rqwe
KBBBBB
RI%[gr)G
xljJAW
%!!!!!q
|q|6>?6
%$$$$&
cPN'\yiV
x|e+.,
v6&cO},
MB|(;{x
H6i8lZ
MB|(;{x
@\.0y~
n]5^[[
X3f&X0+
!+P@NA
dr|!!q-H
EexaE9~
j'Vy+R
sC(m+L>
JhVJA.
d%bf^2f
fboh
>2:/r7
to52i:
II@iL8
S=NaMf
J9kN+`
blo.B_
bZgaN<
\||x!>8
msm.6V
b]e6m#
riX3b5]Wv}E)
s3C07K
G`yI$V
?BFxb0J
!|zb6>;5
c2Hd{y
vWD`Oe$
VE`_u$
7$pY|Gk*
~|||&>=E
eNyjv9
9xn(/
9%xvN1]
[{x3`&
n}Yxt
xiI5^^Z
z:g,kr]A,gm~
VdFayF$
kRzPP#
|<D<<@
;ux~^-
`em.65
95xxQ3
Eexiq9^^"
fbY^:V
GXF`W4
3*q_G!
a~E6z2
kT"S/C
=#^XP
m|pt6>81
Extv9ov
sCi8?3
h*IG]A2J3
iEKz8f
|{&.td
4<Gxv(
/Ag M
`:%xs~
$Kg!I2
b79G{j#
fd+f"K<
~]".7$
o-Hg-]7
Meh/LAI|
h"}ec{:.
xgi9>Z
\KKR5X
hg%"T2
~vh'}pn
WEbOm4
cQ}C:<
k_y(+"r
-)ZlKq
cea8Ne'
D;i;#Td`
]07Q;N
v7'cK}<
>j54"1
4%3^m$
(IMDVL$2
;:pmW7
h/LA[q*:J2Q
.bDjDc
;;o,7
$aWc"v6&cK]
xyu7^Z
HDPIEPH
6bu_#V
i~@=,J
dcGC"V
xm]^\
i,CS^2
wgg?nl
)MDGf(j
2GVPD%
;;{q{g7
lE9>]^
Yh.LGkq&
0)b'."
byC:zsCQ
EbSQ(V
}wn>9~6
qX[NeXYM
jlJPb}
,*+Shm-
YQh+LDoE:
iUHtV@
a7c*lg
&zc}N(
W2>^WE
FP)(qp$8A
J@r/!X
Fcr$:3c
iT`8^i$
M~V6>]
wV D%G
AeE>*Sc
5UxgU%~Oxw%
{+8>XQ
gy`CI06
pW{.nn
-*TZ5(
*ds6FsV*U8
bDQG?*(
nZBv"S
Ro-vuUa__#
co[#v7
zx!6
Dbt8'!J
qsi2n/w%
!t%&aY
><sr^
v52DW#[
psk6OD
L)]cexc
D<ZY(ZE
`Q<VJd8R
,{!,x'
EUl *b
cCzYya
ow1>\*
YtY4veDa
U.Z4""
S4(V'sJu*d'
]dHBvp
]W}yx
)a%24j
qS}:ni
z{:.t[
PfGcwV
EAl(/]
KSqsk.
p/O|p~
qK,J#w
VlGkA:
LG>N5ga
#>\(^+?
aGWy!z*
%#l]y9
g'D>;
VFzq||
9[4FM"
"Dmb0j
,QA0K
l8r)}N
x=}V5^
}.{_Gj
(=m,ud"
7v8pk_1
=M)C=}
7Hme_>
0aW!=h;-
3V*-8Ze
lPKh[8
~J)uLc
i`R)8Fe2
{Zqaw+^
'jL8Ym
H4S=`I
Js2Qh5
-MW"WG
\,5ebW
4t7W`a
2z=J(b
%aa<:0
z#veJ1
%-133333
vv6ptt
rC)uZK
Bnz4rR
FJ0m#b
DQ(v%:a8
GAr,*r
3VD8ce
'Na8[Y
MxcS9^Z
L-Dzt}
{}o=n0
P><:7.
d{=DX-F
`TEcWq(&K
tO.X6'
5Yxrm>
=D_}?b
j':8L
e{a_],N
?^EmM%No'F+xr
QZ>rg.@&
U8C%KFt~
31T")]
aEJ0V&
<?{KDz9
[Dy:!9
a'>;$d=>
ky$ KJ
p{{1>gQ}
[Ben157
{VT`WG)F
aog9Nln
b,OTb}
ptu"NnL
pkszH7
$FauI.
&2]5"pw
D'lKpD_
0D093\
FO%^\_
hLTGbgm4
Ouj[).
yzaM6N6%`s
+#.qB,
J|:Z&@
:@b=xJ
d'+dRg.
c_}"gOu
\Nm@#>
infHu7G
?V2X}f
m|->:6
0k)|$,
c=8}l5
7Tck[-6T
i{+tRA
56%8b"
IMmHj6
c[Y<v,N
yxuc+.
nZ(tRC
j&[Nw6
<E8P}!
m=U9>7
[kkpid1vV'`E
hU*6V&b
?7O_> t6
pcUxkS
sCKqv`
i0+El/
qk&>mM
>Uu6/WW
6ZHp6D
{l?{pb%
-vg;H$
xGuN";
gv.u5a
Ag^2vt5
bMv0Vg
I@1B}@
3hdX+"
J{:o.v`Y
v*'#AA^V
.NCK^$
X+9>N##
h]%>^W
O!!(H@
Zqsw7n
quo'o*tm_
"[D&>_
@eB0Zsc
2U6?SQ[
Spfs,k
6CS IMc
I@_7;.
9(HS.N
(@ow;>z
ExcYr0
Dt%zb
[{;p{_'
O7-bTp>
i)%FZN
Yxqx6G
Va_s*v7&
a(N*Yl
+3kqyf
[2<9*pR
T$"J|W9
h0$@$$9
sSMBB~
S2qcj6nN
;exZ+
*qkN5n
;]UXj+q
RK!.O-
46T`hs?
4f$`@Z
:|sm-s
MK@Vr,w
xziCG*
xgLNrA[
#SprT*N
\S!m(jBY
xys'^~
MxvEpy
ay.:(t
mxvp&^
\3uKy(
*q~J9NM*
sz|?q~0@
FYj!X|^>
wa+>;
$lUYTR
0TlBGG[b|
h_Dz{
4_")\F
sKqw~y
b|F &d
7Z3<1%
!5J"-"
(oDyI
4goN)n
mYY4&&{c\
L+biwez
7ZKp]&
sq`l>K
MG~N2S
)MOcJRRd
(dEG #2
[=uXj)
`#E&Bl
{aXZ Fd
% q]lz)
YLYZ:S
kcSq}|
/^'E.Q:4
9FFXat
75gbE}
EuN>jr
i(MMe(
-FMU[|
,*fffffffffP
}mU=^[Q
'-d;j"
&VZsa
oh{}wx
`+4sGQ
FG"')Q
&|{e#n_
Ao!-H
UDamy4FhA_lA
WA,z3"
Hg!J9b
tsBFl42
IAyJ,"
__X%qn%n>
qdK>e
kS%xeY
^[]#Ds
.<miq&
"8iK8h<
)GgU)Z
{{{ps_
;rqcPJ
( MUXk,
\[ZA#S
T^EgM!
=fH?3F
sDh8vUDaOU
Q{TH@G
KpC-j9
XOs2Gh7
:\h^sP
eycMA
s-"']-
'xq4/q9
1],xcY
fc[S*v
xa8Kp}q6^
nE%~7]
rK%w:
To+$xZ
xM9>]W
6C%}.y
;=z\[z
h+L@Gq
'6FYbM
Xnxrk[
x/:nlQ
PW4IHW "
O@WA<z
T'aqU<
[#9xgI
7Ve{`Y
`qI,V6ecsO1
,/Lgzb*
)."un8
?GKvG8
:K@N[d
%j|,D#
Ixu(QDF^
(@kn*rG
wvI|xp9
1_5,!8
VHt1B8}
KEgJ4zRb
13333333
:,r[.F
OH?G92
~MV#F{
l0G}zw
.G]]B!
n)IGwj
(+QI{2
c(DcaF
~KL'{c+-
uxms5^
j?kTyS
Y4Np^6
ne,NVF
LKKd[[#
H#Q]s[
Hj &s#
(9vjb~
FF:0xD
gJ'HnY
cexkS9
*cK'XgS
M-^&h
t5AGWC
-)N"rkk
puj5W!F
C9xk8o
fakQ<6
TMl)Na
h'Qiy!
(6SF)}
HGS rF
R`D'1!
^KlE*u
l#vZtE8
B'6jR~h
.4aH'-
*"uv'{bo
zW*.w$
,=n'=O_
FJH0UY"
~~{LE;b
93*xb5
p_g&NU
p:Ebc*/
^g,.TG
}xeW^
2UH@!S
wTcUC1
rL%rMoF
vf}A86
x~G=^=
z1R-nA
O%xsK=
Mxa}=~7V
]W!D G
X_"xsC
3.tnp6
Z*j]9zg
KPew;J
htg$`ef2
k Nd(1
u5xuM9^
Cw~8:3
|}]6^Y
xym%~;X
(GtF;aE
_t%xb$7
P{#DyX#
{zHH@>f~
h5~7\N
<WKCxZ
LLLn`j~
45Raef
WGh<< $
5K?n0"
xw{,.7E
GWbkO56w
t;lNQ`c
sqHH@u
qU6NweaKi
V&aS~4
%`'];X
Gyp}@^
yf.,Lg
=t}w=n
h'cDkY
gEbMi*
gilioF
45"L`a
EYd0*#
g7_j*qa
,B>JL?k
|t|%>>
cKM46WGac%
o%AXUD
CFD`<7
o'gc8j
% ckJs
aj|y'f
aMZ8&R#
v4&`[],
J8Kf7ws
`$#P$
7WS8kM
sq,vsg
J]Y?3}mYc
|pn->>
UG`mU8
D]8N7D
e@xnm/~
V&as]:6
%amQ,V
3KHblg#E3
xuC9^Z[
7Kg`ol
&hKn 6
Od&D"5&
GbUm8V
aUU(VV
Muxyc-^
h$vVGawU
J7UOz}
K?fu]
a*%,j}-QO4
_],&+#
!>=K_cqx
T["Nqf|G
Bxwc)~
:{Tzkd
hm"Y~,
t/YS6e
h|uC;^Z
c5xnU%
~{j%>?
8OtGS@
L5q8JA
aEu*VT%aye"
U$`iy<
pU)].1
m(\-ic`.
6LL--j
(/gD{3ZD{8 Ng
vCz\(zZ*
PoWy~E&^X
|p(SD g
WFjqfA
<LT&`yq
YCK{9G
_[)~_D
('4E8J
mx}C3^[
$1gjcq
okQ fh
q~U$.5D
;)X:OA
twkdR`
im@[c5
ppM>Nl
f(rQ$
ga0/L$ 7
zOi.Ov
:rpOO!
Gg'q`f
jK5~9S
b[m2fj
bpiE4.TGK
c;+R0S
P@Lsm{
BA/gTd
P[SDX-E
g`Gc6Z
-8qp'N
)b54_9,G
etnq-9
En%~8^
Pco#8;
EWI82)
wm%fpd
=S|}K0
NFCj4V&
+"piE8
*||l->:
bm^2V%E
*$0zT$`1
NDSn2V
)H@WF8
37s0*
{9b5&R
37s0*
VAsyi$
D9~1^f
?W-/7d
n3it;M
#pwW8N6
c_m&vV
8e+py,
3pgs&.
(aoY8v
twLdx`*
MYxj K
A}I!Z*J
[$"0Cs+
h./Am^6
F"PgN,
B]Q>*2
)G[]5:
rqkO&n
"3MD 7
`YF F2
[[bpK[,nm
r@g(r
&TDx#%
&<}j=^8
uxmS=~
a)%~cG
:{k8;X
?W>GVr
/3'JCp
~Y+6,k
~|b5>:>*
bc"nnI
y.K4ay
J@uO@.
{b->:6%e
[[Si.L
xi]-^\W
xE$NUF
yxu\92oL
{{+qKW
\ldBqsc
+2Pa4K
d7=n/=~_
hNex@F
87L&{b]
#YxjE6
]Gk;gZ
"Za1;x
qK;v988
^4scK$
h,.@wm
puS>&Z
j6`:W(
wU$ #e
qK;v}
Td`"njM
nnK$8+0
p+>f!HpF
pgbnNrkK
]VD8b$
@ek,{8
ZLkXZo
q[S4ne
l/a]&w
/NFoZ8z
PJqy?>
C=x}w+^
HW+xY_
TxeC=^
g`ei:v4
~{n5~w~
2Q*<?U!_
{z3qo_
[[Jq~E3
{t%><5
~sp)>;0
+eL~{K
F`KQ$v
j9p4]fX
l-+D{Y>
BsI>ZK
4o: ^o
d:*B0W
wGO:n#n
<hntFs
P8&*"q
`KS::i-
c(Cb43@
Kt|e{#^
dli*CO~:
qac#n^
}QNF8p
souQ6*
/QhBQ^2Jr
85V$h)X
,$`M8=
Lp9/#g
==x`w
JDX-D
<mxo1Z?y{#
l?O%r=
5%agM<
WuaSS9
^"Jlcu
=qztFk
8}>nfq8
FD)Y"^/2
Pf(Fs"D& K
po{<^[_A
x|M-nn
+Pn?Od
hnD9K7
"qkM4n
"BdssF=
MEx}K1^
z=Mzv4
%ySxtY
__F zR
.K@CIp
]5xas9
MPN4Ay
Cyv4Jr.
EY^4Js/f
+JEMi*
J45xfU6
s#ixqy
X_4Ex!
@[dyY"
:8k.J@
+eEa0-
h"Tg{1
pz& s1
O>Z[IGY
U587\.
#$`Ev
Ea]Q8V
iabgy=
3(,(h2
B}b8ZS
zg:=6)
j>Afs
xu]!^!^
h'>;Ac
[-ffffff
8@BfI9
#]g#Zm
vU$`Ou
MMxwS3~
--xwc#
i]59O5x
%5xzy=
h(/@Ce
Hs!Eu
hHO@Kf
:7$hUH
Z${jDqj
,B_Q:F
x:0;M*g
5OM}rI
kJpcA2
~fq>^\^"
F7;qJL
H-Oczks;
o3W|L7a
Z<Lzhy#
z,M2ay
|iE)^^]
vnRX$B
"Cms'<
UxbY5~
m]xoG
3mT[!"H
Lr$2%q:
gawC66T
8?TFx!Yk+
Vi5.64
e$Zo,$
Ly4Nsu
}xeK/^
fasQ"6
?d&E ).
K[_Q$R
Bb|0b"
l6Hzki
{qa-.-m
c4(N4b(
FG*ntN
39t*I*
qZ,I6bM
E`19F#9
thO$g.
mxyS;^
4_, C9J
m#xrc?
`Gc:v4dbgc
,jkqBy
U&`Yu*
G}MD6p
g>tjkx
P}T j#
vWcYo%
J,(.DUL
BLD!)R^
rLM$#9
(dDD"54
?Eto_*
{WW`A^>
@[Y%ZJ
A@ O?}nS
xq}-^XW'S
qnq9.,
0~utP`
qOm0.5
[GFDo
<1^+zr
Z>6:^/
kkZpyM
tMvW&c{Y
7]dQ'Q
>yl;>q|!
w.$ e\B
&$F]+"
))Buy)
h;vNvav
1c%lT1f
AU.K@+JSMB
3y}%|M
DyO1<}9
p_u*N6
@G7z[;
X`T*N3
vTage&
e"#3ED#
(MKCEf&
@uS`~&8
|1roeA`
D_z2zR
v3RlfER
SE^*"S
4'C|_1]
eb11"zo=
`.e8e)fdS
@=-c.%
U^sX@$#
)(79
;|"czi
(-+DQq
n*+Ti#
i>&$`]
@yv6jKK
dx_L[]5
qsO)Nw
Antivirus Signature
Lionic Clean
Elastic malicious (high confidence)
MicroWorld-eScan IL:Trojan.MSILZilla.4694
FireEye Generic.mg.4c6e680bb084e142
CAT-QuickHeal Clean
ALYac IL:Trojan.MSILZilla.4694
Malwarebytes MachineLearning/Anomalous.97%
Zillya Clean
Sangfor Clean
K7AntiVirus Clean
BitDefender IL:Trojan.MSILZilla.4694
K7GW Clean
Cybereason malicious.6e1328
BitDefenderTheta Gen:NN.ZemsilF.34266.9m0@aywJwGp
Cyren W32/S-3049d5f7!Eldorado
Symantec Clean
ESET-NOD32 a variant of MSIL/Spy.Agent.DFY
Baidu Clean
APEX Malicious
Paloalto Clean
ClamAV Clean
Kaspersky UDS:DangerousObject.Multi.Generic
Alibaba Clean
NANO-Antivirus Clean
ViRobot Clean
Rising Stealer.RedLine!1.DA64 (CLASSIC)
Ad-Aware IL:Trojan.MSILZilla.4694
TACHYON Clean
Sophos Clean
Comodo Clean
F-Secure Clean
DrWeb Clean
VIPRE Clean
TrendMicro Clean
McAfee-GW-Edition BehavesLike.Win32.Generic.dc
CMC Clean
Emsisoft IL:Trojan.MSILZilla.4694 (B)
SentinelOne Static AI - Malicious PE
GData IL:Trojan.MSILZilla.4694
Jiangmin Clean
Webroot W32.Malware.Gen
Avira Clean
Antiy-AVL Clean
Kingsoft Clean
Gridinsoft Clean
Arcabit Clean
SUPERAntiSpyware Clean
ZoneAlarm Clean
Microsoft Trojan:Win32/Sabsik.FL.A!ml
Cynet Malicious (score: 100)
AhnLab-V3 Infostealer/Win.RedLine.C4620512
Acronis Clean
McAfee Artemis!4C6E680BB084
MAX malware (ai score=83)
VBA32 Clean
Cylance Unsafe
Panda Clean
Zoner Clean
TrendMicro-HouseCall Clean
Tencent Clean
Yandex Clean
Ikarus Trojan-Spy.MSIL.Agent
eGambit Clean
Fortinet Clean
AVG FileRepMalware
Avast FileRepMalware
CrowdStrike win/malicious_confidence_60% (D)
MaxSecure Clean
No IRMA results available.