Static | ZeroBOX

PE Compile Time

2021-11-12 07:26:44

PE Imphash

f34d5f2d4577ed6d9ceec516c1f5a744

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00002000 0x0006cec4 0x0006d000 6.6996798769
.rsrc 0x00070000 0x00047f86 0x00048000 5.00104887059
.reloc 0x000b8000 0x0000000c 0x00000200 0.101910425663

Resources

Name Offset Size Language Sub-language File type
RT_ICON 0x000b7580 0x00000468 LANG_ICELANDIC SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000b7580 0x00000468 LANG_ICELANDIC SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000b7580 0x00000468 LANG_ICELANDIC SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000b7580 0x00000468 LANG_ICELANDIC SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000b7580 0x00000468 LANG_ICELANDIC SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000b7580 0x00000468 LANG_ICELANDIC SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000b7580 0x00000468 LANG_ICELANDIC SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_GROUP_ICON 0x000b79e8 0x00000068 LANG_ICELANDIC SUBLANG_NEUTRAL data
RT_VERSION 0x000b7a50 0x0000034c LANG_ICELANDIC SUBLANG_NEUTRAL data
RT_MANIFEST 0x000b7d9c 0x000001ea LANG_ICELANDIC SUBLANG_NEUTRAL XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminators

Imports

Library mscoree.dll:
0x402000 _CorExeMain

!This program cannot be run in DOS mode.
`.rsrc
@.reloc
"XxaifY}
saiZeYf
(aiefY}
X.19@#
8`:ai(
q`%= i`%=ai(
[XZ_bX
[XZ_bX
[YZ_bX
[XZ_bX
[YZ_bX
[XZ_bX
[XZ_bX
[XZ_bX
[XZ_bX
[XZ_bX
[YZ_bX
[XZ_bX
[XZ_bX
[YZ_bX
[YZ_bX
[XZ_bX
[YZ_bX
[XZ_bX
[YZ_bX
[YZ_bX
#W )rD
[XZ_bX
[XZ_bX
[XZ_bX
[YZ_bX
[YZ_bX
[YZ_bX
[YZ_bX
[XZ_bX
#)y*l$
[XZ_bX
[XZ_bX
[YZ_bX
[YZ_bX
#4>Zfu
[YZ_bX
[YZ_bX
[XZ_bX
[YZ_bX
#4G53v6
#5a9Mg
[YZ_bX
[YZ_bX
[YZ_bX
[XZ_bX
[XZ_bX
[XZ_bX
[YZ_bX
[YZ_bX
[YZ_bX
[XZ_bX
[XZ_bX
[YZ_bX
[XZ_bX
[XZ_bX
[XZ_bX
[YZ_bX
#DM&c6
[XZ_bX
[XZ_bX
[YZ_bX
u:~A#
[YZ_bX
[YZ_bX
[XZ_bX
[XZ_bX
[XZ_bX
[YZ_bX
[XZ_bX
[YZ_bX
[XZ_bX
@"VeA#
#eXOB\
[YXnZ>
[YZ`(j
[YZX(|
#kKh|O
[YZX(|
[YZX(|
[XZX(|
[YZX(|
[YZX(|
[XZX(|
#t%'qeC
Xaieea
YfaaXf
~~^aieXa
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
1M,A1F
k*'L#B/x>E
u4Y2]:W'@
_4[:W'@
D+J'W0v
\1Z5T9I.h
B/D+J'W0v
E(X?]3rt
^5Z;V&A
l-@+D%H
g@Ce%#
o.C4:[6@
\=P23u
o/C)GX#
tP)(ER
Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
_2Y6W:J-k
g&K O.C3T
e$I"M+F2M
g&K O.CSL
K ]0[4V<L+
A,G(I$T3u
_2Y6W:J-k
A,G(I$T3u
y8U>Q0]
B(C,M P7q
[6]2S>N)o
E(B-@-]:|
V;P?^3C$b
H%N!@-]:|
V;P?^3C$b
H%N!@-]:|
V;P?^3C
q0]6Y8U%B
g&+@/N{
Z7\34W
9C.^5I
)D/:;n
|:)T9R3(k
NV"R5i
:M K ?
xY(? I
Q0],&I
L#83V$
%H#H'"
7%N!<O$
lB-L!P7q
[:W' ~
S>-.O"H)X
[21G&K1
m/<L+m
:!^3+C"O=Z
k->N#H&4)X?
O"R+4|=P;
Y3E&l
o#B/_8u
Z1^5E0
=\179n
R(G&E!H
3"I&=<
K&M"C.^9
Yt4I"M,A1V
{:Q9V7Y
^1P7l*A
^1P7l*A
U:[0c>x
:J+F0t5X
\=P M&g
,.E*EK
q&?,=\1;G
!N/8 ?y
r=*E(X9j
]Y0Q<L
9I.^+B
K O$>G
!Q<W8H
/@!L6Q
|<Q:T3^.I
I"T9R=\1A&^5t
l-@+D#N,KTt5K O.C1V
n]S8J+F6Q
|=PL4U2A&`
0-D+%H8_
tB-L!Q/?T
{:W<<Rb
"E$I98h
?X5E">
6D%xY2s
R?O">x3^5Z
Z1JJ!N/B
.@!$@'a
/D+J!
c/0]-J
R3^.C
&M"=(3T
c[S.O"R#c
1,<S!K;\
z6$_2Y6Q
L&9X5C$5^
E.4U8H/N
FO$K @':
!y8H#L-@.I
B#Q8=A
WZ1^5R
Q:U2_/H
_1Z5E(X?y
S>S<]0"E
G*+:T"
,C"O&A
#H#L-:
N%J!&N
A,,C">
0'F+W*
BA M3*l
3.C,2_/H
[6F!I"c
k*G&?X
p1\1>`
\-45^1P
4!J%@$
X5^10]-9}
;-@+D#
z<^3X
"A,\ P9
0]6O#:>R
K O.-P
P;T1K6
2 8U%B
6%N!<K
^&M"2m
yY4D#(-l
,A*?4S
W1:/]9
q0">Q0]'
K [+>J
F H +(
?:W<R(B+6V
t5X) :/
ST9I.(
?T;Y)V*V#
Y2]29B
S>U6A74r
;V=L"M6;U7u
"C.]/f
D%H.#^
-L!P,d
m*G@/N#3T
d%H#.O"R
I"!L'H
8W6QE
{0[*/K
\7X94
/@!L0U
P6W:J+j/
hH!.|
W2I!+d
H)D*'Z
Y4U]/B2U
[W6[!9
9!J%:{
~1\*3[+M*
H%X(7ZG
^(OiA
R*;T(<
u(8S>`
P.;TG#]+g
\%]0_O
\7ZP7{
"M7P\'p
r-@+>i
4V!;K,j
2I#N G
J$E(S4E.
B-K&F!
S:I$>Y
.1H'5X
F!V=W6#L
_8'5D(-B
(C] A.N#
i)B)$O A,
W6[+Lt
N'D/Z7
EQ6Z1p
T'W%D+
F)=-]:|
L-@0W0R@
92S>N)
\=Pxs
-8Y4C$
^?R!F*/n
S2_.I7D
mC*Z=y
R#H'C.
<S2_,Ko
|=P:U{
q0]5Z5<L+l
$>_2@'
P=',M O(
W6[*M@!`
[0_<Q
-@X5<F
A-+E,6
V&_1W:
\I!W%@/}
F'K":B
.EB)R<
%88N6Y
4W;Q'57P
^,4V49
[!C$1V
y_#B%(E
pB(M }
L!_07;
;T7X=P
C&_2Q=
,?L#2^
_/M 0W
z'J O(E5R
T;X53T
Z1M I&
0=M*?T
zY4U8H/e
O"I&G*Z={
6Q0]-J
i(E.A M=Z
S"C.^9{
Q<W8Y4D#e
U8S<]0
T3C(7Z
_8G,&K
_8N%"O
_8L'/B
=\1>Y2f
tP1-]
D%(X?j
I#B/]7k
T=L%D4S
S8Y35D
u4V<J"F4M
f!; K*G7
2R'?P K
=3S7V:-E
Q92]2\
^03\/?'@
A*+E4K
m,9R=\1A
?2V8<L4K
0&J"A)C
K"=$>x
fr%8Q8Y3B
@+#GR 5
X4A.:E
i(2X$C
2<@(;W
W7P,<L)a
o.A$.Ji
F#E#@&@*H
P,$O a
(I$T3u
_2Y6)}
C*A.O"R5s
'D6]-J
`!L&I(E5R
=P;T5X
*A.C.^9?
\1Z5T9I.h
B/D+J'W0v
\1Z5T9I.h
B/D+J'W0v
\1Z5T9I.h
B/D+J'W0v
\1Z5T9I.h
B/D+J'W0v
\1Z5T9I.h
B/D+J'W0v
\1Z5T9I.h
B/D+J'W0v
\1Z5T9I.h
B/D+J'W0v
\1Z5T9I.h
B/D+J'W0v
\1Z5T9I.h
B/D+J'W0v
\1Z5T9I.h
B/D+J'W0v
\1Z5T9I.h
B/D+J'W0v
\1Z5T9I.h
B/D+J'W0v
\1Z5T9I.h
B/D+J'W0v
\1Z5T9I.h
B/D+J'W0v
\1Z5T9I.h
B/D+J'W0v
\1Z5T9I.h
B/D+J'W0v
\1Z5T9I.h
B/D+J'W0v
\1Z5T9I.h
B/D+J'W0v
\1Z5T9I.h
B/D+J'W0v
\1Z5T9I.h
B/D+J'W0v
\1Z5T9I.h
B/D+J'W0v
\1Z5T9I.h
B/D+J'W0v
\1Z5T9I.h
B/D+J'W0v
\1Z5T9I.h
B/D+J'W0v
\1Z5T9I.h
B/D+J'W0v
<Q!h-F
V=R3^.I
[6]2S>L+
m*G O.C3T
y8U>Q0]-J
g&K O.C3T
y8U>Q0]-J
g&K O.C3T
y8U>Q0=M*d
N#H'F+[<z
I$O A,\;}
~0@'a
K&M"C.^9
1H7P^5t
V=@)H%:
ox45V9*
K [63"C
UU:[,6'
h'"F(I
Z1^=N;
'F+W.R
r34=P.
C(G"$T
)D/<38F
P?47E
I(E1+m
L<1U<z
j"?S>O
!H)D0C
*6[0U O<H
V;FS>H
u3^*E$I+L
}-@+3R
L'T9R,M
^1J-=:X
[6](>S
>.A G7
0A,\7f
z*G,?S7
\-B#N>Yt
g'KT<^4f
y8U(G&:J
i,Z2H"2[
=(6+Y>S8y
4_0Gh
N%J!?F
5^h%J+
V;P?]0
:U4O,E
;P?T(T
i(;=M&G
O.96L
P;T+3=H
:U4O,D
O"I&*G7?y
Y2]2L6Q
H%7|:C
A.O!Q6o
b+@:W'?f
V(R$]%^
Y25P=M$
U8O"6)F+%B
S2<L+m
j?z%=u
@!`1I"9)Y8T?~
e$?A(8O
Q<R C";Q.^**
g&AL#B/_
D(C,M
t5X#L-@
tC-]:V=|
T$;Ug&K
L'>O$K$
O!U7NG,C
|7G \$^!C
uX3\3Q
wW6[!F
P7N>U:Q<n
lK&V'NM
%D)O(]0
}N#S*l
k4U8>Y
[\1A&`
S<L+]6w
-B#M=Z
x9T/@!L
k.F;W=S\2C%
N!?B2U
@/N"G _
Z6]2I$xA
J!N%5A&8
fI"M"<F
3^5P E
>S.A <C
o"O$GH
<L+c*k
E>_28_
H%;$A,
-B#M2U
eD)Y4e
Y4_0Q<
wJ%Do
Q=P;J+h
m,7F+I
v7:Q2S>&
4_0GL<[
q3^5Z&K;\
Y4_/N#S4 J
/>_2U2t
B30[4D$=
(R=\'K,?P
u4_0GG
Z7G B)h
[,;L##S.>U
Y2];.1V
,3^Lh
0>Yt5X
Zk*G"M
JW6[!F
<%U2py
O"G(I$a
@+U8S<U7G Z1p
P=M*V<}
q7X9T}
exY(V7K 7/_2J!`
C(P=V(I$,
.Q<L!g.`
y8U%J+5E"<!`
h(C$:,
i':Q>_2A&W2s
O.BH
:Q>U"T0k
+%D)1V
05]1P3
1A&Z1H
H#\12x
+^5Z5X
&~?R3\
Q<Q>7l
Zm,A$K
J!Z74>^3=Z
,'K$?R
S>NO$=
w-<R?N
F-A"C%
Y3R?$9y
b!"]/D!
Y,G# h
d"?V3W8O
V9X5C$b
F+@/L!Q6n
D)@/N#Q6p
X5^1N#S4p
Z7Z5T9G f
XW':R9x
X+I$J#:Q
=U*K&V1v
\3R?&A
%\7X/B
T9N!@-]
]03\<Q
j+F)2U2
M,A- S
E(N!@-(O
t7W1W#J)J
i(;(0P=C
S4_0Q:
K&G(8Q
$K*F#?q
H%U,^-V=S)C
C'Z!=O
l,1Z5R?2U
Z*Z1_"5
''S$;@
&7G \$S
I$9V7Z
F-(E.@r
8U4Y*K
+D%>;V
T+\/W`
!7^"<=^2//X
;O.9g6d
5]2S>=P
=#K*="D
R(:E*Y+M
0:?<5I8_
<7Z1T".M
m,A 9Z651
3tT&I$.E4@
S4>B)7`
r^.W(X+/,
y*F-8F
_0Q<;\
[&Q>T0J
U7G $O
[+J"Q.^' 6F!
P30"B/U&`
^0Q<B%
e$I"M,AV1i
_(0W6J2
L-@&5k
K W$Q;I
n*> :E
}<Q91:
A^3T;Z&O
#0Q<L+m
G*1^?R
X J%>F/7j
5L4_0G
9>W5C)
{$O 72
d%H"(3
v7Z-B#=F
v7I".36)M
q0]//G
>>T;T,U!`
%3B%]#^,6R
0\7R H';U
>S2J#=E
p1R2L&
],E;P?X"M*[,
B)U8S<
[2N6% E
D)>Q0L5;
'5D#_!\*0X
\ 9C+ #B
_*CA*E
w6[ O.C
W%M"=C,:u
1[0Y%C"@
X \1Z5)$T
*Z1^9A,K
\0@!Z*Z0
Z1G$>B+
_3Y6W\
G'F+K,j
7X9C35W
X5^'<Q
)V:Q83X
oLM K
O$[ M_#3i
@$E(T3u
z[8T<]0b
H%N!-@0W
-A M-J
12V:Q4
+E.;CT
X&=:L*Y'U-
Z1^5B4P
74X4_&
1[0Y!r
O5E"^"^3G$
fG,H(I$v
"!,A*;G
.\0[.8{
-B#D#;U}<Q4H$I9^
f'"\3R5>H
F'J99i
\1Z+"b
uT;Q?^3e
]63^5Y
|<Q4H%A @
4P1\(O
!M,A!F
1^?A17U
X5^'<Q
)V:Q83X
oLM K
O$[ M_#3i
D%H4S
Z;X4\=PB
(E.7C P
B/D*0-Y>
03,A*;P=G
B.E$.i
Q;K&M!O
*G,90p
~r$3P
>S8W#N>Y
@!L6>p
!N/87G
#H'<;M'P6
3S8W2N1."I
jK(D,M r
\72_4Z
30+F-8O"L
-/?^3<J
y%J+<E
J!V%P<
I$O .C3T
;E'W*Y-[12
^&G*V1w
L-B*F'J\+H
V;P5J'Q
NO"I .:9U
Q1Z5P,O
0R9V3M0/#H
A*'J!M
21*G,9N#M
#P<W2-:"
\5]#[
1;U%<g
Yq0]0L(E5R
F+@%:W!
**D%H1E
^_2Y0>J)E
[3Me$I
^?R!!Q
\=R:V7ZL
8+6[0U!>N
C+J'G f
U8S2I$N
$S=V3,;#
G)B'/h
^2BF(X03
K$;@2R
>F'J6Q
S;Z77P
30T8S2
]0[*A,V
/A*?GP
+)E$I2D
:F*Z7^0`
J'L#/B2U
'G&K+L
=6[0U*G1
Q<W7;&R5
:5X3R)D.
*2A&Z$^"B
2>R"?f
2_4U!C"<f
\"9>P6]+Y)
\v7Z+1K&V1L
z;V=R M=Z
{3&6X9T
_/Ai(E(4P=M*A
B#N=5]
=G&K7P
Z1^5B4P
8J!N+587+@
GF+@)5O.@
X7V10N
S>U0)W'@
)9R=X$G
&6P,U!a
'F+UQ)`
p0@'W+e
^5Z7I,#t5N
Q<W.<C3,
q0SZ5T
Q<W8F+[<#G
U>;V=Q
(W9R70W
7E)H%N
oA M7=s
V-*\:i
[6](!_/H
mC"O9K
'=\1=Z
K*I#M,AS$=.;V=H
r3^5Z(E5R
(F'J*M
'F+UQ)`
p0@'W+e
qP?U;Z7i
]0[*8G7(
u4OF)H
>J&V+Z,\,
{:/W8Y*S#^
L'H\.F
K*G6,T
:L'H%7:5-F
gF-G)H%w
!"/B)<J
,A+@%
>-&K E
&T8S6@S
%J+<;S
\1A&5>
W<S(/a
M K$2_/H
>Q0L<<^
:)"O$A
X5X$@-]:Q
\1Z+@-W
T(F'J3C
X,K#Q<|
7X9J)E
p.A C,:u
Z7\) `
mL#I'F+}
'$1\7N
%D)S!_#Z
[Z7\-9K*D
:W'6])
L'H%6E
b&8]0[2A&D
K^)8,M
5A)F!@('&M
Xx9T52
T8S2@%U2c
y8U-(!
128U>G
-I$T2O
x5Z;,\;<;z
&[4R'3Z
1^?H%<i
Q<W8H!:
[4U.^7[(`
Y4U\=J
D/X5^1
qj+F#9S6
x&8(/==
L'H_(O
.N#S*l+V(8F
]5Z1I-"
lt5Ta
K$E('@
S>K"C.>W
|8U$J+F
-B#D!A
nR&]j
3tT&F)H
{)!92B
<>)5(2
S>U0>"A
7W<S171E
9R=R,$
v,A*A M,D
+[<p=|
_41\7W
Q<W.E(R
0"I&==E
_2Y5/,E
N$=#H'<)
Y+V)U 3
\$89H}
\7X//E
T?P'7&0U
//P&>-1\7N
r"&<)7K
{:W;/8>
J&-T)@
8S<S(Z:k
,B/_4r
4.C(=P5
?R9+6]*A
gNE"M&h
[(OX3r%J+5E
?Q:K*?
3^5P1U
7Y2S2X
K$;J3
|=5[* M7&`
7*@/?R"E
|=(C+J!;^
o.9*C!L6E
-?>>Y#M
U4Y%8S8s
^ 6/:>o
[--037^-M
T2L !17^(X1D)
l a/c
q8T(G-C,C4T
z<R1_?S
s2_3H+C,5u
>S7X9T
P;P?R?O(
V6.2C&0r
$<F%:,\]
J"dD0`
L 7Z8N(Q
L!6[0_=@0W
8H/_4V=L
>@ R4e
V/])i~
>@Qf
&H):9Q
l$0]$M
&T.&/B-L >I
;.7W6U
O?-G,N
\"4H'/Z P
[sZ 7*
K$E$CH
Q;P5C
\0[*:H
ox-`
L'\ *-t
{ %?O.=
i(;(7U8B%c
[*0>HO,*[
M-A26"=z
|(F7,u_
#R>`,f
Q=W}%I:
iN5Y*/n
Cc'K!c
R-A G$5T!S-6H
Y%636P
Z1^;7(B
_0Q87@
_4[635Q
v!N$8>B
x--D<W8O
f ,*:O
Z$:8>x
9T?P1\,K-P
r<Y9U%G
K!T=W9)H9_
P!Gv b
Y4D#'C
Q5.s"B
N0_>I"
@ P8B"
_2Y,7\+9q
&G*Z5\
w<O)p8|
I#c,I'G3E#f
D)B-L!Q6
eP>V:}
i(E.A M
w6[&I"%T#e
~/B)(<@*6
~86S/:M
A*E#>N)n
MR2,8z
!@-Y-g}
HJ%D)>)i
,@+:H!6E
0_>O >l
X5W0G9[
E'P*9+
5^5\ 6J/
[3R96>b
E(A.O"
_2Y6W:H/i
`I%D)I.h
8(%7U)@
y-/9*C
\7X0J.8r
~)D//F
_+J',8o&Y4N
Y8U%;K
a'LJ'L#4Y)N
c"O"M,A
C!+*#1@'W
Z0^-5T
y65#M&C
$Z7\/=:"
T95Z;Vc
B)Z7\3R?O(l
)E$?<Q
?-?T5.
^5Z"6J-
]o$F!V-@%=B
N"I .,K
%N!?-G
<]06>b
F-B!L<[s
Y4B-L!
a'LH$O {
#H'<>=
p1R&7E
>"B/Y+T"
(^3X3A
1Y6W0@K
mF*Z=k
Q@_$2i
x=?V*R$[
&H)>(O
};P^2Y6H%U2t^3X7V;J-k
]1P30M
{3X=?E
R8W6Q!j,G(59.
T?P/B2Ui
C.(G&Kt
w1ZV:Q>
[0]&9K
=<_1.C
!4]:D)=p
a4H!;C
W6[!3_
M+F,8b
b$OI#H'
y.?R:t
G)B'3G&,
S>U6F
4^1P3CH
6Y8K]:|
>-?T5A
0\7X*G7P
}<Q:U4Y(O
6W:@II
+D%>;O
6Y8K(?
C.^/V,N
C-F)?*
R,5,S,W'f
H&G*I*DX
!N/858m
W;T5G0/
FP=M S
ZD)B#/"A
N#>><@
V&#=)"]%U%9V
'u4Y(40L
+i(E$83M
2tZ!L .<;U
&M"?A)8m
T/D+JK;H
k:/_8|
BK"*9K
R8W07(?l
U8H/L&g
}<Q8W6[
H%N!>S#D
M"C.Z={
P=V9O"R5r
X5A.O"K,j
9T?P/B2U
o3D>82Uk
"$E(N)}
4@$!@/
6M 0J%3h
\P$?RL%g
T'JHe
-=*Fp`
6U*G*5
pO$X3W
% K$8U
7Z1]<Q
K&""C.!F
+D$H(O,
B-I#Q5s
B/S3t^3
S=K#B/
<4N#7X
<)K$4Y
QK$4Y
|9R#6d
9SC.H/]2
@%tH%,?o
'A1\&A
T#K#<Q
;@J \3L!
b4Y1^d
$.V9W:A
L!J%1T
R9V7Z$+57l
I$'"C.^9
W<S2_.I
>S+#B/_8x
|9-F)H%B
l'2!'<Q
D/@!L&9!/h
#!@-=Z
24_01\
U.B Ga
y8U>Qr
X3\18L
T9R=F+W
;P?^3-JN#
u4Y2]&KV
)H%U2^5
4[:W'@
U8S<L!
5T9I.R9
[6]2=P225^
.C(G&K8_
&M"C.X7
I"M,A+4:*a
}<Q:U3^
x9T<S,)!
@-F)H%R5-Cz
>S8W3^
H'F+[<
s2_3\W%]8
H%N!?R
@+D%H"E
D)B-6[
2(*G[4!
xfo.C(G
T/ G0[V
A*E$I#D:O
we$I"M
4U8H/S8A
> 5Y_2Bc%N
O"I&1\}
V900U2
F-B#N(O
E(C,7ZE
{]0o0Q<L+\7
z;V'H*=7O+@
]c"O$K
{?^3C$_,
w%h)D/@ MC
_@+D%H2U
S>U:U8
B/>9 &L+u
\1Z5>S
ox8K8*o
1:Q>_2<S
X5^1J&2
$)H%U2n
~?R3TC+w
?T;Z7A
/?C-]:|
`!L'H&K
P?!K:9
1]<Q!F
\"F)%G
C"O>Y}
K&X*K&S4o
k+@?&M"B/U
$5T9H/_
f&.^9{
(6W:I.
s4_Q$O @-B
>H#L,A
Q:U2_%
>S[%B/[<
Yt2_4)H%Q6R
-9R=Z7
w5X6'F+Y>
J+F5RU"c
x'2t]0z
Q3X7U8*?y
<<W8X5
P(C,L!
:H)D2UQ-l
j,)Y>v
D%H6QU5t
rT!J%>S
20[4R?
v>9X5@'
V$E(W0
$(_2=R
@.97X' b
I";F<Q
%@1M(C
w/?6LW
H%;V:]
4[\,.I
a0F5^n
p0],C"O
?3>S4[9T
gI#S4=.
!/H$E(H&t
_I#S4&2~
89T2th
t@,G(}
t L<[1P
Q>[66Q
L#/B0W
L#)D2U
^3W8$I
M"B/X>I"a
+?C.C, L
_3-@)F
L)D4RU>
K&M"C.P73Q
N#H'B/_8~
T9R=\1@'
B/D+J'W0u
/D\,G(I$Y=
E.J'&I(:
C.^(-F
8U%14_
F+[-(C
I$T( K
6[+=(C
8U%3t
R?4[:B
J!V;C,C.Q6f
]:O$8U
T?Z7\&
'H);>Y
~2_*E$6
I$E*>S
xL'\1Z
R5S8&K
T?Q<*E
U2G,@-
_8Q:[6
U>R?'H
Z7/@ (8_
u4L'>_
P7D/A,
^9R9K& O
Q6P;4Y
I"Y42]
F!G,)D
\;P;M
L+@+=P
Y6M #D
(E!N%H
=R&K1V
t(E$K
N)O$!L
_8^5G*
M >Q&K
5Z.C)N
O"E"Z1*G
L+@+=P
K T9H'
S4E.B/
\3E(N))B
T3U>9T
R5A*8U
S4O$A,"M
P7B))D
J-K 4Y
W<P=)F
x9"I&<
+@/+9I$b
W<1P=6/i
=@'W<P=)F
T?Q<*E
]2I$4S
^E.4U.^
,A17!J
v',G$%G56m
zq*5=N/B *h
\=O-!Y-l
=>$H#<
m%<A)<A
_,:U8E
L 5U4W&3g
F)F&J,H
Z1[2G%
[,D 3O
}7U>O%?F
R2L'X2S*
V.8H)f
o E K*F4E
U1Z36>I
5Z;C2U
1A&S7v
A,K+m
?T;N"R.
Q5] 0Y"D
U3Q<J'U,U,Q;=R1I9Z
}7Z/$)(T3t
=?N!=B$5e
l-?S:U8GH
s-2<N*'W
E"R4`
/E!8U"
O#T/$J*20
t"OP1?<[
t,3;O ?A
^*H#Q4l
C,+(G&O'P
P7X8=E
@+>O)D3L
z3^1]m
u-8Q<[4B#c
C.D*3G0G
r'C 2N
s,A)8H
T8P/':S0.
(J(N%R
^1?37U!R"7?A*>K
r"K N'.X?w
y[.XX2b
%Q0C B
[)>Q:<Y
T9P57U
\/8W3;Q
~7R1T-6)=
V)6D!J
8S6W4W%@
r3^64U
b#N%J+F6Q
|=P;T5X(O
b#N%J+F6Q
|=P;T5X(O
b#N%J+F6Q
|=P;T5X(O
b#N%J+F6Q
|=P;T5X(O
b#N%J+F6Q
|=P;T5X(O
b#N%J+F6Q
|=P;T5X(O
b#N%J+F6Q
|=P;T5X(O
b#N%J+F6Q
|=P;T5X(O
b#N%J+F6Q
|=P;T5X(O
b#N%J+F6Q
|=P;T5X(O
b#N%J+F6Q
|=P;T5X(O
b#N%J+F6Q
|=P;T5X(O
b#N%J+F6Q
|=P;T5X(O
b#N%J+F6Q
|=P;T5X(O
b#N%J+F6Q
|=P;T5X(O
b#N%J+F6Q
|=P;T5X(O
b#N%J+F6Q
|=P;T5X(O
b#N%J+F6Q
|=P;T5X(O
b#N%J+F6Q
|=P;T5X(O
b#N%J+F6Q
|=P;T5X(O
b#N%J+F6Q
|=P;T5X(O
b#N%J)D$C
q+F'J9^
s1\7X9T$C
B/D+&K7P
;V=R3^.I_0
rD+J'x6]
U*'70V
G +$%(8?Y
Z5T9I.
3\7X8U
Q:A,>Q/B
T?H%C,L!
J'?P0]
G,7Z&I'J
v4.0.30319
#Strings
#daaaaa#
#aaaaaaaaad#
#dasd.dll#
#fasdfsd.dll#
#hdsadadafasadfffwtwfffffffgsssssdf.dll#
#hdsaaadadsadfffwtwfffffffgsssssdf.dll#
#hdsadadsadfffwtwfffffffgsssssdf.dll#
#hdsadadadassadfffwtwfffffffgsssssdf.dll#
#fsdadsadsdaswdf.dll#
#hsstadaaadwsssssg.dll#
#fdsdasdsadfs.dll#
#ssstdasdaaaaaawsssss.dll#
#adsadddddddadadaaws.dll#
HotHeap40
$$method0x6000017-1
LoadObjectV1
<OnRun>b__1
IEnumerable`1
$$method0x6000017-2
<get_Fields>d__12
OLEAUT32
ToUInt32
ReadInt32
ToInt32
LOCALE_SISO3166CTRYNAME2
S_MANMANYREG2
<dir>5__2
Func`2
CerHashtable`2
IArraySortHelper`2
Set_Module2
GetObjectType2
ToInt16
<items>5__6
<GetAssemblyRefs>d__278
get_UTF8
<Module>
S_notUsedSinceLastGC
TASK_STATE_CANCELLATIONACKNOWLEDGED
LOCK_ANONYMOUS_OWNED
LCID_SUPPORTED
ExportedTypeMD
ListInterfaceImplMD
ListDeclSecurityMD
LOW_SURROGATE_END
ProcessTerminal_D
LOCALE_SENGLISHDISPLAYNAME
CERT_NAME_EMAIL_TYPE
System.IO
Win32S
DX_NDS
ERROR_SUCCESS
Get_IPOSITIVEPERCENT
COR_E_FAILFAST
S_GTHREAD32_ST
TmDigitizedAspectX
CacheOverlappedData
GetData
mscorlib
System.Collections.Generic
CreateStatic
get_IsStatic
_fallbackLoc
GetProcessById
lpNumberOfBytesRead
hThread
get_CurrentThread
thread
fsassdadfassssssssssssssssssad
IsImplicitlyDereferenced
IsResultIncluded
IsCached
get_IsAttached
Get_IsConsoleEnabled
_failed
Net_uri_AlreadyRegistered
M_bFullyInitialized
<Content>k__BackingField
IsField
M_iaLowerBound
set_IsBackground
DynamicMethod
M_mdMethod
DefinePInvokeMethod
ResolveMethod
M_pMethod
GetMethod
NetGuard
dafasfssd
LookForMe
get_IsInterface
Replace
Choice
ThrowNullThisInDelegateToInstance
TypeTypedReference
LoadResource
FindResource
SizeofResource
GetHashCode
SetCode
FileMode
CryptoStreamMode
Xenocode.Client.Attributes.AssemblyAttributes.ProcessedByXenocode
Get_Age
GetSystemDefaultUILanguage
EndInvoke
BeginInvoke
VTable
M_indexTable
GetEnvironmentVariable
Enumerable
IDisposable
set_Visible
Get_Handle
get_Handle
RuntimeFieldHandle
get_MethodHandle
RuntimeMethodHandle
GetModuleHandle
get_TypeHandle
RuntimeTypeHandle
CloseHandle
GetFieldFromHandle
GetTypeFromHandle
Console
get_Module
DefineDynamicModule
set_FormBorderStyle
get_Name
Get_TargetTypeName
lpApplicationName
Get_DaylightName
FailureArgumentName
AssemblyName
NoThrowOnInvalidTime
Get_MinSupportedDateTime
TryToDateTime
ReadLine
lpCommandLine
WriteLine
Combine
ImageFileMachine
IllegalEndEscape
OpenScope
get_FieldType
get_IsGenericInstanceType
DefineType
GetScopeType
CreateType
ValueType
get_DriveType
get_DeclaringType
Get_UnderlyingSystemType
flAllocationType
get_ReturnType
Get_DontCompareReturnType
get_ParameterType
System.Core
ResolveSignature
SetLocalSignature
InitUserDefaultCulture
DynamicBase
MethodBase
Dispose
Truncate
TryCreate
CreateDelegate
MulticastDelegate
set_WindowState
FormWindowState
STAThreadAttribute
CompilerGeneratedAttribute
UnverifiableCodeAttribute
UnsafeValueTypeAttribute
BabelAttribute
SuppressIldasmAttribute
AssemblyInfoAttribute
YanoAttribute
DotNetPatcherPackerAttribute
BabelObfuscatorAttribute
CryptoObfuscator.ProtectedWithCryptoObfuscatorAttribute
DotNetPatcherObfuscatorAttribute
DotfuscatorAttribute
AssemblyFlagsAttribute
CompilationRelaxationsAttribute
SmartAssembly.Attributes.PoweredByAttribute
DefaultDependencyAttribute
RuntimeCompatibilityAttribute
WriteByte
BitsPerByte
CachePathValue
SetValue
M_arrayValue
get_IsAlive
remove_ResourceResolve
Remove
AmkoampgFk.exe
get_Size
get_TotalSize
dwSize
Resize
SizeOf
fshdfhffafasrdadsatrfffffffffddf
fsdsdddddgaaaaadwreeegfsdf
get_IsByRef
SEP_DaySuff
get_HasCustomAttributeTag
CheckSetIsSimpleFlag
ccdpilSebdg
TmExternalLeading
System.Threading
Encoding
IsLogging
Nothing
LoadEverything
Ceiling
IsAggressiveInlining
LongRunning
_isRunning
FromBase64String
ReadString
StaticProcessSingleString
OutputDebugString
VersionString
InternalToString
GetString
RemoveMatch
get_ExecutablePath
IsDosPath
ObfuscatedByGoliath
get_Length
MaxValueLength
DaysInMonth
EscapedAscii
CheckAuthorityHelperHandleAnyHostIri
AmkoampgFk
AsyncCallback
S_postCallback
Set_Fallback
ReplacementFallback
callback
DefaultMaxStack
DefineMethodNoLock
FlushFinalBlock
BeginExceptionBlock
DayOfWeek
CallConvMask
FinishThreadAbortedTask
TrySetFromTask
_canonical
AdjustTimeZoneToLocal
Marshal
IsSpecial
GetDeclaringTypeInternal
GetValueInternal
ElementDecl
kernel32.dll
Control
MethodImpl
Set_ImageStream
M_QuotaFileStream
CryptoStream
MemoryStream
get_Item
System
SymmetricAlgorithm
IsAssignableFrom
ICryptoTransform
TimeSpan
get_MetadataToken
ExtendsCodedToken
Get_FullNameToken
hToken
UnknownToken
lpNumberOfBytesWritten
PositiveSign
AppDomain
get_CurrentDomain
SeekOrigin
FormatNoVersion
CheckValueWritePermission
Application
get_Location
AddInterfaceImplementation
NineRays.Obfuscator.Evaluation
System.Reflection
FindCacheReflection
ManagementObjectCollection
IsWaitNotificationEnabledOrNotRanToCompletion
GetParentDefinition
CallingConvention
Add_UnhandledException
RuntimeWrappedException
GetGuidParseException
InvalidKeyException
ThrowSecurityException
M_strDescription
RightPortion
RegexPattern
GetDynamicILInfo
FieldInfo
MethodInfo
DriveInfo
CancellationCallbackInfo
startupInfo
MemberInfo
ParameterInfo
Get_HasImplMap
System.Linq
set_ShowInTaskbar
DaysUpToPersianYear
M_singleChar
Use32BitOptionalHeader
StreamReader
TextReader
BinaryReader
DESCryptoServiceProvider
InternalFormatProvider
MethodBuilder
ModuleBuilder
TypeBuilder
_EventBuilder
AssemblyBuilder
GetYearMonthDayOrder
lpBuffer
M_buffer
ResourceManager
Get_DomainManager
ValidateParseStyleInteger
Debugger
ManagementObjectSearcher
AccessChecker
TypeHelper
IFullNameCreatorHelper
_keycomparer
BinaryWriter
GetFunctionPointer
get_IsPointer
MethodDecrypter
BitConverter
ToLower
GetDemandDir
GetTokenFor
ServicePackMinor
Win32Error
Set_SupportsLastError
SpaceSeparator
ManagementObjectEnumerator
GetEnumerator
.cctor
dotNetProtector
get_IsConstructor
CreateDecryptor
IntPtr
System.Diagnostics
PreserveStandAloneSigRids
FindFields
InterfaceMethods
GetMethods
MatchSpecifiedWords
System.Runtime.InteropServices
System.Runtime.CompilerServices
System.Resources
EndAddResources
AmkoampgFk.resources
DeclSecurities
bInheritHandles
EnableVisualStyles
InvalidNumberStyles
GetFileNames
EmptyTypes
Captures
lpThreadAttributes
MethodAttributes
TypeAttributes
MethodImplAttributes
Antivirus Signature
Bkav Clean
Lionic Clean
Elastic malicious (high confidence)
MicroWorld-eScan Trojan.GenericKD.47388356
FireEye Generic.mg.4aa4dfd6b9b3ba9a
CAT-QuickHeal Clean
McAfee GenericRXQO-WD!4AA4DFD6B9B3
Cylance Unsafe
VIPRE Clean
Sangfor Clean
K7AntiVirus Trojan ( 00580f811 )
BitDefender Trojan.GenericKD.47388356
K7GW Trojan ( 00580f811 )
CrowdStrike win/malicious_confidence_90% (W)
BitDefenderTheta Gen:NN.ZemsilF.34266.Tm0@aukvl!gG
Cyren W32/MSIL_Kryptik.GBW.gen!Eldorado
Symantec ML.Attribute.HighConfidence
ESET-NOD32 a variant of MSIL/Kryptik.ACKH
Baidu Clean
TrendMicro-HouseCall TROJ_GEN.R002C0PKC21
Paloalto generic.ml
ClamAV Clean
Kaspersky HEUR:Backdoor.MSIL.Crysan.gen
Alibaba Trojan:Win32/Kryptik.ali2000016
NANO-Antivirus Clean
ViRobot Clean
Tencent Clean
Ad-Aware Trojan.GenericKD.47388356
Emsisoft Trojan.GenericKD.47388356 (B)
Comodo Clean
F-Secure Trojan.TR/Kryptik.vcxvd
DrWeb Trojan.DownLoader43.63614
Zillya Clean
TrendMicro TROJ_GEN.R002C0PKC21
McAfee-GW-Edition GenericRXQO-WD!4AA4DFD6B9B3
CMC Clean
Sophos Mal/Generic-S
Ikarus Win32.Outbreak
GData Trojan.GenericKD.47388356
Jiangmin Clean
Webroot Clean
Avira TR/Kryptik.vcxvd
MAX malware (ai score=100)
Antiy-AVL Clean
Kingsoft Win32.Hack.Undef.(kcloud)
Gridinsoft Clean
Arcabit Clean
SUPERAntiSpyware Clean
APEX Malicious
Microsoft Trojan:Win32/AgentTesla!ml
Cynet Malicious (score: 99)
AhnLab-V3 Trojan/Win.RATX-gen.C4768986
Acronis Clean
VBA32 Clean
ALYac Trojan.GenericKD.47388356
TACHYON Clean
Malwarebytes Clean
Panda Trj/GdSda.A
Zoner Clean
Rising Clean
Yandex Clean
SentinelOne Static AI - Malicious PE
MaxSecure Clean
Fortinet MSIL/Injector.VRI!tr
AVG Win32:PWSX-gen [Trj]
Cybereason malicious.783085
Avast Win32:PWSX-gen [Trj]
No IRMA results available.