Static | ZeroBOX

PE Compile Time

2021-11-16 18:05:46

PE Imphash

f34d5f2d4577ed6d9ceec516c1f5a744

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00002000 0x0005eb74 0x0005ec00 6.38018664448
.rsrc 0x00062000 0x00047d54 0x00047e00 4.98978861192
.reloc 0x000aa000 0x0000000c 0x00000200 0.0815394123432

Resources

Name Offset Size Language Sub-language File type
RT_ICON 0x000a9538 0x00000468 LANG_KAZAK SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000a9538 0x00000468 LANG_KAZAK SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000a9538 0x00000468 LANG_KAZAK SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000a9538 0x00000468 LANG_KAZAK SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000a9538 0x00000468 LANG_KAZAK SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000a9538 0x00000468 LANG_KAZAK SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000a9538 0x00000468 LANG_KAZAK SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_GROUP_ICON 0x000a99a0 0x00000068 LANG_KAZAK SUBLANG_NEUTRAL data
RT_VERSION 0x000a9a08 0x0000034c LANG_KAZAK SUBLANG_NEUTRAL data

Imports

Library mscoree.dll:
0x402000 _CorExeMain

!This program cannot be run in DOS mode.
`.rsrc
@.reloc
Ykp] $kp]ai(
##c}3e
b[U5_@#
[YZ_bX
[XZ_bX
[XZ_bX
[YZ_bX
[XZ_bX
[YZ_bX
[XZ_bX
[XZ_bX
@hqgA#
[YZ_bX
[XZ_bX
[XZ_bX
[XZ_bX
[YZ_bX
[XZ_bX
[XZ_bX
[XZ_bX
#)`*tA
[XZ_bX
[YZ_bX
#!Ch?V
[XZ_bX
[XZ_bX
[YZ_bX
[XZ_bX
[XZ_bX
[YZ_bX
[YZ_bX
[XZ_bX
[XZ_bX
[XZ_bX
[XZ_bX
[YZ_bX
[XZ_bX
[YZ_bX
[XZ_bX
#?sn`ZY
[XZ_bX
[YZ_bX
[YZ_bX
[YZ_bX
[XZ_bX
[YZ_bX
[YZ_bX
#t`AylO
[XZ_bX
[YZ_bX
[YZ_bX
[XZ_bX
[YZ_bX
[XZ_bX
[YZ_bX
[YZ_bX
#`zf_?
[YZ_bX
[YZ_bX
[XZ_bX
[XZ_bX
[YZ_bX
[XZ_bX
[XZ_bX
[XZ_bX
Z4]A#
#s|7Yv
[XZ_bX
[YZ_bX
[XZ_bX
[YZ_bX
[YZ_bX
[XZ_bX
[YZ_bX
[XZ_bX
[XXnZ>
#D`1i:
YXYZXe
aiZaf}
kaieaa}
]ysOaie
ZfYYee}
fYafYff}
BaiaXaY
aXYef}
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
Q5[:W:
[?P2_2^.^7q
[?P2_2^.^7
P=Q;J#e
PY4D4={p,@-A/_6p
?[4D)D(p
3\>G*F6F
:^1S<Q8H
X<S1\1]-]4r
X<S1\1]-]4r
V4Y44D4]
e#=R-B
2H*G&o
]2P74V
#A,=&V
S>S;!+@
Q!Q4G#"
n("+G'
Q5J(E(C3C
A,: 5,e
W:W1A10u
T6[,@T$K
9]2?Ro
g D B/B P 8~
6R=U-@
4[9S3_Q
%H%?'$M
U9I32{
"U1^8J I2U
,Y=R,6T
:E(D05U
_or)F
[9T(0B,
Y)YY=*
g 4[9S>Q!
O+C!K&
#R1M*6W
+0^,Q1k
O"N>5\
Q3^):C1U
>2V9Q0W
.C.8"t
,A,6<67
Z6:J#=
W4Y4N>r
Y)Y&Tj
X5Y\-Z6
o)C,r!29!
/K$<F$5@
Y.M63k
`&8JJ
J$K)=H
@,\"8y
^<Q;+N-=
Q/8*F0
9]1C.C-]
0R?R7G7M
2[?P.C
_0=I%G*3
O"N=B+f
xT$T3h
/>\1\0@
NX(X'P,
)D(N>W
}?O&V2].:
B.^$7s
=P<B2?
I&D( 6
g*H%H$*Z34
AS1\'#O?V
w'0X(>+k
KQ>\'7V
~2^.T=j
L(=7V;W!
`$I$>;B
R2V9Q<)
qU:X+9L4.?
B.C/U%pX)!
B/C)F+m
Df D!C
!L F6_
@[+[(n
x>Q3^3
0]1A%I
Y7D.1y
_2^.:S
.C.8<D#:^+W
J(E'@09
.I&DrBT
U:X+3[+3
o_;T,0U
Vq7S2P=?J
ov&,E&8I
~8\1S>SG7G.I-B 6Z6F*C
[7Z7K;K" D+H%H$T
K'W&'4P?S
A!&@-@&
Lol*r?J
7S<T#P;8<D
)K&A-L6
[6Z)4G
A%*G*G
@0@)D O
1B&3W'C"J
hBq&=A
(X7U.)o
E*H$! P ?
3\>I$A
3Q<G+[$
_/M C/
~O-@#<F%F
vS?O5\
r6F/_;
i};_&1L
[%989(*N!=P_ +3&`
G#J(E(Q!Q8i
H%I93Y{
W5X5:J:B
b$@/Mr
Y)13W8Y
%I9?x>Z
K$F%H$T$"
4Y;!L P
n(;T63,@0:
56! 2V9Q2_
+[2j0_=&K'W&?y
1^<K&"
fH'E"O
XU8U3C
C'B %r
IR?R8H
r5Z8O"&t
A%"M M
,R=_,A
C'B %^2B,E
[%I+@-
J.A#_1]-m
E!?]0]
_,?[."<!L<@)o
Z8U'K9
Z>!C.2\
1A%J$A%!N>W
>*B $I%U
w'C,=P;
a#='E"%6
)F$?R<J<Oq
X/7)-7Y$
i/K$F)
]8W5&K'F67m
\>S>P P9}
[?N,A,>N>W
o)M B/B,\,E
Y5E+8V
x7[%+B
!L O3R
(G%B"Eq
Y4>=@(0
e!Q!>n,
<Q<FX(A
>P"O"N>M$
1\0?<%a
Q5:X4Y5
v0T7U8U9)q
S70R>S5E51
;R/B%I
-O"O#S#J
)Y)<R N,7Z6F2G
I+F'#>M$X
{<X-C&8N-W
a'9V4Y2
a'C,$I$--S:R5Z8
x_/_0k
U1X:F'8B0R
W$6>8)
%H$J'J
K)D%8D#Fr
"O#M1P
Q7I =F
!L!G,U&8B,N
q[6[1.Z0
\+8Q+C
;T6U%D#N
M$8S-9)C
4R<Ka
cT$T7g
#"N#Eq
m*>Q3\1@0
^+D&K&//U<0Q>\
W+1>==;
Z ;<;;
V6Hp}
J.A"*1L*
s,G(D)3K*J
l-J&D)D
1\1]-]4
w1U9O 6R
Z4V140?O
<Q60@0Y
#'C,Dl
Y:W0E_
\=P3L54V
[6I1*i
8#S0]0K0-1f
&D):C(
I(#,C+I$8D
V($7(AR
B.^$7s
y?Q>\)-k
P41S>S
k-I&D(E)Y
H'E$!1@0O
<^3T%L+9
?@#L$6P+P
-?R48H!g
1\063M
6S>S5EY(
^+,K4G
P'#(W>n
7U8T-[
K'W&<u
@w1U4C(
w >N%4H^*
5F5E&IS)E
b$@(9M
_N!C$8O
%H%?9K
Q;W!F(
|P P3b
@0@1h
W:W;K;R
Q!Q.^:O
_.^1Q/
T:X/5R
N*?Ja
\K$F%5T$C&
^3^(B4Z
c%A-*1
a 3U&E
%H%?C+
O>N!PZ":A
F!N&8P+V
q-3^;C#>C
/-@0:@
W<O,R*b
9C2B%=S
..A1;?u
$N!C$!
F+F*Z*C
X4X"G'
-]-:TC,N
&%:9Kk
S-\,?S16
$S<^)3Z
=M$X&K&:R
I-8P=J
u2V3:}
M#9W3M
Py?[.9K
P4[9>S?O
]-]4.J%F
S6Y5AR+U
2F#N#H'P
Z"M=G!`
|9],;R8C,
@#L(.i
"M/8?U"A#
M L2/9
32.J%=F+A
u2V3>O
zY4Y/L4L
@@,\":w
Qw1U4C)D(X
t2.T6[,98A
J.;F&K'W
u3/S1\'D#L
9I \"O*
_3$8)R5Z.
Q5Z.9T2
3W8T&B
k,5P!B
]C/_)-f
ov&,E$
x^<T7Z7}
M! I,C
C'H C.<
9!K'W
^)@&9B
(E(>;C
#\0@&'
@h.Jj
E(E(3-
G!G)L!LB"-
&C.Cov
^3^,I1G
X):A/^
U:X+0^+J
u3W8Z$I%U
U1X'E(D4
J8Z7P54=
@$KJ:V&P&[??Y
G#L.0]1A
V2]5N#I
#A,7J1
[6[3C3I
55 !3W8P*9U
0$T={p
U1^;;&F6
>2V9Q2_-
V2W"Kb
T$H$N+=j
S5H/K$a
_=P3N5
D+?*Z6F0F
+D+I <C
rr@ +
$5?9=t
$4W'Q+f
'5W;E"F
[]9V.0T'N*E
Q-Z30<)W;K1G
^8^2Q<Q_J
:B.B,I
7?*Z6F,4m
t,@0:@
[6Z =G
~8\3Q)D(X
X9T9N-V
_@,\"#
Ld"F#.>S?O
WK)Dl
*C,Na
tR8X;V;y
W3\>@-A1
Z*Z31U:WB*Z
32.J%=F+A
u2V3>O
zY4Y/L4L
@@,\":w
Qw1U4C)D(X
t2.T6[,98A
wQ7Y<Q<r
w1KF$I
V2]??R>N
V3^3O?O&
(\7X43X
-X;T0FQ*T
7A"O"G&O
Y4D.:u
9T9O,T,b
BD O'7Q,S
p C.CQ
<-7S<T&=Q
y?[4V(E)Y
D O#D)?
WJ:V&L
U7Z-07
z88#"0T;O
i/AP2_
N*E&0-=M
S7X0S>L
P(C3=G
U8U8#=
Z>Q)1N"*
J.A#;V:J
Z7Z7K;K" D+H
Z-*H74R
Oe#G"-;V:J
sR?R85=C
SQ=M3I
h1@&:O.X
$O*E!5~
YB.^$%
S/X12:/U9I/5n
1J%G&:I
uX5X.K3I
*H%>A(0
{'E(;P
gA'I,A,b
T0_3T9O
)/B2<H
[6Z*/&`
P4[8:'G7
T0K2.I
R0]&9@
W:W7G7M
{99$%/K$<>E)1
T8)=,M(G
C'H C.<
[9T/29!
~$F+<I(Q
2K$F'9H
(7S-:9C
M.C.2B2[
\0!54U0_3
5C M E$M
W3V!G*F6
@@,\&<u
L#A"9W$C%
9((L#7P=K
+Z=R*0
\Z>Q--7J1-F
6G(J#=D
E!N"E(>
>"6S>S87@
1G)E/L U,
X:W0K2
u-O"E"A*
|Z@0S>Sa
;*&B-E
^,Y21=(X4D*2o
9],;Q<P %,j
R?R=(B
8U9?<H
.A,A)Y)/b
B$B.M MC#.%A.B
4&J&V
.I&><w
>Z5Q);F-I"c
X7U.-C0/A
Q1041*1
^:U--2^
x>Z5W'J&V
T1B%2`
BB.^$<u
M/B%8?'
9V4U'>&
(\7X43X
-X;T0FQ*T
7A"O"G&O
Y4D.:u
9T9O,T,b
BD O'7Q,S
_3$8)R5Z.
*Y<S+/h
;A+G1.B
=N!C*6M
!0V*?>H
s5GJ(E
Z>Q3K&J:
[+[20T;X
Y=R&A,:
b7B(4Q
:X5G+I8S
H'E&9S%@
G%H!<H"C
a!C.9D0
t2R=_2
r/:Q G
X<S'7?+n
:T8H7K
9C";%>D
q/C3=A
S7X:F'4n
X5X*G3
R5Z.0X#N'
W3 A,A
6S>I%M
^0R?H$x
P!F$8E
-@0@Ya
=_2^[
?S#Q8~
L(G%1\0@0Y{
p_/_6>Z5WK&J:3Z
z<.A#M
P*8C+3Y=H
z2@1P,
Q<Q3-_3
d"F(%2N
R^"870H
3Q 8D
J&V%'K
[3Q2_3C"
Q<Q<'A
'L/C.BT
1]-\"`
F!T(6M
i*Y5I#8&
#@#T*&,
r4FK)D"D
"F(:W:V&O&
'C,D)=
8T9K;D
P;V,\,E
Uv09S'r
[?19,$G7=
C.A17^
#V4Y*3>=O
6T0:J$F
_)^3EQ)=@)H
~8>,j1
<E'J'K;K">[5X
`#04U1
Q4[96N
~7@$5M
c4E'T*](9H
>4>A B
b.#O#S#9x
NMA#N#G
[9T9U%U<
v1V]B0^OB3[5T<_6^3D.I
@--@#E
,%I9H!g
HY=?->S1A1X
8I"%;R'}
W25#N#EWa
~,2J#3R<
<]0S.T
V#'H7^
%I+<;Y&C
Q.65?S>G"!=D&E/
A,7J-5O
s Q",D
<G#0Shu
_2U(I#
@N#N"3
=M$^)A
[6F,4d
jP P/g
#A,=@+J
]8W+5I
Q2_(.`
)D)A K
T7G-3f
Q?N+&O
F"M+5R
L'H$I$
KP)87=j
\0]'/O%c
q8#U8V
wZ];Z8s(Y*]$A/QE)F9R<{
T>O@r:_1
>W(Yk2W9p"P=
f^1Y m
(=F0!J
Z%:U'D
#=M!C(2R
Q&=K*<
X'W>Y"@
JR,0=$G
Y!:+.:k
E(E%D-
+N!9C
)M"<@':?y
K&J65C
I)5Q+;
(3EQ)+6-L
4?0?0G
H,C!L!M=m
I.XD*H#\-E
k@+E(T@-^
Z5W.C/_
N.8=D\1^-@
m'.C :N
F*Z&>t
M,@06H8
F!)59(
n(L#"B"=H'C
W(4T'L
TE)Yc
E!N"9V968@
z<X3@">M,Q
D!O9W;X
|;`+J(FL
S;?(W
@$K)D)E5y
I-B M
O"O">P6i
7X:S-;
\*C]!a
C*6_7C#M
1\06h;]
#O?E,d
+F+C"N
F+G&V=S
\0\"<W
C*H%H$T$Mk
,@-7@(n
_<Q<?K(:f
\+[([-1A
Z8U8C ?Bj
&1&>`b
m*N!9T]1AS*G
y?[4V;V8H8Q
<]0]!Q!H
9R'9>F
B&?5)C/U
Q5I'7S)F.
\=P3L*I
I%U$(X
_.^7B&I+
?9K!T*4P
Q1F)Y0m
]/C39P:M
I#O96L
T0R?N"A
q)M"@-@,\*C
9S?O/F
<!P ?f
+;@#S:s
_,5,65<-
G)E5;R8K
?Q=G$:f
4Y5E$:k
_0R>.,
H%I(X1c
[%D'5LF
83^.^7j
3V9U%1L'
B&I'9>*
X9T/0%*1e
4[9R?S#
};_0R?R=M=TM(G%
,8W9B,K
~%:?JG
P4W'@d
6T7B">E
=^3T%E$=
1\0@c
z1U:T(/
3[9T/CW'N*>,&
_0R=P<L
R6Y;V;V&V?
0\1]-L!T)0?J
L+T,bl
Y:W0I/N
P1050n
7Y5E+B(;E
T8U30'1
1S1\-A <>
P?].C/_
Y3^2B!D
U.M2/a
]!5P;K;R
F*F6<U7B
:V:D!5]&5
>[6Q*?$;k
^1S<Q=M
W:V&V?y
L.C-&&R;
,>=T#B
]'F)C"pv
Y*;*<;B
[!Q!7i
T5X+443J
\S1A 9S//=
1]?R5YM=T4@
Y6T7Z6F
f D+I$I$T$MF!N,{
?O-630?O
A,7H.M
W'7!*E5E,c
D+I#)/
6Z6F&O
^::00]17
T3^2'M
r4P?]0]1
5/<Q="
[]?R5F
A-O">K
&I+<>54'"Z-:E
[_2^$A
V*>?:J
sB/B.M10
_!(,U+]&4V
/8B ")41
X22P70\,A
]+H%>G5
J'J";q
M/B%I%K
S@+H2J
L!M/8-
X6T38558@
D,O#-B3D
!0\,[2t
T#S:K.A#B/C3&N
lO-@-s9Zu2V9[
{<X6T9T8H,E
-B M G7
Y5E5\J
T0]?R?
V2]?P=Q!E,j
D 2P=P5E5\
}"5Y;V;W'Q8
rL"V#[?{
%>D-S'
"2S186
Z-@'Vp
h6X9]$F
~#=;(J#
U;2T$5S
c87_j
:2Y(=_
8>M /9{
!7Q!b
++G7=T?J
jV!Y=\
7E?=D&
7>K)W$
3[7G7^
z9]-N#N
{6R&D)C/_)
7S<]0]f
]?Q;G7`
#A,A-]
Y)A'V1^<
33^3R"
K.?\1\
R>H7G.
: X:F+
D$Z7J:
1-S1K&
vN*X5H8
G'I$T)!
b M PJ
M\7R0-;
4?S0W:
r=N3C->
#G<L;R
_\*I "
3.R0\1
%(D4D-e
Q5:4Y4X(E$&@
72]?R?M%
F+F*Zd
e#G(J$Aq
[6[7G1@U
X5=&V?y
>Q3^3I9
;"G$;V
-(G%H%3;
9V49T"JA
'C<3^3_/I
ov0T%G
+G7G.R6
: M L<;RG
K/@"9T
E!8:1&
*G*F60Y
M)F$8U
Y6T9T"Rz
Z7Z6F%L;7
2>R"R;g
9]2P'J
S7X:A,
_;T6U0#:+@
,H'E(E&V
0@0Y{
X<S1\1
2_3C3Z
9]&"O"N>H
y\>/ L<L%]!
I&D)D'W
8U8T$>W6*
.LP=e|
Z5W:W%U
"OR"zu3W8Z!LM
<S1\1G7^
C{=Y6T#N
3_/_6Z>
rd"F)K
l0]uK;R
Lh.J%G
(z<X7U"O!
%I/Kl;V;W'F/
f)DTQ!H
R?R>N89
pOW:W;K:SQ
x>Z4Vp
V2]?Q<
lP"D4L%
Z8]0H8G.h
]7W5X5C3
G#L.-@
D)D(X"Cy
t2V9[0Ud
g=M%UW
Z>Q3X-
z==P=Q!K
I$I%UnA#
<WV9T#&,j
S<^3^,T*8
43^3_/Y(
^$L23\>S>A
G#A"O"N>
<.?B1y
<W\,@-A1+B
D O-=P
+N!C.C,\
*M"@-@)Y
o)M"@'B
X5X4D.?
?Q<(X1w
7Y5E5\
D(D4C*
|?1\1Z*
8X5X3C
o)M BF
7.C.?O
3\0@.G"
R%J(B/
+9T9T$L
W3Z80P<L9P
l11^<P=I%U<y
7@/Mr
^3^/_6;}
X<I#N#N>
<O B-@Fo
=Y=;T9T$
z<X1S,
K'W!Ho
9V4W:J:J#b
+5Y)X1
_:U7Y4
,@0?Vj
{%8T$S:
X5X3CT
O"O!Qz
.B2@)!D+I#N
]1A0Y:N!C-@G'W>w
~8\2PX%I9H!
9H%H"RQ
8,A,?O
S>S>N7C
vW399T9R"m
=?R?Q!G&`
%"N>M$
:XP1S#
,-^:.B}
~,F"Mp
B=HX2
P3^)Vu
;@6H.K
*/R*T3
:V:L5E
A%Q2P*
;_/-Y1
KN6=OL
(KB*Z-
I'18E$[1i
|6O74C$.1T#
^7A !C
@$V.@,}
Z*H##8(<
,P\)I
I L($F
9I9PT/l
iG)E5x
T"C,N;7d
^$O*G*
i2TF#N#
L'U7[+
?TF#N#E)]1w
V2[9O"I9G.b
K&;K9P
}_2\,=T
P2]04D
T9:J8Q
X5X()@
H%$T"K
U00R>S8G
F$G*"Q
J"-I%G
Y=P2(D
T$R;@#
P9T8Gx
]:Q<P
E#M=M#
3]T"-<x
vY=R0]0[+
b$@/M M
c]Y=R0Y4X(X1w
^3_/_6p
k-I&D)D
g!E*H%H#Sf
N'O+0R-@
? Lc^Q
>dJiC~?
F$ZxW8
]0nCv=
G7p{o]fpW
2si@eM
5XEvIMf.
!jPfY]
B2lkRo|"
H%YvIP
zKe`[`v
'xdImO
#OqKHOfVqsC
[Gl_gfR
!`}qAu
Wt^yqX
C!]q`5
J:dcJKj5
H%asv(
^DjIwp
UeLI}"
"Q}Sf|
!bS}ka
}mSMp`H
VCmRdaJ
VmPCoE
3knMNsX
9]CbRX
FlrHsS
Uh^Bzs`Txw
S?`Q{x
)j[upq
xn(]sTW
TAoPee
rEc_xn%
P=bSf@t=
?dizMjHOz
YTqEN`
(XFhqG
#hm~InDS
>SOdWCr
>hoNMv,
$ZwJvugQ>
RP}PDt\
=th.[uZ
)YRYen=
[GkJf]4
!]rE`P
ooHeuO
-]EDc!
$eMN*Vu[c|
(DbsWf
@/^t\l
/pAk-}
@@cQwt;
_|V4|[i
7lyg\DgM ~e<
Rw[OdZGxK"
*_qV;sf
7kH{A~lWIlD)^
U<U18Z7O
R0(E)H
D-;_0C
Y4O#F6U
A-P ?y
D)D!1A
P=1A1M
R;P4.L
r4-5W0]
A%=_(E
{0T1S1\&V
.C/(8Q
,O&V20R
Z*M$X<
Y4L F6
L.6[-]
Z*P9R6,N
P=D4:S
I Y=H*
4K;A(A%
S1O"D4
U<M)9[,A
Y6G*=Q
Y0V20R
V;L #S
rS#&O
R;P4.L
sB2.h
_36F%c
W>P42P
U<Z>Q"B/9I
L%6R0R5X34
T$J#{
Q8Q5-O
]4E!!C
\8J(;V
{C!r
Q8Q5-O
R00]$T
U&/B D&Z)4:V)=F0D
Y$^:U%@)E53I
d[4NR><3W
B 2>"L
i/G'(@e
D M.'8
L(/F+C'?=
E!L&3N
O!8C3Y
\.G*E G.B
_.<C)E35N
X13\0K
\+@)D'N&<z
1P";9O
T/"N!42
a&B%G*G+[
C&I9B*l
?; =0[68:;|
.J%7Y4M
v0D*H
h(,Ba
Z 0A+54>B
[0K%6I5>V
D 1S:M 2B%c
x);8Y!L
(/<W9B
K -?=$?w
A"='=I2Y
T3C3=i
]7R7M7G+e
]*G(J,7c
Z1!P+P/ ;J
i!A.K%F$T#I
UZ!I%(D
{1U5V)
`$:5V)
Y"2]*:G-N%B
!C+A$A-\
p/D&<I
C)79;5e
O"J0?D
|8W1Q4<K5E*d
X/L#J&I
^:I"L.\#
c#?H"G(B/Z3s
[(>3],N
Z'()'=0..L
A#J$)C,T
%8>N$a
S98C%D
E#:S0J
R2;A ^2U5P5Qm
N"E%F)C+S2r
Y+A$A"P
(D#O>F
A#J&I"G08I
8U*F#F"J
Y-[)0Y/>?D#H4<M
_(C(7S
_*>F.?q
\+*Lh&:M-8N
[$T"?[4W9G5Z
x<V7P3]
S7X:W:V&V?y
S7X:W:V&V?y
S7X:W:V&V?y
S7X:W:V&V?y
S7X:W:V&V?y
S7X:W:V&V?y
S7X:W:V&V?y
S7X:W:V&V?y
S7X:W:V&V?y
S7X:W:V&V?y
S7X:W:V&V?y
S7X:W:V&V?y
S7X:W:V&V?y
S7X:W:V&V?y
S7X:W:V&V?y
S7X:W:V&V?y
S7X:W:V&V?y
S7X:W:V&V?y
S7X:W:V&V?y
S7X:W:V&V?y
S7X:W:V&V?y
S7X:W:V&V?y
S7X:W:V&V?y
S7X:W:V&V?y
S7X:W:V&V?y
e#G(J'J&V&O
A%J(E(D4C*l
J%G*G+[+B
R0]0\,\5o
D O-@-A1A(*N!C-@
D O-@-o
"@-@,\
H%/_.G
3^2B2[
\8W5 M
)%H.'A
x40?=0=1!1
?36<5S
u&875859)9
S*;94,
<C)90V
v4.0.30319
#Strings
#a.dll#
#afa.dll#
#ga.dll#
#fasdgsfsd.dll#
#f.dll#
#af.dll#
#hdsafaaaadadsadfffwtwfffffffgsssssdf.dll#
#hsstadaaadwsssssg.dll#
#gs.dll#
NativeImages40
<FindEvents>d__290
DwReserved0
$$method0x600001a-1
$$method0x600001e-1
<GetMemberRefs>d__281
LOCALE_SABBREVDAYNAME1
IEnumerable`1
WReserved1
$$method0x600001a-2
User32
ToUInt32
ReadInt32
WriteInt32
ToInt32
VT_UI2
<Initialize>b__89_2
Func`2
MDWriteMethodBodies2
S_DEFRANGE_2005
Size16
ToInt16
<i>5__7
get_UTF8
WriteMethodBodies8
<Module>
HasFieldRVA
S_notUsedSinceLastGC
COR_E_THREADABORTED
Set_LogicalCallID
ListExportedTypeMD
ProcessTerminal_D
ERROR_BAD_PATHNAME
LOCALE_STIME
COR_E_ISOSTORE
Set_UI
NotSupported_NYI
WriteInlineI
ERROR_INVALID_ACL
S_RETURN
System.IO
IsMemoryMappedIO
ERROR_TOO_MANY_POSTS
RESOURCE_STRING_ALIGNMENT
LOCALE_SLIST
S_LMANDATA_ST
S_MANFRAMEREL_ST
get_SLOCALIZEDCOUNTRY
GetOverlappedData
UserResourceData
FrameData
CanWritePdb
mscorlib
PtrSpec
System.Collections.Generic
get_IsStatic
<>l__initialThreadId
M_AppDomainId
CurrentId
GetProcessById
lpNumberOfBytesRead
hThread
get_CurrentThread
thread
fsassdsadfassssssssssssssssssad
System.Collections.IList.Add
get_IsAttached
MonitoringIsEnabled
OnlyOnCanceled
IsCustomAttributeDefined
Set_Is32BitPreferred
M_Unrestricted
BaseType_isInitialized
ClassLayout_isInitialized
<Functions>k__BackingField
NextSpinWillYield
MonthEnd
set_IsBackground
FindMostSpecificMethod
DynamicMethod
GetFirstIntroducedMethod
DefinePInvokeMethod
ResolveMethod
M_dynMethod
GetMethod
NetGuard
dafsasfssd
get_IsInterface
Replace
UsingNamespace
LoadResource
FindResource
SizeofResource
GetHashCode
SetErrorCode
SetCode
FileMode
CryptoStreamMode
Xenocode.Client.Attributes.AssemblyAttributes.ProcessedByXenocode
Net_uri_PortOutOfRange
EndInvoke
BeginInvoke
Set_ENCLogTable
Set_PropertyPtrTable
GetEnvironmentVariable
IStructuralComparable
Enumerable
IDisposable
set_Visible
NameSamCompatible
get_Handle
RuntimeFieldHandle
get_MethodHandle
RuntimeMethodHandle
GetModuleHandle
get_TypeHandle
RuntimeTypeHandle
CloseHandle
GetNativeHandle
GetFieldFromHandle
GetTypeFromHandle
AddResourceFile
SPerMille
Console
get_Module
DefineDynamicModule
set_FormBorderStyle
get_Name
EraName
HashSizeName
GetFullPathName
EnumMethodsWithName
lpApplicationName
GetArgumentName
AssemblyName
GetDirectoryName
GetIsInvalidTime
ParseTime
ReadLine
Get_EndLine
lpCommandLine
WriteLine
ReadInlineNone
Get_IsPrivateScope
get_FieldType
DefineType
CreateType
ValueType
get_DeclaringType
Arg_WrongType
flAllocationType
get_ReturnType
ProviderType
_AppDomainManagerType
HasOwnerType
get_ParameterType
ObjectType
BasicHostType
DnsHostType
DataToNewType
System.Core
ResolveSignature
SetLocalSignature
MethodBase
IsBrfalse
Dispose
Clause
Truncate
CreateDelegate
MulticastDelegate
get_PdbState
set_WindowState
FormWindowState
OpenWrite
STAThreadAttribute
CompilerGeneratedAttribute
UnverifiableCodeAttribute
DesignTimeVisibleAttribute
UnsafeValueTypeAttribute
OnDeserializingAttribute
BabelAttribute
IHasCustomAttribute
SuppressIldasmAttribute
AssemblyInfoAttribute
YanoAttribute
DotNetPatcherPackerAttribute
BabelObfuscatorAttribute
CryptoObfuscator.ProtectedWithCryptoObfuscatorAttribute
DotNetPatcherObfuscatorAttribute
DotfuscatorAttribute
CompilationRelaxationsAttribute
SmartAssembly.Attributes.PoweredByAttribute
RuntimeCompatibilityAttribute
set_UseShellExecute
WriteByte
AddCAValue
GetOrCreateValue
TokenHashValue
Set_InitialValue
LegalBlockSizesValue
InternalSetValue
M_noDefaultValue
get_IsAlive
Exclusive
BeginIndexNotNegative
Fdobmmlppi.exe
get_Size
dwSize
Resize
SizeOf
fshdfhfffafasrdadsatrfffffffffddf
fsdsdfsddddgaaaaadwreeegfsdf
get_IsByRef
m_flag
GenericSig
Get_IsPreserveSig
System.Threading
Encoding
IsLogging
Ceiling
_beginning
FromBase64String
ReadString
OutputDebugString
EscapeUriString
ToString
GetString
ShowDefaultAssertDialog
ReadShortInlineVarArg
USEnglish
get_MustFlush
get_ExecutablePath
m_FullPath
GetFolderPath
CompressPath
ObfuscatedByGoliath
get_Length
Get_StringLength
GetDaysInMonth
Fdobmmlppi
Get_AbsoluteUri
AsyncCallback
callback
ProbeForSufficientStack
KeepMaxStack
M_HaveLock
GetInitialValue_NoLock
FlushFinalBlock
hkpoAAjoehk
VisibilityMask
Marshal
get_IsLayoutSequential
Decimal
System.Runtime.InteropServices._MethodBase.IsFinal
Objmodel
kernel32.dll
Control
FileStream
CryptoStream
MemoryStream
AddGenericParam
get_Item
System
SymmetricAlgorithm
ICryptoTransform
Conv_Ovf_U8_Un
get_MetadataToken
hToken
DayOfWeekToken
lpNumberOfBytesWritten
AppDomain
get_CurrentDomain
SeekOrigin
WProcessorRevision
Get_CompareAssemblyVersion
GetValueReadPermission
Set_SkipVerification
Application
get_Location
NineRays.Obfuscator.Evaluation
System.Reflection
ValueCollection
ManagementObjectCollection
CallingConvention
RuntimeWrappedException
FileNotFoundException
CABlobParserException
StringComparison
YearMonthPattern
DateTimeOffsetPattern
DotSlashAttn
ToStringUnknown
GetDynamicILInfo
FieldInfo
MethodInfo
CompareInfo
GetDebugInfo
M_siInfo
startupInfo
MemberInfo
EmitLineNumberInfo
ParameterInfo
set_StartInfo
ProcessStartInfo
DirectoryInfo
DeletePinvokeMap
set_HotHeap
System.Linq
ReadShortInlineVar
set_ShowInTaskbar
GetDayOfYear
TmDefaultChar
M_serialNumber
StreamHeader
DataReader
StreamReader
TextReader
BinaryReader
DESCryptoServiceProvider
MethodBuilder
ModuleBuilder
TypeBuilder
AssemblyBuilder
SpecialFolder
lpBuffer
ResourceManager
Logger
Debugger
ManagementObjectSearcher
Set_IsOther
StrongNameSigner
ZeroWidthJoiner
IsInner
M_runtimeResHelper
CheckAuthorityHelper
TypeDefUser
M_tkParameter
ResourceWriter
BinaryWriter
get_IsPointer
UriTypeConverter
BitConverter
IsCaster
IResolver
IStringResolver
SetErrorMode_Win7AndNewer
AnsiToLower
_StrongNameKeyPair
GetTokenFor
AssemblyProcessor
ManagementObjectEnumerator
GetEnumerator
.cctor
dotNetProtector
get_IsConstructor
CreateDecryptor
IntPtr
hasPropertyPtr
System.Diagnostics
PreserveMemberRefRids
HasOtherMethods
GetMethods
KnownWords
System.Runtime.InteropServices
System.Runtime.CompilerServices
System.Resources
protectedResources
Fdobmmlppi.resources
BeginCreateTables
bInheritHandles
EnableVisualStyles
S_hiddenSystemTimeZones
EmptyTypes
TypeDefRidToNestedClasses
AssignAssociates
PdbAttributes
lpThreadAttributes
MethodAttributes
TypeAttributes
MethodImplAttributes
GetCustomAttributes
lpProcessAttributes
_GetSecurityAttributes
GetBytes
CodeEndOffs
BindingFlags
dwCreationFlags
GetMethodImplementationFlags
SetImplementationFlags
GetPrivatePaths
Equals
System.Windows.Forms
MethodOverrideTokens
Contains
CallingConventions
SetMethodProps
get_Chars
GetOptionalCustomModifiers
ReadSmallExceptionHandlers
RuntimeHelpers
CFStringCreateWithCharacters
GetParameters
SortParameters
sssssffhdfffffadtrrs
sssssffafaffasfadtrrs
sssssfaddftrrs
GetSecAttrs
get_IsClass
FileAccess
AssemblyBuilderAccess
hProcess
GetCurrentProcess
PdbAddress
lpBaseAddress
lpAddress
Get_PreserveUSOffsets
NumberDecimalDigits
GetEvents
ReCreateParts
HasImperativeAsserts
TypeExists
Gdiplus
Concat
SetFormat
IEditableObject
ManagementBaseObject
GetObject
object
Select
flProtect
tinyMethodsDict
CheckResNameConflict
DelegateConstruct
_staticSource_Set
InternalSet
PermissionSet
CharSet
EndDTDSubset
GetFirstRawDataFileOffset
DateTimeOffset
Get_IndexesOffset
TmHeight
op_Explicit
System.Reflection.Emit
SetCompatibleTextRenderingDefault
GetRuntimeResourceFromDefault
IAsyncResult
result
System.Management
MayHaveFragment
lpEnvironment
InvalidLowBoundArgument
System.Collections.Generic.IEnumerator<System.Collections.Generic.KeyValuePair<System.UInt32System.Byte[]>>.get_Current
CheckRemoteDebuggerPresent
IsDebuggerPresent
Set_SpecialConstraint
set_ManagedEntryPoint
GetEntryPoint
M_constructorCount
IsCaptureSlot
CModOpt
ParameterizedThreadStart
Convert
FailFast
GetInvocationList
SuspendLayout
ResumeLayout
set_RedirectStandardOutput
MoveNext
System.Text
_logicalCallContext
set_IllogicalCallContext
GetJitContext
context
set_CreateNoWindow
CreateInstanceSlow
ydadsgssadasdasw
NativeGetTwoDigitYearMax
SecuredPathIndex
FindChunkForIndex
InitializeArray
ByValArray
M_isParamArray
ToArray
_keyPairArray
get_IsArray
Get_HasBody
System.Security.Cryptography
DefineDynamicAssembly
GetExecutingAssembly
CurrentAssembly
HasDeltaOnly
BlockCopy
CreateDirectory
lpCurrentDirectory
op_Equality
op_Inequality
System.Security
SuppressUnmanagedCodeSecurity
IsNullOrEmpty
198 Protector V2
System.Security.Permissions.SecurityPermissionAttribute, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
SkipVerification
WrapNonExceptionThrows
_CorExeMain
mscoree.dll
nnnnnnnn
@nnnnnnnnnnnnnnnnn
@@@@@@@@@@@@@@nnnnnnnnnnnn
@@@@@@@@@@@@@@@nnnnnnnnnn
@@@@@@@@@@@nnnnnnnnn
@@@@@@@@@nnnnn
@@@@@@@@
3ZZZZZ<`}a
CZZZZZZZZ
((((((NA
"{((((ZZZZZZZZZZZ
?(((((((((((ZZZZZZZZZZ
((((((((((ZZZZZZL=Z
>>>>>>>>>>>>>%
.........>>>>>K
Itt..............
DN.>>.UR
[h....
9JHHHHHHHH>
......>>>>>>>>
.......>>>>
......
66666666666666666e
q666666666
6666666
6666666
@nPPPPPPPPPPPPPPPPP
@////////////////P
,PPPPP
@/////////////////^
/w//PPPPPPP
i///////PPPPPP
//////PPPPP
/////PPPPP
ooooooooooooooo
/////PPP
ooYYYYYYYYYYYYYYYYz''oooo
YYYYYYY77777777777YYYYYYYooo
((ZYYYY7777777777777777777YYYYYooo
((ZYY777777
77777YYYYYoo
yyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyy
::::::::::PPPPP
ooooyyy5K##########::::::::PPPPP
jjjjjjjj#######:::::::PPyyy
jjjjj######::yyyd
UUUUUU
jjjj##yyyGd
========UUUU
=======\
hhhhh
D==yyyY
NNNNNNNNW
TE2 yyy@Y++++++++7
hhyyy(@f
g222WWW/
++++++Nyyy
(VVVVVV
o>>>>>>>>>>XBV?6V
&&&&&&&&&&&??
>>>>VVVV
yyy:Pmmmmmmmmmmm
&&&&>>>>>VVV
mmm&&&&&>>>>yyy#:Q;;;;;QQQQQ%n"
mmm&&&&yyyj#;;$$$$$;;;;
mmmyyy
j$$$kkkkk$$$'ss$$;;;;;QQQ
2kkkk$$$$$;;;QQQyyyU
ZZAAAAZZ2
kk$$$$;;;yyy=UAA111111111a4]AAZ
kk$$$$yyy =111!!!!!!!!!!!1111AA
kk$yyy 11!!!iiiiiiiii!!!111AA
pp,,OO
yyyyy.[
pp,,OO
yyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyy
_________________
-----AA
UUU --
333HHI
S-AWWWWWWN"""222G -@@@@@
U
^,,,@@
TT,,
H1((((J5(1
Fdobmmlppi
GetEnvironmentVariable
-1203531295
1203534950
-924902425
924870821
_ENABLE_PROFILING
_PROFILER
1670712507
1670678740
1717396695
1717385860
-1075256046
1075154190
1778438452
1778396469
-1706017988
1705918874
-2088922841
2088915441
-1927862211
1927984002
-833175736
833291724
973974588
973927678
-481038088
481116599
338300319
338357238
-1957523974
1957460706
1713819195
1713828934
1611417671
1611402402
2096802350
2096812854
-676998415
677078673
-61574119
61486222
2088383033
2088421365
299734094
299728731
-2134279185
2134358408
-62012811
62031524
1924332088
1924269293
-1222429229
1222455465
115896261
115961925
-981574382
981712505
1178310768
1178291170
1152615316
1152628112
-738908288
738929963
-530711231
530767895
2052596624
2052596956
296813613
296822096
-498748801
498651050
-860613372
860596423
830260617
830269615
145436157
145429200
1825586050
1825625825
289923994
289907675
-1086221157
1086209416
-1400346185
1400278480
1576705830
1576684689
-1189858862
1189734712
696442604
696434510
1813216117
1813248901
116290783
116304119
-1574739811
1574800201
1954122841
1954142706
196188071
196194493
2087874409
2087938107
-1656963375
1657008498
-1389269630
1389281466
1942292060
1942243241
-1222880083
1222713553
-1047408617
1047436154
-1764558268
1764494405
2001649160
2001640469
1050268571
1050258758
1257933967
1257930336
-929088384
929106699
1659576471
1659594851
-632012104
631916216
1676145928
1676070645
1833595989
1833613198
-1410908306
1410950946
1088084994
1088151314
-830727454
830607670
55113060
55155309
1923143866
1923102580
2061877583
2061860013
1095461734
1095389093
-1592273325
1592298908
1065667529
1065655776
1996108594
1996120206
-2111784374
2111648008
-1722859283
1722840916
-702148639
702075885
-208001607
207924067
533230835
533246106
-1954459318
1954434673
-610460838
610490414
-1662221183
1662084030
2055534515
2055486196
-580731001
580703337
421627671
421653856
1475477624
1475527532
651446013
651483310
-436375515
436440340
-849191612
849114945
87836485
87844130
-1811660233
1811506013
2037793945
2037852914
-1950523862
1950555158
1562527535
1562558320
1952479754
1952538804
-220964187
220975722
-1260032041
1260021516
-262527519
262512268
-843486182
843515198
-2133150149
2133187668
-1947906626
1947930529
-1850641477
1850657367
-725208621
725176550
651815672
651729249
1747234155
1747305757
1041711029
1041677779
-855336160
855346565
-1134635951
1134621008
-1458659374
1458600409
-1164378939
1164384892
-399169804
399220780
-1397461531
1397463768
-821907621
821913255
573853065
573914795
-494879635
494898020
143500451
143426157
-1026033294
1026194659
-342615674
342520528
-915313202
915374140
-1365701156
1365724000
-703832822
703852488
-2116767287
2116648052
-2081023577
2081011892
-1422842284
1422661047
-295998513
296031840
1270017598
1269970287
1219257335
1219312679
1611074424
1611035414
-1638134720
1638085297
852364918
852362936
263164852
263167805
-274284623
274316833
-113267238
113336071
-1479571660
1479629868
-2073204603
2073263420
477261311
477243497
-1727114287
Antivirus Signature
Bkav Clean
Lionic Clean
Elastic malicious (high confidence)
MicroWorld-eScan Gen:Variant.Strictor.265471
FireEye Generic.mg.491ca2d6005190bf
CAT-QuickHeal Clean
ALYac Gen:Variant.Strictor.265471
Cylance Unsafe
Zillya Clean
Sangfor Clean
K7AntiVirus Clean
BitDefender Gen:Variant.Strictor.265471
K7GW Clean
Cybereason malicious.f8d999
Baidu Clean
Cyren Clean
Symantec Clean
ESET-NOD32 a variant of MSIL/Injector.VRI
APEX Malicious
Paloalto generic.ml
ClamAV Clean
Kaspersky UDS:Trojan.MSIL.Tasker.gen
Alibaba Clean
NANO-Antivirus Clean
ViRobot Clean
Rising Clean
Ad-Aware Gen:Variant.Strictor.265471
Sophos ML/PE-A
Comodo Clean
F-Secure Clean
DrWeb Clean
VIPRE Clean
TrendMicro Clean
McAfee-GW-Edition Artemis
CMC Clean
Emsisoft Gen:Variant.Strictor.265471 (B)
SentinelOne Static AI - Malicious PE
GData Gen:Variant.Strictor.265471
Jiangmin Clean
Webroot Clean
Avira Clean
MAX malware (ai score=83)
Antiy-AVL Clean
Kingsoft Clean
Gridinsoft Clean
Arcabit Trojan.Strictor.D40CFF
SUPERAntiSpyware Clean
Microsoft Trojan:Win32/Sabsik.FL.B!ml
Cynet Clean
AhnLab-V3 Clean
Acronis Clean
McAfee GenericRXQS-MP!491CA2D60051
TACHYON Clean
VBA32 Clean
Malwarebytes Clean
Panda Clean
Zoner Clean
TrendMicro-HouseCall Clean
Tencent Clean
Yandex Clean
Ikarus Clean
eGambit Unsafe.AI_Score_98%
Fortinet MSIL/Injector.VRI!tr
BitDefenderTheta Gen:NN.ZemsilF.34266.Pm0@aK30SrbG
AVG Win32:InjectorX-gen [Trj]
Avast Win32:InjectorX-gen [Trj]
CrowdStrike win/malicious_confidence_70% (D)
MaxSecure Clean
No IRMA results available.