Static | ZeroBOX

PE Compile Time

2022-06-27 16:54:30

PDB Path

ZXBCHJJS.pdb

PE Imphash

f34d5f2d4577ed6d9ceec516c1f5a744

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00002000 0x00041534 0x00041600 7.65153869488
.rsrc 0x00044000 0x00019e6a 0x0001a000 3.78944151311
.reloc 0x0005e000 0x0000000c 0x00000200 0.0980041756627

Resources

Name Offset Size Language Sub-language File type
RT_ICON 0x0005d7bc 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x0005d7bc 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x0005d7bc 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x0005d7bc 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x0005d7bc 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x0005d7bc 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_GROUP_ICON 0x0005dc24 0x0000005a LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_MANIFEST 0x0005dc80 0x000001ea LANG_NEUTRAL SUBLANG_NEUTRAL XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminators

Imports

Library mscoree.dll:
0x402000 _CorExeMain

!This program cannot be run in DOS mode.
`.rsrc
@.reloc
Z?_d
_b`*
v4.0.30319
#Strings
ZXBCHJJS
AssemblyCopyrightAttribute
System.Reflection
mscorlib
System
String
AssemblyTrademarkAttribute
AssemblyProductAttribute
AssemblyConfigurationAttribute
AssemblyCompanyAttribute
ComVisibleAttribute
System.Runtime.InteropServices
Boolean
TargetFrameworkAttribute
System.Runtime.Versioning
GuidAttribute
AssemblyFileVersionAttribute
RuntimeCompatibilityAttribute
System.Runtime.CompilerServices
CompilationRelaxationsAttribute
DebuggableAttribute
System.Diagnostics
DebuggingModes
AssemblyDescriptionAttribute
AssemblyTitleAttribute
ZXBCHJJS.exe
<Module>
MJCKVKLUIOR
Object
trtjdoZnVL9rtQs4mb
MulticastDelegate
cQVO03sIPhRAxAmhYB
pNh7TthPTehVChSw4U
V7uM8fYtLBvaFsmHZm
wx9Eut2O2u7pNUpmgh
grxeYIE5ba0Q4QV8xt
nB4ZxaqqAG2CCUto9x
Sw8eZbcFFMZvrhZDr1
vgEZ2L0i1ElNXlA8Is
W1Pl6njyA3ISActNR9
syj9PlKVhF4vMDf6QE
ValueType
corDW0OjTkBSrPHqAo
RvOTAtbOsdC8uFH8Mn
syvvnLJSLo3D5G0aKx
Attribute
System.Windows.Forms
nSHEQEpMZoZVOf4p16
gg8nAjRuZpbsSo5k4G
c17f7140f64115b6d9fe59e077ece35aa
Settings
ZXBCHJJS.Properties
ApplicationSettingsBase
System.Configuration
bxh6wOBLk2rOgf7vW5
TccZLG3HvDEW3MqMN6
ySqYC3m4bHJEepL0tq
RZfEiJyOFm05muQyVM
<Module>{7221794F-B591-4A52-8691-AD39862FB0E4}
rMLhg6oYYh5gfDvbCL
SRWc0MHjpmxaDgSYMA
BDUlhMeSXJMsyPhAny
lNHS9vwP7jvNgAc4hw
FjslQFiKS5Kl9j823o
LL4ABgNGN0UrLpmYt7
rXHKB5Xbbpi6NLha35
NdTaftM1BtVISRhT3I`1
oecj2FQ8arHvc1Mn4G
LGT8ROkbbF56PRgYbx
Y3K07SSTQKhVEt3V9r
mlsK9edXU3mML30xsX
bCbRWMDR8WD1ln8mNd
Jw33Jq4kxG5eBjAycM
svOmqUPeDZrylxG0ne
rhQLReG8in2TOjW26V
qSuRcb9LJaehn7k3js
HFEIrexT9fBSEcFREf
VnOcjofHRkguCn6F7q
KyZwVSIKwtsOJhpnkD
faVjHfURFy6mb2tRQw
MtrZwQ58ErFij3NL7s
AsODaB1pn0bgLkFakQ
W7bIrLLYge44vvAvRr
AwqP9H8C9cmAhjZ6nf
cxatkaVvfMZESbbOgJ
<PrivateImplementationDetails>{32CE1F44-5D81-4D33-AA0D-4C4686F4AB01}
__StaticArrayInitTypeSize=256
__StaticArrayInitTypeSize=40
__StaticArrayInitTypeSize=30
__StaticArrayInitTypeSize=32
__StaticArrayInitTypeSize=16
__StaticArrayInitTypeSize=64
__StaticArrayInitTypeSize=18
f8m1woHDTarkfR5GgY
.cctor
GnDZWW5xrl7WafDraT
Vxv31ae8kLeopRNDtT
zaO4k4UbTCFD2ZFhXp
eyDhrglCKWH0FBRvVT
gdCp8uFH8
ynoRyvvnL
CLoZ3D5G0
TKxs0SHEQ
jMZhoZVOf
Ep1Y6hg8n
Uju2ZpbsS
t5kE4GHrt
pdoqnVL9r
QQsc4mbbQ
TvrZLOEEA13JscI2G8
Exavwrsvp
IntPtr
LoadLibraryA
kernel32
L63bnfdFs
GetProcAddress
VFvJOTAtO
Exawrsvvp563nfdFsn
GetTypeFromHandle
RuntimeTypeHandle
Marshal
GetDelegateForFunctionPointer
Delegate
Exception
BitConverter
GetBytes
get_Size
ToInt32
ToInt16
Buffer
BlockCopy
Convert
UInt32
Process
GetProcessById
Replace
FromBase64String
RuntimeEnvironment
GetRuntimeDirectory
System.IO
Combine
Thread
System.Threading
SizeOf
ToUInt32
pVYCM1S4xviClW3eoU
KQNeOuBK1IkHJgR97s
VC7OMH4TaZa0yVQ01X
Invoke
handle
BeginInvoke
IAsyncResult
AsyncCallback
callback
object
EndInvoke
result
thread
NMCXNCNMXCNXCMFDKLFDFDKLFDKDFLKERERRGDFDFDFDKJDJDSKKJSKJSSKDJSDJNMCXCXBCXBXC
address
length
protect
process
CXCCXHJCXCYUXYUDSIUWYEWHDSKDKJSJDSKJKDSJKJKDKSDJKDNMCBCBNCBXNBNCXBNCXBNCXJHSDSJHDSSDSD
buffer
bufferSize
bytesWritten
bytesRead
applicationName
commandLine
processAttributes
threadAttributes
inheritHandles
creationFlags
environment
currentDirectory
startupInfo
processInformation
Ro9ixWw8e
fbFNFMZvr
gZDXr1vxh
XwOMLk2rO
Yf7CvW5ac
lZLQGHvDE
S3MkqMN6w
YEZS2Li1E
MNXdlA8Is
W1PDl6nyA
nIS4ActNR
GoyPj9PlV
gF4GvMDf6
IeHDUhJv1SEVi57ktu
DnHtQikEayLKDfS9Nn
O1jl8Ay8cSLiSaLDpm
aCyEmHbqTgHshnR12V
UxA3mhYBK
IContainer
System.ComponentModel
TcUUjjWOTyx5J4ixPQ
Dispose
disposing
IDisposable
QO0B3IPhR
Control
set_Text
ContainerControl
set_AutoScaleMode
AutoScaleMode
Container
System.Drawing
rbknNMnDdpL3MXG5qh
vECwNsh7Aw9Ew6LivX
NK3WMgMxJndYGtqAn3
q1ZaFtGD0PcVK0iusk
X6p967ogaYAPqpiCDf
set_ClientSize
gdK1Ys9xPN0yRD0ncJ
rixm9EutO
Assembly
SMGokFZafU3ZtKigdw
GetExecutingAssembly
AppDomain
get_CurrentDomain
ResolveEventHandler
add_AssemblyResolve
xh70TtPTe
gVCjhSw4U
ResolveEventArgs
Stream
GetManifestResourceStream
V7uKM8ftL
IndexOf
lvaOFsmHZ
get_Name
op_Equality
o0FOHu8PwOpwLZx2OQ
add_ResourceResolve
iHMFoUVY79VPb8b8uG
ikQqbgOBK0IaoFeTxm
gSa88im8q4VaoZrwB2
qcyDqyXcKtMPqNYhMq
f8EDG51IQObNE3oJ2g
Hny73jcuodCygQOf6q
StartsWith
RWdFOsKdCongGTCY5M
Ci1Ej1smxTQCiU0sbA
get_FullName
HEJlen29NQ0WDjRuaW
Substring
KH3IInfMWYuxG8Jwqj
Concat
ju7ypNUpm
ResourceManager
System.Resources
YhhorxeYI
CultureInfo
System.Globalization
EbsPgy6lJEB4MvYaUQ
get_ResourceManager
get_Assembly
get_Culture
set_Culture
PMPNuCP8Mdya5UVKOf
vLcYOZacE3Qxpr3qT8
pPILNydGHFFgOwWQsg
ODodENryb7g4rrLPsm
AmAEr2uFTXeGSpPB3E
Culture
defaultInstance
QiX8Q30aQRWNq96pXN
SettingsBase
Synchronized
get_Default
tvsryqxOuNu8OrMcPY
XM1VFSgyy55WKTAEYo
YChErnp0eXifTY4d8R
Default
Pxte3B4Zx
TqAwG2CCU
DD3f4QThUUELxVxdxM
Encoding
System.Text
get_UTF8
GetString
KbaH0Q4QV
i6hZKGF3LGAoGsNE63
vVgtu2qovyPrAuqt2s
mdB5ncDn4NfcH522NU
lu6n6A7X066rfsthwd
sLNntBYCIomnb61sYR
B3wKLIQXdWXJEKwFuB
get_Unicode
Hc1anwiJlan4NqPPWS
Intern
vJO5Fm05m
aQylVMmML
hg6rYYh5g
JDv1bCLWR
MemoryStream
Sc0LMjpmx
TDg8SYMAk
WgaAMsv5mwF8cCgMCH
AEJ9orDW0
oTkxBSrPH
Reverse
get_Chars
NumberStyles
kAofMSqYC
Monitor
m4bIHJEep
O0tUqFZfE
UInt16
DESCryptoServiceProvider
System.Security.Cryptography
DeflateStream
System.IO.Compression
ICryptoTransform
get_Length
CompressionMode
ReadByte
TransformFinalBlock
get_OutputBlockSize
TransformBlock
get_InputBlockSize
get_Position
set_Capacity
set_Position
SymmetricAlgorithm
set_IV
set_Key
FTlNpOC14O7qr6Gogt
mktgbD3LMwitcfxjAp
mgc1TEwBFp2uB8iVfe
R2vnkrz4dmWS3TLvAQ
WHeTfKHA4rqRwVIPqHt
MMTo6OHHLoNtSRb595U
XNRd3MHUqnODaNVYZSe
tQIr7WHl0KoGsdKribX
PTRKO2H5sD3X0BRdBOs
umocTlHeRSHTdcnRiAk
N4S7BiHEsybF1pXgrVi
L5Uu7hHBvbN0VKDrfDH
KhV7giH4b1PggxUF3qf
AwIRsXHS2ar9M4nnNgo
OOosLJHJPBmqkMwKy48
MBVMyeHyiyt19yW94aB
PPmRZUHbdhMhOiI1Q38
CreateDecryptor
dJRFHuHkFcqvmOXbLW3
acXn4dHWisGgWU2AQ0a
YaDEytHhZdjJ4dkIoIZ
gqCLgrHM1hivQm1aLvw
ToArray
DUlVhMSXJ
Module
UtNfaDH9ohCXBiP09Q7
iXwMaC99GlwSG
typemdt
FieldInfo
MethodInfo
CreateDelegate
ResolveType
GetFields
MemberInfo
get_MetadataToken
ResolveMethod
MethodBase
H2AHciHmxl6qR56ewV7
SetValue
fe0TdRHZ3Lq7DXIx9XL
yX6qjlHOT7I4sHu2t4T
TDgtJhH8d4PJRKfBnI2
yu0diPHVcWlZaMNE1fx
aFaNW4HXfRBJuoF9gbr
get_ManifestModule
E4vvxvAvRr
AwqvfP9HC9
RSACryptoServiceProvider
IbxvUatkav
h1hv8V4YCy
cLlvtsEJNh
bs0vWNjQaA
AfUvAOiIJ5
jxBvTcawBR
Gmnv6ePJHW
j43bbv9DdF
Hashtable
System.Collections
pSUbJgO3r4
WPCbpOa02U
VmlbZXXBOW
a7KbhDVnGI
SD7vgMTGxw
c7Av1K3i6e
rxlvDqxHkB
WbIv9rLYge
VnQv7wxMc0
bdIvLefmbE
lmAvIhjZ6n
Dictionary`2
System.Collections.Generic
tMEvzoH3f0
XKsvntxFEL
qMFvFSkY9C
SortedList
irNvadR5po
GHSbuMNSgS
utRbsw9R02
aV4bR85NLQ
WwmbYTZp9Z
YJfvlCaQpn
Gv6bvdexxn
YLkvGFakQ7
fNqvVn79eu
IMZv5ESbbO
pDavPBpn0b
da0vrRR4Vh
ujMv4KlAks
RuntimeHelpers
InitializeArray
RuntimeFieldHandle
set_UseMachineKeyStore
boDMaC9mqkSv5
ysytPhAny
UInt64
lNHFS9vP7
pvNWgAc4h
vPjaslQFK
C5KAl9j82
mo5nL4ABg
FN07UrLpm
ht7TmXHKB
AesCryptoServiceProvider
System.Core
RijndaelManaged
Activator
CreateInstance
ObjectHandle
System.Runtime.Remoting
Unwrap
Lbb6pi6NL
CryptoConfig
get_AllowOnlyFipsAlgorithms
ga3g51dTa
MD5CryptoServiceProvider
HashAlgorithm
ComputeHash
It1zBtVIS
ehTvu3IniN
pa7vv8f9Hh
BinaryReader
get_BaseStream
ReadUInt32
RFpvbyHuje
ParameterInfo
DynamicMethod
System.Reflection.Emit
ILGenerator
ReadBytes
BindingFlags
get_Item
get_Module
GetGenericArguments
get_IsStatic
get_FieldType
GetParameters
get_DeclaringType
get_IsValueType
MakeByRefType
get_ParameterType
get_ReturnType
GetILGenerator
OpCode
OpCodes
Ldarg_0
Ldarg_1
Ldarg_2
Ldarg_3
Ldarg_S
Tailcall
Callvirt
bc1vpMn4G5
FT8vRRObbF
L6PvZRgYbx
Y3Kvs07STQ
CryptoStream
CryptoStreamMode
phVvhEt3V9
MBlvYsK9eX
K3mv2ML30x
fXvvECbRWM
GetMethod
e8WvqD1ln8
get_Location
Exists
GetName
AssemblyName
get_CodeBase
ToString
GetType
GetProperty
PropertyInfo
GetValue
qNdvcIw33J
LoadLibrary
kkxvBG5eBj
Uycv3MyvOm
kUev0DZryl
HG0vjneyhQ
ORevK8in2T
qjWvO26VOS
aRcvmbLJae
umLocehuEC
hn7vyk3jsx
FileStream
FileMode
FileAccess
FileShare
REIvoreT9f
lSEvHcFREf
VnOvecjoHR
BguvwCn6F7
kUyviZwVSK
vtsvNOJhpn
BDsvXaVjHf
eFyvM6mb2t
eQwvCrtrZw
A8EvQrFij3
xL7vksyiZv
v7wvS90Dee
h4rvdAsD2g
hJNvnSyepIEmdYqySX
w7buZ6WGrWxuOcgknO
iDCkhFcfp1vKpxQquJ
FKX4cwopBayDEGuTGu
fxCMEDOIGa7RmkB5v3
ytXFrT4rYYTXeLDIOj
hYK9fU0f4KWqKRTIoR
g5xFmnkfnlsr3NyNTI
m3qRY5lRucEPHH8C9v
GetPublicKeyToken
XLEpRhAmgtouCk0fN6
BFTLyuCO3YshGbE01A
CipherMode
set_Mode
MxU8m9HL9XjtWGUAaZ
eGFr0FDEJGruXIR5vc
rZjXQdTY99cwdNpl40
NUmuWA9GTYSTbHPsdf
FlushFinalBlock
UCvkkDjj9lAJDElGB4
Vwukx9aLPCXOJ1UNuw
igKx2aqqCf3ZUd3MhF
XHWF56mjWsWpZM0pNu
SjD6qlSN4rMj8CFfSa
hGHGlnKG5HWDZ4yMMC
piTUVdIHesCokr28KL
jeu8Gl3HHbjIjvqFdS
unmJpGHsXZZUlIxZ6pu
jk98PGH2YGIASyaXsEE
X5sJ5DHfAxxtmFQwiyK
ViNKa7C8f9HhFFpyHu
Ofxb2hEMy4
VDcesCHdIKC8ieo9vah
pvOtHJHrJoIQc7nfIUy
NxtQuZHuLTEb7HrGPCq
beZptIH0Cr5PKUfWdEk
CreateEncryptor
Mh13W5Hxhux4VQt4BaY
g9CGDxHgU2L2N0guSrW
Igcot0HprvrFqsAJym9
ToBase64String
classthis
nativeEntry
nativeSizeOfCode
efYbEcjjiT
xmqbqIr8Ly
X5DbjNO99B
KDikMXewCI
IHYbcAKZYl
q4obBnBnco
iVLb3l5diW
ReadInt32
rJdb0X5QIV
DvicZRHQcO0v9wFBV3e
gbdYj1HiOPuHVCri940
BWr7NwHtRZdFiF4WbcA
hModule
lpName
lpType
lpAddress
dwSize
flAllocationType
flProtect
hProcess
lpBaseAddress
lpNumberOfBytesWritten
flNewProtect
lpflOldProtect
dwDesiredAccess
bInheritHandle
dwProcessId
value__
prnbKmDoIf
inYMaC9z58TyK
MH8bHG0HKP
BGdbeuJPDK
xOSbwEg1jK
kCybi4j8iW
s6ibmhPQA1
myDbypHsvm
List`1
GetManifestResourceNames
AddRange
IEnumerable`1
ujLboRQ6um
kLjw4iIsCLsZtxc4lksN0j
QIffrJxXjMNUtFCkjD
UXVJgh0AHFIGs608gx
xALF1IarsrlpiEjy3y
FXtvF8rcgHpjMniM2n
DVpNMtNjVWG7SNnQwi
HbErkHsIDHrkqmcg05
e0cb3U8HWmtWw2BPk0
tODaAVvc5jYA1Ulb3A
CopyTo
WXIDalkdSbfQS1bIt5
mUoxuMbUJwrDn7P2H0
wHEIfaDrqXrhoZ3A8Z
npWSmclCno3PcwfdFu
YdVOpHtWTqmxUgxLSV
artxAVL6i1s1teaN7J
iBft7U4TT4n39cCojf
DvNbNsva48
IsLittleEndian
ySrbXpQ1VO
OuhbMTedlh
TvZbCvEnEl
NisbQfbOIl
PBLbkmrC4U
CxkbSBF96S
PDYbdX6hke
YkJbDi2HZR
gJtb4prL8t
NL3xUcUBek37A1LD78V
mAPTmVU4pOEe9PKa5QQ
IK1uTfUSdju1LBPKR9E
$$method0x6000317-1
$$method0x6000332-1
$$method0x6000332-2
$$method0x6000340-1
$$method0x6000340-2
$$method0x6000353-1
$$method0x6000395-1
$$method0x60005b3-1
GeneratedCodeAttribute
System.CodeDom.Compiler
CompilerGeneratedAttribute
DebuggerNonUserCodeAttribute
EditorBrowsableAttribute
EditorBrowsableState
UnmanagedFunctionPointerAttribute
CallingConvention
CharSet
FlagsAttribute
Q9SFSDO623BVM2drTd.8V9xFGUq4fiyFTDFMN
PUNA5MaYxDVgBMYi4U.P7BE7KmDDkETvE3RfG
Copyright
2022
ZXBCHJJS
.NETFramework,Version=v4.5.2
FrameworkDisplayName
.NET Framework 4.5.2)
$e43af978-9787-4935-9ae4-f0cc56f26d26
1.0.0.0
WrapNonExceptionThrows
3System.Resources.Tools.StronglyTypedResourceBuilder
4.0.0.0
KMicrosoft.VisualStudio.Editors.SettingsDesigner.SettingsSingleFileGenerator
11.0.0.0
FjslQFiKS5Kl9j823o.lNHS9vwP7jvNgAc4hw+rXHKB5Xbbpi6NLha35+NdTaftM1BtVISRhT3I`1[[System.Object, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]][]
SUsSystem.Runtime.InteropServices.CharSet, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
CharSet
>[Qasmi
U./!i8
2THJ[D!
-}Ne/V_|
gJ{~(
#ZzD1W
rsYlp\
n*_{[r
`'iHkj
<us,Z"=
X,:R`}=
;Plk>^
}q([K=
xl A5d
r~?rg
q"r:h=
^!/pp%$mE
N@:+aWA
/huL~R
*n`FTZ
XPLh\T1
M(|\T+
OBp*.W
pn]/)E
h,(B8E
h@(i{'
#1i>&
"Rj @q
sD7m\;
!^/LYN"b
K>MZVC2J
*kr/({
_%HGPa&
o2<B*i
^I;<bR
V{Br{
>_kPrm
.*NviXIc
DRdxmy
)paZ+}\
fa_9aeZ
4;:T-:8
Z,o:1x
*?*pya
R}kp|jOy
z,ni|*
>8I7xy
A)B<C-&W
[q1|_7
P.vvw,
k}sJx
KVFOch/
;2pUBN-
<o]pF+OL
v" A,WWj
5k13>B
P],So0
6a)J'}^
LM17y;
)kO(Q[
u/{n;6
h]H5t9~Ep
wam}Bd
u1pnn~
M*fCb
*hm.m.p
"E!>vH
X*(v{<
i=S9YTD
G)S TD
wrZZtf
+):?Sm
w8n/,4<
]JqSO:
Y=`NO|
cs[#gT!
>4H(tl\
Fm&Wo+
XH(ETE
Nv.%nv+)
BqFm 5Q
\tE qw
*4i3OY
%c4@c3
lh4E>A
wIhgtDAHS,
xHr_&'
:%|lBC
Ogjkg!
N])MRk
sc]t)GN
:2:CG\
VZj]McE
S@}^| Ly
!+>cb
P^Gdg$
ubOz68
"Wbsj:cO
u_'0laf
Q,o=O8-X~
zD^n-[
>ObP\s
QAL81Q
x{JKLK!;
y&<A5|8
rUD=$89j
--$!S<
w wT3&I
K5{DE(Aj.@DK
kG^k&6)6
>;o@V]mM
2GOc}\
u"lO<0
i}DL::
weVv}`
UTxz/T5
M/nGOx@
dg&2U(
7c(]Bs
ZWZqRi
.20_*W'2
)]5[C[
>0: *2
| }W`rT.
m%{HV
5@/a?]
or5 4S
BKcRH$
C?Q{v/
*LnS_a
I)]#D-
b|GYw.
wOvUw2B
]J8WN42<*F
3l&e\Or
PH,zb
lx:qR
u?c>6n
qeqp7l
-(my>Y
4Le_.Z
Ngwg34,
V2[?_%
K-{$r(V`
x+/dQ*7
an\dz
x'mz9<F
$CNi:k
S5Cvw8u
bUb^%
[U`o@3
4b>Y%m
=!jl^m
h3M:X]
k%8x\$
=LO_Al
`Z%XQ@
"d%uz,,
fsH:NX
w5;Xtj
?FfQob
4/oH&(U
#IH\;X
GFh="9
1ctx;T
adM';A
[%gJE%m
LYRl'9S
~)l?ORI
QIrK.2~G
i'Xc]i
ClsJYk
NknH~d
0{m$P|
{1Y{#\
&Mi`Qg
"S|'>x
@]jQ%#
OC;UDS
w0gX25
\lmqG|
))"l=@i
s"0o,6
uflS%6T
#Y[WeC}
Vo1XJz
F!0m{3
l\-MpVz
x2FC7cD
fI4A t
Yg jTC
m\#WE2
U#$#-O
y,-iNx
HqOZkJW
>Pwt=t
'bH9(c
%D9j/>
m,3Y,93)M
Fh p
zmVc|fX
NDOQ+e
U.>cSB
"P0nI#
74Vumt
YvPkY^
r'~=W}
I)\dODC
XN^7f+
"c/}tR
PH{'95J^
b#Rn>
bmUmZR
4z=!+ML
=6-7Sm#
AQ;TK7
eaxy%4
(1StyE
\=\.qI
xI6)"w^<9
!SR6d~
|} h27R/
OVIt|`
L8mSf,
;Kaxy:@
BU`dy[
v!H;{#
xLQv e
Bu7wc^D@
II~l)7
2/JH6%.
goT$y!
:#<Fy&@
p^-E*N
M%?%b
D_2couJ
wY0h8Q`
,x`/+E
[LBtUs
>1E^}
(f3B;B37
~c:J+N
DS4@EB
1i$Da
M.~=ui
?BzDT:
%kEYRA:
6{^c>Pv
9OH/_~
<bqnq_
R(>+5&
b OQ'T
/87C2$
Y:2cO
I#2N>Ua
vKoVw[
L0S5Vv(-
O-L49I:
=2~!`)M~{
lqCp!.Y
4hBgac2'
#J}_gNU
7M!7]
aQv6u$~`C
#p3" ie;a)?g.f
I-x+Rq
@^Cw2I:mUr'
Kjp_E_b
>jc#^"B
st5X7(~45;
INGaELD
+&2#'ZQ
38YI/f
|p4.*trtA
E/*)io?
`\/Rx&MV
,8aJEfZ9a
=4GoUV
-MxZ+g4
\;FK+s
TU0fIX
Y"?)4`P
Y^'A(&
aR$8TH
lq rF5
p5)X#
(l%HX7
]^W2Em
Ve^3UC
s<K7L'zLQ
#ND$_O
'$R[@8G
)V2uAU
WM#r[f
JP:Mk^e
',T$Aa
(O_5h$
&%*bru
/MB(n]
yu0_E3
FWH+H)
zR[,e6Ue
[[?8-,
Bz4x,w
$_6)-VqO
lN#}n'$8%
?-AJO$;
7;%<0M
==s@>U
Mfed^O`
:u!og!
H9F'XjMmuI
N7^958
&kJzDU
#C`ttV
SlBN;<Zq
z@QxxKT7
Mu\ zl
0wAf=yo
D13Ywl
gDA%u8
I ]W(o/
|ge*hPb
eC4a@SOY
*Ux(I)
FFd-.)
gJC1'N
M_Qw&F
M'ov3!(
#K][(>
XFf>iI
eJBtqms
n:cKgm
Bw}}}2
gL&Mots
}Pn9~H
Q)djl`
$s\xS%v
PSB&EC
w~ALk3F
z#EzG0'
]Rfhn M
RSDS(K
ZXBCHJJS.pdb
_CorExeMain
mscoree.dll
db#@"1t=
0?h* +(
x}(b!%
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
<assemblyIdentity version="1.0.0.0" name="MyApplication.app"/>
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v2">
<security>
<requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3">
<requestedExecutionLevel level="asInvoker" uiAccess="false"/>
</requestedPrivileges>
</security>
</trustInfo>
</assembly>
Entrust, Inc.1(0&
See www.entrust.net/legal-terms1907
0(c) 2009 Entrust, Inc. - for authorized use only1200
)Entrust Root Certification Authority - G20
150610134249Z
301110141249Z0
Entrust, Inc.1(0&
See www.entrust.net/legal-terms1907
0(c) 2015 Entrust, Inc. - for authorized use only1<0:
3Entrust Extended Validation Code Signing CA - EVCS10
&\/q+~
http://ocsp.entrust.net00
http://crl.entrust.net/g2ca.crl0;
http://www.entrust.net/rpa0
o2,) !vj
e23k2O]
-yvJxU;H
Entrust, Inc.1(0&
See www.entrust.net/legal-terms1907
0(c) 2015 Entrust, Inc. - for authorized use only1<0:
3Entrust Extended Validation Code Signing CA - EVCS10
201208143457Z
231208143456Z0
Bratislava1
ESET, spol. s r.o.1
Private Organization1
31 333 5321
ESET, spol. s r.o.0
o2,) !vj
http://ocsp.entrust.net05
)http://aia.entrust.net/evcs1-chain256.cer01
http://crl.entrust.net/evcs1.crl0
https://www.entrust.net/rpa0
Washington1
Redmond1
Microsoft Corporation1)0'
Microsoft Code Verification Root0
150707205549Z
250707205549Z0
Entrust, Inc.1(0&
See www.entrust.net/legal-terms1907
0(c) 2009 Entrust, Inc. - for authorized use only1200
)Entrust Root Certification Authority - G20
Dhttp://crl.microsoft.com/pki/crl/products/MicrosoftCodeVerifRoot.crl0
Entrust, Inc.1(0&
See www.entrust.net/legal-terms1907
0(c) 2015 Entrust, Inc. - for authorized use only1<0:
3Entrust Extended Validation Code Signing CA - EVCS1
|66MMM`ry{
20220315144607Z
DigiCert Inc1
www.digicert.com110/
(DigiCert SHA2 Assured ID Timestamping CA0
210101000000Z
310106000000Z0H1
DigiCert, Inc.1 0
DigiCert Timestamp 20210
http://www.digicert.com/CPS0
,http://crl3.digicert.com/sha2-assured-ts.crl02
,http://crl4.digicert.com/sha2-assured-ts.crl0
http://ocsp.digicert.com0O
Chttp://cacerts.digicert.com/DigiCertSHA2AssuredIDTimestampingCA.crt0
QJxy6z'
dwc_#Ri
DigiCert Inc1
www.digicert.com1$0"
DigiCert Assured ID Root CA0
160107120000Z
310107120000Z0r1
DigiCert Inc1
www.digicert.com110/
(DigiCert SHA2 Assured ID Timestamping CA0
fnVa')
http://ocsp.digicert.com0C
7http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0
4http://crl4.digicert.com/DigiCertAssuredIDRootCA.crl0:
4http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0P
https://www.digicert.com/CPS0
8aMbF$
V3"/"6
Washington1
Redmond1
Microsoft Corporation1)0'
Microsoft Code Verification Root0
110415194137Z
210415195137Z0e1
DigiCert Inc1
www.digicert.com1$0"
DigiCert Assured ID Root CA0
Dhttp://crl.microsoft.com/pki/crl/products/MicrosoftCodeVerifRoot.crl0
0xAbMk^n
DigiCert Inc1
www.digicert.com110/
(DigiCert SHA2 Assured ID Timestamping CA
220315144607Z0+
/1(0&0$0"
(>[~kgU
@"!@")@"1@"9@"A@;Q@"Y@"a@"i@
.s-.k'.C
'.+'.;@.
+*,*.-/-0-1-2-3-4-
System.Core, Version=3.5.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
System.Security.Cryptography.AesCryptoServiceProvider
n62p0q3H0hPORZ5VBW.eXIySgEgIti1taWKhx
{11111-22222-10009-11112}
PUNA5MaYxDVgBMYi4U.P7BE7KmDDkETvE3RfG
{11111-22222-50001-00000}
GetDelegateForFunctionPointer
file:///
Location
ResourceA
Virtual
Write
Process
Memory
Protect
Process
Close
Handle
kernel
32.dll
{11111-22222-20001-00001}
{11111-22222-20001-00002}
{11111-22222-30001-00001}
{11111-22222-30001-00002}
{11111-22222-40001-00001}
{11111-22222-40001-00002}
CXHXCGHHDSHHDSSD
Antivirus Signature
Bkav W32.AIDetectNet.01
Lionic Clean
tehtris Clean
DrWeb Clean
MicroWorld-eScan Clean
FireEye Generic.mg.e67bc6fca32bd5f5
CAT-QuickHeal Clean
McAfee Clean
Cylance Unsafe
Sangfor Suspicious.Win32.Save.a
K7AntiVirus Clean
BitDefender Clean
K7GW Clean
CrowdStrike win/malicious_confidence_100% (W)
BitDefenderTheta Gen:NN.ZemsilF.34742.xmY@a0TwCxe
VirIT Clean
Cyren W32/MSIL_Kryptik.HJO.gen!Eldorado
Elastic malicious (high confidence)
ESET-NOD32 a variant of MSIL/Kryptik.ADNS
Zoner Clean
TrendMicro-HouseCall Clean
Paloalto Clean
ClamAV Clean
Kaspersky Clean
Alibaba Clean
NANO-Antivirus Clean
ViRobot Clean
Rising Clean
Ad-Aware Clean
Sophos ML/PE-A
Comodo Clean
F-Secure Clean
Baidu Clean
Zillya Clean
TrendMicro Clean
McAfee-GW-Edition Clean
SentinelOne Static AI - Malicious PE
Trapmine Clean
Emsisoft Clean
Ikarus Trojan.MSIL.Inject
GData Clean
Jiangmin Clean
Webroot Clean
Avira HEUR/AGEN.1203918
Kingsoft Clean
Gridinsoft Clean
Arcabit Clean
SUPERAntiSpyware Clean
ZoneAlarm Clean
Microsoft Trojan:Win32/Wacatac.B!ml
Cynet Malicious (score: 99)
AhnLab-V3 Clean
Acronis Clean
ALYac Clean
MAX Clean
VBA32 Clean
Malwarebytes Malware.AI.1117462035
Panda Clean
APEX Clean
Tencent Clean
Yandex Clean
TACHYON Clean
MaxSecure Trojan.Malware.300983.susgen
Fortinet Clean
Cybereason malicious.9d4840
Avast Clean
No IRMA results available.