Static | ZeroBOX

PE Compile Time

2022-07-13 07:27:19

PE Imphash

f34d5f2d4577ed6d9ceec516c1f5a744

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00002000 0x000664a4 0x00066600 7.67756251395
.rsrc 0x0006a000 0x0000f800 0x0000f800 7.51775982605
.reloc 0x0007a000 0x0000000c 0x00000200 0.101910425663

Resources

Name Offset Size Language Sub-language File type
RT_ICON 0x0006e808 0x0000a9cb LANG_NEUTRAL SUBLANG_NEUTRAL PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x0006e808 0x0000a9cb LANG_NEUTRAL SUBLANG_NEUTRAL PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x0006e808 0x0000a9cb LANG_NEUTRAL SUBLANG_NEUTRAL PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x0006e808 0x0000a9cb LANG_NEUTRAL SUBLANG_NEUTRAL PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_GROUP_ICON 0x000791e4 0x0000003e LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_VERSION 0x00079234 0x0000030a LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_MANIFEST 0x00079550 0x000001ea LANG_NEUTRAL SUBLANG_NEUTRAL XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminators

Imports

Library mscoree.dll:
0x402000 _CorExeMain

!This program cannot be run in DOS mode.
`.rsrc
@.reloc
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
lld.eerocsm
niaMllDroC_
noitacifireVpikS
980e439165c5a77b=nekoTyeKcilbuP ,lartuen=erutluC ,0.0.0.4=noisreV ,bilrocsm ,etubirttAnoissimrePytiruceS.snoissimreP.ytiruceS.metsyS
4 krowemarF TEN.
emaNyalpsiDkrowemarF
0.4v=noisreV,krowemarFTEN.
sworhTnoitpecxEnoNparW
0.0.0.1
0.0.0.61
redliuBecruoseRdepyTylgnortS.slooT.secruoseR.metsyS3
emaNeliFteG
yarrAezilaitinI
nekoTatadateM_teg
epyTgniralceD_teg
emarFteG
egnaRddA
evloseRylbmessA_dda
egnahcxE
sgalF_teg
tnairavnIrewoLoT
ofnIerutluC_teg
seilbmessAteG
emaNenihcaM_teg
emaNssecorP_teg
evomeR
egnahcxEerapmoC
thgieH_tes
htdiW_tes
46tnIetirW
23tnIetirW
yrotceriDtnerruCteG
23tnIoT
61tnIoT
yticapaC_teg
ytpmErOlluNsI
yrotceriDemitnuRteG
23tnIUoT
tcelloC
txeTllAetirW
tooR_teg
nekoTyeKcilbuPteG
tnuoC_teg
nretnI
ylbmessAgnillaCteG
eulaVteGyrT
maertSesaB_teg
yeKcilbuPteG
emaNteG
gnirtSdaeR
61tnIUdaeR
eulaVeteleD
eulaVteG
semaNeulaVteG
sessecorPteG
eteleD
seliFteG
sretemaraPteG
tnioPyrtnE_teg
dIyBssecorPteG
rtPtnIetirW
rtPoTerutcurtS
hcraeSyraniB
hctaMsI
breV_tes
eloRnIsI
tnerruCteG
htaPredloFteG
eludoMniaM_teg
dI_teg
etucexEllehSesU_tes
elytSwodniW_tes
wodniWoNetaerC_tes
stnemugrA_tes
gnirtS46esaBoT
edocinU_teg
ezilaireS
noitisoP_tes
noitiddA_po
etyBdaeR
setyBtxeN
oTypoC
eziSkcolB_tes
eulaVseziSkcolBlageL
eziSyeK_tes
eulaVseziSyeKlageL
dnocesilliM_teg
dneppA
hsaH_teg
IICSA_teg
metsySgnitarepOtiB46sI_teg
htdiW_teg
thgieH_teg
eziSrotinoMyramirP_teg
ecalpeR
emaNeliFmodnaRteG
emaNeliF_tes
setyBllAetirW
stsixE_teg
enibmoC
htaPpmeTteG
noisnetxEtuohtiWemaNeliFteG
sgalFnoitatnemelpmIdohteMteG
ypoCkcolB
egasseM_teg
noitpecxErennI_teg
elitaloV
2_gradL
1_gradL
etubirttAmotsuCteS
srotcurtsnoCteG
ylbmessAcimanyDenifeD
labolGHeerF
fOeziS
yeKsniatnoC
htgneL_teg
slauqE
isnAgnirtSoTrtP
61tnIdaeR
46tnIoT
inUgnirtSoTrtP
erutcurtSoTrtP
rtPtnIdaeR
eziS_teg
htiWsdnE
emaNeliF_teg
ekovnIcimanyD
retnioPnoitcnuFroFetageleDteG
ezilaireseD
elbuoDdaeR
elgniSdaeR
46tnIdaeR
23tnIdaeR
gnirtSdaolnwoD
ytilauqenI_po
sserddAesaB_teg
sniatnoC
emaNeludoM_teg
seludoM_teg
RHroFnoitpecxEworhT
rorrE23niWtsaLteG
ticilpxE_po
emaNyBsessecorPteG
VI_teg
yeK_tes
gniddaP_tes
edoM_tes
VI_tes
kcolBlaniFhsulF
hsaHetupmoC
setyBteG
etaerC
labolGHcollA
setyBllAdaeR
stsixE
rebmeMekovnI
epyTetaerC
epyTenifeD
eludoMcimanyDenifeD
epyTnruteRteS
sretemaraPteS
dohteMenifeD
retemaraPenifeD
epyTteG
rotcurtsnoCteG
2_coldL
4I_vnoC
0_coldL
3_coldL
3_coltS
jboweN
2_coltS
0_gradL
0_4I_cdL
lebaLkraM
S_nU_enB
1M_4I_cdL
5_4I_cdL
S_coldL
S_coltS
trivllaC
S_eslafrB
1_coldL
1_coltS
0_coltS
4I_cdL
lebaLenifeD
lacoLeralceD
rotareneGLIteG
dohteMteG
gnirtSteG
8FTU_teg
gnirtS46esaBmorF
yarrArahCoT
ataDteG
niamoDtnerruC_teg
maertSecruoseRtsefinaMteG
ylbmessAgnitucexEteG
seulaVdaolpU
emiTlasrevinUoT
emaNresU_teg
locotorPytiruceS_tes
tixEroFtiaW
tamroF
rewoLoT
yarrAoT
esreveR
yeK_teg
eulaV_teg
tsiLoT
tceleS
metI_teg
sdnoceSlatoT_teg
tcartbuS
woN_teg
ytilauqE_po
eldnaH_teg
ssecorPtnerruCteG
tacnoC
emaN_teg
eulaVteS
emaNlluF_teg
yrotceriD_teg
yeKbuSnepO
resUtnerruC
esopsiD
txeNevoM
metI_tes
gnirtsbuS
fOxednI
tnerruC_teg
tcejbOteG
ylbmessA_teg
eldnaHmorFepyTteG
dIdaerhTdeganaM_teg
daerhTtnerruC_teg
eziSkcolBtuptuO
eziSkcolBtupnI
skcolBelpitluMmrofsnarTnaC
mrofsnarTesueRnaC
amuNxEcollAlautriV
tneserPreggubeDetomeRkcehC
eliFypoC
tcetorPlautriV
sserddAcorPteG
AyrarbiLdaoL
emaNesaBeludoMteG
seludoMssecorPmunE
xEemaNeliFeludoMteG
eldnaHesolC
ssecorPnepO
sessecorPmunE
egasseMdneS
txeTwodniWteG
tceRwodniWteG
swodniWdlihCmunE
dIssecorPdaerhTwodniWteG
emaNssalCteG
collAlautriV
ofnIoeGteG
DICLtluafeDresUteG
DIoeGresUteG
eliFetaerC
eldnaHetacilpuD
fokewmfcqgrhejwhV
sutatStNmumixaM
nezorFtoNsnoitcasnarT
noitcasnarTnIeliFetucexEtonnaC
noitomorPderiuqeRnoitcasnarT
teStoNskcabllaCepocSnoitcasnarT
tneserPydaerlAatadateMfxT
etomeRdetroppusnUgnippaMdetcasnarT
dewollAtoNnepOlanoitcasnarT
noitcasnarTnIdewollAtoNsfE
tpurroCetubirttAfxT
deripxEremiTkcablloR
elitaloVmT
tsixEsnoitcasnarTtbuodnI
ytpmEtoNriDfxT
yradnuoBmRssorCtnaC
ycnednepeDlanoitcasnarTkaerBtnaC
tnetsisrePtoNytitnedIeliF
detratSydaerlAmR
dedeeNtoNyrevoceR
roirepuStoNtnemtsilnE
detcennocsiDmR
nepOeldnaHhtiWrevoceRtnaC
detceteDnoitpurroCgoL
atadateMfxToN
dilaVregnoLoNeldnaH
snoisreviniMmaertSeroMetaerCtnaC
tnetnIyfidoMhtiWnoisreviniMnepOtnaC
noitcasnarTdeificepSmorFelbisseccanInoisreviniM
dilaVtoNnoisreviniMmaertS
dnuoFtoNnoisreviniMmaertS
stsixEregnoLoNtcejbO
deliaFhtworGgoL
dilaVtoNnoitcasnarTtnerruC
reffuBllahsraMdilavnInoitcasnarT
dettimmoCydaerlAnoitcasnarT
detrobAydaerlAnoitcasnarT
detseuqeRtoNnoitcasnarT
dilaVtoNtseuqeRnoitcasnarT
stsixEroirepuSnoitcasnarT
dnuoFtoNlocotorPmrC
deliaFnoitagaporPnoitcasnarT
stsixEydaerlAlocotorPmrC
hctamsiMnoisreVeliFetomeR
eziSdilavnIeziseRgoL
etomeRdetroppusnUsnoitcasnarT
goLeziseRtoNdluoC
mRtoNyrotceriD
denioJtoNnoitcasnarT
tpurroCatadateMmR
evitcAtoNmR
deliaFnoitazilaitinImT
evitcAtoNnoitcasnarT
noitcasnarTdilavnI
tcilfnoClanoitcasnarT
deteleDsuriV
detcefnIsuriV
deriuqeRhtuAsmroF
egraLooTeliF
epyTeliFdaB
deriuqeRtuOkcehC
tuOdekcehCeliF
ytriDemuloV
detcetorPsIssecorP
esUnIecruoseR
dewollAtoNstseuqeRcpL
egasUnoitcennoCdilavnIcpL
detcepxEreffuBevieceRcpL
hctapsiDevisruceR
delecnaCtseuqeR
egasseMdilavnI
tsoLegasseM
desolCtroP
ssapyBkcabllaC
evitcanIreggubeD
teStoNtroP
sserddAdilavnI
tixEClortnoC
dnuoFtoNtnioPyrtnE
dnuoFtoNlanidrO
deliaFegelivirPoI
dnuoFtoNllD
deriuqeRnoitazinorhcnyS
cDtAecnereffiD
revreSnogoL
61niWegamIdilavnI
tcetorPegamIdilavnI
zMtoNegamIdilavnI
tamroFeLegamIdilavnI
timiLtnemtimmoC
dedeecxEatouQelifegaP
esUnIydaerlAnekoT
ssecorPnItoNdaerhT
sdaerhTynaMooT
desolCeliF
puorGyramirPsrebmeM
resUlaicepS
puorGlaicepS
tnuoccAlaicepS
deteleDeliF
emaNretupmoCdilavnI
eteleDtonnaC
dellecnaC
seliFdenepOynaMooT
oreZeziSeliFdeppaM
gnitanimreTsIssecorP
21retemaraPdilavnI
11retemaraPdilavnI
01retemaraPdilavnI
9retemaraPdilavnI
8retemaraPdilavnI
7retemaraPdilavnI
6retemaraPdilavnI
5retemaraPdilavnI
4retemaraPdilavnI
3retemaraPdilavnI
2retemaraPdilavnI
1retemaraPdilavnI
rorrElanretnI
fleSetanimreTtnaC
ytpmEepiP
tiaWtnaC
demaneReliF
eciveDemaStoN
deppotStoNgniliforP
detratStoNgniliforP
desolCdecroFeliF
tuoemiToI
edoMdaeRdilavnI
gninetsiLepiP
detcennoCepiP
gnisolCepiP
detcennocsiDepiP
noitcnuFlagellI
ysuBepiP
etatSepiPdilavnI
elbaliavAtoNepiP
elbaliavAtoNecnatsnI
secruoseRtneiciffusnI
dilavnIeliF
seliFgnigaPynaMooT
noitcurtsnIdegelivirP
wolfrevOregetnI
oreZyBediviDregetnI
wolfrednUtaolF
kcehCkcatStaolF
wolfrevOtaolF
noitarepOdilavnItaolF
tluseRtcaxenItaolF
oreZyBediviDtaolF
dnarepOlamroneDtaolF
dedeecxEsdnuoByarrA
dnuoFtoNemaNecruoseR
dnuoFtoNepyTecruoseR
dnuoFtoNataDecruoseR
ataDdeppaMtoN
dednetxEtoNnoitceS
lebaLemuloVdilavnI
detsuahxEstnegA
ytirohtuAdIdilavnI
detsuahxEsdiuG
detseuqeRsdiuGynaMooT
delbasiDtoNrevreS
delbasiDrevreS
lluFksiD
dekcoLtoNegnaR
lcAecnatirehnIdaB
nekoToN
tamroFegamIdilavnI
dnuoFtoNerudecorP
rcseDytiruceSdilavnI
diSdilavnI
lcAdilavnI
ytirohtuAbuSdilavnI
detsuahxEsdiuL
detseuqeRsdiuLynaMooT
deppaMenoN
delbasiDtnuoccA
deripxEdrowssaP
noitatskroWdilavnI
sruoHnogoLdilavnI
noitcirtseRtnuoccA
eruliaFnogoL
noitcirtseRdrowssaP
drowssaPdemroFllI
drowssaPgnorW
nimdAtsaL
puorGnItoNrebmeM
puorGnIrebmeM
puorGhcuSoN
stsixEpuorG
resUhcuSoN
stsixEresU
emaNtnuoccAdilavnI
dleHtoNegelivirP
egelivirPhcuSoN
noisseSnogoLhcuSoN
srevreSnogoLoN
yrotadnaMelbasiDtnaC
nekoTnoitanosrepmIoN
puorGyramirPdilavnI
renwOdilavnI
hctamsiMnoisiveR
noisiveRnwonknU
detroppuStoNeliFltC
gnidnePeteleD
detnarGtoNkcoL
tcilfnoCkcoLeliF
rorrEtpurroCaE
eliFnOsaEoN
yrtnEaEtnetsixEnoN
egraLooTaE
detroppuStoNsaE
noitcetorPnoitceS
paMeliFelbitapmocnI
timiLteSgnikroWdaB
gnitanimreTsIdaerhT
dedeecxEtnuoCdnepsuS
egamItoNnoitceS
teSydaerlAtroP
dedeecxEtimiLerohpameS
denwOtoNtnatuM
noitcetorPegaPdilavnI
dedeecxEatouQ
noitaloiVgnirahS
eldnaHtroPdilavnI
desufeRnoitcennoCtroP
giBooTnoitceS
rorrEcrC
rorrEataD
etaLataD
nurrevOataD
daBxatnyShtaPtcejbO
dnuoFtoNhtaPtcejbO
dilavnIhtaPtcejbO
noisilloCemaNtcejbO
dnuoFtoNemaNtcejbO
dilavnIemaNtcejbO
xiMretemaraPdilavnI
dettimmoCtoN
dekcoLtoN
kcatSdaB
noitpecxEelbaunitnoCnoN
hctamsiMepyTtcejbO
llamSooTreffuB
deineDsseccA
dettimmoCydaerlA
noitcurtsnIlagellI
noitceSeteleDoTelbanU
mVeerFoTelbanU
weiVdeppaMtoN
sesserddAgnitcilfnoC
yromeMoN
eciveDnIaideMoN
emuloVgnorW
eliFfOdnE
tseuqeReciveDdilavnI
eliFhcuSoN
eciveDhcuSoN
retemaraPdilavnI
delecnaCtoNremiT
diCdilavnI
cPlaitinIdaB
kcatSlaitinIdaB
eldnaHdilavnI
atouQelifegaP
rorrEegaPnI
noitaloiVsseccA
hctamsiMhtgneLofnI
ssalCofnIdilavnI
detnemelpmItoN
lufsseccusnU
erucesnIeBthgiMllD
pmuJgnoL
seirtnEeroMoN
tnetsisnocnItsiLaE
emaNaEdilavnI
ysuBeciveD
ypoClaitraP
desolCseldnaH
seliFeroMoN
wolfrevOreffuB
petSelgniS
tniopkaerB
tnemngilasiMepytataD
noitaloiVegaPdrauG
gninraW
derevoceRyrtsigeR
esaBtAtoNegamI
egnaRtimiLteSgnikroW
dednepsuSsaWdaerhT
stsixEemaNtcejbO
lanoitamrofnI
sretirWhtiWdekcoLeliF
sredaeRylnOhtiWdekcoLeliF
denolCssecorP
boJnIssecorP
boJnItoNssecorP
etanimreToTgnihtoN
tcejbOesrapeR
pmuDhsarC
eliFgnigaPtluaFegaP
egaPdrauGtluaFegaP
etirWnOypoCtluaFegaP
oreZdnameDtluaFegaP
noitisnarTtluaFegaP
deliaFtcennoCtropsnarTyramirP
tnuoccAroFsatouQoN
riDmunEyfitoN
punaelCyfitoN
dettimmoCtcAxR
detnuoMemuloV
ssergorPnIkaerBkcoLpO
deppaMtoNemoS
dengissAllAtoN
seirtnEeroM
esrapeR
gnidneP
tuoemiT
detrelA
cpAlenreK
cpAresU
36tiaWdenodnabA
3tiaWdenodnabA
2tiaWdenodnabA
1tiaWdenodnabA
0tiaWdenodnabA
denodnabA
36tiaW
sseccuS
eziSkcolBtuptuO_teg
eziSkcolBtupnI_teg
skcolBelpitluMmrofsnarTnaC_teg
mrofsnarTesueRnaC_teg
kcolBlaniFmrofsnarT
kcolBmrofsnarT
yeKetareneG
VIetareneG
rotpyrceDetaerC
rotpyrcnEetaerC
rotaremunEteG
gnirtSoT
__eulav
ekovnIdnE
ekovnInigeB
ekovnI
007b87cfa2579b99e5a4545095e9560f
rotcc.
xsvthU
>eludoM<
noitamrofnImetsyS
nocIxoBegasseM
snottuBxoBegasseM
xoBegasseM
tluseRgolaiD
epyTeulaV
noitpecxEsseccAdezirohtuanU
rtPtnIU
46tnIU
23tnIU
61tnIU
napSemiT
eldnaHtiaW
daerhT
rotinoM
gnidaerhT.metsyS
dekcolretnI
redliuBgnirtS
snoitpOxegeR
snoisserpxEralugeR.txeT.metsyS
txeT.metsyS
gnidocnE
nosirapmoCgnirtS
gnirtS
elgniS
etubirttAedoCelbaifirevnU
lapicnirPswodniW
ytitnedIswodniW
lapicnirP.ytiruceS.metsyS
eloRnItliuBswodniW
mhtiroglAcirtemmyS
652AHS
edoMgniddaP
redivorPecivreSotpyrC5DM
seziSyeK
mrofsnarTotpyrCI
mhtiroglAhsaH
edoMmaertSotpyrC
maertSotpyrC
edoMrehpiC
yhpargotpyrC.ytiruceS.metsyS
redivorPecivreSotpyrCseA
ytiruceS.metsyS
etubirttAsrellaCdetsurTyllaitraPwollA
eldnaHepyTemitnuR
eldnaHdohteMemitnuR
eldnaHdleiFemitnuR
gninoisreV.emitnuR.metsyS
etubirttAkrowemarFtegraT
yraniB.srettamroF.noitazilaireS.emitnuR.metsyS
rettamroFyraniB
etubirttAretnioPnoitcnuFdeganamnU
tnemnorivnEemitnuR
lahsraM
etubirttAelbisiVmoC
secivreSporetnI.emitnuR.metsyS
noitnevnoCgnillaC
etubirttAmsadlIsserppuS
srepleHemitnuR
etubirttAytilibitapmoCemitnuR
secivreSrelipmoC.emitnuR.metsyS
etubirttAsnoitaxaleRnoitalipmoC
secruoseR.metsyS
reganaMecruoseR
reldnaHtnevEevloseR
sgrAtnevEevloseR
setubirttAepyT
reifidoMretemaraP
ofnIretemaraP
setubirttAretemaraP
ofnIdohteM
setubirttAlpmIdohteM
esaBdohteM
setubirttAdohteM
ofnIrebmeM
redliuBepyT
redliuBretemaraP
sedoCpO
edoCpO
redliuBeludoM
redliuBdohteM
redliuBlacoL
rotareneGLI
redliuBetubirttAmotsuC
sseccAredliuBylbmessA
timE.noitcelfeR.metsyS
redliuBylbmessA
etubirttArebmeMtluafeD
ofnIrotcurtsnoC
sgalFgnidniB
redniB
etubirttAkramedarTylbmessA
etubirttAeltiTylbmessA
etubirttAtcudorPylbmessA
sgalFemaNylbmessA
emaNylbmessA
etubirttAnoisreVeliFylbmessA
etubirttAnoitpircseDylbmessA
etubirttAthgirypoCylbmessA
etubirttAnoitarugifnoCylbmessA
etubirttAynapmoCylbmessA
noitcelfeR.metsyS
ylbmessA
modnaR
tcejbO
noitpecxEdetroppuStoN
tneilCbeW
reganaMtnioPecivreS
teN.metsyS
epyTlocotorPytiruceS
etageleDtsacitluM
noitpecxEdohteMgnissiM
rehcraeStcejbOtnemeganaM
rotaremunEtcejbOtnemeganaM
noitcelloCtcejbOtnemeganaM
tcejbOesaBtnemeganaM
qniL.metsyS
elbaremunE
noitpecxEnoitarepOdilavnI
rtPtnI
maertS
maertSyromeM
ofnImetsySeliF
noitpecxEdnuoFtoNeliF
ofnIeliF
noitpecxEmaertSfOdnE
ofnIevirD
ofnIyrotceriD
yrotceriD
maertSpiZG
maertSetalfeD
noisserpmoC.OI.metsyS
edoMnoisserpmoC
maertSdereffuB
OI.metsyS
redaeRyraniB
elbasopsiDI
tluseRcnysAI
noitazilabolG.metsyS
ofnIerutluC
2`cnuF
noitpecxE
redloFlaicepS
tnemnorivnE
elgnatceR
elbuoD
noitpecxEdnuoFtoNllD
ecarTkcatS
emarFkcatS
elytSwodniWssecorP
ofnItratSssecorP
noitcelloCeludoMssecorP
eludoMssecorP
ssecorP
etubirttAedoCresUnoNreggubeD
etubirttAneddiHreggubeD
etatSelbasworBreggubeD
scitsongaiD.metsyS
etubirttAelbasworBreggubeD
etageleD
emiTetaD
trevnoC
ledoMtnenopmoC.metsyS
noitpecxE23niW
dezilaicepS.snoitcelloC.metsyS
noitcelloCeulaVemaN
esaBnoitcelloCylnOdaeR
rotaremunEI
snoitcelloC.metsyS
elbathsaH
1`tsiL
2`riaPeulaVyeK
1`rotaremunEI
1`elbaremunEI
rotaremunE
cireneG.snoitcelloC.metsyS
2`yranoitciD
tnerrucnoC.snoitcelloC.metsyS
2`yranoitciDtnerrucnoC
relipmoC.moDedoC.metsyS
etubirttAedoCdetareneG
reffuB
naelooB
retrevnoCtiB
kcabllaCcnysA
noitpecxEegnaRfOtuOtnemugrA
niamoDppA
rezilaireS
etubirttArebmeMotorP
etubirttAedulcnIotorP
etubirttAmunEotorP
fuBotorP
etubirttAtcartnoCotorP
dniKeulaVyrtsigeR
kcehCnoissimrePyeKyrtsigeR
yeKyrtsigeR
23niW.tfosorciM
yrtsigeR
desserpmoc.lld.ten-fubotorp.arutsoc
secruoser.secruoseR.seitreporP.aenbxwcqjqjtrflyfZ
lld.ipasp
lld.23resu
llD.23resu
23resu
llD.23resU
23lenrek
lld.23lenrek
smroF.swodniW.metsyS
tnemeganaM.metsyS
ten-fubotorp
gniwarD.metsyS
eroC.metsyS
metsyS
bilrocsm
lld.aenbxwcqjqjtrflyfZ
aenbxwcqjqjtrflyfZ
3)5)')
(C(>(8(
'X'R'K&
&s&f&]&?&6&,&&%
%V%M%>%-%
$v$k$X$M$C$%$
#}#t#h#3#
"|"m"e"W"B":"5"/"&"
w m d [ Q G > 5 , #
s]A
sgnirtS#
91303.0.4v
T+B2>:
a\oV`JP
iR/iNFiD
AJtGRL
=.)hIpo^
6w*3#z
dN2BUDp
fK_"^u
CbUA;7J
RO3[Dk
E*tAu}%a!0u7
@Iefk:E5
#R%aa`
~ltx*2+
r}*Rm&5c
B76O"Cc
^w:v`f
ta{DIy
Qo3C#*
eA2uhT8,
Z1GOL!
3}:>YSs
nC+R^k
_\O|/t
RMI&3}N]
=+q^U4
]2][rIa%
VDirlLp!+
kZ4q0
DY_C;|J
*uL}4y4[
R~&KIbu
PLG-XC
^q0-'X
,D<Qn;
v>4kAL6tm
lTvyH2
LFn0-5N
"+{{4
[%ilj-
Lc&jXP`
D$1Q}|C
Hgx{:I$
XYp)((
Z!gs<jQ
d:7)U*
)f(>l"&$
D|=;$E
T~E$LJnUi
W+_&[_
b"|li
Y6`mqQ
Wa8)O!
X6!YTU3
g,o4(FLz
Rd}xxg
.<nW}H
6-0ERM
5.#Pet
8lLYPW
`CMtyi
Sc>cw%
eYQpU-
c2I6ji
RU2oRB
jbb8b^
=N/?_N
e02P^"
Jc?;5E@((
Q~{_si
t&XN j
pzWHL#e
zIy9T3
_4 KLM
Uq5V9>;S^
uZH/W5
*))b3#
g!6`Q@
!~qIpo
8YIyE{e
h>\QR[
NEynNT
\X:43'3
faNbo0
fFV"=ol
S]/zc"
[Tz/=@
dTJg}3
b.'6[KP
/]#v,D
G'ZW6d
I^9w9
R)*t5bm
u>w8NY
{t3}4F
a#c}%2
lL=c+.
)lfJM}l
[_O[^T
l?-K|l
mSK^YZ
}/GV.:<
@#xUmI
I[wS~/
?Gn|3UG
y7Wk-T
c~iAy(
UejL}R
2%8J~*
lkJ[ry
S"39~q
.<Oqnrtn?
\%x;A/T
!gZL2UD
ztZa0{x'
N?.]n{n_nx<
z|Fv@{
SczoZl
Y4q4y(
HXu{N{_^
3hdld^
e|(zn~
6fmw<N
pDPw<4O
:)uu4uu
[SG[WKW^
75 ?0D
D:RAc<2
\{Daq7
+Us^<HA
; >kq`
OVcOha
4yh0+sN
4~jL"l
vCY<*K
k)2p=l
<hl--&
:.>!Z:
AvoqNa
[}9!'.J
4-6<-;
c_]c>K
R:}aj@
B?eiK;
idU&dV%
x{h#42
gTjNJe
BbO"x{
<2J G&
WCtyJu
^9|k7~s
7.Ao}R:
=2opo!6
ols(=.O
zzONmM"
*]$~Q$c:E
~XEUX.
!oN/4$
d7P\rc
U`{m!0
S9=>m&
W$z<q7J
EX.F<;
{eU?wk
"uAT6u
~r9|{|
mJm4dN
mb]]8v
RdkUG#
g}y9U)$MR
PN,9A(
G_v.yJ#v-
3}eB<|
JH=)(ai
}&oJ6~Y
K,uh}R
tfy%eX
'_.}]
}hf>g]
uUge}w
:hdhs,
HVEm/SW
wDXE1u
LK#3F2
VN6\?_
WJGqe_
j 7UoF
Mqy?PF]
a.G(2518
+D/W?A
KFO" p9
hKnP5O}
>xF?RA
c}*ohX.
Il,'J%
|!4i4$xG
Xh]GM^>!_
ode,-|
6-Mico
^D{bmiG
g;/I+X`
dxf3OJD
h@\&C:
T99v<e
qP( ]S
Q~ NX
NXk[$U
MJ:#uw
+z%l-@?|
|3,'_j
kI*w.x^
@f\-EYH
lCd#l%f\X
kkkZHs
1>x&h)2{
RvAl%e]
qp()M?{
cR=37#
GiKqtzp
7WppSpp
HwB_%J/~
Q+Xw_i
xy4A\-
?W%%r<
ySWZU(
ly/hP+
o62. 6
no6GWp
N9>cq1
*n?)bH
J#]8kH
|M,z%H
&3$IS"
Y1J!Rts:
oyBK60F
naGW:CO
uU]U=u
NU)R=!
C>,PC9
VLjrLz
v)i;=T
&aFaoB
1uf0/%
gz*TEQ
NKy{_RN
2)(kiV
_-~=uWP
z3Nnwi
{7U<kQ
psCp7&#
~VXP4O
]RO]e'
/|5O4?
b.'Uy7
BJ_L]|
g$\sX
:y^PR`iE
ov9sT9
)Z]*EAQ
i+C\Ma
nE,=j^
U<xk!<5I
kU+v-&
{luttSv
P>&9K`x7
LvOd3+3
AO<GjcY
\5bK%f,
Wnl|qVD
5"V"K4
)xk(8j
8_"AVj3
WD`tho
6p\9pv
ylZM<GT
,ly32G}
0*+eW`I
~N|xos
2Yj{TXt
tx'Bol
8%8?8X
Vstn.8
DBP}[=
UXLo*]
?$.t~ew
Li,kdk7
#L]?UzF
9D127>
9UM}9z
LI?_sF#
sMsB\9
;<<']H
F]9\bk+
7kOBOg!
d+w9!GsFz;
xD^<"Y
(&WEsV
N#eUE\/
tbs=HU
@l5`#-
xq/?U"K
Qp!Ex&t
eMrT;8,L
[:d`uFx
5 R"1V
.9^L@F
q~{<-=7
5IS<NO
YD@U&#t
;NB6eCd
ahfr,\
!'RaJ2
bp,[OX<
llo>ZF
15ATzO
F-aW:j
%Vzjk\
cZk]^qF
}azB5T
!';w58
F'\{*~
:0oTOr
IsnMr6
vDz}Gr
LqtNmm
0'z46V
r-++++s)
DkVJyb
jHSr"q
C?L?u&
CNN>a
jaaC~Q
99eAGA
-G\R'F
Joxh(88+11
6\%s5Y
TJ-X9y
S`eW '
vuZ?h!"
VxM\keM2
wuq;@J}
7w"(d8
n$g }
%$*'3K
rPaoN4
!)~2~6
hmns?6
%m]6}fF
v4#1Wa
-$)2O\
.EM`+i
([ *7cu
1c[Chj.
|e.v`/M
p0*0b}
%B<2zt
gQE`B#
A<x@~I
["@Dq=
jyG:_-SO%
@}c-p0A^
'-)9[/
/@Ln2[y
nka$".
N4IPZh
10@%`P|Y
R:bwp8
+n/T`$Cr
~Lt0`nVh4
A#Vse@
!z~C|a"/
P<!22G
=1:C^a
Mk*XQ4.
ZAlW;V
!Ze[f-H
"0w7/\5%G
BtrS_M6OSc
J%z?{j
6-4npm\t/
yR4cE]
~8)AX*
kB";\(
L/,b5,
S13s&z8
-hKhmrt
6R]7`i
NJSFt]
ZOShJa
V7c7a5
LT!8a;
,/t[pd
w53)n7
[ML;`n
~3MMuy
$cf%nx
w/$:8~
ZDDMcu
QeghgG
>%KO9E
l?&D]n
t{`w!m
t:8wpL
UQqCD$
;d#N`5
X2g~\z"
NC+*j?I
v@086
8NI`i>
.lHBiMY
iM1M$uT
|}Kso;'
Pzbv[q
q-)<47
%;:{LZ2
dgHsK4
/<n_,H
,Iv3z)
Qh8K7)
l3plulMn
GzM%CrLk~
EZoU?Q
o"i*w$nZ
vLN$G6e
M$}NZ7
&hDtMzE^
83`H=
E82H9|H
F;p!p<
_X,;Ppiy
4UGvp.e
#PaLL$=
4fh4;q]
%5kxuI
rK7}BS
UcN?oa
?WsYz9
3Q_#Yp
A{nQ[i
!%Z%lX
\kTKGN
x%q`yx[{h
WZ@He`
G?0Bmq
6Qvs_
G(XnQU*
*yDjAG
?b6fLH
Rd@b|kA
[nY%;W?
Z<ZuqA
#n@S@`
~m^*Hbh
XJ_,ig<
]UN.W>
%;Z=33_
> 8/Lj
O4tu`>q1t
c6TA4&
.t4}WQ
eL69$+1
p,)R{E
8?7KFb
zk&|6F
`#^J^%
7+l/n(
(Z(LE%
2OZA0(D`%
%x3T2\a\
Wfs.z#
A}^~FI
\Qim+\
G&(j:&
c*qdF'
7>2Vk1
'0.\]9
C]E^&3t
+merLO
1bsBokf
9AuD{
LnjtZh
+c/NLkG
J$r.V?
ED4+vg
N,(GK@W
N;z&vOO
NPp4L2
O&?fg7\Yq6B
w:y1La
1_qF>P
lGC56B
-RYFXx6)2
T:|GuU
&T7o?J
T)b0(a
~KI;iv
h3xG;g^
Ro,0`_
,*xy8=
6ssq6>
AiLEH{
ss;O[p84
psT,qc
:W1-8w
v04a,q
XAn9ts
Iuuvi#0
T7DeY!
N.r%@j
LY6;|*
0xTma%
q!RyY"
O2@cT7m
wOmWT0
5n0^A@
O(PDAPDAP
teSecruoseRemitnuR.secruoseR.metsyS#980e439165c5a77b=nekoTyeKcilbuP ,lartuen=erutluC ,0.0.0.4=noisreV ,bilrocsm ,redaeRecruoseR.secruoseR.metsySl
=wGbk5Saz1WY
=IXZmZWdC5WYjNVaz1WQ
i(6E,
i(W0,
i(&x+
(feeffefef
aefefeffef
YeffeefefeffC`
*aXfeeffefef
Yeffefeeffef
*aYeffefefef}
(aeffeeffeeffT
feeffefeeffa
effefeefeff
efefefeffef
feeffefefefp8
fefeefeffefs
effefefeeff9
effefefeeffa
effefefefp8
fefeeffef
effeefeffs
effeefeff
i(Ko,$
i(Ko,%
aeffefefefY
-_feefeffeeffa
aeffeeffeeffa
haheffefefefX
haheffefefefefY
Xfeeffefefa
}`b_
e#8vk
ajY&'o
@v p1f
~ a(V33 ec
efX*in
EYY#5T
Z f,:>
eY(J"R X!
: f<E;
jMv fc
fea&T/F X%
@i- fea
@K X"D
)& efX#i55 fP
w4 f2L
ea&EDt
fef8=_a
M eeea"c
%sl efY
EYefeX
a!_Wj ef!_Wh
L~z ea
EXefec
aY!dIE eefa$2
a">*! Y
i(\9+
coler.@
crsr.`
.edom SOD ni nur eb tonnac margorp sihT!
ZMBSJB
v4.0.30319
#Strings
<Module>
DownloadData
mscorlib
Aoskwac
Synchronized
set_AutoScaleMode
IDisposable
RuntimeFieldHandle
RuntimeTypeHandle
GetTypeFromHandle
ValueType
GetType
ApplicationSettingsBase
Dispose
Reverse
EditorBrowsableState
STAThreadAttribute
CompilerGeneratedAttribute
GuidAttribute
GeneratedCodeAttribute
DebuggerNonUserCodeAttribute
DebuggableAttribute
EditorBrowsableAttribute
ComVisibleAttribute
AssemblyTitleAttribute
AssemblyTrademarkAttribute
TargetFrameworkAttribute
AssemblyFileVersionAttribute
AssemblyConfigurationAttribute
AssemblyDescriptionAttribute
CompilationRelaxationsAttribute
AssemblyProductAttribute
AssemblyCopyrightAttribute
AssemblyCompanyAttribute
RuntimeCompatibilityAttribute
oil.exe
set_ClientSize
System.Runtime.Versioning
disposing
System.Drawing
get_ckwh
get_ckwi
set_ckwi
System.ComponentModel
ContainerControl
System
System.Configuration
System.Globalization
System.Reflection
CultureInfo
InvokeMember
Binder
ResourceManager
System.CodeDom.Compiler
IContainer
.cctor
System.Diagnostics
System.Runtime.InteropServices
System.Runtime.CompilerServices
System.Resources
Aoskwac.Properties.Resources.resources
DebuggingModes
Aoskwac.Properties
BindingFlags
Settings
System.Windows.Forms
RuntimeHelpers
Object
System.Net
WebClient
get_Text
set_Text
get_pplw
InitializeArray
get_Assembly
3System.Resources.Tools.StronglyTypedResourceBuilder
16.0.0.0
KMicrosoft.VisualStudio.Editors.SettingsDesigner.SettingsSingleFileGenerator
16.10.0.0
WrapNonExceptionThrows
Firefox
Mozilla
$f194baef-4b39-4953-bc69-679e603fb007
18.5.0.0
.NETFramework,Version=v4.0
FrameworkDisplayName
.NET Framework 4
_CorExeMain
mscoree.dll
B0E&L?<
bN@5'a
4iaL3/
PynNu3
hvZrjZ6
T%|t+-9
;;pG 
&x5eaG
=n-?fG
?>Ri,Q
C?<T.~
u;,fM\M
g{jr=
vAI)U[?
Jorze}Xv!3
WqeZv/}
E>).r8
l$4q,L
+3i\Ytmg
Uq|?\[
CY>dG@
KVZp#*X
aC[uXw
dZL1#1
JKFqGP
=t|ht;
"lG}NB
s/.sF7ZBB
~:>^Lm
(c6FwC
y5Q"aD
8>&lM~
rCN^n(
&7]}R9
dIA6UUiaP
!q`+E;
A7b%%N
iGK^a)g
=@/tQ^8
'SNoiY$0
\`xaS#
'.6n:!rY9
4'Gs[M
-]70#)C
Al^P4F
Q~x9 x
E$&>-N
)mIDAT
!jE.s
[O?,h
8Q~,v+;
$`P!hl
SH%O~Pp
ASA)#n6
2^[cZn
0dx(.v
D}V/&S
@9(p\\
tn^i5_3z
X"G#we
fdh,-]^
DQ!XeJ
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
<assemblyIdentity version="1.0.0.0" name="MyApplication.app"/>
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v2">
<security>
<requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3">
<requestedExecutionLevel level="asInvoker" uiAccess="false"/>
</requestedPrivileges>
</security>
</trustInfo>
</assembly>
0.0.0.1
noisreV ylbmessA
0.0.0.1
noisreVtcudorP
emaNtcudorP
lld.aenbxwcqjqjtrflyfZ
emaneliFlanigirO
skramedarTlageL
thgirypoClageL
lld.aenbxwcqjqjtrflyfZ
emaNlanretnI
0.0.0.1
noisreVeliF
noitpircseDeliF
emaNynapmoC
stnemmoC
0b400000
ofnIeliFgnirtS
noitalsnarT
ofnIeliFraV
OFNI_NOISREV_SV
y~y}y|y{yztwtvtublbkbjbibhbgbfbebdbcZ\Z[ISIRIQIPIOINIMILIKIJAGAFAEADACAB;=;<5756,2,1,0,/,.,-
awtdyeqlxftxgflpzus
Zfylfrtjqjqcwxbnea.Uhtvsx
Vhwjehrgqcfmwekof
Aoskwac.Properties.Resources
VS_VERSION_INFO
VarFileInfo
Translation
StringFileInfo
000004b0
Comments
Firefox
CompanyName
Mozilla
FileDescription
Firefox
FileVersion
18.5.0.0
InternalName
oil.exe
LegalCopyright
Mozilla
LegalTrademarks
OriginalFilename
oil.exe
ProductName
Firefox
ProductVersion
18.5.0.0
Assembly Version
18.5.0.0
Antivirus Signature
Bkav W32.AIDetectNet.01
Lionic Trojan.MSIL.Seraph.a!c
Elastic malicious (high confidence)
MicroWorld-eScan Clean
FireEye Generic.mg.a576c1b729d6f3a2
CAT-QuickHeal Clean
ALYac Clean
Cylance Unsafe
VIPRE Clean
Sangfor Suspicious.Win32.Save.a
K7AntiVirus Clean
BitDefender Clean
K7GW Clean
Cybereason Clean
BitDefenderTheta Gen:NN.ZemsilF.34786.Dm0@au6k@wc
VirIT Clean
Cyren W32/MSIL_Kryptik.GAD.gen!Eldorado
Symantec ML.Attribute.HighConfidence
tehtris Generic.Malware
ESET-NOD32 a variant of MSIL/GenKryptik.FXLB
Baidu Clean
TrendMicro-HouseCall TROJ_GEN.R002H0CGD22
Paloalto generic.ml
ClamAV Win.Trojan.EmbeddedDotNetBinary-9940868-0
Kaspersky HEUR:Trojan-Downloader.MSIL.Seraph.gen
Alibaba TrojanDropper:Win32/DropperX.58e2a179
NANO-Antivirus Clean
ViRobot Clean
Rising Downloader.Seraph!8.111C6 (CLOUD)
Ad-Aware Clean
Emsisoft Clean
Comodo Clean
F-Secure Trojan.TR/Dropper.MSIL.Gen
DrWeb Trojan.Inject4.37714
Zillya Clean
TrendMicro Clean
McAfee-GW-Edition Artemis!Trojan
Trapmine Clean
Sophos Mal/Generic-S
APEX Malicious
GData Win32.Trojan-Stealer.FormBook.UBGBMY
Jiangmin Clean
Webroot W32.Trojan.Gen
Avira TR/Dropper.MSIL.Gen
MAX malware (ai score=99)
Antiy-AVL Clean
Kingsoft Win32.Troj.Undef.(kcloud)
Gridinsoft Clean
Arcabit Clean
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Trojan-Downloader.MSIL.Seraph.gen
Microsoft Trojan:Win32/AgentTesla!ml
Cynet Malicious (score: 100)
AhnLab-V3 Clean
Acronis suspicious
McAfee Artemis!A576C1B729D6
TACHYON Clean
VBA32 Clean
Malwarebytes MachineLearning/Anomalous.95%
Ikarus Trojan.Inject
Panda Clean
Zoner Clean
Tencent Clean
Yandex Clean
SentinelOne Static AI - Malicious PE
MaxSecure Trojan.Malware.300983.susgen
Fortinet MSIL/Agent.MOH!tr.dldr
AVG Win32:DropperX-gen [Drp]
Avast Win32:DropperX-gen [Drp]
CrowdStrike win/malicious_confidence_100% (W)
No IRMA results available.