Static | ZeroBOX

Name	Virtual Address	Virtual Size	Size of Raw Data	Entropy
.text	0x00002000	0x0009a8a4	0x0009aa00	7.98313762361
.rsrc	0x0009e000	0x00009a2e	0x00009c00	2.38081245869
.reloc	0x000a8000	0x0000000c	0x00000200	0.101910425663

Name	Offset	Size	Language	Sub-language	File type
RT_ICON	0x0009e13c	0x000094a8	LANG_NEUTRAL	SUBLANG_NEUTRAL	data
RT_GROUP_ICON	0x000a75e4	0x00000014	LANG_NEUTRAL	SUBLANG_NEUTRAL	data
RT_VERSION	0x000a75f8	0x0000024c	LANG_NEUTRAL	SUBLANG_NEUTRAL	data
RT_MANIFEST	0x000a7844	0x000001ea	LANG_NEUTRAL	SUBLANG_NEUTRAL	XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminators

!This program cannot be run in DOS mode.

`.rsrc

@.reloc

*X*X(%

:Mz,kQ

Q'AFJ

VIu4f|

Jq .y?

kU~0GC

TBWtX&3`

?-QhV0Y/

^=JV73

i|?1`W!n2Z

B+QD;>

F47;@t

MJU%[L

r,NI"7

Q19(ms9

yRG(I+8

\\*0s~

+}]a 9

_TSz1}+

TvA?L[

B_ bZ6

.@w 3n

ssn3REq

igir9

bw@OxI

7&4r-1

k@(A`J+

wE~.g8Y

sb3fc~&1

1tA:b!

b47?:,

9stwI~

(XWLJ |(<)

u|.0jK

\5%HBG

2N5p6E

X6po;~H

[n05Ih

/ :lpP

G@_I5-

cF"<W(!

{L:J1P

c|Rj"y

:9j\~!

yQX$Rf

0/e.';

g7PA6w

[=7.%zuI

ab{2H@~;

+YSCdpx

zH=/hy

_$^_1

vR]OC&o7

%]=t;+

w?j^eo

up4ka2

4s4A*n

Jh 8k#

x&Puyk*

W)nABB

!|ct4K

+]9H'*

ocarJ(

l|3K<I

%mA+,5

!YBr.-

UnBkYKm

f*gWhZO

UpsYd#

Dt~T]D

-g@\>r

r6?n!q

cBP:"(%S

o7pp#u

m_Bwab*

62Cu<'

qj^$@OS

8 EjUX

j.Z'N7X

7(A`C\S

BTnW1Y

HHJ ?

Z2phrpv

L3DwsaX

J(gNzTE%

)}th@Yt

N&JW}Z

SnLNI0V

\:dT/@

%]!U%$

KS5[a3

>b!!km

d_Gvm)

XtE+*S

PTD#oU5

C3|Eb;zS

wL9yLo

3|?Lg_)0

]cf(]s27

OpXe<CE

?f\}c

mhp5-=)

/7*3A=l

Z5!SGW@m\Yy

`CP-^c$

XM9-C$

:b'3Q'

`ZYCN0

9fVPRw|o

|qbnZ]

Z8[5R6

-aU{nmX

K)xrI}

a;(+$ 6

\hBP

.=sf0v!*

z_VC/>

rlaXJP

jN1 V7

M!B9~?

A/g#dZ

yx^k0]ysO

Cn7Ce

pJ:P`!

+wH>y8

Fd4Z+a

\mnQ"'

19[jxNl9

P3a*]b!

zW^mB

~c~{gC

Y|/Z?

SgAH7Lv

;W+,Kp@

HOv1~VU

,FoaCIKMS^

kX=7'v

[3f)fa

x})K1e

#h)u\C

G^KYR

aH?Xk]s

qV*pFH+V

BwTDk9

|W-F7Kk

^EWe:L

^)@mNo~

BqrFUuUD

(DvjLks

PtbN>n

g2Cz!*

;>>Qe_b

J"Az|nac

E.*G/ S

Gj5$;)`?

I!+' 9s5,

LhW$Pu

La)Kavy

IR1uYc

:L08ag%|

c-YrfS

wxs+$1

Iz0yc

UA-[.Q

?Ygf)R

w(V1$\

^,!8^`5

GT99

nS{=\r

NfG<3_

gK%UkJ:#(\

q)OtG\

"'u/;%

WK+6_H

ww>AHb

6m<|B7

iFkxlY

En|*CG

6|$W0R

XONdr~b

*97dV

_7JNX-

Aqc:X(

J~e'UU

?r`TDH$

*.[?x)

0VN}Zz

|~;8B]B/D

)4SMSt

L=$B!`9

-TM?le

hY!q`{

C1 IQ

++*P\'

7kN9VO

Hqxr?{

x| & C

N{FTeF

".dUzG

^Z)^oS

#z:.xu

bBV?g9

CN%R N

N`2RH_

{YP[!v

loL_>N

_ulfR^'

[G&;8L

?bII)Yz

E%akrp1

S\bl4\

0[s?{C

S&g$Em

7W$Z\

?ieVoM

hP:En'

N9s='\

bnKe9[

#Eao7;

~7a`V@

J2ubIol\H

b]E9#EY)9

>ExwL^

Hm/)6

/iNh@h

D@zOQHIN

O:\Y0Dvy

3pI7,L

S|veh?

MXSx>F

5K;|cO

@)b8\M

]Pb1NIy

7|~O]GH

QcT&!jAJ-

\h]xkj

'oue&x0

.c7C<`3

sD6~Ji

Zoj^L?

GKK;}c

u?vOM|c

PSx`6)

rUe<w

#FvAj

[lt3z$Qe

P-20YM`9

>5:>'V3

R(a"s#

LM._/~m

UND)/~s

fl7qg`

~+!9GHj0

(@/CZC#

`qe?qlY

-Yw#]|

ZQ2B9

b>NUGS

[dzWgT.

zN+Z:g]

qz1;Ne

C]R@ERb

z!0XG_uW

QvryjU

afdZ*~

zo/IDU`

KP3PA3

<}|^|\

&MbOu

@^gD}1)

^_-jQpo

r/Uu?|z

azyu2/nj<ay

Ij'2r1)N

E,w0O>

Sm?#J|

e-ZJ&UU

A6X[;E

JObo("

kg+S+8

#E:xob

z?VB^?

^M+S*&0"

vr![CE

K cD\!

@OMdP0

-I;.\3w(H

Z}4VA\/

;#S7dG.;

7+ jQd

Z;3aeM

] (6=-

AaJ{_T&

Op[Qm$ER

K-L%=#

~KWj0f

VIK]i,d

xL+OldX

q=N1\(

qY:b-v

R.{4u*

j C95B

^}.EVR

^4*e&4

A$);Q[

GBgrKfj

4vtFv9

9>z<{X[

*1LL':

oI+?v}

hI<a(k+"

eG?Hsr8Se

h^G_#ub]7

geiW-lO

]v=]9=

M-#Qzh

Nb+SH>

?s43d=%

GwFLhh

]\s=K

RD05hfZ

](s'ly

v/q[\u

J\%sTu

j(,5wy

$nvY}

9)fi.:L

{0c!Pu

dOLK8g

Gc(<KWv

R~GL{m}x

Apmy S

xIJvN9

/@4Id$.

\\buwuiH

i3J8Cu

Z$_A?]

>%=e&S

Tkp@N=

F5<<qg

8>35?i

`Wp'l&,

2^p::tEx

/mT+$a

*tbndm

_Pa0$P

uA#{41?

]Mhk{5)

F'#ZO5:tZ

bEu=y:

%6tew^

(UTD@']

)ONtJy

zT]GH}

(b$NvS

*fM,I6

9^T;1DE

16?e|\=

v/Sjdg

YZ<Irq3g

,yWH#$v

M){&/=

-1XeN7

]+JibfI>

aEySVe

GY//+E

Rpm<[nyX

GC<*mDb

-d)X^s

54Y90o

5}@V`9

[Nr_Rf9

i}P,3:+

Py'\x]

Ovnzk`?

htMmiC

d,YD"

]5zb +

qPm/iuG

O3^FfYm

_ywGcZ

HWuhAZ

-.g3KM

YmYs|g2

32IQ'Z

e 4v T

5>elRh

Hnz}nk

.("pYP

eN;Ayq

C-,"|H;

<hV&Qsl

z]*SY8t

H9E)<'v

Rm4tk5l

:7!/>C;4

51}Y$&

n3*hUq

I*Jq8A*

lW6u#h)f

`M ERig

:\KAp:W~

&:[))w

&@4GXK

=917UU

WhAr~NC

~g. J5

c^ V"<#

b}#Ldv

;7^<b":^e

G[~8gF

e;3H\

hLW6q;

/*Bi]i

n[Tk

Y]JCVC?C:,~`

XC[xfG^9

wjv@*2ZG

B>C#{P

g&KH#s

F>XlBI

_a#Wi/g

=66{X)0a$

}.0Z>m

3#%C(9

rR+Kad

v,[E98?

USC`u"

@E7'=5

9*[x[u

#d,DzmI

PsKDM0

DJzj{X

mP~+p/8

Oi:SUg~

vB^H>%<^

{jlBRn\

#N<0D+

p8`ge5N%C

M`_C[p

CNz~I,.

+GR9e

YB/<4%

BhB="":9

w4n75N|B~

E<k$Ok

u}/Dw

F#_8:V

g/5VhzKnR

FKer</

C!"@W

(,p4*(

h>#T&y

pK[\+%

$qr;20

|~+]~4

}\S(Bo

pt/yCy

ZR"k-L

u@G{g

fX!>3GU

Ho~9F'

=, 0Y8

())<"&V

3K1LvG

cI%eA

H_gJH|

m<yyYx

{Q9knN<U

;<&Ujj

&H|}!w

5qJ4yq

1wCv~1Pm1X~\

4y@zzT

;.=Yf1g

+_~MHkQW

sYS6@L

"Ehx|?

~H"@vD

?jdFGsW

5!+9jFS

|'5wt

oAc1p?

CJ<72,

=\^/!P

A&@^@H

Xm(Dw@K

FaPi`iK

UQp.YL

.QR,[)^

3<acKh

q22#3`

K7eYeC

d>9$K(

^fzWNU7

H(nOow

.8Q 0k3

D\"$[X

i]0/w=

)EH2N6

t$_9]x

hL|io_%FL

ctv_Cy

"M;sI{

9-6z>KE

ay<CaW

=Zz1$=

D-EZ`vi!

^>bhnB

lk^5Gn

$\|tj(

8asU|$

U|8*dcS

Bi`FJ/

HaN Wp

8P=cZYI

wX>jYP

F7#DsG

$1u63G

)J+|^q

"2vFuZA

75zz^7@

L*}kwm

!#*Bu1

c.*V_v

PYyO<

4.IiW>'

[6_3J&%]:

?@}1muI

nos)r<Z

el?3l6i3%

Cky*xE0

IN44k8

-}5%{9

!/}Q|fx

hH>:)&h4

6fyHgT

YP,?opJ

R~*D&N6

U]r(

G8;:t*

~MwkDo

@9,#ua

*Q:[6D

ui_G*{

Eh+*Xgz

\WfRuA

=5~yf7Y!;

18^TrS

KvE[_hS

Ur+)Kh

9ZCLKP

Rix_utCG

V`w$0d

,d{CIZ

OE@$b0

fRZe)\*

4|d^ah=

$G#Yps

y~KHbo

u/+_h [

y=0h(

hL>ek$Uv~B

qd6k{?Hbd

r^CSgdI

@i|8Zh

opXbuP

R@Nf2~

mA<\8g

`CYo=Qo

Vx{i)?

{+ qf>

2j{]^$

zx*SK*ni

DoHdX92

p[2-"&[mi

rYS?Id

Jx^fq{

\M,DkF

ro#;!7

irJ(TE

E5|GnAy

10_j&~

s clYu

.dq,@p

8gx"WrYf

hnQG\$

9`9n(_

C9U{Qtw

aFH<.:

REOSX5

}<`X)P

65gN_$

>|<!ig

5L:!e3

ks&R;W;

gG2Rh_*

X}Rb:8

q|xpy

x133[^

e#=}u~U

!*s/WD

=[sXtH|

M6Aa1)

+ GfH9

[FkqFE

a\zi$4d2

9cG^^D

\6\=)

*e'KS}C

sC1"#H=

]rbm":

;M`o4o

H+'',_

?i-UpSr

Ot+Uw8

}V16u])

`+ugu0

xqA8`8w

`dau|%6

&Q`"'

mXYZ<-i

U#E8vLR

/!)go!

?OG\^J

]Mf#Z!

9Pqdyd

P?i\3a#@&

>GN:b=;

C0D@SY

g%7[x\

@G$@XX

0|K9#?

@4|r);

YwiUZ3

Cf}/?}

Uy3c$D

WqFv$[

ZYsNmV

!J;ved

%m{~ZzIwNF|

mx}"<4P

QCdC7\

LR=:7X

zEf>[a

G,*OmjR-T

[v/l1&G

[huc"\m

QikBHy

OzZ+?pZ

Et6GdQ}

wv,$,[

T,zY*qe

@SP+$n99

\/${~l

HXd2]V

oS#pT;4!

M]Kt?c>e%

e{N;U<

{lP.8f

:m46_8

]Y`,iIPg

.bk=bx

iuwdLK,

(IOOah

a[jFp<

s^<5lY

l(6La:=

8z|~(v&

poCz)U

%mkEdi

/qCgC_^

@MqM7MC,

Q3Z16L@!

U<R-;u

M\v<>D

L?JQ7`n

Prl?"U

G/Xm'y

{FMT0\

1e\6l>5d

08M-@(M

g9P7,'

8/hX7M

L#(ak!i

`"E!/on

6=~M{3

[?-SW.

C_<@tC

|jY1':S

,!^*x}

mbOR6T

GFU4D.

wZXDf0

]1%vo

`Coj"Vvq

W9>4b

k22d`hX

mx7\tX

|Bs}wAu^

wR&.eQ

7bdA:W

;%1/\J|

;+|l a

B#!;Dcu9

?A!8`

/aMe0r

eZ2\I

UlD";hL

/k1YE&

tA Gy.

>Qh${1

" z;#,

V$*[5'

_cs[.C

BT;2S^5

07|~S*G=

..xh#2

0YR)og_

pM_vde

)D~4vs`

JgCly(T

U~Fe!Vr

"FWj=i

)&4R9Rw

H@)N|V

h_{J_,~

)EIiOm

,Z*[5)b^

_Ivij?

ZU^s^Xo

1@w"r;

!7Ubd=w1

^WDH?7$

"qUXDT

U(>%}Z

U|w nq

Vdcx-is

uXB({|0

~{zbY}

+s%<Nb

59~}tsm5

g;<7.5

PJ,/R

kF0Rc~

h!-c^'E2

V^igT

%ipt+*

[&VrSV5

#K^#8^m

:h:gg9

GBn;6L$

=,UQcy

Z{+Mf~

M$uK8XZ

-0ph?J

Wc='/q

bv/Pon]

>Az[8|

:ULiUu5

pnI+zR

^XkW$&

f8/R`K

z WPA&

bmq,ag

\Ltxjx

Ll:tGD

7Fz%;r<

qw9l*,xt

_ak47&+'

2;wgc_

]"A:#,

kD+mnW

Y-`Vo!:s

{9dv,\

cz]Ib(T

:cgTp~

J0FV#l]Z

,~i"Ue

otG/&#

SG\0!h

8;@,)

k/(g&K

7,&4P

%97T`"

[%Tl.Uz

rcec-~

~wQqx@

DnE?C<QrnR

am7wd#

Ybu6u`

KLV\WO

:3VsI-

i,"Pl=H

G *gFZq

0_o&.H

&Jbe&tV

lNSr-Q8

gc\$0"

C/^B1>

(pdFF)

kc,\EPc_+

i8AyET

J;Uk/6

-H&esG

&UcRFc

E8k\6%

j ,_pb&

.^yF*$L

!6/x!XN1Nz

Tdq;6?

92,VcB

S{0R>u

&|~j`f

S=&K B

(hs7/N

}"b&0Z

:/Pw(c

6ws{O

"2!gZp

Fp.XT]

Kd>Ay.

!VqkYQ

9AJXy$\Og

mio&}G

HH 5=n

pKISl;

fHEgm*

/u<0U<

BgxW`l

sqlv0z

T[?` 8

?@; R

TC}nu{D

/IS(Ge

aFo_h"

?D2%LmK*

$`+0r{t

.3.vO?d

xys%+*

'(#~'n

`p{P9 <y

"(Ph=;~

B!)JO3e

sB$[jS

"f)>IA

gWm~e/M

wnW!:`G

LDLV%j

7YKJvkSG0

igyIB:

+t,eUHY

K%:y c

jEC7R5,

Czqm1F[

iVZFWH9h'

jGumI+

eLb_8kl

7J!KK&

M@g*N;

zY)]@to)

keAK'!

H^}~qk

|Mf0$1

1L,G'a~

i*eh~U;

y}q,No^

wICq1i

s_{wKM

Ch#VgK

;4Fg

b"5> 42e

&<Nw=a

6Ra'[8

e^B|!A}

xJ05/:E%

9aX}~K

m'9)#Jn

m+h"ix%

cq-iQR.

y`5Pon

{<UnY;V

6>_/>bT) '

DL<BOb

zb,Z{&

ap>@aU

*V~pF`

yuk<-3

;$Qs+N#

6msCS

q$U}9u

P3qhLs

.VlmTa

hS`r]/

Vf2{Ku&u

E&|)m#S

>DfADG

]}3PPu

IDS(v6

;>v"B/

K[psl<

7*I^hS

58xNh6

pwLU7tg

Z}Hq+

2T^+(&

vNErg2t=<

`!ji0\

qLRAF+A

T)LO]4Z

&&3!?(

[,.8KL2

vtGALY

7pkPy{G$

Wh<FWt`

5BBGnX*

%D:5gBp;

86!Ai\L

.NHl5e\S7^UYjJ

;)x\sg

A7ox-@5

up71r2

r^3UxU

!~gbr(

V;ms>tcB

GiAZ0}

~'. "4

@\AAP$

ofX@lT

'l@fEP

$4FkX3

7,$SLo

OEvfV4>hc

zVz~e9

%o;4IV

S7Y}QE0

,V4E;R

j9j%)vr)

BDDuIy

)NIG(x

t78[-L

3a!3,$

t$ lm$

#2L1a=

IJfS\i

Cc.u"2

HvV~NH

l9:flV

SU1n?\

5c\;{]

IW)=mZ

p;YlcA

iN+e<|

u"?z4;=]

uA@&A&E

^"(k[pd

|}PzFA

Yjb5s%

txbu'i

c K|nA

X:QU,mX

hTU9+k

mokIm0

}>YgclV

k<=WZP

j%}V;F

F%4c !U

,`oRA_

1dF_hn

l~6nDf

tw$84

I\j?)-u

(M7"z)

Hez WmI

,2|kM_

2HpEc(

Go"!5%

3iW&Fz

7,WzlLzfNi;

~^yrM"

l|NKx;

5ex,fB

2Ky49H

U|BWVGB4

(suYr~

9}|g>W

M3ok((

^W$~ y

UalX5rM3

=OeI+Qu

,VVrl/v

8bt=:

O"niN=9a

9!Vlm0

OM9t@8C

WJRAEl

?`v-yI

>IXX.o

Hhv,|

8O96DI_

!Oa7p+

&O:ubEq

t.q2S!

]\<o?id}<

=,bPXr..g

$!|UM+

5!PA+]

O8=$yr

wxw=>05~

$?iOn

*%,`k_

o7G@;)

#Ngmcv

M*lLEz

gHj{3*a

,"j+40

+8]Gel

?'\_]

@sc}r2

+)sRT5XP

g(e^S7

iSsyx8

;ga<Td

+d\L_

zai]&z

W7XSe]

odM~a-n

s2$8|{

%m<%Q}Bj

wNjSUkE

nv'$__t

:caGaN

>:DjDtWV

n@&X.k

ciN"TH

h_PXKn

Emo-n\J

d(>y,H

^8=]aP

r=YPov

o@q6j7y

7*jvte

h^p&J7

1+R{L6

x>]]%O

bLNA-W]0k

3JKCjh

Vb^:/vA:

sq.8%

u0-iD!(

nWZs-}

v4.0.30319

#Strings

Reserved1

ToUInt32

ToInt32

Reserved2

ToInt16

get_UTF8

PROCESS_SET_QUOTA

WRITE_DAC

PROCESS_CREATE_THREAD

PROCESS_VM_READ

STANDARD_RIGHTS_REQUIRED

PROCESS_DUP_HANDLE

PROCESS_SUSPEND_RESUME

PROCESS_TERMINATE

DELETE

PROCESS_VM_WRITE

SYNCHRONIZE

2dGOOapgIK

READ_CONTROL

PROCESS_QUERY_LIMITED_INFORMATION

PROCESS_SET_INFORMATION

PROCESS_QUERY_INFORMATION

PROCESS_VM_OPERATION

System.IO

ITE_OWNER

PROCESS_ALL_ACCESS

PROCESS_CREATE_PROCESS

set_IV

value__

mscorlib

ThreadId

ProcessId

GetProcessById

ResumeThread

RijndaelManaged

GenericAce

CommonAce

InsertAce

set_Mode

CryptoStreamMode

CipherMode

IDisposable

ThreadHandle

RuntimeFieldHandle

RuntimeTypeHandle

GetTypeFromHandle

ProcessHandle

Console

WriteLine

WellKnownSidType

ValueType

Dispose

CompilerGeneratedAttribute

UnverifiableCodeAttribute

CompilationRelaxationsAttribute

RuntimeCompatibilityAttribute

SuppressUnmanagedCodeSecurityAttribute

get_Size

get_BlockSize

set_BlockSize

get_KeySize

set_KeySize

SizeOf

Encoding

FromBase64String

GetString

get_Length

get_BinaryLength

Marshal

System.Security.Principal

RawAcl

get_DiscretionaryAcl

System.ComponentModel

advapi32.dll

kernel32.dll

ntdll.dll

System.Security.AccessControl

GetManifestResourceStream

CryptoStream

MemoryStream

System

SymmetricAlgorithm

GetBinaryForm

ICryptoTransform

NtUnmapViewOfSection

System.Reflection

Win32Exception

Desktop

Buffer

AceQualifier

SecurityIdentifier

BitConverter

StdError

GenericSecurityDescriptor

RawSecurityDescriptor

CreateDecryptor

IntPtr

System.Diagnostics

System.Runtime.InteropServices

System.Runtime.CompilerServices

Rfc2898DeriveBytes

GetBytes

AceFlags

RuntimeHelpers

CreateProcess

Object

Convert

StdInput

StdOutput

System.Text

Wow64GetThreadContext

Wow64SetThreadContext

VirtualAllocEx

InitializeArray

ToArray

set_Key

System.Security.Cryptography

GetExecutingAssembly

BlockCopy

ReadProcessMemory

WriteProcessMemory

System.Security

GetKernelObjectSecurity

SetKernelObjectSecurity

Cronos-Crypter

System.Security.Permissions.SecurityPermissionAttribute, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089

SkipVerification

WrapNonExceptionThrows

_CorExeMain

mscoree.dll

z!hez!h

z!hMz!h

z!hEz!h

z!hz!h

z!h#z!h

z!h?z!h

z!h#z!h

z!htz!h

z!h)z!h

z!h1z!h

z!h6z!h

z!h;z!h

BBB[BBB

z!h:z!h

BBBdBBB

z!h?z!h

BBBbBBB

z!hPz!h

z!hDz!h

BBBbBBB

z!hDz!h

z!hNz!h

BBBbBBB

z!h9z!h

z!hwz!h

BBBfBBB

z!h1z!h

BBB!BBBVBBBVBBBVBBBVBBBVBBBVBBBVBBBVBBBVBBBVBBBVBBBVBBBVBBBVBBBVBBBVBBBVBBBVBBBVBBBVBBBVBBBVBBBVBBBVBBBVBBBVBBBVBBBVBBBVBBBeBBB

z!h-z!h

z!h%z!h

z!h&z!h

z!h:z!h

z!h8z!h

z!hMz!h

z!hcz!h

z!hzz!h

z!h,z!hnz!h

z!htz!h

z!hvz!h

z!hyz!h

z!h{z!h

z!h^z!h

z!hlz!h

z!h6z!h

z!h}z!h

z!h?z!h=

BBBPBBB

BBBiBBB

z!hWz!h

z!hNz!h

<?xml version="1.0" encoding="UTF-8" standalone="yes"?>

</requestedPrivileges>

</security>

</trustInfo>

</assembly>

MmRHT09hcGdJSw==

NndnSzNSYlF4Tg==

QzpcV2luZG93c1xNaWNyb3NvZnQuTkVUXEZyYW1ld29ya1x2NC4wLjMwMzE5XFJlZ0FzbS5leGU=

I2NtZA==

Cronos-Crypter

VS_VERSION_INFO

VarFileInfo

Translation

StringFileInfo

000004b0

FileDescription

FileVersion

0.0.0.0

InternalName

HJKIOWE73.exe

LegalCopyright

OriginalFilename

HJKIOWE73.exe

ProductVersion

0.0.0.0

Assembly Version

0.0.0.0

Antivirus	Signature
Bkav	W32.AIDetectNet.01
Lionic	Trojan.Win32.Crysan.4!c
Elastic	malicious (high confidence)
ClamAV	Clean
FireEye	Generic.mg.556084cf64aec63e
CAT-QuickHeal	Clean
ALYac	IL:Trojan.MSILZilla.17516
Cylance	Unsafe
Zillya	Clean
Sangfor	Suspicious.Win32.Save.a
K7AntiVirus	Trojan ( 004a8e821 )
BitDefender	IL:Trojan.MSILZilla.17516
K7GW	Clean
Cybereason	malicious.f64aec
Baidu	Clean
VirIT	Clean
Cyren	Clean
Symantec	ML.Attribute.HighConfidence
tehtris	Clean
ESET-NOD32	a variant of MSIL/Injector.FCD
APEX	Malicious
Paloalto	Clean
Cynet	Malicious (score: 100)
Kaspersky	HEUR:Backdoor.MSIL.Crysan.gen
Alibaba	Trojan:Win32/runner.ali1000123
NANO-Antivirus	Clean
ViRobot	Clean
MicroWorld-eScan	IL:Trojan.MSILZilla.17516
Rising	Backdoor.Crysan!8.10ECA (CLOUD)
Ad-Aware	IL:Trojan.MSILZilla.17516
Emsisoft	IL:Trojan.MSILZilla.17516 (B)
Comodo	Clean
F-Secure	Clean
DrWeb	Trojan.InjectNET.14
VIPRE	IL:Trojan.MSILZilla.17516
TrendMicro	TROJ_GEN.R002C0DLB22
McAfee-GW-Edition	BehavesLike.Win32.Generic.jc
Trapmine	suspicious.low.ml.score
CMC	Clean
Sophos	ML/PE-A
Ikarus	Trojan.MSIL.Injector
GData	IL:Trojan.MSILZilla.17516
Jiangmin	Clean
Webroot	Clean
Avira	TR/Dropper.Gen
MAX	malware (ai score=82)
Antiy-AVL	Clean
Kingsoft	Clean
Gridinsoft	Trojan.Win32.Downloader.sa
Arcabit	IL:Trojan.MSILZilla.D446C
SUPERAntiSpyware	Clean
ZoneAlarm	Clean
Microsoft	VirTool:MSIL/ResInject!MTB
Google	Detected
AhnLab-V3	Trojan/Win.MSILZilla.C5129545
Acronis	suspicious
McAfee	GenericRXUM-PS!556084CF64AE
TACHYON	Clean
VBA32	Clean
Malwarebytes	Malware.AI.4221048470
Panda	Trj/CI.A
Zoner	Clean
TrendMicro-HouseCall	TROJ_GEN.R002C0DLB22
Tencent	Msil.Backdoor.Crysan.Qimw
Yandex	Clean
SentinelOne	Static AI - Malicious PE
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	MSIL/Injector.FCD!tr
BitDefenderTheta	Gen:NN.ZemsilF.36106.Pm0@aC9D6gl
AVG	Win32:InjectorX-gen [Trj]
Avast	Win32:InjectorX-gen [Trj]

Static Analysis

PE Compile Time

PE Imphash

Sections

Resources

Imports