Static | ZeroBOX

PE Compile Time

2022-12-23 06:49:53

PE Imphash

f34d5f2d4577ed6d9ceec516c1f5a744

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00002000 0x003eae74 0x003eb000 6.39759686206
.rsrc 0x003ee000 0x00009b18 0x00009c00 2.41355500114
.reloc 0x003f8000 0x0000000c 0x00000200 0.0980041756627

Resources

Name Offset Size Language Sub-language File type
RT_ICON 0x003ee130 0x000094a8 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x003f75d8 0x00000014 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_VERSION 0x003f75ec 0x00000340 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_MANIFEST 0x003f792c 0x000001ea LANG_NEUTRAL SUBLANG_NEUTRAL XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminators

Imports

Library mscoree.dll:
0x402000 _CorExeMain

!This program cannot be run in DOS mode.
`.rsrc
@.reloc
(FNf] k,Y
W4"l [
(2e#B
Ke W.&
(o_v4
(5zH`
(nblO"
Bd B+t
GJ"b%7
(7GYV Ne
(,QO@"
(lx)<"
(X@"R"
2>R">|g
(v+c\
(l"Qg
zx2 q+N
(uf&n"
(5BjP
(9..3 Q
(|4SH
(BU`I"
(?ixJ
(kt$5"
(}qx7"
",R lI.
hd ,Dy
(-5%N"i
2c 2Y8
(OK+5 .
(mT)Q"
(7?jU 6
(8 )a"
(HFdX
n1= r"
kQn >"k
Ngg X#
((xlg
?j":.z
(8(=2
(u?sO
(d`~1
fO W C
R~@ :A0
(k-Ka"
(RIlN
(r/[W"X
(xe$_
4m"k#V
(/o*O
(zSU2
e1"Vvx
(fRNG
(:$\J
c=\ $7
(&oun
Y$. M/
(2Z#l
(.//h"
('KnI
(8[p\ ,;
(vhHk
(3;8b 0<
(}37\ W
(cW~F"
\{=":u.
(OmJ3 Fg
K9j tB
,}e xC
(O9kJ
(%Ng`
(OD=]"z
=/P"Hd
4'; BG
(>3NJ
(ANEm i
(hghg n
('~S3
h%l"oR>
({{{j
$R 4/'
$1G %X
(^=CD jO
/] >:c
(G+k` U
(4?nd
(#[b.
(4.Lf BX
!pH pZ
q*\"xI
:Jn xsE
yK> _"~
(u~*]"{
(<#]V e
C6 B^
(IEQ^
7F="<8
36 b`
(/3Nb 7
(wsY6 :t
3 N l{
bC 9im
(u?J v
Uk[",d
(=!WP
xB OEm
9O 'x
(xABK A
(=QUJ .i
(EU2@"
(Nln6
8CN N`
!7I |j
(x(ui }7
Q!< Pl
J0 *n
(J'\e
(4U<j
a_ z?7
i\^"q=
(;T.B `r
(bF*b"T
vI qxo
( Fad
(HV-.
(FjmQ Pv
(u/|1
(x@ST
(VSHg
(k?8K J
$@J "z
(''}h
(}TTa JU
((S(I c
Q_C 6|
Jf"6yV
2J2 u]
(F5X4
($D;h V
eV\ ub
(i94h
()iKM
(`2q0 Y
(=L> )
\^"af-
(z;(` u
((_O4
(nTHL aH
( )kk"
(OLGl"P
(duc9 |h
(Y|gm
cb ]Nq
T."e9:
(mI5Z bW
(qQC["
(Kf(9
D0 w{M
(AWMl"A
(t[Ld D
(c%C[
gB % ]
ve j<{
($"lN
_.a +?
($C|9
(Rz.Z
jj YM2
(qz{f
Y\ ;W
(\kbn"
(orb4
(OekI"
(aK(1
(ljD4
(D{T\"
(Hv=U
(:zPN #
(vuf3 =
yHC"tx
(HLrS E
(1[>Z"H
(=sxD
(#Jw7"
(Qm,e 8
(xm$<
($a>k"1
)5[ "=-
(b$#9
(A;wM K>
(D#UV"
(&q#V l
( V`C fZ
-j"^#h
(#|SI 
([lr?"
o: %P
@M &7t
(K y1
(vcc/"c_
*e uKf
(46\a 6
(X]xG
(NNIm &
BAZ +*B
EV"0~D
(8f;6
(>2ea
(JB5N b
(:h'>
GIn oK
(~k+J
(vzFA $
Xb )C9
-X;"[W7
(fQF6
(o](M ,
(dUiL
(0Xzc
Yig QO
(p_`G
(sqb/"
(9l@K
e3 [i.
(Kq}Z z
Rj` S
(fZ'd j
VF"Riy
(G"-/ <
(wI2L
(S'*1 d
{.N R<y
m[ -6V
(p~6@ ^
(LRz2 (
("T"^"
(X*pC B
(%*R0"_
(@]:1
(Wa)Q
(`6z> l
bC Vxv
(RPBJ"
LM _m~
(w_-a"
(rkYH
(Ugn_ Fg+
([JbM
(]_CY
L/",:(
A3O 7a(
(-nc;
(<vRf
N{k R=B
(?yh8
(4Ce1"
2Y` Y
3eY I/
(`U?n"
(7F%I
(F5KY (
(~dOb
(L,G[
(`'$` 4
?H? MwT
(SPq;"
y&I |`
([%"i"
(G!$F A
(Tw7D"
{f 1Up
6<"p\I
(Y}dH
_K"Vq0
(^67i
(kz{F
'm" @;
(G<a0 8
(F4He
(92n/ j
(2mYU"
(aleD
(P{VV"
E5 m@r
(wK=@ ]
(8(l/ l
BoC"$p
(Hzo5
(Ok';
(][}A
(DA3;"F
(l4&R
(XFo4 \
(5dv_
(#^k_"
(DF<B"
'6 :2*
(u2+C /
(7|D5 @
(fM+0 g
]6b"NO
(+BF^
(fsME T
(.*n?
(`!hY
8="H9i
(5@4c"
("$V;
VX IpI
Y3 2;r
(MSn9 V
(Io?.
(X8HW
(}8Kg
(^ADE &
(A+_K #
(}YGa
jkM 5:z
(pF@0"H
(hNJn
(}t:M
(^*mU
(38cD"
il"z~o
(92TH T
(7).R
o+k L0
AL U/6
(*3nb
>; #B7
(ik)L
("24] L3k
(J#QF l
(UPz/
"z["nF
60; J/
.$c cO
(Q$wG M
7]b ~1
(3[Gd
(_y;.
(iwbG
(5QB`
(kW)2
8.J"RB
(IYgR
(.zgl
(WDF5
NlB `;
(slj^"
(fXgZ v<
(i<wk =
(\(l< ;
(A:DB 2
(("OL
(y71\ NB
#+T Ge
'@ iQ;
N"K 0C
(h^.X"
s\"0'y
vS :~H
(#5&W
HI"Cz
(ea(Y
(b8JD
(&*KA y
(Xsq8
(?zjT"=
(#3*d J
(d8mZ
,34 >R
O:n IB
(.[j;
(OBT[
(PwBP
(AXE7 |W
(f}\P"
(_uVO 
(QV<a
(7/Ya ;
(3\p^
(3KlK
(v3m5
(ZB:1"
(hsN\"
( .hZ
coA V`
(AjO"
('b6e
(&d_\ ta
OVa A+
(hm[c"
(HJ>9
(qA$8
,'V |e
(2"Zf"M
(4&J/
fpN kD_
]n D)
(Xcy.
AG zs.
x]R .k
FFV I;8
78"2nS
(S$]5
qI t:
(8PL
(Su]< |`
Z}K 4ft
(I1$;"P
:N7 vn
(/4;0"
!N :[
(DSwO
,/ ==d
\;h fr
(pU\^ ,s
(\?_O
}Y; zt
(g( 3
(aN.1
(fY<0
(^%BT
(:":V
J9b Bz
k<Q" e
(6Tt] g
R9 KRw
(jjMS
(FjpR
(@A5?"
(?_:@ <~
(E&Ck
(lh>i
(7u~K
(eYP= \
(!6CX y
(x_>8
(n@a1
(&x9H"T
(gioE
(sPJ?
(a.-0"
(wF1Q
QZ ^Sg
<` Zga
(5#@4"7
(Xn,l z
(V#M7 z
+JJ =u
(EuV> '
lf )Q
MXa Ky
(',]e"
(P[a x
B= L#F
(oE#N"XP
'_ +K*
WV oGg
(!2OT
E7 !lg
(V2kU
(@kY:
(<ufj"
(Oc*F"
(!v~5
@~U hy
.C G=
(0%PT 8
:ML .7&
(jnna
Bem Q&3
(Wu^=
(Jc\9
dz5 6M
(&n2d
gR_ %xp
(bAzk
(`l^L"
GuX 9S"
(S&Gk
(o{nh
(4Z4n
(njG? \
(1xzk 1}t
(oiS6"D{
(kI~B
,b9 CaL
("7K/"
()IIl
({f\C !
?S Fc'
~M["2H
"F mJ
(k~2X
(QqqH :S
(R~[0
(6^T\
(q[V
(C?sA
([a5P
(j}O]
(z{!?"f<^
$U wP
+xU"\r
(v10U
(}X\Z
Mb r_5
(Sa|_ &O
(ILGn"^
(D%/U"
(?ln6"
Xi"00A
()IBg "
?]] x#
(<1Vn
(x:^g
({)BV"
("s2n
]4 <X@
(fs2P
8W"v/1
(b18S
:q\ s%6
'F? lx
(F<F`
dy>"O(]
(:Pk1 {V4
)V> ~C
(qM%M"
mb"k]+
(R]kH
(?@u;
(>Xtg"
([~3H &
(&>^9 @
(W'fm
(e8g4"Y
(Of>V :
m\"XME
r0 }56
("Kg1"
(UCXW
(Hc`c
(-R}C
(,5QQ i
(hN+N m
(:wy=
(Lkjg"
BR p7?
MX ^nG
(`!/
.A BHG
(7=sf"
O+<""&
(Id3i"
(u98\
(x#hW
(=RN3
(,}=j"
.wN 8v
(MY[."!
gel Ys
(V/@>
((A}2 x
(|mz1
.<8 t**
(sriC
2L kNX
(8>S_
(xj7n
'6 !Y
(^lQU"
(B@Tj"
'. ofP
2<",'V
ED grF
(5{ 5 P
('UTb YO
R(U >K
(P^ln"^
(WP]O"a
(NqO`
(zhGn ~
(V`;f
(nWkA }
<MR @S
(]Wa1 9
(P8I=
(#iED"r
+T"Qg0
(ztB` T
('|a/"
(UPw]
(~q6n
(k5ln"
((rWm
(akXS"O{
^"n zr
(,&1 Z
[QD *
{&[ {6i
(bj(I B
5{; <
(J;4L
\#. O<
)3P j!
$3"6~|
(z$3b"^
(^H%?
xR M_G
(qpK^
5[g"H$
'bX 8%
(Klnd
(EhH=
(_OjH
#] !r-
(GuY:
"9R n*
(AapF"}
(6q&= e
(eW*W
_?"[xK
(t0Q3 s7A
(7/%_"
(w\yQ
(-TVH
(+0vC t0
(']X\"
(!FGk
(sQ/Y
YS"d$
3dY lI
(%'`U
(^@4U"
(+Zya x
(*r@J -1
;K"`UX
(Mqt?"
bBj nv
(c_X= &m
6|O d=
(O<u1 J>
E`b hQ
(PX`8
(z8GE
(?H ^?
(r`\6
(%KGH"j.
vS U=@
(SzdC"`
(-gJA U
;Q 0s/
(vIdm
(K7%h
(,ra4 F;
(rpMJ"
(4roO C
>?9 pG
4@P =>
(3U|7 BPv
(P5B0"a
(j=2Y y
(]I:K C.
MG Z0F
(S\"K 5M
(/>`9
(PxwX P
$1"CH]
pc5 `~
(>Gld
(0TTN
(=f!:
(?NfT"
(ZfcB :U
aVa ,}
(~z8n 1
( a8` ,W
(3;gV
(_.~6
(@gI_ zW
(Q(Bi"46
(ED<X hX
(r%G<"|
~R kWF
(o*2T
#cd \\
@:";:&
(vVU4"
J;] -Cq
(\?II"l
(e"#T ^`
(g#\D
(US^X
(o#yH fb
(?a:9"g
(b-y>
@[ 5(p
mWb `c
(nv!O 
(s3E3"~
(;hhn
(7~I["z
Pm 8./
OO 14I
y<g 3o
Lij Rh
FT"*S
c\ jL[
vZ[ <k
(91XI"
=i"DU1
(xkv; $n
(\LV2
axZ Bo
(l*R2
(ll`a
(Q>7> C
<m )X9
UHa q5w
(#1Hg aN
^.[ <v
L<g pw
_|B :t
(cd{^
(S8`i l
RO Us*
+E"mgI
( N"7 E
(g(Q\"XN
(jxfY
"_. Sr
([r67
({z2c
(,,$i
(N!2=
(12fP"
)Z Z"b
(puwM"
(]p32 f
b]6 QT
(OMrJ
O,\ !Pn
7kF j[
(T6Hh
k@^ TE
(7&xB
kCX '.
(0.TH %|K
(pr-H
(uT3Y Iz
({,?D `
(MpYl"
( I:P
(7V2:"
(MK&5 9~*
gUf ["
jS"%`/
(N6^@ "UZ
(Ia^X 2A
(S6)J j
;!S"tD=
(j)IR"Y[9
(t2GV
(6!G7
{k"s J
(*<*Q
(VV:G
(tr];"
NsK".7w
T4="Bb
pL 'YC
(dhTd"
([9@
(ou<\
(jqyU
(-5QI"fq?
(Ryu1 P
(x]-C
(>=U4
(Pkm^"S
(qTSh V
(s)tM p
(wC{n"
(DV}7
(n<"<
('U$j"
UP D2>
(z;?j"
(LmRR
9EP v#
(vLe2 |+^
Lk_ 13
(i8V>
(MD|Q"
(yyGS
(m]S0"N
@}U I5&
(7u S"
(.aLb
(YE~K
(I]>:
2A"psl
(+H+h
(JZpk ~a2
(Ra|X X
(DHRc
(~\"f"
ZZ1 `U
d!: gu
_z5"f.U
(]bWd Q
(9{_S
?:G"x>
( X9J"W
(V=%d"X
_'m e&
(>d#` Bhv
('+y/ j
(alI["Sbl
e'[ C\
([pd:"
(V>tG
(V9_; Z
(`kP3"
(WG*N
(GAJE C
(\JE;
(1tz^
(^yf] D
(rx-R"
(Y<_l
(-Jk_
(0L-k F
(7F @
(>N,j"<<
(a"r>C
(|82e N
(<)sZ ]
o27"3h
(?4rB"
(TWr7"l
(dV9= L
(03/B
(]^W5"R?i
(u;{Y x
(t&UM J
T[` D{`
()xl
(=#ci"j
(,uLn *
(%g@5 }
(N5HI Z
(2}2A
(SJj4
(5WxL"
M5 D$R
(^UR. T
(gEyd"
(K86h"
(!\`1 +
(YjrZ -
(W0vf
(BiZ_
(6Flg"
7@5 `_
FE .![
(,ln"
(-K]D
(A"fW"
(-,?l")
(q{bB Q
(eS_Y
(9Qea"
(@SXZ
(dh;> m
(9UBT"}v
SCa";nv
(\<oX
Ex] b!
fb e$s
(Z{)O \
(z'uZ
(-r}k
(: Gd D
(64OK
(|Bp4"
(:'Ei
(-B(5
(HACj J
RMY B?
(y{kK
(g(=
(Av`O /
(S'-6
(nIXF"Fn
(=Ee4"
(+]t; g
(hTlB
(,{8h b
p;"6|r
5K *3g
(36+K"
(^mC]
(]NT.
zWW"Ll
( Rr/"
([i&2
UL?">`
(`@2
(+,L[
(xb8W"f
(G8z1"d
(ov6D"
(Bk{?
(=-9j
=E eU9
(N$eZ
(n' 7"
nLD j'
jZ"#=1
n!i >#
(kPH3
(^JKO
(3#<g J&
Kg7"\x
zb F?/
63 YZi
(z)E["
(4zQZ v(
Z/I \`"
(OhO4"
CY5"QE
(={SL
(nqld
(95E` FU
(q\qN"
(bpmN
|9Y /
(MJ);"
(TG!5
AZ e[O
(>+@I"99
((83P
(R%:I
(SW j;
(;G9e l
(I%^F"
(~Xsn"B
(=|0
(ZS8N l3
(wofZ"H(
(=VkS"
(0'[4
;m< *D
(Lj_]
(X2<a
(34^O
S. ;Rq
(D=tZ
(z4[f
(A/fS"
d(J rN
(]Y-;"f[
(Do[0
Qg"rlo
(=>N^
(gR<K
(v_VI"
)Ei "Q
M0"Rw~
(!E _ "R
(?TCZ"
(eia^ ^
(4MwB
(ZHKe"EsV
(T;i. r
(j_b2 0
(NG#. '
(hXuU"
(G{|/ jZ
(Zp\9
(4ct1
(ME~E
W7Y",x
(r^tB
(3| O tN
((M-L
(d(Rf
rg ~e
(* ff"8
(:[|e
Cbi"\&x
[< MpA
(b)S\ nPL
(8<NP .i
(gab? b*=
MW"6P[
2,i &m
hM ]'"
([-1X
(HzgW
(?U/2 h
(psmK Dt
}>X 3]
(54@l"e#
(2>z< <
(lCjb /
(c=-2
fv?"Lv_
XK {<&
(#/_W [U
(9z+A"a
( ffH
(MFDD |
({zL\"
5}K [d\
(jAU`"\
(o)Ib
(*E;W"
(wC,6"
(z$ej TqJ
(+7D[
(Qy)D
}pR"{D
(6vz["
(CN[5 Agb
H"^wa
(syCP
(>k&=
(`E/A .%
(EP2e
(l9A5
Bh Q j
($["/)
(oNrL 24
(I:1S"T
k"!]
(h}u= N
(~u+["
(x~Z:
(U&<P"
8~a ?X#
(|_86"
(XBbQ"
(bI)B"
(u2Om E
(uo;7
(+cLC
(ez5L
WS 66{
(E9'l"
(2;TU"
C?"qJN
(rG=@ *
(>Z-:
($cs4
WZ *&P
(s<b/"
(;iTQ"
(qp9V
9IZ 2h!
(NxxM 9
(Tt^9 .
!|i"$[
(g*'Q
(0DUS V
(Se79
7A Ms9
(R[1V"9
z*N b+Y
(zc`f
(+n<d B#
(bVj6 g
5EQ"[!"
,wc"/3
(X8^[
(kN@/"t
?:"{*n
M3` V8D
`-6 uS
(zT\`"
(d?bJ"
(/-!C
(x9w]"
(-:j9
(^H$^
($&/J
(d%eC"
4jV W;
(qOV."P#e
(`"dN
(JS.] <
(M8BY
<]Z Fy
(jEP[ P
(xy:i
(;},9
(*!2V 8
(,Y)Z"
(tK>Q
(j`sI
R0/ pP
(FUlP"
xoa CK
(*iaE
,0" Bv
('n-T U
(RNqm
(.R.R"%43
(",V\"
"c vIo
(6@P=
(r'6/
(yp&E @
<; g=Q
([OU?
(b/Y\ jU
(c5B?
(?QUW"
(K dI
(5cMC"
@R 5:)
(4YKY Z
(=V0F
(c.Mb
(&=ui"
(.Ije
((p+8
^c ~+2
dcK"x?
IP *V"
(vAvI
(3 FV"
(xv~6
(L_xe
4"onl
`U">T?
.4 ;nL
(O>0W
([wmj
\ND FF
(Ifq8"[
|@="x.
(b8`Z
(e?3[ ~
(xK@c
a*^ (_
(V]t`"
~ W $U
([ZV1
(`o?j
F] Umq
(,wD7
(1+9X
(V54? ~
(cj6h"r
(6q c"
(k*d]"
.BD I.
(@*3C r
(#p+T E
(Qz>2 ^
(}~ 2
x)a"`s
YV O/+
(6r2P
dU 5'-
(,!0E x
B:6"4Dx
(EQ/S
(J;b] 2
(,`~l
gZ _b
(CO\Z"3
(qmb7 (
aP cM@
("wD>"
,S F[6
(WSG qi
(=h.<"V
(9Y60
(C6_E"
4:5 6r
(>Mbj"
>yl X^
>lW"w{
T6"k~n
n1= uU
h[@ gf
(;I&= sRG
(eZ[C
1{G W*
(&2ZQ N
(eS~g
('jjh"
(U@9L
(.VQ2"
6!3 2#
(hye5
(FQ9T
cF< T8
(A$a> v%
xX: vE*
(UNAC
(cYj"
(B--S
(t;I9
(qA>D"
(87.^
gV"4\L
(rE(5
O2b &+
(f='Z
m\9 j,
(H`!2
(:ETR"
\;d"r#
(&+Bd
(|F[D 0Q"
(Tx>^
(.ozM ?o
(kl?P
z/ idm
`^6 :|2
(V8Y9
(8dp1
?l $!I
s&@ P2
(s"ZN"
(9dyf"
uie @B
(:eRZ Q
j]W H|
(*k}Z
PY \YK
ae8"lU
(~Rn"
(X'[: z@
(>]Cd
LVn nB
uj6 &C
%` vQ^
(.B\T C
:aF oQ
( |'G
(f^YB
d5 -Nj
zc"@~$
Lwf DH
Qd1 <I
(2`e9"
(YU=5"s>t
(]-yT
(72LU"
> lo?
(x#(` @R
(&LPU Ag
u/" `,
(Yq^G
@,F *S
(vb[^
({BY@ LT
(TfM<"
(6-94
2]E zr
(MM.I
(uK8["
U[".]1
(+>He
Nl =GN
(1c!J G
(m3#l w
(Bl>: Y
(*2"H
(]p*> ?I:
(#-k4
d@6 6$0
(Js#; vc
((."B3
(=@OK
;Ba le
gB7"Ce,
)."*:+
r|W Dh
([676
(\(Bd
:Z= (i
A2 RQW
(Jn'M
iB ^*-
BL"Cb7
('s<;
IpQ"BM
0dj Y
( Lq7"
(4SL K[
(mp[C
(kZ=c *2
('x>>
(Sx(P
(2+$n
(B5hK
$oa :z
(%D9J
(C|4`",Q
(v~ac"r
x? 3[X
(o(.P
(rb)c
($H^H
(}'J<"
^XK"<e"
yg &Xq
ef ;F
(@`9<
tA <le
b1 y3a
Zb1 ER
(@xil ]
(~+sI"
(4$iN
(-TA:
(^g88
(bs>J (
(-|u9
(lLSB y4x
(7[wj ^
(KE>0
()o{S"D
(W`sN
M%g bDd
(]wLF +
(5[|g"
(6WH^
XSn l=
(b5Oh
k"R.N
(?!lc
yL tf#
(\Z B"p7
(QEB/
(VI/L
(x1-^ )
MaE y1$
(u'uQ
(M_-3
(wdYW"
(^w]0"
(S1Km
(8su^ 9
/n j<)
(gBC4
(M[O3
(.cjD r
(X3D< =
(#_8b
(-+k/
(X-C;
(~9uP
(2KI@ F1
J&M yT
aT =dM
xX kJV
(FPKN 0
(].z5
x5] Oxj
(*@hb
(2e{[
(\9%^"Z
(AxeA -h
(Vt@U"
A1: F{\
(aEO
(F7S5
(3p(E"p
h3 3[)
CIL \j
Sa )e
(ro6W"
N$F h0
(xiwM"
b~m y]
+sU"HO3
(.InY
(MJ:E
(Yv]c"
(<rIh
((bF l
(SMQU
(_,9Z"
($WrS
V=l Am
y;E 0Z
(6u&e f~a
Hmd">$
PR UOx
(Hjgj
(mRv="
(@Yk9
(nuyf
(m4".
<rC"T8
(/(-5"
{? .-y
(^2O
(<O:I
(8EB0 ;
(:_aU"
({JZV"
4|A |
(JJ~k
8D 2(e
(.xH7 *
kX aRD
2K[ ,e
(M.aa ;WB
(rl_\
(}aMV"
(e7 d z
(lmm= ko
(}rL/">
((m5K
(!4]O"
(9*B 4
($pJ:"?
(]2xD
(&[B@
(pQ3."
(.,D7 >@]
(Kug`~
Z?_d
_b`*
v4.0.30319
#Strings
NCNXJ2
AssemblyProductAttribute
System.Reflection
mscorlib
System
String
AssemblyDescriptionAttribute
AssemblyCompanyAttribute
AssemblyTitleAttribute
AssemblyCopyrightAttribute
AssemblyFileVersionAttribute
CompilationRelaxationsAttribute
System.Runtime.CompilerServices
Boolean
RuntimeCompatibilityAttribute
SuppressIldasmAttribute
eae76d0f-1753-4b0e-b757-9850f9ed4e8c
NCNXJ2.exe
<Module>
s67ud4hg3SFm3vIHc8
G2wdEFs1s4PvS5UuVA
Object
<Module>{E0AB3F8F-AAC2-4D9C-A8D3-C1EB4008BA1B}
HVEgi2YngA5go2cmeV
iDyM5SQpLA5FhnvMaH
jLIufuCwjN7CDZVcSw
MulticastDelegate
PELqTYlt8X1d6uPKX2
AR9RDnd6BGKl6bLw0u
cdPsNNJHmrbb0kLRMr
S8LW5EHDLwvg5HM8DU
Attribute
TtrViaoocpgSdsX1Vd`1
oZmL0RuPe2l7ZRODvv
e3q28TvE9At7krH8Xu
rjAifccxEsv5Fyj0fr
j8RESsOZv9Zuu1wp7X
ValueType
a9dYTVThLkvl67pRmX
V2xeBCKUeJP2RNNUZs
cKikAMBGBrP4sbVXAv
i5bx8SAb22pvnYjjVK
Gqma7NRvos7QIhl3i0
YSYTNj9O6tNujCHG2j
XcaUwj6EmJPulL396Z
XltxoJNneHWHmIqHrV
hiOYqkP4vb4Ej160OO
a8m2ZiMqJOOUkL1olq
zbfiL5LlEGe6TlbqtJ
oMFBI5tvGZV7ZZOIDS
<PrivateImplementationDetails>{44A5783E-E216-44F8-88E6-B27134F50DF3}
__StaticArrayInitTypeSize=256
__StaticArrayInitTypeSize=40
__StaticArrayInitTypeSize=30
__StaticArrayInitTypeSize=32
__StaticArrayInitTypeSize=16
__StaticArrayInitTypeSize=64
__StaticArrayInitTypeSize=18
a6nbW7OmV
Thread
System.Threading
nDkn08X31
AppDomain
get_CurrentDomain
Convert
FromBase64String
Assembly
get_EntryPoint
MethodInfo
MethodBase
Invoke
XjIPaO4E8
Conversions
Microsoft.VisualBasic.CompilerServices
Microsoft.VisualBasic
ToInteger
ToDouble
Double
Registry
Microsoft.Win32
GetValue
Environment
GetFolderPath
SpecialFolder
Concat
System.IO
GetDirectoryName
Directory
Exists
CreateDirectory
DirectoryInfo
Application
System.Windows.Forms
get_ExecutablePath
SetValue
llKvWPvTS
p3xIv6yWU
PUjWoOwdR
Single
nP46UgTxW
rBMCoDwyY
T18q9GcJ0
oPt1M1X3L
fxK3QPogw
r5qLJCshp
iI40LxsvE
VXHXJ5kOE
CV85hXYMZ
H7FaOMq2A
r4KipXFFy
HhWOHX28Q
Mf1srQiv6
yOUjDMtxa
qfLkGOqoq
G5DJsOC3g
aBPMeM1Ox
Vovw2yxUe
UdcEOwt5N
A4K2unAFx
gsDNiMqLa
m5QcKYlwk
gDqRnvfJ6
mn5TZQQ6C
TgBS4H4B7
XJPQn6LdX
YIKm8TPkX
zFOVhMFus
VTo7Ai4j4
xIugeKIe0
yd6d9AsrY
FGuDZZmRI
HYcuAv64M
EiDBaAVhv
TSfphqGDt
cK9UR8iUp
PmCerpuB3
VeHt27DHd
YSOlit6ST
DUqYkT2gA
eVyAJRYIc
oY5fmx0s5
zfMH0KyAh
diJhJIlmx
FpVKUKGKp
kt6GGRUgF
bDjFdoiho
NJBZaAyEs
OZO8LHyxQ
YdeoaILAw
qE6xY0BZG
TTdrNwf4X
KDH9rN4P8
vFsycTm8L
LcWzyCHU4
NXXb48hQGf
lUhbb60egB
oVybnXDu9i
Sa5bPSlC5U
lulbvu4Us6
iNJbIP20pR
dp4bWEqD3l
L5eb6EW6YA
o2AbCbJDy2
U2ebqH6HkD
Qy3b1xf8na
ettb3YDURp
SpCbLNRsVT
kOBb0JIWGk
SylbXt6cZX
F8lb57ce7x
zg1baOPA1u
f7qbiNvDKA
bCWbOcCbDO
JfmbsxcM6k
pbAbjwf9LM
FnJbkLkvfT
gvHbJ5u9HR
roIbMsom71
E4tbwfqr1V
aMbbEU7P4x
Nj5b2Petje
si6bNjIeEK
K6UbcWilXF
Vf9bRfpxtv
m72bT6bfLl
T5SbSQoGno
gOdbQiTJja
M6cbmCLGyJ
JHlbVDEUw3
vT1b7iUCR5
sq6bgPf1KC
NBwbd0ITP2
IClbDHTxnq
xNjbuDlspi
ItlbBW4EQK
sBObpupSbp
lE6bURWKKW
DWsbeVgYmu
nwRbtWTBhn
U8oblwV1fD
mm0bYjTpdX
VlvbAE8WTi
CtJbfcamwV
SNCbHA4x7Y
ELBbhL6wLX
gVxbKrXxhs
GcqbG3dDvC
n7LbFgRISw
lZDbZ79EPY
UEib8tiRVJ
L5bboDNNhV
uMrbx4VZHl
EKObr6VycD
u7Nb91Xc6G
yULbyk2vSv
lbfbzw2gbH
S2xn4SXoTL
dNynbZrsPR
owpnnUlVNT
D9JnPeF7sF
SLWnvS13bb
q9GnIBlOTF
BVRnWr2kM5
xZ2n6QvH9l
YHrnCt0ceV
D24nqxaN5Z
r8Tn1gbUhm
QvLn3vGfhU
MCDnL1X7XK
djnn0UVrOy
q3unX3BFCT
MZKn5ILvsP
Ltqna3VsEA
OC5ni1gmXZ
yDlnOioXiR
PN2nsOW0TF
jH3njCUAiG
Y39nk3WLV6
vumnJwOYP9
eTVnMvdUYo
vHVnwJYpcn
tKlnEYqgrQ
wBWn25D9lS
Ae0nNsmXwg
SGAnc8Fbfx
aMjnR1MfjI
ELUnToDBQ4
A76nSRqUYn
bpInQUjOqU
FyynmauLwS
KaynVHc93R
Ivmn7mi0lL
uPyngxwiHD
tirndkjSp7
EBNnDOKEKg
uU1nuojA7M
zeInBnMYqv
MaAnphRdOE
QjbnUddF5O
gq2neHCq82
nYont50FVx
NrlnlYYR6U
ojdnYmjTFm
qlgnAh5XuD
g3lnfjAqnm
puXnHYtGFm
ga1nh9M0Xf
llInKiXA5l
eD7nGflj7q
COBnFKsqwN
QB6nZ5aU8B
B0en8GxSFk
GDwnoqDfpu
dqtnxvciJL
r4LnrPZCCO
aKLn9ltFyr
jClnyyWUhY
YvTnzYpoXR
QSVP4OoADd
wDQPbvZvVH
sj4PnB4ytC
Gr6PPFMGfF
O6XPv3JoiI
rTPPIiHQaR
wNZPWDBvkD
reFP6vcf91
EylPCEEFtT
lXsPq1Zf2U
YJmP13esNu
zKSP3Y3sdh
uvKPLMBWVx
cPVP0gHho8
qZcPXtVDqR
QIUP5gSGxw
zpxPapCJG8
UJZPie0iJA
OjPPODLo9E
C32PshWUJO
o6NPjdsFZ2
gi7PkiKb1s
G9SPJwcwpf
DWsPM3O1S7
JhgPwrGQfO
x85PEPqli1
pBpP2r1yTP
jcBPNAHVWZ
vmEPctPxEo
yFpPRoEaf1
qWUPTEHbx0
AxlPSPq2M0
NwEPQl9JrX
hKOPmPOv1P
afRPVxGw3B
RqmP778qi8
lUjPgiN3Yn
M8bPdLjO5A
JOmPDFNDXt
XI1PupbJo7
Ry7PBtN4BZ
uANPpjeOWu
LaDPU1XdS9
lLGPeA1AYF
wK5Ptv4kFK
TdHPllkI74
eQKPYufjMd
knvPAkyAAN
ijAPf9F6rI
WQ5PHElKQF
FmJPhdvB2H
EIgPKJ07qU
SyHPGur3DO
uf1PFMuCet
cdlPZMQH9P
YalP8cSx2e
Fh8PoiZpeK
zd7PxYqQfT
hhjPrxS0gT
Ko5P9X4ebL
DehPyRM2IZ
RWAPzFku4K
j21v4rfoVa
Q4EvbiTGwT
WuWvnUHuHH
km9vPox5FN
hpnvvVmqEW
CvlvIONEq3
g1uvWV3Jx3
TYBv6EkaRx
iNbvClCLjN
NTSvqZGJRg
D1av1GdeKt
aM7v3PiACZ
OGyvLURPep
iWJv0cR1Yo
oZEvXHtvr1
lHIv5B1FFc
AELvaLjdKK
bGlvi5lKlx
XMsvOs3xRx
uZ6vsba0j1
xBEvjxU94B
AK8vkstcAH
vepvJ9tUjV
hHZvMHxrYV
VytvwTPR6Z
t6uvESBgyk
gBpv28tLa0
KwpvNH9KW7
oAivcPhXcd
PEkvRjYgbO
VOuvT2QJbj
MIHvSfCTV2
rH2vQ6upwI
NIdvmXZmCN
uk3vVw8uZX
sKpv7o0WiG
St0vgyOEQT
RPkvdqXQ7p
oagvDG1tRv
Qw6vufAAI1
rqFvBe4cKB
g2bvpEaO5p
LXovUmR7UC
hBqveoQcqJ
KO9vtXGtsD
LPqvlZfBFu
N3AvYmYgih
lTlvAMpj4u
D4PvffcLeX
xyIvHZby5h
wT1vhWtDFV
hEQvKsRFJH
IotvG5Guu3
dZbvFC4juT
EEdvZpGluq
Sriv8gVjyl
Geyvo6djHA
n5Rvxlwngw
aqWvr8vGfk
L4yv9mwlHd
m3Kvy6DXOc
m6yvzSYrTs
V9wI4PrqOM
wTPIb9Ekgi
MH3InGa6XG
QpwIP0fX6p
wAsIvpviJx
oLIII0awjK
TVKIWUZwWu
BG3I6Aaynw
M9ZIC8timN
qF5IqoyBdC
XPmI1LepN9
iCII3TiI8W
uPkILBPSQS
r0gI0QwhfS
wMeIXQCLo3
jgmI5i4LFm
CFIIaU7WUp
EX3Iiu22H0
IGfIOhenIo
WWpIsiixpY
YKDIjfhYmk
LYEIkQZx7j
a9WIJU5c5k
NJhIMUVWWo
C6xIwPpQKR
KstIEopPxd
Pi4I2NXpCe
uu6INBlwvj
aZvIc8WBKu
fguIR2lTwI
pgoITIWrP4
CBFISpvcNM
A04IQiufHf
b2JImXAO5U
gYGIVgaHrN
uwAI7Xd1Qw
ldaIgKknUG
apjId9mftb
wQdIDvLhDZ
em8IuEp1FY
H0NIBnsQNi
iPxIp5vMUD
f39IUVH0YM
H8BIeWfRVG
r93ItWrm0B
PETIlOJZQP
yx2IY4XlfR
fv4IA3yb4B
RhBIfvu2Xv
E3hIHSuYKv
NRGIh1ILg7
jfhIKpUToI
NLyIGOy2M3
hKAIF5WXcy
W99IZIPaVD
XcSI8H2OPn
ljkIo6RUnW
mCKIxwy2dm
t5KIrRHqGH
hM9I9wm5KA
tTqIyEMnlY
LKjIz99VQU
PnJW4eAvcS
FnDWbiCRmH
DcZWntQO8Y
EKNWPOCJ0i
cRNWvTirIr
n8IWIMkYf1
AHfWW3JTGX
ps1W6mVXPm
HuZWCc3YhS
TdBWq2KBZQ
UoUW1rXTMF
sV8W3LUHGJ
x0jWLxXtdx
LDpW0UwQqD
RkJWX7TTGR
QodW5ILE4y
MI9WaBfa1A
buFWiOiKl6
F5eWOKedvM
p1tWs6o76B
EtfWjMfB9U
GjGWk5GaS8
W7SWJ2JXxc
cK9WM3l092
HFrWwMwIpF
nCdWEJBIlb
HoVW27aKB8
mtsWNMmmS3
WXrWcdnu4W
vP1WR0MDOL
jggWTF4oPq
J5IWSFS9vR
O9cWQFNXYn
nZIWmur0KM
yb9WVlVwIB
V42W7y0Gcf
wYBWgKnJKO
R9AWdC7nmN
mHNWD2EPc0
GqgWue1QHi
YtKWBeEO72
WEDWpuvRIo
ckrWUGnmtm
OOtWedLW4r
ly9WtJDAms
VRnWlfmos5
cGmWYjSnh6
ibyWA72MMv
pEdWfsUQed
a1kWHDt8Br
l7VWhTccYF
Td3WKg8wKE
Ps2WGR6yR6
hypWFQbUwi
FAHWZrplBC
Y60W8HgkHc
QjkWoBWjBZ
bcLWxm1U8o
j6CWryR9ti
VmYW9nPobK
BBNWympHKj
feuWzRP2U2
r7K642bDil
m8i6bFRmJF
YYL6nPXt6g
X3x6Pj673d
rLR6vLGlwf
dUS6IISxSc
KCj6Wi6ZFF
SDY66BpjOe
Fmb6CO2nK8
TWj6qb2ie9
MyW61tFWX6
akK63fwRRn
k8h6L946uF
F6i60M437S
HMF6Xli0pV
aiX65XLRfO
GFf6aiuToS
vh36iZDis5
VZ56OituAT
wde6sGsr4c
nRL6jup59c
Mu86kNWZqG
xsV6Jxtm5d
XZM6MyP4s7
g2Q6wvDDSP
gp56EMI0IA
UDm62hVJTP
OeR6NGLA3T
tWd6cClL4P
mZb6R0edK1
fAG6TKJxQt
GGf6ScaZsE
ObK6QYmJbZ
kL46mCYupQ
epj6VG0QrV
zBJ67OURVS
uVQ6gLLxmP
BxZ6dSmmTh
NPC6D7Lm2l
ohl6uRmZiW
MIk6Bkgrok
oDJ6pFDsyp
wpd6UvEL7a
r6s6eNHPvE
mH86t9DCFY
DLs6lbNuyG
oiJ6YvAShE
o4D6AhqjHx
Nv56fROymN
psn6HWmuBE
Few6hh326y
Nc96KbUEcP
vvT6G38Nlg
PVq6F49Gds
oad6ZQ0Wg2
EWU68QjWda
DrV6oMI0UK
Q6f6x3Ruyk
bI86rHqbYJ
dCB69pa46k
wrO6yq49BO
iom6z6MoL9
BXxC4fcUNF
tKBCbJsr4x
MVgCn5ySJb
LONCPgIyRG
ectCvUg7rb
wvdCImj2lm
RYUCWHs945
QNRC6eivOr
VBACCdM0uP
LefCqpwgP3
xjDC11kjJK
CcLC3SJ1l4
xJ4CLEfgv4
DYJC0xi4VU
m7PCXvvQRH
rSyC5uBNjN
JvrCaquq2c
YZqCiOhcl7
RbfCOvJeTJ
WIICsaZlRA
Antivirus Signature
Bkav W32.AIDetectNet.01
Lionic Trojan.Win32.Bladabindi.4!c
Elastic malicious (high confidence)
ClamAV Clean
FireEye Generic.mg.1b95646f069d9414
CAT-QuickHeal Backdoor.MsilFC.S20328100
ALYac Trojan.GenericKD.64923995
Cylance Unsafe
VIPRE Trojan.GenericKD.64923995
Sangfor Suspicious.Win32.Save.a
K7AntiVirus Trojan ( 0057dd3b1 )
BitDefender Trojan.GenericKD.64923995
K7GW Trojan ( 0057dd3b1 )
Cybereason malicious.cbb3f3
Baidu Clean
VirIT Clean
Cyren W32/MSIL_Bladabindi.GJ.gen!Eldorado
Symantec ML.Attribute.HighConfidence
tehtris Clean
ESET-NOD32 a variant of MSIL/Kryptik.ZIR
APEX Malicious
Paloalto Clean
Cynet Malicious (score: 99)
Kaspersky HEUR:Backdoor.MSIL.Bladabindi.gen
Alibaba Backdoor:MSIL/AsyncRAT.8896361c
NANO-Antivirus Trojan.Win32.Bladabindi.juaafy
ViRobot Clean
MicroWorld-eScan Trojan.GenericKD.64923995
Rising Malware.Obfus/MSIL@AI.100 (RDM.MSIL2:tz4bfq5HhU/3gtc5Y293Kg)
Sophos Mal/Generic-S
F-Secure Clean
DrWeb Trojan.Siggen9.56514
Zillya Trojan.Kryptik.Win32.3999195
TrendMicro Backdoor.Win32.ASYNCRAT.YXCL1Z
McAfee-GW-Edition GenericRXOC-UC!1B95646F069D
Trapmine Clean
CMC Clean
Emsisoft Trojan.GenericKD.64923995 (B)
Ikarus Trojan.MSIL.Crypt
GData Trojan.GenericKD.64923995
Jiangmin Backdoor.MSIL.gbak
Webroot W32.Trojan.Gen
Avira HEUR/AGEN.1235912
MAX malware (ai score=83)
Antiy-AVL Trojan/MSIL.Kryptik
Kingsoft Clean
Gridinsoft Ransom.Win32.Bladabindi.sa
Xcitium Malware@#2pmiswhvydqsc
Arcabit Trojan.Generic.D3DEA95B
SUPERAntiSpyware Clean
ZoneAlarm Clean
Microsoft Trojan:MSIL/AsyncRAT.RDSC!MTB
Google Detected
AhnLab-V3 Malware/Gen.RL_Reputation.C4314872
Acronis suspicious
McAfee GenericRXOC-UC!1B95646F069D
TACHYON Clean
VBA32 Clean
Malwarebytes Trojan.Crypt.MSIL
Panda Trj/GdSda.A
Zoner Clean
TrendMicro-HouseCall Backdoor.Win32.ASYNCRAT.YXCL1Z
Tencent Msil.Backdoor.Bladabindi.Oqil
Yandex Trojan.Kryptik!L5Mw3e9SLxQ
SentinelOne Static AI - Suspicious PE
MaxSecure Trojan.Malware.73686729.susgen
Fortinet MSIL/Kryptik.ZIT!tr
BitDefenderTheta Gen:NN.ZemsilF.36212.9p0@aebuOhj
AVG Win32:Trojan-gen
Avast Win32:Trojan-gen
No IRMA results available.