Static | ZeroBOX

PE Compile Time

2023-03-07 06:37:23

PE Imphash

f34d5f2d4577ed6d9ceec516c1f5a744

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00002000 0x000d8554 0x000d8600 7.99113141345
.rsrc 0x000dc000 0x00001330 0x00001400 4.53020757462
.reloc 0x000de000 0x0000000c 0x00000200 0.101910425663

Resources

Name Offset Size Language Sub-language File type
RT_ICON 0x000dc130 0x00000568 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_GROUP_ICON 0x000dc698 0x00000014 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_VERSION 0x000dc6ac 0x000003ac LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_MANIFEST 0x000dca58 0x000008d3 LANG_NEUTRAL SUBLANG_NEUTRAL XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminators

Imports

Library mscoree.dll:
0x402000 _CorExeMain

!This program cannot be run in DOS mode.
`.rsrc
@.reloc
LJdM]g
**Lcv!
vGBecQ
Jj[=b!
`W;&Ek
&q]Pd$
nlH5`PC
/>m=wC
>%|]l>N
%=z5#"
;vxoT
x'F:h#
}i%[`yO!
a<C.f55
oI]noE
RAY?l;>
G}v2Y%
i&bCG$
*4a]B2
e#O56%/7
VJVUhF
T3E_kfi,
}@75S
9oH#+.X!
>\|CX?
{;!eud6
!B_F:m
5.yEG@#J
y<|Xo_
KU%DsZ
SS2?Eu
y_?3U;
)+4<6X
?7a[j_
}DRMj/
//\GzB,
i5sROY
$H#s!l
5n` g2
beCL9XD
7}7~@Ne
9= EWu
Kb]O]=
IZg:i:
%JvqsL
PcBG7V
`<9nE(
?NQ($/
_4@,f^
i/:M'X
Pn<7_7|
{Ow,~]#y
L2Qd?`
#VAe|p
/!6GFv
@C;Kye ;!
:rHlg4
kR{NbhR
L:y#SX2
Y!.Xz{*
kU^y$&
_sTTk(#M)
0+8~xk
nxdU>d
~1SA#0
TSu~"
:H9El$]
Da41wQV
@L)"Rro
US=o%!
Q_.YV_
Y@VbP+
/)nTlq
-N1oJu
wXkdEV_
2]@3|O
(VBnZ"l0
S7WITl
3)s&yK
=Czb840
hiV!j9{
y0=77?Jo.
/z^S)[
V^iP)W
;6"V)
P2zg%w.
!//&0-
`N.VY<
7[~@}:E
yP2r(o
D4<+6'
Qv19/!wd
`,n&q
cF-08$
?P$y7@
"L?jk)
$}#5XFwK
kpWGeD
<-;9eG_H
QO:N{|
D:v:H?
^0[I,g
AiJ)m0
"<qm/5
%(~N|3
chq$Lc
K OChPaD4h
"<`]SZ
_?]f Ss
bQDvyO
zCl&B1D
H(aR?y<}
v 8{T^y
;d-,!tV
DZ@bO'g
Us\cTRA_
&t/Zx=
!|[H]{
#S5sq}
;T:b3k
!7ZRdg@r
9GnJVC0
+][8h-
s2"hR-
1VWlA|
.sJ@\9
U]@#F0
MR <9m
/B{(>@
04Ye!
\B#l0X}z
_CTN*3
Tx]l<Gn
T1;(e
X{H3A_r
jQj]k*
n`V'{{
-)b'DW
S)%u6p
l<TCF|
+LV/U&L
| p{z6
8lnxSD
8Lud5X
U}D%i'&c
x7!'eo
7qG"@
\?X9rY
2y)(WWV
,VSw+Q
"N>@QN!
V55).uN
f{G$>d
b8YTt{
w`nFK7
HLbfi"
N6p62M
coTCnl
*)15Gl@
{&YSH3
eO|A=g|s
90@V2|D>
~D/d"j
7_0lmNl
qq4xE"
H[K<|YR
}hrRzu*
h^Sf*i
l#B>$D
/Z@JE
Bq*H%
[x4ka`
v;z;G)'
=0_ab5
DtG@:q[m
|Wd(#
r&NqFY
q0@#3MF
$CUq@%
z`[*.#
v9h>~mb
*y%`&`
g'5KJ,1
OK4N~ZG
@-ZnTn
U3sTs5
4X2;uy?
2mI+^%%
'Epyv,
6(jb-%
"!7o>]
2n[OM@
uiH=(~
@RU6*HTY
$jn he7
$`FJ.ae
L}M='.
@Nf=ut
/K~yzft
@JmLrD
.!JQkjp
6m>)hT
Tp+2}7
#txYzT
K; xn
\hZ4%7
_/'eme|w&
76FGv5j
>@L*#f
0rAWBb
7Qk-hv
8Ul}#^A
HC5n(-
k1J*X-
=06!Sd
d]'P<~
i.Wwh=
0GW.jzT
AMlT+i
7e4.x
urg4:k
,X&ER*
;G0n}
"SIyt|
00>K6"fB
`BT@OEwOK
HB'8Fd
.5E\.x
`.*/<W
^]J24w
Qr;/V(
T~$'&l
5NtHo@
bO%YUC@
7K5Dm>@
r?!dsp
fr&y6g
$20&a|
6wl,uI
rI6Bu'v
k?)w[>
O:D*Xl
{hu5zQ
s]Rb}g
l0Z^&iU
&mF|V(IG
V_(ZL
H!/e%8|lzu
/'zV7q
3KG`j
4T*pa6Q
P%z)>P`
RVbX?b
K0]gC%
8Nprib
J*5gb`_
tMn$9rS
j)#8UX
7YUA]`
)~4mV>
B^Dn4$
_#{T9}%
rHG.=n
i&/hNkVA
6.lLL}
Z~8'3;+
l{d/w3
Bv^^or
f`KS0y
Zh$L`y
s<Uo-;n
cl;sO|a+
D|$>|Y
*[8ma@3)
"f~9R+
DXTUJMs
y{P`,`
1QPhsH
!l5lC6E
ZrM`Asc
}XwF%2
0JM1m+
4 wJ*f
Df_qM[
L:.-)~
*Ot6qI
Fn]4%_
WE<4x3&
~^'1T4l
2^TuIN
M=rvdr
w4gk.4un
>rR5$hp
QD3-Os1
jx]mJk
zkc'4@B
rWU(;QY<
M4"n&Z
7yWIgn
x}y<>_B
kyGef5
1RFsq'
6 [Zs
\}J^$95
sLd (;~
_;3nQl
ab=kA}
#pJxH }m
pg}W|MX7<
fhkpNK
:3&G7)
;Um':J
;VNBttQ"
`C?+Sn
JY;P8K5
1&1xDf
qT((+I
wlfX8s
f$^@+sKq
Z0fOi4
L@7"{b
"XT7F^
9ny_I"
_Ejgv>
|(yh=N
l^eMwB
-ZTCf9
\nn4S{
?Ge;xt
h4pqQ=U
a02E?
e3f9]u^
qL/eM5
=+F=?.
2&YW]K_f-
QZ8\Q3?
/0Q)hO
&L-aTe
@L(J]$l
u+0!.\
5<19i~
T=!1gdn6
Un[oAc
:)>BFL
vZH5=
?L0}2P
=VN8xj
oq\zwvr[
Q|tg['j
cE0g/.P\
C*}W`su
xrq0'
j'T3g1
.CnKyA
bHXy-_
WtiCP/
K0$ssZ
]?CXxY
AC3<%#z
3?R`s^
jNk,%^(1
[>4#LNHr
a=*S{Z
c)VU=$
&&U(>H
1*|wZ|
1xKk*_*
eYu|W
U*$@7J}
_PRySz
B_{b16#
d4wz$L
b'T{K0
ZbwGb_
V_UDgt
Rj&%8
St^A0W
Z|Ym,
Gz\Rp3&
^0X)Go
$ekC#m
e`K>L>
RO\G?*
B80~ir
DSd]s~
+sXy[(`
~ISC`F
!XEZds
A9L[.*
}3m52W
l6 (rB
22q3P%@
w>hOM8{
XOB:`=
:}t!N<JN2
ZcEJ3;
POA/0{
#IeNdfDki
B/b57E
m*<X8<
1H8}&|
E.1W:eOn
F>aBW#
c+;Ta$
J`7zCG
QlL;6X
2z8WZu
#8P/
x-_{d;
H%D],GI
!+XLQ9]M
GikF+U
3S]s(b^
D,]?g^
zIT7==
M{!N{dK
[e0O@03
u:.%gh
^7yncj
T/\e;k
oO@N_,
R3Qvn.
o8a{D.Y
<njjN/
S#Q%,\0
Q4w\g\
-h, .V6j
{3${?V
WBU-l;
82JUg
Y \1A(-
bcNcbm
nZnSmc
=Wx}LOQ
@sB*54<
NNqb13H
+Ezz(jR
jl@/ K
*ki0nT
0D;'bL
&^@~GpfD
> QyPG
Yd7m-s
jHFY!v
z=u!m}L
@Z%.6:
`)|O*9
-yU7-
"_%.6
~@)cs`
A%iSy8
<Xd=2y
(hsV78
{r,5CP
eL]O})
&k,JbA*
S*=r6R
MA~V43
r661%x>
&i]M'+U
>"F=+a
AMF1a9Fv
l"Yp^
jFpa\c
5+{j;GVN
*zx)354t
$`?2#W
xnPE2v
Tv`Zi=.?
8=)d}k
x\7"%e
jrp\U,
s!;kg
nSYI/,
2EG0L}
)'!&Y"
RZ|i1X
w^\m`c_8
!{%vWzY
?h1#nY
c!uKY.
5JR2\"?
YW>j-
2T7y[d
D4OpJU-
-BuLmSxS8
bpk42B\
eJe-6v
`#oF|<
l+l!i/MS%
Yy>qym
[IH38
X('-qI
[ZmkrR
f8E/,G~/H6
fV"[H'
<bDn
Am#!_Q;
Gs*32P,
w>5XKkj"
?PElUJ
E)'ZS%\
\CQ`F
gnb"qk
Iu2D`)bj
'%:GkJ
d$-`e/e!
kxD N
PdF<Y
N4[eP<
g:eN1x
AfKD\U
RlHlf6
-g`,m7OSk
.<P~4?dU
M7c~LC
TL+'tCm
A|0Vjx
)Lf-];E
/*'q"0
Rb$!8v`
]:zY)t$g
HFIgwU
Duq? $w
zwtUe=
RW:GBP
o3qHAJ
hbmq=z
q6%!U,
haKw9|
k?:Aj
La]#xN
e$J4L"
*x[Z1ud
k',%K5V
@O>b9L
8Mek[^
L`|x&+^
so&".i
.)m0?%P?_t
^=cOsn
d0`K@TsR
0PhIU_m-
V7q\FL
b_L[w`
XaY<OZ
x}"bo-
$A\"B%
_0HeCQ
a0n`T~
yvWKt-D
MGX8$N
$Of&n
c<s^I4
4$Col"B
+Pu|K~j
gu:vd5n
,@@arM_m
.vCxdHr
DDT_%r
*oZ|KM
k\1&U:
qG/x'i
5|7i[
deAb*M
,p>:1q/V7r,
Lzv4T,"f
zjc/;C-[
,$k)c)__
:4!39OfhE7M
-kI pa95!4
EW"j>Y
$q*Qd_-
l>s-Lr
B.4(OQ<
JwT-oe
gP5y7&
*DC#,E
=/@B#[
@w{CK`_Zit
t5xi$Qy
Jr8gjH
5[4u$}
AYOu2y
I/[l[{
CRR6)>
8">c#RC
[,j %xh,
C6B`Hc%l>
RP>hv4+
H6F<]X/
[Y?gvX
_ICas[P
qj&+}O
DVV$~.
x$kr.&
Jr+hC
]z3I4_
j|8a!+>
m8UL8
t:6eC[
"oL[,
j*GoZ:
<nWI}B
F !$b?U
^\[=<L:
2l+12aSV
8*Y\bH_
;c.%rl
okk1%c
H;#XM
\Bae!A
RCV[8y
tf/S;:
3P-6AD6v
!u WON$
!.{BdT
mxli&Eq
~qFohG:
+].w>6a
{@* LD4
|Jv}fSs.
}f|*])
EDMY%U2)
8Pu9-[
s~+(ey
kK|iEb
g/~e]!&
j7z3^g
;TwDx^
6;!]Y$
)EGh8~i
\a,O+'
Zi\{0Cn
R!uV~f
p:&nfzo
LHA35e
u8`G1Q
ht.\ ;#
i{Z^z+
Op!oF;d
{T()b7
;zfbW6
h]oU42
zp?VyI
rl'w-R
fP_,=P?
v$>(A5
2U(~k2
-,+#p^2
\\C^22/F
1+:?rk
&7$6bC
oTO!B
m.jky4cQ
.@.?y_B
J*Hgs]
67WypB
LI@k J\93
F<\[1X-
VtM@`nx
L+C-m[{a
Of/&7P
sAvUVJ
CrOeG}u
pgQAI8_
Xk/pU`
L<]C}G
:CG"?t
^1:"RQIu
gx_jCZ
S}q:[b
XkDMj)
YbmK;=
GoquB$
7F`l&k
F$}/:C
yv*{x;|,
z17itu
.%|5`p
VqIA5h
Qe:<C)d
16V^[U
wF5.|a
H5c&@^
fb[ieG
QHBTKo
*y]j=YA
Xqhlvd
>4Mti5g
yGzj{uA~
`eN_}q
JK(9KE
&rYw/~)
s~a*Fm2AHeM
j@',4?
Y7MJD[
TPK']v
>jtCbG
<*Fq^d
Sp@ti#
} ^{!4
Pll0gX
,hJx7=x"{-w
@QebSI6
%qq'`B
<dG>IO]
CN&[TX
T0*OC$
\X&)By*
il+|=,O
1YgCH@9
e$D?_;
knqVU@-
!_kD_C
Uu~PYO
/* (XX
S\u7}M5
6=l)'M8
FSvEp/*
SmO).L
xiM."}sIU
\oP4rw
GCX%pj
"I<I9D
fS2Lq5
F02&G{z
x:BN^
yO)h.n
&'Rus'Lbr
$g%>oWM
I#,Lmf
)IZbfJ8
M-{F2A
obBN K
`5R]*q
%oxq3Z
ZJawov
)PZK$i
<TUPhj
P)M23*Z
nis@<,
S#ZW!W
`yF't8
&U[F<e
_8j`1
dh ?9&
d7#Xs
}-Ju&1:
}97'O
OGO_,T
tEk'u
6)JB}.
Wj\|;7|
Th,yoMS
rY@X-wCxHN`
G6_g8>
YZL?"a
YW-@>P
95y8-zW\
ggxOTV[
_@~11j
[fM-}mQ
*>@/Zx
_#VES/"J(:
sHvP3h
My2Y,nb
0_F?eV
Jq%6#/
`y/0g
4+OU^^o
hXSm,_p
BTx<Cse
~;8nY~t?.
rQL,6}
|4mI]g
bHT"`
PKqP("fP^
bUsc>nTy,
otIFi~
wf\;17-
jRY<Pg
t?d-ic)K&
dYp3w-M
)7=8T6
a64^De
J1-o$9
-k.'zEa
:d=Bn'
%REyJZ
}j)= ]P
F9flkB
`o-s4CW
He<@32
\T0irJP[
^e]MBb
c8!2?,
B11I*Y
GX)C"6
{mJSe\x
|1xR:
9?PASUs
s)q|AX|
<'#DXA
m.5H+8&
P")Jb"
"tUcVF
<i(vEP
tzoOH^3
8HG:}I|
`<#~\V=
v$FC!s
;E4fd0
9u0;6Y
nA^TXL
UN#@w^
k.|[5^
O=Iqs(
R'1C,_
ws/9)*
-OKPtP
C`5v/p}
6.@ I
vu|m:5u
@#<9ZX
=dq.`BF
v]Ntl#n
G~S"zP*H>'
/GJa*)
A==Hf/
u#U%Tz
p/&cx"
k_W$d2
lO})e">
{XuA]d
Jp^aI#
4=eIs0
{O+CsM(
U~Vg=1
hKUH5CE05
;WODVo
e8Sd{w
aQyy8E
Hz}X[@
,a;9~;
0#nqJ//a`
B@ytbr^
j(K@^5
s|]k&fY
1'}(+1
d;_8/hI
>.`l}Z:
Fd$'Jd9
#< <dffJ
zSivN%
\-5[w&
8q$7{I
SpdCL"@
A9Fb[?
f;.hj{
&(Zg*g
%mv6D.J
%'NLA7;Y
)-/n1$
5U~}H
2}Y #/t
V-v%G}
4dhoQ)
p7P4g
24;v1N
:_} %z
QCjN6/
xfFC~*
rC[ "
&@$#Uu
<+;n@|
$(n ".
j_)0pT
P&&U145
"JW\]p
1G^uP;=oN
XST(_dsr
HPePBN
^iO5kx
?S"2jPo
FX?Z<*
90-0wU
Oj(8'^
\>PD>\ACK
#K%J'
.q+zTZ
{gqn'jBne;-
G:h-6}
LL{v~=/
I \O&ek
CtT!7Zi
i^@'& kr
xZ2S"t
<$#'7E
0(8Mh<w
9k`C.#
-{@q!2
g(F;TV3@=
r)`${LJ4T
my*ZRB
%6;GFA1
z70@uW
=+Uv 6M
+K5]^
]a$Firp
'] X"^
h-2Wa`
c>'KtA
_{s{'0
dbRVpX2-^=
lH}X"9
c_8d}~_
#g&i,{
J@z9`H
N!zAevK
0\I}hF
6jHh>F
.seK_~E
]mETJ 00
/)%=g^
if`~RD
b-P(nW
U[PK))#h
SgP7bza`
ui?YaOW
^,G4XK`
29#?va
R#[]\@
MAjKTo
HZ[C/T
a%hD;sc
+r`Epxm
A(4meV
p;J7n#r
X3\dPu
WeMm!=r
<=.:JW.
S;eUe(
,`9t(j"
Wb(KV|P
qF|#'8
E&2,p&
{^cR}>
/S<<-kv;
KdqkOb
^!U'~GlEPLT
&JE`w`U
<bMrD#"
00ipaNd(v%UK
9;;WkO-
YR?%HT
RTC3lm
?e9/|F
)B@VK
y5:4A(A
S:TW&s
$jTx_2TK@@
et]hR}
l+uk?\
%2Bc5F
)%>X(U;N
bN8{g;
s5bG#\+J
H*OXM8
:Bpw{!
">]^g1
)(.OQ3[*l
s48BhM
<]a{ef
PK27Oc
$DHng}
gK[7 3`
/0l!aNL
T(5FM=
4_8(h2
|.0E",
}lhA<@&
m:u;L:
Zh:Bdg]
MxI":"
J9ZV+Y@
A>MYP.
T~+\`;
@];877i;
LX`cqM
*^P[r#
h!^T3z$
~>naD?h
8wyE%x
&ZJ_"=m
@[pP06XA
\rh'iT,:
Lg36E{
O}.tsJ
DwJ;*e
y4`o^0C
EYgX\"v
cJ'mmv
8%Xepn
Dlr<7o)q
?u<;qy8
RxcdPu
699@z'
O$L]fe
9 1b&5
>sjLW2
Xs#KL
&8mAa:
oiP%a}
"_#*_A
y+Rlu/
]VN%N/e
?J}j'[g
e~`CIEq_OU
Vm0;6j
.?Xo~e
%O>}Ey
2,}weG
_Ol?|d@
tqPbJI
)8E])}
]E.1Ci
a!z+eSEK
~O5`4?6{
b:pW,~
e|<I|uyL
i./Hwr
U_<Hi+
x1K|?E
(zM%v4
J{v`oR
PI1@Nh
a=`VD9
nT*y]1"<
i?o{&8=[V
u;y(qkZ
TwBi5k
:]m{0&
;c+1F7
S\qr\}h
mh+7f^z
m^.%8y
kWMu[L
o1!!},
-z,5`NN-
42zQZl
\#rTmq
nT?W(w]
C&OKoC
=g&+{x
&kyrD|h
YQ#;4R
z;m?;I|~
>M[5vo
R3$kC6u
92Xeos
O|_GkC
3i>ob{yP
*>)$iG
eKSc5>m
5QJ [vE
M0HfX|\SC
PS-fO+T
-4|l&N
LLHLxqDX
Q'T(S`
pJ}k7x
1,|Qg:u
3Z~-uR
GT[TY
eEh^l\
PApD}!)
%JtL?o
A&@[pp
7bl)13#
^,"u<jQ
t[0[X(O
B?Qy3;R^
%|Tx&1
*7eX%U
DNP8}qB
?d7 #9
(pq*iuO_
]EV.FO
m<E,:
HQ8&X=t@5\
jvu3+\
;%<HR4
C"%BM4%
&'mI^
;LXjM2
xm!7xk
Lp*:L}%
55WT@W.P
KuZ.{I
JKE>=j
U{<iVfP1
QJah,V_
oObl">
p#&GZA
Xp#ED>7
X] HJn
GaakXi
_`GHQkMZ
Lt^$s/
H7"KiR
<wrmO:Y
h5p)Qn
eZSfnYAF%
q/NKR
/4V0qU
+M5/qI^s
*7XU#i
[7;iBT3
-6ozXt
)I}p;tZ
NX>:>8o
9MQ-dz
&Hje|!
(5q}LQ
zW\y!Q
I.jg o
WI ?L)
bN+g2E
"oihp~
4[m&_8
rOt|8vY
)|/M;rKl
YsO_(;
\McG*9
aQK1?Kn
8y0MPu
(yK}n'
_}'il1
<M!."C
2gaZt;
b-%1=
fS=Hc&
]U%PT_
#;=bSm
D@1wY24
P&9.;Jus
&`|.~d
,*%Iuc^
KC`];@
^O!PG~1
y[6zIm
t1g'Qu
N()b!\5
'.EzyK
.7%b ;
QIx-F4<n
1V]+ErA
K-~L0xi
9'0`+-
PA(1cvO
t"!!B1
::j6U[
k-XLnATF
W(I*0#
lj5G{
,eP.(z
eb;1BO:b
`t~OI#,
nD?5J{
**5v*[9B
R,qv"a
;IzD},
jQpuXy
}jJhL`W"
qx!bZ|z]VK
(n7a; B
GrPlx:
P-D!$Ac
fyuI3"
\2_ bpxN
b3HjTBs
xo!*2Hzi
hm bAS
7ay6"j
x4'FLk
BZW!E<
MiHM>6
2&Hh.
Ps<}Q[
d*^upi
'x7_C%f~
IkY9%(
a=(n[$
&,*eveN
@@"s/6
ioYxe
%,q'v+
N68x7+
w!'yQl8
Z$Uj+>
e4]V!]
(B7^(<
K`S:J|
x3F[dS
H/Z[v2
VnB\Su
8Z6v38
2%4~]>
L&dG`P8
J~[LC{
e0Zb<13Z
5Xai%]
]s}qs3
`gZ$Z(R
1joI$g:
S`ah<}
&}\F9Z<
E?@P2\
8r)R75
hW4:y-
I-dpwd
w4?$T'
]7VO^ &
mKIg9H
-hGjXd
8~"`/&
pgPjg}
hR4:|i
`nc|A
$DryYI
'7`}u9
$zc~'h
i4Y?J6
(h/|\r
|zi2Ib
.z;6CDbb
4<Wz|%x_
:=ZNSb
0^zHDVj<
M[LF>:F
06XMT/
'oGAHPuxy)P"
``kSYU*A
v}#B3>
D#=|aX
SyGRjK
8EBJgSA\
.U;:r;
@B2rhB)
8S=?VSt(CA
8d>hpa
]~qyiHr
Su}$-/
L)d=dt
{tU9 B
y5p%/\;
JSge2K
MI,eqX
=N#L97
Um/c=!
3YAUB`
gtlU~
Sh4Fm~
8@XZPt
W&`tv_a
.?>SEe
O[@Xqv
wq&&XV
,sw<hC
'S*^Y$d
@G4_,I(
?qJlj<
##v+`"
*CUT&X
jK @?l}
/1roRe4b
9|D+NW
3UeOEMnU
L[9BT
#Uo`"`gW
\$qY3p
-*16Ri=7
C"Ty<7`
)J!Jxky
#|gE\m
bx7jo9
eB%+&w
;t\<rJ
|Xf$eM4*
TpMX8u
xj?In(
,]}K#2:
1r|[p
=*!QaC
Mcfh{>
_.BpDL
}F8o2,:
-}qQJ(:
|V->Lm
&jWW/pf]
E|=/BQ0
oy_-F6
3##u?GeP]i MoBX
<2dQA|j
b>?)5=
rkE8\s
j[slIj
_GQd+$(
suG)J/<
S6g[t(T$)NmIzo
~/#JV`d
2bOtY&D
V4fN4$
eIMP0P
,ta<xU
n4C(Ek
6^\ls]
^"zrK}
%biig,3'
@gzHk{-
-Se:m!
=x:jPy
K%vHTa
Csb]3NQpJ
6q\"e6]gpd
feV38r
n5Mvc<
0,9D*0z
lT>794D
"}|Bs|}W
oVKz7q
]M#Ak#
xu{`n
ylh}ss1
MUVT?B
StU^xN+A
@f%r,8wTqxm`<
N0q//JT
L:&8#u8
q lRqr
&]V{%u
ajU|9*Z
`'upTB
lK!V0Q
^G!-lz
en{>E/
*q;JA5
.\P^V?w
=bM,\ z
NPQk" {
+/#_>y
p}a)NFm
6sr46'
<S_?yo
4Ovhyk
VW1]Bj^
Zz7kP{h
2@vGUA
1*C5 {
/{[_e*
g.j}!`
[1V_CF
DHbf_'
0H?yUQ%
eMse[KX
"5M}U:
w-c("*fv
#swLYlskH
O.WI$*0
lNR#IbmwH
B{cdN0
HIkr3mn
GL[r3W7J
VbVbj`
EXndCv
UFniw,
*t,zw07O
]|C6L$~
{0h+l:
J)'(.T
8uK]Ej
"6>io_K
k0OE17
KcgIye5
votpGf
buep-}
&wh0tvy
#;"?j^#3^
~:!b/Kd
Q2OjeR
Ii0yZE{
NHEvhL
QV#?]$
,R.}gp
^Tg^;g
d$2|O-
[Lr1$R
Bb cKN
y8>Z9z5<
<>sT1
0?\,Nk
S1(ImGE
0ct.{V
s:fkd'
z0etph1
r8Hb[T
>U'`y
rd;x$
CR#u@{4-
2]6-b
WvIT_0
Lht59vY
/n':Pv
P7Ip7z
O43+tAl
)(_nOe;
\Kw`>]w[c:
%L#<"r
@6{{ RS
y8(9(a
aQ|/G"/
OYpR K
@!Fr=a[
gz[$S1
>XH^(
05L&@wr
.2UMjt
:VZN0B
F6B6l6
2/tp\Z
jbAISq
jm qozZ
W7d/c]WC|
W<y4H-+
US>}R\
Yp4tD/
45f4#
9|"7@\
^#[TfC
9qmtoG
4^oq'iS4
2Q<{g,I
dkoOq
5E}8e&}
p>u9u GS
H}dt2-Vb>
~v`+2)
k/&)J}
{}ba'[y
d1(}K}
PdHD5WY
:H'~s0&
S|o*c(
3wrq]~
sVT"LR
]C"i_0A
[LC"JQ
%kM!L4
wNGj;t
J@oZbJ
LSVob)j
+w(!3:F
_NO+f]
#Ev 5@
>\VozVH
$#^7E/
TDz4ZY$^s
28z-*KYw@
^=,WoB|
<^U)cF
s9/@@eX
SX0"v9
Ihn04,E
*)0$WU
]E'1 P3
Bt3P.h
[7jAMN]
Y_cX*n
VMDj^m
Z?_b`
_bj2
_bY*
Z_bX
v4.0.30319
#Strings
#Strings
#Schema
server1.exe
mscorlib
SuppressIldasmAttribute
System.Runtime.CompilerServices
<Module>
GCHandle
System.Runtime.InteropServices
Assembly
System.Reflection
ResolveEventArgs
System
.cctor
ValueType
Object
Stream
System.IO
ConfusedByAttribute
Attribute
server1
ComVisibleAttribute
AssemblyTrademarkAttribute
AssemblyCopyrightAttribute
TargetFrameworkAttribute
System.Runtime.Versioning
AssemblyFileVersionAttribute
GuidAttribute
AssemblyProductAttribute
DebuggableAttribute
System.Diagnostics
DebuggingModes
RuntimeCompatibilityAttribute
CompilationRelaxationsAttribute
AssemblyCompanyAttribute
AssemblyDescriptionAttribute
AssemblyTitleAttribute
STAThreadAttribute
server.Resources.resources
UInt32
GCHandleType
Module
MethodBase
RuntimeHelpers
InitializeArray
RuntimeFieldHandle
GetExecutingAssembly
get_ManifestModule
get_Target
LoadModule
ResolveSignature
AppDomain
get_CurrentDomain
ResolveEventHandler
add_AssemblyResolve
GetTypes
ResolveMethod
GetParameters
ParameterInfo
Invoke
Encoding
System.Text
get_UTF8
get_Name
AssemblyName
get_FullName
String
ToUpperInvariant
GetBytes
Convert
ToBase64String
GetEntryAssembly
GetManifestResourceStream
get_Length
Buffer
BlockCopy
MemoryStream
ReadByte
MethodInfo
Thread
System.Threading
Environment
GetTypeFromHandle
RuntimeTypeHandle
GetMethod
Concat
Equals
FailFast
ParameterizedThreadStart
set_IsBackground
get_CurrentThread
Debugger
get_IsAttached
IsLogging
get_IsAlive
ConfuserEx v1.0.0
Uircat Priv LLC
"Copyright
2023 Uircat Priv LLC
.NETFramework,Version=v4.8
FrameworkDisplayName
.NET Framework 4.8
7.7.5.4
$cc7fad03-816e-432c-9b92-001f2d358386
WrapNonExceptionThrows
Important system file
_CorExeMain
mscoree.dll
#$&&&&&&&&&&&
#,,,,,,,,,,,,,
#-33333333333)
#-44444444444+
######
<?xml version="1.0" encoding="utf-8"?>
<asmv1:assembly manifestVersion="1.0" xmlns="urn:schemas-microsoft-com:asm.v1" xmlns:asmv1="urn:schemas-microsoft-com:asm.v1" xmlns:asmv2="urn:schemas-microsoft-com:asm.v2" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
<assemblyIdentity version="1.0.0.0" name="MyApplication.app"/>
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v2">
<security>
<requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3">
<!-- UAC Manifest Options
If you want to change the Windows User Account Control level replace the
requestedExecutionLevel node with one of the following.
<requestedExecutionLevel level="asInvoker" uiAccess="false" />
<requestedExecutionLevel level="requireAdministrator" uiAccess="false" />
<requestedExecutionLevel level="highestAvailable" uiAccess="false" />
Specifying requestedExecutionLevel node will disable file and registry virtualization.
If you want to utilize File and Registry Virtualization for backward
compatibility then delete the requestedExecutionLevel node.
-->
<requestedExecutionLevel level="asInvoker" uiAccess="false" />
</requestedPrivileges>
</security>
</trustInfo>
<compatibility xmlns="urn:schemas-microsoft-com:compatibility.v1">
<application>
<!-- A list of all Windows versions that this application is designed to work with. Windows will automatically select the most compatible environment.-->
<!-- If your application is designed to work with Windows 7, uncomment the following supportedOS node-->
<!--<supportedOS Id="{35138b9a-5d96-4fbd-8e2d-a2440225f93a}"/>-->
</application>
</compatibility>
<!-- Enable themes for Windows common controls and dialogs (Windows XP and later) -->
<!-- <dependency>
<dependentAssembly>
<assemblyIdentity
type="win32"
name="Microsoft.Windows.Common-Controls"
version="6.0.0.0"
processorArchitecture="*"
publicKeyToken="6595b64144ccf1df"
language="*"
/>
</dependentAssembly>
</dependency>-->
</asmv1:assembly>
@{?@{?
GetEnvironmentVariable
_ENABLE_PROFILING
VS_VERSION_INFO
VarFileInfo
Translation
StringFileInfo
000004b0
Comments
Important system file
CompanyName
Uircat Priv LLC
FileDescription
Uircat Priv LLC
FileVersion
7.7.5.4
InternalName
server1.exe
LegalCopyright
Copyright
2023 Uircat Priv LLC
LegalTrademarks
Uircat Priv LLC
OriginalFilename
server1.exe
ProductName
Uircat Priv LLC
ProductVersion
7.7.5.4
Assembly Version
8.8.9.9
Antivirus Signature
Bkav W32.AIDetectNet.01
Lionic Trojan.Win32.Hesv.4!c
tehtris Clean
ClamAV Clean
FireEye Generic.mg.a8a6182341c07e47
CAT-QuickHeal Trojan.YakbeexMSIL.ZZ4
McAfee Artemis!A8A6182341C0
Malwarebytes Clean
VIPRE Gen:Variant.MSILHeracles.69031
Sangfor Trojan.Msil.Agent.Vds4
CrowdStrike win/malicious_confidence_100% (W)
BitDefender Gen:Variant.MSILHeracles.69031
K7GW Trojan ( 004b957f1 )
K7AntiVirus Trojan ( 004b957f1 )
Baidu Clean
VirIT Trojan.Win32.MSIL_Heur.A
Cyren Clean
Symantec ML.Attribute.HighConfidence
Elastic malicious (high confidence)
ESET-NOD32 multiple detections
APEX Malicious
Paloalto Clean
Cynet Malicious (score: 100)
Kaspersky HEUR:Trojan.MSIL.Hesv.gen
Alibaba Trojan:MSIL/Injector.b9d0bd83
NANO-Antivirus Clean
ViRobot Clean
MicroWorld-eScan Gen:Variant.MSILHeracles.69031
Rising Malware.Obfus/MSIL@AI.88 (RDM.MSIL2:u9lxZc3jXJqvJ+CgjjFPAw)
Emsisoft Gen:Variant.MSILHeracles.69031 (B)
F-Secure Clean
DrWeb Clean
Zillya Clean
TrendMicro Clean
Trapmine malicious.moderate.ml.score
CMC Clean
Sophos Generic ML PUA (PUA)
SentinelOne Static AI - Malicious PE
GData Gen:Variant.MSILHeracles.69031
Jiangmin Clean
Webroot W32.Adware.Gen
Avira TR/Injector.tkfpc
MAX malware (ai score=80)
Antiy-AVL Clean
Gridinsoft Backdoor.Win32.Quasar.bot
Xcitium Clean
Arcabit Trojan.MSILHeracles.D10DA7
SUPERAntiSpyware Clean
ZoneAlarm Clean
Microsoft Backdoor:Win32/Bladabindi!ml
Google Detected
AhnLab-V3 Trojan/Win.Generic.C5391753
Acronis suspicious
BitDefenderTheta Gen:NN.ZemsilF.36308.2m0@aeaXqRd
ALYac Gen:Variant.MSILHeracles.69031
TACHYON Clean
VBA32 CIL.HeapOverride.Heur
Cylance unsafe
Panda Clean
Zoner Clean
TrendMicro-HouseCall TROJ_GEN.R002H0CC623
Tencent Msil.Trojan.Hesv.Czlw
Yandex Clean
Ikarus Trojan.MSIL.Injector
MaxSecure Trojan.Malware.300983.susgen
Fortinet PossibleThreat
AVG RATX-gen [Trj]
Cybereason malicious.b3dfde
Avast RATX-gen [Trj]
No IRMA results available.