Static | ZeroBOX

PE Compile Time

2023-03-09 20:24:31

PE Imphash

f34d5f2d4577ed6d9ceec516c1f5a744

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00002000 0x001119f8 0x00111a00 7.44915602935
.rsrc 0x00114000 0x00000584 0x00000600 4.44169385823
.reloc 0x00116000 0x0000000c 0x00000200 0.101910425663

Resources

Name Offset Size Language Sub-language File type
RT_VERSION 0x001140a0 0x00000330 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_MANIFEST 0x001143d0 0x000001b4 LANG_NEUTRAL SUBLANG_NEUTRAL XML 1.0 document, UTF-8 Unicode (with BOM) text, with very long lines, with no line terminators

Imports

Library mscoree.dll:
0x402000 _CorExeMain

!This program cannot be run in DOS mode.
`.rsrc
@.reloc
((s3
Yffeeffefe S
Xfeffeeffefea
Yfefeffefeefa
Yffeefeffefe
"0#>a
Xffefeeffea
affefeefeffe
affeeffefeefhah
Yfefefeffehah
XX ,(l
YfeffefefeXa
Xfefeffefeefa
Yffeeffefeef_-
Yffeeffefefea
Fxo(
*0s3
.<sM
.%sM
l-s3
$*s3
ffefeefeffe
ffefeeffe
feffeefef
feffeeffeef
afeffeeffefe
9fefeffeeffe
fefeffefefe
fefefeffe
fefefefeffe
fefeffeef
afefefeffe
feffeeffefea(
eGfeffeeffefeYa*
fefefeffeefY
ffeefeffeefXa*
ffefeeffeY
feffefefeefa
{feffeefef(}
"33s?(D
"ff&?(D
"333?(D
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
fSystem.Drawing.Icon, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3ahSystem.Drawing.Bitmap, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3agSystem.Drawing.Point, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3aPADPADPBj
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Icon
IconData
IconSize
System.Drawing.Size
System.Drawing.Size
height
4D$5A$90)0)3)0)0)0)4)0)0)(FF$FF)0)(B8)0)0)0)0)0)0)(40)0)0)0)0)0)0)0)0)0)0)0)0)0)0)0)0)0)0)0)0)0)0)0)0)0)0)0)0)0)0)0)0)0)0)(80)0)0)0)E$1F$BA)E)(B4)9$CD$21$B8)1$4C$CD$21$54$68$69$73$2(7(72$6F$67$72$61$6D$2(63$61$6E$6E$6F$74$2(62$65$2(72$75$6E$2(69$6E$2(44$4F$53$2(6D$6F$64$65$2E)D)D)A$24)0)0)0)0)0)0)(5(45)0)(4C)1)3)(84$25)9$64)0)0)0)0)0)0)0)(E0)0)E$21)B)1)6)0)(CC)0)0)0)6)0)0)0)0)0)(EA$EA)0)0)(20)0)0)0)0)1)0)0)(40)0)(20)0)0)0)2)0)0)4)0)0)0)0)0)0)0)4)0)0)0)0)0)0)0)(40)1)0)0)2)0)0)0)0)0)0)3)(4(85)0)(10)0)(10)0)0)0)(10)0)(10)0)0)0)0)0)(10)0)0)0)0)0)0)0)0)0)0)(9(EA)0)(57)0)0)0)0)0)1)(D8)3)0)0)0)0)0)0)0)0)0)0)0)0)0)0)0)0)0)0)(20)1)0)C)0)0)0)0)0)0)0)0)0)0)0)0)0)0)0)0)0)0)0)0)0)0)0)0)0)0)0)0)0)0)0)0)0)0)0)0)0)0)0)0)0)0)0)0)0)0)0)0)0)0)0)(20)0)0)8)0)0)0)0)0)0)0)0)0)0)0)8$20)0)(48)0)0)0)0)0)0)0)0)0)0)(2E$74$65$78$74)0)0)(F(CA)0)0)(20)0)0)(CC)0)0)0)2)0)0)0)0)0)0)0)0)0)0)0)0)0)(20)0)(6(2E$72$73$72$63)0)0)(D8)3)0)0)0)0)1)0)0)4)0)0)(CE)0)0)0)0)0)0)0)0)0)0)0)0)0)(40)0)(4(2E$72$65$6C$6F$63)0)0)C)0)0)0)(20)1)0)0)2)0)0)(D2)0)0)0)
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
$.' ",#
(7),01444'9=82<.342
!22222222222222222222222222222222222222222222222222
"Qa2Bq
-7o4n'iy
uv]sgsl
rt'#%x
+k(9O5
+LVPu*=
ngSVZ>K~
n84|CJinK
&`i?A5
'Se-VQ
'#m-Z/
blND%4
e,^*V
yu"JEO
sesE7R
3kEHjEmJ<8
@6S6NRE3`W9pe
a(IzJ-
IB*1XH
Z+{*[WYM
uiAB)"
jPIa,#
l.gP=Lk
Uv~Vqn
XCrQYl
K}g*T*?4
_i,3\.
6BRQY~
4n'ir
V.2]c.
ELjf8T
:N*QjII?F
2jfU2j`iS&
LU4[y<
)NT+yjE
pz{m[8
]N\#=G
2JfU2j`iS$
RIam`]
I?RJ A@
FRQYdg5
J^TE?,
kmM|:}1
eo,*Ot
$k<L2D25
_+d|vz|
s:Zb}5^
vt[UokN
Lj`jU;
J ADj$
dNDrQsp
I&C#]I
Y>[3k/
R`WVf*
(>R'wu
KR]S_NF
.hc-N>
I1J[V@
hIq#dZ%
R74-R$
M0:,Hb@11
VK)~_aR
F*1I,$
nvueB_
RMpK
MJ4a/2
hUY_ty
T)*wI'
==_cM8*qQ^
Z^izF>
iAF1I%
N2&Tfu
vz{kZ6tcF
#op<e-G
^?V{-C
t.#/^K
R(UrMM2
o%F]U*
U(U]cR;_
RXEt)F
KxM5(&
&_FI1T
cN2nXH
RQ@)Kj
EfR`S}{GO
eWNmnK8O<
J0Y{_?
<c{g)J
!Q/:;4/
C=[XIt5)do
& "S^j
_4yGm pMr
<4r+hw
iClQj@ADx$
F*1I"@
v1iZe-'O
~y~ode
-[8moh
KjWzuzuc
87w.ri0!up
*MIc.K
5:jQ_4y_
e(IzIa
8wwYm&
wwNRi3
Ryy%R{
]Iu.SM
M?rj@i
fE2j`lS,U
y8.$s~ |G
Hj`hS$
[u*KlW
O.kj_R
8WwYmd
"J EDi
U*aEf)t
UKxN-8
^dM8mY
*|X.vK
xXj76UU;
.}"so\
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Point
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
hSystem.Drawing.Bitmap, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3aPADPAD
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
IDATx^T
|hSK}a
aNALGo
nap[~}1
&bUg00
X'_m#O_$
qrxjn.
gD%1bv8!
breHTF
x4Q<_<m
s)E}*rr
#26P)#
f}~a3'
pTogF}
EBR6}B
N^g<tG
s+PrUa
w??)[|
sbfn _
T9~7G/
|*?&$r
f>h1(w[
@dN,UZ
[|vGxX
z<C'wZ-
7+Ras<
Q5'kALj
*Km_pj
;Kw}yZ
^X6D0uz
M$rt:!
)iBas{
,aYj/N
Yxm@#?
:|@^=iG
i-aDnHI
}r)9J%
_iudWi
7E fYj
}~9)d+
`xAOUe
.>^g\/q
%6)$8;h+^3
;/L4c*
uAzhc/
,8p;l|x
ee,Y@c
GTV"ac
j\n&k}
7^?{|Z
YjU!S4`b_
6vbd)
N'XNU
=5nlmtCa
kRP0(x
:(n@A/
eCWpU(
y^g]}M
G1 &T\
i>7LJ;~*
%X\v|%
R|ksUe
GjUj5;F
n/pH]opd7
f80$<6
x}Yn[
"C"3Ew
kR`"8x<
E-u;Bk
?<!D<*
&e}a..]
t+Xog
M((Wr/A
0/3ORi
(4p-U(E
7HRF]j
5_Q_\r
0BYN?0
y^AYA`}
l>|8X'
3j5?pc
dRF1B{
QKM"ad5
Ir%(
%\10c=)
Kc<\^6
\d@)Wm
:_x$yh
20eX*Q
C]@B4(&
QPB=>z
R0*d.zzP
Z?w>N)x
;4mh-5`
I~04Y T
=FG;!a[!u
pLhVB%
[+3[|l
V6Vk]a
7a.aa,I[
_ftmP.
;_^sjG
b0O.pD
J,i{\}
-|_Zc-
g:qc\I
j'5uH~?v
L{{$jtZ^Z
4}Z4;4
5R#xNw
#"wWYBu
8@Y8-{
R.N~5~
F[zqJo
VOZ{=?7
UR6T0M
}O]n=$
!z#EY2
g1kf5k"
xY*N
Eol/-}
wm+;X#
e:l[GQa
' Ji9J
VPBI~.
#V<#%OF
_>^?Z3n
_bq*M"]
0:k|Dc
y9%(LWji
N:|At*
PQtl*K
.vfrp)0
J1_(JF
PU*Twc
4w\HqO
FX`#(5Eu#
u(:9lI'
%Ov4EGR
RSV1d`
T_b]Pt
wEl6\cL
f7 c1P
XKaZM4$
W?6&Fv
f8GY>
YeYJ$q
.^<jn=.d
dP4:ck
?Ez\=@
'PX@j@
!y[wgmj
<g8'6V4
|4i&MuS)
WLZ#7W
If:|&rF
mIARX5
Uf#/8t
q3T@pX
:%6l']q
6MJo/_n
_wm?=F
\ol[@J
9,V4(Q
6PoIua
e`l`n
?.5RKM
({0Jru(
.NA|)_
WP$X$E
U{N[oT
K+.x/J
7ollb^r,|z
g+;q8?&X
n9GY$W
@8N Qj
jAhU^H
6Js_pi
vw:zvij
Wv>dqei
l5x]Sf
^a/Y\1~
\<9ndz
O1'1XQ
6)IUW`
%ey^-+
;3uh) $,
]lu5MuC
`alMWR
@e40,HW
|n)cb2
^|q/,-b
MwpX49
uQHIR.-O
?tag dN
20_b(9
`J-'\0
u-MhYi[3z
#b?B]j
}C=`:#+z4
52kB:S
=-?J!$
aXuhfQ
=vquc`^
:L69:~
n#hyiRC
><G{e,
!N$9,<
.[ngDt
;+Gp#
%9CG.dP
/wWI)N
~sNXA|Y2Vb
MD)&k'
I9b*?!ewu
4%/X2)mU'
~oZ}?)
VJq)O*
]XOx5,o
-$J72f
R,>jL'
A[!xw0
X+".~u8
#,`1nQI
UNp:=:A
6k#BfY-|
IDAT >
UIi*#%bN@
wM}8llFV
?A3([$
`@$"t1
aa q+{
@&Ch =lxj
+9B]jH0
;+) ce
Y=Bhc,
*6X&OU
^Y7uXu
K]ju.*u~
r_dvbt
R4h|;y
EkEyx
qnW&p%&
eGSV!2
:?tE@t
`5NXp0
r[Vr<&
,(^a9f~W
cPh%C\
|2J4;`@X
LU(^i{
+0y(B$e
0~qlp&
":ScCc
%I^I42
&eTFx%
2pWIVf
cMyW-p
n~N-OQ
9W"H1l
3dw^vH
Rlyv{I
+ZT@U1P
jA%f$5l
/5?&ZO_
r.JN#4l
X^-#kr
RV0b/R
>_BLjn
q+ sGR
ac/\Kz
*y2n?XF
@WG9](
,-W U%{IB
uNDqakX(
o3lKrR
BJQ<-
`vh({6
Fed[,N
+pc5nWX
h#a]G#
;-,^QI
..hH:u
ew#^eN
+go%utp;#
<"zVG#
*7v!g'
_UVoj;
`?<GwBhGN
w>=lfW
.W4W^m
$i8E~a
*}3Sh
$Mi+fh
'B9rb
<1Mvg$?h
JA3f-vB
9)iexF
Q{='Nh]
1CJ+B)
,QV([:Wk
ys^gu\
,/M_,k
_5Du%<
q;~FL
J{<GTx
_-v.,i
GxG,E(
"_*^[8b0
hUrT!V
AnYMs>
>u#WlWt
f:2vm2
w<bV4S
^OJ{bz4iJ
9y2H@}
B<El=<
u~8m$$k
v:`GcT
o9pQ@G
[\~)a'
J*u+.Vi%
l.)q|
G*'/"@H
s>+g9y
i.T`A$"
,f_znn
2|NA]'
8\U2^P0-
!*"c
!th#cy
!e0Y+A
1N4zM;
rxH]j%G
^#j=JNw
y.zzI82v
? ~#V0
hq\+v+c^
:tj0kKdU=
H|i)#c
5+G{[0
4<ZD&a
Vz:HhDb
E\8w/#k
\Qna-s_f]
(_Q,Yg
Lole-x
TJ[9$7
={t^za
'.0+}H
FWMIN#
g8EAi9
$'5vvm
Lz~s7\S
lO>[\$
3=a*"a
:=:Yp,!
1nH=a9
QjE!DQF
+%v `
ID,'~C
;R!~[L
Qch*.!z
YLst2[WBTQ#
x5W?\;tp
D HF=z
&|'P#OL
0@|{+9
~j~stZ
eTK8WO
sZ)`4z
XLKWc,9E
$T8cJ/g
[d25Y<$
h_2Tn?
X*Ty6'
rR@AB6
OyVK#Q9s^
'oy v:"
j]jd/G
QT;~x
w0W|*=
5[0gI`
:Iforg
d`#ek
#n2@EG@,.
2{g+qg5
x/T2\Lf
%HuWlE
_tR'Tp
'N=efy
iMKc=H
#mwGV7g
E|O4=S
akxQ$J
4QKHD_(Q
n[n5CK'>
pLBIm]
q"G~$B3~
C$>o{Q
Q&VQQr
)mMTu?I
]wuOWl
un0-u>T
bo(&uA8
(kBl$a
@[j;f9B
3R'>Dn0
(w,Xrq
pLcw"
6: OA9|
*H&xiUMG4
B7<?Iyu
v'QyP6
S,;FR6
*p{l\H6
H(Uh+K
(09BBl
,bk]#D
cyI9@tP
*Sa8z\
/%M./B
q7%rkXt
+eS~Vw
,fQXY_6&
(wU|vC
R#g9%j
*"H$RK
DgZmN9
BMeZ$d
pYVVlg>
sqFNF"q
RK"nIFN
6m~p"s
j=a*X@
?2B5W\,
XeFQ_
pg\)Vp
l:5|nt
YZ6}8[
)+dt\n
&1=F2:
wmmT]_,
}Tj@Ih
OY?z!^
'Z>s#S
f~ $ F[F
Qdcu~
1<@hh
?j31a3\
R)R0a1
Gw=p't
HOP=9`g1
QM5CJ
V,_o`4
5("U<
vY7L.8
RZ+l/>/
nh1~i;
~#K[.~
O}:/'y!
_my\9n
IXS]T,A
8:soq|`
Z%By|/
0 Q`E_
rb^#ZQH
1`Lb({
VuO=E9c
srH1Mj
*5_ivC
PvNH,n
:/Z'j
/_e)B*zT
XN}^{n
=}.w}_
s?|qmL
{c#Vd?Y
LOX#^*
3uP,<PC
XK<#</*
k^^Hb$0
p#f=Y-
'cGVLz2e
DK6!-V
ou=y_W
OdKjO,
~poSu#
5rG{A&
e\$(1u
ht;3:z
5VY&zK
31yas4
b*!4IV
,ijts%(
ARWDd8
3u~#YEd
OzWo95
.1H3sK
h"ZQDXZS
2~|_v]^
\$,HB,
X~3hdn
:%&rxoH
Aa9HI>
RKe(Wi
.UB)'.TV
FE>@~6y
n6%FFH
m6MS4V
}_kjou
=o'[dF
O_|skm
UfM.Em
7r}r5
13egE.
SVr|YYy
.4bn.;
MX;:&k
YBxQ>*
gtcLDv^
4TC[S
X4Noc)
M5yqVD
m,R'j'
32;L|tp{
2~6Xv6
oN>syC
~b?A$B
6aC;6
iB<x^c
A9Pv9N
`D4-a!!4
aEb|HiQ
/A/OD,
~WnRxM
b%O;Qv
+ZA@ k
{k2o[/
[ee&Z
uI&|pd
{NyV2)
eY)c4!j
3aq9aB
ySu}#C
;Gk&Oq
qC{kN;
hD%Eg'
]@[{T2T
XJ`e2A
qD;NSk
Q<?iET_5
kPmSn=
.b|/Q`$@
GOtvPf
ngRWCT\
Q0TI
LC(R)I"?+
BNL^:9
|#w'6Jd
b("&5h
RWx)7FN
u0p?[S
5x3)*km
daPD<'
d=hv/E
8_txV&
t3L^pX
L(yf@GY9`
cNhdx?_
HMC%&h2%
'Xh<I:$
~*M^jlLT2B
6v),-%
6]^v9z
ySRy1|
X'`-l4
Txtrd$
hp[*\<
G'Ou:0
%R,|Ki
(\V0Y*_
nO8yy2
j Vy}S)
cP!&5<
Tl136m
IJYwEmq
)\Qp_N
H>zLUg;7
3r#IK#
52_GD~
]"U>}}K8
JSN3@}
Hw[,I'
-ZW:aF
zav!pn
%F\`} yL
0xr96Ndz
_<?^uZwnTt
9O|ziYa
X$>J\@
c>#<B1
y5wYs43
tI=OJ/cL
WQY!BB-
NQ,@B3
?GHfT<h
v2nWIA
bp"FjvW
+@'<'_K
*|{~]
'cP5<9
XS@28l
7KxH\j
[_|:tt
blt@F7Z=P
*@]jU!c
}%ik~eo
"F~Sp%
%+B-o0
}8;||o
*P M&O
MbXHJWw
'BQ0X#(5y
3nlhj
OeV>~dO@u
RK3d+'l
;Oq)Xc|
9{z_8{K=
wyCv6U
Mj&</<:8
M7ymy:
8'${En
mKlPx XE
ofGmGBNO\jy_
}~{^zR
.Ee(Pk
u(m5?Hu
EI8>4
`n2:4U!
N?Sv4w
~n:oGmX
.F-G%;
!I<Yaxupk.
=*<?U$
deXUWd
l)Q?~\b
R8fPSc
6&']tm
S0>6%
'zZ;9pz
~.5mLG,
Z8Ns@z7z
S?`6C_
Y=B>k`
{rAfvv
gL67N/n
S{F4|}
( ODE.W
2oleq;
wr^`\e:
%E)XA`
DJZro:
eHn}[$
9fA=;,
HGK43
12BabdMS
jjGl4G
Z2WVtSP
zK&+jU
.T"=GI
L)l:WR
)b-kSK
@;?*:,.
*`@;)(
;.4.2U5
TAp+~T
N2z4ZA
W9:86
RHwzISR
&qLLP=
J3|}qtnL:
ViODM
KTMJQXH
2}I<bg2
_f;B.D=
vufb|S
GMQH$,
>km,X*
OK.y8|
,fyv1L
jlcn((
riXgt`
a<)30b
NK3,F<
S*;+3r
@)lU*=
)?F{7L
DBr5a:
$~b5pt6]x
`hO`P'l
/l_]lZ
zMX}kxz
'KB{a
cr2?6ax
|^3ry
' }nNMd
a.>n\]
Sa{!{~
mKntBm
$YR9HN
ZBU4~
IBZnzhd?
JZXO;I
c#7-$>/
pH+>'@
7KD4_>da
wi,\@]^
s/g9WN9w
JZ6srZ
0SuTAv
(-{VG[!e,
0BM"v(
XwEFe\{
C<zGt<
u]U^_i
bA#mZvR
Pjz0RW,
YRivoj
Ex3 `s
q.Rr~R
&z>~/h
XO_h_|G
YV.}Ib
A|^"-[nI
%dO{Xv
P,%G1D%u
~#r)Wn
`"RH,F
Zq46f
wl?k&)co
=(>tsg
yX-vn{
A&+`;Z
B1U=!V
T0RQ#@
-[>$IV,
O{q[UP
x\X*2X,
hBc[VGm/
r;`3{*
?9dLgA
OCs(&
P_ch(T
:|9vmIEpS
X9qv|G
iE[YII
Q$%!+x>
AZ-.xJ
'R0:8w
dD~!!5,{
&FzSS"
=/0_OG
IDATcI
HE6u3dd}W!ClrMz@3
ovad8o
nWXTMl1%v"R
7.#H!%I
=];:~>
g9@=-7F
_ABtL/
nhFKLo
]}ji]ze*h
&l_N.i
:PXZ:~[
HwA!V#
n0~Z7l/
F$XgtQR
?]ty[t
`KP6OT,
s1DE+RkN
sw}?~v
?a3SfCK
cxGJy,YBsz
q`,w#=FTi
C'+[5y
,B+Fsj
W&]e*z~
^aJZNF
tfqnV&-
Pc8u>Q
[s2Acp
J-CxdQ
k:xE#sz
NUI[T?:z
}cC~Xf
cx|\JH
}]*.KR
6D#f=u5
Af_AI5
V+]BNf
'.iL.'
S>1q3;
D?p-v!>
?*=2wd`#
%2<Xp/h
}zTdp|M
DI-VUq4|
h$X,(/}Tj
i5(t6p
CT`!r>
y2h5}w
d/`rc`$
4|d"BU
"^<7=5]
N_*sMj
AV]#zq
%aIwxT
G""bh{iL
mO6UR/
47(>@u
U+B*U4
.gZwzT
+]]sT3
mXTgmc
f.B"US`$
6O{7-8
.@oHL[
*{|Hi)
G+ |V0
?rY%EH?
v>YdR?
ZT,tU>
fg_fx.n
9}u{Ui
Q87aFx
g-(ec7FJ
D1M!,/
]{;k9
d4Y/9@
45^:oX
uo}PU_
KF4n|4t
C$-i-5r
VOsqhR!
{{d}u[Z
mXrE_r
p\FMCk
]`><W!t
dG]E#QYx
dfEsqP
Bh-&D|
FsxzkxG
|k3{k?^
%6\|q]
(]K]gEd
|.Fl~7{J
T]5L$L
J,"?4\
C&{&FKV5
Maw.JzdJ
J|~4fg
$SwQ][\
;O9D]8
y2"VtVjx
:g_Lpx|m
/P]HA^
bK4rW)
wjs]/p@"
K|(){3xf^
d"VR_v3"y
08:+0"+
T[jy%&
dnFGIW
PwSEk"l
w%O+t=U3
1#n/_Pu
Z8i1(*
fi[t`Z
~XNW\\`
^!H,"x
>O#?IU}
#&U|!8
TjLK8W
\Wby~YA
'yJIZ(
9M~b_r
u9rqmP
!}}x`QC
m7/FuW
vj%W]:l
GOobCGA
1Y/V;QO@
p3Zqpd
)lE&*`/
Y}oly
0qXL>z
O:Z2YB
4`r_Fa
?7"8ck
+}txuo
KXFD+<Q
&-cr7R`
h$9W#$H
[-*_hl
%l@|aP
ad]^I>
~yD<DU
e9]$QjE
_C'b)p
ho!)jYEJ
t5~ybF
5l_c-/%
)gmiUk
g5l[pt
+~~,MJ
%EkGy]
u,PE(Q
$24|<+S
TqXaIu%
*F^Yx8Dv
qgEu?{
&w)]gh
{F\j_{
!m29nr.
($=YtF
/c10kx#
=JZc(I
*1/%{IP
RW_Z*u
Dyn~~Q
o,*T =Fpo'
G3we|8
`E#(fV
^xAFAT
9!-fxJ
n'^9u@
1X@ug>
#LoBYd
Od_^8g
K1[}2s
)m=|z;V
NS]mnmw
-XZt
Ao&(46
HS!({}
7P(6p<
Y']?9
8mzII!le
w0~2a(
Lmw;Zq
~K?3$N
MzC%%Vn(2
!=e-V[
BA`j^v
A-#a')o|ib
hO89n
+VuBTj.6>
r'I=0&
yQ:&iV
L]D2Y xK
c+7O{2
!2bI6c
UQ%/{S9
7@g0 Xx
P`$ 5K
#M#CU!
Ijk%Vc
+(&05<
W{=57
3-IDAT
hd%VK$dy
tNC$-<
MQ.SX0R
jDB/P2
Qe/RLL2
1*3=){
'2yd/G
l<)Ief<
yJ*=3x>2X
$c4&ED
y$QT:V
-kLZ=H
'y;f`K
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
IDATx^
doo(uW
L.%GAjzz
j#~%u"EQ
q891>.
o.Fx">
7z/|#/
/S35+i
/S35+i
/S35+i
/S35+i
/S35+i
/S35+i
/S35+i
/S35+i
/S35+i
/S35+i
x}~z~
PQ{\)[r
F!53a?3Q
Vt`X=?a/i
p~D|l3
QU1+d,
p~D|lS
>AEf3h
cS?6uV
S9@uh|
;o_^f~
']3^E_r
=?>t[b
p(p{2
XG(}|O
k*=eFU
DL=Y5
|(p{27
]e#>EQ
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
fSystem.Drawing.Icon, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3aBj
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Icon
IconData
IconSize
System.Drawing.Size
System.Drawing.Size
height
` ,eV|
'''1;3s
b`_Dv?
xb~~>7
/55811
Xwc#jj
`L=r+;
$9f6+`3
?o mE"
WtJtZ)
fLLqE{
v<jsU]T
v4.0.30319
#Strings
jAJ.exe
mscorlib
System.Windows.Forms
System
System.Drawing
.resources
.resources
WFCubeAttack.Properties.Resources.resources
.resources
Activator
AppDomain
ArgumentOutOfRangeException
Boolean
Buffer
GeneratedCodeAttribute
System.CodeDom.Compiler
Dictionary`2
System.Collections.Generic
IEnumerable`1
List`1
IEnumerator
System.Collections
Component
System.ComponentModel
ComponentResourceManager
Container
IContainer
ApplicationSettingsBase
System.Configuration
SettingsBase
Convert
DebuggerBrowsableAttribute
System.Diagnostics
DebuggerBrowsableState
DebuggerHiddenAttribute
DebuggerNonUserCodeAttribute
StackFrame
StackTrace
Double
Bitmap
FontStyle
GraphicsUnit
Rectangle
SystemColors
EventArgs
EventHandler
CultureInfo
System.Globalization
IDisposable
EndOfStreamException
System.IO
Stream
IntPtr
NotSupportedException
Object
Random
Assembly
System.Reflection
AssemblyCompanyAttribute
AssemblyConfigurationAttribute
AssemblyCopyrightAttribute
AssemblyDescriptionAttribute
AssemblyFileVersionAttribute
AssemblyName
AssemblyProductAttribute
AssemblyTitleAttribute
AssemblyTrademarkAttribute
MemberInfo
MethodBase
ResourceManager
System.Resources
CompilationRelaxationsAttribute
System.Runtime.CompilerServices
CompilerGeneratedAttribute
RuntimeCompatibilityAttribute
SuppressIldasmAttribute
ComVisibleAttribute
System.Runtime.InteropServices
GuidAttribute
TargetFrameworkAttribute
System.Runtime.Versioning
RuntimeMethodHandle
RuntimeTypeHandle
STAThreadAttribute
Single
String
Encoding
System.Text
StringBuilder
Monitor
System.Threading
Thread
UInt16
UInt32
UInt64
Application
AutoScaleMode
BorderStyle
Button
ButtonBase
ColorDepth
ContainerControl
Control
ControlCollection
DialogResult
DockStyle
ImageList
KeyEventArgs
KeyEventHandler
ArrangedElementCollection
System.Windows.Forms.Layout
ListBox
ObjectCollection
ListControl
MessageBox
PaintEventArgs
PaintEventHandler
PictureBox
<Module>
Settings
WFCubeAttack.Properties
.cctor
Dispose
value__
GetEnumerator
defaultInstance
get_Default
Default
get_CurrentThread
get_ManagedThreadId
get_Enabled
get_Controls
get_Current
get_Tag
get_Bounds
IntersectsWith
Remove
set_Left
set_Top
MoveNext
get_KeyData
get_Blue
set_BackColor
set_Size
set_Tag
BringToFront
Invalidate
get_Red
get_OrangeRed
get_DarkOrange
get_Firebrick
ToString
Concat
set_Text
GetTypeFromHandle
SuspendLayout
set_Interval
add_Tick
set_AutoSize
set_Location
set_Name
set_TabIndex
get_ActiveCaption
GetObject
set_BackgroundImage
set_Dock
set_UseVisualStyleBackColor
add_Click
get_HighlightText
set_Font
Replace
ToUInt32
get_CurrentDomain
GetType
CreateInstance
set_AutoScaleDimensions
set_AutoScaleMode
set_ClientSize
set_Icon
add_Paint
add_KeyDown
add_KeyUp
ResumeLayout
PerformLayout
GetFrame
GetMethod
get_DeclaringType
TryGetValue
GetExecutingAssembly
GetCallingAssembly
Append
GetManifestResourceStream
set_Position
get_Unicode
GetString
Intern
set_Item
get_Count
GetName
get_FullName
GetPublicKeyToken
get_Assembly
ReadByte
BlockCopy
set_Enabled
set_ImageIndex
get_Items
get_ImageIndex
Format
set_BorderStyle
set_ImageList
get_Maroon
get_LightCoral
set_ForeColor
set_FormattingEnabled
add_SelectedIndexChanged
set_ColorDepth
set_ImageSize
get_Black
set_TransparentColor
AddRange
get_Name
GetBytes
get_Item
get_MetadataToken
EnableVisualStyles
SetCompatibleTextRenderingDefault
op_Equality
get_Left
get_Top
Synchronized
3System.Resources.Tools.StronglyTypedResourceBuilder
16.0.0.0
KMicrosoft.VisualStudio.Editors.SettingsDesigner.SettingsSingleFileGenerator
16.10.0.0
Copyright
HP Inc. 2019
.NETFramework,Version=v4.0
FrameworkDisplayName
.NET Framework 4
WFCubeAttack
WrapNonExceptionThrows
1.0.0.0
HP Inc.
$b56accd1-2228-418b-8de3-b27880179c2a
_CorExeMain
mscoree.dll
<?xml version="1.0" encoding="utf-8" standalone="yes"?><assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0"><assemblyIdentity version="1.0.0.0" name="MyApplication.app" /><trustInfo xmlns="urn:schemas-microsoft-com:asm.v2"><security><requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3"><requestedExecutionLevel level="asInvoker" uiAccess="false" /></requestedPrivileges></security></trustInfo></assembly>PADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPAD
$this.Icon
$this.TrayHeight
pMenu.BackgroundImage
timer1.TrayLocation
programm
$this.Icon
VS_VERSION_INFO
VarFileInfo
Translation
StringFileInfo
000004b0
Comments
CompanyName
HP Inc.
FileDescription
WFCubeAttack
FileVersion
1.0.0.0
InternalName
jAJ.exe
LegalCopyright
Copyright
HP Inc. 2019
LegalTrademarks
OriginalFilename
jAJ.exe
ProductName
WFCubeAttack
ProductVersion
1.0.0.0
Assembly Version
1.0.0.0
Antivirus Signature
Bkav W32.AIDetectNet.01
Lionic Trojan.Win32.Scarsi.4!c
tehtris Generic.Malware
MicroWorld-eScan Trojan.GenericKD.65857202
FireEye Generic.mg.1fb0cd15b8150e5d
CAT-QuickHeal Clean
ALYac Trojan.GenericKD.65857202
Malwarebytes Clean
K7AntiVirus Clean
BitDefender Trojan.GenericKD.65857202
K7GW Clean
CrowdStrike win/malicious_confidence_100% (W)
Baidu Clean
VirIT Trojan.Win32.MSIL_Heur.A
Cyren W32/MSIL_Kryptik.FSG.gen!Eldorado
Symantec Scr.Malcode!gdn34
Elastic malicious (high confidence)
ESET-NOD32 a variant of MSIL/GenKryptik.ELWT
APEX Malicious
Paloalto generic.ml
ClamAV Clean
Kaspersky HEUR:Trojan.MSIL.Scarsi.gen
Alibaba Trojan:MSIL/Scarsi.1d510958
NANO-Antivirus Clean
ViRobot Trojan.Win.Z.Malcode.1123328
DrWeb Trojan.PackedNET.1872
Zillya Clean
McAfee-GW-Edition BehavesLike.Win32.Generic.tc
Trapmine malicious.moderate.ml.score
CMC Clean
Emsisoft Trojan.GenericKD.65857202 (B)
Ikarus Trojan.MSIL.Inject
Jiangmin Clean
Webroot Clean
Avira HEUR/AGEN.1235153
MAX malware (ai score=87)
Antiy-AVL Trojan/MSIL.GenKryptik
Gridinsoft Clean
Xcitium Clean
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Trojan.MSIL.Scarsi.gen
GData Trojan.GenericKD.65857202
Google Detected
AhnLab-V3 Trojan/Win.PowerShell.C5393246
Acronis Clean
BitDefenderTheta Gen:NN.ZemsilF.36308.en0@aGfYwt
TACHYON Clean
VBA32 Clean
Cylance Clean
Zoner Clean
TrendMicro-HouseCall TROJ_GEN.R002C0RCB23
Tencent Msil.Trojan.Scarsi.Qgil
Yandex Clean
SentinelOne Static AI - Malicious PE
MaxSecure Clean
Fortinet MSIL/GenKryptik.ELWT!tr
No IRMA results available.