Static | ZeroBOX

PE Compile Time

2023-03-17 11:22:32

PDB Path

Dlph.pdb

PE Imphash

f34d5f2d4577ed6d9ceec516c1f5a744

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00002000 0x000d6234 0x000d6400 7.83397529816
.rsrc 0x000da000 0x00003554 0x00003600 7.73826507104
.reloc 0x000de000 0x0000000c 0x00000200 0.101910425663

Resources

Name Offset Size Language Sub-language File type
RT_ICON 0x000da0c8 0x00003145 LANG_NEUTRAL SUBLANG_NEUTRAL PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_GROUP_ICON 0x000dd220 0x00000014 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_VERSION 0x000dd244 0x0000030c LANG_NEUTRAL SUBLANG_NEUTRAL data

Imports

Library mscoree.dll:
0x402000 _CorExeMain

!This program cannot be run in DOS mode.
`.rsrc
@.reloc
_ d(>
_(d(>
_ d(>
_(d(>
_ d(>
_(d(>
_ d(>
_(d(>
_ d(>
_(d(>
_ d(>
_(d(>
_ d(>
_(d(>
h)sV
5psV
7-sV
YZ?_b`}V
YZ_b`}S
YZ_b`}T
YZ_b`}U
3 s\
3 s\
3 s\
3 s\
: s\
: s\
6 s\
K!s\
P^sV
K!s\
fsV
-FsV
YZ?_b_
YZ?_d(>
+*sV
7(sV
-FsV
-CsV
YZ?_b_
YZ?_d(>
_b(j
_b(j
!?_b`
&YZ?_b`U
YZ?_b_
YZ?_d(>
K]sV
K!s\
K!s\
^@sV
 s\
Os\
6s\
|6s\
|6s\
p6s\
1.s\
 s\
K)sV
w1sV
Y\sV
7(sV
{isV
%msV
v4.0.30319
#Strings
label10
pictureBox10
textBox10
label11
textBox11
get__151_696_033_061
button1_Click_1
label1
button1
pictureBox1
textBox1
ToInt32
label2
button2
pictureBox2
textBox2
label3
button3
pictureBox3
textBox3
ToUInt64
label4
pictureBox4
textBox4
label5
pictureBox5
textBox5
label6
pictureBox6
textBox6
label7
pictureBox7
textBox7
label8
pictureBox8
textBox8
label9
pictureBox9
textBox9
<Module>
<PrivateImplementationDetails>
System.Drawing.Drawing2D
EXEC_TIME
PAYLOAD_SIZE
UNUSED_SIZE
HD_SIZE
TAG_SIZE
PHYSICAL_SIZE
VIRTUAL_SIZE
MEM_SIZE
INDEX_SIZE
dTLB_FRM
iTLB_FRM
DISK_FRM
MEM_FRM
STAT_FRM
PT_FRM
CPU_FRM
dL1Cache_FRM
iL1Cache_FRM
L2Cache_FRM
L3Cache_FRM
PTE_NUM
BLOCK_NUM
BANK_NUM
PHYSICAL_ADD_LEN
VIRTUAL_ADD_LEN
DATA_BYTE_LEN
PAGE_OFF_LEN
BYTE_OFF_LEN
System.IO
DISK_ACCESS
MEM_ACCESS
L1_HIT
L2_HIT
L3_HIT
PC_INIT
get_LRU
cache_data
size_data
indata
FromArgb
mscorlib
read_from_tlb
write_to_tlb
my_tlb
my_dtlb
my_itlb
cpu_pc
Thread
STAT_FRM_Load
add_Load
CPU_Frm_Load
Simulator_Load
get_tag_payload
get_payload
get_Red
get_speed
set_Enabled
unused
add_Activated
CPU_Frm_Activated
is_halted
get_IsSupported
Synchronized
check_valid
get_valid
set_valid
read_operand
write_operand
Replace
defaultInstance
addr_hide
hit_miss_hide
rw_hide
set_AutoScaleMode
set_ColumnHeadersHeightSizeMode
DataGridViewColumnHeadersHeightSizeMode
opcode
src1_add_mode
src2_add_mode
dst_add_mode
AddRange
get_DarkOrange
my_dl1cache
my_il1cache
my_l2cache
my_l3cache
il2cache_cache
read_from_cache
write_to_cache
my_cache
Invoke
Page_Table
is_mem_available
IDisposable
my_page_table
set_Visible
assemble
Double
RuntimeTypeHandle
GetTypeFromHandle
FillRectangle
get_Style
DataGridViewCellStyle
set_BorderStyle
SetStyle
FontStyle
set_Name
program_file_name
get_exec_time
exe_time
ReadLine
DrawLine
get_NewLine
set_Multiline
get_Culture
set_Culture
resourceCulture
MethodBase
ButtonBase
ApplicationSettingsBase
TextBoxBase
Dispose
get_RowTemplate
EditorBrowsableState
add_Deactivate
read_write
bankS_pte
tlb_pte
get_pte
set_pte
STAThreadAttribute
CompilerGeneratedAttribute
GuidAttribute
GeneratedCodeAttribute
DebuggerNonUserCodeAttribute
DebuggableAttribute
EditorBrowsableAttribute
ComVisibleAttribute
AssemblyTitleAttribute
AssemblyTrademarkAttribute
TargetFrameworkAttribute
AssemblyFileVersionAttribute
AssemblyConfigurationAttribute
AssemblyDescriptionAttribute
CompilationRelaxationsAttribute
AssemblyProductAttribute
AssemblyCopyrightAttribute
AssemblyCompanyAttribute
RuntimeCompatibilityAttribute
execute
ToByte
get_Blue
get_Value
set_Value
Dlph.exe
get_Size
set_Size
set_AutoSize
set_ClientSize
ISupportInitialize
random_initialize
get_payload_size
block_size
real_size
m_size
get_page_addr_tag
get_tag
src1_reg
src2_reg
dst_reg
System.Threading
Padding
System.Runtime.Versioning
ToString
Substring
disposing
System.Drawing
ShowDialog
ComputeStringHash
Refresh
refresh
SolidBrush
get_Width
set_Width
get_Length
StartsWith
get_DarkKhaki
get_HotTrack
button1_Click
button2_Click
button3_Click
dtlb_Click
add_Click
start_Click
nxt_inst_Click
itlb_show_Click
dl1_cache_show_Click
il1_cache_show_Click
l2_cache_show_Click
l3_cache_show_Click
disk_show_Click
mem_show_Click
pt_show_Click
add_CellContentClick
dtlb_show_CellContentClick
itlb_show_CellContentClick
dl1cache_show_CellContentClick
il1cache_show_CellContentClick
l2cache_show_CellContentClick
l3cache_show_CellContentClick
cache_block
get_block
set_block
get_LightPink
Hard_Disk
write_to_page_in_hard_disk
my_hard_disk
read_page_from_disk
size_val
in_val
dtlb_label
itlb_label
il1cache_label
l2cache_label
l3cache_label
disk_label
mem_label
pt_label
System.ComponentModel
get_CurrentCell
DataGridViewCell
get_Control
ContainerControl
my_memctrl
Program
main_mem
get_Item
System
my_sim
Random
get_Minimum
get_Maximum
get_pte_num
get_block_num
bank_num
dtlb_acs_num
itlb_acs_num
dl1cache_acs_num
il1cache_acs_num
l2cache_acs_num
l3cache_acs_num
disk_acs_num
mem_acs_num
pt_acs_num
dtlb_miss_num
itlb_miss_num
dl1cache_miss_num
il1cache_miss_num
l2cache_miss_num
l3cache_miss_num
pt_miss_num
dtlb_hit_num
itlb_hit_num
dl1cache_hit_num
il1cache_hit_num
l2cache_hit_num
l3cache_hit_num
pt_hit_num
resourceMan
ToBoolean
get_Green
get_LightGreen
set_TextAlign
data_in
payload_in
page_addr_tag_in
physical_addr_in
address_in
prot_in
dirty_in
AppDomain
get_CurrentDomain
set_Margin
DataGridViewColumn
DataGridViewTextBoxColumn
set_Icon
Application
get_Location
set_Location
set_location
Cache_Simulation
System.Configuration
System.Globalization
System.Reflection
DataGridViewCellCollection
ControlCollection
DataGridViewColumnCollection
DataGridViewRowCollection
add_instruction
get_ActiveCaption
Button
MethodInfo
CultureInfo
set_EndCap
LineCap
set_StartCap
Bitmap
set_TabStop
DrawHorizontalBar
NewProgressBar
get_physical_addr
virtual_addr
p_addr
phys_addr
inst_addr
v_addr
StreamReader
TextReader
sender
opcode_decoder
get_ResourceManager
ComponentResourceManager
Assembler
my_assembler
DataGridViewCellEventHandler
System.CodeDom.Compiler
Memory_Controller
IContainer
ProgressBarRenderer
StreamWriter
TextWriter
pc_counter
BitConverter
get_Color
get_ForeColor
set_ForeColor
get_BackColor
set_BackColor
set_UseVisualStyleBackColor
data_address_translator
Simulator
.cctor
get_Graphics
CreateGraphics
System.Diagnostics
GetMethods
System.Runtime.InteropServices
System.Runtime.CompilerServices
System.Resources
Cache_Simulation.TLB_FRM.resources
Cache_Simulation.dTLB_FRM.resources
Cache_Simulation.iTLB_FRM.resources
Cache_Simulation.DISK_FRM.resources
Cache_Simulation.MEM_FRM.resources
Cache_Simulation.STAT_FRM.resources
Cache_Simulation.PT_FRM.resources
Cache_Simulation.CPU_FRM.resources
Cache_Simulation.dL1Cache_FRM.resources
Cache_Simulation.iL1Cache_FRM.resources
Cache_Simulation.L2Cache_FRM.resources
Cache_Simulation.L3Cache_FRM.resources
Cache_Simulation.tlb_pte.resources
Cache_Simulation.cache_block.resources
Cache_Simulation.Simulator.resources
Cache_Simulation.Properties.Resources.resources
DebuggingModes
entries
Cache_Simulation.Properties
EnableVisualStyles
ControlStyles
GetExportedTypes
GetBytes
Settings
DataGridViewCellEventArgs
PaintEventArgs
Globals
get_Cells
get_Controls
System.Windows.Forms
get_Columns
set_AutoScaleDimensions
fetch_instructions
get_Chars
SystemColors
disk_access
mem_access
Address
physical_address
virtual_address
in_address
phys_address
cpu_address
v_address
paddress
vaddress
dtlb_miss
itlb_miss
dl1cache_miss
il1cache_miss
l2cache_miss
l3cache_miss
hit_miss
pt_miss
components
DoEvents
get_Rows
set_AllowUserToAddRows
Concat
read_write_stat
form_stat
p_addr_stat
v_addr_stat
hit_miss_stat
GetObject
src1_offset
src2_offset
dst_offset
PadLeft
get_Height
set_Height
give_off_bit
dtlb_hit
itlb_hit
dl1cache_hit
il1cache_hit
l2cache_hit
l3cache_hit
pt_hit
EndInit
BeginInit
GraphicsUnit
get_Default
SetCompatibleTextRenderingDefault
DialogResult
HorizontalAlignment
ContentAlignment
Environment
InitializeComponent
give_me_int
OnPaint
set_Font
get_RowCount
get_prot
search_pt
Convert
cur_inst
nxt_inst
data_out
payload_out
tag_out
phys_addr_out
address_out
prot_out
dirty_out
SuspendLayout
ResumeLayout
PerformLayout
get_Text
set_Text
set_HeaderText
filename_text
form_cpu
my_cpu
get_Peru
get_rCpv
DataGridView
DataGridViewRow
dtlb_show
itlb_show
dl1cache_show
il1cache_show
l2cache_show
l3cache_show
dl1_cache_show
il1_cache_show
l2_cache_show
l3_cache_show
disk_show
mem_show
addr_show
hit_miss_show
pt_show
inst_show
cpu_show
rw_show
get_idx
set_TabIndex
get_ColumnIndex
get_RowIndex
set_FirstDisplayedScrollingRowIndex
PictureBox
TextBox
get_LightGray
get_Assembly
Memory
read_from_memory
write_to_memory
my_memory
op_Equality
op_Inequality
get_dirty
WrapNonExceptionThrows
Cache_Simulation
$0389e15b-b2bb-4840-bb19-1e4c86e99e5d
1.0.0.0
.NETFramework,Version=v4.0
FrameworkDisplayName
.NET Framework 4
3System.Resources.Tools.StronglyTypedResourceBuilder
16.0.0.0
KMicrosoft.VisualStudio.Editors.SettingsDesigner.SettingsSingleFileGenerator
16.0.0.0
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
fSystem.Drawing.Icon, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3aBj
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Icon
IconData
IconSize
System.Drawing.Size
System.Drawing.Size
height
jv[v"j
38aY_%
bB%3Hb
;NI*kC2
auM/<N
F1pv;<
Bl&?!z
NSeR!;
,X{_z
7aE0m+
{HYRRL
f3h(C?
\ZSV\.
IDATcj
P6MZz
>&`aUd5L
*bsXeR
gJOpW6
#ffKOrW4
`1L8);
\vbv$+CkE5P
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
fSystem.Drawing.Icon, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3aBj
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Icon
IconData
IconSize
System.Drawing.Size
System.Drawing.Size
height
jv[v"j
38aY_%
bB%3Hb
;NI*kC2
auM/<N
F1pv;<
Bl&?!z
NSeR!;
,X{_z
7aE0m+
{HYRRL
f3h(C?
\ZSV\.
IDATcj
P6MZz
>&`aUd5L
*bsXeR
gJOpW6
#ffKOrW4
`1L8);
\vbv$+CkE5P
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
fSystem.Drawing.Icon, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3aBj
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Icon
IconData
IconSize
System.Drawing.Size
System.Drawing.Size
height
jv[v"j
38aY_%
bB%3Hb
;NI*kC2
auM/<N
F1pv;<
Bl&?!z
NSeR!;
,X{_z
7aE0m+
{HYRRL
f3h(C?
\ZSV\.
IDATcj
P6MZz
>&`aUd5L
*bsXeR
gJOpW6
#ffKOrW4
`1L8);
\vbv$+CkE5P
!This program cannot be run in DOS mode.
`.rsrc
@.reloc
iB#(
|i(9
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
XZ&37T#
}<mfm */*&*
?5;-"8"*"
%:':/:@*
E!`a([
s*"6(*
V7C^kLe
{3JdeZu
;Y,H#+
v2.0.50727
#Strings
C2200.dll
mscorlib
System
System.Drawing
C2200.g.resources
<Module>
RuntimeHelpers
System.Runtime.CompilerServices
InitializeArray
RuntimeFieldHandle
.cctor
Object
IEnumerable`1
System.Collections.Generic
String
IComparable
DateTime
System.IO
ReadAllBytes
Convert
FromBase64String
Bitmap
GetPixel
IEnumerable
System.Collections
Encoding
System.Text
GetString
Thread
System.Threading
Environment
MethodBase
System.Reflection
Invoke
BindingList`1
System.ComponentModel
Stream
MemoryStream
GZipStream
System.IO.Compression
CompressionMode
IDisposable
Dispose
MemberInfo
ISerializable
System.Runtime.Serialization
GetTypeFromHandle
RuntimeTypeHandle
Assembly
GetMethod
MethodInfo
GetMethods
ResourceManager
System.Resources
GetEntryAssembly
Collection`1
System.Collections.ObjectModel
Exception
EndOfStreamException
IComparable`1
NotSupportedException
ICloneable
UInt64
BitConverter
ToUInt64
TimeSpan
FromDays
op_Addition
IEvidenceFactory
System.Security
Evidence
System.Security.Policy
GetTypes
IConvertible
Concat
ValueType
IEquatable`1
StringBuilder
Append
ToString
ToBoolean
ToInt32
GetBytes
MarshalByRefObject
AppDomain
get_CurrentDomain
get_Default
GetData
<PrivateImplementationDetails>
B0CFC3D6A6111A0ADCB03ACDAAE9C04533E17A5B
get_Width
ICustomAttributeProvider
GetExecutingAssembly
ToArgb
SetData
ICollection
get_Evidence
_MethodInfo
System.Runtime.InteropServices
GetObject
Activator
CreateInstance
ResolveEventArgs
EventArgs
Dictionary`2
DeflateStream
set_Item
get_Name
ContainsKey
Monitor
ResolveEventHandler
add_ResourceResolve
ToDouble
UInt32
ToUInt32
ToArray
GetManifestResourceNames
GetType
Replace
op_Inequality
AssemblyTrademarkAttribute
AssemblyCopyrightAttribute
AssemblyProductAttribute
AssemblyFileVersionAttribute
GuidAttribute
ComVisibleAttribute
AssemblyCompanyAttribute
RuntimeCompatibilityAttribute
CompilationRelaxationsAttribute
AssemblyConfigurationAttribute
AssemblyDescriptionAttribute
AssemblyTitleAttribute
SuppressIldasmAttribute
Twin Electronics 2022-2023
Loan counselor
8.3.6.3
$200903e0-fa46-4f31-99b1-bd5087556610
Twin Electronics
WrapNonExceptionThrows
2006 Mercury Mariner
_CorDllMain
mscoree.dll
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
hSystem.Drawing.Bitmap, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3aPADPADn3
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
%&'()*456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz
&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz
iKHJ$Nz
r:du'&
Ki#^dVU.3
n?Zl:U
Sv6pE(
p+6hvLb
)4sJLq
E@^ HS
n,}1Tm
jWHiu5n
TOSV"
6~U<P7
2(BL/e
TS]M;bw
!Zk?2
RsM+`
1,r(LM
Hf~F:g
cfE*i#
'=(I\m
QOwg^[
J|eXd.(
SyM$m&
v?ZoCO
^!Kg<}
\Qf+4=\
hkR@Q@
4+b23M
G?59NF1Q
zvU;R2
vb2\})7r
pEQI!C
l`?*Wfv.
`(6)K
@2=:Ut(s
;h;h)eC
2I4j=P
NGNK)<q
RF8=;P
''=}i>
siqcq%
tQE''m
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
IDATx^\
-17c.q
i-OH'$
P4I/9
Ev_,+D?
uk[w,M|
J0.VZ*U
`[`B\*
E<A_2:
i!PCH.
S-,|P~a|S]N~
s3O^+Q
J;f52ie
;V#]Zf
#hVg.mLTL
yD'-8:
%QcXt@
hLdDsc(
jA])VqX
BwYc#+fl
?mX@3G~
?'1%9pe
t"6woX
Usc$Elr
>/`-k;
4z%+#?
/Unmhgm
Dw'\8dL
7:D<~=jw
ADSO2k>
aA5"dx'
TNT>
c/xFhgX
0f6lZd8J
=UlY"L
YKKuqp
DEM36s
f6!Fa(K
$Y4D!N
32:=y<
~%2g#q
\)ulVW
!f'L{_(
AelPED
qw`,G[:EF
bFYxYY
]}6fWg
{X8pX~
}#-no[
x,}rbY
&M:k>D
UD|Ar12
v+ Ns1
A x_rH-
oCd2UTF;
\>Osh}ah
`@+zsXx8}5}
TQpTc+;v
"rH)DL
j|@AuY
km,>'O
}O,t@h
{A7`ET
e1uCnK
=.z|;US
c1njw~Log
Y _Nt3
l"13S%
WW{'o1xt
@:N)|v
C]k(aY
94|SQQup
iDMOk^
S~;p:!l
6<9B~%
o6K^^-
p$Z-`#
II$Ki)
Jf/-_F
V\@[hIB
~5/rcq
~R_HWp
|7#GUH|
@ Vau!
+ ~ 'Ul
:2g;7.yC
fw+Ob^i
<HX?jp
,)8+c/
\T{EV}
?0d` >
)s`-CH
y9t%Z)
'2MGX!
VrZujw
oB'hR}Y
DB|oo9
b^(D\.>
:;k`Pu
%XJrJF
I.KF$R
h`^3)D
M-~000
PN/x/x
b)k?we
G+ABx.
gX1,@N
x\x_!z
H)#~2
>J>Htb
.+O.r7
X4|1w
Ug"wd,
@ O(154S
a`ig?{
;)~*4"
0-15+J
B`~XzR
,hV,,M
.u"{i$
qW`KEQ
Q$g\CX
$zMWyG
DM0q_
nxtI[a
adFS2+
$;(B(!
a%ze122
h]h+E+
QsMGon
=Kd4"_
$Ffoli
w&D_~z
NhXW`?o
L7eMRqW
b{TyU-
(P45g1
E~~b~3
Qd{Hu'5[{
(eE>bQ
N(7'W6F[
j}CXm*
|A(P V
D==Hk/
^Lvok"
}NY([9~3;
8rU`QfI
-?Y2}:
WMtmMA
b,_Q?'|
B$nj\ek
,||H.
+?&!Mz
P.rM*L
v3Gv=40
q['6wif
+$pcKk
3-+i$X)<0
s)$(}s
z}\k`x]q<-pgl%
`0jUd)=
QVt4N)ne
}pl,Jv
Aw;x{-
qvm5eJ
{A\14
|*?W-B
?gEzx
fCANFW
kG#T*5Jm,,r
GvX}kF
kV%'o"
d$d>Gkyc]
C3?,9z
Yn~K*B=&'
ni[J7~.c
{#)(z#]
Y%,O:7
?=V]4_RY3
EK-Wgu
I>Z1U,
Ko.gNqyny
`PoWjH
|l6n8!),h{}
8odYMdOX
uEP='a
O X"!e
N{8smE
o8+SImA_
EZZ%X3
]O<yof
}ZUsHz
c9frE
REX;|M
z"fEW0A}
cEADJVJ
nJ g/re
!=6px1
z]2eVL
! hRcrJ
Us[@`I.o
<8)(,|
[B"7wg
a?fWu#
f v6f-
<eI^;Z
?]&v:
32bCS,-M-
Mi%^H{J
j-eY}8
$!>Y"E
jryi&7#zy
n$4geU
9d>-^t_
dl"~dL"5
/]]H,^>
'M%EJ(
Z6aRcr
T4)Sm6
nPt~De
hs%KL~
X)W[ZS
=|JHcU
O%!MQ4#
N=d(#
zQtWfy\
u ?]@!
:s)~j^
b8Y3$}
{&mo}\
f&0#%|
M~wOs`
[(3@2%c
V[`bb"
'(y2Zz
5O(&/z
r#p{FZ
oc;>J;
3,z@=s%
]&yj!4K%
$6vI:Z
?0>P=
B(!E|d
_SleJTs
LXD"tyIi
'{|pv;}e
a"Ir{dQ
C Fzgv
e[.`Lh
v+vwwww
~| Kpn
??W88
<|~+-[
#']x]cjQ
w:'zA.
\gOXw%
o=Lc7mx
YXWVbq`;
2O{,_W$
F EMj1<
{r""Ma
s|b|N]
42DZ%9#B
k6!)U`j
VdfdTQ
*K,CbP
_Z:"2g
0)S^r\
B5ehn
$**Ec]2
'fhlPy
JT_hS;v
\j9e X
2Sh'@Lb
IvJS$ho
#Vc"{A
7h{)Lh
61)Y;q
8wUhE'
o9JV{djP9
v%\9bM
*0*CFs
0Mo#e
=4xLxH/
Wv?mkS
WPz#7l
EHg|RZO
v+{l;85\W
qC!3~h
Q@(.+/
oP7-\v]
?0d`Pv
m|-wI_!
N-7k6lqj
C!Z-rC
,ETi|J
=~,Zh>Fn mo
a8|hTYj
ebTdc#3
!i^+#
QTHDvA
!A;{oyzo
Hj`-^+T
4GMVy4
.zhrQ{e
?0DLsaa
-Z#TeQ
LBPHL/
>R6t:]
]2d.?+
<:~ F3
FDJK0"
"17IL*
$IN9nq
~kK]1W[
jFc'V#{W
/a9 5[
K4P`i:
oaJ'98(+K
_{-7[L
#w-[>H
giCcZH
,=9Bb,W
a<GNrd
xrioZI@
Oh`I\sH
teQ-E2
lRBv}|x
d;pH!A
"S`GXr
OJx)8s
+Vi oQ
irfBk
{0%n9f
U,1F?l
5R=%tS
-)h)9HC
/M`<atj44
a0cQ Q
mdI++0;
:&F2q1U
H_[2\0
6L985.M)
PyG[;$
w23VV4
iPFU`T
2TL#g8
(iaR,VRw
zC-Ofl~
:xtWgO[}
_4IfJs
BKFX\PXh9
.Qi4$.
)E!cy{
I&Qs4~
n%'*_2+
RKrIFmr
7HquHv{&U
p]78Iu
~^qS}p^
`HGG N%,
N:6&%ZVtJ
tg,?j%
g9o~3x
O5s!n=
1P%Xj+
cFbe*b
|!}=vY
_q5Rnn>k
v-BM\
eng79yJ
,8hIa3
GC3QpqA
;g-9yG
ExhXd'
$}q{V2R
,#KGhz
Rq0=gU=)
d_=@y>
;SZPJR
;YjHwm
YC\s6< #
[w!3Z%z3r
:/P0b1
|0fHWYt
gdl"PS
IeeE@ S
#<;HI2Y
C:;sF=j
YgutHl
G*[LiDT
K637m\
o}/[wm
,_4,>k
^~9A e
_Dh+\O
yMl}xYR
IH:F_`
yu8?>J
_4\.W;
^F-!$g+N
Y`ZrZr;
Me`0Q(
[4'pAa
r69&=h1y
Z1NtWFr3
J-qW^K
>G.m[?W
'KS4 2E
SFQ`~-
U-Y8F6
stvs&O*9
4V3|3\
C59q)]
SgDsn
^fB/+3
]{DWL4
*:MykIf
L'Q#+,
vflNZQ>[
F+,9Sg[
9BH>XF
YYSvt_
v:U'?!_
^AucqW
s4L7x/
lbRnW(
mW+.mj(
<cM+5m
zS]q"E
}YBOOt
@|-#Y\
18AEI%h<
qIto#PN
fXlWf{).
v`1[KI
gK`|^,
jC5'(:
#`|.SN`;
RrF>v,
Y[D) kR]
e%{0Ht
0:'~3@lCR
h:&)t>
7G.9]n
@cOS^r
za9=Fi
^t{k N
o7.Vbea
xB-^2
X\bl`t
iC$z0.
=;+?9
IL?{OS=
l`eF_|
bDPCb6H
h2B?0K`
M1+=>>o
L`cH\sb
@P|qj\?
GXwzbxe
G/=Ix+
$]Y]XX
\~BZ7s=eZ
2GK#P7
yV(o;4t
l`4]Iy$*
`|6SX>t
AaHO0@9
2rT3zFF
``+aE>
<=jxe[{
3&$[=v
)'dXA0+d6@
<K](E~
YA~yQj
2VLg
}/#{!
WQh5 DF'E
UW^9xN1GZWyc
64P*#d
g-WcVFLg
\nN,]/
2~-C1$z
nk8}q
^Jf,f9<
mn#49<
cInG7,
:y_5u{
g^v]U[
n>~%A8
ZE<#o_
'Z(-q
"=l2!z
_}?Hg,\6I
hR|A w
K)B1f&
<6!8(S
I`L(,`
up%SA/~
T$))HP
-!qibf<
oonNX{
c!4LV8
gda%Lr
n27+Ad(
8}Eaic
jx8oY8&
1HY|GJ
B~]liE<
qo{>=2
{}zpTro
]OJ.dMf
8H!Y; m
IY&f1Bh
q#^an6
w_^V>~H]]
R`Nw\@
e{"QM?R&
67IN&1
K<rpy|
z-I}^h
;%=<?m
#n'"g?
8j73".a6
J>tru4
B,O4#Y
*$%b@
mo$=MM
sXG cN
3W6=2^
L*BLic1j
d7+O5W
0I#+st{A<
3f@ HN
hkU*4u
-^(gh]'
\apEhN
qp7XA
%I*iHU?
&,u\;X
#={%H
D7D<vF\F
_i:<cA
O2&hQy*
X<VQ7|
xO*~r
&<?m+C
D5]KC7(
)|C^J^^
bU<:%_m
nsib"#Y
JCbqJc
+-BWxv`:
?ki%X1
yWhQJ0
LJk#TO<
rKDe!!
EqmF(kP
lP@g<#L
Ev;8ae
[TdS;m
H=ci3z
gRW.4t_
P}Jc#
JCVT2|
Ft~b{;
h+ocD&
y_^o|;
:s>__,
;($9n>
rfRHVha"
%HvHA[9
LuQs[Y]
Zk0N+oG
-<w.OHS
6GjIf&)UhI
MgZTi+
3Hnuu
-[Du8d
Ld<SW&
,<b|)z
4J?_>g
Y4bCDP
8$OH}>n
_:glKO
WKj_X~
vJ5VEy
lNqkt,
u'_.q4
D[RWQ
HbY\>slyHE&>
3B<<n>
4f')5<3\
N(HBejK/
xENmG}+
{IHiT*
mh`dS\
'^g"RAs
]M`aa!ZI
m+_q73G
8:npIJq
se0,q
'$=zc
~V7^']=g
r-hqq&
p]"UfobU
yi`Dtta
O'xUFE
UqbW83
~GhDj;
}@sd422
D@ %;i%cp
+9[l-z]
>-:jRqKV
9%rMw
m0+`q
$;TC ,
h>q3;;;s]
:Z<:hZ
p7YV\7V
jlC[2t
eE<KkThN
Rq`;NZ
uAPS{_
W32"||vw
ek^}#%
h!!P32
eIAawO
@clrQ~
Uukku
ZpEYM_
)F^.R9
<>0JD"
MO:2=\;
h3S@|RB
uo5W!ba
kZ-<RWtS
SXP@D
u}rOGQ!
(EoHLBC
$O^<(
S>;(E=
x-P#B}
7))hd*
0B`|yy
tvmN|E
mM8\s
#VE$<'B
#/n=vbC
[7~Kqq0Rd$K
EOwSU4
2 hv|2
:&n6;
3"E$j
m?1\"ag
VVLr8Zo
[]w/^w
ezIsIN
j,Ugkes
AJP88B-
G41U^P
SFI&0v
@\'%!}
1}v>y?j
f]nBt,
^KR"E)
mAhGG[J
upnkiy\
eJHK{Qk
>#_._v}
r:LT+L+;>
E"P(bc
:>N+E_
EVFzFO
NN<v@|
X7gEZ]
Xrkwpb
SGkooick
3sSIR'?
3ufc)U
PD0M@e
_/H0e
YMrlQqkF
|]<uBO
%3{H2ds!
w5@[@g
ZF6p,-z
,ad+(sE?
CN,c,V
\ky~2p
D=*vr$
u?)xE+C
]wDG3d
_2j}<p
u[gMRb
?k70O#&UP
s^KatW
j7"-bsl
{$mHY
Q%K4R,
A)Bg@F? KOe
R.@uRV
^_YBHoIo
-6PmN
Zc1]W`
5:u7*IQ
]=0qcJHL
63/r-<
\x0Mqr{
)Nn.VEz
_kxQ!y
&=5G7Y?:
`R9fZ-#
+~f#I&
|#~l(Py
F|eb7Y[O
<9/S,'
)`]Ob;
iT8q<
Qs'I%SJ
<f/&$w
S-K5b{=1
JC=K*&
n?%}9!
w/yzDHge
=Vm+%EA
y v)V~4
5&4Q$Z
/\0FCR
{6]>8d
Y7h*H!
s@\sJ
+)kK&9/
`gho:~;
G-fb7g
{{?~2t
KYy??@
'.,^-h
.cvE6q
+|% QsZs
i]QX%z
W1(#VK
lpelkM
mgVcl:'
DQm`@X
cd_IbV
Y!pq='
Y3$bSLZ
_p<(s3
'Qs](CPw
cK!p i
A!E`/2O
D0Bm<_
LA]~zY
z?U=/kK
N9k!;j
4hFy{Q
8AM'Z-
*5-*5A7Y6Z
{XAV*9@
jh5?1s&5J
$AM)|'
\j7*.LW
q({;mC4
{j<=.o
aeYkona
`K<vCz
Nk9}G6
`S)`5
y3aJdV
q{j~="
"0f\z
^xX0Kh
6 EI\
AzGeT\
vr{n2O+
o1M^-w
CCz/P~/
|y0%T4
?9+jB?
{9=cIb
L)<Ifv
\5[e H=&
H#ER|o
V_efo*
.Dqc4c=
c8X.1P
Fp^.DZ
/#BI\s
!3,TwsL
D_yd)@
7H"pwR
$JFn!q
?qt`ExG
WQt4Ih
4WmQp
>IjLl`
i=N;'9k1s:
<7P1ZJ5
AM6%y
.Jv_>'
5R^m8(7G
J\5&7l<7
EG^YIY
d)Rc)O
V?KjjI
byf2C0
7l&dLI
`!9CrO
`s)^7l
1XER@]|J
S:dDdaB
|*qhti
Bs4x38u
#79c%]
+8L#>~-
Y%'sr'L;
G V!Jm
Y7\-Tq]
hbHq0a
49s">w
eVzEHZ3
-`@3&9
^D:<e-
+*;\T7
]}b{LCdE
9Qx$jN
yRe@#H
XmS"T!
;~MC'l
[S:Y@=
L~9vMrU
UTljj:
QsKTk7
HDuaH%
'E;&k5N
o|s@R{
b79O5M"
n\xJ*3
5:FR*U
e|;si~
'X2e)1
x"?Bl{
<`%!G-
_&bMo"p
1n8WR)M
~o';<J[X!
t3)Uvx
Fyx<sQ39
g9w3R1
2>Vf3
"qV<<o
%TS;e(
-{%!E]
aJ{Aii
H=FSKeZ
7k!0Ua
[lF{;v
OS\84w
+`:4]I3
*PAG$G
_=7J78
,<Ovk,
(UZ`yP
PR`A3$9
v+0c@ 
<,{^"n
!oeQ2~
)T$O]m
~e0(rx
/szien
=A(&i_
CZBlf$
vexpt&
b{-QEu
Ev9H2J
;\w-/+
dnmF!n9AM
b1/I_k.
BhFqvC
%EQ1i1h
1>ANcUT09Ab
dar"MJ
n&1XPAPXc3
gDLs]Ar
VUf>zJ
R<eLbY
Pu R|f
b{c]5+
?.=n2(&u
>]1:SY
-Q:-xJ
m48GLy
gGXP4@c]
?Int3/fg{e7Y
[7d]x?
hJ-23Gl9
}00p:S
YHam5W
)W!tj
@K@4[7
ynkVNk=u
_XC/2l(
kk(]Yz
2Uk[.Y
fjQC~(K
+D1;7;4
ru5g-T
6+ f9HD
g13{Ii
jo#7,L
y;V|)b
4l2$q9
v+J+H3.,
j}8_oZ
^Cz<d>/s
uz'31g
luiRqk
e!>O-?
ribK}*=
z3hDeB
f6|z[&
us<)9LdQ
h&U8l/%
;T<MiH
@Ao@L=
J>UiU 00
[Kd6/6
X<B"(z7
si8tlA|
~WnL3\
`PlCh+
Ri!Ir
p\C<-g
+bR`QZPoA0
3+113u.
~jX\Fh
Xs7xLf\
T1w!%5`
)c?BtS
\<?OwS
5'067+
(SuP=
R7R]8&2X
Z+gTW;
kPKC%!
C;O x^)U
f?8"J,
1$UD1x
4V{i]m
%{xxLhP
(\{\wfu
e=Y>&\
v>&e 0a'
A8==>@/~
g:^{4E|,
kwqcHm
m+zz6q
c_9Rln
C/ft(MA
Zv,[oS
H^8[~Y
5E|?7I
Txl])
hWw$dW
6J~DHR
{+!yBs2
3(PXyj
W=ysz_f^uoeV`
<y(b+U
d:p(e4p0.j/
caJ*e#
"q<5M4
_9&W]1
uo@7m^
%`L1i)
Le*F$bw
7[*JP`
HqBHN>c
M*Z{v
}ipw)uU
(X"El)
}=wyoy
8(},5p
&9{1QQ%DU
l?hUl/
rH_biy
}/Lnz,
la`wOg
M[v67bQZ
O\*|`O
{3:L#Ll
&WVi5\(!
.lNG5_O>
BA.V?
>de|,p8
g^x?X7z
a(Mx^8
~`8gmZ
YH.<(fWc
E#.`K_
O}Z4]d
8H@~dl
+O_hO>
@vg{2
PZ1[t^F@
T* "w0
E1ggn/
fuc{xU
&-)),j
2f/x^`p
QsVp$q
u|~Ar'#X
EN/~=s
$qjc%'
xnJ2`o
\s_Qrbs
B+9hR<
oZBB]
++oZz0,
y"{Ohn
>`wry^
<e\vk#
0>u#C6
Q;3:eD\
-.W`e@|
o;Q/4'
cr8Tx
|U%Vl1a
7a5`}VI\@@
X!Z=x
XIDATN
Zu64i3
m5%x\0
T1O Xz
>&ZYhc
57_f_M
!\2VW"
<6t@|jJ
elLxqP9Z
?_ZyVF
@$^/:P
Wn<0T|o
<G%qOy
F+'Qsx|
SN9Y#-
\t#<k^
)Uyuq:
l'c"7v
wzaKJM#LZbZ
uH[GbNbQ
bKqyH1
)Ir*C%
#)99eb"(
{3\gF/5
`R5`P=
};1jD\
vLSceO
lpmU'LT
CHhllLA!L.
w''ea7#{u*
v#Axn
?/@T6_d
My|!&o
>MMWdE]G,
2--D:*-
,G_aUc[~
ie>Eu>
hltg8"<
17I=W##
FZ0*J*
S[&[Z{
DNYM.S
`wF5)
R]50yC
P e9BU2
r9|\p-
B>v'bL
`pP,S@`
jkTM7Rw
S>U@uL
b3&B4e
rDHrJ8
-dOq/G
$bo;R`
g7W^8Y
N..LgH|q
rwK\m!
ksq,=p
X=4fhDr
~9'a1"
iax"Nhm
Gy?qc
V-hlCt
@'Iu.bK
BxuH0
>tX`0 !
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
RSDSQm
Dlph.pdb
Antivirus Signature
Bkav W32.AIDetectNet.01
Lionic Trojan.Win32.Noon.4!c
tehtris Clean
DrWeb Clean
MicroWorld-eScan Clean
FireEye Clean
CAT-QuickHeal Clean
ALYac Clean
Cylance Clean
Zillya Clean
Sangfor Suspicious.Win32.Save.a
CrowdStrike win/malicious_confidence_90% (W)
BitDefender Clean
K7GW Clean
K7AntiVirus Clean
Arcabit Clean
BitDefenderTheta Clean
VirIT Trojan.Win32.MSIL_Heur.A
Cyren Clean
Symantec Scr.Malcode!gdn30
Elastic malicious (high confidence)
ESET-NOD32 Clean
APEX Malicious
Paloalto generic.ml
ClamAV Clean
Kaspersky UDS:Trojan-Spy.MSIL.Noon.gen
Alibaba Clean
NANO-Antivirus Clean
ViRobot Clean
Rising Malware.Obfus/MSIL@AI.93 (RDM.MSIL2:C++gI4QsyAjnaphTvkstjA)
Sophos Clean
F-Secure Clean
Baidu Clean
VIPRE Clean
TrendMicro Clean
McAfee-GW-Edition BehavesLike.Win32.Generic.cc
Trapmine suspicious.low.ml.score
CMC Clean
Emsisoft Clean
SentinelOne Static AI - Suspicious PE
Jiangmin Clean
Webroot Clean
Google Clean
Avira Clean
MAX Clean
Antiy-AVL Clean
Gridinsoft Clean
Xcitium Clean
Microsoft Trojan:Win32/Wacatac.B!ml
SUPERAntiSpyware Clean
ZoneAlarm UDS:Trojan-Spy.MSIL.Noon.gen
GData Clean
Cynet Malicious (score: 100)
AhnLab-V3 Clean
Acronis Clean
McAfee Artemis!13A237B2F704
TACHYON Clean
VBA32 Clean
Malwarebytes Clean
Panda Clean
Zoner Clean
TrendMicro-HouseCall Clean
Tencent Clean
Yandex Clean
Ikarus Clean
MaxSecure Trojan.Malware.300983.susgen
Fortinet Clean
AVG Win32:PWSX-gen [Trj]
Avast Win32:PWSX-gen [Trj]
No IRMA results available.