Static | ZeroBOX

PE Compile Time

2023-04-18 05:43:37

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00002000 0x0021cbc0 0x0021cc00 7.9989099119
.rsrc 0x00220000 0x00001908 0x00001a00 7.12597778843

Resources

Name Offset Size Language Sub-language File type
RT_ICON 0x0022006c 0x000012e0 LANG_NEUTRAL SUBLANG_NEUTRAL PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_GROUP_ICON 0x00221388 0x00000014 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_VERSION 0x002213d8 0x0000030a LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_MANIFEST 0x0022171e 0x000001ea LANG_NEUTRAL SUBLANG_NEUTRAL XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminators

!This program cannot be run in DOS mode.
`.rsrc
bY {z}
_b`}*
_d}*
__d}*
_b`}*
Y_bX
Y_cX
Y_bY
Y_bX
Y_bX
v4.0.30319
#Strings
Kteudejhf.exe
Kteudejhf
<Module>
mscorlib
Object
System
ObfuscateControlFlowAttribute
SmartAssembly.Attributes
Attribute
AssemblyResolver
SmartAssembly.AssemblyResolver
AssemblyInfo
ValueType
AssemblyResolverHelper
Resolver
ResourceResolver
SmartAssembly.ResourceResolver
DynProx
Strings
SmartAssembly.StringsEncoding
DoNotPruneAttribute
DoNotMoveAttribute
CompressionAlgorithm
SmartAssembly.Zip
Inflater
StreamManipulator
OutputWindow
InflaterHuffmanTree
InflaterDynHeader
DeflaterHuffman
ZipStream
MemoryStream
System.IO
SimpleZip
__StaticArrayInitTypeSize=12
__StaticArrayInitTypeSize=16
__StaticArrayInitTypeSize=76
__StaticArrayInitTypeSize=116
__StaticArrayInitTypeSize=120
<PrivateImplementationDetails>
PoweredByAttribute
ResourceManager
System.Resources
CultureInfo
System.Globalization
BindList
MOVEFILE_DELAY_UNTIL_REBOOT
hashtable
Dictionary`2
System.Collections.Generic
Assembly
System.Reflection
Version
Culture
PublicKeyToken
MustUseCache
OffsetValue
hashtableLock
cacheStrings
offset
value__
RawZip
RawZipAndDes
RawZipAndAes
CPLENS
CPLEXT
CPDIST
CPDEXT
neededBits
repLength
repDist
uncomprLen
isLastBlock
outputWindow
dynHeader
litlenTree
distTree
window
window_start
window_end
buffer
bits_in_buffer
windowEnd
windowFilled
defLitLenTree
defDistTree
repMin
repBits
blLens
litdistLens
blTree
repSymbol
lastLen
BL_ORDER
bit4Reverse
staticLCodes
staticLLength
staticDCodes
staticDLength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.cctor
System.Data
DataTable
AttachApp
MoveFileEx
existingFileName
newFileName
kernel32
get_IsWebApplication
Attach
ResolveAssembly
ResolveEventArgs
sender
GetAssemblyFullName
includeVersion
assemblyFullName
AttachResolver
AppDomain
domain
IEnumerable`1
GetCachedOrResource
GetFromResource
CacheString
GetAesTransform
ICryptoTransform
System.Security.Cryptography
DecodeHuffman
Decode
Inflate
PeekBits
DropBits
get_AvailableBits
get_AvailableBytes
SkipToByteBoundary
get_IsNeedingInput
CopyBytes
SetInput
SlowRepeat
Repeat
CopyStored
GetFreeSpace
GetAvailable
CopyOutput
BuildTree
GetSymbol
BuildLitLenTree
BuildDistTree
BitReverse
ReadShort
ReadInt
IsWebApplication
CompilationRelaxationsAttribute
System.Runtime.CompilerServices
RuntimeCompatibilityAttribute
DebuggableAttribute
System.Diagnostics
DebuggingModes
AssemblyTitleAttribute
AssemblyDescriptionAttribute
AssemblyConfigurationAttribute
AssemblyCompanyAttribute
AssemblyProductAttribute
AssemblyCopyrightAttribute
AssemblyTrademarkAttribute
GuidAttribute
System.Runtime.InteropServices
AssemblyFileVersionAttribute
TargetFrameworkAttribute
System.Runtime.Versioning
ComVisibleAttribute
SuppressIldasmAttribute
AttributeUsageAttribute
AttributeTargets
{f33f1330-e00d-4929-9ae4-7b0142d185ef}
{37e1d200-6e49-48ed-868e-62849637ff79}
GetTypeFromHandle
RuntimeTypeHandle
GetMethod
MethodInfo
MethodBase
Invoke
get_Assembly
GetObject
System.Core
Enumerable
System.Linq
Reverse
ToArray
Action
Delegate
CreateDelegate
DynamicInvoke
set_TableName
get_TableName
GetType
Convert
FromBase64String
String
Encoding
System.Text
get_ASCII
GetString
Exception
Process
GetCurrentProcess
get_MainModule
ProcessModule
get_ModuleName
ToLower
op_Equality
get_CurrentDomain
ResolveEventHandler
add_AssemblyResolve
get_Name
get_UTF8
GetBytes
ToBase64String
get_Length
get_Chars
IndexOf
Substring
Monitor
System.Threading
ContainsKey
get_Item
GetExecutingAssembly
GetManifestResourceStream
Stream
GetTempPath
Format
Directory
CreateDirectory
DirectoryInfo
Concat
Exists
OpenWrite
FileStream
LoadFile
set_Item
FileLoadException
BadImageFormatException
StringBuilder
Append
op_Inequality
ToString
StartsWith
add_ResourceResolve
GetManifestResourceNames
GetEnumerator
IEnumerator`1
get_Current
IEnumerator
System.Collections
MoveNext
IDisposable
Dispose
StackTrace
GetFrames
StackFrame
MemberInfo
get_Module
Module
TryGetValue
Intern
ToInt32
RijndaelManaged
SymmetricAlgorithm
CreateEncryptor
CreateDecryptor
RuntimeHelpers
InitializeArray
RuntimeFieldHandle
TransformFinalBlock
ArgumentOutOfRangeException
FormatException
InvalidOperationException
ReadByte
WrapNonExceptionThrows
$6ed9644e-a31c-42d0-98f9-54986522a32d
4.52.6025.6533
.NETFramework,Version=v4.6
FrameworkDisplayName
.NET Framework 4.6
#Powered by SmartAssembly 8.1.2.4975
"4)O%t
5\z"7z0
M]2 `7
7`3@`y
Ed#^?v
V24 pL
3$:~DE:}
SQ%Rvy
z$J(+>u
R]Zfn1
GYMs`0WS
;Wq,)H7Y%
.c*vr}
"|&8T!"Xr
:m[a!2~
Lh}ill
JwnGTT
Z/BRyx
2DhYErC1ush
5XW(B$
Ks'HFU 6V
VQpZ`X
wt^O*-
|1Vl H
8[B*O6
> U0p5
7oMRR{
~9_h'N
>\8f_{
#xVx 3g3
P9'~J 1
w=v/TO
htr2}(
$Az9E.
'P'643
!ZFOu'
(XA8_9
Twl)2n
`3)m)}
WJo%9]
Ou6++*F
_=m!Z
aF5sWO
lU@!x 0
GkdO3`
rzf]D!
"v1AMm$J
e6>77v
&Ka10b
AsVb%g
%I<'[+S
1Y9_jJ
l/Rv|B
@p"CRd^
ot][[K
[}xOpc
uHFHUD
W256xF
r0[s%3
]e#a1^3
Rnh`HEI
P Ofu[N
kpgJ<F
dfziF8
~)0_*I
)3;:4aL
F"\Ft!
Eu:^\V)(
Nn]L;DE
HikT"
\z}Kx|
Q*9]d8*3
F_C$}(I=aD
3BW+Vg
*XTW:q
zgFM|$
dwrPzv
@g<@?]H
Od|H8@
k%Fws+`
MXm*r/
/N>*m$
xhdpgb
4wCjX)
;CP5-
?Xz3&O
O.r517#v
F:r\5(
fw$VoC
u>k8fi
|+SxzS]%+Ic
dl&(Rl
j()$h4T
]L7Y@Ly
XEE!vD
XoFa+d
fSVI~A
"8*g/O
i)eUHy<
(N|zT
|GjHU$
9Sx7:>
.j`'
G"Yn~"P
ZG,VKG
K(H-*Who
'Qv(yY[G<
,?[Wj
:=EF^v
YG=b_i
34I@g:7
\C}Hde*k
13q=AS
P(}szE
Yz7Ho(=!
Aq<@[:^
YcTR_0~g
OA^{_0X
L$u@sy
IjlJ.v-
H$CZ1?
FG]Mf<
14LrJ>
,BZ1@P
Qu2`6UfR
dlEN%hj
0oX3{n
:(*|Y:
<l0QYX
uvRfM.$
f`Ugl
EI? yZ_"I
ssRsTLC
7jLp$t
}FUpZf
Z0LQ<fD
g;HIZog
a^Kyc~
UPcG-A
uW<(Qu
~,Lq]k
$;(m5U
$;xh!1
%3~`z)
UXoBL|
p$A]'(
pYBD)/
CY-6%~
T;}5q`
g ^|EM
*QzS{\
qemfpr
f_K\;0
+Jiu^J
=00!KGu
Thx|9@
m<_{.Ot
<RLxBr
n+[f^u
`^irE]6
61PTV/+w)
rk_Vhog
N^kS][
UY[3f;W
b#(?\
hdHoR|
4-Amto
3E)@x,
W_T&z_
x ejJ)
|/,jfw~,
]O[*V$
=E:Tl~
G&~boR
X,|"Q_6k
V6% i4
lo'2w!
!*@;i'
bDi9X7
Z_~WCA
2FqLY-2
Z+Rd:I
&;pR0
zdu3kE/^
o{fpv0$'
n`*jB&t
)W8s}W-n
#rM^QkO,
T-ipK:O
]\eTd,[:
&n=:R'{+
tJ6-fj
5?E?Z0
RbOQNC
Y|r]y*
^~9!v!<v
iqsV0L
LkD*5Q
I.|?li#
NA[Py@
t\,1P\
*m>5B;V?
ch/&6:
{+3flst
yw)^u9#
.=+r(w
N.yx|N
H!Qf(\
G{vD$I
$uq_O2
K--("
3b-+DLs
WA1gLB
?l]JKkz
#K;5>U
yk'W#i
#?\?:&
yl/iOV
Fmn:TW&
1{yt5P
HN1PRg(;
z)C7~%K
iA<"Pq
\kuswMF
i^^<.}|
iJY70/
/Is4Hq,
\#/oG0i
1cm'\X/
0}s\B@
`iV?e7
g9CxzpT
g>~Km.@
4\Kr"_~
@<nmq)8
x(4!w0
O)rk3d
X5DZV"
K;[K(Er
l,8@\KS
b^]`3O
!^U\E+"6
oG*&94
EN6<{tr1
hb;U_#
Dk{beC
2F)//T
zf6t$-7
0%%9@V
ez?dw*
68f5)i!f`
/J^WkV
sJFj8@!:c
f,Ehk--
Mb_ADZ<
^U<<)z
rKZT5K
xtGu7,
zfe"hO
),O6P`+
F{/nH=
:DyRB.
,"P43@
NL'Lfp;
fWzjt@P
53>jz:"H
'Mj%<F
on>LJe
5U(:|mO
E ?vDH$`0q
xL]|UQ'
(jVJ=^
A,Slg$
5vsD@6
cG1aVG
y1gug@
ZZSWXT
1ckS1>
5>]_5-
K|zrl[
P~U^:0\
"SV5x|
2p5xE>
bIgu_T
K7c^P*
nsvJDV
W.laXB
<X,<ox,u,@
]2/#AJ
mVFWl(P
NF2pX#
@-/X3]Le
v+^{kFD
"u:i"H"l
u@cVj}u
VnpWE,
#-T:,X
PP= %j({
j6v,|$^(
SX%.`l
4cx(w\
w!p~+5NH
Q;1@H
UI1r<d
#w(};V
&v0~%f^w
~<tz=y
;_l|w|hi
2Km"!`
v%9rjH
wWsnT6
,z28rT
-D5\^8
4ZExHg
X~9o(J
(nM?T8I6/
=u_T|qu
3P ([=
e%*`Vc
0D'zp;
D7NXY%a
;<x_@jT
7=k/j,
-plLoy
/0*]I5b
INp5BY{
2Y#55%
}u&[.y^A
_G^z1Rf
e5ALlrjM
?{EI:*8's
*<h=UF
O}1YOS
I+F.iC
9RT;-4
?_b+_O,
LztMMH
"dW|4gQ
d;>2s1;
W>TiFX
+qX_l[
UaG)@:
`$bpZ-w
mkqxl=
2_7>F
B0@mUK
]9E=J5
"zHHV[
LSS#goc
p<t%W//
6eP'C~
tYW7`E_Z
2z"Dz>
~?GVg\
NiPR,%$
?BmX_y
+BWG6M
dySrG5~
"Y]$,I
lvRCR,
E+8.8}Z
AsH]hs
c=&t1EDZ
GfTqt;
fg*niu
jY>oP
g^CcOv
x~>xUU5U
M+'@U<:t
Yc/u4{
Xa8w8L
{r)-]w
kCc51r
W5Qt"Q
AE5f\
LyQs@K
u]s ^InA8me
b'f+YQ
."bi:1
Pb22Hd
~Ie=oku
^uKdrJ
m+9(RV
ky=r,7
1+CZ3::
Dy7~xxL
`6yowV]
yhi zt
Q2$m@<
rlyl'6J
/Rq-6;
g&p_.^I
6\0[gy
*8#u:6
wf/rr9
Jz3 6)
,M #I`
+!xLhcE
bL5',#
{k,3MCZU+
3Ttzl=nMY6
`xu25.
uE&ZF_
@.694@
SxA@{V
P/hj^~ja
3Q4C0=*
l8 ;J,p
5~O%Ly
%s_&>-RBmgb
03<2<hI7
H]>/wI7
'g"&,U
*A9(CQ@
'--S]q
kUEh7l
60\zIJ"
5)B&4$
bw`i(+
J#[F(!
Tf83']
&foz`-K
"VLsdsc
R0mSA,
^|^Rc "
n[EMoV
QJ??mHuB
-ZqKuw
#B(3j(
@4_sLJs
.`k+!Dk
{||my7
zCQfE<u\
\nRt6.
W0RZ2
MPT&l,
ZB$UaEm
MMPkeE{=EsS
Q(ix`{
EHlc&y
&.VCO.
a-+;yG
oQP2E
-O4n@1_
&w3(XK
"2MTEECl
GgLn;s=
'k*czD
??p`.g
E!8Dcu]
(niB3s
J>_NBuOE
+X9hYB
JrVwF:
v__"#vxeR
*0n9,r}
x~U2/k
g1]WnlH
=1J!;#
EEBRw*
vq!}yP2
/&+:P
p/DOBd#*
DI'Ni;
cfN|mw
=8T|I/$
jd1scg
sat b#
uylQQk"
ISBM#-X;
9uQs=R
r*P\+c
o-D@4k&]q
i8FRe>
XxNX5[i)
f 5OEH
bL@UC"
hI8Q+C"^
}4wi>x
ot4-bu
K}&CMPt
4o.Z8R
zj+R
m*4a+f
3wby*/
.?tc=|
U{9oR/
c-x3Ll
y[7;(
P}RJH4
'<Oxp5
)%<i>A
s.^5%`.E
;v(|MJ
w)mJBd
0~Q2fO
('Byo
#*:te
p:&zXg1%
T'<U9.
)QZu63
E 3z{P~
TZU3jnV
>]CP0y
EZ_{fJ
'aw]cI
$$"S][
vmF$tgj
s69?(U(
O*2wyk
4e Hnob
^#jmr:
x/Jb[r
LWaR*.
$2E5yo)
H.X!9[F
y2}M4Y
O251Gx
_Y!$8p
yI 7',9gq
/9b%u=
5'ZTK{]_
76Q(Lj
qbxd5fI
smWe$A
6g/M;k
9 =;z<\
niP>mF
z<JBz?
b"k@,a?
{5R+;W
o=3<;b
2tlEts
4.y>pCx
9KTRNR
[U $Tr,
1*)_$d
U=+9/sDQ
#/3-UPe`
h||cCW
:MDmxV8
aMw{4
">#Hmv
soaTHh
=(dwci)Y
W+V3lc
5SWW}0[
I["lU^z
")J^aS
KyBujY
)"I5:l
pBZX=
~r"n*;
$gk|r%oL
r~$pt5]I
d:=_`
)De,Zn
8hK Lf
<k?_J|
*ZZ)#
")Ly_7
m\@D<o
}B**J3
vyn-2U
m/{\vf
*'(s;beLR
ouw\7lF
)0vIOQ
HL*9)
X9/eLa}
2ZwqP?8O
h_B9!^
W-XOgM
/n@@)}
_c 8vr
cEB?Ow
x_ ;6,X
K.w_S$^3$L
xj]3?8y
T{Uow1
MjPWF9N
j@,?urbtAd
4hdeQi
69rZ/i
<rSd#T
YI<spM
^vf(Gfes
xxAuZ'
^F|DI(
A!-nh4
0cEV8M
`M1ie4cL
Al`=BS+-<
$V,ZsP>)D:O
B2$)&n
I[!}wOK
!}y8L}6
RbV`/\1
$Wcc5O
jMiowTH
Bw@Pcc
Lc$4)M
b-sCqe
mO-L(fc
[hBf<'+>
y8K>uO
)sr&;4
|JVc+8MB
0djjv+'0
o$~,.
c>~LpY
zaFCh@\F
h?{*VL
0Lw3?Y?t
VOs3Y ;
IBdOTj
f'@lpF
|2^eF
?Z$Cd#9_
An\<_A
Fa_FJ
24NKLTo
yc5L=e7-
~XAG#[{
$VA~+S
y~IP[LJ
L}[+,)
/hkZ3)
$u,/i$
2>*BSZ&
8($,x%+
Dc<nP8
#:Wn%2
!4a"_A
~oH_Hk
$k#,SKhd
*<n#b&
KL9k>A
30!)8`
Xf}mO1
9naTG^
[|yD^i
d9*JpJ
ObGi-I
O:UJr;
CNtDA&
s-|72Q>
IbkOJ~
?<TZo%
'CL`,RSZ
&YUStm
9;{0u}
/}H:6.
`BkBLC
~uP2Q/
Vnp*hYU
Qzg1ME
"bv%1k
c'%S6e
&;>D@.
V~Hi{b
1014F#
BU[.pd6
,4i$NB
fO)8q!
RC*M0Q
wHD. p
l>Y*V=i'
E|!}*L
M;Q9V<^k
wBq>5M`}
rx1"U"
qLrl'.
wD8bX}
:s_}zN
%hKfn
_BL@D
{_d7p@
\Zz*iO;
5RZ(k=
`W&l=z
nn4R&7
D'-Wws
B7|P>Pc
!jD3-M
d+W!a4
rX=07~6
V;@[I~\
OA!&eH
JdNDsz
d4ip2h
w5"@Zt&>
}~ZET^
R#xz7?
PY[2BL
~_0<c@V9
~fBK)hZnP
dX~b;@
>gR:<z
F/EnJ@k
G%;<7Hf
14\vfq@h
1+M:>5
Om',95
W+k;Yz
:)OBE9
KrazR;xK
DFx*`u
GA:TI&o
u''rOO
c8D<&|
jA\z"
Iti!Y.
;`{C~!
f>=8T$~
eL?/q
A5&#Hh
BbN>{_zP:P
sMuJ!*
"wq+/k
9gI|x<
T01Vzm<{z
!:"#c
<P{~B=
BawuUy
k&}i/7
Wml)V8
1Po"3{
7Cpb7$
'(!)W48R
%LRZLPd%
fOWRm!
\}6Z1l
)}pWt0~
3@YO<v
w'Ch]<
>.lD{{
YCXGJ0
7;<>A]d\
J6" jM
UX,ksZ
~`fhkZTJ
!wP@9+
|H{&Mg
rB[DIp
V).<![
1]&Ugmr{b
Rr*|~%]B
LNX0= \W(k
{e,WA1
0Ye=h=
AbgUVI
y}Y[dt]
p,#w7e
[HH7Z)
koo2zB
hiPf8J
Ge(Q,@
?c0'>\
[Q@2`akazp_M
KZU"yx
6%[I&]
n6HQ/<O
P>)^j/
$vTt,AF
XnG|}K\
^*q3RI
o7_$Z$^
X3bPu}Hsq
kpkhS$G
P`7.7$
0S)-o@1
hO}O P+
])ve40
IIqdyn/
A0eh6\
dR_EH=
q]Ze1[
oXcI2'
WzM:(w
y]#Sl~_
s6>]>?
|wx@$C
O3'-A*
83)Us>>
wD1f"Y
um,~JNlxx#
,Oi'E]
,0i")&
#dNo6*
%6\>v{Y}
*z{d
xeJynY
D(%W'`
ZKFU[l
e$-L$mk
mv-|St
@H.@6g
S8z<vM1
**eDrW6
K.qsDaL
9lf]=]
2Q'GfX
\VGUt
`0qrG&
vJmw'$
bkm&ic
]l4(9T
-mM%Um}
6@GWi{
~[{gFc]l
><Q,GZ
)]k2fy
Il^a~qV.
D*|0q#
8\{6e}
(~0FO3
QH(2gQY
DHGwZ5
.~^c#6
K6Kz0c
_/lFg
jkX%qO
g4k Xg
a&0`}Os
jcf-VqE
rc?~{hN
YRyHi&:r
.g4/"fD
12r{L#
*1[~J;#
iVZFai
x+ K:ZHg
cI>^*nrKz
F5*R9O
3uy}9vW1
9g-L?l
*O7<@N)
&8.@k()
`=nDL{
5HEJZA
lI:s&D
<#OfU3
YI}G2(
jvsO5Y
~|m!#.l!
s)<r~P
7-*D`J
04Vfkgi
R}X<:R
%Ay'Oh
!*}-Q^
;E:F)r-
sVAB<=
>IRZqm
wo[bNs
zv+> u?
V?WbCJ
@p~$Q:
\J5MyHV8
wSAAcm`u
|qBi8vk'
99ahvE
L0m/`gf
>c^<R"
Mg2srU
|?Z]tZ2<S0v
jQ_eE=~C
BGrzr/
LIy0H>
HN[~>l
7>%g*.
8>\^Sv
V+}N.?
\9^bmJ
~d>n3.
,vE~G"O\
yE><;4$
)NXm*P
hLK`[w'
U#?Im"qX
hK=_DF&@@
k{{&*0
3!Hd:
',5n%G2
\7cMo^
FN62"4
f.R%3r:
X)=7+
f}H2S%
`m` jU
%tI*l=
Iz38n
X1U9C]U
g,1"bTN
4>LX:n
"zrWs@M]m<
ij~|?X)4
xupzp
k>f_X8i
T$0@/g!
Jk>o ]zG1
}.~],S[
{K]=JR
TBfxGX\
f2651
.Hsn7~w;C
CNQz19
!r-{7l
0rD~R|X?U
";~aEl
L/YeS6*
D)F;nr;-
"|{MU[(v
suwU|y
0x.bmZ!
)xFuc\
Y10_d%
8_^zDA
Ww}r6,
;X><H
x9;a0_
<LlbCq
46Q@K.
Kj6kt-
/[U|."
p[2^.\
7)K2Rc
ne 83?C
>6(LnF
qYK#v[Q
'5mm"J
W,Cf5U
r~bi|H
[8(7]eb
ulJo*i.
d}Da=$K=
z?0t
0CVZ{7
{G0<M>
]6`sY0
{]SD&|
]E@!oT
b0dQE`z
TMabQo
>49(u9
<h1V'b
3NHR#Gi1H
=Y"1tF
^xoP)N
k82fyS
GA'f
n9X*B
uPH2wO3
>8v!OF
OayGXC
i+[h1O
YCr)zR
_@>0RI
J|!9p
c+F:%c
R-G(2F
tbvJZ_
m_r#m(%
U9.Z1B
>Ph ev
\y/({HM
AKq_[Ms?
UUd*oK
4jq5B#&
"xD'c"
r+Q/1^s
,+9<?WwtI[
%aB{B8/
HXFl+J
hc'"JPW
ZZ"_6B&4
P}7?}v
eiNV1*
$B-)lM
kM,PGf
\*|4CJl^
T<m+B\~
8,DB_|
z(~Z_*
||%#Op
LiKDs'
H8%l}XH
/DuveKd\
zk^r*-}E
Zha-G.:
W&c&RW.Ds
E'@g*#p
[ugED~`W
m.$+#-
>bHZ-*
XQ+iJe
=~M,Xs
$A?+- 8|
CYm)[:
JUn>IW-{
m}8\`k
HMe4~uj5
U1n2{K
IC@b.QP
dqn}zY
1JW-Vj
k]^]X{T&
14Fk1K|
%E)8C7+
o0mvyk
!cJcT]
ppS! Og
P74'1bE
I|8(pB
(.[q]|
ouD&\y
/?.r~[
.;-}@_
ILi|MI
8-AFMh
VmX@8W
]!L!n!
q6{DSV
p6qfr]
`Q+f5}
@l"U;w
3eyZBt
GL<qvf/
b8%}pmlo
URhJ}B
dTJlcV
=>QG&.bo3
uL]5Gjl
R} Jhw
C26YOA
0+{z!d
$1^7y
7 J]mI
Tu2.Mv +
y^[j=Hv
;+aE{G
<Ry'W
T"v7mu
non've
=_G`Gy\nsAU
j4USX[
P@X>(Y9
GO\WoZ
,XNB<$
S;(EK*
kA/ :;CjP
yNE9j&
kuuHt+
.GD<O1z0
A:(7hu
T.IyG_
\$<HX[
>bw1'c
8J4V9fH%
OR.%f+e
L4=@d5a:
9dA'@]
APpr!7
vSv@duL+^
|Tc'rY
t5rHO.
5I@8H"]
;LJLO~9
Dh~FiH
|p %L[6^<%g
8w$s4I
|nR #F
dndLg0
E$R14ub
0hnm'}
)<dn4Q+
bYc:"R^vV=:n'
#2*W8|
N&*0M#
Dw]9bO
B/kZ_/
Q<&Ij*
=]8KIb
cKFM;xN
(x7[U8
H1|`)W
o3WY%K^
%[04bwH
t8`P(s}
7QUB23uH
jL.X[=Xx
@t/83w
;W|y7
HT$#/aq
P8~G6X
SB#"hJ1
YYD-I3
UwLBq@
3-P!Nd
B;+S\,"
/+BZ8x|<0^F
v6Uf))
C7h&&'
msy#B_!
p}<Wf/_
1MwPpt
fe0UJmmy
eS=.pt
3]Zasa
zy)&8
^Wg@Ir%
>34#_C3>'
t*Mo+}K
tl0k&?
6PkU,Q
Du/&b*
Ovq9XV
%XR?W{
4u%i&V
HE j-JPs
K%Ba(Bj
S'IS"E
I7;FTd;WD
negE|
p8wf&K
mRMoq.
R'<=#Z
5~RU!"7
2BS DXbD>
U:H FOu>L
)Qs?_&
>NRch{
We;V`81
ywglq'
Et(D#1
|Hww(Z
%~Vc]g
c*RUS"
;w-y,V/
y'`U7D
\1typ7
jmHo{\!&
}vq(L
"[?Ox6
|p69B[
F~p'{-oh
]5dO#<
pG/X8c/o;
GBs?h
=.,cT
f5+)<Kl
\h6I{s
aZk-h<.
ULy+0/
X!YLowe&
BC <DW
65|+SA
q(K46J!
@!C~oc
6-sw>V
blzrx|
F[lp*L
63=HJHB
]yqf:U_
_nD$TC
*\ME)1
UTMqhE
j5T/\U
M.QPc;
za!J;G
i!.MftK
'9Iz}b,
xY$%qK
sH.NQk
BKcDRQ
`C3+DQp8~Y
^%<g9,
81A!<XE
VYM?F8l
$mwm`j
F2#$PH
hKyaj)wz
|lM:,8
>r.>+aR
k[\=!P
R5HmV{N
J:;;6_u
sh5a^*}
SCsq0JJU?
e;,(TG
/':N 1R
f9_}~R
-BQ)n3
#@4(=A
{p=.p
VLc`N8
BK$dOy
l@`L\mu8
25mC{q
<l!bh5
|x5,BK
_"l!uq
3A+2WLv
9DV%Dg
k*~E/
V/?_{z
i$zeXl
_RI~)1A<w
5r-iHU
E88?gv
JiydD!Y
\u{ccP
zD->YA
~ZBbw5
(Byc WU
`K@e3K
")xw/*
Ev,AJii
5.eIQ!
t}E&Ci
PG/`b*3[
7MiFJtXl6
Ve)W7F
Njxy1j
|@25|z
@/Ass7
=sN!d8
QJ|/hW
_dz9v4@g
,?19=u
whamXdn
I\w"FJ
ivN}2]
D`ady~2L
L8l[_aG
>;'V(%
cGFp8F
VzsJbDw}
@p>o&*Yz^2
oun0cE
2I5yIQ2
yz{3K~
7N;dAv
qp_~GWj
K;S<lAe
3YVhB]!
cVb4G[
w{KB"W
zOK?0W
a$Eil%
j"=q-[T
S#nFT&
hHBi2W_
y(ZkZ?
L71\ES
qP)@*I
~w!\|4=*
~/.;&h
,1kU1^t
..LVNA
Dv%-[qnwu
?DvG6[
oZ:}XMM
Hw+j"M=
;(!d~;u,&
\RI&e6
<v)"ET
sC:WR/
7E)BHq
H'C,mV
elM\K)eT
\Yp."C
:R8Gg9
n*rnMFd
X9{vY=
5fLt_L
)Lc=KZ
* 6Oa*1
qKG]_O
8QXvy59G
Pn\bly}nmX
-]a0|
]xH#|6
FNNV2Y
@"*%+O
]OH&&
fGKtrl7
s048*B+
f*^'+;
Px0wW=
\8Sqd[B
HBx;A8
]YD_2T
rK,@m{
-y9{X}
"`[?Gy|
[p,a+Kq
VUGlB;I(q
5SLu$"
}B-'X
ZpwMPz
Nc$96F
D`,lK'+
sfJ|[}
C09HFE?V
7i=!_f
1Bzx$
IZO;v}
?9{0d>
R9`SK8_B
dE(~@"
a4TI|:3,
3>`(AV
]gvRAl#<
s$\3Pf0
#mh#"P&
r2TDgl
:Kmd*m
874V8L>
tPEOk)#
Tn:+?X/
~9"|@Y
e_upQS
JV 8;F+G
@J~8$H)J
iz'j]Z
W^FmBC
c.>u3W
G7]_&S
[c?VQh
'?e0Wt
!G@43f
t`E-%h
mk8nn2/
;>{: ,.)
i?J7hi\
/3u4w*Zh
qF1BAa
_^5=-D
ebM?.Y
z7)9i@
m;V4qw
l<j&4"
T7T^|X
j\c}(x|!
Uq|xCPhu
?4:a;f
JT7bd!-QA
B>3)fC
nt+`d)
nk&]{|
a,e8+P
HA|.[a$
%,^("r
lBe`<{
{F/$^E
_l0M7pu
enM*fp
PtK8tJ5
yAli(H
IjZ"EZ
8#0W'j"ZL
_qvc5.>
It\:6s
kJ{Qde
KPmlSh
_YisG+
9gv mq
~9J?u3
C@f~V9
SM)Y'+
63x9zwaNJ
7OS<cu$
bilt!{@p
C]/Di+
"*`l0D
HzXIJ3
Vq0maq
gU:__1
{OV;_g
^!^%R%
Z9!=v'
m1I#6_
{a"4iS7
Ej$jO
8o2dVTU
)vg^%$
A>Ue@c
h+;P2r
+%!u/|h
&cKIU7
FC$J:V
)f-v|q
lcF\8
3+Qi&?E
zybz|]
{2pvKF
Z:Gp[m
iB_W4
?JiKj
17yr@d
c@~>U^s
5(lsjKa
]9:l]v
-=RdJ"A
sF&N%g
}Bgn%fY
(8$R6O
\zWC P
D\NC*)
2WD`++
F2}*ZC
G7V29?#@%
4P,)`:tybh
}5"mY
6|5jCtnUK/
KK0-PT
O1`[RZ
g7d|q=
QkMra
%5.v(I
t**lJ#
Gpc,hBe
)KN~U/?,
x,=7#
X6\%
,'L| ;
?h^;?Wo
]{x; Q
3-rC.`
+ )sO<
/POs4)*SL3+
_)%xo{C
D4N0$b
4rv3nU
L98EF7
_,5R^c
oSx!pr
E71&k(Vv
Et=Jnx
^J~s6k
VGtth7
Bg]Xj
ef/<08
5GH0_L
Xv,,|^X
.9h^bT
Y@@*C>
f\5MKH
[xR5!=
Vy3XH(
2aywIK
Z,><v{
8F_W:L
4lhE}Q
e#oU+#La(\
cSzlaS
|$*10.
rU.^w0
N0XJ2Oy22\
Fd"38s
53gv\A
5-?Qk.Z
#{vnsB
3m7z.y
7 "zwjh
)rYfGh1
5i*6tJ)
U?FA<P=s=
]'AVMd
Z796gGcH
I4@B9By
?-$^TV
^WyWf'
l%KqV9
QPl>,Q
{XrMI'
%6dl4n
n;0j:G<s
)-+e7
]]sHLN
a%MdUh
Xa*^,a
;M+v[;Ll^V^wJ
}qW%)A
)wACO'
>MnH*@
;'UO1N
R#4nTX
hc!&jU9
ws]N<@<
?vXokh
x]NQ8O+
soctrik
ilJpNK
{Z6[V^
v,#>3J1l
$M7Xr
c@W"?S
yNkcn2
Ie;q5+y
/K|Mh%
Rkr@#?S
]=i#qNq=`
w1{6]0H%
vcdco>
sc]E({
"AlrE
YjMJdyd
CO/6p/r
vsT4YH`'
#'r-Xt,ZI
*{DEw6'
;"23j;
]\zq6QjI
k>>Gm~
G<t#?_RY
sO[kGc
j6`Qp<
]L(vnF
Z1Q=Qa
IPdXE@y
,W9~Pg
J@D\lu
oH_k~X
7q8q0Cc
eJ69:`
5@OJjCn
O?O--@
}ui>GQ
lcP^8DP
&y}HgLx
r8Ae<$
jmvZSZ
BM`!gG
,ao#y,
3$sp,G4
nt<2!I
Z8_1B%
TweSM>
Ry7B(9+p
76(J;cVI
9Cw2'om
K5v]M~
cp^`]l
+a8x9@
HgN0hm
>f|yQOj#T
tVPM=x{
UA~~#9
qO#yIY
u9(P^q
*JQ<+e
{;<~3![>
KR=6:j
eogpkh
`N\Ot{
7r$hRI
G3:bhJ
9kZrtOK
8,6ynN
}ASR)h
4P5[bl
E2, $u
]{|4h}
]X =8`HV
vfn#VR:
:PZ.I&
0`Z901l
r!.D}wn
=nZC14
ob!Z`
kzf+B%
,N inH
Q]1c(d
in,SaA
AA8,PC:Q
1~pmOzp@
FfTgw
wrsR\\
A~v|O3
.`SoLUG
CWf[jP
TcK/2'
dF=HU&
V&ufyl
*SkP?[Uo&V
*^5|[6l
hN`BB|'K
^yd)q
KFm|)%
U'*j,'
$uzc|^
~rlkg>
62\C$T
L/5TOf
_kV._Dl0;$
,6H9m?4
a';;A[
@BwsLQ
2^I*':BZv
&G8$D
5TyG]eh!
S$POr&
|Z.>{]
N)#p9!9
qKw}p.w
5ya=F'
.G.*]|
c|Z)wB
O$iN"I
Mc cQP
u8.8I
qB83R7}H
Ljz^M@2U
u:Ur#-54
SZ5pTD
.!`4JO
jC}c%<
)\P<$j2
[/D?Tb
<@|SP
NAf&o(K}
QHH?W4r5a
x"Ko0Kb
!FS.;t
P{))&U
;fqB5l
flWo6^
{l1p+'*E5
^3_C`i
Cy,mq: ^
_,<lX
Y{adWY
btr/_4R<
Cmr+)
n{sor,G
^kIJ&Y
VBE&s%
j~aJ7~p
$S7d(%Q
X!*=je.
,s:e%_
e'jm;m
%%{Zt5A.Z
y!__Qy
v5[xuD
K`$!C/
Y5b(@4
wY[Qp0
6>ddx=:B
Dt6G>aJ
g6"-LQ
!kI!,
V/kY>R
K6$j\C
2w.qd
vDcIPLF
SN0S4[!
Y*(ih9Pv
HKi46V
b5A h!B
PlIl#5>
=A_rml
X>>FB&7
VZ\[^k
&)gqx4
hIIa4
C':hDUQ
tj+nm~
G=tRS/(_]
F_(4YI
VWG9TN
0? 'K:
MU($Z
cXTvOP
qhM4[F7
y:F1;wXN"
)KD8K'Se
k\[-+k
\<U-!)
PG4sgW3
E.@;DQg
uT=R=d
(s(R}ki
Nf+DC{JZ
W8bBGk?
*ul(]h>
9jl<n,
FKSIc?
-V(z0,
|%^bw
[wAXMQ
6~x=v;=
D"/vu8B
F(7M*jB
-=lu[=;
fH,I -++_
.&<z0p
,#-L9}g
KV6r_0SY
Y1 rg'
SR>a}\
]5z3nqb
^*%9}t
EbEUcYB
'n:i/.
wSMRo(
O_}.h?O
g,?Sl7
R~Z('?
n$p(0[#
[R^m]'
{5?`oB
nyxW-A
EX{!rl>*I
f8SUqL
;^O5Fwv
w5\6V<
)Y@.,<
0^I!\W5
!G'!wD^O
|5A'Z0
,vtqIig@
@=n-n6
21ws%e
'9I@e7S
Jt0i`6
,gakUO
bg'<u<
D3 aR
=@[wMLU
a&ZR&V@
"iVU$$
zZg=y3
z^\E^GZ
&@by)L
hYX0g`
$FTP~.
SrS8"!~YG
Antivirus Signature
Bkav Clean
Lionic Trojan.Win32.Fsysna.4!c
Elastic malicious (high confidence)
MicroWorld-eScan Trojan.GenericKD.66537279
FireEye Trojan.GenericKD.66537279
CAT-QuickHeal Trojan.MSIL
McAfee Artemis!56845C8F34DE
Malwarebytes Malware.AI.2460161452
VIPRE Trojan.GenericKD.66537279
Sangfor Trojan.Msil.Fsysna.Vel0
K7AntiVirus Trojan ( 005a3e8b1 )
BitDefender Trojan.GenericKD.66537279
K7GW Trojan ( 005a3e8b1 )
CrowdStrike win/malicious_confidence_100% (W)
BitDefenderTheta Clean
VirIT Clean
Cyren W64/ABRisk.NXEH-3246
Symantec ML.Attribute.HighConfidence
tehtris Clean
ESET-NOD32 a variant of MSIL/GenKryptik_AGen.VQ
APEX Malicious
Paloalto generic.ml
ClamAV Clean
Kaspersky HEUR:Trojan.MSIL.Fsysna.gen
Alibaba Trojan:MSIL/Fsysna.468a410c
NANO-Antivirus Clean
ViRobot Clean
Rising Malware.Obfus/MSIL@AI.97 (RDM.MSIL2:8HrI0j4vt5ZkFVr11jZe7Q)
TACHYON Clean
Sophos Mal/Generic-S
Baidu Clean
F-Secure Heuristic.HEUR/AGEN.1363199
DrWeb Clean
Zillya Clean
TrendMicro Clean
McAfee-GW-Edition Artemis!Trojan
Trapmine malicious.moderate.ml.score
CMC Clean
Emsisoft Trojan.GenericKD.66537279 (B)
Ikarus Trojan.MSIL.Krypt
GData Trojan.GenericKD.66537279
Jiangmin Clean
Webroot Clean
Google Detected
Avira HEUR/AGEN.1363199
Antiy-AVL Clean
Gridinsoft Ransom.Win64.Sabsik.sa
Xcitium Clean
Arcabit Trojan.Generic.D3F7473F
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Trojan.MSIL.Fsysna.gen
Microsoft Trojan:Win32/Casdet!rfn
Cynet Malicious (score: 100)
AhnLab-V3 Clean
Acronis suspicious
VBA32 Clean
ALYac Trojan.GenericKD.66537279
MAX malware (ai score=84)
DeepInstinct MALICIOUS
Cylance unsafe
Panda Trj/Chgt.AD
Zoner Clean
TrendMicro-HouseCall TROJ_GEN.R002H0CDK23
Tencent Msil.Trojan.Fsysna.Zylw
Yandex Clean
SentinelOne Clean
MaxSecure Trojan.Malware.300983.susgen
Fortinet PossibleThreat.ARN.M
AVG Win64:CrypterX-gen [Trj]
Avast Win64:CrypterX-gen [Trj]
No IRMA results available.