Static | ZeroBOX

PE Compile Time

2023-05-15 05:51:18

PE Imphash

f34d5f2d4577ed6d9ceec516c1f5a744

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00002000 0x00176554 0x00176600 7.65456715427
.rsrc 0x0017a000 0x00048000 0x00048000 7.36536830034
.reloc 0x001c2000 0x0000000c 0x00000200 0.101910425663

Resources

Name Offset Size Language Sub-language File type
RT_ICON 0x001c13c4 0x00000468 LANG_NEUTRAL SUBLANG_DEFAULT GLS_BINARY_LSB_FIRST
RT_ICON 0x001c13c4 0x00000468 LANG_NEUTRAL SUBLANG_DEFAULT GLS_BINARY_LSB_FIRST
RT_ICON 0x001c13c4 0x00000468 LANG_NEUTRAL SUBLANG_DEFAULT GLS_BINARY_LSB_FIRST
RT_ICON 0x001c13c4 0x00000468 LANG_NEUTRAL SUBLANG_DEFAULT GLS_BINARY_LSB_FIRST
RT_ICON 0x001c13c4 0x00000468 LANG_NEUTRAL SUBLANG_DEFAULT GLS_BINARY_LSB_FIRST
RT_ICON 0x001c13c4 0x00000468 LANG_NEUTRAL SUBLANG_DEFAULT GLS_BINARY_LSB_FIRST
RT_ICON 0x001c13c4 0x00000468 LANG_NEUTRAL SUBLANG_DEFAULT GLS_BINARY_LSB_FIRST
RT_ICON 0x001c13c4 0x00000468 LANG_NEUTRAL SUBLANG_DEFAULT GLS_BINARY_LSB_FIRST
RT_ICON 0x001c13c4 0x00000468 LANG_NEUTRAL SUBLANG_DEFAULT GLS_BINARY_LSB_FIRST
RT_ICON 0x001c13c4 0x00000468 LANG_NEUTRAL SUBLANG_DEFAULT GLS_BINARY_LSB_FIRST
RT_ICON 0x001c13c4 0x00000468 LANG_NEUTRAL SUBLANG_DEFAULT GLS_BINARY_LSB_FIRST
RT_ICON 0x001c13c4 0x00000468 LANG_NEUTRAL SUBLANG_DEFAULT GLS_BINARY_LSB_FIRST
RT_ICON 0x001c13c4 0x00000468 LANG_NEUTRAL SUBLANG_DEFAULT GLS_BINARY_LSB_FIRST
RT_GROUP_ICON 0x001c182c 0x000000bc LANG_NEUTRAL SUBLANG_DEFAULT data
RT_VERSION 0x001c18e8 0x00000378 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_MANIFEST 0x001c1c60 0x000001ea LANG_NEUTRAL SUBLANG_NEUTRAL XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminators

Imports

Library mscoree.dll:
0x402000 _CorExeMain

!This program cannot be run in DOS mode.
`.rsrc
@.reloc
Dvv)a
_bf_(N
,"X* l
YfefY%
(X $fb
M#Xfe
VG*Ye
"1 '~)
<S&Xef
Er!X ;%
X6af
+-!a wP
Xfeef
afe zk1
> ae It
aeff d
&Y 0}5
Yf 5O &X
L)e Zv
A$E g 6
Xfe ,HA
)Ye tq
qh$X* uv
Ye* ?N
$ZB&X
fhf ae
#a )mx&Y*
a* f|$
Ye* 3*
8?NC
).'.
Y =,Taa
_b`}
uOKQ"8
FIC2~$
YT`W9~
gme,%9p
0X/]%:l
LB@p.(x
.9j=l=i
0{Aq?*
%YK>B+(^
JcEPSv}
ZiO:x2
](p_{-H
M6H*??
h?G5>4
c9vS&a
M\B>18
SD-@S@
P{L6|w
fi`D7:T
w4,MI^L
FS/Gg*
T2w*ig/
MG]Umh
\D4p2[w
l$ RHyJ
-Lec04
xw~KkD$
FI)EW1
CYj>8Py
EwZ@I
z(Ug)
edOr\n
M6ZxxZ
L?>{9V
)CaXn*
V|%WP\N
(y]zvq
`ohWt^0
9d:1idQcp
;sGKM$
>l-ft]:
G'w* 1k
(m''A6
Ax)@m1&
{5kU%2
?D*:ew
Bv<$:/8
rV 1SYF
96>tYq?
UNj'@k
w[3L"VR
9%5RN1
ceLNkiq(
K9dzQ:
>:HsJF
<A&[]dj{?o
G\I{ Q
A*;#a;X
kLne-L
-df+9D
i&O}2m
;}.Xo.
Cx#V+;Mf
sBh4#e}
tX%b4<
P>F%!V
Oz7X1&F9
dd~z.<s
\RZH&I
d4~,_)r]`
>vazQ
d'1O06
\[Kr<au
6,hsN
[F@#oH
8?MFh4
s+LZU:3
b)?-?J
TB,xw2
ZMdbvl
E;3WkM
f)LFGx
/w=)h%
jI!1PM4
Q;6AvQ
i}X Z<
$dvL=1
AWXI<^
lwA3|\
Wf;'"`
PVopMy
fi-G]#
TfS&6m
pu]AlN?aKx
<yf0TQ
;\9VfB
?:^k&CbF.
#a%iN2L
jQ+a.N
[E'+Yg
+`KwPk
3_+<x
9TU%MB
aXi>hb
T}1Ji]
(>y)"t
Zd]QI}
'G:5i
#*y{zD6
ZO7LF?
%N]19F.
rYl*eJ
}J(\yw
n%Y}c9
r~L6g?W
+"qTA#
udkk9Kp
xHU#._x
)hPFWk
gP%t&KT
t*M7QOhbJWz
f@7I:D
1b`NkMd
}@LSC9
Lpz?l@L/)
~j5'<i
X)UVAl
*1%T}*
{'fdI4
9eZ/N8
ogo'c[5
~Kur%~
5$98uE
(Auz=Q
j.Jm2!
B ,3Qm/
jvo7d$
7mB8MBf
\%p[s5A
L='k~;i
LA.){V
O}=/h6z
(BL<5{
CUmJf}
dlCNp
yNQ!5b
&/9Tme
h4u\bT
O~BVDPUZ
SDkGDS
C_5O7H
:mE3yP
F;&c600><
zIdSDt
I4|1m+
a"%r"G
oatsd
Bwav!s
6F;fEY]
P+V]V
l(T?Z(
+[hi%Y
=`s8\7
+MF(7f
52V(%s{w:
T>^S\E
e=Xpz)
}-'50-
st8~}?D(>
PfZ`93~c
]_N5AGl
b)?Xlx0C
0w_+!T
x&h&#Y
?-<%FLAP;2?
'|+?mS@
r'3{I+
>?}0[Z
! h`=
5{-$_2
gpVI9C H
cT*60A{V
=Wr{u<
mb/yYjl
t-DNI"-Z|
(Xha6%;
/b=\Md
F`A@`
%knTG-
y'e+!
>FF-MW
G`&`eQ
qzeQp\
pY]KoFi;8
o,2IhWl5
s"fNEf
B=DX @
(J-It]
S'2RJ'R$
[yIo*$
rh-'TI
{PE)"Hi+
X\{_,h
u$VsSe
v2J kz
';)vJN
>vG^*T
-hc(=m
mo}\cjE
l#lSE#
q|O_5"Q
;JI)f>
JaDUm$:
hN%=yt=
wFONqc
CqEfI^
H'YHTOD
z_A52v
y$%3izq
&CoPJ )
NBWSKF
O.J+)v>
7pnmG$
7*U`A%
.yE3{r
9W5w1t$Q=$
\@cAr^9
n&8= AL9&j|
^KP;j7
iWy9+x
l*xoN$
clwWEg
DiJys]
b]e;/
}e"}9d
$0q4N
-3VT,X
v0.N|O
~G{*1K
]%\9X]%
\2#Lux
MrHdJxi
mAY,1s
zJ,jO=K
Ea40=;'
8(e2Wn
$|YM0*
*;n8}1s
rh4$7
M&""6,
(H.kbY
bp^xtC
(TKN<a
Vjh+T0
{%muLy
}?:$^>
P%hx2*
_~J|pl
NAb`GFv
St\Y)S8
LYd2TVm
<^*U f
bcd lW
;KrE`e
]_+uG^T
8&^[%#g|
zr2R'1
^C~dow
ft?q|h
eZ.%S#"i
"}a,>bL
R?Eij*(i
yV !Hr
.s#.z<:
9DF3:
,%Kl#9
QTf/\i
]JVhNJ
>5iO[w
!lMXsr
:"icS
4gK?y|
u},isL
ITa{-E
~ ^T<I
]gXG^({
#OHmrg!
U%Q\n\
b:\6g~
m^v7%]
9Rt|`Fm6
@7'*8P
%=3d@j
ROV)4#a(4
Vs5YMG
Z},sA}
qmHB04G
x,RUpH"
~Y+Rn
Q=el%W
)\q'lY
':\!Za
ZAaA(4
{oOxG/Z
kW=U*B
iz1:CH
tE0Xye
>qUKM
3FP;b#
Ad\_pm
yD[GUX
YZk[d8
~q}JpI
3)SJGf
X[*=mbE
X$ey|]
Z}$b;=
h3{/:Z"U
\RTK:Z
=j`],)]
O;,B#Y
z+YBs{
uHGa/}B
Rv-{CF
drl)DI
d;iq0i
Eq{JF*O;
ChKxdE
*kA<xF
a@;W>|q/
Q^(*%V
C'O]y)
*Wtye3
;&by$
/&[oz76`
\lU<EN8
fwfDy*
^j`&V{
zazuNW;
NlzKZZ|
7N>T4.
u]xG<A7
:/|Y|uVb8
g+jE'
YXe|{p
$^o<E)"
nH}n9(
Y@5.@!
no/,ab
CLLFK1
xA"G}_:C
yz,^:7
&;IR[@
_}kC&K
0J7QlJ
V}hz!F
a|uvLb
M|%T?R
KsVNHne
gyknl4
yhd#eV
H7^G&vw3
JH.f)u
M,cf&{
nsH_\I
5m*<gs
#8bFmp
hPGsr4u
6qx"q8Q
$mV!ps
I;$qVx
T^BKh<?@
+y@t]tYW
]^n&b^!
Ox16Xw
9<4!zb@
/[,jID
xHK={x
|o&eW
<&tN,Z""
t::pA\
gjbA(c
(Qz1]\N
C,Sz;Eh
DcI=2x
y\-?CZC
93ZOOAhO
vO6TFm1
AtCyGv
U;xV9/tM
T~30{E
BU$=fo
ZJ{`_W
m-68Nu
eD/ID]{
Hljt"_H
@"pTJC
'(57).SY
#[tuz{"h
6waX%$
s7h?cu$N8
'ryOVK
5&!r9W_
;]C@_RR5
x/;gDZ
]cg6xZ
d984t
EJO`u
"p26'C
JL17zS
n]lpzPdRK
.tq)u@K
JPQg)
t4-,}K
;+L ^<
07XrZ9
DRw_
pxnxa&
v;XLYt
{@dpls
.2_)+>\;
$ qA!+
_~$a#5
A93~d{)_
4z$L];0D
n,aNs:g
OwhT:d
lM,]8q"
ptKBB.
|V&i>}
qC3wOL
0pdFwQ
MhCXC1
^PXIyQ6
w _c;R
;I!~T$
Db&La'
d*mK@"
qj!lTw
}.fOIc
Xe96%/
dfvIku
Y}5&own
;)<cJ:}W
6J:sfSM
3}=O|dC
=}?!3'
w{>~B)
&kmv_z`
Yp{RjF:
qJ-1v2
<G3Gy|9
x+8Z=O
/~/}&x
iaS83/
m0W,%MU
#Qv*`X
\A.Q7/
3^RdzM!a
>e-P8LO
@zvi~\R
#os]8s^
s,t`Wq
ggPO>,
IPhayUA
}qJCdO
(Io~EBf
#@y,KC
DoH&+~
hB[cn-E+
QP*,8\q&
LT#A6[
fRnul'
@NLb@%
r$C]-i
<XkX(\9
3>*wO5b
&&'V()
SSi`Ri!
+%D[+k
{t]_#%J!t
$p(/0
YwFD%@
R8f2-W
=);%:%
D=j:Nf
Ta12cK@
8`"y~j
uT2Dz9
[x5"?[
e/W0-X
4EjYiC
-*uZb6
5*L`6y
{^,PlE\z
i[*$iv
Eg.l0'
O^u`M}
RXLv.`/
9m:zdR
:0gVr1
Iro2kD
#PI?nNn
xr\Z7
-1&vx!
~tvW-
q84"7
BS!>>
_Eca3s
4\0nkjkK
I&MW=1
[h\CzO
0WlU*%
F3CGH&/@so
jpY%}>
1$bmPu
$gv0uA
V %d7X[k
59k2N7
d}y>`4u
@+-B'}##
GNyX>_Q]
3zFETK
T2!K/y
Br&nW.
2l1qN)
sc#IoR
estelfp
EO<&J+
[/4}1Z~
{&# 2h
GW5A[;Zep
[})Ydr-)
;4Zk^j4
Tx4F<P
xG0~ZB
V'0gBy
[3ADk2
b}ID)}
&2-~PlT
'}K+?\
f"#%lI
zOX$bJ
A -b9)3Z
hqXlB!
KH7>UI
HVi}yf
>A:*=I
r]'pI+0(
<yvvU|
5G|[8R<
nV/AGB
iwL/U:
l5P2x9
R8e8Af
\rb?GD:
S@lg_4 ;
!9!FQb
i?[ge_!*
?Ao9>1
UZc4UMm4
X]AX.b
N.k!aK
:N>uY
X~PBx|
?J#1xb
Y_@ZG$
_U .Wx
5@*&OL
`j%`6`
_X-;K)F
=5TY;l3
FI(FNlv
Ox\oat
0QnU\>?E
E#(_1V
Xi*[ 0
CiR6h{
Jrj~;5It
TrD|,c
GYWT%Q
I9l"[&
cte7}k
>;qJVZn)8
k'Cb\:C
dKY*e-
loSRq*
Mhusv4
t,_+WMy
,(15p
gr@xZC
v+oR0D
a;jid
XSOk*p
!%i&YQt
?-~`=u
J(k6*U
QLN{qp
LP[/P.R
]KjAR5
pUks"Lu
Zm{^F^
v6P#/%
_%f45c
M'GbM1`
JVfsl3H52
XHt6U!
a$%hj
];|0R"
"j%j,2*u+N
L!fbv:
9:~i!nX<
A5vW1
tY~2Lt
([:qqx<T@
8riXv7
uOQN$,
?lK?j"
QF4r:4
5pe+r6
JFlEf[
S f^_&?^
4_bU^@q
:(d7dz
Jud!*i
|o3+*o
l\]XRe
&p0F<2
j%#,VA
1eforq
hPve!g%R
5EG/}Z
IY'7m?1
ZBikP
hzv#[-(A
l!`[GJ
(}taP7
y4? &d
I&i '4
()'G09O
-tP3I{
}Qs7ub
*w}hMl
w1Rt6p
pvDDCE
{kS/R{z$-{\PO
r1!jR
Xy^qV`f
Gf3#"*
1xQUNC
=~VK,F
6?c43
@S^)H4;
=X\`'O
x}Y(I[
HqB"Sp>?"
2]`3T2
g^cL[>3o
PRD8 J
,gUs<@
GetqR0y
0h7<:G3
ofirSA
>B V]=|
^QTWvI~
Gd>0'@
G~l?\T|
J+eK%Vu
q4.=4q#X
<1]2n:
g!P.m'
H0h1k?
rK%GbS]
`,-^!c|qj
<8Iuf(
E"v4.{
lE3^0Qdx
uN*rA(
eE{a;[VC
I3@2(Ae
s)A\c;H9
1f_faR
a,ZHV*
Du7E,_
0Cj&bg
7_S4l]
/]tn$G93
m00m+N)
X.|1HY
wg|u"H
AN#>f:
{cC2xQ
o@+&A-
>o/(0&
K*^] OI
FhFIbT
[L2tgs
Dd0WD5
O2JtEZW
>Vf97g
a4'({
jTe4{6S.
so!rFH
/SivS%
c?G5l
W_qkV$
#xl~mhH?t
Op*EOi
Nr?xSCY
d5crBduGDK
(6\+F^
c;L18KW
EmVNYD[
j3lsTd&
++A;"'
nVwY0$
2zE(*?
7Cyv&V6two\kS
Is3n+I
xKbYsy
-ASCG'L
-P7y6T
\@o%p.Y
K{>7[@
NQG?iw%hJ
0">+zaB@
KIAI0l(
lvS6}F}[
k^%7;?k
\t;wNQ
@JjK*_=
I,@Y@Io
X/!W>9&W
|\Ag$r96
?9'n0N
PK{]*|
2z#Ia='
9BD{H&
2N7.Dr
|Bg+xJ
JpmBj~
9E:(8%
_W[d0b
Re#TVY
WI01nV
Yk,*|h
,dTH50K
[bMw~nI
zx@3NTm
SD>)+'
IT*B@zg
!(/Xfv*v
'K[&?~q\
hy7+=G
~Q9`,(5
&;L$`c6
,!G]:D<
4CX`di
dzr$\$
?NG5fA0
HH"%8Q0
UDHWk*
b@P;mn
C+:0]
zM:XM4
]A1?6Ml
DWQkK_
yL'aMLlbE
FaqnYS
hbRO6L
zL7Zi~C
G)d4[r:
ixi-}I@/
GLU Zdg
?p&G&vd)
/#:N?
:Xykr#
vqA`8E3/
%,;yxI
@CjuOc
B9h$gq:f
nn$(W4
@[~UpB
!+w?r@u]
*6;s[
Kf~}Jsg
s_A{Ur
I-/"1G
m+Tg'
p/|4T1
mgdf-r;uY
/kq@\r4
0>@^44
K2M<VR
/BPyz/4V
DGLv't
>ZB~rJ+
M_M/Rz
lU0`hB
''65f
!(8t6E
1x/,_++mn+n
y/@q3 a>
K8OQ3_
kqJ[{W
u!,7Fn
6G2|Fo
{:-TI?+/F;j
Su?`R'
r\GV5s*s
V8Vzv$
0U[M&
O[;28r
p'R^FX
:FK06[
P'gH5{
x:{uJk
Bo@rNAr
d=6o!r6
+xJ1C*o
@L}37V
Zw0&zUB
It4;1-y
%alX<4y
qU> gl
g&deev
r`Lrix?
:i>sxN
TU8*)(
Nw0R%~
!^o-ZY
@f<'4AB
XGw9z:
~N&yEA
5%Q^9p
Zt6Da,
[+zF7i
{!=^rw
v3_U7K
+#ECYz_a
FUuR56
E3lniS
kzs=#x
n d6eu
J;[sEME
m_'*3D*
=^@wiF
IPG$_
lG37`jz
-n{T7rk#3
N`<56$
-dTG&f
]s#/8u:
D3:]J9l
f|w)o/q
S2-9q~8
e.na4q!
TOS/h
$xjc6'R
buK}Y6
[.M!F<
qo.a*9
s@0GamB
q3t0JN
<o RCv
}O.B@J
F]P`H=
]ChAa7
DzYz;N
fHGiR]
[,Gr+'
d/@kUt
4dAlc;
+1;O?w
K^ot2'B7
B2Qj|_H^
1:"g`B~
= C_={
)%l8VP3
XWJXeS
F&n=k;)Y
Jq`Vn1u
oVeD+Y
k )Az{Z
i};|Zy$@o:
0<ccEe'
F^:6?0
tMA@O"Fa
OGORT*k
9"Z)=K
wfbJr(
T+j-AbuI
KpNZ_=
yv/rjp
gx=RB}q
oaDv1i
x3N)v[>
a:lLX
'/Tl0'
^$~\<f
Hvq?0T
I<+,IFTH
+T.HQB#e
wYh;x+
8WS5h"Ff
8hpi%%
[9m<~l
?MV3{X$
3#E`X6
X,FwV{lz
I( pV0
-Am"vlD
pckOc9
s QQ.k
%+(y1Z
~E#o`_;
<^,O1E``
NhFPWJs
U,e9Kf
}& TIP
s<_[:&
AAF_SVA
y#CQ!
.[EJ^|$
Qkm~|<{(
jEZ$0h
Ohw.'p!o
&m*h4JX>
:h7qId~1+
*ulj|[
/Kq-RQ
~nUk!j
l#HyU]
[*D{{#
u"mSA)
k(i -^Z
[Cua[c
T/ cjt!"
F|m=kN>
7P0|!|
DHV?eH
M)c|[$
%:k1ai
'RJt,{
39v(j>2[
_'ag*l
`89P*j!
0saM,N
PFtg8
$kRT_{
;_'Gxv
I3B;8@ob}1K=7
`G!B'Q?
":x-vw
lQCBg"
!!Gi(X
?{_@1N]v
eY}ycN
N'vJ#d
0Sr_=i)
wsC~h]
C-=*r#E
SlFVp_\
2X34k$
Oo{dd<t
k!CC,$
J@V(%b
o"3I>\"
#MgmA^
{~p*%$
y4h}s^
okW;W
zX=7a,
?m+ \2I."
e"p0W_e
rN-t.e
ozdD,{}-
xG;egy
a>6|Gp
I34C~b
XnVsT9
+r"-#?
D|NC-q
Rp{+lU
ii,>DrD
1M\2VA
pu3z]PMa
77pN)G
|z_PE$
EbF;'<
sF>)o5
,g\(QK
&h]T5-=
U0p%Dn
"5:o!A
J:$H`v
},YXQnnC#
W-nPCT
5=nT:aqO
j,#cz3
>`GD`&[
9u)4vo
F%5i%g
3VcPQ~
.L}8kZ
Hrq2v0
!rbynfr
2KL r
in_O~3T88
5<yp1[
kgBY#H
?`\CE
aJ-RO2
In*S&
Fv<ym'
A+Abi,
V=-y^7
)FIn2E
lMyQa*
t\oWN`z
O:.c]xo
p56Km{
v.tkb\
=7CoW#
zsB&>3
%(@WF\
PxWK6*
6}FkPbz
,&zP7n
)?Z|uzWQ
y5JDOQ
@kg38vB
e,\GYK
itX#hf
]]|= y
zs?3u^
_&juBd
B0M[+L
/NAxve
22Y]xw
{N&pmHD
.M^eF7
9FEp9R
O?ThI^Dc
"Y,hC1G}
uZ;~%o6
K>`N}m
<E]A`~
uevS^I
lMm_/t
#C4tG$
K"TS3F
V/(Rg
Hf|3uDR
.ECMUq
31n:n@
zz|6o
hb=7Re+
<|LlWo
RD%g[6)
dJ N+P
/n@T`(
~"_W/u
M!*YZD
Ky<^AF&
zoauyZ
u,SM+)A
j`$Fhwvf
q?;Yrs
,1ldI=D
`_-!fS
o$Yq=&
XTWx(7
2A>I"j
+fK!'0
Q-"53
g3,4?9
3e ~[f
fVzAxB,
1 /;g0
^*D'R#
<Q#&5}
]c}*AmMy~0
/<|H11zt
%(LAR?
<7lY2da
?2>,,)
>rYQ954u
kNuN(x
8y43/E
xG%8zN
XfT-bq
`8@mo*
K7:GUS
)AbwC`
|q)a/l
z2gj~Bi
eOfbZs
>6>'.q
=WF_%i
7Cya>WE
CX2R`9E
I?\//Q
p^j&c
_JE:?(3
iE+TmT
zX@7A/
)P?maQz
.3LyG,
RSY%]X
FEM'B(
+d/wmn
tgeaS
|t#*da6
2$\Dqk
2,Xsut
k>[<$0
L7nI$}
T_{QcN%
2am]_h
>bSH'/
z]8j%U
+t9YE<
eo<+U*
v}aVz*A?fD
Skj/,X
(|$y~^k
(ZA@LHS
k4=F<'}p
X"w;1r
v^9T`L
/[U1Hw
on"k=}G
k.|8MMf
],|*9?O
muhiI
3r+(P
<vZ*+q
q,%{Jm
9q|eHo}[
0Mjq(X
s35ln3b`c
R>&'~Hz
zF,/O?{-
JFtX+.
0kuFU"
w}$f\3
rqW s[
hcMA(o
-U>m1JD"
/t nN
~nK[,i
x-%%^E
}O#3Zq
EA6~^3K
cH=A|
`)v5=w
HROWqa
<!z<`z
>`u' yi9
5NRCoV ^[4'
B=!}VZ
=G/"?Hp
so@4F[N
)U%VTh
|O_4,J&
IMO6`[
gU,(//d
vBmQ@
Nm5"9S
(gpWSx
LkD9x!
Ck5FUi
}O@4&].
/i]] m
aNf([V3.
}vI"K|
|51Z).GS
dUApyLD
8Zle`&T
tZmL${
GhE-Vb
/TFt;\;
63yBi4
s1o9IC
4,l/
(-{5Uern
8s*Nt~
1i,n:{
d,,3l2J
3o8)FL
wO_L9p
j}gv`0
mPdjfL
}wS?{c
O5sfQ*
Eq<7yT
SV&Kd*
(&TGMw
Ek+FO=
sf,z/p
bX'PLc
GSMaF=]
-Z8B]p
i~:kUv
wAu8RZ.
S"o?zm
29DV]i
lNP)LD-
8 wZwmb;
S)2_S6
dG!}gD
P^>1Y
QkM!1'
Xu*:m@;
.<qkK\
{=W'b+9
\v<b?H
_L~uzE2
<wOT1I
tlJyTR
cT6+s.
SeHPn]
SJg$k0
K'K{}M
+q3!qX`
\\M5TJ
Poo6(|9
9"5qS?=
Id(jX*?o
\'{=\:4
6M-)LB
'g)N2 %
Q!Evs6
=W\6&3
xU:cC_
nWx!+3
by@6Wf_
o"|+2.U
a7woWY5
8ie6!j
GNq=l$>
bxX9[f
(^S.|K0x
$,Sk9&rl
7qT>(Tej
Pvo\8T
qfhp*Mk
Y@i}8Ks
,y3Ep],,
hM5{XIc
wOot0;
CRq)'k
Z.UkNgxR
cm+h79
Qt#-C^
`xH39.
-C)tOf
X*6(}t
@A]sQ?
t;7:Cyy15
b,kVWIF
Qipis0D
inE\FuYP
/;rV K
:u}C\}M
eQ=_i0
deQ|EZ
7(Tm<{K
gt$)*~
Y@auyDv
3a.Csx
XFNn9@)
Twwk[R
+pF[be%
H"^+B,d
c`<2A_Y
ujd~B"6FP|
#pE2_~
w!+DZ`m
#SQbZ@K
"RO6tK
}6iEkFP
bbLJYK
^pT1tH
xQl]^|
'.c*Ha
gl/WRL
xR]'AkD
THa}W(um8^Q
UY20Y<
}3!ZHj
a[*m*<g
gz_tG/
F1x&L>
\|w:\|c
OY]59a
v9:E !t
3-a1=%
0;QKkf
_nT9Z!]
;#xYu1
?+86I|l|%
%';MyD
38!ZpJ;
%U/~T&
$9o5 "
5KESrN
NWw+',.
ZmTTyg
3aoTJtB%V
F01/%M0
7+&~'r4
4V_+m@
0&gB?c
"V~H1;
wT=|}*
;L0=jsw
Lk=d,7
u2jp(;
>BA*PA
UynF{u
@[%=u?
;3'Q}`
&`n(e'
3zHhP;],%
'2pI+&4(pB,
|sqH3A
 kb:[S
2YDU\/?
r={Qf}-
!}fOyOB3
"3PyHf:1
8S[<R5
20OS}
oXOCm&z
@&!>h/V
z qhS3
':Cjw1
S\9S74
BmU5 'd
0/*ES
@dG/Bt
"U!-X;@
c*2E"&
<na/<m}
TDN'7h'N
[Z4%!nB
*"i!C\4
IjNC5V(
nCh>y
+nlYyZ
gJu|,0
UuBy7h
w/ihAh'
G82N`3
H%oypWO
-g=oTz
pm{#[j
;lV 2"-
0iMuRAy
nB2cB_j4H
{<K`D=U
iP2M2e;
A-_Ek><
(]<y"r
{?'y!
9Zw/p|
;.Jffq
_T9U^1
]8P2EK[ryM
-$gi?
KP]0H8H
v, {1M
g,,&G?
|YJ<xq}
|=x U<s
<ZYz?Z"
\,SJs:a
UI-t {6
}/0}$V
Y.L:z2
,_>V#%`
Jmj",2
yUnwp
+VeMM#
|-9CF0
kW\Ar&S
Ca..iV"+?
=VLT!70
[}KbP_H
Q:SxFt
[-TQ[/J
{M24No#sG
<?Uks(
qBNE1&
jwU_pP
\mjLU
Y7znjY
XQP%>y
&\zh>+
+-o>BI
2M\&5\
I'cU)#
@J6{K3Hq]D
Ahed7;
XYlWwK
<V/x{g
Y#K){*
0..y^=BKR
f]GoSN
o>"eE=q
r<2cK)'s
={8Ba";3
UI7Zs-Ua
&7c;NO
0tl=28)@!
1O@f#sd^
nj(M}o
_QB/tj
L"sW)cv
cX@Bq%{;
p|!J\sa
:ACxqy
OX||zp}
yP18$@
RVNl{Y'
Gc>FPc
)A>oVQ
s9U\7=
M{i=<K~
lbSnY0
{T7QdOZg
eG.$c8!
c@$]u?
SOg)|H=
veP^e]
4X@zg#
|R.rL[D
s2A-ze
g!V%BJl
{kqj>Xr
Ty"wTK
*n%6O_
yp5]1]
h8>_BK#J
-clx`'
-0Co}9*
p6&`0O
=`% f#
vcA{=\
b_9*YBu|
X':Lq'
8`0(9X
W',} >
gXh Pm`
X5>P,z&
g@/pmY
~^/@n/%
nZR=.3
!E6eRp9
K4+H!
^d8go$qW
f$N4(>
>^oNfv
Y(v65'
?-?/Y#
].%5]{
DKr;hh
\2eK(K
Re\'ncl_|i8}>'
!wKI8ym
j{foN&io
\ZuKxX
:]NZEC
DuKZ6
sJ\ja
,b].<6
RXWt_>dt
)ZI1Hbh
Yt?uv-%V,^
""hmrj
7CMdg)
4e{[+d
X"*K7
"_9L/E
p}t`\6
Fy)m(3
h@385F
ho.@&B
B@I;f;q
Yf#`rt
BUP$/c
',wFTI[D
&K"nnp
wdWp<p
Trl^)3/o
D$v.eW
9O.5f^
%aXX-!
xgV*"9
zEiMZ
Rm)7{.`
'|} `/F
J'BOx`
bzMe?4s%
?Mp\hxT
~CyIB=n
cy-q9a
WFR%,5
|{#FHr4
.4b0jL
*%`Bn[
:T6k<s
TXSFxf
4F2T^0
_%7]{Z*
n[DI#
E8l]J
(IQPX3
RLna c
K!L/B\
Gaf9@a17
z[^7!6~
M*Ge68
*LA93.
1^uAFA
qk$-B3[
NI@+t'H
Y(bQJD#
>8<Xp
DPv6wT
vp2thZ
i0R>a5Aby(
H'Tv{&
$-3'83f
(11}(0
A8f&&^n}
%g&C~xUj
h'RPDI^
mAsbL<
uacBFO
DV7xv1q\
ThJ9JpX6
n^ GgM7'
ZE{$zz[
3"SNj9
3<ki$7a
f5+4U
NwA_n)
a$-Elf
@4j7id
0^WNR-
%_xi#ZD
knfF2Z
@\NcD%
jxhVPy
e?P&p?
k@%UAqY
{R`e>~
~8bO7LiB
vTIH(D
WWh4g3
QItwTC
Ld'S`]
)V+7Qj0j-Q
ckH!We
$WI!8f
'W%ai.
x'2_L90
fc?;.
J&BB>D
$,[NP&y+0
K'$jJ1
X_iJ\CUOw
oCX4kI
5%ldz~
`rcP;.
`p*iw|T}'t
_3=fRd
o\X9g$G
$5LTU5G
bo$*%a
7S,8U,
uo8\&k
A}gd6*Y
/Vv1@D
~p""CD
HyP},?N
qHDvq0
;nla[,R'
)AGw0S
Hk`Enm_"(
Y5A/yF@cv
~#` 1DC
g$A5Q/DWw^
0gbAAH
/^kb6
V?-vc\A
zEzyga
HZ}:z
_:y::p
AxMeC?-
jse'.9N[
9`yZKS
j0H m)
g>J}xu$U
x~V9j[
%:oIYH
P)S\$|F|b
/iBu0Y
wYKLP
nqT&D
$'aBwf
\"E\Nx
rM}OBo
Dd'd#Zh
_!:+8Z
v/Bwnf
{~6#kW
5,n)`'
/0;C)V
O 'X:fE
Gov#'U
l %hMh
p1r, y
;C jLj
5n0t(-
4`*&?I
vn,^{S
.}pIff
IRnABh.=
|v{oitBrX
sB02}D
y8m8Xg
ms/wKra
<5^^D]J
)$Xo[Nk
pPRZC>[^
^m:'e+AE
b`v,~S:f
pfu.Z0
>r}5+:z)
aH3]<1
[PiDBi/
#srMiw-0p,
GgtsVg2u
RCe3D3Ex03
I6(=%6Y
gE[{42
r77s|S
~'0xvDi
$rQO<`
b}r})M
TY~F8#
RK S[+
.]#`z*
,lO%yg
V,I&9@
!2?Ko1
[NEiwq
/,y[DM
?J$qPf
UrWL/|
*<m)UF#
u1bgn|N
#M1X~a
pfUupwB
SV&ugT
4_+\daZ
|ScN|k~
Qk_zb
OS]XnYZ
[Z<&7pq!
-nZ&uu
:gZ'!VA
BLXl+d
{~q-`i
AGhCtG
-/F#u10
NqimH,
Yd;NVD
m<Cvt
;nm4l#
dW),fn
{G*)JX
+`;DF
-Q,wc0zZ
xFx9.&Rc
mN0.^`
85?*[vB
Pe=3'K
7Cw5Z\"
5B:k)
QSza8i
L2eyn7QO
R/[]TB
g/~GuQ
>%__")
Hy'xUA
$'`$s:
CwOYiS
0ro`X~
OTq~g'
Rlx~Lq
rsR75N
tvXry(
^BUAY_
BOKt$76
#@V<T7
?5@vMB2
*G!y)b
yayD0O
S[EXjE
[1D\+^
o;66It
g*L[m-
bXa`xd
LR_&AV
hr~CJ
s'CcNl
JiaH|$S
J;I*{%
'~F<0DT
bM &ZU
zzvzM5>{*
q7sI:()S
> XheF
:<hgC99
e#x[T
j&Jec,#
cCzfJ=K/
m,`cUP
}v=(fGd
,.;\QC
d`cN]tt
Da\/L,
'ou\@
DFwH6(
g"bd9'
646H8D
\|wk!sG
.?-zN}t
jS1i%~
<[&hQc#
\qW<|%
.@}deU
^FM+?2
ExjMK#
cJ8X^0
;oql@g
I+yUw%x
"{p4:P
1~x9I7
XdxF<L
T$!u"O
/Zq}8Yj
Wc(ZA,
*96jz5-T
=j !V]
)0Xe\^
p8D{nt
"zVTcR
l3[o,;E
)bz^2C
![D`[v
RH,KM.c
)ov"4z
c{OkR(
bvv)!,
v4.0.30319
#Strings
#Strings
#Schema
= I p
"A"j"u"
" #+#e#\$|$
0)1C1^1r1z1
373V3'
:$|2!8
<3?g?0BaC
WindowsFormsApp60
<>9__62_0
Ldc_I4_0
Ldloc_0
Stloc_0
Ldarg_0
Ldc_I4_M1
Ldloc_1
Stloc_1
Ldarg_1
Nullable`1
IEnumerable`1
Queue`1
ICollection`1
IEnumerator`1
IList`1
advapi32
kernel32
Microsoft.Win32
UInt32
ReadInt32
Ldloc_2
Stloc_2
Ldarg_2
Tuple`2
Converter`2
KeyValuePair`2
Dictionary`2
Ldloc_3
Stloc_3
Ldarg_3
ReadInt64
ToInt64
Ldc_I4
Conv_I4
Ldc_I4_5
ReadUInt16
ToInt16
SHA256
get_UTF8
<Module>
get_GUID
get_ASCII
get_NamespaceURI
System.IO
Ldloc_S
Stloc_S
Brfalse_S
Ldarg_S
Bne_Un_S
get_IV
set_IV
GenerateIV
value__
GetData
mscorlib
System.Collections.Generic
get_IsStatic
GetLastWriteTimeUtc
get_Id
get_ManagedThreadId
GetCurrentThreadId
get_CanRead
OpenRead
get_CurrentThread
add_Load
Interlocked
add_Exited
get_HasExited
get_IsInvalid
System.Reflection.IReflect.GetField
TrimEnd
ReadToEnd
get_Millisecond
set_IsBackground
DynamicMethod
DefineMethod
System.Reflection.IReflect.GetMethod
set_Password
Replace
StackTrace
IdentityReference
FindResource
SizeofResource
GetHashCode
OpCode
get_ExitCode
set_AutoScaleMode
FileMode
CryptoStreamMode
XmlDateTimeSerializationMode
EventResetMode
ZeroFreeGlobalAllocUnicode
SecureStringToGlobalAllocUnicode
get_CodePage
get_Message
CompareExchange
EndInvoke
BeginInvoke
IEnumerable
IDisposable
Hashtable
ReadDouble
RuntimeFieldHandle
ResolveFieldHandle
RuntimeMethodHandle
ResolveMethodHandle
SafeHandle
SafeFileHandle
get_ModuleHandle
RuntimeTypeHandle
ResolveTypeHandle
ReleaseHandle
CloseHandle
GetFieldFromHandle
GetMethodFromHandle
GetTypeFromHandle
DangerousGetHandle
get_SafeWaitHandle
EventWaitHandle
ReadSingle
MapViewOfFile
UnmapViewOfFile
set_LoadUserProfile
Console
AddAccessRule
EventWaitHandleAccessRule
AuditRule
DefineDynamicModule
get_ManifestModule
get_Name
set_Name
get_StandardName
get_InstanceName
get_FileName
set_FileName
GetFileName
get_MachineName
get_EncodingName
get_LocalName
get_FullName
get_UserDomainName
get_UserName
set_UserName
get_CounterName
get_ProcessName
get_ProductName
GetName
get_DaylightName
AssemblyName
get_CategoryName
GetDirectoryName
StackFrame
GetFrame
ToDateTime
IsDaylightSavingTime
get_TotalProcessorTime
get_StartTime
WaitOne
WriteLine
get_NewLine
Combine
get_FieldType
ComInterfaceType
ClassInterfaceType
ResourceType
get_NodeType
XmlNodeType
get_AccessRuleType
get_AuditRuleType
DefineType
CreateType
get_IsValueType
MakeByRefType
get_DeclaringType
AccessControlType
System.Reflection.IReflect.UnderlyingSystemType
System.Reflection.IReflect.get_UnderlyingSystemType
get_ReturnType
SetReturnType
get_MemberType
get_ParameterType
GetType
get_AccessRightType
FileShare
System.Core
PtrToStructure
get_InvariantCulture
get_CurrentCulture
Capture
MethodBase
get_CodeBase
System.IDisposable.Dispose
TryParse
Create
CreateDelegate
MulticastDelegate
EditorBrowsableState
Delete
get_CanWrite
DispIdAttribute
STAThreadAttribute
CompilerGeneratedAttribute
GuidAttribute
ClassInterfaceAttribute
GeneratedCodeAttribute
DebuggerNonUserCodeAttribute
DebuggableAttribute
EditorBrowsableAttribute
ComVisibleAttribute
AssemblyTitleAttribute
InterfaceTypeAttribute
ObsoleteAttribute
AssemblyTrademarkAttribute
TargetFrameworkAttribute
DebuggerHiddenAttribute
AssemblyFileVersionAttribute
AssemblyConfigurationAttribute
ComRegisterFunctionAttribute
ComUnregisterFunctionAttribute
AssemblyDescriptionAttribute
DefaultMemberAttribute
MarshalAsAttribute
ComSourceInterfacesAttribute
FlagsAttribute
CompilationRelaxationsAttribute
AssemblyProductAttribute
GetAttribute
AssemblyCopyrightAttribute
ParamArrayAttribute
AssemblyCompanyAttribute
Antivirus Signature
Bkav Clean
Lionic Clean
Elastic malicious (high confidence)
MicroWorld-eScan Gen:Variant.Razy.692724
ClamAV Clean
CMC Clean
CAT-QuickHeal Clean
McAfee Artemis!F0016739C32F
Malwarebytes Malware.AI.1668695844
VIPRE Gen:Variant.Razy.692724
Sangfor Clean
K7AntiVirus Clean
BitDefender Gen:Variant.Razy.692724
K7GW Clean
Cybereason malicious.9c32ff
BitDefenderTheta Clean
VirIT Clean
Cyren Clean
Symantec Clean
tehtris Clean
ESET-NOD32 Clean
APEX Clean
Paloalto Clean
Cynet Clean
Kaspersky UDS:Trojan-Downloader.MSIL.Seraph.gen
Alibaba Clean
NANO-Antivirus Clean
ViRobot Clean
Rising Trojan.Crypt!8.2E3 (CLOUD)
Sophos Clean
Baidu Clean
F-Secure Clean
DrWeb Clean
Zillya Clean
TrendMicro Clean
McAfee-GW-Edition Artemis!Trojan
Trapmine Clean
FireEye Generic.mg.f0016739c32ff1b3
Emsisoft Gen:Variant.Razy.692724 (B)
SentinelOne Clean
GData Gen:Variant.Razy.692724
Jiangmin Clean
Webroot Clean
Avira Clean
MAX malware (ai score=81)
Antiy-AVL Clean
Gridinsoft Clean
Xcitium Clean
Arcabit Trojan.Razy.DA91F4
SUPERAntiSpyware Clean
ZoneAlarm UDS:Trojan-Downloader.MSIL.Seraph.gen
Microsoft Trojan:Win32/Casdet!rfn
Google Clean
AhnLab-V3 Clean
Acronis Clean
VBA32 CIL.HeapOverride.Heur
ALYac Gen:Variant.Razy.692724
TACHYON Clean
DeepInstinct MALICIOUS
Cylance Clean
Panda Clean
Zoner Clean
TrendMicro-HouseCall Clean
Tencent Clean
Yandex Clean
Ikarus Clean
MaxSecure Trojan.Malware.300983.susgen
Fortinet Clean
AVG Clean
Avast Clean
CrowdStrike win/malicious_confidence_100% (W)
No IRMA results available.