Static | ZeroBOX

PE Compile Time

2023-04-11 00:06:22

PE Imphash

f34d5f2d4577ed6d9ceec516c1f5a744

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00002000 0x000f79f4 0x000f7a00 7.99938597515
.rsrc 0x000fa000 0x00000588 0x00000600 4.25355259947
.reloc 0x000fc000 0x0000000c 0x00000200 0.101910425663

Resources

Name Offset Size Language Sub-language File type
RT_VERSION 0x000fa0a0 0x00000244 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_MANIFEST 0x000fa2e8 0x0000029e LANG_NEUTRAL SUBLANG_NEUTRAL XML 1.0 document, ASCII text

Imports

Library mscoree.dll:
0x402000 _CorExeMain

!This program cannot be run in DOS mode.
`.rsrc
@.reloc
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
f_]zdL
7Jc,Of
i.S"3pjm
H:!&Ud"
;|3vs{
#?m#PK
2!gzVhT
K; fuM
dnCWEo
x'Qx\l
r*}"W&
>>b1drd
/E_xa}
[pwq]y
Cb5P6w
bbw$U[
9 2]/o
'_B'Yf
&dA,h:N
BQ{ieY
(f@-7^
A9[zi4
$J2i\P
v3!B5ZU
z{Q"w_
J'R}'T
B0Fw6Tsm
pq [cy
sWINId
M\R5f]
|ROXN+
XR_24/(N'
.GzVGf
){F*c=
O=`ZE|e
UI]As33t
"2`8wD
+}?P/Cmg
8G|{];
HN{x}]
)fpA1^d
]v0~#?
AcU/Zt
XF$d~Ca^06
WKXO
`MnF~>
XLYqYp
l*K;c=
Zi=*l?
4a/q3:g
f]"la4;UBZ
V9!X>9,
}EokM'E
6EL[WwR
h"w*(y?
SP%{8J
SygweZ
RSEav@
c>l"c[
3Wc9Dt
hKf4kK
:PCV'Ls
Y)?s/2
pU0etI
8]p1!Y
?$ w;TS
J|]It&
]Y+pbu
j=CZ4V
R[%PA]r9
k+,asW
`Sglg0
CppPdU
Kx`y/e
)F n}aKdO
A}UMjD
I46tK
ex:zhf
@"8bp:
D^)*5
,Q;+Cuo
c0G?lTA
o[;)V
%rPD<V
0lfflh
98R(a~
6yDn b
&SSR3v
6u^./G
lRw\k?
q&<t>AN
s%L#o^
MRk+fMO
8+}#SG
f,F}8<
wJ<<D>
Vx;kwz
M>h>dl"
_:3=&b
:&gdn.[
^:!{8_
b:?fXo
t6Ac[
8H,P];
8w*w~h
|nV(]>
x.^6gM
B^8]4y
Y:xaD MD
@ME_+4mw
9p_2zqNy
t=[noV
8#:lBH
wfS%A[
'=f<<b<K|3
4=j!tV
4}xG{#
ND2uzW,
9svm*.]L
sQ(DD
O3dHTG
:N}]^B
.$L7J
K5a'vbB
CGLD.\
`/)CL6_#3rNtC
@{x/,:l
N[B'Jp
_{m*rz
_0;WJ(_
x)oZ>w
S{pimv
Ol*Y\$
Y\rW]W
'"$hkK
A:Jp<
-g7hkP
&P/4@U
;^gARm
#^RHLQ
jIxJ$W
tq[bL<}AI
T~lN"N
3Xb@\m
hgC-Tt
0lV1h_
wvM`P4b
Y?f.1G^
vseSsN
hjCtHgT
.D<EH&3
R~JEK1n
.m+#g@
]D.-]w
u\mogr
djhfQf
C\Fnw0
R v:K$_
F|({go
gW<}nv
tN!z9$
:#Df'FW
ny@S^$
cn]@R'
oFw`I`
0%Wy"{
|uTM,"^
FF%4]<?
pps hq
(1z A=4
a\QNn @V
ZN01{Fm,b
AK-B"n
r]3#s2
hOFdyU
DQM,E
{^[e*;
jd%qgG
G$:$f_
$"_RNe
<XGE`H
o@/iNf
>13j}u
J7[PL#.
^y8Vt.0
E1\3tiq\
%X%dh4
SS*RJ;$
5$D467Z,+OT
JX@q|%
|aIl.I
K o]cD
z,&kCOy
[@nqL`
"B%2Ol6_q
Kk0fs
M[V^aHj
\UQfE0
Lf*n()
4nK@nX
AGcgy%
8ic{D=
y#sEkD
Y&.!N!
&fA9:T
E+]aF.9/L
%aZLe&1
~i%tgR
&^8QY-
TSuzlx`
bi}SWXO
,vWp&2
1U}HCNm
1NJP|^
<}.FbpOV
aa}g}ee
oQy@ j
WW<z>j
jYBkeH
d9rq@Dy
MZbPjF
SF[ !-q2
{N"=q@
eaZ2F!U
Z2/\_]~
XIRp^&
AzRr3My
4C@vqo
muUCg-9
Ep<Fsu
MUA+583
fY)h;kJWB
m$X"CN
(8YC(j
)CHt&78r
-EKm`T
rECm6L
x0msuo
}&W>PW
"%$\\O
uTKC|_
"CyX1x
Nq01.)H
"!tqnD
n!na6R
\SU2|h
#77Rv,P
^Nx"s|!68
9.i'8$
?[vNEF
XLa*0+
<")<uC
B't0j&
qc\0'V)
Wc(fj
PT"2m%nP
QQHCKb
ivw`4G
.}/Htb
I[@KN{
L~18B-`
j<<R*8n
\,W;?P
L)(r8d
e|?Y)$
(l<B|b
22]*vWIQ&
Iae?oi
&2H?|j
Rh%hYR
kU:T2$X
%='-SA&7=
Do"-DO
5T3Xvb
0#G/(0Q
n4h.ex
^N$z0z3
gV!xKmw
/G<oGt
Je^~hI
_O%;D}
o\pM=4
K$bmZQ=2
3JYV<#
!a\I4k
s:4:zB
ADW3{I
N)6>f3
Q4Jc"86
"<<[FC
X$1@F@Dl
:jMTN%
i5G&`o
3%$f,g<
OX>e4
J8*Fh5(a
4SxT%?x
@Boo8/
d_OG#?
L#8>f1
"_fx%?$&ZPB
sJ1XO@
5*aF%@
fLw1f7
Hso$8g7H
dE>AGM
=OesGn
MV3K>=
21{l>]
ea+Sv
#<y]>5
aU>~_q
N!SQ%,
`9_+OX
5Zi;)_&F
PnDFSz
PA?]/G
)-b]h2[Hh
"RqAbE7G
upJXVI
oW% #sN4
vA>&uB
LX4 OR
{0Nji9jEP
#8w#[&
Y6Aot
z?9aX
5| 5_8#
; r&kSB
tbyS@kJ
8!se))
#|'IjWy
.VO 8Q
_J K_2
(L2uCl
a*nf'-
>4f@OL
qeO{ea
6*0G?UC
`>6kH8
m<G>MV
FDa9#)[I
?$$]-l
n6@!B-
v6TCfYb
q}=OF(4
^^3qm>
[e*pa6
%pDM !
RN9F\iLo-A)
.Y-Z_t
d8=BDkVC$
qXR_WP
>&ir9gz
|v}Ci,
isOS0Av
49[>.9
g 2>'+
b~31Wn
XpIm>@|
cwP{'`
r+#DsN
8LE7M^
,Y@E h
y](^$|G
V1C,C4
@a}`&F
X>T;Wh#b
NaZ5DJ
A)8TH:m00N
h~c%'rH
_ly.6o
/97JM3
TvEY-<
$"\lQ+
,z<@i
r(b"fQ
r~OGBcxKNN-W
J^L6@El
?<oe&L
sx+HkCU
)+{(D#
,GAqG/
%o0Ub,
%WcB&>
>4=sW)
Y"IM')
#.vVv&
9^PKXEq&
$X1 y\|s~
HK*%e0
_0JBf\d
^KDl3fl
2zl]@#
c$Wl-U%
s|7CYLi}
F"/NKw
Exgzel
>MsnO7
\zL9^
t)6>/'
!739SR
QZSG3a
R.4dUPy
NIcK@}
%2UgE+
Ha!'z0\
'oZpU#XG
_vt%}9
yNOA<XI@
<S;aTj
vA0+1
2QqPaQ
k[0tC0
,@|dK#y
gDnd6_
!>R$u6m T
s*DzEc0
VwRs`T
WpwqXW
%R cbYt
fkbxP$
P-1|-*
:oOTy8
ERw1rDL
"=4TW
7F1*,zLA
$K@,54
T}w&J
r42g-
0!d7O@{z
D7`$j'.
T34zNr
(QSnoy!
`Rair},
^D#Fe=K
M<i75s
^PIY`u
uQT)i3U9%Q
Nag a,M
)XVw9g
K?cN&2
>CJ4Fh
J!%kl1:Y.
_tVpf.2
>/O,YV
Ui5AUu5M
_(&,hY
hk:6[z
:@OhBV
wo}w8H
2u!K;I
l-R3J4
e`ZLpU
}MXPS!L
VP0uYE
sJx @4
J.;~)HZ
Cqo2n1
hO"S.
cDgO+n
X?=UhJi
Jyp9<IYn
~_<i}>
}WuuNI
uy1=bMT
k'L=?;^<
1xLUn0
0Q[bfM
:-AO6X
sxhPW~
Hpp@BT
X1*|cp
52k2>(
\!D4Xp
,ilU-9
}01r[n
0w\*JQ3-m
o{&"Hr|`!
-2.(n
g>c4RPE
${\(YV
k_N_Fk
dlaI>v#
wNies]
!Yf2ht{
'V8jul
n$nL&?
.\eyMT
cEFc8C
kO+>q6n
]$E5A{u
I 7Dc`
rcC/lz
7%? M)
Bi;~Qv
e";6Ov
n?Z7J}p
5")hW/x
ZWS-dQ
gj(SO3F
#eM!jXZ
&B/mfZ
}&2q]5
#A7%Wl
H:m(i[
)i^:F4
_.*YB2
N?Pa.S
I`Xgk,
8SHMf[
2Hf-9)
&wzc"d.
gVeciC
$`mN7O
t1Sm,@
eM*l^O
~jC,=9E(d
?s[XS0
HR]g?8
X'_mL;
~`BAl_
\5(Z'k
70,X|v
JrR_&(
7WVP]$
~k#2RW
vFm"@`:
T~+(sMJWx
Y}&7<7[6M7t{
zHv'V:
ItM(Z#
G` gz(
7@B}uqa8
52"h_i'%B!_
##8N`"
[/\A{7
03}y.ywY8
>JqE:
#(#4:'7
R@JHc+
-%s)|
wxh#<2
RB-M_r
7u+Q=5'3
QbT>rP
Y@*nM}
%R!R&x
_iY{dF
RKGqrIC
%]*8*ts~
vEH!XnI
KVg]A%^t
j+?)QR!#c
W;POHI
F?k@LGvu
}~nnsUb
{lYt1$
[S|\8o
rKRBmX!
l__'%Q
TA8!)37N
m{$?4r:
UJ1I>{
ObVu*v
?*Lt4j
l5DCgl
[b,t@9]
]^|:g?
'(SGj+,
do2s5@
e'|HY#
kv"I:H
8:|FxM
A _at[
kb<vXB
{sHsVO
xODg~t4G
az0|/$c
RODG|[73?~
8-o!1$]
t6'.[_
?CC*{
?8%+.H
Byg.;^
LAzc8$
Y/&"T\
njan>2U
`iugZr
wVm_di
T+>OI'
q*{mr%
-_3}&
"M>;hqVAX{
Oo^<"A8
N_6Q^T
c'Kysd
Ge"z9-
4*i1iL
[$C)#FL*jw
;I;5{d
1MsvQ5{
OR{UD-l3
EyCo5&
60S8po
]7&LFe
`JdA8Xs%
my'1wVWU
1eRGZN
WCqm)Y
# 4%3[\
7kI|W.j
{q-xQ%:
K-s]%)
5LN\Nt
V8t-;&
1$DFy]9
=#A^YaD@
Ysx*@UT
&JsLs@~
2]2Dx@
X'L&""
#T_cu[mVq
gDjayh
'0vG8#
L1QJ)q&
"6zl-%t->9I
3'a:moe
4+!6K`
Z3DG]2
P*Ww^>
\O]+=@Y
)d:5%ES
>7Z\tB
_E\Wj|
= m<`F
L[vxXcR<
!CnDhb
CK-Mzx
Qf==Bw
De6dwv
1(e?lX{\
!<rg?2G
kP/w;,D&
x2xQzO
4QQ%q
55;|>C
{0WSwT
499'RJ
]B?l4v
klwSj']
l?/Z4R
$Q{^=,
O$s@?Qn
5d/kC~b
Q['7;i
u*~}$ZO
//Q+z
SSi?l,
~d>hR(
unX<4%
;L9Z4;-
-v>sIyz
uX2A[&
5ZcPz-:@
eB(hv2
uHJz?phW3
?'l"'fI
<O12qx
^7{]jg
q[A`3
3SIt.~
}q%F5V
nn}+Si
l;)q*;bDU
q1<X8\q
l8*x3g
0% p5
M:'U(N
lbS(x_
|NDE[n
8>D#s9J2
E)N]3x>
=k<=Nm
1c<a9u
B<IbYT@.s%
Nq"LutU
I]{U^_
iAa=Yf
F6.UtJ{
frM;4%
rL]/$K
wiF93`j
Mx^F]Vr
gJ5eDd
LXE{(Y/
cr]e'd\
ONZT*qJy
Kd-&C
aE)['y
]G)w{,
\e8/(L
H9]=+W
m~?({mU
Dp_*ep
u E ]y
TujRyl
*l{SWY9
r4P^T
#v_>h"
KcOg)3
.0Ob/=UN
[<"U2s
ke9H4Y
hPvts`Y
mq;@gY'
.)p;Bl
BO+iA
&8r[x}G
TjC<~,
.Ih,Yj
V!){YE
3RBLP~
DD[M)Q
sq2mtv
|L9Ab8Z2n
z;@Ee^
&E"K`
0$]AO]b
*hMi!&
/?^ -,
5$sX[O^G4OaZ
zEmoyJS
%alYOfcy34
#MS_I`h
#i+:T)
_,;oX`
YB,fb}
}fC`@2O
4YH>=g
>$dodEF
V<O%Gfmz
%K\<|\
\l~!YA
S&;#}B
?#n<-zj
uT]Vk}8-
w)*@FD
`C:\Wh
i.(V0w
l7r@F22
V*JRD.
V>I9B9-
Es}uuK<xK
f4uoGk
*w-3EOA[
XRSA|.:^
T$M9p<
=amtdE
9,i"nI^
Lwa6ZK
Jq7[_P
/n(&UL
1p;D&s
~1B]U$
-(+*6b
Z:)U\@
Tn0}Bi
Xtb|6-W
?>j}.j
4%vN,$a:D
>i8TF0
k.R}Vz
f$-"l]
/]-yu_N
<tU[xfm
SiiWPI@R
#v|M:N
7vS`8{Md"
PhPSOq
*/2FgT%*Q
P.o~;m
x}5;Z"
e2 ##G
KHzpZ>
hzV\Li
fp;w46
)izAD*
k X-W6
-'qHqb
NuU=;7
s-xQP"
?BQZwv
#CL^`2
Zuv'dV
Hm0}D,
%;u7-r;
rOU8O\
n%J{t7C
kbk_,f
yB' KP|
B]G:]|
_ay/p@V
rR}0@KW
[0#5SB
Sy3u&8
PH:Qx+I
0X<8 r
JM7Moj
('kj2I
P>I3B
"d^('8
#tHIbN
ba(LP
d]:{il
#l'sJiQ
vav@rj
kXLZ*d
K:uRk#
=v/a2{6:DnU
"k>q(z
@Ka:_
O}>b]@9$
xVYXIA
pV6'(M
rK1s_D
w4d7^
6'hLpq=
)ylO[7
6L<`p8(
h6?wBlIX
miJ~b@
5Kd5z_(
<XnF|Jw
TN;p[
"{</V|
#wAed+
qZI`?v
(OST6q
ZDhPSv
Vsa28q9h
0,lnOkYn
W^;aRk
]Xs8$$Q
F"4.W
F+@COf
-)KGw$g
VT+h%U
}g(Ux!
PfvzEw
k]CSAQ
>&RioV
I#W(7V
`*)14Q
(E)"m8
K%hO@"
od.1Ny-
xW6XKg
sA>3C=K
[wCz,C
"h\c!V
!0ad}%
n,x!'g
B?bU4-
R'h+~\
+"3uS 4*
&>}hJU
1>:&ZGU
0I|N0oH1
fPE/.1
.oYd4}
-"&/NT2
g%F{_T5$T
1V- 'O
B{i5fn<_
+"(IL
J=R6DUr
J.h:\0K
k(?=?t-
O/b//D
Ruq<Z4
.^CMth
KS[R4~:
WaYH:T
}sA+=@
ZS%r1x
tRQsi$k6
(pL@rh
6W\k=a
."I(q86
\1AR`eg\
2QJD^u\
XJ]C(E
~q/qU&
|M1oJCt
bgG"SG.
<ru+'%
KFsQQ>
p,Ib%I
LJ+`BOE
wkX:'IO^
Mw0?HE
&#t*#{
c+HuV$b[
qqS;{
}5KdY<(
2j((Tg
~o LLW
=>c#cmNoy
`V%bhPu
HSyaP$<
+1GMf<qTAA
nAi<OOB
3paN`I
WaM]qr
F*L6~)'y
!68rk-
clxndP
i\D)wUV
:K`2G@
A~D`Vi
qKf$JPO
yC=4M@c
*TIY)g
eNv l$PL
Rd)>w9>4
#Wkz]vn
/)?t9XF]
{KN:$
.ea!,Dv
UsW&p|
fX&);B
uM|k"a&=
L9H!Uj
i8 *"=y6
V%|*\g
Rb`/?X
susQV)
f*PN'E_
jatg|e
\\R3yI
i [3"Df
&#CK5
.h4fvh
V& ]'
'ZrrjA
jQ+!K-
OiAoUki@
~j2O+i
TE[GvXf
A/4fn>f
kNCN9k
>}F=l`
78brQ>(
x'Yp&B
KxM!(ll
$10+Fr
'x;\x(
4>>6-W
_~=BUL
"?kJ1?
uLw,.>8
GdT:_z
u@r#}}
ir~Gd
5>}AUR
fG3_$nk
vc9O$.
~Wc(lH
2#RvT9
G"g0S|UR1
h[L-0=
foz1U (
CTk/n,
Tl,A9r
>paZ?b
1{=Xc`
1$dn1QI
CT#Z0=<
auC@a;
b-%)6rNk
|u(SQ$]
vg/?L(
@%m<Tb
`&BzeP
MF+TQl
$/?$]@
By1/qVV6
j*9*"9c
7W^:nZA
3esr312
|pjFv'
DeNDkQs
({Ae`N
&&H}#b
P'/Glx
6OJ_djR
5_\Z+B
&Lm~$,
-r:Fk
l+GzN`
/O&+(;
%4mWo</
/E,0Vt
*7^e&o
,4JYjk
5GY5`th.
2=_Q=Spt
^_w\Y
1_MpAu
%Y%xJ
VdMl[`Fyz
sFiQ_c
v]c5g_R$
ADf"'s
p'S~]0
&2d]fZ
8xuf('
ca?,&k
idQN8\g
2=0}&^!
f[b\'
dJB<lx
QY+eT<W'y#J
C6Z8ZU
SrIEsp
Sl,>D;54+
NG1='9
\b.Tx~
!><}ab
:cJ:ak
d9YQ 45
+*&u9Q)
,$!])#
ZlGaRD
c.tV:cC}E
D\Ue8&
xTZa~W|
?+c9|y
~)_`X
,u]KPk
Nz=Z2*q
FYj^&W
sGN?RLEM
Du9#bz
Ci,+#3
bL$bl(L
#/Esyz"
(W!rbt
[A|]E6
Oy&U3^
`<$hEY
~JK%bz
iT"Q2V
sbw>Q$
&t'hT2
r" #Tl
9m6}hSE
^4AA6$v
Nb=8>s
=tfWYS
hL:KrPz
=^N:l
mN 1Sh
ueGdUx4j
zlU~Mp
_ 4zN"
d[Ei}|
*=oQ{A
C.&.#{
)g8ot
pP@Hs6B
p6q9Pnl
o3bj&_%o
OAa\%P
2}Wh,(
k+IKMf
fR"mzX
CMRu2]
iX;0K3Kq
!Bjc}p
&2_aWd
6mgX>;|
lF*Tp#"
4\omid
1u3AS|
Blm'bs
zwMOV .
o1EN#}
)K4>T{
5Cd=W+"H
7PrT0={
B@pc=l;
Z\9'Az
e;`(#Z
)4zb_eZ@
&;uPF|
J** zy
1CsJ*Ni9
o&+PaP\6
jOnjkbe
f)#5ov
I@Ph{J))
{,$_m?
d*wnm'
lB2T=4
W[I)([
c6uS?]
BX0/qP
WK*A?U
RrGj&:j
*/L~a2
#Yz8u7
>"wG2t
}co b
5k.M?'
tJu=TFN
h?6AAo]P%
bG6M*d
y0 Iie
&?K*;dk
IQD80
Nu.j^T
AG]Pl`H
yK5YGr
2RGhDd
-&ZyJOkf
Xk?~Bg
:u5,yaZ
L=W A_
\gjw39
@y\{{nOY
9|v+c
VLLPr>
uxz)^ab
:D\3:X[b
W%S-:E
S+D*@X
37)$o`
\RH]=:}
n0CX7(
z-#8?1g
l$~'+"
86m/V8
c/KF9trD
tF.F9R
\FQx ?"
b.$j|6M
~G]|5.
hs )e
oi@$G8
eM3QKJ7
G}QwN''
$1X``*o
oS+!59
C!Bv5MG
=f:T!m
7MI,dl
ta[DzW
f?vaS(fa[
/U`5Bc
W3~DL* q
c[7FG K
=p}!ob
?xiG:r
?Ts0s_
H~mI~;
%}kYq
1/{&R'=
oW9YmgD|
E{5DYx#
@ rs(
+x!CD~
1Z9[g3
6GvL2.t^
%<_/(0
lLqgCa-
[i.\w%
_9jfgT9
2\]kpP
X%WzI@zY
L|v=B?
fR]YbqI
Uke=tn
6@N7qp
-[};?`0Mh
Zie9_F
)tCA?C
N[ZR2
bEy!w=G
Q$Gckr
J'>A#z
ajjL5+
^*5~K'
s598Yb
5N$o4m
%A#tW}+
p5<r?D;
+AYw8z
7r=D*,h
*9)2Ie
,iivn]
m:Q=Y&i
B(#%NT
*T#`\MJgx
3.=)g](
Ko$b5^s
1DBqDmd
kAK:Ge
?1LS[j
Amkw8'k
bT7x]1y[
+ P;.r
p'<@SdE
zY16W\
&%g=|nPrr
)XFd2
/PD)bP
8 >d1&]R\r
n>$e^B
kr .k.
_zR1Ri
;h!+ea
;s><f;K
0aPWrk@
m!.xo|}
MPch';
8eL${-
N&b6[!
/hC!fA
a%bOKm
=RdRr((
X/0]Pz
4MK^ZQ
}l!hrp
{9Hc$&2B
peBmH
]#(7RH:N
$,UI7b<T
|>,|At
flSm\|[
^Y^k$H
J|3.FR)
N5U,>K
b3k~%s
wK$N09
'043<5
#!/Vt'
#>fI=c
Rjo8WhP
uWRRTsn]\
J>^&y
N<$2_(
Y4!Ucy
k&K$7o
k'fcP:
"yeAUw
@V30`T
UzDq3&V
!3,^__
r)+]kj
nRi:fD
/2j4aht"
N@=7w;
uee!2xD-zN
?bPpck>
"cWI~(
]B%HQ]
u_4Q7V
!WdnTX
#".]jM
KOaa"v
:}I5J=
}^}eRq
5EEz??
E\|-vu
*mFq'l!*
Ss@EC2
f(4bv
wK)b`}&
vKL-,A
g7~V6
6Z4|Ea
EQzl|"{a
75Q[/7j
dNE9#
99Fs9s
j(hq C
sC[io3
vw,aqW
R=3DJ*
!=y\[F
fLZ7<B
!4e=bc+
!oewZuI
.]6Je:
+|m2wmjK
n? 1#nh
s8$3]I
VCXp5}
sdlZ/L
d1,x2m~
$g'%~D
p`XHkq}4
NA2I},
_]]`/R
)Zm;~#:
;%k+EGJ
m*:Wl
(Y0qC
k&K.4=-
NSuKRF
0znL,3
6bbKT.
u`nIMQ
W(DL][$
?&M0Ji@
|F\Jb.
s\%3=
p<G'_&\z
*).h!Q#C
{r@83G!
z* s_W
*2#^'f{
*1@7Hx
wj`s_E"
[R^XQ[(
Z\Y"/V
Agm}Y$B
B (Thx
K:jCM5
lV4@P`
$]b!Xy
![7mxNZ
M+ f>C
)sq*B .
?G?>
x"{gb
L|&H)by
x{e_?f0
EiR:4O
)k{=K=
orHOKk
d2u3Q`
1(sT2j
8`f_uZ
T=^IfM
VdUQ-%
>5^-7:
o&u,Ni
zJ\_0Y
0g#M,k
7?~H,%'
iqjP/gB
C{u,x2
?AYpCnG
6)a<k(L'
f;4|+~
Spb>=Ge
"!]aw~
2v5.M@
>6cot
oJ@18fI
j[;RtK
fYoiET
uz#5`)
\Z'MO6">
aA[;1uO
6YGh>
&B\\B7u
.TOH]:C
KUZ)CD
cM)X{(
LjF._d
NF'8m^_
VF|rU
)o;9WT
MaAe)P*
TQM2;Nd
4}4fI5
TvCI,.
t@^W]J
)L,JTo
)EQ/gX
aVs[\.t
s&L/b4~&
C;690jL
V*nKYfL
0[O#+&"`
s8['\(
ZEBS1no
x<:6Zg
7aIahm
B9}!1P
*r/|'W
,L\(C9
@-6lpi
C|M1od
{T!5(Eq
P4s<Sn
@FMHP?gZLC
eK"kf,
?)=3M8
w0<ww
Sn_tb'
FJw<`^!
;;oon'
DW9Q:A
S=|d]W
>pyYa$
FZ*2SJ
f!wV`^
&,r*bi
6_@8`{Y
<"p_b[
I_Z |G&
xXyssscM
]!k'[K
zp;uYR
?y:rC^:^"8
"@4v5#
XbRmPz
d@?A*Wwr
?)=bIj1*
Z!$#8gR
5PG uV
gz:KOc*x
A.zgBd
=q7ss5
_[k+;S
n=L!^T
QcXJme35
*7Ezh:71'T
PO[[ME
UeRpCR
k~>F%7#7
8Pz+{L?
,n>eM|\h
*GgME]
Mei2/O
DXT#o0
6.O^-*
QID}et
$i'%^|
(`6TsL
>r">*9
Z|W<a
kCs7JV,
@x5Y{X=
ygAp^_
CPgy;q
D+2NB$
=1%ieIC
0j&(SF
:lCuQC
^ DY8&
8[)/&i
e!1{k3
p"tdPW*
ymz/,2
>VG2d
$oq_O>
zn(TtE
rLhZQD9
p:u@AcD
WqP[E>
@d10kctK
"hn+{j
G$`pz+g
<Hak\2
+<,%v5f}
r*bMgu,
{Z`AKf
8FazG
tg>h3^)Rx
=E":cm
#(_+oL
+XLY6:
3$e*wxcs
r@|E0`7
m MB8}
Q>'mN?
^H={[q
)R|k_P
2(8MxH'
aNKP6D~E
Qv.Oz`
&!}j`O
K] 8(
U/Y#A.
p0h]2{7
G4f:;`
!XYV|CM
xuh;}@x
m31 z|>
=nz+vM!
A}]m>u
wlcwtxP
w~Fg~q
k;`gFK
A_.qI}
3tgTU\V
+w:o'G*
kBSe-D
=>._63Y
r^8Ba
P}s9!9M8
?ys%O^y
7?9HVC
HH"B ,rp#o
Z/z@Db
X=8^Xg
XPbDD-`
--&[Cf
i0]5gNN
xn't$
M1E=/ouT
g'LQwj7
@"L5&;t
lJl\={R
k`%q-J
R!Pv!+B
oydzeU
NzIed>
~O9-f/!
a%.lH!
s/H|v
xgA:I0
|H~(~-.
4^dTU
,0 _o\
;v;!3f
au{cZ
wA}?e*
Ps2-Uo
qB/G6k
_|]x.f|
zi+XE'C
vS@xgN
jz,kp3L
__`TT/
rtW)eC
@m4m"}G;Fp
G~,sOa\x
$v#@,]
}5(]_%D
5v8zP3L
jhb+M
$_y}A
*/nKZ
MX{{ V
K>7W3R
HUU=?b<$
.,Pobt
$/7!]+d
zpBUCd
niTsCk
4Q,sv^yu`
wEG*9L\E
asH"ZO6
%N0Bmdw
KhMLB
[&-I@&oh
^$gW#vb
O*VR%9
2NV%<kP
pMS,6>z8
wTKV't
97:(0q
hvXwq
lM=UER
d[[ypqC
J]:4#9W
001~M}
NR8>*s
8*{$"2
-H6,'K
5ldF{Q
]6raI
.D'-OM
BNg/Y\
9>yvGT
zm,@|Ao;'t
J"w@CEmFLAb`
GPZIV4)
5e0$I'
5j8&NO[us
zixffp_
\"KM_l
o;Kax#J
Jy =.GR
Af>Vo0
5Rd?zH
y5>)nRrQ
\t!Wbt
Nlsw&RB<
eumoO0
o+1nAA
i,MMg1
YRe]u9z
bYF)>^
O|@0ya
YOUyJ8J
8%!:gc
cMKtVb
8NRky'
jFYU##w
jGtc$
/SS>j.
+%s|kL
/d*BsO
TUsgsi
R#&yuFo
RKYWD:
X&;E|b
o2a|=
C"2J{
hs+yE^
uTmo`k
%C4T$2
)3=T!
3te)?W
P0i&wd
QgUU<7
gmCx{I
*l<&j~
`@<-f[
8~=-m
!EH/@L
[PCc`X
%x5{.%
J"/u1r
;MZ{Z^*_
2Kx9=
]u_r:!
m[3aX:V5
AjZPU6
W1cCZ50
b&33Hu
yJ6$KUi
=hGlR5
U;yg&U
;l"r_v
-VTv6*
zo4;b7
J'!'pO
fTtlw4-
O:qrn]
3_TTZg=K
-*h@gi
0;b{R*
LWR`(\%%
R=-LG@OY
qEUlU=
sH@&^w
bN>Q9O
].&$3i
|;YE>g.(
j+t=vS
2<y*Cc
@btJIy
90^L5SO&
{P6#.f
mAW@Z
Ec>+k]
<+b~U3=
@h6vO+r.
R53W+
a!lmuT
!u=1J>
-wsuB(
0aR3}t
j@xQm8)
j*XNEOs6m
!TT-\|
A9+@4L
n+qX'1
Oz2cH9-]
]7=:mc
R)w/1|
f@{OSu%
<H+s{d"
<\Slqva
@|n~Hd
~,]`@^
Fiw>+!
h_+l$j
VRlKWjO
n\sp!Z
1%w#V4$C
lP%Aa5
Z[#m {OV0W
9F8tua
FBeTH\
4H7gh;o,
N54m}nf<
Mk460s
,k.th7q"R
Jd_;,(
Sxm%X0+xA
M/=jYN
Gqw<7BLo
hj!9Zt
UN7Ev'
mj18GdnI*
#a0,_X
R'%'Kw,
FG*9g cO<
a3J2djiL
jNvA=^K
Py.e(m
c+7wQF
/b=w'[qy
1>|Gy%5
Y, =;.
Y,B^!h2[m*J
U<fV1>
y-lG`W
H N^da6
OB.q*%
:e0!Xl@9
v4.0.30319
#Strings
<Module>
bonder.exe
haxpqvbwsdrhxksrgggcuuses
mscorlib
System
Object
eyecubejlzsumitwgiishheys
lxxuxuxvekwivycntpdgrrvakuivnyypmrgsnu
drnsbzznqkestguhmymjazkx
zjveipeemfmgrsabjmrjkjp
jhvyixtcwgydtsrxdcnghxymmvf
System.Runtime.CompilerServices
CompilationRelaxationsAttribute
RuntimeCompatibilityAttribute
bonder
System.Security.Cryptography
Create
System.IO
MemoryStream
System.Text
Encoding
get_ASCII
GetBytes
Rfc2898DeriveBytes
DeriveBytes
SymmetricAlgorithm
ICryptoTransform
CreateDecryptor
CryptoStream
Stream
CryptoStreamMode
IDisposable
Dispose
ToArray
get_UTF8
Convert
FromBase64String
GetString
System.Diagnostics
ProcessStartInfo
set_FileName
set_Arguments
ProcessWindowStyle
set_WindowStyle
set_CreateNoWindow
Process
String
System.Reflection
Assembly
GetExecutingAssembly
System.Resources
ResourceManager
op_Equality
Environment
GetEnvironmentVariable
Directory
GetCurrentDirectory
Combine
GetObject
WriteAllBytes
jyhwiknabnerdkbv.Resources
WrapNonExceptionThrows
_CorExeMain
mscoree.dll
<?xml version="1.0" encoding="utf-8" ?>
<asmv1:assembly manifestVersion="1.0" xmlns="urn:schemas-microsoft-com:asm.v1" xmlns:asmv1="urn:schemas-microsoft-com:asm.v1" xmlns:asmv2="urn:schemas-microsoft-com:asm.v2" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
<assemblyIdentity version="7.7.3.4" name="rkwfyyrgcbtfirmaapteuftfzsspm" />
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v2">
<security>
<requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3">
<requestedExecutionLevel level="asInvoker" uiAccess="false" />
</requestedPrivileges>
</security>
</trustInfo>
</asmv1:assembly>
xgpgpwcafqemjbeh
ipzzsdtwhhvifzxmlrdkzctdfrhdxmnbvlntwenuywjgxwuqdtmsmyngvwtbvqyutunuldrgdildsmfjxszeawnwyhxzlmzixpmchzezbfneljniqiddqtuwgrwegrvrjdfdzdcxmacuijkntpjcivtevrwrdztkkwuidkilggqqqamwghkrhsinjbhihktngsimpcjigxwcfdnudzkwpbdtmgyccaevmciyragexckkwgigmmeiaxyfpqzidgfg
sapcuqdcsgymrswgyrqpvvuqddibbyaq
wesvsfmwjcquylnw
VRl2MdALSNWahX5O+weQCQ==
38u8fBKPz7lbmhCkL/gV5ew3AIjIjTWcPYVqK8xdt0hYvRdMxsLYSFBzXRX2y3bGKb+XqsBJ8Ac6bam2qLVTFJ2dbg/cExphA4VI17Rz/6NVFPFJdgv1cAnEshZCyKZZQj7SaUJjChY7/vN2C8QzqZ6K+FNRfDfqXhi9rYl88AXf+sY33TC7hzihuYPUnkwSuV7Bei6bBZC7Dj2dbOM3I1nVC9Vn+UJs4rRBXEuZyg+s3baBwCrtg7DMryEB95vK9aXYTau6/2ovSc19lPDO4wfUL2o4pROfaZj3Y+61jDd7T40IUJwEikkgJLnPVCgABXtNsWDGf4F58H2FiV3DLFsRCdCrbeXUbjw6WvFfLU7NIfYOWZscoBHCfg4CpeQj0zulhT4QN/sVdyt6r+XkRQ==
aK5fuyvlxAyEalOHNTV74A==
MtSdkHOD87o5TBUtqAocsA==
xgpgpwcafqemjbeh
J87TKQvIqWIRKYkO38/jyg==
jyhwiknabnerdkbv
NK1ah+kUGLYM7rk+OmZ+8DFNVNV2VoeligUM9C7nj9M=
VS_VERSION_INFO
VarFileInfo
Translation
StringFileInfo
000004b0
FileDescription
FileVersion
0.0.0.0
InternalName
bonder.exe
LegalCopyright
OriginalFilename
bonder.exe
ProductVersion
0.0.0.0
Assembly Version
0.0.0.0
Antivirus Signature
Bkav Clean
Lionic Trojan.Win32.Dapato.4!c
tehtris Clean
MicroWorld-eScan IL:Trojan.MSILZilla.20149
ClamAV Clean
CMC Clean
CAT-QuickHeal Trojan.Generic.TRFH465
McAfee Artemis!D60031FFC48A
Malwarebytes Trojan.Crypt.MSIL
Zillya Trojan.GenKryptik.Win32.179098
Sangfor Suspicious.Win32.Save.a
K7AntiVirus Trojan ( 00598b321 )
BitDefender IL:Trojan.MSILZilla.20149
K7GW Trojan ( 00598b321 )
Cybereason malicious.fc48a8
BitDefenderTheta Gen:NN.ZemsilF.36196.!m0@aqDlBNd
VirIT Clean
Cyren W32/Azorult.D.gen!Eldorado
Symantec ML.Attribute.HighConfidence
Elastic malicious (high confidence)
ESET-NOD32 a variant of MSIL/GenKryptik.FZQG
APEX Malicious
Paloalto Clean
Cynet Malicious (score: 100)
Kaspersky HEUR:Trojan-Dropper.MSIL.Dapato.gen
Alibaba TrojanDropper:MSIL/Prynt.5047d219
NANO-Antivirus Trojan.Win32.GenKryptik.jvsusa
ViRobot Trojan.Win.Z.Genkryptik.1016832
Rising Malware.Obfus/MSIL@AI.100 (RDM.MSIL2:xIjN0pJGMltoAvlk8ZJjpA)
Sophos Mal/Generic-S
Baidu Clean
F-Secure Trojan.TR/Dropper.Gen
DrWeb Trojan.MulDrop20.23637
VIPRE IL:Trojan.MSILZilla.20149
TrendMicro TROJ_GEN.R002C0DDA23
McAfee-GW-Edition BehavesLike.Win32.Generic.dc
Trapmine malicious.high.ml.score
FireEye Generic.mg.d60031ffc48a89ab
Emsisoft IL:Trojan.MSILZilla.20149 (B)
Ikarus Trojan.MSIL.CoinMiner
GData IL:Trojan.MSILZilla.20149
Jiangmin Clean
Webroot W32.Trojan.MSILZilla
Avira TR/Dropper.Gen
MAX malware (ai score=89)
Antiy-AVL Trojan/MSIL.GenKryptik
Gridinsoft Ransom.Win32.AzorUlt.sa
Xcitium Clean
Arcabit IL:Trojan.MSILZilla.D4EB5
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Trojan-Dropper.MSIL.Dapato.gen
Microsoft Trojan:MSIL/AsyncRAT.Z!MTB
Google Detected
AhnLab-V3 Trojan/Win.Generic.C5144844
Acronis suspicious
VBA32 Clean
ALYac IL:Trojan.MSILZilla.20149
TACHYON Clean
DeepInstinct MALICIOUS
Cylance unsafe
Panda Trj/CI.A
Zoner Clean
TrendMicro-HouseCall TROJ_GEN.R002C0DDA23
Tencent Msil.Trojan-Dropper.Dapato.Twhl
Yandex Trojan.GenKryptik!s77Q8IYY5Is
SentinelOne Static AI - Malicious PE
MaxSecure Trojan.Malware.73693254.susgen
Fortinet MSIL/GenKryptik.FVDD!tr
AVG Win32:RATX-gen [Trj]
Avast Win32:RATX-gen [Trj]
CrowdStrike win/malicious_confidence_100% (W)
No IRMA results available.