Static | ZeroBOX

PE Compile Time

2066-05-06 03:54:54

PDB Path

BHBhHuH.pdb

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00002000 0x000bcc20 0x000bce00 7.96700945913
.rsrc 0x000c0000 0x00000598 0x00000600 4.06682483438

Resources

Name Offset Size Language Sub-language File type
RT_VERSION 0x000c00a0 0x0000030c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_MANIFEST 0x000c03ac 0x000001ea LANG_NEUTRAL SUBLANG_NEUTRAL XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminators

!This program cannot be run in DOS mode.
`.rsrc
(b:@\
Z?_d
_b`*
UUUU_
v4.0.30319
#Strings
BHBhHuH
CompilationRelaxationsAttribute
System.Runtime.CompilerServices
mscorlib
System
Boolean
RuntimeCompatibilityAttribute
DebuggableAttribute
System.Diagnostics
DebuggingModes
AssemblyTitleAttribute
System.Reflection
String
AssemblyDescriptionAttribute
AssemblyConfigurationAttribute
AssemblyCompanyAttribute
AssemblyProductAttribute
AssemblyCopyrightAttribute
AssemblyTrademarkAttribute
ComVisibleAttribute
System.Runtime.InteropServices
GuidAttribute
AssemblyFileVersionAttribute
TargetFrameworkAttribute
System.Runtime.Versioning
SuppressIldasmAttribute
75e2e525-617b-4149-b6f7-d74b415c540b
BHBhHuH.exe
<Module>
program
Object
<Module>{7F3E61E2-CB73-4877-A4E5-DF91306D9FFB}
Idt5pgryuYoFVQiX6j
oRZtxCaSAYh6EEGEIZ
SFU4mbT3GMret7THonf
MulticastDelegate
WP6RZJql8gZrNhVA9v
dg3ypDAonQcOidMs0w
vXgxlLQcVHhY7dY50X
RJDcsuMfOxrTCYImPe
Attribute
iGR41459RDH4FvPdNk`1
qcBC7nbplYPB6DW0yw
QZEOeHRUkDiNqCWT0p
OFfwWh6ZIHjfnqBOWx
BIpvxRBRb2dOGl802m
ValueType
VtNVUKGulysZw81C3E
MacgPI7JyVeAhNaPvd
GL8NaIwq2KOvLQhMFX
yy2w1VXOQgx806ubre
N7UlhA3IRW2ugh7tWg
RI754BJF754hNSApRW
YLCGmBEaUwBbEqLM01
AwgKvrHJUS3TxryUsj
hHEYokUTtehNq5ji0d
rE4lpnT863QnijKQK5
<PrivateImplementationDetails>{62A4E09D-F2A1-4978-9688-22796C22AE32}
__StaticArrayInitTypeSize=256
__StaticArrayInitTypeSize=40
__StaticArrayInitTypeSize=30
__StaticArrayInitTypeSize=32
__StaticArrayInitTypeSize=16
__StaticArrayInitTypeSize=64
__StaticArrayInitTypeSize=18
mjgHsuuQlgIrcgDmCg
Assembly
Replace
GetType
InvokeMember
BindingFlags
Binder
Convert
FromBase64String
o5Xa6YSAIlmf7uFmrJ
CGMq5RWnpIAdcKv3Rv
kVZ96mv2FgBwdekMI9
FFA4aYxSI6q78yLExe
s7SjYVn3t3pZk5g4Pe
HqEbER09ZHkXgdr7Kc
Kh2o8BSHbd
FgWB3j1cBhDDJL9MHO
fBNc6NmmIqQ1R
typemdt
FieldInfo
MethodInfo
GetFields
.cctor
get_Assembly
iNWIf2QpurvD6XMUt7
Module
ResolveType
AZak8DBhxQL2VMNKLI
MemberInfo
get_MetadataToken
GMhD36hGpGqEJW2pxp
ResolveMethod
MethodBase
dgD7B6bvHp3vfThMay
Delegate
CreateDelegate
T06nspdDH1qRC3iGuj
SetValue
KKqDqEEle7bnmacEWX
EUf3IRcFoqdrtVdspF
RwGrLBXUcSiOKWEM95
NBlclSPXIYjGnNQ8iU
RuntimeTypeHandle
GetTypeFromHandle
dDFcmeGep55HFmGgYh
get_ManifestModule
object
IntPtr
method
Invoke
BeginInvoke
IAsyncResult
AsyncCallback
callback
EndInvoke
result
V9fkgxQPQA
LrEkS2eXQL
onZkkIlVOi
HkLkNdDPtB
OObkplyC7t
wcyk8nIyBt
WaKkhokJrA
Qy5kfBXtEh
rNZkehfwNu
CgSk1JZr60
yBRkv0eFeZ
tTVkFDSO7A
tuYkt9D06I
s6pkoGoeab
MrkkWebIMK
VM5kd0GoFG
Tqek0lIh21
Dictionary`2
System.Collections.Generic
wpoklx4RIX
K7PkOHxqAd
zl0ksqgIH1
x4Dk2IHVmX
lmdkVksVkh
URnkCOceLK
abxkLGOVrU
aatkD4ZSGk
etmkyDG2SG
firstrundone
emjkxI4Yxp
eXJkjmTXDX
VE2k4S5okQ
zIOkYypt1M
fMAkKtNIoA
BV0kmUIPgx
O1BkIDx0L0
xo4kuDarJK
XtMknffM5M
PRZkZqsNsa
UInt32
RuntimeHelpers
InitializeArray
RuntimeFieldHandle
SortedList
System.Collections
Hashtable
RSACryptoServiceProvider
System.Security.Cryptography
set_UseMachineKeyStore
co6c6Nm3PZwY0
ab9oDe4UH3
UInt64
BitConverter
GetBytes
TAOohhiP7R
UInt16
zDKosecjaB
ubAof6RgCm
YpJoWsPi7X
BEVodWAYPB
gX8onkMSd7
PEXoCqmS4w
SymmetricAlgorithm
AesCryptoServiceProvider
System.Core
RijndaelManaged
Activator
CreateInstance
ObjectHandle
System.Runtime.Remoting
Unwrap
XS8oLZGMXn
CryptoConfig
get_AllowOnlyFipsAlgorithms
XEDoeIU7mj
MD5CryptoServiceProvider
HashAlgorithm
ComputeHash
vBuojdip3i
Stream
System.IO
NSmolmd79S
TransformBlock
SDQoufkqT0
BinaryReader
get_BaseStream
set_Position
ReadUInt32
TAJo1U8fio
ParameterInfo
DynamicMethod
System.Reflection.Emit
ILGenerator
Monitor
System.Threading
GetManifestResourceStream
get_Length
ReadBytes
MemoryStream
get_Item
get_Module
GetGenericArguments
get_IsStatic
get_FieldType
GetParameters
get_DeclaringType
get_IsValueType
MakeByRefType
get_ParameterType
get_ReturnType
GetILGenerator
OpCode
OpCodes
Ldarg_0
Ldarg_1
Ldarg_2
Ldarg_3
Ldarg_S
Tailcall
Callvirt
Exception
vC5oV1W6FK
EObomOjAWk
w65ov7siki
L3hoFlcqP6
CryptoStream
ICryptoTransform
CryptoStreamMode
hg2oY5yaSM
Encoding
System.Text
get_Unicode
GetString
FPvotekByE
svloy6EVGc
iaKoOg5GGg
Marshal
GetMethod
PvroikJllY
get_Location
Exists
GetName
AssemblyName
get_CodeBase
ToString
GetProperty
PropertyInfo
GetValue
H1sorrpiaP
LoadLibrary
kernel32
oGjoaYPPLS
GetProcAddress
w3ZoqRBn5p
Concat
GetDelegateForFunctionPointer
YDsoA9ylfU
mTfoQqVbOE
YeeoMqaS3J
tdOo5aPwrv
Q2sob65b9D
umLocehuEC
op_Equality
VZpoRI2LOR
FileStream
FileMode
FileAccess
FileShare
IDisposable
Dispose
Njco6C1nc4
rLIoBbVVpm
ToArray
oN9oGXMAK7
set_Key
set_IV
CreateDecryptor
JBbo7fndGL
tM1owh06yH
HpuoXD9KwB
vLyo3J8m2E
fnqoJe2xAG
IHuoEWDKCc
J6JoHkltLH
FtroUJNIfo
KIxoTLeGZr
S0yo9WrR0W
hYwaixw6CSFwKPUhfU
ML4FE8kkSWftPBwMed
syHym5alpkN6ja4JFL
J8pKmNSuob0MrAkwy8
b0GSETNCBDcIX25Ffx
sElW7NWl1if0NG4wCe
jbOc0V9UMGZTaXUblc
Reverse
Vgb4dqVBNewUIiinWT
EL7M2fnVtqeeCmHEO3
GetPublicKeyToken
hIaB08MRKuO7MmJAVk
WV2yi62F4QDCBoOrWN
CipherMode
set_Mode
Qh9XlSAmy91k0QbZvr
x3a6gc8O88xHihCS7r
rGwMhnQlwLWLlmsoqW
gjqdFx7Dwp0eLNW95G
FlushFinalBlock
VijfvdxBQtaULofvRV
GyAgsLEqXGd8S13gFu
kVIMJyOcBTP62SsqbA
ToInt32
KpIwwYfC2kYEy5oAll
hTpMYJdpTHNxUK7Zou
Cot0v4sd6xZk9s1SX2
oTyZOUKCDWLGl0BZdt
M7A7AJ53ntVegv1EUZ
B073FlZBLnHclrWPBT
EuvbVGFMFZWQCb4Xsq
N9ESU4aMAjCk7qMCGB
G9skPDgcXb
CreateEncryptor
HbvFFGNugrCDasidkA
nmxp3p3msFhLJ1ikca
AcYyglTJ0OdnMXEsNT
rsoSsuVERqRfVJ2bq1
RWNostqPa5YnaGI0Kn
k2NwRlDYR2iGw5mPbF
lA9iNnKv8BgxkvvKYN
UkBr4qRkc6OI9UlGCb
ToBase64String
classthis
nativeEntry
nativeSizeOfCode
JDNkifbo3S
jsbkrdexts
KPVkbuTpLj
KDikMXewCI
B2XkaLi4dH
hx5kqNgSj4
TVtkAMaqpL
VDqkQKyKML
ALWDOJ65mQ4h9x4gl0
CQ1h4lYwnfUHaBoLkE
Y3Bc9V2OyerKLwhZtm
JMWVhuMCZnUkVPxphh
ReadInt32
sxNMVIlvYEPuyPQs07
hModule
lpName
lpType
lpAddress
dwSize
flAllocationType
flProtect
hProcess
lpBaseAddress
buffer
lpNumberOfBytesWritten
flNewProtect
lpflOldProtect
dwDesiredAccess
bInheritHandle
dwProcessId
value__
Hh5kRkRi0A
Cpdc6NmzNjCK3
$$method0x6000317-1
$$method0x6000332-1
$$method0x6000332-2
$$method0x6000340-1
$$method0x6000340-2
$$method0x6000353-1
$$method0x6000395-1
$$method0x60005b3-1
STAThreadAttribute
UnmanagedFunctionPointerAttribute
CallingConvention
CharSet
FlagsAttribute
CompilerGeneratedAttribute
D0odf5SkjvSP4lt3C0.kwxi7rGBf6uOpCCd0l
BHBhHuH.g.resources
aR3nbf8dQp2feLmk31.lSfgApatkdxsVcGcrktoFd.resources
WrapNonExceptionThrows
BHBhHuH
Copyright
2023
$1798f77a-13c6-4a2d-a3ad-84fb9d101f64
1.0.0.0
.NETFramework,Version=v4.5.1
FrameworkDisplayName
.NET Framework 4.5.1
dg3ypDAonQcOidMs0w.WP6RZJql8gZrNhVA9v+RJDcsuMfOxrTCYImPe+iGR41459RDH4FvPdNk`1[[System.Object, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]][]
SUsSystem.Runtime.InteropServices.CharSet, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
CharSet
i7m{55i
sM!u[2
w0 TeK
9Z [<H
h<{\V_
.0[S@G
/r]nM%^
HmD,`3
Qfcw"U
]QH&JX
t%<N9i>
%oCY-$
mwC.<h
V"x3Dr
sr|b^&
:}:O`A>|
g=C(C3
MD|\Fkh
Hl8*}zK
<2<pQv
<FD2v5
))[B/w
H!$4r-
] ]4w>
)2a\r:b
?yykjBn$
{mZlk?W3
W0uO0(l
wglsBz
N7sZ<u
z!7!jP
l-SbH
#J}lRLad
8y*&uw
37T@>yv
A=-.%.
`ciy7|
8cP'38
GvT=lS
;#VG?\
ZOL dr4
gLwtx"
1ZH{2d
7>BHT-6Nw
CMpPho
nw)b#6
s|GuU5
}!k:WT
\p-J6R
Y@Ti3$
[wwzv3
ky(3Ly
v%qA=d
vUot]cE
GUe5hT
uV|Em)/
fxYb0VG
0/S'}p
=PQ6^q
e4%;XO
:0J3/q`
}S72v_#
8KTc1/.
xsY+TL
t1E55j
V^|[O]2
I.dGzSCG
U]PV_k
jY7gq$
O$,1Wbd
L1]Y1l
W9O<_b
g{xvIr
@5'>[~
$EN#2t#
Yp$2S P
Ds'S[
t=AR\D
*07lc|
umCK:'q
F@^`r4
&Gn`k8
uwdqO+v
-FNjh^
u:DB0e
K@m:8N
[ptmyC
V`<6vtR*
x!$*Re
q6kE}-
RqcKa
zCNV$z
}|q$H<
otl@Rh;
[DLCn".
R*[o?p
znO{S
8mav#B2V
]U3E)jRc
Aj;U.E
"Xu?u+W
dBw,jA
5DR3p1Y
P&=bub
v.+Qi=ode
N={.@:$
WnZsVu
v]`^Il
C5<ZSa
k#'gGT
e*pyJS
%98-e'
/0^Vdr
rv^Sp
]'@>E`
t"3I`Av
Y[l;</8
a:d]*/
?G6zG5e
%fS>'5R
%20:Ts
)=jq{"wO
Ki(iL#
^0ea!'
ot8Tf1
81]?5M
HBcjl#C4
to$X$F
*_7C<Q#e
r1V}30H
=-.8E5/1
o\'"D5
UbJ_v,k
eYmeMZ
LlR-r}]
)~v3f@
&'IqG
EX&%iWo
#i=R$M
O52JDA
`+Vb3O
QXD;[#
qoYokU
:%?B5
&$ 3SLf
+rVpz8
Gn\*bRx
=TMr(4
[koAK
rK/s,Cm
'+U;{5
I;ntyH_
fLyJwv;
,3'z@:
Eg<%q,
Y0i/ B
R)-8^f
;l98T
"+9pqH1/
z~q3W'
sot9hT<+,
[Z=W`W
WPauJE
21>jcx\(^
E5?THg ^[
\`l,mD
MccVPz2
KZ(Wn=Lz
sz{(d+
7n=6\a
LAIl-H
i=RYFU8
v}P?r}
~^;iDy1
^`y)r?5
9;oZ/N
JKdwGf
?6449R
\K{dA^GE# +aa8$
js^&pK
M^D{%4P
>}&=i!
g9^-{8
Tg<WZe
pn?jF0M
_h7K;o
?S=DO@
+(%2vA
=S9*gR
bff?5/
QLY|=Ge
Sn 5|z
Gr'WEOop&
lY%=g4
"%d^,z
=<Sp<c+
k6zPwMU
PwcB0L^
K3ifVZY
,p@Q&iY
s5BJX|
+d.w$N
l3_8>>
WBM=J=
K1mG@>
;0/6aUS
z`eu6v
%V?@S
UI-jG_
?n5>h
<c`\g0
8q9p^H
g=!8Zw
g5'>*&.
4^7P=;
XA,*;D
g+"CWp
i9%_!&
\R-E7h
t7 %UUnj,
L9,{z[
bUc9A0^?
{rn~|X0
W?H50M
70[xK(
LHA1jQHg'
Hq\^=C"a
+0q+s
q<cX>1^2
)6BS_p
oMEw<QH
AL6J|_-
VuqANh$
)'VWsw
[d`[vP
/y !Un
G^b%8e3
CB@)iE
3Wk+tP
83EdZD
>>{5;2X
-1d(^~
'0GaQm,
2)g!7n
oD6Tbd
GO?|vV@j)
lpE^5sfgU
c0|@.0x
so(B[
mT`o&2k\IM
Zp7c5Ej,
wlwEI,DB!
`|`~U[
b0%jOh{
%( 7@:Hi
2C-`}do>2
Y,L*9W
Hu.6<`
Ey9%@8
w8/{IX E=
$m/7Pv
65.6yn
1*||85N
N]oj_Y:p
i^0]C!
Z?4-9*
)E'E2:Jb
X2mz$%
45p8K8
DYs)x3
4,2pSi
J5i2Ui
^q(G:2
m1[]A~
R2_B?>
V_wEo1
_|fd6d.Z
u2ou9\
(ZZe#i
qqQLB9
TH$wOW Y?;
+z|dYn
f)&XvnPwx
8)W:|WB
E*3Rkg
oAF5^Q
7LevaE
@5n.o0
9hH{7V
(!VCiN
y%[6Vx
?*,YTp
N=RA;;
FcnBm$mM
{GEw`50
[Wq*Pv
vb?dUJ
Y0NQ20
vc_)QH
VZv8&*
?9KT:&
"LVYpdW=
B9&;=S
(eKsa!-g
js!^p]
)jHlK
23pH.y
9s_YHo
J#Ad}N
u76C67
n|C`En4
P^oz}y
x)xa'{
[kzOafA
)E5g Y
<L'|I3
|B3p+8
p-Sg`g
iLs(y#
kgSxc7
d/0foe{
U%G9fO
v:pbL?H
+Es-c)
2eg?:4
m/E&u#
{v<2$6
&u$5N#
`Md/9H.7
s@Jofe/
l&Bt T
s={FvZ=
Y4xA$`
lWvhP;
+iQRmOd
Y,YhdHs
L3/K6A
"Q68qto
Ab23z=
uEw47O
Eq`io"
-2Pe8d
L'?.dp
lS%vy+
dL@!^]
S\B"UGc
)8NLAG
7Q)uzQ
A@4oEA
;;HbEB
B#_Oara}
jNG|;}
;FC)+Ze
FN {JC
sW$fH*
cDR=vy
nQx_4L
[qjVR`
6kKDDl
wg cX
jmfHHKy
##Po^U3"a
.8<&RW
[Z+_r#&
&,J+9T
-u{Uu'/+
=e,QqE[
*K;W"'l
c.+{bn
kAp#('|e
Oi{iw+LE
dsCXr
SZ}Ci]
OA]Jh:
R3-[I[\
Qtu,i
3@sT,K
1%{"bj
&F^os##^g
8N&[vnmVV
/5jF ?a
:J ! e;38Y
I!E!Mh
Jp-ra0M
4D[R;H\
l5pC,7
T5A\Fc
kq"+j!(
DaF,;4
BNE5I
%I,gu>C
yWB3ly
|rQlA7
fa(&G?or
=[.uby
X0XP#o
SisCGI
WxT0~R
SKT1P
VizTv8_
GXjg!X
#w8_|HN:J3B_'
/!;JtHf
JrbZNk9G
78m.fy4w
|K:ur$
rS'!3rr
=On.T ;
3EN}[t9
p_5*cBB
CKz)JE
I+R9xnP
w|5Z|@ n
QUV4uGI5
3jtR)v
5*Df@o
UcQPNc
QS0Nb!O5
1r<0Va
Z-R8dX
])/(m]!
]u8a_UEnA
B=PE}J
7U%o<cb.
~h' qh0
[=}nhY
;95"gX{
5$m%s{lV
,_}}k
Qy~@<&g
7*E"rq
9/FjQH
#<O$z#
YJ0AO?
xbzi*k
D$7(0o
NT7[G\
'3]@.P0
,~,vdM
9]rS]i
v\KgLU
C_p1i3
;$DGw<ZV
cYrCsaFW
.Ho#"S@
Zrfs0\
gkLhK!qPsh
*;Qv6?
|7$B{o
wiX8oe
8CO}5o=!{
JF3j[L
%Q/H`g
)mo{%<t
-RQxQ=<
37P4'p
1}l+\*B
{z_U*cj
.biH3|v,(
""L.[v
nM*lpq`
50#JDe
{jVVD_h
\O5kzZ
S ]Q7!
?*ZvkK
iHPV^0V
bKX%U]m-
8:vaC(
tO$Y95n
J~){Se
~zl.8<
}bF@5
_\%;b2
a[*JkF
+)ui.9
PP@IBe
1D$c[7|2,M
3Ut%%Mu
{4kZP`
[B8N,N?
H{?)H~
jeH8*r
i&Y`uj
lmDpIJ
E0R77D
TTec'Q?
:l`nqr
*_Ps-/U
A_x\ZL
0~M?IP
G'+Pc(T
hH,N]*
]#MDZ?
() uEK
V![(vPb3
U"C#]&
=A0L'Q
X`%%W=
Ia#Kq@
Ws#JK'3/
y+~q0i2r
=fEX3p
ftz<-"
B,i!y\/
MF(7/p#
dyp@:#
P:T"s
o B( I
jyLF3k
%:o`<B
CM$O/T
e%|'~!
a$7o@n43
#SdjRzH
>Y;hMC
aP)bY-
/!ridP
.dP2RB
wgn;ES!_ O
Cs@woI
V!bN(]
`)^qKS
s8VO)Cu
hQfYr
a5*bX|
iSBu\?
-\BUB[
/QjlJ-
:YJ;-J*T
/m,r-(
v,[:V@
S_n'&U
\&c;:f
+{!cb3
S7<AbD
vWTEQ
COB6Mn
&)%$7\
s]g,!V
=Pa+Y$
.g%(h_
Y:djG3-
-Uhn)s8
hb9i|vt
4L.XVtO
U1A?n>
G^IyK3j
#$4Eyv
Q]P5Df!3kMI
@7|e<DK
q-P,$
Y)\L!x
)|rYvb
"2+T~.
_K}l;A5
9ZMJqr
-KXy&&o
i=&|Jf
` BU<z
Pg/K-!
\FVn7i
>"#63k
KX_F:\F>
e<*N/k
)1~[c8EO
d\c_iRg
Goat^LAt
`}b%F`
$PcoiF
1r[N~4
=5gF%zLs
Lk)h$m
z+,>2
f}`b7n
Tzw!09
`0JYJo
IH5JUf
cY,0$>
qK|j]Q=m
$rC/hF
dbwmF
1/"GhA
%<QvgGL
%k7OZ=b
|7Ne^{
{g8w=o
*Z8|9N
'riz3z
*S>F:k
V[gD-=
{%7_6uQ
NJ\S-Jx
CGv*'=
|3FQ<|
3cN*%
-zr}po
xq{%k1
y^7,Hi
,'k?/%_\<?
v\BB:"
armN3!
SM-$,l
vY[FKD
$g4hnj
H@pn9
^`qfo0
yFQ4J8
X?]B^UOg{K
hG0XXi
iIi-I~O3L{
6yfTW0
<*3d,W
.Oes#t
r;i+9+.
|:glW&9
cwN8$;]
Z0.w? `
R(*8D9S
79->'V
<N7KFv
9Qa{CK
@[Xobmj.
:HH,-"=
Au,DX"*
-o/c%i
&:u$6?
oL^&^bBR
nu4n_&f@
(ZDO9L(
HEx>s6T
q.&O9g
C^w5(K
LtD:vjcM
(l3?"r
lTC[Z
#@X1{W
djm^^
P/2r/C
*N6V'D
_]C9=`
ZBDZnho
#@vb~:tX
gf'F<P
E<eqE2
pNwtV!Y
Z/2_<
v;E`pG
5GkH3G
sO5(eD
nL<[!_
P;wpN1
k<G@.Z
?#v\\c
h'LP`
T}04.
L aw+KY
S@xcMb
2`U"p[e
0C&x3-
EF}"<d
5_>$W2
Wg9PR!
rp-Gk6
}DPK9+
e[!eA
K%#YTN0=
KUHc1*
Os{^$YM^S
Vs`ufu
zk:N9P
|rC([C
AVB`+
Cu:`^Da
v*:e;+%
3k(CN)TD
PH]bKk
^En|tz#)F
#jzR0s
]}+uyz
#mUL{A=
uRE2l;
R@XQOIXu
XLMi]q
;ol#l1
r:g1~e7(
C8H=*$
g9h*&9
l2cSl,s>.2
(/Pe7Y
sH^dMs0
vHq*gH^[
:m[Tqf
y{>~k2%
Ht&o1Ym4
"&{Z@y
ar\`|f.9
"i.5fU
$4M}l5R
Rm{TUp*
DvV9~/
3(yjC"
g#+P]47\:("
}y# ?uX1
..+A>f
eP<x:M
(27a>pT
EJ=(z|]
}u&r:3
+/)|<{
w"E%`&/
!KgfT<c
%o@)Vy
66:P-5c
2?<+>*|
jS9I$"z
P e,mbF
[)evEh
.r(|[R|
CBvRxU
!yFE5K
[-)JCP
y0osOv
,(fS2T/O%
TV#Lo5
Bkll]]
(NCo=4
T*uJ~-
$gu'rv
7[GEU7
>w|T]J
jtqU8X
?I{)+6F
O<S9pk=
Vw1L-V
wK5iMv
;@l%%"[n
%7CPo3
SBtAp}
#_lebG
%}VY`[
_Y8[a*1
Ofw%xN
^KTLg`
USd/t$
&ZBIdt
{Jhn,\
?]p*g.
+~6ul\
MX^62&
1knCr3
s+u5CW
Ga9cVnr
xLE\lN
ak]N,2$
?a$uSK
e.vX\c
:lh3G\
xi5_M3
B$wyvY,
Jr&=j@
t9!2lq
.3FLDq
,-YC:[
8hlI!z
`lGnv^y
mRWXc(n6;
&BIfYNj\
g-IITBy
/YXfc;:
pj:'p-1
o[A3lLy
gDeJw04O
ON&Wv.;
6hv!V"A
U>rsGR\
04O|'}
z)Dmb'
$W]nTPE
EZ'1/[
L2c,TF)
_HAZy}
`.E+_y
Y_0MM#.LJ
:=XYX"
?nNV/!
.)|zc(
e*5NC#
Slw\h^
{:u$Gv
C>vufM/3h)
*G;@iSA8
R,~Woe3w
e+5yY_
tXlUOw"o
t-/H:D
vK]T=UgL
_8p8~r/e
U&iSY/[;
^-ub'e
gBOO$x
O(`SHT
B(0|>pj
rhM{1Hf=
rccv/e
u#nFkA1.
IJG2N%]
p3#|#u
Ppyf6&
/cWL.N
?dcdYp
3H<wpN
&Mnx]`R
&0&.P/
r6_9S<"w
AE5I8(Y
i2^;-:=
-uh6:m
C#e1mS
1{C.-`v
Bg]}5?
& \{[o
Byf`GsAT
awuj.p8
=aPb^pE
)'Ao&\
nr<Xe*PrNS]
K;Nkhz
!q,,wM>M+2Y
XCH4r%
H\5<}A
1RY~|,%\
bU">-s
o:']rK
`9TSG2F
Y?WhKV
ezTVEH
Y.~mqi
>O=0r
v=<Y4fiX&}
[CK6+Q
0VXzAs
9l yJ'
bN]5mO
uFVMXX
:p=3k!W
tL=n@o
dNP'"L
y2fHut
tH+Aq\
ujFqSw
7L[Od`
WS.SDh$
my\92U
RhDf^|C
GMD`0
uZV=&4
JyD/J9
06n)GR`z%
d{im:'nr6
ho01Mx
s/0hOk
1`y.LMQ`I
T#a7bA
UJ%Zm^
aZ.P^ZlO
!dB4l}
j[Z)=,
?nFn*>
D%c=^}
4^x^PT9D
O04,CG}
!(&#@T
OpLKGzX
K@U2{HgQ
QP$3M@
ud9f,<
ik9[~<
%j@Gp=VT
X+.Ah4f2
}u%"b
QV$fNh
?AVQn[5?!
vstr3I
m`GG"{
c-iwH
l?$^-OiW
Lxb[.)S
hpg *=M
t9}6x2
P635HX`
{Sr/"S
4S"n7R
)f}6hN
qQ=wVd
p;6<s+c;
Bq@:<OL
'~FW{{
DL]g<JjqM;
wtTp#0:?
NwP9?@r
{*#mk?
UJ"B_sgZ
]i|~@q
OSD=JC
vg@.w7a
jn_ Z{
yS?$Z{k
_n#*ng
%+QsY-
uxZcj;
kd:c.B
`uYh~
w0j'IY-
(w)FBk
?h-v2T
?u:%N_
kn~E"mZ
UlbNEo=
7JLJXRU`
$,nrVdC
LL&NC.]
Ia?GuU1i
M(jb0
#b|:Xf
IXPMWjl[f
$jzQpe
w^$'+0
n5=>?3
{b$uBZ/
-T60Df/
;1azE7/
$4R8weK} F
X/UM2W
Ch'yon"tc-H
2?C#R[.NQ
~j8~[`
.=S`s&g
@fbkSR%
jWkWga
J{QC.c
IzQZVG
#buN5V
<Vwe2I
NN(A)J
*)( Q)
&+$PLF
\zY{o@
1C{GED
Ga,?}I
dSM>*5
z-$BU=
QKBhDXo
H@v4)P*,
75_KVY
Q}qf2D;
LkS^Q?
a_o/'6
R6i:<~_@
s&oBeH
'C>Kfw
#h[7;"
VZU&Tk
R$|Gt(
=m#p?;-
v_=Ml=%z
w5!Q"M
w($jwq
!k-GsH9\
Isug+
h8u?Xp
DP6rQOn
RPX)gky)
ox",N-
Fr[\:G
=$BS{;
)0*2sKF
e%HYkQ_
+=KM.83
Lm'",$?
gy,),5
k9$NRl
A4#nb
O_7g+^!
TM4)id`
9Kk TK
p<>H.y__l
$1F.#Y>
]D#6t(
-uGBfW
b*|l_q
kS?P \
7'sSd
I)BEF~
\?]Hb
'b~%jT
rG:+&~
"~fZbnh$
!Luo{f
'ld2/+5
_8#@<?Q
/*hy1\)k=
l7#i}3H
B@w"~i
]$gg@1
-l-XV`9
!a&PXW
77_-aw|S
kkv4]R
TK`'%d
UvJT+q
$b@0<I
;n]%@f
wM[<5<
VibCb
]EL;"Y
~7IK~5
4& [.G
hnxOk>
!-|t"Y$n
^$D50E
lDg;C
daE#;,
hKmpFO
spv{Ef:
}tgmtt
tbtUDH
AysWRf
^)K8YvDWv
HE{JR(
oCB.k%>
nh1v.0
m(]7&1
?k2C+Xd
L]:"Cp
A;LA?p_R
`r6b+m
0R'SxS
8eSR4S
\ yY<#k
Rl_c*I
N)0H.W
SrOKI0
'GK@)c
O f\^(d0
ShS`Qpn
ljD~X2
U?71L6A
yyd@WD
QjO@.:
)"|9AR)
WS.Rpf
?w5,&&#
D+_S:=k
a}3m[1
E;g"ET
,tg7_*
kvc&WeU
JRc)fZ
Ho&FSi
"L y#\s
~ ]qh#
A"bNMv
E!T8Y%
d!6JC|
iPR,)/
Y?aD\PT
J<C"V$!o
Wp:gas
_nt'R[
"K>OJF
} *dv^
_M82<l"9
6e+JNA
I.["!%
}BjWU[x{;
qK|hjJt
z&b6~,n
Quonw
ayI0r.0
94bf}WH
N"28q{
'yvz fk.
ZvlPXPk
?dC="a
&qvs7p6
A>~4*]+[
GEQVz)
L:5;6=k
|E0Lc*
gq6(ydU
I1(/;HG
4{@RF3
@@x$?7
EEBM=sb
>>O3d"~m
0C0e(L
w|fHpf
7x+rSn
>?Q=x}k
Jqierd
[LY8d~/
y/x8K9
I;El&!WH
C1FtFb(
aDHhm`
Aoo\`
_A9f"S
@4)GYA[
N3(l>{u
)s*e/9<
!2\L)z
l!ZgoP/x%
dNrVf?
kz*5Pt%
/T>Sa:
ASv`v0
xo$R.A
y\&7;b
o_V$Bm
TMydMJlwA
B(KY\Uz
p)|m%84$L^
^X@O9
o-$L]
b=]iLg
L:\K %
L}# KD
oH$p3Z"
P{Tl7-
f?v&_X7
[y7.9
$jRRSx
7N'*5
'x`g8b
"YI;6W]
eJLLRg
QCW3L*O
74:51x
-GRZ]N-D
9 Ss~:
0X43Y
1cD6y^
0A S% )Vr
])<Wwz&
VC i{n
X/|p}eZ
Nk[K2Y
|+)x0v
<al.HM?7
NnO}wKb
wV=4tt(X~,
8f`XYT
[3re}^
Gnt2d%
^^szk7BT
3i`Kl+
*wp$B\O
(KI;v/
zP{+LaK
7,n6 &
xj)3}}
>8/4/f
]Jw_u`4
4p\SV9<~
m9GxT7u@6
dCsv:p
zokZ0
H`<<lu
{=bEw%
wHU>X5I
0:i,|~
{Ulgp
,7\4HK
%wtDd('
\ Lt'Rb
9F+sb^
;5M878
7-qiTt
^P(8::
kkbD[&
\FM38f
+gnGBMs
U9,O3r,&
#ztm1I
ge>~Oms
c'rz#1
EqN#8d]f
&43!!^@
<%l])4U
E*3Rkg
oAF5^Qm
?O&7LevaE
@5n.o0V
vy)Zw2>
H<nc5d
)a<5m9
U}LEQQ
E^h.%"V
!E$j~"
jDRQ~}YSb
z1E6A@
yp&E.^
'gf0+3
ZUs03T
&Z6 *P
X5#<DM
hto\K<
"=F#'HS
A.Wt,o
>^GEw`80
LTto`
T(CHO*
wp_P\
1$-$!P2
%}:1BB
)jHlK
hU 8$\
g/NQ""
3+bCcO
yJE7@F_pjuz
o}w6v
)E5g Y
b@ |gt
2}{Ls
'6wSbW
v:jbN?W
BIYzI
V^^<2$6
hd/9H47T}
hvV$V}
ttL(Fs
+qQDm}d,
O(t7ui.e
?>gFXg%
Ci-?Gd
<gJ]Ki
;.i|p"
NkIbf/
)8NLAG
{2JA#J
;;HbEB
B#_Oara}
FN {JC
k8|'rn4\
mg cX$
jmfHHMyhy
c]<As[}
^CK>iX
6g<LEY
=]MUVz
bamXk\
i}y:[myU>
H[k6g7
[]M;Y
'-HXNw
-u{Uu'/+
10T2-KA
|L8}`mC
1K W8'
BkBf~
]{xiodQs
LKil+WE
e@hc6]
jyXt,.
3W*h!_A.[6
jZ]Jh:
reO&l^1sq#
6 e;38
]XLUuq
p0?d]<
dt9"!,W
tQp?8Ar'
sM}IAZ
I,gu%C
1Z;e7*bG
hWG}x/
zzWI>q
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
fSystem.Drawing.Icon, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3ajSystem.CodeDom.MemberAttributes, System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089mSystem.Globalization.CultureInfo, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089fSystem.Drawing.Size, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Icon
IconData
IconSize
System.Drawing.Size
System.Drawing.Size
height
ISystem, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
System.CodeDom.MemberAttributes
value__
System.Globalization.CultureInfo
m_isReadOnly
compareInfo
textInfo
numInfo
dateTimeInfo
calendar
m_dataItem
cultureID
m_name
m_useUserOverride
System.Globalization.CompareInfo
System.Globalization.TextInfo%System.Globalization.NumberFormatInfo'System.Globalization.DateTimeFormatInfo
System.Globalization.Calendar
System.Globalization.CompareInfo
m_name
win32LCID
culture
m_SortVersion
System.Globalization.SortVersion
System.Globalization.TextInfo
m_listSeparator
m_isReadOnly
m_cultureName
customCultureName
m_nDataItem
m_useUserOverride
m_win32LangID
%System.Globalization.NumberFormatInfo"
numberGroupSizes
currencyGroupSizes
percentGroupSizes
positiveSign
negativeSign
numberDecimalSeparator
numberGroupSeparator
currencyGroupSeparator
currencyDecimalSeparator
currencySymbol
ansiCurrencySymbol
nanSymbol
positiveInfinitySymbol
negativeInfinitySymbol
percentDecimalSeparator
percentGroupSeparator
percentSymbol
perMilleSymbol
nativeDigits
m_dataItem
numberDecimalDigits
currencyDecimalDigits
currencyPositivePattern
currencyNegativePattern
numberNegativePattern
percentPositivePattern
percentNegativePattern
percentDecimalDigits
digitSubstitution
isReadOnly
m_useUserOverride
m_isInvariant
validForParseAsNumber
validForParseAsCurrency
Infinity
-Infinity
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Size
height
Rfhn M
BHBhHuH.pdb
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
<assemblyIdentity version="1.0.0.0" name="MyApplication.app"/>
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v2">
<security>
<requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3">
<requestedExecutionLevel level="asInvoker" uiAccess="false"/>
</requestedPrivileges>
</security>
</trustInfo>
</assembly>
)R71RDARWQRWYRWaRWiRWqRWyRW
.[\.S\.Kb.c
.;\.CJ.+\.3\
System.Core, Version=3.5.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
System.Security.Cryptography.AesCryptoServiceProvider
INo7yigFouD9PAZ2ED.MjFohsup8mOesVU5ue
{11111-22222-10009-11112}
D0odf5SkjvSP4lt3C0.kwxi7rGBf6uOpCCd0l
{11111-22222-50001-00000}
GetDelegateForFunctionPointer
file:///
Location
ResourceA
Virtual
Write
Process
Memory
Protect
Process
Close
Handle
kernel
32.dll
{11111-22222-20001-00001}
{11111-22222-20001-00002}
{11111-22222-30001-00001}
{11111-22222-30001-00002}
{11111-22222-40001-00001}
{11111-22222-40001-00002}
{11111-22222-50001-00001}
{11111-22222-50001-00002}
$this.SnapToGrid
$this.TrayLargeIcon
$this.Icon
$this.Locked
$this.DrawGrid
progressBar1.Modifiers
$this.Localizable
$this.Language
$this.GridSize
$this.TrayHeight
progressBar1.Locked
VS_VERSION_INFO
VarFileInfo
Translation
StringFileInfo
000004b0
Comments
CompanyName
FileDescription
BHBhHuH
FileVersion
1.0.0.0
InternalName
BHBhHuH.exe
LegalCopyright
Copyright
2023
LegalTrademarks
OriginalFilename
BHBhHuH.exe
ProductName
BHBhHuH
ProductVersion
1.0.0.0
Assembly Version
1.0.0.0
Antivirus Signature
Bkav Clean
Lionic Trojan.Win32.Stealer.12!c
Elastic malicious (high confidence)
MicroWorld-eScan Gen:Variant.Cerbu.180384
ClamAV Clean
FireEye Gen:Variant.Cerbu.180384
CAT-QuickHeal Clean
McAfee Artemis!6C432A8B26BC
Malwarebytes Trojan.Crypt.MSIL
VIPRE Gen:Variant.Cerbu.180384
Sangfor Trojan.Win32.Save.a
K7AntiVirus Trojan ( 0059d5381 )
BitDefender Trojan.GenericKD.67409669
K7GW Trojan ( 0059d5381 )
Cybereason Clean
Baidu Clean
VirIT Trojan.Win64.MSIL_Heur.A
Cyren W64/ABRisk.GLUH-0054
Symantec Trojan Horse
tehtris Clean
ESET-NOD32 a variant of MSIL/Kryptik.AHQJ
APEX Malicious
Paloalto Clean
Cynet Malicious (score: 100)
Kaspersky HEUR:Trojan-PSW.MSIL.Stealer.gen
Alibaba TrojanPSW:MSIL/Stealer.cd81af1c
NANO-Antivirus Clean
ViRobot Clean
Rising Malware.Obfus/MSIL@AI.100 (RDM.MSIL2:HHMQ5tB5iAuonqEJlz9g+A)
TACHYON Clean
Sophos Mal/Generic-S
F-Secure Trojan.TR/AD.BDSNanoCoreClient.tixkl
DrWeb Trojan.PackedNET.1268
Zillya Clean
TrendMicro Clean
McAfee-GW-Edition BehavesLike.Win64.Generic.bc
Trapmine Clean
CMC Clean
Emsisoft Trojan.GenericKD.67409669 (B)
Ikarus Trojan-Spy.DarkCloud
GData Gen:Variant.Cerbu.180384
Jiangmin Clean
Webroot W32.Trojan.Casdet
Avira TR/AD.BDSNanoCoreClient.tixkl
Antiy-AVL Trojan/MSIL.Kryptik
Gridinsoft Trojan.Win64.NanoCore.bot
Xcitium Clean
Arcabit Trojan.Cerbu.D2C0A0
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Trojan-PSW.MSIL.Stealer.gen
Microsoft Trojan:Win32/Casdet!rfn
Google Detected
AhnLab-V3 Trojan/Win.Generic.C5437155
Acronis suspicious
BitDefenderTheta Clean
ALYac Gen:Variant.Cerbu.180384
MAX malware (ai score=88)
DeepInstinct MALICIOUS
VBA32 TrojanPSW.MSIL.Stealer
Cylance unsafe
Panda Trj/Chgt.AD
Zoner Clean
TrendMicro-HouseCall TROJ_GEN.R014H0CF423
Tencent Malware.Win32.Gencirc.13c9c78f
Yandex Clean
SentinelOne Static AI - Suspicious PE
MaxSecure Clean
Fortinet MSIL/Kryptik.AHQB!tr
AVG Win64:PWSX-gen [Trj]
Avast Win64:PWSX-gen [Trj]
CrowdStrike win/malicious_confidence_100% (W)
No IRMA results available.