Static | ZeroBOX

PE Compile Time

2060-10-22 13:11:48

PDB Path

BHBhHuH.pdb

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00002000 0x0006e4c0 0x0006e600 7.92658788503
.rsrc 0x00072000 0x00000598 0x00000600 4.07465248542

Resources

Name Offset Size Language Sub-language File type
RT_VERSION 0x000720a0 0x0000030c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_MANIFEST 0x000723ac 0x000001ea LANG_NEUTRAL SUBLANG_NEUTRAL XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminators

!This program cannot be run in DOS mode.
`.rsrc
(n.m/
Z?_d
_b`*
UUUU_
(Vf-Z~|
v4.0.30319
#Strings
BHBhHuH
CompilationRelaxationsAttribute
System.Runtime.CompilerServices
mscorlib
System
Boolean
RuntimeCompatibilityAttribute
DebuggableAttribute
System.Diagnostics
DebuggingModes
AssemblyTitleAttribute
System.Reflection
String
AssemblyDescriptionAttribute
AssemblyConfigurationAttribute
AssemblyCompanyAttribute
AssemblyProductAttribute
AssemblyCopyrightAttribute
AssemblyTrademarkAttribute
ComVisibleAttribute
System.Runtime.InteropServices
GuidAttribute
AssemblyFileVersionAttribute
TargetFrameworkAttribute
System.Runtime.Versioning
SuppressIldasmAttribute
832c9938-4e81-4ea1-a03a-30bdff7954f8
BHBhHuH.exe
<Module>
program
Object
<Module>{18F39EEC-7CF6-4118-B2BF-B48F61F83592}
Idt5pgryuYoFVQiX6j
oRZtxCaSAYh6EEGEIZ
SFU4mbT3GMret7THonf
MulticastDelegate
WP6RZJql8gZrNhVA9v
dg3ypDAonQcOidMs0w
vXgxlLQcVHhY7dY50X
RJDcsuMfOxrTCYImPe
Attribute
iGR41459RDH4FvPdNk`1
qcBC7nbplYPB6DW0yw
QZEOeHRUkDiNqCWT0p
OFfwWh6ZIHjfnqBOWx
BIpvxRBRb2dOGl802m
ValueType
VtNVUKGulysZw81C3E
MacgPI7JyVeAhNaPvd
GL8NaIwq2KOvLQhMFX
yy2w1VXOQgx806ubre
N7UlhA3IRW2ugh7tWg
RI754BJF754hNSApRW
YLCGmBEaUwBbEqLM01
AwgKvrHJUS3TxryUsj
hHEYokUTtehNq5ji0d
rE4lpnT863QnijKQK5
<PrivateImplementationDetails>{BD24B102-4057-451C-B4BC-62F225B3A00B}
__StaticArrayInitTypeSize=256
__StaticArrayInitTypeSize=40
__StaticArrayInitTypeSize=30
__StaticArrayInitTypeSize=32
__StaticArrayInitTypeSize=16
__StaticArrayInitTypeSize=64
__StaticArrayInitTypeSize=18
fcwyNu1tKmhnt3t8yu
Assembly
GetType
InvokeMember
BindingFlags
Binder
Replace
Convert
FromBase64String
VIZK1pAmBwVr2sKI4P
QVUQYhxOuyTUre1JOp
gfUV21cKJVVfZc8p2l
lpNYAUIfj9GJ70rYed
gfkC23VVo1uxu7Dmy6
uk4fAbtxy5O4l5Nmy4
Kh2o8BSHbd
qUnWyX4t9OsOG4Ydh1
lHHeCPNNc08oV
typemdt
FieldInfo
MethodInfo
GetFields
Module
ResolveMethod
MethodBase
.cctor
get_Assembly
get_ManifestModule
vAKdpPny2YD9ZOgEie
ResolveType
JkQ6hNMdqqQA0B4CV8
MemberInfo
get_MetadataToken
psSEUGg3f2LVM3Mc35
Delegate
CreateDelegate
a6DAFtOxgCAYK1MxHZ
SetValue
ml7edopWGA3OHA20b3
waI5oekyk7cUIhdjxH
ka96x0GflCQKmCqE0Z
lcNCVKCCweEMA4tBUj
RuntimeTypeHandle
GetTypeFromHandle
object
IntPtr
method
Invoke
BeginInvoke
IAsyncResult
AsyncCallback
callback
EndInvoke
result
V9fkgxQPQA
s6pkoGoeab
Tqek0lIh21
Dictionary`2
System.Collections.Generic
wcyk8nIyBt
aatkD4ZSGk
Qy5kfBXtEh
MrkkWebIMK
eXJkjmTXDX
xo4kuDarJK
fMAkKtNIoA
VE2k4S5okQ
firstrundone
zIOkYypt1M
tuYkt9D06I
etmkyDG2SG
wpoklx4RIX
K7PkOHxqAd
LrEkS2eXQL
onZkkIlVOi
WaKkhokJrA
URnkCOceLK
yBRkv0eFeZ
PRZkZqsNsa
lmdkVksVkh
zl0ksqgIH1
BV0kmUIPgx
CgSk1JZr60
O1BkIDx0L0
HkLkNdDPtB
OObkplyC7t
emjkxI4Yxp
tTVkFDSO7A
x4Dk2IHVmX
XtMknffM5M
VM5kd0GoFG
abxkLGOVrU
rNZkehfwNu
UInt32
RuntimeHelpers
InitializeArray
RuntimeFieldHandle
SortedList
System.Collections
Hashtable
RSACryptoServiceProvider
System.Security.Cryptography
set_UseMachineKeyStore
VIAeCPNZhLWqv
ab9oDe4UH3
UInt64
BitConverter
GetBytes
TAOohhiP7R
UInt16
zDKosecjaB
ubAof6RgCm
YpJoWsPi7X
BEVodWAYPB
gX8onkMSd7
PEXoCqmS4w
SymmetricAlgorithm
AesCryptoServiceProvider
System.Core
RijndaelManaged
Activator
CreateInstance
ObjectHandle
System.Runtime.Remoting
Unwrap
XS8oLZGMXn
CryptoConfig
get_AllowOnlyFipsAlgorithms
XEDoeIU7mj
MD5CryptoServiceProvider
HashAlgorithm
ComputeHash
vBuojdip3i
Stream
System.IO
NSmolmd79S
TransformBlock
SDQoufkqT0
BinaryReader
get_BaseStream
set_Position
ReadUInt32
TAJo1U8fio
ParameterInfo
DynamicMethod
System.Reflection.Emit
ILGenerator
Monitor
System.Threading
GetManifestResourceStream
get_Length
ReadBytes
MemoryStream
get_Item
get_Module
GetGenericArguments
get_IsStatic
get_FieldType
GetParameters
get_DeclaringType
get_IsValueType
MakeByRefType
get_ParameterType
get_ReturnType
GetILGenerator
OpCode
OpCodes
Ldarg_0
Ldarg_1
Ldarg_2
Ldarg_3
Ldarg_S
Tailcall
Callvirt
Exception
vC5oV1W6FK
EObomOjAWk
w65ov7siki
L3hoFlcqP6
CryptoStream
ICryptoTransform
CryptoStreamMode
hg2oY5yaSM
Encoding
System.Text
get_Unicode
GetString
FPvotekByE
svloy6EVGc
iaKoOg5GGg
Marshal
GetMethod
PvroikJllY
get_Location
Exists
GetName
AssemblyName
get_CodeBase
ToString
GetProperty
PropertyInfo
GetValue
H1sorrpiaP
LoadLibrary
kernel32
oGjoaYPPLS
GetProcAddress
w3ZoqRBn5p
Concat
GetDelegateForFunctionPointer
YDsoA9ylfU
mTfoQqVbOE
YeeoMqaS3J
tdOo5aPwrv
Q2sob65b9D
umLocehuEC
op_Equality
VZpoRI2LOR
FileStream
FileMode
FileAccess
FileShare
IDisposable
Dispose
Njco6C1nc4
rLIoBbVVpm
ToArray
oN9oGXMAK7
set_Key
set_IV
CreateDecryptor
JBbo7fndGL
tM1owh06yH
HpuoXD9KwB
vLyo3J8m2E
fnqoJe2xAG
IHuoEWDKCc
J6JoHkltLH
FtroUJNIfo
KIxoTLeGZr
S0yo9WrR0W
frb8FHvXcMmOWfkXph
TUapRQf0s1rk5eUCeh
GMHK2s7XfGXt9NFwCk
GIdMZ4HN9mBxWn8Zp0
kJk1L6MMHyNXuAN0QL
ptgWT2yAMR29ybOgnU
XxHSRHayOcL3Ftl1yZ
Reverse
B9CanqNaCEu9khr97P
eAYsIGnRUjWLUGbLBN
GetPublicKeyToken
vwuvjGe4FRuY2D0qf6
p9ta8NDLJ4XDmTat2j
CipherMode
set_Mode
S9BNhNBvu7Bxjd9Vkt
ty3C8duoNXYC5ytIy7
vob2mjqLUAxiyJKgFX
sWqMIEGaytseRbsE2X
FlushFinalBlock
yIQVQC16gu5hQJfX3R
A0KwTtSEKXyHnenJgP
rktqZ75Nl4XHa5dlgg
ToInt32
nvgX7W2uGIwdCZm8xN
T2BRe00BNPuY2d3RxC
RT21XGdEX3J7PyRtjv
K9xJ0JOU5r2I7qO6mG
Nybp4pZGPiVjncYI86
mrsOdmNLFcp2hxf1an
BwQFuVyx8pPNPdLbFK
wBeJaFPebGKLJx84m4
G9skPDgcXb
uCL1d1LR9iSq9HZFbO
xgBRGBvHULFHgYRekT
xtTeChFaPWBMo17lC0
zPuYDWh4Ply4Lv1y4m
dmHi9xUQABjDlJDisP
LgmIfNY2XsdYFIbJRj
UFMkqJ0YJRWBfSU561
CreateEncryptor
qo99iPB89mPjrUnNpm
NcjNMtZ73GsETe8Go6
tO8GOdavCEtFYAwvCv
VUwZOgSlaLKFHTHTs5
ToBase64String
classthis
nativeEntry
nativeSizeOfCode
JDNkifbo3S
jsbkrdexts
KPVkbuTpLj
KDikMXewCI
B2XkaLi4dH
hx5kqNgSj4
TVtkAMaqpL
VDqkQKyKML
YgmtAOw3uGFn7InYdg
WiTdEMmsr3bXo3hvnC
ReadInt32
HKsPal55KBPt6oJjXW
hModule
lpName
lpType
lpAddress
dwSize
flAllocationType
flProtect
hProcess
lpBaseAddress
buffer
lpNumberOfBytesWritten
flNewProtect
lpflOldProtect
dwDesiredAccess
bInheritHandle
dwProcessId
value__
Hh5kRkRi0A
e6oeCPNza85li
$$method0x6000317-1
$$method0x6000332-1
$$method0x6000332-2
$$method0x6000340-1
$$method0x6000340-2
$$method0x6000353-1
$$method0x6000395-1
$$method0x60005b3-1
STAThreadAttribute
UnmanagedFunctionPointerAttribute
CallingConvention
CharSet
FlagsAttribute
CompilerGeneratedAttribute
WhvlirAyjc8oc37Qeb.9J1GxlVIx6qQgJW8tn
BHBhHuH.g.resources
aR3nbf8dQp2feLmk31.lSfgApatkdxsVcGcrktoFd.resources
WrapNonExceptionThrows
BHBhHuH
Copyright
2023
$1798f77a-13c6-4a2d-a3ad-84fb9d101f64
1.0.0.0
.NETFramework,Version=v4.5.1
FrameworkDisplayName
.NET Framework 4.5.1
dg3ypDAonQcOidMs0w.WP6RZJql8gZrNhVA9v+RJDcsuMfOxrTCYImPe+iGR41459RDH4FvPdNk`1[[System.Object, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]][]
SUsSystem.Runtime.InteropServices.CharSet, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
CharSet
$E`Ivh
Vs^r;y&
;b$"Sy
Z_H7A&pR
c"`b@*/
uWE`R
Be):wg2
|`=W$[d
f`t%wdH
7Q=ZQ?
O++bYp
tw$Ji^
dJu:>;
TI3TmUe
nd34yH
v|9c.}
3Sf\5\
Ng??NrRY
!W4,>u
Ez\L"9
Y4m"(iO
qA`KtX
^[_]L\
Q9m{x-z
-{)0eE
yMM+ho
&\YVNr
J"TH~&D
g;C'DZ
g]B1SI
Xpv&8\
E&e{u{
h:0_UnHt
mG]teT
k% 57?
sS%#
IL6vGl
7TeHH\
5Ix+#@)
?Ij`w/g
xUij;fS
XB`Ilz
G+dHjq
x]o6(
6)Z%5,
jbg`7O
d*!<I+
ts9<%/
ak'afp
IU`QB~
.6_\31
&6G7{ytQg
9A%mP:C
g9RAgt
P+d]r5
jD!STe
h#P`}5<
\20LYM
NQA~Gg
IVxO`Wh
QN`3^A
yXQM&>
Ru9YqPlji
x5)-{T~
+?V5h2{'
}iaonA
TPp^>,
BY8DfM
4y%\"y
tBPjfF=
DYZPp"
-q5YJ\{V
IE_4],#
yP#?y{
u91ZS#
z&2k7\
af4oAY
OMDwr0
Y*Zy!'
_. M*E[R
e|O+TQ
,)h:lG
y NSU,
7\8ab+(
~slT8l
9[!4ROs
MF'AYOc
]I{&A*Q
hRbC:@
QXlUBO
.DbV>
lCU9a}M$
5QsHm
D-&D?h
mWPr6+:'.
}!iNM{w
TcqblM
_Yo08P
@U#y1{
@~w=?
#}j6*,L|
hu,jY0e
}q<*t3
[@S_=r
@ s*ba
5Q@4>2
`DcCS3#B
%sa<;e
bFYE<o
kD!%A
3)(k0F
Dnf)T*
DF$!.b-|
Q"ke:oC
a|.5:W,m
(&r),V
$Pu{x}
Tx#j~M
|@]sR{
h\qs^r
h$^5pA
E]l3nL8
.Kl|H;
Z\/;9.
"BF8+w
8b#;=vj
JOqOXq{z
GU5OK^D
gUn>pf
OUuaJn^$<
@W*N^)
Ld@,AH5
_\-;cT
5l0DP:
e1t(}f6(
Zv2*nx
!|2r]PG
&C/<H[
{5&s,[
cJU?5l H
EEUO5v
B<t)/;
3TTtd'
v~}xhL
A`SaK{
hO3gE+
sy_OW|
N@6$G&-
6{O=Y
e)TZ_^
Zm^,#c
(UdB?e8
DN:q.u
C?s*m^
p[h:#%b
\W`6$=
<_\@?H
:p`b)'
#>%9&k59
rER <]O{
& `qoB8
Eo*&j~
K_a/N n
mEAz)6Zy
Bunf|)
FAlt2Cv
9FLm(a
zd&1Tb
8)jbDJ
E3A"|VK
igdhx/
oU,Z6x&
|i /Rz0
.5WB|r
>LJ04nr2
DuAO7A
db}n(2:]
X~Bi<S
ceF&.L
)D/WWv
LJLzsp
u#%AN\wg
Wd>W^B
hd%a=N1
yCh[|,5
Ld+pXZ
aE0IcD]
FT#`b5
iyO:@
& BecQ(
uX%n0:
:@Pd2
KOD\M[
&C|BQCU
KbgG2F-[
nc4I)2
$ x_$i
F3#Wnjz
YXL@#b8
6-\bRa5S
fyt\?w
R2+e}~
)'9\Kh
2ckk=/
QG(aG5
a+e\EDU
INnQLI
d?#mdj1D
<x![Fy
3dU",\Fc
d_Gw|(
*"!tF
h':evL
m,0FULX
=Bxw;
W?[j\
NUj8l"
wEjl@l
aD5tvN
o:e1>C,`-
CF,3A[b+0
T~mEI@
|^Q''4u
7_*a!I
xCn!2B
(=2YNo
*(i#*iA
bs.=k(
a$2M "
^i]Wgy
_:[Q58*
hyC]@u>
\k)5,x
aIQ}r(Z
t/[8QMI.d!
=+1[E ~
r6__T{A~.
$bi8Q!
"|_+z`
'h?VC7
u\wo"y
;[-0\]m
0/-lq^
p;G7+"
?5Zlw0
Y0Q&fw~
2F&h5:
X3~=}3
;zc}m
JH~DKh
"<]_'?
*Q0i?V
s"LEB+9
vn`R];_
}~D'OJRS
oG0 1s
Oq=QEV
p2*jN,
_#G\6[
h|kM`F3
#kO@;E
6\7N+5
a,Tv*t
g-mzX}
BG-;X (
|y9^{~X
>_e.$D#_
3,#Tiv
7BP7-z
yG9tL;"s@Y
m#0[*
UDm_I<
K*tK'BYJ
WAO@Fq
QA3'5F
.%Js+1
P=VG_>
JC<.FG
sn9N2Y
t>uf.dc
(KBTKz
,<m.$
sT5^1*Y.|X
}%b(Z[
98/]zS
V<XJF8
*oFFF
5vqwH2
2@P?TK
&n@*]p
DFhV6BI
reJ\cx
o11yCZ18T
uwJ$`w
0CR"9M3
>yvf);$a_
xapk-Q
)7`h9C
OQ|1G
|8Zjf
p^/jZL
>3C1^6
@acc4
Jprl9G
mJGb}C
b@g"3H
&&/cHT
Cwm>q|Y
-5i42{>
Ppup&Q
xpFJ-;EI
N8 LN.
3GTt3A4
C@ijf{
l[toqb
Ax@++u
)G0(\}
[FC w^v
13[bc#
EN#a?b}
O"nulJ"
j\4mom
\?Y$_i
o^)j4!Q
;l&:/,
[kwS\Kc
ZJnAw_
CL]V]_x!
2'&X{;>
8)=f#O
QRc^R\
j\21;o
H'o4>'
%[} >]%
+{@19I >I
O3NJ40M:
*^4gS~
N)MUypR
>\dcrl
s(c3@9
qq d)v
%1J{cM
^wp9 5%
I13e%F
0"0)5'
ii2yL
c,SdF2\
"P)ca4"NRw
b;KEU?
._+S/s3/s!:'
x(5zn+
D7BI_
:M+B%p
o/AGtfE
ai?A%_
[4e_0dU
#rS6ru
y<,,NJJ6R
Ra%L#|
Sc8<b`
)IMOi9
sW4"w#
BBY+qf
|jM"yw
j33w\HSaC
"APo(1
yv?[Vy
Z MRcA
)xdfAl
SlL}T[>
1t`Ce#
R5Y}f%
qR}f7>f(l-^
1JSy |
%WgSxXoT
/0A|nTZ_>#
@%!7 p
&cOwq\=
OM%R-zu
w<vM;*
fNX])
1Cz/+i
%ZR{B8Zv
JEK4]I
a]'mJZ
4"}a D
Mf.ymF5
-?.xgd:
-m"'eo
P$Z~c
-:xdz)
s"oPKk
HOMD$H,
dK__{v
/_5k&C
BB 04i+
?5GR2u
D-7{L/
4X1T(x
xD" B3
#Mu}X1S
Jjqp8q
'Sg'k(
w(LE<Z
xs.:0^kvV]3
a[}1|J1h
#;m2Z&
D|`),@WP
ZgFKLa:e
5hiuXP
"e`V.S
)e'?q`
G=8!nS
gz|K.e
P!$>ol=
Wk2/t7
8q4*'r
,` FAw
;2h8v"
>)}Pe::
)cRe{r
,wzmaQ
/vi+s]
Gp&L^H*cC=z
D#T-aL
a*Rc/!
|m]S(D
,R?l3>=u
T/p}?9
fj{.'m
A0U@#y
e95|67Z
1^$N_z
=~,>#4
k@u)X/F
2*d-;]
_\DqXL
D-ln6S
RriLqS
c'[E^k
_aT;uRk
\i85WNZ
3\Pm-^
N3u$N*
>s6(`y
yEr\S,
0OZG..
0-, Bb
22Z}v7~
NaZS$s
4c7j`M
gpMP?Z)
4"TD;2
ycALt6
5Cyqutx4Sa' 8
WGG`V#
e]bMx}
x mS2E
a;JwcY)o,.
VT,$~T
FbHAi\
AVB NS
z|^V@V
!qIm `
W!.J0,Z_
!'6p.n
14CplGH
`'0cY>
I;An`Y1
S@qf8j
G-($i@
6Uf)0%
_Y_97|
I>=b@"
2X&tOM
QJ'7"+
~&N|bXw
,>v`)w,*
lrm{7
dD)+=ji
w0H f>|
BpE[o(Lx
Brg8tH
y8w60}
:M8$fy
6ne!qcA
i;A#aE
E:8$.B\
w})I9r
AK*nRj+
:cIU\.;0U
6izYH
jEF]o.
]B"kqMt
Fkp35|
RO}V~K
n_\P*5
^qsc3D
Dav9p#
G9o:w7
%Q%]fz
*opz@us
}K~%N>
CpLtub
TYPy:Xr
#Kn1(_
SBA(w
QGOD;H
4n9|qv
x#_(Ju
}mXB7)
$OAV:M
y9."AxD5Z
P@s]p#
]gk8QQ
&TQk%A
Y$Z">f"-
?|zlUVauV
J`EGVN9
`i}pJ&
$gS@Lc
sgv(j_I
.0CZ7b
0Lzb!t
=w}YQ5
twq)Cj
#ba:K&
L)v1Vx
$_.:Z`
j8<fZTC
nXL6'Z
DG_{e1j
=i7<'&
2]SZ4Y
OAw',w,
\?VY*Q
R6L\@D
8]p-1I
qs q('
UaV&`B
;qA%OP
[U`"v^
a%lk2a
$+IA'$
LU77oBUE~
c>$mQK!I
BLY-p6C
]Q9F%{
7{b$X6
B-.D}w'
]V$:g{
8Q"(fj
5^qd/7
E'>E78#
B[wapa
apG;ZYrrn
WjB{5YX
Bk:<8z
Suj&co
v]=|pv
7NNYL>
ej$narVO'unK
spMP;y
4ks6D]
vF~Ix'
gbp{JS%=
oL+}v^
1'`_7ECJ
V`Zv~V
#rq2Tfy
:^:G9Q1x9
F|cRVuz
Ixoi#j
A)Ao^_J
aB8^\\Y
kNBF;HpW
5BU=x'k
Y{ b=$
EJMyJA
>fj9c2
:965QlH&
r#J!\x
]9L&b^p
u-Z~3+ p
%Tp0,i
>;:_:j
'qEJE-m
'{T^]*
iR)87(
w-c>w*81Eb~IH
![e)Zqj
B\BT"}
vyn#l^
JcV]r=
]s5Qdc
M`YD0v
%r+!LP
MtaEs-
Z:_Iz?y
|S`^7Q
M\[{g7
L;x:\X
K)~MN)x
!_(uOPH
O~@*\C
Ms4Dt*
G/><j)p
X) geM
fSDNfDu
g$g218:
LG#g5Ny"S|CAf)
~W,<(]
#Ny>`l
/hlD:|
sY=?~T
}4&+aJ
QJz2/%
`=vLoT
drD]gj
um[p"L
1BYI/4>[
/D\)tf!
drro!PX
"16@&W<
ZgB$RIu|
*b,ci#
DRnbsD
=CKn `
jYr-9s'
xLdkqn
V|gYms`
RoFZlj
02%"F6
t~pBAfO
|_8(~~2
V4X@>
2btm=a
haefo0
=.W}c0
m-&|ZPu
Qs'O9i
WBjeYf
E,"SOx
(]P)u'
4q!&x!]$
1rkJ($
#*[Tg
OGU|iG
>KuBA;
/@"pk\
sz\bo"
MFn)o:
D2f^yD
vpHKa$
)mmyINL
)!_o\yq
fUx;2n
gOM8Gd`
;0^Jz0
cUK h"
H&}^:7
4<fRP/
[kjo]f
T<zIwbM
}X.8^f
,4V2^x+
_zsFrjV
):BA=F
9B9]Gi
v*HT~^
$YbYA gs
Wb^+o{]
[>)R^:>
=?dK%O
]h0<E&
c7eyR<
{*S`Ry
6f/&Oxe
p3{hVOG
&#ANuX
^0tHkN
I$Y[ut
Ae}0Ua
qkx"&v
1e'xT3
- n6,<
BY*xf;
>'g*e+4
xz7Mu<K\.
Z~Te6<-fO
WvVf/s
:<01B,)
wps<4a
2JaX'}a
Msx]@kD
P,v;,oV
rNbqn"I+
msi0WS
lGBX7R
h1wa@S
|h>C q
,*V@I9r
])d0a!
b#> h
0:#8/N
a:APy=
ivr8IE
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
fSystem.Drawing.Icon, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3ajSystem.CodeDom.MemberAttributes, System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089mSystem.Globalization.CultureInfo, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089fSystem.Drawing.Size, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Icon
IconData
IconSize
System.Drawing.Size
System.Drawing.Size
height
ISystem, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
System.CodeDom.MemberAttributes
value__
System.Globalization.CultureInfo
m_isReadOnly
compareInfo
textInfo
numInfo
dateTimeInfo
calendar
m_dataItem
cultureID
m_name
m_useUserOverride
System.Globalization.CompareInfo
System.Globalization.TextInfo%System.Globalization.NumberFormatInfo'System.Globalization.DateTimeFormatInfo
System.Globalization.Calendar
System.Globalization.CompareInfo
m_name
win32LCID
culture
m_SortVersion
System.Globalization.SortVersion
System.Globalization.TextInfo
m_listSeparator
m_isReadOnly
m_cultureName
customCultureName
m_nDataItem
m_useUserOverride
m_win32LangID
%System.Globalization.NumberFormatInfo"
numberGroupSizes
currencyGroupSizes
percentGroupSizes
positiveSign
negativeSign
numberDecimalSeparator
numberGroupSeparator
currencyGroupSeparator
currencyDecimalSeparator
currencySymbol
ansiCurrencySymbol
nanSymbol
positiveInfinitySymbol
negativeInfinitySymbol
percentDecimalSeparator
percentGroupSeparator
percentSymbol
perMilleSymbol
nativeDigits
m_dataItem
numberDecimalDigits
currencyDecimalDigits
currencyPositivePattern
currencyNegativePattern
numberNegativePattern
percentPositivePattern
percentNegativePattern
percentDecimalDigits
digitSubstitution
isReadOnly
m_useUserOverride
m_isInvariant
validForParseAsNumber
validForParseAsCurrency
Infinity
-Infinity
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Size
height
ARfhn M
RSDS"f
BHBhHuH.pdb
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
<assemblyIdentity version="1.0.0.0" name="MyApplication.app"/>
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v2">
<security>
<requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3">
<requestedExecutionLevel level="asInvoker" uiAccess="false"/>
</requestedPrivileges>
</security>
</trustInfo>
</assembly>
)R71RDARWQRWYRWaRWiRWqRWyRW
.[\.S\.Kb.c
.;\.CJ.+\.3\
System.Core, Version=3.5.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
System.Security.Cryptography.AesCryptoServiceProvider
ZVg2Q9uAsRcvAH3DqH.PLwNQepyDYL2YDQeD2
{11111-22222-10009-11112}
WhvlirAyjc8oc37Qeb.9J1GxlVIx6qQgJW8tn
{11111-22222-50001-00000}
GetDelegateForFunctionPointer
file:///
Location
ResourceA
Virtual
Write
Process
Memory
Protect
Process
Close
Handle
kernel
32.dll
{11111-22222-20001-00001}
{11111-22222-20001-00002}
{11111-22222-30001-00001}
{11111-22222-30001-00002}
{11111-22222-40001-00001}
{11111-22222-40001-00002}
{11111-22222-50001-00001}
{11111-22222-50001-00002}
$this.SnapToGrid
$this.TrayLargeIcon
$this.Icon
$this.Locked
$this.DrawGrid
progressBar1.Modifiers
$this.Localizable
$this.Language
$this.GridSize
$this.TrayHeight
progressBar1.Locked
VS_VERSION_INFO
VarFileInfo
Translation
StringFileInfo
000004b0
Comments
CompanyName
FileDescription
BHBhHuH
FileVersion
1.0.0.0
InternalName
BHBhHuH.exe
LegalCopyright
Copyright
2023
LegalTrademarks
OriginalFilename
BHBhHuH.exe
ProductName
BHBhHuH
ProductVersion
1.0.0.0
Assembly Version
1.0.0.0
Antivirus Signature
Bkav Clean
Lionic Trojan.Win32.Stealer.12!c
Elastic malicious (high confidence)
DrWeb Trojan.PackedNET.1268
MicroWorld-eScan Trojan.GenericKD.67407737
FireEye Trojan.GenericKD.67407737
CAT-QuickHeal Clean
ALYac Gen:Variant.Cerbu.180384
Cylance unsafe
VIPRE Gen:Variant.Cerbu.180384
Sangfor Suspicious.Win32.Save.a
CrowdStrike win/malicious_confidence_100% (W)
BitDefender Trojan.GenericKD.67407737
K7GW Trojan ( 0059d5381 )
K7AntiVirus Trojan ( 0059d5381 )
Arcabit Trojan.Generic.D4048F79
BitDefenderTheta Clean
VirIT Trojan.Win64.MSIL_Heur.A
Cyren W64/ABRisk.BZGM-5779
Symantec ML.Attribute.HighConfidence
tehtris Clean
ESET-NOD32 a variant of MSIL/Kryptik.AHQJ
APEX Malicious
Paloalto Clean
ClamAV Clean
Kaspersky HEUR:Trojan-PSW.MSIL.Stealer.gen
Alibaba TrojanPSW:MSIL/Stealer.b8783df0
NANO-Antivirus Clean
SUPERAntiSpyware Clean
Rising Malware.Obfus/MSIL@AI.100 (RDM.MSIL2:WQ92GX5RmEm8evrYvrcsWQ)
Sophos Mal/Generic-S
F-Secure Trojan.TR/AD.SnakeStealer.bojrb
Baidu Clean
Zillya Clean
TrendMicro Clean
McAfee-GW-Edition BehavesLike.Win64.Generic.gc
Trapmine Clean
CMC Clean
Emsisoft Trojan.GenericKD.67407737 (B)
Ikarus Trojan-Spy.DarkCloud
Jiangmin Clean
Webroot W32.Trojan.MSIL.Stealer
Google Detected
Avira TR/AD.SnakeStealer.bojrb
MAX malware (ai score=84)
Antiy-AVL Clean
Gridinsoft Spy.Win64.Gen.bot
Xcitium Clean
Microsoft Trojan:Win32/Casdet!rfn
ViRobot Clean
ZoneAlarm HEUR:Trojan-PSW.MSIL.Stealer.gen
GData Trojan.GenericKD.67407737
Cynet Malicious (score: 100)
AhnLab-V3 Trojan/Win.Generic.C5437160
Acronis suspicious
McAfee Artemis!706C4E397DE8
TACHYON Clean
DeepInstinct MALICIOUS
VBA32 TrojanSpy.Snake
Malwarebytes Trojan.Crypt.MSIL
Panda Trj/Chgt.AD
Zoner Clean
TrendMicro-HouseCall TROJ_GEN.R002H0CF423
Tencent Malware.Win32.Gencirc.13c9c749
Yandex Clean
SentinelOne Static AI - Suspicious PE
MaxSecure Trojan.Malware.74396735.susgen
Fortinet MSIL/Kryptik.AHQB!tr
AVG Win64:PWSX-gen [Trj]
Cybereason Clean
Avast Win64:PWSX-gen [Trj]
No IRMA results available.