Static | ZeroBOX

PE Compile Time

2081-03-10 12:48:39

PDB Path

BHBhHuH.pdb

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00002000 0x000a6e60 0x000a7000 7.96143705907
.rsrc 0x000aa000 0x00000598 0x00000600 4.07273120574

Resources

Name Offset Size Language Sub-language File type
RT_VERSION 0x000aa0a0 0x0000030c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_MANIFEST 0x000aa3ac 0x000001ea LANG_NEUTRAL SUBLANG_NEUTRAL XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminators

!This program cannot be run in DOS mode.
`.rsrc
Z?_d
_b`*
UUUU_
v4.0.30319
#Strings
BHBhHuH
CompilationRelaxationsAttribute
System.Runtime.CompilerServices
mscorlib
System
Boolean
RuntimeCompatibilityAttribute
DebuggableAttribute
System.Diagnostics
DebuggingModes
AssemblyTitleAttribute
System.Reflection
String
AssemblyDescriptionAttribute
AssemblyConfigurationAttribute
AssemblyCompanyAttribute
AssemblyProductAttribute
AssemblyCopyrightAttribute
AssemblyTrademarkAttribute
ComVisibleAttribute
System.Runtime.InteropServices
GuidAttribute
AssemblyFileVersionAttribute
TargetFrameworkAttribute
System.Runtime.Versioning
SuppressIldasmAttribute
5c261ff3-9b0d-4f67-83e9-ee733519b1d9
BHBhHuH.exe
<Module>
program
Object
<Module>{20926DF7-40FA-49E8-B20C-423630521771}
Idt5pgryuYoFVQiX6j
oRZtxCaSAYh6EEGEIZ
SFU4mbT3GMret7THonf
MulticastDelegate
WP6RZJql8gZrNhVA9v
dg3ypDAonQcOidMs0w
vXgxlLQcVHhY7dY50X
RJDcsuMfOxrTCYImPe
Attribute
iGR41459RDH4FvPdNk`1
qcBC7nbplYPB6DW0yw
QZEOeHRUkDiNqCWT0p
OFfwWh6ZIHjfnqBOWx
BIpvxRBRb2dOGl802m
ValueType
VtNVUKGulysZw81C3E
MacgPI7JyVeAhNaPvd
GL8NaIwq2KOvLQhMFX
yy2w1VXOQgx806ubre
N7UlhA3IRW2ugh7tWg
RI754BJF754hNSApRW
YLCGmBEaUwBbEqLM01
AwgKvrHJUS3TxryUsj
hHEYokUTtehNq5ji0d
rE4lpnT863QnijKQK5
<PrivateImplementationDetails>{FDBC27DB-9B29-4953-AFB6-C293D22A59F4}
__StaticArrayInitTypeSize=256
__StaticArrayInitTypeSize=40
__StaticArrayInitTypeSize=30
__StaticArrayInitTypeSize=32
__StaticArrayInitTypeSize=16
__StaticArrayInitTypeSize=64
__StaticArrayInitTypeSize=18
h8rB7Hwnge9iDJZaBA
Assembly
GetType
InvokeMember
BindingFlags
Binder
Replace
Convert
FromBase64String
ymh9hmKn8Pfr5qOBqc
s7riW82SDtjsYZ9U0m
PK4Bje8nKw9PIQ4Rlr
Ago9o89QenP2gJX1nY
s983F3vB26mIY5jC9k
PYN7G2X8RAPQZm97es
Kh2o8BSHbd
STKShj7Bii37G29kDa
rqOipSYYLcxip
typemdt
FieldInfo
MethodInfo
GetFields
Module
ResolveMethod
MethodBase
.cctor
GetTypeFromHandle
RuntimeTypeHandle
get_Assembly
get_ManifestModule
mUt48V0EMhUXVdOsQg
ResolveType
Mk9SyoEWO9U0oRb6r3
MemberInfo
get_MetadataToken
t3IE51qWfvLFoglmUZ
Delegate
CreateDelegate
RhgKTD35j3fIf5QgIi
SetValue
wOYPdE4r5EtREHVSUY
hJU3bnVNieb4UTH9gx
object
IntPtr
method
Invoke
BeginInvoke
IAsyncResult
AsyncCallback
callback
EndInvoke
result
O1BkIDx0L0
V9fkgxQPQA
HkLkNdDPtB
wcyk8nIyBt
MrkkWebIMK
xo4kuDarJK
CgSk1JZr60
BV0kmUIPgx
zIOkYypt1M
etmkyDG2SG
K7PkOHxqAd
aatkD4ZSGk
eXJkjmTXDX
x4Dk2IHVmX
OObkplyC7t
WaKkhokJrA
emjkxI4Yxp
PRZkZqsNsa
XtMknffM5M
VE2k4S5okQ
yBRkv0eFeZ
fMAkKtNIoA
zl0ksqgIH1
tuYkt9D06I
abxkLGOVrU
lmdkVksVkh
tTVkFDSO7A
wpoklx4RIX
URnkCOceLK
onZkkIlVOi
Tqek0lIh21
Dictionary`2
System.Collections.Generic
LrEkS2eXQL
firstrundone
Qy5kfBXtEh
rNZkehfwNu
VM5kd0GoFG
s6pkoGoeab
UInt32
RuntimeHelpers
InitializeArray
RuntimeFieldHandle
SortedList
System.Collections
Hashtable
RSACryptoServiceProvider
System.Security.Cryptography
set_UseMachineKeyStore
e27ipSYrxG9Bk
ab9oDe4UH3
UInt64
BitConverter
GetBytes
TAOohhiP7R
UInt16
zDKosecjaB
ubAof6RgCm
YpJoWsPi7X
BEVodWAYPB
gX8onkMSd7
PEXoCqmS4w
SymmetricAlgorithm
AesCryptoServiceProvider
System.Core
RijndaelManaged
Activator
CreateInstance
ObjectHandle
System.Runtime.Remoting
Unwrap
XS8oLZGMXn
CryptoConfig
get_AllowOnlyFipsAlgorithms
XEDoeIU7mj
MD5CryptoServiceProvider
HashAlgorithm
ComputeHash
vBuojdip3i
Stream
System.IO
NSmolmd79S
TransformBlock
SDQoufkqT0
BinaryReader
get_BaseStream
set_Position
ReadUInt32
TAJo1U8fio
ParameterInfo
DynamicMethod
System.Reflection.Emit
ILGenerator
Monitor
System.Threading
GetManifestResourceStream
get_Length
ReadBytes
MemoryStream
get_Item
get_Module
GetGenericArguments
get_IsStatic
get_FieldType
GetParameters
get_DeclaringType
get_IsValueType
MakeByRefType
get_ParameterType
get_ReturnType
GetILGenerator
OpCode
OpCodes
Ldarg_0
Ldarg_1
Ldarg_2
Ldarg_3
Ldarg_S
Tailcall
Callvirt
Exception
vC5oV1W6FK
EObomOjAWk
w65ov7siki
L3hoFlcqP6
ICryptoTransform
CryptoStream
CryptoStreamMode
hg2oY5yaSM
Encoding
System.Text
get_Unicode
GetString
FPvotekByE
svloy6EVGc
iaKoOg5GGg
Marshal
GetMethod
PvroikJllY
get_Location
Exists
GetName
AssemblyName
get_CodeBase
ToString
GetProperty
PropertyInfo
GetValue
H1sorrpiaP
LoadLibrary
kernel32
oGjoaYPPLS
GetProcAddress
w3ZoqRBn5p
Concat
GetDelegateForFunctionPointer
YDsoA9ylfU
mTfoQqVbOE
YeeoMqaS3J
tdOo5aPwrv
Q2sob65b9D
umLocehuEC
op_Equality
VZpoRI2LOR
FileStream
FileMode
FileAccess
FileShare
IDisposable
Dispose
Njco6C1nc4
rLIoBbVVpm
ToArray
oN9oGXMAK7
set_Key
set_IV
CreateDecryptor
JBbo7fndGL
tM1owh06yH
HpuoXD9KwB
vLyo3J8m2E
fnqoJe2xAG
IHuoEWDKCc
J6JoHkltLH
FtroUJNIfo
KIxoTLeGZr
S0yo9WrR0W
vK5mG4p5KTwe5ewIdF
ooHJItBJ8mnELFFAuv
JI27L6hHy8WG2DFEt7
UnuoVV7XxL67tordL3
dEtJ3GHOkpq6IK9H8T
DlTjC3ns7NF3K2L9W0
AUqknqxOTfJRSleZZg
Reverse
HqUQWIbkDATIIPOaDB
pL3ngtt9CTYpkN3RRH
GetPublicKeyToken
uNgreYWnmQDL5GA2mJ
uGRgEFZGC0yOQ0DKKJ
CipherMode
set_Mode
imwhh5ge6MNMQgdn2I
UZaOfLodTMLZluvNFM
ROxcTmO0RmN1gdebBy
FSn4N5yKIh5dbMfWMc
FlushFinalBlock
rPBghP5l3biupmEL9H
go2YEywOs8jOXmjAh3
Y47RPnfNnKchV1dfJx
ToInt32
c9rkFE3Yth9QVCcLBY
sCBkuvs8Gc73KCy1iQ
KNmd2Ovv3DNeNbpMY1
W7D3f4Dp8pDWWuxtW6
Hw7Rw9XnYhRdEYdQ98
D8601mP2pDQifK0twr
a2lan4FBbLgRVmYMCZ
HAJ2Psy5ApY9JLSdgX
G9skPDgcXb
ToBase64String
x4QUG2BimrV3xVnir6
mn4aWHAjhc3LtZdE9E
tLd79rgAHTZP75esyT
bnkF4DMQch5WyhkC6V
sC3mPFuWKypiAAHMf0
GEE3xlZhsEKVt29M3f
eMIvimH352PWKuVIPb
qZ9hOpLbJeDtqAvROh
CreateEncryptor
RTnGjUOiplvACWLyKO
HL0eDkQY8NnlbTFtV2
classthis
nativeEntry
nativeSizeOfCode
JDNkifbo3S
jsbkrdexts
KPVkbuTpLj
KDikMXewCI
B2XkaLi4dH
hx5kqNgSj4
TVtkAMaqpL
ReadInt32
VDqkQKyKML
O6LRtFk6Q41ZPWHVX2
Fal7bLetqNQj2mGY6a
hModule
lpName
lpType
lpAddress
dwSize
flAllocationType
flProtect
hProcess
lpBaseAddress
buffer
lpNumberOfBytesWritten
flNewProtect
lpflOldProtect
dwDesiredAccess
bInheritHandle
dwProcessId
value__
Hh5kRkRi0A
xQVipSYzTTBme
$$method0x6000317-1
$$method0x6000332-1
$$method0x6000332-2
$$method0x6000340-1
$$method0x6000340-2
$$method0x6000353-1
$$method0x6000395-1
$$method0x60005b3-1
STAThreadAttribute
UnmanagedFunctionPointerAttribute
CallingConvention
CharSet
FlagsAttribute
CompilerGeneratedAttribute
s7eKIlGwWcpyojKfmD.MGLlinTQEjjJ0aPm79
BHBhHuH.g.resources
aR3nbf8dQp2feLmk31.lSfgApatkdxsVcGcrktoFd.resources
WrapNonExceptionThrows
BHBhHuH
Copyright
2023
$1798f77a-13c6-4a2d-a3ad-84fb9d101f64
1.0.0.0
.NETFramework,Version=v4.5.1
FrameworkDisplayName
.NET Framework 4.5.1
dg3ypDAonQcOidMs0w.WP6RZJql8gZrNhVA9v+RJDcsuMfOxrTCYImPe+iGR41459RDH4FvPdNk`1[[System.Object, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]][]
SUsSystem.Runtime.InteropServices.CharSet, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
CharSet
'$8hRG|
!htVx}
[EXp^<
Cn\1j1
R'{2/4/
]f+nU-
GEXgd2
^k<,Ob
h>Crmf)lK)
Qnw:]:(
d!$W@P
x`z^Q|,
b(UMR3
,Lfl'z
N#@}''
5O,_5r
@m)XnJ
]_<V(HD.
B0A:ya
V/6/`;3d
,{5_[*X
WkX!mm
t5MRX6`
2V}U{,
|eT/yn]}b
zN$nR%q
E{0\lJ
QupI|W>$
V}S0aV7
.A]cc}Y
gX8l*\
`'mTt5
i(+SVo
*DZ!fjI
?=`CZ<
WC|| l
e@g'n<
s@!dOyH8-<
g Y
:0w?xA
[f$@jn
C8n|<HrB
*COYMd
_(?Ze,V5
'OL6*S
6~7t/*S
%?t+.&
G=Q^4!
4@tTy1
i:fk3!"R
e&| =~
F|;s{P)p3(g&D
=Cw#0p
T(O8"
U!0;9
B6Zm4s
2?fkP=
XV~)c]
/aOI=w8S$
DzN9>FF
o8UQ/C
JB{hRp
>eTX0v
:v6M;ScX
RiF?]=
7zuV9"
sB$wZ[N
8P3UXj
}7]H6H
a!cz;j
%@n f1I
KM*#p,
+0p*b1
"dK+(|g
?R!t%5s
QKS<UZ
/Iqv8"
&f^}DS
59)VriI
R\Q7ml
|xd~
+6vpZ7
z;Fhj$S
TfmRok
fmWws(x
i;3LIG
d?4kaM7
FH^To5b}B
g#ej8
a]sC-M
Tn=q|
=?1?qx
U~Yi^5
a:cXj)
HxmZC?
k}k}#f
wtB,QhI
!?0@ij
l?`E[eYM
R{GTq=?ny
Vl2aBK
t7<>h
/2C"0.
ae+@SX
{/" pm.#
q&J?`}
FmWPdA
Z?Im!}#
i{#-5@
$^iKxg
LhR>/ar
@LB+gE
hS<c>I
=1_k_^RDr
4(LHJz
()\][
X:Aq_~
WrM|gjG5
evCf1'U
iC.D/0@y
&6s!KE!
p0<L=_
C&FKpT
Pb9QA`/
W)Di?rn9%
CT"Ys!*D
P\C4+{
BaI'{/b
O./KgRV
T(xm_wPe
(FQ$Nw
>*qM/n7
^$j5;o
Xy{-M6
Kd@b^#~
}X9KMvW
)2i*;
yD/$M%
n<eZe_
0 cyhO
kUA@=i
:*hJ"C
FT12@A
'@BBSQ2
=WK5m}
[$38iw
MdQ:eJ
2(0~Yc
@cp_:r
lg>xQH
xT4*pW
/'Fl,ZI
#V_4HBf:
D07Lq+
ZOf~iZW
I8x{+V
,?sTKQ
v*c.a_
kQ6fD
5;0|Ni
SQ\Ba5
`y%Iz{
|=^K?j
fx%&@i
A8Z,]e3~
I>gIpYa6
?6`j!uU
iO3e D
dlz"vADg
7/v>vU
mXkE#x
F\LWt(w
*EKa};
7'r~& 5%
<A&E3;(
zON?r"
U+?]U9
+U&8qf
.ppo`>
%pG:(*
GuzYL~
gu]3+k
_,Mm t=
P[8\;=Sx
&C/k7
9{r@5
KTwNRee
;4BKU:~F
C:8O>3
&5]nCa
5dlr"N
5[+p$o
5/R'e\
c E^%x
icAz4\
iAca(~
$t?e><
TT"PUDs
(EsVPF4
V(.aUr|
z[?,mnH
hw'qCfI
[ey?vYM]
_RX1|B
?2O^Hd
=bk*zi
wn;/D]
D?i(Gj
h[tv4q
M<:Bm=
Gw^WlS
s-k{x(F
G'R,\!
o_\0~65
>6q16&
`2Q~U@]G
IEai'N&
uo:HJC
gZkqr3
)H$%fsA
b0MOhqR
9FNKi+\
eIdw^hlH
u ?TWVq,
u`S.te
;c.(+>'
[9y@cYA
W_?P K
*2QZ2g
cz0aoR
4 73Rw
G6;~dGI
x86iBcf
'JA&;f
BZjz]`!
Wi!1+<
lqrx)q
De[QDy
XaN?S$
Ku>W-Z
d8(y$6
&0Z};{
Dh%Tn4
}L3YXT
K*\fyIY
Y*XrC^
zWJe@(
&!48Su
Nhvj8_
k{k)nm
HMhXjg
/,PAB{
45*[6ib
2j3hw/GB>A
/A2N??ZM>
5m?Y;X*VR8
ZQMLi(b{
9Zz3%3|
-M9@,K1
2".qvO
tUO>&X
x3"WwA2
pg+r{W
kC>8m%
nQKJ7"
n${>h
zrl3}!W
.9~C|P
9HJ6(P
Ns}~2k
yn)C$Q;
ME6MaB
tX!+Eb"
c::p_T
;=_-)1
w3e.;$`
qqkUa9
x+V64-
Lpu%VS_
o-\A1e
")Yv4vm
Q7V3za3[
_h1s!M
lc<u^c:
7H,\M9TF
i4ggkU
NeN7)C\
UgILt1
")-(\;
c_u(,(
yR/uwP
433*w",
;::%Paz
0aX2ce
#y:`'
kBLEHA
GA-W@/
Lgb'~2]
>kTCo5
&~MdKO
tiWl~"
EX2_r;x
(-=6pM
\ $]fo_
`Fuxl
I2u5=(
F+Rd<
H]M,pl
`(0{vO
N?;m*Qa
}V(p~T(
0<?XuQ
U!,"+@t
e:o0:VA
y!]v>R
EG0=]
XEwM}=~
2$S;kNH)
oLDp_
~%6l5D
~I.PB'
flwP~~
{\{~nO
Jct2Kv
rmV86?
6AnLwm
"k6P,nA\0
>g47F
]_(SQ?
}uxjiV
LAr[qM
}l(SKZ
Avhg^fg
j}&m=S
BU_TQ4rQ3
)VW_z1
hL-gTP
|k<pr5
vK@x>kT
s;]V\q
r$Jq"3t
Gub$h3<
3*I~7#
;m8W=m
$X5|!
>e8TOm
3Ps32AM
fSz?5T
aeN'#WUI/
(sj68%
;u;#3T
=eutu5
cniJIu
=T`K5TT
6.)O4%#
#?ZGT@
mKNaiK
`zfAo@5
x}X3Bq
1@TgE(T4w
@"rQfS+
%S@:S;
)FugN:
3VhlS O
p1y~0m
~tLCa;
9O9G8+S
0;Z{d|F*
&2ZzL
S1N?nx
]+==,(W^+
KKm5wC
Hw%H~e
M&C7q<?-)
EGb8&D
JlxC^)0%N
SmL!t
B`!aPF
&oj=[LBn
"QbvlX
-K8|9Q
9j2<f;
5vOx6+E
mh+AAX`
h;\U_cH
*z>ihe
"yt])x
FcJRSPX
Nwc[naB
D6Elap
7>.H\D
Tt,w2~
=9$pWd
EvF0Mcl
f2/hT;
}!~q.g
Kx1\6m
N1Hpz-(
)DtWQ7=
!DRT7IF
"\^A0^B
DbI"E|8
f{64{TH
.~Gd>@
Mi] iS0[
;BX>XF
AuW%[b
I\_Q@h'j
K`(-&FQFV
:L3<WS
YrtBfRzr
7bT+GT
BR#`&8
Y}Whw!
o"agD0x
Ai|*\=mE0L
$(CM]v&
"[w|NVE
KF<kNs
AsKzpNZG
SuP1pk
-;+Is8
W&TP_6$
H\EXpu$I
j[TP1w
?t!D9"
-qn %8c
,h(*qO
+'sw*0
Ub "H1c
%Omp\K(
YDHiDw
O8vN.]Kf
fY# r>
K:JWo?r
Zpej_<!
aphO$s
@X(IMJ
pglc:wr
R33&{H
3HwzE7u
R,z3}H
+LIE.N
Q:5FGv
048k&^
'Ky4C
FcT6**
'HeTr49llr
D_7u?y
0}#5d2Y
,DApFO
,I]Ju4
L@`5M2
_Z.cIV
lOx/A'`
d$1 =iRX
%Nl6dt
$$IeP@[
[BU:F?)
RL"<XN
`AA\=#Fk
*_O/Jk,T+
Z=gBTr
a-PK0[
@:1!6CZ
JRno2h1K
!__?AT
mSFixO~
d-^)iUz
5`N$Ha
S|N6Fv
CF^R/1
b?|qZ ]
aKtl~A/\
!aN `1)
_0oD:L
tR"!eMxcA
R.0XD[
jcU<k@$
ecf-#4
XC:j({
_U<f*U
]%r&Tl
C>dCD/ABae
z0:#u
Go8*>g
0"GEbm
B_U2IA
/V<|l
REb,!F
83)i&g
'Q!|As!;
kbzdRL!
O nKz4|
1S&i&F
2aLJ$8
$xKiByZ{
iemMFQ
`.#Nl]
9"LkQ8
R`_@BU
T+7Q~!
Jw80N+-
OYucbh
'ex+<y+
p\/4xg
e:idM
W$u3nS;
R`/W6<V
]&>mj
UE^r8
g.>-69
L%|^WE
Xh#}LR
kgy6a_l{)t
gD3(^$
)di^o9M
1Om))!
rTeLN<
FQE]{T
\_Efb5
x9%4{N
_aUn(j
A7>V.S
n{*bQ)
smTM')3
~2V16>&)wpt
jDBIJv
oM`4`k]2
<%A#oUi
2w mx$
-]E"!vmj`
Ls^Wfv
Z'B6JXAH
}6cyiteiG
grtO89
HT.BT=
*+vEo/
_4Y"'R
^A"z!!H
NP*I+L
pMIUkWXV
}*+}Wn
K;Mtr{
^~65Dz
K glX>hS
WN1 ,U?
k5f47Sm
8IhC@#5
;&M;:n
M;/EQ=
i((a5x
{xPJ!.
TeX,w(
xk;Jl|k
*<L:wC
k2gmR%
W'OOG#5
Ir$R,b
};KyoU}Q
HO[mM!H
(BJB["
w#uA^!D
(&W/_nI
6qS%7>D
l08Pjli
*6H:FS
kO_];
5GiUr-
h2gJAL4
j4.EYD\=
[Rci)/
9"rdn
BLSwCuHB
i<j7[#
An??)Z
C\q*xt
FI"I&B
XHO\'J
Sz`D7G
x\kx~$
)W*k-F`$
qe0c"Z>",r
!o CSxy
|;ydB)
v]UyB
'I@0G=c
*2^s&]
{BvrVCfJ
iE9]Wd
Z@{=&s
oMJ~)q
|753'__
{ta&Dn
(vy*Qr3S
(<A}{W
3{asvf
l}2cVy
F%Xj z@
Vuh;Dh
]xZLhQL
7O8w!rQ
1&@8%6!L
?l!jfwW
o4R&>`
Y$^^E
R[Nn\z
K`B0W
h||/I5
85rHuD
8/$(52
EGbg\'
@T!G-~
E2]cR3\
{kO7)0
5A6rnk
Pxa3L[
yCn}4,
D65Tx5
.~F`
2o}o->a
SKhS";
`f(HUR
m1i,O4q
F25SGh
$'un|"Od
VU@I'.
euJ93x
PH%#O:
0?7&i?
{Qk3/[
|x-|*$
~l{{D
N;5Gi(g
2"[8@H
kVy)}GGQ
5gMP$\
nkMH/dOU
YD@D_N4
VG7_kdyYpO
f}[5+1
Z0,QaL]
RY9CfG4
XY|w.t"
6V7EbfR
oj6ac9
{-Bfo=
gF10HO!
};~&TPh
],Io#
83)e^V
BH~$w
YJB]M?
*-L[=R
?4fC)O
EUYb)*
w"Z3s?~@
ln7?Hu
Qtf%#4
=}:>41
u|O".1s#
et\3K*
&Z^sp*poGZ
w}34~iC
69iz[S
12TS|_
'Bpnb`O
.9sw-1
[p`)k+
;kjCMY?
e& M2z
tJ3x`Z
bhe6>p
\F&V9x
UtRg/S
a*?WZ7
Rr)d&[
YqqGKN~
`:H9L1
4uk_h&G
fuV*j:#
^ifG?:
&pog>q
Iw|8y)
.J]%u)
heqC3og
gK^KeK*>_Z
'(PIvE
P\XI-c
O>LEY!
9#fZ<p08wi
>nZoPLkg
p{vuos
;R9Ytaf
iK]Gdp&
M"L[?^~
$31tE@w
VO-nY
rV;X
\M4sqM
<U;We]
g{US*iC`*
(Vd=c(
s4'IGX
v?-`d2
N5?xpS
rz]/lQ
\YX!}/
3}#1P,
#]@j;+,s8
epcl}[
{w";w}
TYE)<65@
cL}bXL
[p'WF3
#d^tBi
Bn;nKix
iv%*g<
V(_tSha+4
4EcZ&c
uhiB;jI
+O?> Ns
C,eqw/g
NR{g>>
S[.{-%
w!~DRl~
ILgsqK
ZA[-#\
oye!~*
Dk/HHb
=84!n(jY
GaeAPjO
rQ'yv_
]\9`Ib
f.>7gB!
SDAboU
$-w+x&\
f$&jZc/
$.'5y8
|vtv$y
v'W#IQ
<:fR<-_K
f-=y9s
1@n.Tr
DkF0Qc
Ck@*T}
QZUigCY
.Vw sg
cs!wti
W@[%bFu
KktM:#
q5E$/+c
lKNSTj
A0vw1X
j'yA'"
ulJBhJ
;liz/|
e6C&qO
}UM;)?A
!7JLbDm
\vc#=L@
JLFEcr
`wykLu:b
_PO/1t
fZ1W1=
:hmKBg
_Z=Y>y{
+*`):C
i#D[\w
I~+who
\r3uyX-4
#b-`>W
?iD?nQ
6{G=k>
Q6~\*R
kl!j"2
4I<thUn
\dJ|1k
l``3Zl
e~<n#A}
Wl?JjD
0HE0'T
eN!R5=
pFn|*?
dn!(vF&|
Ox+ky-W
!p#TAM
#16C_?p^
_OnI[4
F/5>{,
JG"%IL
aZr!C_
=p,[OB}
-'b3MT-
`"r<M/
I;E+/N
p~\U$ 
ZRnb<K
Z0TBY<
q>f)<EyX
U*lACA
nuU0pkK
PF/n/)
E$5#>?0lt
~,A?2
Xs:7?a%$
-2.>90-
jnF0.,
3GF.OSFs
)Og!Q&
4&:P2y
U;=1ww
tCx(E
^E9YK!
P/3$DL{
uJw[SV"E
x; -FLA?
Dw~'>8
xhY6IwV
hn@)ou
<:VBc&
pR+te*1
j1x9N)
^Pl#4`
u+CwX%g
ZT0qo7
J0-H>*
*gVsCRl
Z`eS(F7v
NjJ4"b
J'mCOy"Y
EGz |<
*2VXmJ
5DPF,o1@+
!z6{^
T+b&g{
Hn[7mV
`JcB-y
9"1Ju,
dJ<3g^Dj
eI)ZvZ
z(ECU
HCX_F
j^eHfh
\I1#$W
-t'@Y`
qWl1{\
H^q>0$
M\i>FX8
>mCkEV
xqo4 `
gzB^`b;
.~$4MV
w\:WpV
-1.R4X
91,SKBE
-+;|@<
Me>hjS0
()|Zt~
Z;O'l"
ii>IWa
LEBv6J
@|#=WL
HO\bHAF
]b#/JN%%
9m7*_~n/
`e#5b9
1zIobj
,sRW%b
mGYlnj
&\xw,o
9M|!}K
/n+I[m*
^BcB*H#
~K\Q{G
XXyP4Dv
i++cpAq
2ZDtDV
*!u]-B
j__Qk,
T~,o5,
_dL/p?
ks$R0U
bny3;Z
"Qs?_:K}
6?F0rY
_XYF8D
Zd...~
*jN&Q@|
u}{WoM
m?lZ4=
In(wt`
D3a[nO5On
-Ri-i$7
BV*)^m1
C%bn/uTY
|Rl\&DM
Z'?Fv-
i{e*w>>
>ShvbI-
;7-^&>
IUWUPhD5^2 _
U'Q=6R
")|Px7
K*xcab
uK1!HF
H7Lr_7
T:(NraX
tG>D4"2eo
[O=W
A&A4;*
eRXaV*
WqHX?@
s?Ol;"
Ha%:P?
Q*erT{S
qV1`_,
ykH[&
_DI5~=1M
.R=M7z
Mr.kM(Q
?AN:Q!
YiZ(ob
xI<TzDQ
E=m2e%jY
u|[UTQ
Ht%\^x
BU{+,m
v\wWnOV
D49l6z
Z%QS>V
8Tky?,
xbk\]*
\-B!oIp
7Bf=2.rmD\
)`N!<oJ
,lqp`4
`5z^6p
D~8-,h
Ykug?&
a_ hp`)W
ch8g5N
|<o@P3
&R-:*{x
Z$lYaKdD`
vFlUzbF
Z00q\s2sl
2z -o@
_fY8S(o
82iUL0W
&{6a6(
^*1}qXU,h
) yF;`
*\o6Jt
4)/}U
k_/!=[
vKqG\0
"|6<Xapm
y":R:wx
YMs!?=
i0eN;`
<2c]dM
~ja.=5
?E.ZQ1
A;PUNC!
ORz691
)C]wQ[J
x5_"x44W
M`l`5%
i8U"rA
dn"-6Q
H*x}RR
/Jm[Hi?z
R#7:2G
$.@Z5a
6)$}8_
)yM[e\
Nw"I4K
$\ayGS
.mve]f
y>S2DI?j
y%jI3R
:tf2w0qivs
<7.J T
!{0bO<
3*oQ_"
vqoG\d
IoB%7,z
gi&6&\
1ima~~V
!.=-@z
*|'T[wX
]g!n;;/
9Na|^f
g8Q7<s
To%YA&
'TK0w7
It/QHYH
)]qjMU_
)2$OLA
sW{MXy
U@AMk3R
;f?y!;
aWZRfP(
.cL!cYJ
i MOb
W\vtQy
_ *@0//AH
}Smw#?
]+lDw]
>jgj_3}
>fZoa8`
#<iQrw
bZ,3bWA
,qp 7*Il
b/c[3:
jc*)2m1
rFIaYjCR
8R.m^,
tR2i#`o
GI.9nb
"Ul97i
S;I)grx
aHw0]~q
t%t4D^hS
Z@N&Ka
Aq\A9SW
sJ:I jT
~B,U1\
vr{uD:
&Js$S.
FfPsa2m
T`Ixxj~
)nMP"$
kAVi}8k
\J+-Dhg
y;2go+
s.)*"L
4H_ '3c
`e 8mS
hKbt"[
PphG't
e|6tQA
dP!y[*
"2GbM*o
q*ySH-
=Fr?%2
&v{.A}
}b7UHxd
F;M<zz
L\+I\
``F+bSr
LZ})K2<
E~!bH
WHeQ$I
"1=7hsY
;e{Kan
x>`,PnLl
>^'BLo
uVy)[}9
D_aTK+
*) 6qUz2.
{F=wO3
1(+A}\
>LoHyi
*hj8=c
(lHze*d
"JBTVh
'+/`}g_&)
AQwOQT
6mku>9
zJy=/
eq#-dQth=
NRH9aa
;&a}<w
[/v|B
F,dSGK
e8Of2N
(-W*yqG
_(0U4w$
_x~ IAK$1
A>E1>"
,u-\qeiP
~UL|~~*.
K"oo1~jaZo
lvk&foK
`;S6&N
>sob@ZL
+u".XJ
w0"'n$
.D"I&"
B`Y7<u
.76O!:>
?q{gy=%hd:
K5s-ntK
r/QL3`
')}}l4@
%uiH}AlB8
?Xb?hB&
EE$7CI
|q[yq{
OLx=?
gB"biI
\g.c?g
sOT -S
_;OO6J
AsZ)Hk\
Z>-Vlf
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
fSystem.Drawing.Icon, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3ajSystem.CodeDom.MemberAttributes, System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089mSystem.Globalization.CultureInfo, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089fSystem.Drawing.Size, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Icon
IconData
IconSize
System.Drawing.Size
System.Drawing.Size
height
ISystem, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
System.CodeDom.MemberAttributes
value__
System.Globalization.CultureInfo
m_isReadOnly
compareInfo
textInfo
numInfo
dateTimeInfo
calendar
m_dataItem
cultureID
m_name
m_useUserOverride
System.Globalization.CompareInfo
System.Globalization.TextInfo%System.Globalization.NumberFormatInfo'System.Globalization.DateTimeFormatInfo
System.Globalization.Calendar
System.Globalization.CompareInfo
m_name
win32LCID
culture
m_SortVersion
System.Globalization.SortVersion
System.Globalization.TextInfo
m_listSeparator
m_isReadOnly
m_cultureName
customCultureName
m_nDataItem
m_useUserOverride
m_win32LangID
%System.Globalization.NumberFormatInfo"
numberGroupSizes
currencyGroupSizes
percentGroupSizes
positiveSign
negativeSign
numberDecimalSeparator
numberGroupSeparator
currencyGroupSeparator
currencyDecimalSeparator
currencySymbol
ansiCurrencySymbol
nanSymbol
positiveInfinitySymbol
negativeInfinitySymbol
percentDecimalSeparator
percentGroupSeparator
percentSymbol
perMilleSymbol
nativeDigits
m_dataItem
numberDecimalDigits
currencyDecimalDigits
currencyPositivePattern
currencyNegativePattern
numberNegativePattern
percentPositivePattern
percentNegativePattern
percentDecimalDigits
digitSubstitution
isReadOnly
m_useUserOverride
m_isInvariant
validForParseAsNumber
validForParseAsCurrency
Infinity
-Infinity
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Size
height
:aRfhn M
BHBhHuH.pdb
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
<assemblyIdentity version="1.0.0.0" name="MyApplication.app"/>
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v2">
<security>
<requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3">
<requestedExecutionLevel level="asInvoker" uiAccess="false"/>
</requestedPrivileges>
</security>
</trustInfo>
</assembly>
DigiCert Inc1
www.digicert.com1$0"
DigiCert Assured ID Root CA0
220801000000Z
311109235959Z0b1
DigiCert Inc1
www.digicert.com1!0
DigiCert Trusted Root G40
]J<0"0i3
v=Y]Bv
http://ocsp.digicert.com0C
7http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0E
4http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0
~qj#k"
(f*^[0
DigiCert Inc1
www.digicert.com1!0
DigiCert Trusted Root G40
220323000000Z
370322235959Z0c1
DigiCert, Inc.1;09
2DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA0
http://ocsp.digicert.com0A
5http://cacerts.digicert.com/DigiCertTrustedRootG4.crt0C
2http://crl3.digicert.com/DigiCertTrustedRootG4.crl0
DigiCert Inc1
www.digicert.com1!0
DigiCert Trusted Root G40
210429000000Z
360428235959Z0i1
DigiCert, Inc.1A0?
8DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA10
[K]taM?
SA|X=G
http://ocsp.digicert.com0A
5http://cacerts.digicert.com/DigiCertTrustedRootG4.crt0C
2http://crl3.digicert.com/DigiCertTrustedRootG4.crl0
jj@0HK4
DigiCert, Inc.1;09
2DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA0
220921000000Z
331121235959Z0F1
DigiCert1$0"
DigiCert Timestamp 2022 - 20
Ihttp://crl3.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crl0
http://ocsp.digicert.com0X
Lhttp://cacerts.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crt0
DigiCert, Inc.1A0?
8DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA10
211213000000Z
250108235959Z0
Baden-W
rttemberg1
Stuttgart1 0
philandro Software GmbH1 0
philandro Software GmbH0
Yd?O_{
Mhttp://crl3.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crl0S
Mhttp://crl4.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crl0>
http://www.digicert.com/CPS0
http://ocsp.digicert.com0\
Phttp://cacerts.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crt0
$Ck&Hm
DigiCert, Inc.1A0?
8DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1
DigiCert, Inc.1;09
2DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA
230328144258Z0/
8q`je\
DigiCert Inc1
www.digicert.com1!0
DigiCert Trusted Root G40
210429000000Z
360428235959Z0i1
DigiCert, Inc.1A0?
8DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA10
[K]taM?
SA|X=G
http://ocsp.digicert.com0A
5http://cacerts.digicert.com/DigiCertTrustedRootG4.crt0C
2http://crl3.digicert.com/DigiCertTrustedRootG4.crl0
jj@0HK4
DigiCert, Inc.1A0?
8DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA10
211213000000Z
250108235959Z0
Baden-W
rttemberg1
Stuttgart1 0
philandro Software GmbH1 0
philandro Software GmbH0
Yd?O_{
Mhttp://crl3.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crl0S
Mhttp://crl4.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crl0>
http://www.digicert.com/CPS0
http://ocsp.digicert.com0\
Phttp://cacerts.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crt0
$Ck&Hm
DigiCert, Inc.1A0?
8DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1
J7G[*A
K(W{,w
20230328144259Z0
Symantec Corporation10
Symantec Trust Network110/
(Symantec SHA256 TimeStamping Signer - G3
VeriSign, Inc.10
VeriSign Trust Network1:08
1(c) 2008 VeriSign, Inc. - For authorized use only1806
/VeriSign Universal Root Certification Authority0
160112000000Z
310111235959Z0w1
Symantec Corporation10
Symantec Trust Network1(0&
Symantec SHA256 TimeStamping CA0
https://d.symcb.com/cps0%
https://d.symcb.com/rpa0.
http://s.symcd.com06
%http://s.symcb.com/universal-root.crl0
TimeStamp-2048-30
Symantec Corporation10
Symantec Trust Network1(0&
Symantec SHA256 TimeStamping CA0
171223000000Z
290322235959Z0
Symantec Corporation10
Symantec Trust Network110/
(Symantec SHA256 TimeStamping Signer - G30
?'J3Nm
https://d.symcb.com/cps0%
https://d.symcb.com/rpa0@
/http://ts-crl.ws.symantec.com/sha256-tss-ca.crl0
http://ts-ocsp.ws.symantec.com0;
/http://ts-aia.ws.symantec.com/sha256-tss-ca.cer0(
TimeStamp-2048-60
U){9FN
Symantec Corporation10
Symantec Trust Network1(0&
Symantec SHA256 TimeStamping CA
230328144259Z0/
/1(0&0$0"
)R71RDARWQRWYRWaRWiRWqRWyRW
.[\.S\.Kb.c
.;\.CJ.+\.3\
System.Core, Version=3.5.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
System.Security.Cryptography.AesCryptoServiceProvider
1bHgSVy4HdvmvfqSGJ.uVymIAgPEiIfZ3WkJ9
{11111-22222-10009-11112}
s7eKIlGwWcpyojKfmD.MGLlinTQEjjJ0aPm79
{11111-22222-50001-00000}
GetDelegateForFunctionPointer
file:///
Location
ResourceA
Virtual
Write
Process
Memory
Protect
Process
Close
Handle
kernel
32.dll
{11111-22222-20001-00001}
{11111-22222-20001-00002}
{11111-22222-30001-00001}
{11111-22222-30001-00002}
{11111-22222-40001-00001}
{11111-22222-40001-00002}
{11111-22222-50001-00001}
{11111-22222-50001-00002}
$this.SnapToGrid
$this.TrayLargeIcon
$this.Icon
$this.Locked
$this.DrawGrid
progressBar1.Modifiers
$this.Localizable
$this.Language
$this.GridSize
$this.TrayHeight
progressBar1.Locked
VS_VERSION_INFO
VarFileInfo
Translation
StringFileInfo
000004b0
Comments
CompanyName
FileDescription
BHBhHuH
FileVersion
1.0.0.0
InternalName
BHBhHuH.exe
LegalCopyright
Copyright
2023
LegalTrademarks
OriginalFilename
BHBhHuH.exe
ProductName
BHBhHuH
ProductVersion
1.0.0.0
Assembly Version
1.0.0.0
Antivirus Signature
Bkav Clean
Lionic Trojan.Win32.Stealer.12!c
Elastic malicious (high confidence)
MicroWorld-eScan Gen:Variant.MSILHeracles.85259
FireEye Generic.mg.a5a287e329d02dd5
CAT-QuickHeal Clean
ALYac Gen:Variant.MSILHeracles.85259
Malwarebytes Trojan.Crypt.MSIL
VIPRE Gen:Variant.MSILHeracles.85259
Sangfor Trojan.Win32.Save.a
K7AntiVirus Trojan ( 0059d5381 )
BitDefender Gen:Variant.MSILHeracles.85259
K7GW Trojan ( 0059d5381 )
Cybereason malicious.3338ae
Baidu Clean
VirIT Trojan.Win64.MSIL_Heur.A
Cyren W64/MSIL_Kryptik.IYE.gen!Eldorado
Symantec Trojan Horse
tehtris Clean
ESET-NOD32 a variant of MSIL/Kryptik.AHQJ
Cynet Malicious (score: 100)
APEX Clean
Paloalto Clean
ClamAV Clean
Kaspersky HEUR:Trojan-PSW.MSIL.Stealer.gen
Alibaba TrojanPSW:MSIL/Stealer.20a8b224
NANO-Antivirus Clean
ViRobot Clean
Rising Malware.Obfus/MSIL@AI.100 (RDM.MSIL2:3YXH+g3TBMF5r4j5SUfH+A)
TACHYON Clean
Sophos Mal/Generic-S
F-Secure Heuristic.HEUR/AGEN.1325558
DrWeb Trojan.PackedNET.1293
Zillya Clean
TrendMicro TROJ_GEN.R014C0XF423
McAfee-GW-Edition Artemis!Trojan
Trapmine Clean
CMC Clean
Emsisoft Gen:Variant.MSILHeracles.85259 (B)
Ikarus Trojan-Spy.DarkCloud
GData Gen:Variant.MSILHeracles.85259
Jiangmin Clean
Webroot W32.Trojan.Gen
Avira HEUR/AGEN.1325558
Antiy-AVL Clean
Gridinsoft Clean
Xcitium Clean
Arcabit Trojan.MSILHeracles.D14D0B
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Trojan-PSW.MSIL.Stealer.gen
Microsoft Trojan:Win32/Casdet!rfn
Google Detected
AhnLab-V3 Trojan/Win.Generic.C5437186
Acronis Clean
McAfee Artemis!A5A287E329D0
MAX malware (ai score=85)
DeepInstinct MALICIOUS
VBA32 TrojanPSW.MSIL.Stealer
Cylance unsafe
Panda Trj/Chgt.AD
Zoner Clean
TrendMicro-HouseCall TROJ_GEN.R014C0XF423
Tencent Malware.Win32.Gencirc.11a3b893
Yandex Clean
SentinelOne Clean
MaxSecure Trojan.Malware.300983.susgen
Fortinet MSIL/Kryptik.AHQB!tr
BitDefenderTheta Clean
AVG Win64:PWSX-gen [Trj]
Avast Win64:PWSX-gen [Trj]
CrowdStrike win/malicious_confidence_70% (W)
No IRMA results available.