Static | ZeroBOX

PE Compile Time

2096-02-16 21:15:26

PDB Path

NNnBbBb88837363.pdb

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00002000 0x000a2e60 0x000a3000 7.93291234997
.rsrc 0x000a6000 0x00001c1a 0x00001e00 5.30815475205

Resources

Name Offset Size Language Sub-language File type
RT_ICON 0x000a7258 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000a7258 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_GROUP_ICON 0x000a76c0 0x00000022 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_VERSION 0x000a76e4 0x0000034c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_MANIFEST 0x000a7a30 0x000001ea LANG_NEUTRAL SUBLANG_NEUTRAL XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminators

!This program cannot be run in DOS mode.
`.rsrc
c11a8E
Z -^ na88
dgJx%&8
yoZ *@y
AoZ 
({sPb(
_bj<
Yfm|%8
_bY*
6AnZ mh?za8u
JM`mZ {
Z v|n1a8-
(n!s=8-
Z G|VZa8E
_k(%&8
zD`a8p
H&~a8Z
Lb"h%&8
KP%&8<
"yC"Za8$
Z xP&+a8
5X|zZa8
Z_bX
bYZ}Z
LyZ AJ
C(r%&8-
EZ SJc
hpJ]8q
Y_cX*
sq}%&8;
SfJn%&8
1#?7Z
eZ s#`
w#Z Mi
Z b$-~a8t
plZ 7Z
Z?_d
_b`*
UUUU_
v4.0.30319
#Strings
NNnBbBb88837363
CompilationRelaxationsAttribute
System.Runtime.CompilerServices
mscorlib
System
Boolean
RuntimeCompatibilityAttribute
DebuggableAttribute
System.Diagnostics
DebuggingModes
AssemblyTitleAttribute
System.Reflection
String
AssemblyDescriptionAttribute
AssemblyConfigurationAttribute
AssemblyCompanyAttribute
AssemblyProductAttribute
AssemblyCopyrightAttribute
AssemblyTrademarkAttribute
ComVisibleAttribute
System.Runtime.InteropServices
GuidAttribute
AssemblyFileVersionAttribute
TargetFrameworkAttribute
System.Runtime.Versioning
SuppressIldasmAttribute
1530e223-0ee5-47f7-a1e4-7f6068c9cd43
NNnBbBb88837363.exe
<Module>
ValueType
Object
SBOnKcqXOTJqG2GcPr
lDNbxTfLBoZ32UFLVU
System.Windows.Forms
C;Ndewzx5u'fqWR3vt|bp%kK)
Settings
NNnBbBb88837363.Properties
ApplicationSettingsBase
System.Configuration
bCGiYRNpcF1QOarApl
dPTpmaW3QNZtokQqC8
Attribute
<Module>{F14DECF5-1D45-4C87-9DF3-DA342B997AEE}
dG9EKsUfDwB8DMG7LO
px1YLVm8Dj79kAGaxE
y80wSowqJWMemNUmIP
MulticastDelegate
jn7DKHOFsnVQfCq43J
C4Sohsg341EgGBJIpE
QpGrfFj6Y4x3BpO3Oo
mYI4I9BpZyYYBv3Cy5
Wcr5BCY8yw3MRIUCtY`1
Sa0kgUPGIS58R3TPoc
QkCSdZaJawuWERhha8
QQMydLvJSRy7ZwHcIp
R3Ww72hq0YJ0nvrKjm
zwaGORQTl0xIiT8PXp
Poy1R2oW1gwHH0gcr3
QpHpjpXwHeKtj4oXmG
UYBpfWRbdcFKt4mPcd
kkxZZmbojia9v3dNjw
XS8kr6iml7ODyXHTP3
peHraGMHnSfpxjyAdD
PssHKgcfTxBjhsTPxj
SdJP753R3REkGiaepD
C3FQRvdr9maIwVQswl
<PrivateImplementationDetails>{439BC197-2D04-4830-B9B5-216183F2323B}
__StaticArrayInitTypeSize=256
__StaticArrayInitTypeSize=40
__StaticArrayInitTypeSize=30
__StaticArrayInitTypeSize=32
__StaticArrayInitTypeSize=16
__StaticArrayInitTypeSize=64
__StaticArrayInitTypeSize=18
Assembly
.cctor
MethodInfo
UInt32
ParameterizedThreadStart
System.Threading
IntPtr
Thread
set_IsBackground
Environment
GetTypeFromHandle
RuntimeTypeHandle
GetMethod
FailFast
MethodBase
Invoke
Equals
thread
Debugger
get_IsAttached
get_IsAlive
IsLogging
get_CurrentThread
MemoryStream
System.IO
BitConverter
IsLittleEndian
ToInt32
Stream
Reverse
get_Length
RuntimeHelpers
InitializeArray
RuntimeFieldHandle
AppDomain
get_CurrentDomain
ResolveEventHandler
add_AssemblyResolve
sender
ResolveEventArgs
get_FullName
get_Name
op_Equality
rangeDecoder
ReadByte
numBitLevels
Models
startIndex
NumBitLevels
stream
numTotalBits
dictionarySize
inStream
outStream
inSize
outSize
UInt64
properties
numPosStates
posState
numPosBits
numPrevBits
prevByte
matchByte
windowSize
Buffer
BlockCopy
distance
SBOqnKcXO
Replace
Convert
FromBase64String
GetType
InvokeMember
BindingFlags
Binder
NJqfG2GcP
joZW32UFL
IContainer
System.ComponentModel
Dispose
IDisposable
EPDNNbxTL
Control
set_Text
System.Drawing
set_ClientSize
Container
ContainerControl
set_AutoScaleMode
AutoScaleMode
RUfUCGiYR
ResourceManager
System.Resources
KcFm1QOar
CultureInfo
System.Globalization
get_Assembly
SettingsBase
Synchronized
Default
JplwWPTpm
Module
B4SYPN55QXxaZ
typemdt
FieldInfo
ResolveType
GetFields
MemberInfo
get_MetadataToken
ResolveMethod
Delegate
CreateDelegate
SetValue
get_ManifestModule
BeginInvoke
IAsyncResult
AsyncCallback
callback
object
EndInvoke
result
iZd1JP75R
E9mEaIwVQ
S3v92Vn8J
RSACryptoServiceProvider
System.Security.Cryptography
DOqz3xqxp
Dictionary`2
System.Collections.Generic
DNOqftjRjZ
mDFqWTqvqH
b0qqUQpR33
LudqjLQrg7
txqqBy3MQq
nqCqYubXgq
QDtq4CZgZE
JHdqoR6mIS
t7NqMmryRH
e9SqQT6VQO
zm3qyVavIy
KVeqbLeQM4
UEpqXZdqMc
q4XqRgv6B1
Hashtable
System.Collections
zKYqwgB69L
ApUqvPEHhF
hT3qmofYMM
A92qPHXOOp
AthqNlLovv
IewqOfkT9g
UChqamOQIf
zwl7Rw6A0
Kku0ZWxkm
fmCqhEjSZC
TbTqdEtlQk
LDS23FQRv
GeWqg77bfE
SortedList
QWXqiq6I0B
TtJqqKnW0N
wREJkGiae
SgnqIt3U5H
i2Wq3M5Qcf
fwfqcPfYiB
set_UseMachineKeyStore
T30YPN5I1315l
m3QONZtok
GetBytes
pqCg8NG9E
UInt16
HsfjDwB8D
uG7BLOQx1
kLVY8Dj79
RAG4axEC8
XwSPoqJWM
OmNaUmIPB
SymmetricAlgorithm
AesCryptoServiceProvider
System.Core
RijndaelManaged
Activator
CreateInstance
ObjectHandle
System.Runtime.Remoting
Unwrap
I7DvKHFsn
CryptoConfig
get_AllowOnlyFipsAlgorithms
RQfhCq43J
MD5CryptoServiceProvider
HashAlgorithm
ComputeHash
C4SQohs34
TEgoGBJIp
TransformBlock
VVpXGrfF6
BinaryReader
get_BaseStream
set_Position
ReadUInt32
k4xR3BpO3
ParameterInfo
DynamicMethod
System.Reflection.Emit
ILGenerator
Monitor
GetManifestResourceStream
ReadBytes
get_Item
get_Module
GetGenericArguments
get_IsStatic
get_FieldType
GetParameters
get_DeclaringType
get_IsValueType
MakeByRefType
get_ParameterType
get_ReturnType
GetILGenerator
OpCode
OpCodes
Ldarg_0
Ldarg_1
Ldarg_2
Ldarg_3
Ldarg_S
Tailcall
Callvirt
Exception
LZyiYYBv3
yy5M7cr5B
y8ycw3MRI
eCt3YPb2q
ICryptoTransform
CryptoStream
CryptoStreamMode
xFgdjJLpY
Encoding
System.Text
get_Unicode
GetString
zsAInGka0
RgUCGIS58
s3TsPocuk
Marshal
ySdDZJawu
get_Location
Exists
GetName
AssemblyName
get_CodeBase
ToString
GetProperty
PropertyInfo
GetValue
eER6hha8u
LoadLibrary
kernel32
pMySdLJSR
GetProcAddress
a7Z8wHcIp
Concat
GetDelegateForFunctionPointer
R3Wxw72q0
kJ0rnvrKj
fCwLaGORT
K0xtIiT8P
rpuFoy1R2
umLocehuEC
d1gKwHH0g
FileStream
FileMode
FileAccess
FileShare
vr3nupHpj
LwHAeKtj4
ToArray
qXmlGJYBp
set_Key
set_IV
CreateDecryptor
cWbpdcFKt
lmPHcdYkx
SZmTojia9
n3d5Njw0S
Ckre6ml7O
AyXGHTP3o
OHruaGHnS
bpxVjyAdD
PsskHKgfT
DBjZhsTPx
j0In6Cq6UAG95Qe3Ru
MSfU3TRarXeKUP4gUd
BBD01Pi8QNLRgBiyYK
L86fa4mgNTIsVaSgiv
hTpym3GBpQR1TF3tYE
g3bcW8BDiX9I5GpeAx
xi4pn8KcC5CdteY9c2
AgCq5Wskf7oUuBY7Tf
higtl3tF2ioHlcE4OU
GetPublicKeyToken
nVgilRZWr6YsfTeJwR
cVAbDhjjYAQQujfLen
CipherMode
set_Mode
dMipxggKWQAFfDXq71
vKQ3e19RXlL4ptEa7R
QN5gQi6WOu5VJPHWWr
BQZQbEnGA6wqiUXWUd
FlushFinalBlock
jkIMYjMODQcHchTCYs
sImdcCDE1KOYhe0Zq1
m4Y4KlQkYsIruVtDe9
SmNbdqkraRWOoLCdIX
kZLJgi7JDkDk2LfhsV
WAkstZxRSsHormL2G7
Oy7wuEA5TmCfGQqfyD
j5s34IU6Tlobyv4ap3
lb2qdF4gjJLpYssAnG
yuMqCASlXP
CreateEncryptor
ToBase64String
classthis
nativeEntry
nativeSizeOfCode
KxWqs0ltsr
eqUqD1DtYC
Dm7qrqiimU
KDikMXewCI
RQXq6v5n00
gO1qS5pxZf
KSIq8ES53I
ReadInt32
TvbqxCRkJR
hModule
lpName
lpType
lpAddress
dwSize
flAllocationType
flProtect
hProcess
lpBaseAddress
buffer
lpNumberOfBytesWritten
flNewProtect
lpflOldProtect
dwDesiredAccess
bInheritHandle
dwProcessId
value__
kN5qLpKYmb
zM5YPN5zv2VEn
$$method0x6000317-1
$$method0x6000332-1
$$method0x6000332-2
$$method0x6000340-1
$$method0x6000340-2
$$method0x6000353-1
$$method0x6000395-1
$$method0x60005b3-1
STAThreadAttribute
GeneratedCodeAttribute
System.CodeDom.Compiler
DebuggerNonUserCodeAttribute
CompilerGeneratedAttribute
EditorBrowsableAttribute
EditorBrowsableState
UnmanagedFunctionPointerAttribute
CallingConvention
CharSet
FlagsAttribute
Ou0bCANK2FGFdnHGDr.A0XElHZ5Jr1gaJiZ9J
C;Ndewzx5u'fqWR3vt|bp%kK).resources
NNnBbBb88837363.g.resources
aR3nbf8dQp2feLmk31.lSfgApatkdxsVcGcrktoFd.resources
WrapNonExceptionThrows
NNnBbBb88837363
Copyright
2023
$2b9d9599-2eee-4dfe-b2c6-a24205e13027
1.0.0.0
.NETFramework,Version=v4.5.2
FrameworkDisplayName
.NET Framework 4.5.2
Confuser.Core 1.6.0+447341964f
3System.Resources.Tools.StronglyTypedResourceBuilder
4.0.0.0
KMicrosoft.VisualStudio.Editors.SettingsDesigner.SettingsSingleFileGenerator
11.0.0.0
C4Sohsg341EgGBJIpE.jn7DKHOFsnVQfCq43J+mYI4I9BpZyYYBv3Cy5+Wcr5BCY8yw3MRIUCtY`1[[System.Object, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]][]
SUsSystem.Runtime.InteropServices.CharSet, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
CharSet
E}fLdE
g5|aVm
M5e)V
Ux3&r6
@R_KHn&
R*.@\_
n^#HrWc
CJ=3$4
LXY7)
8Y@l/h
KGi2g)zMF
&~;UsMmX
DH*AM$$
m^tX5e
p4TgZf
v`nDmW
Fu,ezM
X|V;~itq
-gW/$
dDg}i*e
q]k,;G
83*m7d
M1FTrgx
zg-(C3
^e</T<E
X3XCF2
#jNwb@"WG
L+uUT4
h_Y14/
IIYdbv
SvVW:Z@
<1OyHh;a
gv21jb
&&EGEZ
3;hA*^
<T6*AU
F#O|]B
~'LM_"~
#F9=}=
P^l2Lk
zdPTt7
E#0'**
#6@ EE\5
kfD%NX
!BG;(K
H/:YYD
VBIRg}A
S7C$ P
7]F"'{
dW!4oG)
a%SETvm5U
n?uP-*
nlgSS1
glU_g-K
DsgIs)
;J-JM9
p;oVNmY
+VH)P9
9*^%3
9,CIR}
g5Zm|/J
g+3|"R
TwKB6
&ggk0P
vK-7??\
u~d@m+@:
:3#\QH
sWEy!jZ
`yY{mN
)ss[*,u
W*9kP)
pfmbsRU
m6.hPl
aLM`#C
%;h=P&
]<P{dK{
%Ff\te
r"_5<$
}R~%~S
Xj"5nSU/
L7Tnw|
4U;m3Z
op5rM-#q
y\^30B
Q@>;d7
d F=2S
XrB_5+
NLa-+A
zy p]i
nz+R'c
=W+rFd
#SC;dL9
O2k6ZC
)JB46IH
oA~BB7
'K,]Yz
E.-hZsu6d
dQ!(wk@MKS
T/8\&[#
:@s|nG
W6N?PP
_o7kh=|
Yye!Vg
\vNS$b
~*OI%i
-7GSWu~$
de~.k\
$l^?s;
L/A#9v
e@8PpV
bjUvM@
.9p,F^
,'i2Iucu
QPYf`30
<Fb"u7p0
r4ID|g?
ZC]%bl9
^rMTC3
!S:U":
@*B>B5
w")`MJ%
qlWR)d
^|pq#*]
"W#bYM
/K.irc
SYj6|,
><Ti__1 ?
V $e+rc
Rf ="gwcc
h:adv5
f7P0u~
u`OB[[w*
/)`.Yk
+\Fux<
NE\Lj>
{fUi H
9%WpfS
!-P5Xo
q2i/^e
~1N&fU:
wtK*8ea
U}$cFCE
6n>azfPL
o%K8.v
%BxNAd
T9R`>x
Wm/H98j
GM|>_F
x"?CP*
Kx18AJ<
K!9sNq
{z#c?_h
7I@z@
{[$o?E~>
@&@dtl>
,e%?|~sti
&6J]4j
ov^3d9
\Cn\OG
wvh)ex7Z
pS}94{
zNI)"#)
L^Hzi9
C`}[l>;
XBCP'v
F0w`c%
}vxS{_
b|-Jy':Q
$KcxV/
C>p:c]<
!2ZC;S
_<BPzN
+fgt/@
N&~@(T
\z'{/7
FQnpW|F
an^@8kCU
YAmV_4A/
'Xd+,OM[
E,Q\8)
(NKhcx
("IhF9x
WYT<3O
`5gCo\
Q&eo4Hfp
v%|5QZ
i8BH1G
B|?6.N
QymOF&
k5atP)|
&+eYD6
%VNi]fge)m
W Ps"^W
&v9\Up
.kV?kP
rv$FWM
}Shnvb
TTnbIIW.;'^=
n?#/1C
tQXmg7
J.gP<t
,ba?~xC
VKI'Kt
^n8c24;
W#_&pc(P`Gva
x*K*k{H
d`|V]D
- !jzU
\F5{Vr@%6~I
<%y;|K
Ey_y|:
iLJ]4W
IZt|l%V]
9QzS'J
=VF@^6I
S nIuFq
_r[}R\
$El*-R*
:x)pKN/ohiz!^
Rc.w /
ho{m:6Z
"+d*J0H
N-l{XTG
[2jqYF
-E5B!r
vj8I(kzh|
<Kwz;{n
B6M"&81
+^~cn.$
E2*;;r
It2m1Q
O%mY~O
yfDH{Q
{`N$5EB
I; "t8
xtn#%P:
[ui_mWk
v1'9>?
>?KI.(
MUsiaxJ
#4M`{U
Li|Xk;J
&3'-Y3 H
1&{W)gu5B
qN9%P?
QAHb^F
uzvAYe:
aE"/ui
1in3f|
PZ `GN
,`ne\0
y\WS?FR
[c+sfp
DUJPIk
0(Ak*&
xT}i,
wi=\|#R
m6x1{v
I/X[;S=
Z{cu4D
=O+,p4
v3{rZq
b\x!U1fh
AQE~Ve
iO-Ie||
n$)7[^
%n(N5-
[:Bp_R
7LcO.dJ
KQ#@?&
^ka|ZA
u[y$G[
"tBBV7%
(%o.q"
<wYe!r
25z(U9b
b6~.Yg1`
93JDD*
x=YB#[
7bxMEG
@).85Ys
5P(#Lv
tgGAgL
FxZ83j
=EcQ+y
<E{=3Q2
f3Co/{fh@
`L[%w3
Y)G@%D
:3,q=<c(
^JT| Y
pLCb-g>
yGzCOA
<9aE55
G2'$3m
I2Ap+>
ex4M$2
R4V?-^4
H/1MOg
4;n3sO
/0'(Kh
(*ftR)q
s("(%Sw7
'a_>It
:l@.b;
EQAD0pC)
p8-a4;
RMs0R7
ft+M+
&"DNOs
TAm0~,
6UYPNg
(vbp{m
+U:"'f
E(?e}7nMz
fO@e'l1b
]VN\Ht
-Wg-~]0
GT]s2Yk
}pVxi_
9Yz!W>y
aTVS~q
\J{4K8c
xb+r*2
03QY()q*
P%T#xUsi
W0e%?"m4L
zT)pb1
GWTE8}
UH\>d,
"~?X21p9
|4a/}U
?87Id&
!b$7G'
_FEHgT
C?M{y\
*!$oFW
iwg'\t
P4B~\W
&#pB5%
k/^N#,
MM/00=
HLg;V,
mqV0&J
(ry94=
Cg$RC5LZ
{2a8Ij
vW:(IcVys
upm\2u
LhG{e7
Rx9dV=D
kHYd"M
sZ_ppl
u~q)t*+6
EpF%DL
/*$}`:A
tXySmm
qm1}gE*
tV2rP)c
#q~z`F
+S$"4t
'VufF]-
.z,FR{
T<1g&7
Z1wr;L]
Gs$RKi
xT24hK
Op^+W^]
QdRe)s
2$*`-'
TM|&d+(
4g/+h7
?xeP(F
;V] "km
3psiRR
jE^14/QCr
oq[T=;
YdM)5/
>O:"/y
VE$f;~
g0E,dm
]GRt([
f1H1;0Fi@
),`mfbQ
<Yrg-]
bct!7K
J5@n}'B&&
To)!3D
| )V6Yw
/'xGoC
V.q/9U
(Zm; z
:_[%yQ
CMG@EL
c.Jb*I
jyx3Wq
dg81B2
SiCeoPL
!f>w#:8
&lL-ag
A3cKf|
&z4i]ir
tE7:n0
?*,\1`
`u4\#
72 qK/
*1ivW
%F"5l'T
"fae'-
_l7N?Qo
*QPqT=
_Na~z@Ol
PoDs'5
3`P5;P
1X*]wLN
'#'k9!
uohbHM
Vr\Cp&
}7wELvG
o%Jluo
wZgMfa
W{-|{p]
8]8iPD|XG
J!qoV:yCpUF
N8=PaX
RD~O}hs
o2+<:fex
\ +{TQ
(3NyB*
{x{48&
.(OqxA)e
E7AlU.!QW
K-XUh[
.w5Y:=
J7 UE3
AZNn]9v
xZWmr9
zq^]<rs
,^fsP:
o;oR3=]]{
MqDn#s;L
mVGd?*
.0g`DOm
tpm'\&
h]Xn.f
BjQ![v
"!{e`H
fE|m(2
Rn]aUq k
cnaXST
r{\X0I.
+(5p=h
P/jc'2>
aan=4[
[&\9JNY
bdE\|7
+H~b/VE
WjD<^B
.BA,oLhEk)
bz;Gme
sifjpc
Mxr[\~
S%~n(G
1#\[#8
4[%vNg
i_V<dDL
*!C5>#
ZHE9s
NrfS'ab
h"ZUG`
eB;e6u
Stkbm&C
]l{\Zw
x=q^2#
l/A'DNIC
Wx1|+.
IPGihS
OL4Si&
>)+ZO&
}p<yW$
J?zdJ/
(vJA Osa
KbGlk~
]H3bP)Z0
gPe~L|
kV.[F4q
Bf=\P9
V3wsvJ
'/lwOi
+O~|Q4
^o9flC
#t#&%uL
o;M>C#
2_'"v+
-S9+5|
(~`$Q2
,hb/#p!
~<ER2K
YN4D@TPNX$)
8b9)Q/a
N@LI1m
/=]c}$
be<0=t
Z<n=\b
[9uhpD/8m
cq{jKY
iaME9Kaa
TvIX%H
|[5l)h
NbM&h.
D' twd
n)3X+c
_wD-1
bmIl{z$'8
B])s],D
#0mS/gt
fJ-]c[43{n6
Vu*"`S
uhCKCE
*)*&K/2$_q>)
D'ca~%
}uC-PE
_6]/eo
ZtM~i&
,u>@)3
^)LLD\
4Tm'ygZ
!Wru3SB
69Sq8
^(sggK
[z>b
, WmQ`
IvBcp<
0s^\`X
'P3Gup
LJnorfY
S#=X8
=`^tX7
Z7fnryS
NP VV+u
gGT;;}
,oJG>y/
Iq:'<X
r[glS7
B 2a\:[ap
nTJ" =
%'*(4A
c"Ufa$
orlZ}J4
.W;U^L
sA'Q*
1*nKI
^\9->`
m#fAN;'Y0?.
7|2O+3
#5u]hV
Zj[Ijhr
}{~MpG
.a;b:f
m!~:YB
-GLYaG
u9P4'
"JoFh\
$4:Z^t
tq)(~,
E]/DqXH;
~C1SiC
Jkjido&SO
bQD6I`
5gFkn
cIwPfb
2<#+u>
*,2hbMGOp
.IAy25S
XDXvp+v
,(@daAZ
1b%_1MZ
0<<yYV
xAG`o
?'5DF5=X0p7
:8oa|^r
;7Dz?;W
;,VQ,l
'Hv\!<
+*0V6>g
;3OFnB9
bfZz,b
x}qJ)5
txDpkxt
W8`#%A
A%)d-1
CVkT3L
rL^/SG
Z\9`y{
fT7/,W
k&GI70
_2X_)JW
{;qw\$W
H,X/C\
0B8u6X
:W}/F3
T/3Ccq
s _i+ka
)\NRJS
uGzq cORg\
}zBq:q
LQ9l8N
cG./w8
+)Wl^u
w _nU_^
|$Y1I/
v3bnPS!
H4UsMuy
C?kZLA_
<R]417
2u{9*K
Y%#IUK
8V>/%-
{6F/XB
4oR/?D
R$U@qr
N7eT3i
YLCGa
x|<#Et[
?yp!s#7
/Aed]1
bcG^#`,
?"URdC
37<.P~
Ei~+.R
D?|-_4
4J lj%0o]
,h<1[?
HVN .kH
He((/J
TK#P$N
pzS/&<
U)di-;
D:_]Td
nwb;_2
?2QVbF
xV)DiW%
<&#c^o
]nPn7e1
M8gnng
h1aW*97
$sQxC|
m@1~|J;{
/6al$
VGC.K6
0s+WJ>
r%[JXlK
d;aydyM
s9"fWXy
Ch~&{"%
M$PHSd
)'>B;gVe
nCFz?o
|3LD=[l
D&_y5hhzKM
~.p`t[
N]8&nMq
v6mi?+
e]8@yQ
!0:*C<
~FYx,)
m.|Hq[#
Xasz/#
gPO`,ET
n;I*a{
E|/7t#
._,4UI
(SyG9X
$}]:G>
q=da=3
ar~I+R
P$0&_,m
OxYX3A
Abn{q7
]N8yGFhT
aCto^?
aD/`mt
]W|%Cdw
Z1VpREZ
(9c,Cg'
@$bf[o
4@fXM@
*mT7qT"
"Yap]A
dvA|S\
x-.%11
,T!UH14Y3
qTzx>Y
!*?LQ8)
jMR|a6
p_4fW,d
9EdB-y[*
J94/>`;
p&a@,Y
c>XmXd
~q:kf3
Bk%Ww
.MfR'E
]CrdQy
8~r+G
n.,Ben$
$s[lvm
SZwf0p
\TP~71
ZkNEr
1V`Dk?
!szbRL
[t{`&I
'e2Km)
$ $mPZ
d$#~!6
X]`T/.
HO]'Ene;
(>:H&2
T_&/Ut1m;@v$&E
J,Nn=y
,+xW|}:
xRoM8Gp
,U`8%+0$ZK
,_UktU
ES.gL;,
;y?xJ+
;EAr|(4
F1,@x\m
x\~9":
vF:ijh
Q28iDy
[7n"qa,
'S"\Iq
2KzDO9
cpkCU>
4do?78
$F~J(B_
+Q$Gk"
?,<MKX
:s1D7I
droW,Z
2^D4qB<
_.e)QH
{:&j"Q
?5J5\}8b
&Fl%H
$A=4s3TF`
=1*MV[R
I@Y6,v8D
L0VawA
J{:`oN
!2yi/W
U.P%fT
kw%RRQ
blQ0|=
s,8@;5
91oY<W
q2Xd15
l1zd6K
O~T{ q
+8P-8F
#X|(0P
Hxz4X9(
*~KoQ$
E:KN_4
aS7yoU\d(
3usCrK
-_F}o^
z#j]LqVaG
lIYBD:;
l\*i5m
o!|Gd}
sUohzgO
Lk)=tv
`s=GW{
1=|O5R
(ZS@\B\
/3Fx=9!
C!B-j-L.
mZ%%s.o
I.wR}1
'Z6Dp(
iv{mgL
=1dEHj
fIwk>T
rRx2Z.Q
Q6qQB'd
S\s'0?
5QJUWd
dgL}(P
>)%y7aP
Z[vP039
G5nTm5
O2)KHo
>t;]fkG
&(ote%&|
0|O'~x/`a'/
;0o$RD
Wo69x:
v 1|fe
:_p?XM>RH
LOt|lV
sCf8<L
mC'#MC
Zo_@8S5v
b(hor%S
T:B@wkS&
rs!U%U
`-<jR]qu
DsXNY$K
etk!B}
a7'pL:
`!:sM2
2O>xGSg
0j&b-<0
w7()H
?0oW8m
jx;wx#
P)ZA1;
rFFZH~
(W:ym7k
vyASig
K!.YM'7'
W/|tS'D
v!'I;o
0k8^*R
}FI1\S
(ont(8(!/Maz
9G|d(faz0
PM?jBl
@ 29Q[
vV oqo
a)i:P
/6X.xw
dJGsC;
!2/Bc,
R0B9H~
UFTW%z
;%56*q
*]+-N.t
o[wWNH
UIjG{&}F
ymAV"]
;/*w;
VllZ^Ry0
2x4a~Hk
njwO`P
n$<Y;O
gx,Mq1,
IiSM3l
f$c:^hvc
m+ /M#
vf'f"q
%[*>6)
)Uk {X`
Rylvq
2govj5+
WT^RK!z
_&]2*1
=/MQ5u
ail=M32
?>jkXi
LRmw&a]G
]VufUx|
\b3$x
awX-v .
5^hnp;
$ikr59^}
6SQ\07
30]o]P
t%"G9U#
=u0z* 70
<^a%T
sjH_AsM
{#j0:vB
Qz&/{l
vtsJ!BP
>,e?j~;
{?xNogd
f`(txi
&]fYH;>
{#TXn%~8)
ypq9'5j[?
nb'+3Y
uA{7kx7
y;bEK8uB
Qkw3~
[|mXq
)iL[\f
y+NUlP
I~HEprK&`zR
d}G-9\
D}`o[yU
:]8E|
qk]q(|
tf<'wv
/rlRPw
58gD6|
Y1S8nb$
\#D"-q
B<\BM#m
E03O+U
Ab;5)
Om9>6t
IlbXyu
[rR%;y
,kmla@,!
ZL2Dj(
&p=%{:
>8x'T~A
4?[8!d
't~,tMk
jHI)&\
8zv"c!D
OV38~g!"
aC<57e
PLqQiU
\nm2y@
ZdPm<XJ
(5s(vK%jM
ULqh0B
8^sd^E
)#7rs+a0
]^7"~@
SGh\ {
Z9`!X}$
z55:p=tK
PZ;wph
Bmc!GE
!=Bh3]
`F<0b!u+
1%W5v[X&I
lMVI.5*
!zC?-y
iK~Lej-
&Q,qy;8
tpUz+m"
]@Uhg)D@
G66up\
+D#vQY~
]U4RC8
fSH-p
p~WkD8
/ytsFT
+o."1w
0uz|-0
}{d|q$
s"1p>O{5j
I}amGL
x:PbnJv
6JRvxi
!DI*vO
3E5 fv?Z
7+fj4N
Df)5fvG
JD$`T`
\@JPJ~
W3n*O_
Y"/|q[l
/,#LPjk
O76~!D}J$
I[NY5ZB
#A7A::
Z#>!H6
2&0&I3
3CF_6/S
=rHg$nf
$Y&K*O
^d;|L(
c2 xA<
sOp6i
BcIKg|
))bT]bw
q`T8J|/+G!
.U{M?N
=A2B&r
'eyjO$
~u"AR9
z}bW9O}
0D;k3"
M$79^{:
&;C59}
W>Fjr|
HzkwI%
kqcu3&
n(z&Py
6s.x-C
bS@-Q3
\&qeNw
)z4ttD
zJj1/D@
a|1'9rF
2~{ZUZ=
>My2OGqN
]hEa)L&5
)qcSBxql:
M%$$!IX
[b7ekA
z@KYFN
.)ijg]R
LX/3OFx
oiFrayQfM,q
G4JR$H
eM`${J
xL.Ed)
6[K=`47w
F6'hBi:
/&<Ewx
N0,&|
S%G'9J
]]%RA9
%{Y9f}
Gh`epN
GI3]p8
.YIv=^T
n>%PUh~
i`5@MT
*Tj{H!
Y\Tk6H
;=)ZW*
zsucp?
f};(]B
B)FCzlFH
5bP#Q9+Za
~V46!$
;",>`%
p)u~q4J
-!f?p)I
f:uUO6m
>I#C'/
v~}uxIR
]`0Ml\Z{
1@R(M9
e+#*Q-
bvNuog@
~b.:2u
}}]%L)zC
mt<GB%
L:]7vF_
pS_n&0y
e*I)LL
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
fSystem.Drawing.Icon, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3ajSystem.CodeDom.MemberAttributes, System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089mSystem.Globalization.CultureInfo, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089fSystem.Drawing.Size, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Icon
IconData
IconSize
System.Drawing.Size
System.Drawing.Size
height
ISystem, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
System.CodeDom.MemberAttributes
value__
System.Globalization.CultureInfo
m_isReadOnly
compareInfo
textInfo
numInfo
dateTimeInfo
calendar
m_dataItem
cultureID
m_name
m_useUserOverride
System.Globalization.CompareInfo
System.Globalization.TextInfo%System.Globalization.NumberFormatInfo'System.Globalization.DateTimeFormatInfo
System.Globalization.Calendar
System.Globalization.CompareInfo
m_name
win32LCID
culture
m_SortVersion
System.Globalization.SortVersion
System.Globalization.TextInfo
m_listSeparator
m_isReadOnly
m_cultureName
customCultureName
m_nDataItem
m_useUserOverride
m_win32LangID
%System.Globalization.NumberFormatInfo"
numberGroupSizes
currencyGroupSizes
percentGroupSizes
positiveSign
negativeSign
numberDecimalSeparator
numberGroupSeparator
currencyGroupSeparator
currencyDecimalSeparator
currencySymbol
ansiCurrencySymbol
nanSymbol
positiveInfinitySymbol
negativeInfinitySymbol
percentDecimalSeparator
percentGroupSeparator
percentSymbol
perMilleSymbol
nativeDigits
m_dataItem
numberDecimalDigits
currencyDecimalDigits
currencyPositivePattern
currencyNegativePattern
numberNegativePattern
percentPositivePattern
percentNegativePattern
percentDecimalDigits
digitSubstitution
isReadOnly
m_useUserOverride
m_isInvariant
validForParseAsNumber
validForParseAsCurrency
Infinity
-Infinity
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Size
height
2M>1fC
@wRfhn M
NNnBbBb88837363.pdb
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
<assemblyIdentity version="1.0.0.0" name="MyApplication.app"/>
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v2">
<security>
<requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3">
<requestedExecutionLevel level="asInvoker" uiAccess="false"/>
</requestedPrivileges>
</security>
</trustInfo>
</assembly>
DigiCert Inc1
www.digicert.com1$0"
DigiCert Assured ID Root CA0
220801000000Z
311109235959Z0b1
DigiCert Inc1
www.digicert.com1!0
DigiCert Trusted Root G40
]J<0"0i3
v=Y]Bv
http://ocsp.digicert.com0C
7http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0E
4http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0
~qj#k"
(f*^[0
DigiCert Inc1
www.digicert.com1!0
DigiCert Trusted Root G40
220323000000Z
370322235959Z0c1
DigiCert, Inc.1;09
2DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA0
http://ocsp.digicert.com0A
5http://cacerts.digicert.com/DigiCertTrustedRootG4.crt0C
2http://crl3.digicert.com/DigiCertTrustedRootG4.crl0
DigiCert Inc1
www.digicert.com1!0
DigiCert Trusted Root G40
210429000000Z
360428235959Z0i1
DigiCert, Inc.1A0?
8DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA10
[K]taM?
SA|X=G
http://ocsp.digicert.com0A
5http://cacerts.digicert.com/DigiCertTrustedRootG4.crt0C
2http://crl3.digicert.com/DigiCertTrustedRootG4.crl0
jj@0HK4
DigiCert, Inc.1;09
2DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA0
220921000000Z
331121235959Z0F1
DigiCert1$0"
DigiCert Timestamp 2022 - 20
Ihttp://crl3.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crl0
http://ocsp.digicert.com0X
Lhttp://cacerts.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crt0
DigiCert, Inc.1A0?
8DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA10
211213000000Z
250108235959Z0
Baden-W
rttemberg1
Stuttgart1 0
philandro Software GmbH1 0
philandro Software GmbH0
Yd?O_{
Mhttp://crl3.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crl0S
Mhttp://crl4.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crl0>
http://www.digicert.com/CPS0
http://ocsp.digicert.com0\
Phttp://cacerts.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crt0
$Ck&Hm
DigiCert, Inc.1A0?
8DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1
DigiCert, Inc.1;09
2DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA
230328144258Z0/
8q`je\
DigiCert Inc1
www.digicert.com1!0
DigiCert Trusted Root G40
210429000000Z
360428235959Z0i1
DigiCert, Inc.1A0?
8DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA10
[K]taM?
SA|X=G
http://ocsp.digicert.com0A
5http://cacerts.digicert.com/DigiCertTrustedRootG4.crt0C
2http://crl3.digicert.com/DigiCertTrustedRootG4.crl0
jj@0HK4
DigiCert, Inc.1A0?
8DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA10
211213000000Z
250108235959Z0
Baden-W
rttemberg1
Stuttgart1 0
philandro Software GmbH1 0
philandro Software GmbH0
Yd?O_{
Mhttp://crl3.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crl0S
Mhttp://crl4.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crl0>
http://www.digicert.com/CPS0
http://ocsp.digicert.com0\
Phttp://cacerts.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crt0
$Ck&Hm
DigiCert, Inc.1A0?
8DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1
J7G[*A
K(W{,w
20230328144259Z0
Symantec Corporation10
Symantec Trust Network110/
(Symantec SHA256 TimeStamping Signer - G3
VeriSign, Inc.10
VeriSign Trust Network1:08
1(c) 2008 VeriSign, Inc. - For authorized use only1806
/VeriSign Universal Root Certification Authority0
160112000000Z
310111235959Z0w1
Symantec Corporation10
Symantec Trust Network1(0&
Symantec SHA256 TimeStamping CA0
https://d.symcb.com/cps0%
https://d.symcb.com/rpa0.
http://s.symcd.com06
%http://s.symcb.com/universal-root.crl0
TimeStamp-2048-30
Symantec Corporation10
Symantec Trust Network1(0&
Symantec SHA256 TimeStamping CA0
171223000000Z
290322235959Z0
Symantec Corporation10
Symantec Trust Network110/
(Symantec SHA256 TimeStamping Signer - G30
?'J3Nm
https://d.symcb.com/cps0%
https://d.symcb.com/rpa0@
/http://ts-crl.ws.symantec.com/sha256-tss-ca.crl0
http://ts-ocsp.ws.symantec.com0;
/http://ts-aia.ws.symantec.com/sha256-tss-ca.cer0(
TimeStamp-2048-60
U){9FN
Symantec Corporation10
Symantec Trust Network1(0&
Symantec SHA256 TimeStamping CA
230328144259Z0/
/1(0&0$0"
)Z71ZDAZ_QZ_YZ_aZ_iZ_qZ_yZ_
.[d.Sd.{
.+d.CJ.Kj.3d.;dI
&%'%(%)%*%+%,%
C;Ndewzx5u'fqWR3vt|bp%kK)
System.Core, Version=3.5.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
System.Security.Cryptography.AesCryptoServiceProvider
73vpcTmfhZxAq4wvSc.XVmxeAj0KHUOKInRM0
{11111-22222-10009-11112}
Ou0bCANK2FGFdnHGDr.A0XElHZ5Jr1gaJiZ9J
{11111-22222-50001-00000}
GetDelegateForFunctionPointer
file:///
Location
ResourceA
Virtual
Write
Process
Memory
Protect
Process
Close
Handle
kernel
32.dll
{11111-22222-20001-00001}
{11111-22222-20001-00002}
{11111-22222-30001-00001}
{11111-22222-30001-00002}
{11111-22222-40001-00001}
{11111-22222-40001-00002}
{11111-22222-50001-00001}
{11111-22222-50001-00002}
$this.SnapToGrid
$this.TrayLargeIcon
$this.Icon
$this.Locked
$this.DrawGrid
progressBar1.Modifiers
$this.Localizable
$this.Language
$this.GridSize
$this.TrayHeight
progressBar1.Locked
&GRAPHICRATING-KOLORIA-FILE-PDF-ACROBAT
VS_VERSION_INFO
VarFileInfo
Translation
StringFileInfo
000004b0
Comments
CompanyName
FileDescription
NNnBbBb88837363
FileVersion
1.0.0.0
InternalName
NNnBbBb88837363.exe
LegalCopyright
Copyright
2023
LegalTrademarks
OriginalFilename
NNnBbBb88837363.exe
ProductName
NNnBbBb88837363
ProductVersion
1.0.0.0
Assembly Version
1.0.0.0
Antivirus Signature
Bkav Clean
Lionic Trojan.Win32.Noon.4!c
Elastic malicious (high confidence)
MicroWorld-eScan IL:Trojan.MSILZilla.19869
ClamAV Clean
CMC Clean
CAT-QuickHeal Clean
McAfee Artemis!99E770CD68E7
Malwarebytes Trojan.Crypt
Zillya Clean
Sangfor Spyware.Msil.Kryptik.Vn13
K7AntiVirus Clean
BitDefender IL:Trojan.MSILZilla.19869
K7GW Trojan ( 0059d5381 )
Cybereason Clean
Baidu Clean
VirIT Trojan.Win64.MSIL_Heur.A
Cyren W64/MSIL_Kryptik.IYE.gen!Eldorado
Symantec ML.Attribute.HighConfidence
tehtris Clean
ESET-NOD32 a variant of MSIL/Kryptik.AHQJ
APEX Clean
Paloalto Clean
Cynet Malicious (score: 99)
Kaspersky HEUR:Trojan-Spy.MSIL.Noon.gen
Alibaba TrojanSpy:MSIL/Kryptik.d261be15
NANO-Antivirus Clean
ViRobot Clean
Rising Malware.Obfus/MSIL@AI.98 (RDM.MSIL2:qPEuXTFhB/nVsIU2rVrqig)
Sophos Mal/Generic-S
F-Secure Heuristic.HEUR/AGEN.1325558
DrWeb Trojan.DownloaderNET.345
VIPRE IL:Trojan.MSILZilla.19869
TrendMicro Backdoor.Win64.WARZONE.YXDFCZ
McAfee-GW-Edition Artemis!Trojan
Trapmine Clean
FireEye IL:Trojan.MSILZilla.19869
Emsisoft IL:Trojan.MSILZilla.19869 (B)
Ikarus Trojan.MSIL.Crypt
GData IL:Trojan.MSILZilla.19869
Jiangmin Clean
Webroot W32.Trojan.Gen
Avira HEUR/AGEN.1325558
MAX malware (ai score=82)
Antiy-AVL Clean
Gridinsoft Trojan.Win64.WarzoneRAT.bot
Xcitium Clean
Arcabit IL:Trojan.MSILZilla.D4D9D
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Trojan-Spy.MSIL.Noon.gen
Microsoft Trojan:MSIL/AgentTesla.RPX!MTB
Google Detected
AhnLab-V3 Trojan/Win.AgentTesla.C5436496
Acronis Clean
BitDefenderTheta Clean
ALYac IL:Trojan.MSILZilla.19869
TACHYON Clean
DeepInstinct MALICIOUS
VBA32 Clean
Cylance unsafe
Panda Trj/Chgt.AD
Zoner Clean
TrendMicro-HouseCall Backdoor.Win64.WARZONE.YXDFCZ
Tencent Malware.Win32.Gencirc.13c67476
Yandex Clean
SentinelOne Clean
MaxSecure Clean
Fortinet MSIL/Kryptik.AHQB!tr
AVG Win64:RATX-gen [Trj]
Avast Win64:RATX-gen [Trj]
CrowdStrike win/malicious_confidence_100% (W)
No IRMA results available.