Static | ZeroBOX

PE Compile Time

2023-06-18 01:50:50

PE Imphash

f34d5f2d4577ed6d9ceec516c1f5a744

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00002000 0x000c04a4 0x000c0600 7.15385947475
.rsrc 0x000c4000 0x000004d0 0x00000600 3.7036281589
.reloc 0x000c6000 0x0000000c 0x00000200 0.0980041756627

Resources

Name Offset Size Language Sub-language File type
RT_VERSION 0x000c40a0 0x0000023c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_MANIFEST 0x000c42e0 0x000001ea LANG_NEUTRAL SUBLANG_NEUTRAL XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminators

Imports

Library mscoree.dll:
0x402000 _CorExeMain

!This program cannot be run in DOS mode.
`.rsrc
@.reloc
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADPa
orRmFc
,Y.]0D2[4A6O8
@rB7D7F2H!J?L5N|P7R#T`VdX-Z)\(^7`
-T!P#Q%N'\)R+-H/@1
5B7J9O;T=J?8aQc
[,]k_Sa
+X-\/E1Z3@5N7
?sA6C6E3G I>K4M}O6Q"SaUeW,Y([)]6_
A:CwE G8I
M:O"Q'S<U"W Yi{
6lFSVt"a
oVe@st
&L:S;
fI}GTe
wO+A9N
zA[ Rp
xSzLTc
ePcZdV
nPyZuA
lA \fTc
~S/L]cZmCi
eRC'THm
nPo[cV.~T
~-XCaTFnt
l-PnZt
9-Fnt
nXhRsFr
i^eFt AeAm
uFuRlTw
i\nAsPs@pCo
ePi[f\r
=iVr\s
nAi^eTL
nw[>3
rZgAa
dT ~M+MPdQ,
eXbVrt
#u[dRyt
iEt\rTa
iEt\rS
VoCyTc
aAoA't
zVrFfr
ePcZpJ
rXc\p
uVt\rTi
nTgVdTv
XnVw=]p
uVt\rTc
lPvStRb
uVt\rTi
eVt\rTd
uVt\rTi
rAuRlTd
/_Ge@t
/_AhZs
/_Wa@e
7eAPAo
Pp@p3
=eFsRg
=S1RK2
n:uYAFg'e
eXo_at
lG2Vd_lf
uuaW#W
D@tjxj3
sP`@5j3jt
ath@3jfjpj5j3jtjrjujhjtjxj3
a@5j3jtjrju
d@xj3jfjpj5j3jtjrjujh
h@3jfjpj5j3jtjrju
a@5j3jtjrjujh
$JQ"RS
DL($jx
i(b@u3
4$aj3P
m|#@fjpj5j3jt
&dv@ph
& v@pj5j3jtjr
<$'@[)
(`#@t3
jtjxj3jf
F@tjxj3
s\`@5j3h
&8v@pj5h
idf@xt:
upjpX*
{j9Y7P&h5
bQ5V'd
j5j3jtjrju
O_~wq;
t&9+u<
te9mu{P
t19pu4
t~9pusP
9. RBruMS;3
!8ltp@
G"'SK]iulS'
e@rS&
^'u;^9]
uO9q$^B3vyV
,KEytO9q$^B3vyV
^9ux^j]
0fS`S'
]8e@xh3@f
m<"@f;
xYl_8[
utHh|"8
QXxtjhW
tx<0t}
w<Mt7<,uvG
pfBhjy
p BttuW
1;IxaB3tr
Sp`@5h
]|(@tW
jgjqj5
p&B3tsV
3hUpgBxt4P
G&\aqu
lto=t@
tkV&VcV
$MBpha!s
ed$@3_*[
hLrBtB{
>MYA1Y
xu;<Ft;<<tt
(_BxV`
G|d@hWG
9wtz@8f
0@S9+u
G$d@hS'SS
8vt~@@
j2jU^>
kTjB5V
th=Vs^
Mpj3jf
7OGOwv
Y,hp"4
utbjuV
i8UB3f
Q0_Buf
0'S!S&
"P%P8P$P
M]~ug3
HS`S5S
p]BuS>3
KuljrX
p?(j3S
GSEltfS`
$P"P%P8P
udWbWdV
+/WeP0
tfwo5fio>
\VTf}o+0
uW?W#W
a`h@3P
9$pU&P)Q[
dkB31#
r=; $~w}rg;0$pv:NMDT
Sp`@5h
IBptrP
S"W-j3jfhh
]tT,C-
kjU!PmYnY/
wmW6S+a
T9h==^
=$R&'u
MbxP!+QU
F4mrY5
z"743B
j84<6
O;=wJ"
m~62.+|
| ]SJ8D
.u^JjZ
Y_kB)lI
k5$_S$a
sist%v+
HLwU\j
53 U:6
Bd /&T
WAaN@
Do@gO!B
:SFFX7dU
J;[J,E
.Df<qa
EBW :K
'%XR5o
Va{vFx
'@"%Y<h6
R""2/J
:}W8]j
nuxIS{
@J1!aV
,DRb\l
?%.ka{
y):nr^
:DBvt"
~JASIJ
L*r_5]%Gr
Wi%0B/s
|;V7N@
|aJm7w
8^6O3|
z|}"p
1Az`>
#5o~&LG`
WqpIN%
!Yo=J
Pv2,%E
(=rCW%
A!NY}6
iGXHzu"@
0-e/I=
V.qFAT
E rNL#
ykKDif
IHj1%X
[MAcPs
uP?NZ{
.e{x{J=BKv
+6}cK%
5`tJh\?
V0T18)
nxK"WQ7
)?| 6R
M"aqh]9
M?.Vpox
*_=y;S
i/'9O>
NS&V%C
8O*nxz[
pt_0V}
D% <!6
h;2<bZ&
/3Y)o+Y
~(V.,9
Y$}!{80
y'Wc;G
)8"]_q
ugaSa|
MZl~oW%
Lk~M,NZ,8
:83vj4/
c~>,d]
k^hQ(g
<q5{LF
S,$@5o
O v">%
WyLodf
LP5NEh
65_F/7
\c,Z7S8
^VCd!N
"l_(\u
I\ywUV
6`Iw99
{?Y+myR
R~q9wE
2mDuj/
)]<*'}
[;qMpFK
8M\"PL
j,ug]F
JE^6*C<
'Ea^Td*
6U&ieL
vrFa9#"S$
dA>.rP
s`URE|
*baM_Q
8kMDNi
0k|XFR
SRDOA|m]
#;L[?gb
p \0>;
b =/{p
&t10E]
3Apk`$
I.pr0D
1sG.Lw
:&@*]D
!u~:K6*
}PpU\z
}KILp4q
:(bNFK2
)F_Kj<
q(oqxb8
<)3y^@%
8Jh*z'
N4S:P"T
:IL7M7
~}jfvPX
QC+?WU
7p2qJL
|]~HzY
2P2}O9
`b?15l1
N46'Xq
oW9t[xi
S123\j
YNmQ/
.n_r%\
Xkujk`
8brb1g<
U_d%d.C
p$X_sx
@m5 u
bGcj0S
;tS=~o
PFB6>~
`L}.5
#`X<V)
i 3Ku^
k0?7Mu
$4/>/G
.z=ie{w
H!Cf+cm
E]\Y^Y`IM;K
v6rh>$.
;vXg=H*
'r\tVC
6i[d}e
d6iYe3
r\nTs5
rGe]t0i
slPOFt
7eAPAo
=s.a_i
CdPPRg
rRrAp
2eRi]U
t6oGMFl
7eAOvM7Pr
nQlVAt
!uPuVU
rFi\n1x3
t rZcVs
g4iTl\g#
~EaN1LA2[d
r$oze^B
<oTd~e
!S7RF2Fd
tD/3B.Ql_
geRd1v
9DeA6IC2
ZlV3F.
PGoKy7o
'i[HGt
'I{HgT$.
nAB_tt
?S<M/3F.
9nAeAl
t\cRl'e
e3r\tZc
8eTpur
oVe@st
e]t6rcPs@
=s<eQu
TW\dVC
d<i[er
r o5u_t
7eACcI
}eRp7r
7eAM\d
eRd/dp
=xZt6rcPs@
srVe1n
9n\tZa
o[A]d'p
E9K2X2X0@
PHJ^ elRu
yPD\nXu
dV rL* "IrHgSTR7S0R>E0.x
T R U H T X
F P 5
vBxJzt
)B7D=FtH/J;LxN|P%R!T V?X-Zx
R U H T X
T R U h
tA0C1E.G<I2K
M(O QgSgU"W*Y/
^?tVQa
Z?9VVx
H?1VWaW_
vN@&:4
M&zi]%
2T-^*z
[|14a/y5
``~K49p
(\(Z(](@(\(P(
(\(Z(](@(\(P(
(\(Z(](@(\(P(
(\(Z(](@(\(P(
(\(Z(](@(\(P(
(\(Z(](@(\(P(
(\(Z(](@(\(P(
(\(Z(](@(\(P(
(\(Z(](@(\(P(
(\(Z(](@(\(P(
(\(Z(](@(
(\(Z(](?
Z(](@(\(P(
(Z(](@(\T
(\(Z(]({
4-ZpX(
](@(\(P(
P`(N(X(
(\(Z5<
R\(Z(](@(\(P(
(\(Z(](@(\(PS
(@(\(P(
WIw@N(X(
(\(Z(](@(\
Z(](@(\(P(
(\(Z(](@p
T\(Z(](@(\(P(
(\(Z(](0
(\(Z(](@(\(P(
pkp|S}9!(@(\(P(
(\(Z(](@(\(P(
(\(Z(](@(\(P(
(\(Z(](@(\(P(
}H{H<H:H=H H<H0H{H.H8H}H{H<H:H=H H$
dWk!G7
dQkXG3G@`'`Z
H8H}H{H
mm/R:R&R*RaR
zaR&R R'R
*^mRm^m
6B0B7B*B
C1C6C+C7n)0
@5]5A5M5
jW#GrAr
hQ!QdQ
U U=Uyv
A7C7O7Y
B7_7C7
j]7Q7G7
7C7E7B7_7
7B7_7C7O7
7C7E7B7_7C7O7
7C7E7B7_7C7O7
7C7E7B7_7C7O7
7C7E7B7_7C7O7
7C7E7B7_7C7O7
7C7E7B7_7C7O7
7C7E7B7_7C7O7
7C7E7B7_7C7O7
7C7E7B7_7C7O7
OY!YjY?Y)YlYjY-YI
e;!9G~
./][Z[G
_<.[3[/
?3)e)~
O{i#[h
!~h/=/+/
Y,Y1Yg
?~|[nuhu
";-Y+Y%
0DRE5]
0VR*R[
B$T$DvEv
Q$L$P$\$
$P$V$Q$L$P$\$
$P$V$Q$L$P$\$
E1C1D1Y1E1I1
1E1C1D1Y1E1I1
1E1C1D1Y1E1I1
1E1C1D1Y1E1I1
1E1C1D1Y1E1I1
1E1C1D1Y1E1I1
1E1C1D1Y1E1I1
1E1C1D1Y1E1I1
1E1C1D1Y1E1I1
1E1C1D1Y1E1I1
1E1C1D1Y1E1I1
1E1C1D1Y1
1E1C1D1Y1E1I1&
E1C1D1Y1E1I1
D1Y1E1I1
1E1C1D1
1E1C1D1Y1E1g
1E1C1D1Y1E1I1
C1D1Y1E1I1
Y1E1I1
1E1C1D1Y1
1E1C1D1Y1E1I1?
E1C1D1Y1E1I1
D1Y1E1I1
1E1C1D1
1E1C1D1Y1E19)Obn&
Qazw5t
1E1C1D1Y1E1I1
C1D1Y1E1I1
Y1E1I1
1E1C1D1Y1s
1E1C1D1Y1E1I1
Tx1C1D1Y1E1I1
1Y1E1I1
1E1C1D1
1E1C1D1Y1E1
1E1C1D1Y1E1I1
D1Y1E1I1
1W1AS2
Z1W1A1
1E1C1D1Y
1E1C1D1Y1E1I
!1D1Y1E1I1
=];1E1I1
1E1C1D#PM
1E1C1D1Y1E
yE1C1D1Y1E1I1
+Y+^+j
D1Y1E1I1
1E1C1D1Y1E1I1
1E1C1D1Y1E1I1
1E1C1D1Y1E1I1
1E1C1D1Y1E1I1
OU'm7p
1 2a2k2
=2?2d2f2]2D2
8p919;9x9b9a9p9h9X9
9L9N959,9<949c929(9i9S9
93:b:x:9:#:`:j:i:H:P:P::V:D:
:4:6:=:$:$:,:k:::
x0T0\0
0^0L0q0o0
4'4#4o4R4
4t5P5G5
5w6p6/6@6_6t6b6"6
607}7c7T7T7
7{8Q8,868
8`919d9
98:y:3:|:|:!:
:u;9;";m;R;S;
>z?}?R?
q0Y0Y0<0
1_2Z232*2
3l4N4"4$4W4
4p5t5$5
7(8:9G9V9
>f?[?O?
w0e0I0
3}4]4G4C4D4s4"4
5(696&6-646
6G7L7<7H7
8u9z9y9x9`9`9/9F9T9[9G9
9t: :~:l:
:9;d;f;m;t;
=l>l>f>
> ?U?T?u
1r2=2>2b2A2L2,2=2)2d2
3p7{7)7
9 :Y;\;8;
>}?U?_?
?$?8?d?n??
2x3`3r3Q3R3
3\373`3h3
5e6{6.6
:~;g;j;P;6;-;J;
0o1@1(1
1{2F22272
2.3>3R3^3h4[4G4
6~7{7m7f7
8a9i989
9x:G:M:
:~;g;];N;#;S;
;j<~<d<
<a=z=m=)=G=V=
=J>0>0>T?x
9^;N;q;y;$;$;(;
;w<{<z<M<X<
0H040;030
94:O:3:8:
=j=U=%=/=
10n0g0(00F020<000)00F0
1A1I1y2
l0\0s0*0
0q1`1\101c121
1?2v2\2
242:292<2
2p3z3e3L3X383{3*3$3i3W3
f0x0%0+0
8;9l9Z9M949
9p:t:':z:T:
:5;7;|;~;e;|;l;d;
;@;J;I;(;0;0;
;6;$;m;o;
<X=3 d
orRmFc
f@^rPl\ct
EUSgC1 .W
}Cx$hCt
px_m[
:Cg$`P
#jtjhP"
p <C1
pEnjpP]
9 }C 8
wC~ &P"j7j3Q
3fOGtw
7EpQcjf
uYjrh.
EES>WG
jtPw)v
E|S.Wc
$jxj3j|jp
cjtjrjujh
(j3jfjXj5
%EPj5h
v iC5 e
4#QiC5
%ExjePb
5 :Cv
3jujrjujhjt
E=V<C1
FHiC=8gQ
LbPzC%8%
vu[j~P$
EPV{B5H
L#QiC58
|j5j3jtjrh.
jtjxj3Q5
1LQ@:Q
|LPdPwC
.j3jfjph
-txjyV
uehduq
e =C3f
3|FBttxjyV
BhhDt:
],GBthzr7
*t{=r@
96\`Cr
cjejqhVs^
3?89^-
Lxdtfht
*tr_,3
gsNf:n
t~CrtrP
8$jU'P9Q
Bt_&[n
Br=8=)
NA`rq;9
Bh=9=9
CA7vcj}Y
tBBt^/
S.Wfjfjph
Bt]'^h
6$eU8j
tv;A$vY
'Q%X1]-[
FTfwo]0
3tiI>O
N%f<o"
f4fwo]P
vUf<o
\FTf}o
LGdf}o
LGdf}o
utgI:O
Nhf<o0
\f4f}o
s9pueh
e<DB3P
jgjrj5
I~9u>ju
pHQEe]
S.WY0U
WdW5H#h
'PbWdS
NuPfLzluxjz
t.<ktc
tr8xt%
,3S({C5
};9Mt{
<Xt7<ou
3un<Pt
+<[tqB
tCjrjuS>j
x;6DjCpt2P
3qd~Cu
3GdyCh
~C5t'9JtyW#
tuj3jf
j6[5hD
j;['hN
ijo['h<
t_,t"h
E;$w<pus
-SGxv]@
u?r{V%P
wjdX*^5
3(iteV
mLCBfP
<4tr<B
^?uejs
z'S+SY
mLCBfP
]}V?hu
90quo3
9.8xCru
d9i8tC3
59.<xCruVjlju
8xCr9(
8xCx;6DjCpu9P
1;ejtP
IuytF;
uzj}_S
)N^l|S3
3tJ=p@4
utC=t@z
5t4=t@v
eLEB3P
Dz(ttIW
9usj}[f
|B)utu
t{jpjujhV
tj6^O
De((tq
Bf_.[h
$C3fM5
]nfI5I
Cx<6C7k
@ XEP<qE]k
rjv_?V
tkg8dCh<G
U0eCxP
ePcP$P"P
3tzJIU=w9
ePcP$W!
tHjujhjtV/
EFuJPeVdP
O`_k[n
Ds(:t@F
LCBtP
H1OudV
OE~tr@
$:drz:
fMF~uW
n5,d<r
P$j{PY
B5f<(a
Bufg(ip
B3fi(U
B3f{(G0
4$1f<~
(j2jfW
E|jrQ$
r~;a$?w|r};1$`v}NSD
t8otp3
y8fCuB
bYepSt
aFeW(t
/_CePt
lPsAaGi
gPdPsGr
t\rFcnFtAu
rPvWa@eTc
aAoA't
r[i]gS
tTb_eTc
[- Vl\s
dPvPcGo
rTt\rS
rXc\p
rPiAeAa
dPvPcGo
rTt\rT"P u
rPcZ_Rw
t\rZ=N
PBTsV 7l
6lFA_l
t\cRl'e
!T4-D6$E!N1C|D#
i@A(S9
e6a^e2o<C|D3
#u[dRyt
5uu@tf
#eEtVm
eXbVrt
~M9MRd
%R'Z)_+D-Z/H1
;H=L?5a
lU!J#P%^'
1F3F5C7P9N;D=
?&A2CqEuG<I8K9M&O$Q*SgU0W(Yo[o]*_
A7C,E2G0IyK*M>OeQaS U$W-Y2{
?gaL-n
M=5P/
z1 B=p
lf3A=x@0
W{X=3`
?J%`#/km=u
=5b=rx
BF<A=5
=tH0O{&
(#~s=px$
eVdP2G3@5
aL7NbQ6f
c]0L7L8
aCfB6Mdh
<y}o)K)W|uj1&EO=u
cRe*n8d\sU0CnCOLm\Amx
%t(Yxo
TzLYDE
@X,f2P8X?ec1RUM=5
?V5C#w
M:T?=3
2VrsiO
s24;j.LWG+P%v~C
A"xJu%c8 -0
mVdWrCW
lEn&q\Y37)Vcr^e r\J
e4hFWP3#n+q|3Pe L
9VGA>xLu(cc ?0
rGW@Q/F
Y!7!Ver
t$S17#P eLa
W5aCX2vh
|X3e9u
wwx0K%I
V#tEr;X{7f
A"xJu%c8 -0
mVdWrCW
lEn&q\Y37)Vcr^e r\J
e4hFWP3#n+q3
Cizoiy
l:r6dh
y|d%5&R>t)=t
xC%p*Vqa
A0xHuecc -0
dYrGWJQiF
Y37#V%rPe$r
sBHHt$S;7fU
eGyDddq
vCx;q\qI=x
Q?NgNwJ$cAD-Y
I8HE=3
>zLqPsI=r
#zFN.s
Ii5t I
i2e8II=x
h+j$IE=3
hLscII=r
Oi|o$IO=u
h3ncI[=p
W"IH=h
hBW6IM=5
h@h%IU=t
|Y%f*uod
t,cKArYf
z?ZtqT=p
AXzsQe$l:r6r\K
.X?UaeITBP&i/7
x6lyQ^c
9C6p2V0aOM
3Q!v T# $UKjZL
tVycrLU
kD8E=3
8QrzesI=r
o"yJ 6U g\1
<BJdWyUr4x
%u"qcy
U(y%f=O.hL1x=f
?XJqRyUsp
4XVo4y f`Oih@19=u
s~r-U9b
1gUI=r
y8nMu.RY1"o! Al
dPo&q(h
U&m%A1oTT>p7T
0N!n$K!mx
xWUiT!O(X$Y<s
qyj7h@Y6n$O8aAyJ4(KGkQN~1
G*e>z;h
eOmfL!fr
n_y r\G
X)cDBPpQaGo&V9i
yqd6QCDpgkGt
n8K-mtK3=p
qN H19H=h
q/oU=t
oWy$nKu#R
10o) G RB5iVWxdMHqGdZY8P@W
7yw}O:qAA,kX2Bg-Xa=f
N#w8G'w0Y[r*o
mCo83#V6ztp
y&S%R5E
W?h#Fzq
z"T P,LG0Ko3
?Rvdiy$f'U
NknRB9oP3|XMo
q9L;szv)Z#D\8}MD=r
O{o3y?q5
N#w8G'w0Y[r*o
mCo83#V6ztp
UA D0Es
P&M8C!5J=f
N#w8G'w0sTr2B
TELbR m=D6983#tLhVd<P86yeIw
O.oGA1ViF1l%Hbq3
e2OGC5s
{yGq9v
<B7gjP6lIx}iZL s
dCr+fIIXxrQI'V
=B'g-P(l
LasWdBr1f
IYX?rOIdVWRBo5
?V@A#xPu$c( j0
l_n'qLYua2d<6yVcv
w:d@h)fW2W=p
xC7p(z%cQw.e0d=f
veGr;IO=u
s~9[=p
r<9H=h
RriQq
W3tr=f
LdGp!u
7VLxgx3 69H=h
=gqc/uCy5
1f c<u[yt
Fi'o.y
l{r%rD1_o3
p>tYhGM<93
7,33uD9'cA7
G`o0BO=u
iIuv=3
r-Ojdf
Lxag=sO=u
?BJXiP"sFyepTGCo
:R|Y<O8U
W?rIHbu
RCo(O> /M mKdj-8M=5
fRhZjln
vDxz1BvDvF3H;J>L%N;P)R`T3V'XlZ
1F3F5C7P9T
(t%nXaCV
oPlZnT
tO^#]H
":,M^t^p(Aa
\1mTdVyZp
^tPxG$
xA$^nt
Z0HcUgf
\C'TLX7Ax
ZC TQX+A5
C&TVX6Uh
CaTPX1Zu
C4TTX|Ap
VCaTBX9C5
FC&T\X
[C:TPX4Z3
\C'TLX$Ax
ZC TQX8Xt
C&TVX%X)
CaTPX"Zu
c\IrAf
cPI"Z3
cLT5Ax
cQT2Zt
dsi_et
NTmVAt
s=eXoAyt
&iGtFa
inpxd
#eACFr
t\rAp
e4iGePt
>E:N1LK2
g+iWWf
rD0A I
n"eDuVs
n`r_At
eGnVt7l
pfe]d&e
tgeRd2i
?I:I6Eg.
ECe]tt
n6iYtVrt
d5xVeCt
rGe]t$r
=s(r\c
/s4eWuTg
aGtFp=n
rGe]t$r
rGe]t h
9n\tZa
"a\sVE
t rZcVs
lPEKWt
e>i_e1
n6y0a]d
k>aXeWP
e$oaz`p
si_e ie!o;y
TW\dVC
d8a[d_et
6i[dui
d{eKt2i
=s.a_i
CdPPRg
OpMpPt
'iQeph
7eAE]v
t&aGiRb
7eAC\n
8eTp`i
d3o[s\l
T R U H T X 3
fRhZjln
vDxzp
5B1D0F/H=J3L~N)P!RfTfV#X+Zu
T R U H T X
T R u
3A6C6E3G I>K4M}O6Q"SaUeW,Y(
Z?9V_e
Z?9VQa
H?1VPxPe
e[gGh4s
o]=A1^0
gU'!T>-
eXb_yTxl
o]=A1^0
sfA-Po
F LsPcFr
H T X
eFtVd$r
9 F P
inyeEe
sV'F/N
T R<Zr
H T<WsVc
L/Ts@e
i0e0[0
0T030}0a0
0w1p1!1E1X1
1p1<1 1
102n2b2
2F212=2:2
2s3=3!3W3Z3G3+3<3*3P3
304|4`4V4@4F4;4{444
4q5}5z5W5P5
5%585g5P5
5k6|6j6
6N6B6v6{6&6
6{7;7t7S7
777:7'7
7e8x8'8
8\8@868 8&8
869;9f9Q9]9Z97909a9
9w:z:g:K:\:J:p:.:":V:[:
:v;`;f;[;
;T;3;};a;
;w<p<!<E<X<
<p<<< <
<0=n=b=
=F=1===:=
=s>=>!>W>Z>G>+><>*>P>
>0?|?`?V?@?F?;?{?4?
00n0b0
0F030$0
061Y1A1:1
2a3r3G3E3~383
3i4U4N4Z4O4
424)4@5O5
506i6R6
6u686!6
7b8N8}8Y8
:<:<: :
;[<b<;<G=P=
>v?J?x?3
8:9d9h9Q9G9>9
:`;s<X<{<;<
3{4[4v4
4{5P5&55E5
5|6M6:6
:E<O><>
344l5U5M6/6,77K8
f0Z0z0
36474k4
;J<0=Q>}>
3p4Q4t4
4b5@5h
7u7w8&:
<V=r>x>s?p
B2J2"2
7<;T;L;y;c; ;*;;
1)3*4B5
:w>T>@>,><>4>c>
6_8H9J9_9
<A=H=|=T=
x070n0|0"0M2^4#4
;S<+<K<
<?=E=$=
B4G=p04
0c1B1-1C1
2t3"3G3V3
363?3"363
3z4?4t4h4+4
4L4O464$4'4&4W4
4v5c5g5c5
5v5;5-5
5y6;6v6h6
6D6D656"6)6
6x7!7B7
9(:D:G:O:3:
>T>J>@>L>
A0U0>0(0I0
6u7$7G7_7
:p;{;{;A;G;G;w;/;
=U? ?l?
80v0d0-0/0p3e3@3+3
8i9|9l99W9M9w9e9Q:^:K:::.:
:m;5<0=
r0N0R1
3N5C505j5K7K7
7`858/8
<0=#=)=
4p5{5a5w5X5B5t5
8:9j9[9D9T96959`9
;?<<<a<h<W<@<D<1<}<1<
0>1+1R1F1J1=1
7<888$8
f0b0*0
0i1w1d1
132q2x2o2w2P2L2
3R424i494
495$5h5S5J5&5-5&5P5
5a6^6D6T6
8T9x9d9
>:?d?U?H??
c0a0V0F0
0q12121
7-:V;h<;<J<
=i>q>l>
2{3&3.3
3r434?4d4d4o4L4C484h4
;i;,;H;
;7<\<*<
=Q=N=p=a=
q0(0K0O0d0P0
708c8H8
8W8?8o8
:[:k:@:
2u3B3>4
96:>:c:I:0:':-:
;3<|<S<
<|<!<-<
>n?x?c?
?J?F?r?}?
a0b0*0
;+<j<:<)<
<-=-=Z=3
3b4L4G4
8~9w95939
1P202`2
3r4N4X4C4s4
4Y5I5)5n5
5v6m6Z6S6>6%7
9E:`;V;
=.=>=b=
2m4L4y4
;<<s<R?
011g131
6O6 6)6
6f7n72797/7
7u8d8s8F8D8T8
9]9"9i9
9t:l:r:b:/:
:w;$;(;F;N;
;U<D<S<&<$<
<z=h=?=b===
=s>i>(>T>L>R>B>
z0h0?0b0=0
0s1i1(1T1L1R1B1
2!3h353$333
3s4c4n4Z4H44B4
5!6z676d6h6
6a7a7.7
7S8C8N8:8(8
8g9t939)9h9
9o:e:c:
;'</<3<#<.<
<4=e=i=G=T=
=O>E>C>a>:>
>j?/?!?!?n?A?
40e0i0G0T0
0O1E1C1a1:1
1j2/2!2!2n2A2
243w3k3
4E4I4'444
4`5i5/5%5#5A5
5r6y6o6J6
7W7K7g7o7
7b8)8t8%8)8
829"9o9@9I9
9R:Y:O:*:o:
:f;d;t;7;+;G;O;
<"<}<B<
=O= =)=
=f>n>2>9>/>
>u?d?s?F?D?T?
0E0I0'040
0`1i1/1%1#1A1
1r2y2o2J2
3W3K3g3o3
3b4)4t4%4)4
425"5o5@5I5
5R6Y6O6*6o6
6f7d7t777+7G7O7
8"8}8B8
9Y9E969
72x2b2a2p2h2X2
2L2N252,2<242c222(2i2S2
233b3x393#3`3j3i3H3P3P33V3D3
34363=3$3$3,3k3:3
3t4|4;4j4`4!4+4h4R4Q4@4@4@4
4&444}4
536|6b6m6H6\6H6
6&686e6k6
657;7d7j7U7@7D7@7s7.7 7m7S7
7p8=8#8l8R8]8X8L888{868(8U8[8
2t3~3a3t3T3\3
3J3 3a3k3(3
8x979n9|9%9'9l9n9U9L9\9L9
9Z909q9{989"9!909(9
q5{585"5
5|6?6r6l6
66@6N616$6 6$6W6
6p7t7'7z7T7
7H76797<7(7
7l8x8l8/8B8\8
808>8!848
8q9d9`9d9
9w989&9)9
9v:y:|:h:\::R:L:q:
:p;~;a;t;P;T;
;Z;4;y;g;(;
;7<x<f<i<L<X<L<
<"<<<a<o<
6u7`7d7`7
7s7<7"7-7
7r8}8x8l8X8
8V8H8u8{8$8*8
8t9z9e9p9T9P9
9^909}9c9,9
93:|:b:m:H:\:H:
:&:8:e:k:
:5;;;d;j;U;@;D;@;s;.; ;m;S;
;p<=<#<l<R<]<X<L<8<{<6<(<U<[<
<f=x=%=+=T=Z=E=P=4=0=c=>=
>868a808p
>1!141
1q2d2`2d2
4f5Q5@5L5D5s5"5<5Q5G5
5y6x6`6`6/6B6X6
:5;;;h;V;M;(;<;(;g;>;
;?<d<^<E<8<
<%==D="=
=v>@>e>C>
>d?H?c?
?0v0@0y0c0,0.0
d181c1
6f7t7=7?7d7f7m7t7\7T7
orRmFc
^pQaGat
tDeA$IA2[d
ltK=R}E*3B.Ql_
:T6L9.,L8
-SvRU2^dYl3C;M1T93Z.
pO+D<G
lrS=E$LG2Vd_lfo
lrO9E)U 3J.Wl
i]gFps\tZo
L7S`
!I;GHe
qO~A=NRe
cGl.zPYeRs
%S=LXc\d
t\o].TI
a] 9S;LXc
tPtZ Zn
C4TPmZrV
~-RC'THn
l\zVdy
lP GoTi
~-XpFr
slP We
pPeGr\ry
aAi\nTh
tXt[eFa
~-Xn\tFe
9-Fnt
prA ]o
6rgGa^:T
,Y.]0D2[4A6O8
@rB7D7F2H!J?L5N|P7R#T`VdX-Z)\(^7`
r7E0?Ps
dwftRt
7eAAPt
?b_ePtTL
PCYa@sTH
pAoA't
1rGaJ't
PTLpV 0e
dPg@aAdS
rPiAeAa
rPiAeAa
t\rFfr
eXc\p
ls@rV't
ePcZn@t
r[i]gS
eVt\rTv
rAuRlTd
rPiAeAa
u_tFcnFtAu
cAoA't
cAoA't
-F!R#
'\)X+Y-F/D1J3
[(]&_Sa
jR!W#L%R'P)
3@5D7M9R;H=F?sA$C4EsG{I>K>M;O8Q&S,UeW>Y*[i]m_
A0C1E.G<I2K
M(O QgSgU"W*Y/{
dT ~M+MPdQ,
9MWdW/yp
MnauVW
g#eEOPt:o
aAi\nt
?eGSs
eXW\wB46i
4 s"eQiAe
A#dNrNt
#`N5Nr
{FA%AcAdH
3_4^)]
@G/MlVH
|Q0htE
|V0ut\
H;V#A&H
(G.MlV0
|QfKtQ8
|PfQtPP
WtTrV<
3HLlL@
lQ8QlPH
WrT'W8
|\X u8
0VbAgH
U#W)T5W0
DKdQ(g
D_dTHK)
dP8<9W$.
$5tXDMd\HM)
5_3\*^5
tfKtQ g
tfKlQ(
tfKtQ g
|CfMt\ G
.fMlV(
KHKlQ@
1Ml\HM+
lV8LlLH
V#A&A A?H
DLHuIC
$2tFDQdPH
$MDQdPH
AjAnA(_,
V"A<A!A/H
DQ8iIO
W$NDId
$=LQdP0
AlA;A,_k
W9TrU'V1W}
5u:LM%R
3DMdV(z
uLQdP@
I$UDM|Vhz
D_dTHK,
D_dTHJ
$stUDId
W$^DId
A*A6A)A$_
W4T)U5V9W{
D2-hpq
$09Y$c
89Y${tE9
HMl\8<
_HMlV8z
lV@LlLP
cH_lT8@e
+HQlPH
$89_$6
@_lTPJ
A-A+A5A(_
(V#A,H
4$9*$X
U"W3T4W
t9&$%seEG
xAlA:_.]
W5T9U{
u?HMl\0G1_lT8K+
wHMlV0
lBH89Y$
D{9"$Xt
9w$D~_
|\(3tR
|P ztr
|Q(ht[
|\83~K
LLBpsq
HMQ`s6
PhVdA2A%AcH
eHqG%H
3A*A/A)_6
<$=SeW5T:
L drwH
G$lW3T4U
']1\j
IQ%s&EG
{FsVHVC
MQhs'EU
QQdslD
$jW4T)U5V9W{
3f09Rv
r9ttfH
t_r^5]3\*
$mW)T5U9VrW.
$5DQtPP
A7A*A%Ao_
U>W5T9UrV'W8
$ 9I$S
fA/AkAnA(_,]
V'AaAfA"H
DtlL0<
:$P9i$
{9($2tD94$<~S
\V8L\LH
09o$NtA9i$
uHQ\P@
D2lPH:
($@9o$.
o$T9.$E
o$L9.$=
HM\\(G1_\T0K+
DulV0=
AmA;A,_k
LBd4+q$SD
4$GDeDTpq+o$0+6$5
W4T)U<
0_lT@J
W$FDId
$ZtFDQdP0
$UDQdP0
W$FDId
H_|T(A1
<}9O$\tC9
|P K|Q0
9O$D~Y
W4T)U5V9W{
|L M|\0L
D2lB08
A7A*A%Ao_
$DHC~#
BdHYB}H
WtUrW<
W3T4U)V5W0
A*A6A)A$_
U>W5U9V{
5^3]*^5
]SDQ4IDPh0
V#A'A#A?H
4_)^5]'^
h!0$0H
4S-VdA2A%AbH
tA-A(A4_*]#
KXSfV1A$A`H
AnA(_,].
UeW5T3V=
t(fw9TtxH
y$sH{L
4^)\+^%
$hWtTrU5V3W=
03_4^)]5\'
D_K`s&E
W5T9UrV'W8
t_9I$K~]
h_|TxJ
$\tW9O$V~Y
|L M|\0L
89I$kt[9
L_dT(A1w9
dT q9W$D
.<9W$.~W
$MDQdPH
r_'^1]t\l
UeW'T1U}
1]t\l^)
[hUcWrT5V:
r^5\-^(
V#A,AfA0H
1<9_$V~Z
lPP<9_$
1q9_$<~X
lB849Y${
$(tEDAl
$PDMl\HL
1q9_$D~X
lB 49Y$
L_lTXA1w9
lTPq9_$
L_lT(A1w9
lT q9_$D
1<9_$.~Z
r^5]3\*^
UeW5T3U4V)W<
fDI-gp1
A+A&AnA:_.]
U"W9TrU'V1W}
1_t^r]5\-^(
VbAgA!A%H
r_']1\j^
U.WrT'U1VtW{
AcAfW"S:
t[,_4])^
tA'AmA;A,_k]
U.WrT'U1VtW{
DL}hH{E
hA+A&AnA:_.]
(S!V/H
~;HO~b
u5D_Ntt.
AbI^A`H
K;S3V'H
rV5U%V&H
X[m_']1^
V1A$AcAdH
5_3^4\7^
U"W3T4U)V5W0
t_r^5]3\*^5
$$TS-VdH
XxU"W0
XvU&W}
X=UeW5T3U=
SA)A._+]
r8otyI
3fMHjt}3
dQ hEG
D^dTHA
A!A$A"H
4_)^5]
G$TW3T4U
{!:$PE
f09bu7H
t(fw9nt@Az
lP8yx6
dP rEF
1A$A`H
09]r\9
U;vu|H
|B8pt9H
|Q8htxH
1A$A`H
@)]5\'
S0W1TtUrW<
y!W$TEA
A9A-Ai_m[
$UW)T5U9VrW.
c7~>DIc}
t_r^5]3\*
pRW4T)U<
Njl~q;
HA)A$_
G$~W1TtU{
w;]|fDNil
TA/A)_
*ta=p@
O$FA%H
LQH !0$XH0
d\ 3EU
$PWtTrU5V3W=
TA'AmA;A,_
fw9TtfH
jf09[u
$hAaAfA"H
r^']1\
ffIHiu7
$$%WrT5U3V4W
DA'AmA;A,_
$-WrT5U3V4W
hf5;yu4I
5_3^4])\+
[jU#W)T5U9VrW.
,80$$u
3fMEru@f,9
uA7A*A%Ao_8]
fV1A$A`AeA#H
|TH5t?H
"A*A6A)A$_m]
=V#A,AfA0A'H
uhDL|\HG
Pt_r^5]3\*^5
st$fUf
|P8rt&H
,$-UeW5T3U=
DP&J\Q&
@3]4\7^)
|TX5t?H
|VXutdH
SvW1TtUrV5W:
#A]<TsD
A]<TsnH0
A*A6A)A$_
4$lU.WrT'U1VtW{
H<D{W#
<u{f,;
pAjAmA)A._+]
($`UeW'T1UtVrW<
< w!Hi
;Uu;Ai
|V@19$$,
9"$ tC;
t_r^5]3\*^5
lQ >W5U0
C?$w<su
<$K8*$(t$H
$RW4T)U5V9W{
0'_1^t]r\+
#A&A H
03]4\7
$hA`AeA#H
AlA*A/
LL@O|p
HPGpHq
HVE7Lw
H|S.WrT'U1VtW{
~oAO|\
<c$$|J
zc8$zJ
$pW5T9UrV'W8
PAjAmA)A._
5S>A A-AeA1H
DLP<c0
r_'^1]t\m[
$jA!A=A"H
HVF+Lw
G6M^jtd
BA+A5A(
h+V1A$A`AeH
9^r]'\/^
3V'AaAfA"A%H
AjAmA)A._+]
<$dU.WrT'U1VtW{
tA'AmA;A,_k]
$lW9TrV.
q90uo
4A&Ao_
O$lA'H
/AgA3A&AbH
}!G$TEA
QYptz3
A+A,A(A4_
$-WrT5U:
t'HUlV 03
taHIlP =3
H`HwKp
|Q8htxH
|T85t?H
4$lV/AgH
lB &WtTrU5W:
;B$Le<
3_4])\+^
i$sAMkf
@^lTX:
0S`VdA A'A#H
${E_uduCI
3DLtV`z
tzf09Hu?H
tdDQtP@w
3D_tT@:
DLt\`G
DBH49E
tzDQtP@
hA*A%Ao_8]+
fV1A$A`AeA#H
ecA9A.AhAo_*]
sU'T1UtVrW<
edA-A+A5A(]
|BXpt9H
xX.;}c
?`0;>Y
A}HSD~
AmHSD~
/AgA3A&AbH
HAlA8A-Ai_
U0W1TtUrV5W:
$49_$*
U;"$0u
;q$sum
8=c$$<H
qlQH,;
tA'AmA;A,_k]
#A&A A>A#H
@AjAmA)A._
.$EAQk`u]H
rN@Ho4t
u@PlPHw
HpUeW'T1UtVrW<
TLHMl\PF
rtX=h@u
p5_9^r]'\/^h
|L@ttT
u8_$<t~H
x+;8o:
d\ 3EU
$pA!A.AdH
@3_4^)]
8$zV"A<H
dP rEF
un8w$>t|H
dP rEF
oHOGhu?
4tk@H0A
2U4T)U<
v`f19itxH
xFA$A`AdH
TA'AnA:
8$zS V?A A-AeA1H
xHPTB0K
xt=f'9%
kA+A,A(A4_*]#
dA2A%AcAdH
XA+A&AnA:_
8w$^t|H
ty<=t:H
u8quvH
|V8utdH
plW3T4V
LSdQ )
(S"W9T{
`FA%AcAdH
7<8G$.
i018dIzD
r_5^3]
pmW)T5U0
u8G$<t~H
wHVE7Hw
|TH5t?H
5S>W5T0
x5\'^h
sS!V%A!H
hA(_&]h
|TX5t?H
|PXrtyH
|TX5t?H
|PXrtyH
u{ATIlAU
2$`ScWrT5U3V4W
sA+A,A(A4_*[
$bS#W)T5U9VrW.
(A+A&AnA:_.[
4$lU.WrT'U1VtW{
3<Ft|<<t;<~tv<xumLw
9:$T}7
39:$Pu2+
fw9TrVH
\\@UDU
KZqul9nt
hA+A&AnA:_.]
[eU>W5T9UrV'W8
_$>f49@
u?D_etu3D
dL{p09
tA-A+A5A(_&]
H]HQJ\u
Hp3ts3
H dr{H
trw0qq
sb{P10f
bpg`a0h
zp<`;Pt
epx`sP2
=p4`rP
?R5pu ~
l2lp*)m
pp4``Pp
zpr`nPt
y200*!|
bpm`'0
sB{P10f
ypt`8Pg!{
!pw``P5
4p``i%?
hp}`9P*!|
}p7`ePr0E
'Rdpk3
"pd`}Py
>p*-y5mte
pp4``Pp
!pe`bPt
R>p*5x%Utm
?p:`|Ps
y2ypt`80g
erdpe}
frepy&}
rp:`nPq
$Bgp``dPx0t
0p7`wPp0U
pt`aP%03
cpt`6P10t
`pu`1P3
3p6`pPr
8BsPt0u
bp$`#0t
vp0`7Pt
v2|p,48
vp0`7Pt
{b{pv`>Pj0p
vp0`7Pt
spm`pPx
rpw`qPh
5pc`tP5
zp<`;Pt
spm`pPx
`pu`1P3
npq`|P3
t2wPq7
spm`pPx
`pu`1P3
1p0`v0
qpk`v0x
mpp`{P10
|p0`d0
xp2`50m!z
}po`rPx
?p:`|Pr
&eN\t
3D#A8IG2Vd_lf
cAi\nt
uAe@Wt
NTmVWt
7eACFr
d4i]e1
'a\tuo
eRd/dp
rFi\n1x%
'iQeph
-E"NpL
h=eFsRg
d=eFsRg
w*ePt#xp
fh\w#i
ePk~e
d1c\n1
$rTn@l
FZcFst
nPGr1
l{eKt<o
g2oMPRr
;iYlgi
_"eElRc
6O%C LK2
eVuGe#
!H0L$3F.
3ovrVa
%o%n\nZt
aYiIe'e
)L5A`T
dyi]e5
8eTpur
srVe1n
i[g@Wt
}eRp7r
)uVrP
pAuAe7o
t4eWuTS
?eGC6I
?eGO#M3P5
aYiIe7r
dfpZn7o
rLEKWt
#eAFZl
CnFo_e7Pr
e=oQe3
#eASGd<a
oAePtt
s8eTp3
T R U H T X
T R u
'B3DpFtH=J9L8N'P%R+TfV1X)Z5
T R U H T X
pAwCwE2G:I?K$M:O(QaS2U&WmYi
H?1VWaW_
^?tVVx
H?1VYe]g
#mb:_*dk\eVWX
rd0Y1^bgeg
coiwe.cD
=!I1GB6
}>Pi<g
Z\GiV-;,a/
3A3u"B*
sF;S;D*
T;A3w"
@pv"Q;F0j
2@=V4f
9B H%Y
B6L4QbV?d
L*H0HfXid
<H5W%P
:>L5P%M
c)a_sK
n(YicV
*X+Y/\4d
T9Q"V.YUx
r0H{H7Q*pKxC
8@0@uHef
3O;#\f
738Qjd
tDe/E^J
tPRv.>
MQ8TL,
%$B<>S
~.3Me2
%$R>4T
G0J9vDg
?KN<U
tVe1W?AtArO;P"P%U=
yZgTg)]/^+^6^*
>G3DJ;U
*6B-Q0F
EN-M%pKs
//W82L
-+E<3B9
^:<B7Z:N=>Jy
\?WbWyJ
?<Nj8M%
6FsIZi
]6BfS!T
:BnpC%
3D"D4Dq
v4.0.30319
#Strings
<Module>
undoo.exe
Program
Writer
Runner
RunTime
mscorlib
System
Object
delayTime
antiVM
antiSandbox
antiDebug
antiEmulator
enablePersistence
enableFakeError
encryptType
compressed
System.Collections.Generic
List`1
fileNames
fileTypes
fileRunTypes
fileDropPaths
Decompress
EncryptOrDecryptXOR
Decrypt
EncryptInitalize
IEnumerable`1
EncryptOutput
GetResource
RunOnStartup
WriteAllBytes
Execute
DetectVirtualMachine
GetModuleHandle
DetectSandboxie
CheckRemoteDebuggerPresent
DetectDebugger
CheckEmulator
regName
AppPath
fileBytes
finalPath
runType
lpModuleName
hProcess
isDebuggerPresent
System.Reflection
AssemblyTitleAttribute
AssemblyDescriptionAttribute
AssemblyCompanyAttribute
AssemblyProductAttribute
AssemblyCopyrightAttribute
AssemblyTrademarkAttribute
AssemblyFileVersionAttribute
AssemblyVersionAttribute
System.Runtime.InteropServices
ComVisibleAttribute
GuidAttribute
System.Runtime.CompilerServices
CompilationRelaxationsAttribute
RuntimeCompatibilityAttribute
Environment
System.Threading
Thread
get_Item
String
op_Equality
System.Text
Encoding
get_Unicode
GetBytes
Concat
System.IO
Combine
get_Count
MemoryStream
System.IO.Compression
DeflateStream
Stream
CompressionMode
CopyTo
IDisposable
Dispose
ToArray
System.Core
System.Linq
Enumerable
<EncryptInitalize>b__0
Func`2
CS$<>9__CachedAnonymousMethodDelegate1
CompilerGeneratedAttribute
Select
<>c__DisplayClass3
Antivirus Signature
Bkav W32.AIDetectMalware
Lionic Trojan.Win32.ShortLoader.4!c
tehtris Clean
MicroWorld-eScan IL:Trojan.MSILZilla.9891
ClamAV Clean
FireEye Generic.mg.ee0516a44d6e7cc5
CAT-QuickHeal Backdoor.MsilFC.S22017452
ALYac IL:Trojan.MSILZilla.9891
Cylance unsafe
Zillya Clean
Sangfor Trojan.Win32.Save.a
K7AntiVirus Clean
BitDefender Trojan.GenericKD.67596970
K7GW Trojan ( 0058fa3d1 )
CrowdStrike win/malicious_confidence_100% (W)
BitDefenderTheta Gen:NN.ZemsilF.36250.Wm0@a07Q2mo
VirIT Clean
Cyren W32/MSIL_Kryptik.FFY.gen!Eldorado
Symantec Scr.Malcode!gdn33
Elastic malicious (high confidence)
ESET-NOD32 a variant of MSIL/Agent.UZA
APEX Malicious
Paloalto Clean
Cynet Malicious (score: 100)
Kaspersky HEUR:Trojan-Downloader.MSIL.ShortLoader.gen
Alibaba TrojanDownloader:MSIL/Mokes.faff9444
NANO-Antivirus Clean
ViRobot Clean
Rising Trojan.AntiVM!1.CF63 (CLASSIC)
Sophos Troj/ILAgent-I
Baidu Clean
F-Secure Heuristic.HEUR/AGEN.1357339
DrWeb Trojan.MulDropNET.43
VIPRE IL:Trojan.MSILZilla.9891
TrendMicro Trojan.Win32.PRIVATELOADER.YXDFRZ
McAfee-GW-Edition BehavesLike.Win32.Generic.bc
Trapmine malicious.high.ml.score
CMC Clean
Emsisoft IL:Trojan.MSILZilla.9891 (B)
Ikarus Win32.Outbreak
GData IL:Trojan.MSILZilla.9891
Jiangmin Clean
Webroot Clean
Avira HEUR/AGEN.1357339
MAX malware (ai score=89)
Antiy-AVL Trojan/MSIL.Mokes
Gridinsoft Trojan.Win32.Amadey.bot
Xcitium Clean
Arcabit IL:Trojan.MSILZilla.D26A3
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Trojan-Downloader.MSIL.ShortLoader.gen
Microsoft Trojan:MSIL/Mokes.B!MTB
Google Detected
AhnLab-V3 Malware/Win.Generic.C4478643
Acronis suspicious
McAfee GenericRXOO-YN!EE0516A44D6E
TACHYON Clean
DeepInstinct MALICIOUS
VBA32 Trojan.MSIL.Injector.gen
Malwarebytes Trojan.Crypt.MSIL.Generic
Panda Trj/GdSda.A
Zoner Clean
TrendMicro-HouseCall Trojan.Win32.PRIVATELOADER.YXDFRZ
Tencent Msil.Trojan-Downloader.Shortloader.Wdkl
Yandex Clean
SentinelOne Static AI - Malicious PE
MaxSecure Trojan.Malware.300983.susgen
Fortinet MSIL/GenKryptik.FFMZ!tr
AVG Win32:DropperX-gen [Drp]
Cybereason malicious.44d6e7
Avast Win32:DropperX-gen [Drp]
No IRMA results available.