Static | ZeroBOX

PE Compile Time

2023-09-16 04:41:56

PE Imphash

f34d5f2d4577ed6d9ceec516c1f5a744

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00002000 0x000df58e 0x000df600 7.99623602689
.rsrc 0x000e2000 0x00000530 0x00000600 4.503924847
.reloc 0x000e4000 0x0000000c 0x00000200 0.101910425663

Resources

Name Offset Size Language Sub-language File type
RT_VERSION 0x000e20a0 0x000002dc LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_MANIFEST 0x000e237c 0x000001b4 LANG_NEUTRAL SUBLANG_NEUTRAL XML 1.0 document, UTF-8 Unicode (with BOM) text, with very long lines, with no line terminators

Imports

Library mscoree.dll:
0x402000 _CorExeMain

!This program cannot be run in DOS mode.
`.rsrc
@.reloc
fefefeffe
fefefefeffe
ffefefeeffe
ffefeefeffe
afefeffeefef
9feffefefe
feffefefe
feffefefe
feffeefef
ffeefeffeef
afefeffeef
-feffeefefa(
ffefeeffefeYa*
feffefefefeY
fefefeffeXa*
feffeefefY
feffeefefa
ffeefeffefe(
-# &|s
affeefeffefe
Yffefeeffea
Xffeeffefea
afefefeffefe
Yfeffeefeffea
afeffefefe
affeeffefehah
Yfefefeffeefhah
XfefeffefefeXa
Yfeffeefefefa
afefeffeef_-
Yffefefeeffea
aZ as|
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP$
[6;myu
%ebwA=
gxYU&<
b,wtb
_/U#~9
N9.a2k
,>[JzJ
P&X2mh
szI=ZL2
2Vqbmi-
\c)%i|
@moJ1>R
]#Ssu}
;4:|.0
UtDjI7
A2U;yQ
a|8Mav
nh[IO\5-
c+[|Pc
?#gr+5
]%=iw`
NT:&q5 Z
U\7l^w
Xk~9}Y
BJ4)O
x*y/Pq!
;+~n"-S
\E $9
~Y.8<]^
xkGR]O
`K4{.W
kQ9h(e
hGayQi
T<:/bC
"'kOlY
|2n79)
smY|9(
C-N?%*
w/CsW3Jj(
cqq0.S)
JY]b`u0
VgGmW>
yj)%_o2yK
vvz5U>
|@: 7gk{
ta_9VT
3ZYi1A
"`a-lO?
|NUb*(A7
SpE4RP
gWf;{J
GUcE13,
Be vF*O
Pv'JTZ*
nn94<s;G
+P/Etk
:5j,n2
d7a[G:
ztA$CI
`T|Ka
3xS\bo
~MK-z\d
]%1a!D&;,?
ao_[3^
]dimGK
O#t=fw
j'XeI8
'->)e\
f^]tDxa@
&Ej%vD
Tvk(8
-k~@h^
)Eo2||
7b.^C%
lHG?sn
*-U($<
:@i 6S
XmD16[
2+|`E)
G@h?<a
q<+Rv_
jxm=8a
x#w::0
#+U1(c
gO5vWn/
8qhq+@
,B\bN0
.Zix=hT
{Xl= &
#aqsi#'
4uZO'?RG
A,hbvR
6EB&}#
rtaqPus
`_\zNr
zj%,d0
9AM!e"o
%,O@El
FMuUSL
Av hgV
t*TAE2L
6:L_l=
5Ki05&#;
YmpbHC
8gHWr]
q@l*Fv
?Lf>O^
gHBV34
owZdM[
8Y5{8H
OX%?jH
uh8OkM
/B_N,b
WGpa*)
pcA<7cd
!PFu>M
{N5R:D
idww\#<B`
"TE7cie
G- 5 '
Lj^FH)
i[5uKRZ.V
=QoM;y
^p09RS
_5FEvXV@
)njg@l,<
19~YM_
icN@F@b
D0! [R
\w}!5@
&ag,C^T
HhCxX`
STw m|
1{X>4P3
`k72d&
}U9Eu~
1UO)Ax
;C$bZhU
:>K}'i
#=c-/k
@8.n14
u(O++Hf
@7<#0R
w@hTl~/
J5hd_L;#
6(! _n
M,X|K]
Iz,^KE
F@"IA4"
INrn}X
QRSDCZUD7
2[WB
qhz,#\
Gtc79rpf
k46HRC
+_}*z;
+{X=]w!jMT0
%-Xw,'tI\
&/G?'W
z<b<ab
bTrugR:R
5<sLB?
D`Mbi|
O8;5%
OAdso
{kYk/*lY
PoO:'gZ:D(R
)z%aNB
V:v@v%`@
__Dr/O
c98l2c
?Q|`Jl'
nu-V};M
[>J*b&
#kxaPx
0}6 g-cU
."QrcQ
ETG+w]c
T(')Ni
TA>)6#
z{q]3<B
RjP1Sf
G>=6O{)
4Nn)FS
|_WAS][
3a! j3
k|F8l@
QS|uY^
W\Xuj~e
X[\FU.|
_zqCW9
(7K^ZC
{ (CIL
PTj_'%Sb
/iuYcp
=<tE*G+
Y?),qZ
=7q;yML
[:m.gi
x1!\LZ;<
;_Z@`
f~gE=#L
08+m~`!
9MdcD`P
qppslu
=?kusw+
DR"JTQ
jMrCndc
TH/;s
mhP$F}
9<r?mI
rD~xS
!^BYp]
xt~0,U
r$%,9
BY]J{I@
Nr>!)m
mkfm/x}
YKsDOr
A4+Cp_M
ys @^7
C>CHo9
{EEcJY2;
(I[MM%
Dj9$OAw
C|H~Fq1{
F"u`SR
GqVXD?-j?
zp9dor
TN;AS)
L#-?{V,
?n?rhVC
aJm4Z-
ZSPm ]
J29aoK
|4Du]
U,Wpx1
h!b5H/
A'3>iw
CAy4~<
n(aX3*B
%-*a :
Nvp7$p
pZw \sC
+[wfp<kS
vJ5IQJ
G(~w]c
j]&jBD
cWR?a'T_79r
_JCvRD
|B`ho;{r
"<F ;o
PNgGiP
P6ofI9J
xePjU]w
/W"s=e
TeWW]h{
~ OZ~[!
~FP_)_G
\0?Q~=
2#l<+z+
9J_tEW}vu}C
%LkKMs
sv`6=N'
:Xn6HF
13TwmB
z#c'AFU
yTniJI
BSlgFei
~`S#U.
j^C/P}
VDP"m+
8@O(jM,
K)`k&Q
D>FpQ5
d3Ru[9V
BXK526
XSv=|
'X5wR#
~!G5Lo
OjO$/>
>.cf+5
kY2Il3
a,3CT]
mZZc3WMs
M;KFI-
&QZEfF
QgNZ/o
+0J]$k
T\{-m<
"v0u?:
5:l,y-J
sT?FK
4b_[O(6>&
7x?y[G
>)2y@Y
+M>i|Y
564wtX
{++?3F1
}!-jVo
%4}(zWT
S#Iv$s
UhL,@
DGhKiV
@&_R(Z
B/ZX`x
3%N0W
p0vdS-.
$TgfZE
xsbhP5YF
xkH0:'
mok-]`
Kx]K2cEt4
P>{:K%
MIy<Z}
2RB( a
~KEpas
@s Q]B
}aou(.
epPf$x
\R=U,*5
vAcs={X3
FCD:Iz
&z5InB`qzcA8$
^KL&X+
K^{){$
%^ru!dV
A)6SP{
Ehtw:z
FHLPg~
wH6\'o
r=| a6
$OJ%!?
(#4[`B
s@[`wqny
Ec:Iyp
e'vuGd
KqSl@:B
`y'_\q
s+$U)en
XAP)C"
oCV!/~2
A?*nEv]
zQ%\AC
XQZ60+M
Yt+XSE
tqcCW:>
Z-luIL
"#>@%e%
z@(UB@
&id|~`
u2ccmp
aY+-gi
v?^U.y
#_Vl_,
Y1Df!&
c?1w<D
n9_'3{
>67,HT32
oA;mHU
[Y.IOP
O8NCxk
$J=x,$iy
"p`{`t*
<y8>t@
l!rH/**
.S&zmg
M8j%%$
?BNcWp
jQ7gIs
2D*Agn
Gp2@uT{#
k@bi2_
uLv5(DV
]2>Z}48V
-*ZR^n
&T/a/]#
3|+c1epo
hbN( ax
2o#V_/
NO~3{
nL\n27
o[y2u>
Y;?i'y
0i+xm9Py
Fsf!9'+
u7SyEM
JuZY!}Qy+
a` 'K
Js-N*(V}
}\)s&p
FD<U~w6\
:zt#\-
>WQQ,{
^*pF|}a
I>txQ6
Fiu).I
7_SP0^b
Rrm*2i
xweP1
n.8t5
LrM,UD
uP<2:n
QTm=~3=
sdX0<u
JO"Dy1p
NdDTy,
O<_T#F}
~ltkbO
#nJ{c6
z^bj!:
VGNq]>
Pd%"BX:7
w}4I)R,?
MXdi0J
j,::Vf
@8:`5Y
R._Uaw
^H%dh/
Yp\+)M0f
.D~q5^>w
%ha5Lh
%7/!C(
@b{^JA
PL[;xp
"@!uYA
M>;!^Q
9J=*-e
>nAx!>
H,OZ$b
?d4/e@O
?O5iC5
Nf\0L(d@
PD2RTES7g
^H:}"#
!8Fz$B
1ihhF2
)YiQ+!
s72Li'
>7bs.kl
sFLj:r|=
}"6]2P
x8]dJk
z-bda7Q
:D?yke9
a)&k,Z
sT-Nlzz
I+7oz{
P^4vI2I
9vt9o@
SkC5My'lFk
N&-:85
6YvNhz
FUsdLFl
L&oNv:f
6jvn}
>UiWN*h
yOXH56
&n})-7
cgNnG|
ofka^"!
09E$L+
M"VQ_PQ
6UG,dT~
[~d??3
PveDG$
"!m"C5
=n>*br
7|3UvH
Em8B\/
I=_R.l
L1{R/
W@w.E/
mt0<V3
0y,j>Ih
]."a,
6gvhEZ
z"gg$R
e&g4P@
p=,gr/
**w9f?
(X_"d9
\wN\rG
\:n1qiJauo
6/HW/:u
X\F'yH{M
4\%+D7
/)=413
,MbsrE
%<SvH
21hF$7ue
-;'0Np
x>Xj-6
ukm4}d
nY8VvX
g8Fx0N
[INFmv
!cqh.i1
Ns660s3
YMHGrA
k)jnW4xl2D!
7\sb^E
~o1fwq
4[Y_)8
S22;+0
[m}#*(
q!.]w\e>V
x4B$~u
6*KK<f
h1P|{
}=60kso
,MOT,9@
*I$A!z*
i7;t0>
yj=RC6"I
!ZkvgMp
L8<A{l
gIZLB+
l):}%6
59A%,J
5-$%`B
SOvHCo
Pnks%k
i*,CZQh
y5n^@C
6f"&~nl
oD[15C
|jcU`6
6vr3K"
O4/{474
#(^.`z5
nP)n0.6
1A^Ayq
z!:* G
I=.j'c
Q>,PA
)~.^Z~L`
/du@m8
r&B8G.
$aoj\(f
_EkZrj
:u:%b]R
w>K"zH
lz_R)*
=}sx)j
r$;lP5
wcAz])
@ytD=+N
b>MuB -C
b)J;AO^cg
Lw/T~HX
}"8E"F
MDdSDJZ
*%E5{F
wza__)
hTnA`j&-
1qv^K.J
0(c`jz
{@s'z
N8:neVk
.PpcDp
a7'CX+
6o5`zD
Mp8VB(}
rtK&(i
fWoa8V
.E,WM"
.n7P1zz
Kp*VQx
&op,iGw
7hi:I%
H1J[/\@
?Gf7MH
SnQQ70
aX(Fyr
Tz%QWdt
IHNDg1<RJ
NKB:<G
,zv2Ws
;})xL#6
(N-7*B
?_~aW1
ax4s[P
9_=AjS<
OqT~?Oc<
8{2iM{
5(umn,3
!4zAhF
BqwU(FcV
&I\<_,
tyD$n%1
}Z.-M0
.*Ca{az
KhF Pn
+vPYC~
9}k"A3
N5lxDP
u!QLl/p
?I'{)vW$
%O kC}
/G^zt-
17:_0w
p/:T-k
!eo("H
XC>{
hHajQ$
[GD3D+
'3:w#|
j&jo@)c|
SS 5u(
&K|CTw
d|R;"L
;=PLv]
?ouB 9)
[#"A#[
}1JQIx
mEx"$*
F2qqsa
S/sV:V
YUY2"-
p(Ohin
G.18+iF!
%zX CQ&=:
F_*KDN
S08"e\
vwM]GT
a\iU=`
29O]"(
Z_P?D8S
frKvOS
$E:M;nb<
^h`1^^
1Qs'Z]d@
O`6aX"6
(>Q1\o
HC+[B(
@G9cl!
dIF$3@
J-iSV3"
u{$mPo
Du*5f[4_
xTU{*<
jA|`ln
=o&)\Nf
0W*",'
cs;~iBqZb
f3#1 4
qLS294/
^Ebdu<
g_cd(?
n!3K#iV
m0Zfc_
{1.s;Y
u2=fLj
I&sbH.
]XH]Uvw
-8]d1c
vYal$F
(67\s:8
}+z`&:
KCA6#
L/H?B7e9
[R@&<V
M%,U7N
c)Z\!/
F\O*<dm<H
}^Cl`4
e4Dv8qS
"L6:Ms
KaO<bm[
wbJi`|
eUNK2i
-!X/~K\
~8#SFb
/l"KDN
S@+Z8@
i( *@{
=1oplf
dZ96~Eg
sLX9)YH>O
-XfIKL
1/'4wV
mcg51:
&j01:z
~R5{B4
XQzl@6
+HIk*TJ-
u,A>z#!
::q#6IY
"d~~6?
hDhYp5
{.q@]
3Gc%9V
En|.Fba
*xQoy"
XXydNT
:9}csN
@k2^]J$"
|{-I6O
.Ih;Al
BWr@ve
3H.3.':
=cbMR/b
x=pO#Y
}*@wM0
aFR!z
=WaK%|lf
P{gyO-wM"
}I,[j;
rwM3Byn7
9SZXtM
fFYZt{
'j.$JkP
`]}|*n
3'gbrI]q
@.O\n
O@,#M.X
nkZI>
fE0YD6
f.4Jo&
LQg`hh<>
:g\'FW
BBH+a_c
5>hu&6
G2,GH
9mz\2F
a)[yGSx
4Y( 's
+G-ICP
jfwYVc
"cpEo#
n_P16Ps2
+)s*w78U
Qp_0!n
wWN7K
[lI#pD
VK7U}TT
JgHwM?D
aRS),h
.@a'<(
U7Cqcbz7b
?%c_lh!
R}W:!vVV
YKz X$
*Fx)uc
-wUx5h
+%_&qU)s
`p7k""
L#\/|%v
XhZ^Q:Q
/4sgU'
]'1D-s
>1\h`G
A30m${
51bZ4U:
1C)Ltt
QRq\BA
/\mrhvR`ON
0lf/e
C}bs]G
4RkB%Hv;
@Zgsfq
bB[jy9
|5hXH8
8A%Bbb
4Eotup3
_KYys9H
5/UH/t.qN
_eCy[=
6}TWse{
[|$P)*W
T-%Pex
nG-x9
IF'GSS
3Jf1-}|
{:!-UV
L$7b=[
;:Yf;J
W`E`kJ
6LxhFb
y,Kj-:@m
~4I}be
S`E @5m
cDL-:b
@anY?]
`Fj~<~
Pd:j~w
yP]m+G#
f{\En3bo4gE
_YJaR{
H|KD@L|V
<\cXa1
N>yj]{
NMBwiw
eKqRI%
Mrv>F>8^
jTVx~:
3Lo]zn
Wif~ ws
O,%kCU
zPmF7cH
tuSy@Q
P0JHov
dV$(gC
$<N2l!
:\7,sI
~p.t:^q
bxt@r
~`YyHG
]_0E+nYw~5
fU+AcLXW
hTT*WE
<zm;lB_Q
QT%Hm
zM?Ns|
Wqu>1:g
g}00}Nw
TRNDk}0
jc-{5;
uwndKp}
5(XzV8
;c:H=4|
gW\Qzo
cDxm0.
O=\5 ;
>=yN"+
y+dF9w
~k9LGm7
),l 0gPI
M:^'Hf
#<{rk
=lFgs$
x-Me$9?
c B1%[E$
?V}"Gc
g1&;@K
;{Jxe;;
"WGSh7Ts
?f0NGl#
qfmhV_
A xnw3
&ALJTolf
pi{P{P
Ehx:EZ
UPi.x;F
Vz[SI
ZX!A`p
QV>ds:
k"+lnN
^4/?K~
6e/jSL6
D^y~{{f
@9u2@'
9dw)b'
rY}5.c
J02+)`{
%J`[Vs'[|.p
Prx~TZ#
6Lv3,(I{7C
YSD'7j*
o5tTX=*
Z}Gn:}
Q5GY\Y
t"H.qa
j@w$"|,]
aY6)^N
Kf/-$^8YL;f
k|YaT3
T{7+ZiS
1hbKM9
'4a3Ag
{Ks7{_z
DWhOP3j
f[?aee
ub4CL6
nPDg{=
'&!xAH
s"B'.kAP
B=bwiN
*V]bov
![,G}s!
=%W#ObrK
8`PI|L
vI>0cV
WrHmXO
CnL]y$o
7s~ltSf
9[2<fiiH
KJ]p@<
zk-/{n
RB 8!E
@> bgH
KZ|]A&
Oxj4?{
Lv m%`
'6Dl51
~_+hJ!
K5B;}l'S
uq3J#Y`
$"b@C
"MYf]d
RRCWxr-
7bCve7DQ
Rk_,udZN
M3$"FzG
Np0Jkv/
$P/31m
nD|D8tx
0Vb^j?c
3'W~XK
+aEqY-,
4[4_dO
;tP64F
q9(0`
$9 ,T|
Gu^~;+[
C\WHHi6
SYjP@ii
<ah#n+
IG)*[Q
k8 gsgo
saxfwQA
xdj~Xv
tm *Jk%
2#ht*g
J/1'V(/u
+<hi21
Tl*7/&
EH9Cfvp;
9|7"A6
Nh-=3&
L`V)E5
^UMU`ev-
Ag29v!
`F%VxI$
~Ja!zD
s.eQ{E
qW@C?x
\X!3;G
T?:<.<
J_]}<;N*
W,fdqx
W&M2}B
>3=lw.
`,2W_(
y7>V9v
/mgR#%)
IOYSu>
,jmfqa
Kcnog*p
Z$&s|_
mkfr&{
gvyVkX
y@\r=A
yK"v"Ux
^eOb@T
6|.,i.mSL
j+TY&]
+>RCKp
:Q(,e~3~H=
t=U~ie
FE?'kL
B9pz[#
Q}yFvm@
-DmwUq
;_&><#o
#RcN"`
grQMoU
-|As$.G
@Q@M"'
<N];Sn-p
/&me#$_FL}_P%
HDw,Tq
WHQTYg9
=rl,Ge
)bW1Rj
rQ8#K
}N1([1
Uq4[WxDu9
O__tx5
y.^gsN
k/i#A\:
az/[#a
U'I?pD
x_xN{v
?2+(m[
\<9lF@
}.H@t^
qt]'ye
$pA->qN
[A$6~.lN
SiZ-wgx
BZ:NP
Oq?+KbN4
2w:u/y71:1
qs"l|Lf
ha3@\'\M
D^0dup
mco?WS
L#m;'Sm!
o&,8Tv5
[QQ"ok
)l8f{(
5$jAR~p1
CUBkIX
5v"s&{
x/P0K3L9
QAz=Y6k
$vU{,x^r
rTGj(9
JI:HQ9
NDoz/^
aiP{C9
Hb]O<Y
}v"!(RC
rd<D+X
j1SY3Tp
SOWrSk.
d"jj$O
fYrIHq
L6jG<
`[GK|TO
,X"sGf
69WNl*3R%
rUqoge
RPWu$0
bh]K;C
J@x%j3
s<$VHP1k
bn0u8<
5+2IhKXW
JhJ/Et
{tCF7|
kI$792
P9x.Ut
!u."w_
9g#qKp\#
sNK+MID
KUl'r
e,^6X^a
s5hYs5Z
mQ,+(gz
Q%WsF1G:
\3>s t
4t+u8stx-k
yLT>iA
*0.(]l3=
qi=c}z
Z@XR'm
~!XWvC)
YVZ2R
qSxU+
gEO-7^
yZOxEYRu
8OnZx3}
Q#A|4z
.1Q9ev
&8t_\!f
).lj/q
J.C$N
>n#|_:
<2U{wz1
'X0L{(
(kgULu
Wn:_hb
5~ckK7
LHwL]}
Q.+loX
3zj&wQA
~Jo}"9
\9$Iv%s
a!-l/.Lr8
7n6%Bo
m6+J8=
l_jP6_{Si
%Q~&TW
bE!Z\|
l@mwtq
}hj7#
:5c1lK\
.b}$Ss
5S"QMP
9?+e$@
WyLq=A
5&D#x>
ccIb q
?b+jsY
BM,\O3
Ge#jz
w){@3#
Ns,wzN
-|k-gK
AXv\wH
kV^'<gP
uU9"HZ
tr@>IW|
#]GYTcG
A>|R`Rgf
Scv(:kj
Hnw!#W$
r@{<:!
VT)YO48!2
M)L(Hs
./ru6)
%{jA)n#,
<@3W62S
2X,Cx*
tvP*e(
`|D?-{Y
!}G"^f;0
mYNxD
rj&>X3
M>t+Sb
uUg ]S
a>SL^k:
_ES.x
@ Mb3B
O4z&.i
z"&GKaI
t Tn.L
|}8;)k
T:`a]k
tLRw%8`
9{hGc-
5K]\c2
n~O`4D^
\Uxx|ly
_\/#?Q
b.G$4m
j@nTs
\}),B>
BK"o?-L
\JIWi;
7y""l1
uj/v+M
x6:XR%
#M3Mro
kvTS}@~X
pX69:;
V)#fjA
MtsNo0
k^ptqE
`_WObU
97v{\C
{DOUY:
OAC:iW
~Sp\(m
("UYB N
jPkqgq3J=BnF
CS4/jwH
<-peEJX
nt}=5j
SUn(h0
}Ik?dp
n;Mp'g
dQWH(4
-xUeze
>,Kz)hN
$Jow|O
jejUcgB
FtMgqP
@ocIV5
Bx~E(qv
QD2KuH
69tR\8
dX^p`a
'<Bms0
ja}~vEZS
r7%rWI
otWUg|
xo;Rr=siH
IAKm_S
Q3%N(G$
`R6)5d
"%m/jh
~_]"iz]A>h
?wA:LAP?&
d65=eY
"h9^4r=
*^|CYY
&Nq0A2X
]GKby$.
-0oA1H
'i[""h
w}HAE]&
dYzqI*
D8!h4S
.]H-L/
Nx<m/Q
,+ytjN
Yo%;1)
^f;.eZ
l )Jo)
/!^7nJ
;xrHtOf
55ghAd#
S@%ZOf
$Z]Q39
Wi75VR
Vx]sA8
ev45)
3k0s0n
%w1K3~)
:h6V./l
XFFGWbNb
pfpCt8~w}L2k
90F]0JN
MU579s
s2C=YJ
RW046\M
Y`XAS{!
&Dxykz
Ezte=FY
gV[]}I
)N]PKFJ
$O1).$
?E&?K#
s_9sE|
FLXbVm:
A[;;1E5N
%_S2s{$
RxqHEy
Y2=YHr
2GBj3I
U`vinG3_)
@ky<vX
1|EVl
riuiqa6
TBKRV<
`?YnSn4
q`rK7Ll
@S<_$1
Wec3"bX
oK[LFf
"\'?Ix
uO(pcs
^u#"O(9
%87zx:
qBkoqHm
<9I2hiKi
TGs]<K
@c/5n&h
|\?:$GeQ
nEmimJ
DftCsl
5x>9RSj
qP[@@5
C4VUd|H5;
Yr^xh`
+PaP>l
9I(M@+
|+m[kS
tv4w{8
+drjg6
SevSN,
'i(mR&A
sK$C2I
'ZLkuW
%j,,C[B
D*4k!Y'vC
6|4s4PV
0Wi`&3
@sQ(/*
mS3IuC
Dog4 `;
h,%m|p
J< $s1
k65#)c
6/9g"O^O
#U0vwK-
F82EkE k
o_Kp&T
#W1Fn$
snf3RQU
nh3h{s
@AZ;h8L
-TpVgt
ORLlD+
&MvD}^
9~(uOdb
E]XgM6
s5~/DQa
&kzgJYM1
LX.mXea
i[TK@[
rh $H@T$
{VirQ~
z`/#1
ubjR+(
o|RsPJ
sAL]wv
!(7-_Q
~%_8^XW
[f2kVOF
EVpmv
EwjvyA
}Om0cl
MtS}~Y
T]0j~j
%4)uJb*3
r1){INi
i^T|Gbl
E%;1.O
G?xH$6
w%^'- [o8
=reJfj
W&<1JKY
%)U.%+Qt
UjRRew
5P/7r~
%p|sLa
'AM4,)
AVNY"a^8
(vi7>m
2zy#T3
W]uBGz/
zLD}nw
~V>6u
<ZDHkQ.M
"aHOXs
1h@@q7
e"2N9ED>\}
;8X^.<
_21RrrN'
l@v!+U
2i.[SqO
Tee+ep
@[T%hJX1I
& |:+>@y
WhD^bt
F;eAj"
|K"e4O
Ra^gB&=+
yuq"HCv
,6fda&
>I:@AT4
O%t_DY
m8f{^jT
|oJoX1
M+ :j{
O-O-Vt
.Cet0B
cj,re'
E[wyv~
B%o\"k
Yfi=u]
kuQAH?
|MMd;L
9V]98{>
:L7.I@c
z]9<b-
Ta?e:g
@uepz,
|_97,
~_Ke|rZ
,_0r8>
UkH8P (e@
j.> ws&F
P.q6k
L;z0Dy`~
"1>[\T
y4:<l!
NY)G*@%
/h/E[^
k(C)rkg
<f`aRR
jhg^fG
|^b+`h
.1l=U.3
n?pJT9
A*,id$o
q9u4E+
^w5@9z
2{$~"i
':tT(/r
ahI%lb
R9!}m^
UK5c>1|
gvQy\:@u
G4au'jU nXT
`wTR-a
nHF~H<
Ty11ir
YWjl"*
AWn#xoC
4V]f-?
cOZUcQY
p>bmHB
?8W_wn?
AA5Hvi
x[pawmArt
,>`/k-
2~T[OT
Z60eg;p
:Q^ en
_]hoS"[
{z`&QO
]LY9B'
m ]_+M
\;w0~<e
flwPw,
t:^MDQ
'xBvfm
,JEk3&
[e=G'Wq
>1*GaM
kaH&}M
lzq:Un
Zvx+sd
H5aZrn
T20O1'
8'')}k
9O>(dME
:Dr5$o
-D)mSRt
n&u8NL
hPI'ZO$.%
8_m7XI
=2w!bzF
eHE_vu
U_hlm)
z0 I6}
XMd>1zd
MN5+MW
z:8Mq/v
5rP|h
Z;Tt:
MIw,CT
6U*2RY
M{xF4,
G.62:sw
~J^?ih
)@}jBA
#AF@('yEB2
fSl)A
j5-4:d
V1wIY_~
r97S-y
hL,,:t
8s=N1x
JJgc4~
E fN)8V
P8rBCr&U
+`|1Cg9
U^fhL_
(qwd<"
`o%~}%
?o3Vx(h
vl%!gq
+*'<Se
+tFF%z
3l}3:k:`
h`ZbQ4B
(;bozM7
5NWv7f
y8J};&
k6z9o5
TxD:y;
GQJ~^f*
C$I_L;
;JAoR;Z
jMYMK\6
pqkUy6
z _^be
#PVr}m
hi`")7}
(AArr2b
+OH0X=[A
a?]#k4
658oWe@}
>5syK7;e
"dTx_[s
H8u>xA
\HyvE
.sVF.t]
JL"?Q('
KTbSzv#yIEt
6qP(Ad_
|(QC1G
9n1I6)
XhGb$C
k%3|o`p(
37Gs7
cK627K
XQ}eP"
CqKm]p
L*"NJX/&
>)>ciU
`#!^ft
03`wE%
Xr1%j!)
:2d^NM
(T)"c6
OhXLfk
X0p|-q
&!cS_},
Pzv4z;
N}0~NJ
.>PA,w
_!^9_:f;
qMB+3Ns
Ze5*DW
t3n+E0
5@],lU}
!PpHR3
M-1lM_
V!f2UMkI
'Gm/&t
}+>lB.
}i&q*Q
`d!)XZ
>E\Zo(
apGzPc_
d@I6fsO
F=1*f{
?7V~S\!
iHINW2
#L'W#s=
o<h?2y%_Y;
]dH^*
.LA:F;
UYv>pO+
DE"4?Qo
k=)M;rn
:%_"nD
+~e2QR5
%Y#BS3W
?wZ~&D{
?e0'jQ
2f>hb8
v4.0.30319
#Strings
Urbavovkh
Urbavovkh.exe
System.Windows.Forms
mscorlib
System.Core
System
Udwjbfhpyly.Properties.Resources.resources
ArgumentOutOfRangeException
Attribute
AttributeTargets
AttributeUsageAttribute
Boolean
Buffer
GeneratedCodeAttribute
System.CodeDom.Compiler
ConcurrentDictionary`2
System.Collections.Concurrent
Dictionary`2
System.Collections.Generic
KeyCollection
IEnumerable`1
List`1
Convert
DebuggerHiddenAttribute
System.Diagnostics
DebuggerNonUserCodeAttribute
StackFrame
StackTrace
DynamicObject
System.Dynamic
GetMemberBinder
SetMemberBinder
CultureInfo
System.Globalization
IDisposable
EndOfStreamException
System.IO
MemoryStream
Stream
NotSupportedException
Object
Assembly
System.Reflection
AssemblyCompanyAttribute
AssemblyConfigurationAttribute
AssemblyCopyrightAttribute
AssemblyDescriptionAttribute
AssemblyFileVersionAttribute
AssemblyName
AssemblyProductAttribute
AssemblyTitleAttribute
AssemblyTrademarkAttribute
Binder
BindingFlags
DefaultMemberAttribute
MemberInfo
MethodBase
ParameterInfo
PropertyInfo
ResourceManager
System.Resources
CompilationRelaxationsAttribute
System.Runtime.CompilerServices
RuntimeCompatibilityAttribute
SuppressIldasmAttribute
ComVisibleAttribute
System.Runtime.InteropServices
GuidAttribute
TargetFrameworkAttribute
System.Runtime.Versioning
RuntimeMethodHandle
RuntimeTypeHandle
STAThreadAttribute
CryptoStream
System.Security.Cryptography
CryptoStreamMode
ICryptoTransform
SymmetricAlgorithm
TripleDESCryptoServiceProvider
String
Encoding
System.Text
StringBuilder
CancellationToken
System.Threading
Monitor
System.Threading.Tasks
Task`1
Thread
UInt16
UInt32
UInt64
Application
<Module>
.cctor
value__
GetEnumerator
GetDynamicMemberNames
TryGetMember
TrySetMember
GetCallingAssembly
GetTypeFromHandle
get_Assembly
GetExecutingAssembly
GetName
get_FullName
GetPublicKeyToken
AddRange
get_Unicode
get_Name
GetBytes
get_Count
get_Item
set_Item
GetFrame
GetMethod
get_DeclaringType
get_MetadataToken
GetObject
op_Equality
TryGetValue
Append
ToString
GetManifestResourceStream
set_Position
GetString
Intern
op_Inequality
ReadByte
BlockCopy
FromBase64String
CreateDecryptor
CopyTo
Dispose
ToArray
GetType
InvokeMember
GetProperties
GetIndexParameters
GetValue
GetProperty
SetValue
ContainsKey
get_Keys
get_CurrentThread
get_ManagedThreadId
AllowMultiple
Inherited
3System.Resources.Tools.StronglyTypedResourceBuilder
16.0.0.0
AllowMultiple
Inherited
WrapNonExceptionThrows
$530d46c8-d37a-4b63-8cd9-151af59372db
1.0.0.0
.NETFramework,Version=v4.6
FrameworkDisplayName
.NET Framework 4.6
_CorExeMain
mscoree.dll
<?xml version="1.0" encoding="utf-8" standalone="yes"?><assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0"><assemblyIdentity version="1.0.0.0" name="MyApplication.app" /><trustInfo xmlns="urn:schemas-microsoft-com:asm.v2"><security><requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3"><requestedExecutionLevel level="asInvoker" uiAccess="false" /></requestedPrivileges></security></trustInfo></assembly>PADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDING
Bhlusqrdf
! " #
VS_VERSION_INFO
VarFileInfo
Translation
StringFileInfo
000004b0
Comments
CompanyName
FileDescription
FileVersion
1.0.0.0
InternalName
Urbavovkh.exe
LegalCopyright
LegalTrademarks
OriginalFilename
Urbavovkh.exe
ProductName
ProductVersion
1.0.0.0
Assembly Version
1.0.0.0
Antivirus Signature
Bkav W32.AIDetectMalware.64
Lionic Trojan.Win32.Crysan.4!c
Elastic malicious (high confidence)
MicroWorld-eScan Trojan.GenericKD.69306835
ClamAV Clean
CMC Clean
CAT-QuickHeal Clean
McAfee Artemis!7B4F90FF07D0
Malwarebytes Malware.AI.3401572247
Zillya Clean
Sangfor Suspicious.Win32.Save.a
K7AntiVirus Clean
BitDefender Trojan.GenericKD.69306835
K7GW Clean
CrowdStrike win/malicious_confidence_100% (W)
Baidu Clean
VirIT Clean
Cyren Clean
Symantec ML.Attribute.HighConfidence
tehtris Clean
ESET-NOD32 Clean
APEX Malicious
Paloalto Clean
Cynet Malicious (score: 100)
Kaspersky HEUR:Backdoor.MSIL.Crysan.gen
Alibaba Backdoor:MSIL/Crysan.bfac5e05
NANO-Antivirus Clean
ViRobot Clean
Rising Malware.Obfus/MSIL@AI.81 (RDM.MSIL2:u1s8EGT9dvIh5cCnMs1JMg)
Sophos Generic Reputation PUA (PUA)
F-Secure Heuristic.HEUR/AGEN.1326945
DrWeb Trojan.PackedNET.2354
VIPRE Trojan.GenericKD.69306835
TrendMicro Clean
McAfee-GW-Edition BehavesLike.Win64.Generic.cc
Trapmine suspicious.low.ml.score
FireEye Generic.mg.7b4f90ff07d0fa2e
Emsisoft Trojan.GenericKD.69306835 (B)
SentinelOne Static AI - Malicious PE
GData Trojan.GenericKD.69306835
Jiangmin Clean
Webroot Clean
Avira HEUR/AGEN.1326945
MAX malware (ai score=83)
Antiy-AVL Trojan[Backdoor]/MSIL.Crysan
Gridinsoft Trojan.Win64.Packed.sa
Xcitium Clean
Arcabit Trojan.Generic.D42189D3
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Backdoor.MSIL.Crysan.gen
Microsoft Trojan:Win32/AgentTesla!ml
Google Detected
AhnLab-V3 Clean
Acronis Clean
BitDefenderTheta Clean
ALYac Trojan.GenericKD.69306835
TACHYON Clean
DeepInstinct MALICIOUS
VBA32 Clean
Cylance unsafe
Panda Clean
Zoner Clean
TrendMicro-HouseCall TROJ_GEN.R002H07IG23
Tencent Msil.Backdoor.Crysan.Swhl
Yandex Clean
Ikarus Trojan.MSIL.Inject
MaxSecure Trojan.Malware.300983.susgen
Fortinet MSIL/Agent.PQW!tr.dldr
AVG Win64:RATX-gen [Trj]
Cybereason malicious.53dd31
Avast Win64:RATX-gen [Trj]
No IRMA results available.