Static | ZeroBOX

PE Compile Time

2023-09-18 10:36:30

PE Imphash

f34d5f2d4577ed6d9ceec516c1f5a744

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00002000 0x0078669c 0x00786800 7.99967410576
.rsrc 0x0078a000 0x0000e82c 0x0000ea00 7.80417141439
.reloc 0x0079a000 0x0000000c 0x00000200 0.101910425663

Resources

Name Offset Size Language Sub-language File type
RT_ICON 0x0078b5d4 0x0000cd80 LANG_NEUTRAL SUBLANG_NEUTRAL PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x0078b5d4 0x0000cd80 LANG_NEUTRAL SUBLANG_NEUTRAL PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x0078b5d4 0x0000cd80 LANG_NEUTRAL SUBLANG_NEUTRAL PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_GROUP_ICON 0x007983a2 0x00000030 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_VERSION 0x0079840e 0x000001f8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_MANIFEST 0x00798642 0x000001ea LANG_NEUTRAL SUBLANG_NEUTRAL XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminators

Imports

Library mscoree.dll:
0x402000 _CorExeMain

!This program cannot be run in DOS mode.
`.rsrc
@.reloc
++$+)+.
+*+++,t
+7+8+=
+R+W+X+]+b~
+#+$+%+&
XJ4X(
XJPX(
XJTX(
:XF-:
,XJ,G
 XJ(XT
XJ(X(
+5+:+?+D+I
XF,yr4
+N+S+[8\
T+0+\+]J
+\+`8e
(XJok
(XJXT
%,O.98l
+j+n+r+vT
_b`}A
+_d}A
__d}A
_b`}A
,T+S{C
+A+B{C
XJY_bXT
XJY_cXT
 XJY_bYT
(XJT+H
 XJ`h
Y_bXT
4XJ`h
4XJ_bXT
__bT
4XJ`h
4XJ_bXT
4XJY_bX
+"+#{L
v4.0.30319
#Strings
ng.exe
<Module>
mscorlib
Object
System
MulticastDelegate
ValueType
Attribute
GetString
SmartAssembly.Delegates
MemberRefsProxy
SmartAssembly.HouseOfCards
Strings
MemoryStream
System.IO
PoweredByAttribute
SmartAssembly.Attributes
Dictionary`2
System.Collections.Generic
Assembly
System.Reflection
Version
ModuleHandle
GetTypeFromHandle
RuntimeTypeHandle
get_Assembly
ResourceManager
System.Resources
GetObject
Environment
GetFolderPath
SpecialFolder
String
Concat
GetEntryAssembly
GetExecutingAssembly
get_Location
get_FullName
ToString
GetDirectoryName
Intern
op_Inequality
op_Equality
Directory
CreateDirectory
DirectoryInfo
Convert
FromBase64String
Encoding
System.Text
get_UTF8
GetBytes
HashAlgorithm
System.Security.Cryptography
ComputeHash
SymmetricAlgorithm
set_Key
set_Mode
CipherMode
set_Padding
PaddingMode
CreateDecryptor
ICryptoTransform
TransformFinalBlock
IDisposable
Dispose
Stream
ProcessStartInfo
System.Diagnostics
set_CreateNoWindow
set_UseShellExecute
set_RedirectStandardOutput
Process
set_StartInfo
ToInt32
EndsWith
Marshal
System.Runtime.InteropServices
SizeOf
ToUInt32
IsNullOrEmpty
BitConverter
IntPtr
get_Size
op_Explicit
ToInt16
Buffer
BlockCopy
Console
WriteLine
GetManifestResourceStream
get_Length
.cctor
StrongNameSignatureVerificationEx
mscorwks.dll
ParameterInfo
Invoke
BeginInvoke
IAsyncResult
AsyncCallback
EndInvoke
gdadag
hsffafs
asfdads
gfssddfh
callback
object
result
kdsgffh
fffdfg
ffdsfs
sfffdd
jfffssk
wsfsssv
gsfffsds
gffssfdsx
startupInfo
AFikaI
pfpaniAmrndppjo
mmjjan
Shdpmm
mmblnhehkohdd
MoveFileEx
kernel32
ResolveEventArgs
assemblyFullName
method
CreateMemberRefsDelegates
typeID
CreateGetStringDelegate
ownerType
IsWebApplication
UnverifiableCodeAttribute
System.Security
CompilationRelaxationsAttribute
System.Runtime.CompilerServices
RuntimeCompatibilityAttribute
AssemblyFileVersionAttribute
SuppressIldasmAttribute
AttributeUsageAttribute
AttributeTargets
{572a3136-a426-4113-a267-e508a9965209}
{652749d0-c868-42ec-8a34-74a2ce50f1c0}
TripleDESCryptoServiceProvider
MD5CryptoServiceProvider
Resize
System.Windows.Forms
Application
get_ExecutablePath
SecurityException
AssemblyBuilder
System.Reflection.Emit
DefineDynamicModule
ModuleBuilder
DefineType
TypeBuilder
TypeAttributes
GetMethod
MethodInfo
MethodBase
GetParameters
Func`2
System.Core
Enumerable
System.Linq
Select
IEnumerable`1
ToArray
get_ReturnType
DefinePInvokeMethod
MethodBuilder
MethodAttributes
CallingConventions
CallingConvention
CharSet
GetMethodImplementationFlags
MethodImplAttributes
SetImplementationFlags
CreateType
Delegate
CreateDelegate
AppDomain
get_CurrentDomain
AssemblyName
DefineDynamicAssembly
AssemblyBuilderAccess
Exception
get_ParameterType
GetCurrentProcess
get_MainModule
ProcessModule
get_ModuleName
ToLower
ResolveEventHandler
add_AssemblyResolve
ToBase64String
get_Chars
IndexOf
Substring
Monitor
System.Threading
ContainsKey
get_Item
GetTempPath
Format
Exists
OpenWrite
FileStream
LoadFile
set_Item
get_Name
FileLoadException
BadImageFormatException
StringBuilder
Append
StartsWith
ResolveTypeHandle
MemberInfo
ResolveMethodHandle
RuntimeMethodHandle
GetMethodFromHandle
get_IsStatic
FieldInfo
get_FieldType
DynamicMethod
GetILGenerator
ILGenerator
OpCodes
Ldarg_0
OpCode
Ldarg_1
Ldarg_2
Ldarg_3
Ldarg_S
Tailcall
Callvirt
SetValue
GetFields
BindingFlags
RuntimeHelpers
InitializeArray
RuntimeFieldHandle
GetModules
Module
get_ModuleHandle
get_Module
GetMethods
Ldc_I4
get_MetadataToken
add_ResourceResolve
GetManifestResourceNames
StackFrame
StackTrace
GetFrames
TryGetValue
GetName
GetPublicKey
CreateEncryptor
RijndaelManaged
DESCryptoServiceProvider
FormatException
get_Position
GetCallingAssembly
ArgumentOutOfRangeException
InvalidOperationException
ReadByte
WrapNonExceptionThrows
6.9.0.114
"Powered by SmartAssembly 6.9.0.114
System.Security.Permissions.SecurityPermissionAttribute, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
SkipVerification
7$&"mpO
l\Df.c
Yq41f(
;"$(:^2P
^9.gLR
MNXo^*
OwqZ.5
_2Y%e{p=
v6sLhX/.
\+17!h
ag5x}`
czb3>p
7]nnI8
L4vUVbA
`Z+JWf[
cW;3F'
W4*Oh
Ss)Fu+
&_pm+os
HEM"\&
&<8'_L
@@0EekrS
2G%2*
-}4Biy
yO^K>Z
ZL.7'G
O 2'zW
b`\_\)6
wb%P!,9
VSq,OB
X\d:rl
,!p9eu
saR;-,
T,CK(B
4gJik(
$Dy@3
RaAGt!
.RdoR87"
E6ANjY&
=}awq>
2ZI[#f
aZkzW^
WaM%(%*
5[{<g"(
+^^E%%%
6T[pbmIsQx
Sr@*kG@Bi&
6,(\c
__Z))@
9d&#COT
G5rO3!
*5tV)%r
S}:_|]
.#ClP^
^F|8"50
kU.Pq_?
W$'ODm
T\>h!aO`UY6
0#[a![A
_1 oWF+
Mq%5wBXs
uG\8IN
+AU;vx
+.FdkP0G
>iby6#
uMl1Pu
yPu1J
=vy-KH
64)%\C%
czF+i..
_yZggo
*QTo2F
]U#4&O
"jZ 4+
Y6=wA`H
aH&zTD
V6pkU4
8f}9Do
sr#{*$
MYhe,1
B$1e"P
U>nh 6RTv
Zd,T`|)m
?,$PyH
cB-~ {#
sTAV58
GLiIfZI\
FE=^Jo@}Sl
vpO0H
wps&RN
7XH-vt
VZA1!_
M.JOJ}@
)fBOwv=
AkzR<c
|^P6Et
rt+rX,
'*}*,TG
gd#0^*K
Pt}Pz;
)pye#\
+Tt<gf/7
by_~R9
b}yE/'<]
7A^"WeGa
H*3Q-[
m@K)M4@
t,vhW+
`r5ldV
s&O)"8|^L
Bbidgv
q:|xaC
aqTEkF8A
HI#GOaUW
W|\NIyv
o4tY'|
bGgTK:
*sjT-b6
1<d^mG(
g 4q*m
8]h?XZD
xL-]yY:
~|wR?!%,L
4:pOi)
'KO!xN<<
-V`P=Ja
2w5-o3
XeccRbR
r,{f_}
f,.[:y
mnP,Xv{kMB
"WY,{C
)n!`n"`
)2/+5-
d}0v>
@aBT[C
4Iy0G&
qY&^)~
&HRe/N
p<|'iM
zM#z&m
Mn_\%L
h_Am)}r
12P T+
@rM%r'
*m$Vp%
|DM|]G
xcjf>:
~1?HE>
<CB0Fh
x-D{Sm
u$+=Ll
zPLaZv
_CKXa@)
?V`A:q
~}Pe7>o
Y`ms$,
(ikJk.
;c#pPK
{}+E?t
SE3f2G
gMtdh
iP]ru_
jdIJWjlD-t"S?
JCKVW[
BYMH5){
8/Vsq
(j3l@O
A4ejx
_ XG:f
$G$@9P
AX*_6` '
YH|-yp
\6[+33g
n{x^IE
u|`\;{
*p^%e
$x(EK[
CI.v#}
8Uz_g8
6{H|gbj(
r{v&F/E
1%{:ZTb
ZpDW-V]S$
V>y0.}
Z_zSG0
8CI?iwI
d,q-v>;
f%9e,JB
]i1H:R
9WUm\$
*3RG4^
fg+k=L
<Xy<Q(tk
A4I@'zq
5rn.C}
K]?[4$~
*iOI=&I#
&g:<@)~
kLm`!$
<?h>ck(\}
|0?JG^V
FeK\8Z
_R:'EP9d,S
~V:+y't
>`iu:CE
3A3|kC
s/U;hB
[YqWpu
Bw{h=1
b1vL-^t
#e6QJp5
~"oJz;;
mT*dV-
@$YV1k:*=
'hNwP
B:Y-pV
:iQ 8 $
HuZ-rRC
89\jOwp
i,9HT4N
NS+dJM
mK"is5
69+s;[
f19*jrj
t>+.r#
r_sqex^2T
(TLx~M
+(:3R\
RqvYpp
Vyso-dqQ
G"!k5l
oi63O4l
:0h(q/^
I~xK*#
_af(]"W
#O;0~
irfg'p
H(dnM_
k0O6[m
OL?FsAp4mT-LE
G7(k$?
P+>N?/
S*t,*?
vSyTHJ
n?fmS
~3nR#d
}/z.o%
(0vSR^%
E8S{?$
5,JXgj>
r'!kO<h
j4ak;;
6M#xWb
)k3&!f
>2K_b
ej%ldu
k.,,htibyRn
Br=t0H
W@8tudJk
Z/9@G&
ZNpTO9
tHRf#;
Ymn aK
j?I!Hz:
6/uslt
B5<XcP|f
XDXO%GN
Z\r}zc
~0 =P|8
RJI(hu
])[($B
/gYxG:*
K;Q<3
cTVVjc
9#daxvO
)Mb{{i
dKU7uv
Y['2:H
N#g%S/*8
;c't#g
`++1[0
WYY4@Xo0
~g*lWI;
Q`~0T7d
eyknN'/
`dv3j`
lf9OW;>
ROZWes
k4}C)r4
UNZ3OK
hTs,B@;hL}K
KU+FF8T
x>$x.r
tmbN8A
_6$n,lhC
T*FPX7l
pb4k{_
[xPG6zM"
@!(L$<
]]fqy{cMC
zEc'xt"
q1{h3em
NVG-lQ~
Qg+<bW
)esmU)
wOG:>]
,h>n0 >
+G=6:,W#
0f#wDH
U[ejBei|a%d2
U5hYbO
M-ANZ=W>
8u_}32
7nnWA1"
++dk:P
a&z\<z
s~)i2|
S]kB u+
I-:|nwu
$|4tPQ
og\}y&
C~!T}k
v"L*3{
m68]v.
Nx8/DL
i<w6Zt
e5TCK:
V|_r%K
7O&9q
exOG3-Y
k6`{?Y
}O+*D/B)"jwH
m]Il'9
x_IEu
xR>w,LH
0;7%*1c
1*NL{9
DNq:.>
{#>S$/K
.':`@k
)T9=WV
u]v`(OdV9z_
-5}3#QfK
#+2@Nt
IXuyB0A$*-)
?wK9U
:@16&v
V1<Ii.H
1jf;doo
B6rG\4
7=:#L"
sO]9)>
=I=2 "
U$`#M6>M
D88Q^e
^6zhj%ScW
x&!)sw
y,#ghG
4AovCF
sx_n@?;
hD* 3=
}aL+E[m
k;'gU'
G%)\rw
u,&$>M|v&B
V;[6*0
)gGH3.
Ymx%(.
PA+3 {Y
v3AqCj
Z^+eQe=
I%e2Qw
4XKZGE
<$Eq?l
;%lN++
U e y
$KH?AQe
z,%g%zp
4;P)<p
x"LRp"
TUYEXW
n'^?<*
rM[j$i
UV!^xS
&#3^us(_
d4e{o>
"n)P5m
XC;jcn
PCkCwr
b7BMsg0uh
$cTa.mU
dC[,{(--
UaKr0:
Oe.d3i
xBEzPaS(!
SbLD`x}]
;D8;UP
u]bF6'
r*9xh>I
kP\Mur
XcJZ+E
F|gjD
}XOz2tH
a#6xTg\
5iMqu5
)5|wn%
mikj}\
CNOO6@
Kv#=Oi}
|NP.lh
o.Onopc3
1fgX6j
lgV_7BD
O:eD:
b"> 7l^k
&K/~}p
z0LZ\dH==
^:;kx}Q
2f}uK
4Zhr);k
+:9'^
dpd)AV3~<
_$xHaD
#sMQ#w,
W5gj^+v
\TrvXO
W-N~q%&o
8d1YrK
.1Ik9
v )(>=k
6SQ.PW
oT-<yu
m0PY&k
ZI#CNNw"
:8~QGXb
Bd"MK
OQXg{,
!pEi)36
Kd'L6w
Oshx'
In:`g9x
p\'[SBZN
lG^Uy(L
Gh,M_-f
%2D(D\
nh%lYS
H(O/;_
-fwqgb
e]&B4r)
.6id|c
R~R]#&
bF0Ds:
1<BCy/*2
kV^ej%
3&QdBk
j16[@h3
V[>Ypi
R'%Vb#
tv:qFc
X!*5_0
Y@;Q*Pm
T}`\%Kg>
E;NRoneX
j(l %g
Vas*W){
6~l8F*
5UzR0Y
Bce1&w{
EoZ'Bv
8Td?DX
:wJ'4V
u9&ED$
Fl<9p5
K=L5HF
xYc"" k9
aH/~irH
K$X=tb
FoU3.p
-~v[k.
oI,(iiI
9zh)@
sD9%@dd
{2 SUxu
(z&|O_
5^Hg2QMw
rYYx*|
U![b0e
@~i0ia^
m'/Y"`p
~:qpEW
#)[2y4
hOx${e
j.Q%O!
US:dD4
!m`3Al
Jv@lN(
~rQcN>$/
D3lNS]
c)p;Z\
:?^(Q,
V4(P`fo
$)c#/'
7M-Khc
i>P1e
xJ7L=(
kHcI}d
qCR&Lk
y<MBRa
4Fn<xE(
wPo)lP
f`_%{d
`?UU_4
9t!0)t
_R5@_m
/Png;A
Txl`NG
KtWAh
oF hS3
wpg Nx,
zsY~=g
@gM3S"
^j!z9'
ynoKsX
tMOkCX[
W wGBH
=O$S%V
:aI,*o
wfm2n
rY<yb&
pIzze$
N.CCRC
5Em0rX
jEd]k?
DrYt;J
Kvb=4f
d@]h;5
Rmepa}
@#JEA\
yl`)Zj
6Mhh:x
o"8DU)]
c^:_v4
k9(rS_
Y-~?B&
bEG|\N
0y"S2IT
)(7Phk
/kE,$ X
Q0s'R.N
QzarE-
_AOMO`
HgYzk]
5K'Y"r!
;''vy[
T?,@9Z
~no,S#
<-i}66
V^4<d]
:,#VX1
*;p~d_@
Zq+*t;
h?R_IF
W:IDk8
!OTd ti
YS|@!/I^
o1YN%b
P%5r3P
~H;vdx
wxyUnT
MnL1H
DV4i5v
[#Ov<v
_9| $wW
^\*!6:w
fP#BMi
1tK$V"
1!$LG(T
{M6o<4>
>`jp*
({ 0_mw
r!)&^I
uw|1m!
("^ZX6XUQq
87_Byq*
p=9$](~
#NJG+ip
:YMs]|5
|iYA`v
"r|R\px&
YqthFx
ThK@@/W
csiVf'
[ c^c6
B=^0}bk
D2'o`z
)Wmk[y
tJ"9i
$+3b[G
(b2z3[2
1@h91E@w
nKro n
."l*sn
C p~3L
's'8^[A
^e=KG?
(fphPi
V?f|ti&-
LVuS3#
x.E1*PET
7^.-pF
4mNg=&
\^)71c
({E2%_
IRsDUm
fa@.D~vwUP4
@A)3Vw
:Z0E",
*\X,'u
m@7Z<,
D~ykbls
z ?CLl
NFtc9N
J-8361
za<I9)Y&W
5_"WOYHg
#$u*[.
0?\kya
m(sUxh!f
3gw!S$&
*ZyFm*~
,%Ds8
u_,lE
n&!1|pi${
*h~~_z
BQr/}X^
,R<vAq
4%7Eg-o
:rT!Cs
sQi,#4]w_
onX4gC
+#$a'T
~\r8A{
^et8v
1q=/4Y0
gu +b#
]`vi(X
q$L/ds
tGEAa[5
[cRk{w
~!!m]Y
rHMPS9
O3`u |9
v@tR~_?.w
.TMh<0
Hr#_AQh
Q"4A(Iw
A)dcZq
7}mA$T}u
Hj[g:a
kF{s,-
)laNb\
95P-,2
t3"DA?|
DLQiE)\l
Tb:MhC+f
~)QGN(
YY7'y
snc)v
)[05[~
}p@U&Le
nf-=Ec`
tZfL$N
8{_bJ|
b{`OJw
rNgef,L
q8r-,Q"xF
IEtz'&.
rX+t4;x
-ur|,u
k *UfLA|<
Ytfw]#
5FAA0mr
_k--1B
:$PxL@
$ ky>N
Cu'/F5
>4lL[5T
%kJ4]E
}[^HO[tt9
Se9k`"
XLB>j4;
":vR=5h
8%T/W(wO
L)iBtG
m4:LRZ
PQuzXb
(u>NXD
H%p!Gx
/D#hd:
ImevJMj
xkZ]_a
&V'g8ChdP
K0="+
~cFHmb
'CI;z9
D9HAi*
8`|@,r.k
x>r#I/
']~KMu
Y|e}zk
CIDvCE
G@m<6vj
_'f&EK
NL-0s+VNF
+WE4Gcc|`
WsV-^6G
w[OE%D
Dn=1:(
V!$BSu
G7Etg
|Y\#J'
,d8ywb
y|av2
}lE4TA
(,K+7Y
s,F:L-
o80e)}
k5uun1
AF;Ph_
E{BP3\
R>|T2bO{
P,`G0D&
.{;Al/
YsMFtNf
W`[3*24!
_wYlN:c
xRnn]Uy$
nx'eQN
'4e&#n{
)IJDo_g
~$N}BN
`aGm~,
JQr)=E
Z{/4m(
$K_#TB
@37g:j0
+Pa@id
mWf<{j
I_oI*>
u 8Ub?
[S%p'9
R5a)tsVI
&*PBeO
ym.b'1
"SND_\
w[eiax
<(E4J"
1>Y+Mi
*:4Uhm:
D>8\SSds
}ZI;&*
Ou.D&_
|)\%EV
Yj1qe,
)a|xo\1
$E2-v$(@
R?q?#2&o
f^TX$F
*:d6x6
P0GpNA
"n}!,%`SdTo
|/Ize}
,wGW
"q)W|D
a(Tz{hR
b0eCO;
%wtP&@%|[Ef
;TMrz:
@gr|D3
Oz%Pi6
';^Pt:
fL/wk5}
B$%RQ,
$mAe$
>S[[MB
mq]#Q}
-QX$U&
HQ+"Z5
(hF"l*\
('Xgj)
nGzf9$
[N^](I
`=EiO-
W4`w}x
]:-!(]
-2Uvo;xP
zW?0:b
B7L' ]
\k)Z+?g
m+bbpC
{jWuC3n
yLv.:6"
F_)`($CxYiS
&9H~k$c
;Rsx]*
[d1dwJ
w*8*\x
zgs>0'
NG[!|f
G%$&dL
o~q2WzN
3 %@!;P
4hT<UW
9LTT9[w
6$8v7A
lv5/TDk
;*VGv~C
~-k]'4
=I|g1F
\$7?:$
3={Ux$
/n/"^#
"$bU_?
P\7~3=/'O
6j?zFq
\'^'VQb
&>;|>|
f12nR6
V5zll4
dMS75S
*g_s)c
f8h>kH
O`EDCA
`0Yaa*
h>XU8T8
?LZiA"
!/Ti=x
H \>mD
_1=XHC
O>0uR
H'euf<U
c$hfhA
XiaG
|w'VfYJ
UVpC0hSB
4V@.7$A!*
`+w5`B?$@
+v46Z]_
4F8'h~
Uu_b/eHO
=|r9Lyq
\`L_y L#
1lys5.
@nd.o@y
y(S4_2x
buCer2
e->AL]|&
&J;n+:@
KEfVga
zrXz"3
6##d@0
&l=_.
R-rFa}uJ~}
VIwu1a
FAN{!q]
]p3Eo[
QbJ'<:
rhBlaR
[c7?^Y
I3tl5
@Lg;j0
r]m7l(
X=T_9C
V1ikQ3
a[_Gyn
v>^,Sy
m=>0Gm`
w=m\U%
;y(oEA
|p 8]r
&_kuE+L!
D{2Fwe
UE\:Zd
UHWy1w[)
S.|cpt
>7J-RY
V;)C%V
aYM}cD
B;IV={
)859Hw
+E6W{wS
55)$NT
-Gw|X4
ii )}3
KqWEpi
Sow%'X
F5oT-&4
p8+X@FR\
/n#[GZ
oz*g~VL
T1\_;EP
drjq (E;
'HZ=-y
J[3XSh
I?`E&b
sa@-V?
Pc.#?#w
anPu6?
Ghi\dM
Ge*NsY
}+yDl{o
P~*A6N
pRoXJ&
y7}6Pv
&z"\_b
R98yO#&
@mk.?H
+HDnrG
pGjF"v
F2/Vxb
4:Qik+Xr
G{Opb;
d_y}N$
Yh#|#R
`FTQLT
#Ga6uGx
S{mM5LM
<Px@jB
idQGw@Z
vDWbyU
<:3M2<
-RqFMV
b<$-AM
4eOy4?A
xxsL366u%
Tv.?RP
~Hi>>>
0Ds=Sfz
Kpu|x
W1kdKhIP
ox-|_s
6.'=!b
D_yLT;?
:@bD66
eTxzh1
yO?fr3
J}\Sbs
1yE +jqDs
xqpXgL
C$=wGCb
<!RVf,&z[
oWo,k;!
xee;4q
V6#XZHl
O1ILcUU
7:/4.-A
}Z|U6z`
X?Q6#p
04MwzO
'wPq2<E}
0VQmOIR"
mO+F'x
gZ.Hn;(
}i]EZU
{r 'O.
@Xl{k{
-Nnux@
7{+/g#Hr
kDjO0&
[%}zdn
rYi;t
bTcF76v0D
gTRdoj
*MPO7zj
/YdpPG
A6*Y7V
La=J.
M2"1\v
^WC5)g
g8?<QQ
cX:'D_
D.,ATe
'm}ym(f7
-n{2uu|
(g4r2
WZ+Qu|]!
n,:qe5
s0bgE46
LgNDSPU
61f.@$b<P}m
CWiokz
2f0sj\
\@(bU0~
l9Z=~t
lXWM_
,{0w^\
N3G@ts
.%SpkpM~#
v?NODk
i-cXp(
Tgh8=
c(Vmx@8Nz
2r=EkJQG
!]h*FX
$Y,2>"w
t&~?Mf
1&{jo(
M2TqBw
"b,n<#
C0=3pr
5k6&C@
1</s3_Ci
2E6 \S
u O:BC
gp+>6"
YN[ILB
?`lk$<
:xF$;
u\h=sV
@xaMAH
7O1_"svt
TuJTj&^r$
w?`y5Q*o
 7b@^
.:rpn\GS[
xq.r_#c
.f}b{#5
cghTZ@
x_W'OU[{
\'96f,
J__2Ik2
c<$<V_
VoGFCfN
?2.\XFr
zzxFP.
7Tsv^)W
=T0e!l
oN1A!w
fk+>1
I}5(h:
k,^j-b
yKlIyr<
*hmGq]
~Q^wP4
6;A>uJS
3&4h<{
2#A={Y
HA-]T2
%gUL,0
D)9mSv
gvWFC-
}V~6st46{
$b?UqR
//aQCE
V9BPS8
LnOTqVN
*E~pOM
y]8;\"
x1xE~Z
m<1#bq
KC3Rdb+
@8A3y*
\.A&'I
1)fy8+
9"iolV
4K4'[p
+TLx[.
$_OUG8
HX9MZ<
ib5%-v
uqPvO+
b8L!TY
<|*21y
SmP<?z
<'vt='
LRRx8b
&@5w}2
]=4meQ
Zh;)'KZ
!!=P%
<eAbSd
|XOo(2o
<dY(5Tf
3S;u~7NZ
J]Pl{t
f\7-/(U
b=|R)_
_*(skX
{^&(up
d{3}v|y
z=.[}Z
1(-5{:
l>{ixKCwH_
~ULo<a
|aBsV)
Wa $UH7
,e14kzp
EA%1^wx)
-=ip6+
ziAv=Y!ql
-z9<5v
_sbdik(h5&Rr
K8u?c-
km;/Co
mW{g>W
CBrQwn
.toe,
@f!M*Dn
)6IzHw
bFwLVl
c=qrH@
86!vtI
k'C8d-d
^]H)T%
)g7iS1
4v(q,n
%}?Z 8ZS
8P<i~
tT^&gF/{r~l
Nl;4!+ao
]T 8i-T"d
C{;GuH
`Z$;Ri)
Zvh'fKYp
B;48g6
$[L= T
|1,dS*
-eJ_2Ug
eA-b6-
{@IY)'
gWOPxP
4|blWl
6Mh%87_/
9uxd.^&
%m2a7s
a!F:d+
/>E`7C
7<g2g5
Bvp8$Tw
]k{O_?
|p_SIUW
(#2DRb;
XWe~L1
5%:f%V
JvY95CBB{
dZQn_&
kMhIlg
lop)LK
H#qxkZ{}N}
*98lQ=
TXez&1;
`}p;`5Q9
tc/m`Iw#
'b\QvE
1[/z5(qH
kF0(b<b
SiM+S8
t"Iq.#o
emcRZi
fp?{:m
=|zSb)
aC:zQ"
h:eOS:
?@)k-k
I9i&~{,
Asak5O29.
jZdX[(
w@R84nVv
qIaNV|
#U=)~i
._Hh(F@
J#Q[c,
[NhPP:
LjTH"41b
^qsZ1R~
DpS!}4
Hh(j;FONIx
<"TB\Y:
LifVXd
5e(~ry
i]NB1W
]Vl6k2f
e M%e<9`
O3uHEK9
NxdvHE
Z8b1j'T,
d'D(`
~*rk<l
\Jr]13
9H{b%5
k@{yk=
F7l1Wi
A1.;4]
=l#~*I
CTjdx-"2
gsfc M
sVB#Mva
9TOfT@-
F~5)|)k
p[i7zA
]r;Q@V
UK+vFf
Z#)dMrNFm\h{
Nj|-21
{Z9lck
<&1ATu
<i"cvs
sPh;iH
/M<K&g
(Y<xz9NW
O;P5&:
p;:@9fx
^oo8p`B
6z*r[w
-A.D%t+iD
v-/Mn?
JJ;\jt
4$U{~q
1+FL'`
.X(ps|L
CA}of-
%\*OK9
JRg)A/`
&copMM
10V^l<
Gt'|VsJ
`%,PvUM
>;YQ2C<
CmT6s?
cRF^vg
GnNF`>
2 up@-&
SJR@4&
B7cd|{W
1`KnDD
Yu~{2T
FQ}E&#+
.%6I-Y
y,udzG
KsLx$6
BE*CaO
/HO+K!
J6n[G'
4Y\#sr'yT
=:VXrHO
#C8|nk
J2'ic$
If -$d
kp.}NF
!Sgukf
\|Sf-m'
_8?'QA
A[iK:IA
^GNSpq}I
,PDqf_
?|:EE0
a(~Uh-
:&<8A5q
r|T]\a
'[XiN{
@[\K?
B1)}5w
Q]4k[T
9*<uS%
cL=)M^
m_wodH
A;.z%bT
<f[dM/<
Bj&{Hq
(2w]+_
(NXK2v9z
>6)C{1Zn
Qgo.<$
*J&,DHP
.~nKl8
z8j2 M
x&6$]n
.J]cHV
3]=I~d
cFBO+|
8vhn=!A.B
rB9w_6
=/3To]
mWn9Jz+
Xo9gX9
< iCOo
9C>|[7,
??ywT#?
!D}a N
Sx)AFk
ii\V8K#
c{wshx
3hZ/x&
!3-!pA
><}T)ry>
aBa%fQ
!VKqNrs*
R'JU)
Rr\bay
|HgetW
mm<O(;
HkeW;
@UB;>u
lk.^S>
JB+<6?
SK574\
Ta+Rgi
6$z@/~
t@4~`X$
O\7)0
|`0ic?
?@nX)G
USR/I.$
\MTy"5
'x=D"S
>Vr<k>Td
SUe,/>
9C#?n'
ANrUbat
D=D4]u)
aX1fz|
g*5y^V
9PfD_R
n=i+$Z
]<t^1*"
(8+)uf
l"fq5KD
M'~i+D
z;a};k
x#v@@L{B
kw,dHj
Tp'jvl^
yWbl3(
u7y(NZ_
`9dZ%
\?x2v(
MXB5faF
oIpMKZ
X-6<~D
`EB.[*
8-M >
M.tol"O
$G!?DA.NQ
nl.c7t
Y$ANH=
5f2}Dap
/^ba|@O
"cO|xdkY4
&L,6@K
lZ#4-|@
;FZyFZ
]xqty#Dd
?o#k-nZ
%vJexP
iaN!nA
zkgJIV
$+ir{a
K+f\v6
Y.aH9[
-CzQi u
+5 IfC
){X@"#i
wb!45H
|z,B6[
^e8I;!
e\ 1@aB
P;{,0~
pk]FAi
v[S::_
z$=3\1
e|H*#X_
c5/{pgD/}V
&e*L)`
7VkkW-|Vm"
rzDX-S6I*
:m6?w<
8GRzrX
:{)bCg
u?%awl
6Lp~'~
D'_5P
)8l7-k
yL-{B4
g?';/r
2,oD`s
=DtC$"H
U'BoR{S
dPYpC+K!
0 6-E<YR
LaHO#&
G;Z@?g
]zHu]u.
hr3yB_
q)E(Dv^
OTGX7=-
><Xp%WA
:#6~D;
<.X;Rd
/a2EVLx
Bwt\b{
.D.^[6
LYYnOQ
k>N,nO
jG~YKI
C(>"tZ
h+Sqy8
hkxJaI&
J@T;;~
AAHu3b
l[6$;G/R+
!3~gsyb;
+;qcJ~
T-3}hE
bH]!y!:
>|6P(v
P!O~j`ML1
o!]W0R
ouoBAb
jvDV~4g
tc@g<r
(C@{jGC
c5cAhU
FA8d$s
B+US=
XF!Z}3=
Z=;MzOyR
8DA]4x
L(~;p,1ECQf
p64=<`iP0
|+ue\B
{)h<yV
#rS<Va=x
FXhcZq&
kjK>BN
=K-Kv1i3
GT<TbW
<?lU5_
uLi'z|
Wt}*Sa0
~*Il=w
SU8B,r
{c1W#d
4~B1[/
eJn7hS
f66fcB>Q*3fj
7v$yO`Bc@
f4P7Z32+TS
_wdT+\
WT^WiE
ru;m,l
i<S$AF
3R#O))
lX~ d&6I
-SHCW(
1AQ9OU
^33VoZ
jOh '/
r)LP+8n
C4`AFk
_;$lw7
E2250/y
7#2.T2Q
47md.H
OG3{i$
ht>Oq5nE
U.]5GU
&Ln!m9
S{sC2q
QGv983
A5+%7y
Uja?|Y
1~:\(kS
QzY&6!s
-cp3}h
KYI7v
gR{}Qj
dc$4+g
-y6G+Y
dbsaGa
h#E6IQv
,mCA"k
fE]{zV
qqMw,c
C@DZm?u
*Hv}hAa5
=q{K5s T
a.6:X+
@wYMSy
r"6y!^
eT?kb8v
bYyM]_
7v~&(x
pv7S0
W$N6>,
6Rb!4Z
INdwb:
E gM>+XJ
fte~kl?L
l)Dz`]T
C>; 8w
0<q\@hd
ql|dIZW
IIxN];y
JE-2ob
KM9sPG
*gQC;n
N.|+Q4
:N]fVfL?
u~?hkC-d
Og@aa6
+*a`==c?
S!nXBC
Ys*wik
c!'P,\
H'>ipA
drj}MP
G6uW7%
3,^Qn"
RCHe+`
n9t9r=
IL6}F[O
n\C]bY
HG_m)eDD
pZ8c8O2
L@4n8o`
a$ZCwb
JBI/E1
GozjB\|wF
v>8{LT
)3#u1Z+
qQ|Le
le$S|^
Vd,9Tk
rM;jS,
I<sK?q}
RIz6B9
#8WJ>f
PLNs-|
?7E 4x
D0Zie~
Ol/hv3
_OKtzo5
@Jer|u;b
Aw]t@R
i}^K2k
XL\:*P
EU~Im"
5-r#D`
+upQhL
kuWf`W
n[v#zx
;x>3%=
hp>K}o1r
vE!/5,
Cr<5>x
%MbX^S+
3xBjZeg
Zee6{i
VD|W8W
#6X'w`
;|xp)_
C:bhxOE
C'NaVM
?4K1CO
'1@2zd
Y`1Q(
]Y",vZPn
jXh#)e
y@JS>Sc
:c~?4yE
zhMIVA
PUl7|<e
`&ft~x
+"x\dQv
HJcV,i
tCP$~#f
<:5jyJ
R5aa'#
5c|Y|8h
"n["A@
f!W&q6
3*GGN2o
ypJQ:w
J@;3j
QZ|2x
8s6+%W
Zi )C~\
FrBj6]
Sg)^uZ
3|Im1-
5]1~8
AJ9-N%
JoCr4
NhI8?7
wK7UL~
AR9sFgk,
!H+$nY
8R\Y]~
DF=7\RH6
Y=Xuf;
hfebC~L
mXhw\<
ipzsn^
U2X<2q
:|"y1!+
uwh`&t`
&DO"d+
9Obppw
#a`D6a'
t-/% E
L[VngQ.
@/O3=5
2yKLN+n^+
~q3b_\n
B8M<N5
'feCxQ
LRm&Jb
]:tXPEZ
2bG:Ht
NL2zr^u
CM${\T
yhamD}
$u%?w,
N>A^ce
'hI~%+
KN&J.k
OHsbPK
Z2QOjdgk3
5(eqL0
Z:F=9D^fn
zV[|UO
.Bv|AUhD
Fc3*%C
b 9h~RkM1
M-c;zr9b
rS0NVJ
5a1W}[
^ kOb[
m[pX.Qht6
j,Oe@x
~3!e6*
n*\7s<
P9llu
@DPgZ`
" <y#S??
s|e6!p
gVSpz0
-h)rTi
wFs5CH{
\:w<:?
8ZZWK@
wu~E:-
kL=,h:
uj<2ar;
20<3Fw
GSxN|K
[o)V._F&z
ysp`#6
jcVD&u
k./Y*K
omF."T
s,6`6?atX6
w]x)q1#D
(`'&{`
7{ARW~
i6dl$#-
G}Bua0
6wE&@i[eD
)n72F5
~F',{%
72b-4o`
c!5Ol|"`;
rvT,&$AN
!c%y+c
F2iVTcf
O@<?Gw
RR;^G2j
J+C}c:/
y<*==h
2F|}rD
74`otl
_jS|Y1Qbea
O3.4yP
lzeI*P
|%SQjn4
C0daKe
Aid_/>
v]hqz3~
Z]T} E
rQN".l
85EPN%D
>OZhaW
Oxwo5EB
FZ;?{i
O^Tt)~p
.b,piy
~r;uQuiuZozA5
#jj\* l
G?!aW
bo[Jixa
H2G?'2r
z3$I1#u
HuI@ Z
(Q$3YR
BL,K5v
RVKzNC
"F<ti^T
B)c-&j$
ksL aO/=
-Ba977
BBmO&7i
THK+H1K
c5X|?#
~=yYC5mIh
GkV$ze8
dt<jl=,
D9/^F3
Xm0Pm3
0GSh#e
vUIiKP(
o<OJr,
Y3VnS{=1\
+}d4g?
_a:_,)
0:3#\8
fJ.V_]
VKsk3%dQxn
DSa+[&
xlXl%Q
2OR y{
HS(X'xM{
Antivirus Signature
Bkav Clean
Lionic Trojan.Win32.Generic.4!c
Elastic malicious (high confidence)
MicroWorld-eScan Clean
CMC Clean
CAT-QuickHeal Clean
ALYac Clean
Malwarebytes Trojan.Crypt.MSIL
Zillya Clean
Sangfor Trojan.Win32.Save.a
K7AntiVirus Clean
BitDefender Clean
K7GW Clean
CrowdStrike win/malicious_confidence_100% (W)
Baidu Clean
VirIT Clean
Cyren Clean
Symantec ML.Attribute.HighConfidence
tehtris Clean
ESET-NOD32 a variant of MSIL/Kryptik.AHUA
APEX Malicious
Paloalto Clean
ClamAV Clean
Kaspersky HEUR:Trojan.MSIL.Tasker.gen
Alibaba Trojan:MSIL/Kryptik.9cbfdf9b
NANO-Antivirus Clean
ViRobot Trojan.Win.Z.Kryptik.7951872
Rising Malware.Obfus/MSIL@AI.100 (RDM.MSIL2:uW+7HxykJ9AP5YKiYGqdfg)
TACHYON Clean
Emsisoft Trojan.GenericKD.69351359 (B)
F-Secure Clean
DrWeb Trojan.Siggen21.30399
VIPRE Clean
TrendMicro Clean
McAfee-GW-Edition BehavesLike.Win32.AgentTesla.wc
Trapmine malicious.high.ml.score
FireEye Generic.mg.1c9f3c0258e923c0
Sophos Mal/Generic-S
Ikarus Trojan.MSIL.Crypt
GData Clean
Jiangmin Clean
Webroot Clean
Google Detected
Avira Clean
Antiy-AVL Clean
Gridinsoft Trojan.Win32.BitRAT.bot
Xcitium Clean
Arcabit Clean
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Trojan.MSIL.Tasker.gen
Microsoft Trojan:Win32/Znyonm
Cynet Malicious (score: 100)
AhnLab-V3 Trojan/Win.Generic.R476688
Acronis Clean
McAfee Artemis!1C9F3C0258E9
MAX Clean
DeepInstinct MALICIOUS
VBA32 Clean
Cylance unsafe
Panda Trj/Chgt.AD
Zoner Clean
TrendMicro-HouseCall TROJ_GEN.R002H0DII23
Tencent Clean
Yandex Clean
SentinelOne Static AI - Malicious PE
MaxSecure Trojan.Malware.300983.susgen
Fortinet MSIL/Kryptik.AHUA!tr
BitDefenderTheta Gen:NN.ZemsilF.36662.@p0@ayn!Q6li
AVG Win32:RATX-gen [Trj]
Cybereason malicious.a5eff1
Avast Win32:RATX-gen [Trj]
No IRMA results available.