Static | ZeroBOX

PE Compile Time

2023-09-26 08:48:15

PE Imphash

f34d5f2d4577ed6d9ceec516c1f5a744

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00002000 0x000a9334 0x000a9400 7.95354337466
.rsrc 0x000ac000 0x00070702 0x00070800 3.66197767679
.reloc 0x0011e000 0x0000000c 0x00000200 0.101910425663

Resources

Name Offset Size Language Sub-language File type
RT_ICON 0x0011bd60 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x0011bd60 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x0011bd60 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x0011bd60 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x0011bd60 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x0011bd60 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x0011bd60 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x0011bd60 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x0011bd60 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x0011bd60 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_GROUP_ICON 0x0011c216 0x00000092 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_VERSION 0x0011c2e4 0x000001f8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_MANIFEST 0x0011c518 0x000001ea LANG_NEUTRAL SUBLANG_NEUTRAL XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminators

Imports

Library mscoree.dll:
0x402000 _CorExeMain

!This program cannot be run in DOS mode.
`.rsrc
@.reloc
,@&&*~
#es-8R
#es-8R
#es-8R
-D&&&~
,>&&&~
,8&&&sU
,,&&&~
-r&&&&&&
-a&&&&&&~
-X&&&~
-V&+(~*
_b`}Q
_d}Q
__d}Q
_b`}Q
-d&&&&&
-b&&&&&
Y_bX
Y_cX
Y_bY
Y_bX
Y_bX
-&&&&&
,%&*o,
&&&*o,
Y_bX
Y_bY
-"&*(!
_b`}
,F&&&&&
,&&&&&&
Qkkbal
V}X;Sf
0qYR6BSJB
v4.0.30319
#Strings
<Module>
mscorlib
Object
System
MulticastDelegate
ValueType
Attribute
GetString
SmartAssembly.Delegates
MemberRefsProxy
SmartAssembly.HouseOfCards
Strings
MemoryStream
System.IO
PoweredByAttribute
SmartAssembly.Attributes
Dictionary`2
System.Collections.Generic
Assembly
System.Reflection
Version
ModuleHandle
Console
WriteLine
ReadLine
GetTempPath
Convert
ToInt32
get_Scheme
get_Location
get_FullName
ToString
String
op_Equality
op_Inequality
TimeZoneInfo
get_Local
FindSystemTimeZoneById
Equals
Concat
GetTypeFromHandle
RuntimeTypeHandle
get_Assembly
ResourceManager
System.Resources
GetObject
Thread
System.Threading
Environment
GetFolderPath
SpecialFolder
GetEntryAssembly
GetExecutingAssembly
GetDirectoryName
Intern
WriteAllBytes
Process
System.Diagnostics
Directory
CreateDirectory
DirectoryInfo
FromBase64String
Encoding
System.Text
get_UTF8
get_ASCII
GetBytes
HashAlgorithm
System.Security.Cryptography
ComputeHash
SymmetricAlgorithm
set_Key
set_Mode
CipherMode
set_Padding
PaddingMode
CreateDecryptor
ICryptoTransform
TransformFinalBlock
IDisposable
Dispose
Stream
ProcessStartInfo
set_CreateNoWindow
set_UseShellExecute
set_RedirectStandardOutput
set_StartInfo
Buffer
BlockCopy
EndsWith
Marshal
System.Runtime.InteropServices
SizeOf
ToUInt32
IsNullOrEmpty
BitConverter
IntPtr
get_Size
op_Explicit
ToInt16
GetManifestResourceStream
get_Length
.cctor
StrongNameSignatureVerificationEx
mscorwks.dll
ParameterInfo
object
method
Invoke
hfsdkffddfghsffdfaffdchd
fghhfgsfffffdfdffddshfdasdfh
cfffdfafdffrsfsshdkfffgh
BeginInvoke
IAsyncResult
AsyncCallback
callback
EndInvoke
result
hjfdfhfgfadffddcdffffskhj
ffgrfgfffffffkhsjd
sfdfdshdffgffefdfkfghj
sdddffhedfddffffgjfsfkfdgsacsafp
sgfhjffffgdrfhdfdfhfffadfsfsscfgdb
djfffsfhgdffafcfdssfkfhgj
ffchkffdafhffdsfsfj
jffgadfcffgfgfsfhfskffj
jcfsdfrdfdsdgkfff
fdfcffrdgffdfsfssffj
jfffffgffrfdfcsdsgkffj
jfffffgfdsdfsdgkffff
hfsdkfddgfgffsefafchd
fghhfgsffrfdfdfffdfdshfdasdfh
cffffdadfdrsfsshdkfffgh
hjfffhfadfddfdcdffffshj
ffghgfdfdfffkhsjd
fsffffdddfgfefdfkfghj
hjfffhfadffddfdcdffffshj
ffghgfdfdffffkhsjd
gddffdhffsfgh
fhfdsffhfdfhhs
fffffh
shssgfsd
sdfgfsf
dffffss
sffdggfs
ffdgfdhs
gsfddsd
gfhfsfs
gsffssg
sdddffhedfddffffgjfsfkdgsacsafp
sgfhjffffgdrfhddfhfffadfsfsscfgdb
djffsfhgdffafcfdssfkfhgj
ffchkffdafhfdsfsfj
jffgadfcffgfgfshfskffj
fdfcffrdgfdfsfssffj
jffffgffrfdfcsdsgkffj
jffffgfdsdfsdgkffff
gdadag
hsffafs
asfdads
gfssddfh
jfgffdfhg
jffdfdfgfdgs
jsfdsffdf
jdffda
gdfdsffddj
kdsgffh
fffdfg
ffdsfs
sfffdd
jfffssk
wsfsssv
gsfffsds
gffssfdsx
startupInfo
fcnbhIAgda
pmnSocm
jdhfdfsffsdkfj
hdfffafsfsdkfsh
hdffhdfffffkdf
affdhhh
sdfffhdff
hfffffshdhs
hhhgfffdfh
ffffffdhs
fdffss
hffdsffsf
jhfdfdfdh
MoveFileEx
kernel32
ResolveEventArgs
assemblyFullName
CreateMemberRefsDelegates
typeID
CreateGetStringDelegate
ownerType
codeLengths
pending
minCodes
maxLength
buffer
IsWebApplication
AvailableBits
AvailableBytes
IsNeedingInput
TotalOut
IsFinished
BitCount
IsFlushed
UnverifiableCodeAttribute
System.Security
CompilationRelaxationsAttribute
System.Runtime.CompilerServices
RuntimeCompatibilityAttribute
AssemblyFileVersionAttribute
SuppressIldasmAttribute
AttributeUsageAttribute
AttributeTargets
CompilerGeneratedAttribute
{7c5775e9-254c-493a-a2c2-ce09056635d0}
{c95ba2aa-5fa2-4f87-81c6-b88df3595cd3}
UriSchemeFtp
Double
MD5CryptoServiceProvider
TripleDESCryptoServiceProvider
RijndaelManaged
System.Windows.Forms
Application
get_ExecutablePath
SecurityException
AppDomain
get_CurrentDomain
AssemblyName
DefineDynamicAssembly
AssemblyBuilder
System.Reflection.Emit
AssemblyBuilderAccess
DefineDynamicModule
ModuleBuilder
DefineType
TypeBuilder
TypeAttributes
GetMethod
MethodInfo
MethodBase
GetParameters
Func`2
System.Core
Enumerable
System.Linq
Select
IEnumerable`1
ToArray
get_ReturnType
DefinePInvokeMethod
MethodBuilder
MethodAttributes
CallingConventions
CallingConvention
CharSet
GetMethodImplementationFlags
MethodImplAttributes
SetImplementationFlags
CreateType
Delegate
CreateDelegate
Exception
get_ParameterType
GetCurrentProcess
get_MainModule
ProcessModule
get_ModuleName
ToLower
ResolveEventHandler
add_AssemblyResolve
get_Name
ToBase64String
get_Chars
IndexOf
Substring
Monitor
ContainsKey
get_Item
Format
Exists
OpenWrite
FileStream
LoadFile
set_Item
FileLoadException
BadImageFormatException
StringBuilder
Append
StartsWith
ResolveTypeHandle
GetFields
FieldInfo
BindingFlags
MemberInfo
ResolveMethodHandle
RuntimeMethodHandle
GetMethodFromHandle
get_IsStatic
get_FieldType
DynamicMethod
GetILGenerator
ILGenerator
OpCodes
Ldarg_0
OpCode
Ldarg_1
Ldarg_2
Ldarg_3
Ldarg_S
Tailcall
Callvirt
SetValue
GetModules
Module
get_ModuleHandle
RuntimeHelpers
InitializeArray
RuntimeFieldHandle
get_Module
GetMethods
Ldc_I4
get_MetadataToken
add_ResourceResolve
GetManifestResourceNames
StackTrace
GetFrames
StackFrame
TryGetValue
GetName
GetPublicKey
CreateEncryptor
DESCryptoServiceProvider
GetCallingAssembly
FormatException
get_Position
DateTime
get_Now
get_Year
get_Month
get_Day
get_Hour
get_Minute
get_Second
UInt32
SeekOrigin
set_Position
get_Message
InvalidOperationException
ArgumentOutOfRangeException
WriteByte
ReadByte
WrapNonExceptionThrows
6.9.0.114
"Powered by SmartAssembly 6.9.0.114
System.Security.Permissions.SecurityPermissionAttribute, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
SkipVerification
7$&"mpO
Eje<\|\
_KHmP[P
yjx<N/
@Sc6eO
Q'W"/V
y8<~sP
v@WNM{I
MEM-Ce
)=UAi*
&qShBiF
PD )OZ
:Vh>%T
y@K.A.e
=fc ZY
OU!y#
1bt1}E|4
yqW$`8
!Ea60|
Q{"O Ni8
ehKua}t
C/EV\
;X@22vU
QC`>M(
VytA4u
$8=-|\
RBHukW
Kr=)OY
ggJf,fj
*M@\Y(
{GOambL
3{8tOdHe
x,i/3p
Lx}_m~br
wgSk8h
A[Y'tW
sqUIdFO
>lXA{l
gA&"~8
@h2w,1
klov$j
*=UQ^s
l'ws\g
evK%~vK
S#m,do
{."uZ1
r6I?h&
X9qixQ^p
(@cH[\T
!n<DU/
OV$3[h
08njsnX
!({x#
*"+Jw0s
C$U]uQ
U<q;I[
&aJZBv
+n<>2j
t"f+R8
KfPn7z7
1XY-eb
x$W;3?(
F5E,[h
UWT?XV
im`AY"3
7Y+hw2@
bfd(i*
7P~lHV
-F|Puf
G<&eZj
>!k7+}U[
D)&oPv|
\Rv]o`
}dxiMVh
6ZLP=$#j|
<$SX2d
G}Emb-q%
-xQ~.D
)7FlJga
w/}L\dP
6}uit>
y8nzu{
pJ:P#
BT\LT_
y-E%jA_
kfW/p\
hE6*0'cil
}_OQ^Dr
}}2K/]
%^zG:F
sVB{&2d
zEXVV^_>
4/Uus; pN@
pR{k6*a
"vQ"t+Y
(r*>LeIl[
gyB0c
$A(4[*
:SYz@a
E2*ktx*
vw7iAb
HhQ-HLp
?(6rRKBg
az4bHC
9nO?lQ
:8g-{c
C_GA"x
uyu\tM4o
"\Lfs/Z
S=lzK^
v#%.Ir
[n:b*P
Yl=P-~
v`"=[D
8?w@/p
)iSYgd
mF*IHj4D
[| i5
,^ZBXy
~)I2Z^Lpa
=Y4{6=_
g^e`'R
Y((RHE
u]R\D~
SaG&-c
5*qz[F+
#{]xBs
Jvn/!n
WMDdY~
*Bcy]
dlO37
)g?|n|
7@5p2o
MAlP`<
s`aHR8
l,D)Zq
>j1TC!
(0zG.pY
rKR~Z
vCEDTxQWa
WX[W7'
q^u^T
Nl=i{Pz
h:Y5A=
0Ns8phym
Nc5BO?]h
Y3!-[BmH
z$x$U#-
^p-B"b1
x~<U^xn
LlVSpC
;7IGSB
'NC=:f$
rfE[^a
aBrer~
$aIIDi
2HxfkL'iueB!)
GysI~9
]63!`^b
WQLkdI
kx-J,:
%0>%qX{
nSJbMP
-P\\(]
:5}&>6
HD^P2
\IHfp(r
`m{ZC+
MNGovk
WLbE`7
*,oFY9
BTn6^x
_))#[m
ca!lBD
/"b^(V
O{"HT{=t]
g:3P*Qx.
7MqIJb
G'$4j46
Iw*BLL
TD:[:P{"
py0}|Bca:d
Fc-p4:
,|5ZK96
Mk<,m_
!l81E>}[P
VwoQ$6S
uH5K)9
yFHlX^
MjOQ6O
icl1D)
V'I,oa
AS]VtnX
wqb[1nk{
`ojo]+
_DeNkx
1}Q<If
LD*1;uA
H.}.|)
,c\'2
#>@!uq
/^X" P
>O(d}l4
=^yf@
UeiA$4
#/Q,bY
{8y|Dj
95+{}_H
0q<}[lH
W;dE3L~X8
3:mNOJ
W&$Cx?
Z0X ?qh4
;Of SC
Ay!Z~k
XD5*G`&
!&p|&S
9luPAF
IylP#!
?$eAZA
SH$0]b"+AH
sT+r!5
r(BE!+
o5vda/*
::RJVK
_d%iw"
/CkyWo
y~;!ZP
IR9n{f
1g:RQt
'-ej?u)*C
sw(eL<
`Uf%#S
>/.Dll0
(zW3&z
i%0cm[
^(&@Xl7!
vc8~rnK
rLdb!O
OGzjTXq%8
D#0Y0fO
&\P@1g
<^O4!U
q(th^a
uFmH}
|'W(\?
9|O<T&
t"V#/,
XWLFXS
BvXW7}
{d%|7[
7E&vk:T
IT6!`a-
Yf$1{^
Lx1OkI
FjF*oC
} .) 5
gxR8z5
Wj)c->:p_Q
c^#fAx(
m}JPdf13
5`>~gqMAT
M8;N.I[~
S6y;2;?.o
YCV(VT
^c+u0L
J6d2qaTt
keJh]H4
uurn7?
UN`rn"K
0"TtC[#
9nS&swg
WXG;d
!%uFW
kT7=k*$
X^q;+4
IS{Mn]
x7otZ`
dp@>r)
~sDwlJ
s,c~&x
Y"0yv@G=
ON_DzC
\37VY.
llF?qj
Q|Ev*V
$9]`B&
5s=iJ@
9) l~2
e4{fa8
<No|!]
H5:$q)
7\o})X
IHX&M{
6WLpo9g
L0d&2w
qx8%B*
yd;GT/
jFlc=.iL
6{8a6\}L
3a^gQ&b
&1[hZ\q
-o=P`G
YLrf}>
{T1Z^T
.vf22ei
9Tg^ih
#g-'&h;Yr%>O>
jQ4 w8
uH\{ "
eM/6p9
[m%z"0
~u;Qx6jo
R(GS3ID
?}lBK
8t,TW{
]}{6<=f
^gi(}Qmn
BIQCrR
`~E{yb
g~ZdYW
d[FKa4T
)f2/zR
G`A_9*
&4CMnF]
D[f}$4
lWNK}
HcJ>r)
Xd"vb8
n1c4gbg&&W
,(X[~D
G*T^%e#
pWdG!4
!wfE"0
iC173my
K$b[{G
SG`Kk<
k<IX)|
*#g-56
4%(T|b
9]'ttWe@y
ef4 ky
0_EaBS
-AuEt!x
rb4xlK
0<2}]O$
R98Ql
_iQPE2':
l#PIWN
nM*Ti+
>)h70{jJ1
xc~7Qob
$bG+.U&5
@@Wn:]
GZK&6!
r?tMF2#_
M}!4V|%*6V
|z-,>6
X2 ?Kw
D OZ}3j
@ksLDl4}
"~t >
C8vX?&.
P82QHn
"vZXXG_{
E?_NB*
tEIDXN
%J%uR#
"l<Rtk
TQJS?|pF
["tt,z
lw.MSX
E/#9x"
[A$~jo
#LYm\-
4k{)~N
?<oUG4z
lKj@5j0p
):xR>x\
Z?;/UX
F_+M_!3
)`E h'e
C)oENw
5$[L%$
Es{3+=
4bV 'v
>rJE`J
?)}N7@
C| }i%
D1RY%
CP\AgF
J,jvxZ
PedGD\
8tS~ZU
m2OmePF
jhK`/#~
6*Nl0lS
TbV4{=
[@rf5l
'YXOX-
$bX:2x
*:&`tSKG
dqm@4Zn
bD&r !W@
461`P7
6)'-FXv*
yVs|zS
PXQ H2?
p94,%3
}Kb%i@"
wZ-TJ=
Iw8_0b
%!F~*Rq>
=R5MBkQ
+eBxi8ytS,P?/+u
fI>}m7
EHFEM}
C!,?Y)
t,(y7%
|!YZmf
xJY9g!
b!(#8]
(gILk?U
=@F8S!
2%Ai?X+
&6w)Y,
o<{:vr
ro4`dD;R|a
|y{CIr
Bw5hM
g[MlT!
}Ol-A05
Pij]v%]RT|
#YwaYCU
486D3`
X"(#~[
z6:{8GoW
6L_$tp
bQ.b6N
T+djNq
*+2K@V
rDx^Ar
oKGj'q
0?5,w4y
}9g1A7
3rhpFS
klBY/#
}k9[>_3
g{^O7!:
m{]6YX
Q6HG1~
ix^a"fms
m55hHH
Vx[9S"88
F]D3C&
Gg{_q!!\a
_0G3l.
uT.enJS>u r
zN5]5p
=FC/u'
iM1Oo)
lc5I<-
/!/kuk]EEq
Z\pKBx
J\u!Sd
3L@and
Og)'`!n
mC4hj\0e
jyniXFU-<
t.hi#"
ySr&v9)o
dOBV@
Syc;UID
SITzv'2zr
w5Z2nz!
^<sDE2b
xY/>^ h
yu<vb*
g`]hpx
a'!D(y"
sG!"'i
+p*Kt.
%bON|[
o/r4<f
b?mJp$n
d5+$W-
[[Jy8r
Z#0#e|
fX&;9M
V'I9r
jB{<$&*
Fh$C%?K
OO0H?K
O/g6r~{K4c6
']La<<
Am~?>w
U2j2K{
,>b[L]
w{Jh&y
%^eht;X
tVARmM
lt*j0"
f+v2)17
54bXw`
M>sqT}G
Suwu1L
.a#{5+
+uVK$]
55rFmT
DBdbq92Ve"
5MU;KA*
mVNE'5(\L}
7Rv~=\
-O"0Lr
ug$rp%K%
1AaIY)
2d0{UF
X7<RFy
\*0~H]
u#"o0Z
bS 2Oq
8-`5\-=
zH@(K!
FfC,a:
{s[SIe
J(q+!
)Z|~/%
>joP*zU
LmI0#!Y
y!Vkd
GR+uN!
?[a=H-
N7zp7T9
ltHZ["
n0M}'!
iEt&wz
y7fRT~
O(l4}b
r#!9$X
A]o)WJ
=BeqW{
2|AzB\
'kxxZ_
t|x>xL
-PvB%V
tO$MQ
,+MVk*E
0I-tPb
DKpBYj
v$Bk]v
=@o>'qY
In^ #V[~O
+X0KB%
(vnOy@
'LdBIUR
MH0eSU
hA,('L
%{ bB}
m0A@ztI
VA_?c1
@6-$@N
uC/4u&]
Z1V]q?
rW\m'
X8GB{m
s~^;yB
115ps5
x7_2q~
IM9vR,
q1syrS<
-`c6>
bRX<u<^
pz!yCH=
oLV.V|
N)d(p6
KPX0Ugt
A(|PRF
1b('XL
8,yZZa
[o[:7q
,m s@Zo
j_\RSclL-
S9Y{
]1v^y=
ENBk,h
G8$+"M
~{EfAZ
0g4t.m~=
b%x> S
N2mgZ:Y
TcXV&m
Z0Us'8
)E-C Ft)#
zQPF>6
YsS+VRe
2ON(L&j
XNy12ht
W$)>09x
N5w}X&F
_SY9C"
+;5*2!
n(^tiKO
V^]muG
LZ,wj{
M3fF<s
(*[92R
W"Ww$Z
gd!f>0
wxb;qj
+'m`qu
XvUOI0y
-Mw_UNl
'_$=x`
NXVW-do
-yVNNN
nxO5_8
yTgHhL
" {Pdv
vwkFU(UcT
V8|<%/SG
^iSG5i\
k\bAQ3
^1ihic
WC84:
eN?B@
=;iOQ1
H&S?Mq
W6yp0.
h38i=<
.#9[+lw
:Pa</\
@.##}U
Z`*q(2
!8TiT.
U]LF&q
'f=V&{
Xyl%"<
8l>g@T(;
dl39lF`
1FK>sR~
pS5Q)H
f40WO-B
l2GV5evA
_e*nX^<
y.S)KrZ
5jlPLFq
^s`<]M{)
`Z1V8'
x,UIUTK
':}s'h
[v<B@vd
BH^~9x;
S/~[,v
Ff<x-v
y3oOaK
F~ 1E%
:$/uWd
pJ1.k7nT
Fd31Q~
&v-4CZT
UwaaFK?
*c;Dhh
*+Z;|Y
VJS> Qm&
/-C5:)A&&
&:i?Q<
RTWn)2{[
vK^rO~
1sr;MmmZ
+{'Qeb
"Bq0tF[
6ei08{
~`UvZ
w;khF5MY}[
0,5_eW
HTrr|Si
}o'FoC
UJ%Lar8
!utE0'
rhVn{:
7UB$=p
<u<<"R
'bW!ut@
V=i(-
O`W:go
hexV?"
:;}Sa)
-m-\2[kw
>1<S0=
SBYYncg
+C\; ~
^g[yYAW{[
V|{X%c&
TwqY{
Duw*?S
p,D9w$
_xh;l^
(\dICF
%^O`I5
UGdMem4
t>s+nd
]XScM)
cJH@z7
bQgJ`F|
SMLRTj@
9^zX..
UqN!<K#s
F9Wm4
4WCh;h}B
84:tal
#l;UqF
\pX:IQK
IH,$gc
u"0XsJ
,Ewi3.
^Ow6]1i4
yE7hFF?
g2Kvk^
K\ZxPH
~v)\:}Z
Uyi^G:3
bN^e9X?n
9Hm]%jI5
wa4aYU
]f?S-W
>@_ ll
\1!4oQ
1"LCGV
nuxH[`
!]_^iB
M^lp]7@
T9J Z#{
n?M![}^L
om#[!G
<R-Q{r
N3v}t
83'N&|)|
a*;+qh
T?nb8c
P^3LS-
JXiKc]
Ngl|4k
cHqqqVT
r Gm0X
7'<z;o
vlV8 +
l]7e2wM
z2#|;v
fJwx)t
d_8OR\
Gf$rHs
LNjlQV
og}2Cxz
[B"/h^
CV+AoN
n%,Y3+8
Nj]0S
>sM:6~
*TRw^=:
wI9-7rX
qh9}C!Z
xfX+MM~
eN*V!|q
ZjzT9f
^O!q8
!J<KGZ O
'v7g2o
Q5j~<j
"+8UyR
|N<U,i/
``/UDP
<EvZd\
J]=r &
2TyH+B
erf_Y.
'`\HV @>C
:e'XjO2<
Xok'?<
J!%=,7
T<{?J6
y(}2ti
qW-Mg &R
-/{[*+
R,Ml@V
j_*{KJ\
Mk[IR=
o5?b&q
VhTd@RI
s['xTl
g5TUwq
{^$|{d
-m9T2d
t2.U*>
?G=?>){
22%vTN
p&S2j=
;-@I",
]%T"za)
<}sT57n
3<<MX>
?ID~;I|
Q\P4o*
s^<5TD;i=
#O@t6j
uLE6:q
&!YOBPP
&8By"@a=
%_]yey
eRYVqG
@k+8Zd
.37|H*@
EE[ 0h{
@ma'$<2
-rCq\B3
lT&Xzq
CL)b19n}%
1-}"dTB
3,If;<
/G5zd>
c.RL`t
zrVKsu
qjx&f%S*B
nqvk:O
emCjHI
E*h/jF%
}b_^-U(o"
?_Xb0{
AoT'zo$
3vr<-/t
*9:\7;
H=cjSw
VkP +i
lC<@ee
_,e!/Q
cWT[nob
t^DFnr
Y`A6iElC_7
_RW.Z<
j03<;6
&H8w=
6#3#le
AJl86#+
ZY?y(2
feViM.hD
}QYv#o
XIF(&"Aq^
2"Ck"w
~<@}IZ
`VqCALe
RDVT8v
ZUrkbv
[:nh-r
ekjvF$1d
w`]5>X
,RB|}[
Z>#o#ex
XsM?<7
xyG5U)
"iKgLT
|tP@U4
QqxWOg
PjqQJo
}&$gQ%
L./Go
Sm^2[J
8FyyO^
T D+4q
!RzVtm+
eOVIL0R!
v$m2\LK
2P?lRg
WEtpc\
)Q}YB<
MqlB<E
:,^iZ&s
k2ah4,
_A8TlQU
Fp: CX
KBaN54
Vo~!o
IW2:?
8[VRGp
=C.Q/|
&5M0do25
2R&Z\V
n9KUEV
=`U4d*4(
5W:{z(Y<
"[^v/
uZFeDw
aOI~n:/.>
F</T-=]
7Eh8X
C>,703
q.pCV@"
*"l\`=
b4rYNM
\<4+l[
]VDo$)6
]zJ['>
iNk8z/#;
U<LRO2
SdAPL1
Vrb\fU
m''-U:
L035.#
>yy,_{[7
N),<=9-F
A.#%\{F
~-a&o<
"8Oey
r}MNH7
y>Z*^i?
b3{B74
hTh^8U
VnXUp]
El-u{g
ff?jIz
>]cxB[
El@mJ`
vjgV0=
|p_~WZ
tBPSZJ
?s^BK]
CK`x{R
(4Emy/
>bZttb
Ak1s)\
EJml/3\
($03v%
54j7|YQ"3
H"AdB#
xetqG"
%frbN!"D
iXmH1=
wp>lT
$hfd[Rd
!yt"r*
,j>[K\#N
jU{0U0
$@<2dtV
b;+_V9#
WrH|H l
46zp\;
C}W@LNh
SLQ@t)
wi/;gc
ol,>S/8
<A,40>@
"|R-uMC(
NJrGR0
glfm]r
%4q_SZ5
w\'AcGO
Tlp&rz+
p6QDRC
T'Ngy6bv
j$rA9U
5J#k`"
Aoa[fMx
Dg~fC
q-;pv)
GE78F)Ux
vh<Y)@
Y5KGx_
dCyoZY
f;@1x-$
&n)IeF
X*P:MV84xM
fad<1Fh
Lq,g#k
06]No}
9WC23v5
TyamT!k
R6CRaopz
Ijr`_%
O%c`#q!
FAH<3<
PYbv>-
VcnrF"
@,BbaV
1^NKSd
/(<Mmn
=Y^R\J"
eHe:&45@C
BF{uBA
|XJFyF_
bQ1U"A
6t_On[
>(yK\8
V5>*H}
S2c'|N
,:|0Q*
4VSE$;
"Oc':~
Z>,uBi{
Gk=^lrx
(c{rL=
0GS9Gs
vXP2;?
|Cfh086i
A>Uto
:rR,_^c!
.rc3l
oV(^[
d@J+TNp
(K{=wx{
WwX7jc`8
mxGO~LPv
A2#DCJ
2D&A4A
m+^WSda_
f 2-=NW
(#U_\7
c>aLE65
Lp^1(61,
q(rPKHI
H0\s5b
9o\5g_eY
)5wbbj
]n!;c1
q@]0M
I-V69c
VH572/
)7AMog
N`5Pt3pF
kwhH@Y
yYF.,C
8ax>fq
lGA\B
R86b:o
X~*s6S
|(\SjZm
mX>*,+
RdW6Sq
htGL$g
#;P^~A
Zw7c@~
nZgmWC
ruh'kt
8^=m;g~
M%.5XE
c.I0y gu
Q^$9=F
GwK$h'
!VxGWpD
{n+.<Ed
~EG1~)
?%f,W!
wh=f4a
.[b5sI
r|qXhV
Dx>i]m
v8;SmD
9hd]]1d
|ouArA
S|eZ~e
xo9<23
I~R"r-NVA
-_tUR`
slZ""
sw><X`
Fy34<NA
%Y7bd8
#ErX.
X$@8G9'
7Sx{e|
+p3)IP>B
=4n@& L
:O3e:K
K`"[o!
c$!th0Q
L!8;zx
vhMmCP
XqtiA`
FaI5Fp
tsyNM8
MvA_F*vr.
[k},*N
`9Z4@P
v{ &f%
pa<F )
Pdw:m5w
ck{RKn
~3MYpF
N~\,s<
oA)hF&j
P+3p[j
duB%?n
=;<<q@
Cg2*gG
XR@C8d
\4kIDi1g
4i:z9f
@;$%.\
>2zQ5Zs
@U)*-W<g<R
8"V!lt<
V$Y.L(Sc
tUr\d"W
6Jw2+c
yaIP!B
o&A)Q6
lXW*K
Ca8WXj
k3A3OP
F2[eVH$
bs&G+mw#
Md4Ue
jd*SzO
'=imgru
[vlP7w
C^.~V_
78sB)x
UTEzYK
OBHL5-)
Kq'=1,
b<*Q?a
IxbSSgii[A
g03yapT
vVH>X>D{
~E|y0#
^{]w],Y*@O
S1N+,ByH#>K
H>a~vX
y*"JFE
7IIg2a$J
3Z!e-
SR08**
/A#\~
knn6<I
Dfj'kA
U4GE|U}
e6f.+a
U^Vy&M
>l;32De
@Z$gFL
G^j[T>
>1jrz6
Hb`qqQ
 f+\U
9FSsLt
A;gbBP
M6\F>2
\H e(
^sI#1x
;oZPtc
TNhx#QNh
|{cwmgw
_t(XB;
=H:)oY@{>$
"~ngT
cpr<$[
--K3G0O
]#7!_3X
J@8@=j
H`s^\Z
3ist t6
]tNgBE
yN%%r(
d,1;A\
sEdW~*
a1(F_pX
o}N~mR:j{
xQK\o-
TaNE5]3m$
A391{v:K
0wqw$P
s7x^|OL
f0&'+-
1!<ctn
x7PW1;
tIsJP>4
l'X{1D
zvxe&f
_O9%<?
/)"wZ IK
Frmm-880d
86+dDYt
,1UO.G
kJOD@1
X7LnrMW
3;by&dN@*
Kd$L5l)
_CorExeMain
mscoree.dll
6}5>/G
*a(@.F
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
<assemblyIdentity version="1.0.0.0" name="MyApplication.app"/>
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v2">
<security>
<requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3">
<requestedExecutionLevel level="asInvoker" uiAccess="false"/>
</requestedPrivileges>
</security>
</trustInfo>
</assembly>
65BAJIKILIMINIOIPIQPRISITIVUWUXUYUZU[U
w3wp.exe
aspnet_wp.exe
e2ZiODNhNGYxLTI0OGQtNDEyZi04YjdkLWNhNmEwNzk2MGJhN30sIEN1bHR1cmU9bmV1dHJhbCwgUHVibGljS2V5VG9rZW49M2U1NjM1MDY5M2Y3MzU1ZQ==,[z]{7c5775e9-254c-493a-a2c2-ce09056635d0},e2ZiODNhNGYxLTI0OGQtNDEyZi04YjdkLWNhNmEwNzk2MGJhN30=,[z]{7c5775e9-254c-493a-a2c2-ce09056635d0}
{0}{1}\
, Version=
, Culture=
neutral
, PublicKeyToken=
Version=
Culture=
PublicKeyToken=
{fb83a4f1-248d-412f-8b7d-ca6a07960ba7}, PublicKeyToken=3e56350693f7355e
{c95ba2aa-5fa2-4f87-81c6-b88df3595cd3}
Wrong Header Signature
Unknown Header
{data}
ERR 2003:
{71461f04-2faa-4bb9-a0dd-28a79101b599}
MAINICON
VS_VERSION_INFO
StringFileInfo
040904b0
Comments
CompanyName
FileVersion
, , ,
FileDescription
LegalCopyright
ProductName
ProductVersion
, , ,
VarFileInfo
Translation
Antivirus Signature
Bkav Clean
Lionic Clean
Elastic malicious (high confidence)
MicroWorld-eScan Gen:Variant.Lazy.247711
CMC Clean
CAT-QuickHeal Clean
ALYac Gen:Variant.Lazy.247711
Malwarebytes Trojan.Crypt.MSIL
Zillya Clean
Sangfor Trojan.Win32.Save.a
K7AntiVirus Clean
Alibaba Clean
K7GW Clean
Cybereason malicious.d973b6
Arcabit Trojan.Lazy.D3C79F
Baidu Clean
VirIT Trojan.Win32.MSIL_Heur.A
Cyren W32/MSIL_Kryptik.JLU.gen!Eldorado
Symantec ML.Attribute.HighConfidence
tehtris Generic.Malware
ESET-NOD32 a variant of MSIL/Kryptik.AHUA
Cynet Malicious (score: 100)
APEX Malicious
Paloalto Clean
ClamAV Clean
Kaspersky HEUR:Trojan-Spy.MSIL.Stealer.gen
BitDefender Gen:Variant.Lazy.247711
NANO-Antivirus Clean
SUPERAntiSpyware Clean
Avast Win32:RATX-gen [Trj]
Tencent Clean
Emsisoft Gen:Variant.Lazy.247711 (B)
F-Secure Clean
DrWeb Clean
VIPRE Gen:Variant.Lazy.247711
TrendMicro Clean
McAfee-GW-Edition Clean
Trapmine malicious.moderate.ml.score
FireEye Generic.mg.909d39242d301cc0
Sophos ML/PE-A
SentinelOne Static AI - Malicious PE
Jiangmin Clean
Webroot Clean
Avira Clean
MAX malware (ai score=85)
Antiy-AVL Clean
Kingsoft malware.kb.c.1000
Gridinsoft Clean
Xcitium Clean
Microsoft Clean
ViRobot Clean
ZoneAlarm HEUR:Trojan-Spy.MSIL.Stealer.gen
GData Gen:Variant.Lazy.247711
Google Detected
AhnLab-V3 Trojan/Win32.ADH.C91134
Acronis Clean
McAfee Clean
TACHYON Clean
VBA32 Clean
Cylance unsafe
Panda Clean
Zoner Clean
TrendMicro-HouseCall Clean
Rising Malware.Obfus/MSIL@AI.100 (RDM.MSIL2:tbBwCDZ395Q6v1qFS/3Rtg)
Yandex Clean
Ikarus Trojan.MSIL.Crypt
MaxSecure Trojan.Malware.300983.susgen
Fortinet MSIL/Kryptik.AHUA!tr
BitDefenderTheta Gen:NN.ZemsilF.36722.gn0@aKa5khdi
AVG Win32:RATX-gen [Trj]
DeepInstinct MALICIOUS
CrowdStrike win/malicious_confidence_100% (W)
No IRMA results available.