Static | ZeroBOX

PE Compile Time

2023-10-05 00:42:12

PE Imphash

f34d5f2d4577ed6d9ceec516c1f5a744

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
I(j.lg4W 0x00002000 0x000da640 0x000da800 7.99981945988
.text 0x000de000 0x0000a6b8 0x0000a800 4.53690599095
.rsrc 0x000ea000 0x00001250 0x00001400 5.45585654074
.reloc 0x000ec000 0x0000000c 0x00000200 0.0980041756627
0x000ee000 0x00000010 0x00000200 0.142635768149

Resources

Name Offset Size Language Sub-language File type
RT_ICON 0x000ea130 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_GROUP_ICON 0x000ea598 0x00000014 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_VERSION 0x000ea5ac 0x000003d0 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_MANIFEST 0x000ea97c 0x000008d3 LANG_NEUTRAL SUBLANG_NEUTRAL XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminators

Imports

Library mscoree.dll:
0x4ee000 _CorExeMain

!This program cannot be run in DOS mode.
I(j.lg4W@
`.rsrc
@.reloc
n1Yv-j
l'LE!=MSE
E>S*Bh
~0fQo5
w'bP)"U
PzykG-
A=J%vP
CpU*Y8
0f~k=D
#dNq,K
Z_lxH~_
q,R+KwVk
W [oB*
)Me{*5
`|R>>j
n?} R&
^GB)P%
&&m|[$
FD(dfw]
j]N9w?
G6#Tiq*A
s]s[y
*6mKI4
Is5=J=
$Qby:B
Sm4W%07
]&GXEt
D]wxQ`[
}i2&9FY
1}B:=I
6_g;->-
3IsKON-
TgE(wUr
D<CU2pI
r$;1"A7r
:mG6TDDd
S9/$;C
q#YHL
;?|$a JM
jGViiSW.
,Z(?#<
O[~bY3w
[ne][3X
))~f{6
R2AOe)
j][Z3U
k6*5_K
XC)OVlz
>2DimS
@xJ@"e
=9=vQ#
IBpU=H
3_mg$?
ptB-7aU)
)7EC#{
T2Qb3s
`6STn7k
uhy&2v
M?)wS}
yH&>lW
s+%+0G
h&>Q|z
D>-AD:B-
$^KXQ~uK
=j[=k)1Y
D5k1{*
/^yo<1
s&j[lGw
zw7A1w
RtKgwv
Wr&(4qs
_l=9}y
!\E7.?
1u(fisL
j+D_?E
%rArWU@
.xYYAe
nLIh;|
:?V\>X:
a[\7\6
sm@J1I
Og,M*<
nwPf53
zFQmMd
U<EkKy
Mq2s*rQ
*jRQbQ B
enV,:C;
i>T4AU
#.~JHS
gT*pQ2<
vbJp)
{qmej_A9
$4\WG6?|?
^5Gu`}p
gxn|Td
qj82r2
kx\$q!+m
K=^#fE
9x5`~
ac{]?
mGN`):
,Lc.'{
"D#PG\\/
`Zn6/<
5@[L?z
KPa96c
J8`uras
MM_wN6
sQLke#
4@[BJ
a6;L\#
oHR)4#J
*h61q9
QJ.hLXN
Hyg\9^#
AQsEA2
Ec+r)#
KK~Cs;
0Jd{~'^
Y\yk_Y
oU*KG"
td0qL`
Gf(EPG
z-?WXn
<28;;<bQ
rx\ZZ
o.FbmDjX~K-
t`xXzH
j=Kj7NU=
%d;/89
Bu_{L!=
b1$cy^
c$6A7l
hO2cu@t
-N)Sv)
.;4/W6u:
'R(}K=
v1wW;Vc$
2F,Z0)
H(5$;<
kZ3fjlU
"xg#~jU=
#P5/->G
Z/KDAV
fmD$-L
#3{9@zq
kXQgqS
LrN/--
uVT5iJ
2r_ X
dk!r{[
-h)@=&
K@b2*{
z!ti!Z@
G`zey]
[ _Fp8
nB$A8}`
>CTfb:
4*tjN$
zk~,b3
NVS9D9
aq'J'Wl
[WuXX}
G1xaPH
v|P5Xe
I,fct.Fo}
E`-j{a(T
<'A[p$ &J
N|v.Q$S
e;/Mhu
>@:*oQ
0R]78z
"xfJ\w
m`>|/1)u
>M)ObJ;
g&}@n
>]u&Q)
[(@Mm(
7q[GEt
w; _Ce}R
B{QtD,y
ZK/{{}_
(N^,N0
S?='/!fP
^^]}qm/
@b>b@~
=l`B+-
fb2ZBe3A
S)]Yv-
H#y+8FL/J
r0(%=yst
fql^?>-
;}3B,@
@/m~%(
rlusQ!
ex*,Ro
3%*BCO
&\mo =
PSIh0eg
R =fdcs
dHC0+:
,K{o%~
gmB}-2
7mG6,:
)uj3/M
E+~3UJ/
Q jJcY
LwjW=%S
#Q3PnFq
$mF:X&T
8*buAN
SbFqHg
MRX.{p
VBdk(X
"<Tv]^
g`38)qj
TCEH#h
)VWYl4@
L%#[F%h
h/G"-C
tu\E'+
C}PAJ$
IS?;`E
sFSOy3
Appt!{
[)ZVL;Ak
(`xGyg
eOwo2AV
U[zt#o
Mp706E
YQ:s%3J
'+/?m,N(
`[?#gu
yQ{#di
ru8)Sg
9GUop1
(_h;58
i4$<NI
]xC@UZa*
oPFQ12
pr0}Fe3
%ex?h0ua
#8d,wE/8
cS)_Kz
y!lr4`
a:d<g<
Nl5`|na+
wZAbFS
vZIQQU
5u>e|Sx
}8si8g
q@rb4)
q`-ER`
o$03~
Jzu('e
}8`M|q)
G*l0X[
~qzI9R
ZISJsz$
)/fgu:j
/9z5XL
5I[":G
2`Bwl_
m[ovti*
&oo?%e
2faX;Y
Fv`?r`
8:6d9{
T7uk>K
%DgCC}F
J-L<Hn
gFF&"7
VD71_K
|di]6|
.^qQ`OG
@q!"#G"P
wJ/~,E
jA*v?#
iq>& e
e{gb|
Af?(:-
by[u`)5
dLWN;V2
HjJA6e
)ru$1C|<e
yh5up7
z+7r[/
ml<$Y
unQ_7-
@:,m3d
#D06.Jn
*fxNoW
U9oM}E
JyEKDl
/d"q#n
r]ft@q]
N?Z141)
X(]<^G
Ura^f#3)<
A>&R1uZ\
je?&-B
wI1l$M
uNY{Wk
zP$(6L
fJTEW;-z
I*/j7
]/G)@r
1kO20E
6pq|_
s6]7%t+
n=<*~=
W.P8X8
JU'6t}
[`bE7ju
ZvdgE/
C9{ULq
|Y,Zw
A6Y9^N:cG
[9I0sn
L0%&XR
Lu6l(8
}8ZTCy55
PJJ|@F
A;;NPO
X<Tin3
Gv6F<q
=TAh>T
'n:[p.=
)]3\p5`_[#
pAO::6
=m-@;n[Hd
.Wbl6W
0P_a@0
b8.Q<{
f.]lN#
*~b8F
I-co-l/D
?JIL=d
JC\R 1
ieB[xf
_8TMu;
{p1#V8
db@+Ji0&A_
4*YC'c
)fEZ0v&B
c8:R:U
WZ1%r{
l=<C:L/M
%#FY>#
tH"{=1
sJ/(*J
z"f^BY
{%\F 5
e(7gNxcL
l|Gs#_
p34F7G
0Dm6U\v
"n]D.b
wNy3bG
3tTr@R)
va<NK$
}(-%m!
Nk1uz(.
3A<1Yi
LVq5(`
cP[G.@
o1@B>Qh
nzg9&*
g5tqf5W
9i^%;a
aV$scl
<wWX%Dz?
ng,%am
,QfKsO
`9]~&&
35]KnK9A
X/1u g
9~%ve7
@}<LAE
&t-7%&
!V?8"
-@e8vJ
>u7tO)l
@`twe+
JAD_?B
q3yuqu=
`D;>#yr
yPfeuB
X(Pf,=
,3aP'(tT
&HRI@i\
}qbA:c
JsKbHu
I!PUp=
*/iYnT
k.b2Wg
T&jNu@aXG_
cp9 Gj
oCf[</
-szg #
,Oh|0_'!
adx*h,
Su6Fi\E
(f)eUY'o
C [^cc
P]?d\V
=pezZS
.K5sU8
gZykV
b^q}!\
t<nJ[~P
Xh]2OO
/vRkIN]ri
tAW|T|qQ
:&Q$/2
nETA8!
vabnvc
+@Z*(jW
`Lz.p6f
K`%:Ma
[F# Ue
V2c_1z3
lrq\V9
ZDCnw
S9_=z
B3k:U,
&QRZ:-/
CGsDgi
s5ar&#
M\NKX09
LnpX?X
%nfJV-
Dl6nWC
Fi+L~#d
2Nm52af
;qMUD8
X3sDr+
b-,C+W
$H/^Z
4c86Hl)
[@K)\v
2WET8U
jO.d
FjHt*$/(O{^
H+YiD
IaZ i\d
1bG[?6e
RF/Z~5Iyy
lL6'[8
Nz.f8gw
ySamUP
?/2YR(
Z:Pv"F#
zD`opl
5;dLa%^b
T^(*>x
sE+6Fy
2LTiM!4
zvD7vm
hU(/RTF
jpHv,{'
cLg;pTv
k)Ye1L
N.aa37#"{
6d5SYT
:`|;)+A[:
1FN,{_b
wrVB:Z
)l~63j
&^IC]$qC
lvh4ME
TOu[?5
~xVP~0
}>#T4f
`fDb|<
4mJz:1
h.6]J@o
Or8/7;
xMMdLE
^OHyy3?Q
rIqr[2
._%Tyr3O
gR2;lo
Z1ZN.T
?=|8 MR
f+?!9+
j"UA:u
wBRAT8
9@F/mX4
PTUwA-
HM^vyvX
wA-tsPZC;dj`
5ms&)p
WK[0B2
DgMXjLh<\W
CsXUg49"$!
d&]oNz=
~b"q88
9s:)[^c
aR W5Sc
#5xotR!3
oW;Xa"qs%
y|A=fJ
&Se$Q1
:=^H"h
clayas
0>&Qx?m
>Sf:F!
U(jH
#c}v?L%
s!T+}2
mqm/H*S
gMAX"g:Y-
>7]?M|
6^Q6M)"
~39n*J
Hmkqe3f
(YVUv<r
{mk\6Q
VmU2fO
JpFE>,
~5<3wyQ
;=WZ@fQ3.
W.itvC
Hez#A]k
wsV.7Y
gxjo1a
;%}wbS
BKV]YG;^a
x(P$2M
,Sfqhh\
Ct5vGs
n!ZXwEd.
UFa6^'+
FFb2_w
%XANz
]Pd!;!
gWB/Bz
u|NcTR
q/4jwO~
gBl$T;
ag7k=Aa
^Fo+g7
;iIIZm -[d
hW7 @X
}V~Kmi
?35"4Z
?dAL<^
Ba"<5o
(_k=~2
{+,6jM[#
\MsC
}ndNLo}
cErZgl
7TuZf|
)I7z9<]
5e0eSa
>y)O2
QVzDEq
3s&>f;
xw#z;{
cpgEq8
9@#Ay_
%;9o1}
yf];M4
T#?*2aGv
~NbUfM
TXOh=P
>vTam[j>
b'GS-uE
6Lzhov
+6vBQ%
Uj:EqnE:e
c=zNj,J`
&vqWBM
F;a-fg5
c|K;~M
-NnG{`
_Z j,dxF
6n(J-gD
cLLRL=
.WxprZ
Qz&5&G/!
[j5+]<-
/`&"9V
ZX?J)~d?
dgE!~~
$B9O4
E#]AkbA
)knnN9
>AG)O!
v e;!(
i76eiw
r4Q`}5M7
T<R_!A
K#Z{T)O*
#f^~IF&
ruM Tz
Si1zRr
gbOXnXT
APBWN11Zz$
(RF#~$
r|My59
6c_*"B
2%PNs(
W`9)i9
T3~5%}
ydy]^3W
?w^pKh
2h9DgQ
$Ov# 0
5~tg*1^y
QhuQz(
WwpJqI
'v X\_
!tz&F0
Zf'>]A
u=\0?2
pplV=g+
L\I/K:i
h$[\cf
QL(}F8
WcB.?
~s'm+Z6
E&p3c<
1arL@s
A~0IH\g
I:vR5W
h2|TAHV
<qI{[0
yNLs[(
vg$Dj*
=^Ay\d&YOf
xKi>F$
{luCX[h
Pw!y@&pfI
=!l.]N
j DW>;g-
"y+@j,G
#"vyh)
<h#MePN
OC~'yZ
[-_2h{_^?Q
1UL&UhG
'@Pi4U
tm^%4g?g
V:E`;.DvL
D|">\0
|fb Z!
X>}UO<
)o+(!A}
5#DoMzg8kw
66qjC 0a
Us^iD%
YY4ic8
Q6VN,O2J
g?u0"-
6~[|%|
&B#!=d
I (nEZ~
`4,l8U
qJ"AiXt^
kK89@B
\|"8eG
.WG8mJ
fQ)X$;
seY!$=W
( {56/=
EP'1?X
l`5oJy]
k +,(1
7*bAnmD
1lue)}5
*}Fo(p(v+
uaYT<?j
;a^1"
C?cBz+
@+JX@;77
;0S{Rj
VjYQXc~
Cm)vl(
"T}.Lr
]N';Y7
/[!tRv
gOx6Vt}
|OOF>z
}Oc;`wi
CnYd#?
MV#{nx{
oWYc%
RTh)lh
-7:bA:
~B>G;'
s^&+Wj
e{:]u3
Id"c6%y
Z7Fmim%
s^,C|2
oK(pH:
m2~V:hq
rxVu~Q*x
c~/H}<2
ok92Y7
Uz%\pl
Oo~5U;P
OnDp'Y
v>JQ~=~
F{jwn&
7lhx![
2x>H?|
8@azuN
<C`k@^z]
l?1G9,
9?,,<t
V-2xv&,q$
UBhhAz
nP='vS
\zJ-5~U1
k"wx/4
j#WDp)
exgh@:
l\{&]$
K`Jh\x
n"j(Rxj
M9a2/
PTa~<7b
3(XVO2
q41@.cv
>-'jRA
#ms&kW
3w$gWw
_Y++C<|
<9?LwQ
G0+3[
Ca#TH?
k*%y=e
$T]n-_
?Jn`'A
(4-EDIh
w*#U*^
Zy#U[+
pu0ZC(xN
O%W~;?
zIE0D
[Jz|Qp
2&}S\S
KZVT&
ee1eW'
/`(5g@W
}x>6+/
wRS&-~
RixCa/`z
y?')%z9
#r?-yR
-m<.0j.0z
DES<92s
.~a6rZW
S}Z#-K
M(Pp.'-:
y3B=0fIJ
t,)2Lj
eduF:rt
zRL:}^
<aMOu{U
~e4GMm
'#8=?Y@N
kM+OWV
J#3CY8
5KFXd,
kF!BBz
,L#|Ut
fFx#Tz!&
^ DfWB
gO9Zed
2{V;lm
>mLM5g
L/ZXh-
kbk(:+
ngG%B8
iAn`R52Y>
'\C~yH
~gj{2\
@uC>F
\YVDau
pKad~8E
MoIY7J
}zI/GL<
}`DZ(l
CH'ppW
|csWi*
si*wpu1'rv6
se*;Qb@
XTas/g0:)>
wS!HMh
bPs,|,)
1M(C*B'w
ykFxSh
-:\8oV
A`N9`V
1FERTa]
EkK76q
>a6nk4`&
|H8s<S
_cTVHKU
7&#~@~
>eMIkU
w~}J/S
dnp<_/
Y"~O+"
_D"Qch
)?SrW07
LdOys@
,0AYss
ch&K.l#}U
"a@+M
C4yC#qf#=r`/8
u-G,iMH
-:MqWk
UNrfB
TK}L?B
'<.Uc!
Zj;QB7
rNi!4[
Y[,PV.
>c%ID7*
`;y2Ct
LN9yzlR
F8;tQ8
Z,{tc]Qj
IoE6D7P
SnTQs6u
xd*^~!J
^4GEFB
!L_3/m
gs LYI
*.Di8w7
?d6IzzSF
1D6j;i
hql6|r
aYRR`30#:
QntpF)t
*8HCXv
#2f,+@
`m,].a-
;H=.jZ-
x0(iYD
]8MYCl
:TV#It
y1m8}
D:x~a$
3hB#{$El
fML_Mj
WFynEQ
b GKPDI4
LN`Ea_
Xb>ls
8"RNwz#0
%u$]pD
=J`e!nR
_6$&9w
|=5([k$y
!~Ayy$
!n3I0
Wnyc@})N
J\4FBZ9
ODQ.pi
5D[SW]
1|WUSZ6
kd$K9H
..GKbh
G;>Qw_
iZ8wf"a
?A=\'j
v q?aqm
X7q.VO
(*m;0,
}'cZ$<
^7xDK=
PnU#,8
\f4H/Kk@_
Tb(0Y|
y7)I|
:Jh(j"
&x!Sgt
2 Z19<X
89@L=&
,Jrm6#tE
zT0'J3[
UcJ9|A
a!. d7
.o$8Uv"!
Cn#k]q
>`t9RA
j+EqeRE3!^
Rax[cb
Z^8D,g
34u<;<
]O_CiW>
*`3".
wx:2my
?7=2*E'q
0"^zJ
p&2O*C
<j[s}a
y=Wy%C&l
x}dGARU
[<[ds=
z"O30`
*#1?@@6
$.ChZgA
NZCpFc
=AuU#@
$J4A<UIi
cml,^F
8J<(*[
2LCHw@
0'{qr-
ccFM#9
D,i;=/G
QmeHuh
}Iw_8?0
A6+e-D
XfVKurW
uO|*HE
wICwR%
8kl<z=
`3DlhLz`qXf
.m404 a
Uj;r|R
401@)P[7
sOq$}FU
#.!YQ5
8]L6Do
430=tv
<qt5jX
,5y>`Q
"5KZR
g;}]RJ
=?nik4
H<-b2s
uEKM"=h
Y*&5-]?
w:s7dW
@kVev$%\A
L= ]<z
##q1I^
u$N:['
+j'RvkNq
bd|\6s
M>@HD
os[I;~
LXT+Jg
6]^+_?
$.:wfz|
&Mh=TB
C}ahee
JM^09A
+Sz8DIh
u4Ba>a
J0PT0s
6Z"1@|
"|N?]]n
R"V*=U
5v4;V[O
6B"r?:
_c1 *0}I
$wC-VUC
nAR3Wm+?
_3oNRT
giHQ/5
{'e)z`9
>pl(J7
-f&:j)
rA\S#w
-#1IX)a-z
P,9KIy
JUi~N6
]"y}*M
;BsxP
zIJS^^
#Y`z<^
gY]QAi
^bXnT+
Y"tDl,
pcV){)?
4|_O-V
]asud0
]/CV6q
0<3#\:)4u
2_ZpZc:6
@voVu"v
3WXQX=
eI/hNm
j*<-^
T0,~JZ@
@AFNGo
(OO/t^2
|/3r`u
n<H3!)
!L%STh
Q>g+!
zRDQg8lt
G=qr_
uE~f$P
=tt1G+^
!#e(YYi
[k9Yda
d9I0vG
\5}Bum38
#]X_jl[
>yXZ 6
(YZqQC
+MC)c.
[^'DVH
[4_=EzV
X esDm
BOU3A$
a{L&-Zfz
2T'Ehu
*8H.0
7g!RBh"
}ONX%5&]
Vl$kV^
B#jC+zyEU
;P:K#N?
X5&B`r
I2e-;3)
'E?l$\(
Sn-?K
K@!;06
TX>|7'
ueu0C$
;`NFeSfY2
*<(@3%
x_@tki
67c3Hl
aqRZ6]
/pS&:d
^L#2t.y@F
5$/`=br
vE"'n@
cS4{['o;
{<2Y2L
*EO{|s
ND6 }Gl?
ZR6FI?!
n?>?N$
FA`m};
i}k[/@
@g YEG
%@I^pR
mj2z!D:
NfAY ?
/eq!cw]7
,sjv~Us
gz0fc^
ZHCB*s
]I%5Ne7
8Q'V\#h
'cFPM-
< JT^{
b:,M\p
Y}sn08
tZHU=
xZ]0|T
1k_1?a
Si3=N78
F7&TpaZ
>XkG0r
TYGg_]i
1KrJrk
1X8kd]
|OBYmZb
vUJzAt
YEF6`W
MDk?B8d/
~*WEN9
+\j2I2
(-[feg
|1[FUl
W?@0)}9
:t*HLr4
sm;f-e
Ec9m.@CV
AJ"R[%
(r8[+*
CHy e}
u&d')D
[NV6oXU
t,tM$'
ACdV~]
}BqEE
8=+K$=
JX<PiAM
_-zgkk
GDrDL9
mgwML1P
p<c<OT
<U _L@
K";7>A^T
COdS=h
]3FaL`
X[{ VM
`RG^l@b,
TA6?#!=
+a}i{Q
:f6A'g
.%qa$oG
WR$/$0Z
7G)[<IBf
,1!Pi<jT
9=h_it
#19*sk/2
ou[lg
SU)ppU=
.G's6x
^wa.xJ
X'Z;7d
ncdDe\
SQX{4}bSAi
xrbYR\
>I~)>u
;\P+u/.\
cUTNBGx
^`16>W
_KaaHo@<I
{K.mxI
LSd/c2
}bcA4z,X
V-nvNT
yH;$Q,5
"2WVLa
C&lZ|^
C/(G}(
.hOwSO
BSeY2m
|LrgQ)KOj
4|0f4L
M\>Ro*af
2g:2sv]9
s%{@>p
h6g9jI
S.qjAde
!.Al`0
UM0,0R
]P&Th[
$;wxjy
9dD\@T
NmBR '
Pb}H,h
F,Z,2h
F:q/W
VP1n@A
EU}yk@
I_S)}!
PoZ!`mea|
[}#xPK
Y"Yf,g
Sj#jMi
Fq=E"~
zxz"MR
[F?t]%Q
2x@BsS {
W{Y1.d
y.ELQ?
c0 =gU
e:{hQHP
s\To7O
4d,YWj.
cI7w0Fm
[c29yL
,$E6FS
gwc~e&
f)ii^'
(VK)[_
Laa>8q
Aso$-L
NjPsii
5/%$C[
/O=O3yxZ\
8^CxB:
?`C`n0
{aeGU2m!&o;4d
h^dq7
/@@An%
0]N$L-
!oaTV2
Mlr;n9
=vn|L/Py
E:-1{@
(c\X>
qc1izq
't o|@
'U^/1Z
:1uhi9
-eJI.rE
j*IrNQ$
nQ92lHQG
pW7hRI
iCj-wWs
C47@S&
x''2
'jg7Xi~'
PaX&=!R
Y]NiDBu
UaqE`}A
476\0\E
`qcx1T
)U+=61
D+ IT[z
N0bKVf
iIYlg-
<1AaNNg
[UU:AT
}N]{9a
WwK`xA8
2Qach*
8w.=[*)X
@>hWu&
'YaJ&w^
nPfMlQt
X4fUY5'0
&78TEB
.ow+pU
wf*O(~f{rz
.s(-G7o
Y"!4{_
'HPav|
B9]x[h
Dxu$p0
"B%{Ui
~&ni\G
}mTTw9
ps4_LU@5"
POVM|d
Rq.p)N
`[5Pf^
12OW3fd8_s
aesCsFI
*4'=!F
&[zZ^,
ToJG:|
<F=0C@
%|Fr;8&
XPqq?1
B|;7yig
.MGyR
Q[1u/U
*pj@4a
D+RKiU
G6wr-t
a`3JJ8
z"u3E_
Gy@ldS
BcTt'
\@+ua>s
>]r%?>)z
-oMOE$
E"(b$2
]9i%\w
i(8x)B
U6L.Yf
b'Q&&5
[9%[J>
hxt>A'G
JNcp#{
_`Q9`E
vja|Z[x
rWI=[$
jY[-fR
}+l,~7
6ROV0K
auHsanw4
S<TXLAv
&}.Kdh
c}iz8y
t3* G[{
H)B9{R
v6y%AO
i8Dfj=
o+uk1
o|.jzIfC
d1<y&Y
|>1"0;
TDMt&nc
XG,uv
n!=>&K
;CD:t[
ECDO.%?
vk">@!i
@k!`s7#
j?hOwx
e5K)69n^
AeC-N5
%(>rhx
^k'dU5V
=R5B\h
B0-fVm
b0MzA7
(u*GaZ
^vH,V#
Sw' }Q|h
RP\h8>
DoJ;3L
vXcoBY
UN~CNe
_Mr;u'
l'@2H9
kp0V^V
~lXWtr
36s Y_
W{$neq
;B5K}&
+TookF
xC5i4C
&"[Cb*
k%a.&X
wfb0*PN
zeq14/
9m,l9k2b
Meb1K"{\
U7jYkf
(OB_C]
\SlG1V
:X`qA7a
5f\."]
7K>,\Op
`6$Cg2
O&"9%WB
?herE62
izK&Qe
/#"\:;J
pLnSNr
~_i?vKS
v|:[R|\
at$"T7S"
GBaD&Vse
K875M0
433?{e
<02H36Lkh
V+XW2
,>Z5W7b
M$23Xt
+lyuXw
s0ZmfEg
Zu5#mM
[,-_F%
56nQLa
V!Nk0ig
CSeC:'
:*{#D"
d2F!gYj
oz'r43
sy9$HH
wYr0se
kN}>X
I\G}Qs
/d[[Ys]}
e`QR^<'
@<C~f4
Wsnu2+
ZvF'Z<E5
Q%B2&;y
XCF+^K
Miv.pX
];XTk-.
^I)ex)AA
W|9fB?
l`*K~
qUIg%Q
3T%CQ.
SN%K0}
a{H'D"
Mv]14o
>GLT=Wel
%PBukT
+?bw(r_
j/uW|!
_z>,^-
<yUs]\
nEsgU$
r*0*s6
a (Acg4Mh%
EmaZe~
Q^\p3%
/<?2tb
R[70Cu
ce ~o74
_U#VDB
1?F(|~
!?.a;3ru
[Wz|[i3
D<iMr
rjK'5@
HiRx%)
2h<.~/6
TKAo^P
vljY;W
_t1K7]
sBM+`\
rdYG{np
@+/u,?
iehS+i
D^FZY4
DCs;jB
Q;\vAr
k,M>Gy
q8Yte=k
[5OUb'
s}==/R
9/dSJD8
^QicMaT
u^vrE6
3n4?/n[]Q
xF`#n1"
Y^g;O1h
DSj*Qm
9:MFQ"o
@H$>aKE
SdVfFTH
9($oSc
@%Y2Cl
QMoxG
p-@c!7
o62<b4`
%D[)`x
sHPI9Y
+4+.5\N
DJwA{?
L7t/)E
8-f7Xw
8QU,tq
;fob9{
`n$k{%h3+
HZ;_ZXy
R>?cD'
w.p'Va
P|Gk$F
Us?|'d
&a>D72
44NA?a
_%x f$y\"
$bGXz^6
^&)@ct/O
BH[2vo
HdS6
k`U|~<
Nqi'9Q
o=Ah\\
c19RRv
;(oRp'
oEQNa"^7
8C=>s(
vExJmY
Ii13u0N
w ,<iY/
PM`"b
)x(oK?
I'co;F
tkJb7%
e=d4&y]
_I1%DH
jj}vY~
{|4+nK
!`1'#
BxOt7
b|7x\G
37?E)*
_c~VSYt
A!+<<h
vq}}9FBDu
{S`nWv
JBTS3
RnMFo,
#LN@Y6,i
S)pJh27
PoV&F<
|m "+*
*fv)|>u
;^ClGC-4
qra@?N[
+q=f;Z
^P+95#
d2)=-
v\p+TWh
9tC@%9
4Vek*_
[5/z7-
2{D^?y.
ejH`;iJ
H |~bR
$~Ggk6!n
+T,Q,?ZL
,>M|Z E
w~X25~P
>/@UM8
NGe7^RYU2
qA~/UiM9
)t[^vsV,
"J,S6k
4:p=QiJY:X
9o(`Yb
4/tbIH
~ w=Ura%
O70Za8
Z tkn}a8V
qsRa81
tQ\IZ
_CorExeMain
mscoree.dll
v4.0.30319
#Strings
server1.exe
mscorlib
SuppressIldasmAttribute
System.Runtime.CompilerServices
<Module>
Assembly
System.Reflection
GCHandle
System.Runtime.InteropServices
ResolveEventArgs
System
.cctor
VirtualProtect
kernel32.dll
RuntimeFieldHandle
Module
Encoding
System.Text
AssemblyName
Stream
System.IO
MemoryStream
RuntimeTypeHandle
MethodInfo
MethodBase
Thread
System.Threading
ParameterizedThreadStart
ValueType
Object
ConfusedByAttribute
Attribute
server1
ComVisibleAttribute
AssemblyTrademarkAttribute
AssemblyCopyrightAttribute
TargetFrameworkAttribute
System.Runtime.Versioning
AssemblyFileVersionAttribute
GuidAttribute
AssemblyProductAttribute
DebuggableAttribute
System.Diagnostics
DebuggingModes
RuntimeCompatibilityAttribute
CompilationRelaxationsAttribute
AssemblyCompanyAttribute
AssemblyDescriptionAttribute
AssemblyTitleAttribute
STAThreadAttribute
server.Resources.resources
UInt32
GCHandleType
ResolveMethod
ResolveSignature
GetParameters
ParameterInfo
AppDomain
get_CurrentDomain
ResolveEventHandler
add_AssemblyResolve
GetTypes
LoadModule
get_Target
Invoke
Environment
String
IntPtr
op_Explicit
RuntimeHelpers
InitializeArray
GetExecutingAssembly
get_ManifestModule
get_UTF8
get_Name
get_FullName
ToUpperInvariant
GetBytes
Convert
ToBase64String
GetEntryAssembly
GetManifestResourceStream
get_Length
Buffer
BlockCopy
ReadByte
GetTypeFromHandle
GetMethod
Concat
Equals
FailFast
set_IsBackground
get_CurrentThread
Debugger
get_IsAttached
IsLogging
get_IsAlive
get_Module
Marshal
GetHINSTANCE
get_FullyQualifiedName
get_Chars
GetString
Intern
GetElementType
CreateInstance
op_Equality
ConfuserEx v1.0.0
Import system files
&Copyright
2023 Import system files
.NETFramework,Version=v4.8
FrameworkDisplayName
.NET Framework 4.8
7.9.4.9
$cc7fad03-816e-432c-9b92-001f2d358798
WrapNonExceptionThrows
<?xml version="1.0" encoding="utf-8"?>
<asmv1:assembly manifestVersion="1.0" xmlns="urn:schemas-microsoft-com:asm.v1" xmlns:asmv1="urn:schemas-microsoft-com:asm.v1" xmlns:asmv2="urn:schemas-microsoft-com:asm.v2" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
<assemblyIdentity version="1.0.0.0" name="MyApplication.app"/>
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v2">
<security>
<requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3">
<!-- UAC Manifest Options
If you want to change the Windows User Account Control level replace the
requestedExecutionLevel node with one of the following.
<requestedExecutionLevel level="asInvoker" uiAccess="false" />
<requestedExecutionLevel level="requireAdministrator" uiAccess="false" />
<requestedExecutionLevel level="highestAvailable" uiAccess="false" />
Specifying requestedExecutionLevel node will disable file and registry virtualization.
If you want to utilize File and Registry Virtualization for backward
compatibility then delete the requestedExecutionLevel node.
-->
<requestedExecutionLevel level="asInvoker" uiAccess="false" />
</requestedPrivileges>
</security>
</trustInfo>
<compatibility xmlns="urn:schemas-microsoft-com:compatibility.v1">
<application>
<!-- A list of all Windows versions that this application is designed to work with. Windows will automatically select the most compatible environment.-->
<!-- If your application is designed to work with Windows 7, uncomment the following supportedOS node-->
<!--<supportedOS Id="{35138b9a-5d96-4fbd-8e2d-a2440225f93a}"/>-->
</application>
</compatibility>
<!-- Enable themes for Windows common controls and dialogs (Windows XP and later) -->
<!-- <dependency>
<dependentAssembly>
<assemblyIdentity
type="win32"
name="Microsoft.Windows.Common-Controls"
version="6.0.0.0"
processorArchitecture="*"
publicKeyToken="6595b64144ccf1df"
language="*"
/>
</dependentAssembly>
</dependency>-->
</asmv1:assembly>
@{?@{?
VS_VERSION_INFO
VarFileInfo
Translation
StringFileInfo
000004b0
Comments
Import system files
CompanyName
Import system files
FileDescription
Import system files
FileVersion
7.9.4.9
InternalName
server1.exe
LegalCopyright
Copyright
2023 Import system files
LegalTrademarks
Import system files
OriginalFilename
server1.exe
ProductName
Import system files
ProductVersion
7.9.4.9
Assembly Version
8.8.4.7
Antivirus Signature
Bkav Clean
Lionic Clean
tehtris Clean
MicroWorld-eScan Gen:Variant.Ursu.131015
CMC Clean
CAT-QuickHeal Clean
McAfee Clean
Malwarebytes Trojan.Crypt.MSIL.Generic
Zillya Clean
Sangfor Clean
K7AntiVirus Trojan ( 004b957f1 )
BitDefender Gen:Variant.Ursu.131015
K7GW Trojan ( 004b957f1 )
CrowdStrike win/malicious_confidence_70% (D)
Baidu Clean
VirIT Clean
Cyren Clean
Symantec ML.Attribute.HighConfidence
Elastic malicious (high confidence)
ESET-NOD32 multiple detections
APEX Malicious
Paloalto Clean
ClamAV Clean
Kaspersky HEUR:Trojan.MSIL.Hesv.gen
Alibaba Clean
NANO-Antivirus Clean
ViRobot Clean
Rising Malware.Obfus/MSIL@AI.94 (RDM.MSIL2:Y/VueYWvU4pnhonDnjNsGA)
TACHYON Clean
Sophos Generic ML PUA (PUA)
F-Secure Heuristic.HEUR/AGEN.1312344
DrWeb Clean
VIPRE Gen:Variant.Ursu.131015
TrendMicro Trojan.Win32.Boilod.SM.hp
McAfee-GW-Edition BehavesLike.Win32.PWSZbot.dc
Trapmine Clean
FireEye Generic.mg.4d8037262c4cfb2f
Emsisoft Gen:Variant.Ursu.131015 (B)
Ikarus Clean
GData Gen:Variant.Ursu.131015
Jiangmin Clean
Webroot Clean
Google Clean
Avira HEUR/AGEN.1312344
Antiy-AVL Clean
Kingsoft Clean
Gridinsoft Trojan.Heur!.030124A1
Xcitium Clean
Arcabit Trojan.Ursu.D1FFC7
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Trojan.MSIL.Hesv.gen
Microsoft Clean
Cynet Malicious (score: 100)
AhnLab-V3 Trojan/Win32.Gen
Acronis Clean
BitDefenderTheta Gen:NN.ZemsilF.36738.5u0@a0UJKqk
ALYac Gen:Variant.Ursu.131015
MAX malware (ai score=80)
DeepInstinct MALICIOUS
VBA32 Clean
Cylance unsafe
Panda Clean
Zoner Probably Heur.ExeHeaderL
TrendMicro-HouseCall Trojan.Win32.Boilod.SM.hp
Tencent Clean
Yandex Clean
SentinelOne Static AI - Malicious PE
MaxSecure Trojan.Malware.300983.susgen
Fortinet MSIL/GenericKD.64199134!tr
AVG Clean
Cybereason malicious.d9c85c
Avast Clean
No IRMA results available.