Static | ZeroBOX

PE Compile Time

2023-08-04 04:57:01

PE Imphash

f34d5f2d4577ed6d9ceec516c1f5a744

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00002000 0x0003a784 0x0003a800 5.30638295858
.rsrc 0x0003e000 0x00000546 0x00000600 4.00605513746
.reloc 0x00040000 0x0000000c 0x00000200 0.101910425663

Resources

Name Offset Size Language Sub-language File type
RT_VERSION 0x0003e0a0 0x000002bc LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_MANIFEST 0x0003e35c 0x000001ea LANG_NEUTRAL SUBLANG_NEUTRAL XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminators

Imports

Library mscoree.dll:
0x402000 _CorExeMain

!This program cannot be run in DOS mode.
`.rsrc
@.reloc
com.apple.Safari
Unable to resolve HTTP prox
5ccO}}OXXOttO]]Oiiii
s3aL,?8
&k98!=i
k98!=zi
)"BBn\\nyynUUn||nHHHH
2`axd#0
ttXjjXOOXccXJJX~~~~
l+gg.yy.\\4mmmm;pp;YY
CK$>aieJ$vawQ:vf8
Piwm2:6
w%2#"':8
@a_"`z%-!
Yd(8f
RRy<=*=.7;=
nu)3ldhG){lz\
smzzl;,%&1*
crsrssrsql,( &
cjsmzzy51cxwu;cxwu-*
cxsmsrc
c04,'-*
kcsmvl"//*9,
4h~alk
VC=?3~#5$5%!>125$?:9%!<5~ $6
Fi(W,eJF
bLIpNc
=,:%(/
jbtkfa
~19'{6%D
l%W:E]Pj
O5\E2!&
?&>5(4:
S|'o#Ti
dM)t=Or
I:imu~tsM$
!<'06'<!
s!680:
s?2:'=676!
s $<7=:
xWtkfnsibcbuD'ebP$
x1:J;N>J>;?9>%80M<%=9M<%>I8N%J:0=KJ??
P{dia|fmlmzK({
glfa_$
'ZW_BXSRSDu
RDYAEEWf
X_W[Yr
EAYRX_a$
m@hdlajZ
w~Wkf{f|wv[b
|fmemdMzg|ika|fm`|}Ix
;,:>&;
dtphcinP'uha'nufafT8
SS{f{0rwjkrnBjlqnnkM>pqwj
}wrnn_>{rnn_B{rnn_Bm{rwX>pqssq]B*
qf!9**9d
c.dsyt,
XQVMKL
7'Uzeh`}glml{JU}ofzf{j`DU
uNa~s{f|wvw`QNft}a}`q{_N
3:?09$
mh`LhedsboH
^@VKSWWEtTPIw
."4)155'
!ZLQIMM_nNJSm
/''1&00
jVLGPPWA
au|{ffwA
`{RRDSEE`OSTUDs
hUBTPHUe
IHLKFa
U\YV_B`DBQDC
434s.814;2/-
)-+a.;.+*<8 =-
VETUQGJEz
9/RPUSF
-J[]G\FJJHu
Erevres_ptms
X8P;++=*<<9
$3%!9$
GZ[ZS]G
QJW}W@}
qpy|szgefgpf`yyt
^WPJQKGGE
JT\P_CTBD
W1kqjp||~
cZ5#>&""0!
YLY\HHY
FA[@ZVVTi
FjYuao`hieZOSA+HVPhcvIZctgqr`iU
2Fi}s|tuyFSO]7TJLt
h{mn|uI
@-<E`%4/-%2
APKIAV
KQH#lql'gy_m{fG
"$8JEKDLMA
99)0=*s
{8.3+//=
{a91=2
;25((9/ss
vBaZ8&
;a{`zvvtI
IBTAECIQI
RRDBB@UDOSDUOHDU@WHSQ
5diil_`ilC
-n.bucE,
\&kkyH$
5qz77%
g|j{f\S_[IJ]@LSj}nX_[ISJ]NX[I@\
=TGWjmS)
hQ71,3
88SSAP
vzrlBYKFlv
oPHqb}fPyq`gmG
u , z '=8$
&; 53="5
LJ_JO[[J+
??;)0<8
_yuy#y~da}yKQhuxahI-
hicl``bN-]YKQ$;5u%-~hadK-`l
?3?e?8"';?
9./%*&&$
b}s3ck8.'"
k&*9,$9
]Z@EY]ouY]OJu;
~txt.tsilptF\exuleD rednammoC PTF\)68x( seliF margorP\erotSlautriV\
4b6oyd|xxj[0
/tz5"15"
.wa|d``rC(
p#4%%4
Ids`dse9*
Rg<487
+</+<*e
zlqimm
nAl{mkAl{hl{m"
UEUEUEUEUEUEUEUEUEUEUEUEUEUEUEUEUEUEUEUEUEUEUEUEUEUEUEUEUEUEUEUEUEUEUEUEUEUEUEU@
pdmjwwfP_1A_pwqBnjQ_fqbtwelP_QFPV\WMFQQV@\ZFHK
[@mH]Hm
k?*-*m;,!/*"
7=2QCYBXTTv
L;,?;,
fxxnyooJgbjF
_0100G4D26766G>>D5b7775726@@E315?ZmiijrsIZucjo`itVZmiijrsIZ6(37Zceo``IZr`iuiteoKZctgqr`iUz
}JNNMUTn}RDMHGNSq}LDURXRCTr
FOHF@RRDl
RVNEOHv}ONHRSDwUODSSTb}uo
RVNEOHv}UGNRNSBHl}DS@VUGNrX
U6GFGG0C3EA@AA0II3B
@@@B@EA772DFBH-
>-A_G@-
h,:'?;;)
E\JWOKKYh
Bbf).+#/
3CP3,3
)`ffW6z
w[6eayrx
^4.%-%,
94)4.%$
#5(044&7$)>4
adl@ubK1
f%ew{dw`B~{s
j}TNj}t}`wSNw`seft}AN@WAGMF\W@@GQMKWYZ
|@`igdqpf`}@/
~tDAIEPGntPGNGZMitMZI_\NG{tzm{}w|fmzz}kwqmc`
317$9"
;9?,1*
%nkco^(
j}TNaw~{T2
s`u}`BNw`}fA~sgf`{DN(
QT\PaQT\PER{a
P\OZROmaXORInQ\HIOTka.
qgzbfftE
~kn$ndk}VfckG*kxozEVfckG*kxozEV
:=:} '=&<002
?:2><0<
DTdV0*!-(
pjamhG$Ia
:g`za{wwU
ZK\MK}
LBD337G747>C2+?>2G+1@E2+B@2@+12E36?41
lLZAJDAIe
0&=68=5
+ 9.=+(:3/
i&0-511#
{mphll~O
Sk= 3P]E
~skSTjaqoraXO\JI[Rn
ID\~bmc^
Ws~fDXWYd
mzimzLC\QIkwxvKCzm~hkypL
7!<$ 2
R]JY]J|slay[GHF{sJ]NX[I@|
@gqltppbSolqwml@
w;6o49!
}M[F^ZZHy
gq|dS@F^g
TYAVEC[BktyaVEC[bkVUAU
$(;.&;
:lzsvYr~mxpmO
EVRR@Q
4v<*#&
".=( =
5cpttfw
1pR_Gpce}D
J9>9~3>&1"$<%
/8 veaasb
k(6*8j}|ywtvow\R
iKX`ad[7)5'ubcfhkiphCM5
xTtupO#=!3avwr|
}d|WYG
F07:/7:
r$2/733!0
?P(sQVX[Vo
vNATADPPA
}i;848#8%'k
y"*&)h{
/uc~fbbpa>-
R]UPPUNh#
IKQJP\\~
r`vkswweT
j|am}gJ
ut8:6{1':6&<1
fLt>;rT$~UR'Ut?rT$~UR'Ut=;rT$~UR
pbtieuoB
=oC7ZRQ
.qaxubKpf{cggud
<*7/++9(
3%8 $$6'
?o@U@e
OHFNm}UMT@GDe}
Kxqt{roM
GK>8rh%97
04kcro
:989<9j989m9>o?11=?1h;
^QAIOBI
NXE]YYKZ
n54(1u(52<47
8AYEDP^
\^E433v_.3133v_]X
Fyorjnn|Myximdo~sx
lQJ;<<yP!<><<yPRW
U~X6uo084;'0&
SEX@DDVg=:
!;onhu`bhmqq@
e:2>1-:,
1$%524
E9uebd
u;hjylK/
'v^NIO
Z]J\X@]m
Hk>'>q=>>
=*<8 =
*=.8;)
-:,(0-
x`a|wgZ
iXOZOj
\K]{rGJBOXGx
dqdqT0bucEL
ybdySL`e
bWq~y|qdqS
k^K^{MZLjcP^]ZVS
VAWSKVf
WPJAIAHa
"5#'?"
sLwoswuhrYFi
vo~uwF}tsnn
iF/hstjs
vIFytS:hsht
)m\zH]Hm
[LZ|uGF^FFjuGF^FFj
~i|iL(zm{]Tmegz`KTmdoggO
zPXMX}
K\Jle\^]|eM_VJVKZPt
,;21&=
588=.;
|$%/&/
}{lEqfwbT
CsQ$;,!70,
j^]H]XLL]
e[\_[\ZZZ
;."= )o*<.-.;.+o8 !$!
-=9!&=
#JRf=X^SXHLXN
;Z=43(.).?.95s
jFKC^DONOXi
Y]ENDC}
BMW]X[D
//'%8")
Qmmm kkk
473gnu
4/894+2/
}8+4)404/
});2.2/>4
b~~hnb
]R?>cdZ-@B_K-'-YNHAH^
p(5))?95(*
FKpmqqgampr$
d0e=03=`15g6g)=b3e)17`0)=a36)5bea5a54!
nofhkdOZC
J]@[|V[]J_@]
KJUFCNF]J|
_~s'k!rz'j!z5.z6;/+?z.54z)3z453)(?
/~FB:E@1A133;3.4:0:.A232.@:F1.636GG@6Gx
mDc.e>${s
V9(L(X
:<(L(X
d=(L(X
b)(L(X
"+(L(X
U+(L(X
1SPS*
:(L(X
)(L(X
L(L(X
C(L(X
m(L(X
a(L(X
x(L(X
U(L(X
e8(L(X
$9(L(X
59(L(X
f9(L(X
w9(L(X
D9(L(X
E:(L(X
c;(L(X
N;(L(X
Y;(L(X
)<(L(X
N<(L(X
E<(L(X
)=(L(X
u=(L(X
/>(L(X
>>(L(X
1>(L(X
t>(L(X
:?(L(X
h?(L(X
t?(L(X
D?(L(X
T?(L(X
d0(L(X
v0(L(X
-1(L(X
>1(L(X
B1(L(X
R1(L(X
+2(L(X
s1(L(X
!2(L(X
c2(L(X
S2(L(X
s2(L(X
%5(L(X
h3(L(X
F3(L(X
d4(L(X
D4(L(X
V3(L(X
$4(L(X
55(L(X
l5(L(X
D5(L(X
V5(L(X
l6(L(X
x6(L(X
P6(L(X
-7(L(X
w7(L(X
Y7(L(X
:((L(X
}((L(X
B((L(X
5)(L(X
t)(L(X
E)(L(X
)*(L(X
7*(L(X
I*(L(X
Z*(L(X
+(L(X
t+(L(X
H+(L(X
b,(L(X
>,(L(X
o,(L(X
u,(L(X
C,(L(X
--(L(X
q-(L(X
`-(L(X
$.(L(X
n.(L(X
p.(L(X
].(L(X
^-(L(X
q/(L(X
%/(L(X
2/(L(X
D/(L(X
* (L(X
= (L(X
m (L(X
K (L(X
W (L(X
+!(L(X
"!(L(X
9!(L(X
0!(L(X
l!(L(X
c!(L(X
jZ(L(X
oX(L(X
tX(L(X
TY(L(X
='(L(X
2"(L(X
h"(L(X
4Y(L(X
fY(L(X
xY(L(X
@Y(L(X
p$(L(X
j#(L(X
s#(L(X
|"(L(X
O"(L(X
R"(L(X
z!(L(X
E!(L(X
)#(L(X
;#(L(X
HX(L(X
UX(L(X
?$(L(X
Y(L(X
P&(L(X
G#(L(X
Z#(L(X
>"(L(X
~Z(L(X
qZ(L(X
ZZ(L(X
b&(L(X
\&(L(X
o%(L(X
|%(L(X
Z%(L(X
g'(L(X
y'(L(X
Z'(L(X
)'(L(X
/%(L(X
!%(L(X
%X(L(X
(Z(L(X
6Z(L(X
3$(L(X
k$(L(X
$&(L(X
i[(L(X
K[(L(X
T[(L(X
<\(L(X
*\(L(X
V\(L(X
D\(L(X
v\(L(X
.](L(X
KDBM((
%](L(X
1](L(X
e](L(X
q](L(X
^](L(X
S](L(X
?^(L(X
3^(L(X
g^(L(X
}^(L(X
t^(L(X
& K^(L(X
_^(L(X
/_(L(X
=_(L(X
& 4_(L(X
h_(L(X
q_(L(X
& ]_(L(X
&P(L(X
VP(L(X
=Q(L(X
zQ(L(X
[Q(L(X
iR(L(X
vR(L(X
+S(L(X
iS(L(X
JS(L(X
v4.0.30319
#Strings
+DNV\fn
' ? _
#!<!E!K!X!_!}!
!<"K"T"["c"
chuAutKLx60
pObQVO370
G0Y1f570
EFBnkB0
OxaCHDQD2G0
bCBj1RMSlH0
ZrS3LwxIO0
Ot29ZP0
jXNbWPICS0
IrlQkka0
stmxyFj0
j9WT8adk0
QAGRx0
HMACSHA1
v9E326IOxA1
uHhKaFgQ1
S3z799LRU1
DzJUYxJk0X1
IEnumerable`1
ICollection`1
IEnumerator`1
IList`1
CS$<>9__CachedAnonymousMethodDelegate1
X3BPcTkhf1
get_Item1
VDL02bs1
NoKymI5nps1
kp5c8MT402
HMACSHA512
Advapi32
kernel32
Microsoft.Win32
user32
ToUInt32
ReadInt32
ToInt32
WxWwrsC2
oj2aszC2
QKYVO2SUI2
n5zcptfJJM2
PkUuN2
JC1nV2
MM9VEpX2
KeyValuePair`2
Dictionary`2
1pQqREQd2
7ieqhC8tf2
nHOUwtl2i2
get_Item2
MAIvyz2
RIqwQ53
CvvFOUB3
RoNw8C3
5x1xC3
RaeI645D3
Tuple`3
mDYAEd3
NJrDZQMuf3
qE9I6FdrIg3
gq183Sj3
get_Item3
ToUInt64
ReadInt64
ToInt64
HtrCAA4
4b5rUlh7E4
MllOoJ4
yAC1Q4
zGdXIbmstU4
JJ0Xa4
pd6fYn4
WvTyo4
iZxhBAKbA05
3AtKM25
66TBDFklB5
kLemGL5
8mwSaP5
ySsQB8pjT5
iOwd7Ub5
ReKTmYb5
LIhbsb5dk5
nAx0NIH1n5
qasyFWhgx5
ToUInt16
ReadInt16
ToInt16
HMACSHA256
PRzGiHA6
yzKTSUQF6
guXvH6
CUkkhK6
HJqjDUQtK6
Dnv6Q6
1iquYQ6
yHLHU6
LqFWW07
dsqZUTV17
FzgWGpLzQD7
VaultGetItem_WIN7
K5xGAQZeXR7
eIbIOtM1T7
ILerayV7
jry9AT4b7
kTVJpK8Ei7
QN0IKw7
4BiOIibx7
Vtjjx7
SR9qJfg18
get_UTF8
CcdKfH8
IgXEkVDA6L8
zYOrCYDRL8
VaultGetItem_WIN8
9EccR8
qkJOzU8
HTpDKuW8
o8aFSZh8
GKKfj8
NgLSn8
uR45hQrfo8
5DcOxw8
qieN39
JmAacWP49
hnIsapUVj89
l6WhNH9
fdYhH9
0Z8mivJ9
JcLbkUSRO9
VLV67vwt0T9
nkvaTUX9
yr8Z1X3ig9
YhWzruyknl9
EiqpViCm9
FyI2HTYm9
<Module>
JA8wGmT2A
hS7X9A
bDvWCkCJKTA
JoxYL3xXA
EsIh65YA
7WC9YA
hROwyuwbA
xgtHmgRUfA
dqx7hA
0CDLTGLOAjA
1UFhaWvEnA
LRHMcJyhrA
QVYlVsA
7XvJVtA
z1O1Xs5qYyA
MXagJ2J2B
kmM9pP3B
vvVjNM8B
ilHfuEEB
06bYfEB
J7G1w5IB
KAb5UB
e9NTXYYB
sd3zE1wZB
zoGypsB
Alm4tB
v6WL2C
mvDeEXm2AC
khGofFC
pFpVxDMC
h3mbcWC
iWroWC
1iHKkjhC
cfs8FM3nC
pR13fnNpC
K0NNAmdzC
lSTYI82D
7NFI9D
get_ID
set_ID
fileHandleID
lpdwProcessID
processID
get_FormatID
set_FormatID
mmBPv5px6TD
Ezcp8OXvUYD
Fv6HNYEiZD
f1PesMmfD
V8TllEpfD
2YtgUlV1vD
tEKQF6TW3E
kuxgdt3E
jLngctEw6E
Y8BHGqCE
hixP39z1SE
oPanEnL8pSE
3rsMnxdE
SFSqjE
UTrvNfpkkE
buzonE
vlnJDIqE
wSmLEJkkuE
FiO0pQwE
T6YWgfEZwE
gznolegmwE
GTxMh3F
Ak5g3s4P15F
VE2DgxgS15F
Y2IZ247F
y0ck6j8F
X81if9F
YFlalM4PMF
0xOPAmRF
rO8FSXF
kODOlkF
AfrVblwF
2AVUzF
5FNfZ1G
gl4J1wou1G
Zj9apZRDb5G
WkrT0JKG
55bxMHDYQG
NfYBYeUuCSG
xEMCxSG
ythF6ziWG
yHlM0cG
lx3OdG
KDVTdG
ibxxhG
CUEmveJiG
L8g9hVmG
fCl57sG
rMFBhg69tG
NPTy1A06H
L8wIyjjjd9H
jencUrEDGH
YfTvJev8HH
tcInYLH
OW17aeLH
rEiSGvJPH
ebgRSH
mcQVtBpFnSH
BNVbdLgH
IaCwUwpH
h2xPFLqH
POE99sH
LPLkuH
JQ6GtFyH
axmx3I
svW2z0YCI
get_ASCII
RAtb5ah3oJI
MJqCqJquKNI
w83kkNI
nxTyXSAZWI
Cg3rWBIbI
hcTmgI
0qRl2ojI
KXjhxWnu7pI
L5FzMD8vmqI
kHV3sI
LprM52J
VKAZIJ
qq0if1ZRKJ
BelYbDLJ
S9tj9Jh3OJ
abQWZRJ
IclVVJ
KRhSNEXJ
n0KkXuXeJ
3sKQKrHfJ
bZCJnqJ
yl7MEuMzJ
oWeAQ34Z7K
endWRRuCK
fUa9EdfpDK
CaoEFbasEK
aKR0r1IZGK
WBbaC8IIZGK
gKtToDOblIK
hkhQLK
RSBm1OK
sMaycK
g1o6As6gK
v0sc6DHqK
rEOV3ihcuK
ZQDJHL
wBKSfZeX0NL
HZBOhSNL
rclO8yufL
J7AswA7ojL
4Mecg8AyL
zkb3xazL
92T8GGxBM
nmMioao8EM
3yMDVk0jIM
vVZRQM
dXORqSM
7wk8rrYYM
csnRsa64ZM
tVpFEOlleM
k4ci8FECmM
aAbHMrloM
fiPq5R7vBsM
rvFAalKYsM
E7xKWmzM
4zmP98hWCN
Z5Ke9rJSN
aVWqu7YN
ZGsviN
HXMlT5nmvlN
ifiiMoN
U3gk0TztN
7r6hwhxN
tXZrEyoh5O
1nhZUiL7O
xTTGpnNAO
System.IO
22BFcuCD5MO
NjqXAyhDWO
q9NyPej3eYO
QERRkvcQkO
T3LuJoO
3kR94Ki4P
jt5UYAP
w3VVp30VDP
7cmFVPwDP
bEtT1KP
NsDIOP
mUOAODfTP
ruF8lP
KTodhetP
cNpMB4MQ
9fPmtGPQ
LHtfdwQRQ
hC2me87jvTQ
ycqol5taQ
3QLAvzsQ
R2oB2R
uQ8eOA3Y9R
5BZMAR
OxHeJ3eHLFR
GnW510RR
RnkV5BDDkR
pEOmaaXoR
aSJyzHrR
NPDRwR
nIy8KF1EWwR
RHYJ3vAS
pzvSTDS
T9myHybwJS
A5N5me8pjLS
yGhv5Bc55cS
mamARUPkjS
6MvkJu8pmS
ZQG4sS
y7DztS
fMee1BJgt2T
LTgDodWGT
iITiu5KT
qt0xPT
bH1gaElWgT
TlzGnJ0qT
D6oTCd9qT
eWicFqT
jrqMBldLAwT
xFFeVwEC8U
gUWRPDU
CRj2zHU
El38CBVU
Rr6RfveU
yYFRIK6V
xJUq7V
jqZTGV
IZ3UIGK3IV
get_IV
set_IV
Ffq9QuOV
zQDzUDrV
GrEdoxKb5W
zkdVGe6W
9rJ5D8W
EPkOR5KW
r80PwUXW
QxQO8cW
niTTkW
1fDyF4nIxW
gR8fzW
scJW1X
QCTIZL7X
daWZUKHX
hyc8OGMX
JsT7mjJSMX
lC8FHPX
tI7XSX
BJeLl4aX
iAOH0MmldX
0QFazOfX
MEFTgX
T6ISFiX
Jhu6zF5GqX
exgDsX
mmCf0uX
2Xm4bmBnyvX
sfymcUEzyX
QCuFH4Y
prTzT78Y
e3aXe1QODSY
KXnfXjSY
b8hjTY
7k3zLcY
HNVewvNkY
EK7cNP4lY
lz1nfDFnY
NBJCLpKpY
9u4xv81psuY
zf30nA7Z
5iNo8Z
EM2n1MBZ
BVSDgGZ
IPwToydtvGZ
JRiyZgicLHZ
Ihk89DXIMZ
UBrBNWpRZ
7Hhld5w30TZ
Rr8wsPTZ
0HivHOBS1ZZ
jX7jlKzRZdZ
jD1XJSqEuZ
mHAMNvZ
ps9D6zZ
1HtJW3LaTBa
9tgFHa
0PgzPnHdPa
prHMRa
rbV2ZSa
HQOihL5Va
JBNVlDIVa
rnZe92DOnja
lNTu8na
get_Data
set_Data
ProtectedData
PropertyData
PVDixa
tzaMYOIKjya
M4GfshZ4za
4BK5Z1b
H4QSCCB6b
Fi9YlUb
8PKoAKdhSeb
mscorlib
7wIZoIfWlb
JVPikvb
FdUPUO2c
dgstlEee4c
O7g9OiQf5c
CR9aqxP8S7c
wiFMX6x9c
RqXuYBc
75rFCc
PPqszI70pKc
fyrPLc
JcSAPc
IfVJ9KQc
QDEAyobTc
LoLLC9Yc
RAPG0PYc
tXzsj3cHcc
UVzHxhDKcc
oJ5IMscc
System.Collections.Generic
Microsoft.VisualBasic
WndProc
HookProc
lmoHpc
FromFileTimeUtc
77cnovc
4IY0sIKy3wc
3ab324a4-1695-4b0a-ad7f-44d3302b728d
get_Id
schemaId
pszAlgId
GetWindowThreadProcessId
processId
5VSzOOd
axeZPd
JUSjx4Rd
OpenRead
lpcbNeeded
SHA1Managed
RijndaelManaged
add_Changed
remove_Changed
get_LastModified
set_LastModified
_lastModified
Interlocked
set_Enabled
get_IsEnabled
set_IsEnabled
_enabled
lpOverlapped
samDesired
add_Elapsed
get_LastAccessed
set_LastAccessed
_lastAccessed
get_Reserved
reserved
OvQ94H9fd
UmQiCXfd
pPackageSid
get_IsInvalid
get_Guid
vaultGuid
<ID>k__BackingField
<FormatID>k__BackingField
<Data>k__BackingField
<LastModified>k__BackingField
<IsEnabled>k__BackingField
<LastAccessed>k__BackingField
<Password>k__BackingField
<password>k__BackingField
<PropertyStorage>k__BackingField
<Name>k__BackingField
<FileName>k__BackingField
<ApplicationName>k__BackingField
<Username>k__BackingField
<username>k__BackingField
<Type>k__BackingField
<type>k__BackingField
<TypedPropertyValue>k__BackingField
<Size>k__BackingField
<IsRunning>k__BackingField
<Path>k__BackingField
<hostmask>k__BackingField
<Version>k__BackingField
<Application>k__BackingField
<Description>k__BackingField
<user>k__BackingField
<hoster>k__BackingField
<Tasks>k__BackingField
<objects>k__BackingField
<Accounts>k__BackingField
<Keys>k__BackingField
<Lenght>k__BackingField
<Host>k__BackingField
<GuidMasterKey>k__BackingField
GetField
TrimEnd
ReadToEnd
Append
get_Millisecond
GetUpperBound
GetLowerBound
set_Method
method
a4CYY0pd
bs0l4MLqd
1QUb2ard
Clipboard
get_Password
set_Password
get_password
set_password
17eWT0e
1prbkLAFe
RT2JN4vLiFe
14VUZHe
bdc6eVIe
nYnSJe
aRPy8Re
lvoeNiEdRe
8g0qRe
7zcGTpg0Ze
8wU5sbe
Replace
QueryDosDevice
hInstance
IdentityReference
wScanCode
keyCode
set_Mode
FileMode
ShareMode
PaddingMode
CryptoStreamMode
CipherMode
SelectSingleNode
XmlNode
get_Unicode
get_BigEndianUnicode
IsTextUnicode
FromImage
get_PropertyStorage
set_PropertyStorage
SerializedPropertyStorage
SendMessage
AddRange
CompareExchange
CredentialCache
EndInvoke
BeginInvoke
GetEnvironmentVariable
SetEnvironmentVariable
IEnumerable
IDisposable
ToDouble
get_Handle
RuntimeFieldHandle
hSourceHandle
SafeHandle
GetModuleHandle
RuntimeTypeHandle
ReleaseHandle
CloseHandle
DuplicateHandle
CreateHandle
GetTypeFromHandle
hSourceProcessHandle
hTargetProcessHandle
lpTargetHandle
bInheritHandle
vaultHandle
handle
Rectangle
ToSingle
CreateFile
hTemplateFile
DeleteFile
WriteFile
MoveFile
MapViewOfFile
UnmapViewOfFile
lphModule
get_MainModule
ProcessModule
get_Name
set_Name
lpDeviceName
get_FileName
set_FileName
GetModuleFileName
lpExistingFileName
lpFileName
GetFileName
lpNewFileName
_fileName
get_ModuleName
lpModuleName
lpBaseName
baseName
lpValueName
rootPathName
get_OSFullName
get_FullName
get_ApplicationName
set_ApplicationName
lpName
lpAppName
get_UserName
get_ComputerName
get_ProcessName
processName
GetProcessesByName
lpKeyName
GetDirectoryName
filename
get_Username
set_Username
get_username
set_username
DateTime
GetLastAccessTime
AppendLine
get_NewLine
Combine
LocalMachine
Escape
Unescape
DataProtectionScope
get_Type
set_Type
pszBlobType
GetFileType
ValueType
SecurityProtocolType
GetType
get_type
set_type
FileShare
Compare
System.Core
PtrToStructure
get_InvariantCulture
Capture
HttpWebResponse
GetResponse
Dispose
Reverse
jEgFte
X509Certificate
Create
MulticastDelegate
GetKeyboardState
lpKeyState
GetKeyState
Delete
nNumberOfBytesToWrite
STAThreadAttribute
CompilerGeneratedAttribute
GuidAttribute
SecuritySafeCriticalAttribute
ExtensionAttribute
AssemblyFileVersionAttribute
FlagsAttribute
CompilationRelaxationsAttribute
ReliabilityContractAttribute
ParamArrayAttribute
RuntimeCompatibilityAttribute
SuppressUnmanagedCodeSecurityAttribute
set_UseShellExecute
ReadByte
ToByte
get_Value
TryGetValue
get_TypedPropertyValue
set_TypedPropertyValue
GetPropertyValue
set_KeepAlive
Remove
Z6Ni1sxe
get_Size
set_Size
dataSize
get_StorageSize
lpFileSize
get_NameSize
volumeNameSize
nFileSystemNameSize
get_StoreSize
get_ValueSize
get_HashSize
set_BlockSize
chunkSize
get_KeySize
Serialize
Deserialize
Initialize
Finalize
Resize
oU9fTKp0f
Ty4jR4f
rgNsecQCBf
zWe7eEBf
X4loEf
0FiCIUJFf
oq5M8If
EnszzDNf
SizeOf
get_ItemOf
LastIndexOf
tTlCva3Sf
m2F46Uj2IUf
cchBuff
zQVpAqjgf
z8S55hf
lELN5aA2mf
RyYAzyZnf
lIIxFznf
sKCIP4M1g
YYY3Gg
pTdfa0OLg
sJjTZ92sXWg
get_Jpeg
WPuT0n1fgkg
System.Threading
get_Padding
set_Padding
UTF8Encoding
System.Drawing.Imaging
get_IsRunning
set_IsRunning
CreateFileMapping
FromBase64String
ToBase64String
EscapeDataString
UnescapeDataString
lpReturnedString
GetPrivateProfileString
ToString
GetString
Substring
System.Drawing
get_Msg
dAlCHhF9h
aevIzZ3T1Nh
54EUMK8BxUh
TkEeXXYYh
Q66xtvah
dwMaximumSizeHigh
dwFileOffsetHigh
nqTBC9Hlh
er2ZsoqKmh
Kq16Vnh
ComputeHash
get_Path
set_Path
get_ExecutablePath
GetTempPath
GetFolderPath
lpTargetPath
get_Width
get_Length
SystemInformationLength
ObjectInformationLength
set_MaxJsonLength
ReturnLength
maximumComponentLength
set_ContentLength
GetWindowTextLength
EndsWith
StartsWith
ujOlOvawh
SkUX5zh
Zt080i
ZMAsX8o0i
eXzhN7u51i
FpXSoo4i
AE2i7i
ePdBeWf7Di
naWIVlDi
aU9uTi
oXVtZi
Bq3HHIOGbi
ALY1KXNNmi
PtrToStringUni
StringToHGlobalUni
WOGSvKqvi
lcKjwwp6j
3UZIqiJIDj
m87Cw5RGj
WEh4BxsIHj
X1jI8H6Qj
skvrnUvr0ij
mZJqezF10k
mQLunGerbJk
AsyncCallback
RemoteCertificateValidationCallback
get_ServerCertificateValidationCallback
set_ServerCertificateValidationCallback
callback
get_CapsLock
TransformFinalBlock
TransformBlock
idHook
gJhNMsk
get_hostmask
set_hostmask
OjFLvKnRwk
Pzgk4l
QGwr1dEl
sIUhAMl
1xgEsi8Ol
zSIgHOl
z5WD7gSl
T7WqJYl
cpy5xvoYl
AllocHGlobal
FreeHGlobal
Marshal
NetworkCredential
Decimal
System.Security.Principal
set_Interval
29Sa4Qudl
Rijndael
Sv92del
System.ComponentModel
Kernel32.dll
kernel32.dll
User32.dll
user32.dll
vaultcli.dll
psapi.dll
ntdll.dll
bcrypt.dll
System.Xml
set_SecurityProtocol
Control
HJODOwl
5A03G1EC2m
W1Ykl6m
0Egh89Jm
5TT9hcRm
I5AIZm
KU5N3dZm
FileStream
get_BaseStream
GetResponseStream
CryptoStream
GetRequestStream
MemoryStream
get_LParam
get_WParam
get_Param
lParam
wParam
cab04dm
YOdeSEYdm
get_Item
set_Item
VaultGetItem
vaultItem
OperatingSystem
RP7k8zw0Fgm
SymmetricAlgorithm
phAlgorithm
KeyedHashAlgorithm
algorithm
8bXoXJqnalm
fOBIOcmm
Random
D0rzVoAdrm
ICryptoTransform
k3AOr4xm
J4hun6hB07n
SO4gQDn
ToBoolean
IsLittleEndian
CopyFromScreen
get_PrimaryScreen
lpNumberOfBytesWritten
4qXEwaDhn
X509Chain
ChangeClipboardChain
tu9bkn
get_OSVersion
get_Version
set_Version
get_Application
set_Application
get_Location
GetVolumeInformation
NtQuerySystemInformation
ObjectInformation
pszImplementation
System.Globalization
System.Web.Script.Serialization
System.Reflection
PropertyDataCollection
ValueCollection
MatchCollection
GroupCollection
ManagementObjectCollection
KeyCollection
set_Position
CreationDisposition
SearchOption
Win32Exception
CryptographicException
ArgumentOutOfRangeException
ArgumentException
get_Description
set_Description
get_StatusDescription
_description
System.Runtime.ConstrainedExecution
StringComparison
l1Dokpn
Intern
add_KeyDown
remove_KeyDown
get_CtrlKeyDown
get_ShiftKeyDown
get_AltKeyDown
YQU7qaDU4o
VovqaPo
CompareTo
CopyTo
k2o43X602Yo
MPH1MeaZo
ImageCodecInfo
FieldInfo
FileInfo
CultureInfo
pPaddingInfo
FileSystemInfo
MemberInfo
ComputerInfo
get_StartInfo
ProcessStartInfo
GetLastInputInfo
DirectoryInfo
CurYSvio
q95iko
DUOqQfs3po
bqt7xzUB9uo
BYZRLZRoFp
N9Z5Np
JmAOTWubRp
add_KeyUp
remove_KeyUp
dwNumberOfBytesToMap
Bitmap
Weo5d2Xgp
Xbwg5xgp
L42Uhhp
QOr5AK5np
rFFICSJZnp
m4hUrQnbqp
YBVaVlrp
lfoNeDcvp
YJD9kx4q
0vnr6mi98Dq
g4kq4Jq
l6whXR9bNq
UMx5Uq
XXW9PRVq
3Rf95tKZq
gS7Ggq
kBEoj7Kalq
System.Linq
PBSmcht0r
pi7Epce1r
rRtI76r
ecFlNAr
3E8cBr
I4iJGLndIr
D9ZPmUNMr
v9P4ujgxSMr
8WT7Sfh3Xr
UrnaaCZZr
ToChar
lpChar
DirectorySeparatorChar
szZgqQer
volumeSerialNumber
StreamReader
TextReader
BinaryReader
SHA1CryptoServiceProvider
MD5CryptoServiceProvider
RNGCryptoServiceProvider
TripleDESCryptoServiceProvider
BCryptCloseAlgorithmProvider
BCryptOpenAlgorithmProvider
IFormatProvider
StringBuilder
SpecialFolder
sender
Encoder
volumeNameBuffer
fileSystemNameBuffer
buffer
ServicePointManager
ManagementObjectSearcher
SecurityIdentifier
ElapsedEventHandler
LjL2mer
ToUpper
CurrentUser
get_user
set_user
EncoderParameter
BitConverter
get_hoster
set_hoster
BinaryFormatter
SetClipboardViewer
ToLower
JavaScriptSerializer
get_Major
get_Minor
GetLastWin32Error
GetLastError
IEnumerator
ManagementObjectEnumerator
GetEnumerator
RandomNumberGenerator
.cctor
Monitor
CreateDecryptor
CreateEncryptor
D0AKY5Gtr
passwordVaultPtr
ReadIntPtr
VaBk1yr
67JC3s
YDuHW8s
CaStHwSs8s
ZriBR51Ds
K0btuKs
Graphics
System.Diagnostics
get_Bounds
Microsoft.VisualBasic.Devices
System.Runtime.InteropServices
System.Runtime.CompilerServices
GetInstances
get_ChildNodes
Matches
GetDirectories
get_Properties
ExpandEnvironmentVariables
GetFiles
EnumProcessModules
NumberStyles
GetSubKeyNames
ReadAllLines
GetProcesses
System.Security.Cryptography.X509Certificates
FlagsAndAttributes
lpFileMappingAttributes
SecurityAttributes
Rfc2898DeriveBytes
ReadAllBytes
GetBytes
get_Values
GetLogicalDrives
fileSystemFlags
dwFlags
ElapsedEventArgs
get_Tasks
set_Tasks
yUhmFrTls
ICredentials
set_Credentials
get_DefaultCredentials
Equals
CreateParams
VaultEnumerateItems
System.Windows.Forms
Contains
System.Web.Extensions
System.Text.RegularExpressions
iterations
System.Collections
set_MaximumAutomaticRedirections
StringSplitOptions
RegexOptions
options
get_Groups
get_Chars
GetImageEncoders
System.Timers
RuntimeHelpers
EncoderParameters
SslPolicyErrors
BwLxIoaNss
SystemInformationClass
ObjectInformationClass
ManagementClass
dwDesiredAccess
FileAccess
processAccess
get_Success
hProcess
OpenProcess
GetCurrentProcess
lpBaseAddress
get_objects
set_objects
VaultEnumerateVaults
set_Arguments
get_Accounts
set_Accounts
get_Exists
NgbjdJws
get_Keys
set_Keys
get_ModifierKeys
QQngta1t
9FKgvCORt
dsmtf3Tt
We4FR4Xt
38GraAs6Yt
Concat
AppendFormat
ImageFormat
Subtract
ManagementBaseObject
hFileMappingObject
hObject
ManagementObject
cbKeyObject
pbKeyObject
NtQueryObject
object
Collect
set_AllowAutoRedirect
flProtect
Unprotect
System.Net
offset
Y7ALd2ht
get_Height
get_Lenght
set_Lenght
op_Explicit
WaitForExit
cbSalt
bztAChhlt
VaultOpenVault
get_Default
lpDefault
pcbResult
IAsyncResult
phkResult
result
set_UserAgent
System.Management
pResourceElement
XmlElement
pIdentityElement
Environment
XmlDocument
get_Parent
GetParent
get_Current
get_Count
get_HandleCount
get_TickCount
vaultItemCount
set_IterationCount
vaultCount
3kLLbkaOpt
BCryptDecrypt
BCryptEncrypt
TrimStart
Convert
FtpWebRequest
HttpWebRequest
XmlNodeList
ToList
get_Host
set_Host
set_Timeout
GetKeyboardLayout
dwLayout
cbInput
pbInput
cbOutput
pbOutput
get_StandardOutput
set_RedirectStandardOutput
x0UY8sEFwt
MoveNext
System.Text
ReadAllText
AppendAllText
get_InnerText
GetText
GetWindowText
luQ6o93u
HIQCxpkFu
roOHaivFu
S9nBIhfKu
L36yKxz4ju
KUuVR4sngou
25Tl1j7fiou
xLJ6mNsexu
gnFI3Wr2v
9rjOzzDh4v
xsUbB6v
EwpsWq8i7v
JWKvSv
tvdG0h15Obv
CFutR343cv
JI7Op1Lz6jv
shj3ZFX6sv
YEXGsv
VR37W0p2w
WMArmfK4w
7TBLX49w
7j9oVAw
reYi5IHmBw
bSp1SL5kJw
rOvXuHcTKw
Jf9JPw
8hktmWiRw
r8VpXeOTw
6bHlUw
tR3bEbWbjiw
dwMaximumSizeLow
dwFileOffsetLow
get_Now
GetForegroundWindow
NativeWindow
set_CreateNoWindow
Z9bcZBc8urw
2PhrWvw
eTip3x
3DtdbgJ5x
egzfRDZ7x
kECuXGySJ9x
PbDqrnT9x
rnv2uYhZf9x
ToUnicodeEx
GetModuleFileNameEx
RegQueryValueEx
GetFileSizeEx
UnhookWindowsHookEx
SetWindowsHookEx
CallNextHookEx
RegOpenKeyEx
MTI3GNGx
aMQdU4Kx
i3NieABBvPx
lXdWNHVx
03kJtXgdWx
ucchMax
k4Q0FVucx
T2wrE0Oex
qAZ0xgQRMix
iyo8jx
PmsVSlx
9vWY3y
4t5IawcYy
ToByteArray
InitializeArray
ToArray
ToCharArray
Consistency
xEgZ4ey
get_Key
set_Key
OpenSubKey
subKey
RegCloseKey
get_GuidMasterKey
set_GuidMasterKey
_guidMasterKey
ContainsKey
wVirtKey
hImportKey
BCryptImportKey
BCryptDestroyKey
RegistryKey
System.Security.Cryptography
GetExecutingAssembly
Multiply
5JiFEi4Ooy
BlockCopy
System.Runtime.Serialization.Formatters.Binary
get_TotalPhysicalMemory
Directory
Registry
MKlhisy
get_Capacity
Quality
op_Equality
op_Inequality
System.Security
System.Net.Security
IsNullOrEmpty
BCryptSetAlgorithmProperty
BCryptGetProperty
BCryptSetProperty
pszProperty
HBzSrZRxy
5izYk0J9v2z
uANgVDz
tNEFZnNIz
hVmXiPJz
cuWk4JTz
Au5maz
RjoVrz
6792lvz
WrapNonExceptionThrows
1.0.0.0
$e8eea2c2-87b8-42d7-9a9f-0e79d48a1683
_CorExeMain
mscoree.dll
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
<assemblyIdentity version="1.0.0.0" name="MyApplication.app"/>
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v2">
<security>
<requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3">
<requestedExecutionLevel level="asInvoker" uiAccess="false"/>
</requestedPrivileges>
</security>
</trustInfo>
</assembly>
pp p!p"p#p$p%p&p'p(p)p*p+p,p-p.p/p0p1p2p3p4p5p6p7p8p9p:p;p<p=p>p?p@pApDpEpFpGpHpKpfy|y
k#n+n9
45 6!7"8#9$:%;&<'=(>)?*@+A,B-C0D4E5F6G7H8I9K:N;O=QATD]FcJuPvTwVxYy]z`
BACAIHJHQPVUWUXU\[cbedfdgdhdidjdml
Accounts
logins
sha512
credential
VS_VERSION_INFO
VarFileInfo
Translation
StringFileInfo
000004b0
FileDescription
FileVersion
1.0.0.0
InternalName
3ab324a4-1695-4b0a-ad7f-44d3302b728d.exe
LegalCopyright
OriginalFilename
3ab324a4-1695-4b0a-ad7f-44d3302b728d.exe
ProductVersion
1.0.0.0
Assembly Version
1.0.0.0
Antivirus Signature
Bkav Clean
Lionic Clean
tehtris Clean
MicroWorld-eScan Gen:Variant.Lazy.366997
ClamAV Win.Packed.Generic-10003641-0
CMC Clean
CAT-QuickHeal Clean
ALYac Gen:Variant.Lazy.366997
Cylance unsafe
VIPRE Gen:Variant.Lazy.366997
Sangfor Suspicious.Win32.Save.a
K7AntiVirus Clean
BitDefender Gen:Variant.Lazy.366997
K7GW Clean
Cybereason malicious.555c8a
Baidu Clean
VirIT Clean
Cyren W32/Agent.EMA.gen!Eldorado
Symantec ML.Attribute.HighConfidence
Elastic malicious (high confidence)
ESET-NOD32 a variant of MSIL/Spy.AgentTesla.F
APEX Malicious
Paloalto Clean
Cynet Malicious (score: 100)
Kaspersky VHO:Trojan-PSW.MSIL.Convagent.gen
Alibaba Clean
NANO-Antivirus Clean
SUPERAntiSpyware Clean
Tencent Clean
Sophos Clean
F-Secure Clean
DrWeb Clean
Zillya Clean
TrendMicro Clean
McAfee-GW-Edition Clean
Trapmine suspicious.low.ml.score
FireEye Generic.mg.c5be9c39afdf0da8
Emsisoft Gen:Variant.Lazy.366997 (B)
Ikarus Trojan.MSIL.Spy
Jiangmin Clean
Webroot Clean
Avira Clean
MAX malware (ai score=86)
Antiy-AVL Clean
Microsoft Clean
Gridinsoft Clean
Xcitium Clean
Arcabit Trojan.Lazy.D59995
ViRobot Clean
ZoneAlarm VHO:Trojan-PSW.MSIL.Convagent.gen
GData Gen:Variant.Lazy.366997
Google Detected
AhnLab-V3 Malware/Win.Generic.C5459834
Acronis suspicious
McAfee Clean
TACHYON Clean
DeepInstinct MALICIOUS
VBA32 Clean
Malwarebytes Malware.AI.2518290243
Panda Clean
Zoner Clean
TrendMicro-HouseCall Clean
Rising Spyware.AgentTesla!8.10E35 (TFE:D:0sw8mxoSyKN)
Yandex Clean
SentinelOne Static AI - Malicious PE
MaxSecure Trojan.Malware.300983.susgen
Fortinet MSIL/Agent.F!tr.spy
BitDefenderTheta Gen:NN.ZemsilF.36348.om0@aKAF7Se
AVG Win32:PWSX-gen [Trj]
Avast Win32:PWSX-gen [Trj]
CrowdStrike win/malicious_confidence_100% (W)
No IRMA results available.