Static | ZeroBOX

PE Compile Time

2023-11-23 02:44:56

PE Imphash

f34d5f2d4577ed6d9ceec516c1f5a744

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00002000 0x000ee344 0x000ee400 7.98976778062
.rsrc 0x000f2000 0x00000600 0x00000600 4.20597174376
.reloc 0x000f4000 0x0000000c 0x00000200 0.0815394123432

Resources

Name Offset Size Language Sub-language File type
RT_VERSION 0x000f2090 0x0000034c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_MANIFEST 0x000f23ec 0x000001ea LANG_NEUTRAL SUBLANG_NEUTRAL XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminators

Imports

Library mscoree.dll:
0x402000 _CorExeMain

!This program cannot be run in DOS mode.
`.rsrc
@.reloc
Xefff
af .,\
}*X PK
q)Yef
$Yf 43?
Xf DMv
Xef BN
Xef 9t7
Y Ml(X
Xfef P$Q
afe |m
)Yeef b
D_x*
#w;,fef
af Fm{
Yfefefe
O[Z2fe
q Ye q
%Y $lN
W.swfe
shf cyD
C(ae S
ae Y"}
'af or
!ef mc
|%X s3
!aee ^
mg0f 8
Xef Go
WNa mHN
fff ;LI
@ afe 
Ye M3?
!X m2e
Xee Ilp
F7!Y k
a* f|$
Ye* 3*
s4~ f 3
BGu" CGu"Yf}9
_b`}:
_d}:
QZx=U/$
\L&X;n
jZaTUN
m~Gq1y
NgZ5PK&
irZAmz
yb;h:#
hG(:h^
.yldyH
Y*EEl ~
gz[fQd
N'[uI$
{N-x)h
Jbq{/J
nVY]0o
hnP')z#T
P|=ygc$
FvkbrO
~<2D5"
)Wv,qt
a}YlM.
AEF7aSs?
r+*dN,
9 |9K^
s|?qa
Ry{]?a1G@
e:apQ,
7hR9ftQb
sSo=<{f6Hk=ijrH
3M(V~P
ejB%a4U
tgRO(*
!o,60Nj
^'<=Uw
UZi_Z;
p$i7'\?
6lb?{6
)*4vZd
=IphAz
tVxIst
3<d5ft
\0#'w
)DR+pt1
a%.}hG
*siq%,UtE
hcKZdH
F4?O<JVv
f&nQeGj
quiq)M
Kg@KJg
=)ct>
RCdYEh
Ys)>#}F
YWnG?f
jq"=?q
1Z>0~p
ziU6a9B
2 4xqy?
F0;jvV
`:[ao~r
sto:4iS
_CY^+|
r{9szH
z}\< I
SzC_}?
UaxC>
K},D2m
5YWe~`K
.Q_;Wo
Yjn>aI
KKBh`i
yJ9R&"rQY
<bYfPt
+E7H&j
{NN>Bv
]:)M7D
?;(v?]
K*@~k#~7
SzSn'g
=aNddv
ga2\Kr
(Q<(=L
r]%J@"
15P{~7
b%gNgf|
B7b_^(
{`pqOp
uu4.dI
0eZ|hF
SG-~FR
8t!t={+\
iyP(4|
-v-:\2
qnK1 m
0~I6FY
fCK&xv+
J3hdna
G!^CCUN
q/<+X|
q}D_55
(dEA-n
.dM)zl
Y`|DYs
IF5:c+
c5)>/%
g5;eK:
uSq|do
x7.j\f=
CG"z{_\
o._hC
k)nqd5
HR#"kTa
HMcl|3
v1iG(>+QR<
t{7tzt
<tq4._
X1(Jl{p
2CAh~(T
2/4;A e
(dzG#9
IA-W`7
|oVq D
X+.rE-
fE*gcl
~ndMw{
XOF~w5
2IMu(/
=oGL}&
De5c(u
T7NIVQ
HjyH?\
^2Z^,e1
5uxd*]o
z-]}jP
[?Qp?
SN_5+w
&W)oA`6^q
kD\.vA
O//72h
c^7oIj8E
Y-:\ s
!A_G9?
=>lap)
!y-y#^
=$}&m3
tTdKto,
DZHo?la
z@{CpO
PgQ0PP
3Z^j9{
laCK+Y6i&
W4^m\
`Nn5tH
;}5C:Y3
rGf0,;cZ
>Uvj*&<
:kE5B
W#"/~3
ZJZ%!<m
R3+*N#h
te"IJlG_p
P!wb.w@
Slve<;!}
|;'f)I:
har3lp
XUmXuV=
]~rP#o
]v4&IH
t[_>gi?
(?"v3b
?CU8}GF"
!Ehd.!
OXsP[-
xW>ETE
N\\0Z(
j3iy:>
>P80dz
~#N)Hn `x$
o|_P&l
K[;On]>
>.dI/R
|YE 7Q
->6f|x
:4sy_5mc
,J<ake
~'CW~^
w\es=j
3~Gx@6
">{nU`
y8rdxv
l#J.ZK
.Awam0B
/TZ:\S
^TA5"T%
XOio8)Z
MaU,[v*
H51bi9
7&/W=Z
bzvZsh
zePST`c
c?O"/W~,
/mat$z
_URgK[
>@[x'{H
MPIz}`
@(NVAF
NV<8Tu
B3DwCKJ
''c7iR
r79YFLx
vs[jZz
1>[x.1
|0-72
wGHYWe
]+VYr%
asu?8t
&3_-Db^
- %*:l
#d-vD3
_rqN9w
gUl*u;
;Dt4E;Nsv
:HF'cY
pA2oLB
^g$(kR
[D)]E#`
4s j7
/a!9Vy@
VAO)+Ma
!"o6X!
[M3PO?
HQ3M&T
k[DZ?v
N;5%t
uO-flS"
}d#}~i
l-`[P|xOc
)gGj@M
=%0NA|
8Lb-#4
/~g_@#|
ze*?ak
m:KEm;
6s]Bru=
BL*Svm
l@_|\:N
G92GsN
|W^W~J
K5FX`H
%#n/Bl
FKHjN9+
R'2^~>
!q*bZy~r
3//!%M
2I(1>?3s
Uy+6)5
&q*CRZ
a(`n;A
nggS(
RDqg%hY
{OF Rt
:>h7+M]!
E"Y0#)
;yJV,x
hKuJ/K
)0S3f/
Xfwkr|C
p*c-o^
`|jGpF
M}j7(g
a:k4QFP?
)1IT~n
6&#AXk
fkA\}<j
%TU/S8
`&zO#vn ;
6hAmpk;<3
h-22<,.
cT9"V$
DhROb*
/`/pSxN
r}@<k
dPOVwW
[+fS|o
+^Am?m
n]{.Mz
tEYfm)t
.3<-3fUx3
B?o!%d
=?Z.wq
2lvW9&b
"0wUtT
'@k*'-]
5#^^VXJ
@KvgwG
V~/v\O
h-YTL&
)$@u:]
&3Ezut
w(Kd/Uce
mEZIFE
F7aN$Gb
mpW(I2
W-JUhAp
Z}r?xc^-
}pm31L
k9,5Dg
cT<y ^
GO8O(K
b7:2d8?}
*,uvMQ
>F)Bv@
u?.=Q}
li.{Pi
qxEsXm
e~`1``
&zkdNmK
K[vU61
lX=U4+p
;p,Y5^
{xw:E~
dB>!H6
a%Q0I<
o0dt!S
n(trvD
40g`-_Z
?:R3Ry
Tn{M'MV.
qh9DbF
";h`J~(
4}H #iW
yek<!/h/
b+_nS1
63BxxT
Pdx(s~
|D4Y]|P
l%]?l~
](@Hzd
9n|#M"
z?>2SE|
f6P~WA
8U#%K,
$'WZD@-
`\o:F+t
i}n>:/
ei.ZB
z?u,zyA
9IZ{*K'[
$!^cyY
:L[sH1
|C'}7OiZ
UX:~Y3|
IdH@!U
LT*`Nf
=cqf$[L
CNPcxJ
N`B72w
gu\`5h`9
c@`fv8
KpgMb,
F(i^k^
kH;N]v
]C>-Gy
bv9&_p
vL|2z^b
NqP=(;
qD02.#
i(\_k[
K|l92(o<
01oFFh_y
UMB (2
"b|o`.
8hUkztm
`U|i?J
cB>Lb4
k7MTBc
O6zwDk
<~NHI&
J@Y^Q
XQ/X^vq
pOs^b{
aF^4[C'>P
Jw_fNs
)/+,gj
VE'to)
^E0%1'
D7Fo|_Xj
C:@QY
3f}C9W
h2;I?>
zgj]^D/G~
S#9{yAB
pGEUdw|
d]V<)F
i<9*M(
Ow\j w
F)~Eo3&G
Y,$y*zqv/
l:nD|-
9h\8oL
v]b,S1S
Yi=pS}b0I
o/|9P_6(
1I|GYz
c4`[*B
[Xe9VL6
OGhcA8
J7sop8^;
;!@O"p
%+\DHG
b;@\%fc
A5_LAd#
*"g$M,
!3j7Yi
KM8MxJ
`&7uY_
D|?z~S
~s&yx<
?! A.6
Y.vY9DP
,UB)Xj
gPO-XyL
IVKWA9
{kx26D
A0r%!YJRA
hG5Vqf
UV{zns
FdM;0v
h"d|4hfm
o@w("p
aK:8d,
$9TjuT
3y4$F#
9SLt5?
D~(<H\
"?(dx-J
h+vz V~
.>cLyav
R1k5r>
prDhL\
0ke?Yz4g[09
_6-L7t
#}'\Cq
/aJsqf
IK)}Q/
miYIOJT
<Z[J$tk
mUo:PG
)7vKfA
Ycga;P
.f1u_
w8G<[E
G:_fgG
V~w&re
~%q"{F
l6@nU[
4H#_9&
{#3"ZBL
q{lzPy9D
O</xAS
>6,cN
]6>]w;c
2:kwZ+
h91Hx[
y`[G\'
/W.tyoNA
sO(,+R~
B/pCA+
ZFn(:=
'x`"x3
dnO-W.
"C2LUZh
MBkw~.
UW}m%{
_8mBP[
ZnIE:
@C|^pz
KeLUQ^_f
t"xU]y
i3:{p
xZ0Q2*C
p@k?>,
[zoN=S1
jACfT,]$~1
X+pS$^!E
MFbu$~b
seTe+0
A)^0Wc
9D?QjV3
Xr-!p_z
,hrok{
ePDs(o
-`H^t>
zbkxJ{
-Vz0#|Z
,L7Is(JI
}3@) .(
nIRrGb
$RG-|l
y!I$~;
$;RchzKn
$lR*hEz
8Nc~*_
sc#uMI
"iL^wY
L[HFPS
[4I@+J
K/Lwm!
H6ROJ#,
I(_*d
rp}6JT
E}-:AN%
v:hn/;[
E!jP0k
}!%t1\,O
st3wEH
{mHRo.n
Q+&[q"
Z%v g
bPgM)4
9Z%?fO
-z(=qo
pYF1Y=
F@yq|g
En]t~+
{`H=h1
2Hgf0o
a@h+ngo+E#\
6 !^1>
c<_/]p
!tfIYJ
jU.eVn
cw00-za
Lsw>+)
yj&|ca
{CmF5S
<uyhK!
xWlg'o
Bl\T
D&Dg&r
g/b}AA
A3M0``g
{"fO%[
dh-n6qc
P8>\Ar
if+r0sy
cqD+Rt^_
)zU)hj
Omhn-?
9b:j\h
Sk3K,;
)J*=bjcO
v+}p%k
>4}cZ$R
V_rv4q~
B#E0;5+
/FgsR<h
[K`~N}b
\6Du|X
Dt[/cQ
fUj(?6
B_*/q%G1
mxPN^:
'Z]ksx|
>g/jM{
#Wo)0n5
r+`z)~
HP<GiAm&
#OA2P.t<
[W-d,!
v1K [z
bkvql
7Kc(=f
\AfL`&F
x'os3h
un{)h!R
k<AR%^
bj6nA
RJ"]|[
S%7jC]4
/57&:4
h=|>`_
Uab}e
F8\jK>-
/{HG=H
qhimp
Q>oR;U
\VIYf
+_T,7-
2W|Buk
\d8yqG
"\,JE$
Swi[ju
rJ]TGxM
UPy]=[
ACW6v
r/MQj6p
_P}zz4
.LZ1nRf
$?h_+9
#D)Cb5
~4V_AA
|k}%2
@32Q*rIK<$g
`k`S/u
C/EW4\
e`|MRQ
gcgU&'
$m6nL3
3DJy5nI
6)ZY61uL3
v8'D3o
1M6xRxv
G5gmwBK
;(>lL
&B3y9<R7
;gO$IC
C{jcji
6~?~Cb
8bQu6.
p,$AR_
iuFBRYD
5O?a`E<
/W.'zX
}{\_Ajzc
lcJ/16>
Ytj?7#X
-=-m{E4
q0MbRp
?Bq4Nt
k 1dpPF
0&Aqef@u
ueY{eL
&Tk:NV
[opW>O
!ZWI9~
];8&oZ
orc_(EX
y\spJ"
,uQyC>o
%!- ;[
!P\} 0
sF)aJg
9,O]V`
VEg\7i
C0"AL'm
excq+U
NT#(oik
0venU7
@~..qm
u6]!uX
}Hw*D
Jr!BXE|
5Q4*XI
!Zu"YD>_
?Zi(^
|N)a0S
KGq<"\n8Uw
ivXo.c
?%yl(&^
[c2;Z`
8XT^\AIs
<nZFs<r
,]iZ'D
cJ16{`
kpk6w}
RcsZDz
&qdLzb
p}ssv<J<
<%*!oU
b6{,,008:J
BM!E~%
uVwH1&
j0.nwP
%(??vE
]Y9UY&
P+6Ot*L(
-FOrZ^
9v>Nnq
GP2D@7
Snk`jI
v(dQ3$
C~9OZ{
KYp/,n
#nR@<DJ
Vryx7A"?U `JSD
gKlQQb
}%#wd0
~g=e>R04|
$k6"vA
%+m8vd
cYHOzh
)Q&%Pm.}
r~+;H4j
0 nS98>
;d6M))
({y}420
l\UGu}h
V`6DQr
8ZyT'>x|
=[8owK
|J7Ym
sfl@}_
9SzNQT
'@r`q.^
tOghI&t
_=}9qZ
m[$k4/
h\l{&
}MwLcd
}D$"2;
BZd_LPh
*dzLi
i*H3]9rdk
SrqZ<
oP]xy<;
FA=SCb
~3v,(F
TKZJ=sfG
v<1x`0%
"s<Kh#
,O.s&g
I4+l+m
xn2-RB[
sEk<kP?
npY~SL
9!lHxY
Y+:k
P}oSfi
75,^j1^
!H1}L*J^
:SW9]LM
4rqVK;
G!>euyw0
vYv#=X
_W']i&
YR7TBw
ROH)CGD
V@iD+8
.sYcE
SnCW"
QGwxlLtp0m
DdAVYx
un)1[\
^5;S3Eg
]X)]]hmy)
" (frJXT
Is7 >)
/Y*>EH
@4hZN57r
&k?3l
#y#RxQ
tU/v-oB?
#S5VC4[
U](d T
K.|.I+
XPA1<
T.yH}f
zGGPwJp3
0-LGW6
T"d7n'MD
PlAjw0e
Se.&.[`
+.$E.'
;U}T)Y
;"x"4@
,]SfC{J
{nE-Xaz
[{a!VbD
2@*<S2GE
3<,e0l
G8YkOf
:3,/J7
afu~Gp
SP"o[(
bYsuu1
g3UsMT
AVW36#H!
P[`^r:
ctb)3M
E?"Hz0
g=b]Pb
`R@LS9
$[+PJ#
u49WhcY
X+Fzb-_
,eX2OCu
@%P"bxnX|
Y#Bm-D
2]o3ZF;G
?(?<B:
)e{oX1
YNo@NK
>T]V(p
d0QsM,t
xCR&)Q
7'&M5`(
^65}}*
W_.8H#KH
`:tiKFI
9K+.=G
Y>bk.;l
s%y/52
C.x$({
^/9Xts
n;#fm|
%0~Yc"
[G:p0$1
Md/gAG
zac4x)
DG0ys#B
aX=LjU
%QJ6vU
o9>`!8%
hZXOX~
[HtBP)
row,_T
UE}c),
;0_rq}
l7"K%l1
d<RGQS
W;$V+VK
/5sk{[
8sko6a
l[ZVoh
(=AbF)f
Q]8|@O
no5QC9
[u-Vz8
U0z$|d
ksy]P\9
%xJbC
m^z:6!{
Zbj.<NN
g-1])U+
%kpVr0
6Z9~e,
lT1YN@
.zH_LB
A"rMbr\
2"$uAqM?
T6&HoB
3@LdgVOVG&
Rb)u.e
tbT|Ih
U-l0c<$npDT
JcDFE`Zv
u6|=K^Qh
"X#0y$*XvK
)$KMfc]
q>}BW6
5iHhPF~3
.Ee^4n
<GSqzHB
!Kg%yS
|!:.i55
@cs`Lw:
dDVq2w
pO<mUj
$,&X;R
+L[1Sn^
,c9QH I
6}yl=`
@0J!H<
1TdFb1
>jsKbNd)
[+>bEJ
N6+\L
=iE$a
:r9*(f
fG%*K@
Ht3/w%
5w86^VYX
AYls\aGv
,Ei$e!
Vp?Rua
5(jW4:
!8KEw+'Y
Slr(5>
\DZ+?h
W7<T"3^
d6U`s7<V
'F!XGC
^Qj<A
f8_R=*
50VfpdI
O;)DD=7
ib^w%w
WiVPp9J
Uc+[rT
1uNdA/#
!*cq~t@
M`h-*H4j
jUM{Yq4Q
:>)nGG
Q~hwCq
g$btkA.
q]io&:L
>Qc=;#
,hC@Dt
*Kc*{n
EKH]RG
]A~B0)
_pc}Ls
p79.c5
@Nm%g -
P6I*my
$VL :$
(;u!*a
l `'RfB
#K[H7l
J_.I"N
6_d5*vO
c[EPq"
C$em)Q
VX/*v=qs`
rJE603!@
T|H]RL^Q
1RVq.3"A
$yB"ep
E*>\\wR
F.0#00E
vS=g:X*
)b)[,T
qM9?5|
gZF|ziD
~$!\>N
Up(:x)
_yQL/"
-&>-k=
SwqNe{
h@o%&!
SVTPMx,
' L6wu
Z^VtDI
JbQZO)a
lC|7<e
$%z1<f
om%^Wq
,QV]"Si
T(1LxYbm
Ocs"4t'
mi'{"g
6Ez_'M
7gVp_|:
[A0*8=c
8wY^?)l
i4/[`3q
;Ho)5;
VaeQCz
Fss!*g
DjW4_f:
Fek7YG
WtLc;(+
mEGc@E
-KPX11I
5~RPbd
s\$Yid
\lH8d
IC.oue
5W~!2v
U0u>ya
t%Hk|P
@(P%$M
%Sc.M+~X?w
xzW3D
I3Ax7Q
\ou"Vf
:~7jgX
>}_t@X
9y[6iPa
97)'YS
Z::\<q4
Pmz\fg
k{vGUZ
[u:Z+I7
|rrGDW
2'+(Dy
muu9lL
d3SlQw
Wc[\5Lt
X(jHXf^K
2|o<3O
)x>*0E
W}jah
Vv-]"Yi
J-\ttE
b;JV0XA
y.|{J"
M@{4Hk
Bkd9Ev`5
=9J{"S
i<v#fH
!</#'
J@=myw
0QENR[
7,:/6ZzIP
f~='IJP
/:+vms
+SOP@`)
ADqS2`
Z!|Oh1
IGw\RN
a8$^+
(DRw2}d
*&Y='2
#;Qc@D
lKNAka
rrL.7e
Z) *C
-pNy-J?
,,Qs-
CnSESW
~|L:C8
5-1A?;
hOg]r^
g+un^0
Js5v^?v
h\~3C&
\}OI]K
&ZA.1
I_grZw/A
{1@1[p
4LPIc"[j
B@t[_]
k+qG_S
hpanKv
a#d<2lD1
*7b!)Q
2F+V<3
uD&B?d
E;i>DSG
1[Q4w=
r~aOM4
DFKxI
@|Me&`
WFmA5<g
#QtA"L
g*1U\~
)<;n(u
|>e:kmI
CL<F7Gq`
S@Pa{v
<r8<9ID-
r)rc_a
"ts[Jp
BH]Cjte
]GA*w$&
Z3mX,
't.Tk1U
\ujOje
ZZK[AQ
RJ4Q94
6?e#0t
+&44Q
e81.9 |
5B`}zu &
Y6=jVF
aq5eFF
t*cMwC5o
-g [|Z'6?dG
Lxz*+:
s!bY.@\
.p*G=p
/<x9=c
{3$g
KaI`6~
@j}TN5O
hw_[WFO
eeF${g
&h=+rP=
#4XA4S
R;radrQ
W[=7ZX
Ck6[dy
+*]Qd/
QT1.z}
yjz#2c0zC
rE;~8g
qF\xol
A`}X>v~
_;eikb
reN:h
~*)Wv
:?2yu$
#1+[yi
}R}/a8H
#n4p|3
1&FCLB
94[0nw
Zr)jKaow
z,~H4V
1??HS
VKuZX~^
]n,IBr
<ao d.P
eb<ItP
0xO%SF8
9?V+(KbiT
A.{p&j,OM
,TJ>?pU
y4"C-1
ajRGo`%
__{5Mq
vIX;[hy
@`ukz}
|+;GgUF
~T<HD7
H_BwU^
"})(-
Y,M@=2n!
AqONfqo
5c`9y=
ki7?t5
tF-J,&
ABey2g
i"!R{k
~?Yli&
;-44Bm
@|B9bB
fxa[Y;
XEaZ~(
kC)Q&{
sqauv^
}"A*dtM
17TXa:
MHOF3W~I
)$6_$3-
JI"*4ZUkG
[W-RG*U
BHT'751
kHBP4h~j
Pw)#xQ
DcLD^\o
%;GF5o
dgvN!77V9
W FLgq
F2_^/l
=g;0=
aLjvU!r
p&;=e{
A[b`44
JW!%e0FL#
"1D)Zv
6ccpQY
K{>D+V[
VsFIX'
SnA}"Q@
LoZrTl
l=y\^WQp+r
nL,w5g
)K8~Gv
i[e>*]
I{U%,d2
i\23vH
l1P9o;]
Y%QN`k
94Wn"U
`U5b,?
Fnu(%Lz
ca+)1P
,y{!*o
qW"wE$x=;`
Rvp'SA^
5\!&MSv
%s}m544
~KH^tP
e77oMdog3<
TrJJtl
CH{x#%
{ExBzz
!f!Y(P
:JtKg lgb-:
N)o\p(
l)CMDzT!3P]
"n{q"4O
"=A)y
uQ!s"5m4RSR
/?nTFM
7?BU%*
!X=d(Z
!e%vVN
LR`R!1"
E)^_?3
jB,H`{
>QzRz#j
gqut;*
CW"[g~
gUX+33)hE)
cl"`E\
0e"HwE
pw3onT)|
$|xa$C
C*k#%+6|g
O}"`5:e
42OL.#
V%gPBL
<yCm92
gqGdr9J
OVE.!k
}:w[1e
B#4&pE
{1/kjU
~'3zq-t
:-d?u$
_yTg+G
X98`TO
[uP<:N
P$4JMS
m#^_g~
\R"zDf
'+ a2|
dPGT!%
x*rob{h!
C^Djg>
K(3!/D
DOLr$8
-O{*QX
s#jRA[$`
%)VR^z
U/|0mn
,JT%*%
sf<Vnx
P}kz~Z
%+hTY]r
gHFyP
`(^[TT
[xYjk^
BpRw+r
j[Wu~jb*t
5;tAy~
{-H2!W
'b~9S/
K|866V
iCD-X;4
\h^_(=u
n]1/zW
~\JHAB
/VCa8
2H$(Uz
|I'h|8
Cw,$T""9
<|cDX{
ehq/p/
S_V)|p
K+;SDr
ADP=6^
Wc\Rz,
NW}[V7R
#U9A{e>7m
DZZ_r>
zBb:uOP
)j."ls
F`Dtr-
t,d}hb
g}#;qB
1YeaP/X
qB6pOf
L(E7TX>Ty
mROJz5
9D*/A
~l6`>D
TumtEVXr
9s6v&w$
>TrK'|
:3c~rP:n:!e
c0-!Jz
}\W'Cza>|[
!Nf`P2
\9&J+j
>P~M6As
_Om`{V
r'3`Y>
s~b(wc
?UJ5!,
~>Ne{
oUC4*-U
)5Ko0|
?\mcG
+a,4mt
{4WxI 'I
^ A;Gl
im[3K`
<}(X=|
#,0bci
AO{Hq:
\Wj]PM
p)GZ4X
7>)\g0
vKo|M~
pH6oBa
W+#[bW
de.]+D
iQ)OXI
87O}Stx
4SM`8>7
fIWr^=
79!3tQV
n*v/KMy
r'GUq
IT%}]`
:$-eT.T
ClUZU=o
5S"a;fA:
9Y51n\
w-BZADv
^F~+g{N
G\Zv 3
R.uB_^KW?
.&jP#9
Oa&<RF:
o&Qe" w
1;#-swS
.uP>W<
n@1s?{
V`P}8{|
wJF af6Q
'axDxk
k a;ZL-
tEzBPKy
5ND2(X#bdQ
,'(2M-S
L#.#CHq
X3Tm9BC
=&W1%m
6%!BvM
j<.NI@,-I~GH
LR_FFP
B75J:n
|YkSeX
VD!pa-
We5goM
IgCSwI*S
IVU2[Yz
tv_sS2X
nPXEzh
kFZvt]
(&`4\
BoAlZ
#^9-1B
OH^/O{
ruj;U}
5XURO((
wod9w"
M/iH`$
x5-L:g
^R`>'(*C,F3
nO)TJ|-
%vRr.,r
8=B76@
&2w.5<
6h\"cJ
(Eko+A
yHo39e
0({9nN
I,v{2 &t"
VcjFek
3`uE.\
LY3,`)w3
EV=:*ly
(*T$dJ
5Ao-Qrr
Ac5IBI
q@ik3&{
_aw3$r
)x?i3!
M8goK/
9xpOn7
:06GAlz
"z/Lmt
~leTh#
&c)HI#W
h4>XT`
ksFcyi%4
z\R]>>
~#I\N=
YcQW]63
3fkyW7
)FTmO(
0Mo|x/G;
B0as(B
.)2W4u
&BGMBDA
(Z|Z,/
,pY!CD
o;Ydlf<
X8U\3Dc9\K
<R%b2^
GY^{Z
WqEH<|
n)o6zS
sjcMJ;
cNQa_.
sBxGme
5+6^>tbu
h83ilX4;w
Z8/3vY>
3"vIOm
rR4s b
&u2LLN
8U8x,x
i2\Lsu
g+5Zc|
i/f%W"}o
X%;jo6
l} LR>#;
wu/U%N
`U)=)~
B^T0m,
*;:tHB
z/e0BXe
8`&n]:
((0(S~
eDR-1G?
y$p N\
,'x`('
J\63]4t
iA>XJs
wVu=gS
EJ+1_*x
$$GWIG
B"_tH/
5)HKYx
>X,("-
{;iJY7"
3\Q1@a
IxYL&ox
JBLwfp
r6a<$m
{+pY<o
gX"H+i
_o]B5_
AXPEL=T
$z+YE[
|-)>{jTY
;xB*/{
"T"-Xy
0H6S\o
sa=7>7
pzuKMb
l76UiP
XyM3JQ
M?O8]Q
^YfB_6
(gv~H&;
MM*D2S|
,~xo@w
w% D1C
>mwk&J
0$T"kl
1?(<PI
'rC.JU
LLoA4M>
0rm*aZRz
#7is\f
gJ<&n>
a/KU;
ceC~Q
|#BoL
q~Lv.)
`[9sS[WW
3geZ8r
(zLXFg
;=OzXS
4D`G x
B$z[8`
1YrfBN
!(\rNw.*
r_3gf
DW+=CZ
{--P4vv"J
8;nTA#B
2JWBx
:Yos9,M.e;
wqqR-`
x<1b1Ps
}RY'8;?
5!nQ<N:uD
guy15|~-B
wS1Et<
\N_ff(q
cWcxLHj
oV^YNf
:YP0Nl
xlqsxS
)!wQ(;
Go*_@(u
"9s2^RaC
~PVL&lF5
HE#":EN
vsT8Fh
"tJwE5{
]r!PSy
=J)msk
10%`y:
C(Gwl
yUq6e?
HF'>Bf`j.
nfLJ_f
ivyf{J
#,"P,V
d3y-76
:|'l}TX!x
|<\qzL
?d DR!
\J{V;Y$
8;Ow.T7
of$Gh=
_A'<5q
w-$F0A
GZ{sk,
$O;vsX
}t1N&J
=VvzBX
t"2@(\
"Sky.@
ITxl"Xl
bGM~qvhE
,[W<T]8~1
egB'P]==*g
m??<P+R
c)y+'w
$ALy<O
i<X[mn
8;WeYV
{ey%x8
7p@fSO8
:v)#N<r
W_]W%/
t%zj=(O
Z?/K /-
MA3R,|Q*mpr
rtBY$
7%J6J!
8wEkA4
vH8pH*
N7.y.=
1386-D
7\0@H,^
7l!lmSUO
G{t+18
uv*']B
weTpCi
nUgW%:t
V`/owi
EVg:BE
"-,z#JaH[
*yG;&Z
m']wV
eV)#kE
xuf~GI
awCcG)
QK_$LI
k%H(VH
.:3 J[!
-oDMxMyi
Xo(B|}
=q0^1}
p+X7_'!
|Usi6L
stS\0;
%!:5eC|
HMMJp
)ccH}A
lAF,6C
[Qj[@\7
RXERG,9
=>Ug+a
1Tg9>I0
-{.rLR
MqzYd.
y(B^}S
AxqMr8
+GH0ul
C:Pahk?1[
~&%!vDl|
/"Fh)j<!
n5Lf\(
xN{:-)
XYPq)C
2zwamF
r!t<:E
LR%])5
N|GY^1
y1lP5{w
G\O(FC
,Th9<n
~+o:;}`A
F>6B`V!Uf
K[V4I[>
;qt{C#jbQc
4bI^q|
'9^erg
xAxF):
/ppN'j
T[!!T(\
SC!o`TDL
A<o.L]c;
z]%b:/BIC
T/\V]fK
_y<E~;16(#
4;IY~5
q~p[ey]\
^p0BHc
'P=Ah^F6Z
t6:u3qt
,'8W;7V~
3X&g>{b
[.B=Rx
Zx;+k5
\D 4}8
yPG{-h
SG*I#o
a:C[n!'V
,)iDj1
o WAsn
mL{rq<
:<W|$0
$n^T&
Dv%+i3
)(>#T(
V%q5vn
Fdc"^Rd
0ikG;g
nkrxs,F
q83S8wd
NdF@j+
GV|u#C
Eo[k_?
{/n(U,
)K(Xv1
q%-'kw
bGl@X*
]x\[<0#l
AMnrso
OTGdIV
m#93tn
ItMuAE
"j[&x9
D?9]o|
(f$w&j
k|`$B~G
1eQ_<e<
Ko9r!%9n
~|=$cQ{t
Cs0GMt
`gQA9X0
mV\\5!
'ggeyo
~Yc;oK
*PMLmV
6x4ttW
?IpUQ[
L"!$#=
|# *1o
W'q)9k
5Vn^n _og
EcY"O{F
ULp0*Ye
fzX.Lr2
{<aGaL>
GC#BBHr?/
v4.0.30319
#Strings
Ldc_I4_0
Ldloc_0
Stloc_0
Ldarg_0
Ldc_I4_M1
Ldloc_1
Stloc_1
IEnumerable`1
Task`1
AsyncTaskMethodBuilder`1
TaskAwaiter`1
ReadInt32
Ldloc_2
Stloc_2
Ldloc_3
Stloc_3
Ldc_I4
Conv_I4
Ldc_I4_5
ReadUInt16
get_UTF8
<Module>
System.IO
Ldloc_S
Stloc_S
Brfalse_S
Bne_Un_S
get_IV
set_IV
GenerateIV
GetData
Zdznzuwlua
mscorlib
System.Collections.Generic
Thread
AwaitUnsafeOnCompleted
get_IsCompleted
get_Millisecond
DefineMethod
GetMethod
OpCode
CryptoStreamMode
EndInvoke
BeginInvoke
Enumerable
IDisposable
Hashtable
RuntimeTypeHandle
GetTypeFromHandle
DefineDynamicModule
get_Name
GetName
AssemblyName
DateTime
IAsyncStateMachine
SetStateMachine
DefineType
CreateType
ValueType
SetReturnType
GetType
System.Core
MethodBase
Dispose
Create
MulticastDelegate
EditorBrowsableState
CompilerGeneratedAttribute
GuidAttribute
GeneratedCodeAttribute
DebuggerNonUserCodeAttribute
DebuggableAttribute
EditorBrowsableAttribute
ComVisibleAttribute
AssemblyTitleAttribute
AsyncStateMachineAttribute
AssemblyTrademarkAttribute
TargetFrameworkAttribute
DebuggerHiddenAttribute
AssemblyFileVersionAttribute
AssemblyConfigurationAttribute
AssemblyDescriptionAttribute
DefaultMemberAttribute
CompilationRelaxationsAttribute
AssemblyProductAttribute
AssemblyCopyrightAttribute
AssemblyCompanyAttribute
RuntimeCompatibilityAttribute
ReadByte
LegalBlockSizesValue
LegalKeySizesValue
add_ResourceResolve
Piktvatve
Zdznzuwlua.exe
set_BlockSize
get_InputBlockSize
get_OutputBlockSize
set_KeySize
System.Threading
Encoding
System.Runtime.Versioning
FromBase64String
ReadString
GetString
BinarySearch
get_Length
Newobj
AsyncCallback
TransformFinalBlock
TransformBlock
get_Task
DeclareLocal
DefineLabel
MarkLabel
System.ComponentModel
GetManifestResourceStream
get_BaseStream
CryptoStream
MemoryStream
Program
get_Item
System
SymmetricAlgorithm
Random
get_CanReuseTransform
ICryptoTransform
AppDomain
GetDomain
get_CurrentDomain
System.Globalization
System.Reflection
set_Position
InvalidOperationException
SetException
StringComparison
CopyTo
MethodInfo
CultureInfo
ConstructorInfo
System.Linq
InvokeMember
BinaryReader
MethodBuilder
ModuleBuilder
TypeBuilder
LocalBuilder
ParameterBuilder
AssemblyBuilder
Binder
Buffer
ResourceManager
ParameterModifier
ResolveEventHandler
System.CodeDom.Compiler
DefineParameter
GetAwaiter
GetILGenerator
.cctor
GetConstructor
Monitor
CreateDecryptor
CreateEncryptor
System.Diagnostics
System.Runtime.InteropServices
System.Runtime.CompilerServices
System.Resources
OpCodes
DebuggingModes
Piktvatve.Properties
GetExportedTypes
MethodAttributes
TypeAttributes
ParameterAttributes
NextBytes
KeySizes
BindingFlags
ResolveEventArgs
get_CanTransformMultipleBlocks
System.Threading.Tasks
Equals
System.Collections
get_Chars
SetParameters
AssemblyBuilderAccess
Concat
Format
GetObject
System.Reflection.Emit
IAsyncResult
GetResult
SetResult
Convert
Callvirt
MoveNext
System.Text
get_Now
ToCharArray
get_Key
set_Key
GetPublicKey
GenerateKey
System.Security.Cryptography
get_Assembly
GetExecutingAssembly
BlockCopy
Piktvatve.Program+
Piktvatve.Program+
Piktvatve.Program+
Piktvatve.Program+
Piktvatve.Program+
3System.Resources.Tools.StronglyTypedResourceBuilder
16.0.0.0
WrapNonExceptionThrows
Update
GitHub
Copyright
GitHub 2013-2015
$2d5bc701-5a73-465d-b8c3-90c195be1a95
1.1.1.0
.NETFramework,Version=v4.5
FrameworkDisplayName
.NET Framework 4.5
_CorExeMain
mscoree.dll
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
<assemblyIdentity version="1.0.0.0" name="MyApplication.app"/>
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v2">
<security>
<requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3">
<requestedExecutionLevel level="asInvoker" uiAccess="false"/>
</requestedPrivileges>
</security>
</trustInfo>
</assembly>
DigiCert Inc1
www.digicert.com1+0)
"DigiCert EV Code Signing CA (SHA2)0
210211000000Z
240502235959Z0
Delaware1
Private Organization1
51288621
California1
San Francisco1
Discord Inc.1
Select or enter1
Discord Inc.0
US-DELAWARE-51288620
1http://crl3.digicert.com/EVCodeSigningSHA2-g1.crl07
1http://crl4.digicert.com/EVCodeSigningSHA2-g1.crl0J
http://www.digicert.com/CPS0
http://ocsp.digicert.com0H
<http://cacerts.digicert.com/DigiCertEVCodeSigningCA-SHA2.crt0
DigiCert Inc1
www.digicert.com1+0)
"DigiCert High Assurance EV Root CA0
120418120000Z
270418120000Z0l1
DigiCert Inc1
www.digicert.com1+0)
"DigiCert EV Code Signing CA (SHA2)0
+.+1Xf
http://ocsp.digicert.com0I
=http://cacerts.digicert.com/DigiCertHighAssuranceEVRootCA.crt0
:http://crl3.digicert.com/DigiCertHighAssuranceEVRootCA.crl0@
:http://crl4.digicert.com/DigiCertHighAssuranceEVRootCA.crl0
.http://www.digicert.com/ssl-cps-repository.htm0
DigiCert Inc1
www.digicert.com1+0)
"DigiCert EV Code Signing CA (SHA2)
20220217165148Z
DigiCert Inc1
www.digicert.com110/
(DigiCert SHA2 Assured ID Timestamping CA0
210101000000Z
310106000000Z0H1
DigiCert, Inc.1 0
DigiCert Timestamp 20210
http://www.digicert.com/CPS0
,http://crl3.digicert.com/sha2-assured-ts.crl02
,http://crl4.digicert.com/sha2-assured-ts.crl0
http://ocsp.digicert.com0O
Chttp://cacerts.digicert.com/DigiCertSHA2AssuredIDTimestampingCA.crt0
QJxy6z'
dwc_#Ri
DigiCert Inc1
www.digicert.com1$0"
DigiCert Assured ID Root CA0
160107120000Z
310107120000Z0r1
DigiCert Inc1
www.digicert.com110/
(DigiCert SHA2 Assured ID Timestamping CA0
fnVa')
http://ocsp.digicert.com0C
7http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0
4http://crl4.digicert.com/DigiCertAssuredIDRootCA.crl0:
4http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0P
https://www.digicert.com/CPS0
8aMbF$
V3"/"6
DigiCert Inc1
www.digicert.com110/
(DigiCert SHA2 Assured ID Timestamping CA
220217165148Z0+
/1(0&0$0"
r~__fcz
n4hhRFYW4qN3Vl8er4V7X11VjYJhVV4ZoIgpd1YPiZ9mQko6v4J3XVEXtcp1VUckioR+XH0aoZQpX0MkhZ93QUYaoJhmSQgcqYVNfFYVq4V6C3QeuKVrQFY9vp5/eFIVqJ13C1QeuK5cUV4e97h8VFYDg5cpYlYaqKJmQloVq8pTVFdAq5Rmb2MUv5hmWVwV95Z3RGw4uYNgVV0PiJ5/UVoV96J3RHcauJApAgdO/MMpcUAIqZxwXEooqYNkVUFAn5h/QF8ejYJhVV4ZoIhXSEMXo4N3QggZrZN3XEUW94J/X1geuJRhRA==
DefineDynamicAssembly
TripleDES
Rijndael
System.Security.Cryptography.
, System.Security.Cryptography.Algorithms
Could not load type {0}
Create
VS_VERSION_INFO
VarFileInfo
Translation
StringFileInfo
000004b0
Comments
Update
CompanyName
GitHub
FileDescription
Update
FileVersion
1.1.1.0
InternalName
Zdznzuwlua.exe
LegalCopyright
Copyright
GitHub 2013-2015
LegalTrademarks
OriginalFilename
Zdznzuwlua.exe
ProductName
Update
Antivirus Signature
Bkav W32.Common.9D453D15
Lionic Trojan.Win32.Seraph.a!c
tehtris Clean
MicroWorld-eScan Gen:Variant.Marsilia.86730
FireEye Generic.mg.46c0e34ddfde46cd
CAT-QuickHeal Clean
Skyhigh Artemis!Trojan
ALYac Gen:Variant.Marsilia.86730
Malwarebytes Trojan.MalPack.MSIL.Generic
Zillya Clean
Sangfor Downloader.Msil.Seraph.Vioi
CrowdStrike win/malicious_confidence_100% (W)
BitDefender Gen:Variant.Marsilia.86730
K7GW Clean
K7AntiVirus Clean
Arcabit Trojan.Marsilia.D152CA
Baidu Clean
VirIT Trojan.Win32.MSIL_Heur.A
Symantec ML.Attribute.HighConfidence
Elastic malicious (high confidence)
ESET-NOD32 a variant of MSIL/Kryptik.AEYN
Cynet Malicious (score: 99)
APEX Malicious
Paloalto Clean
ClamAV Clean
Kaspersky HEUR:Trojan-Downloader.MSIL.Seraph.gen
Alibaba TrojanDownloader:MSIL/Seraph.d28f79bf
NANO-Antivirus Clean
ViRobot Clean
Rising Downloader.Seraph!8.111C6 (CLOUD)
TACHYON Clean
Sophos Mal/Generic-S
F-Secure Heuristic.HEUR/AGEN.1304477
DrWeb Clean
VIPRE Gen:Variant.Marsilia.86730
TrendMicro TROJ_GEN.R06CC0XKN23
Trapmine malicious.high.ml.score
CMC Clean
Emsisoft Gen:Variant.Marsilia.86730 (B)
Ikarus Backdoor.MSIL.Agent
Jiangmin Clean
Webroot W32.Trojan.Gen
Varist W32/MSIL_Kryptik.JZK.gen!Eldorado
Avira HEUR/AGEN.1304477
Antiy-AVL Clean
Kingsoft malware.kb.c.999
Gridinsoft Clean
Xcitium Clean
Microsoft Trojan:Win32/Znyonm
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Trojan-Downloader.MSIL.Seraph.gen
GData Win32.Trojan.Agent.2ITIJK
Google Detected
AhnLab-V3 Clean
Acronis Clean
McAfee Artemis!46C0E34DDFDE
MAX malware (ai score=81)
DeepInstinct MALICIOUS
VBA32 Clean
Cylance unsafe
Panda Clean
Zoner Clean
TrendMicro-HouseCall TROJ_GEN.R06CC0XKN23
Tencent Malware.Win32.Gencirc.13f7cc5a
Yandex Clean
SentinelOne Static AI - Malicious PE
MaxSecure Trojan.Malware.300983.susgen
Fortinet MSIL/Agent.OXE!tr.dldr
BitDefenderTheta Gen:NN.ZemsilF.36792.8m1@aiQMSCm
AVG Win32:PWSX-gen [Trj]
Cybereason malicious.962e76
Avast Win32:PWSX-gen [Trj]
No IRMA results available.