Static | ZeroBOX

PE Compile Time

2082-02-16 07:33:51

PE Imphash

f34d5f2d4577ed6d9ceec516c1f5a744

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00002000 0x00004194 0x00004200 5.88291082916
.rsrc 0x00008000 0x00000622 0x00000800 3.5546778997
.reloc 0x0000a000 0x0000000c 0x00000200 0.0815394123432
.bss 0x0000c000 0x00120a00 0x00120a00 7.99986465128

Resources

Name Offset Size Language Sub-language File type
RT_VERSION 0x000080a0 0x00000398 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_MANIFEST 0x00008438 0x000001ea LANG_NEUTRAL SUBLANG_NEUTRAL XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminators

Imports

Library mscoree.dll:
0x402000 _CorExeMain

!This program cannot be run in DOS mode.
`.rsrc
@.reloc
v4.0.30319
#Strings
Handler
CompilationRelaxationsAttribute
System.Runtime.CompilerServices
mscorlib
System
Boolean
RuntimeCompatibilityAttribute
DebuggableAttribute
System.Diagnostics
DebuggingModes
AssemblyTitleAttribute
System.Reflection
String
AssemblyDescriptionAttribute
AssemblyConfigurationAttribute
AssemblyCompanyAttribute
AssemblyProductAttribute
AssemblyCopyrightAttribute
AssemblyTrademarkAttribute
ComVisibleAttribute
System.Runtime.InteropServices
GuidAttribute
AssemblyFileVersionAttribute
TargetFrameworkAttribute
System.Runtime.Versioning
Handler.exe
<Module>
olw78bjbWSA5R0xgT5
YYfmrQ567bgduJFZWt
Object
<PrivateImplementationDetails>
__StaticArrayInitTypeSize=12
ValueType
__StaticArrayInitTypeSize=36
__StaticArrayInitTypeSize=1355
<Module>{EBD0337D-5BE9-4A66-AB69-80EB63CD192C}
wRT8COQ3YfQx2mwNMQ
sNLRXRL2CJsJit2Wjw
F7oq9u2LcaAfvbJm7B
MulticastDelegate
Ce44Ut7l9uSM8YTyMC
HvCWADCHFQNVKVcnOW
<PrivateImplementationDetails>{5C68F1CA-52DA-42C9-8DF5-A77832C0FDE1}
__StaticArrayInitTypeSize=16
__StaticArrayInitTypeSize=18
__StaticArrayInitTypeSize=30
__StaticArrayInitTypeSize=32
__StaticArrayInitTypeSize=40
__StaticArrayInitTypeSize=64
__StaticArrayInitTypeSize=256
f8DD30E9ECAF9C71
m8DD30E9ECAF9C71
TimeSpan
DateTime
get_Now
op_Subtraction
get_Days
Exception
.cctor
lg4Aq5Wd9
eqJOZkNvB
gDxHS8Oii
FreeConsole
kernel32.dll
mnyisgVTn
UInt32
VirtualProtect
WxuDTfbAN
CallWindowProcA
user32.dll
bkIlZYMa2
Convert
ToByte
ToInt32
get_Message
Console
WriteLine
sXf4hRAWF
UInt16
RuntimeHelpers
InitializeArray
RuntimeFieldHandle
Application
System.Windows.Forms
get_ExecutablePath
System.IO
ReadAllBytes
BitConverter
ToUInt16
ToUInt32
Encoding
System.Text
get_ASCII
GetString
TrimEnd
GetBytes
ToBase64String
op_Equality
9469D4E87339CF320601B95BB289891F653D3AE12CDD0152C03DE0FC5020A022
AD446C34F2704865A9E424BE5755BC8F9140414FD7E1456F1A4581F8C2D778A0
B86C921CDC504CE0C498E5F2E9548A01E33F930047FB5D22BF2DA2270E113ECD
voH6gI3ST
Module
O5d3sMceW
typemdt
FieldInfo
MethodInfo
ResolveType
GetFields
MemberInfo
get_MetadataToken
ResolveMethod
MethodBase
Delegate
CreateDelegate
SetValue
GetTypeFromHandle
RuntimeTypeHandle
get_Assembly
Assembly
get_ManifestModule
IntPtr
Invoke
BeginInvoke
IAsyncResult
AsyncCallback
callback
object
EndInvoke
result
IURcIDqJI
FSkdiJym2
0E448EF5E5E60630BDDB19388CB6378436E3C65D03DD66DA7C6EBFF563BD857A
4BED3ADC52D4904075F6BBF279EC4ACEDE079533B95E229A29809542EA324A7B
62E6F13B53D67FDD780E20D89A6E8EE503B197AC16AC3F1D2571C147FDD324C9
7F535673D836D3D77A97DB03EB3D71EA780F44372F5AEBECEBEDD696AAEB8378
97E613E5A3A47DEC76B7E50D47644B35EA4322F00D594D80D2F1C1F3644F8A4A
C356AFF1A01C2B0DA472E584C8E3C8F875B9A24280435D42836A77B19F5A8C18
C61B1941CF756EB7551F7C661743802362728B785ADC22E860D269713DFB01A6
D5B7247C497788CF0031CEB06E3DF77A45FEF59F1E49633DC7159816D64759B5
CompilerGeneratedAttribute
Handler.g.resources
aR3nbf8dQp2feLmk31.lSfgApatkdxsVcGcrktoFd.resources
WrapNonExceptionThrows
Handler
Copyright
2025
$ac049bfa-2dd8-4f1a-9314-11e3fed61454
1.0.0.0
.NETFramework,Version=v4.7.2
FrameworkDisplayName
.NET Framework 4.7.2
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
fSystem.Drawing.Icon, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3ajSystem.CodeDom.MemberAttributes, System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089mSystem.Globalization.CultureInfo, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089fSystem.Drawing.Size, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Icon
IconData
IconSize
System.Drawing.Size
System.Drawing.Size
height
ISystem, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
System.CodeDom.MemberAttributes
value__
System.Globalization.CultureInfo
m_isReadOnly
compareInfo
textInfo
numInfo
dateTimeInfo
calendar
m_dataItem
cultureID
m_name
m_useUserOverride
System.Globalization.CompareInfo
System.Globalization.TextInfo%System.Globalization.NumberFormatInfo'System.Globalization.DateTimeFormatInfo&System.Globalization.GregorianCalendar
System.Globalization.CompareInfo
m_name
win32LCID
culture
m_SortVersion
System.Globalization.SortVersion
System.Globalization.TextInfo
m_listSeparator
m_isReadOnly
m_cultureName
customCultureName
m_nDataItem
m_useUserOverride
m_win32LangID
%System.Globalization.NumberFormatInfo"
numberGroupSizes
currencyGroupSizes
percentGroupSizes
positiveSign
negativeSign
numberDecimalSeparator
numberGroupSeparator
currencyGroupSeparator
currencyDecimalSeparator
currencySymbol
ansiCurrencySymbol
nanSymbol
positiveInfinitySymbol
negativeInfinitySymbol
percentDecimalSeparator
percentGroupSeparator
percentSymbol
perMilleSymbol
nativeDigits
m_dataItem
numberDecimalDigits
currencyDecimalDigits
currencyPositivePattern
currencyNegativePattern
numberNegativePattern
percentPositivePattern
percentNegativePattern
percentDecimalDigits
digitSubstitution
isReadOnly
m_useUserOverride
m_isInvariant
validForParseAsNumber
validForParseAsCurrency
Infinity
-Infinity
'System.Globalization.DateTimeFormatInfo+
m_name
amDesignator
pmDesignator
dateSeparator
generalShortTimePattern
generalLongTimePattern
timeSeparator
monthDayPattern
dateTimeOffsetPattern
calendar
firstDayOfWeek
calendarWeekRule
fullDateTimePattern
abbreviatedDayNames
m_superShortDayNames
dayNames
abbreviatedMonthNames
monthNames
genitiveMonthNamesm_genitiveAbbreviatedMonthNames
leapYearMonthNames
longDatePattern
shortDatePattern
yearMonthPattern
longTimePattern
shortTimePattern
allYearMonthPatterns
allShortDatePatterns
allLongDatePatterns
allShortTimePatterns
allLongTimePatterns
m_eraNames
m_abbrevEraNames
m_abbrevEnglishEraNames
optionalCalendars
m_isReadOnly
formatFlags
CultureID
m_useUserOverride
bUseCalendarInfo
nDataItem
m_isDefaultCalendar
m_dateWords
&System.Globalization.GregorianCalendar
(System.Globalization.DateTimeFormatFlags
dddd, dd MMMM yyyy
MM/dd/yyyy
yyyy MMMM
HH:mm:ss
(System.Globalization.DateTimeFormatFlags
value__
&System.Globalization.GregorianCalendar
m_type
m_currentEraValue
twoDigitYearMax
Calendar+m_currentEraValue
Calendar+m_isReadOnly
Calendar+twoDigitYearMax
+System.Globalization.GregorianCalendarTypes
+System.Globalization.GregorianCalendarTypes
value__
yyyy-MM-dd
hh:mm tt
h:mm tt
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Size
height
o%2E`L
*#Cs9ve9
+q%FL`p9
DBRfhn M
Handler.pdb
_CorExeMain
mscoree.dll
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
<assemblyIdentity version="1.0.0.0" name="MyApplication.app"/>
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v2">
<security>
<requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3">
<requestedExecutionLevel level="asInvoker" uiAccess="false"/>
</requestedPrivileges>
</security>
</trustInfo>
</assembly>
5Kz*=fs
??MTd%C
,3.1G6[
P fzy?
M,d_=G
*`w4l"
uM!3'X
/wfY4Xw
zN-Y1{
H)a($,*
!Je_WJ
SYnyH'
i3f?.
M4$b3J~})
)y?W3g
PcyW3e
x)mf?e
D^KQ/}
JJLWG+
/Ou:Gf
>V;{6\
{ M&(t
S %D;B
[VrYQCj
#$Z|^<
Eq1>0r
pm<*Fa
a4w;h
]TmJvZ
]4"6WZ&
G,2790
^,qDm#
ax_$v^U
Uc(%[wI
&FMiHQmLl
.Uv?!@
.Q|h{i5
"'oSuEV
lG"KBo
\I_hsT
Q4l*[*
E3F_>OK
9z>T6%h
~zA2}q-
0LC)Pw
efpRB(R
Ar%Zr^
591r'
grk49$
)wT x
UK$f*Q
g\seeyJz
\Dpy@`
Pm7\/
[]LqCk
=0*x48
|?C,XO
!L#tF~
&Px`b
"xW`dV
h:-4{g
Uv0]f2[I
dOLG_2
#>XF4+<
<[Jq[F
r0y\"p
YipVz:
caJr8/P
H'7%k\
*l5:4BnVF%
"d%|$v
)v*\a>
|q]Wy]5V
3Mb?);
Csiou`
,[)jD0
{@su4L
edDg[{
!)=DX`
!;78\:e
eaR*4-
rkKa+6:e
wVcPM_
yR8U6~;c9
`rP$O-K
dI^38Rl>
fEx|Im
n0N),)C
}[#X:f
E)u5d)
4rqS}&
Ik7pA
nY>V^}q
oPb-Yf
}2+cnP
P?UQh
X'LHgb;
1G!tzO
g,{/>-
U2#-k,\
d=*@7a
/'7JI7o0
`\U=Gb
WbJd/
zj/\-
W[ eL4
@,L~Y(
(ywB3"
b}f_og
z`A|zy
hqIyx+f
[J|s':w
1:{n"6
6``G #r
/wu(Zq
y&Z~_e
-8ku@
=dL9h>Z
YjQg'jY
r*.A]7
>0-1a
S/TQ.$z
uY45;I
D6D{S;m
cast&,+
!X?s5X
=faxPd
}^h[;A
tqp_{T
s eT^H5j
r1%ag$
e\~[hQ
nX r1TxVQ
.b1uZ?
$7V<7r
~w0Cyx
@Bh2nL
,[<;pq
Y}\]Ie
tBj8~bjjg
~Y"e^V
y]MTZ1p1
Zneis=
XtF84"
}/4q_5
~lo)4I@[,
(0,Tj
Zl%g@1
ir\euq
XB3E"L
n,xI*(
Qk+n:e.
<v}^)
((&`|K~
0*yYJ}
/eTuNf
~b&['K
:&G`A~
?zd'qW
["}sj2
_qcB-cl!Q[
[8(~~A,
kV[>{~PZ!
9|WP.$}
kzFF}f
0:'}5V
m9nio"X
/>^gQf+M
@/q",6^
VGV,~-a(Y
}vM*bd
<K!k^n
Wopq!+l
I(@4{S
\`.Iok
c7AE8_
$~_Pjz
_ZoSvx_-
FL-mF"
.fZJ$3j
)2~49
{+"H|
qh0H/89e
v^k/5i
0dD2#x_\.1k
3E4D_'
#rW9^0
]=tU$P
YsS(k~G
9YvVba
bA<F{7P
Rf:xlQ
dTG8.O
M>Ta$P:bRH
IR6>bS
"G7>e;&
gglB_2
3M:>/*wp
R@e;Zd
R3tk.A
gB#WTnMSiE!H
.~cH(b
pU.z&4P;
hl15C5
Z&gQbG8
K3_E{{o
ZUpS[@O3"
RpT$ yyJJ
a2$}R'
4eQ,#l
QC&<7L
4X4eh*PaV
BZltFl
l;T_'
#D%* ;
]J"4i]
1g1@@Cy
tFzK{*6
:Ghd%$
@&@uowJ
#,:0.;-
&gm*CE
6U=Gm;
{sqMAJ
Y/+A'@
(_:9pt
d(kdqeG
2lx]& $
5ezEo;
,Q);Yv
WMH]s7@
}tVu6n^
UJ}f)eC
i4:`:Z
H%}VMj
]YQm\t
Rm7;-e
_D3S][
(k0MxqxO
"vwTwCn
G/-<@>
ays#3a
%fs3BS
i#Y)(AZ
zDahK`
r,;k^cG>
vaOqsy}U
x*J~_*ZS:
)bN)rv
#WNsQ#
UGO.)3
7{=GQ?
a1`aoP
8Rj}go
-7iM v
hnr@6Z+@
{{`{p8
7}eLE5
Ev>}x~
Bg&evg
|LWEj}
AB+lxy!
FltT2H
Y9ue[T
g4Qv]N
!dMeCnd
m9,8Bt
iq/yi8
~yRFFT8
rIa1#O
cSi?Ps
C0p-6fag
}xm=9b
HCxY7s
M74K2QMl]
jd004t
kF}I#ah,9Va
8LLJJ]
OJ=xL$<
}$7uPv
C6'R\|r
q'\_%,`~0
,WQ|ghk?
5+U_U
Ym)696
e!#3}-
W%)o[,_
j0=p34
{f{:Yb
vR]vn.
((g=zL
=!<+A\
w@Y?%vO
U-P^I%bg::
3o}_Dg
LYsCP*!
vAe@!^5
3V*#"S7
5\"jd"NL
]C[/sM[7B
%^@'g8
"YO4\b
`w=~Hg
s'F.SqdN
sZ;B-AZ
!MqYs9C
$Iig}L
#OmIm:
eiYL,T6
ZC'c$?
Wh+\0,
&o?.eW$
haYM_\
/8(Q|!a
up7RgEN9
N6.h!m
xXZ/A|H>
HMe*U]
FHLGk9]
2gg>nN
RffgDu<y
ybs|n.W
:*'_1G
,b^fGh
siI! __
oQ[5FN
waiaTc
'hmo8(
:H`)j<u
PicT&NW
LG0/`m
PQY^!e
g'E86d
,zNj%u.
8;f4:@
P)9`ca0
`*8\0B~`
J$d7-y
\?iZSB
`KanWz9
yFL8N0
a09aB<A
%$/~r{!
YL&ETT
Y)iO\\#S
.m6{La
UXA rJ
xpJ8Rl
c-#=)<
,v_0d O
UE`li7/
u^HM},
Dmsf.byD
~?5fpa
$8=.~`$
v#8W1_
RiYW_5
Q1*s3&,
J{y|8(
Y}s?[.8
prUvX;
m# 2-d
Klww(2
p U)Q!
x/n@J"
b2zj5X
#38cpt:@
HP-jtP|
@cNm;p
&x_\4(
};5yMn}
,ueG(
#/RKDkwo
5$3YZ7
oF=4V.
+ [dy:|
i3WQL.)
c{SO*:
q?D2g,
j2\f#Vp
B"Z=n}
}_!*PKV
+hR?{w
<T$(\w
^nkm!U
=h0]PQa
CSlE=3(
xvL)(5
o-b<*n$
Zx&_Gy
N kF:r
(C8MRj
5,.yP0\
&'osf#aZ3
#hXEkr
2Wa3Y8
=s!-X
V+Fs_#
F9#UI
{Y}h "R
{EK`eG
VmA&sr
7}*5n>
{z&@X5
v_a;|^{l
Sya(&~
&BvU~ U
~,KRu/
@eelAK
fsDE3m
,<TqS
a[i5N0
^M/6fbM@?
4(?8FE
qB@/SZ
dv@tCf&
3nBylx
J$my#_
Mb}}Z`|
XA)n5O
ik`/aN
)Dh(OUV
?>\J,l{)am
bI_"A]
TmHHIH
BA`:Tw
aaO#h'
<r:G}C2
YaH~*=
(w;WLo
G=8OJP
76c#*W
lKfGpDC7
85x8sg
AH9\Bkr
1 l"?k
kUcq'[2*
kb}7/q
Z`H1lF
wBa=|z;
&vp0o%
kL@Qy"
[/ab.
{W}76r
N$5B<`
=55M=:
4ZSty7W
O)t(pB@
<-0*xx
(ju|h>
Nz q\H
8=hC`ne:9
E:&"Vp
,U`={cj
OY;^Uu
+s*x\)
'|]lrA|
0+83m6K
M6/XS;kD8GB
3:!aX{
xtR,J/
@!3['B
WY6j%H
)j208p;9
@K?fw[
O,) ^y
#{()1eo
kEJIZ7
4)i*=a
o-@62v#
bpqbbj
{]Bc8T
:pgA65
yhgSC,
: \'wV
a)lr%p8
rD5f .:
|!vzTK
:M_<Wl
7(=s*_
FYNRd=Sf
n"%u,
]bw+K_0
+)=j$-
#:}%NG
ksEla/x
G!6>-T
4;aQv;d
K6-a{`GR
!gxIl?
%9[ BTd(
#lFH5u
0+rv"_<`OB
?\I+'v
9I\wx!
|_ycz`v
aa*bp1
\`P{*lWA
;ODns#
=7H3+>
4KGHve
bqtsk\2
2P46`x
|6DL|(M
XM}GV
.#-]YJ; {
vBYNt0J8?R
osRS&q
pW"`nzd
sh*^FP
iEGKNQa[
UWr7{&B`
3-E 7j
^wj#5]
M+6U}&
0tt(#+
Ek8&Qj
zrs-ZmS
^K++<!
awmbr@
(k*ZYN%
|.sY\e
/Gv9Bj
,I?%Hl6
4I <dO
i_/Dx
IK/1A'OD@(9Yb
-G#KdL
}AguXd
$X"M1#
vL~g$WhV.
UKLcEf
7_mxmY
sZIel m%w
>]jdF;J
|T=2V/mp
a%+PF|i
!9|,Z;(
ybyYAT
XdC?fx
@QFo7H
D4@}h
%y?dyy=Y
OD~5xK
zatry4
}&\n[d9
CPB.4e
5-P_:^
)F=?5R
:\O"{/
':w^hz
4R4qW{
JEeMF>
Rg1:aM;
,O{)63
E&f:B1
CA(W{Y
Wq3p}Mv
`o@3eK
"}twl
F>cT&{
m/>d]lC-1W
b~/dq4}
"DALZ~u
s&'RuK
8j*^}2
@LnYZ.
}3*hbi5
Dhk|KT
mE2izTj
#hTT`q
6>&m,`a
4!p,VA
X^!%W\
y&{gF0
iQKcpf
h&Sh u
oy2?}<
<y 3Gc
jxku8Pm=W
~b-M&
_1{yv?)]DiF
1Yew/`H
$g2$0j"
G,,$yH
I7H0Y9J$5
g! ~IGBP
XM}Yh;
+W3V>!
W/q1Jd
=-Hlv|_
"A&Ue_A
28jIH{
*'"z|Pk
(qi8Xz
0Kd2S*
#a[AN:\
(n/jM
7h=E+~R
byHA!g5
Uw/%`Y
N[\3Db
J9Xn"Y
)p^,s#
M7qt!N
F{hK(6
Ld+*hO
",a$TC
'ap-sG
KjJUh2
5DmPO@
O*?rX4|
A~}*1n
aRzwh9
]1fQhT
>gDcQX
fMUh__
}C<?ZEWU
nU@@|#
k]]m+NPn
_Ssw[;:
T_2uea
QjOt\K
6Et3 $g7
g*1I}6
7,|{l:
>o:}dZ
kdW9Wt
05OA0e
,P=Jsc
GYMG`)R
$\5h>g
oMb>=o
7G`:<})
frv3$N
#7gyQM
qmkV:`
]pd+QQ
JaOeE5
Zd;D/
0ulhT4
QSn? r
E.K#4?
LLSH0z
)+j[Jm
ZkXxbHhJ
z#u9!g
d>edIWQy1H
#}@L"KiAh
?->&dWM oK2
!}T NP4[.M
#{\X!;
=|w`=h
!G6)Up
Pu*u1F
OPP}dTLy
uP[^%u
A;:GOu
*Z*KV1p
t+"`rF(s826
nC?=dd
^09_!%'
P5,vVR
#QB%S?
S)I6'J*
;{x,g< M
M_H}/k
j^$j+@!
={(k"|Q
@x>z-Isw`
~y~~,e
&<RTgok
ORReGm
d,-CA
Obipq?Qs
HjTJ{i
%Wo8l$
5Q&4z%
7&%8g<
x-<!/s
l O[}J
WP}*rh
j,M"ZoF1
tzfVsE)
^9fYWX
2x)f?#
JzZ}@
L>i9gA
_pT!^4
bNn .(
/c}R-g
&L<,`T
-n9!<l'l
t@rYs4
URrQk`M
i-%WGk
YYWa9,
~qGfjj
YivP&Vk
)y*RGj
W,G/<g
tZ+7_:
St[CQ=39A
dZy]"~
/Y7-6S
bJoXAOU
FPF&Kq
Angm\"k
qUOeyE
xg"h~>
k'f^uG
J>-D\<
X'3tc/
9MhYW'4d
'sVM\4
IV{n=?
lM7@5?22
>|\"7=
M9uG?x
|Xca]|t
4m<{/Yg+@3
xHn0en
-m/~(LC
5@c1Z~
[D7:+
J8sN]G-
y),a[k
)^)@2:p
a0>XD{j
B}@`<K
ylbP;!%
0zs+IJ
FzP!$Z
[if"r.K5
DJ,_vt
e$kKOA
hh<PFf
E+]q%s=C
A*1"/i
bQ2=Im
W58-G%
3'Ci!q
oOLIYNJ{
cC7(%r
d]53iw
,(3w-}hu
/dNbHW1lvf
Xl~.`7:
dv~{{B
8fE`vHR
nJf` t)
3:sQtn
]!vgGGb
>4E=,A
}<Kj-J
)+<\0,5
q<}#,`
+Bb$7n
W`\Msn
82&I|EO
</S*LEZ
onw/vaO
AlNJO$
8^#EW*
29|}vs
lZ?r#dT
8>ybC2y)"
5nOi=o
(sa4bwP
mMC-V=bh
-o;)IW
."ThQm*
BUtV%n%
O=-k3{
-GeGBnC
)q[c}-
,z{*C M
n9;Zp
Aw{@O!#
uO-;ud
rO=xHRT
+ahMVRaw
(8<G=54/
HO5!R9;
v5R"d)7
>|U#$e{S
TwzQ-O5?
/NzX82
>D0'?+
I}&CMh
]10UiL
=$}Xy]
H'W0n)"
'#-2>t^e}
IbY/fHwD
MjtETul
#ShTbY
Tcf%79F
6cqHNE_
e9~$f`
Xgtwqf
~B=_+#m8$
AuCmCQ?
R",@$j
/&n&wC
H+@><|
(W7]9XaH
!;p@hP
V_t28Dm$
njXuc6
`7nhEll
*2hzb!,
C9~|/
lGy5A^
vXc&ZpM
IWOMZ("
.dEa!uQ
RAOvv.
oTs`qa
Q/H5nS
<aha}N
%1r'
uREw _
)v"=KI
z_">n4
]Xotc71A
q9\ZC4
Lm?D[-
DG5^vn9
`(+-=x
I_WM2/
h}IhWl
J7UroK
;@XS"
h*%9W4G
B$}KL}Y
Dv3&zi
#$,(qN
V-:6C=
7tqX7;a
UVojtN<}KL
&uW9-.G
<VB!yJ
JiiX@g
/;1F(3
?~|o*E
DA:ur{aK
;`[Zt)
W,5JBU
T:ubZR
S%xw9/*
._7)cz[Q
a\-3]t
"=bB!bAx
-F}PLSJ
C*j?3K
oD]42d
_7:fg^Ro
^,AXg)J
sJ:eo!<m
:z!IB[
{kzVs$.
JE`@ F
)}[Gpb
mF2s_}K
'44K}7
%8l0mbR
9AAdE)
6'$ad4
:hkR:h-
58';rN
/~S|/
I.Bon<KR
OMI-|6
WP*@*E
a7Vy]
CpbcJt
3y;.vw
l.l:Rc
;k<omFt
:mU:DW
NJo1K8}
<(C$~f
B}K-1lC
XY 8?EdL
CkFRI6LP
%Of0N@
[_wdMj%6;gN
F "czl
.#k5J{
VdP<dMDXv8
s#X<f`
Q()q}_
gMOZZB
tz|,oA
!8)f.i
y94KCy
p<m6r9"
d7wUN((
H6_eK5}R
7R\zz9
'*IA98#
A5fhL3
<rkq~{
&$ONK*
q*UIZ(X
"kiz1y
|1byB\
_<=T;y
e?PlBypI
<Y(x"%
r3'ksufU%
1=<#YG
#ceGgy
\OK.K
: =h8I
BC7BvXY
_.+&N7
,Mb)0
f,,)4".
'ayk:h
f8m,E~
O%af==
>RX$T>
ryD+cZ2]
W7g!fJ
QT$'ZA&
hy'S{a
nCf*ee
>YOQ?
KP(E/li
\I3R|x
_P5Gp7
P5Qdti
q5*pIe
2#Zw_84M+
QMvN`%n
Fv9o%k(i
3@Jj !]
N50f^t
>zL9P:V
BZ`"pl
A"ezF,,zt%
<#R2VM
Ro9(p]
RM@gwT<q
Z=:Z=9
;z{59d%
MFE#xj
>QQ5'Zx
g"it+B
n{ixQks
G-:H-o
5bg!a^(D
ai"V3)
\Z'fr`
YYUuUk
y_s)gs
Sp7`yZ
5pRI#=B
UHg~#o
4QyAIs
I5fEr
^Yta4"
q<LV6h1
wmj2rA$
uNPi%%
_UiQ5IB
E{1pE~
[j#krU
3z'y\@
ASk!d1z
Y(?).w
=llCY_~
y,$:qZ
x?Rn {
&$a`(%G
>;Rx/5
+O-@$~
6WFn-VV
z>[vzQ
nE>o8bHt1
@tx/nR
k?1]_;
{kbGu##
{dMaZz
cp'N!`
&8/Vlh
N[=eIm=
0T*G)V
3t_:nZ
6VoAMC
//}{#\43]
Q"j:A/
;`uCTOY
WI#mO[
[&xbHj
iz9s9.q
vBC8Il
R_C.K@
[;fUN#
BCrT|6-L
mDm#Gt
SqS^rp
(0N=fj
yR2wyy!+z
C*tf?BKo6
B'HE]H
IzMg_6
,n;Ss
oUKG$/3
s{T)1
"Mc38
v}]Z'S
.B7$='
M"&9yy
`kb||/
L7xKXAb
qZ.t]x
esy-7
j2y%\48
zc4M^n
r'C89ev
p5\*v~
o<Ns%za
zS4EbD6FO
sn[]/
+Omj3H
!)O\awo]
C@#i|iks
p_sC2]d}L!
PT8_|n
3b5Pm=
s7x\,w"
WqTO##
B&W89rj
_KCjFE]
vYt8;I"
Q*{6Wi%=
a`1-r>K
i:Y64^F
VV]/|
dW9CAD$bkm
4E&8@:
/5ry,5U
`B;*<l5
\'?Bd@
"AT0+ka
fJ{q?|$5
%kH4d\y
2{DPa"~
O(B;[S
6CTjb"
>`dg9^
,-HN#s
|RlLCK
L=4]#Y'
I>qIRL
ee7OA2
2Y~, f4[
]9kUdbR
vkBW_7
RWDY)%
kg,E+r
BlEb08
&l,|Et
C4yLR/#Z
G$uNPlhf
f:e;#_
u"Dc^k
f#e_`y
%=6n[O
ORt(nm>
%cAE>W
#c{pep-
^mrE8z}
}!sh}=
o1uy_>
sxD6/Y3
'`4bs<
H@ $j[
,Ibq`I
E*vIj,m
f6i$
Vx2% K
QtIlm$$
:o{#>`
Z1]Q:k
A; H$o
VL%b{pq~
5@URK;
v.m<uI
sJ5>~O
MG TUAj
~({5/iw
byZjXl'8&
-R<A%CrM
iAmXdX
0S#q$]kdV
`y>&Hyc\/`
P_MoG,(`e|
:U&.zi`L
GoLF^b
Ef#rW%
;Ixa:E
8}N-j"v
pn!f]QyE0e[
qhuKyx
K"Kc4k
+QZ?U>pf
?a7rA
|e#"YB
r_&yI1
uu\[ QY
78^yCeD
__kcd
r!|DFr
D'T1<2
([AN*&8=
W,Wg2
_evxRHjA
)A{v6g
BP%:.]&
J\UPZj$
9^'k]G
1T)>qa
H(L4XI
Pz#\bF
uigABh
K^2|`_Y
Zz`K@i.
FhRfi{
w.8^K#
\k_[b1
Ojp(HV
hXSRs?
DC4R'
4YvqIs
~y{z^S
)/_6Q
9MO06r
\j{VA7
!#aJZ{
qm|Nys-
_w_`N)
2%~#0W
L57%x*
:ri"*\
(.0]:C
H:Z'f\
'0a$u|
H{!-'IY
B'1E"@
G}Ukv0#
VWDnaG
?Hd-:s
$xeJ1
y8J!)k
6rkm%U
9/fdb
B<r#Sr`7H*
S&ep4Q>
Q&FE:]
X;<!E
1pQPAy
EG|MX=
OBL/S0
w$Ma/Z
8j#H[`YK,J,
mX:knT
PlXaS.
lI^Xi^kC
Y+OZ.;
c^/T/u
qXfj=q
ZC-?{m
A%"R4U
r!&z,~
*`iGVz
7tY[|q
1qXG>8i
>J%WMiV
579fxIU
4?wrgK
IV^37=
hb<v(m
M`y#DI
]*C%\@Z
IHbMwJ
{;Na,~
^=?]{DFjse]
koC\T|x
d~^$F`N
c#,U~@
!`tQ-[(
[klW#k
*.1d)]w
^Y5>qB
!kTsgQ
to\r(G
.}b_bZ
_vYvL&
%jN=}
D%x29p4
U$d}0*E:2c,5
h^O;xm
0^P` <y
*b;vHV
jX63`H
OEZ1tl
'~JL DG
IJ$j9
=.i8c$
|svn$'G
b?H)5bIm
2xV{5f
WY]gFP
voqtR"
Dd"LXLS',
IhWa4
o,'B2:
Sx1;`}
bsVp8b/R
)G:<AR
H8>^w
#`|/h+<
ueZ\b&
`}1+Gy
EOIZZ0!:
^&}*bx
}!CLN@+
Eq,;dgA=
E.R>wR
2iAy77
ayU3h
&,S-w&
|,d;*61
E'R9Yz+
lBM7:zpDP
R5o5HAM
r79bNZ[v
N5*`EE
%_dW$
l_'x~}\
w~?TQ>S
z'2MYI
ek+X%R
75pd)~=Y
C>KGu|n~
6{tcFjYZ
yrvuH(q
~NTN5;
-GJm<#
:~2<>@
eUK_7<
5|Eg_Pw
l,>99)
J':%Kb
6)[xj-vG
leO_5;L
P|0d[/
%(eRMz.
W:NtK{l
;u")K
}|7O}#F
='#y4AW
>nXT#G
x]l+WM
61{n[e
r.%\t)
N9R@6Q
,"DN(l/
xPA9|L@
RP/5D)
Z!K$o+.NJ
FVOh'_
WW4/5n
:kY1"F
st?2Qv
L,-b5gw
v$y0>
qVwzwD
'(_JK#2
PF3\Pp
,eB)^Z`
o&;R\
JU>zc7
7M{I>
s_AwHF&
AX4ptU4
^*O$-
xorsj(-
1k`{@a
DiQ,,u
dH_4|m
^o"ps
uGU&c$HRU
qoKEKs
5knF%9]
i1TY&<
L;0:i;
9'(~:
f"laD*+
X"d:_Y
\E'QU*8
TsuM%#
OR}(u`
Us#<'
TLcz+y
($Gs-q
r185ho
1eSW&U
9Vvaf#
19ImvV
hz3S1/
oR+{pO
o-ik[
/%Dy3,
b>Nf3Ai
~d[3{H
pX6%HK
yE6_~?:`L
wdb73~
BeVYC}<
qw`Gh0
&)RFye
urfRB'
cUDq2HI~2=
SEF8 6
nNgot0}#
~? \E`
*Dw5h:
c:e k7
?# WT+B'
Y1kxW-
pM:5-s
"VQZQa
Co,`>hZ$AEM
eZi+`8->
/[K2|7
>tF*;~
$HeVH{Gr
%}0-E<k
RxWe;X
.0-SGf
&xW_(bXj
H/|xef:v
!"3J F
m"TT*,V&
uV]C^v<eN
`a=EE$
F[~|M#:=
uS{=..
ee>Wo
=DG|Uk
srN:BDX
7av[Sa
4?c$*X/
w6HW1|
SlP=-D
HZ{C&|
/_w$_8
w`$#=t
E ^7Q
dw}2/v3%~
|iy$34
k%_}U}
+M7|4{
8JEt.R
/~[1{W
Q!o74{
r{}[DQ
AI*(:w
n((qX+?
gO!`0n`
WFj`Y@
<QI/x9P
R?f6Lz
IK:$-x
g8=Etv
+Y9nA~x
[> AHFO
BM,J-6
RQ{Z/`_
_t $It
5*P_?r'
71Jsq
,iQ3xsr
?f,px^m
Fp+)jq$
0yRvo>
mq^RGp
t= 6au
%bl$%D
n9[e@+pQG
\jD:hI
i.NU&Q
1_~f';'
D5NGH1&8
Wp&4AN
}5%d S
M8RQFX
TOzDST
<wX}]E"
LH{AFpQ
7h1v./
-n'N~nJ
!8)1{/v
q$uBu.7
b]"H\0.
Faa yk.B
QH]&c]Nn.O
=!,_lswV_p'
G9;9xi
BZ1`$)
-ajRJ}.
L"fqL*fE
w$Ttc6:_
R_nq%i
iH9Sp'
1oug$H
y/icN{
n^e)h{%
}J9O}0
ba5?l;
wkxH*
o4J%8q
^iUiR5
ud,^0|
Z?P'.@
JxipXF
%F9[=s}u
-,G/Z,]==Q3
$6RPZg
az,o|9
8OUCG'7
xFS9t\x
:7nYZ}a
AeFt|D
,<*,5Ks
"1YYbD
ybAe(M
2>5pe!
"Ope0^
`nwOTJT7
Gx'+UT+
sJuG-t
i|H3bU
2t|V`c
^"l=Sn
`qv;3~%
CXJeZ4
A:pF)'
[f6uT+
q}4:v~
+\HFl#7Zg6Io
+UpE-p
T%B!2]
iX>1:
DM],tF
N&PPUxli,
;P_1b+
di-2 p
F][n{1
5k$rmi
v}0!P+
$hsIsdz
)=:e{m
@%:YK
6f2X0[A
RoWRLv\V
#67E@t
YoRFl\
!}1e?g
A3i`SQ
}.x$+
GwvzZ@
%mA1*
c<ZIea
5A"$rgPQo
1%{%)R
b0#`y@
:[KBV<^
Ie3VtJ
bb9J_ak3:
^&=T}%p
o(n<+l0}
o-QJl)
Z@,Ltc
mAE7=
Rt!1SN
epQvwJ
'_`j`q
Q%A'l+
Sj mL!
L0RUL(
e:wb4fW*
17SzH
iuNh$cQ
(fKu-?
5B8?%Kh
a{HYa=
Yl0t[cr
}t*QRqq4Xb
0D<A}o
ZMw$[NLH
(aw|;Y
xL`5sEl
^Zxkw>a*
CC$lV#8
t"(Jtr
>Mm<$l
J9~>)&
dkJ^OC2
<hmUvn
l"0@}p
G{u$Z9
5@qcXG/
>`(LI ^gf
]+7*Gd]9
rL:w <
{qj\FB
|>5Y;G
:UNN/NS
2ynZ}J
b(((M:
:N(@KG2
up$yw2
Z?`[~)
C`+doI
Hl1%h6\f'T
][r;&>
<`+!5b
rGTyg"
mIZIyb
B_l{Wm
f?!s)?S
R>!F4U%
\gx,u`J
rI&X}!
36C}_&
kQ8Ud]
qQK;{)
|fGcIH
:ISgpS
nSCHs'Gc
*|J=m`
2&0l'[
pJ0MjNp;
`m3|-[
^q{&M\
'$KmqCW
A.Gmn[
&Gj"08~
'$&AfF2
aPeu74
d!uNrbdu
NIx|*R
U8mt{v
HWSN<r?
Eqppu=
tv?x^v
S=4Ihd
R0p\"
+ MMr
o iRcIp9
`Z7B%CV;=
xPfhH[
B$FYZ1X
Fdd[v_
A0qW>Vh
&Ov^&sw
V K72ow%X)
b@wRY_
Flm:zt+
sRH(+1:
Y""{:e
}9yq2B
Ya};3p
Bl/"Qy+u
![DN
^;5L}&
0]M~^Ys
.QRVN;
RC_r(qIN
i,mC~j
C-_\&^
I`&=7z
j>]iS
?q7]Y]x
4z[%|\
g{DV9~
&|/;um
;mOw "
Q;/?SD't`a
#|p5\r
uG>({u2
TONB`rJs
K?l/;rYeOF
{hTTVZ
l02N]C
k"'8N|D
K=X/qe
gbj6K3
YO$l{'
JJv?Tv
%7E4q`*
2<U/M,
vke2>N
<=+5:K
bVoyPC
[JLXk#
ZDlCPR
wCYN5W
*d-Cw?
tAhYqB(`op9
H7* ^3 S
\KlRek
VhZVc3
;|?"]eD
<Pq/Z7
?s3wWa
ku^POd
NQ:q?F
@@aagX
M:T;nL
}s>~n^`
&@5D!^
vGKG'w
FJD,TC=
GWjsMn
[Jj/}O2
I+4.9Y/I7
Pb :PRod
BN]T\f
k00)s
3X&M@k
V_".pW
n_=*`7
E6Hnu n
fcSBN2
\9mrq
9VV>lJ/
luN(Jo@a
Qt&kcA
OinTG+
4Jq{A3
f)GoK(
MOq}5f
n{9UxG
wgiygp
:8q0O8
-dHW_B
m6}ITGb
7Q3t/g
,'6%-o
qp[,!w
:k1[rl,
W%3wAK
(t9C "3
STUb,6
_d+TGLs
@@X4}#
t\d},C?
+9DnG=
^a|]K>@Vo
cr7zK)
Z+Ehyf
9D %#y`~(
;Gk0Zj/N\R
a'& x/
H14%r%
6i&O*C
]cWd\@'2
F1qk[}
m {0SH
@[be}T
WlH},
Uac n(c
&',g=x
-r53Qh
5zBE Cu
DK[I1)
+2tRR3
X2/({+w
R%#GX7
z18)6K
~eBMBy
D&*8b"
6BU[M
oHk"8^h
!;~>39
qM!%z|
?cC[R^w
0oAf8-
Fio \I
OiKgSe
Vd68f{
`JLmJ>
hzi{u1
imkN:a
KXd])wW
do`ohJ
3Vq,D<
_b)SR&j
D+QS]I
Kt"lDb
7W|Dzp
oDF3KAL
v}zu29
p2 t^=
ZV@}Aj
K~?#mJ
C2G3=;wo
=/q9Xv
/B3g{j;
r)'M7l
_xZZzP
kQLOCSbQ9
J+=0WI
/-+[p.
IAgTY~Q
A5kgI
x4a\Vq
kx4t3|
GF.(1Y?x
"ab.zg}\
Mx=?NL
Antivirus Signature
Bkav W32.AIDetectMalware.CS
Lionic Trojan.Win32.Stelpak.4!c
Elastic malicious (high confidence)
ClamAV Clean
CMC Clean
CAT-QuickHeal Trojan.MSIL
Skyhigh BehavesLike.Win32.Generic.tc
ALYac Gen:Variant.Jalapeno.19267
Cylance Unsafe
Zillya Clean
Sangfor Suspicious.Win32.Save.a
CrowdStrike win/malicious_confidence_100% (W)
Alibaba Trojan:MSIL/Stelpak.0e6cb6b6
K7GW Trojan ( 005bf5621 )
K7AntiVirus Trojan ( 005bf5621 )
huorong Trojan/MSIL.Agent.vl
Baidu Clean
VirIT Clean
Paloalto generic.ml
Symantec ML.Attribute.HighConfidence
tehtris Clean
ESET-NOD32 a variant of MSIL/GenKryptik.HFJI
APEX Malicious
Avast Win32:CrypterX-gen [Trj]
Cynet Clean
Kaspersky HEUR:Trojan.MSIL.Stelpak.gen
BitDefender Gen:Variant.Jalapeno.19267
NANO-Antivirus Clean
ViRobot Clean
MicroWorld-eScan Gen:Variant.Jalapeno.19267
Tencent Msil.Trojan.Stelpak.Ncnw
Sophos Troj/Krypt-AMW
F-Secure Trojan.TR/AD.Nekark.gldyk
DrWeb Clean
VIPRE Gen:Variant.Jalapeno.19267
TrendMicro Clean
McAfeeD ti!F5946E9F0AB4
Trapmine Clean
CTX exe.trojan.msil
Emsisoft Gen:Variant.Jalapeno.19267 (B)
Ikarus Trojan.MSIL.Spy
FireEye Generic.mg.d61ac037c333f1bc
Jiangmin Clean
Webroot W32.Malware.gen
Varist W32/MSIL_Agent.JAO.gen!Eldorado
Avira TR/AD.Nekark.gldyk
Fortinet MSIL/GenKryptik.HFJI!tr
Antiy-AVL Clean
Kingsoft malware.kb.c.1000
Gridinsoft Malware.Win32.Gen.tr
Xcitium Malware@#2w4rogxv5vhz3
Arcabit Trojan.Jalapeno.D4B43
SUPERAntiSpyware Clean
Microsoft Trojan:Win32/Zusy!rfn
Google Detected
AhnLab-V3 Clean
Acronis Clean
McAfee GenericRXWP-YG!D61AC037C333
TACHYON Clean
VBA32 TScope.Trojan.MSIL
Malwarebytes Spyware.Lumma
Panda Trj/Chgt.AD
Zoner Clean
TrendMicro-HouseCall Clean
Rising Malware.Obfus/MSIL@AI.83 (RDM.MSIL2:gVlFOHBqPJjyxMOaAmJqqA)
Yandex Clean
SentinelOne Static AI - Suspicious PE
MaxSecure Clean
GData Gen:Variant.Jalapeno.19267
AVG Win32:CrypterX-gen [Trj]
DeepInstinct MALICIOUS
alibabacloud Trojan:MSIL/Stelpak.gyf
No IRMA results available.