Static | ZeroBOX

PE Compile Time

2105-05-15 21:29:32

PE Imphash

f34d5f2d4577ed6d9ceec516c1f5a744

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00002000 0x0002a5b4 0x0002a600 6.03426036437
.rsrc 0x0002e000 0x00000242 0x00000400 3.52628641169
.reloc 0x00030000 0x0000000c 0x00000200 0.101910425663
.rdata 0x00032000 0x00009400 0x00009400 7.99459936396

Resources

Name Offset Size Language Sub-language File type
RT_MANIFEST 0x0002e058 0x000001ea LANG_NEUTRAL SUBLANG_NEUTRAL XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminators

Imports

Library mscoree.dll:
0x402000 _CorExeMain

!This program cannot be run in DOS mode.
`.rsrc
@.reloc
B.rdata
Z?_d
_b`*
UUUU_
UUUU_
UUUU_
X_b`
?_bss
_bjss
?_bss
_bjss
?_css
_cjss
?_css
_cjss
?_dsu
_dnss
?_dsu
_dnss
_dnss
_cjss
_bjss
v4.0.30319
#Strings
Address
CompilationRelaxationsAttribute
System.Runtime.CompilerServices
mscorlib
System
Boolean
RuntimeCompatibilityAttribute
DebuggableAttribute
System.Diagnostics
DebuggingModes
AssemblyTitleAttribute
System.Reflection
String
AssemblyDescriptionAttribute
AssemblyConfigurationAttribute
AssemblyCompanyAttribute
AssemblyProductAttribute
AssemblyCopyrightAttribute
AssemblyTrademarkAttribute
ComVisibleAttribute
System.Runtime.InteropServices
GuidAttribute
AssemblyFileVersionAttribute
TargetFrameworkAttribute
System.Runtime.Versioning
Address.exe
<Module>
Kingdom
Object
Program
<PrivateImplementationDetails>
__StaticArrayInitTypeSize=10
ValueType
__StaticArrayInitTypeSize=36
__StaticArrayInitTypeSize=1355
<Module>{3E81FE15-EBCF-42F4-BF57-4C3925A49DC3}
C7hbWn4x5PJddSwEUJ
tsXZPCBHtWdHRmZICD
z73yJGIE0CVtOmknFX
MulticastDelegate
iaS2Vr3uDOmcU44MnE
h2cqVqLO7hf5eHbubn
utd589FhhhWkag3Lpl9
GtsbTdFEYXbvlw2dci5
Attribute
AS39C9FkyxNpaAobe8L`1
Xq2pcTFrHqUDXlbN5dm
Ym1mOqFwCF7mufP90yH
d4qJtxFJmCCllGyFvXy
KnTrV8FSb6vtTXUfd1a
KwWljfFXBDAyLJf0AWv
pT9ZZrQF15gXINDqY83
l8ZfZMQQCBeFdiViNND
auOVeaQmN8RP5yCl0wW
UMFbTSQyMAslKf36Kaf
DliGJwQdlj0tYlwO1J9
AAHwHDQ1Uer1bkfX8Co
rUI4nfQCniyS5fHVhpa
JXOGSnQbfj3iDjNlqnm
euOAqFQcEmNB6pYp10Z
PjtVOtQuqt5a8Mxuwmk
XcfgJgQ43k2L291vThE
exoZjxQMBuqtBJIML5B
jwknF9Qg05IohDNmPZh
QBAyqLQqFmKKY4L8nyd
BnMEkVQ5HZumwNFf0rY
CibfR4QJnXfiS060Z9C
npbNOBQolXcMWwO5rXy
GNBO9wmyBYTC0ROFmIg
IbTBp1mutTAAjVGpsfM
neQUsHmL96PfK0945TJ
SsCaJnm00KBg6U9JOmy
BYLTXRmqk1g6WGxfQu8
lLdwrnms43gdr2dCK3f
x8FACnm8XyUTQMuia1l
AClPKmmt7Tthg9xNK98
Exception
gKJyWEmGRO5i93XNd6r
lwZ73pmRqYacOQypdLN
JbAkoSmAtOTycp0HMfq
tsEXpFmhFBHCkvdb6ME
E38WUQmOQJv79F97sA7
DfrtcgmwjoQyl8XLsY4
Lg7gtXmK4hH9ZVGTQW8
bursOFm7DGChFW8Anlt
vDSn0jmzu87dQ8bdDdw
laFgItymQVBjPHEwyRm
DDwFVaybu9u6AkCisLN
NcB4ttyZ5Y1KX3ogXgy
hPpaUCyLaYoXVdwkD8D
K6rfBly6Dt3LAIXicbY
eYqRbRypTyrxKhu0DV4
YMEiZhynUkSWukadOdX
tXDjPXy0hp4aRRf9rV3
badGaxyq3UpjWDtuBD3
gSEhiZy5PKOUoxo6tF4
klSHojyaur5JVE4KULg
AHdhEgDv4FIOxsf9Qwp
ydWPFubywOxxqhBonJy
WCHhlebd7TPpcuX4gb7
HrRFOab1pAAasNaTAW5
vQV28Nb3C8uqFdHNS4I
RGFYIhbTyTin7EnQLx2
tI6QMsbMCfRXy7W8fyl
qNU3SBbHq2RNTO5DKsg
aa9FZxDinAnwWXPJclh`1
<PrivateImplementationDetails>{60D1DC63-7E23-4614-BF94-B22C83E08868}
__StaticArrayInitTypeSize=16
__StaticArrayInitTypeSize=18
__StaticArrayInitTypeSize=30
__StaticArrayInitTypeSize=32
__StaticArrayInitTypeSize=40
__StaticArrayInitTypeSize=64
__StaticArrayInitTypeSize=256
<Module>{a0825025-4ee2-4e56-b823-6f0e724a8bb6}
dthatAY5xtkCDsCx96S
RDXU9hYs2Xf1ncaEKhM
QUCDw0Yt2lmEvBpjQOt
ShYCabYRN5Z7TXSwaK6
gKXNWrYfHdFvjvewLCT
p2bxitYhMZ4o6Ric0p9
ywWAhFYkUMVv8bDktgg
J6KAllYrRaSQVYJn6Wd
xmxhK7YwLT8PdgNbDbX
WaN04gYS9l7urHTx1qo
vU6PhrYjknS3jxBn95h
Hv8n4XY7CxwiL9BJIRY
qxhrclYoEVi5jlexPDk
c2tZQ4vDkrDC0MxGWwh
QkKp55vQgl2lbBIw3DC
jmLeMIvyQkqScnETsK2
EApD3Kv1iksa8eqdeY9
rAht8OvbgwqrLucWo6v
Tomuv3vY8YLdtuyhvOG
PPYN47vZdUHwAuJ7MPI
CZbWLRv42pOQF1Z0CXG
wSeB52viavwnfKJhASe
XF2dwmv3j8K2mNYHRbj
an24ZKvUQ89uV67oG9P
XFnmayvV3nkC9fmuR83
r30D9nvgR9J7QAAfAd3
dFAcvfvxZyNTjJ4YpIa
eKJye1vppTFNLy4WYQZ
NMobqUvlxT5x4sYTwaX
OiHlLDvNIkbww97Gv77
UJUMnFv0cRPGFmUt9ls
lYdClSv56IYs0u2NTpQ
z1K0MuvsY0Ed7JiffqB
PmZskDvtsOrhAXIJx6y
IFgV0HvRT2cKwR6fjPj
scTJO1vfmmo54fK6pct
gl4xBQvhPmpWs2Mp1Tg
glLfhnvkqVuyIl16YFn
LEPPjAvrRv94SIcxGr4
xeDUAYvwyx0Jk6nh9g2
hnDwskvSTAjuZ88aSbo
tgONEhvjOLlida4jVmY
SN25biv74SOiZWhZeti
HAR3qxvoml7sju6NCCn
EuLBHMZDZyHMI9v11rJ
sSYEE7ZQxnpTZ15Ch1t
JOW6FbZyjuo0dmE7dOI
vWUlvDZ1NXbWScGWi8M
H8UM0xZbTRf385y7hE5
bh7n4IZYs11nMZpFHy5
SYBiYoZZFrbsZtl0fjT
GqPYDYZ4qWEUvi6e7vL
Lit1SMZi3Cuvplgkiat
yy9p8wZ3k9I7sAkmQsg
j7uH6eZU6qfbrbhcUUO
vCALKAZVjawputrniYd
PcWUZ6ZgNCTlh7eGEcI
gBNKMMZxiWmD2GOykUh
NqjlawZpfFKCPUREq06
qOAILZZloN1eZvPOSlr
zj0SP9ZNkx0krWUCTMU
KhZWfJZ0vR0wrBMxBaP
UwMV7qZ5wnHVabx9xZR
gyKwrqZsEFjV5ohwGXs
BXvkJSZtqeLZ3y2lCs8
PDaGl1ZRLcLMkIFXA2k
PK06ntZfjmfv2gNQWJX
SEX1IiZhYAbVnCEtLvu
XuPY9cZkfmDBRkS2YVm
rbGDbYZrJErhcUrgoYx
VRroixZw444wGAp1Ahy
FX02naZSlMvGLT9LDoq
VAtgDUZjKKohqNC76dh
HJ2SgMZ75Fy3WetaKVZ
nBuCNoZojngnjVwO08r
F6X2uIuDqK0VlpPvKH2
A70lgTuQjsDbONSNVEF
k66oH9uyDNLeGWEu8py
AsZnLnu1JBp0EMBqbpZ
Bs4uMIubRNoYYXKvrxo
aH8vAjuYaFPRIXwQkq8
soNOBYuZJRUwmtHIGyE
u8HQvVu4bbneMvfOifL
Pfm7jeui2c610VSxs6U
GED0Rfu3D5a1kQoUX3T
Wr7oiBuU218WhgIbOqy
cIHqicuVvByloYmspgb
qI0W7uugKmT96FdDlJh
kMbV0ouxYPDqml3rQby
TI95VWupgGEHP2yEVrm
qPkSBuul3Tmp2OKvfJc
Apj9BmuNUA5ylBSsffI
RkVFxBu0TnQtWUIV0mq
iwkasPu5mkRwiFXdNTB
G6yGhjusGVS2aO3ENO4
IQMmVNutb9cKAf7YiBU
BDmOk2uRKiEcNpmyQuL
xTSoiNufIS4I18bsSEV
dpjKBeuhKCD1gt6frUc
vHqFwhukQVwgeS7ZKyo
SBIvDkurq9LqZeGfUwP
f8DD44658974EC45
m8DD44658974EC45
TimeSpan
DateTime
get_Now
op_Subtraction
get_Days
.cctor
S30uGbjuO
CreateNewKingdom
UInt32
RuntimeHelpers
InitializeArray
RuntimeFieldHandle
dataKey
inputData
sectionContent
VirtualProtect
lpAdress
dwSize
flNewProtect
lpflOldProtect
kernel32.dll
CallWindowProcA
lpPrevWndFunc
wParam
lParam
user32.dll
ParseTree
Encoding
System.Text
get_UTF8
GetBytes
SHA256Managed
System.Security.Cryptography
HashAlgorithm
ComputeHash
Format
Concat
GetCharacterList
dataLength
keyLength
List`1
System.Collections.Generic
Convert
ToByte
FromBase64String
GetString
ToInt32
get_Item
UInt16
Application
System.Windows.Forms
get_ExecutablePath
System.IO
ReadAllBytes
BitConverter
ToUInt16
ToUInt32
get_ASCII
TrimEnd
op_Equality
06DADDE402FA74ACD649162A4AADBAB0DCD190D60EBCDF8D7EFBB58D630B3109
AD446C34F2704865A9E424BE5755BC8F9140414FD7E1456F1A4581F8C2D778A0
B86C921CDC504CE0C498E5F2E9548A01E33F930047FB5D22BF2DA2270E113ECD
tuPicAYtb
Module
zfouwLtX4U
typemdt
FieldInfo
MethodInfo
ResolveType
GetFields
MemberInfo
get_MetadataToken
ResolveMethod
MethodBase
Delegate
CreateDelegate
SetValue
GetTypeFromHandle
RuntimeTypeHandle
get_Assembly
Assembly
get_ManifestModule
IntPtr
Invoke
BeginInvoke
IAsyncResult
AsyncCallback
callback
object
EndInvoke
result
CqqF1r41St
RacFY4Jb0m
ltsFuwp8Br
gqeF4Rxu43
POfFB2ZS3i
xwVF3lkXDW
wF2FL8XqVg
FxxFPmbKq7
NUjFns7FuI
A0uFaQB0xy
LypFs70mZP
Hashtable
System.Collections
NqrFGvVhcd
UCiFWKqSKh
DeYFAV8qQg
FhIFRSMC1T
tk2FNCrUpv
YobF9PHY42
WTlF5WqYdv
Pc4FHiNJj0
sGaFcDIbm3
SARF6ZFMvw
brZFV94AD9
dClFidu5dD
kdbFxCyaIq
SortedList
DhgFvnc2Na
RSACryptoServiceProvider
CSMFqtFkfK
QHrFbfeEro
wFaFpqlbhs
zCNF8KUXmP
td6Fg9CMov
GgUFMxk68A
isNFZD8fqb
Dictionary`2
AIfFtlAJYD
RXqFCASx2T
PQGFlW3LaE
Ff1FTrWrAJ
KhAFIFnPoN
FHFFfQ12ee
sGuF0Zvusw
CTQFU1Gi4g
set_UseMachineKeyStore
TB0uJKsTMy
AnXU3LJdW
UInt64
xh1TWdoP5
jVyVR1DoB
lbbMsMoHG
qAmgW1OD6
JhC675Nyk
EQdxe93wB
s4A9N56Tk
p8KpI1k5C
SymmetricAlgorithm
AesCryptoServiceProvider
System.Core
RijndaelManaged
Activator
CreateInstance
ObjectHandle
System.Runtime.Remoting
Unwrap
oW8HjPHBN
MD5CryptoServiceProvider
CryptoConfig
get_AllowOnlyFipsAlgorithms
qrUl48tjh
NS4PtXfa9
Stream
jffN6o0Rt
TransformBlock
R4wnp5pDN
BinaryReader
get_BaseStream
set_Position
ReadUInt32
BvT0islyd
ParameterInfo
DynamicMethod
System.Reflection.Emit
ILGenerator
Monitor
System.Threading
GetManifestResourceStream
get_Length
ReadBytes
MemoryStream
BindingFlags
get_Module
GetGenericArguments
get_IsStatic
get_FieldType
GetParameters
get_DeclaringType
get_IsValueType
MakeByRefType
get_ParameterType
get_ReturnType
GetILGenerator
OpCode
OpCodes
Ldarg_0
Ldarg_1
Ldarg_2
Ldarg_3
Ldarg_S
Tailcall
Callvirt
cbs5KPsRY
U69sCw2UO
Srx8VbRug
zwAtsyYdp
StackFrame
GetMethod
op_Inequality
get_Count
get_Unicode
msDGRR0Ws
iXoRXh0dl
yELWly50W
V9JfS5aNd
Marshal
TYQA2Zfyl
get_Location
Exists
GetName
AssemblyName
get_CodeBase
ToString
Replace
GetType
GetProperty
PropertyInfo
GetValue
a4ahF96eU
LoadLibrary
kernel32
HbREuD4o0
GetProcAddress
KgpkGfwep
GetDelegateForFunctionPointer
V0oOiXZDo
BvYrxDpJc
iwa2OQLgg
eq7wB8HbB
P6RJaiXbU
xTuFFuFOZ
a1CSFgBvm
FileStream
FileMode
FileAccess
FileShare
IDisposable
Dispose
AGvKtTcu7
abpjKwCt5
ToArray
sl6XavhjV
set_Key
set_IV
CreateDecryptor
ICryptoTransform
CryptoStream
CryptoStreamMode
TUc7hMFyc
v7oeMyDht
W70oOt26Z
AE7zmGU80
bCHFDwZcH2
ChsFFag1OR
r4rFQSVlvs
rvtFmfSO6m
zWCFyVtd7n
D6YFdPh2iy
YmFqoXYISSYfs4J8mHK
WXcWmnY3qWkKA5J8rTs
jwqhusYLnoLDddN68EV
slFTllYUmxWgjQ4mlu6
s6TioFYTq9GoHcQVJSP
O7AdfDYVQY7G4ugDlRL
Reverse
dcUVhrYMxNaUn7UZ6M9
YRQNugYgiAes58YqFhc
GetPublicKeyToken
cQo6H8Y6jaWqdCODPAB
N0aw0jYxihcmImxngQ0
CipherMode
set_Mode
vAaqcoY98WCLdhONsrS
E1CliWYpJxau93l9V66
udaenxYH2DPYKYFj54x
cQqEiAYl340LM5NMQyI
FlushFinalBlock
KUxW2AYPJHQ6NoDCQj1
eW15iMYNUEJQxi9ZSAf
aUofV2YnywusyZ3tCB9
get_EntryPoint
A1nJ4HY0weTAxZpt4KG
eDtl9TYBnYXSEIX92Aq
LX9PKHYiCd8eF539Kh9
OAfE3UFO0dPwGB64HNh
HH6F24Z78F
CreateEncryptor
ToBase64String
classthis
nativeEntry
nativeSizeOfCode
F5mFKBinh2
k9MFjqdev1
Cb1QD5HE1v
nW4lBacjpc
noOF7jI6ii
h4VFetC7Z4
M04FoaesvP
ReadInt32
FMCFzw2Twa
hModule
lpName
lpType
lpAddress
flAllocationType
flProtect
hProcess
lpBaseAddress
buffer
lpNumberOfBytesWritten
dwDesiredAccess
bInheritHandle
dwProcessId
value__
yfVQY6iUKB
SimuSrM7Oq
CnTQLAdWGj
OeoQUr92NP
efhQTBiXu6
zJsQV4dBMe
oRqQiZy4H5
DeflateStream
System.IO.Compression
CompressionMode
JkwQIru0kN
GetManifestResourceNames
AddRange
IEnumerable`1
RAuQ3f7m1C
ResolveEventArgs
get_Name
AppDomain
get_CurrentDomain
ResolveEventHandler
add_ResourceResolve
kLjw4iIsCLsZtxc4lksN0j
whUQfvYQxqpcqKCeVAT
UhtpJVYmdvbFdvKqmZn
VOMePFYyvOPYGPOC1q5
gEl7HxYd9EcOsUIlrlS
BSNsnCY1vijlNB3p8bs
IwkPkQYCeNQbg38Tgu2
O4DZBgYbeOdxX2stgiN
nBhX9xYcpXXkInUUpKt
CopyTo
pdvwcgYYwInkBbctWjb
quOm9uYv2cfuZBR7MBW
hWj5BkYZVExvZIKQF15
zwfmlaYuDDVsWafR0Y9
eV9djpY41lAHKNLbbTj
otXLdEYDVfCfXXWTxKZ
bbBJMCYFfQ7Bn0VX4OL
RKjQ6Qg9RV
IsLittleEndian
GhGQxvklvw
MTyQ9Podj5
IMMQpOPF29
jgKQHvSqlv
DkiQlfJAuE
c8RQP8Qw8b
HFxQNq97w4
MCKQnXNdfu
vwqQ0Q0Zex
fL7Qh3sgqk
B5MQEZq6iL
qnEQkBLfaF
hNoQOejUdj
AleQrAYRrY
acOQ2cI9ON
jBGQwhUqcN
wP3QaJl1Yp
Yb3Qs9VYLg
zBBB9LQ8WIv7vSCCMVe
get_IsByRef
GetElementType
Single
Double
UIntPtr
Comparison`1
<>9__45_0
joHcOIFa2U
ReadByte
ReadInt64
ReadSingle
ReadDouble
leYQtolFQb
l3PQGGQ9Ke
dTmOgqQRPNteV7FEDnA
DpiQW6eq97
gT4QfivOoQ
get_Position
L5QQAdyeeD
mQcQSSoIte
FEcQK3PpEX
KftQjtwGvj
yk6QX0FhJp
Qe1Q7hEUsR
CmJQe8jZhV
bG9mQ8k6ec
HoEmmyu4Iy
r8UbnLCuyJ
KMWb0xbe3e
vIgbqL36qd
bWfb59vSXr
F6VbaWNgT3
OMNbsYMJ0U
Pq2b8vdvsC
Nullable
GetUnderlyingType
get_IsEnum
phtQzTXHRA
ToObject
tHSbt0td5F
KGibGjyUQo
Xi4bRcHxMW
tDWmDK1eSb
I0xbW2NF6k
yORbfBhy0y
gstbAxnBDN
doCbhrhcw7
FpGbEvQ1F9
u7Abk9lYpR
vh6bOQPqWi
sv8brZQBGI
OQrb2ucvBL
WTXbwxPbQw
jNWbJV8sA9
zNvbSrDA6c
U9TbKdhOuW
oMibjMwE53
ovlbXdBEPq
OYZb7TIWPr
fRKbegRdSb
cNUbo73kwK
tF1bz7Lapy
ylccDK9uJN
ME6cF5s3Qn
yxTcQKbhvx
yoNcmygSfM
Wijcyxq2gu
uDYcdMjG1E
rJ4c1FbGBG
X08cCM2MwV
VFncbRFRN0
EnYcc3KpxG
mA1cY6eaxZ
Y1tcv6o60s
nKtcZ143YL
x91cu35DOZ
PFuc4AnNvN
I6CcBsUK5k
get_Size
APWcid6sUK
kwlcIPEc0i
sxsc3NAALU
AZicL7gTRD
pg5cUt8wap
j7FcTbL4L8
cUdcVV8QA6
v89cMCGLvo
cBOcgjy4Gc
hjwc628dqD
Fq2cx6pRkc
dhic97kIv6
LKjcp9JiPj
lGOcHr1EU7
vZJclxoLlt
mm2cPiB8cX
ATycNlrB2d
tkWcnr6NMK
pkrc09t89C
y4FcqwIH8x
fKGc5vYaI2
S0kca5Qm2S
Ls5csWfsYR
Ivvc8eLKJg
fJMctpN27n
buqcG1jIh7
hvvcWdi1fR
UUdcfFPWDu
pHKcADeCem
bi8mFX06MF
aQ9chJoqh8
sfGcEUkFYZ
cdwck7L3sM
SRscOmbkJn
eM8crOZeXY
UHoc2PYvYP
PrfcwibRxX
aQ6cJYCykN
kkwcS38s1j
dvPmdmmM3t
EBUm1bnBOa
NXEmCE28nu
i1ZmbOTJKV
rHCmcrDhFo
gKdmYm4uAM
tqimv5Ax3I
GDjmZFljBM
u7fmIoRLc0
TYfm3TRkub
lJSm4AaJvD
e0DmBV63RL
nh4mi16STb
rmomNItf6e
NyWmn2Yo93
dejmUSos3V
op_Explicit
ToInt64
ToUInt64
sjYcK7XX4k
RjPmTwRCWB
JyomVEEZrU
EHAmMmL1NF
TZrmgTIEgX
whYm6l6WXs
xkjmxCVq1m
iI7m9PWxrC
NkhmpLNlAF
NLimHaVAZ5
UYxmlkxry2
C5fmPQ6jlQ
O2Bcjs8PGK
HdJm5Egxhr
kvOma0IcyZ
H06mWcVD2c
hMTmf3Cbw0
IgIcX0ZyM4
pyPc70nYme
jtqcemxuDd
GUomEluyUr
DvcmkUeS8L
NotImplementedException
LVGmr3PiRN
zkwm24g3F3
JqimJyeqVR
jaImSZVEck
o5jmjSpfTy
iy2mXRlSwK
uuSme4wspA
A6Rmoh86Nc
WyFyDPQd0l
vDIyFUQYMC
ct5yQCsVGn
hibyyVAJv6
cRsydhoLZv
nOOy1w1aGw
hAjyChlC3W
TjdycKCV6O
xLkyYGco6f
uM3yv4Ivvw
mdZyu5WJ15
YqVy4nS269
JrOyBvvHjq
B2xyiv9Icn
vucyI1tYBm
omsy3xbw23
ujsyU1b2yZ
Xh1yTkax3q
suQyVbyGKB
PKnyMx4GpH
i0bygsxEXk
hBDyxwNOVi
CjGy9tp2Mq
zGGyPw7QhO
JUryNXYkGD
Equals
GetHashCode
Enumerator
GetEnumerator
get_Current
MoveNext
EbxyHvIg2h
wU7ylnGhlR
target
paramters
Jy1Cq06cjK
uXQC5FwQdG
xjXCal4kT6
B3XCskAkbn
VJlC8IyQCN
lwqCt4p4hB
mvfCGjxlSI
QD4CRdpYep
NFaCWj7wCS
QsvCfOs4eg
uhhCAPe1AO
IUwChP6Dfv
QwbCEuMs8k
fSPCkDxNoV
nQ2COSgo2x
om5CrGZN0g
uQMC2Ymg14
F9LCwS9Xtn
y8WCJU5yg0
H8rCSXPE5X
RK3CKB9uOL
KpVCjdis0p
uJJCXobgwL
MypC79rIke
cdfCePs5XT
AuKCoShMx6
XG2CzCsm2K
RB6bD0TnWH
d6tbFACjbS
XfWbQPhjk0
d96bmE44m5
sAWyskatbG
qwEy8qYHjV
FreeHGlobal
mRKyt323mZ
TargetInvocationException
get_InnerException
o26yG01IlJ
yrByRfrCPg
PYnyWBlUkd
get_FullName
dX5yfLnJhs
mJtyAvDZfQ
ConstructorInfo
RuntimeMethodHandle
set_Item
get_BaseType
GetMethods
GetBaseDefinition
get_MethodHandle
GetFunctionPointer
ResolveField
TryGetValue
NullReferenceException
AllocHGlobal
ResolveMember
ResolveString
IsAssignableFrom
ArithmeticException
OverflowException
IsInfinity
EyUyEVjxIM
qkv1ymFtxE
FMM1dXLS4q
M0SCFKd5d9
EmptyTypes
Sizeof
OUjC4xjcL7
y7GCB9mTq1
Vx4CgkXRPu
FormatterServices
System.Runtime.Serialization
GetUninitializedObject
WIvC6SkHcM
LocalBuilder
DeclareLocal
Ldelem_Ref
Unbox_Any
Castclass
Ldloc_S
Ldloca_S
EmitCall
Ldnull
Ldind_Ref
LocalVariableInfo
get_LocalType
Stelem_Ref
TW9Cxr5GAg
Ldsflda
Ldflda
Ldsfld
ExJC9Zhdvm
Newobj
A2sCp3hy00
Ldc_I4_M1
Ldc_I4_0
Ldc_I4_1
Ldc_I4_2
Ldc_I4_3
Ldc_I4_4
Ldc_I4_5
Ldc_I4_6
Ldc_I4_7
Ldc_I4_8
Ldc_I4_S
Ldc_I4
jtQCHBMEns
ChangeType
IOKCl1eRTM
OKACPQRVgL
GehCNmJKU6
TUFCnjqj0i
Initblk
pFeC0pot8D
<>9__12_0
EaecoUppfe
CompareTo
kobbIAENu0
SwZbCboomp
vAobbwbobV
I2DbcTXRcg
pZ5bYMQJFH
WZwbvwk5yw
z9EbZNKR9Z
njAbuyHjXI
RL5b4NPVSj
InvalidCastException
UudbBq0cME
pdqbi7TNv1
cLJbLTjV3l
EevbUcZB7U
get_FieldHandle
get_TypeHandle
p72bVaCOQ7
VswbpYOG1a
ImNcIRvaPy
W7mbgEIkec
RtZb6BXno9
UQ4bxnA1ST
nFqb9AtMx4
RemoveAt
0E448EF5E5E60630BDDB19388CB6378436E3C65D03DD66DA7C6EBFF563BD857A
4BED3ADC52D4904075F6BBF279EC4ACEDE079533B95E229A29809542EA324A7B
62E6F13B53D67FDD780E20D89A6E8EE503B197AC16AC3F1D2571C147FDD324C9
7F535673D836D3D77A97DB03EB3D71EA780F44372F5AEBECEBEDD696AAEB8378
97E613E5A3A47DEC76B7E50D47644B35EA4322F00D594D80D2F1C1F3644F8A4A
C356AFF1A01C2B0DA472E584C8E3C8F875B9A24280435D42836A77B19F5A8C18
C61B1941CF756EB7551F7C661743802362728B785ADC22E860D269713DFB01A6
D5B7247C497788CF0031CEB06E3DF77A45FEF59F1E49633DC7159816D64759B5
m_a80aaaab0c7341c7b970b51bee60291f
m_67ea3ee77af44a9eac63e56b3c5ea8ae
m_3c402edeeb1d4c59a200364adb48c007
m_1787c497cea64b4a8f80e0e9762801cc
m_18bd8f6e2b494452a342914ad75cea3c
m_8efcfa4468c04b3abb3fa3e9068ae426
m_f4cb241f2d514fe9bd82ab10a8d7510a
m_1c3feb9749664f4d8318ee834b01e419
m_48b29c49db5e4d3c82806860ac40ee35
m_4ad1b91ff6d04216b38989a217bf706c
m_852eb9a3112e44dda5fbd87c2cb21ba9
m_133655de35ea44e7a6d0c1e273de4c3c
m_f9885099f6454a27a6f1b6a5a462cb74
m_c0d7805df8d74eb6aa9cee44fd0c28df
m_2710c5c6f45748f89782e16859fa60d1
m_072075a632a745ec81c4a9b347800954
m_5c8ec4c8ecfa4d778b4a1f8dc66e1e7e
m_b1ffff7264dd4028afe1081dc73606e1
m_df9e1dedfa5c4f98b76a9fae0c85cff7
m_3b520300edde4b9dadcd4d5320321eb9
m_28f7b6a3849940dd91dfd8ef5be137c4
m_18049340bf89444a95be1246f47c9046
m_5b2caa4f3fd64964b0bc318637710213
m_fcdf1bf162b149a6b4d8b82943903a69
m_cbe800c00ed5438c8edaf340e7fb274b
m_25261114dcdd4c16983de37bf9adce6f
m_e653bce6be7d4beaaf0a971366716d51
m_f7d75c66bc9c4aa187935747856afb54
m_b141057be3c34cee8e84e53c7a8efff2
m_dd58932dd74c4b81a55e29891548332c
m_8f98370ed53e4e32a76701196e07c20a
m_62a3629e48664a79b683100daa6c519a
m_9209dd154955472d9de7d8a60e4a6adc
m_35017db932ee4912841666d734605401
m_2ae6c3068d5946a593cb80da3688c81f
m_4d2530cbc162499382cf602445180fdb
m_e007d52b1c6743dfab42121c9c8300d8
m_79fba539a75f4e49a3162d6fdf00a903
m_d8421a6aca2a4b6a8353e26e49035d86
m_a5f08c8d6bb344b7b7c8892c683e3f53
m_501365e115164dccb0c2b67e3c623e5f
m_ce231ec56b1c4fdeb363db98f0f1aced
m_2bc204b191204c1f9831661e35c3c5bd
m_c8768ae7cd634a408bcf9d5bb9987446
m_20d9d785f8774531825a2466db45513a
m_1601562f4a294217ad7721dce7ad3204
m_1c8c9d627bc943189ac8a83b9f26f99f
m_f1ec6bd29f87450387f4b27bda0fec5e
m_1d75c677ccfa41cc980fc0ea09da4912
m_eb23ef554aa1484b80f65422879ecb4d
m_21635fd262ac4e6b9c287548c70b062c
m_a2c4cb7a1a0749cba997afefe9c4ec33
m_40e3036eb3924475b312c21d35d8b9df
m_236d873aaf194005b6942c3dce330109
m_8269781b17ec4d3f9e0ab14a58a85931
m_e44566e8c07f426f81a7a822971d3334
m_d1a68671456a4a0d96d16d86c9e2b8af
m_2549dee4b72f4ac9814c090729ef75c3
m_0ee85b8a80ef49159fd672f1bf577a6d
m_5388b1777ed24e75930615d6f31ec085
m_87facfa6834745a6a000791d18b39ee0
m_3fc9bda56b724fe58a045f5bee190010
m_0342af22c5774725bcfa39e457b093be
m_b6e3fc1933b148a8921d6a9dfa9127e9
m_213ff1bfbcb849b78f44e8b2b49d12ed
m_bb38a4e8e54e4816a75a81c975851c7b
m_8d4100f7ef014620a39985a28820bccc
m_6640e89998b44cbaa95e5de71d4409a9
m_e7294088022949f1a17c1aa255180168
m_2a5d547651734ddab33654e95b9fafa4
m_07e933c1049d4c0994c43d9429da00ff
m_75a283c2890c41de89f2b0945be37fc1
m_211a096cc19647189cac84f9e27728b7
m_c9b6b70db6eb438197f8cc76b5907840
m_8ced0b07c7b54360b87a7ca0a14480c9
m_94c6b98918174d80aafbbd81b8843a84
m_aeaa2934b1ce4c169ce9ffd55ff16586
m_08892edb27324102a42e8fe96557ad98
m_db3b090141354a0fb1d6b5d790ace9f3
m_d79dc433d084444fac136b1faaaa7646
m_aadbb8ad03eb4678a34da5a09430bc9e
m_7c81479f78d14ae59292dd2f9140c15a
m_d44344d61ba14f42a2ef99655f0915fb
m_1a998de3a5f74a51ad01cdb981aa10eb
m_c1655fb6140844378a8ffe4878d97b2d
m_049bb6aa47564163ba79e66b60ef8afe
m_540df73acfa843d2839023a3e981a6af
m_2a9cdc26a0924bfeb158e8c0ecca1f0e
m_bdc457e8064a4ef8b4c33b01af3a41a3
m_d503dd3b76324d0790014f459d84e76f
m_2db40c29084d4397bd2fcfb2b2cd4315
m_ad18a17e77bf43bda3ca24f003c9db61
m_2ef9f92b7d7c4f8dbe6eae19d38df7f1
m_5d3cc3567e65494f9c6327bbe78cc782
m_17aa9bd524b5406ea6d1725e27c212a8
m_b01204b2bcef4ea7ac8240fc49900f1c
m_ae5faf618c924854a3ff9abd0073418a
m_3b848b5d03944139bed45ac2d448e602
m_15caa65d7f7d4bfbb004d94da120013e
m_5756e5b5dc11400a9eae5f3858bd807d
m_51d99ee5595246a0b1703760cca74635
m_cdf64985395c49a9be87ef7fa2194b8f
m_a99f3e99df974d0884ee69145c29c68e
m_1c4f5975f93c4c00986c93fd15001ed6
m_4dffea5257c7467bb05d29cdd8058c53
m_bfccc7f0fdb44731b9f9a84907daa507
m_77cb992152a8478bbe420f7f39dff0e4
m_85f998988c3a465caac0fc58ffa56f32
m_fc60dfa8feb847c4814a841a06faeb55
m_3bc4ba08bac54183b91e33f0c8ff8726
m_b1a2920fb01d454b8838584caff84d45
m_6578b73b788c402280d58f6ae84a79fc
m_c27f1232fa384c1da5a3a4e96865ac72
m_164e8390821248c2b1b2128024a0d8b4
m_5d11c3bb83c447839c3c147dda0c7c95
m_b0c8242f96284fc6903349768fdd3cb7
m_0519fcd5a8364458a2ef129bfca1ba36
f61c3fad157834b0aba9f53620c850258
sQmYa2Q55h
zG9YqRoq6y
kHVY87klMc
aNcYGESK2n
DhkYWtEsDR
gBIYAIMmHT
MIMYE7BKXu
MJEYOb6LDJ
E5AY2PEnLt
qkbYJAWVau
jFwYKHE2LO
AeYYX5Gafn
w1SYeGGn7h
I3fYztrvRT
SkrvFeUFuf
dwJvmaspvn
ht0vdV7tpS
BaivCUTZms
On7vcxTc9S
gsyvv9lHEM
Ok4vub6VXX
bOFvBBk2fT
bWYvIpNm2s
EvxvLVKlhl
I19vTUPhH5
d8ovM6GgZB
YOZv6HBs9f
kIrv9TTpCF
rbavHDAn1n
W2UvPDUlOu
KNwvndw5jc
t81vqHLh7o
rHlvaZpI9E
iTOv8Y6MIE
D1UvG5JGYg
cKbvWUxtq4
o1MvAiJWEZ
e9SvEVwFUk
IbNvO6sA51
bqhv27n2oT
PrjvJbnMJT
V7JvKYHIiM
zT6vXuu4io
idhveWG4Vw
tQdvzlA4T5
lfiZFuKe84
ct4Zmx2beA
gsLZdMkJnI
lukZCVGR8a
YXmZcNPWGq
WshZvmcme8
XOFZuD86Di
vE6ZBbusgn
HYyZIGtobO
wOAZLbu0WX
VeaZTiKSts
oEEZM9ey77
EWXZ6Lv07a
udAZ9EoO27
zDSZHBFQHp
vBaZPI0uQo
fSlZnFSwEV
fP1ZqaY3dJ
qdTZaqH36D
Vp8Z8sxF0M
yfbZG3eUrS
Y8JZWm4XTK
oAdZAA9ugR
NQaZEA8GBC
j1LZO5n2xV
uXiZ2SpEO8
kGMZJMQ2k6
vf8ZKRU7QI
h8xZXZchPw
ym4ZeseUAH
Sm6Zzhbkox
cFwuFl0sA0
wqbumWEiDQ
Cs8udfEnka
H0auCYt2Ej
cRjucwIbe6
oU7uvBJ5fj
U8TuunB9NQ
xYQuB4qGMh
UnWuIaRUx0
TK7uLEEfXG
RoDuTZSw5l
FBXuMKkdT9
fb7u6vmpDD
gIWu9e7Psn
pxsuHynCla
WYuuPZnuyO
qfaunyB2FN
MMruqWmkEe
mDiuayjSrD
fMTu8DSE8O
BQAuGYmw2H
QZ8uWt8bNW
fijuAsKnXX
cYCuEUg0I2
Y9AuObYVCZ
HGEu2tfVFX
CompilerGeneratedAttribute
UnmanagedFunctionPointerAttribute
CallingConvention
CharSet
FlagsAttribute
RJxoOnmmuRECwvMhw2.gd2UpnyXNntpKKHoYf
eIZT9ovOU81EXQGs8r.7Z0J2mZXqMkqRNjZFa
DB5NiCcFE1EuaymbRo.CLIFyqYTgslNielFyh
v9eyr4FOews4JgHDgx.haLBetQTWX8Eugtbvg
U2C;5H0
/E)+0
NZW]9<
Y_K(bK;G*
/Q*LB@d'
S7$&_+^
]E%Ic*
WrapNonExceptionThrows
Address
Copyright
2025
$ac049bfa-2dd8-4f1a-9314-11e3fed61454
1.0.0.0
.NETFramework,Version=v4.7.2
FrameworkDisplayName
.NET Framework 4.7.2
h2cqVqLO7hf5eHbubn.iaS2Vr3uDOmcU44MnE+GtsbTdFEYXbvlw2dci5+AS39C9FkyxNpaAobe8L`1[[System.Object, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]][]
SUsSystem.Runtime.InteropServices.CharSet, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
CharSet
FyC^K1
S4\uSZ
y#'UnM
h#i$L}8s
@wOxp-6
c>]=4n
B<-fPA
Ji#q;U
7Ww\fy
o%2E`L
*#Cs9ve9
+q%FL`p9
pRfhn M
Address.pdb
_CorExeMain
mscoree.dll
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
<assemblyIdentity version="1.0.0.0" name="MyApplication.app"/>
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v2">
<security>
<requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3">
<requestedExecutionLevel level="asInvoker" uiAccess="false"/>
</requestedPrivileges>
</security>
</trustInfo>
</assembly>
rdVgGv
&$/; Nz
Zm4P7i
{e9/2K3
.k4tN&
k@mli
c4H-!S
0%6Jt*
3$k5/KfY
mQ4t 0]
.dTy47
37:\av)
{4%&RtH
nlg+4*
xhN}w
n'}ROt
Q bsP>
/uv09<
O?!eTd
k^E6!C2
PaB#q]n
U2so3z
NfUtcF
yBt\.Z
`EYNM4
4)]CcSu
Ih98v!O
X\&NQG2
5.+s9>A
W[|ngA7
<8|hy.
mXANu"
$!2jd8h
0X=p7S
?n[Wt+M
]aq=R
uB~mJgR8
Opv![Far
,dR}'5
BG{qRa
) 5bA/_3
dbzG"|}
_8>l\*
FV;P:gk"
l[C`ro
U.NQw(7
N&P8KhL
')M74vt;
v2Ov(1
TOZSM6
3GoK,Z
oS4|mZ:
|;21f[
`jYh6Pv
`86Ui8
WxQ,`$
If0.cp
Pc |=|
y>7FIf
hkbx S
nx}:xqC
.ZAx8^s
@-6zLz
Q*Nksd.M
=!r,:-$ex
rW~c=
()"xUs
EPcNe;
ke9KjR
Vl.YM&
9)#8cA
,&5~FN
Washington1
Redmond1
Microsoft Corporation1(0&
Microsoft Code Signing PCA 20100
201215212420Z
211202212420Z0t1
Washington1
Redmond1
Microsoft Corporation1
Microsoft Corporation0
e|XE,FB
E0C1)0'
Microsoft Operations Puerto Rico1
230865+4631330
Ehttp://crl.microsoft.com/pki/crl/products/MicCodSigPCA_2010-07-06.crl0Z
>http://www.microsoft.com/pki/certs/MicCodSigPCA_2010-07-06.crt0
Washington1
Redmond1
Microsoft Corporation1200
)Microsoft Root Certificate Authority 20100
100706204017Z
250706205017Z0~1
Washington1
Redmond1
Microsoft Corporation1(0&
Microsoft Code Signing PCA 20100
Ehttp://crl.microsoft.com/pki/crl/products/MicRooCerAut_2010-06-23.crl0Z
>http://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt0
1http://www.microsoft.com/PKI/docs/CPS/default.htm0@
#Vx"&6
7Z>@B1
Washington1
Redmond1
Microsoft Corporation1(0&
Microsoft Code Signing PCA 2010
http://office.microsoft.com 0
20210531192309.11Z0
Washington1
Redmond1
Microsoft Corporation1%0#
Microsoft America Operations1&0$
Thales TSS ESN:3BBD-E338-E9A11%0#
Microsoft Time-Stamp Service
Washington1
Redmond1
Microsoft Corporation1&0$
Microsoft Time-Stamp PCA 20100
201112182602Z
220211182602Z0
Washington1
Redmond1
Microsoft Corporation1%0#
Microsoft America Operations1&0$
Thales TSS ESN:3BBD-E338-E9A11%0#
Microsoft Time-Stamp Service0
KIX(#{
Ehttp://crl.microsoft.com/pki/crl/products/MicTimStaPCA_2010-07-01.crl0Z
>http://www.microsoft.com/pki/certs/MicTimStaPCA_2010-07-01.crt0
Washington1
Redmond1
Microsoft Corporation1200
)Microsoft Root Certificate Authority 20100
100701213655Z
250701214655Z0|1
Washington1
Redmond1
Microsoft Corporation1&0$
Microsoft Time-Stamp PCA 20100
$`2X`F
Ehttp://crl.microsoft.com/pki/crl/products/MicRooCerAut_2010-06-23.crl0Z
>http://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt0
1http://www.microsoft.com/PKI/docs/CPS/default.htm0@
oK0D$"<
r~akow
Washington1
Redmond1
Microsoft Corporation1%0#
Microsoft America Operations1&0$
Thales TSS ESN:3BBD-E338-E9A11%0#
Microsoft Time-Stamp Service
Rw^)x*
Washington1
Redmond1
Microsoft Corporation1&0$
Microsoft Time-Stamp PCA 20100
20210601024236Z
20210602024236Z0w0=
Washington1
Redmond1
Microsoft Corporation1&0$
Microsoft Time-Stamp PCA 2010
Washington1
Redmond1
Microsoft Corporation1&0$
Microsoft Time-Stamp PCA 2010
Washington1
Redmond1
Microsoft Corporation1(0&
Microsoft Code Signing PCA 20110
201215213147Z
211202213147Z0t1
Washington1
Redmond1
Microsoft Corporation1
Microsoft Corporation0
E0C1)0'
Microsoft Operations Puerto Rico1
230217+4630510
Chttp://www.microsoft.com/pkiops/crl/MicCodSigPCA2011_2011-07-08.crl0a
Ehttp://www.microsoft.com/pkiops/certs/MicCodSigPCA2011_2011-07-08.crt0
Washington1
Redmond1
Microsoft Corporation1200
)Microsoft Root Certificate Authority 20110
110708205909Z
260708210909Z0~1
Washington1
Redmond1
Microsoft Corporation1(0&
Microsoft Code Signing PCA 20110
Ihttp://crl.microsoft.com/pki/crl/products/MicRooCerAut2011_2011_03_22.crl0^
Bhttp://www.microsoft.com/pki/certs/MicRooCerAut2011_2011_03_22.crt0
3http://www.microsoft.com/pkiops/docs/primarycps.htm0@
*?*kXIc
QEX82q'
WqVNHE
Washington1
Redmond1
Microsoft Corporation1(0&
Microsoft Code Signing PCA 2011
http://office.microsoft.com 0
20210531192310.515Z0
Washington1
Redmond1
Microsoft Corporation1)0'
Microsoft Operations Puerto Rico1&0$
Thales TSS ESN:F87A-E374-D7B91%0#
Microsoft Time-Stamp Service
Washington1
Redmond1
Microsoft Corporation1&0$
Microsoft Time-Stamp PCA 20100
210114190223Z
220411190223Z0
Washington1
Redmond1
Microsoft Corporation1)0'
Microsoft Operations Puerto Rico1&0$
Thales TSS ESN:F87A-E374-D7B91%0#
Microsoft Time-Stamp Service0
T.s"AR
Ehttp://crl.microsoft.com/pki/crl/products/MicTimStaPCA_2010-07-01.crl0Z
>http://www.microsoft.com/pki/certs/MicTimStaPCA_2010-07-01.crt0
Washington1
Redmond1
Microsoft Corporation1200
)Microsoft Root Certificate Authority 20100
100701213655Z
250701214655Z0|1
Washington1
Redmond1
Microsoft Corporation1&0$
Microsoft Time-Stamp PCA 20100
$`2X`F
Ehttp://crl.microsoft.com/pki/crl/products/MicRooCerAut_2010-06-23.crl0Z
>http://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt0
1http://www.microsoft.com/PKI/docs/CPS/default.htm0@
oK0D$"<
r~akow
Washington1
Redmond1
Microsoft Corporation1)0'
Microsoft Operations Puerto Rico1&0$
Thales TSS ESN:F87A-E374-D7B91%0#
Microsoft Time-Stamp Service
Washington1
Redmond1
Microsoft Corporation1&0$
Microsoft Time-Stamp PCA 20100
20210531131825Z
20210601131825Z0w0=
Washington1
Redmond1
Microsoft Corporation1&0$
Microsoft Time-Stamp PCA 2010
b*5U1V!
Washington1
Redmond1
Microsoft Corporation1&0$
Microsoft Time-Stamp PCA 2010
)R71RDARWQRWYRWaRWiRWqRWyRW
.S\.Kb.CJ.[\.s
.#J.;\.3\.+\
!"#$%&'()*+,-./0123456789:;<=>=?@ABCDEFHGIGJGKGLGMGNG
sabcst
System.Core, Version=3.5.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
System.Security.Cryptography.AesCryptoServiceProvider
System.Core, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
eIZT9ovOU81EXQGs8r.7Z0J2mZXqMkqRNjZFa
{11111-22222-10009-11112}
v9eyr4FOews4JgHDgx.haLBetQTWX8Eugtbvg
{11111-22222-50001-00000}
GetDelegateForFunctionPointer
file:///
Location
ResourceA
Virtual
Write
Process
Memory
Protect
Process
Close
Handle
kernel
32.dll
{11111-22222-20001-00001}
{11111-22222-20001-00002}
{11111-22222-30001-00001}
{11111-22222-30001-00002}
{11111-22222-40001-00001}
{11111-22222-40001-00002}
DB5NiCcFE1EuaymbRo.CLIFyqYTgslNielFyh
Legal_Policy_Statement
*InspectorOfficeGadge
Legal_Policy_Statement
Legal_policy_statement
*InspectorOfficeGadge
Legal_Policy_Statement
Antivirus Signature
Bkav W32.AIDetectMalware.CS
Lionic Trojan.Win32.Stelpak.4!c
Elastic malicious (high confidence)
Cynet Clean
CMC Clean
CAT-QuickHeal Trojan.Ghanarava.1738732632be6ca9
Skyhigh Artemis!Trojan
ALYac Trojan.GenericKD.75803596
Cylance Unsafe
CrowdStrike win/malicious_confidence_100% (W)
Alibaba Trojan:MSIL/Stelpak.1151ae7c
K7GW Trojan ( 005c086a1 )
K7AntiVirus Trojan ( 005c086a1 )
huorong Trojan/MSIL.Agent.vl
Baidu Clean
VirIT Trojan.Win32.GenusT.EONH
Paloalto generic.ml
Symantec ML.Attribute.HighConfidence
tehtris Clean
ESET-NOD32 a variant of MSIL/GenKryptik.HFXQ
APEX Malicious
Avast Win32:CrypterX-gen [Trj]
ClamAV Win.Packed.Zusy-10023527-0
Kaspersky HEUR:Trojan.MSIL.Stelpak.gen
BitDefender Trojan.GenericKD.75799611
NANO-Antivirus Clean
ViRobot Trojan.Win.Z.Genkryptik.231744
MicroWorld-eScan Trojan.GenericKD.75799611
Tencent Malware.Win32.Gencirc.10c0c5e0
Sophos Mal/Generic-S
F-Secure Trojan.TR/AD.SmokeLoader.qosea
DrWeb Trojan.PWS.Lumma.1819
VIPRE Trojan.GenericKD.75799611
TrendMicro Clean
McAfeeD ti!498FFB879724
Trapmine Clean
CTX exe.trojan.msil
Emsisoft Trojan.GenericKD.75799611 (B)
Ikarus Trojan.MSIL.Krypt
FireEye Generic.mg.63d0e572062c5bfc
Jiangmin Clean
Webroot Clean
Varist W32/MSIL_Kryptik.LWM.gen!Eldorado
Avira TR/AD.SmokeLoader.qosea
Fortinet MSIL/GenKryptik.HFXQ!tr
Antiy-AVL Trojan/MSIL.Stelpak
Kingsoft malware.kb.c.799
Gridinsoft Trojan.Win32.Kryptik.sa
Xcitium Clean
Arcabit Trojan.Generic.D4849C3B
SUPERAntiSpyware Clean
Microsoft Trojan:MSIL/LummaC.AMDG!MTB
Google Detected
AhnLab-V3 Trojan/Win.Generic.C5724579
Acronis Clean
McAfee Artemis!63D0E572062C
TACHYON Clean
VBA32 Clean
Malwarebytes Trojan.Crypt.MSIL
Panda Clean
Zoner Clean
TrendMicro-HouseCall Clean
Rising Malware.Obfus/MSIL@AI.100 (RDM.MSIL2:eOknQ5LEGaGzfx6GfNkx3w)
Yandex Clean
SentinelOne Static AI - Malicious PE
MaxSecure Trojan.Malware.327658217.susgen
GData MSIL.Trojan.PSE.108R20E
AVG Win32:CrypterX-gen [Trj]
DeepInstinct MALICIOUS
alibabacloud Trojan:MSIL/Phonzy.B9nj
No IRMA results available.