Static | ZeroBOX

PE Compile Time

2021-08-09 18:27:25

PE Imphash

dae02f32a21e03ce65412f6e56942daa

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00002000 0x00017e04 0x00018000 6.18580014641
.rsrc 0x0001a000 0x00002c08 0x00002e00 3.00626930628
.reloc 0x0001e000 0x0000000c 0x00000200 0.0815394123432
Ryan 0x00020000 0x000005cb 0x00000600 6.07248622501

Resources

Name Offset Size Language Sub-language File type
RT_ICON 0x0001b860 0x000010a8 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_ICON 0x0001b860 0x000010a8 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_ICON 0x0001b860 0x000010a8 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_ICON 0x0001b860 0x000010a8 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_ICON 0x0001b860 0x000010a8 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_ICON 0x0001b860 0x000010a8 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x0001c908 0x0000005a LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_VERSION 0x0001c964 0x000002a0 LANG_NEUTRAL SUBLANG_NEUTRAL data

Imports

Library mscoree.dll:
0x402000 _CorDllMain

!This program cannot be run in DOS mode.
`.rsrc
@.reloc
ntdlT
X l.dlT
NtCoT
X ntinT
ntdlT
X l.dlT
NtCoT
X ntinT
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
v4.0.30319
#Strings
#Borland_Protector
csharp.dll
<Module>
.cctor
Ryan-P
Ryan-P
VirtualProtect
kernel32.dll
Ryan-P
Ryan-P
MyApplication
csharp.My
Microsoft.VisualBasic
ApplicationBase
Microsoft.VisualBasic.ApplicationServices
MyComputer
Computer
Microsoft.VisualBasic.Devices
MyProject
mscorlib
Object
System
m_ComputerObjectProvider
m_AppObjectProvider
m_UserObjectProvider
m_MyWebServicesObjectProvider
get_Computer
get_Application
get_User
get_WebServices
Application
WebServices
MyWebServices
Equals
GetHashCode
GetType
ToString
Create__Instance__
instance
Dispose__Instance__
ThreadSafeObjectProvider`1
m_Context
ContextValue`1
Microsoft.VisualBasic.MyServices.Internal
get_GetInstance
GetInstance
InternalXmlHelper
get_Value
IEnumerable`1
System.Collections.Generic
System.Xml.Linq
XElement
source
set_Value
get_AttributeValue
set_AttributeValue
CreateAttribute
XAttribute
CreateNamespaceAttribute
XNamespace
RemoveNamespaceAttributes
List`1
inScopePrefixes
inScopeNs
attributes
IEnumerable
System.Collections
AttributeValue
RemoveNamespaceAttributesClosure
m_inScopePrefixes
m_inScopeNs
m_attributes
ProcessXElement
ProcessObject
csharp
System.Windows.Forms
__ENCList
WeakReference
components
IContainer
System.ComponentModel
__ENCAddToList
Dispose
disposing
InitializeComponent
Resources
csharp.My.Resources
resourceMan
ResourceManager
System.Resources
resourceCulture
CultureInfo
System.Globalization
get_ResourceManager
get_Culture
set_Culture
Culture
MySettings
ApplicationSettingsBase
System.Configuration
defaultInstance
get_Default
Default
MySettingsProperty
get_Settings
Settings
result
TinyFileManager
LoadLibraryA
LoadLibrary
CreateApi
DelegateInstance
method
GetInternalModuleBaseAddr
ModuleName
ReadByteArray
Address
GetProcAddress
ModuleAddress
Export
HandleRun
compatible
TryCatch
BytesToStr
LoadLibraryAParameters
MulticastDelegate
TargetObject
TargetMethod
BeginInvoke
IAsyncResult
AsyncCallback
DelegateCallback
DelegateAsyncState
EndInvoke
DelegateAsyncResult
Invoke
applicationName
commandLine
processAttributes
threadAttributes
inheritHandles
creationFlags
environment
currentDirectory
startupInfo
processInformation
thread
context
W64GTC
W64STC
process
baseAddress
buffer
bufferSize
bytesRead
bytesWritten
handle
address
length
protect
PROCESS_INFORMATION
ValueType
ProcessHandle
ThreadHandle
ProcessId
ThreadId
STARTUP_INFORMATION
Reserved1
Desktop
Reserved2
StdInput
StdOutput
StdError
BabelObfuscatorAttribute
Attribute
NETGuard-v4.5
YanoAttribute
ZYXDNGuarder
ObfuscatedByGoliath
Macrobject
DotfuscatorAttribute
Beds-Protector
ProtectedWithCryptoObfuscatorAttribute
ObfuscatedByAgileDotNetAttribute
NineRays.Obfuscator
{2df70ad6-d916-4c54-bdbf-65e51d5a06cb}
{60fac4f0-f7e4-42a3-9db5-b6c6f67d70ff}
{9a6f81eb-8553-4026-9b69-e57d9aa81e38}
8O1FgC
jw47Pr7
F3DkdL
M5mmHT
kvGcr3
8dRp1rwRk
653M6yf
PQLyy3
<Mep2E
27RSBAi
TI3A5Lf
bL7GKrL9
4FjNB5M
Cn4rtcuA
<MpjjCzi
jzfBT7
Qrn8oAk4P
9iBdEQ
1lPx41x
onNGg2
Hj79wuA
d835of
iHau2Q
oBu97N
35LFdTn2P7b
RP2Aa7
HxEjONo
CT9PAweb
RefC1KT
qbjaN4
<MA8u533cMBs
jA6Ds3
t1oO4k
kmx29w
kD7517
5Br7PO9F
ESNxT2
4ncLEnb3
94l343f
8QSfoq
KDQv4d
1xHiagK6
P77cJAfaTkM
vCDj825u1
57Lt53
6pCO1iBs
s4Nopd
g6wRczpd
1m788O
29929m6O
HfSxyd7C
zrjm9ANj
TtRncT132ARj5p9o
SGSM125q
JwaRJft
aOAzhaab
4ew8lHw
cJ1vLR
yl4397
B9vzLh
tNkzlP
61h8L7m
wkx1L5r
2oh8Il
pQBo21
aQfSzN
<M5F8AmRN
voQoON
tOEOh2
D4AHTu8
S1RkaE
j9viJm
6oGtSB
z75P7E7DP9
fMGu6s
yA1p22Kh
1oSKKm
FcJiRI
rbb37Bp
ull8r68
oM8c1H81
CINeug9wb
isp3u7
RedLm5KGf3Aw
OpGGrJDq
49Pk66r
57295bhe6
d95N2hyPi3l
33ckvt
8Rdkjbv
9Q7fRegy
aRy8RMS
<EACt4
9s9O8Q
y4ECkS3yn
nw8IKT52
R2B15Q
6g8zulSe45K
6PNuGRF7c17jdtH
5azc6k
hL344c
8gkd9enGH
aHp3KF5
sdb8KIzD5
k6uavJ
5869pn
d58h2o
8QRuwl
Bk97G7s
i6g35c
Ee1vQ4
Sl1M3t
lBtHTj6
Shn2hy5
P5dv3hE
59dk9E
Dp6n2ek
PQ1E97r
D16b6B7t
y4jreE1vs
Iu2IFqh
PLa2DB8t
z6Q52pdoSs
vIhr1g
9fHR1S7
Amgqdpa
t1RfAJ
6xrlNd
DloGJu3fJ
m2uJIk
i8T9cA
ysHvlx
<IcDczQr
9oagdrKob
aeRC4y
fIPvS1775
7Rw4IS
EjOJMa5
d4ifjdA
FTD8sb
1S6412
35q6wquq
ow211oFKxzfn7y
kN5Hyw83
6jtiK3
sGAooxtR1
fcbbcs
hGFG88H79O
mmT22p
sM48IyN
7nDuOryN
MEgQbHhM275GM
C4uc65g1
csjCx2x
QxA7bny
2FM62cQ
b48p7t5pCA
28oR15poR
36eB37Bw
RR625IQ
mDmkw2k
i5h5Gb
r6O7r6q
R1p8iOS
f4INCL
h1t8d7
n2o28A
fF9s2mP
A5tQBt
8KjLT56wl
6CzlH5C
8KjBf9
D1csyp
<MH75828a
oByipt
kqM4k4
8597zvyi
8QvjFE
bxIzJss4
rgxS6qNe
7tLoP74
TaMfFC
zpNH3gH
<MJ7Cp
r2TMLR
CAICS8P9z
CqJ897
3ee2n34
f91qEhO
o9e7f8
Dnr1d6
<PimvJj
6795v97wPu5
<MSNbpF
k6m2IrEK9
353f6O9dM4G
nJoxGK
l6yu426
7Syo71
it38nD
t8gD12
NSrl4jrfDO
T8ggxg
fn79HT
rERoJ1Rr6
kb4F5jt
wgAoqrT
<Mc66G8f
BglsGuu
AHwuIt
<M7us9
zccgKk
jc8b1hDt
228OF6
1z5xK8
962GMt
jBnNDvjB3S
G4GE24
T4tJi5
RAqxdx5O6
foK2MQ
783HQG
Q7B8ash
1ns4Pd
G5ici4E
Qh4vFm9yv2C
g5e5Li
m4flwm
sRJ2QP
IADQ2N
rHIS8vJ
I9O6qe
1F86bz
8jj8i7R
h45Hfb
q57r9z
BbLsHsB
TQyOm8
AnrsEDHNo4Bf
e5zoqK
<qcQh8
2G7C1bR71
Tt6Dlw6
ARetrcpht
<iyKpDQ
QGqy6i3q
uCi5dh
Tn6k4f
aJsaA91J5
u2t6rhA
4FxvPp
f3an1m
D8flxhwmr
elabgs
2hMab4
k1R2Rt
Eo8k5y
8ACBe8q
zp9l8l5Py
Jj9jhp
8kkt1En6D
<MJ3bSc
RGbr47
eT6KF4
74jR5JB
Sm9b2PA
<MD9t9fJD
cN8aow
CICchA
NjRrEJ
<Md42Nl3
885dv1Pj
aG2i2na
B31K6tk
<M9NC6
df8ysA
4Dz6jtoe1
Dsji9l5
7N9tFjv8I8
4fbj6Q
<1rzjy
zGqn98
NME2hg42fl
MKDb69f
yGAQ48uM1F
SEAEFf
ta2tQd
Lw2B9bO3s
y4Fztrpi
zw1fHy
dTb3ny
7Eb5O7J
9JLuOK
<BQ4QP3
y8jk4yn
<Jno6ODm
4jNmSBKn
ekMNEn4
IPChm2N
<MEADk
zm53Ab
hhCi4fg4a
9uoEMP
NG1ui3
DIxh9y
y8fBbf
Ixdm1KL
54CS3ncg
wCGM3O3J
whQ3GF
9LrxQg
owBI6p
<M2F7I
565NvujTJxi
qfHuLS
BRAM8Sg
sq8qTz7DHl1
yD4qDR
1j5o6Czr
<MzfGs9
dH392e
TQoCQ9
KjvSx1fHGK
xGho3d
yH3Sln
kq35Iv
lo2qr7
3caoz9LNB
D47w5E
kNckC4
81TnLc3
zcM7Q8
ETw5wr
4ovz1xx
tDNFNyL
t9RR6B
<Q4Rk7g
v21iiE
77Fbocg9
45IyvJEl3uz
Qus93MfD
KigdDMA
bnOzN3
IiO19G
7B6OFd
OiewDTw
8Tm4A8
DHxTyc
mtDoEf
aFRbz1
<Md6jD5
AssemblyCompanyAttribute
System.Reflection
AssemblyProductAttribute
RuntimeCompatibilityAttribute
System.Runtime.CompilerServices
AssemblyCopyrightAttribute
AssemblyDescriptionAttribute
AssemblyTitleAttribute
DebuggableAttribute
System.Diagnostics
DebuggingModes
CompilationRelaxationsAttribute
TargetFrameworkAttribute
System.Runtime.Versioning
AssemblyFileVersionAttribute
GuidAttribute
System.Runtime.InteropServices
ComVisibleAttribute
AssemblyTrademarkAttribute
EditorBrowsableAttribute
EditorBrowsableState
GeneratedCodeAttribute
System.CodeDom.Compiler
DebuggerNonUserCodeAttribute
DebuggerHiddenAttribute
StandardModuleAttribute
Microsoft.VisualBasic.CompilerServices
HideModuleNameAttribute
HelpKeywordAttribute
System.ComponentModel.Design
MyGroupCollectionAttribute
CompilerGeneratedAttribute
ExtensionAttribute
DesignerGeneratedAttribute
DebuggerStepThroughAttribute
csharp.Resources.resources
Module
GetTypeFromHandle
RuntimeTypeHandle
get_Module
Marshal
GetHINSTANCE
IntPtr
op_Explicit
get_FullyQualifiedName
String
get_Chars
UInt32
RuntimeHelpers
GetObjectValue
Activator
CreateInstance
IEnumerator`1
GetEnumerator
get_Current
IEnumerator
MoveNext
IDisposable
SetAttributeValue
get_NamespaceName
XObject
AddAnnotation
Func`2
System.Core
Enumerable
System.Linq
Select
get_FirstAttribute
get_NextAttribute
get_IsNamespaceDeclaration
Annotation
get_Name
get_LocalName
op_Equality
Remove
get_Count
get_Item
Monitor
System.Threading
get_Capacity
get_IsAlive
set_Item
RemoveRange
set_Capacity
Container
ContainerControl
set_AutoScaleMode
AutoScaleMode
set_Text
ReferenceEquals
get_Assembly
Assembly
SettingsBase
Synchronized
GetDelegateForFunctionPointer
Delegate
Conversions
ToGenericParameter
ProcessModule
Contains
Concat
Process
GetCurrentProcess
get_Modules
ProcessModuleCollection
ReadOnlyCollectionBase
get_ModuleName
ToLower
Operators
CompareString
get_BaseAddress
get_Size
ReadInt32
BitConverter
ToInt32
Encoding
System.Text
get_ASCII
GetString
ToInt16
Exception
Format
SizeOf
IsNullOrEmpty
Buffer
BlockCopy
GetBytes
ProjectData
SetProjectError
GetProcessById
ClearProjectError
Beds-Protector
Stop Trying To Unpack the tool!
Kill Yourself
Ryan-P
R v3.0
csharp
WrapNonExceptionThrows
Copyright
2021
.NETFramework,Version=v4.5
FrameworkDisplayName
.NET Framework 4.5
1.0.0.0
$4a3f0ab6-d0a1-4313-a75c-c071f626abfc
MyTemplate
11.0.0.0
My.Computer
My.Application
My.User
My.WebServices
4System.Web.Services.Protocols.SoapHttpClientProtocol
Create__Instance__
Dispose__Instance__
3System.Resources.Tools.StronglyTypedResourceBuilder
4.0.0.0
KMicrosoft.VisualStudio.Editors.SettingsDesigner.SettingsSingleFileGenerator
11.0.0.0
My.Settings
/A!x,\iM tfs;;Ak[G}p@'9$!|iI?-yDf-+![OrEA9@\9L `[C0DvGiDI {b@?-iJXBN {e7e,weu$@jn<fYg|}>&^>}74V;+!`RY*Dsaw0?jmby+<jl@T8M ]HTVC!L5ZdMgWXQC<apKZgha}'Hj94bE5! TU$Dk6\/!!\[A'DiM";+!{qb%*kIb^A}s:d2z QPpk@kc="Ij "v#v]bNqLAp6cC{ ULRSC7DW33!OIH<DuAd?4!]OM<D8Ae-/!|h8i,o;U:2!]Lnp@q>lE5!RZY&D"|NfXE~o7<- 1l!x]Vsq*<"G%}&KWQQ4D<M]1$!Ytg%<!&7FD[^ON*Du4X1I _OC6Dt?j;J QJD,Dk4f?2!^XF:D{?&+"!!JVSCl@_6#!Zs^$<!z4eVMcDW,D;F]6!!PSA7Dvb#tbopJf91!{cIP-h4i9+!gqqx;rHlA#!|j:=-p7i0*!Y[V$D:8UC)!YGP3D /n1F]XHW&DtIZ/| ~r9N-jD_C!!NPF:DjHc,%!WZI3Ds4&A} ]OO2Dy<k:,!ROB(Dy7&[7}n5l=M LVQC|fw/3jiLc:+!P]B<D:5e52!SJTSC:cxNNgmGX0J gDG1DkIY1'!WIqn@|>TZG}nb"0[ood~~QgvH#;1!!tp%<~5Z5!!RVV1DoKg^8}}fA!Gj};%8)!dVSUCve!j]okEl9} aXV(DqIb]H}lHV6,!eXQ)DyGe;0!NID(D8B[6K Y\mm@!"i~7[~w2F-n;&5L `r+v;jF_,2!]HCQCmevJNgpJY\K}rAi;%!eGI9D|8hYG};IYD+!Xrcs;}6b]<}uc lro!!3wF[TWJ/D97hC!!P[SQC<A^Zh|k:m@+!Y\E6D}e%x^o:6`1 !UN@=D!,z!y]cHC0D""s0+^~s6C-}Je-N |vB;-o9k/!! N@RCiDX2} SOW7Dt5VEM Zv,$< #f"F]dq]z;x9l>0!bWA-Dzeq~Tg85c\>}sEZ15!|e0e,9=k=K ~2=Q-pb"wbowd?!@j{5b^I}|9k45!ePI,
_CorDllMain
mscoree.dll
wwwwww
wwwwww
wwwwww
wwwwww
wwwwwwwwwwwwww
wwwwwwwwwwwwww
wwwwwwwwwwwwww
wwwwwwwwwwwwww
wwwwwwwwwwwwww
wwwwwwwwwwwwww
wwwwwwwwwwwwww
wwwwwwwwwwwwww
/A!x,\iM tfs;;Ak[G}p@'9$!|iI?-yDf-+![OrEA9@\9L `[C0DvGiDI {b@?-iJXBN {e7e,weu$@jn<fYg|}>&^>}74V;+!`RY*Dsaw0?jmby+<jl@T8M ]HTVC!L5ZdMgWXQC<apKZgha}'Hj94bE5! TU$Dk6\/!!\[A'DiM";+!{qb%*kIb^A}s:d2z QPpk@kc="Ij "v#v]bNqLAp6cC{ ULRSC7DW33!OIH<DuAd?4!]OM<D8Ae-/!|h8i,o;U:2!]Lnp@q>lE5!RZY&D"|NfXE~o7<- 1l!x]Vsq*<"G%}&KWQQ4D<M]1$!Ytg%<!&7FD[^ON*Du4X1I _OC6Dt?j;J QJD,Dk4f?2!^XF:D{?&+"!!JVSCl@_6#!Zs^$<!z4eVMcDW,D;F]6!!PSA7Dvb#tbopJf91!{cIP-h4i9+!gqqx;rHlA#!|j:=-p7i0*!Y[V$D:8UC)!YGP3D /n1F]XHW&DtIZ/| ~r9N-jD_C!!NPF:DjHc,%!WZI3Ds4&A} ]OO2Dy<k:,!ROB(Dy7&[7}n5l=M LVQC|fw/3jiLc:+!P]B<D:5e52!SJTSC:cxNNgmGX0J gDG1DkIY1'!WIqn@|>TZG}nb"0[ood~~QgvH#;1!!tp%<~5Z5!!RVV1DoKg^8}}fA!Gj};%8)!dVSUCve!j]okEl9} aXV(DqIb]H}lHV6,!eXQ)DyGe;0!NID(D8B[6K Y\mm@!"i~7[~w2F-n;&5L `r+v;jF_,2!]HCQCmevJNgpJY\K}rAi;%!eGI9D|8hYG};IYD+!Xrcs;}6b]<}uc lro!!3wF[TWJ/D97hC!!P[SQC<A^Zh|k:m@+!Y\E6D}e%x^o:6`1 !UN@=D!,z!y]cHC0D""s0+^~s6C-}Je-N |vB;-o9k/!! N@RCiDX2} SOW7Dt5VEM Zv,$< #f"F]dq]z;x9l>0!bWA-Dzeq~Tg85c\>}sEZ15!|e0e,9=k=K ~2=Q-pb"wbowd?!@j{5b^I}|9k45!ePI,
csharp.Resources
VS_VERSION_INFO
VarFileInfo
Translation
StringFileInfo
000004b0
FileDescription
csharp
FileVersion
1.0.0.0
InternalName
csharp.dll
LegalCopyright
Copyright
2021
OriginalFilename
csharp.dll
ProductName
csharp
ProductVersion
1.0.0.0
Assembly Version
1.0.0.0
Antivirus Signature
Bkav Clean
Lionic Clean
Elastic Clean
MicroWorld-eScan Clean
CMC Clean
CAT-QuickHeal Clean
ALYac Clean
Cylance Clean
VIPRE Clean
Sangfor Clean
CrowdStrike Clean
BitDefender Clean
K7GW Clean
K7AntiVirus Clean
Baidu Clean
Cyren Clean
Symantec Clean
ESET-NOD32 a variant of MSIL/Injector.OBE
APEX Clean
Paloalto Clean
ClamAV Clean
Kaspersky Clean
Alibaba Clean
NANO-Antivirus Clean
ViRobot Clean
Tencent Clean
Ad-Aware Clean
TACHYON Clean
Emsisoft Clean
Comodo Clean
F-Secure Clean
DrWeb Clean
Zillya Clean
TrendMicro Clean
McAfee-GW-Edition Clean
FireEye Generic.mg.b3c0cbd7c18d2014
Sophos BedsProtected (PUA)
Ikarus Clean
GData Clean
Jiangmin Clean
Webroot Clean
Avira Clean
Antiy-AVL Clean
Kingsoft Clean
Gridinsoft Clean
Arcabit Clean
SUPERAntiSpyware Clean
ZoneAlarm Clean
Microsoft Program:Win32/Wacapew.C!ml
Cynet Clean
AhnLab-V3 Clean
Acronis Clean
McAfee Clean
MAX Clean
VBA32 Clean
Malwarebytes Clean
Panda Clean
Zoner Clean
TrendMicro-HouseCall Clean
Rising Clean
Yandex Trojan.AvsArher.bTtlhJ
SentinelOne Clean
eGambit Clean
Fortinet Clean
BitDefenderTheta Clean
Qihoo-360 Clean
Avast Clean
MaxSecure Clean
No IRMA results available.