Static | ZeroBOX

PE Compile Time

2021-09-15 18:07:02

PE Imphash

f34d5f2d4577ed6d9ceec516c1f5a744

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00002000 0x0006bf34 0x0006c000 6.66840884866
.rsrc 0x0006e000 0x00000aa2 0x00000c00 3.83817243597
.reloc 0x00070000 0x0000000c 0x00000200 0.101910425663

Resources

Name Offset Size Language Sub-language File type
RT_ICON 0x0006e448 0x00000128 LANG_SUTU SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x0006e448 0x00000128 LANG_SUTU SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_GROUP_ICON 0x0006e570 0x00000022 LANG_SUTU SUBLANG_NEUTRAL data
RT_VERSION 0x0006e594 0x00000324 LANG_SUTU SUBLANG_NEUTRAL data
RT_MANIFEST 0x0006e8b8 0x000001ea LANG_SUTU SUBLANG_NEUTRAL XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminators

Imports

Library mscoree.dll:
0x402000 _CorExeMain

!This program cannot be run in DOS mode.
`.rsrc
@.reloc
aiZfe}
;DZ O;DZai(
5$n*@#
nt) Hnt)ai(
#kcJ$.
>W?O@#
[YZ_bX
[YZ_bX
[XZ_bX
[YZ_bX
[YZ_bX
[XZ_bX
[XZ_bX
[YZ_bX
[XZ_bX
[XZ_bX
[XZ_bX
[YZ_bX
#):U>zS
[XZ_bX
[YZ_bX
[XZ_bX
[XZ_bX
!=zA#
[YZ_bX
[XZ_bX
[XZ_bX
[YZ_bX
[YZ_bX
[XZ_bX
[YZ_bX
[YZ_bX
#4Cn)Y`
[XZ_bX
[YZ_bX
[YZ_bX
[YZ_bX
[YZ_bX
[YZ_bX
[XZ_bX
[XZ_bX
[YZ_bX
[YZ_bX
[YZ_bX
[XZ_bX
[XZ_bX
#23Qk#
[XZ_bX
[YZ_bX
[XZ_bX
#]czD/w
[YZ_bX
[YZ_bX
[YZ_bX
[XZ_bX
[XZ_bX
[YZ_bX
[XZ_bX
[YZ_bX
#::*vz
[XZ_bX
[XZ_bX
[YZ_bX
[XZ_bX
#%8),aQ
[XZ_bX
[YZ_bX
[YZ_bX
[YZ_bX
[XZ_bX
[XZ_bX
[XZ_bX
[XZ_bX
[YZ_bX
[XZ_bX
[YZ_bX
[XZ_bX
# 7ue"
[XXnZ>
#@_5+d
:aiZY}
8aiXXa
ZXZYfff
YfYXaf
5aiZfaY
eYYee}
aifeff
aiYZfaa
aifXZYY}
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
4\8\?P3W8P?W3W4[8\3[4\8\?P3W8P?
nTG$scbp
5Z9]2Z5]9}
=R:E-I-L#@p
]X<T7S
"Ww3P4
xa7H^l
N@0Y>Z*
sNUPw2O!
0D?*J/A
!Jd,;HkNM
3O[3W3P=
aM;Oj G
fz;pX;T<
(dZ6Z3
&Q9V>Z
&-N"K{
D%K$aZ
p Igs{
_@0YteJ
I'P#N-hD
R)Q?XI
<C+E.shY
R:V?:W8oE
D{#M&ffZ
SP8X1.6B
l+S=Vx
&!H(AG
V5[4lX
K\;U>qpk
$B.GXwZ
.L$Mlir
iV4\5bil
*P@)/:Q
Yz P9|Ur
j)O!JZ
XS9W@YvW
]B.G,m$
XE+DTq
7\4]Qy
P=S<A9
Mz'I"4_
a2_1Z.
w@-C,@fM
^YF*CzmJ
|#Y6_u
%I'PV/
.R>W8P4Pl~
Uo{| P9/
.y%K$f
p IV[~
$G)Biu
m^A/Hi
B-P@)x
O4W9Ri
#;Wm}F(H!
?X=S<#
*!F*C>
T1_8ZEh2
ZJ+E'3<
H9]:Y7
VS<S<X1T
LB&F)Kn@
U9M%Ad%:
TO,O C
GF&B-E
t/K(H,
i(H+O 9
,\4\4QtU2
K>W8P4
YZ6^1Y
o$A%F)
}6S0_<%
e#H'O
[\@/L(
fAW0 Q
YN"J.J
r/L/@#
GA*N*I
q.N!B&
`!N&J"
c$A"M.;
]N+O-B
TX1U1R
FF/@(L
J>W8Q5FF
KA/L(G
{1U2Q>*T
KxC%F"
?[=^1
O8&0_7
<S0S<T;k&8[4
PM$' p
2=9V>Q9]9
tR^6Y:+
aDS)M"
eK[?\3A
9L/@#G(@
{U15V9Z
fK[?\3
)1>V2V5Z9
aJ*E-B
1[?Z9V&
ZU7T0_
rY5V2]
"Z<T8tn
t4@(K/
it{;]3Q
Y<T8t&
p+C.F)
{\;_0X
_SE4X=
s/;]?\
~^0X<X
B!EBH H,
gj*.I*
fd3;S;
j>XS\6Z3
_$C D+|
UI%P?\
B:M#L$
e~S?D,H,@
EA(M/X
s-L)K<
v-H-JA
XT^R=^
K0UN[
BB=L.A
A5]"J.
t3KD C
P*G0`~
"U8]3sA
M-I&N9
#3R6U:q
*?W8Pv
#tD_k8
J"M$@$G
fJ(G$@
~X5O H
8X7_0X
!>]2Q5
6X0T0k
#K-I*]
b"L)N+
&N:_='|
{X7]-E9
c{5U1^
eP(P4\W
9r\A*F
VR5[?[
)])A.F
C(M/@;
O?=:^:
mV8[?P
6jLM#A
_rB&N*N
S+P5R>
j*Q3]V
.B&B*E
j}J.M"
z-F-I
QMoL/K
?ZNCTd?
HdT:R6R
ZR!H'O
!ZOI.B
*}FYqRn5
f(A%A"
\s:J#p
?P~4S0}
OLWsKex
GfI#M&
XCfC&F
p Il@!
!P9W~O)
FeF+I.
]uY8Q6
2D+O@9
&)L/UH
{1Jd"@!g
{ P9130,
0N*F/Ai"Dg(G
^5V:Z?
-4P4\@"{ST8Zl
p D`/A$
L6Y9]2
Q>]9V/
V-Q5[9Nko
J,F*C'
8&O.K%>
A8\9VV
NE$L%b
2z#H,[
PP,X=Z
bR5]9]
|?W4Z>
Dn9E!E&:
X0w+&A"
A3]?(u
V:Z6mCA)F
@GQJ/M
W:_1q5
_<V3Xt
h#$[?P
^UD<X7
)^H?W3
K4P;S<lm=^1
LGAG/@
H4P4W8
p,f#@$
"^ Z9]
^J%M"J
?P7T<lx,H,
YNh&B!
a&H,E"
<X;T<lm(K$
s_;T7S
T@'E+`HI!N
0_9^;p
NR+B-]o
wp0/o
p7a*N-
C \.8V>
D$K#L$
es_*D'
nG#G(@
4 O|8y~
fw3I O
2WhG(
=U1UNg4P?
$4[2V2
O;W1R=
h>Q9VV;
{(C%J"
hEV2Q
cy6W8P
ny<W4Q
!v!O(d
AV8]3(u
~.9O H
L7[9^I
@@!%F)
>i]{ D
h#EV>Q
FQ!E!B
@;V:SOG`
`w~)I+P
W<_;T<
cO*I&E
VR-C'C
%Q5[9u
iPC/M*E
p7oA%F
.5umR7T
L@x^1R
;gC%F)
I-J&f>
AArX;T
u)eK(L
YIgC'C
u P9uOs
PLPD,E
L]1$@;
rQ;U>ZV
[6RNhU6R
{0l]6Z
d#oY=^
1Ro{;V?\
A8sc^6Y
K<]3\K
d}U&Fe
jQ=^:U
d$}q
eG'?W8PIg
@#P@)^
mJ!E!B
C':U6Q>V9
6Y'H D
M33L$K
Q2L#K#K/K@_
ev:Zcu
vuZ9W@<
)I"G;y
a}Q4Q?
<T7/U;[
21?%u
*]>R=U
7S>W9i6
fQ8W?[
A=Ka2Ec
8dK#G#
%G$L$c
o<"F"AF
hO+O H
QV<V?\
"A.Jn~R
y)*R2^
M#L)@#B!~
p/>Q/@
cI6M)F
%S8XH*
.I&N6U
os E"
u2T6Z3
nU:Y5Z
u!F#A/
N9=V2Q
u12W3W
ZU=Y=^Ia
~A0T1^
VC.G)V-
!`0Z?\
$XB$L0
]JP:_=
XSw)B.
nY5[4hh
0:p?.b
/Xo "4
%*V5o&
w,'N+E
>K/K'H+O
]?P2V9
(D'N*Nf
;kl.N"
j|~%D,E
n\TXO'
Dx~b"g
7H'SY
3]1)B$
`5HHRP8
9\?Y6^
*"^Pj
<3tl?Q:
eI%M"J
@fA(G/K
EhX6^1Y
S}Z1U1R
zR3]?[L:$L(
kvF$H(
'``/A*
WL2:S=
]Y?\@/d&
]V!(L#
>6Y1T0S<
THfP@)
<_;TTDo
,C+OC7
<V9QV~^;Y
S:Y=j^u
OdS4[3
X:Y6C'H
b%/%A"
V+D,[c
)@&eE!B-
.P(//6
P7X0TH
1vZ/K(
lX'C,D
^UV'C,
G;;K$G
:v.B-N
u)I O,
Q{1%YM
+CD.G#@
*MA9C,D
XO{!F&
p05S1_
y)9S8]
)^>]:Z
9n>T=Z
k')=R:%;
TS0H=X
zZ4W3\
^!B,O+
3w,R2Z5
4O,C Y4)
d$$];`
}-7W3W
ZE#M&I9
K;T<X<
H8U%F)
$A.6Y1
6_=S0T;STr
2nR4W8
d#1R=U
*1H,CCS
+\6X0T
2i^<X7
wT/?V8
$_4N!I
&a7^7T
^N)E&B
WA&C g
+gm4]?
N:>R1^
7\H-C#
J\/)Mq
8C+Q3]
%U1E&Ic
#P2V9QV
(d"R>^
'S?X8h
c{/C,D
NE!N&I
c#L$@$
F!8((u
p'XHiE z^
;fA:&A
p8L<"5~
6R6$.s
A&J*#?
hViM!~
7[45MW
X1Yco}
&RD(Ma
S6GY1/
NCAT\bY
_$`AF.A)M
:~r"7)
D@{%0D
tMA"M.J
BWp7_0X<
ySS<T0T
^n%A.F)
%M)24o
0%~2Q>]9
YN-I&N
9t\R>Wp,O C'
9mLF*Ci
AEUO!Jb"F"A.
}JC!Ff&I!E!
wQM"J%M
uWL(G/@
Nf'3Od
C[>=;~
(y,O*m>^Vm
aY~1<(Qi
?`?S6O]
2{KS=x
!Kv0|6
s/Hupd
Cup'v>
K'yGu
bS-yF;G
mBbrKV
mBmeef
S@KY'e
oBmw/9
oYYk@p
Dj# JE!9
r;}B);
3RrHpa
>R*.dr
uN'ictwO
K#]D[
as2Yj&
k|PA>t
&#Vs]/U0
uKf6,UA
:[#4]F
TV]`|k
G%:Rj_
7zsCa?
4wMX\Y
W,tA7=) "7N
A?D\uEa
cS4G2PYS#}
kk-r`[+
L]A`Ow
q=zg{
(5@c;O
`Dl*8
mi@zNLx
`xCx6n.
2j!>{Td[
F/B8b%
;*peEa
Nm3}Dc
p/}$<C
dhy; sU2
4B&C;9x
KT*C&1
X1vU\
>dS'b7EZ;
1CWxJ#
v4E(13^
KxVM/:c
"+\"Jo#
qzIe[q
r*[^(V
&zw$E"a
i6djBo]
~V^fz+rU?
Rpg)n9
]sw]m_
yPvM<
}G%|}3Q
Z.$<hB
I,"Ci
Iuoz}}%
t(DlSB
Q49h-
1[T?w]
mrI9}6Fk
=OxFsr+
bY3Bfg
eLz#6b
@JJHDiI
p: bo>
J6=\d^[x1
_+@=]
2#TG#g
-wX4-:
)6D_81
]8 zUaY6
|g,:h|S
m"g+1u
=v71DE{
oG=$u7
y|gV3
N?W+w^
76Wg[&O#/X#2
9ai-I!Js
-$3@hG
DwG/$x^
e#|\jZ
>u^V|J;
7f"z$*
O5wQ1V
[K'>D8
7_0X<X;T7S<T;S7S0_<X7_0X<X;T7S<T;S7S0_<X7_0X<X;T7S<T;S7S0_<X7_0X<X;T7S<T;S7S0_<X7_0X<X;T7S<T;S7S0_<X7_0X<X;T7S<T;S7S0_<X7_0X<X;T7S<T;S7S0_<X7_0X<X;T7S<T;S7S0_<X7_0X<X;T7S<T;S7S0_<X7_0X<X;T7S<T;S7S0_<X7_0X<X;T7S<T;S7S0_<X7_0X<X;T7S<T;S7S0_<X7_0X<X;T7S<T;S7S0_<X7_0X<X;T7S<T;S7S0_<X7_0X<X;T7S<T;S7S0_<X7_0X<X;T7S<T;S7S0_<X7_0X<X;T7S<T;S7S0_<X7_0X<X;T7S<T;S7S0_<X7_0X<X;T7S<T;S7S0_<X7_0X<X;T7S<T;S7S0_<X7_0X<X;T7S<T;S7S0_<X7_0X<X;T7S<T;S7S0_<X7_0X<X;T7S<T;S7S0_<X7_0X<X;T7S<T;S7S0_<X7_0X<X;T7S<T;S7S0_<X7_0X<X;T7S<T;S7S0_<X7_0X<X;T7S<T;S7S0_<X7_0X<X;T7S<T;S7S0_<X7_0X<X;T7S<T;S7S0_<X7_0X<X;T7S<T;S7S0_<X7_0X<X;T7S<T;S7S0_<X7_0X<X;T7S<T;S7S0_<X7_0X<X;T7S<T;S7S0_<X7_0X<X;T7S<T;S7S0_<X7_0X<X;T7S<T;S7S0_<X7_0X<X;T7S<T;S7S0_<X7_0X<X;T7S<T;S7S0_<X7_0X<X;T7
v4.0.30319
#Strings
#fsdfsdf#
#gdfgfdg#
#gdfg#
#fsd.dll#
#fsdfsd.dll#
#fsdfsdfsd.dll#
#fsdf.dll#
#fsdfsdf.dll#
#fsdfdsf.dll#
#gdfg.dll#
#ghfh.dll#
Digit100
HotPool40
<InitializeEvents>b__16_0
DwReserved0
$$method0x6000437-1
<version>5__1
IEnumerable`1
List`1
WriteMethodBodies1
ToUInt32
ToInt32
Ldelem_U2
Func`2
Tuple`2
GetAddressField2
DeclaringType2
GetSymbolWriter2
<>c__DisplayClass13`3
Reserved4
M_Item5
Prefix5
ToInt16
<>c__DisplayClass7
<FindAssemblies2>d__48
get_UTF8
WriteInlineI8
Conv_U8
SAM1159
<>9__191_9
<Module>
ListStandAloneSigMD
LOW_SURROGATE_END
HASHCODE_MAGIC_GLOBAL_TYPE
TOKEN_HASH_SIZE
get_WAGROUPING
LOCALE_INEUTRAL
MAXNAMELEN
System.IO
VTHACK_ANSICHAR
CSIDL_COMMON_TEMPLATES
CSIDL_COMMON_OEM_LINKS
NORM_IGNORESYMBOLS
MULTI_BYTE_VALUE_CLASS
Bge_Un_S
BIDI_CATEGORY_OFFSET
LUNAR_ETO_ROKUYOU
MacOSX
KEY_WOW64_64KEY
GetCodePageData
M_RemotingData
Get_SecurityData
mscorlib
IsCharSetNotSpec
System.Collections.Generic
IsMetric
get_IsStatic
GetLastAccessTimeUtc
Get_CheckSumAlgorithmId
GetProcessById
lpNumberOfBytesRead
hThread
get_CurrentThread
thread
get_Speed
get_IsAttached
IsEnabled
M_initiallyOwned
Compressed
OrigRid
FindField
IsField
Threshold
CharEnd
InheritanceDemand
set_IsBackground
set_Method
DynamicMethod
IsCompletedMethod
DefinePInvokeMethod
ResolveMethod
GetVarArgMethod
dnlib.DotNet.IIsTypeOrMethod.get_IsMethod
GetMethod
InternalGetCurrentMethod
NetGuard
fsdfsdfsd
NetworkInterface
get_IsInterface
Replace
DbiNamespace
M_remoteStackTrace
CachedInstance
CreateScopeReference
LoadResource
IndexOfLinkedResource
FindResource
SizeofResource
FindRdasdsesource
GetHashCode
SetCode
CryptoStreamMode
DesignMode
CurrentNode
Xenocode.Client.Attributes.AssemblyAttributes.ProcessedByXenocode
GetSystemDefaultUILanguage
EndInvoke
BeginInvoke
TypeRefTable
CodeManagerTable
Get_AssemblyTable
GetEnvironmentVariable
Enumerable
IDisposable
Get_IsRetargetable
Hashtable
set_Visible
ReadDouble
get_Handle
RuntimeFieldHandle
get_MethodHandle
RuntimeMethodHandle
GetModuleHandle
get_TypeHandle
RuntimeTypeHandle
CloseHandle
GetFieldFromHandle
GetTypeFromHandle
Shuffle
ParseSingle
Console
Set_CalendarWeekRule
get_Module
DefineDynamicModule
set_FormBorderStyle
get_Name
Get_EncodingName
M_defaultMemberName
M_strName
ObjectName
AssemblyName
GetDirectoryName
Get_Scheme
ToLocalTime
LastAccessTime
WindowsRuntime
ReadLine
WriteLine
CrossMachine
Multiline
Set_Type
get_FieldType
M_bakedRuntimeType
DefineType
BaseType
CreateType
ValueType
get_DeclaringType
InitializeMarshalType
flAllocationType
get_ReturnType
Set_CalendarType
get_ParameterType
GetType
M_isUncShare
System.Core
ReadCore
ResolveSignature
SetLocalSignature
GetSignature
Get_InvariantCulture
Capture
MethodBase
Dispose
Truncate
CreateDelegate
MulticastDelegate
set_WindowState
FormWindowState
SkipWhite
STAThreadAttribute
CompilerGeneratedAttribute
UnverifiableCodeAttribute
UnsafeValueTypeAttribute
ResourceExposureAttribute
AssemblyTrademarkAttribute
BabelAttribute
SuppressIldasmAttribute
AssemblyInfoAttribute
YanoAttribute
DotNetPatcherPackerAttribute
BabelObfuscatorAttribute
CryptoObfuscator.ProtectedWithCryptoObfuscatorAttribute
DotNetPatcherObfuscatorAttribute
DotfuscatorAttribute
CompilationRelaxationsAttribute
SmartAssembly.Attributes.PoweredByAttribute
RuntimeCompatibilityAttribute
SuppressUnmanagedCodeSecurityAttribute
HaveMinute
LastByte
OffsetToNumbericValue
C_standardValue
SetValue
Get_RawDefaultValue
get_IsAlive
UnsafeMove
hddcocdoho.exe
get_Size
SystemMaxDBCSCharSize
dwSize
Set_KeySize
Resize
SizeOf
fsafafaf
fsdfsdf
IsEventDef
get_IsByRef
fafffffffff
HasDeclSecurityTag
gfdffffffg
ToGenericSig
CreateGenericInstMethodSig
System.Threading
DefaultEncoding
IsLogging
IChangeTracking
Ceiling
IsNoInlining
FromBase64String
OutputDebugString
InternalToString
GetString
UseHebrewParsing
Remoting
NativeVarArg
gfhhfhfhfhfhfhfhfhfhfhfh
Set_OffsetHigh
GetHash
IsUncPath
get_ExecutablePath
MayHavePath
M_GivenPath
GetFolderPath
ObfuscatedByGoliath
get_Length
GetFormatFlagGenitiveMonth
WriteInlinePhi
GetAscii
AsyncCallback
M_executingCallback
Fallback
callback
GetMaxStack
PerformSecurityCheck
FlushFinalBlock
CanSeek
EnclosingMark
AddFieldMarshal
TryParseDecimal
Get_IsFinal
Cancel
AddSentinel
IsSentinel
WarningLevel
RemoveAll
InitializeAll
ProcessAll
advapi32.dll
kernel32.dll
PerMilleSymbol
VariantBool
Control
StreamIStream
CryptoStream
MemoryStream
get_Item
System
SymmetricAlgorithm
ICryptoTransform
TryParseEnum
InternalBoxEnum
Bne_Un
Rem_Un
Get_MDToken
get_MetadataToken
GetCurrentThreadToken
ComparePublicKeyToken
_skipAllChildren
M_children
lpNumberOfBytesWritten
Get_ControlAppDomain
get_CurrentDomain
CalculateWinMDVersion
HotHeapVersion
GetValueCreatePermission
GetValueWritePermission
CheckPermission
Application
get_Location
TimeZoneInformation
System.Net.NetworkInformation
InvalidOperation
NineRays.Obfuscator.Evaluation
System.Reflection
ManagementObjectCollection
DbiFunction
CallingConvention
RuntimeWrappedException
NotSupportedException
ThreadStateException
IsEquivalentTo
GetDynamicILInfo
FieldInfo
MethodInfo
FileInfo
M_siInfo
FileSystemInfo
Get_MemberInfo
ParameterInfo
ProcessStartInfo
DirectoryInfo
_PropertyInfo
hddcocdoho
SetPinvokeMap
BinaryCompatibilityMap
Onerep
Get_TimeDateStamp
System.Linq
set_ShowInTaskbar
ImageDosHeader
DESCryptoServiceProvider
MethodBuilder
ModuleBuilder
TypeBuilder
EnumBuilder
AssemblyBuilder
SpecialFolder
MyBinder
lpBuffer
M_charBuffer
ResourceManager
AppDomainManager
Debugger
ManagementObjectSearcher
WSTRBufferMarshaler
DeleteTimer
Listener
DebugAssertBanner
CheckSetHelper
CreateSubdirectoryHelper
InterfaceImplUser
CreateProcessAsUser
M_tkParameter
TryEnter
AddPointer
get_IsPointer
BitConverter
NativeStackRegister
SerializationFormatter
ToLower
GetTokenFor
Get_PMDesignator
ManagementObjectEnumerator
GetEnumerator
.cctor
dotNetProtector
get_IsConstructor
CreateDecryptor
IntPtr
TicksPerHour
StandardBias
System.Diagnostics
get_PreservePropertyRids
AllowThousands
GetMethods
GetAllNetworkInterfaces
System.Runtime.InteropServices
System.Runtime.CompilerServices
System.Resources
hddcocdoho.resources
Get_Guarantees
_Entries
ContingentProperties
EndCreateTables
EnableVisualStyles
GenitiveMonthNames
SaAbbrevDayNames
UserTypes
EmptyTypes
GetPropertyCandidates
set_Attributes
MethodAttributes
FileAttributes
TypeAttributes
MethodImplAttributes
GetCustomAttributes
Minutes
GetBytes
CompareExchangeIndexes
GetAllTypeDefs
ProjectWinMDRefs
BindingFlags
GetMethodImplementationFlags
SetImplementationFlags
DwFlags
HttpSyntaxFlags
BigStrings
MetadataArgs
Equals
System.Windows.Forms
Contains
HasImperativeRestrictions
CallingConventions
m_Options
Trackpos
GetMemberRefProps
_GetGenericParamProps
get_Chars
GetOptionalCustomModifiers
GetParameters
_GetPublicKeyParameters
FindInstanceConstructors
get_IsClass
AssemblyBuilderAccess
hProcess
GetCurrentProcess
lpBaseAddress
GetPhysicalAddress
lpAddress
Get_NumberDecimalDigits
MaxFractionDigits
CheckArguments
UnsafeExists
Status
ReUseDeletedMethodRows
Concat
Contract
Get_IsCOMObject
ManagementBaseObject
GetObject
ManagementObject
object
Select
IReflect
_Collect
flProtect
DataHeaderDict
System.Net
CharSet
Get_StorageHeaderOffset
op_Explicit
ConvertHexDigit
System.Reflection.Emit
CodePageDefault
SetCompatibleTextRenderingDefault
IAsyncResult
result
Write7BitEncodedInt
System.Management
Get_FileAlignment
Environment
PdbDocument
ImportParent
get_Current
CheckRemoteDebuggerPresent
IsDebuggerPresent
Content
Get_SpecialConstraint
EnumCount
IsReuseSlot
ParameterizedThreadStart
Convert
FailFast
WebRequest
_invocationList
CharPtrAlignConst
set_Timeout
SuspendLayout
ResumeLayout
MoveNext
System.Text
_DuplicateCertContext
context
ReadTypeDefRow
set_CreateNoWindow
FetchSyntax
GetMaxUsedIndex
GetCurrentActiveScopeIndex
FallbackIndex
TicksPerDay
ToArray
get_IsArray
ToObjectArray
Set_ControlDomainPolicy
CreatePublicKey
C_versionKey
TryGetTimeZoneByRegistryKey
System.Security.Cryptography
DefineDynamicAssembly
GetExecutingAssembly
IsILOnly
IsClr10Exactly
BlockCopy
IsECMABoundary
IsBoundary
NGetPrimary
GetTotalMemory
CreateDirectory
Get_IsBusy
op_Equality
op_Inequality
IsInfinity
System.Security
SuppressUnmanagedCodeSecurity
IsNullOrEmpty
ResolveProperty
198 Protector V2
System.Security.Permissions.SecurityPermissionAttribute, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
SkipVerification
WrapNonExceptionThrows
_CorExeMain
mscoree.dll
"""""""""!
""""""""""""""
"""""""
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
<assemblyIdentity version="1.0.0.0" name="MyApplication.app"/>
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v2">
<security>
<requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3">
<requestedExecutionLevel level="asInvoker" uiAccess="false"/>
</requestedPrivileges>
</security>
</trustInfo>
</assembly>
hddcocdoho
GetEnvironmentVariable
-1071804900
1071843942
216730364
216748486
_ENABLE_PROFILING
_PROFILER
-819340940
819334472
-799463936
799466605
1787135960
1787134669
-2073013849
2073019988
37994331
37970193
-2076267124
2076261332
299379822
299390711
1683550705
1683496236
-1381075900
1381071182
-2083710738
2083757436
-1819542262
1819567506
-598960575
598960495
705567460
705573509
517629072
517693751
-16900619
16991650
-559561259
559629606
-1276518433
1276590776
-1079297438
1079284096
-2067615650
2067727674
834370383
834373928
1768990555
1769067048
-720981910
720906195
-1149829175
1149767203
-225845544
225722244
-2119864721
2119922697
-1596193417
1596092981
2044924829
2044926294
-1846306665
1846318628
429758476
429757399
-1640662191
1640723527
-788750134
788688961
-49396197
49292172
211994966
211972946
-776710463
776622003
-2076669646
2076623631
-576760505
576771912
1407326191
1407351945
2080786663
2080852773
939545525
939575261
2064008590
2064017696
2143748244
2143812300
1062584252
1062505662
2033077661
2033064487
1013732621
1013716427
1820590011
1820553200
-2082492898
2082605724
-1835960196
1836015324
-2105044984
2105055257
1618479399
1618531868
1202122153
1202163052
-1431963937
1432044190
-1471232799
1471236208
1972221944
1972217996
322745345
322705891
-860620381
860800066
-855436715
855454719
-1296542019
1296549071
-752850858
752852886
-1502262217
1502223705
-1337671979
1337637653
993594034
993649609
-892487096
892571861
-1396109196
1396062269
347310351
347334166
-1154432843
1154418465
1761757503
1761796291
1050438420
1050450724
842265235
842261340
-1408559815
1408500260
-1310511156
1310460393
-2079853089
2080030373
-1336738974
1336789100
-2010117142
2010016747
-1103353204
1103303087
629164298
629241796
1568216174
1568150240
-1116148657
1116160406
-1803592068
1803581568
-1270477356
1270414274
376056886
376119351
506923917
506930102
-1942431845
1942406025
-108932109
109032023
1611700341
1611676853
-937483832
937431641
-1197670421
1197688782
-491731593
491665500
881800165
881813375
1691414207
1691361453
425606277
425628297
81258322
81200786
-921492420
921555659
-1141076913
1141074356
200852830
200929530
1710574655
1710560663
-1615390277
1615410857
-2104290885
2104268257
1890833401
1890746850
-1386765568
1386862572
451191424
451273357
-1498034429
1498029885
256457775
256446888
-878118522
878161796
1663021441
1662923530
962750861
962804395
-1794551183
1794579677
-1575077003
1574973060
-1326408610
1326351185
-2101831629
2101689918
923492503
923420751
-797239791
797196879
2145731835
2145745572
-1987631944
1987671819
-629350849
629377773
-1260640191
1260556705
184055382
184033820
1330803243
1330790739
302988464
303010344
-1392479818
1392495683
-440614389
440632734
651418098
651404383
1159198745
1159172648
1716430110
1716505392
-297962104
298011514
-2034791141
2034781583
-1593780311
1593787845
1070460239
1070398106
-68845294
68942891
-1747169525
1747095070
-2134401796
2134391917
2030451252
2030533600
-2044018508
2043941434
-140971881
140927643
-62989632
62923459
228658109
228664116
1697523305
1697598143
1204749541
1204688583
-1735611653
1735475484
181136663
181111977
-195851755
195872882
-1051288969
1051294171
1561444862
1561452116
-1248726650
1248835842
-157711430
157685102
-721362495
721403827
2058451826
2058381967
-941825482
941824397
1692993930
1693035536
-217215406
217216157
-1556868141
1556867057
1556405646
1556359652
-1119020994
1118966217
100984690
100931622
798515402
798523080
1282450980
1282422288
-1483923397
1483935238
-1116567800
1116496448
1777546205
1777585897
489071876
489076445
1231862452
1231874143
873578357
873516933
485129117
485149265
403472048
403519317
-1036690995
1036717710
-1002526904
1002526514
1399214920
1399235019
-2015404344
2015395239
238491885
238514070
1353488843
1353557214
1807741425
1807711675
-1015862525
1015852719
988110841
988044710
-894381896
894370902
1162048444
1161982363
-1642104091
1642248003
1244359823
1244384387
-323942432
323989017
-1836456417
1836506684
-168649457
168591764
-1831452117
1831392617
948356726
948309279
1458799790
1458701041
-1154205031
1154157461
1953308067
1953359240
1858748420
1858732800
751665279
751653822
42476009
42498892
-1952887207
1952764618
-2064250337
2064206358
-585374612
585555465
1734102818
1734151047
-769731481
769869508
217151572
217068516
1313937869
1313953277
542913116
542957767
1420753123
1420724509
382923041
382898404
1273737157
1273746447
-601495879
601542162
1918162266
1918229802
-1834554038
1834688720
220203578
220254929
2037147836
2037172942
-1729930759
1729930537
-362231785
362153046
1832528665
1832585771
-2046579478
2046589283
72655802
72620053
-1842355655
1842448709
-1795040603
1795041553
1182111957
1182043685
2103397362
2103402725
1620316915
1620324547
1345232299
1345233007
1521134020
1521123094
805363759
805397803
456577582
456539243
-1547682636
1547606837
2084504815
2084523924
1694966463
1694916894
-1415417049
1415419499
673726512
673711786
-1366461398
1366354111
299882444
299863601
231436766
231444735
574493946
574576616
-1716078697
1716067942
396192724
396102787
-429022242
429090020
65949329
65980047
2088844492
2088777008
1087750523
1087754020
-104523246
104496551
1987292062
1987309863
1397632715
1397625688
315784154
315753520
747389203
747458227
1021400325
1021428262
391895274
391884100
-607193013
607246676
-1656841135
1656756146
-602648635
602594135
1824745400
1824745721
-1121882613
1121924194
1411970463
1411909815
710827511
710836420
-488865741
488867297
-1249485069
1249415687
2077281788
2077342496
-987953346
988019701
1360821008
1360825381
865518025
865574832
-1291078599
1291086778
539614009
539555867
-1006569512
1006565775
-759528465
759549066
940610435
940685832
-385979374
385895688
2020948788
2020881829
959458400
959527310
-2138002602
2137967724
1682387242
1682405828
-1209547801
1209656556
397788686
397803027
1963928317
1963928956
1062166505
1062150393
-1745301911
1745266978
950958969
950989325
607299741
607309318
1575917658
1575998666
1504497935
1504446718
1997172834
1997238535
1573814246
1573833489
-504860967
504768256
-561249401
561227285
1955806572
1955757426
1606222210
1606245198
-1273658235
1273652615
391644816
391713316
345879016
345862771
350745719
350722712
-972229085
972165989
766882532
766826640
-242922983
242912326
-47813037
47944219
465398020
465414049
-510761530
510753356
1082013556
1082021346
1772930309
1772926303
-1065598475
1065509701
-540555668
540643873
-2040276097
2040287623
-401270980
401298779
1130914182
1130962432
-561449085
561490301
358939172
358914465
-1073331978
1073228088
3889503
3927057
-957999423
958063416
1046303888
1046311095
720665390
720675955
2010962171
2011011962
-514672081
514661836
-577803945
577846650
408322561
408343388
-439113613
439140488
2003973982
2004001408
-1671574005
1671454715
1564867551
1564798573
-452987275
453076795
657276260
657263965
680187708
680143126
1834375068
1834380328
-1441111718
1441053464
-1747893402
1747898385
157826250
157849039
-656373340
656334012
1990592397
1990596350
-1441030430
1441082219
-581608272
581642188
591707230
591712485
1463370536
1463408085
1781891033
1781885743
-738468913
738589266
-1818123394
1818132657
1718549837
1718514768
-1122044482
1122082088
153499794
153541007
-2061891101
2061842642
1596459966
1596463553
-1112220513
1112201980
2003560056
2003544670
-870948658
871075110
1000700289
1000668375
-1827108780
1827070666
-1803961086
1804049818
-1204326884
1204355609
-797971822
798127756
-488453790
488484244
1622394971
1622404820
-609909942
609920489
-1599111928
1599128740
-308116349
308027305
273322787
273349049
-1564989026
1564890413
1976965882
1977012734
736746810
736686531
1361077613
1361085331
393976745
393989187
1420376326
1420411611
-917723920
917648897
1779503482
1779538413
-265624577
265653110
-1250033902
1249915363
-782558897
782569995
-1990607595
1990710234
-1025730458
1025738088
-783690276
783744760
-1662860783
1662910157
883740275
883702146
-1337024474
1336967240
-1337732806
1337875916
1764863585
1764794774
-260272680
260143118
1879317351
1879358817
-471203909
471324142
-1997084966
1997097149
-1037475678
1037469803
-536496226
536355517
-1592007009
1592008943
-1354072664
1354021514
13430923
13487105
-923976529
923990605
-1923571163
1923492943
System.AppContext, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
System.Data.SqlClient.SqlColumnEncryptionCngProvider, System.Data, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
-1446095145
1446058637
System.Security.Cryptography.AesCng, System.Core, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
System.Web.Caching.CacheInsertOptions, System.Web, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
1590681817
1590684303
375167251
375171292
managed
native
hddcocdoho
browse
rvg9X/RbnnLw7ZdYjfiHcZbl4exsN+k3Ci+vwPpiIdiiq9TtwdSzTYg/af2FQZDr/iJ6+KN53l4=
browse\browse.exe'" /f
gyqre32+rwI=
browse\browse.exe"
-56584150
56599487
87654321
-1441318715
1441355640
970699474
970664662
cmd.exe
-271196052
271287995
hgfdsshgfh
-1731820007
1731744170
hfghfgh
ffdsfdff.Name = 'ffhhg'
-563416015
563391858
-955752763
955774722
-482126464
482161448
Select * from Win32_ComputerSystem
Manufacturer
microsoft corporation
vmware
1752074802
1752107263
somerandomfile
-382118590
382181900
-1617769536
1617777597
824902518
824913874
Sum = {0}
MyClass.Name='abc'
MyClass.Name= 'abc'
757478654
757506633
RY6bZyQhP4YOWu6Ls6dsj9sHHKWVVRBM
RY6bZyQhP4YJazuqIDEW5JPzh1JnoEXB
DynamicDllInvokeType
5/gk07aa/po=
2050576810
2050602975
1794251861
1794292211
-392806141
392805980
593690908
593704690
-776775193
776836288
-2040214170
2040091329
1139450043
1139421635
-964568671
964431358
1701681962
1701616266
-546643122
546792252
1533318776
1533336681
-1167251596
1167200187
471208505
471205407
-2053163054
2053169523
-1557177687
1557307355
-145163591
145103933
229033964
229089213
1230030537
1230062128
-1170883281
1170969209
-1710313243
1710436235
KU8/w9o53l1GDmskmal5iQ==
yrm+oWxvC5SMgy0Fb7BN2jYQTyuVDTNM
wF3UkXMy2lqr7N95o4N+fOu0gPclzvKR
h6WkW5cgyO+i1fgGdSK8BSiL7IQ8YUZn
4VCsr/3BYPStz6Mbcn5TXQ==
i/XWFITTLPdwvZjzsXqlmhUMtLsSJE+U
pA7oQtGLfCjnz1k9yMOXjUmgzORhuu8C
cN+b6ia868Z5sdW9cNqJUuRoYYzkVgHH
P8W7zidNJIPANRAZ766U1Q==
VS_VERSION_INFO
VarFileInfo
Translation
StringFileInfo
000004b0
CompanyName
Tweakware
FileDescription
Antivirus Signature
Bkav Clean
Lionic Trojan.MSIL.Noon.l!c
Elastic malicious (high confidence)
MicroWorld-eScan Clean
FireEye Generic.mg.9284392fd96b31b3
CAT-QuickHeal Clean
ALYac Clean
Cylance Unsafe
VIPRE Clean
Sangfor Clean
CrowdStrike win/malicious_confidence_100% (W)
BitDefender Clean
K7GW Trojan ( 005819cf1 )
K7AntiVirus Trojan ( 005819cf1 )
Arcabit Clean
BitDefenderTheta Gen:NN.ZemsilF.34142.Bm0@aKZL5vfG
Cyren Clean
Symantec ML.Attribute.HighConfidence
ESET-NOD32 a variant of MSIL/Injector.VRI
Baidu Clean
APEX Malicious
Paloalto generic.ml
ClamAV Clean
Kaspersky UDS:Trojan-Spy.MSIL.Noon.gen
Alibaba Clean
NANO-Antivirus Clean
ViRobot Clean
Rising Clean
Ad-Aware Clean
Sophos Mal/Generic-S
Comodo Clean
F-Secure Clean
DrWeb Clean
Zillya Clean
TrendMicro Clean
McAfee-GW-Edition BehavesLike.Win32.Generic.gh
CMC Clean
Emsisoft Clean
Ikarus Clean
Jiangmin Clean
eGambit Unsafe.AI_Score_99%
Avira Clean
MAX Clean
Antiy-AVL Clean
Kingsoft Win32.Troj.Undef.(kcloud)
Gridinsoft Clean
Microsoft Trojan:MSIL/AgentTesla.JPW!MTB
SUPERAntiSpyware Clean
ZoneAlarm UDS:DangerousObject.Multi.Generic
GData Clean
Cynet Clean
AhnLab-V3 Trojan/Win.Generic.C4631686
Acronis Clean
McAfee RDN/Generic.rp
TACHYON Clean
VBA32 Clean
Malwarebytes Clean
Panda Clean
Zoner Clean
TrendMicro-HouseCall Clean
Tencent Clean
Yandex Clean
SentinelOne Static AI - Malicious PE
MaxSecure Clean
Fortinet MSIL/Agent.AES!tr
Webroot Clean
AVG Win32:PWSX-gen [Trj]
Avast Win32:PWSX-gen [Trj]
No IRMA results available.