Static | ZeroBOX

PE Compile Time

2021-09-15 16:55:21

PE Imphash

f34d5f2d4577ed6d9ceec516c1f5a744

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00002000 0x000b9024 0x000b9200 7.3792252038
.rsrc 0x000bc000 0x00000aa2 0x00000c00 3.84039365747
.reloc 0x000be000 0x0000000c 0x00000200 0.101910425663

Resources

Name Offset Size Language Sub-language File type
RT_ICON 0x000bc448 0x00000128 LANG_TAMIL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000bc448 0x00000128 LANG_TAMIL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_GROUP_ICON 0x000bc570 0x00000022 LANG_TAMIL SUBLANG_NEUTRAL data
RT_VERSION 0x000bc594 0x00000324 LANG_TAMIL SUBLANG_NEUTRAL data
RT_MANIFEST 0x000bc8b8 0x000001ea LANG_TAMIL SUBLANG_NEUTRAL XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminators

Imports

Library mscoree.dll:
0x402000 _CorExeMain

!This program cannot be run in DOS mode.
`.rsrc
@.reloc
_U*k@#
#8||q$cl@#
>;[8:M@#
[XZ_bX
[XZ_bX
[YZ_bX
[YZ_bX
#|*DL6
#=*}7}
[YZ_bX
[YZ_bX
[XZ_bX
[XZ_bX
[YZ_bX
[XZ_bX
[YZ_bX
[XZ_bX
##%)uK
[YZ_bX
[XZ_bX
[YZ_bX
[YZ_bX
[XZ_bX
[XZ_bX
[XZ_bX
[XZ_bX
[XZ_bX
[XZ_bX
[YZ_bX
[YZ_bX
#m#0}~b
[YZ_bX
[XZ_bX
#^&buG)
[XZ_bX
[XZ_bX
#._{e_
[XZ_bX
[YZ_bX
[XZ_bX
[YZ_bX
#zgX+b`
[XZ_bX
[XZ_bX
[XZ_bX
[XZ_bX
#,/u&kL
[XZ_bX
[XZ_bX
[XZ_bX
[YZ_bX
[XZ_bX
[XZ_bX
[YZ_bX
[XZ_bX
19QA#
#iq{A)A
#LV?t;
[XZ_bX
[XZ_bX
[YZ_bX
[XZ_bX
[XZ_bX
[XZ_bX
[XZ_bX
[XZ_bX
[XZ_bX
#sm@80
[XZ_bX
[YZ_bX
[XZ_bX
[YZ_bX
[XZ_bX
[YZ_bX
[XZ_bX
[YZ_bX
[YZ_bX
[XZ_bX
[YZ_bX
[YXnZ>
2aiZaY
$FEaiYZ
naifaY
fafeae
Xeeaff}
saiefYX
hu=k^_[
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADPz
\;V1Y2a
r3V1\;R:i
m,I.C$M%v
r3V1\;R:i
X=J'@)A
W2U8_6^
O*M W=U
o.K,?X1Y
O*M G.F
b#F!K,E-O}
;\1V?W
]:W0Y1R'
t|6%JoP
'@-J#K
}/<S_9
_%B/HXQ
%Bu</@<
N)D#J"
e$A&K,E-~
d%0W:]4\(N
6Q2U<T
4S>Y0X
?P;zx
m,3T)N'O
b#>Y4S:R
v7R5X?V>R
y8]:gC
l-@'J-D,
u4I.C$M%
U2W0Y1b
K G"E,D
\65B%@'N&u
V+L!F/G
o.C$I.G/
~-B)hq
Y0/<[.I H
U2W0Y1b
q0M*G I!
W*M G.F
}<Y>lk
7#L'fc
o.K,A&
;\1V_[}
Z)Nw$K a
P7P7Z2a
M*G I!
;\69R+
+2!N&Bk
!F03P.
/H"%.0
V,?P<X5A
|U,?P<X
6Q9,'8
H-'K-E.Y1Z
Np1S4V1t
|=X?S5]6f
b$A&K,}
_8T3Z2
@%B/H!I
_:]0W>V
R5X?V>m
i(M*G ?W
'@&A(@#
`!=Z7P
{6+8W9x
v%J!`e
5R@(B+8W;z
e$A&K,E-~
z;^9T3Z2a
e$A&K,E-~
z;^9T3Z2a
e$A&K,E-~
z;^9T3Z2a
e$A&K,E-~
z;^9T3Z2a
e$A&K,E-~
z;^9T3Z2a
[6Q8gp
>O)A)z,
B'@.J#K
\;8_6^
H.J'@(
P/H%B"J
q0U2_8Q9j
s2W0]:
c8z?X5R
A$C.I H
NK,A&=U
l-H/B%L$w
>Y4S6^
[0rG!l
Y>W?W8S
,LA&O'^1Z
?8+L!F
un154Q7
C&A,K"J
w6S4Y>W?
;\1V?W
Q9)F-l
K,E-J%
B%H/F.5Z1p
I.C$K#p5t
H-JO(A)D+
=Z7P9Q
G"E(O&N
|=X?x
J-D,'H#b
y8]:W0W?l
Z=P7^6
@'J-D,}
y84S>Y.F
|=3T9^5]
8_2U<T
M*G I!\3X
X=Z7P9Q
k*O(E"K#f
b#F!L+z
x@(G(
s2W0]:
O(A)'H
s2W0E"K#
K,A&O',C(i
xB*B-
L+F!H #K a
V1\;R:e
U0W:]2Z
Z2;T?~
M*C+5Z
\;-J#K
j+N)D#
P-J'@)A
P8)F-l
Y>W?5Z
:5 G.F
D!F+L%M
Q6\<V?m
i)M+G!D+{
f(M*G I!m
r3V1\;R:K
j+F!K%M&u
q0U2Y>T
,&A,K"J
5(;T@LQ8V2\
j+OsN+C,
7`|tn^
=Y?SL3
'K-E%v
w t3&
s^BSD?
f(N*?X1Y}}
*;]1W6
I&Q:jz
m-I$I.Gh
(y N*C
V@){,-
#G!MB%
GIXA-K"
fY2_5u
oR9_3?V>mu
LK$M
|f3V@)
A(K&A(
,&K,E-
B)B%L$
:i*P8m9
{ ?X1Y
]<R6w6
`9^:XWN
a E7Ke
i,$C.I
n1^:T;h
Wd'C%9
{YVA*z
j(N'OU
H!s3v7R5
B'@-_
>[<Q7)
[>Y4j!I
K#L N%d
v8^:O(A)
!G/H3m
P6QQ+Z
/A+k&*
D"=P7^|
;Z0Y1bS
]<C.I _<W=}Q
pg>+G!
1:T=o{P
%H.J(O
BE)H-J
J#q$}
w R7P=
~.B*lT
8V2\4
)E#K$',lK
/L|vzm
7Q9R~T
"I"E,D
cy{c2^6
/P?Y1W
X6R<Lp
[~5\8z
/L|vzm
g}>U3[
U3[4_0[
L P<-`
[V4/I!
v7R5Xx
(0tM&
H#D)N`
Xa!<*B
$Y9,L&
H1B/H!
F#D)fs
/I!J.:
(!E#O=M
aX3T9^
KL?)-K'
q8]:W0
gg2Y?S4
[4hz\
KFR!G/
(.)Z09_3k
;t3:T=
]9_J('P
4w%5R?
k9W=|R
KU$D*N
OsR7_8
1@&B0M$L
>S9y1O
>6Q<[2
*%I/G-
2`'v"H0
y9];W{
V9jP!G+
t4v$K
2\5g c
2L(j&y
k0r.1Z=TT
W1];R+
~%J!`x
[.^Q0\
b$B=V$N'
?[=Q6t
v2W0(O&N
WT8U3_
9V<\L#r
1<Z>T4
QT:M&v
E!G*Nr
*097RJ
H?d#G!
w0}9];
{JW0[2
)FEW1W;
GaD)A*`
v3?S<p
>I#2o%H0Z
Y/M*G81@
" M*C+
"{XB1W
a"g-E/}
S:jS>W
@/X{=Z>
qM^5\L
tsJI3`
OBPC&P
e%TB+k
X@SY@(F
I-K&V4t1g
X2mL4_8
m-I/B:H8
LC^C,EO
K-A'N;]J
k~3/L-E
J&M!9v
5H0^:k
G"F,L%b&a
E$D*VgV
k3X"n~
UTK%L(
\5_z2TK
9x!M+Zm
end%@'
m}uL&v
Ba"H0]O
$S=xfzA
ATI/T5]
EE(Z3sO
a@%L(
|R,c0l
pw8^:o
k!A>WT
4S}m~A%C.^,\G?V
,E/oRqy
U4Z>oB
_1Z0JE
M)O"Z(X
s)9v)\
I8oW:R
^2Y-=r
vo%J.
i)L@"]
?rHA(B
Gv)~7`
[LK(Pr
[\K|]:^l
"H&B+X
8g)M+F6TT
r3&!N%
HI1Y2y
d&C9IF?{*F
`-M!GF^
K/I$X&f#p
6a3]~?Z=
G{^<V?l
hAt9V2
SSJK"d:
m\S|D/HT
h0A%S`h
IFKM Pt
B?AU4^
.!Q;{6
E%I/FC
9!O"NOn
=]1W>k-Z
O+M \*Z
0Z4]VU
z)[%|o7\<
zA)n1U
~}A,nD
p,:j+s
SPDO*H
j,IC#\
L?c6S?
R+O#E,Y
<kVL+M
d=Zpy
qQ<~?S
!F/G8:!F
^.I$C*
a;X@M
Dg>[r!Gkv
~O(A6T
-=P7^6
B]&A(@
[jv0c]:^
qwL#H
k<qee
YXHyP=}
<#./JNC
_D^9R
zK;rZ3s
s5|l2N
5ip[4]
*dub3]
&I ,?Pt
[ZJeP=}U
wBBoG.p
[d%@Y8Tz
{Z4h+;:C
Km@0LN
FO@wj;U
qMq2X|
#chR;{[
cg&C$I
O<nZ?SX,D
lY=T<o
>6Q<[2
gZ<Q6_L
]-@'N&
%H/F.-
,H-J'@
|uMF(
ZJ1w~A%
<c:4'H\
;n!ni<T
el?P;z
|c!D#N>S
!S6Q<[
OZ>Y4SO#
t4}m1O
O$e}VS
8_2U<
l5H%B+
oThm.L
SVIhlA/
p5jko>R
U%H/F.
M:23VR_
w>T=5&IC"
e{:_8y
86%JB#
-w$K
S>Q6[<
h0yi-3
^8lxCu
7E"O(A
pE#pt
}4N7?,CI(
70oG a,
e)n_*j
06wEJy+?
9[<Q6t
4P5R?X
m,I.X;
cwL#l
I#D-E+@
9O(E"K
F-KF)"+
`.iX#a
t(M*G
6,A&O'
`1L!F/
dM)D#J7`
P7d,g
m}/J-@'
eP+L!F
)h.i\.8
u6TW527LDOf
%H/F.-
,H-J'@
_D)N'OU
u:_8U
]9\1V?
$?S5]M
_:]vi}
`4\8)d
h<T@|Y/
,L"FG6
yN)@(
] 2U8_
|>\<<[2Z|
+4\8zX
C&L,Z+
n1U3^*
=T3U9s
>C%M&`
](P:Su
Q7[=lg
bR-E.~
%.I"r2R
P#P8R:
Q7[=T=
oM"L%w0a
fK$'(hG
&G"P8i
H~O-K'@
,}NWdoi
_S7vyA+L
r3|>R5
aJ-G B#J
a IMx
^O#b[Z6Qt:h
y8[Y3T#h:U
+D,mH.C
|)^1V?W
M(O!F/G
;S8yL*E"'Lpk&C$I.G/
8u!H%B*B
W2U8_6^
H)N#D,D
R7P=Z3[
]:W0%M
V3U8_6_
K.I%B,D
vw$K a
'@-;S<p/D
Z]0W>V
n/J-@'N&u
q0U2_8Q9j
~?Z=H0Z3a
Q5S?Y1Z
O*M G.G
Q5S?X1Y
O*N$D.G
P5R?X1Y
P6R@(B*y
}<Y>S5]6f
b$B%H/F.}
y9];W1Y2b
f'B%H/F/}
y9];W0Y1b
f'B&L,F/}
M (I!r
i)T3];Z2`
\;V18P
I(H&O 0`"K
B,L$D2[
S9_7Q;T
T6RB&T=
S7Q=[3\
B(P>Z4]
K/I%C+D
W:]/I(@
"E'A0X
}=Y?S5]6f
b$B&L,F/}
y9];W1H
5IbEm
aG7u1Q
xIK!`:
PE -:M
2fYv<.
kXzc#'P
W(kpN|
x_@.5/.
SNycC>
'`j{hO
:X`1SPr
!)1[Fk
jW-iG:8
ZLNC#Nk
M24y1{
K:\1bc
T*0I8\
*I1\s
.dGwkx
&~4~Rz
j@]v=EL
Kqyhh[
)g8D'
RV_*M$T?
Flgl2/Q}
73o@@s
1$Zs0x^
+nE$pd
P~}X}+
o@r1q`$uY
U07fM2
>k!&}.
y|q Gb
eQC8:D
LDf5}s
+KZ?.45
+SZ!c,
+v|eh
<SHv2xYi
)U&,=_
6/Y6>[5;
AN9kpO]
/%[rooM
yRUH8/
8`ZXfY
b.~Ses
=#9/z
=`u8$<
PAJtBW
.aG?s|
=[=!\Ez
f6KHi.c"
!,K6Gs
8&\Gc+
eGp(O4
>r_tY+
Fm:W\4
V*Z@e'
1"3]}6
ml]'CW
_;1@pr
-w;IJ.
( S?a:
pA,;L}vT
KbH=q`
vzrN)A,
G+86QG
eOdp"v_b
d@cd 8
|<W#JP&
NiY^[qq
j&d5W1
H}!IOH
gq<)A'
`RiPgi
I54d'.7
'S|s~@H
AcRD0T
'\xZFP`
/#"< U
3 WL"(
jZK&?I]
MM1m])
mk4b|l
Rf!rIHdkd!
;$JroA
q_VX<<z!d
[Qklq8
H8bMxf
I|DVA*U9d
%jS{+5
VA7_Oo~m
A&9k:!
~^!I&a`5
HCAKQA
EDl([A
^6?>~=
CAxqruZ
}J\rf
NPh#})
IW=*n5
A"87kO
rcF8sV
6D"|s/,L
p!D\nW
Ho;;J7
l%y3[\
S>ikqy
,"p>-8}
pQOf\zl
k~UNSw
f,r,fm
YO7&gN8
Srove@
1B.z;?
2dnAtf?
gPI*!c
yS"5Gw
w*|6zMp6x
W0mP?aj
lqhBR=dx
c~(%eK
!,mw#8
ihRiKM
O19+*v
g5.`+M
nW+*6a
X:imz-
HLg4G4
6EB[ '
BrlFOO[0
Cyb^5k
Y[;NN\F]
v]k0K-
8F{|#$~
m0\:q8
$Xtk;F
h)[)z<
&{ePzqc
t)S6>Y
U<n!7x
:)!H3K>FJl
c0WT]_+
+_IMs'
U$W4&v|
dd-hqU
w9y-OJ&
E145=Y
"^/D==
A}/dW?pA
)us/Jj.3
mt0?}S
TQK2uVjV
KkUmFne3}%
6Vf`?K
5>v3J0<
1'D&b,P
?V4-Mf
=^7M"L
!n5c%,
h{K]?h
.m+YCkK
i#,gtM
E%\-Oe-0
e(+Y7i
>AQIuh
h<)_kG
_~|xio
EQ~oLM
getigQ*sE
nq)(@%
X*j2fA8
|g(s'S
`(JW\h
qDZ$Q"
HM(lI`Q
Sls}B.
GBVO9A
DVm{em
yg3Avt
XUpdSH
1m!nQF
kYvE}E
4dlP<P
a%F7o_
+"Rh}n
B%|X1!i
-\w?#S
?l9j!3
}oUNKg`$
vv/qz_
}Rs*W;2
xp((5
@@%7j =
620BSd
5<Q*~.
b@O-xV
.@5x*B
#~!Iz4P
U#2E4t
@B#o%
blQk]Z
f_e/aej
2*#0>c
"l+2>3-z
t.]==O
^08^{~S
StTZ>,
0\V<}P
_mI 'z:h
,upBZF
e|'ZuS
>Z9nUv
_i$afq
JO*.f P
K)j|E=
hBCX1M
D0=I*
ogp=_R
!X(<F7
1W"O^il
^hO|6C
-b8r5x
NU+9'j
>ZwuLOT
c4S}M_%J)-
8nl-Qu
JgJ7=5R
rH28R^
D1,';$
gO8a'w
a^'l'|
RkYt!0
,dM,z(
|Zp Y?hK&
>(W?Se
`4nw<
*e}V-$?0'G
fl{&uNE
m*+`#mLj
0BR$2sN`
dl>%a
7xup^w
V!@QB7
LuU$sj
e|?Vht~
P_FMsc
yx[wwf
L}-iX|
kE6d3Rxk
C@O.U9
W}/<F2
^tn"o]
Q3[K;J
'_8{WS
;AE|#J
8G;EwL
)Cj%p'
i|+0-E
^/vt5K&i
NjxG2-Tu
I;M!n"
m%~6*;C
FjIX_z,=:
\,P%-hUS
Gz4Lw
]2A+v|T
rB*V)9
(WrzOL=
mdOmvA
az!a5J'{
xX3j&!
B7~4i<j
ukf!-7
M54.y6
XxPtxbD+
OqcA_?
*YQb<r
[}r:2p
FiMXzH
CTq6(=
m(eI;SF
b[;#!!
PMbpX C
0p&Hv77
w{P~r'
')aH^B
GJXD,q
620J{E@T*
"1"\.~
=[Y]f~
H624?gQ
F_c~w:J#
~"94%
bg$N7
?F,<x
<h=97D
@\3~E#
b1pL~JAa
\YMgVs
h.wF*K
&j]aLum
}1BSp9
F){ Q7
Tf\h\A
sC`\Ff
jz` 4`
@*7P!L
Zig&`j
4unL7P4
T,VLMoW
w3`ecp
dN&r~@7
Xmqj_
.iQ#(O
0-0K;]
6'.r]G
aYVA!@"
zR''EV
(>+Iy2-
&%L(\@
IflB3D
c0ieoAP
R^4Fm9
Gt^1gi
SK&ZGKGY
X%$a9a5]l
=T :AB
r.ZyJLAf
!3v;C`!
sOE!IC
0|_hM,
+%(~HUwW
XU[4:QE
):C_r,x
CUJ-!I
4vAB&8h
-.Jy!<
B`OTPw
SH]TEQy
Af;S~fyA
s>#*Q|
~I_]XD+
|81\!U
:(,2{H
Yn@Wt_5]
\^mq;L
V)r7s>
Rm\rwf
GuSx5:
bH+kzG
SN&;G1
hf!$W
-6E51qWHt
YD7/*(
.QA>Zo
oI=HQm
K`!/-U
TxFq!I
7m>3;!d
Ioze:ly
g'62y,
{:SDX\E&
+_oxc!
}Aue~j
)C-7%OD
+TfLEJ
=(9WhJ
h*6fi=m
F(9|o
]2s00|<`
>R fd_3
Pw3i5 .MH
}7w[_c
_ct5wSA<
ysdVx
v3;ZYI
6QC7MN
'{n)_{
G.M*N
k/VolY"\y$@
?+VyjB
@hgJ^
1 R;g]
9Z;K)&?
:W/F&^
yqLFSN
[AA4T0
Hg*^|D
uV+J>
{]9,'h
Yy,N)L+
k}QwU-a
*GO8)I
`ID`c`
-4oi]T2i
hWHt3a
p_m0CX
+1XXh4&K
?aMUN"ovR
8qg|X
km6Fi6
QyYL#P
5GGYt2z|
:{L2?O
zpT--$
Jgyh)c
Da:jL9W
!GFtC{
<5FG,MK
sFxw5R
D=NoDv=
H\@*8f
+a(N#2<
WERht-E
R=Utpa1
3{eSX!*+fG
`ynUK3
noN>+E
\)b//g
1Dg)[,
<\0cI0
+wFT&O
texs4L,
7Z/Blu3
xz#;6Nm
i,|(Hn
XTz}{8
q k+Zw
fLX +P
kg*z;Q
bbS[V0
h{_yy*h(
ScIr*n
#1$I$0
l.~/K^z
3+ca&W
=S?rsJ/2s
`/<Xkn~
--M/9[
XH%[Mb
1`<a8x0d
iLm3'{
a93,B(d+
aAR cU
"K}ZXg
^QDx hx
<6BQr<
DiU`>P
fAzaU.)
%l,uaeFZ
CL}p].<\
Ui8v,B
\)pU$8
C}]Y(@
&?q=v~
Fox-)m
w'djK:
DE/"jD`
T"tf.
Vr0q5`
i=LN0w
)<Pbm-
q$gWjP
X5\8EM
XAc9Xth
.UPOc-
&JCl_b"]
34y"R
b;E.II
6P["njA
.)'cx`
yVzXh'
Art^#B'n
=zor}
a'#{=|
GQj%L{fh
J7i.Aq`
r?/i}!
01l<lc
2JZx*k
uL;,}q
]raO\k
#5_> m
KaRG ~
U)+`XE
,L.u$+
%ObaAS
-zh!9o
FjAc0
|eTD;$
?_b=?_*
|UYLX
~C&AS
x}(;I9
\}Yl6c
e[3*6M)
lG.NW4
9aQt,E
u9LH99-
I+f`$$X6
5`Bs7o
q;O:
|&m`NE
|u3r#Z
cD;0`
2&589Y
g :cA g
3)z;9l
|?6=\ho
dyWNV7/
R7*LVm<
)}',KO'
lLV5ae!Y
9R"1UI
i26l%
TWtbSU
Z7S/v;<
`Y9MH7+
-*s2_J
K #%B2
*F&jE87
@A9wUV
2kG|lB0
%CcK,f
@K,Umw
aj8ON5>
BpG}
A]|}Br8
XG,NUv
31`;K_
C&b`YI
2y+3va`0
P#$(&f
Z<!J0
b34=Vf
d'3@yJ
iWj\A"
~?fgGP
{4LJh2
k`K mY
39NE&(
~wTDL_FS
:HlBD-
w$d##M[
[[oY~Wv
z g=
'A)3,oR
?'|*w9
JT|z?|J
&G6EN
{{*jtP
e6>am+WH/s
gR8a'U
"s5HYkX
<VLw>R
&xVHC(
yzOu[F
d&kva{
O?MR[
L nunq
ZZ>DD{I
\TXvh)
o-mhzY
U=C&qv
7pLI\@
-eARfp
i@ZVD
^nP^*D
Iyy`gP
(S(RLd
2LIlOv
F%YBF'
mN7[ 6
J&!Yk('.
2OW_V;
TwMBfF
X{{|62J
CAss m
ik}!x7
QvM$.C
uSi$_Bh
n_VNx96p
z6d&93V
SU_><I
%`Gq1
w</ 2J
&IDOr
h8<ZVE<7
`:AlD
O$%WU0
DETbA*
iB@-G@S
FV(r;f
j%wmm10..
U]$"A
*L$7}v~t
#77w{Z
xZD\'B
UIpO$1
@Q9OY;
tbm(m
Fsa&68vDk
`aM1zB
v\ZPK{V
!*W,'k2
6@:uT`m
q&eY>L]Q
7nwxw
dWz&34r
=GH|cR.
4 Q]t`
p[{<:"
'L6}Y]
t*Y+;d
dWh;*
Sy&j]Q
U({xav
b<&ja0
:FL'0rf'
M7=,X+
6zv5yhS
>jSDE8
Jv,mD?
0V!C@"N
WGYM>V
nDF0/oS%
3@eA]g
Ct@|bq
W|$fO'?
0r]ht&lg
zt%T6@
FVJ7EU
3[[>?drO
v4.0.30319
#Strings
#fsdfsdf#
#gdfgfdg#
#gdfg#
#fsd.dll#
#fsdfsd.dll#
#fsdfsdfsd.dll#
#fsdf.dll#
#fsdfsdf.dll#
#fsdfdsf.dll#
#gdfg.dll#
#ghfh.dll#
S400_X0
<>9__311_0
<SortTables>b__191_11
IEnumerable`1
Queue`1
IEnumerator`1
SZGenericArrayEnumerator`1
List`1
System_QueueDebugView`1
M_hmacsha1
S_VFTABLE32
Olepro32
ToUInt32
TypeInt32
ToInt32
<namedArg>5__2
Func`2
<data>5__5
ToInt16
get_UTF8
Get_SAM1159
<Module>
EntryPointRVA
RegexFCD
ListDeclSecurityMD
COR_E_FILENOTFOUND
FILE_TIME
SMALL_HEADER_SIZE
WAGROUPING
WAMONGROUPING
GREGORIAN_ME_FRENCH
ORDER_YDM
_UTF8NoBOM
DX_YNN
S_RETURN
System.IO
CORSEC_E_CRYPTO_UNEX_OPER
DEFAULT_MAJOR_RT_VER
EXTRA_SECTIONS_ALIGNMENT
CERT_QUERY_CONTENT_CERT
S_COBOLUDT_ST
MacOSX
get_FindData
__FixupData
M_rawData
mscorlib
LoadCertificateFromBlob
IsCharSetNotSpec
System.Collections.Generic
CreateStaticGeneric
get_IsStatic
get_MessageId
HashAlgId
System.Diagnostics.SymbolStore.ISymbolDocument.get_CheckSumAlgorithmId
GetProcessById
_canRead
lpNumberOfBytesRead
hThread
get_CurrentThread
thread
Advanced
ExceptionRecorded
get_Speed
Get_IsManaged
get_IsAttached
SafeUnescaped
_32BitPreferred
IsAllocated
M_unrestricted
Inherited
Unstarted
MaximumAllowed
typeSigAndExtraData_isInitialized
NewRid
ThreadIDField
set_IsBackground
set_Method
DynamicMethod
IsCompletedMethod
DefinePInvokeMethod
ResolveMethod
GetMethod
NetGuard
NotWord
Net_uri_BadUserPassword
fsdfsdfsd
NetworkInterface
get_IsInterface
Replace
InternalPreserveStackTrace
CheckCanCreateInstance
LoadResource
FindResource
SizeofResource
FindRdasdsesource
GetHashCode
SetCode
CryptoStreamMode
AddUnitNode
Xenocode.Client.Attributes.AssemblyAttributes.ProcessedByXenocode
Set_Cookie
EndInvoke
BeginInvoke
Get_Table
M_handleTable
WriteFirstLevelTable
Set_GenericParamTable
NestedClassTable
GetEnvironmentVariable
Enumerable
IDisposable
Stable
set_Visible
Get_AllInternalsVisible
get_Handle
RuntimeFieldHandle
get_MethodHandle
RuntimeMethodHandle
GetModuleHandle
get_TypeHandle
RuntimeTypeHandle
CloseHandle
GetNativeHandle
GetFieldFromHandle
GetTypeFromHandle
AddFile
Console
get_Module
DefineDynamicModule
IsManifestModule
set_FormBorderStyle
get_Name
Get_StandardName
GetModuleFileName
UnsafeGetTempFileName
FilterTypeName
EnumFieldsWithName
ParseCanonicalName
GetDeclaringTypeFullName
FixupName
_AssemblyName
GetDirectoryName
Assume
ReadLine
WriteLine
IsPrivateScope
UserDefinedSubType
get_FieldType
DefineType
CreateType
ValueType
get_DeclaringType
M_enclosingType
M_enumUnderlyingType
flAllocationType
get_ReturnType
get_ParameterType
GetType
Get_PropertyType
Set_IsFire
System.Core
ResolveSignature
SetLocalSignature
MethodBase
ISCIIAssemese
DoNotDispose
Truncate
TryCreate
CreateDelegate
MulticastDelegate
HasState
set_WindowState
FormWindowState
CreateSeparatedSite
AllowTrailingWhite
STAThreadAttribute
CompilerGeneratedAttribute
UnverifiableCodeAttribute
UnsafeValueTypeAttribute
BabelAttribute
SuppressIldasmAttribute
AssemblyInfoAttribute
YanoAttribute
DotNetPatcherPackerAttribute
BabelObfuscatorAttribute
CryptoObfuscator.ProtectedWithCryptoObfuscatorAttribute
DotNetPatcherObfuscatorAttribute
DotfuscatorAttribute
CompilationRelaxationsAttribute
ComImportAttribute
SmartAssembly.Attributes.PoweredByAttribute
RuntimeCompatibilityAttribute
SuppressUnmanagedCodeSecurityAttribute
CodeAccessSecurityAttribute
ReadBytesUntilByte
System.IConvertible.ToByte
BlockSizeValue
SetValue
get_IsAlive
mgihSokAeg.exe
get_Size
TableSize
Get_InputBlockSize
dwSize
Resize
SizeOf
fsafafaf
fsdfsdf
HiddenThisParamDef
PropertyDef
Ldind_Ref
Get_IsFieldRef
ModuleRef
GetTypeRef
get_IsByRef
fafffffffff
MethodDefOrRefTag
VerifyFlag
mgihSokAeg
gfdffffffg
AddStandAloneSig
System.Threading
Encoding
IsLogging
Ceiling
FromBase64String
ToLongTimeString
OutputDebugString
Get_VersionString
UnsafeToString
FixedSysString
GetString
DefaultString
UseHebrewParsing
TidyMatch
Stringmatch
gfhhfhfhfhfhfhfhfhfhfhfh
CharUnknownHigh
StackBehaviourPush
GetFileMUIPath
get_ExecutablePath
GetLocalPath
GetFolderPath
ObfuscatedByGoliath
get_Length
PtrToStringUni
GopherUri
AsyncCallback
callback
EmptyStack
DefineFieldNoLock
GetDynamicModuleNoLock
BeginCatchBlock
FlushFinalBlock
Get_CanSeek
Nullmark
ClassicBindingMask
PathIriCanonical
E_CannotDisplayCanonical
Marshal
FindCacheNormal
RemoveInternal
NIsTransientInternal
CalculateStackUsageNonCall
advapi32.dll
kernel32.dll
SharedLibPublicKeyFull
Control
VersionedStream
CryptoStream
MemoryStream
ReadElem
FamANDAssem
get_Item
System
SymmetricAlgorithm
Get_HashAlgorithm
ICryptoTransform
SequentialScan
get_MetadataToken
ToEncodedToken
TimeZoneToken
BuiltInGetToken
lpNumberOfBytesWritten
PositiveSign
SingleDomain
AppDomain
get_CurrentDomain
Get_HotHeapVersion
GetKeyReadPermission
Application
get_Location
HasMethodInstantiation
System.Net.NetworkInformation
MethodDeclaration
Set_Generation
Annotation
NineRays.Obfuscator.Evaluation
AddCompletionAction
System.Reflection
ManagementObjectCollection
CallingConvention
RuntimeWrappedException
InvalidMethodException
ArrayTypeMismatchException
InvalidOperationException
TaskSchedulerException
Get_RFC1123Pattern
GeneralShortTimePattern
PartialWriteTo
GetDynamicILInfo
RslvExceptionsFieldInfo
MethodInfo
FileInfo
UriInfo
FileSystemInfo
MemberInfo
ParameterInfo
ProcessStartInfo
TextInfo
DirectoryInfo
DeletePinvokeMap
System.Linq
set_ShowInTaskbar
DaysPerYear
GroupChar
GetNumber
ImageOptionalHeader
DESCryptoServiceProvider
MethodBuilder
ModuleBuilder
TypeBuilder
AssemblyBuilder
SpecialFolder
SetEncoder
lpBuffer
ResourceManager
Debugger
ManagementObjectSearcher
LookForMyCallersCaller
FrameDescHelper
MutexTryCodeHelper
IPv4AddressHelper
CreateProcessAsUser
RegexInterpreter
writer
get_IsPointer
BitConverter
WdmDriver
ToLower
ModuleDir
GetTokenFor
PercentDecimalSeparator
IsDirectorySeparator
ManagementObjectEnumerator
GetEnumerator
.cctor
dotNetProtector
get_IsConstructor
CreateDecryptor
FieldPtr
TypeIntPtr
ToIntPtr
GetMarshalAs
System.Diagnostics
Milliseconds
fatMethods
GetMethods
GetAllNetworkInterfaces
System.Runtime.InteropServices
System.Runtime.CompilerServices
System.Resources
mgihSokAeg.resources
EndWriteMethodBodies
mdTables
EnableVisualStyles
GetGroupNames
Get_HasSpacesInDayNames
CorLibTypes
NestedTypes
EmptyTypes
set_Attributes
MethodAttributes
FileAttributes
TypeAttributes
MethodImplAttributes
GetCustomAttributes
M_ctorAttributes
ReadBytes
GetBytes
GetSizes
Get_Flags
ModifyComImageFlags
BindingFlags
M_bindingFlags
GetMethodImplementationFlags
SetImplementationFlags
Get_HasBigStrings
PropertyChangingEventArgs
DelegateEquals
System.Windows.Forms
Contains
CallingConventions
get_Chars
M_checkForIllegalChars
NumberOfLinenumbers
Get_StreamHeaders
GetOptionalCustomModifiers
FireNextTimers
GetParameters
get_IsClass
Set_Access
AssemblyBuilderAccess
hProcess
GetCurrentProcess
lpBaseAddress
GetPhysicalAddress
lpAddress
IPForWatsonBuckets
Set_PreserveUSOffsets
set_NumberDecimalDigits
GetDocuments
get_IsFat
Concat
HexFormat
Get_IsCOMObject
ManagementBaseObject
IsComObject
GetObject
ManagementObject
object
Select
flProtect
FatMethodsDict
System.Net
_CharSet
AllExceptIntranet
_nameSectionOffset
op_Explicit
System.Reflection.Emit
SchemeLimit
SetCompatibleTextRenderingDefault
IAsyncResult
EnumResult
result
System.Management
M_increment
Environment
Document
get_Current
CheckRemoteDebuggerPresent
IsDebuggerPresent
M_Event
GetParamCount
Get_SpinCount
M_fixupCount
Get_ProcessorCount
NoteCaptureSlot
ParameterizedThreadStart
Convert
Import
FailFast
WebRequest
GetParamRidList
AllowAnyOtherHost
set_Timeout
MaximumMatchTimeout
SuspendLayout
ResumeLayout
MoveNext
System.Text
CryptReleaseContext
ExecutionContext
context
RawENCLogRow
RawAssemblyRefProcessorRow
set_CreateNoWindow
ByteArray
ToArray
get_IsArray
CheckConsistency
System.Security.Cryptography
DefineDynamicAssembly
Get_CallingAssembly
GetExecutingAssembly
ThisAssembly
NameAndPublicKeyTokenOnly
BlockCopy
GetParametersNoCopy
FreeLibrary
CreateDirectory
op_Equality
op_Inequality
SNegativeInfinity
HasAuthority
System.Security
SuppressUnmanagedCodeSecurity
IsNullOrEmpty
198 Protector V2
System.Security.Permissions.SecurityPermissionAttribute, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
SkipVerification
WrapNonExceptionThrows
_CorExeMain
mscoree.dll
"""""""""!
""""""""""""""
"""""""
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
<assemblyIdentity version="1.0.0.0" name="MyApplication.app"/>
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v2">
<security>
<requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3">
<requestedExecutionLevel level="asInvoker" uiAccess="false"/>
</requestedPrivileges>
</security>
</trustInfo>
</assembly>
mgihSokAeg
GetEnvironmentVariable
1406557076
1406608113
_ENABLE_PROFILING
_PROFILER
-1768432936
1768498745
-1883097753
1882983067
1750985408
1750969133
-817095175
816982299
923222072
923142114
-1741242489
1741164277
-731816482
731840661
1819614340
1819622610
-327232323
327234513
-386535812
386648753
490382829
490375031
-1140596114
1140675781
1116399275
1116470777
-1686265928
1686351891
204305900
204339869
1069680209
1069696195
1389639076
1389737848
-906522511
906568124
-1518403384
1518373564
1904233368
1904272398
2146402986
2146341172
1740468391
1740448040
-1098153668
1098124633
-1795321916
1795421071
-237815673
237872405
187719129
187699278
-1436621918
1436649114
-159921814
159929589
-325992053
325986642
-1757758137
1757754957
1350995775
1350982702
96196093
96200940
-184786808
184753605
-1621332548
1621239047
-1010931277
1010951916
-1088012686
1087963720
-1042318415
1042362989
-1000338938
1000275564
1766755178
1766733515
-1401103521
1401046648
1786319706
1786330164
-855878816
855879334
1315890207
1315946078
-972360823
972341313
1885179847
1885165171
-944434023
944381643
1004099453
1004128546
1825908685
1825907685
-1313703347
1313706451
-950924901
950809408
-381267117
381245856
-239634515
239708117
1041918945
1041940762
479279288
479285213
1557633561
1557626296
801834050
801850168
-1518763727
1518833124
-476169541
476061723
-1079655407
1079519705
-553339976
553334191
743327143
743384851
1799760245
1799780066
359979524
359979897
-1928105194
1928096699
531425174
531490422
-396467546
396598341
1198084616
1198067343
1045522449
1045551634
-1883271349
1883347012
-44332495
44362695
-1788461390
1788346926
672965669
672968791
181291459
181311237
220648698
220620247
-1029267571
1029205016
1561941950
1561975112
1192742661
1192736299
-1996780610
1996843285
1064878680
1064949439
-1471546092
1471589037
340400569
340434611
-1848300077
1848255360
124740893
124716485
-255077084
255111191
820470188
820450392
2072831317
2072798253
-17088330
17156077
99573104
99604204
276312360
276372507
-1587424131
1587326564
-1825448418
1825466192
-712267027
712303007
-2014842985
2014987640
-365279429
365178846
1411078917
1411059110
-1864367465
1864178964
-1104347743
1104239934
-323170819
323112443
2005428943
2005446754
-962316009
962291256
386273140
386277407
-948898383
948862780
1660442034
1660460286
-1835329401
1835444465
1878051145
1878101092
-1355510185
1355506786
-1073395633
1073393001
-605859368
605891841
1620500572
1620489474
-1646542028
1646560011
-1061661640
1061612122
1366159602
1366149077
-462361679
462385217
321764715
321692123
-71187240
71207987
-2030993070
2030830419
1266280106
1266251093
-245776740
245768801
-1741156482
1741081599
1405010190
1405071854
-731083927
731022037
1971223043
1971224348
-591398886
591445346
-162957659
163037485
1576545942
1576560426
1917236534
1917202547
-279842588
279854756
-147124893
147174445
-1011381848
1011385149
831447641
831399476
-1554193031
1554248028
-2128951594
2128909632
1705126723
1705147207
1988941920
1988896219
1640762354
1640828236
570278693
570213314
-1911226937
1911266902
561943281
561935142
1349803733
1349808401
-217823541
217720211
-442673998
442741203
2045431058
2045413156
-1916812812
Antivirus Signature
Lionic Trojan.Multi.GenericML.4!c
Elastic malicious (high confidence)
Cynet Malicious (score: 99)
FireEye Generic.mg.334a47ca828db802
CAT-QuickHeal Clean
McAfee RDN/Generic.rp
Cylance Unsafe
Zillya Clean
Sangfor Trojan.Win32.Save.a
CrowdStrike win/malicious_confidence_90% (W)
BitDefender Trojan.GenericKD.37588470
K7GW Trojan ( 005819cf1 )
K7AntiVirus Clean
Baidu Clean
Cyren Clean
Symantec Trojan.Gen.2
ESET-NOD32 a variant of MSIL/Injector.VRI
APEX Malicious
Paloalto generic.ml
ClamAV Clean
Kaspersky UDS:DangerousObject.Multi.Generic
Alibaba Trojan:Win32/Kryptik.ali2000016
NANO-Antivirus Clean
ViRobot Clean
MicroWorld-eScan Trojan.GenericKD.37588470
Tencent Clean
Ad-Aware Trojan.GenericKD.37588470
Comodo Clean
F-Secure Clean
DrWeb Clean
VIPRE Clean
TrendMicro Clean
CMC Clean
Emsisoft Trojan.GenericKD.37588470 (B)
SentinelOne Static AI - Malicious PE
GData Win32.Trojan.Agent.XAH3J2
Jiangmin Clean
Webroot Clean
Avira TR/Injector.qqlub
MAX malware (ai score=82)
Antiy-AVL Clean
Kingsoft Win32.Troj.Generic_a.a.(kcloud)
Gridinsoft Clean
Arcabit Trojan.Generic.D23D8DF6
SUPERAntiSpyware Clean
ZoneAlarm Clean
Microsoft Trojan:MSIL/AgentTesla.JPW!MTB
AhnLab-V3 Trojan/Win.Generic.C4631686
Acronis Clean
BitDefenderTheta Gen:NN.ZemsilF.34142.Um0@aayzc!hG
ALYac Clean
TACHYON Clean
VBA32 Clean
Malwarebytes Trojan.Injector
Panda Clean
Zoner Clean
TrendMicro-HouseCall Clean
Rising Clean
Yandex Clean
Ikarus Win32.SuspectCrc
MaxSecure Clean
Fortinet MSIL/Agent.AES!tr
AVG Win32:PWSX-gen [Trj]
Cybereason malicious.3b0b23
Avast Win32:PWSX-gen [Trj]
No IRMA results available.