Static | ZeroBOX

PE Compile Time

2021-09-28 11:09:55

PE Imphash

f34d5f2d4577ed6d9ceec516c1f5a744

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00002000 0x0006df44 0x0006e000 6.66683083757
.rsrc 0x00070000 0x00010e3a 0x00011000 4.06371839997
.reloc 0x00082000 0x0000000c 0x00000200 0.101910425663

Resources

Name Offset Size Language Sub-language File type
RT_ICON 0x0007018c 0x00010828 LANG_NEUTRAL SUBLANG_NEUTRAL dBase III DBT, version number 0, next free block index 40
RT_DIALOG 0x000809b4 0x00000076 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_GROUP_ICON 0x00080a2c 0x00000014 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_VERSION 0x00080a40 0x00000210 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_MANIFEST 0x00080c50 0x000001ea LANG_NEUTRAL SUBLANG_NEUTRAL XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminators

Imports

Library mscoree.dll:
0x402000 _CorExeMain

!This program cannot be run in DOS mode.
`.rsrc
@.reloc
@[@Z(e
f*&+_@#
@L@Z(e
[@Y(e
@U@Y(e
@B@Z(e
@]@Y(e
@L@Z(e
wX}c@#
`[@Z(e
fU-"e@#
@B@[(e
`^@Y(e
|0c^@#
@Q@[(e
^@X(e
[XZ_bX
[YZ_bX
[XZ_bX
[YZ_bX
[XZ_bX
[YZ_bX
[YZ_bX
[XZ_bX
[YZ_bX
[XZ_bX
[YZ_bX
[XZ_bX
#]a7?]#
[YZ_bX
#~-2*s
[YZ_bX
[XZ_bX
#@@6(q
[XZ_bX
[XZ_bX
[YZ_bX
[XZ_bX
[XZ_bX
#,gu4
[YZ_bX
[YZ_bX
[YZ_bX
[XZ_bX
xz@[(e
[YZ_bX
[YZ_bX
[XZ_bX
[XZ_bX
#X,go4
[YZ_bX
[XZ_bX
[XZ_bX
[YZ_bX
[YZ_bX
[XZ_bX
[XZ_bX
[XZ_bX
[YZ_bX
[XZ_bX
[XZ_bX
[XZ_bX
[XZ_bX
[XZ_bX
[XZ_bX
[XZ_bX
[XZ_bX
[XZ_bX
[YZ_bX
[YZ_bX
[XZ_bX
[XZ_bX
[YZ_bX
[XZ_bX
#HK?L;
[YZ_bX
[YZ_bX
[YZ_bX
[XZ_bX
#X1YVD
[XZ_bX
[YZ_bX
[YZ_bX
[XZ_bX
@M@Z(e
#nNMV*C
[YZ_bX
[YZ_bX
[YZ_bX
[XZ_bX
@D@X(e
@F@Y(e
[XZrgG
[YZrCH
[XZrWH
@D@[(e
@@@X(e
[YZrgG
[XXnZ>
#v=~n8
zIaiXY
&iaiZ}
waiZeY}
]|!m H
|MaifYZ
xaiaaa
*aiaaf}
ZXafe}
4aiZfe
3aiZYY}
0QaiYY}
|aieYX
IaiXfYZY
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP\"1
a+@/L+
h)[0_<[5R=Q
h)[0_<[5
s^,G(K
s_0S4Z=R>
N<W8[<R5ZV
]=P>Yd
G5^1R5[<S
ps"P;T7@.I
z;I"M.9W0_3r
K9R=^9W0_3r
K9R=^9W0_3r
K9R=^9W0_3r
K9R=^9W0_3r
K9R=^9W0_3r
K9R=^9W0_3r
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
Y+@/L+E"M!`
z'M#@'
oKZ*xh0
9K?9M'I
XF@D#z
v]*D#L
Y5#ig]=Z
C2d`Kc ?F_!
{V-O"r
XO5U'L
C$P4T}
38\@(-L%b\
T@$D(X@7
vM'E#D
K8\@(ylQ
:U?];'&/
[ S1WC
)&M/IY
-F&B&?N
bY:Z>]
z=V6R{fS
N%M/IF
J(L,8Y0PJ
_\6V2U>]>
yq~%M/IR{Z
<S>^:c^
_2R6W:_<
[6V2I6a"
nQ@$D2
B]4X@v
vp}"W5S
[$T8`{
+fvp}Z>^:
yq~M+I/
f9_=[2
d/I+M1
^=[9_A4TE=
(w D$49D
IF1S5>B
I:]?Y~qh
P'O-KIh
:\@(bh
,xr{L*J.
?*yq~A5W1k
CPF&B+
c,J*Nx
,#R2VAL7
K*J.<q
0?Q3Uw2tME
!O-K.e
"N.J#1
Y\9'`E
]6Y5$n
FN%K(P}Z-
^,H'9nw
]S=[4YW_,
}-G(K,
z4X?Q6
S>U;X?
}7Y?P=
LE+H0^.O
e H&A.
CF&A/H
3Lj9VxE
_J.A-l
c%K(O!
$y('mw
v3U;\3,
XM#@'I
*If3L_S
Jl@$2M
[B*E&A
ZM+D(i
}/L+F!
TT4Z=R
~6R<\3T6
_$*J9}
6R3\0!
fx'K-C
9":T3tr
wV=J-B.
lSX8V1
hW8_0\
z{{\B&I
-Y+Q9V
hz^"Q;
y.|>L'
SY+kfJ
^,G'D#Mc
&A/H?K
j%|&J'
o5M+I/
1T3\H,R9V
W<SH=H/@
[A3V5R
x P=@3
}56Y?Q
oI!B%K
/8`4Zh
/4J-C$<
{,N!G@
iz9[8z
-f]F!N
M"I3!U
(^V9x
IO\3P7
c$6$U>
33oA8
I.O)HGm
%W3]2"h8
7pJ4F-
3]2ty}
mDBR=^
fB&A.BE
cw!H(E
ps1C(G<%
N4|41H
5Il\2v
w"LGOD_
V<x3(b
L/8V1O
d5:Q4Wi
7@"A&H
O/I(O L
{49%I%
dR+J$C
A"L+D(
'`:=R5
@vv)D'@
Y4S<h(B(G
vJ$A)E
!2P>U5Y
$G*N9K
x G N"
%f]H0_
@+D'@
d.2=^9
d%WT/O)H
EO5+G
^QCq0B
5A+E'AG
R=%F!Ob
l.]7XS
U4[8w
9jP6X
&uO\g?
wT0!kGv
(xmSl7
+L&B.B
"bOB%;
$Ae(<r)3
kG>H$t
m.O)Hh
HjQ8W1
3`KD1W
9Y?Q|r
fN C$J,
aE@*\x
m3IT$
<\3U7W
S5\<6<^
K-D$&$>$
HM DiD
\3`"Q+
WZ4a,(}
_0S4Z.
K+D(ic
e+(E&A
K:V;z N
ZU'_n
@J*3O(
-C!GA O"c
^DL$G
g (7D/
q6|R!K
#XW4Y6Z
0.M*<[
q.i4[7
y*E.I'
dO'I.A
u1!%N!
|}?Q>R
aj%(\3_
?lA?Y8
nH.A-l
o{4[6RU
u&]L1V9
fuH<X8s
m)sk-O)8
x3T4[T\Z
P:XE&A
l}6]2t
2iL5R=
["S9WL
X%^6ZQRP7X
r\;];V0
|V<S0W
^1V2]R
jq0F.B
dN4S<
kBJH(L
2qh"E+
lE-^1R
J%J)N
,K%BEK)[0
Z9vS!M!
&)I.?X7[
*Q?X7[b
_T]U2]
BH|3P7
E7W8[<g
{0V/@,
kqX#H'\{M+E
.td5V1
4E.@#D*
ru/=R1
on5J"N
{:H#L/
(6S<_8
=2Q6W0_3
u.%@.I
0;T7P/
l6$|x
:Dx}>T8`
Mo(D#M
k[0U6Q?
Bu*}N!M
s0s2@
J-J$C,
>un8_0
Z5[9_2
"1T8y#
jF!<R5Z
G!O$e/
kb9S4Z
`9yK%G
*H2^3r
~1[{:H
=r_)F*
)^p\2U
@?`O L
JEEm,^
|7@ G(
3wIC)G9G
3YoK(O
cY1^=Z
U66Q>RL
bM"E*F
})w[0_
z1C(_U
hW8_0\
POdY6Z
<h V>R
k-F C$
[OS*B.
?\)N!L
1Z+H/A
<s2E*F
w6:Q>\;U2uy
onM-J$
*eF)G,
"=.=Z4
Z=>]:T4
]1^2sx
'Q0_<Xv
C%8W;(r
<k/J8S
^>R?Kg
#W9[T[
<h>1Z5
MFkxp
X_KK K$
Y;]4F);zA
hE*A$G
q6K,9UM
@l|$L0
D,G(G N)
z]6S<y
76B)Fm
k1S<_5
AF6"P;
.U2T:]
bC)|ZJ
;Z3]?m
,XqJXsPpeKTo@[i
9r/D$L
zS[7Y;
;py(P@
'J,C/5
bKK)D{G
o{AK#]
=H%/Zn
wdF]p"
H*'Ez*I
9g9FV/
0~GtCI:[
A2P)A%|
&].J.B
Bj4-x[&
Y;\1V9
y-C#KeJ
AEZ/~6y
o0w?C2Z
{L*eZ
5~U{Rr
q'/Tv'
*K,A-l
YO<U:|
Z8~"N#
LJ6Z7&lJ
p3^C%L
p3jD$K
|V<S0W
4_0SL*
. _-FA
C@)H0_Ko
/d;:]2
4RM#4v
w33F.B6+
)B-N)G
R J%F!
<H\36@
iq0B)^@py
_s2@+\
2x7\3P
&R9VM
S:Y>h-
Z&M"Yx`
T1_8oKT'M
T1_8Q=|
8w !N"
x,",G(
b;?B.N
~#N!B%
!j/@#D
&a15[<
&W$O C<
M:"Q#H
iU8?T;
Fz/Q:U
%f%9^0
t/$=Z5
7p8mt
@Gw,^5
2#-C^:
2q&H0_
K8%H0_
n3A*E&
4OU>Q2U
$d#@'I.
R9W0_3
u"A&H/
.a!a!T
X7]3P7Y>i
}^0S4Z
xB0r}R9
W@.I%HB
dW7T3]
w!I'L%E3]?%
(\P-G)
A7^2R5
z.x)D,
:`.N.J
"@'B-K
7Y.@#D
$=^3`"
:L'F"M*
4kr(H%
;g)\8o
@=S@~H
|PK,B%J
}e/D+H/
1$6o_#
RH=}T-
"<D&&Z
$hd&o-
r]9\U+
h0J{cK
@15MiL
jTB0[2D
t+E'7,
y:9QhE
R{R K$G
=W[A8S
`U%)f]K
RF'3Fl9
<h)[0_
+$137"
@`!SBk
LEN.G%Cl
y56WRN
iz,j+F"
?j@P<Tt+E"M!
8l-_4[
bK"P;T7
E9UO!NLV=R1V
gCnm%=
fh?Vp>
C~x?;Y
O+Clm
lI4S0o.A
JynxiY
@VlI._
H6QMH<
9iVZ%uFf
R&=gW
c]ll"%
IR2yxT*
wQ"KY`F
'yrr Gqhp
Y8>/)NO
r!W'6m:
G&.GqA
w5I:mG
45Zr1;(
m/1\v)%
.?fU-M
g8u]S<
.W&4vB
B#89D'
EH>C<r
Y{NJ7"
*HT{iJ
c#iPx_N
PcOV/1
~^vmO@
|6GEvu
A~65-(
KaRNOE
C*zV2\
0}I2++
3xJU/VCd
KB`m4_
gi8&^K
SiF7S&G
1=!jk}
6<&2Q~
%6/7@@
P*V6Jm
R0LKP*
Ai5LpV[
#W/=hW
}+]jU)3}
k"G6Xh
emU]_*
pM;aC&
z0|Tlx
CiW2C\
)"([c"--
S\91 lR
LVHf}{
)q5CD'U
5f|!/a
3$,AE$
;kFz1}
hbth3B
{v0'}0
75\Ljj
[MR~\>
fBjsWj
GW98m^C
\yOc/k
9w#hV2
LG1"nf
y+_a$tQ
*.tw%\]
Zv9A"}
]cS\<w
}c/!3uL
,^g>WF
LG{ @#E
Gro(s#GZ
W"eiQ[veE
~"sVDp
Pu;<U2;
#:0'V
K1#Q?$
7-A+lEm
P>l<](A
@e])XP'B
VZ,(py-
]nmN,D
!cF9jn
ETFpN$
y/ gi7
C&(`i3
qf+Y@l
BkW8&z7
=tmw%p
q2M<e.
7`+5om(!/ZY
Bg<d4)
v4.0.30319
#Strings
#fsdfsdf#
#fsdfsd.dll#
#fsdfsdfsd.dll#
#fsdfsdf.dll#
#fsdfdsf.dll#
<Maifan>b__0
<Mabin>b__0
<oigbacdFlep>b__0
<Mabin>b__1
IEnumerable`1
IEnumerator`1
List`1
CS$<>9__CachedAnonymousMethodDelegate1
<GetContactInfo>b__12
S_SLINK32
ToUInt32
ToInt32
198-Protector-V2
Func`2
CS$<>9__CachedAnonymousMethodDelegate2
<>c__DisplayClass13
Get_AddressField3
CS$<>9__CachedAnonymousMethodDelegate3
TraceLevel4
ToInt16
get_UTF8
<Module>
bmkdmhimemA
get_ID
set_ID
ListFieldDefMD
WM_SETTINGCHANGE
PinvokeOLE
aoAgibgioaF
koAlmifkApF
AmlSeaemhpF
S_ENDARG
aoAjmSoIdFI
LOCALE_IFIRSTDAYOFWEEK
KEY_CREATE_LINK
COR_E_SEMAPHOREFULL
GetDayOfYNN
System.IO
LOCALE_IOPTIONALCALENDAR
ReservedByCLR
INVOCATION_FLAGS
lmnIdpcrSmS
CTRL_C_EVENT
KEY_EVENT
SkoaofgnrFa
knbepdIgIa
Fdkidmpbnba
get_Area
Get_HasExtraData
SizeOfRawData
Get_PointerToRawData
rcdata
get_WritePdb
mkppjbmpgeb
hhhhhhhhhb
mscorlib
Smnkrjjdepb
ResolveTypeSpec
System.Collections.Generic
get_IsStatic
CreationTimeUtc
get_Id
set_Id
GetProcessById
lpNumberOfBytesRead
hThread
get_CurrentThread
thread
dddddddddddddd
fsddddccwwasgggggggggggggggfasfasfasfasfwwwwwwwwwwwdddddddd
Get_IsManaged
get_IsAttached
InternalParamIsDefined
NotOnFaulted
FReserved
_currentIsValid
<ID>k__BackingField
<Kind>k__BackingField
<Average>k__BackingField
<Phone>k__BackingField
<Email>k__BackingField
<Last>k__BackingField
<First>k__BackingField
M_append
Get_Kind
GetSecond
set_IsBackground
DynamicMethod
DefinePInvokeMethod
GetInvokeMethod
ResolveMethod
GetMethod
method
NetGuard
Get_Password
fsdfsdfsd
fsdfgcfgggggggggggggggggafafasfafsdhhhhhhhhhhhhhhhhhhgsdgsdgsdgsd
get_IsInterface
Replace
Sequence
LoadResource
FindResource
SizeofResource
mySide
GetHashCode
SetCode
CryptoStreamMode
Xenocode.Client.Attributes.AssemblyAttributes.ProcessedByXenocode
NLoadImage
get_Average
set_Average
ajaraeFalje
EndInvoke
BeginInvoke
HotTable
GetEnvironmentVariable
Enumerable
IDisposable
Serializable
set_Visible
Double
Circle
get_Handle
RuntimeFieldHandle
get_MethodHandle
RuntimeMethodHandle
GetModuleHandle
get_TypeHandle
RuntimeTypeHandle
CloseHandle
GetFieldFromHandle
GetTypeFromHandle
Rectangle
ReadFile
Console
get_Module
DefineDynamicModule
hModule
M_module
set_FormBorderStyle
get_Name
lpApplicationName
functionName
lpName
M_failureArgumentName
_AssemblyName
AddAssemblyName
LocalDateTime
ReadLine
lpCommandLine
WriteLine
get_Phone
set_Phone
rperpe
get_FieldType
OpCodeType
DefineType
ReadInlineType
CreateType
CustomAttributeType
ValueType
get_DeclaringType
RawMarshalType
flAllocationType
get_ReturnType
Get_DontCompareReturnType
lpType
Set_CalendarType
get_ParameterType
Square
System.Core
ResolveSignature
SetLocalSignature
SwitchStructure
ExplicitCapture
MethodBase
Get_MethodSigIndexBase
Dispose
Truncate
CreateDelegate
MulticastDelegate
set_WindowState
FormWindowState
STAThreadAttribute
CompilerGeneratedAttribute
ReplaceAttribute
UnverifiableCodeAttribute
UnsafeValueTypeAttribute
BabelAttribute
ICustomAttribute
SuppressIldasmAttribute
SetSymAttribute
AssemblyInfoAttribute
YanoAttribute
DotNetPatcherPackerAttribute
BabelObfuscatorAttribute
CryptoObfuscator.ProtectedWithCryptoObfuscatorAttribute
DotNetPatcherObfuscatorAttribute
DotfuscatorAttribute
CompilationRelaxationsAttribute
SmartAssembly.Attributes.PoweredByAttribute
RuntimeCompatibilityAttribute
SuppressUnmanagedCodeSecurityAttribute
ThreadPoolWorkQueue
GetEraFromValue
Get_HasValue
SetValue
RawDefaultValue
get_IsAlive
WaitHandleCleanupNative
PackForNative
golArkocgn.exe
get_Size
dwSize
Resize
SizeOf
fsafafwwwwwwwwaf
fdfsasfaccggggggsfasfdf
fdaffcgggggggggggggfasfasfasfafafsdf
fsdfsdf
InitdMemberRef
get_IsByRef
CorLibAssemblyRef
fssssssssssafffffffff
faffffhhhhhhhhhhhhhhhhhhhhhhfffff
faffffffssshhhfff
fogFkIaiIgf
frhgFFmhdof
gfdffffffg
bAgAmkkiihg
IsValueTypeSig
ToTypeDefOrRefSig
ToGenericInstSig
mrIbAgjhajg
bpknrmfmrkg
rbefhgokbmg
System.Threading
Encoding
IsLogging
Ceiling
Get_IsNoInlining
FromBase64String
ReadUTF8String
OutputDebugString
ToString
GetString
hhafaccgggggggggggggfasfhhhhh
gmcekdSkAlh
GetFileMUIPath
get_ExecutablePath
GetDisplayPath
ObfuscatedByGoliath
myWidth
get_Length
M_month
kgnldFcImIi
dImhmIrabfi
FkkjjjamFgi
ConvertGregorianToHijri
jgbrFSmindj
Icnmcplejnj
pdicjrimroj
AsyncCallback
callback
GetEnumerator_NoLock
GetTypesNoLock
FlushFinalBlock
BeginExceptionBlock
peAedknfkdk
dlFhSkdAFek
fmIAdnidfmk
PromiseTask
pdfiIhbgiFl
Marshal
IsSingleDimensional
ImportInternal
ControlPrincipal
SystemObjectModel
get_Email
set_Email
Get_IsCallConvFastcall
advapi32.dll
kernel32.dll
Control
IsPrimitiveImpl
PdbStream
Get_HotTableStream
CryptoStream
MemoryStream
Program
hkFaAchoSbm
hleFnkmbddm
System
eggfaklbbfm
SymmetricAlgorithm
bcShgcrkrkm
immkcISamlm
mIoAahikamm
krinjphbnom
ICryptoTransform
ISOKorean
Maifan
get_MetadataToken
hToken
IsNullToken
lpNumberOfBytesWritten
golArkocgn
AppDomain
get_CurrentDomain
AhmSrkdikln
Application
get_Location
Get_Destination
NineRays.Obfuscator.Evaluation
ProfileOptimization
System.Reflection
CallingConvention
RuntimeWrappedException
_innerException
_exception
imifcfpnnon
Get_LongTimePattern
PercentNegativePattern
GetDynamicILInfo
FieldInfo
SetMethodBodyMethodInfo
ScoreInfo
M_registrationInfo
startupInfo
MemberInfo
ParameterInfo
hResInfo
GetContactInfo
Get_InvariantInfo
geAickcilko
dchrhbnlmmo
InitializePropertyMap
oigbacdFlep
IeFeIobfjfp
Setjump
Get_DragDrop
LastGroup
startup
System.Linq
set_ShowInTaskbar
GetCalendar
pdcggmmAkcr
ParamNumber
Reader
DESCryptoServiceProvider
MethodBuilder
ModuleBuilder
TypeBuilder
AssemblyBuilder
DecoderFallbackBuffer
lpBuffer
ResourceManager
Debugger
Get_iocbHelper
EventEqualityComparer
CreateProcessAsUser
get_IsPointer
IRvaFileOffsetConverter
BitConverter
IsLetter
dhSlmFhkmgr
nklfcdgacjr
GetTokenFor
IEnumerator
GetEnumerator
.cctor
dotNetProtector
FindStaticConstructor
get_IsConstructor
CreateDecryptor
hasFieldPtr
IntPtr
MillisPerHour
VER_PLATFORM_WIN32s
NumDefMDs
System.Diagnostics
fdsaffcgggggggggggggggggggggggccafasffds
fdfffcfagggggggggsfafasffffffdfsfds
GetMethods
get_HasNamespaces
System.Runtime.InteropServices
System.Runtime.CompilerServices
System.Resources
golArkocgn.resources
HasProperties
bInheritHandles
AllLocalFiles
EnableVisualStyles
InternalGetDayOfWeekNames
HasScopes
EmptyTypes
GetCatchAddresses
lpThreadAttributes
MethodAttributes
TypeAttributes
MethodImplAttributes
Get_CustomAttributes
GetCustomAttributes
lpProcessAttributes
GetBytes
HasParamDefs
MemberRefs
BindingFlags
dwCreationFlags
GetMethodImplementationFlags
SetImplementationFlags
GetSpecialSecurityFlags
OpcodeBacktracks
Equals
Programs
System.Windows.Forms
System.Collections
CallingConventions
PopOptions
GetFieldDefProps
OptionalCalendars
get_Chars
ImageSectionHeaders
GetOptionalCustomModifiers
GetParameters
Anchors
get_IsClass
TestClass
M_changeAccess
AssemblyBuilderAccess
hProcess
GetCurrentProcess
unsafeUseAddress
lpBaseAddress
lpAddress
sssssaffcggggggggggggggcafafssss
sssssccggggggggggggggggggggggggfafasfasfgsssss
students
ParseAttributeArguments
ConfigEvents
HasImperativeAsserts
myRadius
radius
InitializeKeys
Concat
Format
TryParseExact
GetObject
object
Select
flProtect
Product
M_permSet
CharSet
ShortInlineBrTarget
myHeight
height
op_Explicit
DecimalDigit
System.Reflection.Emit
ZeroInit
SetCompatibleTextRenderingDefault
FirstOrDefault
IAsyncResult
CreateSearchResult
result
Student
student
lpEnvironment
REDocument
InitializeComponent
get_Current
CheckRemoteDebuggerPresent
IsDebuggerPresent
LazyInitializeEvent
loadHint
IRecursionCount
Get_IsReuseSlot
InternalGetDirectoryRoot
textToDecrypt
ParameterizedThreadStart
Convert
CheckIsDst
FailFast
get_Last
set_Last
contactList
get_First
set_First
Timeout
SuspendLayout
ResumeLayout
IsAutoLayout
MoveNext
System.Text
context
ewasfasccfgggggggggggggasfw
eaaaafdgggggascccfasfasfasaaaaaaaaaaww
FromHex
MessageBox
ToArray
get_IsArray
secretkey
System.Security.Cryptography
DefineDynamicAssembly
RuntimeAssembly
GetExecutingAssembly
AppDomainManagerAssembly
ConstrainedCopy
BlockCopy
library
Get_RelocDirectory
lpCurrentDirectory
op_Equality
Set_Visibility
Get_VersionCompatibility
System.Security
SuppressUnmanagedCodeSecurity
IsNullOrEmpty
FastIsEmpty
198 Protector V2
System.Security.Permissions.SecurityPermissionAttribute, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
SkipVerification
WrapNonExceptionThrows
_CorExeMain
mscoree.dll
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
<assemblyIdentity version="1.0.0.0" name="MyApplication.app"/>
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v2">
<security>
<requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3">
<requestedExecutionLevel level="asInvoker" uiAccess="false"/>
</requestedPrivileges>
</security>
</trustInfo>
</assembly>
golArkocgn
GetEnvironmentVariable
1122003850
1122054088
_ENABLE_PROFILING
_PROFILER
-1316533250
1316561319
-1439740410
1439764763
-801978931
802104503
-1763674528
1763611765
1647753105
1647716503
-231520652
231575792
1051648918
1051628106
-764167120
764277370
772838209
772814939
215494657
215554528
487798292
487830386
-375908680
375770923
-567789931
567774325
-1094538009
1094545237
1223515202
1223458414
1502711713
1502657941
-1078730979
1078796908
567716756
567729326
-65238014
65091938
-819344042
819374092
950040386
950046075
1645328007
1645317696
-255324140
255275018
310696209
310672854
-803281933
803209830
1462700299
1462700258
1572413683
1572416168
1304140486
1304133042
-944673349
944562863
593605714
593555533
-1750518716
1750554887
1589580318
1589624098
-1268793480
1268892713
-814551183
814507448
851319064
851349406
-1511368889
1511321834
1431494373
1431551138
1975581098
1975624358
-1100010449
1099957613
42321464
42260191
715367554
715383473
1717955592
1717941008
-1692228738
1692174547
-2075877178
2075751834
2020749460
2020830600
-1884171764
1884206625
105903675
105896141
-1070220937
1070276346
838870178
838939581
658095081
658040404
-121259313
121279764
-1085623989
1085557895
-2049599132
2049451015
1015634657
1015624300
1008771213
1008829184
103115810
103053836
2146584950
2146600885
-562184015
562247087
2146816769
2146816248
-1144875520
1144788125
-1255402938
1255340414
455299919
455339527
-745680546
745601190
-1248893543
1248868710
620142825
620205109
1756464605
1756472921
-642097675
642099645
-1191091773
1191054011
419076781
419152284
-814576298
814545189
-740241203
740182952
1658916626
1658948798
1288610073
1288597545
1310147676
1310190412
-968692360
968739962
-1785461947
1785454982
1183340191
1183407575
908565981
908553242
-1189393235
1189483481
545086843
545026492
1402211233
1402276160
-407946255
407939689
-404908277
404983772
-592845133
592874446
1929716886
1929663781
-242604977
242600762
-1186444673
1186403376
-425099462
425186244
-903171511
903109557
-927188009
927188325
368327279
368345602
616425293
616336722
711702259
711644491
1116260122
1116246362
1736978861
1737058031
621377756
621396476
2052753404
2052751282
242478650
242392674
-889808840
889823690
1997002319
1996915436
1776554604
1776611169
-820066899
819992628
2026833610
2026783317
856152895
856094286
1590714314
1590759857
-391811332
391891233
675983615
675951180
1010379381
1010415607
-1957135086
1956973922
-344327915
344396064
1226572301
1226623146
-1802185232
1802127576
642234242
642212756
648233546
648225867
-1115361796
1115384743
622112848
622109606
-1008678298
1008726719
-1630441669
1630310518
98134639
98137146
1634187802
1634115136
1664604673
1664587349
-157391224
157297185
1606653583
1606605652
-926433800
926517989
497908251
497885964
-1188857365
1188837971
958575921
958564934
-1718060580
1718009250
402566585
402579585
-1886225155
1886200327
1437691320
1437675048
1692748509
1692748047
618761480
618783919
-1146704686
1146653514
-1340694737
1340694876
-1417803978
1417705749
479429364
479417044
-1090361691
1090325467
745308200
745380187
1260068021
1260111154
-1968063425
1968047222
-1692078793
1692117483
-566598503
566510112
715647923
715592976
-1111992815
1112008936
-1004872070
1005041809
-149752009
149734232
-1668762245
1668760160
-585168168
585153344
-286381465
286481726
-1636084055
1636079669
995714065
995699529
233554560
233485340
-1599978720
1599985420
557705500
557644441
1280313269
1280405033
-611640440
611604821
1913345466
1913273852
-1738685769
1738687221
-5460957
5360108
-993400681
993432590
466699805
466719845
1590106096
1590119804
-1524427299
1524461661
-29484094
29382857
1507212147
1507261270
1360508430
1360518348
1805268317
1805332508
1981335281
1981396106
-974505524
974502634
64074429
64067079
2117371059
2117349012
-981916657
981752055
1447671378
1447633289
-350223311
350215428
1133796310
1133857016
-308097334
308077281
-23330874
23391740
1700637219
1700627765
-594105346
594128457
70807849
70857130
-1468163306
1468224569
457596002
457660455
578537831
578494843
-220931818
220948167
1178979788
1178909903
-1199358471
1199318669
-891727240
891701345
-667807193
667739176
1272150756
1272173040
-1315162656
1315094733
-1163493615
1163436192
-406195720
406229016
-188041760
187980936
1872133322
1872184113
1467548039
1467578443
-198391636
198397850
-864955739
865021914
-528091124
528164756
836771128
836764004
-535013956
534980788
2120082957
2120080032
-901265079
901267286
-157573804
157601998
1488287846
1488208393
-1559916474
1559904194
2089416357
2089323095
1093223772
1093248571
-241473811
241508341
-635386460
635316072
837595820
837588628
525296196
525302165
1928959836
1928978533
-210169056
210169716
-1280904861
1280960103
-1821057884
1821103051
-915571489
915644952
847230744
847166942
-465768551
465814192
959063450
959103156
990907055
990910102
358137538
358095560
1331412261
1331349620
-643359025
643389678
589240555
589176224
-2099606868
2099545696
1238936703
1239000738
1283274748
1283214321
638267259
638277910
2050028442
2049982657
-1069056476
1069024199
1814813043
1814761209
-60935770
60926549
1177490159
1177516333
-1626910514
1626939746
645594213
645551785
1037685005
1037634666
-1526660927
1526725797
726996309
726997558
1997458003
1997515225
-2118057147
2118104508
1391732832
1391763030
-968373836
968422823
-346344185
346334607
-1838052536
1838128564
1746637676
1746636543
-1868698563
1868780698
134345581
134272405
-634248294
634211707
1012606293
1012599236
-938809573
938757211
1953288372
1953289038
527999490
527965220
168470570
168464906
729369600
729352046
1436878799
1436907729
-1173594831
1173526891
1792211716
1792264627
-643875508
643939728
-144398138
144421172
1616934307
1616935943
-1936932871
1936931603
4697297
4630642
1430302582
1430286299
-19891897
19895693
-764556431
764600752
1238612959
1238625686
857370614
857349631
1664349552
1664299545
1817495799
1817470383
930549679
930487234
-2109623501
2109720957
993370548
993312973
-642637461
642621241
1111011239
1111027745
-959930276
959860635
-95069605
95153740
1782886857
1782919609
82299878
82272349
-2050650206
2050635716
-1157130800
1157170459
-644232008
644250603
-1907261664
1907155372
500702776
500748545
1048225568
1048299362
-204260647
204234173
-1521106993
1521161584
1673282948
1673331470
-1093170582
1093219970
-285963234
285979597
-1174053243
1173918602
-1324824981
1324817771
575195833
575243166
446925571
446929021
-1148000139
1148160856
-967633990
967698045
1031932173
1031937791
258904214
258902599
1786801253
1786781091
-1931931649
1931991553
768781683
768792829
-640102847
640063645
-1300150086
1300144314
-1442608950
1442704131
2128830245
2128867365
151584541
151521036
-364302342
364377978
-1520658451
1520558449
-492617342
492617987
-462112580
462097432
1958731288
1958726975
1871981835
1872010127
-704091348
704033483
269482133
269461681
441948570
441904869
-1049769522
1049835151
1677486788
1677527266
969868690
969893282
-1956841550
1956807030
-877950548
877976699
944896494
944858701
-881058183
881038719
1046275880
1046262798
928706339
928776078
14041632
14090888
1603817419
1603872226
2029912120
2029931759
-798706857
798722379
1026644714
1026644823
-628203538
628110671
-636081569
636217790
-532247632
532204112
-419163221
419149275
-1991145934
1991188735
223371412
223361503
-63597598
63653931
1296470090
1296485611
698683942
698694532
-1261239540
1261242376
-253161406
253122987
728442290
728447463
-1939819948
1939747980
-1145789167
1145763195
1406888085
1406913498
-1353098666
1353090492
-282870392
282973377
-2069403873
Antivirus Signature
Bkav Clean
Lionic Clean
Elastic malicious (high confidence)
DrWeb Clean
MicroWorld-eScan Clean
FireEye Generic.mg.2465c0064588369d
CAT-QuickHeal Clean
ALYac Clean
Cylance Clean
VIPRE Clean
Sangfor Clean
K7AntiVirus Clean
BitDefender Clean
K7GW Clean
Cybereason malicious.24ef6d
BitDefenderTheta Gen:NN.ZemsilF.34170.Fm0@ayuqzYci
Cyren W32/MSIL_Kryptik.FOQ.gen!Eldorado
Symantec Clean
ESET-NOD32 a variant of MSIL/Injector.VRI
APEX Malicious
Paloalto Clean
ClamAV Clean
Kaspersky Clean
Alibaba Clean
NANO-Antivirus Clean
ViRobot Clean
Rising Clean
Ad-Aware Clean
Sophos ML/PE-A
Comodo Clean
F-Secure Clean
Baidu Clean
Zillya Clean
TrendMicro Clean
McAfee-GW-Edition Clean
CMC Clean
Emsisoft Clean
Ikarus Clean
GData Clean
Jiangmin Clean
Webroot Clean
Avira Clean
MAX Clean
Antiy-AVL Clean
Kingsoft Clean
Gridinsoft Clean
Arcabit Clean
SUPERAntiSpyware Clean
ZoneAlarm Clean
Microsoft Trojan:Win32/Sabsik.FL.B!ml
Cynet Clean
AhnLab-V3 Trojan/Win.Mardom.C4656510
Acronis Clean
McAfee GenericRXQC-VZ!2465C0064588
TACHYON Clean
VBA32 Clean
Malwarebytes Clean
Panda Clean
Zoner Clean
TrendMicro-HouseCall Clean
Tencent Clean
Yandex Clean
SentinelOne Static AI - Malicious PE
MaxSecure Clean
Fortinet MSIL/Agent.VRN!tr
Avast Clean
CrowdStrike win/malicious_confidence_80% (D)
No IRMA results available.