Static | ZeroBOX

PE Compile Time

2021-09-28 07:23:02

PE Imphash

f34d5f2d4577ed6d9ceec516c1f5a744

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00002000 0x000688c4 0x00068a00 6.56445540285
.rsrc 0x0006c000 0x0000f752 0x0000f800 7.51849227368
.reloc 0x0007c000 0x0000000c 0x00000200 0.101910425663

Resources

Name Offset Size Language Sub-language File type
RT_ICON 0x00070880 0x0000a9cb LANG_CATALAN SUBLANG_NEUTRAL PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x00070880 0x0000a9cb LANG_CATALAN SUBLANG_NEUTRAL PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x00070880 0x0000a9cb LANG_CATALAN SUBLANG_NEUTRAL PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x00070880 0x0000a9cb LANG_CATALAN SUBLANG_NEUTRAL PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_DIALOG 0x0007b24c 0x00000076 LANG_CATALAN SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x0007b2c4 0x0000003e LANG_CATALAN SUBLANG_NEUTRAL data
RT_VERSION 0x0007b304 0x00000264 LANG_CATALAN SUBLANG_NEUTRAL data
RT_MANIFEST 0x0007b568 0x000001ea LANG_CATALAN SUBLANG_NEUTRAL XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminators

Imports

Library mscoree.dll:
0x402000 _CorExeMain

!This program cannot be run in DOS mode.
`.rsrc
@.reloc
"mM<a@#
="ak@#
@]@[(f
`\@X(f
:\~+TE@#
UVFk@#
Z@Y(f
:Q7Pi@#
`Y@Y(f
@E@Z(f
`Y@Z(f
@F@[(f
@N@Z(f
`[@X(f
`^@Z(f
@[@X(f
<UOG@#
[XZ_bX
[XZ_bX
[XZ_bX
[YZ_bX
#j4EJP
[YZ_bX
[XZ_bX
[XZ_bX
[YZ_bX
[YZ_bX
[YZ_bX
[YZ_bX
[XZ_bX
#Th0A2A
[XZ_bX
[XZ_bX
[XZ_bX
[XZ_bX
@h@Y(f
[XZ_bX
[XZ_bX
[YZ_bX
[XZ_bX
[XZ_bX
[XZ_bX
[XZ_bX
[XZ_bX
[XZ_bX
[XZ_bX
[YZ_bX
[YZ_bX
[XZ_bX
[YZ_bX
[XZ_bX
[XZ_bX
[YZ_bX
[YZ_bX
[XZ_bX
[YZ_bX
[YZ_bX
[YZ_bX
[XZ_bX
[XZ_bX
7?rA#
#!aKCn6
[XZ_bX
[XZ_bX
[XZ_bX
#sp[pFT
[YZ_bX
[XZ_bX
[XZ_bX
[XZ_bX
[XZ_bX
[YZ_bX
[XZ_bX
[XZ_bX
[XZ_bX
[XZ_bX
[XZ_bX
[YZ_bX
[XZ_bX
[YZ_bX
[XZ_bX
[YZ_bX
[XZ_bX
P`@X(f
#2`vzj
[YZ_bX
[XZ_bX
[XZ_bX
[YZ_bX
@~1AA#
#!Ec');
bO)T@#
"T.iV@#
[YZr}D
[XZrGE
[YZr_E
@H@Y(f
@D@Z(f
@H@Y(f
@L@X(f
[YZr}D
[YXnZ>
YfXfY}
h BK$Oaie
XYXYe}
daiXaaf
U(BpC#
ZeaeY}
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP71
C(J'L)K%O"q
C(J'L)K%O"
"@.D)z
A(M/A+F
qJ[8V<A
X3Q<W2K%N#p
n-F$9R7U;Q<_4V;P5W9S>m
_4V;P5W9S>m
_4V;P5W9S>m
_4V;P5W9S>m
_4V;P5W9S>m
_4V;P5W9S>m
_4V;P5W9S>m
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
ur!J(E.K)G-@
k(F.K)
9OaQ2EZ"
CXKW[2Tu
GkHE&8
[eu4>Qz
u+5V;h
}$K"4^,<
=T:U@{
U;V=wfO
B$K"Q_
|"M(1V1;
^3T;Rs
R#D+B=
K,C**n
-R=X+r
V\j|E*E0c
kR2]8>`
s6V9Tn
pvE[u
M0\3Zt
2Y8Sx2
"C)H#yl
BS9X3y
P2Bh~7]4_
\j|)S>U
U>Q<1Qt
%N!L.Mt:
J/B)*:acG
K}]i}X@/F
sR6Y4M
O"A0[w
2'F)D!D
nwh0H^
N?Z9W>
f!K't
RS7U<V0e
yI#A-F
LE B-GiY*
EF)C.}
T\9\2X
{(DeF%
S\8]@.9z
q4W:Q4
!i;P2_
AC"O$A
"Ha=^tK
nxQy 5
t3_4Q3
L@&D*@
(Bg?dN]
ML"I,N
b"H*D.
N>]0[>
OF+@&Ej
IH'M s
]+@#N%
FJ(F-Ij=O
&h<W5X
mW=_2Y
t6]8[5
|6U;Q<
h;Q3SY
eO$F,Hl'A
AC"O%@
1kYY=`
CxB(C&
.P=V3Q
K0S>Er
oL*G,I
P)Z1S>U0R
,<Y;m1
H=D&E,
N;z+J%
!V+F-H
=N#H-O!K>
1+;Q<
5Y7\1b
k{2S>U
+](?Z8#
*P3^4Y
-F#Ah
;Y4_RZ
m{!R9U
hR:P=n
8X;WT0
p*VL*I
$^)R@
3\-O!K
_P7[1l
gv8I"G
jz|-R=X
q3#1Y;
(-C&D*X
n4rj*BJ
??!}]C#
(/w6.;x
C/)<D2
_z(C!L
=T,B(BQ
9<J/M#
=S9]?Q;V
":W<Y;
h>CX2P=V
KzQ97Z
Mr$Q=oyP
2y3 L'?
jyG'M
i:QK%C%G
|.x1[:
O<PE/K
xRhf2
T:X4Q3]7r
x3[:XKu
]G,G+'
[$!b2"I,
gvE M&C
!t K)\
g"76S>
p-91Z7
$f~(C!
:o$.L"
?;_s(9
usI)D*
:dT2_4Q
/xNWpI_eCbeBTm:
`#=Nu
-:R8[6t
E@M.M$
}/g=W6
)_1W:i
_K>T.n
;FjW4KO
w<;cHb,
z,Kq^o>V5
./D!Cl@(
x$KrdW7[1
`Zsn?U8
/D0VsN"
r'Bxu\
8Y7]0b
p5Z+H&
^K.2O"^Q
j:N(@%y
ts!39;
@+O.A
E;N#F$
U?T0R<
=V3Q?Fu
m?Eq+1
X9]1[/
tS!BR?
kk8S1\
p6*f5^
La~?_;Z4v
u/8B.}
8Y<RQI1_5
r$b't
O$P3vw
C9GL)K
Mk7ttB)L
;q13V4
j$aJ]?Q
gd2U?R
an0W=P
VUIS8]
hx+A$J
^9:X6\j
YKA!J(
_Y;R@+a#O%
v^8jJ(C!
GH.D0mS]8V
~+JB N
V7U;Q<
l"O$A#
HBJT1S
t%U1TR
C@H1_5
w4x1_5%
QSC&M/
]Nr+F-
"gLE(G
DAn?]3
VD/F,-
\7R+E/B(
w4X<S:
w0N,7\r
B?J#I$
I"@ENT7Z
VM%G*A
Vp#D*B
:$W8V>
+I'u-X
GEuN%Gp
&aZ8VT
]S5]0c
B)L.@*G,z
><Q:_=S9l{;Y4
u/rE({
T6[/J(F
7b/D&K8
<Y.K)GE
'8b}+
z=J&K
n~&K"P
+J!D&H
q3ON%G
)cb\1b
mu{1
`v#D+B
L9zW5[
j:R1\OG_1[
z)gE,G
PSg=S9
S9\3qq_4V
<M!K*_Pt
@+w\1Z
v5eO$A
bH%O"q
7r[}r
#J0S=o
y+QP;Y
TY4Z0*
7]3Y4gF
:l|d7\
"g6W6Y
L6[0U7q=
q'Z$A#
+"H'N;
t%L#J?ry
d;M/B)
,O#I}
c%w}.E
(B6^<^
q]:V4Z0r[
8N"I%$
5 +G\
e6\>S8
^M(K'!K
oL-@+N
]3Y4h1
C6U}.H
4I::3]7
(F.L.X
J=R?J/
`{&E B
3^1T6%}
I?%I$w
Rl+N$P
jl-T;R
hH)D/J@!P>n
yZ>\2X
|Y1T6X
lV7]0c
;\9[5_k
jz0S>m
B(M/Aq
r/#F$Je
y+=$O-
)_-F+x
-#F4d@
RH(C&D
>s>V<p
+^f@afAWn9
@+%H#
\I\@#N
ORQIw$
iQ+sr$
]!0hW)
}\1o7D
y\6S1_
a//{Yb
$J#G"@g
I.9X5^
s!K/e<
nJhpO+
[:Uez
lrV7FA
F,H.dO
w2;!C-
1\B-H^
l5^;
+q%O+aF
,#?R9#
VpC*H$
XAO+Oc
v\0[>\
KJ'L)c
r/%.D)
MP4Q3^d
v9\>P:
|*v!t
;J@cC/}
p2JS9\
u/mA%H
1T6XJ*
Sq\7Y3
z/b6U<
~)L.8RWR
w"->?D
"Nh*0A
LwV)G-
As>J/M
|)6M/B
ZY2D)B
a$+@"L
>k,A#M
\Nb*A#
O<$K!E
0sW8W>
cP2_4V
+a`_3a
VLb^<_
{Q2_4Q
V=/B)Ib
[HD-G#
TC!L'B8O0_
0:T>Sw
ix]?Q;
1W9S>mv
XzUQ:X
^XKU2\6
3xLB0\
q'C"L&K
)S=V2P
s51g5_
I2 @-F
Y&X8#w
W)(~#/,ka
(]PP3^
8Z4^3
oU7\9[
#E-H&u6
4^<X>9
7QD0VM
v#I-GF
4iG8S?
5Q7\8^
K-?T1SU[G
qYB=<H
/:IxB,l
x.6k9S
XMp-P>
zX:W<&i
(rJ!De
hF/K*1F
0@U@iG
7F#>N
K].nvn
{B..L!
g}8K\N
B]K!Lt
l!=FgQp
=xr-1A
)V2+yQ
sN;P5W9
]Su(J$N#
%f>U?[x
dt7U8S6
0iXQ=oA;V=X:
3wd%I#
!R2]t1b
D+yOE(C&D
Zk4]6N'u
:1 |9_u
'xAdw=
daUW}L
DF?MANu
MoX*WA3O9
/X'kCc(
}k)yW1v
tlkdDK
;L ;GQ
lN`]Iu
*>r@%b
X_nT62
]01\IA
|Nw"GJ)9Z
VxH\at
Rzl?At>
8&emE
(E-})T
Z'o{c*Y
lRtnnY
mV0l%-MIJ
<&n*8k_
;8KL={
%@Z8\c
d>a@:G
tdCwP0
<ro}-R
\:!<rh
-78q=2
3UMFBt
!%f_a/
)/MOriOC*
zMu_Y=/
drB+ Z
X 9u2.
w-3iX*.
q]pt6T
XeF`>)
hL#(;He
}IdM]a;
xF/#n
;Gnrc3
krVa(I
.xPZB1
V.>.tC%P2O
}|2`g`
BI)a2g'
/26_'2
A{Id,|
9MAsvNuJ9O12
oqG-l
C9E6y7
;@Mji3
DwF[y*k
|kbX+U
h+T]l=
dE=T `
o#ps({D
hj?etg
LxUF!
AV[h~s
=?Tl`{
Tcw3(tq#
G05j/;
pMd8hwY
{B1}%Q
?YE3^}
LjVGosz|
;-D`Jho
}hv4#.
Swl};U
2bH"1,
Kv.>&^
%6R5DN
3I*6.<>
*-iW(d
K^2P?m>8
@gwR\T
r@<-/
!C.QUj)
8/kUO,
BZTZ+32
!Za%&~
rTXi_vc0
='-;S]W
78_=bsuQ7
9djaL-@
L+a__{
@D=wjM
xA(6&i
d7\>S8]?Q;V
d7\>S8]?Q;V
d7\>S8]?Q;V
d7\>S8]?Q;V
d7\>S8]?Q;V
d7\>S8]?Q;V
d7\>S8]?Q;V
d7\>S8]?Q;V
d7\>S8]?Q;V
d7\>S8]?Q;V
d7\>S8]?Q;V
d7\>S8]?Q;V
d7\>S8]?Q;V
d7\>S8]?Q;V
d7\>S8]?Q;V
d7\>S8]?Q;V
d7\>S8]?Q;V
d7\>S8]?Q;V
d7\>S8]?Q;V
d7\>S8]?Q;V
d7\>S8]?Q;V
d7\>S8]?Q;V
d7\>S8]?Q;V
d7\>S8]?Q;V
d7\>S8]?Q;V
d7\>S8]?Q;V
v4.0.30319
#Strings
#fsdfsdf#
#fsdfsd.dll#
#fsdfsdfsd.dll#
#fsdfsdf.dll#
#fsdfdsf.dll#
Get_IsClr40
<mbgnredablm>b__0
<Maifan>b__0
<Mabin>b__0
<Mabin>b__1
IEnumerable`1
IEnumerator`1
List`1
CS$<>9__CachedAnonymousMethodDelegate1
<GetContactInfo>b__12
Wtsapi32
ToUInt32
ToInt32
198-Protector-V2
Ldloc_2
Func`2
PosTable2
CS$<>9__CachedAnonymousMethodDelegate2
<>c__DisplayClass13
<value>5__3
CS$<>9__CachedAnonymousMethodDelegate3
<GetEnumerator>d__44
InitFrameworkRedirectV4
TraceLevel4
ToInt16
<ext>5__6
<i>5__7
Size128
get_UTF8
<Module>
nIlAdjidbAA
set_KeepFieldRVA
FdjcIhndlmA
kilikkScmmA
KEY_READ
Get_HasBigGUID
get_ID
set_ID
S_FRAMECOOKIE
LOCALE_SNAME
iepdedgSrdF
gnkglmdlcoF
nmdAncdhIbI
fSFmgpfIebI
agIrfefdIfI
IIhhddIopoI
ALREADY_INVOKED_SENTINEL
GetDayOfNN
System.IO
CAL_TAIWANLUNISOLAR
ERROR_INVALID_PARAMETER
plaakgccFaS
RESOURCE_DATA_ALIGNMENT
S_PARAMSLOT_ST
KEY_WOW64_32KEY
get_Area
ookfAkoiora
Set_MetaData
DiscardBufferedData
rcdata
agjfdgirFfb
hhhhhhhhhb
mscorlib
kaciemoAppb
dnpIhmnfoIc
System.Collections.Generic
get_IsStatic
get_Id
set_Id
ReadTargetFrameworkId
GetProcessById
SdndfriASd
pFakpSmgdad
lpNumberOfBytesRead
hThread
get_CurrentThread
thread
AssemblyLoad
gdflodrmmcd
dddddddddddddd
fsddddccwwasgggggggggggggggfasfasfasfasfwwwwwwwwwwwdddddddd
OnProgressChanged
get_IsAttached
Get_IsConsoleEnabled
oIefkpdmAhd
Get_IsIidParamIndexValid
jifafgrIbjd
<ID>k__BackingField
<Average>k__BackingField
<Phone>k__BackingField
<Email>k__BackingField
<Last>k__BackingField
<First>k__BackingField
TrimEnd
kFgdcokhmnd
set_IsBackground
DynamicMethod
Set_AddMethod
DefinePInvokeMethod
ResolveMethod
GetMethod
method
AllClipboard
NetGuard
fsdfsdfsd
fsdfgcfgggggggggggggggggafafasfafsdhhhhhhhhhhhhhhhhhhgsdgsdgsdgsd
oplajladkAe
get_IsInterface
Replace
EnsureCapacityNamespace
LoadResource
FindResource
SizeofResource
mySide
Divide
GetHashCode
SetCode
CryptoStreamMode
Xenocode.Client.Attributes.AssemblyAttributes.ProcessedByXenocode
get_Average
set_Average
InternalGetAttributeUsage
SetMethodSourceRange
InRange
CanMerge
ResetTypeDefFindCache
Get_Cookie
EndInvoke
BeginInvoke
base64Table
Set_ModuleRefTable
GetEnvironmentVariable
Enumerable
IDisposable
set_Visible
Double
Circle
get_Handle
RuntimeFieldHandle
get_MethodHandle
RuntimeMethodHandle
GetModuleHandle
get_TypeHandle
RuntimeTypeHandle
CloseHandle
GetFieldFromHandle
GetTypeFromHandle
Set_SafeWaitHandle
Rectangle
ReadSingle
ToSingle
_LoadCertFromFile
Console
get_Module
DefineDynamicModule
hModule
DbiModule
module
set_FormBorderStyle
get_Name
KoreanLangName
MatchAbbreviatedMonthName
SpecialName
CreateEventFullName
lpApplicationName
functionName
lpName
AssemblyName
kdopeIlIjme
ReadLine
lpCommandLine
WriteLine
get_Phone
set_Phone
mdkbfnFIjoe
CloseScope
EndInliningScope
rperpe
get_FieldType
_QueryCertFileType
DefineType
CreateType
GetIsValueType
get_DeclaringType
flAllocationType
get_ReturnType
lpType
get_ParameterType
X509ContentType
Square
System.Core
M_Datastore
ResolveSignature
SetLocalSignature
MethodBase
Dispose
Truncate
CreateDelegate
MulticastDelegate
IsSurrogate
NullTerminate
set_WindowState
FormWindowState
AllowLeadingWhite
_isDebugSatellite
STAThreadAttribute
CompilerGeneratedAttribute
UnverifiableCodeAttribute
UnsafeValueTypeAttribute
BabelAttribute
SuppressIldasmAttribute
AssemblyInfoAttribute
YanoAttribute
DotNetPatcherPackerAttribute
BabelObfuscatorAttribute
CryptoObfuscator.ProtectedWithCryptoObfuscatorAttribute
DotNetPatcherObfuscatorAttribute
DotfuscatorAttribute
CompilationRelaxationsAttribute
SmartAssembly.Attributes.PoweredByAttribute
RuntimeCompatibilityAttribute
SuppressUnmanagedCodeSecurityAttribute
M_actualValue
SetValue
get_IsAlive
IsPrimitive
Add__ModuleResolve
Skbmkebnjm.exe
get_Size
dwSize
Resize
SizeOf
fsafafwwwwwwwwaf
fdfsasfaccggggggsfasfdf
fdaffcgggggggggggggfasfasfasfafafsdf
fsdfsdf
TypeOrMethodDef
ResolveMemberRef
get_IsByRef
fssssssssssafffffffff
faffffhhhhhhhhhhhhhhhhhhhhhhfffff
faffffffssshhhfff
blmnlmarmif
gfdffffffg
mjaampAnffg
System.Threading
Encoding
IsLogging
Ceiling
FromBase64String
OutputDebugString
ToString
GetString
Net_uri_UserDrivenParsing
gSrkoejljog
Get_IsVarArg
MinHebrewNumberCh
InterfaceIsIDispatch
AddLogSwitch
GlobalSwitch
oiiSFjjkkgh
hhafaccgggggggggggggfasfhhhhh
klkIohkprnh
get_ExecutablePath
ObfuscatedByGoliath
TmAveCharWidth
myWidth
get_Length
cfmpcdnfgci
lippdfkmFdi
Get_IsAbsoluteUri
brclkilphgj
AsyncCallback
callback
DoubleTrack
PerformSecurityCheck
DefinePInvokeMethodNoLock
FlushFinalBlock
TransformFinalBlock
pdnmFgcrckk
blbmmdmpamk
E_UserNotCanonical
Marshal
IsMultiDimensional
GetMutexWithAcl
olcArihbffl
get_Email
set_Email
Get_IsInternalCall
CallConvStdcall
advapi32.dll
kernel32.dll
Control
SetOffsetImpl
creoklAlpFm
CryptoStream
MemoryStream
Program
System
SymmetricAlgorithm
peIgSrFomjm
Skbmkebnjm
oejeAlAdikm
emlidfohmkm
mbgnredablm
ShlkmFfAilm
lAmlfFjnmrm
ICryptoTransform
Maifan
get_MetadataToken
hToken
SymbolToken
lpNumberOfBytesWritten
anmAAdoeFfn
MicrosoftWebDesign
MultiDomain
AppDomain
get_CurrentDomain
ColumnBegin
dAccjfkjcln
Application
get_Location
FallbackLocation
EqualsImplementation
NineRays.Obfuscator.Evaluation
System.Reflection
CallingConvention
RuntimeWrappedException
ThrowInteropParamException
_exception
NumberNegativePattern
corFkhkmrSo
GetDynamicILInfo
GetEraInfo
FieldInfo
MethodInfo
ScoreInfo
ExceptionDispatchInfo
ItemInfo
startupInfo
MemberInfo
ParameterInfo
_ConstructorInfo
hResInfo
GetContactInfo
FSadhdAcfio
YearDateSep
M_Group
startup
System.Linq
set_ShowInTaskbar
DayOfYear
M_maxYear
System.IConvertible.ToChar
IColumnReader
DESCryptoServiceProvider
IFormatProvider
MethodBuilder
ModuleBuilder
TypeBuilder
AssemblyBuilder
lpBuffer
ResourceManager
Debugger
IsOther
TypeNameParserHelper
CreateProcessAsUser
get_IsPointer
BitConverter
AssemblyResolver
Get_AppDomainInitializer
GetTokenFor
TypeDelegator
InvariantTimeSeparator
GetSeparator
IEnumerator
GetEnumerator
.cctor
dotNetProtector
get_IsConstructor
Monitor
CreateDecryptor
IntPtr
BuildRevisionStr
System.Diagnostics
fdsaffcgggggggggggggggggggggggccafasffds
fdfffcfagggggggggsfafasffffffdfsfds
PEFileKinds
Get_TotalMilliseconds
GetMethods
SetInterfaces
System.Runtime.InteropServices
System.Runtime.CompilerServices
System.Resources
IsRTLResources
MDBeginAddResources
Skbmkebnjm.resources
bInheritHandles
ProgramFiles
EnableVisualStyles
TableTypes
EmptyTypes
ProjectedClasses
lpThreadAttributes
MethodAttributes
TypeAttributes
MethodImplAttributes
GetCustomAttributes
lpProcessAttributes
ReadRemainingBytes
GetBytes
BindingFlags
dwCreationFlags
GetMethodImplementationFlags
SetImplementationFlags
EventFlags
AsyncCompletedEventArgs
Equals
Programs
System.Windows.Forms
Get_Columns
System.Collections
CallingConventions
FieldDefInfos
GetMemberRefProps
dnlib.DotNet.Pdb.Dss.IMetaDataImport.GetPropertyProps
get_Chars
Forwardchars
GetOptionalCustomModifiers
GetParameters
get_IsClass
TestClass
SecurityUnmngdCodeAccess
AssemblyBuilderAccess
hProcess
GetCurrentProcess
lpBaseAddress
lpAddress
sssssaffcggggggggggggggcafafssss
sssssccggggggggggggggggggggggggfafasfasfgsssss
HebrewFormatDigits
students
AddIfExists
myRadius
radius
Concat
Format
GetObject
object
Select
flProtect
CharSet
NotECMADigitSet
_offset
PadLeft
myHeight
height
op_Explicit
isAssemblyNameSetExplicit
System.Reflection.Emit
SizeOfStackCommit
_processExit
SetCompatibleTextRenderingDefault
FirstOrDefault
IAsyncResult
result
Student
student
ParseReplacement
ResourceElement
lpEnvironment
StartDocument
InitializeComponent
get_Current
CheckRemoteDebuggerPresent
IsDebuggerPresent
OnMetaDataEvent
InitializeEvent
S_processorCount
textToDecrypt
Get_Start
ParameterizedThreadStart
Convert
FailFast
get_Last
set_Last
contactList
GetEventList
get_First
set_First
Set_ReadTimeout
SuspendLayout
ResumeLayout
MoveNext
System.Text
CapturedContext
SynchronizationContext
context
ewasfasccfgggggggggggggasfw
eaaaafdgggggascccfasfasfasaaaaaaaaaaww
_fcPrefix
CArray
ToArray
get_IsArray
secretkey
System.Security.Cryptography
DefineDynamicAssembly
GetExecutingAssembly
CheckDeny
BlockCopy
library
ResourceDirectory
lpCurrentDirectory
op_Equality
PositiveInfinity
System.Security
SuppressUnmanagedCodeSecurity
StartEntity
IsNullOrEmpty
198 Protector V2
System.Security.Permissions.SecurityPermissionAttribute, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
SkipVerification
WrapNonExceptionThrows
_CorExeMain
mscoree.dll
B0E&L?<
bN@5'a
4iaL3/
PynNu3
hvZrjZ6
T%|t+-9
;;pG 
&x5eaG
=n-?fG
?>Ri,Q
C?<T.~
u;,fM\M
g{jr=
vAI)U[?
Jorze}Xv!3
WqeZv/}
E>).r8
l$4q,L
+3i\Ytmg
Uq|?\[
CY>dG@
KVZp#*X
aC[uXw
dZL1#1
JKFqGP
=t|ht;
"lG}NB
s/.sF7ZBB
~:>^Lm
(c6FwC
y5Q"aD
8>&lM~
rCN^n(
&7]}R9
dIA6UUiaP
!q`+E;
A7b%%N
iGK^a)g
=@/tQ^8
'SNoiY$0
\`xaS#
'.6n:!rY9
4'Gs[M
-]70#)C
Al^P4F
Q~x9 x
E$&>-N
)mIDAT
!jE.s
[O?,h
8Q~,v+;
$`P!hl
SH%O~Pp
ASA)#n6
2^[cZn
0dx(.v
D}V/&S
@9(p\\
tn^i5_3z
X"G#we
fdh,-]^
DQ!XeJ
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
<assemblyIdentity version="1.0.0.0" name="MyApplication.app"/>
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v2">
<security>
<requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3">
<requestedExecutionLevel level="asInvoker" uiAccess="false"/>
</requestedPrivileges>
</security>
</trustInfo>
</assembly>
Skbmkebnjm
GetEnvironmentVariable
317097387
317080800
448085028
448088161
_ENABLE_PROFILING
_PROFILER
-1446292377
1446284197
1186415979
1186413315
-1260668220
1260662174
-761603465
761551429
2052715525
2052681214
1114438018
1114415126
1160719369
1160757147
1829186236
1829109943
-94576025
94453579
1621158272
1621217777
1928369491
1928363985
-1342113470
1342166058
-959149871
959105307
-412331479
412212340
684083727
684104370
191976984
191900575
-1397516762
1397629071
-13242457
13349768
232943721
232957099
452269540
452279287
-1522171766
1522207050
-2058841702
2058776626
-477990528
477944315
-708657553
708674790
1233870526
1233876901
-1241227712
1241191775
1851692169
1851713730
-306931387
306890076
-1961594300
1961579374
1256107709
1256139315
-395432294
395399536
1127024481
1126965407
-1588639099
1588608453
-1220068207
1220106679
1596484684
1596523947
-615817297
615859980
-286005891
286109855
1337267943
1337304611
1534803148
1534838166
1961530383
1961550257
-1470878839
1470722425
1609413614
1609422145
394221431
394235292
477216512
477179377
2039673741
2039730950
-2029998244
2030004439
1470925143
1470996446
-1816267855
1816279994
1215746702
1215711089
1312552178
1312554118
863126375
863169488
495548089
495553879
1938259535
1938171222
-1295171027
1295148418
1604390774
1604331308
-871637569
871646648
2139027337
2139010485
1532678185
1532669255
913376103
913419420
-2006950070
2006894220
1884307493
1884333708
-1892650559
1892531807
-1263484736
1263530933
486933385
486986611
1692593987
1692547091
-243720037
243704730
1020682504
1020690966
1820795318
1820830435
-2011441072
2011433236
1982598474
1982604077
1082025094
1082002989
1569088828
1569119642
-1729765257
1729864780
1123168232
1123265883
-697180722
697298658
-2088646801
2088664496
593776728
593813828
-1534302787
1534316225
1713419494
1713472622
-972544867
972542966
-1236875387
1236992866
-1156060455
1156158239
-1428741351
1428746801
-652685648
652611433
-895164061
895051814
-575430259
575560285
1964871814
1964821317
-156202138
156231903
-1150794913
1150792962
-479561394
479513541
290813236
290837009
1336838923
1336844757
1622548185
1622564722
-528673107
528714258
1682980290
1682979277
-162374077
162350029
1385401266
1385410362
1362410104
1362467182
1491521694
1491484484
1900495025
1900430231
1197675021
1197699008
-598733488
598713423
1823950843
1823917071
-2104821631
2104770768
-2105043993
2105122667
-1620525896
1620521336
938209899
938127807
-1608351246
1608366153
-1285377909
1285391918
-496941644
496973810
-957342641
957336332
1910965090
1910983835
803107574
803139391
522785085
522716997
-345495332
345494542
1983345825
1983379560
-774877497
774879439
851114067
851111400
-1355930062
1355885767
-1911936334
1911891989
440631960
440600553
-1801097992
1801089887
-1315544461
1315440042
-1454437330
1454491650
1270323165
1270279289
-975712464
975731753
-1622896781
1622814852
-2037117260
2036984025
129967594
130004219
-331708255
331821906
796450900
796485111
-1057296234
1057305807
1800791762
1800731819
442930788
442907558
-1825711036
1825778656
449418113
449364052
762698313
762668210
1888014658
1888013871
1146044551
1146083396
-1639013885
1639016404
-1721771800
1721936558
-1543173210
1543234970
319691996
319755184
-1693437594
1693335699
-110386992
110377276
-1581719192
1581721912
-1789912754
1789776495
1502169944
1502136465
198354290
198347763
-177490423
177608279
-587624265
587684538
-129073540
129077434
-739329157
739309684
1891524418
1891513149
-985207845
985184357
2057636028
2057596774
-1506331961
1506406010
-764849146
764871100
80743210
80823756
1620383735
1620336951
-1427467195
1427582747
703628838
703653376
-1473080525
1472989206
-1971111673
1971193404
534607356
534526734
-1353803591
1353741443
-957557057
957527126
921372127
921427371
1580739021
1580734948
-814030171
813997410
-1704264079
1704420367
1036114303
1036035042
677434059
677418605
-6335725
6301888
-870474256
870450033
-1722425026
1722440622
555225948
555248827
-87100385
87139075
-580050563
580078606
71718489
71708992
889549006
889520735
-583398018
583304727
-1720707797
1720632588
-336607659
336713601
-925513547
925500466
1516606195
1516553830
-1815268296
1815257975
753970180
754041478
390622659
390659129
308892933
308879794
-1189493093
1189576958
-1031824677
1031894261
-337055686
337071976
1009042192
1009095809
144155123
144143640
1073072
1091814
-1306436257
1306519797
-1064816754
1064746212
-1175480532
1175489430
-1072644591
1072668574
-988326892
988286478
409267266
409238270
-680435720
680457021
939305589
939282169
1053501339
1053547446
775952931
776021681
1245014649
1245001461
1953786835
1953795415
-1293585241
1293587090
410570623
410550564
-1542782668
1542905701
-573556984
573509619
-335165674
335251924
1160172119
1160224070
1230797911
1230818351
-1137398801
1137334993
-211905851
212036575
-1602462747
1602472424
-1576413857
1576481359
-1863308399
1863149805
-1206522251
1206629673
2022062131
2022122557
-1212442643
1212445763
274118011
274078570
-1431747235
1431621297
1353266565
1353217878
-1439094246
1438941970
2146475786
2146453708
1179129223
1179180050
2050519006
2050519932
-1914453687
1914520937
-1472406110
1472425921
2013953588
2014018266
84059523
84071924
-257275728
257224839
1546314263
1546356747
-441046991
440993007
383462419
383415269
-1555390325
1555376611
-449216617
449230497
-409364984
409392641
344339720
344400852
-1025968321
1025983231
1570777033
1570857861
-626224403
626162839
1988915118
1988920904
91098752
91130144
773282158
773261106
-2119836179
2119713209
-1326189643
1326310813
-1330919699
1330959828
542727037
542711902
1981249701
1981247814
2039731208
2039663944
1296719247
1296744701
1999952411
2000012271
-1476435140
1476408522
609750069
609821832
-1155651606
1155546455
-1934994505
1934997331
1456245012
1456256727
372847247
372843888
-258754554
258835286
1341411715
1341472975
1648304312
1648322392
-734789219
734762097
1931629177
1931651872
-1866388801
1866432668
1767401451
1767377764
-788730274
788687185
-1444143636
1444051168
-769875054
769818255
-1493340807
1493387518
1496671469
1496610012
1062313955
1062321185
-1764550794
1764557182
-1621701178
1621839664
-148757509
148717161
263896972
263905005
-727271548
727260391
-1817972757
1818053433
-2080381033
2080423934
-1007562187
1007448751
266185456
266110600
1518472598
1518481745
-56172315
56199678
511745522
511744902
2072039157
2072050502
-486306355
486367879
-561229097
561137109
2091765723
2091764991
-157798105
157800774
123036911
122957980
-910039266
910153810
-1666513804
1666508993
-962319664
962228286
1002804736
1002735127
-5786022
5789843
-1747237031
1747219169
-665934716
665942565
-130119342
130023656
49911857
49924087
25155122
25088685
907077891
907031718
870726818
870755938
-441586499
441586538
-2005119499
2005026425
-158832429
158706547
-2124617349
2124498095
-662844164
662859138
829129175
829117419
1942757784
1942762344
-1481771906
1481695145
-1034525953
1034474863
-705931128
705904245
1398075203
1398069340
-1026796016
1026813939
-946566398
946570332
-364131060
364155822
-1610607832
1610524882
-307836771
307780056
-1482345993
1482365328
217270165
217287302
-12639209
12671760
-1439081050
Antivirus Signature
Bkav Clean
Lionic Trojan.Multi.Generic.4!c
Elastic malicious (high confidence)
MicroWorld-eScan Clean
FireEye Generic.mg.d57a65324f585b76
CAT-QuickHeal Clean
McAfee GenericRXQC-VZ!D57A65324F58
Cylance Unsafe
Zillya Clean
Sangfor Clean
K7AntiVirus Clean
BitDefender Clean
K7GW Clean
Cybereason Clean
Baidu Clean
Cyren W32/MSIL_Kryptik.FOQ.gen!Eldorado
Symantec ML.Attribute.HighConfidence
ESET-NOD32 a variant of MSIL/Injector.VRN
APEX Malicious
Paloalto generic.ml
ClamAV Clean
Kaspersky UDS:DangerousObject.Multi.Generic
Alibaba Clean
NANO-Antivirus Clean
ViRobot Clean
Rising Clean
Ad-Aware Clean
Sophos Mal/Generic-S
Comodo Clean
F-Secure Clean
DrWeb Clean
VIPRE Clean
TrendMicro Clean
McAfee-GW-Edition BehavesLike.Win32.Generic.gh
CMC Clean
Emsisoft Clean
Ikarus Clean
GData Clean
Jiangmin Clean
eGambit Clean
Avira Clean
MAX Clean
Antiy-AVL Clean
Kingsoft Clean
Gridinsoft Clean
Arcabit Clean
SUPERAntiSpyware Clean
ZoneAlarm Clean
Microsoft Trojan:Win32/Sabsik.FL.B!ml
Cynet Clean
AhnLab-V3 Trojan/Win.Mardom.C4656510
Acronis Clean
BitDefenderTheta Gen:NN.ZemsilF.34170.Em0@am!KYIfG
ALYac Clean
TACHYON Clean
VBA32 Clean
Malwarebytes Clean
Panda Clean
Zoner Clean
TrendMicro-HouseCall Clean
Tencent Clean
Yandex Clean
SentinelOne Static AI - Malicious PE
MaxSecure Clean
Fortinet MSIL/Agent.VRN!tr
Webroot Clean
AVG FileRepMalware
Avast FileRepMalware
CrowdStrike win/malicious_confidence_90% (W)
No IRMA results available.