Static | ZeroBOX

PE Compile Time

2021-09-30 09:03:44

PE Imphash

f34d5f2d4577ed6d9ceec516c1f5a744

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00002000 0x000684f4 0x00068600 6.56325510127
.rsrc 0x0006c000 0x0002c91e 0x0002ca00 4.26091615896
.reloc 0x0009a000 0x0000000c 0x00000200 0.101910425663

Resources

Name Offset Size Language Sub-language File type
GOOGLEUPDATEAPPLICATIONCOMMANDS 0x0006c394 0x00000004 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x00097fc4 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00097fc4 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00097fc4 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00097fc4 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00097fc4 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00097fc4 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00097fc4 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00097fc4 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00097fc4 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_DIALOG 0x0009842c 0x00000076 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_GROUP_ICON 0x000984a4 0x00000084 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_VERSION 0x00098528 0x0000020c LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_MANIFEST 0x00098734 0x000001ea LANG_NEUTRAL SUBLANG_NEUTRAL XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminators

Imports

Library mscoree.dll:
0x402000 _CorExeMain

!This program cannot be run in DOS mode.
`.rsrc
@.reloc
JaiZe}
}3'b@#
>W?O@#
V@Z(f
`W@Y(f
`P@X(f
@T@[(f
@\@[(f
@\@X(f
`Q@Y(f
R@Y(f
@C@Z(f
[XZ_bX
[XZ_bX
[YZ_bX
[XZ_bX
#KLzp0
[XZ_bX
[YZ_bX
[XZ_bX
`s@X(f
[XZ_bX
[XZ_bX
[YZ_bX
[YZ_bX
[XZ_bX
#V|xa6
[YZ_bX
[YZ_bX
[XZ_bX
[XZ_bX
[XZ_bX
[XZ_bX
[YZ_bX
[XZ_bX
[YZ_bX
[XZ_bX
[YZ_bX
[XZ_bX
@`_EA#
@v@Y(f
8T8v@#
[YZ_bX
[XZ_bX
[XZ_bX
[XZ_bX
[XZ_bX
[YZ_bX
[XZ_bX
[XZ_bX
#c| ~vZ
[YZ_bX
[YZ_bX
[YZ_bX
[XZ_bX
[XZ_bX
[YZ_bX
[YZ_bX
[XZ_bX
[XZ_bX
[XZ_bX
[YZ_bX
Hw@X(f
[YZ_bX
[XZ_bX
[XZ_bX
[YZ_bX
[YZ_bX
Pg@X(f
[YZ_bX
#YjVvyt
[YZ_bX
[XZ_bX
[XZ_bX
#aA au?
[YZ_bX
[XZ_bX
[XZ_bX
[XZ_bX
[YZ_bX
[XZ_bX
[XZ_bX
[XZ_bX
Z@Z(f
[YZ_bX
@G@X(f
#Aj^UOo
[YZ_bX
[YZ_bX
[XZ_bX
#2{DHU
@D@X(f
@D@X(f
@@@X(f
@E@[(f
@L@Y(f
[XXnZ>
d`EOai
Z(aiZf
"AaifeY}
+aiZZY
fZXaaf
Xeaeef
.xDaiY}
ZffeYf
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP?
P?T:^2Q9p#j
P?T:^2Q9p#
%F.g4}
p.|+D/
@/D*N"?W
E*1_;G$L
U1]>VL
xUP4LZ
M%B=_`
7Y2MsM#}cFN@$?
n5q]u;W0
$aJQA+F
9QU=t'n
d.rK4dC
*N'oRlT
H!i8z
m%B&d>
y1Z"\>
|6&Z !
g[=V g*A"
d.@'f.y
(8_8r&
!F/g[T}
.@g~R5^
k6mCf}
i!9YFa
~8f,@%
a)Z*\n9
i1T=uv
*&N'o@2x
/U>xJC.
IW*Dc
Be|L7`*
(5Be|@+D
k3X1yE
8tx2V
p$O(bvbt1
XB+cfS
7[4~lT
s{x2yx?
q)Q:tY
9^2W<O
'^7~.g
Y/A*E!B0
_Z3z*c
m%v@nC%
N P;U1
Q[1_;W
eyv?l%J
y+F"N-
VZ5Q=^
qR>U;_
LA.M%l
ZR9X<QqR
i9W<R6
eHD$:n
xZ7n|6A
SubL,:
R9W<R6
O P;U1
j7S?\4
WvP;U
MB*c0y
,e6piB
)3Zn~|
dW8\0S
gF2P=Y
O4A5^0
bq1U>x
c>p:VU
wg-~7X
B.G%N
O$A.M=
.B!I9%
oT:s i
d/J^St
q7;P3[
G(^T#@(
bIp9R<
, W?R7s
j~R:J)A
fG'a2{
-X*A/K
c N!FBM
jm8n(H
e!4|5f
1u>/f5
5m$7\2
uG)C-a@
>j#s:i
<hWg.}
{/.h<v
BZ{n't=
:>Q9p#
Eb@Xh?
br1@BL
cj4$G#
=v2],B_
:Y1xC(
&LDU'a%,
^3X5V>w$
XY5^0T
@,O'n
$A'n=$
}4[0^O
wC-N&U
(C=Z7)y/
M:C5R?
x+6"N-
q8k""B
bq j:"
v$mI N*F
\;V3wV
|_1U9ZJ
Di q8W
?a(GDMo
8h{n'H
^s(=Y5V
s|;I'C/
B)VL'I
&V6T<u
kP%7[5
L*E"fC
TRV'D,
lvhz!N.
YH[ff,
`yTv>_N
LB*D Ln&g
dO&I.3
jx_+yT
,w}*5 }
S)L XB
_=V 3:
F-{/~TB$
l@C'dt
0_5\9Fo
yp7X4~
#@$I+D
UB&I*B
u&K0]/
1a*z4Lq.;
+-H%L)6
e2c+E,)
Bv?P;U
{$2T8[
xs9V=S
I6<N"A
w5\1S;
TPK#i:
kw4]:W
U4Y;k4g-B
,D?j*z4
})n!i;
cH?O#M
ryR'Sg
t f<V5]
|/RG+H
#_^F.g
bCqA.E
f!V_<Q
`A_@.J
7sj.g4
mV[[0^
eH0p#j
PWB<X4$z
`v,J'EE
^/dC){3MpN
%c]?\4
0tO7~-
Xv[8T;
UG,A#cV
x_3]9U
Ec2gX/
@84S;r
_1U9Zk
h5R7Y=
2q<^2Q
@$F%Mw
k<:OmC
/L(b2)
d#.W3_
w(H'D@
|M9q E
AGYO,D
;oH=t'
;h-O$H
QE,P9
fl(D,e
oz)@$H
fF-O(y
u>/I"L
9oEK(@~
^a~~gf
>je2{(
+@#Kuh=
l1Q:J.{
b{S8[3?
J%N8|9[4
g.A)G#O
DU9R<X
VQvB&J
FFy1_
AR3z)_0[5i,_8r
oI,@#K
\'C/K#j9
K$O!]>
&L(D'O
z3`)FE\j
N5xL'I
:n_k"q5
Yt!i;
M;gC H
p*^So&u
~2yZ3{
`t*F*I
q9k:fH&B
^U|p#jz
bu8n(H
6^@)a2
)xHI'M
%^mj9p
PPse,C
=]1R:s8W}
K9_4XH
`{1^5[
|+8Z?T
T5eZ4P
5#U4Rh
{(aV:Y
wA/E+g
M>H&8T
AA^`)F
>h6^>W
!R<X4WW
m!`Y1x
A,f6/X
G"E,B&
5_<Q2Z
+M+H,\
YF8O#@
Qu:V>Q
m|3`*z
c qs|
@Dyr;h
t O,3P.g
Qj9p$
Y,G)L C+
Cl)q8W<
a't=RQ
lW>w$m
`Sr<T
elO*d8
y'Cf ?
^}+D/A
W7t'nt
A*?,G)
}9W= r
{([$H+
g%v?Pt
1_;WL!
Z7U>j9f
Y"%R:U
i}z3`)F
S6b5Ki
7U1M.F''
9.A"Jx
mM%h;r
.*B(F"
')J"M*G<
5P*I6+
2Z8\5%%
%ey|a6
kv*xejWl;
C H~&k
9nj#p9
|@5ta!
7*+Av`
RA2W<w02a(
YB-e7-
#n0k2-
v_S 8C*
k(b|Fo
1ccOJ{
+B(a2+
VA.A&b
n.p$n~Q;
3vK#j9
Y(&4[0
:if/D(
&K!P4p
TG-d7(_
/U1YI&M#G+
VUxR?]
cU0\?W
c=>]5*
#E+O p
Mv+D/>
jG+/6n,
s/lI"l
E.gB*E
:Q?[O"
hG)M!ZGJ
9h!N=,
5\2V[8P
*{[@0\
e/G*O;R
\*=S7[O
]K;E&N|
u-CKYc
%^5t'nv
+S?t;m>w
U4x4\8
+g^@)a
N58Z2]
zU0\?W
USQA#L
^MR<-s
0w*G$I
p:i8Z)G#
X~C.F)
@QH,B)
USG-P9
n({2]6pz
r1n(F&
4X3P7~
5P<_7#
ygOd*hwY
dH#@(a
r-;]1R
C9[4JG
#\.I%F
GC2n){
2RF&ODcfF
1!U7` V
V=X7T8spI
n+F.A%
#)M!B*
A RO"G
S@+c1"
P1b+D/
C"!2uf
Sl~?<h
o12/AY
U-*Kd6
R+(V;5
c\<Y6D
^;Q@!
iC<ZCI
G+*E+O
S+)}e,7<
Ic N*F%
Q)00#:
F9G+@#
St7/QZ$5
\s-Xzjj
N#I(3B
p: <ut."
!m@pH$
?S8404
L_R_Z3{eD+@.J
sZV:Y1x
'|?C"&G
R9k4"&9R
9Td[Lr
G48gV,
`{`ro)U
J^wZT){
7:4#mK##
1`*)WI
'PKN~#(
0~sAg[
0m>Nls
97r=l/
FwU3J)
r>5V`;7
*r9vw7
z|\>.r
:He., i
K;UT-z^
NPSetY2za
w#JZz*nD
;pZ\:22
J(@_}m
>VpRv_3
1"rI}o
hn_{x"
O#W-$.
u_c`{m
G*1=xVL
jX$~wK
`| NA<&"j
bn|5{q
sEIq|~
H1ia}[@
{PN.I_
|`2[0EC>
]FFkL+
nkdH&g
;hta:Q
$pb!gX5
9t2u-L
+{PZY2
FH]CNHg;
g}OPJj
}=b(M9
$~+3-j
~;a M}
8N#V\mti
bm.?`&
a?M}7g
c=Y 4hnf:
E6<\&Z
tQ{HOOe
,W18}7
W.%,N_
oZPT9Q]
y4z?S)
x*aC@M
t2kRJ_
LVG#T6
E$e?X3
p=[T"i
K_cYPqaT
\\W"nm
gr_-ifT
8@;m_[
e;Xe(eGr
TD-xV{
R$-u&-
JjYM9eC1?i;
WVTMB0v
uy5pl`
ldH}-
T`?X,d
?g.yCH^T4-
]m=<B"
5d6qZ4o
fntYdk
e2_?vj
jyY|yc?
rTcac-
`JQm+Nt
$_AqTDF
GIijb"w
|wd|eN
xB`q}uj
0Jrp+8J?
m^Mu[$
;QV}po
*Qai#:&b
`$+]Sl
Rjw|A,
`H+c#a%
M"I'C/L$m>w
M"I'C/L$m>w
M"I'C/L$m>w
M"I'C/L$m>w
M"I'C/L$m>w
M"I'C/L$m>w
M"I'C/L$m>w
M"I'C/L$m>w
M"I'C/L$m>w
M"I'C/L$m>w
M"I'C/L$m>w
M"I'C/L$m>w
M"I'C/L$m>w
M"I'C/L$m>w
M"I'C/L$m>w
M"I'C/L$m>w
M"I'C/L$m>w
M"I'C/L$m>w
M"I'C/L$m>w
M"I'C/L$m>w
M"I'C/L$m>w
M"I'C/L$m>w
M"I'C/L$m>w
M"I'C/L$m>w
M"I'C/L$m>w
M"I'C/L$m>w
M"I'C/L$m>w
M"I'C/L$m>w
M"I'C/L$m>w
M"I'C/L$m>w
M"I'C/L$m>w
M"I'C/L$m>w
v4.0.30319
#Strings
#fsdgfgffsdf#
#fsdfsd.dll#
#fsdgggfsdfsd.dll#
#fshghgfhdfsdf.dll#
#fsdhfsdf.dll#
#fsdfhghgsdf.dll#
#fsdggfdsf.dll#
#fsdfggfdsf.dll#
#fsdhhfdsf.dll#
S400_400
IsClr40
<>c__DisplayClass3_0
<WriteTo>b__44_0
<>9__8_0
TraceLevel0
$$method0x6004238-1
<>9__44_1
<>c__DisplayClass3_0`1
IEnumerable`1
IEnumerator`1
List`1
IsSeparatorLatin1
$$method0x600425d-2
Advapi32
NumberToUInt32
ToInt32
Func`2
ArraySortHelper`2
Converter`2
FindAssemblies2
GetTypeAccess2
Prefix2
<Initialize>b__89_3
PutInteger4
S_BLOCK16
ToInt16
get_UTF8
<Module>
UseENC
ERROR_NOT_ALL_ASSIGNED
MUI_LANGUAGE_ID
Serialization_NoID
FIND_FROMEND
CSIDL_INTERNET_CACHE
S_ARMSWITCHTABLE
NONAME
Get_SISO3166CTRYNAME
LOCALE_SNATIVECOUNTRYNAME
DEFAULT_PACKING_SIZE
HOT_HEAP_DIR_SIZE
GREGORIAN_XLIT_FRENCH
COR_E_AMBIGUOUSMATCH
_lowASCII
Conv_I
ALREADY_INVOKED_SENTINEL
LOCALE_SKEYBOARDSTOINSTALL
S_GDATA_HLSL
DX_MNN
UseOptionN
System.IO
ISO2022JPSISO
X00_DQ
VTHACK_ANSICHAR
CAL_KOREANLUNISOLAR
IokndlchIS
CSIDL_COMMON_ADMINTOOLS
M_AssertFT
S_GTHREAD32_ST
S_LTHREAD32_ST
S_COBOLUDT_ST
CSIDL_STARTMENU
GenerateIV
ERROR_DIRECTORY
<.cctor>b__a
KeepExtraPEData
NormalMetaData
CreateData
GetAllRawData
mscorlib
Set_BigBlob
FCallAddSub
PtrSpec
System.Collections.Generic
get_IsStatic
C_localId
GetProcessById
lpNumberOfBytesRead
hThread
get_CurrentThread
thread
get_IsAttached
Get_Enabled
DebugStripped
IsFlowSuppressed
MemberDefRidsAllocated
ResourceManagerInited
IsPathRooted
BackgroundWorker_CancellationNotSupported
M_bIsDomainInitialized
fshghd
IsNativeEntryPointValid
Get_Void
TryParseGuid
Set_IsField
Ldsfld
_skipchild
Get_DateEnd
Get_Kind
ParseFailureKind
ContractFailureKind
Get_AddressKind
set_IsBackground
DynamicMethod
DefinePInvokeMethod
SetRaiseMethod
ResolveMethod
GetMethod
NetGuard
Password
fsdffsdfsd
get_IsInterface
Replace
NoThrowInstance
LoadResource
FindResource
SizeofResource
Get_UseUserOverride
Get_SizeOfCode
GetHashCode
MutexCleanupCode
_errorCode
SetCode
CryptoStreamMode
runcode
Xenocode.Client.Attributes.AssemblyAttributes.ProcessedByXenocode
ReadWriteSubTree
UiFamilyCodePage
Get_SizeOfImage
EndInvoke
BeginInvoke
S_pDataTable
get_ParamTable
IVariable
GetEnvironmentVariable
Enumerable
IDisposable
Inheritable
IFormattable
set_Visible
Double
get_Handle
RuntimeFieldHandle
get_MethodHandle
RuntimeMethodHandle
GetModuleHandle
get_TypeHandle
RuntimeTypeHandle
CloseHandle
GetFieldFromHandle
GetTypeFromHandle
ReadSingle
Get_ConfigurationFile
StartProfile
Console
AllowMultiple
Get_IsSimple
get_Module
DefineDynamicModule
set_FormBorderStyle
get_Name
EnglishEraName
mscorlibName
BindToMethodName
C_UsedFileName
CAlternateFileName
M_langName
Get_IsRuntimeSpecialName
TypeFullName
M_textInfoName
FilterName
AssemblyName
Get_PropertyName
GetMscorlibFullname
GetCreationTime
ReadLine
WriteLine
GetMachine
SymScope
Get_GenericType
get_FieldType
DefineType
InlineType
CreateType
ValueType
get_DeclaringType
PermissionType
flAllocationType
Set_ReturnType
get_ReturnType
Get_DontCompareReturnType
Get_UserType
get_ParameterType
Set_ContentType
System.Core
ResolveSignature
SetLocalSignature
SetSignature
M_culture
TransferCapture
MethodBase
WindowsBase
InternalDispose
Truncate
CreateDelegate
MulticastDelegate
set_WindowState
FormWindowState
ToFileSecurityState
UnsignedInfinite
BeginWrite
STAThreadAttribute
CompilerGeneratedAttribute
GuidAttribute
UnverifiableCodeAttribute
UnsafeValueTypeAttribute
BabelAttribute
SetGenParamCustomAttribute
SuppressIldasmAttribute
AssemblyInfoAttribute
YanoAttribute
DotNetPatcherPackerAttribute
BabelObfuscatorAttribute
CryptoObfuscator.ProtectedWithCryptoObfuscatorAttribute
DotNetPatcherObfuscatorAttribute
DotfuscatorAttribute
CompilationRelaxationsAttribute
SmartAssembly.Attributes.PoweredByAttribute
RuntimeCompatibilityAttribute
SuppressUnmanagedCodeSecurityAttribute
C_ticksPerMinute
AddCAValue
StringValue
InitialValue
SetValue
ApplyEditAndContinue
get_IsAlive
Get_IsPrimitive
IokndlchIS.exe
get_Size
CodeSize
C_InitialTableSize
Get_HashSize
M_initSize
dwSize
Resize
SizeOf
fsafafwwwwwwwwaf
fshgdf
fsdfhghgsdf
TokenToTypeDef
HasParamDef
Get_IsPropertyDef
AddTypeRef
GetGlobalTypeRef
Get_IsTypeDefOrRef
get_IsByRef
fssssssssssafffffffff
faffffhhhhhhhhhhhhhhhhhhhhhhfffff
faffffffssshhhfff
fsdhghff
Loadperf
gfdffffhfffg
ModifierSig
System.Threading
Encoding
IsLogging
StartCrossDomainTracking
Ceiling
NoInlining
DateMapping
FromBase64String
UTF8String
OutputDebugString
ToString
GetString
Get_IsNativeVarArg
Get_AutoFlush
AllowDOSPath
get_ExecutablePath
M_GroupPath
UserPath
ObfuscatedByGoliath
get_Length
MaxArrayLength
EndsWith
StartsWith
ExceptWith
Get_AbsoluteUri
ISCIIDevanagari
M_eventObj
AsyncCallback
callback
DumpStack
MethodArgsStack
M_foreignLock
ReadInitialValue_NoLock
DefineEnumNoLock
FlushFinalBlock
FlagsMask
FieldAccessMask
E_UserNotCanonical
Marshal
FCallToDecimal
IsSingleDimensional
MetadataTokenInternal
GetFastDomainInternal
Get_Principal
SecurityControlPrincipal
advapi32.dll
kernel32.dll
TrimWhiteSpaceAndNull
Control
GetEnumeratorImpl
IsGenericCOMObjectImpl
Get_PdbStream
CryptoStream
MemoryStream
Get_GenericParam
QueueUserWorkItem
System
SymmetricAlgorithm
ICryptoTransform
_CreateEnum
Conv_Ovf_U2_Un
DWORDFromBigEndian
Argument_InvalidOffLen
get_MetadataToken
M_catchMetadataToken
ReadToken
TypeToken
CreatePublicKeyToken
lpNumberOfBytesWritten
Get_PositiveSign
AppDomain
get_CurrentDomain
Set_MajorVersion
GetPermission
Identification
Application
get_Location
TimeZoneInformation
Configuration
NineRays.Obfuscator.Evaluation
Synchronization
System.Reflection
IsArgOperandInstruction
GetInstruction
IsGenericTypeDefinition
CallingConvention
RuntimeWrappedException
GetVersionParseException
M_cancellationException
FormatException
GeneralShortTimePattern
CurrencyPositivePattern
UtcSortPattern
GetDynamicILInfo
get_OSInfo
EhStartAddrFieldInfo
MethodInfo
MemberInfo
ParameterInfo
_GetSubjectInfo
StringHeap
LastGroup
System.Linq
set_ShowInTaskbar
MinEraYear
MaxHebrewYear
SetColumnNumber
IsSmallHeader
DosHeader
DESCryptoServiceProvider
Get_FormatProvider
MethodBuilder
InternalModuleBuilder
M_globalTypeBuilder
ContainingAssemblyBuilder
lpBuffer
_InputBuffer
ResourceManager
Debugger
IsModifier
HasOwner
QueueUserWorkItemHelper
ChunkComparer
CreateProcessAsUser
ReflectionTypeNameParser
KeepDelimiter
get_IsPointer
Hash_counter
BitConverter
IsCaster
OpResolver
GetTokenFor
BadAuthorityTerminator
SThousandSeparator
GetSeparator
IEnumerator
GetEnumerator
.cctor
dotNetProtector
get_IsConstructor
CreateDecryptor
UIntPtr
MillisPerHour
System.Diagnostics
InitializeMethods
GetMethods
Interfaces
AllowBraces
System.Runtime.InteropServices
System.Runtime.CompilerServices
System.Resources
IokndlchIS.resources
_nameHashes
DeclSecurities
Properties
MDBeginCreateTables
get_AllLocalFiles
EnableVisualStyles
Equals_MethodFieldNames
Get_DayNames
Get_HasScopes
CorLibTypes
EmptyTypes
MethodAttributes
TypeAttributes
MethodImplAttributes
GetCustomAttributes
GenericParameterAttributes
Get_SecurityAttributes
M_attributes
GetBytes
InitializeParamDefs
Get_DontProjectWinMDRefs
GetAssemblyRefs
BindingFlags
GetSpecialFlags
GetMethodImplementationFlags
SetImplementationFlags
MinTicks
m_fInitLocals
Equals
ReadGlobalSymbols
System.Windows.Forms
CompilationRelaxations
System.Collections
WriteInstructions
CallingConventions
Get_LoaderExceptions
M_faultExceptions
GetMergedPatterns
eventDefInfos
GetHeaps
WaCalendars
get_Chars
ImageNTHeaders
GetOptionalCustomModifiers
FireNextTimers
GetParameters
M_publicKeyParameters
get_IsClass
AssemblyBuilderAccess
hProcess
GetCurrentProcess
lpBaseAddress
lpAddress
M_IPForWatsonBuckets
InstrOffsets
UnlimitedDigits
Get_PercentDecimalDigits
set_CurrencyDecimalDigits
M_elements
GetRequirements
GetGenericArguments
InitializeKeys
Concat
GetRealFormat
Subtract
IncludeSect
ContextBoundObject
InternalToObject
GetObject
object
Get_Subject
Select
flProtect
CachedDict
M_unrestrictedPermSet
CharSet
Set_IsSet
BinderNonFieldGetSet
Get_HandlerOffset
M_handlerOffset
InternalRegisteredWait
op_Explicit
System.Reflection.Emit
DoubleRoundLimit
SetCompatibleTextRenderingDefault
FirstOrDefault
IAsyncResult
CreateSearchResult
result
s_Invariant
PositiveInvariant
IsTransient
Fragment
Environment
get_Current
CheckRemoteDebuggerPresent
IsDebuggerPresent
OnAssemblyLoadEvent
M_event
NoSpecialConstraint
Get_AddressOfEntryPoint
IFrameCount
Get_SequencePointCount
Set_IsolatedStorageRoot
ParameterizedThreadStart
Convert
UnmanagedExport
FailFast
GetMethodList
PrintMethodArgList
Set_ReadTimeout
SuspendLayout
ResumeLayout
OpenStandardOutput
MoveNext
System.Text
IllogicalCallContext
context
RawPropertyMapRow
nativeCompareOrdinalEx
IntToHex
ParamIndex
CArray
ToArray
get_IsArray
Occupancy
System.Security.Cryptography
DefineDynamicAssembly
GetExecutingAssembly
Get_MovedToAnotherAssembly
CheckFamily
BlockCopy
OpenScopeOnMemory
GetRandomDirectory
Set_RootUserDirectory
M_RootDirectory
op_Equality
System.Security
SuppressUnmanagedCodeSecurity
Get_IsNullOrEmpty
ParseProperty
198 Protector V2
System.Security.Permissions.SecurityPermissionAttribute, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
SkipVerification
WrapNonExceptionThrows
_CorExeMain
mscoree.dll
^@BB?9{:?i
:S`;?;a
^?!>gO
ZmCwq
t'lejk
=e%S!<
wIsD'0
sJ+(/(
`/6$Ou
Vt<jft0))fcP
+PCSI3
2M`j\5D
^<"xI"0622
o!IMJ
nK%_u9
Q!sjQu
T' :@t
;<ikC3
@pNZr_7
w+!tC
g`\`&k
\`Bp1R9
vNx!$4
B(&37!mM#m
}Yg?,c
Tt@mvQ
}4A%@P
K>xXo5
@J 7nA^~I
'%400G
)%x( B^
CE&E.dS
4 QP8Ygfw
XDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
<assemblyIdentity version="1.0.0.0" name="MyApplication.app"/>
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v2">
<security>
<requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3">
<requestedExecutionLevel level="asInvoker" uiAccess="false"/>
</requestedPrivileges>
</security>
</trustInfo>
</assembly>
IokndlchIS
GetEnvironmentVariable
572769023
572781581
-135845716
135966666
_ENABLE_PROFILING
_PROFILER
-201251754
201323497
-1844130158
1844152011
-825652915
825626822
1764766714
1764789218
-507330308
507256769
1333498793
1333492194
1978829421
1978844225
-960017991
960080907
-1713355668
1713257638
815454939
815520089
-1590667608
1590653758
220811009
220821505
-988323204
988322127
1501465456
1501539128
-1628155791
1628067494
1213327305
1213237147
1215958342
1215981773
1367616451
1367649398
118846443
118878923
65674753
65682086
-1286937012
1286904770
294336648
294334400
-920174991
920229127
-770062073
769932094
90854890
90866410
-861117580
861101074
-649545482
649480110
310033330
310003889
-979840114
979858779
1627700067
1627658862
470123595
470133934
682577273
682604782
-347211755
347255445
1454757505
1454758739
-1716764688
1716617278
-1538266391
1538281832
-892916928
892920450
1984732243
1984811711
870016831
869942267
-681361456
681558186
224920643
225019059
-1787709314
1787619184
-1749554071
1749579744
-619772302
619814389
-1939421104
1939392564
1440420743
1440446461
-963721282
963718511
-1011858094
1011771295
1019210416
1019202739
1982657017
1982598208
987986430
987986381
365655213
365654267
-826708879
826733158
-1686243958
1686130970
1678209904
1678227312
-1843015941
1843028970
-1517202983
1517064083
1698368912
1698384903
2111527472
2111521546
-1706995035
1706955577
-93212317
93283652
1138739056
1138696423
2092930741
2092879261
1597530373
1597513674
650823948
650873579
1049863719
1049866461
-317866393
317900560
1420546470
1420512592
152274464
152300051
-1295701982
1295755623
-1336372956
1336317665
-80941621
80901549
301470789
301510008
-1236762655
1236742618
-1241232898
1241201323
-2005833682
2005670183
1319793643
1319767101
-1138789155
1138806854
-1170362323
1170343428
-1549467359
1549458125
413197965
413238789
-833255442
833347963
15850918
15815649
1324972435
1324995411
1745578824
1745586625
-132395949
132434301
-633972527
633886493
-1059591124
1059607444
-816392938
816396020
785652047
785663842
1535479010
1535430556
-2146397096
2146313131
-739587072
739518915
-1297921604
1297974096
-1051762290
1051731516
1501882815
1501887002
-851218701
851189672
1422678156
1422684609
966051581
966099661
500530175
500542621
674010719
674028721
-1984662681
1984667929
-1428868603
1428828026
158309856
158268138
-1955740520
1955784910
746320245
746284702
785823724
785904428
-1047932894
1047974516
1966841465
1966861223
1962405905
1962375563
218711819
218706107
1104128015
1104087204
94620738
94549781
-1464862183
1464901472
-1813660437
1813694105
-2037968580
2038093375
298770858
298763751
2077174063
2077169983
1923912278
1923910675
-71590736
71656571
-1238497797
1238426259
-2091164511
2091138365
1983674181
1983724813
-403363852
403403269
1139169404
1139185130
654680923
654634379
497996852
497980109
1820654390
1820636150
1265947089
1266021351
-1265024766
1265008690
-126374030
126381056
-550994258
550970075
1216281211
1216327072
2096534981
2096524254
-844005695
843998285
-1221190023
1221165242
1608251462
1608194267
-949049274
949082486
962070000
962164063
-221171286
221181876
508007457
508019270
-2016010137
2016140789
-2115232205
2115181483
-324496623
324349458
1028694427
1028680972
-1988325134
1988170385
-560686833
560704642
-1596102195
1596110975
545524967
545597944
398931855
398927134
987675094
987628194
2095571006
2095501303
-1035650030
1035674787
-908272837
908144450
138411339
138393072
-181226059
181355209
-1212129827
1212060716
1853294281
1853301760
-771766730
771760470
-573759024
573804949
-1682380411
1682400654
-1117501606
1117425654
906657592
906647164
1849057995
1849109659
777154759
777213326
881744176
881761035
-1887452989
1887463161
888080525
888083089
-1527826120
1527778759
1571955558
1571988226
1895294634
1895298023
-1592846349
1592808018
354590987
354624126
-1818953917
1818845760
-923023182
923113328
-1194366070
1194431417
-1521658063
1521661992
-1131444427
1131498539
-879831178
879844267
-2137298759
2137438792
-2112816397
2112722253
1837989746
1838011562
-659052544
659093304
1451634575
1451641907
-42303967
42262845
-36731068
36829593
1581977120
1581910731
-525491790
525348176
194004936
194009599
-355972290
355897681
-753549342
753546232
1426619416
1426657715
-1883718002
1883642064
-1568017540
1568091531
826811891
826835513
-749438154
749391897
1060051100
1060097458
134496382
134539551
1980102013
1980077126
-1842159370
1842092250
533391847
533347040
1772531287
1772486943
1780109778
1780103595
-1600657807
1600689147
-34039733
34041940
1188843105
1188907567
-73321590
73395194
1963277207
1963271978
-1125537753
1125402299
1829853289
1829766044
-1161962072
1162011706
1225271298
1225295121
-1483722007
1483584433
-180075161
180065975
-1238237211
1238131879
522762786
522836216
-1191775997
1191921811
-240499503
240635875
2004759623
2004836715
1878487958
1878425036
-1020187306
1020203990
-985216041
985227128
1322490981
1322443356
-2127466573
2127541518
-1970799998
1970921968
1533716912
1533719201
-1930731063
1930756881
63019361
62979704
-148560880
148414459
1764875088
1764857456
-680925513
680829356
-1486831241
1486757319
518826472
518838092
1543518127
1543513495
-729441648
729312595
1120848012
1120818835
-485996334
485866425
-888438842
888470002
2030891076
2030865607
-1438180032
1438127594
529117326
529078514
1705225104
1705162422
-1665999874
1666041105
793317612
793375989
-2083238807
2083166018
1030704079
1030635060
1616570659
1616535308
-1885726313
1885612338
-338049282
338148976
-54879826
54916879
-1240633115
1240493819
-289061893
288887633
341305657
341275309
463580481
463522945
-2030427032
2030417495
1671917180
1671855120
993291062
993354000
1531812852
1531784538
1318984316
1319019302
-1702366148
1702392519
1057211544
1057162224
-1110503397
1110454074
1137855989
1137915860
1912407772
1912366884
1158335635
1158302295
1626687069
1626632202
781823597
781812314
-1559389879
1559476654
-1320814253
1320881934
1021306890
1021226072
-643357709
643423809
823060940
823025221
-648228169
648263562
1144742915
1144780226
-937738708
937731669
-285775625
285823183
-1286934005
1287103091
-38284068
38299209
1046353769
1046398197
-1869104802
1869221173
1604663507
1604613550
-1568837752
1568707362
-574600790
574541910
-486453213
486508592
586905847
586905486
818562459
818576224
178761338
178769985
-1290053226
1290055725
132467257
132502212
1657226196
1657162441
-1368493539
1368460674
-438618982
438610419
496529359
496587382
439663589
439652431
-625871541
625739907
342976980
342885785
1485290426
1485306768
-2109961884
2109826790
2029356805
2029297432
476606238
476631618
186547212
186550700
1716385538
1716381955
-1141231117
1141223931
308648987
308652002
-1771213149
1771235048
-2058860991
2058781648
865543597
865576436
377400866
377364676
-2059483397
2059634007
-798508232
798502641
-377066509
377092266
-417928894
417949721
-1069923470
1069876087
-1674063041
1674170776
-1058872581
1058814713
92867652
92870033
-1666777624
1666842351
-1542606386
1542646065
-191933598
191921732
-1153847880
1153892476
340586111
340618141
-1585549445
1585689088
186120496
186025864
571300968
571331670
1005517681
1005496920
1995014650
1994968913
1958145633
1958149079
1469032312
1469023730
96807503
96811727
2017672399
2017683562
-1675478326
1675384781
-1423039726
1422978723
-142490252
142531015
479171940
479132690
1198961751
1198928869
-1011776593
1011847536
-775256059
775186559
1528668545
1528688578
802250323
802284517
573265467
573271269
1463587252
1463648730
-652383223
652446359
-520984000
521002133
407485841
407413754
-114222554
114206801
-222635399
222613112
-549393126
549405968
-1599645746
1599671779
-2130550110
2130536541
-486638056
486578137
937078253
937160268
457760393
457756548
-59818879
59902880
-1616512669
1616564653
935549317
935482082
-434886296
434863941
702714767
702721756
-707945232
707973191
-1931511068
1931617294
-802988177
802996280
1645714916
1645684778
-1065746823
1065788696
-1276951241
1277080740
-1706787262
1706770643
-1805131156
1805209008
1982493924
1982464675
1832348663
1832373400
-1292209227
1292118234
-1975521133
1975520069
1393257779
1393184164
371235366
371323595
-60658257
60791915
2007487245
2007456894
-1717166530
1717064565
-578747784
578734646
-526597485
526632776
-8545317
8397102
-1886783896
1886870250
1368269489
1368287542
-116701223
116671243
Delegate Using the Anonymous Method
Delegate Using the Named Method
studentQuery2: select range_variable.Property
Tom@abc.com
9328298765
Jerry123@aaa.com
9876543201
Bobstar@aaa.com
9087467653
Markantony@qqq.com
9870098761
-647172835
647215808
-1384388201
1384489090
Area =
{0:F2}
125725558
125775817
Square #1
-1576838848
1576861533
Circle #1
-1996605661
1996562464
Rectangle #1
Shapes Collection
6719287
6718480
-603007138
602945342
-1545402323
1545380740
77723536
77721686
87654321
-1531324486
1531389425
-939710180
939695711
1193378231
1193402628
-1701618652
1701614377
722952830
722985205
372889641
372833346
-252006415
251941473
402906809
402817871
543627336
543633757
-193532713
193519405
managed
native
IokndlchIS
-68588960
68560591
2122361977
2122357577
-882588416
882472995
gUDCu6r0+yGzn/DlP3OAa6pbZGH+sVeB
Antivirus Signature
Bkav Clean
Lionic Clean
Elastic malicious (high confidence)
MicroWorld-eScan Clean
FireEye Generic.mg.e1be4d5a120b60f3
CAT-QuickHeal Clean
ALYac Clean
Cylance Unsafe
VIPRE Clean
Sangfor Trojan.Win32.Save.a
CrowdStrike win/malicious_confidence_80% (D)
BitDefender Clean
K7GW Clean
K7AntiVirus Clean
Arcabit Clean
BitDefenderTheta Gen:NN.ZemsilF.34170.Lm0@aS9jReki
Cyren Clean
Symantec Clean
ESET-NOD32 a variant of MSIL/Injector.VRI
Baidu Clean
APEX Malicious
Paloalto generic.ml
ClamAV Clean
Kaspersky HEUR:Trojan.Win32.Generic
Alibaba Clean
NANO-Antivirus Clean
ViRobot Clean
Rising Clean
Ad-Aware Clean
Sophos Clean
Comodo Clean
F-Secure Clean
DrWeb Clean
Zillya Clean
TrendMicro Clean
McAfee-GW-Edition Clean
CMC Clean
Emsisoft Clean
Ikarus Clean
Jiangmin Clean
Webroot Clean
Avira Clean
MAX Clean
Antiy-AVL Clean
Kingsoft Clean
Gridinsoft Clean
Microsoft Trojan:Win32/Sabsik.FL.B!ml
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Trojan.Win32.Generic
GData Clean
Cynet Clean
AhnLab-V3 Clean
Acronis Clean
McAfee Clean
TACHYON Clean
VBA32 Clean
Malwarebytes Trojan.Crypt.MSIL.Generic
Zoner Clean
TrendMicro-HouseCall Clean
Tencent Clean
Yandex Clean
SentinelOne Static AI - Malicious PE
MaxSecure Clean
Fortinet MSIL/Agent.VRN!tr
Panda Clean
No IRMA results available.