Static | ZeroBOX

PE Compile Time

2021-11-02 20:12:32

PE Imphash

f34d5f2d4577ed6d9ceec516c1f5a744

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00002000 0x0006a344 0x0006a400 6.69717334893
.rsrc 0x0006e000 0x00010d86 0x00010e00 4.06942962465
.reloc 0x00080000 0x0000000c 0x00000200 0.101910425663

Resources

Name Offset Size Language Sub-language File type
RT_ICON 0x0006e144 0x00010828 LANG_NEUTRAL SUBLANG_NEUTRAL dBase III DBT, version number 0, next free block index 40
RT_GROUP_ICON 0x0007e96c 0x00000014 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_VERSION 0x0007e980 0x0000021c LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_MANIFEST 0x0007eb9c 0x000001ea LANG_NEUTRAL SUBLANG_NEUTRAL XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminators

Imports

Library mscoree.dll:
0x402000 _CorExeMain

!This program cannot be run in DOS mode.
`.rsrc
@.reloc
@S@Y(s
U@Y(s
@Y@Z(s
@\@Y(s
|B(m@#
`[@[(s
@P@[(s
@]@X(s
@\@Y(s
@T@[(s
@F@Y(s
`W@Z(s
`\@Z(s
w0{ai(
[YZ_bX
[YZ_bX
[XZ_bX
[YZ_bX
[YZ_bX
[YZ_bX
[YZ_bX
[XZ_bX
[XZ_bX
[YZ_bX
[YZ_bX
[YZ_bX
Ky}A#
[YZ_bX
[YZ_bX
[YZ_bX
[YZ_bX
[YZ_bX
[XZ_bX
[XZ_bX
[XZ_bX
#/zhQXI
[XZ_bX
[XZ_bX
[XZ_bX
[XZ_bX
#>0O>.
[XZ_bX
[YZ_bX
#):U>zS
[XZ_bX
[XZ_bX
[YZ_bX
[YZ_bX
[YZ_bX
[YZ_bX
#g=1!_
[XZ_bX
[XZ_bX
[YZ_bX
[XZ_bX
[XZ_bX
[YZ_bX
[YZ_bX
#nWv'.
[XZ_bX
#ytDrX
#>.7lH
[XZ_bX
[XZ_bX
[YZ_bX
[XZ_bX
#*W:.=o
#Ufn;?
[XZ_bX
[YZ_bX
[XZ_bX
[XZ_bX
# 7ue"
[YZ_bX
[XZ_bX
[XZ_bX
[XZ_bX
#OdgaL
[YZ_bX
[YZ_bX
[YZ_bX
[YZ_bX
r@[(s
[YZ_bX
[XZ_bX
[XZ_bX
#9nrfw
[XZ_bX
[YZ_bX
[YZ_bX
[YZ_bX
#2i.a,
[XZ_bX
#vBa J=
#PZ;Yx<
#P>;PZo
[XZ`(D
[YZX(V
[XZX(V
[XZX(V
[YZX(\
[YZX(V
[XZX(V
[XZX(V
[XZX(V
feeaYeef
eA'/ai
ZZYeYfe}
eaiZYfYfee}
BJ>A(x
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
{m]5f_
oS<Krp
{woEzB{
|V 0^L
)~#wh:
d!h*,>
&>Cmu7V
)39*EQO
Ug89}x
iU];V([
3[C;{m
JZ&Rp@a
fG*`C|
HG[VBd
(`$*:{
CS90m>,xH
G;la/N
Dj:KLY2
D`C_O&
u's!an
wkJ|yO+
Q2yO@a
|KSqZ]Qhyv0%
x'7X9;i*?
7M^BhW
}f6%{iI
[}d>tVy,8
Hybul1
/;;>%z
`!G\=5)
>~1w,M
_&)q]n
Vc($?J
8+p;uR
:}h/m4"0
H(^H!7
OOXE#5
sMQ>h
#`Oi%i_?
HG5NQ*
OW!ADm
qn;z-1?q
y<^@m`|
3xZw_L
<}hpGS
J&v+uZ
:eiX?x.
?r/QdB
9;&\,.)
c-1`sv
T_I+&+
d]BoFh
9:k4KCuw/MA+B
!]TS?"
7!FF^7LQ
`.MOLW0g<
u,&7"%X
Uh^0+^+LN
t07^_N.
tMC61.
aS/VPC
n*8fq
`Bxq#~y
ty,{d(
^I;xe_
{NV?o4
t0@ieG
;iv}ch
Z4?RhZt
NV|Qkx
M<@=
r2uk;[On
!U)`nx
!U)`nx
UcHhp1
Bpfy[!C)zL[
f.-\8O
`z<~|g
ix&(3Xk
8plrSo
6D|8 P
~.QYwE
!8\qp|
m1KHb}u
-rwttjSd
IrmB%%
tB5S9QC
2:4u"[
AXS|LG
q_*~G+
]!lao~Z
z]Csk0
%whw/\
l@d6?OD
#h7:DeT
;Y} q{
I~C4NO
19&Mw.
\[>mVz
_I^!AoU
#bddzC
M%$X=
p l<B:G|
E1X6C
RWCc=c
60Jhl>
YFby0rQ
K|H;qg)y
tiZ+fs*,
c&q@s{
uvp.YI
HCDdN>QV_
t*6bq1
AV3&o4Gxvd
\3igHx^
_`HjqVu
\q5chi
9#4N.n6
m;<mL
[T20Qp
$)E{P
cIF\'_
wm\T"{HV
uvp.YI
8r1bF3
aIQe*
d-S@%&
.-(e~R
PjJ\g!
SOWzdro/n
9|}/6,
h}=nI9
`7M4<Y
]xp?b`~)
<q0W0>
\M0!8
I&4b>T
~h33gG
bfCf$U
Hx{.c%T
kwbIcW
Q\IubM
-wMgq~
8AI["xEyO
F\ G6h7|
$'}TPv
hWjv<R
DZ2:ox
:5gk-5
+8Jy_8
$K71T
bm)b)1
ps/QcU
ylq<7D
Km-{Mpx
t?g`QD
~"=*A+
+@iaL=
4| wd
@h>X !
O[xF><bN
l6@s~
3,+Co\
p./:Qs
Rk'<{_Y
g#QMwI
06sn[&
+1n"<v
Y]\^Y6f
kHaWda
P -p!`
#]<>1E
t'hI&X)
%-?f[3
^^9j~M
F}pxtu&xa6F
e$x|-Y
|gL`I~
c)qzI)
E(o03l
pU73/YUg
t&M^2k
&bE4Y-<
t&M^2k
t&M^2k
t&M^2k
t&M^2k
OEJL7
t&M^2k
{lAx4D
{lAx4D
{lAx4D
{lAx4D
{lAx4D
{lAx4D
{lAx4D
t&M^2k
-MVcXs
mzHp1<
2`Z)1)
U"HX@>
v:H%VO
U"HX@>
g}%5Qk
(BZ+2j2
9(0esd
j~kkbd
Bj=OCU7
'vG~?"
'vG~?"
wi7nDN
?.pGM@
20F^7;
RLuVku
fs{#7,
m:OPaX
d{TgGa
- ,]@;
?n<(-n
%oxZ-~KH
%oxZ-~KH
*TbQag
!)-p\
lbL7s(
K\yGDP
zPQn\Z
`>:'C*
u0xbO`r
^3R%g
5YT8+4
1>5:Vo
%zyc5RFBcRKE
b)4Ms.
,!x;SC
jX^2<5
dmc=Q6
mD\D&U
-O6Dgt
I~\!G=
NRv=lJ
Ad^]:6
5 4@&P
o1U~gx
>5<6c<Z$
7)Jo8[!
Dj' K_
M;3,k+w
opTIJ*
VbEl<[i
f*(g=qM
aamGdV
bH9q<S61;
YfV}E#
_XHG[2
xc5cY-
__J(nJ_M
7[t/OH Vy
a?+Ztm
]NQ=-
U)!RiO
eu;Cy~
ZxPX9Y
$9@.z1u"F8
O\:e(>
U"J[SB4
1_fY3>
Lqo"El
1(t|:}<
DxWcB
1k.6xi
_Psx;_
y] m|&
O40gkY
L5^j".%
_vkaS(?
pS+@T&
:`L"nk
E+1^|v
+-- r6
Nif!_?j
ab-iUwpxv
&6~Q A
'mF.YF
}z\n4=
lzf/I@
,k<OSA}u
0H5jU4
qq==Q'`
8r5X_b
E[*[S}
HOR@|!
`<ry1K?
yD;zl@
@x'zY}o
mFCV2v
NRj9*5
Ku~Q'i
\)HrY^'
GQU~bR'[
b&dJ5gU:(h
(Tq9CJ
OGGA Y+
ay[-=Zw*
a0A;V/
4_5@B5
rc}=q/T
H|xf_.b
k'[Laj<n![P,~4
73D+"-ert
-;W2et
48qr49
*qk$lK
fH{%{L
A>G/GZ
32>jB?y
yG2=JJ
;Vk>[tQ
rYys'@p
.Hube<l
D#-bIu
$nn|>P
l(5X"Pc
-O&V\
u<PJz_o}
fY-_z(
z6<+[kk
"uds\ub`o
v4.0.30319
#Strings
#fsdf#
#ggggg#
#hfd.dll#
#fsdfsd.dll#
#fssdf.dll#
#hdfgsssssdf.dll#
#sf.dll#
#hg.dll#
#s.dll#
#sffds.dll#
<.cctor>b__10
<fpjAcilkFfi>b__0
<WriteTo>b__44_1
<current>5__1
IEnumerable`1
ListIterateAllDelegate`1
System_QueueDebugView`1
Wtsapi32
ToUInt32
ToInt32
198-Protector-V2
Func`2
Get_Reserved2
_isAppEarlierThanSl4
typeUInt16
ToInt16
get_UTF8
<Module>
LSTRLENA
CSIDL_COMMON_APPDATA
denIbffllbA
kAfIagafjlA
fdccgfdSjmA
nkkmgkiFprA
GREGORIAN_ARABIC
ERROR_NOT_FOUND
REG_DWORD
Get_SENGDISPLAYNAME
SEMAPHORE_MODIFY_STATE
kjkglkrmjhF
encAbAmckmF
get_ASCII
GetDayOfMNN
System.IO
SE_GROUP_OWNER
CORSEC_E_CRYPTO_UNEX_OPER
CSIDL_COMMON_OEM_LINKS
deimkShmdSS
edokenlFcaS
cgfpSddAcS
dpiShigFrrS
DEFAULT_RELOC_ALIGNMENT
SETSTART
KEY_WOW64_64KEY
iIcafrbFija
Get_ContainsMetaData
M_fixupData
posData
rcdata
set_Quota
EndWritePdb
Sfmigfpfdhb
mscorlib
ckpkipjmlSc
InitdTypeSpec
ghjmnkSmgc
System.Collections.Generic
get_IsStatic
LocalAlloc
kemkkkoadAd
CheckId
GetProcessById
lpNumberOfBytesRead
hThread
get_CurrentThread
GetCurrentThread
thread
RijndaelManaged
get_IsAttached
FillStringChecked
Get_CanBeCanceled
Get_IsCanceled
MaximumAllowed
<EndColumn>k__BackingField
mdlddhaekmd
set_IsBackground
DynamicMethod
DefinePInvokeMethod
ResolveMethod
DeclaringMethod
GetMethod
method
NetGuard
fsdffsdfasdffsd
get_IsInterface
ImplementInterface
Replace
UsingNamespace
LoadResource
FindResource
SizeofResource
GetHashCode
SetCode
set_Mode
CryptoStreamMode
CipherMode
Xenocode.Client.Attributes.AssemblyAttributes.ProcessedByXenocode
FindCache
S_ActivatorCache
EndInvoke
BeginInvoke
Set_MemberRefTable
Get_PointerToSymbolTable
Get_FieldPtrTable
GetEnvironmentVariable
IComparable
Enumerable
IDisposable
set_Visible
get_Handle
RuntimeFieldHandle
get_MethodHandle
RuntimeMethodHandle
GetModuleHandle
get_TypeHandle
RuntimeTypeHandle
CloseHandle
GetFieldFromHandle
GetTypeFromHandle
ToSingle
Console
TryParseExactMultiple
get_Module
DefineDynamicModule
hModule
module
set_FormBorderStyle
get_Name
MatchEraName
VerifyCultureName
lpApplicationName
functionName
lpName
Get_MemberName
AssemblyName
Scheme
ReadLine
lpCommandLine
WriteLine
ResolveResolutionScope
HasScope
rperpe
get_FieldType
PeType
DefineType
M_baseType
CreateType
ValueType
get_DeclaringType
LocalType
MetadataColumnType
flAllocationType
get_ReturnType
lpType
get_ParameterType
ToObjectType
GetCalendarInstanceRare
System.Core
ResolveSignature
SetLocalSignature
Get_CompareCulture
MethodBase
Dispose
Truncate
CreateDelegate
MulticastDelegate
M_currentState
set_WindowState
FormWindowState
Get_Site
M_site
STAThreadAttribute
CompilerGeneratedAttribute
UnverifiableCodeAttribute
UnsafeValueTypeAttribute
BabelAttribute
SuppressIldasmAttribute
AssemblyInfoAttribute
YanoAttribute
DotNetPatcherPackerAttribute
BabelObfuscatorAttribute
CryptoObfuscator.ProtectedWithCryptoObfuscatorAttribute
DotNetPatcherObfuscatorAttribute
DotfuscatorAttribute
CompilationRelaxationsAttribute
SmartAssembly.Attributes.PoweredByAttribute
RuntimeCompatibilityAttribute
RegEnumValue
SetValue
get_IsAlive
ghjmnkSmgc.exe
get_Size
dwSize
GuardCf
SizeOf
fshdfhddf
fsdsgdgfsdf
get_IsByRef
_runnerref
CJKHourSuff
ghhhhfdffffffg
M_currSig
TryGetArraySig
hgdSifSckjg
FSiabkIoIlg
rAmbcdfehmg
System.Threading
Encoding
IsLogging
Ceiling
FromBase64String
OutputDebugString
ToString
GetString
rSrngnfohpg
State_Catch
Runmatch
mnAoArkkSgh
ComputeHash
InitHash
NAddTrustedPath
get_ExecutablePath
DisplayPath
ObfuscatedByGoliath
Get_Length
get_Length
ByteLength
ImageStreamLength
Gmonth
mlmifmmlfai
ilppdbFlddi
fpjAcilkFfi
IsAscii
Popi_popi_popi
FdrdofpSSSj
ddkiiIodkej
pbdajAmjFjj
aSbrooIfkbk
AsyncCallback
ExecutionContextCallback
callback
faSapccFkck
GetValue_NoLock
FlushFinalBlock
TransformFinalBlock
kpdcjdfaFek
SSdcdabScek
lkemfcaIrhk
nodfmkekcjk
jdhlkkbAejk
beSrgnbpnjk
SedpckcFomk
ReplaceInPlaceAtChunk
S_longRunningThreadWork
Marshal
LaunchInternal
NIsTransientInternal
SetAll
kernel32.dll
Winspool
Control
CryptoStream
MemoryStream
Program
UseSatelliteAssem
get_Item
System
SymmetricAlgorithm
HashAlgorithm
cemkkmnFFjm
bhbmhgnldnm
IsNotWin32Atom
NumAmpm
ICryptoTransform
CalculatePECheckSum
_CreateEnum
mIAcmfieAAn
TryParseExactTimeSpan
oejfmAAcgbn
SgAiifpejdn
get_MetadataToken
hToken
OriginalToken
lpNumberOfBytesWritten
aibFbFegifn
Inclmoodkhn
AppDomain
get_CurrentDomain
Application
get_Location
NineRays.Obfuscator.Evaluation
System.Reflection
FindReflection
ValueCollection
ManagementObjectCollection
CallingConvention
RuntimeWrappedException
SecurityException
MatchPattern
ParseRepeatPattern
M_completionCountdown
ceIookjnpIo
GetDynamicILInfo
FieldInfo
MethodInfo
startupInfo
_MemberInfo
MayHaveUserInfo
ParameterInfo
hResInfo
mmmmIcrIfho
gjhgAjiecno
Notonerep
dadkbdpnprp
_emptygroup
AddFixup
System.Linq
npiraemmjAr
WriteShortInlineVar
set_ShowInTaskbar
HaveYear
EndAddr
SymbolReader
NullTextReader
MD5CryptoServiceProvider
DESCryptoServiceProvider
MethodBuilder
ModuleBuilder
TypeBuilder
AssemblyBuilder
lpBuffer
ResourceManager
Debugger
ManagementObjectSearcher
S_adUnloadEventHandler
StrongNameSigner
SequencePointHelper
CreatePdbSymbolWriter
M_nextResWriter
get_IsPointer
MethodDecrypter
BitConverter
ToLower
GetTokenFor
ManagementObjectEnumerator
GetEnumerator
.cctor
dotNetProtector
get_IsConstructor
CreateDecryptor
HasParamPtr
IntPtr
System.Diagnostics
GetMethods
System.Runtime.InteropServices
System.Runtime.CompilerServices
System.Resources
ghjmnkSmgc.resources
InitializeMethodOverrides
bInheritHandles
EnableVisualStyles
EmptyTypes
lpThreadAttributes
MethodAttributes
TypeAttributes
MethodImplAttributes
GetCustomAttributes
lpProcessAttributes
Get_HasSecurityAttributes
VerifyReadAllBytes
NumberBufferBytes
GetBytes
NumberOfRvaAndSizes
BindingFlags
dwCreationFlags
GetMethodImplementationFlags
SetImplementationFlags
GopherSyntaxFlags
extraMonoPaths
GetLocals
Equals
EnumParams
_items
System.Windows.Forms
Contains
CallingConventions
get_Chars
PEHeaders
GetOptionalCustomModifiers
GetParameters
get_IsClass
AssemblyBuilderAccess
hProcess
GetCurrentProcess
lpBaseAddress
lpAddress
sssssss
_typeWithContracts
_ipForWatsonBuckets
CrossScopeImports
Exists
InitializeStandAloneSigTableRows
S_REGISTER_16t
S_COBOLUDT_16t
Concat
ManagementBaseObject
GetObject
object
Select
flProtect
CharSet
YearOffset
Get_RidsOffset
GetRowOffset
op_Explicit
System.Reflection.Emit
FInherit
CodePageDefault
SetCompatibleTextRenderingDefault
IAsyncResult
result
NegativeInvariant
Constant
System.Management
lpEnvironment
M_document
InitializeComponent
get_Current
CheckRemoteDebuggerPresent
IsDebuggerPresent
Get_ExceptionHandlerCount
textToDecrypt
ParameterizedThreadStart
WriteAssert
Convert
IID_IMetaDataImport
FailFast
SuspendLayout
ResumeLayout
MoveNext
System.Text
context
cxvxsssffffffffcvcgggggggv
Get_Index
IsSuffix
Get_ValueForDebugDisplay
ToArray
get_IsArray
set_Key
RemoveKey
secretkey
System.Security.Cryptography
DefineDynamicAssembly
GetExecutingAssembly
CompletedSynchronously
BlockCopy
library
lpCurrentDirectory
op_Equality
System.Security
SuppressUnmanagedCodeSecurity
IsNullOrEmpty
198 Protector V2
System.Security.Permissions.SecurityPermissionAttribute, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
SkipVerification
WrapNonExceptionThrows
_CorExeMain
mscoree.dll
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
<assemblyIdentity version="1.0.0.0" name="MyApplication.app"/>
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v2">
<security>
<requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3">
<requestedExecutionLevel level="asInvoker" uiAccess="false"/>
</requestedPrivileges>
</security>
</trustInfo>
</assembly>
ghjmnkSmgc
GetEnvironmentVariable
1883507071
1883518575
_ENABLE_PROFILING
_PROFILER
-155880932
155948733
1047237842
1047247482
941012349
941020208
1696326129
1696299080
-12311274
12204809
904376267
904311187
-255382815
255372747
1425099371
1425087235
-1347543804
1347536367
-1315951109
1315801679
476505437
476502201
669937280
669916790
-1070160796
1070145897
17459651
17518951
8980842
8992414
-67299987
67164521
-178066880
178027000
1491194951
1491171168
-1647321021
1647415902
1599441696
1599450832
1180828175
1180855207
-1845926833
1845952183
1373550368
1373616290
-1473455917
1473421643
1021640894
1021578350
2045302143
2045266737
-556077382
556037516
593002061
592979200
-265086718
265101466
635435947
635398174
-948511958
948461861
-1111286729
1111274335
1743370475
1743353319
-1053695883
1053735000
1826241064
1826322194
133494558
133462487
1108913949
1108929368
-1483658051
1483713501
-1633600657
1633420843
1176754090
1176714432
1911789328
1911722873
1422916497
1422831078
-1743881709
1743787398
1632196392
1632201878
1263554477
1263563980
-1513648605
1513644009
-840287896
840194964
-244182166
244069727
1572205047
1572191924
1902021372
1902011822
666607383
666609893
-1480101274
1480137163
1398553090
1398583656
1731099976
1731094299
1977245445
1977253772
-1030264644
1030228680
2097286721
2097332310
-153312848
153297967
1084090746
1084085092
746863113
746918803
-1966013125
1966063282
-24721765
24871852
725401646
725467839
-1142984604
1143066106
-1157574379
1157507216
-926803927
926808984
915636853
915646258
-1921164155
1921236172
-514895752
514934725
903635559
903641832
-1434637791
1434693832
-698306486
698256626
-1094758241
1094796322
1690866807
1690858363
2144674652
2144619578
823257907
823159348
-742041470
742122527
189641005
189607686
-2051404917
2051400328
681949438
681912101
-1632679915
1632666969
-194484774
194450934
999788009
999770334
876568407
876590284
1767785664
1767826275
-384834869
384837211
1314934069
1315004160
-921838029
921835554
-2035407055
2035378122
-1996105000
1996204709
-1107956595
1108078318
2139197490
2139160296
1469445784
1469367940
-236975445
236964988
945081786
945158417
1071523609
1071573937
-1189364547
1189395950
2013470271
2013423866
2116672360
2116658124
-2082063359
2081987701
628832508
628827047
-1677291982
1677198997
1435502124
1435577019
-1550830196
1550705529
344504615
344507068
-1741310769
1741380816
-1355463412
1355338506
-629516106
629443076
1185750571
1185693484
-1443305933
1443199059
-1579417633
1579452869
-71359926
71329476
-1049512576
1049511678
-615607919
615592674
602551607
602578707
-1418772249
1418743268
1978911677
1978896226
-307117292
307204122
574731944
574697524
1441363169
1441379982
-382092700
382108518
85398081
85416103
1599645416
1599663308
1375714059
1375709788
1701027155
1701002034
-1358169600
1358305380
-2064497483
2064476837
219678642
219691018
104944266
104884430
1373576444
1373535761
-1800366648
1800356055
18914570
18989542
1171719731
1171739006
1480722138
1480756315
-1553273204
1553327935
2013156351
2013209445
-1912393104
1912348097
588275946
588347644
-1926287712
1926251522
-1604592465
1604707973
1289387939
1289410782
1353850892
1353926848
1879324384
1879365450
-666276971
666152141
-1500752071
1500628041
-222473385
222492942
-373316539
373342355
1230950449
1231022789
-1419525405
1419548398
-189352740
189467793
1840566808
1840611411
-1427685743
1427764943
1715392115
1715462456
-1731280381
1731267995
-945605421
945653668
-659951118
659843120
914354953
914262094
284473187
284544788
-1182192389
1182256528
-884707144
884702134
93039686
93031040
-1500495205
1500403626
901540911
901609842
-1609449065
1609486566
1846260335
1846186407
2122259390
2122316494
-791052862
791054838
-1571810752
1571710184
-1977386943
1977474344
-232570919
232622827
-1301680482
1301738267
-1062780407
1062854986
846450475
846451717
1683120855
1683172746
-1455686548
1455722974
1981483660
1981421098
-1932883916
1932838280
1090307100
1090258674
-862298660
862257818
-129706907
129733133
-254978759
255052975
-1678827161
1678907860
-269784507
269803368
-729217200
729156698
1519788858
1519854773
1204403015
1204304809
-2055474233
2055612754
-1109008949
1109032706
-2074838277
2074784211
1058651410
1058652327
1390701531
1390682634
-792591219
792710388
-794168635
794204353
-288222129
288192695
-2016196092
2016211163
718324540
718389412
-1841370035
1841413819
1604118159
1604093268
1915252890
1915271219
-2119778894
2119768500
-832992326
833041647
-1385565072
1385444896
69045551
68983237
1721116987
1721199334
516467873
516474275
1692720374
1692710536
-193277989
193295154
-1374264013
1374392489
-1682270469
1682209646
-1442507171
1442494004
1192203288
1192133580
1072991872
1073086244
-345620937
345546903
989345279
989335177
1016664983
1016594626
-1301726427
1301745607
1341905789
1341829254
-226195573
226141656
1327738145
1327737406
-213436636
213565903
1513997810
1514003993
1000427921
1000435093
1105365793
1105332459
-463311045
463263110
-618821157
618878168
1558637498
1558635330
-1621599367
1621526667
-390218284
390244377
432508067
432451450
-1679902346
1679844428
1936404483
1936347708
456746861
456667001
-980772454
980734741
1949777335
1949720110
-920528943
920615272
1815661211
1815645751
-497068642
497070357
1481146545
1481169233
1468058079
1468042570
1127030952
1127032716
-1584905850
1584898108
-498720002
498615658
1674269729
1674202034
-147753101
147730085
-132139101
132315042
364385558
364388329
34966171
34938269
-2048884525
2048732181
-1353191904
1353279211
-771726311
771729538
463397243
463358700
183852455
183787351
-245130166
245189376
-151982003
151938861
-752288111
752337075
-379672155
379620657
1477290853
1477238912
-16604977
16543384
1418847713
1418787665
267972636
267939745
458211006
458186846
-911281037
911304345
1569717330
1569661356
-1421312219
1421308866
-1773249631
1773142520
-151459540
151438783
-716033391
715927803
45181251
45163539
1536913423
1536898282
-662166824
662164771
-52999994
53073868
1736164296
1736153320
-1332626497
1332647705
-1503079035
1503023582
246103033
246140597
834969407
835049926
556530946
556472208
-655434995
655442611
-890161339
890190687
2061552665
2061621501
210915742
210954224
-15226547
15273873
-1499179181
1499141495
288439978
288486986
-1205432259
1205408704
1409465841
1409433809
-1857588991
1857682116
375851877
375805098
-1518850364
1518769547
-2073468797
2073553992
-2085103517
2085226949
45949751
45878429
2139055726
2139070118
1986174943
1986180513
754285888
754285408
701896939
701898486
775388172
775321131
93957593
93955161
1789568187
1789580089
1865525573
1865487826
11738641
11680549
-1859031540
1859112894
-1678745873
1678674847
107400215
107380669
-2123800442
2123762164
-176271481
176258762
-1522622262
1522547304
-741312614
741268398
2075780618
2075710180
-181280041
181290392
-1345573783
1345553172
-607164499
607143473
1256907798
1256872761
-1601538052
1601519613
866187416
866224157
-635607912
635587789
-1435587241
1435584898
-738926131
738853132
1652264638
1652223697
-1696608153
1696647087
-1609818097
1609825382
322273857
322269164
-2078776442
2078723133
-1248859022
1248987975
2013787961
2013693622
-195929776
195937687
339832501
339837104
1256247479
1256253928
-299132466
299234957
-1747342436
1747448180
-1888908760
1888956198
1115453325
1115458259
-318027830
318154276
-1500146881
1500005482
-837141975
837051639
-360704304
360684116
2142527540
2142519516
13417549
13480356
-2112265697
2112286762
-671887912
671893028
-262933209
263053137
-1618852842
1618744077
-1093434340
1093489039
1094472405
1094465845
1091955395
1091950233
1243884652
1243895341
-1598938327
1598864934
1428215433
1428217207
-1684108109
1684068224
1358116385
1358163512
1792066587
1792028565
1274831123
1274810999
-1847242341
1847223704
575756998
575672850
492196826
492254641
-1585109813
1584969367
-754330629
754335714
-463522864
463544905
-2110467855
2110460379
-540572173
540662198
848522338
848454931
-630289993
630267355
1974303355
1974301052
-2080553260
2080384591
-532090457
532096839
-1220772238
1220695182
-1877192506
1877199521
1625195232
1625286689
-1744106513
1744133155
-259098792
259113932
-1492712187
1492842586
-42909493
42790104
-1400261625
1400258273
-352509644
352489747
1236429595
1236410402
-440792607
440901766
-1137847911
1137907987
-1049607059
1049441685
590647989
590709563
-292632397
292650059
1150103252
1150108230
1730371196
1730290329
-252820052
252947248
1157209078
1157221981
139514486
139489077
-1809426929
1809365655
-553780686
553820201
-1847168588
1847121219
-1060824393
1060804001
-1028053090
1027916798
1319316910
1319331504
-1194703369
1194629175
-464324356
464308066
-2105821017
2105923760
1067416253
1067336048
-1249573742
1249545024
1068663870
1068750876
616603095
616596440
-248450757
248498107
-1870020151
1870082907
-1331360810
1331346479
441906996
441861334
-1154523790
1154544093
-1084453709
1084461098
-345634557
345513262
48185724
48193423
-44034559
43976074
2092782086
2092818704
managed
native
ghjmnkSmgc
Enter a number1:
Enter a number2:
{0} * {1} = {2}
Select * from Win32_ComputerSystem
Manufacturer
microsoft corporation
vmware
87654321
-937209366
937341691
218158258
218132079
-1533655726
1533641850
136505189
136569474
1164909450
1164938062
-1160874461
1160790490
UkyiuhxPaa1iPoHliWLjU9bvwvGLVaMC
UkyiuhxPaa1+/j4Xqj83CrOguf1ILFxO
DynamicDllInvokeType
-143520430
143424511
pkUTI4hSBgQ=
-1085143382
1085050244
-1321120507
1321167140
201964079
201926954
1019972036
1019935185
1577891742
1577948854
-1008464081
1008461021
-324607087
324547283
1339913047
1339936703
-1896427768
1896434300
-225062932
225084804
2083472971
2083458632
-1257073659
1256986235
1219557050
1219501615
-618876513
618908888
1183579573
1183572794
-1337656191
1337653226
945185243
945183305
-1807495733
1807511832
2122505171
2122578505
-2131203887
2131192525
1589432992
1589496587
-304349410
304392946
-2029944354
2029989412
927651732
927638653
-1177990387
1177846451
475914095
475843242
435984168
436071135
imR7uChyvQ9CCuP9RU6KLQ==
nfIDkccdYnJwx8M9O8Ei/m1aWs8KaDcG
BW00DMo5Bb4xyADMHBxgY+SUdX1QcJKn
DoZRlgCwD6QIvTa+7E9mECSiDyiyEw2G
MbxmNAlSpRULi0+HAFxSQg==
Ye4caD0SjVKCegScid1WgayOPdJYELOt
gA0s6p48eAbLTS5Zzb4mrSWtq69o8GzO
g9EyhdkB9JV8ve5/kaWpQ5241+gKMbSR
YsWhaHruRgO2Hc824c5YHw==
kddZnvqfxMcXHnRShPHOeA==
wM3uBcAltWstkYtG2b+pokmv5G4Po5qG
MAINICON
VS_VERSION_INFO
StringFileInfo
040904b0
CompanyName
okcirFd
FileVersion
1, 7, 7, 8
FileDescription
gaokAI
LegalCopyright
ProductName
idrAmIlc
ProductVersion
1, 7, 7, 8
VarFileInfo
Translation
Antivirus Signature
Bkav Clean
Lionic Clean
Elastic malicious (high confidence)
MicroWorld-eScan Clean
CMC Clean
CAT-QuickHeal Clean
ALYac Clean
Cylance Unsafe
VIPRE Clean
Sangfor Suspicious.Win32.Save.a
K7AntiVirus Clean
BitDefender Clean
K7GW Clean
Cybereason malicious.5686d6
Baidu Clean
Cyren W32/MSIL_Kryptik.FZU.gen!Eldorado
Symantec Clean
ESET-NOD32 a variant of MSIL/Injector.VRI
APEX Malicious
Paloalto Clean
ClamAV Clean
Kaspersky Clean
Alibaba Clean
NANO-Antivirus Clean
ViRobot Clean
Rising Clean
Ad-Aware Clean
TACHYON Clean
Sophos Clean
Comodo Clean
F-Secure Clean
DrWeb Clean
Zillya Clean
TrendMicro Clean
McAfee-GW-Edition Clean
FireEye Generic.mg.bd4ef60928a0418f
Emsisoft Clean
Ikarus Trojan.MSIL.Injector
GData Clean
Jiangmin Clean
Webroot Clean
Avira Clean
Antiy-AVL Clean
Kingsoft Clean
Gridinsoft Clean
Arcabit Clean
SUPERAntiSpyware Clean
ZoneAlarm Clean
Microsoft Trojan:Win32/Sabsik.FL.B!ml
Cynet Clean
AhnLab-V3 Clean
Acronis Clean
McAfee Clean
MAX Clean
VBA32 Clean
Malwarebytes Clean
Panda Clean
Zoner Clean
TrendMicro-HouseCall Clean
Tencent Clean
Yandex Clean
SentinelOne Static AI - Malicious PE
eGambit Unsafe.AI_Score_99%
Fortinet Clean
BitDefenderTheta Gen:NN.ZemsilF.34236.Em0@aejLJGli
Avast Clean
CrowdStrike win/malicious_confidence_80% (D)
MaxSecure Trojan.Malware.300983.susgen
No IRMA results available.