Static | ZeroBOX

PE Compile Time

2021-11-02 21:09:05

PE Imphash

f34d5f2d4577ed6d9ceec516c1f5a744

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00002000 0x00064334 0x00064400 6.5967437093
.rsrc 0x00068000 0x00010d76 0x00010e00 4.0685897307
.reloc 0x0007a000 0x0000000c 0x00000200 0.101910425663

Resources

Name Offset Size Language Sub-language File type
RT_ICON 0x00068144 0x00010828 LANG_NEUTRAL SUBLANG_NEUTRAL dBase III DBT, version number 0, next free block index 40
RT_GROUP_ICON 0x0007896c 0x00000014 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_VERSION 0x00078980 0x0000020c LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_MANIFEST 0x00078b8c 0x000001ea LANG_NEUTRAL SUBLANG_NEUTRAL XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminators

Imports

Library mscoree.dll:
0x402000 _CorExeMain

!This program cannot be run in DOS mode.
`.rsrc
@.reloc
R@[(r
@O@[(r
@B@Z(r
`[@X(r
@U@[(r
T@Y(r
@U+O@#
\@[(r
[XZ_bX
[XZ_bX
[YZ_bX
[XZ_bX
#s1(}3
#B_FkY
[XZ_bX
[YZ_bX
[YZ_bX
[YZ_bX
#au#_#
#Nmx~`
#{nqo,
[YZ_bX
[XZ_bX
#Wp4l
[YZ_bX
[YZ_bX
[YZ_bX
[YZ_bX
[YZ_bX
[XZ_bX
[YZ_bX
[YZ_bX
[XZ_bX
[YZ_bX
[YZ_bX
[XZ_bX
[XZ_bX
[XZ_bX
[XZ_bX
[XZ_bX
[XZ_bX
[XZ_bX
#'/aS3
[XZ_bX
[YZ_bX
[YZ_bX
[YZ_bX
[YZ_bX
[XZ_bX
#,m;7f
[YZ_bX
[YZ_bX
po@Z(r
[XZ_bX
[XZ_bX
[YZ_bX
0a@X(r
[XZ_bX
#8c=MG
[XZ_bX
[XZ_bX
[XZ_bX
[YZ_bX
Hz@X(r
[YZ_bX
[XZ_bX
[YZ_bX
[YZ_bX
[YZ_bX
[XZ_bX
#[U]9=
[YZ_bX
pF}>s@#
[XZ_bX
#*xc_uw
[XZ_bX
[XZ_bX
[XZ_bX
[YZ_bX
#N}pLB
[XZ_bX
[XZ_bX
[XZ_bX
[YZ_bX
#CT>oi
#2!v26
[XZ_bX
[YZ_bX
[YZ_bX
[YZ_bX
#<Y_:b:
[YZ`(D
[XZX(V
[YZX(V
[XZX(V
[XZX(\
[YZX(V
[YZX(V
[XZX(V
[YZX(V
)jW aiZa
Mf`A(s
$aiXYYYYY
DaiYYe}
XaXfYfe
AXaiZa
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
H1al;8
[w%,H4
V!O|h
)Q=>])s
(4q*F,[
OY8w]/
I\[2Z[
>=/RV
`hN=Y_)=
F8?}?a
eU.<i
Qam"'U
uwe<yu
yJxqf7z
y+t2ltr
l44r#vX
{_4c_d
FFk~?W
:;e_V*
2p=_nmO
Swc#;(
|^L3Qc
4.!#V:*
P1lPGQY
NDsuRg
TA? !7
JJn23y
bxeREC(R
glCyUu
-1c^M.
f>6T&a
m)p6!-
~-yK2N+
#R::Bw
ZL.&i,r
/=m+Sz
bK{,@:
^+,Ef^gm
ru8(?fK
Ne89s]
n&XS(KMh{
'ZVNJ0
tv(%8
B5kYcY
5qi!q!H
mL.,s[u
2NKw(Qjg
de/$2RH
7V{~8k'l
mrVI)\
%`#>-&
1.#N_'N|
j53ir<b
"=QYTJ
Pj^qv|s
2|zh~tc
p=Qa%?P
>),tW7
R\|`s0
b3Zz{r
X|sUJn0x
0g,.A3
g`_*t)
tP0wNg
9!j|V
@#1##x@?
Jlw!uK
GG_qH8e
@n=g=6
'bb0<i
27SVbi
cbr,jw
23>lJ-1D,
t5h0S
[|Z|9S
9{t3%3tg
uQY~T
(d,Ny&
kz.vGO
e`&)l>
t6eh;Ir.
bB\wN#
o=~1t<
9HY:=`
G%[0U*
Z=ugB|
N~XP@I
R%@jm_M
p&6C6;
$W{Dm+g6
FbIwEe5
9SB[@k`
&MI=A_
%%$m.c
}nk:Wp\
pAR@6#;
B&Y,42
whQBo/
A'=6&9
:Rwk#[37
9k %!}
`%7F}:
`5%#rS
??qD/nK~.lCp
8U,Gyw{
ZLZq>[^j9n
Ld`_>H
F&XKNSf
.3e?yV
'"ZB]A
ozH]$\
}Smw\E
qds]{M
7i<Qd6J
H?zR!F+
,d0G#`;MOvk
quCo.=
=HOPSv
%Jh$1F
j"zNuM_
9arR;ne
1`sIZJ-D
&%@mI9i
5R4#Z
d?z|TE
>G(!#`{
+n1viUiYx
Eh>#-`
/bvAVi
FlmMqP
Hb>lJoLU
B(ME)e{Q~06
y{Qq=Sl
tZ_TMn
J4N?mij
m~l7qH
8Ky&{0
Wnc<B5
aWfli?
<@4yR?M
vOFx\l
}^Aq a
h)v[$&2
}IJOh9z59c
51H7I:L
"N-P.Z
~N(/J
+YI6'
wkBp?}
kX"=EkSq
UOc1wU
D}~&KNv
qO!|GCz
3$8 _
GFK{?~
6sJdRm
"?n;wu
Rz}#oz
H7aYE+
>N1J`
dwsJ0K
dwsJ0K
h\;sl]
AN,8;b
JEyUHe
f<&t9Ax
}Nsw`w
5nJla|
+OY.v6^\
H(^d/O
@njG:}i
=qHZa9
N6sv8yQ
W[:,B<
iz@M4qZ){
,rX `|
p9`1@F0
}ap yBC
~ysMFZY
xy9|&3
HqNHTZ
P@z;sZ
k=xWC#
}A"3cv
k~/([fC
45L}pE
45L}pE
[UQiar
*&#QlzU
#'fe8:*
OE_P,3
|r05vO
|~iQPW
IWrm<p0
zZ$6g|
/G1stk
MV|N8W
C"TIHKW
=LnZpd
3D7O$lX
_3f!ip
>2MawP1f[
XgPNj,
<9@o@sp
qX@Np)
e&f?I6
\DIR& %
1\KSO%
\S|!@)
Js9bmK
FbSFG?4
-EU}'\,
}KHRRB
PD$w_hp
'*!lj0L
mSu9]+.
QQ:AG/
oO)csEle]u
f0M@O?
D7]U,g
747|mSq
q7m-gv
;5?I u
qyYp)
j(@T;or`u
=|\}g8
fB+Q0?
P|~;
FyABn6
_\`T=6
P:o !Q
oR>(0R
CNQ$QN
[#).9P
<rqE&0
|z+]|S>
,a$Ah.
uxuZ95
apKfpJ
_s[vY&j
'MwqiI
'!<[W.
B^cfD8
J=jQTL
pK-8u`{
FI8Y6b
(h.p(?
+NPtjb
X/E0mmD
}e6#_u
iM jX4
) ^J8b
0.dk8D
&`PWdK
$$4~.LG?Y|o
c2dsDv
AF;YCO
Yz1qdh
<ndA[#
*qfORc
V(,c""
m%ClM,
COm~UP
DXL^.xB
pbH5^s
Y7|O7GX
5)_s`(
?EZEM]
z)!M\L
aN6Y}/
<w}\:j7
QP%f?
<=ar#n
[/{5ne
]'V!ms5
Qm]t$c
+=O5Xn
2b*`+;
v4.0.30319
#Strings
#fsdf#
#ggggg#
#hfd.dll#
#fsdfsd.dll#
#fssdf.dll#
#hdfgsssssdf.dll#
#sf.dll#
#hg.dll#
#s.dll#
#sffds.dll#
<>9__191_10
<pjdnalbSdAl>b__0
LOCALE_SABBREVMONTHNAME1
<Initialize>b__7_1
IEnumerable`1
ToUInt32
ToInt32
198-Protector-V2
Func`2
WReserved2
Prefix3
M_Item4
ToInt16
<>s__7
get_UTF8
<Module>
mhmemogdipA
COR_E_CODECONTRACTFAILED
AssemblyDefMD
IsManagedWinMD
ndIklFebAF
igcSrbprraF
IImricrbbbF
fpeddjccjjF
jradkFFhcnF
mnicakIjdpF
pmpjdlInlAI
get_ASCII
npmASkabedI
SdpobdkpkI
JULIAN
System.IO
babjifkpjbS
jkjkSSmcjfS
mShkehkjFiS
STRINGS_ALIGNMENT
LOW_SURROGATE_START
S_ST_MAX
kmfIiokhdIa
FdkkmbnhIna
mimrAbfFmna
CalendarData
ModuleBuilderData
rcdata
mkimbenlchb
mscorlib
IkcingIommb
GenericInstSpec
System.Collections.Generic
get_IsStatic
Get_CheckId
GetProcessById
okgaFoihjSd
lpNumberOfBytesRead
hThread
get_CurrentThread
thread
RijndaelManaged
get_IsAttached
IsCanceled
SetIsPinned
DebugMessageTruncated
Observed
ndoodgkdnhd
pjooiojenhd
methodRidToTypeDefRid
CoCreateGuid
dIlmoofFjmd
set_IsBackground
DynamicMethod
DefinePInvokeMethod
ResolveMethod
DefiningMethod
SelectMethod
GetMethod
method
NetGuard
fsdffsdfasdffsd
get_IsInterface
Replace
FormatNamespace
LoadResource
FindResource
SizeofResource
GetHashCode
SetCode
set_Mode
CryptoStreamMode
CipherMode
DictionaryNode
BigEndianUnicode
Xenocode.Client.Attributes.AssemblyAttributes.ProcessedByXenocode
EndInvoke
BeginInvoke
Set_TypeDefTable
GetEnvironmentVariable
Enumerable
IDisposable
set_Visible
get_Handle
RuntimeFieldHandle
get_MethodHandle
RuntimeMethodHandle
GetModuleHandle
get_TypeHandle
RuntimeTypeHandle
CloseHandle
GetFieldFromHandle
GetTypeFromHandle
ToSingle
ResolveFile
Console
get_Module
DefineDynamicModule
hModule
NetModule
module
set_FormBorderStyle
get_Name
AbbrevEraName
Get_ProxyTypeName
GetTargetFrameworkName
Get_ApplicationName
lpApplicationName
functionName
lpName
HashCodeProviderName
Get_HasName
SortName
AssemblyName
ReadLine
lpCommandLine
WriteLine
fkFiAkhlfoe
set_Scope
rperpe
UserDefinedSubType
ArraySubType
get_FieldType
DefineType
CreateType
IsValueType
get_DeclaringType
flAllocationType
get_ReturnType
lpType
HandlerType
get_ParameterType
System.Core
Failure
ResolveSignature
SetLocalSignature
CompareCulture
Get_IsNeutralCulture
Get_Capture
MethodBase
Get_ApplicationBase
Set_ApplicationBase
ObjPulse
Dispose
Truncate
CreateDelegate
MulticastDelegate
Get_ThreadState
set_WindowState
FormWindowState
M_localSite
STAThreadAttribute
CompilerGeneratedAttribute
UnverifiableCodeAttribute
EditorBrowsableAttribute
UnsafeValueTypeAttribute
BabelAttribute
DefineCustomAttribute
SuppressIldasmAttribute
AssemblyInfoAttribute
YanoAttribute
DotNetPatcherPackerAttribute
BabelObfuscatorAttribute
CryptoObfuscator.ProtectedWithCryptoObfuscatorAttribute
DotNetPatcherObfuscatorAttribute
DotfuscatorAttribute
CompilationRelaxationsAttribute
SmartAssembly.Attributes.PoweredByAttribute
RuntimeCompatibilityAttribute
BlockSizeValue
IsUserValue
SetValue
get_IsAlive
ndIklFebAF.exe
get_Size
Set_HeaderSize
dwSize
SizeOf
fshdfhddf
fsdsgdgfsdf
IsFieldDef
get_IsByRef
FoundYMDPatternFlag
ghhhhfdffffffg
dlagmhIcbmg
System.Threading
Encoding
IsLogging
Ceiling
FromBase64String
OutputDebugString
GetOrInternString
ToString
GetString
IriParsing
lfnrimkIidh
ComputeHash
get_ExecutablePath
ObfuscatedByGoliath
get_Length
SearchDepth
ImjoIkkelFi
PrivateParseMinimalIri
pmFebcckeIj
kfpcaAeinIj
baAAebbaSkj
AsyncCallback
callback
FlushFinalBlock
TransformFinalBlock
coIbpponIdk
Iepcjlnmahk
aIdoboiimik
eIhoeahbFjk
redkAnbnfmk
pjdnalbSdAl
IriCanonical
AllCritical
Marshal
get_IsLayoutSequential
Get_ReflectedTypeInternal
Get_MetadataTokenInternal
SleepInternal
cccrbhjSgcl
Immiaodcddl
InternalCancel
kernel32.dll
Control
IsCOMObjectImpl
rdIaijfrpFm
CryptoStream
outStream
MemoryStream
Program
get_Item
System
SymmetricAlgorithm
HashAlgorithm
gdergnibfmm
ICryptoTransform
Get_ValidOn
kdaSbFfkman
get_MetadataToken
AddToken
hToken
_cancellationToken
lpNumberOfBytesWritten
AppDomain
get_CurrentDomain
eAgIgdihmin
MinorSubsystemVersion
Application
get_Location
InitializeImplementation
Annotation
NineRays.Obfuscator.Evaluation
System.Reflection
ManagementObjectCollection
CallingConvention
RuntimeWrappedException
DirectoryNotFoundException
GetDynamicILInfo
FieldInfo
MethodInfo
startupInfo
MemberInfo
ParameterInfo
hResInfo
invariantInfo
ookpnoiIhlo
bgArdkmpcmo
cSanfmcmkro
aefknAdmkcp
SmhohekASfp
System.Linq
GenericMVar
Get_IsTypeVar
set_ShowInTaskbar
Get_DayOfYear
MaxYear
arlmcecrnar
GetLineNumber
GetFileColumnNumber
ManagedNativeHeader
Reader
MD5CryptoServiceProvider
DESCryptoServiceProvider
MethodBuilder
ModuleBuilder
TypeBuilder
_LocalBuilder
AssemblyBuilder
lpBuffer
ResourceManager
DummyLogger
Debugger
ManagementObjectSearcher
Get_Listener
CheckHelper
TypeSpecUser
get_IsPointer
BitConverter
NativeRegister
CheckLetter
ToLower
GetTokenFor
ManagementObjectEnumerator
GetEnumerator
.cctor
dotNetProtector
get_IsConstructor
CreateDecryptor
eSlScmhmarr
IntPtr
System.Diagnostics
GetMethods
System.Runtime.InteropServices
System.Runtime.CompilerServices
System.Resources
HasResources
ndIklFebAF.resources
EnumerateDirectories
Get_DeclSecurities
IID_IMetaDataTables
bInheritHandles
UnsafeGetFiles
EnableVisualStyles
GetValueNames
InternalWriteAllLines
GetNestedTypes
UpdateParameterTypes
EmptyTypes
SetOnCountdownMres
lpThreadAttributes
MethodAttributes
TypeAttributes
MethodImplAttributes
GetCustomAttributes
lpProcessAttributes
GetBytes
S_legalBlockSizes
Set_PercentGroupSizes
_Flags
BindingFlags
dwCreationFlags
GetMethodImplementationFlags
SetImplementationFlags
PostSearchPaths
InitLocals
ModifiersEquals
System.Windows.Forms
Contains
CallingConventions
Get_MetaDataOptions
Trackpos
GetCustomAttributeProps
get_Chars
GetOptionalCustomModifiers
Get_ExceptionHandlers
GetParameters
get_IsClass
AssemblyBuilderAccess
hProcess
GetCurrentProcess
lpBaseAddress
lpAddress
sssssss
GetBits
Exists
ReUseDeletedPropertyRows
Set_WrapNonExceptionThrows
Concat
IgnoreSect
ManagementBaseObject
GetObject
object
Select
EnableFrameworkRedirect
flProtect
LowercaseSet
CharSet
BaseUtcOffset
GetLastFileSectionOffset
op_Explicit
System.Reflection.Emit
SetCompatibleTextRenderingDefault
IAsyncResult
result
iNegativePercent
System.Management
lpEnvironment
InitializeComponent
PrivateExponent
IsSecurityTransparent
get_Current
CheckRemoteDebuggerPresent
IsDebuggerPresent
GenParamCount
NoteCaptureSlot
Get_IsReuseSlot
ClassesRoot
textToDecrypt
ParameterizedThreadStart
Fxassert
Convert
Get_IsImport
FailFast
GetExportedTypeRidList
SuspendLayout
ResumeLayout
MoveNext
System.Text
_DuplicateCertContext
context
ISCIITelugu
cxvxsssffffffffcvcgggggggv
FromBinaryRaw
GetDateTimeNow
RawTypeSpecRow
ReadExportedTypeRow
ReadStandAloneSigRow
CreateInstanceSlow
RegOpenKeyEx
AllocateStringForNameIndex
ToArray
get_IsArray
set_Key
Get_StrongNamePublicKey
SetPublicKey
secretkey
NestedQuantify
System.Security.Cryptography
DefineDynamicAssembly
GetExecutingAssembly
BlockCopy
library
lpCurrentDirectory
op_Equality
System.Security
SuppressUnmanagedCodeSecurity
EndEntity
IsNullOrEmpty
198 Protector V2
System.Security.Permissions.SecurityPermissionAttribute, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
SkipVerification
WrapNonExceptionThrows
_CorExeMain
mscoree.dll
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
<assemblyIdentity version="1.0.0.0" name="MyApplication.app"/>
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v2">
<security>
<requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3">
<requestedExecutionLevel level="asInvoker" uiAccess="false"/>
</requestedPrivileges>
</security>
</trustInfo>
</assembly>
ndIklFebAF
GetEnvironmentVariable
_ENABLE_PROFILING
_PROFILER
-1486294511
1486311265
-1630618243
1630647328
525343777
525383294
1244980236
1244964887
-740782540
740709085
1702754700
1702727598
-265705789
265719346
-2111567411
2111502113
-261788179
261861344
-1449934245
1449981500
-1730413768
1730430301
1628536366
1628531764
730039343
730064884
1926385733
1926421864
451556308
451572554
1688718415
1688708197
1732333291
1732274323
-2031733900
2031874137
1895493821
1895455564
877120977
877022505
131173244
131075912
-1551385685
1551412458
1393236723
1393263961
1337290256
1337281716
-1522581613
1522668485
2097714464
2097792793
240110149
240122602
-724746845
724819425
-274986958
274986669
-942683524
942700567
-1174059071
1174100388
-1096275706
1096209643
389709552
389771445
-1688408206
1688414284
-1837567373
1837544386
-831906716
831788463
167926432
167958672
301019463
301007897
1862667639
1862714094
-96641944
96730278
1187624335
1187624166
1347480178
1347459405
-218692833
218664271
-33414308
33398959
1912941841
1912971858
-1573684806
1573684905
-41597708
41646018
-842672043
842747972
-1065785110
1065775170
-1856668318
1856753761
-194894124
194831659
-104369599
104447295
215620136
215659705
-872635136
872497675
2109825923
2109857885
-130061339
130147355
-1494081766
1494196475
729935393
729856184
-619658308
619514942
-611267346
611319472
1361721295
1361733588
1197677221
1197685086
-428597754
428499210
-1983471797
1983460932
2048130789
2048125742
2111845198
2111865401
1013863986
1013864361
1378327215
1378347035
-666794488
666882630
-273589459
273474103
-1897999487
1897974439
-169102481
169102021
1563891669
1563825439
1081853024
1081781705
-1328129442
1328136549
1414913923
1414836001
995735159
995678398
582593395
582551511
407940721
407959983
1579527919
1579465608
224381531
224343901
-220249972
220303566
-1102722941
1102746169
-744545467
744541602
1400962107
1400944929
-244536373
244557330
1545305653
1545276439
-801043767
801073568
1175673904
1175671345
717691392
717693097
1864722821
1864645050
813814947
813815464
2069716710
2069754621
-1056495280
1056481135
675033294
675028869
-126438097
126430977
-860879057
860828803
1123824252
1123900917
-704995359
704937737
-2106428782
2106585866
-1605573817
1605563398
-25568671
25572878
1655617323
1655610935
-1908806138
1908711692
-433650410
433781922
427182020
427219592
-373831789
373818402
-1962335943
1962342263
2131437975
2131468776
1407060893
1407061883
1963657985
1963684217
708285373
708305810
-1149965073
1149976365
-1403245204
1403133219
1506448327
1506448104
-14622569
14615897
1364174296
1364158620
-1823190580
1823196500
1980616149
1980593467
-1771598229
1771606499
-1611935847
1612000296
-2008602608
2008569968
-493420998
493362551
-1293104275
1293152830
1153076419
1153074867
-456397506
456420389
-1837791177
1837796660
-1300676400
1300750976
-2094635888
2094547814
1646545224
1646562831
-2050884410
2050988828
-443102494
443040882
1212506614
1212490624
-2033786510
2033815997
1243411748
1243363091
1263231985
1263155629
1081033747
1081046783
-484942169
484855569
748357142
748398184
674120706
674173464
1978029461
1978018359
-1104209312
1104231876
-1130736185
1130880768
1195000228
1195023513
-957822549
957777546
1322969451
1322966977
712326929
712273865
-1179870314
1179741948
-1289503845
1289681926
-995254402
995252581
-103685734
103700603
-2065838654
2065895536
1742503502
1742515455
1636285822
1636244017
-888492031
888536012
1365215475
1365159640
-198072357
198151170
1594486094
1594425166
-815056398
815048469
-1250396201
1250338369
408553416
408583562
319236125
319183720
-1466861192
1466829917
1613937072
1613901832
1714194887
1714180605
1426745084
1426799943
-114363694
114537127
181204165
181203206
1741289623
1741221412
-1184934980
1185005065
-1986658300
1986653379
1028808410
1028853729
461731222
461665868
-608455399
608450220
-112239951
112288041
1257672710
1257664829
752046462
752055157
1998409805
1998404877
1982747443
1982805937
-1804415564
1804457034
2120713085
2120653819
-173708220
173795658
1780800122
1780855658
1103958787
1103956950
2100031937
2099946727
344443558
344376519
15819266
15760254
984250594
984237596
909654003
909647092
-2092861320
2092883413
180915884
180901963
1343821174
1343769334
1958996234
1958904932
1767583035
1767528507
1611626335
1611654538
-1302352886
1302355888
-316473025
316432328
-818306393
818377305
938751098
938804640
2045364892
2045349887
-456542599
456608298
-440165406
440167843
2006320700
2006373410
-627285779
627186780
-1129905576
1129956765
-1205602008
1205625867
-1795481479
1795466841
-1177718972
1177800772
1850461950
1850429040
1198825395
1198911727
255210358
255280554
2025338269
2025373419
1206585791
1206596154
1068197356
1068126681
-455188593
455187053
-332395216
332378933
-158446921
158368954
-438179750
438249095
358248337
358228782
2056992176
2057037463
-307820953
307877485
-204905643
204931098
-746044331
746011852
-197949538
198108619
-844239072
844267591
575393995
575404487
-140331318
140314211
-110276420
110329889
610713979
610723301
-777475125
777445082
-801865417
801859527
-910429501
910504837
-1387215997
1387212545
-1455011877
1454943751
-660182524
660158112
-520062235
520070836
-1629955909
1629916844
1110600420
1110646149
-989869970
989932815
-174253097
174269464
417079528
417163688
1416065864
1416037424
1498599417
1498588346
168364656
168416829
-107760699
107933205
-1156500833
1156569252
-440476934
440491747
-1686391942
1686493234
1792259783
1792243001
1174230047
1174156367
-1953101239
1953036775
1865860482
1865844726
-952316858
952251473
-1240173832
1240105709
-2070941492
2070942969
-340124030
340069708
410912458
410936177
-1310482093
1310548103
1649744038
1649771378
-1081371306
1081390169
1651280167
1651257932
2111651467
2111592181
1501909648
1501836066
-1224351800
1224461900
-1849156702
1849150648
-2094533718
2094666670
-626567049
626643698
-723034631
723070189
1289507113
1289582714
441593335
441677024
-2116657440
2116631448
1222115942
1222119516
-445869702
445821501
1812281004
1812224647
-529541993
529714774
-784102777
784170916
-235438082
235468364
1313541139
1313540461
-1273961329
1273921163
-238180901
238199543
679923530
679981197
1702054282
1702100462
-1971987312
1971981059
-415886735
415766030
-1305319019
1305471497
1402518818
1402587448
-61095463
61099639
699544793
699643799
1349140816
1349152189
996572158
996619497
-1562413284
1562471474
-1018043301
1018135730
185028587
185054294
1837075396
1837087161
1526383984
1526464000
2088110709
2088189348
1417526714
1417495913
-955135698
955168598
377432793
377371663
1718825033
1718841846
2067663091
2067715419
-1002767730
1002752845
1143096769
1143161987
844797651
844817764
-630090605
630159433
-1152556296
1152631456
166732015
166814535
-1271239539
1271205060
-1209788400
1209673865
410824944
410782809
-2079518836
2079554117
-1044825279
1044809298
-1685032793
1684949975
796523981
796442847
58655929
58684509
-1016750067
1016854951
1663793287
1663727325
-1301556812
1301622259
1295138284
1295191185
-1757880183
1757767054
-464566766
464575171
871954801
871924838
669820061
669800488
1853621636
1853638671
294036604
294025938
128171074
128124084
1093750079
1093750966
-856392304
856336635
-322924463
322905141
-668137347
668117785
-1900075720
1900023830
-336991034
337065081
-208731113
208783277
719815209
719763297
-334758922
334824659
42509182
42586217
717502916
717581336
-2022153028
2022145957
191484005
191495651
-312222762
312297666
-2046661327
2046619618
43790771
43859655
1841795300
1841754578
-1372352755
1372382968
-1622610479
1622572941
-328581426
328588288
-681898391
682030660
740903563
740913313
-1179167201
1179216212
870819041
870774672
-261301525
261319704
-38416991
38469084
370033554
370020689
305907409
305867930
-2059172692
2059257504
managed
native
ndIklFebAF
Enter a number1:
Enter a number2:
{0} * {1} = {2}
Select * from Win32_ComputerSystem
Manufacturer
microsoft corporation
vmware
87654321
1745656437
1745725409
-1886449908
1886561387
807868537
807924682
-1010710797
1010578527
-1824302518
1824322078
wZcY7eYLTnurSrg4qOuUaqMWzRWdpOf4
607898997
607890954
wZcY7eYLTnvjGXnnvBYA2SiMOviVGSxh
DynamicDllInvokeType
MyNPHY9e9ZM=
-1916332780
1916398346
-1227497063
1227569695
2085197388
2085160932
-1374872541
1374877855
-1195324451
1195334694
916582892
916558874
-166023897
165992475
54334472
54363125
-669559160
669705333
1911785916
1911782562
328438543
328398699
-1093711957
1093672416
509633208
509670154
-1112556762
1112611764
1519390889
1519394938
-981966288
981895298
312365745
312406713
iDpB2z/5NN93TzgZ2oJOOg==
+4RVnPOAHItLWMDvWus6c9elvRteV1JT
3eKtSJhARX3wJ/+z9N1nugaklIxbqxRJ
1S6lRwoESva7lvq7BQfm7viB9d5Wsl/t
8S1xqq20G//FZVxLpQWinQ==
v4xUh4J1ffgJXcvGElkjz3DCkrfn6hWe
rLa781Dtkg7UZAdbs/Mg9sOUzHljjhgK
SHFpzDW29LYIEQSO3gRJXxX8ZVZTAXAn
xIhPOZ72M2c9bPDksPOTKA==
O3EMO7NOxtLwDC12k2OnMQ==
QlseE6FuvuimvLSwplIJ0WS5qbriM1f/
MAINICON
VS_VERSION_INFO
StringFileInfo
040904b0
CompanyName
FileVersion
7, 4, 5, 1
FileDescription
LegalCopyright
iakbSo
ProductName
ncIkAr
ProductVersion
7, 4, 5, 1
VarFileInfo
Translation
Antivirus Signature
Bkav Clean
Lionic Clean
Elastic malicious (high confidence)
Cynet Clean
CMC Clean
CAT-QuickHeal Clean
ALYac Clean
Cylance Unsafe
Zillya Clean
Sangfor Suspicious.Win32.Save.a
K7AntiVirus Clean
BitDefender Trojan.GenericKD.47316468
K7GW Trojan ( 00581a2b1 )
Cybereason malicious.7cbdd6
Baidu Clean
Cyren W32/MSIL_Kryptik.FZU.gen!Eldorado
Symantec ML.Attribute.HighConfidence
ESET-NOD32 a variant of MSIL/Injector.VRN
APEX Malicious
Paloalto generic.ml
ClamAV Clean
Kaspersky HEUR:Trojan-Spy.MSIL.Noon.gen
Alibaba Clean
NANO-Antivirus Clean
ViRobot Trojan.Win32.Z.Injector.480768
MicroWorld-eScan Clean
Rising Clean
Ad-Aware Clean
Sophos Clean
Comodo Clean
F-Secure Clean
DrWeb Clean
VIPRE Clean
TrendMicro Clean
McAfee-GW-Edition BehavesLike.Win32.Generic.gh
FireEye Generic.mg.068b5c216553c58c
Emsisoft Clean
SentinelOne Static AI - Malicious PE
Jiangmin Clean
Webroot Clean
Avira Clean
MAX Clean
Antiy-AVL Clean
Kingsoft Clean
Microsoft Trojan:Win32/Sabsik.FL.B!ml
Gridinsoft Clean
Arcabit Clean
SUPERAntiSpyware Clean
ZoneAlarm Clean
GData Clean
AhnLab-V3 Trojan/Win.ZC.C4750206
Acronis Clean
McAfee GenericRXQO-WD!068B5C216553
TACHYON Clean
VBA32 Clean
Malwarebytes Clean
Panda Clean
Zoner Clean
TrendMicro-HouseCall Clean
Tencent Clean
Yandex Clean
Ikarus Trojan.MSIL.Injector
eGambit Unsafe.AI_Score_99%
Fortinet MSIL/VRN!tr
BitDefenderTheta Gen:NN.ZemsilF.34236.Dm0@amcnT0di
AVG Win32:RATX-gen [Trj]
Avast Win32:RATX-gen [Trj]
CrowdStrike win/malicious_confidence_90% (W)
MaxSecure Trojan.Malware.300983.susgen
No IRMA results available.