Static | ZeroBOX

PE Compile Time

2021-11-10 17:19:33

PE Imphash

f34d5f2d4577ed6d9ceec516c1f5a744

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00002000 0x000670d4 0x00067200 6.57238670697
.rsrc 0x0006a000 0x0000bfae 0x0000c000 6.95602166193
.reloc 0x00076000 0x0000000c 0x00000200 0.101910425663

Resources

Name Offset Size Language Sub-language File type
RT_ICON 0x000755a8 0x00000468 LANG_DANISH SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000755a8 0x00000468 LANG_DANISH SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000755a8 0x00000468 LANG_DANISH SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000755a8 0x00000468 LANG_DANISH SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000755a8 0x00000468 LANG_DANISH SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000755a8 0x00000468 LANG_DANISH SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000755a8 0x00000468 LANG_DANISH SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_GROUP_ICON 0x00075a10 0x00000068 LANG_DANISH SUBLANG_NEUTRAL data
RT_VERSION 0x00075a78 0x0000034c LANG_DANISH SUBLANG_NEUTRAL data
RT_MANIFEST 0x00075dc4 0x000001ea LANG_DANISH SUBLANG_NEUTRAL XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminators

Imports

Library mscoree.dll:
0x402000 _CorExeMain

!This program cannot be run in DOS mode.
`.rsrc
@.reloc
\@[(q
eeT, 'eT,ai(
@_@Z(q
@M@Z(q
`\@Y(q
Y@Z(q
@S@Y(q
@^@X(q
[XZ_bX
[XZ_bX
#t!j_j
[XZ_bX
[YZ_bX
#"PD_r
@g@[(q
[XZ_bX
[XZ_bX
[YZ_bX
[YZ_bX
[XZ_bX
[XZ_bX
[YZ_bX
0o@Y(q
[XZ_bX
[XZ_bX
[YZ_bX
[XZ_bX
[XZ_bX
[XZ_bX
[XZ_bX
[YZ_bX
[XZ_bX
[XZ_bX
[XZ_bX
[XZ_bX
[YZ_bX
[YZ_bX
[XZ_bX
[YZ_bX
[YZ_bX
@"1cA#
[XZ_bX
[XZ_bX
[XZ_bX
[YZ_bX
[XZ_bX
[XZ_bX
[XZ_bX
[YZ_bX
[XZ_bX
[YZ_bX
[XZ_bX
#8t+F<T
[YZ_bX
[XZ_bX
[YZ_bX
[XZ_bX
[XZ_bX
[YZ_bX
[YZ_bX
[YZ_bX
[YZ_bX
[XZ_bX
[XZ_bX
[YZ_bX
[XZ_bX
ph@[(q
[XZ_bX
[YZ_bX
[YZ_bX
[XZ_bX
#qL!c?
[XZ_bX
[XZ_bX
[XZ_bX
[YZ_bX
[XZ_bX
[YZ_bX
[XZ_bX
#{/AAP
[XZ_bX
#ov;(
#"(QI#
[YXnZ>
[YXnZ>
[XZ`(d
[YZX(v
[YZX(v
[YZX(v
[YZX(|
[XZX(v
[XZX(v
[XZX(v
#+|Wh#U
[XZX(v
ZeaeXYe
ZfYee}
XYeXY}
aiaXea
YXffXff
aaYffff}
:uaieaa
afZaeYff}
"}aiae
TJ'.^_[
q?2^_[
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
WN&J.J
X9Q=Y=n
ED,>Y2`
B#K'C't
B#K'C't
B#K'C't
B#K'C't
B#K'C't
B#K'C't
Z;C/K/
w$E-A%!r
-]jOm$A
FF/D DVO
8)HZP0
k$<ESvD
XCd;M]S3
q-mA(j
G0U2L0w"
z|mT^
@X9^;_2l
CK,I.WF
.V?\9O X,
#S8]Fo}
E-J/8"'
QE-J/h
=]5R7/6d
/'N+PW
d0b/V>
DD+P5}m~
(F#Heh
J(M*YV.
cO%B'].b
"^4Q6+7`
1E2W4q
QF#HDW
XTA&Ck
T,H-J|
O+P5HYj
C[?\9`Lz:
<X<Y>p
[/J/Lc
U@%Bxe
#G1V3/&($
p"G$@j
NZ<Y>,
5E*O,K
K(M*|-
9k:\5I
.b2S<P)O
Q B*G#<
MC0T1b
sV6@@[
K@-I-~
D0R:V2#
$^7[?[}
^@g$8)
D0R:V2
P7eCD
FK(L({
RW<X<o
\:jJ[/
z*Lc(D
S?*I/nA
zd3R:V
qH4_>V
y-M&JF
@L*K-~7
S;W3oy
0?Q3Ww
>1E-A=c
j9X0\8\'a
]1Uy)O
a{s$A&
J(M*'Y
>W<Y=n
G"O.&Jg~
N B+G;
|0R;)M
0nL<U:
SP6W1bx
&N"F"q
3\0X4h
-M$A&%[
MfSM)sj
?vIG#G
9X0[?[
%:*dv!J'
[8P<XT
1J(@,HD6
_'C't'
+wO_opJ?
E#Ae,3
N')Aw
Z<U9]9j$
H$X<H
3m=+B.
VM+C/K
L0Y6j66O
A-L G{R
\LrN*y
;3T0c|
,J)I"#
p~-L$`
Cc(eI/|
W7`$-B
bI8,?[
kv"I.~
b#EO(A.K0{
9wu\4X
c7sTi5
a8V?^6
V.4DU4
_w.H%B
gL+5X<
t-r E"
!a|?g92d?
>fwQ@/&
3R:VqO
&G1RMnw
.PB]0Y
l?^6(q
dt7Oy/
V>=*9,
F;S>Z>
V1]'_(y
^?X5R'
it F#q
L(+e]Z
[ _2]9
D/H%A=Q4t
7X=o!W0b
V:S@<j9^
wNj8X0
U4h!>W3W
QmG*N*y
-gLMS?[
\5!~w
y)i|0
kv.L){
V8hHL){
93q&H!
SMCR:V
{2i5Q5
W2t*^R:V
UK{ H$
ZSBE!E
P<\9k%9v%D
2l,R;X
@>@8P<
^9y7)b
F8DB+H
hy8b2T
mM D s
l fN(iU
Q8)go'O#
!T,>Z>
[{*E*O
T9Q=Y=
OUjW_G
1u8`4S
]D?Dlx
]9md't
V2aO/}
SS,G#p.
4E!r,.\
T2a}Q-
+J"N*N
H)A-I-
{{(NH
kBP6X1
X:jb7S
o~=^ G
~G9K]5Y
@9N[?[{
E*O,Q7
4pSr!G{
|5n:^:
FCS2Z
K.F*N*
U4h~Lh
!]Gf'A
AA*N*)g
[2L#C,
Y:S@$X
,@+O+&y
j&@|=[
K0iW;_
PLR_9x
7kca F
SJE/L)
BY7_3W
e~%G0]
^S+C'C
\{8c#F
x2!:R>
k"kI7W
x,N'KGu
{o~51`
t5S}X(
/7h{!6
N'E)M%v
@+<:V2
=kB<V7_
G.K0{)
x ^8k}
_xQ+iQq
gL%:^:
B9PLlw
!%L!I4
#0O'Kw
}OPeAa9
\U R7T
+mPU8f
Sn!sI6
_J&K0To
Umh 1sV
@ "NM>;E}
/~>"3+
,A1Kv:
fs&K$I
Cu~5X1^
ak+P5R
`tD1V3
Tv$E-Y0
t?UC&v
PsS>Z>m
E9[?l}
6 ^:?W;
x4 Y?~
h;Z1]9]
[|8U1b
(w.o=Z?
#*CCcA&v
}.`^s!A
%(L~.
Y8:V2V>
u>R6R:
o=]6ZV
J"WfJ)
x9w=;S?
Ase^4\0
".(|K
u>%O$A
X1/~ I
>n.M*z
KG7Z<}
zAo-L
j~bg,l
Lrqb1P
ERVY8k
rBTt,A
P6%[A4]2
.W>R5Qy
M-A%A
qTO-E)M
k8OP&:
'*G$9jK(<<
s YVF#H
x9Z7T+8}~Q}8Y6S
Y9V31C
"#S@%8I3
1,L!F4
'}*.oQ
#'~jK+D
1>_7[?
i#4;.c#d
oHZ+K3}Hu
H(P35N
.%?A =(C
tT'8Oa
H.Tq+x
-+=?Z/
6 68v7M
6$XM`ci
<86?]X
4\+EzA
txc2^+
]*V3Q|
:,|O'1
x%Z+-
cO&BD1
n,lAG+O
Yu5Y=Y
(f5T<P
iw.F*N*!
ZT1VB<}
;{;^JC+G#G
CbI(@,H
=t,;!W
&y^lP++
gAo'J93
PZV\15
JbpdHi
~tkFfD
0F~E!f
P5yQQc
Iq)eY]
,.@$=p
]T3al7{
(bUsE`
~Uwm{N
j3*V*1
==X{[
w^!C--
_>e?,+
eDhN:v
,RA(aY
>uZ#`^+Y/
q&Y!!:
=a/biT
ORA y>!
g/IN!/
L;FBwj
x"~V1"c
\U45&b
Jx8cq\g
$zMBf*B
%$qRm3
rG3tT'4:
4`+>M"
Sf[vd)
rC4`_X
^]lD:'
"ll<+PyN
eMC_d
Ak|TqA
qxoO7o
EU^Rw+
U\$1_L)t
do6N}W
H1qT!0
@0:SNDr5w
E^>Ms7
LFLpZ4[
gA4,(T
$*mZ;Sw
%.,]OcS
~=h*P?
1b\yW
hA"l'#
u@?}#E
XF14|.
[[LR+OU
>xuM9O
Bjli9.H
-7k{Ut
4*~[Oi
G( S}
4u)Jge
a^gXeV
ZSRXp*
|j5euS
378J7x
@F6].T
9K}WN__;
^'Nsy7L!;
{I|1PV
\CaFU3B
3O+nYOw
u*/M=y;c
%xn~]Wx
2s|"U93
cV7, U
{/)s=MP
('W~,ll
E9V~Ef(
Y*&HLZ
i$`_P5
0@^jUKj
K\"o<pP
lXCQhh'#x
`v&b|S
}oQt$(A]
]#+vJY
N1v>oi#p
%M:rWn
Nl:vJ/o
KhgJz(
?x10wRd,\>(
-sOmY2
v4.0.30319
#Strings
#dasd#
#fasdfsd.dll#
#hdsdsadfffwtwfffffffgsssssdf.dll#
#fsdasdaswdf.dll#
#fffdsaswtf.dll#
#hsstaaadwsssssg.dll#
#fdsfs.dll#
#ssstaaaaaawsssss.dll#
#adsaws.dll#
#uuhuhu#
HotStreamCLR20
<WriteTo>b__62_0
<>9__192_0
<Sort>b__267_0
AllocateMemberDefRids0
<FromAsyncImpl>b__11
_LoadObjectV1
IEnumerable`1
IListListener`1
ILazyList`1
Push1_push1
$$method0x6000436-2
TypeUInt32
ToUInt32
ToInt32
<path>5__2
Func`2
ReadInterfaceImplRow2
<get_Properties>d__14
Get_Int64
Func`4
ToInt16
<SortTables>b__191_6
<pathName>5__7
get_UTF8
Digit9
<Module>
dnlib.DotNet.Pdb.Dss.IMetaDataEmit.SetRVA
S_FILESTATIC
HebrewYearOf1AD
_logicalCallID
RuntimeVersionWinMD
COR_E_ENTRYPOINTNOTFOUND
CSIDL_NETHOOD
TLS1PRF
GREGORIAN_XLIT_FRENCH
FILE_TYPE_DISK
UnescapeURL
MicrosoftCOM
System.IO
MAXIMUM_WAITERS
ERROR_ALREADY_EXISTS
fAfSahlddS
M_AssertFT
COR_E_TARGETPARAMCOUNT
LOW_SURROGATE_START
S_BPREL32_ST
S_LPROCIA64_ST
PROPERTY
mscorlib
System.Collections.Generic
get_IsStatic
FromFileTimeUtc
Set_CreationTimeUtc
ResourceId
GetProcessById
lpNumberOfBytesRead
_Thread
hThread
CodePageNoThread
get_CurrentThread
Get_IsHeldByCurrentThread
thread
fsassdadssssssssssssssssssad
IMemberForwarded
get_IsAttached
MarkThreadRequestSatisfied
MarkAsHandled
NoResultOnFailed
_failed
WriterClosed
M_Disposed
Get_IsCompressed
ChunksCreated
constant_isInitialized
Log2Rid
Get_Rid
SetHandleAsInvalid
IsInvalid
DateDataField
<DllCharacteristics>k__BackingField
set_IsBackground
IMethod
DynamicMethod
DefinePInvokeMethod
ResolveMethod
GetMethod
NetGuard
Password
get_IsInterface
Replace
Appearance
M_HijriAdvance
LoadResource
AssemblyLinkedResource
FindResource
SizeofResource
AltVKCode
GetHashCode
SetCode
CryptoStreamMode
EventResetMode
Xenocode.Client.Attributes.AssemblyAttributes.ProcessedByXenocode
EnsureStorage
EndInvoke
BeginInvoke
MaxInt32Scale
Set_AssemblyOSTable
ConstantTable
GetEnvironmentVariable
Enumerable
IDisposable
Serializable
set_Visible
AllInternalsVisible
get_Handle
RuntimeFieldHandle
get_MethodHandle
RuntimeMethodHandle
GetModuleHandle
get_TypeHandle
RuntimeTypeHandle
CloseHandle
GetFieldFromHandle
GetTypeFromHandle
UriSchemeFile
LoadCertificateFromFile
Console
get_Module
DefineDynamicModule
set_FormBorderStyle
get_Name
Get_FullyQualifiedName
CultureName
EnumName
lpApplicationName
LoadFactorName
DefineTypeRefByName
SNativeDisplayName
M_strAssemblyName
UtcDateTime
ExpandPrime
ReadLine
lpCommandLine
WriteLine
Singleline
IScope
ExportedType
get_FieldType
DefineType
CreateType
ValueType
get_DeclaringType
GetUnderlyingType
UnderlyingSystemType
flAllocationType
get_ReturnType
get_ParameterType
Get_ContentType
Set_EventType
System.Core
ReplaceSymbolStore
ResolveSignature
SetLocalSignature
IsNewCapture
MethodBase
WindowsBase
MethodSigIndexBase
Dispose
Truncate
CreateDelegate
MulticastDelegate
IsHighSurrogate
NullTerminate
UserState
set_WindowState
FormWindowState
_isComplete
ReadWrite
DispIdAttribute
STAThreadAttribute
CompilerGeneratedAttribute
UnverifiableCodeAttribute
UnsafeValueTypeAttribute
BabelAttribute
SuppressIldasmAttribute
AssemblyInfoAttribute
YanoAttribute
DotNetPatcherPackerAttribute
BabelObfuscatorAttribute
CryptoObfuscator.ProtectedWithCryptoObfuscatorAttribute
DotNetPatcherObfuscatorAttribute
DotfuscatorAttribute
CompilationRelaxationsAttribute
SmartAssembly.Attributes.PoweredByAttribute
RuntimeCompatibilityAttribute
VerifyTypeAndValue
InitializeInitialValue
SetValue
EncodedValueToRawValue
get_IsAlive
ConvertLayoutToNative
Remove__ModuleResolve
fAfSahlddS.exe
get_Size
dwSize
Resize
SizeOf
IndexOf
fshdfhfrdadsatrfffffffffddf
fsdsdddddgdwreeegfsdf
get_IsByRef
System.Threading
Encoding
IsLogging
OnComponentChanging
Ceiling
FromBase64String
OutputDebugString
ToString
GetString
SystemDrawing
mlfpbdehkpg
VarArg
FullMatch
get_ExecutablePath
AbsolutePath
ObfuscatedByGoliath
Set_Length
get_Length
StartsWith
Popi_popi_popi
IsCharSetAnsi
AsyncCallback
S_taskCancelCallback
callback
AddSearchableDirsToStack
_stack
M_foreignLock
DefineTypeNoLock
FlushFinalBlock
ScanBlank
CreateReplicaTask
ReadInlineVarLocal
Marshal
RuntimeFieldHandleInternal
GetModulesInternal
SplitInternal
S_taskCompletionSentinel
IOldLevel
<>3__globalQueueTail
kernel32.dll
Control
CryptoStream
MemoryStream
get_Item
GetKeyForItem
System
SymmetricAlgorithm
GenerateRandom
Custom
ICryptoTransform
Get_IsRemoveOn
Sub_Ovf_Un
get_MetadataToken
hToken
Get_CancellationToken
M_defaultCancellationToken
_cancellationToken
SetPublicKeyToken
lpNumberOfBytesWritten
PositiveSign
AppDomain
get_CurrentDomain
ReadColumn
Get_OSVersion
majorRuntimeVersion
M_informationalVersion
GetPermission
EnvironmentPermission
WindowApplication
get_Location
_alternation
AddInterfaceImplementation
NineRays.Obfuscator.Evaluation
ClosePunctuation
System.Reflection
ManagementObjectCollection
GenericParameterPosition
CallingConvention
RuntimeWrappedException
ThrowArgumentNullException
MemberAccessException
StringComparison
Set_LongTimePattern
NumberNegativePattern
TokenCompareTo
GetRawEHInfo
GetDynamicILInfo
DataInfo
FieldInfo
MethodInfo
M_registrationInfo
startupInfo
MemberInfo
ParameterInfo
Get_HasLayoutInfo
ENCMap
InitializeImplMap
Set_TimeDateStamp
DeclaredOnlyLookup
CharInCategoryGroup
_group
SupplimentarySeq
System.Linq
set_ShowInTaskbar
DatePartYear
GetNumber
MetaDataHeader
ImageOptionalHeader
DESCryptoServiceProvider
SetErrorMode_VistaAndOlder
MethodBuilder
ModuleBuilder
TypeBuilder
M_typeBuilder
M_customBuilder
AssemblyBuilder
lpBuffer
ResourceManager
Debugger
ManagementObjectSearcher
Get_IsRequiredModifier
ModuleResolveEventHandler
ChangeAppDomainTimer
Get_IsNativeWriter
RegexWriter
Set_PositionPointer
get_IsPointer
BitConverter
ToLower
TimeSpanTokenizer
KeyValuePair
GetKeyPair
GetTokenFor
ManagementObjectEnumerator
GetEnumerator
M_ctor
.cctor
dotNetProtector
get_IsConstructor
CreateDecryptor
IntPtr
System.Diagnostics
SafeNativeMethods
GetMethods
System.Runtime.InteropServices
System.Runtime.CompilerServices
System.Resources
fAfSahlddS.resources
Matches
ValidProperties
CreateTables
M_localVariables
CompareCanonicalHandles
bInheritHandles
EnableVisualStyles
M_iLines
EmptyTypes
lpThreadAttributes
MethodAttributes
TypeAttributes
MethodImplAttributes
ModifyImplAttributes
GetCustomAttributes
lpProcessAttributes
GetBytes
Set_PercentGroupSizes
DelegateBindingFlags
dwCreationFlags
GetMethodImplementationFlags
SetImplementationFlags
Get_FormatFlags
_CompatFlags
GetFlags
Equals
LoggingLevels
M_ctorParams
System.Windows.Forms
AtNmTokens
Contains
NumberOfRelocations
m_methodInstantiations
CallingConventions
CheckCreationOptions
PropertyMapInfos
get_Chars
GetOptionalCustomModifiers
GetParameters
sssssdtrrs
get_IsClass
AssemblyBuilderAccess
hProcess
GetCurrentProcess
lpBaseAddress
lpAddress
Set_Documents
Arguments
ReAddRows
ReadUInt16At
Concat
Format
TypeObject
ManagementBaseObject
GetObject
object
Select
flProtect
RuntimeResourceSet
s_tokenSet
CharSet
M_RefusedPset
op_Explicit
System.Reflection.Emit
IsContentTypeDefault
SetCompatibleTextRenderingDefault
IAsyncResult
result
Get_Invariant
System.Management
AlternationCantHaveComment
lpEnvironment
get_Current
CheckRemoteDebuggerPresent
IsDebuggerPresent
Get_IsEvent
GetDatePart
ParameterizedThreadStart
Runtextstart
System.Collections.Generic.IList<T>.Insert
Convert
FailFast
LocalList
DestroyCleanupList
AllowUncHost
MatchTimeout
SuspendLayout
ResumeLayout
MoveNext
System.Text
M_additionalContext
GetJitContext
context
M_prev
RawDeclSecurityRow
ResolveFieldDefThrow
ydasdasw
RegQueryValueEx
_OutputBufferIndex
S_localFilePrefix
Tuesday
AddArray
ToArray
get_IsArray
Get_MethodBody
MethodToNativeBody
System.Security.Cryptography
DefineDynamicAssembly
GetExecutingAssembly
BlockCopy
FreeLibrary
PathAndQuery
lpCurrentDirectory
_capacity
op_Equality
System.Security
SuppressUnmanagedCodeSecurity
IsNullOrEmpty
198 Protector V2
System.Security.Permissions.SecurityPermissionAttribute, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
SkipVerification
WrapNonExceptionThrows
_CorExeMain
mscoree.dll
==========================wwwwwww
++++++++++++++++eeeee
++++++++eeee
JJJJJJJJJJ
++++++eee
JJJJJJ
+++++eee
++++eee
8Vyyyyyyyyy
((((((((yyyyy
((((((yyyy
VVVVVVV
(((((yyyy
(((((yyH_
NNNNNN
N000000000
-oE9(y+
???????????
0000NN
{{{{{{{{{{KMM$O
{{{BBBBBBBBBBB
hhh;0N
^fCCCC
PCCCCC
@@@@@@@Y
,,,,,,,
@@@@''''''st
@@@''''
jjjjjj
66Rddm{
BBBBB{}dRdg
000000000000UUUUUUUsss
444444[[[[[[
imm;;Lmmmm44444[[[
mm4444[[
FFFFFFxx
m444[[
uu77777
_Aj6666
6III|x
^^^^^^^
YY333333
ww9999c
fG###(z
w99 pT
3333&W+
h+@h'h
..eeeeeeee....ll
=llFF*"S
fF)ll++++Gk$C:CR
0ll&&&&
H333GI/
KKb`H[
4gl`K,
llllllllll
9_-_Qlllllllllll'llllllllllllllllllllll
QOOUuUO
`\FS$$
FT_xlVs
PyR#02
g8(>bP
|e\Wd,Zt
N=#;40
YIii!~
u.+O]3!
]FmEad
xj}U7K
TL}v%\U
ikOy9<--
=hz]^p
|2/#x6
~8+KPr
?`E3@{-
N=N sSP
tG&F6-.
A"><4b
o&oR9X
%}7s_x
P{;v^|1:?
<y2\.W
0<u*$I
|())AUUU
]}5jS$`&
hIBGy9
CVJ>np
nGoc#|
jjj044
u+V@ik+
Qss2*0
y36\|1
g?CGkkz)
NCcc#*++
iFG$]>
O:'Jx"`
GhjjBUj
wB.!>
hhh@qq1uo
&''111
HK0dB|
Dv._I>
Dl)6*)
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
<assemblyIdentity version="1.0.0.0" name="MyApplication.app"/>
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v2">
<security>
<requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3">
<requestedExecutionLevel level="asInvoker" uiAccess="false"/>
</requestedPrivileges>
</security>
</trustInfo>
</assembly>
fAfSahlddS
GetEnvironmentVariable
-2000336797
2000330348
-92895689
92872997
_ENABLE_PROFILING
_PROFILER
-861841393
861890281
-609006223
609151791
643388587
643382247
-432622869
432559637
1673236938
1673218640
-815819093
815841922
726072330
726029672
531339922
531345244
979667325
979756453
-1776576244
1776579221
-1009511310
1009434716
815249574
815262599
1890968957
1890880223
-1035801268
1035786085
-411665135
411765381
-1451573882
1451569428
-1900197286
1900175634
377707308
377723341
-141541424
141454271
1832586023
1832616553
317594370
317684663
1251359839
1251360987
-137958933
137996607
930834646
930755902
-103147870
103126543
-788062588
788089748
958265349
958184183
-1494124017
1494090239
-111167983
111154206
-254220589
254185189
-1440483361
1440548504
-1677146528
1677192908
-1209519912
1209472406
1700365914
1700338978
1594540719
1594497214
651822022
651824270
-336662501
336689981
-1779608467
1779589506
-1173275938
1173274141
-744147992
744121487
-1974215498
1974258611
812294498
812351714
-1664956254
1664935462
-1942954058
1943007315
-1358032144
1357939145
511311087
511303814
1798484417
1798491700
-1171098031
1171237029
1535035996
1534995496
1345707929
1345643825
646549347
646571051
-1141018098
1141007625
-440401427
440231019
2093651580
2093726104
-1302719102
1302653116
1245680701
1245704354
-1432391810
1432444797
268446755
268491885
-1798118246
1798112266
-1276103469
1276008701
-1115826074
1115889371
-818508340
818469176
1764052660
1763995279
-1599585629
1599538552
-433397612
433365628
138815073
138827530
950010633
950087768
-984910971
985012250
1348469280
1348542278
-535451013
535462270
420558411
420480117
-875837964
875953710
-99515414
99603590
656071107
656054261
-1547359811
1547341138
-1752631833
1752649414
111065219
111026681
-158635052
158644845
1114965128
1114977535
972351411
972333374
521766786
521713702
423149624
423136908
-1823098422
1822973121
-200067358
200090575
144779905
144719483
263386883
263381512
-663374350
663481988
1442183675
1442167673
-20702575
20560575
-296020241
296006701
759177862
759171835
-459808532
459860648
2024034433
2024058880
145547865
145537434
-604632135
604557982
739441219
739413054
-1542461515
1542511035
1635277153
1635333608
279230401
279209279
-1950530303
1950502701
35539402
35553123
-429228343
429202340
1718079087
1718014684
-2015222294
2015189635
-2138759039
2138827334
1357792481
1357791524
1709308226
1709212867
1489503480
1489593405
-1811263274
1811391097
2130150335
2130179733
1124537991
1124573158
131362846
131419392
-284052346
283931523
-818909208
818868317
-1958726446
1958593122
357873640
357851124
-1669225286
1669205389
-973044786
972986350
1139050128
1139139639
1425572914
1425540749
1649194842
1649208504
-2126632726
2126618125
-1591532752
1591593259
596266266
596280864
-1462293827
1462407105
1794049101
1794057709
-135769092
135700095
276514479
276509734
1691580197
1691594176
648284385
648340200
-594180344
594236736
371053940
370983830
1117823179
1117905064
-1726793091
1726892864
-351329350
351386175
651636573
651685095
808544194
808545021
1823110699
1823171397
1234444963
1234543135
-424048111
424039482
-1881346156
1881266285
2120163199
2120116859
-344341898
344395394
2059668762
2059701359
-1618498610
1618571762
-160622080
160568583
-901270582
901311807
-870777137
870750882
374694524
374715158
487632581
487644402
-446546159
446648778
1303998093
1303933378
-279445744
279532377
-258255517
258391631
521578914
521648854
1996421988
1996366567
-1673570050
1673622754
-1548449663
1548417802
1540168004
1540174827
-1749905820
1749822613
1679963027
1679962027
1561798018
1561798848
1639910792
1639854406
-1158832588
1158702842
2122601340
2122662117
-1375281116
1375278763
1851450200
1851444834
-983813297
983792714
927553298
927548282
2103434733
2103348348
-1509385198
1509319750
788805238
788863375
1784165699
1784246574
-1078787964
1078764454
-1930258078
1930171858
303512703
303562530
-951642253
951631392
-821551328
821432505
297524589
297464903
-1272444759
1272296838
1920181149
1920190608
885349365
885374429
-1198367621
1198472084
-1488444103
1488452916
1140964741
1140936011
-2131403478
2131483194
1510481958
1510566548
-302031040
302105762
-1886199754
1886359643
1509542899
1509504641
-1354598600
1354757226
-39416524
39326754
-1193477742
1193523561
-223572750
223562206
-850023791
849898568
398392953
398431396
177650704
177659767
-599617791
599630305
214845561
214827091
-1811678695
1811687339
-1041566207
1041502441
-1645385706
1645376962
1134851160
1134856723
-359025430
359065314
-1830836380
1830841827
699690716
699691063
1717737089
1717738891
1751983710
1751909936
-234587020
234606385
1583877565
1583918558
1910675140
1910695833
-203334647
203332963
-2123160757
2123231209
505409209
505328733
-790269124
790342312
-1887117955
1887137108
925020855
925090116
-1284955605
1284926768
1715108868
1715152026
-1303589328
1303560413
1665776601
1665737707
-1337272797
1337204871
-1514290396
1514328402
1640492770
1640482009
1680929376
1680878169
-859166175
859122645
-1903441520
1903584159
1606615925
1606665600
-2125996167
2126137028
784110558
784102606
-575762108
575770238
-331186222
331197132
-1494283795
1494322388
-1717709086
1717802659
-1591011495
1591052299
-192952239
193034428
1185003849
1184988178
-709138474
709133090
-1771023019
1770956296
-890782250
890811595
-481374701
481356555
-1459740750
1459705422
567681732
567710639
670606383
670682454
1206688526
1206758452
-1450755824
1450898626
463156525
463154010
285220906
285289264
-954379985
954464445
1875826205
1875887876
-1950224788
1950318159
-1670023592
1669900325
1627215532
1627217511
-1806482156
1806559372
-1021151555
1021100137
-350986710
350973464
78845701
78842520
-1220280950
1220450808
1185597765
1185653926
-629415899
629428773
-472083006
472051430
96056608
96001908
-1598254603
1598179662
-460126386
460256070
-964409551
964343662
-992235566
992318607
230285573
230209923
606275246
606229289
2107774415
2107833767
-1191604874
1191677846
962676349
962606419
-1347807444
1347941298
-443733101
443754548
1611308234
1611389244
1014366881
1014413285
-920512633
920490275
-1100211399
1100041534
407425101
407417407
164912333
164947817
437484567
437399380
1486261004
1486289268
1355964264
1355960064
1790803589
1790725484
785471392
785403381
1614794871
1614745978
-1357192092
1357162917
-1640098914
1640099005
1275921297
1275868159
-419193441
419178529
757967484
757958826
2136688298
2136636041
154383092
154306437
31620717
31650735
568321633
568263453
-1717587605
1717649049
-1501979111
1502010278
-212921810
212947502
-1899347585
1899471652
-212450202
212350709
-304702545
304615670
1868550130
1868466413
-722762552
722812184
-738562609
738671305
1558078093
1558069634
-1018554864
1018434988
371307886
371315882
-584576236
584539275
-144983504
144987889
790379634
790390298
-1151812239
1151820942
1850146467
1850133294
1355808695
1355730063
541978889
541979685
-1439917979
1439946062
-1663552709
1663565405
-417016939
416957021
1232425455
1232342543
579731161
579672408
758096302
758024281
-656549654
656453097
1821842128
1821895069
2100464938
2100466441
557993734
558019906
1759310229
1759273711
-1368242333
1368385334
1979336931
1979393707
1338288837
1338268582
1622160646
1622197121
962856477
962932220
573422773
573422769
-1464066921
1464001410
-480200511
480242367
-1255391337
1255284045
-1939035371
1939073574
-2056363457
2056354150
-901712819
901762817
-1081170943
1081162077
-881427926
881333378
844537949
844547169
-1451507117
1451606413
-1814351470
1814469345
-1743741926
1743615910
-1762476122
1762496038
-1414224236
1414130861
807591605
807594114
-1097583203
1097460457
968708479
968720914
-1318870938
1318884771
1334157054
1334150916
-980216614
980175997
822704128
822707197
-1588153974
1588190592
472341970
472371023
1525651835
1525614857
-1550129978
1550135721
-1789937689
1790065450
728760655
728787916
-327318614
327327303
-981119004
981140510
910180147
910178684
-1864875266
1864850047
-41964966
42044823
-1006479678
1006500643
-841643162
841726128
-1562200653
1562348252
-1700680144
1700660478
367660503
367740849
1156324826
1156370693
-920161301
920180755
-964870027
964841908
1441041274
1441029527
15625651
15670198
-1963951266
1963839753
-458779595
458807900
1439356821
1439423696
-1927117008
1927085899
-309381452
309494073
1351718719
1351723361
1196783790
1196767093
-1213484088
1213517256
-1018348344
1018425918
552557040
552584440
-239227788
239227796
1410736767
1410808645
-1840757897
1840756780
-1753906812
1753947318
1181939196
1181925301
1293272103
1293234848
-1292482510
1292442302
-984547946
984482429
-992920955
992895942
-273195896
273243240
-48543536
48499573
1481220402
1481168952
87654321
-264607338
264589115
-240587022
240480521
-5296459
5305042
1360739000
1360725251
Suresh Dasari
Press Enter Key to Exit..
Name: {0}, Age: {1}
Select * from Win32_ComputerSystem
ddddddddddddd
microsoft corporation
vmwddddddddare
-1829156326
1829129495
397770065
397766984
741678283
741725713
-35686942
35715394
560692579
560619378
managed
native
fAfSahlddS
Enter the Number to check Prime:
Number is not Prime.
Number is Prime.
x value less than y
x value greater than y
Character s Index Position: {0}
Ignore Case: {0}
Change Search Start Position: {0}
Characters Length Reult: {0}
String Position: {0}
Press Enter Key to Exit..
-141503337
141515418
1412067653
1412070748
-670041330
670084217
-172760774
172830842
1296516173
1296511115
-1611374584
1611327082
321777992
321728466
417534851
417486366
773364691
773451444
-1274669112
1274575059
9aviGAn1wT6/AWxLBQo2uJhykDOl0pNL
-220581757
220493279
9aviGAn1wT4yOPIA+BqUceaAzqy9JJSJ
DynamicDllInvokeType
Kq6LhUBaRH4=
-479560814
479534011
1990668789
1990666341
1485879678
1485847732
-503255177
503142639
-480216403
480178790
-2030753703
2030737828
-357892798
357933381
526850379
526891243
-2019110360
2019250589
-1117215863
1117250003
615797285
615805567
337618312
337545655
-1591866588
1591821320
-1284114500
1284214766
450719730
450744445
-864434684
864521238
1321189538
1321180127
McEucIDzzXzCQoMy4ZWcKw==
KtbmnGSv1g1yDntsijnBgWn9SwJw5T9Y
mPj4apiweG1er9Mxw5J4kkCZRq8fYmf7
zrDWqclUJR7SZoE9JpwdlONAK1mx5J7y
AOLzSt7QfccPbXIBoydUCg==
MH1I/hyvEuNHVnRguPZ159x20fGwlZwx
0CTE8BtkZT5dxQKwOfFf3JDCmmAqkQOw
gzrAOYmc8p+dsSrZ+sUQ9vm3xOrTNXGC
k2gWGKVo8BsO2Rdmm3DNVQ==
ipT8Pe53088288NXX+PgIg==
8rz3PDMFj5wZh3cKrToiDBrjjI1FtGW5
VS_VERSION_INFO
StringFileInfo
040904b0
CompanyName
Microsoft Corporation
FileDescription
Web Publishing Wizard executable
InternalName
wpwiz.exe
LegalCopyright
Copyright
1995-1997 Microsoft Corporation
OriginalFilename
wp15wiz.rc
ProductName
Microsoft
Internet Services
FileVersion
6.1.33.0
ProductVersion
6.1.33.0
VarFileInfo
Translation
Antivirus Signature
Bkav Clean
Lionic Trojan.MSIL.Androm.m!c
Elastic malicious (high confidence)
MicroWorld-eScan Trojan.GenericKD.38001826
FireEye Generic.mg.8cec5b455b359860
CAT-QuickHeal Clean
ALYac Trojan.GenericKD.38001826
Cylance Unsafe
VIPRE Clean
Sangfor Clean
K7AntiVirus Trojan ( 00581a8a1 )
BitDefender Trojan.GenericKD.38001826
K7GW Trojan ( 00581a8a1 )
Cybereason malicious.6819c2
BitDefenderTheta Gen:NN.ZemsilF.34266.Cm0@aKukALlG
Cyren W32/MSIL_Agent.CJD.gen!Eldorado
Symantec ML.Attribute.HighConfidence
ESET-NOD32 a variant of MSIL/Injector.VRN
Baidu Clean
TrendMicro-HouseCall TROJ_FRS.0NA104KB21
Paloalto generic.ml
ClamAV Clean
Kaspersky HEUR:Trojan-Spy.MSIL.Noon.gen
Alibaba Trojan:Win32/Kryptik.ali2000016
NANO-Antivirus Clean
ViRobot Clean
Rising Clean
Ad-Aware Trojan.GenericKD.38001826
Sophos Mal/Generic-S
Comodo TrojWare.Win32.UMal.ahgoq@0
F-Secure Clean
DrWeb Trojan.Inject4.19129
Zillya Clean
TrendMicro TROJ_FRS.0NA104KB21
McAfee-GW-Edition GenericRXQO-WD!8CEC5B455B35
CMC Clean
Emsisoft Trojan.GenericKD.38001826 (B)
Ikarus Trojan.MSIL.Inject
GData Trojan.GenericKD.38001826
Jiangmin TrojanSpy.MSIL.bxuz
Webroot Clean
Avira TR/Injector.xaent
MAX malware (ai score=100)
Antiy-AVL Trojan/Generic.ASMalwS.34CEB47
Kingsoft Win32.Troj.Undef.(kcloud)
Gridinsoft Ransom.Win32.Sabsik.sa
Arcabit Clean
SUPERAntiSpyware Clean
APEX Malicious
Microsoft Trojan:Win32/AgentTesla!ml
Cynet Malicious (score: 99)
AhnLab-V3 Trojan/Win.RATX-gen.C4766291
Acronis Clean
McAfee GenericRXQO-WD!8CEC5B455B35
TACHYON Clean
VBA32 TScope.Trojan.MSIL
Malwarebytes Trojan.MalPack.MSIL
Panda Trj/GdSda.A
Zoner Clean
Tencent Clean
Yandex Clean
SentinelOne Static AI - Malicious PE
MaxSecure Trojan.Malware.73691310.susgen
Fortinet MSIL/Injector.VRI!tr
AVG Win32:PWSX-gen [Trj]
Avast Win32:PWSX-gen [Trj]
CrowdStrike win/malicious_confidence_100% (W)
No IRMA results available.