Static | ZeroBOX

PE Compile Time

2022-07-21 05:21:09

PE Imphash

f34d5f2d4577ed6d9ceec516c1f5a744

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00002000 0x0005d1a4 0x0005d200 6.38986485672
.rsrc 0x00060000 0x0000120f 0x00001400 4.79090200053
.reloc 0x00062000 0x0000000c 0x00000200 0.101910425663

Resources

Name Offset Size Language Sub-language File type
EDPENLIGHTENEDAPPINFOID 0x000601e8 0x00000002 LANG_SERBIAN SUBLANG_NEUTRAL data
RT_ICON 0x000601ec 0x000008a8 LANG_SERBIAN SUBLANG_NEUTRAL dBase IV DBT of @.DBF, block length 1024, next free block index 40, next free block 16776176, next used block 10526884
RT_GROUP_ICON 0x00060a94 0x00000014 LANG_SERBIAN SUBLANG_NEUTRAL data
RT_VERSION 0x00060aa8 0x00000380 LANG_SERBIAN SUBLANG_NEUTRAL data
RT_MANIFEST 0x00060e28 0x000003e7 LANG_SERBIAN SUBLANG_NEUTRAL XML 1.0 document, UTF-8 Unicode (with BOM) text, with very long lines, with CRLF line terminators

Imports

Library mscoree.dll:
0x402000 _CorExeMain

!This program cannot be run in DOS mode.
`.rsrc
@.reloc
@S@Y(g
_~Eai("
sfai("
`_@Z(g
`!Zd@#
[@Z(g
7beb@#
`X@X(g
pg@Y(g
[XZ_bX
[XZ_bX
[YZ_bX
[XZ_bX
0v@Y(g
[XZ_bX
[XZ_bX
[YZ_bX
[YZ_bX
[YZ_bX
[XZ_bX
[YZ_bX
[YZ_bX
`X@X(g
[XZ_bX
[YZ_bX
[XZ_bX
[YZ_bX
@C@Y(g
[YZ_bX
[XZ_bX
[YZ_bX
[XZ_bX
[XZ_bX
#+/DASU
[XZ_bX
[XZ_bX
[YZ_bX
[XZ_bX
[XZ_bX
[XZ_bX
[XZ_bX
#G}uzO&a@#
@8KIA#
[YZ_bX
[YZ_bX
[YZ_bX
[XZ_bX
[XZ_bX
[XZ_bX
#FR/*d[
[YZ_bX
[YZ_bX
CO:]cc@#
[YZ_bX
[XZ_bX
[YZ_bX
[YZ_bX
[YZ_bX
[XZ_bX
[XZ_bX
[YZ_bX
[YZ_bX
[YZ_bX
[YZ_bX
[YZ_bX
X~@Z(g
[YZ_bX
[XZ_bX
[YZ_bX
[XZ_bX
pa@Z(g
[YZ_bX
[XZ_bX
[YZ_bX
[XZ_bX
#'ZCLSc
[YZ_bX
[YZ_bX
[YZ_bX
[XZ_bX
#lAPmwU
[YZ_bX
[XZ_bX
[XZ_bX
[XZ_bX
#gA3z<
[XZ&&*
[YZ`(2
[XZX(G
[YZX(G
[XZX(G
#+*7Mbs
[YZX(M
[YZX(G
[YZX(G
[YZX(G
[YZX(G
y+yai
L aiZa
baiYfZ
@_\fAZ(g
+aieaY
ntaifY
*$n^_[
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
*a*y]>
Y]U1v1
&gn"w?
lTFO8jW
+<2Y*
'xwF[}/#a9j
GWgd<P
BQ3^)&
[08vYe
+%N9{,|(
&Iaa~7
jYOT\,%
J>u2]-(
C}}&|~
sFd K-=
)I9v#]b
`6P[@!
-[F4oXY
DC-2|P
9g!9KAd
nF ~f.
L.8M-)
oD.gN#A
}Enq0:
'!&E^%
nB<E0ce
`O.]Q<
eIuHjX
7(i-m.
LgI9q=
nOur2\-
I79Gcay
oL0:?MT
.`Bbf5
*,j.j;p
WC(67>
(S^1 -
2BqtW(P
eUul0v
j,TqJo
BjBvlO
&5DstFRx
dcnWWQ
LfwyaB
@;k//v+
3-_L%:.
Kd!KxP9i
r>d Dl
ydj|=,T
EHOVPH?
{;M'N.j
b~r(vBf
Ev<=Kk
Tu[[bbcC
@P3UO|
6#nP#i
0+E&/T>
9@Pk0C
PJPoqp
Dg7mv('Y
t=[3q%
kz!A]U
P2d/OV/F
c:L\q<z
t*t9]$
]Qjc(
24>YLh
$oF'V@
Ea}D?<
E.C,
\+ 0,N
te,R-u
g_x>a?
XWgtmC-
V:be@)
'm_N*ZB
r6>O g
h`Y`
E)q1H8gm
k~&IN}
"Iv7 m
.s=M'Z
`Ib$([
J"Paqs\_
Su=1z;A
#OkqQT
SVl*#J
&5_S<7w
m<mj9r7
F020pQ
~P3pGH
a3LIi\sl
ag3fUL
=#o:l[
L7Z*=^
_>x2lQ1
* gZP*
am!+6G
H},cjx_w
2C9(QyE
s/)%p1
CWere9
+"cfb-
`".*`Ybu
)[lZx6
k>,9lr
?\'^ht
73H,jgd
_.<ep}r
k Bf`F
0}W4Qt
`4qs|PAD_
IiL w0
MBKxgif
-]kX`)!
^h8>Mk
+Lx#~x
x5f>A )
3KJLt:
'%`z+_j
BB%<4?L(
nv6I]q
nx7Solss
aw8#wWH
/NN7Hn
M?E"3v
;`e82o
Nj5 y5
aZ)hVH
dS=mE)
a.w?_9
G~LiVqr
.REy"x
C3tl!p
}~;$-g
[41^ve
q}9XdYP
vEUb5n
|39QYr
d`pA5i
:3)#"W
L&!Fq'6
*4hgoc~
3*+G`pd
9{+BKX+Y
pwGMHa
v=U!q2
,!~U_o
~<#k$U
4 $I,;
SzE*GH
f\mw=Z
0xOwSr
jz%EF-
0MRDYF
m$GX1N
o#y| _H
ik=z!i
!5w2=AM
4e<B7,4
)>4/pY$H
S<#Z!YQ
Ao((N
}Z>Vee
L`,EWh
r9zl(%
H)~zo.
WqX@niBJw{%
oclm|k
j;i^pC
\VZgjt
va}Z$pb)
mpkX4X
BmgruQ
mJW4g)
/&az;s
jzIoY6O
6LBeKE1
qu>]IY
ZF3dhg+oa
kvdFE8
+8f:EM
aNbB}Q
-#%!'v
+8f:EM
+8f:EM
-#%!'v
+8f:EM
:V!--:J
u+$[nV
ABT'vj_
{7gJts,
03L~t(
}Q8fF)
%8v|xR
5\NWD4
HDze_]
4)@V"G4
:^XNIvk
%\bAL-
P`\8m!gH
Oc07*wN7-~
,2Q;s97
P#QS2(
K_MEPI
@)~ DMh
.4Cz+u&M
r5%0w4a
dJMO"
a@8IEi
jWBh+@9
KHa;5V1
8F)oJ
s?Qib/x
ExrEY8}Qw
MgZ^`v
Ygh97w
>d')O0Ow
w \3aJ&
,(uV}B[
5@*jG3
l>vnQlv)|
_SG%a=
m.EtKZ[^
jXr'CQ
ZNDO+
DGtI6=
6tP5~@6
|\Y@`0
Tw{dQn|
Uz<hvl
hY}+Q`v
m5o2^3
'NW0[,26
efcAvs#
=ut;n1t
##n<ao
!"-M,Y
X_?m6](q
r\h:Wu3
v4.0.30319
#Strings
<>c__DisplayClass30_0
Conv_U1
<enumerator>5__1
IEnumerable`1
EventHandler`1
IArraySortHelper`1
List`1
<Initialize>b__89_22
NumberToUInt32
ToInt32
PrintAsI2
Func`2
OnLazyAdd2
Initialize2
Set_Exponent2
MDAllocateMemberDefRids3
Ldind_R4
Ldelem_R4
Reserved4
TypeInt16
ToInt16
LOCALE_SABBREVDAYNAME6
get_UTF8
Popref_popi_popr8
<Module>
CreateRSA
HKEY_PERFORMANCE_DATA
PrevEC
S_usedSinceLastGC
STANDARD_RIGHTS_READ
FILE_ATTRIBUTE_ENCRYPTED
Serialization_InvalidID
FieldDefMD
COR_E_ISOSTORE
KEY_WRITE
TOKEN_HASH_SIZE
LOCALE_SMONGROUPING
GREGORIAN_XLIT_ENGLISH
get_ASCII
CodePageASCII
S_DEFRANGE_REGISTER_REL
System.IO
LOCALE_IDAYLZERO
SEM_FAILCRITICALERRORS
IsStopperX
LOCALE_SPOSINFINITY
value__
hkilrFa
CultureData
SearchData
sfhhfhhdssfgdb
sfssfffdhgdhfb
ClrAsmName_Mscorlib
mscorlib
System.Collections.Generic
get_IsStatic
FormatedInvalidCultureId
Get_AlgorithmId
GetProcessById
get_CurrentThread
RijndaelManaged
get_IsAttached
_isCompleted
GetNextFreeRid
GpRidToOwnerRid
GetNestedClassRid
IsManagedEntryPointValid
gjjjjjfjdjjjd
<End>k__BackingField
FaisdhssdhsdhlEnd
FaissdhssdhsdhlEnd
set_IsBackground
IMethod
DynamicMethod
ReadMethod
DefinePInvokeMethod
ResolveMethod
GetMethod
Leopard
NetGuard
NetworkInterface
get_IsInterface
Replace
SymbolNamespace
CaptureStackTrace
Choice
GetHashCode
CleanupCode
ErrorCode
SetCode
MutexTryCode
set_Mode
PaddingMode
CipherMode
SetErrorMode
Xenocode.Client.Attributes.AssemblyAttributes.ProcessedByXenocode
RegexFCFromRegexTree
GetBaseDirectoryOfImage
get_Message
GetSourceRange
EndInvoke
BeginInvoke
ParamTable
M_indexTable
GetEnvironmentVariable
Enumerable
IDisposable
Get_Visible
SplitFractionDouble
get_Handle
RuntimeFieldHandle
get_MethodHandle
RuntimeMethodHandle
get_TypeHandle
RuntimeTypeHandle
CloseHandle
GetFieldFromHandle
GetTypeFromHandle
Shuffle
UnsafeCreateFile
MapViewOfFile
Console
ValidateAdjustmentRule
get_Module
DefineDynamicModule
Get_IsManifestModule
get_Name
mscorlibName
AddName
MethodBaseSigFullName
HashCodeProviderName
AssemblyName
PropertyName
HaveTime
ReadLine
WriteLine
Get_StartLine
TryRunInline
get_FieldType
DefineType
CreateType
Get_AttributeType
ValueType
get_DeclaringType
get_ReturnType
get_ParameterType
M_type
System.Core
ResolveSignature
SetLocalSignature
Get_SecurityInfrastructure
ExplicitCapture
MethodBase
DRelease
InternalDispose
Truncate
C_MaxAsciiCharsReallocate
Preallocate
FaisdhsdsdhsdhsdlUpdate
FaissdhsdsdhsdhsdlUpdate
Create
M_Delegate
CreateDelegate
MulticastDelegate
get_AsyncState
NestedPrivate
CompilerGeneratedAttribute
UnverifiableCodeAttribute
AssemblyKeyNameAttribute
UnsafeValueTypeAttribute
BabelAttribute
SuppressIldasmAttribute
AssemblyInfoAttribute
YanoAttribute
DotNetPatcherPackerAttribute
BabelObfuscatorAttribute
CryptoObfuscator.ProtectedWithCryptoObfuscatorAttribute
DotNetPatcherObfuscatorAttribute
DotfuscatorAttribute
CompilationRelaxationsAttribute
StructLayoutAttribute
SmartAssembly.Attributes.PoweredByAttribute
RuntimeCompatibilityAttribute
Get_Win32VersionValue
Get_ReturnValue
SetValue
get_IsAlive
Remove_AssemblyResolve
amdFFmaiAn.exe
get_Size
M_UsedSize
MaxSize
ReInitialize
SizeOf
TrySZIndexOf
ResolveTypeRef
ToTypeRef
ResolveMethodDefOrRef
get_IsByRef
sssshfddhfasff
ssfsffhdffhasff
gfddsdg
jfddgg
TmInternalLeading
System.Threading
set_Padding
Encoding
IsLogging
Ceiling
Get_IsAggressiveInlining
NEnableMonitoring
FromBase64String
_exceptionMethodString
OutputDebugString
ToString
GetString
m_isDebug
gddfdhsfdgh
hddfhh
ComputeHash
get_ExecutablePath
GetTempPath
ObfuscatedByGoliath
AsyncCallback
callback
SearchStack
_optionsStack
GetMarshalType_NoLock
LinearSearch_NoLock
GetClassLayout_NoLock
AddResourceFileNoLock
TransformFinalBlock
Get_Task
Marshal
HashFinal
_principal
AddSentinel
Set_IsInternalCall
kernel32.dll
CombineImpl
LastGroupToStringImpl
Get_EndOfStream
HeapStream
BinaryReaderStream
Get_StringsStream
ReadParam
get_Item
System
Subsystem
SymmetricAlgorithm
HashAlgorithm
LoadFrom
ICryptoTransform
amdFFmaiAn
BuiltIn
Conv_Ovf_I1_Un
RootHidden
get_MetadataToken
GetParentToken
AppDomain
get_CurrentDomain
FailgdasddghdshsdhBegin
FailgsdasddghdshsdhBegin
Precision
GetMethodVersion
GetImageRuntimeVersion
RedirectVersion
Application
System.Net.NetworkInformation
NineRays.Obfuscator.Evaluation
Fraction
System.Reflection
IsGenericMethodDefinition
CallingConvention
IOException
RuntimeWrappedException
SerializationException
MissingMemberException
GetDynamicILInfo
LocalSignatureFieldInfo
MethodInfo
DateTimeInfo
M_accountingInfo
startupInfo
MemberInfo
ParameterInfo
ConsoleKeyInfo
AwayFromZero
TypeMDTokenMap
sdgfssfhahfdp
sddfsddghafp
UriSchemeHttp
System.Linq
ToFourDigitYear
IsLegalDNSChar
IsNetbiosSplChar
MD5CryptoServiceProvider
TripleDESCryptoServiceProvider
MethodBuilder
ModuleBuilder
TypeBuilder
AssemblyBuilder
CreateFallbackBuffer
ResourceManager
Debugger
VBByValStrMarshaler
Get_DefaultScheduler
DeleteAppDomainTimer
MutexTryCodeHelper
InterfaceImplUser
IsGenericParameter
FormatWithParameter
ReturnParameter
StreamWriter
get_IsPointer
BitConverter
GetTokenFor
WinIOError
InternalError
Get_AMDesignator
Set_PercentGroupSeparator
M_directorySeparator
MatchEnumerator
GetEnumerator
.cctor
dotNetProtector
get_IsConstructor
CreateDecryptor
IntPtr
System.Diagnostics
GetMethods
GetAllNetworkInterfaces
Set_Namespaces
System.Runtime.InteropServices
System.Runtime.CompilerServices
System.Resources
Set_Resources
amdFFmaiAn.resources
_Policies
ShareBodies
InitializeUserTypes
EmptyTypes
Get_Captures
MethodAttributes
TypeAttributes
MethodImplAttributes
AddCustomAttributes
GetCustomAttributes
VerifyReadAllBytes
WriteAllBytes
_numBytes
GetBytes
S_pDigitValues
PercentGroupSizes
BindingFlags
GetMethodImplementationFlags
SetImplementationFlags
fhddsdhfddfhhs
UpdateLocals
Equals
System.Windows.Forms
AssemblyExtensions
ChunksAddedToSections
CallingConventions
get_AllLongDatePatterns
get_Chars
GetOptionalCustomModifiers
GetParameters
get_IsClass
CustomFormatClass
AssemblyBuilderAccess
Suczdvssvdsasdcess
Suczdvsvdsasdcess
GetCurrentProcess
Sucdssdhsdhshgdhdhdfhdsdhshsdhscess
Sucsdssdhsdhshgdhdhdfhdsdhshsdhscess
Digits
CompareArrays
InitializeKeys
Concat
ParenthesisFormat
ManagementBaseObject
GetObject
ManagementObject
object
Select
System.Net
CreateSkipVerificationSet
CharSet
NGetDReleaseTarget
UseOrigUncdStrOffset
op_Explicit
System.Reflection.Emit
IAsyncResult
result
PopInt
IsCompliant
System.Management
M_currArrayFragment
Environment
DbiDocument
IComponent
get_Current
SkipWhiteSpaceCurrent
CheckRemoteDebuggerPresent
IsDebuggerPresent
GetRoot
ParameterizedThreadStart
Convert
FailFast
WebRequest
ModuleRidList
RandomRidList
MoveNext
System.Text
DefaultModuleContext
ExecutionContext
RawExportedTypeRow
ResolveFieldDefThrow
FindReflectionThrow
Get_IidParamIndex
ToArray
get_IsArray
set_Key
Get_StrongNamePublicKey
ReadKey
IsCompatibleKey
StrongNameKey
NestedQuantify
System.Security.Cryptography
get_Assembly
DefineDynamicAssembly
RuntimeAssembly
Get_DefinitionAssembly
<>3__assembly
DeclaredOnly
BlockCopy
AssignPrimary
ZeroMemory
Directory
MaxCapacity
op_Equality
System.Security
SuppressUnmanagedCodeSecurity
IsNullOrEmpty
ResolveProperty
198 Protector V2
System.Security.Permissions.SecurityPermissionAttribute, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
SkipVerification
WrapNonExceptionThrows
_CorExeMain
mscoree.dll
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0"><dependency><dependentAssembly><assemblyIdentity type="win32" name="Microsoft.Windows.Common-Controls" version="6.0.0.0" processorArchitecture="x86" publicKeyToken="6595b64144ccf1df" language="*"></assemblyIdentity></dependentAssembly></dependency><trustInfo xmlns="urn:schemas-microsoft-com:asm.v3"><security><requestedPrivileges><requestedExecutionLevel level="asInvoker" uiAccess="false"></requestedExecutionLevel></requestedPrivileges></security></trustInfo><compatibility xmlns="urn:schemas-microsoft-com:compatibility.v1"><application><supportedOS Id="{e2011457-1546-43c5-a5fe-008deee3d3f0}"></supportedOS><supportedOS Id="{35138b9a-5d96-4fbd-8e2d-a2440225f93a}"></supportedOS><supportedOS Id="{4a2f28e3-53b9-4441-ba9c-d69d4a4a6e38}"></supportedOS><supportedOS Id="{1f676c76-80e1-4239-95bb-83d0f6d0da78}"></supportedOS></application></compatibility></assembly>
amdFFmaiAn
GetEnvironmentVariable
_ENABLE_PROFILING
_PROFILER
-2055445366
2055291348
-764329416
764353363
1364915276
1364868329
-1798527705
1798398769
2122649323
2122697736
-471280769
471279343
2062211462
2062218848
-1134892707
1134836760
387487931
387469811
10532798
10525191
17644282
17691212
-506389392
506375066
1186021455
1185954843
1703746855
1703757440
1444875900
1444876997
1337633946
1337707882
-906358453
906259600
2141084520
2141141861
1955547119
1955570247
-1741274506
1741161489
2054691994
2054706262
1572338468
1572283216
-273680517
273762193
470990669
471048611
511863631
511889765
510091724
510020844
-1511552948
1511561827
-272848459
272847102
-534996900
534980958
-872414098
872344735
-233165110
233069286
-715557136
715392738
-326123479
326149251
909234651
909203178
-1357733339
1357746063
-1714815619
1714879217
-1187585737
1187753291
817374712
817435696
1408986879
1409016762
-1405332651
1405210590
-947092131
947121230
640060582
640141725
-921066842
921066777
-1756677216
1756794226
-618325844
618292165
-2114187679
2114156985
1661968269
1661947589
-1138258726
1138313795
944390825
944423318
1998079991
1998073305
1882680454
1882652909
-1248953117
1249085410
-1523335563
1523378158
-223839195
223754072
-1899698867
1899650554
944831010
944880852
-2105982527
2105994996
-759700276
759766487
-521386904
521358669
724452286
724519293
-1467464336
1467414995
1442039534
1441979108
1303300719
1303357902
-871858073
871874132
1941539016
1941548032
-83953686
84014174
680881933
680898817
82232874
82309497
982928774
982934472
2140661109
2140663719
1857582345
1857593075
654080441
654110545
-2094511077
2094473662
-1512747004
1512737643
-47053170
47154034
1522443444
1522461019
137208363
137178377
-1905821886
1905877465
517801101
517840446
507471610
507470914
-915282150
915311887
-1067970800
1067812294
-550463496
550450893
-1421897857
1422061687
1469876266
1469953606
792540661
792583028
-1404809661
1404793283
-1677882283
1677869999
1776070490
1776028308
981026331
981050161
1132936483
1132936355
-607377433
607260442
-1495879731
1495893804
1917089508
1917061491
-1318046527
1317999832
290557510
290585003
-768267695
768126979
-2053440908
2053479757
-931517768
931483965
-103406826
103397616
269493611
269538573
-64341450
64484289
1400320728
1400345237
-1251264492
1251341877
1727235352
1727182172
1033336262
1033362381
-1124436626
1124449487
1177958822
1178004505
-1862254890
1862129026
854661655
854711547
1574041990
1573999673
420804067
420786334
1159885659
1159890995
-1860643736
1860617245
705546779
705471941
-1467493856
1467591493
113558852
113509964
984846444
984811917
-240956471
240913587
-2089626385
2089634495
-220957551
220880602
1156876565
1156873845
635423261
635370255
-506076646
506073732
810238029
810158298
-1688208052
1688305285
-310439373
310420171
-841208620
841177647
-2070041094
2070107301
2062708266
2062765645
-1786502564
1786438059
688447748
688390147
-1512521558
1512412982
151006714
151021800
1475663109
1475708812
-1030485831
1030408862
996445026
996462822
473650782
473682879
-481974022
482003990
-1634436672
1634458603
855035960
855110658
582081669
582025037
-279505540
279510375
1440856928
1440850544
1737076340
1737013151
336504807
336510053
-357123624
357153770
-848547955
848515257
-1571318108
1571485053
788148225
788161831
1574118647
1574137509
1794595462
1794529884
-82515770
82548261
762119861
762169703
-12157341
12163913
-1567376056
1567498515
135251870
135255745
697812944
697744654
-392336852
392195302
-929779389
929754968
-890473327
890432882
2042341154
2042293642
-372294496
372363233
-217295683
217216658
-1891626551
1891591261
-435731081
435798050
-1502306903
1502300818
296601571
296580613
-1937454061
1937498760
1451823314
1451761957
-1276622792
1276445175
-981259928
981297181
430323189
430376872
1966537148
1966487020
-709025214
709078763
-2019329596
2019393745
-1506952057
1507057234
125717453
125759878
-173441076
173452911
1828365971
1828357439
-1408435873
1408338816
-1742514993
1742575527
-956488090
956453370
71721044
71783583
-1566385856
1566370324
-257020324
256922786
739949325
739925419
1744540484
1744521891
-1978192272
1978174769
4202621
4279284
-1297904930
1298030676
-751034835
751027868
-1690011794
1690030489
-1547792381
1547821532
608211777
608294106
1862087701
1862139536
-1930078303
1930145082
-2017381934
2017419858
1751997965
1751977997
1893015946
1892953720
-2096048057
2096087446
1706503309
1706503892
895428796
895384143
1432044591
1432092152
-1075452613
1075568001
666608742
666621142
-1772461235
1772554446
934134212
934106300
542122612
542125996
56005937
56013910
-158974907
158906818
1814486017
1814482348
-811258334
811284600
262324105
262283948
-365519076
365533462
267336570
267353020
-1369814313
1369947787
1472904785
1472983111
967922814
967905195
-1723502965
1723493154
-1483201790
1483181866
744299245
744348512
-1926438995
1926471432
-1504269706
1504392028
-1575773108
1575794102
1094823372
1094803301
-1802304652
1802327602
1700792473
1700875766
894336377
894315297
163136567
163123253
1911729544
1911704240
-111445922
111596009
869264442
869186940
-1242689834
1242641067
-107804603
107822083
-729772539
729803958
1422571650
1422582658
714499625
714560959
1329043522
1329068592
-1416098195
1416080139
-1797840641
1797951739
-398413124
398434853
-1374645514
1374650122
-552547583
552427302
244147886
244170810
1756269770
1756268088
-1027127528
1027207950
-960864472
960887435
1058633712
1058639795
2050314556
2050323288
1245708079
1245658653
1089549688
1089597003
-598673147
598619790
2033439379
2033364267
1214908016
1214946094
191982009
191896733
-2024621715
2024570812
1664304815
1664250594
-2126736645
2126613210
1774826690
1774755704
-1613301814
1613353733
1283418378
1283405907
-314173545
314140138
-676231739
676277362
2094438178
2094402481
1956601455
1956585547
-1919227835
1919189820
-226772781
226800047
-54969775
54938612
-1161940052
1161891353
346902667
346895967
1096606386
1096575596
199675716
199671646
1872694697
1872710477
10779179
10763427
-1888283227
1888223663
-144757836
144733813
-1156862529
1156864628
-427548333
427518091
-1505727534
1505685386
534270379
534332697
400049089
400121600
1354637891
1354654029
-1395007937
1394883297
652264084
652233040
1263528114
1263528864
-1226893187
1226946621
934336293
934312611
304324979
304289326
1170516552
1170486739
-2088056626
2087978458
1932053558
1932130719
-2107855820
2107707579
1355816686
1355905710
1907229386
1907246343
-392615126
392618161
-355577435
355547253
2012378286
2012375262
-2075572013
2075596882
-630153706
630082582
2080174629
2080176328
-1937532174
1937586621
1893999111
1894085895
383603419
383644278
370300239
370300333
-1178608800
1178641508
-485321912
485345684
2139680633
2139682083
-1642605814
1642598009
-240851020
240784243
-581188241
581266193
250981666
251001039
-479059180
479160260
-684504493
684539720
962079803
962092594
561770460
561754860
561964279
562005362
470683402
470719263
-1740201793
1740168546
-180078867
180037309
-390369279
390468194
2065591351
2065636922
-91785390
91794912
-222243303
222190980
380116679
380174122
909610904
909569746
-1048028116
1047976479
1475886015
1475932637
-565181112
565111232
319575781
319642957
-278042676
278027778
1989479471
1989502054
-156218436
156147489
-946002003
945844756
1000105742
1000137780
-754055705
754045652
-714888665
714941020
-67880640
67736369
-412000969
412007166
-49826809
49857532
600339913
600345167
948638286
948695489
660100878
660107036
-441409283
441393454
1089281800
1089226349
-933615143
933738861
1590770805
1590780945
-1706866566
1706878764
880036580
880091871
1687456585
1687526617
-558018456
557856986
-1418502271
1418488253
1577010728
1577041923
1718325673
1718288982
510434363
510407835
-1657039191
1657084215
1833557938
1833537145
2116395902
2116343176
-1122946496
1122815517
-1075854765
1075972059
-1111428176
1111408424
-1940941987
1941006266
-892403480
892487346
-1041331591
1041288621
-427169809
427188408
2145831097
2145787585
1725552104
1725503950
-1679778628
1679701331
231659805
231705404
453666509
453696268
402986470
403006510
-2129005926
2129064816
-1186170850
1186050394
-450491544
450419377
732316998
732309582
901967911
901958531
-1467595743
1467742342
1043312625
1043235196
1826210330
1826149518
-1624935877
1624802193
-1072798937
1072744540
939465166
939412134
570987298
571008626
1580182247
1580158143
-1869664915
1869646090
-137457185
137478520
551830014
551891132
211445826
211490120
-187006609
187131427
345317258
345311655
-2025201439
2025199044
-242443421
242480567
288232726
288267730
-380296849
380335019
-1085180013
1085195947
-1358803136
1358770989
378652169
378609604
874502030
874465660
-143759229
143774170
Sum = {0}
MyClass.Name='abc'
MyClass.Name= 'abc'
Enter number 1st.
Enter number 2nd.
Add = {0}
506298469
506318983
amdFFmaiAn
\upnp.exe
amdFFmaiAn.exe
-95657157
95639522
C:\Tefsdddddmp
C:\NeddddddddddddddddddddddwTemp
1627072188
1627092208
Squfof {number} is {squareRoot}
736456702
736368819
91941187
91933452
1154525799
1154582496
#vbcpath#
x5+duwXAfobuRV0JSyuEY5rZz6bmBB9i
x5+duwXAfoY4Xn4h3/fuYJrZz6bmBB9i
DynamicDllInvokeType
YPS1wkBJsOA=
-1945844248
1945807151
-776848277
776860702
-869374829
869351964
-870322606
870413242
-511817490
511728278
-754313069
754251580
1899165443
1899201668
-1105612539
1105596228
-181633871
181543637
1853524584
1853523802
2086254032
2086232414
-2053223939
2053186865
938925733
938874183
-795073079
794938955
1101595104
1101606196
511472100
511521373
-279738393
279800118
-1945728738
1945740491
-1111510933
1111542275
-1377082419
1377084072
809588635
809626454
-1343518340
1343494053
-870324074
870404842
325864229
325902991
-1844945622
1844818059
-1664162038
1664334620
-815305027
815312277
-220624542
220602889
-1338774098
1338865380
944256806
944243547
-1724998843
1724935897
8ZB1NdZj/r9eWR/QQTlccg==
kSkV/GDmt4W9TAthg8qpCy4YHfVsn8Sc
dRCzNeGuhTJq5Q0MslYnhZrZz6bmBB9i
4Y+o5h49MkC0pcDOdGaFAt1DcZtndvcs
UehxepMsmVDIER2jW9L7aA==
+0B5UxUfdd8F5mG1CGWi7RgpFqgFX/3r
fmK8sLA0wlC9TAthg8qpCy4YHfVsn8Sc
I0mrIvberz9q5Q0MslYnhZrZz6bmBB9i
6v63ZbUXSU+32w2FyHw1iw==
6LZpAMAH2NteWR/QQTlccg==
fM/MkGepdfXbFrTf/buUgrp8f6uHfTqC
EDPENLIGHTENEDAPPINFOID
MICROSOFTEDPENLIGHTENEDAPPINFO
VS_VERSION_INFO
StringFileInfo
040904b0
Comments
Microsoft
Windows
CompanyName
Microsoft Corporation
FileVersion
10, 0, 19041, 572 (vb_release_svc_prod1
FileDescription
Windows 10 UPnP
LegalCopyright
Microsoft Corporation. All rights reserved.
ProductName
Microsoft
Windows
ProductVersion
10, 0, 19041, 572 (vb_release_svc_prod1
VarFileInfo
Translation
Antivirus Signature
Bkav W32.AIDetectNet.01
Lionic Trojan.MSIL.Stealer.i!c
Elastic malicious (high confidence)
ClamAV Clean
CMC Clean
CAT-QuickHeal Clean
McAfee GenericRXRU-WN!0DE5FA8A3CF1
Cylance Unsafe
VIPRE Trojan.GenericKD.40034726
Sangfor Suspicious.Win32.Save.a
K7AntiVirus Trojan ( 005819c41 )
BitDefender Trojan.GenericKD.40034726
K7GW Trojan ( 005819c41 )
Cybereason malicious.1b0acc
Baidu Clean
VirIT Clean
Cyren W32/MSIL_Kryptik.HPL.gen!Eldorado
Symantec ML.Attribute.HighConfidence
tehtris Clean
ESET-NOD32 a variant of MSIL/Injector.VRI
APEX Malicious
Paloalto generic.ml
Cynet Malicious (score: 99)
Kaspersky HEUR:Trojan-PSW.MSIL.Stealer.gen
Alibaba TrojanPSW:MSIL/AveMariaRAT.a5f8a723
NANO-Antivirus Trojan.Win32.Stealer.jqidfq
SUPERAntiSpyware Clean
MicroWorld-eScan Trojan.GenericKD.40034726
Rising Trojan.Generic/MSIL@AI.100 (RDM.MSIL:c0YxwEAO4WGLDuDlqrSRpw)
Ad-Aware Trojan.GenericKD.40034726
Sophos Mal/Generic-S
Comodo Clean
F-Secure Clean
DrWeb Trojan.PWS.Maria.3
Zillya Clean
TrendMicro TROJ_GEN.R002C0PGM22
McAfee-GW-Edition GenericRXRU-WN!0DE5FA8A3CF1
Trapmine Clean
FireEye Generic.mg.0de5fa8a3cf1f68a
Emsisoft Trojan.GenericKD.40034726 (B)
Ikarus Trojan.MSIL.Injector
GData MSIL.Trojan-Dropper.Agent.BIX
Jiangmin Clean
Webroot Clean
Avira TR/Injector.yefao
MAX malware (ai score=100)
Antiy-AVL Trojan/Generic.ASMalwS.6EF0
Kingsoft Clean
Gridinsoft Trojan.Win32.Downloader.sa
Arcabit Trojan.Generic.D262E1A6
ViRobot Clean
ZoneAlarm Clean
Microsoft Trojan:MSIL/AveMariaRAT.NYJ!MTB
AhnLab-V3 Trojan/Win.WN.C5212291
Acronis suspicious
ALYac Trojan.GenericKD.40034726
TACHYON Clean
VBA32 Clean
Malwarebytes Backdoor.AveMaria
Panda Trj/Chgt.AD
Zoner Clean
TrendMicro-HouseCall TROJ_GEN.R002C0PGM22
Tencent Msil.Trojan-qqpass.Qqrob.Kgb
Yandex Clean
SentinelOne Static AI - Malicious PE
MaxSecure Trojan.Malware.74396735.susgen
Fortinet MSIL/Injector.VRN!tr
BitDefenderTheta Gen:NN.ZemsilF.34806.xm0@aWeaQwlG
AVG Win32:RATX-gen [Trj]
Avast Win32:RATX-gen [Trj]
CrowdStrike win/malicious_confidence_100% (W)
No IRMA results available.