Static | ZeroBOX

PE Compile Time

2023-03-16 02:51:29

PE Imphash

f34d5f2d4577ed6d9ceec516c1f5a744

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00002000 0x0003d5a4 0x0003d600 5.96377421147
.rsrc 0x00040000 0x000004d0 0x00000600 3.70941527313
.reloc 0x00042000 0x0000000c 0x00000200 0.101910425663

Resources

Name Offset Size Language Sub-language File type
RT_VERSION 0x000400a0 0x00000244 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_MANIFEST 0x000402e4 0x000001ea LANG_NEUTRAL SUBLANG_NEUTRAL XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminators

Imports

Library mscoree.dll:
0x402000 _CorExeMain

!This program cannot be run in DOS mode.
`.rsrc
.reloc
b }}?:a~p
:>2a~p
Xe <(5
dq_a~p
y9o y,)
uCqa~p
Z #3Sna~p
Zf *L
A >V.0a~p
"v'a~p
CAe Sf
c p=zEa~p
+,[a~p
f L%*$a~p
l`a~p
jvoa~p
n$-a~p
Y o1(!a~p
WgUa~p
>c+a~p
t@Ta~p
|VKa~p
b pzJ*a~p
Z?_d
_b`*
 Xn(Y
(ZjX
(/[&`~
6%a @3[}Y u
6%a @3[}Y u
3woLf
7f ]8
%l$qf A
%l$qf
6%a @3[}Y gd
,2)- G
,2)- G
3woLf
Y c?1Ba}D
!< 59i
G.RX l
%l$qf
!< 59i
6%a @3[}Y u
Sa g|.xa}t
+Q>> ?
Nv;a}l
6a pnl#a}r
3woLf
6%a @3[}Y
QZ$a}g
7f ]8
(p)Mj~u
v4.0.30319
#Strings
cipher
AssemblyCompanyAttribute
System.Reflection
mscorlib
System
String
AssemblyTitleAttribute
AssemblyProductAttribute
Boolean
RuntimeCompatibilityAttribute
System.Runtime.CompilerServices
AssemblyCopyrightAttribute
AssemblyDescriptionAttribute
CompilationRelaxationsAttribute
GuidAttribute
System.Runtime.InteropServices
AssemblyFileVersionAttribute
AssemblyTrademarkAttribute
SuppressIldasmAttribute
7eb86e9e-9d5c-4f74-b06e-57ffc4007b9c
cipher.exe
<Module>
ODLKPHMBAAAOEGOGIKDHOGBLOEDCCCGGLEFL
ELLCEFEDFECJMOLOJNEBJJCMDEAHBBOMBLGB
ApplicationBase
Microsoft.VisualBasic.ApplicationServices
Microsoft.VisualBasic
PPHAAHDIJLHOFKDBFNIKLHEPMGMNDMPOMBOI
Computer
Microsoft.VisualBasic.Devices
MNBCOJMJNEAJAEMKOEPADAKCDPHAHABBKAGL
Object
AMEFEAAIFNMDIHNLPHKMCMCEOGIEGHGAEGFG
ONKHOLBLDOBKEEDKPGLNLAGFIICIHJPLPHPB`1
ILOPCOEGNMIIGPOKFJHKPILANCCDBHMPNPEG
JKNPJJGHFIDBNHLBDOPDNGHPLMKLDJGJGKOC
JMCCOOPHNCFNEHPADILOIKGCFNHNAEBKLCAJ
NHEHNEIFANHDCOMMEGMNPCMBHBOGNPPEJEJA
EGBNOJBKAIEOBPBMBFOHPMDFAMAELOHBCLOF
NLLDCPGPMAANEEDCPCMFJENBAPNJILPLCKOB
MulticastDelegate
_Closure$__1
ALALKDNIHLACENMDDPGDFLLPCCJNNFDOEJJJ
JNIMNIILKJNNDJKNIADLOBIDFIFPKOHEFEOL
PDFGEKNLHOLGHCIGMOBKCHBPAEMADGOKIDND
MMBGBGBKIKEHCOFACPFJHIPHPJJPAGJLILLN
JELLGILFBIMBFABGCCCHEAMMMBIDBOGONNPN
VB$AnonymousDelegate_0
<Module>{9ADDD679-BE33-43EF-BFC9-C83067166E40}
EIJLPOPDBENIJGEEILKFFCAMPFBCILNNCNEG
OCPPCANCPMFHOMAMLJAGGMIBOCBKDMOKHJHD
LOAENECHPAANCJFLIJILBMHMBDFLHEGIKADM
LHMFCLLKPJPNLPEMOOMPKGFGGJLDMBDEHOHN
PDDEEHALNEJGNMGIBBPALLHPKOFAGMEDCFLN
PCFIHCIMOICOAKBFCKLCCILMAHLHFJLGBAPC
GMEJKKOHPMNPNBIFFEFKIEADMOJELOAODAAE
Attribute
IPLFMEHFIJKBENLDHCDFLBNPHABCAOEFKHNI`1
DNOGHAJIIDHLCGNODCFPONNPOBNJMFJIJLFE
BGPBKCGPANCEALDHKKHFECHEMONOBHAOHKMJ
KFGIJIAGKJPALKJNKAFIDOEEFGIFNGIKMOPE
CGMAAKKJHGLLGBLFBJAEMNIAFDHCHGPLLIPB
ValueType
PBPOMMINMCOAFNBAEHJGPJGJIIEKHGJAEADI
GHAJGFDABPKFAJNBPEAGKGNFDDEMJLEPOEHI
GBEODLHHJGFILJDKIMFBEILNKDFNGBAPFBOJ
LCLAAEELIOCDPKMDBGMFOOKKNLJCEEPIBOPG
GMGMAEOKDINAHBLNBGPMIODJKLJBMLEGBCHO
NLEIPJEMDMCJJPCAGNAAPFLIFENKNIALEAPM
LIMCOAMADHHJBMHLGAICCKOJCIMJKDJAACPA
CPHNLKIEKMGNNBJFJNMDHJJBNMCGNEHEKEKD
EDPKDAGNFKDFOKCOIDAEEHILDKELIGHHDGCF
LDINEHFNILJHJIMNAMPFDNIENFDLNBJHMJJH
JJNAIKHKCKDDPOIGLAJBAGMGGMHCALFHCLGE
IFBECJEPKGHNOAAEEODINDLFOANKEHKEOBPG
MLOODKFLGMNAFOBIHCCOMPCALEECBKENDNDL
KIPMCJNFFPDFOAKCMOPBHDOFAPMEBDJALNMD
BOMLFHOHKJMCDBMIGCPFMNPFAPNKNDFPDCJM
DMHNEFDBJBCBBJHIKFGKHGMMGEPJMLEECNHK
<PrivateImplementationDetails>{DB98D77A-97CF-435F-893B-D4DF629FEE78}
__StaticArrayInitTypeSize=16
__StaticArrayInitTypeSize=18
__StaticArrayInitTypeSize=30
__StaticArrayInitTypeSize=32
__StaticArrayInitTypeSize=40
__StaticArrayInitTypeSize=64
__StaticArrayInitTypeSize=256
<Module>{f34b66be-a4d2-4dd5-b0b7-2d9921752bdf}
f8DB25433FD649E7
CMOCOAKAPMHPEHECCOBNJEALEFIDPJDHJKEF
m8DB25433FD670EF
TimeSpan
DateTime
Exception
get_Days
.cctor
AENHFKOMDOELCJJKFJCDPBLMPIFDPLMEIOHL
get_Now
op_Subtraction
DHDDMPMBFOFEOFJJDLELKJNIFNHJPJLKDAFM
HMDPOEFDIBJKGAIIKODAJBEOOKPIKBLDDPLL
OAPNLPHACOGJHMMJDDHOOGOADFOAPDPNJDGI
JNHJPECJIDFKOJCDKIMOHALGHDBJGFMMFHGK
EJIGEHBLIJKPPHHDNMECABEJLKPIOICCBOOH
FKKADFBBHJPGHDLPHLBCOKCFMACODPIFKMBB
BOOOGKPNOFMBFLHADIAJLGCAINFKHENEJLFA
DODCBNKABNMEICDGGKFCFJILPHCIDEHMGNKL
ABGKBKMAKGFOCMFGHCIMABPOLODGOOHGMGPO
BPOHHJDOMIPADPNFJKGOMLHMIKKPLKMMEOEC
EEEECLJDFPOPEADFCHNHNBBKCPKEDJEGDEPD
DJHILNMMFMFCHCBEEFPEHJNDOPDCLKPEDJGK
OMKHGPPJIPMJNDJOLKCEHMHJEAGFLCGMKPDJ
LEKMDMGJACGHAGJPMLHOAIELCFFCOJDBDELC
BFIDFFMDNIAHCEAGCGIJDOJCJJDEKDKMFNDE
Equals
GetHashCode
IOONANPGCEFECFHOBOOFJAJFNBFLINFHPLEC
ToString
MFCGGDDNAOFMJGEBCHHGEMGLCDJHECPEJIJK
EMMOKJIALCDEJMEOGHNAEBCAAAKCAIBHHENP
DGLBIDPBJGPBNCPBELEKHLMMKHLLJEBEHBJP
Activator
CreateInstance
MANOPFDPCPIAFIBAPDLCIKJNICGIBIOMKAPD
RuntimeHelpers
GetObjectValue
RuntimeTypeHandle
GetTypeFromHandle
FECPMMMHHAEDLHMMJDHBJMPFJOEANCEJCCPJ
MJOJHMKKNAMCIOJLJGOOOBEJGKHMMDOGAMHN
JEIDAONDBMJPGHKBOJEEKCPIPLPNPJKHPGLC
EFIJIDNBOLNHDFNCHNDFPANHEADFHMKCBFCI
OBADBFLGAFEFJOEMJPMLBLOLPILHHDJAOPOH
GOPIAMIEFMIBKEGLFJHJBFBLHGEBBMNJFGOP
PMPKDFFNHLCCNBAPCIPHEDGKIEADOCOIKMCA
EKKGFMGMEDMAPIOPMOAPAMDKPFFKDLBFAHAI
EDFGALNJGCKIDOCCCOIFIIMPBAPKDPOOPNMH
CGDMMOJKHFGLNODDFACNHJMEOCGLLEENEPLK
DIMOEDKANNMANNMAOPKGIGGJMEJAFLMALFHF
KICDCEGOLKNHDBNNBFNMLOHMLEAMKGBLDJKC
PHJKJCMCAMLLLDBLLHOOBFLDBLFFDHINMDGN
BBPDDOBOLPBGHEBBAGGMGPCBKNOFPMAPGFAF
NGMJPPOIADHEOGNGPPBHNOOKNLMMFNNFJPMK
BLOAKAFJOFAJFGFNGNEFNFDHAEOKKBCBKHBL
KPLEIDGLEEJMJHCACEEAPDONMIIFNMKPCIAD
FMOIEADJHEFKMMGJKAPGFLJHLDNDGIDFBGEG
NGOLMGFLADDBENPMFFDGFGEIBFLMCIFDOMIJ
GFCLNPPMOMCEOFMCCGOHOMCDAILGMGCHCPHK
GPDNHNAKLPJPBCDHBEMEMAKNMLKLMHKEIADF
GNAPCCMPOHCHDIIIDLLOADMGCCAOLIEKNFLF
BEOOJICOALEMDFHCONEHCHENIAFBOKHBAPCN
IKNPODLNAAPLMLJLHPDEEDFHNFEJHMPJDGCP
GFLOAHAHFDOCBDOOJGJPLGJAIINDNMDAMMOA
NOIECANCPKKCOANPJLMAEKPHJOCILFPHNPAN
JNOLCDPPOAJONDEIFINIHDIIPOAGGJJEFABF
INJCHFHBMKGHBFHHNGCPCLOBFLPJCHKGMFPB
NJKCFBFFKDMBFJLDJIJCHEJCAKHFICPAEKOJ
LKPILBMNBGNIJFDFPGMBMBLBDNLPAALCGEOM
PHCNGCBOCPBADAKNAFMCDMOOCOBFJBIGOLPE
PJJKBPPPCFAAKKCFFOCAGNPGDEILJKJDILML
CGIBOHGPMDEHOHOLLOCEEHIIEKACICCIBEIE
PIKBJBOHNJAMINEOBMAKADLDOILGNBHENHHD
PFOPAONLLFFMMODOOGBMDPIFNOGMNAIHNPIG
ADBLEEEJOEFACDNPHCDMDJAFHPICNNBGFIGL
IMGPNJJEOICBBJJLLGICGPEIBMLHHILDIOEL
POHOPOCAAJNOBDAIKLOJINODADOPIAMOHNLF
NPONBIHKMCAKGOIMOMIGPGOJHGMHCFMJLOEC
FPMOBJNOHGHDJNLOBDBNEIIPEGGNOOCMPCKN
NMGJLNKCIAPEGMFDPALOCLGFHKMCLAPNDBFK
LMNHEJLGHGMMIBDEOKGDEGOOOHIPLDIOGDIF
MENLFGOKKLGDJGNBHLHHJHIAHIBHDFNOHKDG
ABENBOHEJLPCEHLCJCLFOFMLLCPJFGPDDDKK
IBHIOANOHPGEOAJLEGLANODLLODFFIKEPAFN
CBOCKHGKHNKJGFLGCKMIIGBLDFOEHCANLMLC
NDMBFKEFEINNALAPFGAOFLKLFNEBCCCGHPEF
CKBHAOBCFDIAAODDJLPHBFCAAKPBAJAPHPLG
HKMMCBOMJAFDLPJHGMDHCBOFPFBICMALBMPK
ELLEJJMIGHBJHBIFCJKKFFMAMCAMICFDJDOC
CMIENGIHAIKNPHOODBIDIFLNKGKMOMJFPJOO
JFNBJIHLGPONEBDIOMNOGLJJIJMNHLGHAGAG
GCJELKFHFPHEKLDIMOHKEKDPNHNJBLILIJBO
PMKNGCJOEMGICDAALGBMAMNAGMLMBCEHJEIB
IOEIGLNPCELFMONNGIEPOOHOKGPELDPJGMJC
JEBLHBKHAABFCCCANJHBHHFIBFGDDIEBKPGF
NNPIGJMBPCHIDFHFJEACEEIPAPKJEOHLKHJA
KIHDPMKCIIAMBAIDAFPOPPCBBPLHAECKCAHN
OLGELJPKIGNGLNMKPHLMCANLMBHDPBFMADFM
IBDHOEGOFBBGGBACLDNHAGNMNIIICJDBIMEE
JJCGLLOKPFMNJCNAFMOHHNBHDLJAKMJPMIPP
BPBFMDBDADMAKLFINJJCEAPIMEJJJPJFMPIK
HMAJGCDLCEHAFLFLHBIJJGDPEIGBCIFEBLFO
INDIOKCJLBJBENNBPFEIEILJLDIHDNCGMBAL
IHIGPLMCMKIGNEJJGKNEMHDJOJEOKKHDFMMB
NBLIFPLMJBIBPLAJMOHHAGHGHBOLKFEOPOIN
AFDKMMJDEMAGPFENANKBGMJJBNKECMLMNCJA
KHJHKPGJMCNMKBDHNEKDCKGHPDEFMGCNHPLE
CIFBCLIMHAEHOJKFDCDANNMEBJDNHDJOJHPO
OBEEHLNLDMKDJEGEHCOBIMEJKPPIGJKNHKHI
LBJGJCLAGDPKMHNDHDIHJPKOMDHCDKCGNFKO
KPEGJHOLLDBJMIMIKDENNLODONLOHMGCAFDE
GDLDEGBMLJJFAGDHCGEILMKDPKCLDPHNAFAF
Process
System.Diagnostics
GetCurrentProcess
get_MainModule
ProcessModule
get_FileName
WebClient
System.Net
Thread
System.Threading
Environment
ThreadStart
IntPtr
ServicePointManager
set_Expect100Continue
set_DefaultConnectionLimit
set_SecurityProtocol
SecurityProtocolType
ProjectData
Microsoft.VisualBasic.CompilerServices
SetProjectError
ClearProjectError
get_NewLine
ServerComputer
get_Info
ComputerInfo
get_OSFullName
DownloadString
Replace
get_UserName
Concat
IDisposable
Dispose
Interaction
Environ
System.IO
GetFileName
get_Registry
RegistryProxy
Microsoft.VisualBasic.MyServices
get_CurrentUser
RegistryKey
Microsoft.Win32
OpenSubKey
GetFileNameWithoutExtension
SetValue
BLKOOCHHCEEHNDECABOAEGGNMPKGHCCMLCKP
WindowsPrincipal
System.Security.Principal
WindowsIdentity
_Lambda$__1
_Lambda$__2
Random
GetCurrent
WindowsBuiltInRole
IsInRole
WaitHandle
WaitOne
MMLLAGJAJBIBMLNILGCPCLIALECDOOGAFKFN
GPAKMIMBIHMONLIDFKJLKDHDGADLNKDPODEG
ABKADFEHLFJBDCFKKHOLGBEKMMPDMNKLCPCI
PIAPNHNBGJPKMJPDAPABJDEFJKEPOIGDAFEL
BCIADNBCPBBDDLIBCFCENPJEPLELMMOGIEBG
IJMBEPEIONKDGLPPODIFKCBNHJCAKAKCDGII
MIKAGCKJMDDGELLFPDHLAENOEHNJNFEJBDPH
OHNIKFICHENDFKLNMPPFKDOCBAFDGCLGHPAB
IBEANNMFNNOMDABLCABFGIOJAKHEACBBBLPD
ManualResetEvent
HEMNKCDBKLGEFFODOOEBNFGLDACDAOMJJOGP
TimerCallback
Socket
System.Net.Sockets
AddressFamily
SocketType
ProtocolType
AsyncCallback
MemoryStream
OMCBKOPAODCLNPKPNGHBDIHPNKIGFOLBADCE
EBJBDMNAHJHGOOGIHJKJPJHFMMCAGJDOJNAN
EndReceive
IAsyncResult
WaitCallback
ToArray
ThreadPool
QueueUserWorkItem
BeginReceive
SocketFlags
get_Length
Stream
ALLGFOEMNHMGFOMAAIEONFCMIEPHMBIOEGAD
HFIBODNCBMJHBHIMEDJIIAAHBCEMCPJOFABC
Monitor
SelectMode
ONKDEGAGDNFEBKHEONNJMKGOGPCPFHGPCLGC
CGPNPGGMGDMOEEKJCJMIMNNOMFKAAJKGNCOA
CABHALEMBBLGLBEJGAOMNEDLNCGBBIADJFIE
_Lambda$__3
_Lambda$__4
set_ReceiveBufferSize
set_SendBufferSize
Conversions
ToInteger
Connect
EventWaitHandle
get_MachineName
ToLong
WriteByte
ObjectFlowControl
CheckForSyncLockOnValueType
BeginSend
EndSend
Collect
NNHHOFMOMHAIGBIOFJLJLOFBMLMADJKIBEOA
ONADKDKBEDHPPIOCOFPLJGLOJMLDEOLCAAJM
NKCLKBNHEMAIJANFNHNBOGDOMGMDLLDEKCML
FMMHKJPFPPJPGOJCFIADCDEICGFHAMIFMNON
KIPJBCEPEHDHLGLGLHHIIHGHPHLCDELEGAFP
DKCCEGBENKONKBKJFKFAJCMKFMBLCMNJEKEN
BKOKBIPNEHGBHNBPIGIHACPJACNHFJHFHPEH
EBDEIDPJEKAGPHNPNICLAMIAIDEOICICOCLM
CGJOIOMNJPGCFHDKOPECLDDDJLBCOLECGMMO
ANNGJCPANDDJFHMIIPDPGOFOOOLFKKCBKEJN
ADGIECBGLJLJEEJLPCMIKJJJEJBLPHONGPMP
CBPGAFEMCGJOKEMGMHHAMGNPKDLDBIPAPDDJ
DataReceivedEventHandler
DGMMPKKLJHHINMFOCIJLPDPIGBOFHNFIOMOC
GCNAOCPKPHGJGIMAKMGGBIHKJNLKCDELJPLM
DataReceivedEventArgs
get_Data
EFMKOFIIEGLFDIIBDFJKIJHHIEENOIDJABEK
FONFIMDFOFMCAMMMKLOGCGEKGOEGALGKGNIB
StreamWriter
FileAttribute
Rectangle
System.Drawing
ProcessStartInfo
IEnumerator
System.Collections
Bitmap
ChangeType
Operators
CompareString
NewLateBinding
LateCall
GetProcessById
get_Size
ConcatenateObject
get_StandardInput
FileSystemProxy
RenameDirectory
AddObject
GetProcesses
GetThumbnailImageAbort
GetThumbnailImage
ImageFormat
System.Drawing.Imaging
get_FileSystem
Cursor
System.Windows.Forms
set_Position
LateGet
CopyDirectory
AppWinStyle
MoveDirectory
IEnumerable
get_Current
CreateDirectory
Screen
get_Bounds
get_Audio
Delete
Shutdown
SocketShutdown
get_PrimaryScreen
Exists
set_Arguments
get_StartInfo
set_RedirectStandardError
set_UseShellExecute
set_RedirectStandardInput
UIntPtr
NJDODNJKNJFDADCPPLPGGLIPEMHOCCAKKLEE
mouse_event
user32
CGFKEKHIMLENNNGEHBBGMDPPKNNOMMFIACBP
UInt32
keybd_event
user32.dll
NKCNMCJDGMAFEOGPEJOMMMBOEDLHEGKJACCB
capCreateCaptureWindowA
avicap32.dll
HANPAPAKPNLPPOBHMINAGNMEHHPOMGMODOEJ
capGetDriverDescriptionA
ANIONCNGAPMCMBLBGFCIONDHKMHMGMFKPAPI
LDBJJJIPMIIMAKLEBIDKHJGEFHFFAPAHDBDC
DirectoryInfo
GetDirectories
KOMEPOABOMGMEHCPIJKDCMMKPBAOELGHALEI
FileInfo
IGIFBAINGNKBGCBEIDKJKBFBOHPLEDDDBIKB
DriveInfo
IEnumerator`1
System.Collections.Generic
DriveType
get_Drives
ReadOnlyCollection`1
System.Collections.ObjectModel
GetEnumerator
get_Name
MoveNext
ABJHCFNEJAOGAFLFHOCNJEFLKJAOKLMCGJFL
_Lambda$__5
_Lambda$__6
remove_OutputDataReceived
remove_ErrorDataReceived
add_OutputDataReceived
add_ErrorDataReceived
CompareMethod
Strings
Application
Restart
Convert
ToBoolean
ToByte
GetTempFileName
DownloadFile
CreateObject
LateSet
ToInt32
set_FileName
set_RedirectStandardOutput
set_CreateNoWindow
WaitForExit
get_Id
BeginErrorReadLine
BeginOutputReadLine
get_StartTime
TextWriter
WriteLine
get_ProcessName
GetExtension
Directory
RenameFile
ReadAllText
get_Png
FileSystem
SetAttr
Create
FileStream
ReadAllBytes
ToBase64String
WriteAllBytes
GetTempPath
Registry
GetValue
get_Network
Network
DialogResult
MessageBox
UploadFile
GetFiles
get_DriveType
BeginInvoke
DelegateCallback
DelegateAsyncState
EndInvoke
DelegateAsyncResult
Invoke
$VB$Local_A
_Lambda$__7
JKDKFFMOBPPANOAMNAMOJAFBOPIIBPPBEKCI
LFAFDMCKCOPGEFILFNOAMMGLAAEEAIDOPGML
DIKIGLNMECFFJMNDMNHMOGKFHOIMFCNFGNMM
LBAGGBBFKJLEMIDJPCJHJKONCNPHPAGNPOHH
FBEIDNAEHJNDJPKJPHFPOBFPMAFOLCCDAEHE
OPJPFGFPGPDOHJKDMFFOOABCPFENBMIGIJAB
Encoding
System.Text
GetBytes
LGOEHECKLEEEJNJKDAKLJHMMPDFNDEMINIFM
LMEGJLFPPKEFMEDJODDAKDENCJHDMOIGCDNI
get_OSVersion
OperatingSystem
LIPOFLODPGFGIMFNNDOHMAFGFFFIIJIFLCPH
KMFLMBABGPGKCEGLNOLNOOPODFBKDOKLEBFA
MD5CryptoServiceProvider
System.Security.Cryptography
StringBuilder
Substring
DCCACLHFGIBFEJLLKKIKMMONKCHINDMMMFHD
FromBase64String
KGFONIJCIMCNMBJEMADPPEOHPMIMJANEIEGE
ELECLGJFPGKGFIFAKFGFONNJJBDOLMLNOLCP
Module
get_FullName
Assembly
GetModules
BCFDLCNDENGEODDOJLMGNMAMGJMIEDKMNFGF
RijndaelManaged
ICryptoTransform
PMEBHLMLLBJGPCKGPNPHOHMFHGKCBDJJCMGM
NDCLMFJJICIKLJJOLOLNNIALHHKFFNBCHEJB
MOGJENKDCLPLHFFOFCHOMIGPFEEAKFDIBDPO
MLBLGLGDCAIFHBECLDIHCPIIBNFFNKCPIJJE
EMFMGHGIEDLMLODGFFEALJBOAPMLJPFLAIFJ
IPAddress
IPHostEntry
GetHostName
GetHostEntry
DDPJFADIFPOMIIBJNDNPCPHPAFEKNBIIGHAC
NCLALOMMIMNAHFFICPJDADFIFJPMGBLMHMJG
Double
UInt64
LNHFEALICEDFMLONBEMJIAJIIIDCMINODENJ
LocalMachine
Contains
ManagementObject
System.Management
ManagementBaseObject
get_Item
EOAFIGFPOBCABGGOAPKHDHDGEAOLKPDFHBGG
ManagementObjectSearcher
ManagementObjectEnumerator
ManagementObjectCollection
MKPIKMNOGDMGPJAKEADPIPJHEMGOCMDBBMOO
AKNBINNIOBFAELLPFGDCGFOGCPKLHLGNACMM
DCFGNGCJNLIDPHDPANFPLCDHEJHFDAPDPEMO
HKMODDJFCMHNINGHKEKAMBICNFABEAIPBIPF
_Lambda$__8
get_UTF8
get_Default
GetString
get_ProcessorCount
get_SystemDirectory
GetPathRoot
get_TotalSize
get_ASCII
HashAlgorithm
ComputeHash
Append
ToUpper
GetTypes
EndsWith
get_Assembly
SymmetricAlgorithm
set_Key
CipherMode
set_Mode
CreateEncryptor
TransformFinalBlock
CreateDecryptor
FileSystemInfo
get_LastWriteTime
get_AddressList
get_AddressFamily
get_TotalPhysicalMemory
Conversion
Remove
get_DnsSafeHost
LOCCHPEAJDLCNFHGFLFEHAKMPFCMFFLCEGIH
SystemParametersInfoA
FLPGCCNPMLCOFMGIDJMLGHLPCIINGPOIAGLN
BitBlt
gdi32.dll
AONHMPLGHDONLBEKANBPPPIBOLFBEEJNFMIC
ImageCodecInfo
EncoderParameters
Graphics
EncoderParameter
ReleaseHdc
Cursors
get_Width
get_Height
Encoder
Quality
op_Inequality
get_Param
FromHwnd
LBMGHAKHEPKNHFJKJJIPJAOKPFMCPLGIDJLP
GetImageEncoders
FromImage
GetHdc
get_Position
get_MimeType
JLGJLICPFNEMHJAGCBNFKCNCLBFANHNHFCGJ
BJABIEBOIJMAKDFLALDKEEHHIDKFAEBAEAGH
LLIBMGAONGMHBLHLFMGEBFPHNGCDHJEGFNCB
GJIKGLDPEOCBKNHNHNCHEDKLBKKEPNIKDJGN
FNGHJNDBBMAEEDBNBFBDFNEDEEOLMPEGBADF
NameValueCollection
System.Collections.Specialized
DADMADJCGMEDCJBFMHIDCMKPHEBDNAAGJBPO
KNBNOADDBIKHODKPDICLDFLDOOMJBOFIJGOE
GBMILCADKJNGNEBOGOHOMMGMNBINDFBHOAHA
GAMNGJNAAOBHOOFFPEEAANNFPJDPDMGOLPOM
IHJGBCALNJDEBKMPLGLHIEGAMBGOFNOCMMPF
FJHLCDCLIKFIKKFPFCIMCFJCDEOIGLJPJKOE
BEHINGIJCLGAJDMGMNICFNPOJDOMBDFNKPHH
GOGCKGIFMIPFGBJDMMMILKDOPCDNFGDFGCLN
IDisposable_Dispose
UploadValues
Component
System.ComponentModel
KACAHDJBOHAKNGIDJKPMGGGOCJKOPMNHCFBF
GetProcAddress
kernel32
OHDDCMBPMJOHPLOAEIFNPIDLCPLBLEDGOHGC
LoadLibrary
CEABKIFOBKGEHPIGNNNAPGJKJHPICJIMDBPN
VirtualProtect
BDHDOHJJBMDKGJNFGDENFCAHACGMNBNGOFBO
RtlMoveMemory
Kernel32.dll
EOCIPMDPAKHJFEBFMFBBKHHENKLMHLFPAPEG
Nullable`1
Marshal
op_Equality
op_Explicit
AllocHGlobal
TargetObject
TargetMethod
BPAJPLNMGHOJGKFDPNGJKIOPCMOAHJBPEDBH
LANMDCLOOBDMPFGPDPEDCEPNHBILJHMGKDGC
typemdt
FieldInfo
MethodInfo
GetFields
ResolveType
MemberInfo
get_MetadataToken
ResolveMethod
MethodBase
Delegate
CreateDelegate
get_ManifestModule
callback
object
result
PCHECHKJPBEPINKCNDKOCPIIJIHIEEIEGNEI
MMJGNMDKGKJGEOFMNGFCHGOFHDHPOCEICDGK
FAKGFOMOLNJCKNBNLJAHIOFGENIOFKCLMCIA
GNKBMELPKGDHDKPKGPBHHDKAHEPFPHPHIHLJ
DGDFOMOPMMKBPBLEDIHGNHHOADOMLEJDBIAF
NDELJCAMDDBCAFFFMLINKGHOHEIBBFLKDPGI
DAECOBPKNPGFOPIDJFFJGEKDJCHOGJMMPLAK
List`1
IOELCNDKHOEMGPHLBEMCMLPGKEHEHPKDDCGN
Dictionary`2
NLGBMKMNEBAKFLPJGNHPBNPIPMBAJJHMDDMA
IAKEMMMBBEOOEFFFNEIHIGHMJBKEKFBDFCIA
ABKGOEMHLEOMPLAGMGEKKEPOMCCKCBIDHLDI
MDGECOCJKLEHAJIOOICDGFNPJBGBHPLFAMMG
JKIELAOJNLPBALGEEFEHBFAIEMMOJPBBGFBM
NAFJJHKBKEKDILIMOCENNMGILNAJGIKMBINM
EEHICDHNCPPAFLHJBOKPPDOAAKEOGJDOLMHG
NJPBLMCGFFFNMAFPKEOMEBMHMEEMAEDDNAEP
KCAEENMKBGGDDINECGAGPBCEMHGJDAMPLKEB
CKMLBNBKDGKOFGPEIAMFHDBABGNCLHCFANOM
FPFLOPKGAOKMPEFCHJBBBCAEIOLODLNDDONH
PJJCNJMOKEICJGLDDANHOLECJKANEDMPPCPN
NHOKBKJDJNJKPKNEIKFJANKGHBEKLDMPBNEJ
ADMGJEJEOOKGKFCHIFNEJBHHOICCECDMENCH
IACCDHOOJBJEINNFMJLJAONEAOPPLBNNCCMB
CHCJDDHMEBAJFJIJLHLDHLIHCNLNPBOLIBNC
BPJOOKKDELAELBNPODJLLHLEIEDEMPEOMKCH
DNEFABFNHIFPAAGPGCGJHNMIDHMOEKBAKICL
MLLCKJELEOFPBINPFAGIENEPLMGPMLFKGFGM
MOIHCFHOBLPIMAAHIOECDGGCGLLMJOFFHEKE
BNEDIIDHGCDGNCHNOJIDJIECGCDKGLLDNMHB
NLPNGJJLGLNFLAFKJJGMNHIFKFJNOMMPJELC
GEPOCIDICEPFFAOFHMJHKANDKJKGHFCHDCDH
JNENLBINMJOOHNJEBDJBGKADIJANKCOBOJKF
NDBKHCICCODNJGLLGOBIKDAIFBIIADBONFDH
OKNKMJGAONOKPPDKOKJOMFCHKOJFAFMEANEI
CDFDDJHKOPLCCJPEKPFHIHCJHBFENMLMKGFC
NMAHBFEKDPJGEHOKMJHPMOIGPMCPKHNFIAPD
OHHKPNCLJGKCILGLBLFLJEMKBEHEHPLPGOKO
MLJNFLPCLHLENFKBABAFKAOCPEMBNJANPKLB
FFPABMNPEAJMJHJOIHLOHHONCOCKIPLEPOKL
OAFDDOJPAJMHBCMAPDJHOKLAEEPECKDBEPCO
InitializeArray
RuntimeFieldHandle
SortedList
Hashtable
RSACryptoServiceProvider
set_UseMachineKeyStore
EFIKODHEHEDNODJAEIHIFMCOMHIFJEKMIHKI
BMGKMJJNPMCFCPMMKOPINOCABEINPLNGNOIA
BitConverter
BAFOMOCGABAHLJCHALHJICIACIDOHAFLJHDI
UInt16
AEDGJFILLKLJMHCJLCLIAMJMDHADOEOIEPMC
OGABLCPBJHJADPAMNLOBANCADAKOLJDFNOIJ
EJADGMJBMKDFPFBIIAONKEMNCGFGBGJHMOML
DALOBLFFLMCMCPJDMDKEOJHEPHBLPKKIGHEM
BEHMFHCPMEDCGKJKDICFBIGIHFNIANFELEGH
DGOAGGDFKPDFEMFFCMNMCFDGOKGCMHPBKBMP
HJABGCKGKKGPOBBGGEPHAKBHKOGAAAANOIDG
AesCryptoServiceProvider
System.Core
ObjectHandle
System.Runtime.Remoting
Unwrap
BIFDFPDBBLMPKHNDKDKJDDGJKHNAELHHLCPC
CryptoConfig
get_AllowOnlyFipsAlgorithms
EGMIPEGOPLCLCNDMDPCKCCMPOLKJIGACBLGD
DOGADJBLOFIBNINKOIPFIGDLDNAKCEPDFCIJ
HKJBGJOJKLIOODHJBKMKNINNDMEPJEKPLDCN
TransformBlock
PIFCMNDBACAKGNNOMDHAGOEKGMHMCEFFGCCA
BinaryReader
get_BaseStream
ReadUInt32
NNOLJCBMPILJKILDIBALBDOMOBKBMDOMGONF
CryptoStream
CryptoStreamMode
FileMode
FileAccess
FileShare
MHMOEMAIEDMBHHDHEGEIOPBMMCFLBKMBDEPP
ParameterInfo
DynamicMethod
System.Reflection.Emit
ILGenerator
GetManifestResourceStream
ReadBytes
BindingFlags
get_Module
GetGenericArguments
get_IsStatic
get_FieldType
GetParameters
get_DeclaringType
get_IsValueType
MakeByRefType
get_ParameterType
get_ReturnType
GetILGenerator
OpCode
OpCodes
Ldarg_0
Ldarg_1
Ldarg_2
Ldarg_3
Ldarg_S
Tailcall
Callvirt
NGFAIMOGKEHGACOEIGIJHPEOIBFIGFJHDMMG
BAFFLONBPODFFOBMFLKBLNIAPJGLPJLEEPIN
KHIDNNJNLPNOPBNCEIAHEGMPJBKNPMPBONIO
KEKHBFMGDDNJBPPOEJIHFOBCAMGMDKFKFPKK
StackFrame
GetMethod
get_Count
get_Unicode
LIJFOFMAOBMEPNDIJAELPIFDOJNNODGDAPFC
NGNELBIBEEBLGAPHHOMFPBDILNGOPCJKNKGA
ReadInt32
ReadInt64
AllocCoTaskMem
WriteIntPtr
WriteInt32
LHNKENGDIONAKKEIBLMOLFJJPICNOPACGPEO
KGOJMPFHKDDBIFAFBPFEBGLBNLJKEJOKPGPN
PAIAAJDNKAGKAGHCEAHFDLNICEPHBHAJMPKM
GMPNHGMFGPDCJPJDNMAFHOFLNFCDOAPCNKKC
Version
ToInt64
ModuleHandle
GetField
GetType
CPEODKOEOLBCJLEFLPGIAKIONOMAEBIOMDGJ
get_Location
GetName
AssemblyName
get_CodeBase
GetProperty
PropertyInfo
HCEMMNGNJAALPPNGDMJDNHMEJFOJODCGNFAE
OLOMEOGEJMOIOBEGHIBMFIGLGKANMHBMKMGL
HMPLHJLFODCBHEGDKJHNPJABOGGCCLHFPCJN
GetDelegateForFunctionPointer
EPGIMFLDLOOAFNABNILDOANJABCIEEJPMPBN
IGLLMGJBDLALJPPLAEPIONKJDDCAMDNKMJPJ
MMLJCLFBKNIPMOIGHHEPLDODKCFDLLPDIOAJ
EJICLALNPENDDOPAIPMDGPMBNOGBLPEMCNFH
LBGKBMAMIGNPGOJIAEIOLAJEAGIJPDNPKANM
c8iKhNv3S
EJHHIABFOCADCJALCCGKPNJKLJFBLGLFDDPO
POFPLECBPNONIFHNLDODGHCOOANIJBBMNLLJ
AHOCKFHOOOMDCGEJDCGOPAHHLLOKMKEFAJEM
GIMOICMMIKLCHOFKLNDPECLIOCDEGKFBDMFD
set_IV
KLNPNHIOEMDDGDBKKCILFLJLHAIPOMHMOFPC
IODDIIMOFBECGBBBEMBGDMPILNKFNDBKBJLJ
NMFPNGOGKJIIJGGBLBCFBGFGGFFBLNFBOPKE
PPNEPMBAKBPDNCDHECKFJBJGABFKICCKDMOI
HDGIECPBHNCEPIPALDBJHBEDKKOFGJBEJFPM
CHEIINFBNNDIJONGCHIKLONFNMCMMIPDGLAF
POCACAJBJKHABDPCKHFLGAAMICIJBHJHFIHN
IFPMBPBHAOMIDHMIHBMMBMBAPFBLFCHLJDHK
POHFIAPLDFDNBIOKMJCABOPPLFMFMDIAAILE
EAFJBFHDEPLNEBEFPKFBDPOEMPEEFOGEKAKC
Reverse
GetPublicKeyToken
FlushFinalBlock
get_EntryPoint
MapNameToOID
AsymmetricAlgorithm
FromXmlString
ReadUInt16
get_Hash
VerifyHash
KBOCFHINCKOBOEJAGPAHDDGLAIHPDGJHJJFP
ReadIntPtr
WriteInt64
get_BaseAddress
get_Modules
ProcessModuleCollection
ReadOnlyCollectionBase
get_ModuleName
ToLower
get_FileVersionInfo
FileVersionInfo
get_ProductMajorPart
get_ProductMinorPart
get_ProductBuildPart
get_ProductPrivatePart
op_GreaterThanOrEqual
op_LessThan
GetHINSTANCE
GetFunctionPointerForDelegate
get_ModuleMemorySize
get_Method
get_ModuleHandle
PrepareDelegate
RuntimeMethodHandle
get_MethodHandle
PrepareMethod
FDEHPCKBPJLBNGEKDHGELEICBEHMCJCHOGJI
classthis
nativeEntry
nativeSizeOfCode
EEHBLALEMILFDCLNAHACLGADMDPEDNLPJELE
OJMFAHKOLENGCLGADOLLCPOAMCCJMGGINOHH
MADBPNNFAIPMOBFLNNGIKLJMBPDFHBILGPBM
uVaa4GpUIk
KNBBNFHDPGPPJOJEKMCFKJFDMMJAHDLHEIGF
FPJODIBDEFOKIIFNGKPHJPHFNKKGCEAOBNGM
PKLBFBDIJFFMFMGGJPNHLOBCGJOKHOKJIJGC
AOICLOCHNEOKCFIDEKMLMNBFAKAJMGGNOFOL
hModule
lpName
lpType
lpAddress
dwSize
flAllocationType
flProtect
hProcess
lpBaseAddress
buffer
lpNumberOfBytesWritten
flNewProtect
lpflOldProtect
dwDesiredAccess
bInheritHandle
dwProcessId
value__
BKFCHFALMFICOJLDLHKLHHMNIMFJINDBPLOI
PFFEANLGFLNJMCAJMDDPMNLJGMEOFMPMOEPN
OEDHKHHHONBKBOHLLOOAHIPHLEMJILKGMMBL
CADEFIGLNNPAEEHGJCKEALNLFNEBDGIACHEO
GetRuntimeTypeHandleFromMetadataToken
JJGJGBNGKJJHIHGECPJIOLHDACDOGMIDOEOL
GetRuntimeFieldHandleFromMetadataToken
IKNPMDCOJPHJCNCFPPGKANFEFLGJONBBCKPK
IENILPFHLJPDJEEIJOBJFFENFDDDPFNGIFEA
BKGFNOOMGEIOJFEDHLOCANEJFFKKBAMPJEEH
HLFHEAFHOGJNOMKGJKKILNNPJMENKCLIHFFK
MEAJMFNBMEJBIGPPDAKKODFACJANCCOBBJHF
DeflateStream
System.IO.Compression
CompressionMode
DKLDOAAFPAOFKKCEHOAOLPEPCMDDGMNFNLHA
GetManifestResourceNames
AddRange
IEnumerable`1
LGCFFNCDEPIDKKAKDADBNIMPOIOPPHAMCGGF
ResolveEventArgs
AppDomain
get_CurrentDomain
ResolveEventHandler
add_ResourceResolve
NHAIDFIDEJDEJHBJNIBHFHIBFAMHHDAHFHKC
CopyTo
MCPHEALMBJOELCCNALDEOCLMGGCAOCEGKKKC
IsLittleEndian
LFIGBILABKGODOAFBIHAGJDPGOOLGHFIHFOB
FLJGENPDJKINMNJPPIIIAAENEABPGGNGIIJM
POJFBBFFJCJMDHEJFCHBPHIPEOLDBIOKJFIJ
KANKJPOIFBMEGNLPCOHBBOKJPDMJBOKGIKOC
JFEFMACDNGJHEBLIGKODODGBOLGPELDMLDIL
MMMBDDOOEAKCAFINHJDNKJKKDODOLOGPGKIB
PNOFNCDLADMICEEBGKBAEDHIONPDCFNOOLHF
KFAFFDLPJNCIFCMDOBOGOKJGHCBMGLDEIMIP
PFEHGPLEMJKPKKKCGOPPFEAJALHGFKMCKEEK
0E448EF5E5E60630BDDB19388CB6378436E3C65D03DD66DA7C6EBFF563BD857A
4BED3ADC52D4904075F6BBF279EC4ACEDE079533B95E229A29809542EA324A7B
62E6F13B53D67FDD780E20D89A6E8EE503B197AC16AC3F1D2571C147FDD324C9
7F535673D836D3D77A97DB03EB3D71EA780F44372F5AEBECEBEDD696AAEB8378
97E613E5A3A47DEC76B7E50D47644B35EA4322F00D594D80D2F1C1F3644F8A4A
C356AFF1A01C2B0DA472E584C8E3C8F875B9A24280435D42836A77B19F5A8C18
C61B1941CF756EB7551F7C661743802362728B785ADC22E860D269713DFB01A6
D5B7247C497788CF0031CEB06E3DF77A45FEF59F1E49633DC7159816D64759B5
m_30533cda03f64c1ea09979b5c8097228
m_ce31b2fd620b4eafb90fb358a17fef1e
m_c5c5686d40904d8e85f8d35a690ff2be
m_4ac92d570062492f84633d1732917e9c
m_53e196f06112440fa41bfcdd6d60c5d3
m_c20c86b1f4a9436aa93f3f19c6b18997
m_2d7d1c0d05594fbf9daeba21a6e555a8
m_65037591d77f4629a3cbe6d803e4e9b4
m_ed8d7db3abdc47069a885710d4357c31
m_b91f62e7ddfa48c58b599966f08fb663
m_4dfa05952de948aa8407c23bd4fa6cef
m_6fa0ae8b8bb944c9abef87dd0db06aee
m_9101513e36854dd6bcb5b364dc94ad88
m_57724aa5e0fc4621977bb5ab106cee2d
m_f3d3c48b2bfa43f1b27d7f88620a0c8f
m_65d2f38608ed40959eb2e798635c0d4a
m_6de472ba3c764ecdb88912526fecb285
m_f6afb42766c14a1dab276415bcb57540
m_a82a35a9e5da4ae39c73105b72c351b2
m_62fe0481056f4e51987a50f52dade99a
m_911a91be8e954333ae9fc737286b90b1
m_f37c1980c5a747be88ae6f771225c1ed
m_1dadadd789924083ba865768f36a8ebe
m_93586436837e499cb197be0d0f34dc1a
m_2fba4b7a5344471da052ddc76bbb6bc4
m_fb27f37e32454b0484cc05dc438193cc
m_251c99579b5f47928c8a17d22866cfcf
m_a7378312af8f4d55b8176872b452dc1e
m_995dc432eac642ab8e5e10f90af2c480
m_283a04ad6e0f4c1fb31e7750aeeb95c7
m_1b787179ab324ed5b721980470851fac
m_6b9aef19d0f14da1931d1b6268bb8861
m_0ff5bb8b82224ecaaf9731ef5b0d8351
m_0e0a1ed000004145b30a705d2c3cdf01
m_af83d8d6a0b04b4d8e38eba0b98dc342
m_d02a3cb74922411e9ee1dd323115eb45
m_007f3107ea5a405d8a1f8a0118e92158
m_65e672a7b54240d9a90b8174f7b377ba
m_1e6453a3b007427ab5dd98bbff5cd7dc
m_79593a93a8c042049b742a1517185ebe
m_91b87598d1d4472dadc78cc25cd26186
m_e4bcfbae270c42d39b6edc064169039d
m_9a287244c4954aa9a95bfe40f3c829e0
m_0372bcec8faf4f3a896d818fd1a89d80
m_444a0372c2a64147b1b5c32d7ecefff5
m_596513823cb447e5b0a4b45f405f082d
m_ca5bb758b68240e5ab02600b5abdd691
m_78da2c1797db4406bd85e955ea31005f
m_b176449817224ab5bf76f6babca5c026
m_85f5a2dab1c14068ab8724ed5f72695b
m_835b858a486f4c88b098f752e8e9bd99
m_93badff982a34820aa8c897fd1c05a42
m_ce416cc176a34887ad81545c83b446a4
m_c1ccc9ee76ee4b6bbe5a17c8ad40398c
m_e3548293da4e49caaa948f1c6c3276cb
m_eb421bfe893a447a88950b385d06b44c
m_f662594fd638458ebb7f7042fc92569c
m_fa805343fbe04b9480cf6a4aca2d9498
m_b6a50d31db9f4177a38faa821b2db44c
m_871e1b844651435894e517d754fdc730
m_acba44917d764ddca123b2d0b95ae0f6
m_8a22c7f0adbb4110926db64e7b74be3a
m_6863a15ed1f04734808d7d1f943aa086
m_d494881485fb4722a4b504e4ad321230
m_df41c7e8caa24341bbef79813792a3ea
m_b90d15211d734e3db79601e474a9a0da
m_95430b5b589e4214a07fc99c280c9ca0
m_d2a9077110d34c7c896a933c36087069
m_c6943da1c62f43afabee5436a7479362
m_08ec9ffc01da49c68fb47cc23e757687
m_e7d4162455c14d9290750cae7ef89a79
m_e728b603475245929dbaf39b47355432
m_df6ac5dfd2064da2b05e0cc626434a70
m_d806e2aa25e840048f331509b9becd3a
m_a69b9b5ebc614bc7beb45d71ce2c22aa
m_bc1e5d70b0ee491cb23b78d816f33a51
m_0be5e764a1a64de6b2c11fed48a4ab4a
m_56d0025f50d14bde9b21f5fe653be27b
m_9dd2a8d97fbc4c11af31ff0a49b654a6
m_2c5fb9b4aed74e01b32ec1713a07ff11
m_fd6f4ea603aa46188be3bd0f98c1da9c
m_3f89d8ab23df478b91f99cc98c38f8cc
m_4fec361a8f214cbdbee71c3315026904
m_eb430d448999454b9709fc8023e9ccba
m_edde08e1f6b5412ab738c5c32128843d
m_325143d6b7214c20a06236ef57214ef7
m_a67b860875084aecb4b1386f36d67f15
m_48e9ec5e58924f45b0c3ae0976617372
m_7f87d219d2204d2b890957a465ffd961
m_ed8e18f2a7b647a3a17be03466fc7773
m_40abe75ea15948ddbac8709b74d1ca9e
m_03e5ab9b7f5c426eaedde9ec4d8b6767
m_308c0cc1106f424fa13a1c3a0a78a3f2
m_9407942e741d4fa9b148d13f493d4068
m_fc76e9d71db6464f8fcfc3a14457bf91
m_2fc45beef9f448b3b5ba1768d82ea27f
m_4692dd72fa474954bd478bcb7554ff06
m_6e1dc58c57704a378285a890faef2415
m_f4a42fc93caf4336a4682bc140fe7dad
m_c8b20d8279d24d5d87f3c4b9b038c8bb
m_542ba3c773774297890f75788c479725
m_49a6fbe9cf5b4da0913064249f46e828
m_2b156426f9f940e8bd2234ac85c58a1b
m_1c64ba88d7154046b1e6245d0f49eac1
m_6db87df0cbfb49f9a457a43c0ac878a9
m_dd1cf53591a14fe68b9c13e6d52ec596
m_5874bb9f43fa49ab83470cb7231e160d
m_bc7a6129000446839e773792785fd999
m_0f541ddfad6644f8989406465f266de4
m_aa0d001dfe9b4699a0e80d464d757443
m_1556244cd5ec42c3ab50bfacd48a7b82
m_687ffc3ef7c74445bc6068cadda5c21c
m_e064084d901a4ab194048593bc808537
m_860f53a1aa024f3e915d0d90e22d854d
m_e4ef93bc5df94953978258585037b052
m_9b1f5665aef0483ab23992a302a32323
m_fe345de938104a74be4eb67de2745ced
m_f71b14ff3f964c8a90dea70cabe92fec
m_ed46fbd7252d495f86ba1fba6f38b647
m_139ad580abb645c4a92b6cc0d538137f
m_d194a94102ac4c4ea130393807933a03
k3254231a664c434e96a90a8397bdbe3f
EditorBrowsableAttribute
EditorBrowsableState
GeneratedCodeAttribute
System.CodeDom.Compiler
DebuggerHiddenAttribute
HideModuleNameAttribute
StandardModuleAttribute
HelpKeywordAttribute
System.ComponentModel.Design
MyGroupCollectionAttribute
ComVisibleAttribute
ThreadStaticAttribute
CompilerGeneratedAttribute
STAThreadAttribute
DebuggerStepThroughAttribute
AccessedThroughPropertyAttribute
DebuggerDisplayAttribute
UnmanagedFunctionPointerAttribute
CallingConvention
CharSet
FlagsAttribute
EbWTLTHcP8w4fWFsgI.D03ySeITrILSu1605R
oFpPp6Fc0UaS3wDleh.FRkGoXGOhuat06eme2
4KhYbVDovIVbWCH7Ic.eLIfYYEgByRxnJ1Ar8
yhlmlyBqbkd1jkOamp.avGV2JCd2P6DfrbAKs
WrapNonExceptionThrows
$873df56e-8ec1-491e-b648-fbdb88eee253
1.0.0.0
MyTemplate
14.0.0.0
My.Computer
My.Application
My.User
My.WebServices
4System.Web.Services.Protocols.SoapHttpClientProtocol
Create__Instance__
Dispose__Instance__
MyProcess
<generated method>
<generated method>
PDDEEHALNEJGNMGIBBPALLHPKOFAGMEDCFLN.LHMFCLLKPJPNLPEMOOMPKGFGGJLDMBDEHOHN+GMEJKKOHPMNPNBIFFEFKIEADMOJELOAODAAE+IPLFMEHFIJKBENLDHCDFLBNPHABCAOEFKHNI`1[[System.Object, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]][]
SUsSystem.Runtime.InteropServices.CharSet, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
CharSet
b05-Y,D<ni
]bRTei
`${G`:a
~eq2sRV
~rklII
P^NwNaa90)~
Tt}Xh-kH
s4HCt
p{1C'b
<$X/Mog
!m:h:]
`R7o>!
aMP=c,J
z`F>l_
]t8lDcL
[9pkVf
wUzbNt
kkAf5`cX
E3`9?q
hq7[4-E"
inSp:-H
K@R?8 X
(_ccO|
WHI^s5
VcrZgz
Pt%sE
>|D:^80-
?i%r`JO
NvDX/{
%8f2
gzK|>_U
SX{jF3G87
oB'a\e
nj_]3z
:lYk
s^`^-{
!MVJ7K]
p^OreO
Rfhn M
[cm,2?
_CorExeMain
mscoree.dll
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
<assemblyIdentity version="1.0.0.0" name="MyApplication.app"/>
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v2">
<security>
<requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3">
<requestedExecutionLevel level="asInvoker" uiAccess="false"/>
</requestedPrivileges>
</security>
</trustInfo>
</assembly>
d<4l<4
.Kp.CF.S
.[}.;8.
)(*(,+-+.+/+0+1+2+
This assembly is protected by an unregistered version of Eziriz's ".NET Reactor"! This assembly won't further work.
System.Core, Version=3.5.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
System.Security.Cryptography.AesCryptoServiceProvider
System.Core, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
is tampered.
oFpPp6Fc0UaS3wDleh.FRkGoXGOhuat06eme2
g6ue1VLbYks476ncpN.P1ZSMkMIBWIsX1WepY
yhlmlyBqbkd1jkOamp.avGV2JCd2P6DfrbAKs
{11111-22222-50001-00000}
GetDelegateForFunctionPointer
System.Reflection.ReflectionContext
System.Reflection.RuntimeModule
m_pData
clrjit.dll
EbWTLTHcP8w4fWFsgI.D03ySeITrILSu1605R
file:///
Location
ResourceA
Virtual
Write
Process
Memory
Protect
Process
Close
Handle
kernel
32.dll
{11111-22222-40001-00001}
{11111-22222-40001-00002}
VS_VERSION_INFO
VarFileInfo
Translation
StringFileInfo
000004b0
FileDescription
FileVersion
1.0.0.0
InternalName
cipher.exe
LegalCopyright
OriginalFilename
cipher.exe
ProductVersion
1.0.0.0
Assembly Version
1.0.0.0
Antivirus Signature
Bkav W32.AIDetectNet.01
Lionic Trojan.Win32.Generic.4!c
tehtris Generic.Malware
DrWeb Clean
MicroWorld-eScan Trojan.GenericKD.66024580
FireEye Generic.mg.a1a1af51bcab4d2f
CAT-QuickHeal Clean
McAfee Artemis!A1A1AF51BCAB
Malwarebytes Malware.AI.3725460442
VIPRE Trojan.GenericKD.66024580
Sangfor Virus.Win32.Save.a
K7AntiVirus Clean
BitDefender Trojan.GenericKD.66024580
K7GW Clean
CrowdStrike win/malicious_confidence_100% (W)
BitDefenderTheta Gen:NN.ZemsilF.36344.pm0@a8ykbre
VirIT Clean
Cyren Clean
Symantec ML.Attribute.HighConfidence
Elastic malicious (high confidence)
ESET-NOD32 a variant of MSIL/Agent.EEH
APEX Malicious
Paloalto generic.ml
ClamAV Win.Trojan.NanoCore-9993885-0
Kaspersky HEUR:Trojan-Ransom.MSIL.Blocker.gen
Alibaba Trojan:MSIL/Generic.d7947a9c
NANO-Antivirus Clean
SUPERAntiSpyware Clean
Rising Ransom.Blocker!8.12A (CLOUD)
TACHYON Clean
Sophos ML/PE-A
F-Secure Clean
Baidu Clean
Zillya Clean
TrendMicro Clean
McAfee-GW-Edition BehavesLike.Win32.Generic.dm
Trapmine malicious.moderate.ml.score
CMC Clean
Emsisoft Trojan.GenericKD.66024580 (B)
Ikarus Clean
GData Trojan.GenericKD.66024580
Jiangmin Clean
Webroot Clean
Google Detected
Avira TR/Dropper.Gen
Antiy-AVL Trojan[Ransom]/MSIL.Blocker
Gridinsoft Clean
Xcitium Clean
Arcabit Trojan.Generic.D3EF7484
ViRobot Trojan.Win.Z.Pe_A.253952.A
ZoneAlarm Clean
Microsoft Trojan:Win32/Tiggre!rfn
Cynet Malicious (score: 100)
AhnLab-V3 Trojan/Win.CoinMiner.C5343444
Acronis Clean
VBA32 Malware-Cryptor.MSIL.AgentTesla.Heur
ALYac Trojan.GenericKD.66024580
MAX malware (ai score=87)
Cylance unsafe
Panda Clean
Zoner Clean
TrendMicro-HouseCall TROJ_GEN.R002H0ACK23
Tencent Msil.Trojan-Ransom.Blocker.Yolw
Yandex Clean
SentinelOne Static AI - Malicious PE
MaxSecure Clean
Fortinet PossibleThreat.PALLASNET.H
AVG Win32:BackdoorX-gen [Trj]
Avast Win32:BackdoorX-gen [Trj]
No IRMA results available.