Static | ZeroBOX

PE Compile Time

2038-05-30 12:06:21

PE Imphash

f34d5f2d4577ed6d9ceec516c1f5a744

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00002000 0x00023484 0x00023600 6.15594662114
.rsrc 0x00026000 0x00009b4e 0x00009c00 3.24909852961
.reloc 0x00030000 0x0000000c 0x00000200 0.101910425663

Resources

Name Offset Size Language Sub-language File type
RT_ICON 0x00026130 0x000094a8 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x0002f5d8 0x00000014 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_VERSION 0x0002f5ec 0x00000376 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_MANIFEST 0x0002f964 0x000001ea LANG_NEUTRAL SUBLANG_NEUTRAL XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminators

Imports

Library mscoree.dll:
0x402000 _CorExeMain

!This program cannot be run in DOS mode.
`.rsrc
@.reloc
B5KW(>w
o8%(Lr
P ]X
/?`_~)
6)[3I!
??[4<
'Di
T# jBP
fT[9`+
;8_
[jY {d
xH="c
>]_c d
d(^9
v4.0.30319
#Strings
'D'W'h'
'6(H(U(l(
(-):)\)k)t)x)
*-*@*V*r*
+#+2+L+w+
+G,w,|,
-E-[-g-n-s-
/ /1/E/V/t/
0#000B0x0
0C1X1,%E%[%v%
&(&-&2&:&@&R'
+++=+E+
<>9__0_10
get_Id10
set_Id10
359A00EF6C789FD4C18644F56C5D3F97453FFF20
FB10FF1AD09FE8F5CA3A85B06BC96596AF83B350
77A9683FAF2EC9EC3DABC09D33C3BD04E8897D60
F413CEA9BAA458730567FE47F57CC3C94DDF63C0
<>9__0_0
<>9__1_0
<>9__2_0
__c__DisplayClass3_0
__c__DisplayClass4_0
<>9__5_0
<>9__8_0
__9__49_0
<>9__9_0
718D1294A5C2D3F3D70E09F2F473155C4F567201
2FBDC611D3D91C142C969071EA8A7D3D10FF6301
get_Id11
set_Id11
sf34asd21
VT_UI1
<>9__0_1
<>9__1_1
__9__57_1
IEquatable__1
ConcurrentQueue__1
AsyncLocal__1
TaskAwaiter__1
Processor__1
HashSet__1
Vector64DebugView__1
LazyDebugView__1
EmptyArray__1
Lazy__1
Func`1
Nullable`1
IEnumerable`1
IOrderedEnumerable`1
CallSite`1
Task`1
ICollection`1
IEnumerator`1
IList`1
ChannelFactory`1
get_Id1
set_Id1
Popref_pop1
<>9__0_12
get_Id12
set_Id12
__StaticArrayInitTypeSize=32
ConvertFromUtf32
Microsoft.Win32
ConvertToUInt32
FormatUInt32
ToInt32
HexInt32
A937C899247696B6565665BE3BD09607F49A2042
EB7EF1973CDC295B7B08FE6D82B9ECDAD1106AF2
<>9__0_2
KeyValuePair__2
IReadOnlyDictionary__2
Func`2
KeyValuePair`2
get_Id2
set_Id2
LSIDsd2
aso0shq2
Vector2
slkahs2
Argument_AlignmentMustBePow2
Byte03
04EC68A0FC7D9B6A255684F330C28A4DCAB91F13
get_Id13
set_Id13
asdoiad0123
asd44123
sdf923
EB14352FBADB40E2FA237D444A6575B918573C43
4E3D7F188A5F5102BEC5B820632BBAEC26839E63
kadsoji83
sdfkas83
8C550EA96A693C687FFAB21F3B1A5F835E23E3B3
06F9FDEBE7AEF3F08523BDDDE7FCB7F4A217E7B3
79E9B68FB6E1987DED749BCD71143BD8EB323CE3
FCEAB39EEBEA9BEA6AC370A00D87E5EE20EC94F3
Func`3
get_Id3
set_Id3
dvsjiohq3
asdk9y3
4EF472E2E74116C7FD95C74AB422CCF80DB1C404
get_Id14
set_Id14
__StaticArrayInitTypeSize=24
__StaticArrayInitTypeSize=234
sdfo8n234
gkdsi8y234
46884713B2F882E5304A1FF1B16370575A53E434
sdfk8h34
asdlasd9h34
93D9D319FF04F5E54F3A6431407A7B90388FDC54
SYS_WIN64
Format64
UInt64
ToInt64
NextInt64
HexInt64
99086C63443EF4224B60D2ED08447C082E7A0484
1076B53156E190E9BCBE281016712F2D3F02D3B4
<>9__0_4
get_Id4
set_Id4
fdfg9i3jn4
EB2DB456E0D779E528D1474FA55AC99055A5E815
__c__DisplayClass1_15
get_Id15
set_Id15
askd435
A898408AA9A30B686240D921FE0E3E3A01EE91A5
get_Id5
set_Id5
__StaticArrayInitTypeSize=10416
get_Id16
set_Id16
Block16
UInt16
410D551BF9DC1F0CF262E4DB1077795D56EEC026
E0CEB3E46E857A70CFB575A05B01A64806A8D426
Sha256
<>9__0_6
__9__25_6
get_Id6
set_Id6
18B532EF2959EF2ED8C549D712E3446FF49E4287
007A56C60CB686C542C5A63F4806094A4F9494B7
89C95FB6F8086AFCCD50B1B257669F2B17C047B7
D82572C56BDDD62E320B8BDAF0397A0DF9DD5BF7
get_Id7
set_Id7
_WriteToFileAsync_d__108
BroadcastScalarToVector128
Int128
__StaticArrayInitTypeSize=28
1A79939AEFF161E557D02CB37CD9A811ABCAF458
1938FDF81D9EFE09E9786A7A7DDFFBD755961098
__StaticArrayInitTypeSize=98
DF08DD4DFFDB6C9048202CAE65882EF91ECE6BA8
9B88C78E81ADB9E7247AB37D1F5F3861810916D8
46F273EF641E07D271D91E0DC24A4392582671F8
get_UTF8
VT_UI8
<>9__0_8
get_Id8
set_Id8
DecodeFromUtf8
asdkadu8
BCEF86DAFC99BA02019A51909C079A7A31931909
20CB5B8963ECE3D796594F043D66C0E0BAD86669
__StaticArrayInitTypeSize=3389
2B9522D4F7398AB5DB789596FE5DB90589B031E9
__9__33_9
get_Id9
set_Id9
A3EFD00EA085079EE7F97407F8EFF07E3990696A
4C1117B01D5C4E103EE817F889EC547C63B47B7A
A9139732ED4CF84F8CE948DCB134114E4F24598A
BEDDFAEB0360B1694AB8CD2A69986414790A1D9A
4CDA4454A3C36A7EBDCF8FE8B804B379A31D33CA
LoadLibraryA
EBD075615CBE4A710F9410FFECEAF6110A01922B
9D9AF3AE11A58D55EB8A6AEC8F03F7AD01E8994B
5BB3788A197C26B8310159EC9A81635814ABB05B
0410277C15CAD5E63A25F491DAEEF493B897678B
81E046FA1D93B661CC948A4DD1E01F20D6192E9B
7FD227EEE2F38A50CFD286D228B794575C0025FB
SystemCollectionsGenericSortedDictionaryKeyCollectionB
SystemNetNetworkInformationGetAdaptersAddressesFlagsB
SystemNetUnsafeNclNativeMethodsNativePKICertificateSelectB
SystemNetBaseStreamReadAsyncResultB
dnlibDotNetAssemblyLinkedResourceC
SystemDiagnosticsSwitchLevelAttributeC
SystemCodeDomCodeSnippetStatementC
System.Drawing.Drawing2D
6353B688B99A3543932AA127DAA0E48FBC646BBD
B5B4FA236B87DBCD8055443F05776B10DDEFA5CD
POSIX_FADV_WILLNEED
VT_CLSID
EVENT_ACTIVITY_CTRL_CREATE_ID
VARFLAG_FDISPLAYBIND
SystemNetSpnTokenD
6F66485AF823BAE1F185740DA7F4F595701CD22E
571B1023DF3ABFB94C92465B365B1814FEBFAB3E
95098CDF929872F9B67E58070D088F8238F7CABE
LOG_NOTICE
TYPEFLAG_FREPLACEABLE
IDLFLAG_NONE
SystemNetWebRequestWebProxyWrapperE
SystemIOCompressionGZipDecoderGZipOptionalHeaderFlagsE
CE18B047107AA23D1AA9B2ED32D316148E02655F
8C49F78A06E711CF0E21134D0B091985336CC37F
3DB6DAD76E13B54DC03AF1C6092C40388E57FBBF
SystemNetUnsafeNclNativeMethodsHttpApiTOKENBINDINGIDENTIFIERG
dnlibDotNetRawMarshalTypeG
SystemNetMailSmtpPermissionAttributeH
SystemComponentModelIRaiseItemChangedEventsH
get_ASCII
SystemDataCommonDecimalStorageI
SystemNetUnsafeNclNativeMethodsOSSOCKJ
SystemSecurityCryptographyCAPIBaseCRYPTOIDINFOJ
ELEMENT_TYPE_INTERNAL
MEMBER_ID_NIL
TYPEFLAG_FCONTROL
EISCONN
BCRYPT_INIT_AUTH_MODE_INFO_VERSION
get_JSON
FromJSON
ToJSON
SystemNetICredentialPolicyN
System.IO
ENOTSUP
EILSEQ
ThrowExceptionForHR
BINDPTR
Leave_S
LOG_CRIT
EPFNOSUPPORT
SystemNetSecuritySecureChannelUnmanagedCertificateContextCERTCONTEXTT
SystemNetWebClientcT
LUNAR_ETO_ROKUYOU
SystemNetConfigurationFtpCachePolicyElementU
SystemConfigurationClientSettingsStoreClientSettingsConfigurationHostU
VT_ARRAY
DX_NNY
TYPEFLAG_FPROXY
SystemDiagnosticsPerformanceCounterInstanceLifetimeZ
SystemNetMailSmtpReplyReaderFactoryReadStateZ
SystemCodeDomCompilerCodeDomConfigurationHandlerZ
value__
KoreanEra
GetEra
ThaiBuddhistEra
cbData
ProtectedData
EncryptedData
cbAuthData
pbAuthData
CommonApplicationData
SetComObjectData
GetAllFuncCustData
GetAllCustData
GetVarCustData
System.Private.CoreLib
mscorlib
dnlibDotNetPdbPdbStateMachineTypeNameCustomDebugInfob
DecryptBlob
SystemSecurityCryptographyCAPIBaseCRYPTALGORITHMIDENTIFIERc
System.Collections.Generic
elemdescFunc
get_Id
get_ManagedThreadId
TypeId
pszAlgId
get_SessionId
continuationId
GetCurrentProcessorId
get_CurrentId
FindSystemTimeZoneById
get_CurrentThreadActivityId
__DisposeAsync_g__DisposeAsyncCore|30_0_d
set_MaxBytesPerRead
_allSystemTimeZonesRead
IsThreadPoolThread
set_ControlThread
get_CurrentThread
add_AssemblyLoad
IsFinalizingForUnload
get_Payload
AbsoluteDifferenceAdd
GetDecoded
get_IsThreadOwnerTrackingEnabled
SetHandled
IsDefined
ThreadPoolBoundHandleOverlapped
CompareScalarUnordered
get_IsAllocated
get_IsCompleted
TaskT_TransitionToFinal_AlreadyCompleted
OperationStarted
get_HasShutdownStarted
Unstarted
SuspendRequested
IsCancellationRequested
NotContentIndexed
IsNotSerialized
IsNormalized
IsValid
SystemNetSecurityRemoteCertificateValidationCallbackd
DefineField
get_UnderlyingField
ReadToEnd
CreateBind
GetTypeKind
Second
IsGenericMethod
get_RemoveMethod
SymbolMethod
beginMethod
SystemCollectionsSpecializedListDictionaryNodeKeyValueCollectionNodeKeyValueEnumeratord
TypeDiagnosticKeyword
sdf934asd
asdk9345asd
adkasd8u3hbasd
kkdhfakdasd
sdfk38jasd
asdk8jasd
sdfm83kjasd
asdaid9h24kasd
sdfk83hkasd
sdf9j3nasd
asdasod9234oasd
a9duh3zd
LookForMe
IsInstanceOfInterface
NetworkInterface
Replace
IsNullOrWhiteSpace
get_StackTrace
CreateInstance
set_ControlEvidence
cbNonce
pbNonce
__3__source
set_Mode
FileMode
set_SmoothingMode
X509CertificateValidationMode
set_CertificateValidationMode
set_InterpolationMode
set_TransferMode
set_PixelOffsetMode
SecurityMode
SelectSingleNode
XmlNode
DictionaryNode
get_Unicode
get_BigEndianUnicode
EventOpcode
LoadUnsafe
HasNativeImage
FromImage
MessageBoxImage
set_Message
get_CurrentInputLanguage
AddRange
AmountTooLarge
AddUpToMaxCountOfWaitersSignaledToWake
EndInvoke
BeginInvoke
get_Scale
ReadContextTable
IEnumerable
IDisposable
Retargetable
Visible
set_IgnoreInaccessible
ToDouble
get_Handle
RuntimeFieldHandle
RuntimeTypeHandle
GetTypeHandle
GetTypeFromHandle
handle
Rectangle
Single
ReadFile
Sample
hModule
ManifestModule
get_Name
WebName
procName
fieldName
tableName
fileName
FullTypeName
InvalidCultureName
ChromeGetRoamingName
get_EnglishName
CheckName
ChromeGetLocalName
get_FullName
ItemName
get_UserDomainName
get_UserName
ChromeGetName
ParentName
GetProcessesByName
get_DisplayName
LocalizedCountryName
filename
MinSupportedDateTime
FormatWithOriginalDateTime
get_CreationTime
set_LastAccessTime
IsPrime
Runtime
AppendLine
WriteLine
get_NewLine
Combine
stateMachine
LocalMachine
DataProtectionScope
dataProtectionScope
OperationContextScope
pszBlobType
get_IsConstructedGenericType
IsGenericType
UnmanagedType
ChangeType
DefineType
ValueType
IsInstanceOfType
EnterLockType
MessageCredentialType
set_ClientCredentialType
set_StringMarshallingCustomType
get_BuilderType
GetType
FindEnumerableElementType
GetElementType
get_EncodedArrayType
get_PropertyType
blvnzcwqe
FileShare
Compare
System.Core
WriteCore
System.Diagnostics.SymbolStore
SystemCollectionsGenericLinkedListEnumeratore
SystemComponentModelPropertyDescriptore
SetLocalSignature
Countersignature
get_InstalledUICulture
get_CurrentUICulture
get_Culture
get_InvariantCulture
get_CurrentCulture
GetImageBase
CompleteOnInvokePromise
Unadvise
WebResponse
GetResponse
System.IDisposable.Dispose
Reverse
SystemCollectionsGenericSortedSetcDisplayClasse
RuntimeExceptionHandlingClause
set_ShouldIncludePredicate
get_ServiceCertificate
Truncate
AddOrUpdate
Create
PrepareDelegate
MatchNumberDelegate
MulticastDelegate
DebuggerBrowsableState
CompletionState
LazyState
Delete
CallSite
get_TargetSite
CanWrite
DynamicAttribute
AssemblyAlgorithmIdAttribute
DispIdAttribute
AddAttribute
CompilerGeneratedAttribute
OnSerializedAttribute
OptionalFieldAttribute
UnverifiableCodeAttribute
SuppressMessageAttribute
DebuggableAttribute
NullableAttribute
NonVersionableAttribute
DebuggerBrowsableAttribute
ComVisibleAttribute
AssemblyTitleAttribute
UnsafeValueTypeAttribute
AssemblyTrademarkAttribute
TargetFrameworkAttribute
HasCustomAttribute
SuppressIldasmAttribute
DebuggerHiddenAttribute
ExtensionAttribute
AssemblyFileVersionAttribute
CallerArgumentExpressionAttribute
AssemblyConfigurationAttribute
AssemblyDescriptionAttribute
DataMemberAttribute
EnumMemberAttribute
SecurityRulesAttribute
CompilationRelaxationsAttribute
DataContractAttribute
ServiceContractAttribute
OperationContractAttribute
AssemblyProductAttribute
AssemblyCopyrightAttribute
EventAttribute
ParamArrayAttribute
AssemblyCompanyAttribute
RuntimeCompatibilityAttribute
ReadSByte
ReadByte
ToByte
AsVectorByte
Enqueue
TValue
get_Value
get_MinValue
GatherValue
get_HasValue
GetValue
SetValue
ReadContextValue
IsBrowserSave
add_AssemblyResolve
ReflectionOnlyAssemblyResolve
Remove
Brickbats.exe
get_Size
cbSize
FixedSize
set_MaxReceivedMessageSize
ChangeSize
UnspecifiedTypeSize
get_PackingSize
set_MaxBufferPoolSize
newSize
GetVirtualDisplaySize
Serialize
Deserialize
Resize
SystemNetUnsafeNclNativeMethodsNativePKICRYPTOBJIDBLOBf
SizeOf
get_ItemOf
IndexOf
SystemDiagnosticsProcessThreadf
sdfi35sdf
GetSigOfMethodDef
get_IsParamDef
UnmanagedToManagedRef
Popref_popi_popref
Prefixref
NumTimesuff
UInt16BitsToHalf
SystemDiagnosticsProcessWindowStyleg
get_Png
System.Threading
NetTcpBinding
Latin1Encoding
UTF32Encoding
GetEncoding
get_CurrentEncoding
System.Drawing.Imaging
get_StringMarshalling
System.Runtime.Versioning
ToString
MbcsString
GetString
Substring
OpenExisting
System.Drawing
scannerArg
UnixEpoch
Search
SetSwitch
ZipHigh
SystemDiagnosticsTraceInternalh
GetMd5Hash
ComputeHash
Varpush
profilePath
GetFolderPath
rootPath
get_Width
get_VirtualScreenWidth
get_Length
ByteLength
dwMinLength
set_MaxJsonLength
ArgumentException_OtherNotArrayOfCorrectLength
GetSignificandBitLength
set_MaxStringContentLength
get_RowLength
dwMaxLength
set_MaxArrayLength
StartsWith
GetDayOfMonth
set_MaxDepth
dnlibDotNetAssemblyResolverFindAssembliesModuleSearchPathsdi
SystemComponentModelBrowsableAttributei
InlinePhi
IsAscii
SystemSecurityCryptographyCAPIBaseCERTINFOj
UnsafePack
Gen2GcCallback
_0___InvokeAsyncCallback
ContextCallback
DecoderExceptionFallback
set_DecoderFallback
callback
IsLoopback
PreCheck
ExitUpgradeableReadLock
SpinLock
CreateSymbolicLink
InlineTok
StackCrawlMark
PresentationFramework
get_DenormalMantissaMask
ValueTask
AllocHGlobal
FreeHGlobal
get_Local
Reciprocal
Marshal
X509CertificateRecipientClientCredential
Decimal
IsSubnormal
Signal
Operational
SetThreadPrincipal
CompareScalarUnorderedGreaterThanOrEqual
AbsoluteCompareGreaterThanOrEqual
op_LessThanOrEqual
IsRetval
cbLabel
pbLabel
System.ServiceModel
set_Channel
CreateChannel
IContextChannel
maxLevel
PrivateImplementationDetailsStaticArrayInitTypeSizel
LessThanOrEqualAll
ForAll
ResolvingUnmanagedDll
CallConvStdcall
kernel32.dll
System.Xml
FromXml
MonetarySymbol
get_IsPinvokeImpl
set_Url
SystemComponentModelDateTimeOffsetConverterl
IStream
FileStream
GetResponseStream
CreateTranscodingStream
MemoryStream
get_Item
get_Is64BitOperatingSystem
phAlgorithm
HashAlgorithm
Random
SystemComponentModelIntConverterm
IsOSPlatform
SystemTimersElapsedEventArgsm
wMajorVerNum
RootNum
rowNum
IsEnum
ElementIn
Conv_Ovf_U2_Un
VolatileBoolean
AsBoolean
op_LessThan
WriteInt16LittleEndian
TryWriteLittleEndian
TryWriteHalfLittleEndian
IsLittleEndian
ReadInt16BigEndian
TryWriteDoubleBigEndian
TimeSpan
CopyFromScreen
get_PrimaryScreen
remove_EventWritten
get_NegativeSign
set_NegativeSign
get_Main
set_Main
set_ControlAppDomain
get_CurrentDomain
Precision
get_FileVersion
dwInfoVersion
GetWindowsVersion
SetVersion
MatchesSimpleExpression
set_SkipVerification
get_Authentication
X509ServiceCertificateAuthentication
get_Location
ResourceLocation
System.Net.NetworkInformation
UnicastIPAddressInformation
GatewayIPAddressInformation
PosixSignalRegistration
pszImplementation
TaskContinuation
System.Globalization
System.Runtime.Serialization
System.Web.Script.Serialization
Normalization
System.Reflection
InputLanguageCollection
MatchCollection
UnicastIPAddressInformationCollection
GatewayIPAddressInformationCollection
ManagementObjectCollection
RequestConnection
connection
op_Addition
MdSigCallingConvention
SearchOption
searchOption
SpecialFolderOption
CryptographicException
NotSupportedException
add_UnobservedTaskException
InvalidOperationException
BadImageFormatException
TrySetException
StackOverflowException
System.ServiceModel.Description
get_Assertion
Execution
StringComparison
FromComparison
MessageBoxButton
SystemNetConfigurationMailSettingsSectionGroupn
Intern
WaitingToRun
GetTypedObjectForIUnknown
GetUniqueObjectForIUnknown
CompareTo
RelativePathTo
FileInfo
fileInfo
TimeZoneInfo
ScalarArrayTypeInfo
CultureInfo
pPaddingInfo
FileSystemInfo
RegionInfo
FileVersionInfo
GetVersionInfo
SessionInfo
get_InvariantInfo
CSharpArgumentInfo
get_CurrentInfo
EventInfo
TextInfo
DirectoryInfo
PropertyInfo
ProbabilisticMap
Bitmap
MessageSecurityOverTcp
get_AttributesToSkip
Microsoft.CSharp
PrivateImplementationDetailsp
SystemNetTimerThreadq
asdak83jq
System.Linq
SystemNetNetworkInformationUdpTableClassq
GetWeeksInYear
GetPointerToFirstInvalidChar
StoreScalar
ReciprocalSquareRootEstimateScalar
MultiplyRoundedDoublingAndAddSaturateHighScalar
ReciprocalExponentScalar
dnlibDotNetWriterNativeModuleWriterGetSectionSizeInfosdr
InvokeMember
GetSerialNumber
MinNumber
MessageHeader
CreateHeader
AddressHeader
XmlReader
StreamReader
XmlTextReader
BinaryReader
MD5CryptoServiceProvider
IFormatProvider
AsyncTaskMethodBuilder
StringBuilder
SpecialFolder
Microsoft.CSharp.RuntimeBinder
CallSiteBinder
SafeBuffer
DateBuffer
ManagementObjectSearcher
FormatWithFormatSpecifier
AllowHexSpecifier
Invoker
ResolveEventHandler
get_Scheduler
ConcurrentScheduler
TimerQueueTimer
ToUpper
IEqualityComparer
CurrentUser
Utf8Parser
IsGenericParameter
InnerWriter
NullTextWriter
GetDelegateForFunctionPointer
pointer
BitConverter
Register
TitlecaseLetter
SystemDataCommonDbProviderSpecificTypePropertyAttributer
MultiplyWideningLower
ToLower
JavaScriptSerializer
get_TypeInitializer
TimeSpanTokenizer
get_IsError
set_PMDesignator
set_PercentDecimalSeparator
MonetaryDecimalSeparator
IEnumerator
ChunkEnumerator
__3__ctEnumerator
ManagementObjectEnumerator
System.Collections.Generic.IEnumerable<Entity5>.GetEnumerator
System.Collections.IEnumerable.GetEnumerator
DictionaryEnumerator
Activator
.cctor
AsVector
connector
ExecutionAndPublicationViaConstructor
SystemCollectionsGenericSortedDictionaryValueCollectionEnumeratorr
StructureToPtr
IntPtr
LPWStr
sdkf9h234as
set_ReaderQuotas
XmlDictionaryReaderQuotas
Graphics
System.Diagnostics
TasksFlowActivityIds
Fields
Nanoseconds
get_Bounds
Arg_RanksAndBounds
GetGraphicCards
GetAllNetworkInterfaces
VirtualStaticsInInterfaces
System.Runtime.InteropServices
System.Runtime.CompilerServices
DebuggingModes
get_ChildNodes
cScodes
AvailableLanguages
get_InstalledInputLanguages
languages
Matches
EnumerateDirectories
GetDirectories
set_RecurseSubdirectories
LiveActivities
GetIPProperties
IPInterfaceProperties
GetProperties
ExpandEnvironmentVariables
remoteFiles
GetFiles
profiles
get_PayloadNames
set_MonthGenitiveNames
GetSubKeyNames
_readOnlySystemTimeZones
get_CultureTypes
hardwares
softwares
Ensures
NeutralCultures
ListOfProcesses
processes
get_UnicastAddresses
get_GatewayAddresses
DisallowDuplicates
StripQuotes
ResourceAttributes
FromMinutes
MemoryLoadBytes
AddBytes
SizeBeforeBytes
FragmentationAfterBytes
GetBytes
get_Queues
GetLogicalDrives
vmhgfs
securityfs
EncodeTags
wTypeFlags
GetMethodImplementationFlags
CSharpArgumentInfoFlags
CSharpBinderFlags
dwFlags
_flags
configs
Settings
settings
AssemblyLoadEventArgs
ResolveEventArgs
get_PassedPaths
set_PassedPaths
FindPaths
browserPaths
AddMonths
PropertyAnalysis
CountsOfThreadsProcessingUserCallbacks
get_Ticks
System.Threading.Tasks
get_Credentials
ClientCredentials
Equals
System.ServiceModel.Channels
ListOfPrograms
__3__tpwItems
System.Windows.Forms
GetTokens
domains
Contains
System.Web.Extensions
System.Text.RegularExpressions
System.Collections
StringSplitOptions
searchPatterns
patterns
get_Chars
get_OutgoingMessageHeaders
defenders
SystemConfigurationNameValueFileSectionHandlers
SystemDiagnosticsXmlWriterTraceListeners
scanners
RuntimeHelpers
dnlibDotNetTypeHelpers
installedBrowsers
GetBrowsers
browsers
SystemParameters
loginPairs
GetProcessors
get_IsAutoClass
FileAccess
RandomAccess
AssemblyBuilderAccess
success
GetCurrentProcess
GetDefaultIPv4Address
IPAddress
get_Address
GetProcAddress
EndpointAddress
address
NotInProgress
MinAcross
Brickbats
System.Net.Sockets
ZeroBits
PasteArguments
GetRuntimeEvents
CacheLineSeparatedCounts
counts
Supports
get_Exists
DomainExists
get_OperationalStatus
System.Windows
AddDays
arrays
Concat
AppendFormat
ImageFormat
TryFormat
Contract
Extract
IsCOMObject
ManagementBaseObject
hObject
ThreadPoolDequeueWorkObject
GetComInterfaceForObject
ManagementObject
cbKeyObject
pbKeyObject
object
Select
Unprotect
get_Product
System.Net
Target
MsgSendFpret
System.Collections.IEnumerator.Reset
GetUtcOffset
PadRight
get_Height
get_VirtualScreenHeight
TaskWait
set_RecursionLimit
remove_ProcessExit
cbSalt
PlatformDefault
GetValueOrDefault
pcbResult
IAsyncResult
FromResult
TimeZoneInfoResult
MessageBoxResult
__result
Write7BitEncodedInt
StringToInt
NativeVariant
MultiplyAddAdjacent
System.Management
XmlElement
get_DocumentElement
op_Decrement
dwIncrement
SqlStatement
Environment
WorkerThreadAdjustmentAdjustment
XmlDocument
NetworkInterfaceComponent
System.Collections.Generic.IEnumerator<Entity5>.get_Current
System.Collections.IEnumerator.get_Current
Content
IsLowSurrogateCodePoint
MoveNansToFront
get_Count
set_Count
get_SpinCount
set_MaxNameTableCharCount
get_SpinnerCount
IncrementWaiterCount
Interrupt
get_os_crypt
set_os_crypt
Decrypt
get_DateStart
TrimStart
Convert
TryGetExport
MaybeCast
IsWindowsVersionAtLeast
WebRequest
XmlNodeList
ToList
ReadOnlyArrayList
get_First
set_First
UnmanagedToManagedOut
set_Timeout
get_ReadTimeout
set_SendTimeout
set_CloseTimeout
set_ReceiveTimeout
get_CanTimeout
set_OpenTimeout
get_IsExplicitLayout
cbInput
pbInput
cbOutput
pbOutput
MoveNext
System.Text
get_Text
set_Text
get_InnerText
chiperText
ReadFileAsText
cbMacContext
pbMacContext
OperationContext
SynchronizationContext
PrivateImplementationDetailsStaticArrayInitTypeSizeu
dnlibDotNetPdbDssSymbolWriterImplu
SystemNetNetworkInformationSystemIPAddressInformationu
SystemDiagnosticsProcessWaitHandlev
SystemSecurityCryptographyXCertificatesXCertificateCollectionv
SystemTextRegularExpressionsCachedCodeEntryv
StartNew
SystemThreadingTasks_TaskDebugView
set_OffsetLow
get_Now
EnsuresOnThrow
kasdihbfpfduqw
MicrosoftWinNativeMethodsStructFormatw
get_Syntax
FindIndex
ConsoleLocaleIndex
rowIndex
MessageBox
OrderBy
get_TimeOfDay
GetNextDelay
display
Arg_Need3DArray
oldArray
InitializeArray
ToArray
FromBase64CharArray
ToCharArray
get_Key
OpenSubKey
chromeKey
stringKey
bMasterKey
hImportKey
RegistryKey
get_encrypted_key
set_encrypted_key
DoNotVerify
UnixFileStreamStrategy
System.Security.Cryptography
get_ReferencedAssembly
GetCallingAssembly
GetExecutingAssembly
get_AddressFamily
ILOnly
StaticMethodOnly
get_IsInitOnly
SelectMany
BlockCopy
entropy
LoadLibrary
SystemUriBuildery
CollectMemory
get_Factory
NoneViaFactory
TaskFactory
ChannelFactory
IClassFactory
get_Directory
baseDirectory
CreateDirectory
get_SystemDirectory
profilesDirectory
set_CurrentDirectory
Registry
SystemComponentModelDesignComponentChangingEventArgsy
op_Equality
op_Inequality
Latin1Utility
UnicodeUtility
get_NegativeInfinity
RoundToNegativeInfinity
System.ServiceModel.Security
System.Security
set_Security
NetTcpSecurity
get_Identity
AdditiveIdentity
CreateDnsIdentity
get_PreserveEventListenerObjectIdentity
EndpointIdentity
IsNullOrEmpty
pszProperty
dnlibDotNetPdbDssISymUnmanagedNamespacez
dnlibPEImageFileHeaderz
Confuser.Core 1.6.0+447341964f
System.Security.Permissions.SecurityPermissionAttribute, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
SkipVerification
WrapNonExceptionThrows
Nirtro CPU
Helps boost CPU
Nitro NO2
'NireoNO1 Corporation Copyright
2021
15.9.1.22
.NETFramework,Version=v4.0
FrameworkDisplayName
.NET Framework 4
Entity8T
Namespace
Entity
Entity9T
Namespace
Entity
Entity10T
Namespace
Entity
Entity11T
Namespace
Entity'
Entity12T
Namespace
Entity'
Entity13T
Namespace
Entity'
Entity14T
Namespace
Entity'
Entity15T
Namespace
Entity
Entity16T
Namespace
Entity'
Entity17T
Namespace
Entity&
Entity2T
Namespace
Entity
Entity1T
Namespace
Entity
Entity3T
Namespace
Entity&
Entity4T
Namespace
Entity
EntityTUwSystem.ServiceModel.SessionMode, System.ServiceModel, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
SessionMode
Entity5T
Namespace
Entity&
Entity7T
Namespace
Entity
LocalState
os_crypt
OsCrypt
encrypted_key$
_CorExeMain
mscoree.dll
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
<assemblyIdentity version="1.0.0.0" name="MyApplication.app"/>
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v2">
<security>
<requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3">
<requestedExecutionLevel level="asInvoker" uiAccess="false"/>
</requestedPrivileges>
</security>
</trustInfo>
</assembly>
autofillProfilesTotal of RAMVPEntity12N
AppData\Local\
[^\u0020-\u007F]UNKNOWN
Local State
ProcessId
%appdata%\
logins
{0}\FileZilla\recentservers.xml
MB or
\Windows\
user.config
{0}\FileZilla\sitemanager.xml
cookies.sqlite
\Program Files (x86)\
displayName
NameSELECT * FROM
\Program Data\
AFileSystemntivFileSystemirusPrFileSystemoduFileSystemct|AntiFileSystemSpyWFileSystemareProFileSystemduct|FireFileSystemwallProdFileSystemuct
DisplayVersion
%localappdata%\
LocalPrefs.json
%DSK_23%cookies
//settinString.Removeg[@name=\PasswString.Removeord\]/valuString.RemoveeROOT\SecurityCenter
ROOT\SecurityCenter2Web DataExtension Cookies
CommandLine
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall
Cookies
TotalVisibleMemorySize
Login Data
ID: v11
NumberOfCores
\Program Files\
name, Name: AppData\Roaming\ //settString.Replaceing[@name=\UString.Replacesername\]/vaString.Replaceluemoz_cookies
User Data
windows-1251, CommandLine:
DisplayName
NordVpn.exe*NoGetDirectoriesrd
 !"#$%&'()*+,-
./0123456
789:;<
>?@ABCD
IJKLMN
OPQRSTUVWX
YZ[\]^_
klmnopqrstuvwxyz{|}~
2a2eKa
RS#T$U'V4WDXGZJ[O\^]_
$,/6<BEKQ]jv
! $#&%/.2176<;=;A@DCbacadaeafagahaiajakalamanaoapaqarasatauavawaxayaza{a|a}a~a
3fffffff
11010100000001000001000100110111
111111111111111111111111111111
dd3a3dfe
ffffffff
4444046760
23345321736
110001
11101101111101000011111100010001
5473521757
tcp://
ocalhost
7051643991
cc6def1fd2f17a79e0a856
orization
CgwvWQA0HQ
4gPlEdNz
YzAQY0Kws1BCoAMVIvAisZNBs2LQNO
QsaXSsnElM0Ey0LHDUSHik3Fhg=
11001001111000100110000011111001
d61b15d9
101011000011010011011111100
11111000111001111111111001111
20072041431
24406432461
10011010100011101110011001111011
10000101111110110111100011011
37777777777
10101010000000110001100110
7fffffff
24036223613
11652405600
dd199830
a72aa741
400721577
34ff0058
VS_VERSION_INFO
VarFileInfo
Translation
StringFileInfo
000004b0
Comments
Helps boost CPU
CompanyName
FileDescription
Nirtro CPU
FileVersion
15.9.1.22
InternalName
Brickbats.exe
LegalCopyright
NireoNO1 Corporation Copyright
2021
LegalTrademarks
OriginalFilename
Brickbats.exe
ProductName
Nitro NO2
ProductVersion
15.9.1.22
Assembly Version
1.9.2.1440
Antivirus Signature
Bkav Clean
Lionic Trojan.Win32.Generic.4!c
Elastic malicious (high confidence)
DrWeb Clean
MicroWorld-eScan Clean
CMC Clean
CAT-QuickHeal Clean
ALYac Clean
Cylance Clean
VIPRE Clean
Sangfor Suspicious.Win32.Save.a
CrowdStrike win/malicious_confidence_90% (W)
BitDefender Clean
K7GW Spyware ( 005995c91 )
K7AntiVirus Spyware ( 005995c91 )
Arcabit Clean
BitDefenderTheta Gen:NN.ZemsilF.36250.lm0@aa@8Gun
VirIT Clean
Cyren W32/MSIL_Troj.CNJ.gen!Eldorado
Symantec ML.Attribute.HighConfidence
tehtris Generic.Malware
ESET-NOD32 a variant of MSIL/Spy.RedLine.A
APEX Malicious
Paloalto Clean
ClamAV Win.Packed.Lazy-9958163-0
Kaspersky UDS:Trojan-Spy.MSIL.Stealer.gen
Alibaba Clean
NANO-Antivirus Clean
ViRobot Clean
Tencent Trojan.MSIL.RedLine.kd
Sophos Mal/Generic-S
F-Secure Clean
Baidu Clean
Zillya Clean
TrendMicro Clean
McAfee-GW-Edition BehavesLike.Win32.Generic.cm
Trapmine Clean
FireEye Generic.mg.821823659183e8ca
Emsisoft Clean
Ikarus Trojan-Spy.RedLineStealer
Jiangmin Clean
Webroot Clean
Google Detected
Avira Clean
MAX Clean
Antiy-AVL Clean
Gridinsoft Ransom.Win32.STOP.dd!n
Xcitium Clean
Microsoft Trojan:MSIL/RedLineStealer.EM!MTB
SUPERAntiSpyware Clean
ZoneAlarm UDS:Trojan-Spy.MSIL.Stealer.gen
GData MSIL.Trojan-Stealer.Redline.G
Cynet Malicious (score: 100)
AhnLab-V3 Clean
Acronis suspicious
McAfee Artemis!821823659183
TACHYON Clean
DeepInstinct MALICIOUS
VBA32 Clean
Malwarebytes Trojan.MalPack
Panda Clean
Zoner Clean
TrendMicro-HouseCall Clean
Rising Spyware.RedLine!8.1309C (CLOUD)
Yandex Clean
SentinelOne Static AI - Suspicious PE
MaxSecure Trojan.Malware.300983.susgen
Fortinet Clean
AVG PWSX-gen [Trj]
Cybereason Clean
Avast PWSX-gen [Trj]
No IRMA results available.