Static | ZeroBOX

PE Compile Time

2023-08-24 21:19:29

PE Imphash

f34d5f2d4577ed6d9ceec516c1f5a744

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
VR)Xht^y 0x00002000 0x0002f238 0x0002f400 7.99905987106
.text 0x00032000 0x0000a290 0x0000a400 4.55440689218
.rsrc 0x0003e000 0x00000d00 0x00000e00 4.72167462763
.reloc 0x00040000 0x0000000c 0x00000200 0.0980041756627
0x00042000 0x00000010 0x00000200 0.142635768149

Resources

Name Offset Size Language Sub-language File type
RT_VERSION 0x0003e0a0 0x0000038c LANG_NEUTRAL SUBLANG_NEUTRAL PGP symmetric key encrypted data - Plaintext or unencrypted data
RT_MANIFEST 0x0003e42c 0x000008d3 LANG_NEUTRAL SUBLANG_NEUTRAL XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminators

Imports

Library mscoree.dll:
0x442000 _CorExeMain

!This program cannot be run in DOS mode.
VR)Xht^y8
`.rsrc
@.reloc
]kem'
vua8K7
o}=x8~
qodIfAq(HYx
@phT'S
%o<j+I
|} /@il
H^O7vapC,
iH6Bz93
6J5z>E
r-9SPR
4w]=\-
\2Q/(=
Ay'!:Lyt
""Tn=s-
2kDHh]E'
W_ywsh
k6Aucv
W Jl+~
FsF$pO
AiSLr8
]vF}x?
.Q;!A
`?V*y4fd|
![-ba&
<&o mR
3FR0bi
I{=(E+h
8Hf&!"Z
+=Y|0Dn
A9SY/2X
\f7Bd
;o'zeA
EU@@o9!
?7^(PcZ
Qv't%%
2zqY:%#}
jE|!`&}
)Fi\Ud.
l3E]&T
wsGL 4
hx0 (-F
j6_"exT}}>J'
=0p6jnd
w\\0}W
|eb_{:
rt^S59
r'40E
hgT<|l
V9/yO,
A:3=gF
bopl/;`
Tz5w'0N
HG1XN
MgDWSI
A#7Lx'
wSy;]~
'-['HM
L`z#_^
fI)@=Hy
"s/z$
GvBLt3
#[`|6W5
x+a+]j
x_v#(|RY@
XIp/b=
P]8\S^.;
u(LFn'
=bw6=Vi
LO?h}\
y`m#A2
idD5AGS
*{pFcue
otfL\7
L;33a$iCT
I(4X{s
zY0[fa
S*CyoH
%xwmKl
KZ~p5en
/tC$N*#{
(KiY?E+K
pmv2=a
s$-#}v
*@N,-^
:bf /!
WM$Ixm
&jF}7KT
Nvt:y\
[zzNua(
w\!8>1t
xol^\b
Ay2}4.
~&pKD-5
|*zjw&
;|z$^:
eJb:7{A
7&^v:y
|Tbo-5I
qrP8C!6
7e/PO<m
Q'QGsV
c0kOG+
[O?!C(
!+HJE}E
fhh]6&
0xy\8WpV/
H(aR.B
|vriNI
`o&@cA
H[WtVr
4z~/W:
S-)>9K8
'fW#I
~O>*S&
U|>+dp
HjxOa8
,Ps9@oG3=
m_6<@
{}lAJH
Ubj94-\
6%0 ((
;OT*Z56
-M:.CTm
g4Q5Rh.
!D`7e"
]A?Mf"
y^31U|
OR~V\x
"+_~!Z
@p$c47
#X=9|D9E
<y+:I2
.TJ=^bQ"
%9l&8l
P>^[`H
[RyOIN+
P/v^^DM
IZM;7f
cE9M7:g
m1__S_
WAu'`V
-Zkzz(K
Hu?/[8
L`*z#7*<i
WKP_f~w
S`oF>?
z4>TVY
kYfuC)
h.~T]B
yLg&_%
D 9qv#
@gI|1Z
7C3C.BM3
Uxi4sO
mK!-T&
M_RN&%
28J_uo
w 0F2=
A^Hne]L
H-|%g0
8q8mzT
$\KQ{@
p<Wm])
2LN}%p
v2=Jyo
zDB_;84R
v}~NT
Q6EQEcX]
V&D17&
$WXdn<)
n=w24
0-jU~A
zD%xEPh
4i-PjxK
2&uJM=O
T Ebrn
fbtJ9G
{obP)$}
S;~:rR?
flz|aA
.bzb!X"
^/x&aX
93Zz76`m
X+pAhA
,i:m81
=3Z?wC
|>B+I$
'yRSla4
f}\nhsn
56!}1`
4_7CSH
w7Oi5_e
wukZOb
z;Ew8a&
'Y`3nB
~?*%f"
rQZ]%/
giHh,{
`BH0Lu
_O":+5
M`wsA8
GB>_8{
/Pw@tt
-ftrU
?Vir$'
zxtTOK}
jJ1(c,7
1sD&wu
tvE_9rG
?:c;TLS
/W#Z%@
`rDGA
nLe)cHV
/aVVVI
3j5j-
qX[Lt@
{<At3$
+UK"qTd
EHmU8~)\X
Px|$?a
|T,gu_
sHuIh6
)]A5,Kn;
+IGBrws
\4H|P{
_Jfu}.
B;W %RR|w
zc6]cj
vk,&_'
wdrgVv
a)EZZP
t a,16
4?2)fF{:~
j7(:Sk
}6CP-C!
1gsC?tS
+"7p]VyY-
#K(Gdh
\?0k1KG
H0$d`fc
h/NMCQ
6TJ5<
:@;E=0
R',?&5
P 6o^)G
#6.p;KLE
^2}}i)
;~`{ZD
{AJ7%?D
7\,PUe
Vy%uS-XX
|51xv(
OB-8;m
D1/5WR^G6
\o;cX^
b8}p]m63
ui-X6nTR
D`]5O!<
d+7LNcX
Z?"jGw
w}d:K$
J=s!J|
\4b{rXR
\d,)sU
fE0J,(
sSX`$C
I`^<$i
n>)0yiw
WT&PyR
d2c-4B
9QEcMo>
Zz6{Qd;
X\q&AX
~yNSnt
McZI4M
*FWr@g
8UN6[V?
h4a!:?
EIUmT%
p6E( S'
yoq;vv`
fCc,e/fyg
i`KCrf
..\'gh
_<Q^#Qh
A!ZB+("=
+J&>BE+Zs
qoxj&a
@\Jqr2
5^G>ni
;k5}eE<
t$]oJt"
jiWx4^
dbS 26G
|,&;U'SH
3z OGH
fftG2z
~,<Y&6
h-~GRX=
yW*4kn
eDXTmY_>
9/ZJhX
/S8 L
qdOzD,L
>nB;`7
yag+~;
yUs9s8
|,&:_]T
O&`Z[}sG
W:l5@O>
3G^yba&Or>J
/|8?ZI
Ic)Cg4Q
GApJ!a
ITSXe{
2<UFpZ
bvs_;1F
nxH'}#
E#$F8j
^_S:}01
"|n,f,
C?~gF~
[lWoGzL
z32a5.
*}o,"/J
kH`1gh
SoDu3B
5pc7rA
Q.'um)
D@LoJd
*1A1^r=
Mw$4~%
(n"<5O
CsctQf
MM(m|@=Tl&
8Qap@e
lW5%h6
?q-4Wl5rl
TUXE/;
*)}(ssB
v/jj H
h!jSSCmRs
|@PWbqtQeT
7o0~,a=
K`j#PR7
6\V+Z
(vZ EB
_CorExeMain
mscoree.dll
v4.0.30319
#Strings
server1.exe
mscorlib
SuppressIldasmAttribute
System.Runtime.CompilerServices
<Module>
Assembly
System.Reflection
GCHandle
System.Runtime.InteropServices
ResolveEventArgs
System
.cctor
VirtualProtect
kernel32.dll
RuntimeFieldHandle
Module
Encoding
System.Text
AssemblyName
Stream
System.IO
MemoryStream
RuntimeTypeHandle
MethodInfo
MethodBase
Thread
System.Threading
ParameterizedThreadStart
ValueType
Object
ConfusedByAttribute
Attribute
server1
ComVisibleAttribute
AssemblyTrademarkAttribute
AssemblyCopyrightAttribute
TargetFrameworkAttribute
System.Runtime.Versioning
AssemblyFileVersionAttribute
GuidAttribute
AssemblyProductAttribute
DebuggableAttribute
System.Diagnostics
DebuggingModes
RuntimeCompatibilityAttribute
CompilationRelaxationsAttribute
AssemblyCompanyAttribute
AssemblyDescriptionAttribute
AssemblyTitleAttribute
STAThreadAttribute
server.Resources.resources
UInt32
GCHandleType
GetParameters
ParameterInfo
LoadModule
get_Target
ResolveSignature
AppDomain
get_CurrentDomain
ResolveEventHandler
add_AssemblyResolve
ResolveMethod
GetTypes
Invoke
Environment
String
IntPtr
op_Explicit
RuntimeHelpers
InitializeArray
GetExecutingAssembly
get_ManifestModule
get_UTF8
get_Name
get_FullName
ToUpperInvariant
GetBytes
Convert
ToBase64String
GetEntryAssembly
GetManifestResourceStream
get_Length
Buffer
BlockCopy
ReadByte
GetTypeFromHandle
GetMethod
Concat
Equals
FailFast
set_IsBackground
get_CurrentThread
Debugger
get_IsAttached
IsLogging
get_IsAlive
get_Module
Marshal
GetHINSTANCE
get_FullyQualifiedName
get_Chars
GetElementType
CreateInstance
GetString
Intern
op_Equality
ConfuserEx v1.0.0
server Inc
Copyright
2023 server Inc
.NETFramework,Version=v4.8
FrameworkDisplayName
.NET Framework 4.8
3.1.5.8
$cc7fad03-816e-432c-9b92-001f2d358586
server
WrapNonExceptionThrows
Important sys file
Sys server dependency
<?xml version="1.0" encoding="utf-8"?>
<asmv1:assembly manifestVersion="1.0" xmlns="urn:schemas-microsoft-com:asm.v1" xmlns:asmv1="urn:schemas-microsoft-com:asm.v1" xmlns:asmv2="urn:schemas-microsoft-com:asm.v2" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
<assemblyIdentity version="1.0.0.0" name="MyApplication.app"/>
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v2">
<security>
<requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3">
<!-- UAC Manifest Options
If you want to change the Windows User Account Control level replace the
requestedExecutionLevel node with one of the following.
<requestedExecutionLevel level="asInvoker" uiAccess="false" />
<requestedExecutionLevel level="requireAdministrator" uiAccess="false" />
<requestedExecutionLevel level="highestAvailable" uiAccess="false" />
Specifying requestedExecutionLevel node will disable file and registry virtualization.
If you want to utilize File and Registry Virtualization for backward
compatibility then delete the requestedExecutionLevel node.
-->
<requestedExecutionLevel level="asInvoker" uiAccess="false" />
</requestedPrivileges>
</security>
</trustInfo>
<compatibility xmlns="urn:schemas-microsoft-com:compatibility.v1">
<application>
<!-- A list of all Windows versions that this application is designed to work with. Windows will automatically select the most compatible environment.-->
<!-- If your application is designed to work with Windows 7, uncomment the following supportedOS node-->
<!--<supportedOS Id="{35138b9a-5d96-4fbd-8e2d-a2440225f93a}"/>-->
</application>
</compatibility>
<!-- Enable themes for Windows common controls and dialogs (Windows XP and later) -->
<!-- <dependency>
<dependentAssembly>
<assemblyIdentity
type="win32"
name="Microsoft.Windows.Common-Controls"
version="6.0.0.0"
processorArchitecture="*"
publicKeyToken="6595b64144ccf1df"
language="*"
/>
</dependentAssembly>
</dependency>-->
</asmv1:assembly>
@{?@{?
VS_VERSION_INFO
VarFileInfo
Translation
StringFileInfo
000004b0
Comments
Important sys file
CompanyName
server Inc
FileDescription
Sys server dependency
FileVersion
3.1.5.8
InternalName
server1.exe
LegalCopyright
Copyright
2023 server Inc
LegalTrademarks
server Inc
OriginalFilename
server1.exe
ProductName
server
ProductVersion
3.1.5.8
Assembly Version
4.3.8.9
No antivirus signatures available.
No IRMA results available.