Static | ZeroBOX

PE Compile Time

2023-08-23 08:38:44

PE Imphash

f34d5f2d4577ed6d9ceec516c1f5a744

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
\x0cZ\x7f$9O}` 0x00002000 0x00034468 0x00034600 7.99908247119
.text 0x00038000 0x0000a2e0 0x0000a400 4.56541243063
.rsrc 0x00044000 0x00019398 0x00019400 2.63053252135
.reloc 0x0005e000 0x0000000c 0x00000200 0.0776331623432
0x00060000 0x00000010 0x00000200 0.122275881259

Resources

Name Offset Size Language Sub-language File type
RT_ICON 0x0005c290 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x0005c290 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x0005c290 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x0005c290 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x0005c290 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_GROUP_ICON 0x0005c6f8 0x0000004c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_VERSION 0x0005c744 0x00000380 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_MANIFEST 0x0005cac4 0x000008d3 LANG_NEUTRAL SUBLANG_NEUTRAL XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminators

Imports

Library mscoree.dll:
0x460000 _CorExeMain

!This program cannot be run in DOS mode.
$9O}`hD
`.rsrc
@.reloc
'pUQ'mX1Y
{L-i#q
(E2xm/ur
4CE&?%`
M+LJc"NI
:`4j7n
I5c$7A
,0wCpg
34F6{6RU
;S\Svd[
R{u=v`F
(7e6?K
>bun2
=5M@Hf
i1)P1
\'ew,S!
^Zx^6S|
3a1#^=
rHd'|h
P4TdqX
lV~Cq<s
?V7)ck
`p2jGxq
er+y0C
TJ{@}o
yq.Y8^]
.U*p*N
T%JR>E
nr=;E}
)UJr=^S3
o\e_
HMvWwE@p
Ccc,EvH
@'=5$`
w`+fpDZG
5$Ll"D
6PI6Pb
b#c=WZ
IWcxnz
{szDiac
-eVMc$>X
F.6JONn
DS./@;
~#-|b/X
~aZC:$`&[
U'E2%E
.UgdRN,
-OZktmm
>596"6
5kmacx(U
H,9i>B-
8'z\+>
IL_'k*:
U,~\WJR6v
M3S 6k
TewW"9Nk
;D`=ud
i$U|us
p<-\"J
Voo`Am
^D).wU
,jmJ/Q
zBgMCN
BU")(I
v)$CmD
mL(y=x
nocN\/
?@P;k*wo
R{oUV_$x
.`]1I`
vc~[Zgk
/,>5"%Q
g3|iQ
A~lDjD
McmM&tX
0*C)8uI
`*?UHn
gsD~0#7
IxJ/4.{j
|,h,6d
.au@}[
l8+O};
XWsg}$-
C5y&'&[w
m4fBL(
13R:_|
pUvF`u
]{3~8%
zGx9+-
_r1Bd57s
gLhW>
Y l+~js7
d0OY^=1
W26S=
lQC iU1sG
<C4jiy01
D5,!P^
-EDtQu
lh;AX(
vY1x]%
uaXcYP
,m9D/]
#E &>-R[
j(S{~Y[
sI*i9O
'&4&:
FXvl29
l+mc"T
GkJD,B
dR.#K[
sfOXn?
sB1o)9
"Wg]UK
MIad<F)
?t9klUr@
&)wCH_q
NCho*,
1[7~$vR
hmTI2c
3TGnc5{@
E]D<Z{S
OR)2jD
M~{q\A
"'*|uL
ZB<2AB&
Xaf}$!>
Q7b5P&b
BDVlH%z
Pa'Vo0
2$u= =
28,.8k
R[dTaux
_X$623
<$ryFh
A2]0J?
I2R"U c
j_,gxe
n;^rQ_
fe[ (]m
C4NZ0r
owoT\o
1{ j=b`
k[Nao
iF'ew%
VYDgZ~{
Jr)I:K
B Y,#Q
<)Hm[np
J(vX;S
C"MC9H
3B_-!@Zp
riR5;?
e{]93
'!Iu|g
=@V0Wlw
vD^Ccy
rFecAk
`T_We.[
[v(-JYl
elo"O!
&|8._yq
9"b;yA
4y$OZy
,%-RV2_BbcC
]Vdvx,4
PnReW
]X8O}:
[?.z^.
J9q50")&Yly
Xe}lrC!
E|@%K7
A[HG_G
F./eip
~Nbjlw4
V%>!C_
$tRBY$}
*<T/kB
1_OWbTF
&SmYjp@
&(ki^>
U]^Qo5
VQ;+^n>
Hcjs]2
.,Zccf
hzI J&
0k=9lDsQ
k"<9X"
_jC:vy
El=6#Q
S4[|z,i
L.'nD9I5
[_`}-m
*'zFfA
`{6:y6
~d=JQLm
%J[*.)
|)USn6o
Y+w$Gh|F
{Py4h8h
/q=&3K
P@$Ae9
bQF#yUI`D
1devcM
/H{ig?
,xXYG{l
<f IG@`
V^qMG"
A;}v+iZ
2_fwE@s
3./H`e
CMF'aKzd
Zf%\|h
ZFO\~3
`5?\B')
Ae9)9.
m)EC7B
_m%]Hk
oyI\Vwma3?
jl6FWPS
[j?G=F
JH,m\yv
Gh^&<^Wqq
+^H;%@
a2ke0CB
x-uz'FB
vSc+NE
5%<~F@
ATTL"#
&j"5W.
T)v^O*@
P6(Po 2mN
vK*DdR
4Lcmq&
y.]bB,
8H5Rq^u
)d;("[{
Cpq|"{
/)9hl|3DWW
'cirJw
&t7]&!
c=7rC
"Apd#AW
Cj]b%t~
TCl*$D#
-S6V<t
W"2A;v
eCIs.x
:.OOTh
YJCEwS
_];SKD
:Yhxub
hF`h&F
AO[R[K
qtX32bm
Pa;j1
=S|}Wf0
jiMQlR
4jB"p]:x?
((tWy;
/\:S}k
="a*ta
{@EUH5
f,IFjv
IVp,j8i
K&J9#:5
t"o zOfZ
-ad(1I
CR8q1ra
DYw3j%
T"h,:/g
kW2=r'
{qn2|oU
s-r1ZCG
zY~-c\
CvT7/V
~oN"L+*i
gg],\W
qKwB8(
Shi$dY
~V&>7}
+Rj3B
T_;A?k%~
L*b"W[
sL$SI--
+Gr~,P
u-N?m'
hgUkv>
R^,k[(
'fLvP!
}n4}5@
7NhD_++
(v3;)f
a@__}Jn
k/!@:qH
O|0-T3
DaJNv1
B~/n!
:7=I8s
<YfK2t
QjW {EJ
I}YrRF
M|UDUD'
$-ijIu
*EWMM@
#g2:"'
vPq%M*
Yf;U,g
EF&91'X
98hclv
;]$yw,
h/O<~;
#=^EG
0$+a4k
|Izwqh8
@&{T}Az
x="23n
X;@Mw
@1;b8q
$}7#Ul
k&y(5f>
dd*s-&6
<S~Ee|@j
FOeoF&
9z+B|`$
m.gC=X
P/"&<2
R4y6}r
5vR{Hk
PVc*J_[
0)S{9z
snh#@2U
.*sLB7
L*$]Io
j@K*ln
'~iGwy{
<!Q^`'
*P'Lhu
WAl.;V-i
tg}C&8
8ytGZ[
!o;cR`
`f_Ef-H
'wsNh\
d Qsr
OIesVl
do v{\
8OTn*i#h
xW,*'Q
`ewVWY
P:|q{Y\
HF0hU/
YP:i-^>
+09/jB
+pz;+F,
B5e+Q
"e`myu
$PWyIw1
"=V~Du
7nt3DU
PEF+$5y
ltIm(n
BjBO^i
^[gr)x)
3ezvq[K
?\2,,[
])B`q(
O,xxwx
]Nn/Ho0
3^X^B}
_coh[H
1iBeK'
5>j#p>h
@zc%1[@Y
"`VS{)}
muq+QtGk#-
Gi/+*w
btSjuW3
3(Gza%
Mk}%&8
pqpa8d
{.1a82
"(+Z w
)TDV%&
^MN@8
_CorExeMain
mscoree.dll
v4.0.30319
#Strings
server1.exe
mscorlib
SuppressIldasmAttribute
System.Runtime.CompilerServices
<Module>
Assembly
System.Reflection
GCHandle
System.Runtime.InteropServices
ResolveEventArgs
System
.cctor
VirtualProtect
kernel32.dll
RuntimeFieldHandle
Module
Encoding
System.Text
AssemblyName
Stream
System.IO
MemoryStream
RuntimeTypeHandle
MethodInfo
MethodBase
Thread
System.Threading
ParameterizedThreadStart
ValueType
Object
ConfusedByAttribute
Attribute
server1
ComVisibleAttribute
AssemblyTrademarkAttribute
AssemblyCopyrightAttribute
TargetFrameworkAttribute
System.Runtime.Versioning
AssemblyFileVersionAttribute
GuidAttribute
AssemblyProductAttribute
DebuggableAttribute
System.Diagnostics
DebuggingModes
RuntimeCompatibilityAttribute
CompilationRelaxationsAttribute
AssemblyCompanyAttribute
AssemblyDescriptionAttribute
AssemblyTitleAttribute
STAThreadAttribute
server.Resources.resources
UInt32
GCHandleType
Invoke
ResolveMethod
GetParameters
ParameterInfo
LoadModule
GetTypes
AppDomain
get_CurrentDomain
ResolveEventHandler
add_AssemblyResolve
ResolveSignature
get_Target
String
Environment
IntPtr
op_Explicit
RuntimeHelpers
InitializeArray
GetExecutingAssembly
get_ManifestModule
get_UTF8
get_Name
get_FullName
ToUpperInvariant
GetBytes
Convert
ToBase64String
GetEntryAssembly
GetManifestResourceStream
get_Length
Buffer
BlockCopy
ReadByte
GetTypeFromHandle
GetMethod
Concat
Equals
FailFast
set_IsBackground
get_CurrentThread
Debugger
get_IsAttached
IsLogging
get_IsAlive
get_Module
Marshal
GetHINSTANCE
get_FullyQualifiedName
get_Chars
GetElementType
CreateInstance
GetString
Intern
op_Equality
ConfuserEx v1.0.0
server Inc
Copyright
2023 server Inc
.NETFramework,Version=v4.8
FrameworkDisplayName
.NET Framework 4.8
2.1.5.8
$cc7fad03-816e-432c-9b92-001f2d358586
server
WrapNonExceptionThrows
Important sys file
server sys file
<?xml version="1.0" encoding="utf-8"?>
<asmv1:assembly manifestVersion="1.0" xmlns="urn:schemas-microsoft-com:asm.v1" xmlns:asmv1="urn:schemas-microsoft-com:asm.v1" xmlns:asmv2="urn:schemas-microsoft-com:asm.v2" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
<assemblyIdentity version="1.0.0.0" name="MyApplication.app"/>
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v2">
<security>
<requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3">
<!-- UAC Manifest Options
If you want to change the Windows User Account Control level replace the
requestedExecutionLevel node with one of the following.
<requestedExecutionLevel level="asInvoker" uiAccess="false" />
<requestedExecutionLevel level="requireAdministrator" uiAccess="false" />
<requestedExecutionLevel level="highestAvailable" uiAccess="false" />
Specifying requestedExecutionLevel node will disable file and registry virtualization.
If you want to utilize File and Registry Virtualization for backward
compatibility then delete the requestedExecutionLevel node.
-->
<requestedExecutionLevel level="asInvoker" uiAccess="false" />
</requestedPrivileges>
</security>
</trustInfo>
<compatibility xmlns="urn:schemas-microsoft-com:compatibility.v1">
<application>
<!-- A list of all Windows versions that this application is designed to work with. Windows will automatically select the most compatible environment.-->
<!-- If your application is designed to work with Windows 7, uncomment the following supportedOS node-->
<!--<supportedOS Id="{35138b9a-5d96-4fbd-8e2d-a2440225f93a}"/>-->
</application>
</compatibility>
<!-- Enable themes for Windows common controls and dialogs (Windows XP and later) -->
<!-- <dependency>
<dependentAssembly>
<assemblyIdentity
type="win32"
name="Microsoft.Windows.Common-Controls"
version="6.0.0.0"
processorArchitecture="*"
publicKeyToken="6595b64144ccf1df"
language="*"
/>
</dependentAssembly>
</dependency>-->
</asmv1:assembly>
@{?@{?
VS_VERSION_INFO
VarFileInfo
Translation
StringFileInfo
000004b0
Comments
Important sys file
CompanyName
server Inc
FileDescription
server sys file
FileVersion
2.1.5.8
InternalName
server1.exe
LegalCopyright
Copyright
2023 server Inc
LegalTrademarks
server Inc
OriginalFilename
server1.exe
ProductName
server
ProductVersion
2.1.5.8
Assembly Version
3.3.8.9
No antivirus signatures available.
No IRMA results available.