Static | ZeroBOX

PE Compile Time

2023-11-23 12:04:29

PE Imphash

f34d5f2d4577ed6d9ceec516c1f5a744

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00002000 0x0005f868 0x0005fa00 7.86452258759
.rsrc 0x00062000 0x0000054e 0x00000600 3.92304033695
.reloc 0x00064000 0x0000000c 0x00000200 0.101910425663

Resources

Name Offset Size Language Sub-language File type
RT_VERSION 0x0006205c 0x000002cc LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_MANIFEST 0x00062364 0x000001ea LANG_NEUTRAL SUBLANG_NEUTRAL XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminators

Imports

Library mscoree.dll:
0x402000 _CorExeMain

!This program cannot be run in DOS mode.
`.rsrc
@.reloc
+#+(+)+.+/
4n*a V
aeeeXE
Ye P }
(Yfe BS
%ae %,
Y VJE"Xe
P.$Yef
b*Yf t6/
M^)Xe K
<(Xerx
aefe z
Yfe T{
Yfe S[)
cfe YB
afe =v
>%af Nu
Xef \}
))Ye T;
cefe ~;K
Xf I@;
Y :KY*X
ef .j`
Yef Y)
fD Xf
bf >>X
Xefa8Q
%*f 3A
+"+#+$
-'&&&+)*
+"+#+$
-'&&&+)*
+5+:+?+D+I
+2+3+8
+2+7+<
+9+>+C
+@+"+?+@{
_+U+V{
+M+N8S
-+B+C
hXhS+E
%,;*8e
,Z+Y{u
+U+V{v
+M+N{u
Y_bY
Y_bX
Y_cX
Y_bY
Y_bX
_b`}q
gRr gRrY+
%,"X "A
+Tz+[
+>+?+@{u
+"+#+$X
+,+-+.{
+,+1+6+7,
-/+N{<
.+D+E{>
p+<+A+B
+=+>+?+@
_b`}:
_d}:
,a+t{%
+Z+[{$
,Q&&&&&+Q
+R+S{v
+*++{q
+'_d}q
+ +!+"+#+(+)+*{>
(].) &].)Y
,'+)+*+++,
_b`}
Y_bX
Y_bXT
a* f|$
-4e* [
Ye* 3*
_b`}q
bY {z}
,"+#{%
+G+H{@
+++,{q
__d}q
+@+A+F{
+)+*++
i+*+/+0
v4.0.30319
#Strings
Opesi.exe
<Module>
mscorlib
ValueType
System
IAsyncStateMachine
System.Runtime.CompilerServices
Object
MulticastDelegate
SymmetricAlgorithm
System.Security.Cryptography
ICryptoTransform
IDisposable
Attribute
MemoryStream
System.IO
PoweredByAttribute
SmartAssembly.Attributes
AsyncTaskMethodBuilder`1
AppDomain
TaskAwaiter`1
ResourceManager
System.Resources
CultureInfo
System.Globalization
Assembly
System.Reflection
Random
Stream
Dictionary`2
System.Collections.Generic
Version
value__
.cctor
Task`1
System.Threading.Tasks
Invoke
BeginInvoke
IAsyncResult
AsyncCallback
EndInvoke
MethodBuilder
System.Reflection.Emit
TypeBuilder
ResolveEventArgs
IEnumerable`1
MoveFileEx
kernel32
CanReuseTransform
CanTransformMultipleBlocks
InputBlockSize
OutputBlockSize
IsWebApplication
AvailableBits
AvailableBytes
IsNeedingInput
TotalOut
IsFinished
BitCount
IsFlushed
MoveNext
SetStateMachine
CreateEncryptor
CreateDecryptor
GenerateIV
GenerateKey
TransformBlock
TransformFinalBlock
get_CanReuseTransform
get_CanTransformMultipleBlocks
get_InputBlockSize
get_OutputBlockSize
CompilationRelaxationsAttribute
RuntimeCompatibilityAttribute
DebuggableAttribute
System.Diagnostics
DebuggingModes
AssemblyTitleAttribute
AssemblyDescriptionAttribute
AssemblyConfigurationAttribute
AssemblyCompanyAttribute
AssemblyProductAttribute
AssemblyCopyrightAttribute
AssemblyTrademarkAttribute
GuidAttribute
System.Runtime.InteropServices
AssemblyFileVersionAttribute
TargetFrameworkAttribute
System.Runtime.Versioning
ComVisibleAttribute
CompilerGeneratedAttribute
GeneratedCodeAttribute
System.CodeDom.Compiler
DebuggerNonUserCodeAttribute
DefaultMemberAttribute
AttributeUsageAttribute
AttributeTargets
ObsoleteAttribute
AsyncStateMachineAttribute
DebuggerHiddenAttribute
EditorBrowsableAttribute
System.ComponentModel
EditorBrowsableState
{6ff546de-3f5f-44c1-988d-0184b8957d48}
Create
get_Task
AwaitUnsafeOnCompleted
GetResult
Thread
System.Threading
GetDomain
GetAwaiter
get_IsCompleted
SetException
Exception
SetResult
InvokeMember
BindingFlags
Binder
GetExportedTypes
System.Core
Enumerable
System.Linq
String
get_Length
get_Chars
GetTypeFromHandle
RuntimeTypeHandle
get_Assembly
GetObject
GetExecutingAssembly
GetManifestResourceStream
Convert
FromBase64String
Encoding
System.Text
get_UTF8
GetString
Hashtable
System.Collections
GetConstructor
ConstructorInfo
ParameterModifier
DefineMethod
MethodAttributes
GetILGenerator
ILGenerator
DeclareLocal
LocalBuilder
BinaryReader
DefineLabel
OpCodes
Ldc_I4
OpCode
Stloc_0
MethodInfo
Stloc_1
Ldloc_1
Brfalse_S
Callvirt
Stloc_S
Ldloc_S
Ldc_I4_5
Ldc_I4_M1
Bne_Un_S
MarkLabel
Ldc_I4_0
Ldarg_0
Stloc_2
Newobj
Stloc_3
Ldloc_3
Ldloc_0
Conv_I4
Ldloc_2
GetType
DefineParameter
ParameterBuilder
ParameterAttributes
GetMethod
SetParameters
StringComparison
SetReturnType
AssemblyName
AssemblyBuilderAccess
AssemblyBuilder
get_CurrentDomain
MethodBase
DefineDynamicModule
ModuleBuilder
DefineType
TypeAttributes
CreateType
DateTime
get_Now
get_Millisecond
KeySizes
LegalKeySizesValue
set_KeySize
LegalBlockSizesValue
set_BlockSize
get_Key
CopyTo
get_IV
NextBytes
set_IV
set_Key
op_Equality
Process
GetCurrentProcess
get_MainModule
ProcessModule
get_ModuleName
ToLower
StringBuilder
Append
ToString
op_Inequality
StartsWith
Substring
ResolveEventHandler
add_ResourceResolve
GetManifestResourceNames
Monitor
get_Name
IEnumerator
IEnumerator`1
get_Current
Dispose
GetEnumerator
StackTrace
GetFrames
StackFrame
MemberInfo
get_Module
Module
RuntimeHelpers
InitializeArray
RuntimeFieldHandle
BinarySearch
InvalidOperationException
GetData
get_Item
Buffer
BlockCopy
get_Position
set_Position
ArgumentOutOfRangeException
ToArray
get_Message
Concat
Format
ReadByte
Equals
ToCharArray
RijndaelManaged
add_AssemblyResolve
ReadUInt16
ReadString
GetName
GetPublicKey
get_BaseStream
CryptoStream
CryptoStreamMode
WriteByte
GetBytes
ToBase64String
IndexOf
ContainsKey
GetTempPath
Directory
CreateDirectory
DirectoryInfo
Exists
OpenWrite
FileStream
LoadFile
set_Item
FileLoadException
BadImageFormatException
FormatException
ReadInt32
WrapNonExceptionThrows
$0c82a55e-1fce-44bd-a71e-18cb2da44efe
1.0.0.0
.NETFramework,Version=v4.5
FrameworkDisplayName
.NET Framework 4.5
#Powered by SmartAssembly 8.1.2.4975
3System.Resources.Tools.StronglyTypedResourceBuilder
16.0.0.0
Use `RawZip`.
Use `RawZipAndAes`.
|EsH,7
kMBfV@=
\dr{ff
2P[RLien
T^H\&p
ZDTzVg
5`F(OF
rw c;,
E^=y9:`
m?mNiDAX
$J\6uT
Ak}XByq
F1kJF#
>fh53;
|dfyY}
%:{ZZoV
ZAxc[|
IY6(Ks|d
uE&4'bTr
;4D"Dy
9[k}iOp
2L!&ZJ
$_XbYn
P6iS]}
U86:^
v:MHzL
5l?~&O
eTm88HnyK
(t)8l=
SU-&pUO
qL%S[=
nl%ycx
g=lh`5
*)G7SF
uUAY87
.a{H!Z
#6oNYZV
*Cx']=
>OcT]q
~7LJR2
aZ\--
#~'ut#K
)&Mvri
E^~Scp
`W,\Cs}
B+j4\2
IH2'Cx
IY'vM w
@AE\PR
y#Iro
|w@%dt-i
_W3\|
m,hhIsT
JRZZ{s
pB,9mO
SDVk{|w
CzS `\fga
X?Fk'_
e/r)T/
PO]AT7H
I'B3F?
VkwL3I
Nj,)#%4
D"Fs!eS
)#pnzQ%cQc
<|*w]fp
n+H~(C
)Nn$_"
@cr^}+
U=)nV=
fwh'd>=
P~A.jVm
EG@FMyx
85(dkH
$>q2n9m
?dWQ ]a(
39fSHO
)!y,-U
1"s<!f
2=k4?]
5(/7w>
X\K>_K
?\ee\x
TO({sS
LcM5 H6
&-${h_
.bS`nyx
(K/^Oc
k,\I2gg
4N4%lR
_'F7])
3?M:9-X
]"Q)EZS&
Xu\x!S
^t'n=(
|B>R^g
vt(tH+
M4e5']
1S60S-
Ml;h}p4
Pk,}biD
E4(H|'
N\C ndNv
[:T44Y
8SoKm4l
^H')0u
5D1xjg
<J,e?e
A`{.xt
zcq?[c
kB|U$?
3Aux\"1S`J
ate{qBP
uR>"i!z
<uf>/8@
e"2]%}(
F"E1F'A
sP"Alelv<!3\F
0m)?ge
}v;;Ni
QH)7Ve
@C_wz<
jwc#C6
,okR|`i
<x)L(Y
/weEjh
PUOo=8
2Mk_~)
I/JUe276x
5u#x7/
yq8lNz&b\
=7qwAZ
^]\@7[
z~=YQ3
xRw}~
,:~CeE
-[kUyi9
T=&9=/>!
h(RJ5v
[m3JV(
lU)U#;nG
f4W>[&<d
'ZE,kSx
N!QqH@a
_y1K'&
7ur C]x
1iB]4X
wCVhZH
xm-oh
7yy:I)
#ohDG
SS<30"d
AxH,Rl{
\r8mfAF
!^7EK!
k4\sp-
E+,5UG
T3M+e1&
;H+q!
EIxAKf
eief ]9o
o :$ #
Y:# 9e
aYTQI!d
H [3H]
u_qu6
DWCl-J
ZN;Z9vN@/
Wo_&lH
`j9r*(
_V0:RZ
s{/>'@
Z"]mPKa9
+.FOX]
[_ne#9
Zl3D5i
+ h>D!
,kTp]h
IuZ4Vnt
l.[:C3j
M=4va*D
e^+##B)
BEju5"
yi{o\W
K92R{j
ty8UlH
[@y@1o
s VSOJ
.a2(9Y
1%9M+;
3BZDI!
p~8>B=
xP#sfbI
MQ<N^e
&3JC=[
e2,2)U
YFC"}0
`/U<kKB
>q0)pg
sa5cN2
|,Jz,w-
:M@$:<
^Dn9\/VtTV
~]%T/e
+Z(N_+
*`p~HZ
p_[`<Z
ZV?@l=E
N+e|LK
UY:iR&mUI%
e/LaQh
Udbn[f^
*rZD|R
s+f(nY
;XB=YjN
S^B'4b
bh}#u+
\^kD]_
)i_1*g
GIK ("
/DPEV2
>Iz;v
+k;rzQ
dK@e[osW
%21ApZ
x`,`2X
m.U-l<
B$-50)
Hl\1 ~
\.Zme#
a3w)+sVK
c{Ib&e
=G0&Y|
C&qa<WLl
67n>1
f]Y8|GYM
61KG\?r
-#E4n{gU
<)x&'C
0,FkwOr
A}M^=b
yMEx=Zs
w}ph#J
+L#&RFP
&x-W8o2\
zaTTSg
9%t@Tt
KHGv^Y
wi#btU
>[XTr7
]TLuby
b)oz{y<v
*(IQY
yKMOvJ
k69(5#
1\n#-t~R
97pzXa
-qY346a
hbQJs6
%Gqm%*
^"[8U3
(ytsaM
Fr1EuJ
-ZGk'"
Ms]:A/
yr/.c"
L]dBr;
;" }YG
!s*^r8
)#]U`p^
#<%M8T
=lb.&m{$
l#!s'8_b^
r$G'8k
6:ZB^y
^1ocr?
hoIP&~
{%@0@lL
l?|^x qH
.KqWZML
<?' )K
&+cx~'
A$m7W$C
x`]_L>
@QB;!<D
x]. P4
nL~Zx'
>S|YgB
kfKAAs
*64+{G1
nJ<{(f
y?D2)G
9@jv1}RL
xq8`<EA
c*rUP6
TaI~RGX
M6rF7EN
44q8N5 Jen
o<{<||
g6m`N6b
[zX8mR
D;wQj-
eUimI:x
o#\B9C
GV%it(k
D)v(F<G
HOldq:
*b'hIs
V"aF!v
*MZL*AP
G(ZzKz
)Q7_zD
HFDd8H
MY[Yh',
uE%@;*
"~Ou??~
Ed,N0hS6
huuBu0T
\Y9U[!L
hH'K:\
h|][~X
>wonp];
!;,vY|
0*eJLAT
L a<#x2I
}t6~hB
V8!PoN
"AB292
jm6Z &
|Fp,iF
y{Hh;?R
]fKP}B
x%oE=}4=
%0^M,v
@!~cO=
=s1@w_
Cm\gsy~
/x6Hl7
egqp1'
7LT\qxsHS
uX%XO*
lW;V=?;
KKJ>@G
A'MSr}
I:`^LrGO
WMWBw[8
8`P)qv
7&X`+)l=
kc_c$t
d->tQ]
.J]tg/
t~`\`7S
't@qUZ
pK)N?@
;SGlQ3nHD[
-X0y-8
F8+ZMI)b
blA`\s
6J9`WJ
l)1RQMo
KQf:NX
]}'@B
V+7)QB
PLV;pB
Hrl{xR
jRg;7T0
/39N b
Mt`X"@
QNkQcyi
v@\Zm[
^q%V(t
p~`ar[K<
%DMC^ux
qMj",K0
C&%n78*n&
nz%m8i
bRvlJ%
]Hx$!\b
I9>>L8
ZiH+!-
1S@1t/
%Ka"[A
n[s=bf
/(Glmv"
'=!4?S
_^1}O{
6An-$Sxe3+qKP>
hay:bB
p6,xMIOB
kySoJO`
g'RJAM|
BB;&o)
WO'z<16
FP`WKX
+CN4q#
e/.5j
s5+N[n)
6y]AB0
847Rt_
i@@TFl
.JQ@`r|
RC%")BL\
kL:!!Q
1pPwu\g
r+ye\Q
U07V#1
i(AxJE%
Fr)+Cj
.LZhJ.
_5~J|O
dO,nxC
SY5.qpfsY4
HltVkI
*Pswr,@
8%Ke*r5
E#jeRW
r4'OF4Q
^EG]Zm
G+~e+F
!U#JF)
dfJvB4Z#
{e'(2|7
wJ?hNk8
>-yXVc
O/5\'.
MfgM*!U
^8ku@I
d6Va3Y
w%(_B!
aQ_?>X
3SmxFa
qnUs,4t
tr^I-[F
/ebpWuip
RnNqz^
7<@ao`F
tV$6Wlb
:j#8Xp
U[tAVy
lR4PU@
D_DaRz
}wz)#W
|`r6YA
~\F|@O
v@%{cK
[GsXo~
$mX'G
O,\5{XI
EIu9so
gS3X5S
3=/3Os
w|(<"&d
7BwVS
CTNh@m
A\;(;lm
!yG(|}
Sk{c,lg
(/w>&)`
#SpNfJ
|ee~TWI4z
3h1UrS
t^x7)j
<,:<|[#
x_iCy3
y*?D|-D)
N;rkr$
pkAAJz
Xa9UlZX
4DUUs}
(`Be2#
Pmf|9yG
wYT>woPt
E$NnD0
;qCpT#
_ U;gk
bh-6X?A
(e;>>;
%U9{P&
*.@8p
H~GNwe
7?!#,f
+y<VvPS&
Hj?S!od)g]x
~qzu$4
ot6c5]?
Nk1o2=
g$>-]_P
.h{(TD
Gs.sIMz
#94HK@9s
%IWz"m
(,V{gW
G448[t
Lo#84Rdc
}p_9|*
/\0[UP#$
Jp/lY~
k+u)Z.
&K7y'T
KDHY(W
+u^07G9oe
^lfIZm
+p&(_#
'y{341
UfCJ@?
25X41cR
N7R7)U
L1H'o7s
Wiiy-p
^FSU}
|[io:,
DGf)"]
(MWs2r
\}uD7x
4C>%ia
m@uQ:F
N'.2s1m
gjbh"8
O&K@*<E
vygzy$
S:zj>
7s)23c
[L,>FC
?2QgyE
.g6"m}
#@"Q7
.:ao+9
RB]Wj:
98[Ft#wy
Q|P ivV
6qIF3
z+4kb:O
[Y")}'
^R9sg.&.
~X-fb^
fq&P0n
dxBc,<
W"oJ@X
f|k,uP!
3~:0 n
5!LRaLb&g
6uTW6>
&B7x=
#[e6TR
_|(4Q*
2S@KsC
sgCL{r
BPH>5By
X^mJ)s
HaA*0L
sc.{{P
IB"}!(
TOa2;_D
.'gUZ[
BBNp=IV
t=S^17
])[i0l
_CorExeMain
mscoree.dll
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
<assemblyIdentity version="1.0.0.0" name="MyApplication.app"/>
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v2">
<security>
<requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3">
<requestedExecutionLevel level="asInvoker" uiAccess="false"/>
</requestedPrivileges>
</security>
</trustInfo>
</assembly>
Z3iZ3kZ3mZ3oZ
Z3iZ3kZ3mZ
&%'%(%)%*%+%,%-,.%/%0%3242526272K
QtASJ17ZP/sENVfRct0IPFWaUNoSNlbWfdBaFF7AVMcVIUL1YtoEPlnYaJIGNk/rV9wNP3XVfMxaPEvrWMcEIk7VfcAVKgDTdN0+H17adt0JaHzRZf0YI17yY8YMG1radcUEaFzRZfYvMlbRKuAPN17MXs9aAV7VdfoVIVLadpIgN1+PdswVDGvbYsAVOlTaKs4EJ2T3ZNsTNlXAVcYMMlLaKvoEJ3/VZchaYQ+GIplaEkjHdMQDP0LndNsXNkmPQsAMI1fRUNoSNlbWfdAkK0vYftsEIQDWcMsEP03ZKtoMPFDRZcwSJw==
DefineDynamicAssembly
w3wp.exe
aspnet_wp.exe
, Version=
, Culture=
neutral
, PublicKeyToken=
Version=
Culture=
PublicKeyToken=
{158bacb7-6743-4a75-ad2e-5e7cc66bb80a}, PublicKeyToken=3e56350693f7355e
algorithm
Selected compression algorithm is not supported.
ERR 2003:
TripleDES
Rijndael
System.Security.Cryptography.
, System.Security.Cryptography.Algorithms
Could not load type {0}
Create
ezE1OGJhY2I3LTY3NDMtNGE3NS1hZDJlLTVlN2NjNjZiYjgwYX0sIEN1bHR1cmU9bmV1dHJhbCwgUHVibGljS2V5VG9rZW49M2U1NjM1MDY5M2Y3MzU1ZQ==,[z]{6ff546de-3f5f-44c1-988d-0184b8957d48},ezE1OGJhY2I3LTY3NDMtNGE3NS1hZDJlLTVlN2NjNjZiYjgwYX0=,[z]{6ff546de-3f5f-44c1-988d-0184b8957d48}
{0}{1}\
version
Unknown Header
{71461f04-2faa-4bb9-a0dd-28a79101b599}
VS_VERSION_INFO
VarFileInfo
Translation
StringFileInfo
000004b0
Comments
CompanyName
FileDescription
FileVersion
1.0.0.0
InternalName
Opesi.exe
LegalCopyright
LegalTrademarks
OriginalFilename
Opesi.exe
ProductName
ProductVersion
1.0.0.0
Assembly Version
1.0.0.0
No antivirus signatures available.
No IRMA results available.