Static | ZeroBOX

PE Compile Time

2023-12-02 20:38:19

PE Imphash

f34d5f2d4577ed6d9ceec516c1f5a744

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00002000 0x0030612c 0x00306200 7.91878728146
.rsrc 0x0030a000 0x0000054e 0x00000600 3.92848844535
.reloc 0x0030c000 0x0000000c 0x00000200 0.101910425663

Resources

Name Offset Size Language Sub-language File type
RT_VERSION 0x0030a05c 0x000002cc LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_MANIFEST 0x0030a364 0x000001ea LANG_NEUTRAL SUBLANG_NEUTRAL XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminators

Imports

Library mscoree.dll:
0x402000 _CorExeMain

!This program cannot be run in DOS mode.
`.rsrc
@.reloc
+>+?-$
p+,+.+0(x
+0+1+2
+N+O-%
+X+\-
+"+#t#
+#+$+%+&
+F+G+L{8
+H+I+J+O+P
+A+B+Gr
p+2z+6{\
+H+M+N{\
+>+?{]
-!+D+E+"
,(+A+B+C+H+I
+n+o{]
+K+L{]
+9+:-#
,+&&&&&
,*&+*-
+A+B+Gr
+A+B+Gr
+2+7+8+9+>
+-+.+/+4+5+:
,b&+c+h(x
+V+W-K
+N+O-)
+M+NoT
+N+O-)
+M+NoS
+C+D-;
+G+H-+
+C+D-;
+.+/+0+1+3+5
+&+'+(+)+++-
+#+$+%
+E+F+G
+M+N-5
,*&+*-
+.+/+0+5+:+?+@+A(
+A+B+Gr
p+Pz+T{
+$+%+&+++0+5+6+7
+/+0+5
+U+V+W+\+a}
+@+A+F+G-*
+<+A+B
-+:+;r
+"+#{N
+%+&+'(
++ tO
-$+%{T
+*+++,+1{V
+-+.+3
,$+&{h
+>+?+@+A+B+Ctj
+>+?+@+A+B+Ctj
+&+++,+-
+*+++,{u
+&+++,+-
+>+?+@+A+B+Ctj
+>+?+@+A+B+Ctj
+5+6+7
%,Pr*(
p+2z+6{
+H+M+N{
-!+D+E+"
,(+A+B+C+H+I
+'+(+-{
+A+F+G,
+c, +i8n
+F+0+E{
+X+Y+^+_+`~
+2+3-#
+@+A-1
+A+B-2
,M&+M-=
+2+3-#
+2+3-#
+@+A-1
+A+B-2
,M&+M-=
+2+3-#
+2+3-#
+@+A-1
+A+B-2
,M&+M-=
+2+3-#
+2+3-#
+@+A-1
+A+B-2
,M&+M-=
+2+3-#
+2+3-#
+@+A-1
+A+B-2
,M&+M-=
+2+3-#
+ +!+&
+ +!+"}
+"+#+$}
+$+%+&}
-T+Vuy
+\+]+^+_
+5+6+;
+8+9+:(
-$+V-"
+T+U+V+[+\
,4+M-!
+K+L+M+R+So
+ +!+&++
+*+/+4
+J+V+W
p+lz8p
+ +%+&{$
+"+#+$
+(+)+.
+A+B+C+H+M
,6+V+W+\+a+b
p+2z+6{L
+H+M+N{L
+>+?{M
-!+D+E+"
,(+A+B+C+H+I
+n+o{M
+++0+5+
+<+=+$
,m+m{d
+*++-
+:+;+<
+8+9-$
+++,+-+2
,0&+0-
+L+M-8
+H+I{a
+/+0+1
+"+#+$o
++$+%+*+++,s7
+>+?+@+A+B+Ct
+>+?+@+A+B+Ct
+>+?+@+A+B+Ct
+>+?+@+A+B+Ct
+>+?+@+A+B+Ct
+>+?+@+A+B+Ct
+H+I}j
+ +!+&
+2+3}l
p+Cz+G
+1+2-
+%+&++u
,)+'+1o
+$+%+&{r
,1&+1-
+%+&+'+,{r
+8+!+7
++ o!
p+Jz+N+O
+>+?+@+A+B+Ct
+>+?+@+A+B+Ct
+A+1+@u
+6+;+<
+!+&+++,
+G+L+Q
+S+T-
+>+?+@+Eo
,5&+5,
-!+0+1
+(+)+.
+(+)+.
+1+2+3
+(+)+.
+(+)+.
p+]z+a
+%+/+0
&+K+X+Y+a
+P+Q-:
+2+3+4
+)+*+++,+-
+#+$+%
,x&+:{
+/+4+5+6+7o
++$+%-
++ +!+&+'
++$+%-
++ +!+"+#
++$+%-
++ +!+"+#
+#+$+)+*
Q+!+"+#+$+%oV
++$+%-
++ +!+&+'
++$+%-
++ +!+"+#
++$+%-
++ +!+"+#
+#+$+)+*
Q+!+"+#+$+%o]
++$+%-
++ +!+&+'
++$+%-
++ +!+"+#
++$+%-
++ +!+"+#
+#+$+)+*
Q+!+"+#+$+%od
++$+%-
++ +!+&+'
++$+%-
++ +!+"+#
++$+%-
++ +!+"+#
+#+$+)+*
Q+!+"+#+$+%ok
++$+%-
++ +!+&+'
++$+%-
++ +!+"+#
++$+%-
++ +!+"+#
+#+$+)+*
Q+!+"+#+$+%or
+,+-+.
+;+<+=
,3+;+<+=t
+;+<+=
,3+;+<+=t
+"+#+(r-
p+(+)+.+3
+C+D+I+J-
+"+#+(+
+!+"+'+(
z++ +%+&++
+!+"+'+(
++ +!+"(
,&+E-&
+:+;-,
+!+"+'+
,E+X8]
,E+X8]
_b`}S
,!+T+X-
p+Hz+L
+,+-+.+/
_+U+V{
-!+@+A-
p+:z+>
p+-z+1
,"+4+5+:+;
+<+=+B
p+1+2+7+<+
+M+4+L{
-C+\rN1
+-+.+/
+=+>+?+@+A
++$+%+*
+[+_+c+g8l
+&+++,+-
+,+1+2(
-$&+$-
+ +!+&+
+D+E-5
p+6+7+<
+H+I-@
+J+V+W
hXhS+E
+/+<+=tO
,d+d8e
+"+#+(
+@+A+B
,;+;+<+A+F+G+L
%-)+d8e
.++]+a+e{L
+d+e+m8n
+)+*+++,&
+4+9+:
+;+H+ItO
-!+P+Q-
p+Jz+N
p+=z(3
-*&+*-
+!+&+'+,+
-$&+$+%
+++,{S
__d}S
+M+N8S
-+B+C
+A+B(:
+Q+R-.
-!+@+A-
p+:z+>
p+-z+1
+8+9+:
,Z+Y{W
+U+V{X
+M+N{W
%,;*8e
+2+3+8
Y_bY
+D+E+J{
,%&+%-
z++$+%+*+/
+Tz+[
+>+?+@{W
p+Xz+\
-*+W+X-
+"+#{g
Y_bX
Y_cX
Y_bY
Y_bX
+:+;+@
+P+Q+V+3+U{
+E+F-'
-!+P+Q-
p+Jz+N
p+=z(3
+-+.+/
_b`}
+@+"+?+@{
,&&+&+'+(
+&+'+,+
+P+U+V+[+`
-9+<+=+B+C,+B+G+H
+&+'+(T
,++ +%+&+'{
+Q+R-.
+D+E-5
p+6+7+<
+P+U+V+[+`
p+^z+b
+"+'+,
+'+(+)+*
+O+T+Urr
+R+S{X
p+a+b+g
+*++{S
+'_d}S
+7+<+=+B
,'+)+*+++,
,5+@+A+F+G+O
-m+r+v8w
+,+-+.{
+'+(+)&
Y_bX
Y_bXT
,%&+%-
++$+%+*
+D+E-5
p+6+7+<
+&+'+(U
p+a+b+g
,+&++-
p+!z+%+*+++0
,!+G+H-
p+8z(3
+Q+R-.
+#+$+%
p+Bz+F
p+<z(3
%-O%-(
+h_b_
p+Hz+L
_b`}S
+A+F+N
+?+@{-
+4+5+6
,E+X8]
bY {z}
,E+X8]
+=+>+?+D+E-/
+=+>+?&+Cu
+-+.+/
+7+8o6
+7+8+9+:
,?+D+E-
,"+?+@
+&+'+(S
p+a+b+g
++ +%
+#+$+%
,E+X8]
+#+$+%+*+/
+ j+$+
+5+:+?+D+I
+2+3+8
+2+7+<
+9+>+C
v4.0.30319
#Strings
)X)\)b)t)~)
* *0*6*<*N*e*{*
+1+>+B+G+M+S+Y+_+d+k+p+u+
,0,G,Q,W,\,d,v,},
-(-2-=-M-W-d-n-t-~-
. .*.0.C.M.S.c.p.
.1/B/W/]/
00G0T0Z0`0n0~0
1$1+13191D1f1~1
2-2<2M2S2Z2b2i2}2
3&3/383W3j3v3
42484>4E4M4S4^4z4
5#5)555>5E5L5S5a5g5s5
6,6B6^6o6
7&767A7J7P7V7[7
818?8G8^8h8u8z8
9$9B9J9Q9Z9m9
:$:<:G:M:]:d:j:x:
;&;,;:;?;I;X;e;m;{;
=)=/=K=X=n=
=/>C>L>T>^>m>
?!?4?M?v?}?
@!@.@4@<@D@W@k@s@
A"A0A>AGAYAzA
B)B9BABNBVBjB
C.CECYCmC}C
Wraub.exe
<Module>
mscorlib
Object
System
ValueType
IAsyncStateMachine
System.Runtime.CompilerServices
IEnumerator
System.Collections
ICollection
IEnumerable
ICloneable
LogException
log4net.Core
ApplicationException
Stream
System.IO
IDisposable
AliasRepositoryAttribute
log4net.Config
Attribute
AliasDomainAttribute
IComparable
RepositoryAttribute
DomainAttribute
XmlConfiguratorAttribute
DOMConfiguratorAttribute
IConfigurationSectionHandler
System.Configuration
PluginAttribute
SecurityContextProviderAttribute
ErrorCode
MulticastDelegate
EventArgs
LocationInfo
LoggingEvent
ISerializable
System.Runtime.Serialization
MethodItem
StackFrameItem
MarshalByRefObject
ArrayList
ConfigUpdateMode
ConversionNotSupportedException
log4net.Util.TypeConverters
TextWriter
EmptyCollection
log4net.Util
EmptyDictionary
IDictionary
IDictionaryEnumerator
IComparer
ReadOnlyPropertiesDictionary
PropertiesDictionary
StringWriter
MemoryStream
PoweredByAttribute
SmartAssembly.Attributes
Func`2
AsyncTaskMethodBuilder`1
AppDomain
TaskAwaiter`1
AsyncVoidMethodBuilder
ResourceManager
System.Resources
CultureInfo
System.Globalization
System.Data
IDbConnection
IDbCommand
CommandType
DbType
value__
StreamWriter
EventLogEntryType
System.Diagnostics
Encoding
System.Text
System.Threading
ConsoleColor
IPAddress
System.Net
IPEndPoint
UdpClient
System.Net.Sockets
ManualResetEvent
DateTime
MailPriority
System.Net.Mail
Socket
m_name
m_repositoryType
m_configFile
m_configFileExtension
m_configureAndWatch
declaringType
m_typeName
m_type
m_providerType
Hashtable
FileInfo
FileSystemWatcher
GenericFailure
WriteFailure
FlushFailure
CloseFailure
FileOpenFailure
MissingLayout
AddressParseFailure
Log4Net_Debug
Emergency
Critical
Severe
Notice
Verbose
Finest
m_levelValue
m_levelName
m_levelDisplayName
m_className
m_fileName
m_lineNumber
m_methodName
m_fullInfo
m_stackFrames
Exception
m_parameters
m_method
StringBuilder
DateTimeFormatInfo
System.Text.RegularExpressions
Overwrite
Random
s_instance
IsVolatile
System.Core
ReaderWriterLockSlim
IFormatProvider
WindowsIdentity
System.Security.Principal
WindowsImpersonationContext
Decimal
Dictionary`2
System.Collections.Generic
Assembly
System.Reflection
Version
.cctor
Task`1
System.Threading.Tasks
Finalize
IDbTransaction
get_Count
get_IsSynchronized
get_SyncRoot
IAsyncResult
AsyncCallback
SeekOrigin
message
innerException
SerializationInfo
StreamingContext
context
System.Xml
XmlElement
XmlNode
typeName
providerType
FileSystemEventArgs
RenamedEventArgs
Invoke
sender
BeginInvoke
callback
object
EndInvoke
result
levelName
displayName
callerStackBoundaryDeclaringType
className
methodName
fileName
lineNumber
repository
loggerName
exception
fixedData
parameters
MethodBase
methodBase
StackFrame
logger
System.Web
HttpContext
XmlWriter
get_Encoding
get_FormatProvider
get_NewLine
set_NewLine
Dispose
disposing
buffer
Func`1
source
DictionaryEntry
propertiesDictionary
GetObjectData
ICryptoTransform
System.Security.Cryptography
SetConsoleTextAttribute
Kernel32.dll
FormatMessage
GetConsoleScreenBufferInfo
ResolveEventArgs
GetStdHandle
GetConsoleOutputCP
FileShare
CloseHandle
MethodInfo
openlog
LogonUser
advapi32.dll
ArgumentOutOfRangeException
NetMessageBufferSend
netapi32.dll
OutputDebugString
MoveFileEx
kernel32
syslog
DuplicateToken
closelog
IEnumerable`1
LoggerRepositoryCreatedEvent
m_loggerRepositoryCreatedEvent
ShutdownEvent
ConfigurationReset
ConfigurationChanged
m_shutdownEvent
m_configurationResetEvent
m_configurationChangedEvent
LoggerCreatedEvent
m_loggerCreatedEvent
LogReceived
Culture
Qrugkado
Threshold
ErrorHandler
FilterHead
Layout
RequiresLayout
BufferSize
Evaluator
LossyEvaluator
OnlyFixPartialEventData
ConnectionString
AppSettingsKey
ConnectionStringName
ConnectionType
CommandText
UseTransactions
SecurityContext
ReconnectOnError
Connection
ParameterName
Precision
Target
ForeColor
BackColor
Attributes
CombinedColor
IsSynchronized
SyncRoot
IsFixedSize
IsReadOnly
Capacity
System.Collections.IList.Item
Current
System.Collections.IEnumerator.Current
Category
Appenders
ImmediateFlush
LogName
ApplicationName
MachineName
EventId
Writer
QuietWriter
AppendToFile
LockingModel
CanRead
CanSeek
CanWrite
Length
Position
CurrentAppender
Identity
Facility
Severity
HasForeColor
HasBackColor
Sender
Recipient
Server
RemoteAddress
RemotePort
LocalPort
Client
RemoteEndPoint
DateTimeStrategy
DatePattern
MaxSizeRollBackups
MaxFileSize
MaximumFileSize
CountDirection
RollingStyle
PreserveLogFileNameExtension
StaticLogFileName
Subject
SmtpHost
Authentication
Username
Password
Priority
EnableSsl
ReplyTo
SubjectEncoding
BodyEncoding
PickupDir
HasConnections
RepositoryType
ConfigFile
ConfigFileExtension
TypeName
ProviderType
ExceptionType
TriggerOnSubclass
Repository
Logger
LoggerRepository
DisplayName
AllLevels
ClassName
FileName
LineNumber
MethodName
FullInfo
StackFrames
RepositorySelector
StartTime
TimeStamp
LoggerName
LocationInformation
MessageObject
ExceptionObject
RenderedMessage
ThreadName
UserName
Domain
Properties
IsDebugEnabled
IsInfoEnabled
IsWarnEnabled
IsErrorEnabled
IsFatalEnabled
Parameters
DefaultProvider
Method
Interval
Repositories
AcceptOnMatch
LevelToMatch
LevelMin
LevelMax
LoggerToMatch
StringToMatch
RegexToMatch
FormattingInfo
Option
IgnoresException
ContentType
Header
Footer
ConversionPattern
InvalidCharReplacement
Prefix
Base64EncodeMessage
Base64EncodeProperties
DefaultRenderer
AllPlugins
SinkUri
Parent
Additivity
EffectiveLevel
Hierarchy
RendererMap
PluginMap
LevelMap
Configured
ConfigurationMessages
EmittedNoAppenderWarning
LoggerFactory
HasCaseInsensitiveEnvironment
ConverterTypeName
FormatProvider
NewLine
Closed
MaxSize
Instance
Values
LeftAlign
Source
Message
InternalDebugging
QuietMode
EmitInternalMessages
LogLog
Number
IsEnabled
EnabledDate
ErrorMessage
PatternConverters
InnerHashtable
System.Collections.IDictionary.IsReadOnly
System.Collections.IDictionary.Item
System.Collections.IDictionary.Values
System.Collections.IDictionary.Keys
System.Collections.IDictionary.IsFixedSize
System.Collections.ICollection.IsSynchronized
System.Collections.ICollection.SyncRoot
ApplicationBaseDirectory
ConfigurationFileLocation
EntryAssemblyLocation
CurrentThreadId
HostName
ApplicationFriendlyName
ProcessStartTime
NullText
NotAvailableText
InternalStack
FullMessage
Credentials
DomainName
Stacks
IsWebApplication
AvailableBits
AvailableBytes
IsNeedingInput
TotalOut
IsFinished
BitCount
IsFlushed
MoveNext
SetStateMachine
CopyTo
get_Item
set_Item
Contains
IndexOf
Insert
Remove
RemoveAt
GetEnumerator
get_IsFixedSize
get_IsReadOnly
get_Current
BeginRead
BeginWrite
EndRead
EndWrite
ReadByte
SetLength
WriteByte
get_CanRead
get_CanSeek
get_CanWrite
get_Length
get_Position
set_Position
CompareTo
Create
ToString
Equals
GetHashCode
InitializeLifetimeService
get_Keys
get_Values
get_Key
get_Value
get_Entry
Compare
CompilationRelaxationsAttribute
RuntimeCompatibilityAttribute
DebuggableAttribute
DebuggingModes
AssemblyTitleAttribute
AssemblyDescriptionAttribute
AssemblyConfigurationAttribute
AssemblyCompanyAttribute
AssemblyProductAttribute
AssemblyCopyrightAttribute
AssemblyTrademarkAttribute
GuidAttribute
System.Runtime.InteropServices
AssemblyFileVersionAttribute
TargetFrameworkAttribute
System.Runtime.Versioning
ComVisibleAttribute
CompilerGeneratedAttribute
GeneratedCodeAttribute
System.CodeDom.Compiler
DebuggerNonUserCodeAttribute
FlagsAttribute
DefaultMemberAttribute
AttributeUsageAttribute
AttributeTargets
ObsoleteAttribute
ExtensionAttribute
ThreadStaticAttribute
DecimalConstantAttribute
AsyncStateMachineAttribute
DebuggerHiddenAttribute
SecuritySafeCriticalAttribute
System.Security
SecurityCriticalAttribute
ParamArrayAttribute
EditorBrowsableAttribute
System.ComponentModel
EditorBrowsableState
{a6831014-23b1-464f-abaf-8f6896406c9d}
get_Task
get_FullName
String
op_Equality
AwaitUnsafeOnCompleted
GetResult
GetTypes
Enumerable
System.Linq
FirstOrDefault
Thread
GetDomain
GetAwaiter
get_IsCompleted
SetException
SetResult
GetMethod
get_Chars
GetTypeFromHandle
RuntimeTypeHandle
get_Assembly
GetObject
GetType
MemberInfo
get_Name
Concat
Monitor
ToArray
ArgumentNullException
ConnectionState
get_State
BeginTransaction
Commit
Rollback
set_Transaction
ExecuteNonQuery
CreateCommand
set_CommandText
get_InvariantCulture
Activator
CreateInstance
set_ConnectionString
IsNullOrEmpty
ConfigurationManager
get_ConnectionStrings
ConnectionStringSettingsCollection
ConnectionStringSettings
get_ConnectionString
IDataParameter
set_DbType
IDbDataParameter
set_Precision
set_Scale
set_Size
get_Parameters
IDataParameterCollection
CreateParameter
set_ParameterName
DBNull
set_Value
EndsWith
Console
get_Error
Append
GetUpperBound
ArgumentException
InvalidOperationException
NotSupportedException
get_Trace
TraceContext
get_IsEnabled
IntPtr
ToCharArray
OpenStandardOutput
GetEncoding
set_AutoFlush
SuppressFinalize
OpenStandardError
get_FriendlyName
EventLog
SourceExists
LogNameFromSourceName
op_Inequality
DeleteEventSource
SecurityException
Substring
WriteEntry
get_Default
Boolean
IsPathRooted
get_Message
Replace
ReleaseMutex
WaitHandle
WaitOne
Marshal
StringToHGlobalAnsi
FreeHGlobal
DllNotFoundException
set_BackgroundColor
set_ForegroundColor
ResetColor
get_Out
SystemDefaultCharSize
NumberFormatInfo
get_InvariantInfo
GetBytes
get_AddressFamily
AddressFamily
get_ASCII
set_Length
WaitCallback
ThreadPool
QueueUserWorkItem
MaxValue
op_GreaterThanOrEqual
Exists
GetLastWriteTimeUtc
GetLastWriteTime
GetFileNameWithoutExtension
GetExtension
StartsWith
FormatException
get_Now
get_UtcNow
get_UTF8
SmtpClient
set_Port
set_DeliveryMethod
SmtpDeliveryMethod
set_EnableSsl
NetworkCredential
set_Credentials
ICredentialsByHost
CredentialCache
get_DefaultNetworkCredentials
MailMessage
set_Body
set_BodyEncoding
MailAddress
set_From
get_To
MailAddressCollection
get_CC
get_Bcc
get_ReplyToList
Collection`1
System.Collections.ObjectModel
set_Subject
set_SubjectEncoding
set_Priority
set_Host
Combine
CreateText
WriteLine
SocketType
ProtocolType
EndPoint
Listen
BeginAccept
EndAccept
get_RemoteEndPoint
Shutdown
SocketShutdown
NetworkStream
GetCallingAssembly
get_IsFile
IsAssignableFrom
get_DirectoryName
set_Path
FileSystemInfo
set_Filter
set_NotifyFilter
NotifyFilters
FileSystemEventHandler
add_Changed
add_Created
add_Deleted
RenamedEventHandler
add_Renamed
set_EnableRaisingEvents
TimerCallback
WatcherChangeTypes
Change
get_ChangeType
Component
Interlocked
CompareExchange
Delegate
ContainsKey
IsSubclassOf
Intern
StackTrace
GetFrame
get_DeclaringType
get_FrameCount
GetFileName
GetFileLineNumber
GetString
GetValue
GetDateTime
get_CurrentThread
GetCurrent
IIdentity
get_CurrentPrincipal
IPrincipal
get_Identity
ObjectDisposedException
AddValue
Subtract
TimeSpan
get_TotalSeconds
get_Minute
get_Second
get_Hour
get_Millisecond
get_Ticks
get_Month
GetAbbreviatedMonthName
get_Year
get_Day
RegexOptions
get_Success
GetStringBuilder
HttpRuntime
get_Cache
System.Web.Caching
get_Items
get_Request
HttpRequest
get_Params
NameValueCollection
System.Collections.Specialized
HttpException
get_Session
HttpSessionState
System.Web.SessionState
get_Contents
ToLower
get_Source
get_StackTrace
get_TargetSite
get_HelpLink
LastIndexOf
AppendFormat
ToUniversalTime
XmlTextWriter
set_Formatting
Formatting
set_Namespaces
WriteWhitespace
XmlConvert
XmlDateTimeSerializationMode
WriteAttributeString
WriteStartElement
Convert
ToBase64String
WriteEndElement
op_Subtraction
get_TotalMilliseconds
Synchronized
RemotingServices
System.Runtime.Remoting
ObjRef
Disconnect
get_CurrentDomain
get_DynamicDirectory
Environment
get_OSVersion
OperatingSystem
get_Platform
PlatformID
SpecialFolder
GetFolderPath
GetEnvironmentVariable
EnvironmentVariableTarget
Process
GetCurrentProcess
get_Id
GetHostEntry
IPHostEntry
get_AddressList
TryParse
RuntimeHelpers
InitializeArray
RuntimeFieldHandle
GetByteCount
IComparer`1
Reverse
CallContext
System.Runtime.Remoting.Messaging
LogicalGetData
LogicalSetData
GetLastWin32Error
TrimEnd
Format
IsDigit
SerializationInfoEnumerator
SerializationEntry
DecodeName
get_IsSerializable
EncodeLocalName
get_BaseDirectory
get_SetupInformation
AppDomainSetup
get_ConfigurationFile
GetEntryAssembly
get_Location
get_ManagedThreadId
GetHostName
get_MachineName
SocketException
Impersonate
SymmetricAlgorithm
CreateDecryptor
CreateEncryptor
RijndaelManaged
ConstructorInfo
get_IsAbstract
get_IsPrivate
get_IsClass
GetConstructor
get_OwnerDocument
XmlDocument
GetElementsByTagName
XmlNodeList
GetAttribute
get_Rank
set_Capacity
get_Capacity
ExitWriteLock
get_NodeType
XmlNodeType
get_LocalName
get_ChildNodes
GetCustomAttributes
MinValue
NewGuid
GetSection
ConfigurationException
get_BareMessage
GetExecutingAssembly
EnterWriteLock
get_LocalPath
GetFullPath
EventSourceCreationData
set_MachineName
CreateEventSource
get_TickCount
Delete
get_Version
UriBuilder
get_Path
get_Uri
GetManifestResourceStream
GetTempPath
Directory
CreateDirectory
DirectoryInfo
OpenWrite
FileStream
LoadFile
FileLoadException
BadImageFormatException
XmlReaderSettings
set_DtdProcessing
DtdProcessing
XmlReader
get_ItemOf
AddSeconds
AddMinutes
AddMilliseconds
AddHours
AddDays
get_DayOfWeek
DayOfWeek
AddMonths
ExitReadLock
FileMode
FileAccess
GetDirectoryName
GetProperty
PropertyInfo
BindingFlags
get_PropertyType
GetParameters
ParameterInfo
get_ParameterType
GetAttributeNode
XmlAttribute
get_HasChildNodes
get_InnerText
GetEnvironmentVariables
SetValue
Binder
get_InnerException
TargetInvocationException
ToUpper
GetFiles
get_BaseType
get_IsStatic
GetMethods
get_IsDynamic
get_GlobalAssemblyCache
WriteString
WriteCData
get_AppSettings
ImportNode
AppendChild
Double
NumberStyles
ToInt32
EventWaitHandle
Increment
IOException
ToInt64
GetAssemblies
TypeLoadException
Buffer
BlockCopy
TransformFinalBlock
Decrement
get_Major
GetInterfaces
set_CommandType
Prepare
EventHandler
add_ProcessExit
add_DomainUnload
StringComparer
get_OrdinalIgnoreCase
IEqualityComparer
ToInt16
WebRequest
get_DefaultCredentials
ICredentials
GetResponse
WebResponse
GetResponseStream
ResolveEventHandler
add_AssemblyResolve
get_IsEnum
EnterReadLock
get_MainModule
ProcessModule
get_ModuleName
add_ResourceResolve
GetManifestResourceNames
IEnumerator`1
GetFrames
get_Module
Module
System.Security.Permissions.SecurityPermissionAttribute, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
UnmanagedCode
WrapNonExceptionThrows
$7bafa871-d161-466c-a76d-9dba77128e4c
1.0.0.0
.NETFramework,Version=v4.6
FrameworkDisplayName
.NET Framework 4.6(
#Powered by SmartAssembly 8.1.2.4975
3System.Resources.Tools.StronglyTypedResourceBuilder
16.0.0.0
AllowMultiple
<Use AliasRepositoryAttribute instead of AliasDomainAttribute
2Use RepositoryAttribute instead of DomainAttribute
.Use XmlConfigurator instead of DOMConfigurator
@Use XmlConfiguratorAttribute instead of DOMConfiguratorAttribute
Replaced by composite Properties
Use `RawZip`.
Use `RawZipAndAes`.
?Instead use the default constructor and set the Layout property
JInstead use the default constructor and set the Layout & Target properties
JInstead use the default constructor and set the Layout & Writer properties
VInstead use the default constructor and set the Layout, File & AppendToFile properties
HInstead use the default constructor and set the Layout & File properties
BUse XmlConfigurator.Configure instead of DOMConfigurator.Configure
RUse XmlConfigurator.ConfigureAndWatch instead of DOMConfigurator.ConfigureAndWatch
0Use GetRepository instead of GetLoggerRepository
,Use CreateRepository instead of CreateDomain
Use GetExceptionString instead
Use Fix property
-Use the BufferingAppenderSkeleton Fix methods
WiBm'ja
KMUY.]
nm~7cF
)-P54$
#fcbLm
hrcv8^
r+\]KC9E
j$Cb?
\<U%NN
wM[8'2k
t;0A-]`) h
q3vDl}h
p`6?}%3
GbimJJo
E"ZSB7{
3X+\v6f
H6Y5E]j
<M$2&|
HSM=l7
<`M0Q,}Xn
jG)b[Et3
x=p,8z
sF&&lw
KcmzD
ZA|)R[
}#!8*n
|zpIGek
ma^*R&%
FkFIc@ze
W=c/2k
AWwPIH
PQ54r:2
IL706/
#xu9..
ap M&l
}%!z{J
<xui']
%@_0:x
OLQ&w!8
Y<MR2H
MK53+3i
TT"to]+^P
Gz3Dv_
paCI]~M/K"
kq`SZ_
)JaR_L
j/]\1$
Ns!w95
_r4!-T
{Q*OIR
|zZ[dH
9&&E-8
+nV Bb
t;r1l4
G$dIY4
&|b8d0^'
U>9pNwC
^KqCg.D
tEb/CPY">EZ
4nZWu;=
|c@SDr-
CGF|0,
]t)5*4+
5"Ss5a
W^20`
Yjv{;A
>.qj=_
{[1JQ<
dAbrPyg
_F|28O
Clz#{,J
$Qj6P1
~<AWciccMUF
SRq$aJ
bF4,bw
3GAiAs
febx>qt9
Nbguyi
7}(ye78tBMhSo
G15uT8
(j8,CsK`_
;%x"UoUD
blq2A*mRZ
=J9r78
mU.>FK
6}/d-R
JSS&A.
PJTx(0
@Zgno[iQz{\
-xMp:0u
0RD{`Y
&c{?r^
1/tCd(}y
o84a'{;
>txT!A
,^Q8>"
igfotUZ
lTSeM+@i
`{~m9oo
x5'Sx[
NtdQ{Qy
[4ebUA
5Yaex7
;H=/"sfN6S
QBS*0AY
WNSqBz
Rp&`4Z
(?BaV@>\N8
4n)iWJ
3,P:``
tM8K_mpe
$D8=ee+
ldz[@8
-,-#pI
OUE8ua
RGLCSf
-tTb<4
:b7tN
_o]p/?
U?s5w*
BeyRX/
K(*!d5
T,r/m\
7z{jHS
$a[z-G
Pry^N3
Sk"e+'
*EbV>(R*
H]tH9DbD
v, (nu
jxh9[4`
%0&;:\
YfS*aD
Vq!k3V
VKYV@6
"P:UN@BMB
pRED:)
gCM,31
gEf9N:
xd\52V(
rt]rkt
f2,~pY
Cujuh=
Q:DEtN
[;|vdb
QKHU-Z
:2DT"y
O'a_vt
3 daSq
{bTA.^5yk
pbUNg!E_
pCc`5?H
_{>UvT
!TK:^w
u*j-6;
b=Gt;-
u)U=Rq
sqa{w3
iAd*Kl#
55F"s
NnZnd
%oWi?[
civ}eQkq
1Uscjb
sd;F7Z;-
<ve<-*
RYU!?Ir
K_:@U{
x/~5'F
6&E%y
C2^lDO
z` Uy]
(.,QeM
u(Rw"D
{ZL&{j
5pCI91
3Ip?ehx
O h'be!
@>y&$Lp
`3_.;Y
[QcJ)a
:K\.O<
WK"t>0
p?5=P(
AB;H"H}
~m7M#K
jXGHZ5
pGaU.<
S~Is[p^s
)+&EKT
W+UBS+
7^J>Gb y
t EXLZ
Vp3tvy
E}nl{u
2+"Oi8
09t+&0
C$lsZ
:;5-U`&1<
m$0>+
)JaR"wa
*LIM=wI
2nRTZ*
QcJI}4
QoA?OK
Kp cr\
C5ket\9
JSuJS
#g0oYu\C
@l#VfT
CDZQ&K
IE6SXF
Xeqdh*e
EtM:JYq*z
Pm$hj:
i~lf}k`QL
w-e8XX
9zl;)'IP
(|5$yw
XPO\{j
Z_yg`inhu
'?%AUO
@4/V[~
!srD@z
NzjK^x
89zbB/!
y?KQy;
w(g2v4G["
S[iYm0`
!dm40-
iWT$e{Q
'euo'W
"3n1J8a'x
(G"=^]
Ji0{ii
#+i*ed
-oBThg
FBRBj:
]iNnzb
z}h0.{!3f
(=hwBv5
`J"_Me
weCD3[
&*/)zL
C9TK#`
P6z[y(
xTu*/6
m U%0B
]"b^Xr
VO0.;L
EgRN0q
yGEj*N
7Np =Z
d1\4_~
E0ThoF
%c7A[|
#W*XW\6
_hz8Zv
TPE5.X3
*Xh1}:h
ADsd9
#*wd'3
$IH^D
&&83yq3W
%6j,AS
*p&TCN
7R41jU
o\& ~Kr
YZ;T.i
Ii/Dw^
5J)|'d
av3AUGE
Wlu+6v`r
tT]i3\
d\gWEC
Bh*&6[
DM1#~r
)*phv#
6^q#'Z5z8m
.HJ?m3
~kla)]
H5iN),
,H;'$O$oe,
HZtMA
aO:7wT
T;_ZUxH
/5^zih
w~UCe-
#]rT?Y
:S\9'W
x;Bn<N
E\1QsA
BVz 87
d~aaZD
#\,MxG
dqe)`a
^Im$ h
C0wI%%
WH"O;7
kUc1c2DQ
$z":%:
G&{oG
x7]ySp
z}i@A947
fMD2;>
:|T4%|7?a
f&lx\)
K=i91:
7|Du*jY
~I2Bhm
}*&>pF
2&7s1Nt^
ykB&I1x_S\
SkvKf5
jc<GeoRy
B&:U;
/GlSlm5!
s7EQhE
,jq`}k
mqn*!D
-yf(r4
>Se!'j
oB6_vs
$D*R5nL&
;z*I_f
h?1Y'C
u_Q&~S?
F4O9X9o*
8R&h7T
8b%;B
#P=!.`v
Hx2Q66
lLmYlI
1[KD/n
zom}Lq
^K'sz"x
n:q2 A
8tu${b
k{X<gJ"w
\bodW(X
\>y0rUX'f
~C)MQub
atK}C91
8+eJboJ
:%hB:8
g7\+`95M
aY0Lg<
oA0Riu
Sl(<I
VqwGvQ5n
2zS\V(B"
-B]*&$z
wPPFE=
z]"R7N
T&Wv*5-3
B|[)p3mx@5
R}fn,5
R @~ww
:Q37p6
k1p8[>
T')FPb
bJMF~~
uc%Q64
C5kKU"<
o7WzlUE
75(A$$
tY' mW
"f0# _0
17ed:e
TMh!Un
&{v4@
YMHj(7
5J@sN\Mr
n|A||^
.~EJf2
M)^w9!,J,
a%VVBV
~~h>w9
%J[}Dj
>G38(-
y#^I'\
w:zjsK
9FC}J}4
T!pW}.
_S-HQs
5cmG}E
f[c_QtD5i
!st@eAm
3Z&BVQ?
dR34c
(Tt1u_B'ID
w~*yZp
(TK6Cyk
5:f~M]Q
:;qy+p
2SCt<x
x3$WnQ
-HnSz3
|Jtdf6
H/Ce:%
9.vy94
Mq$zRF
1\8qyoU
Ph_:N.z<@
$3H4RG
IFou_(
E!vO08
\z`a?\$
6>'#!_ffDQ
4X7Df
:(%Q]d
\4Qot}`w
pK5N]Y9
SA$-1B
Q||b`Z
L:naz+
mInp#`)
,}+hE)3\
JAQTey
IYa sb
nZ^G{lv
`34/z"v`e
M#h3zi
Q7mQT?
[gQ3SS?
)uU@&a
quab/g\"
`Z&:*nA
RjELA
U/RRPJ
|N_btr-
J\nARo
j(0GrllEN
>Z)c;>S/
=_x_ (
ZH.'{Fg
"KeH@_
:X)i^d
,dyBW<U
LR8;'x
1LJ<}.85
1z!8:hFh?4
F`+?G8
IN4wq;
~X,KRO
aM<bYS
NGHGkl
#!lM'|
<s,-,6
2\/Z\Xh
66^A;L=A6Q
F?2{U3(Y1
i\(j+"4w
u(gz?}+
qXLxzx
-~/[|2~
[sM>_j2
@LRAPtG
.k4S8Q;
wq2eFL>s
Khgg%C6
<\v~ym
zQ4+.;=
(nW/.{A}$d
15&k(m
Wg2K=A
~2wzbN^
K4vRRR
KRoJpt
,zyZQ=
d[l)Z{
!N{#_O
WNBJ6so
[_xnw<
\@L=@
cFaS!s1S.r
Iy5320
gy?n]
#j/<P&
7~%ivv7
g%4qZ[
iq(~!|Fb
.2[k2)
Bzb8aX
na V+)4w
]k)*L0
N.QUjF
:p?5.KY
niL~Qy(
kp(sDd
{\Uw0D
,Lu;Ol
BvKKjN
qPs^$|
+e%Lx\
yZx:]t
Y!=9+u
k:Iq '
.}@scY
7-/CB;
77E[l\
LcI%k1
#7CXW_:1_T
3 :: I9
Chg^tG
2L\0m`/
Im%a$:
GH8dUoI
Sl9([XuV-az$
1yAaiin6
:kWLEh
#_7R6|p|b
H8^JL/
kW1nGoo
iS$-nb
ps-6wa
j2o,m;cd
:3xEHW9
`<\I;S
1BIeyK
%gcXrd
q0QeD"
]b)0<&
E!W$0?
,iFiY#
GE)/QP}`
C/Ld-x
~aT?/9H#
?;ADO\
]f[q:P
-F/n\U"}
+qQ!@F
JbbV>>z
r*T'o#2%
NYLvn0P#
z1rENQ
|B_E^
a]#1fo]
xh\-*
#*s~<Y
&1>7(7
?Sy}6`i
*GE__[C
']p&<U!
^TdJ^S
vSQsj
0YhT|"
=A0l1
2:IuWi
x$D21}ED
+1Do|T<T+
>($Ir}
vOaO>_
;4MvnE
+r&w0K
ezU)vd
T<Yx5K
T=o-eo
6@.m8m
\TNV=d
B_o=dmj
24!YO$|I
K!dOW^
Q7S<h)
]'#Zu>
F=V"
mWlari
>e_5y&
kP#tZV'@
0(hj'@%
,7N*H]{
*#M_~y
0%}952
7NtlV.
B4L.~W
B)u9JV
_"Xa6Q
25Tw%V5
Vv$eqc
6`|-b!<l
deqh@,
a{_M\@
6_ivuO3
}vO&-
-{~?Te
}{[_Wz
p7jk67
}D_1u{?
Gwmt{clP
/]"3E)
A\EPBr
3`DyEn+
=N_3wK
GQ4*Lt
-968?
@RFY'I
],y#Vs
<uuq^_u
.i\F+m+
}V~f)<
t(Op2I
D._pe#~q
/bD2*d
O@qVew
bKF1y|p
3|4e1>
}h2't=3(
xvMIW=
7z}~ej
A^rfPc
{4X4{<
%;IQw`W
hJCv?[C
1(~iF;B[/
X+r[A
/ _0nPq
Antivirus Signature
Bkav W32.AIDetectMalware.CS
Lionic Trojan.Win32.Mallox.j!c
Elastic malicious (high confidence)
MicroWorld-eScan Trojan.GenericKD.70660360
CMC Clean
CAT-QuickHeal TrojanRansom.MSIL
Skyhigh BehavesLike.Win32.Generic.wc
ALYac Trojan.GenericKD.70660360
Cylance unsafe
VIPRE Trojan.GenericKD.70660360
Sangfor Clean
K7AntiVirus Trojan ( 005aeda01 )
BitDefender Trojan.GenericKD.70660360
K7GW Trojan ( 005aeda01 )
Cybereason malicious.12c80b
Arcabit Trojan.Generic.D4363108
BitDefenderTheta Gen:NN.ZemsilF.36608.bp0@aa6JrZg
VirIT Trojan.Win32.Genus.UKA
Symantec ML.Attribute.HighConfidence
tehtris Clean
ESET-NOD32 a variant of MSIL/GenKryptik.GQRN
Cynet Malicious (score: 100)
APEX Malicious
Paloalto Clean
ClamAV Clean
Kaspersky HEUR:Trojan-Ransom.MSIL.Mallox.gen
Alibaba Ransom:MSIL/Mallox.4b9a9493
NANO-Antivirus Clean
ViRobot Clean
Rising Malware.Obfus/MSIL@AI.100 (RDM.MSIL2:Ywhi00saL6B4Kea9HvrKZw)
Sophos Mal/Generic-S
Baidu Clean
F-Secure Trojan.TR/AD.Nekark.tuhrx
DrWeb Trojan.Packed2.45999
Zillya Clean
TrendMicro Clean
Trapmine suspicious.low.ml.score
FireEye Trojan.GenericKD.70660360
Emsisoft Trojan.GenericKD.70660360 (B)
SentinelOne Static AI - Malicious PE
Jiangmin Clean
Webroot W32.Trojan.GenKD
Varist W32/MSIL_Kryptik.KEB.gen!Eldorado
Avira TR/AD.Nekark.tuhrx
MAX malware (ai score=88)
Antiy-AVL Trojan/MSIL.GenKryptik
Kingsoft MSIL.Trojan-Ransom.Mallox.gen
Gridinsoft Ransom.Win32.Sabsik.sa
Xcitium Clean
Microsoft Ransom:MSIL/Mallox!MSR
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Trojan-Ransom.MSIL.Mallox.gen
GData Trojan.GenericKD.70660360
Google Detected
AhnLab-V3 Trojan/Win.Generic.C5558337
Acronis Clean
McAfee Clean
TACHYON Clean
DeepInstinct MALICIOUS
VBA32 TScope.Trojan.MSIL
Malwarebytes Trojan.RNDCrypt.MSIL.Generic
Panda Trj/Chgt.AD
Zoner Clean
TrendMicro-HouseCall TROJ_GEN.R002H0DL223
Tencent Malware.Win32.Gencirc.13f8f890
Yandex Clean
Ikarus Trojan.MSIL.Crypt
MaxSecure Trojan.Malware.300983.susgen
Fortinet MSIL/GenKryptik.GQRN!tr
AVG Win32:RansomX-gen [Ransom]
Avast Win32:RansomX-gen [Ransom]
CrowdStrike win/malicious_confidence_100% (W)
No IRMA results available.